last executing test programs: 28.540307436s ago: executing program 2 (id=321): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000080)=0x25aa, 0x4) recvfrom(r0, 0x0, 0x0, 0x2101, 0x0, 0x0) 28.377890418s ago: executing program 2 (id=325): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r0, 0x800448d3, &(0x7f0000000000)={@none, 0x9, 0xd, 0xfff4, 0xb6, 0x5, "241407d72a4848fd77896dc23728eb65d740162e548a35ab14099f48c0690e8e3531722295a0813f4eef885cfd3dbe73f9e9901445adf4534a6204d701b09b6b1b1f25c79d2094b46dfb2fca5fe85d91dbeb6510f06e9ebfe3873d6a53067ad2dddaede9dff83c52f344f2e2ff05b2a95c77f80ac45d36ca95ff83d57ecd8dd9"}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000002000000e27f000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r1}, &(0x7f0000000380), &(0x7f0000000ac0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0xf3a, 0x0) write(r5, &(0x7f0000001100)="94", 0x1) write$binfmt_misc(r3, &(0x7f0000000140), 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f0000000380)=@filename='./file0\x00', 0x0, &(0x7f00000003c0)='./file0\x00') r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080f00000a"], 0x48) r7 = syz_open_procfs(0x0, &(0x7f0000019100)='net/fib_trie\x00') getsockopt$WPAN_SECURITY(r7, 0x0, 0x1, &(0x7f00000002c0), &(0x7f0000000300)=0x4) read$char_usb(r7, &(0x7f0000000740)=""/253, 0xfd) r8 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f00000001c0)={@mcast1, 0x1, 0x2, 0x3, 0xe, 0xd}, &(0x7f0000000480)=0x20) mq_open(&(0x7f0000000000)='\x10', 0x80, 0x69, &(0x7f0000000080)={0x828, 0x8, 0x0, 0x2}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x10000, 0x1}, 0x8002, 0x0, 0x1003, 0x2, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x4) mkdir(&(0x7f0000000000)='./control\x00', 0x0) mount$bind(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='./control\x00', 0x0, 0x2000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0xa54a9d76e5e2e84, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) dup(0xffffffffffffffff) 28.019890574s ago: executing program 2 (id=332): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x8, &(0x7f00000005c0)={[{@errors_remount}, {}]}, 0x4, 0x4f3, &(0x7f00000012c0)="$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") 27.761266067s ago: executing program 2 (id=336): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000024c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000001}}], 0x1, 0xe0) 27.6120273s ago: executing program 2 (id=342): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x3}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xa, 0xc, &(0x7f0000000900)=ANY=[@ANYRESDEC=r1, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095ffff571e4d5beeb91a8e059e780005acd0803eda37f14d39aa443394f750dce9530356afdea9dc60b7e18db3a2ffcf94029b9b"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r2 = open(&(0x7f0000000000)='./bus\x00', 0x1050c1, 0x170) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r0, {0x7f}}, './bus\x00'}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000680)={[{@nolazytime}, {@lazytime}, {@journal_path={'journal_path', 0x3d, './bus'}}, {@bsdgroups}, {@lazytime}, {@noload}]}, 0x3, 0x45c, &(0x7f0000002400)="$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") 27.431558182s ago: executing program 2 (id=344): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4880) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1f, 0x3, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000580)=ANY=[@ANYRES16=r1], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) r4 = syz_open_dev$usbfs(&(0x7f0000000080), 0x72, 0x101301) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000000)) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2, 0x0, 0x1ffffffffffffffd}, 0x18) r5 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r5, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000ac0)="ee", 0x1}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb71658bda99b49720fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61"], 0x10b8}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xa) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = syz_io_uring_setup(0x1104, &(0x7f0000000300)={0x0, 0x0, 0x80, 0x0, 0x21e}, &(0x7f00000003c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r9 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSW(r9, 0x5403, &(0x7f0000000040)={0x1, 0x2, 0x5, 0x8002, 0xfe, "90730aef00fffffffffffffbff95647fffffeb"}) dup(r9) syz_io_uring_submit(r7, r8, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x200, 0x0, 0x1}) io_uring_enter(r6, 0x47fa, 0x0, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000b00)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)=""/6, 0x49, 0x6, 0x1, 0x3}, 0x28) syz_io_uring_submit(r7, r8, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, r10, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0x20042, 0x1}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x10c) 12.377768851s ago: executing program 32 (id=344): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4880) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1f, 0x3, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000580)=ANY=[@ANYRES16=r1], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) r4 = syz_open_dev$usbfs(&(0x7f0000000080), 0x72, 0x101301) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000000)) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2, 0x0, 0x1ffffffffffffffd}, 0x18) r5 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r5, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000ac0)="ee", 0x1}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb71658bda99b49720fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61"], 0x10b8}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xa) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = syz_io_uring_setup(0x1104, &(0x7f0000000300)={0x0, 0x0, 0x80, 0x0, 0x21e}, &(0x7f00000003c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r9 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSW(r9, 0x5403, &(0x7f0000000040)={0x1, 0x2, 0x5, 0x8002, 0xfe, "90730aef00fffffffffffffbff95647fffffeb"}) dup(r9) syz_io_uring_submit(r7, r8, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x200, 0x0, 0x1}) io_uring_enter(r6, 0x47fa, 0x0, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000b00)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)=""/6, 0x49, 0x6, 0x1, 0x3}, 0x28) syz_io_uring_submit(r7, r8, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, r10, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0x20042, 0x1}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x10c) 1.771326953s ago: executing program 5 (id=901): syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x372, &(0x7f0000000500)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) link(&(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', 0x0) write$binfmt_script(r0, &(0x7f00000004c0), 0x208e24b) ioctl$TUNGETVNETLE(r0, 0x800454dd, &(0x7f00000000c0)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) ftruncate(r2, 0xc17a) fadvise64(r2, 0x0, 0x0, 0x4) 1.502082787s ago: executing program 3 (id=903): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00'}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000002c0000002c0000000b00000007000000010000060400000007000000000000000000000001000004ffff00000100000001000000000000000061"], 0x0, 0x4f}, 0x28) 1.501651817s ago: executing program 3 (id=904): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008020000"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000001850000001b000000b70000000000070095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'macvlan1\x00', 0x0}) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="400000001000030500000000fddbdf0000000000", @ANYRES32=0x0, @ANYBLOB="02880100373004002000128008000100687372001400028008000100", @ANYRES32=r3, @ANYBLOB="08000200", @ANYRES32=r5], 0x40}}, 0x4008054) 1.25588437s ago: executing program 3 (id=908): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x8100) socket$netlink(0x10, 0x3, 0x4) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000240)={0x0, 0x2, 0x8}) 1.112426873s ago: executing program 5 (id=910): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) bind$inet(0xffffffffffffffff, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200087fd, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0a00000004000000ff0f00000700000000000000", @ANYRES32, @ANYBLOB="00000000000052d13f9c807a3900"/27, @ANYRES32=0x0, @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00'/21], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000580)=ANY=[@ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x18) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)=@generic={&(0x7f0000000240)='./file0\x00', 0x0, 0x8}, 0x18) prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000131000/0x4000)=nil) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) link(0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r3, 0x0, 0x2ca}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x94eb2000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r4 = gettid() perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x53, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x32, 0xfffffbef, 0x3, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) process_vm_writev(r4, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) 1.011383824s ago: executing program 3 (id=914): connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e27, 0xffffffff, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000680)="e59d45ad2294312bfabeb626ca34b90ca0f763ccdc701caf91831b02f4f2092471001853ac9d3a2e0958eadc0450feef19361872ff4ce41ac8857b425ad4a58b6e920d3427fb1b8493ab5e6c8646be2a4ef4feaa550413832ac76e5a747a82b68705282f165bbc2eef4a3283661df0512f34857a53e4f0067f158c1ac1804eac1df001ab881bd1d3c9f74bbe547864626f28", 0x92}], 0x1}}], 0x1, 0x4005c40) 952.966665ms ago: executing program 3 (id=915): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000640)='ext4\x00', &(0x7f0000000200)='./file2\x00', 0x200000, &(0x7f0000000000)={[{@dioread_lock}, {@noquota}, {@errors_remount}, {@noblock_validity}]}, 0xfc, 0x564, &(0x7f00000008c0)="$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") open(&(0x7f0000000300)='./file1\x00', 0x14927e, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="f6", 0xffffff07, 0x8000c61) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x5, &(0x7f0000000000)=0x9, 0x8, 0x0) mremap(&(0x7f00003dc000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000042c000/0x3000)=nil) socket$igmp6(0xa, 0x3, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000003380)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000006cfa000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2, 0x0, 0xfffffffffffffffe}, 0x18) setrlimit(0x9, &(0x7f0000000000)) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffd}]}) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 900.587476ms ago: executing program 1 (id=918): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 813.856887ms ago: executing program 1 (id=922): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e27, 0xffffffff, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000680)="e59d45ad2294312bfabeb626ca34b90ca0f763ccdc701caf91831b02f4f2092471001853ac9d3a2e0958eadc0450feef19361872ff4ce41ac8857b425ad4a58b6e920d3427fb1b8493ab5e6c8646be2a4ef4feaa550413832ac76e5a747a82b68705282f165bbc2eef4a3283661df0512f34857a53e4f0067f158c1ac1804eac1df001ab881bd1d3c9f74bbe5478", 0x8e}], 0x1}}], 0x1, 0x4005c40) 776.214128ms ago: executing program 4 (id=923): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x113a0, 0x0, 0x3, 0x5, 0x0, 0x800001, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)=[{0x0}], 0x1, 0x0, 0x0, 0x1f000008}, 0x4800) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002080)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x7}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0x2}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, {0xfffffffc}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {0x7}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {0x0, 0x800000}, {0x0, 0x0, 0x0, 0x0, 0xb4d0}, {}, {}, {0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x9c33}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2, 0xfffffffd}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0xfffffffd}, {}, {}, {}, {0x8}, {}, {}, {}, {0x0, 0x2}, {0x400}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x10}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x16e}, {}, {}, {}, {0x0, 0x5}], [{0x2}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) sendmmsg(r2, &(0x7f00000008c0)=[{{&(0x7f0000000240)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x80, &(0x7f00000002c0)=[{&(0x7f00000007c0)="3a2c4bfeba25db2ec98b5e6f9e333243e0df291f4c7bd42d98846445d993e122e52bcb413a3b22ecf51ecc5c6b050d7027b2947ffc264a6359c130c1316648b69805c4163f22c4fe8dbb96e3a43337c6cc5a4505af457bb52f5368b8e02e9f269a9230a4cd68967fd0997be28cfe032a649f284b0fd8f63f72c01b71ee93ba21e432c921aca21a0ecb4465b25047cb60456b32d0aad3c2fb2b7f919689e906b6e0c4879c2c4cb5d4beeb80e113f80ee1780d4282fb21b0db62b33dea1b9d2c224c7d27", 0xc3}], 0x1, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], 0x1460}}, {{&(0x7f00000005c0)=@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x80, &(0x7f0000000340)}}], 0x2, 0x5) fgetxattr(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="73797374656d2ece003abcc852afbf1e8c7463f28ffe56b90679543123db82"], &(0x7f00000003c0)=""/139, 0x8b) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/nat_icmp_send\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./bus\x00', 0x0, &(0x7f0000002480)=ANY=[], 0x1, 0x11f4, &(0x7f0000001280)="$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") sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4006000}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r3, 0x10c, 0x6, &(0x7f0000000080)=0x2, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r4 = mq_open(&(0x7f000084dff0)='\xa1sxt\x1a\x00\x00\x00\x00\x00\x00\x00\x01\x88\xbdd', 0x6e93ebbbcc0884f2, 0x9a, &(0x7f0000000300)={0x800000, 0x1, 0x84}) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) 740.803919ms ago: executing program 1 (id=924): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r0}, 0x10) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f00000002c0)={{}, {0x20}}, 0xfe44, 0x0) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) pipe2(&(0x7f0000000080), 0x4800) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000"], 0x7c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8000000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r7}, 0x10) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x8, &(0x7f00000005c0)={[{@errors_remount}, {}]}, 0x4, 0x4f3, &(0x7f00000012c0)="$eJzs3c9vVEUcAPDvbru0lEJBOahRQUTRELY/gIZwES4aQ0iMxJMHqO3SNN1lm26JtHIoR+8kknjSP8GbBxNOHrx505sXPJigEg018bDmvV3apb+1P9Z2P5/k9b2ZWfY702Vm9g3sTgAt62hEzEbEnoi4FhE99fxM/YgLtSN53ONHt4fnHt0ezkS1euW3TFqe5EXDn0nsqz9nZ0S8/07ER5mlcSvTM+NDxWJhsp7unSpN9FamZ06NZes5A4P9g33nTp8d2LS2Hil99fDtsUsffPP1Sw++n33zk6Ra3Z/uT8sa27GZak3PRXdDXntEXNqKYE3SXv/7w86T9LZnIuJY2v97oi19NQGA3axa7YlqT2MaANjtkvv/7shk8/W1gO7IZvP52hre4ejKFsuVqZM95Zs3RiJdwzoYuez1sWKhr75WeDBymSTdn14vpAeeSt8tnI6IQxFxt2NvWp4fLhdHmvnGBwBa2L5F8/+fHbX5HwDY5TqbXQEAYNuZ/wGg9Zj/AaD1/Iv536cDAWCXcP8PAK3H/A8ArWfN+f/O9tQDANgW712+nBzVudr3Xz/5pu5TI4XKeL50czg/XJ6cyI+Wy6PFQn64Wl3r+Yrl8kT/mflkZXrmaql888bU1bHS0GjhaiG3lY0BANbl0JH7PyaT/uz5vekRDXs5mKthd8s2uwJA07Q1uwJA0/g8D7SuddzjWwaAXW6ZLXqfsuJ/Ebpn81fYqU48b/0fWtVG1v+tHcDO9t/W/9/a9HoA288cDq2rWs3Y8x8AWow1fmBD//4PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALao7PTLZfLoX+GzyM5vPR+yPiIORy1wfKxb6IuJARPzQketI0v3NrjQAsEHZXzL1/b9O9BzvXly6J/NXR3qOiI8/v/LZraGpqcn+JP/3+fype/X8gT3NaAAA0OjC0qzaPF0/N9zIP350e/jJsZ1VfHixtrloEneuftRK2qM9PXdGLiK6/sjU0zXJ+5W2TYg/eycinlto/62GCN3pGkht59PF8ZPY+7cg/sLvf3H87FPxs2lZcs6lv4tnN6Eu0GruX6yNk/W+l3Sxev/LxtH0vHz/70xHqI1Lxr9kLJlbMv5l58e/tiXxM2mfPzqfXr0mD898++6SzGpPrexOxAvty8XPzMfPLD/+5o6vs40/vfjysZXKql9EnFi2/U92pC6lw2zvVGmitzI9c2qsNDRaGC3cGBgY7B/sO3f67EBvukZd+/ndcjF+PX/ywErxk/Z3rRC/c/X2x2vrbP+Xf1/78JVV4r/x6vKv/+FV4idz4uvrjD/UdWHF7buT+CMrtH+N1z9OrjP+g59nRtb5UABgG1SmZ8aHisXC5BoXyXvNtR7jYmdexGzEZj1huigREf+HdrnYyEWzRyZgqy10+mbXBAAAAAAAAAAAAAAAWEllema8Y4s/rdXsNgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALB7/RMAAP//TwTJNg==") 636.43069ms ago: executing program 0 (id=925): r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='map_files\x00') r1 = bpf$MAP_CREATE(0x0, 0x0, 0x50) ioctl$USBDEVFS_ALLOC_STREAMS(r0, 0x8008551c, &(0x7f0000000240)={0x5f63, 0x1a, [{0xb}, {0x6, 0x1}, {0x1, 0x1}, {0xb, 0x1}, {0x6, 0x1}, {0xb, 0x1}, {0xa}, {0x3}, {0xd}, {0xc, 0x1}, {0x4}, {0x3, 0x1}, {0x5, 0x1}, {0xc}, {0x5}, {0xc}, {0x3}, {0x9}, {0x1, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x8, 0x1}, {0xf, 0x1}, {0x9}, {0xf}, {0xa, 0x1}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2, 0x0, 0x20000}, 0x18) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000480)={r0, 0x20, &(0x7f0000000400)={&(0x7f00000002c0)=""/107, 0x6b, 0x0, &(0x7f0000000ac0)=""/4096, 0x1000}}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r3}, 0x10) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/wakeup_count', 0x141000, 0x20) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000340)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x8}}, {@jqfmt_vfsold}, {@journal_path={'journal_path', 0x3d, './file0/../file0'}}, {@noquota}, {@nodioread_nolock}, {@journal_checksum}, {@data_err_abort}], [{@seclabel}]}, 0x3, 0x473, &(0x7f0000000640)="$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") mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) clock_gettime(0x1, &(0x7f0000000000)) socket$nl_route(0x10, 0x3, 0x0) clock_settime(0x1ed5d7403, &(0x7f0000000180)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={0x0}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) rt_sigaction(0x19, 0x0, 0x0, 0x8, &(0x7f0000000440)) 566.571721ms ago: executing program 5 (id=926): r0 = open(0x0, 0x14927e, 0x20) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) copy_file_range(r0, 0x0, r0, &(0x7f00000000c0)=0xc615, 0x39ea, 0x0) 538.647291ms ago: executing program 4 (id=927): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r0}, 0x10) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f00000002c0)={{}, {0x20}}, 0xfe44, 0x0) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) pipe2(&(0x7f0000000080), 0x4800) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8000000}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r6}, 0x10) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x8, &(0x7f00000005c0)={[{@errors_remount}, {}]}, 0x4, 0x4f3, &(0x7f00000012c0)="$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") 523.885992ms ago: executing program 0 (id=928): r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000680)="e59d45ad2294312bfabeb626ca34b90ca0f763ccdc701caf91831b02f4f2092471001853ac9d3a2e0958eadc0450feef19361872ff4ce41ac8857b425ad4a58b6e920d3427fb1b8493ab5e6c8646be2a4ef4feaa550413832ac76e5a747a82b68705282f165bbc2eef4a3283661df0512f34857a53e4f0067f158c1ac1804eac1df001ab881bd1d3c9f74bbe547864626f28", 0x92}], 0x1}}], 0x1, 0x4005c40) 513.226152ms ago: executing program 3 (id=929): bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0xc17a) r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x3804, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x69, &(0x7f0000000400)=[{&(0x7f0000000240)="b9", 0x26892}], 0xbb}}], 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x80840, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x25, &(0x7f0000000000)={0x1}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r3, 0x26, &(0x7f0000000380)) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r4, 0x7, &(0x7f0000000380)={0x1, 0x0, 0x103ff}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000800)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r5, 0x7, &(0x7f0000000140)={0x1, 0x0, 0x78, 0x10}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000700)) write$binfmt_script(r6, &(0x7f0000000980)={'#! ', './file1', [{0x20, '\xb3!*\\[@'}, {0x20, '\x03\xa4+%['}, {0x20, '/dev/net/tun\x00'}, {0x20, 'kfree\x00'}, {0x20, '-]-'}, {0x20, '/dev/net/tun\x00'}, {0x20, '%('}, {}, {}], 0xa, "bbf72514154edab6621a2e5df40c124089e01ea5c0650512dbf9d31e71a30170c71e736bbd2f005d98fe4d5807f7de4c36f49a47fb96a944c3adc0e69f5aeebdf14f843f66b49c489d90497fb8a042ca2cba352e880f86ca1116e4dcbfba4e95147c557279b3cab355024c7ce41119196ed09959464e59dcc06bf242678e5e986f0558725b52a3b9662ba32b51df170f9efe3e32a2"}, 0xd9) syz_open_dev$evdev(&(0x7f0000000780), 0x1, 0xd8293af6540ce728) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) 460.220653ms ago: executing program 5 (id=930): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x8100) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000240)={0x0, 0x2, 0x8}) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r1}, &(0x7f0000000000), &(0x7f00000005c0)=r2}, 0x20) 459.793073ms ago: executing program 0 (id=931): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x8100) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000240)={0x0, 0x2, 0x8}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) 319.730405ms ago: executing program 1 (id=932): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000400)}}], 0x2, 0x0) 301.451335ms ago: executing program 4 (id=933): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xe, &(0x7f0000000b00)=ANY=[@ANYBLOB="b702000000000042bfa30000000000001602000000feffff7a0af0ff1100000079a4f0ff00000000b706000000000081ad64020000000000260404000100ff0f1704000001130a00b7040000050000006a0af2fe00000000850000005b000000b700000000000000950000000000000063e165cd844a954b26c933db8e175e097efb3f55bb2007ee51050512b5b42128aa090a79507df79f2d8129cf487130d5f24bf901115e17392ac66ad029d1c08a2c6146101e04aeacea799a22a2fa798b5adc436b27d53337e5003e4be7f8000000000000dbc2777df150b70639e25b7496cb8dcdd77b85b94109a314fd0840028f2ed1a4535550614e09d6378198a60978670838337af2abd55a87ac0394b2f82ffab7d153d62058d0a413b2173619ccf55520f22c9cb6712f3024b7041b1df65b3e1b9b31f154e89d485b1f7fc09a30f115646d14ce53d13d0cca00a1efc54fa737c28b994a8512c816fdcceaede3faedc51d29a47ffeffffff00f4c7a53ac271d6d6f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804dc5fa778100000000000000488e40b030166565a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a7c2211fe4fd21a18986252a70f8f92eb6f0e8c7db35036865445971ff4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f8d791fa99dac06b57479321a0574fb304bc2a168aa43328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20faf791ec85821d0c48fb657c29b302b0d2277b44af326f36f3e2c25a61ec45c3af97a8f17da954a9b34f79908755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d4100d8bda74d66f47cc180f82c5f573c6d294d1665016ac59de637b30824d822133a7ac7fe13cab6692422a46e9ffe2d4a2d32f7528751313694bf5700b20ef0c248ddd3da3239acad4aff2066bb5d4045c9585638c2153a6eee01738b0c10671f4f559b7dcb98a6273b8c5f1e24d9f679e4fbe948dfb4cc4a389c69608241730459f0123fd383d5612ff0230dc6eb55e9d46de56ef907b059b905c0289afb9a79ae5498f6589880ed6eea7b9c670012be05e7de0940313c5826236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d949a3564cb778f54334354ec2697a03aff14a9aa4bd908a99494a65044dd539f5096412b926b2e095b84000243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d304d455c3630eeaebde922320178b00cc6ed7966130b547dbf8b497af0a77fbcf2cd1d0000000000000001c80000000000000000000000091bee53595a779d243ac8cea769b10424d28804c026ab7f4a0281921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef40662d7836d252c566f5ee8f8a836804ed3a1079b0282a12043408cd600087dc0dd22b634350761b9867682e11d94fff91af19f2f8df175d60a2892e456f5f4042bd13da2022f23daec61854f640f703db027665006e74f20675eb781925441578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfac92e6de9200000000a1f6c5572a9ee7f7c8a5098600000000009ec7eee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e93311ab5009d9c209644bb1cb603cd60a9e241435fe82d5a96b09c68c73de2f04f15d0053875732f2258aea65559eb00e76e9d092a2a60ca770663da451080cc36000906d5a9fad98c308e89bd5ffb6151d79c1cee1cdfba05e3633becd937d7a15762e5f5a3a0bc33fdbe28a0800000000000000c92fe7f791e8f6029309508e5bf024ed8f8a005f2bbf96c89739f5d81e750d50515a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd43758624600e78f4458542b14f29611f95d4a2aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d3fcd116bce9c764c714c9402c21d181aae59efb28d4f91652f6820b6ec96280000320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000000000000000000091e12aacf2ed9ee91cc82777c6a0da37e0219260f2944eb77cb7a20ab7ebcc2fbe2a986be27eacc454147267b05cba055cda2a57efefcb9a8761bc052bbb7f4167245753d31e7c1120a886bdf372ce255ca3c2aa8b0ebe42924db5d6d81e9b1514172e2f3fb1b46a1f7561b65c265b742d792d4f572d860718b5d9e94631657021612f6c974d10769e47575509bfe2d6ffa6cae835b0f492d32d12116c95e0b3b31713c20beae2dd340d7b67c3bed62b682a12363608d736289610fa01000000010000000d6f033f8438b57cedf532ee34e42b4041a682f54dc7b57200762d45724151014b733d497190f9ab3d5bab1f0635025ba9baa3a09b886e08c6bbd6e158f8e1c4ead2dc5bb4e2976a8383d8e415149455dc78439ae1b026ef03dfaa1f197a3b8ee7fcd1e39f5600a5c978584f97df1aed893821775c9b762f5acd2bf9a0eb18215ff90fe336bd75d3e8f704662d4084fa582afdd73d23546ae0abb118bdde3f4d08661e7937b8631e7439bf23618d3f7ab482dde3249f42e660496098f30e38e152ead80d7291b54da4a3b08b8fd7ddaa830ec5933a0a674334b8d4269e425b9fa0255f3ba988cfd9ae6ed8154b633a0f108f3245d3a0212586e6c5762db4076d9ee42836d3000000000033baf08867c22a29335ab8976219d500c855a5642fd6539bac21f429e40740cd4c5ba3cb49da499c1a2c6bfb6b0e2e8d168bcb79f8054de46aeaf1d44c1f0958f24a93b88ac8d146afb94977527721e16dcfe4e014ee5a503cfe6ea2ed7fad0e83056941507016489f38643c128f5f37b453d811b185551bbd08336abed54a0e2419b1a0e53214dd296d152cf82f42472bf1fd52a22efdd111977d3cf6f20e942df77792fda2c99bee3175defd519b4fae37fc1fe86ed99335ef2ed821c64af516ac03585ec43071f5cc6030cf855b7e5d725aa8e9b7bf6d7b27a4e4e2fb2ed2501e5ce4435f8cbc0ad746c1b60d60f23d892939c96f750cd71824142404c26992c49c916b82bbc81c8d93c537c3c38cd58d0b4a64ddf9c55a7506c8cce89ff51c8ad5e63d1e2d1fd945635c130b4ad0dbcead5ec8cb3be6a0a82cef44e31148d94bd7edc9e94a4e295f1743754a5ee9f444a10838"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000080)=ANY=[@ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCL_GETKMSGREDIRECT(r1, 0x541c, &(0x7f0000000000)) 271.264835ms ago: executing program 4 (id=934): r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000180)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x80, 0xfffffffc, 0xdc67}}) socket$pppoe(0x18, 0x1, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0) mkdir(0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioprio_set$pid(0x3, 0x0, 0x0) mkdirat(r1, 0x0, 0x40) syz_open_procfs(0xffffffffffffffff, 0x0) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x300, 0x0, &(0x7f00000025c0)) ioctl$TIOCSETD(r2, 0x5423, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x67d2, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x36}, 0x94) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f0000000480), 0x2e9, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000340)) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r4, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r4, 0x4004743a, 0x0) 251.320766ms ago: executing program 1 (id=935): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x113a0, 0x0, 0x3, 0x5, 0x0, 0x800001, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)=[{0x0}], 0x1, 0x0, 0x0, 0x1f000008}, 0x4800) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002080)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x7}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0x2}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, {0xfffffffc}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {0x7}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {0x0, 0x800000}, {0x0, 0x0, 0x0, 0x0, 0xb4d0}, {}, {}, {0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x9c33}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2, 0xfffffffd}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0xfffffffd}, {}, {}, {}, {0x8}, {}, {}, {}, {0x0, 0x2}, {0x400}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x10}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x16e}, {}, {}, {}, {0x0, 0x5}], [{0x2}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000008c0)=[{{&(0x7f0000000240)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x80, &(0x7f00000002c0)=[{&(0x7f00000007c0)="3a2c4bfeba25db2ec98b5e6f9e333243e0df291f4c7bd42d98846445d993e122e52bcb413a3b22ecf51ecc5c6b050d7027b2947ffc264a6359c130c1316648b69805c4163f22c4fe8dbb96e3a43337c6cc5a4505af457bb52f5368b8e02e9f269a9230a4cd68967fd0997be28cfe032a649f284b0fd8f63f72c01b71ee93ba21e432c921aca21a0ecb4465b25047cb60456b32d0aad3c2fb2b7f919689e906b6e0c4879c2c4cb5d4beeb80e113f80ee1780d4282fb21b0db62b33dea1b9d2c224c7d27", 0xc3}], 0x1, &(0x7f0000003900)=ANY=[@ANYBLOB="1010000000000000120100000800000094045b22c5b37a4c11b7f2b93d6b9a5bf1e24b0c551f399bf72a88cd4a58df3eecd46c12c83d30ddae77eeb4cf3c5d83f67d294341e89cffb67798ef731a9ec42039a0a284c82f2af7b030dd2665212b4860e6f5b222a1eac3d71e49a6b98dea3f2dfc118166509d0f8df34c05558469d0d39318fe82b9ecd81ef1c17627e9af073908ed44490c8200c9dabf0273f02482f5b5157b2b69dd84ed1f91c7e163e46f64ba8333498c17cbeb749792d34d20166b7af9e435931761a171ef35ee0fc1c663000a74f162de022b4bd70dd37cf2c9826fc286a5ee7cf7b5511d3fbfd959fbf221e8aa4a5fce51444e87a03ae85ca36ffe775e1c6a4834a6d8e731ca8fcf498d59605d7c59433e3a2f606edd8a532716ef20d90737f07c8b5d61c010fd9438244152f28b4ba552d60e78a271601d1113140166efa29da8a78f7a021b858dc5fcc769d6f76c1e0b0086cd07ff35a47255c9d4760ff317e7a6a3f1a05de6b749ee6c3b6bbf8eb46504b5c63287285146248e3483957ff3a8ab18657ea65b74be8de259dad3b6c8c80e22b4fca272e86a2c1436b6cfa77c2133fc1e9fe29c1070fdcae3ae008faeb718cf4277f3ada51eaa87a7785115e983d1f8e5be4468cd1d3db6dd52a6665548c8ea28883ab22600e928ff982f874582366312a4681882a20efe24f1da0ea65d255578b8d1f07e266488a0b943c5415a504778eb3f63346b7c653de91e37db37c760f9cc6394b07ceba7672ba1e20c93850590a6da0f5afefad8eb4b5898ce7966911342859899c185d91610dd0c2cb94ae5eff4b0b3e31932c3f0631a2c8db945d4b1c68042aaf60d623ac2dc2dc3b7be9df5d673b0caa8ce788e88f15b05cfda5fe15d3bb9d89995fac25ba45b86deeed1ff1f12c61426b3375671b3722e6a975fe7a2db2a52f2e8d1234176d26c4061fe95cf9b6693210ace98ffe6fa9f2d52112283c00ee57056f37c064fea5386d66176fb05deedd31abc090ec8ef2577761dfe3a43ae38a0b155b5600c923f73398a614f71eab95f09d76d48a5b2870f5df56585958c9b77582479505ab893947cb61d5a1bb55fe3e1e7bcea465b912ccee8d94c396079a0e5754a737c35997da8b796e7db245a147cf61b598e80e437df5d136322cdd9dd6dbd5f9139d59083ca84d1d31cde938be26d83606fac5e7108d2852adc0c575217aa220ccd636133912c057b56508c384f6dc0b71c1f6cfee71f0cd261c7d7e098ee5195c0e1d8912c3c1ff25acff1fcdbe7ed4da74aae5dec6a74707f30d8283bb49d4614511ad6f91162022869ef4fb951a71aad94de6cc62e0594043fd9e8ebdf45a8f2fde245d044b280697857d3dd925e3b940350573c9c94fe24562411614e3f9e8dbb98d08fdc9ca496b86cc5820a2f8816d55a4e96ed8604c25954e5743f8e3cf021d3bb0b7b954822a5fd99423cd279df096fac63bf2e1007c1d40a6b885f0e0030de6325b4a61eb4067eb756c3c8f1dad27d6268d13fd1990125443d7c8f4be0d3021b9af1017b7ca46fe8db92af39a0e032b5d9423ca2c39a05f7148326c725b106aeb980bec58d1077d3b855944044a89a28948af9690f07cc78dfb799629928b3f10477c6e6e2bbc6d2b9843aaa2e8e5b3f22407ea58af49176d6f1f7cb59d304f942dc5e242462490beb2c18b872a20a60aaaad8e345d35ffcb1f4138448714c9c0abc057944cee7a76079673703f7ccbda4b2a1ed394111edce9fee03971ae13f293bbba6c5387cd848b8c0f310bb262f30767f77cee8ab5496a64ca65b8315bb4c2cbd226b557b5fb30d3e74378f4e25cd2efe56560716538cbe4221643390450ddabb33eff494efc7749627fd25a7000123eeeacdeca72f0c0b23d5831a46b7ecc920b1bb52602e1baac534fd68e3601100779608171cc70c55e30af13374af6cf69c5857237ee6ded16d6d22b7ddd59692cdf72507b05d4903c91176dd2643e02a71d48e6a1c496efb1027e27e5f934f17dbe9b4bc99348f1815747fbe1225c3f3139b831e8074e45a516777b7440cccc8073a307cb561b50e39e51bd4d69b8db0262f33d10baf6a72ab2fa3b46f33bc168e66411caf8096b20e2719dc89f9f9c4a5fcbd2a3eecd4bbed954e4578cea99dac3bd69d60b88de6fed5442b911f409279a7e0be3765a63ec0fa3b39efdcea52c0c161443e663ff9b531721ad41f6a80ae68ceaedaf3e6eafad624b48bcce2a2d8df891406f63d061324e395f636311dc784a239b2293a3c943aaade68dca473cee20b1038d46ea9e7b556d123efdba648993b05b15f03decfc21360e0d86f9a07a4192c2ee96f3ddf6d9d011a03893db181fea4be072012f4a4e3f4408e1420fc0bd5b3af59c5fd46f1fbe599fa855093578e23a475c63e52b554b274eb680096d735891595f80a2177197e66fd8d8a8d944ba8506eb6494e7d8eb6fc6a26861a3636ff4aea6703d5455757a673aa82fd712207ee6804d05c3db6741bab39786930f04fa114decc874768523fbaab08c1d19e20a84ce4a59f71774e8c3cca1975be7a40bbe959bac2096b87d6fa98efcc059048ec9fdfa630b9293fd778d20b6de7aae09ba993d5ee92f105f3b4089d489d1806ec4eaefef923df09c426adb094966c4e8e49d086e3efbdbf9ab508629539388670ece1ac1e1f44a4f7f11ddafd9ea051593d1d46ff33f6a4a6eeb22acef699ae1bf55e0565dd9344569b2677277e6ea5d3cb1243e777be29ab2d5834d1b75e36e2cb048a324459de46abfbfce79b6fabebb0caa94843e9c962e1e10558eefab46ff4666678442ff653fd905a82b39cfc059971805ac55bb4f9dd95975ba8a05348b8e6782ab8c3b7ebf58b866bb12dbb3b7e811944dcfcc89adf9f4d13ed4e70c4856f2f34ffffad5f0b83b243f24e53815e5a1d8abb454dea1aedf048a89085f0255b05e966bddbbb921027550d2240c98251eece4a95b238d13c77072b12e9cd6f65806a3cd769d49d52b5d91f3b79be7935add43e4f712905b927577555a3b3358790801e29ad9b8407c923f67e76edafe597dd913918c46171cc43cc4d7b454028181c23e8817088908b0a570a9fa458fc712949728a7b88b9eefccab820cf0d08a77e9156270550a02617dcc8960b5174eb3f88167dcd2251449523a1200aef8f9a6c5ca4c9a1d17be8aa721a299ede3145d4154549fadd3a42db81575a0326ab65243eb99b420efd91a3315c50ac0eb62d69269d5db270461fddfad5d23102bdd3cf998e71b302df362449766405bc9090a74d7d65aaec9610478e9b9ec238a8a99b187142b810a107267fa8da705828314b41bd644f66140d98771510a8cd53ae2c84beb15d7249a6a8f87ab4feab3cecc7d38e16247fa51387773fe4c6a31ed41e4b8ddcaef31e2fe5d2b6108d0def4a99eca5ffa73374d4cfb43f6b15cd56165006d01091966ddfb4eeace824d81516aa0e29db367926d829225ef7ee5257f695095337b029384e85681847699f93eb973b51f0dc0eb2365f4f633882edfd930a842d0e6eebfc4fe33675fb5e28358ece63004bb754fc49df4320351efce4972267599ce5205462c14a262a26166a93dde26765c89a42ce4801673f1bb098e872c304e308ae6d2dba4da5c083fbab0617b962f152950837241ffde5586c2308d5d644d1623b4718c4e38ba13833b8036ff7cc6b1f4da8fcafc7d2f19357d053e90ef9a859dbec80bfc633508f2ae7978a294c5890fdbf5d93f6683e396ddb70ebc680ed22a731e806d5cbc14321c1a88f649978f69be367d87658a735e912d9b057c86091b75acae1f1f409ed67bc2560e5b808e1ce0e750ac7d77a588a5880538278fd78882efff8659c1d7023002b34e47b7d3d6a5090c3da0ccc7cf1301409c0e9ed75e4d8d62ddec551e86884db24439df16fe0b7401b30b2ba3c864052b2b6e471d348df06a1eae3c48e1a6e0ee195f2d5249f0e502d796af6382ebde825340a6db569c15aab11977290909cd8718840d2065af203515c6eb0af12961863bc8303c2cd7eb2aa3e489bc48ab1f71d1a203eae9d7d229a1b3e8ec7e499dd4129920f791cde4b2d0b177fff49843a7a87a0563a72ff3a91624c526bac19a0fac97b9499645266a792043f02541ead4cfdb730199a005b6f33e4a60a5b6efbcafe83bd692c2bdab8b87876a2748df9ebcb5cc101a6518897a20ae68050c9ff5e1a5e1a6ebb18c6a6c5f341f7019dd64015e9a91f97167b2b75b66d857bd52694762053e2999d7d1d9cb677384962c08ff81e77c1c029705b9936637aea99d96b3bc901afbf9021e9b8a78a6d49db1f3f7ed4e2f4542e87dcbf6c2ec818d793519deb60dc911aeaf921092800e1d117e510031734cda2fe5ded93b946c0d496cb1a54237624e67c67a021a90f4a1a5f8d23a65d9e96afbd02a9d539c658ccd8e4a0647b63073b57be175df5ca736798a822d45f77b7065e02ff3e6dc14664a4317777bfa88e5baabbeb274d954a32309832f6fd7e6b745a86cdb51720541c60fe521570920aec9563a75804a4f0b3da1ed2d359013a8f6621d17c5c0143acc1b2ef3a538e6cc69f319452d1b971e420cfb2046c141715f3b22785ba754791c7bed89f12f67727143b8808add6c3b542020462e7d4d0bb45ae05a28b42f98c83823888831139b7c454c371acbb211f83ec44ec21c90f51487bb39a987e763742dc64dfba9afd35fd9652c93306427061ecd2f16dd9da0aa219f9196ec51d52f5181145e893b20a0d4feeb16ec6123dc6c6e023150d639acb543eceff6f613282e36947eafa8f068f7543c405ec8094531936531a60d5da8337c4b947d98f028106b7036a514cdba56d532cb8d7b77e9362199cabca1643c56b169738e507dac2cc71a37f3d5071ce4c891e1285d0042ef617b5d1f496cdba131552964c40b43e8c15f0ee7a40e82ce4446b989a900b905b8f3063e69de5e37d7dc25ee839702da40a2c8bd8c130b5ee7ca21953da9addc57508b9acf6d297481f2f130845bf7f4085c2cb1400aa73fd277c45ffd0f3784edef9892963c24f675eaaf2fd84217e9d4a5f5adce2d6f80e6ff5919a1c4d7757c50eff51b17861724cbf4eaedb6804d80c26d3077657283ed07051b827dee1ee378906a9bc2266a785512b5860eca90290e1d3d59d848383fbc83b484b807101b84b3c3e2917e34ee1728c1dc414e5f1049730ac7ac0d4a440edb929aaa7e89209ce3837f44b3992010d7279ac4d49aeb73d13d0b092ab668cbfa682006768e673ce4216ec0e747721c3e56a52a8e8cf5b9319d82fed8bd1710b1d0ab4d85d60617567a5819eeb2c22b12cdeff343c08d24fd9f14248a1cea4ca57a91b6909609b07abf74c1bb783a393c36e703a9930dae69bc3998c363fa023d303bc1fdd5214dfc406a367cc457a837e88ac91a567893288f6f002f3e4ba306363e1a5f130a1b77472f1d6881f932a6bd92be30c50f7d7057679c6b4ea7bfa9512641e6b093af4faa3c2bb052ee15bb24a45ab601976ba9b406081772918310d4d78e3d8eeeeb1abe226e600371e9447b2808d5cd6e173e6397426ad35181578cf8d2500b7e272700ab71ddacdbdafb3d67ba0c0f9d7f262ea41019a28436fd485b673132ad2cc4a766b7be6e9348c2f07b5824bd12d5dc8d11d7c84b83c27b066fea5c11f2375f3eeb2b225508bb8e4ad0c35de1464cbc6b481260c3e59db89e35c939756a47e19ef3508b4b766dcb05f84de357a041a45fc691b6840a2b51994729f31b0e5abda3191539f4c91377014b8faacf342025904eed04c10b0121e0e933cecb800000000000000840000000000000018199cd40f49fb5d2d8f35a3a7c405c2ad7e457309a88159b084fb49100ed3198e02dad2e35ff0cb06fb4e36b92dab265b833dbdfa3f1300e3fe03b0e8d6d40a2f926ef681234e498e8eb91ff4702cb02f6300f7e521e4e0c497b2d599faf467c3543892fe0cddb579e661df5caa3e0f67dab55d8ef783de9b1e0da7a820796fc734715f75a40ca5a1e8fbeeffe2b270d57a882784041c699cf1e900ca662ac944747ae49600005000000000000000ff0000000400000044e28f54f4c8e8e39c02ba00bbb90d4ccc543631a6414e94b74fca81e16e40770d5fb0c7ecc4a9484631320bdd938a04871f6b3d5b6e8d44ff830a1f1c250000f00000000000000084000000fb060000a3d9fd6fc2dcf11e43d044bf8471de5c6e7da2243bfec13506dd6fe5030825dc515a2a6799861cee800d398368f4741e88804faef7ed92bffab03573cf900cab631a7b34b129af0714e32583719bf6d301f794a306386e10375f2722dac2bc8064413f889a98895b470c48dcf9e9573e5d66bf15f48a792772a39c3900d8593ca2670e3d06f15aac86157705b11f1ffc9f84d1c15287bd3f17494d6455b888c8cefc261e77fa235508e4fd657702a310189636e27ba299d2997a9c7838265dd98c89551515f11b5d2f14ee9fda458744bc9be3fd7c20510aa945000000000000e00000000000000011010000feffffffa615143312bef20610184eae8f96cfb1b4ed1e11ff7a920337ee36bd456db0c93d5b4e5acb2abfd92f5e2901af18564a4bc04db1db26e93e9d61136422340801ec5e45133c5774ff48048ef8b99bcc1db21a8f8db2be1f2e4326057127cce1e668014abaa6a378752995fb7caf2b2c47d03843440118be708bc2d1a781683bbb1fd5431f815b85506af85f272847013619ddfd64f08ea18d7ee5a14e6c3ad9a4f7644b0bd194673f09d4a7725c95b9646174986a81548a05951d22ac885ba5cc81192b36996c9baee44641e7c2000000500000000000000017010000000100009a56e6b2912b4a3ff6d16597867a2eb10dbfb9e83393247cccd0babe0b727d766494ec65bb5d6c4355c26a1ee9ddb9bdc729a9464b7d13a2219d3b00000000006000000000000000000000000900000079f5c099f6286702a8c531e525a69dbe14abacf4abccb04222b40e5bdcea5ee4bbbc65229e81f2f3f329baa18e68e3f5d363ac15609c2532d8e5a0ba317b0f6c8b439f543c1e57eafc3f021eb14d0000c80000000000000007010000080000000d221d0438d4791eed0838ee7b1389c09c2f4ee7304f49a5a4397d54db208f665e8d764649b9528fe08852075d0a9e73f696019c6d219e1b32c736b65ffb414564f84cb537c2ee9046e21469897b8f05c626fb691f1a402b61dd3a91518b5ebc475e6a64aa82264b07eb5702a52f95ca00cc9d79f8bda6c785b5c367697501d1875387edb026c8263a857f2953e531c3bd919d720319bd260de42a836d0cb8833f9541859525cf64c27736f729829fb9bb8e8d4731e7ee1ad7161a57ae8a944d7552e8cd10a0827ce781b27eb1d2e6e30cb156c98bd3ca288120c8556796bd37577eb23ec864f77f6c7c1a0f723b0969109027"], 0x1460}}, {{&(0x7f00000005c0)=@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x80, &(0x7f0000000340)}}], 0x2, 0x5) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/nat_icmp_send\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./bus\x00', 0x0, &(0x7f0000002480)=ANY=[], 0x1, 0x11f4, &(0x7f0000001280)="$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") socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r1, 0x10c, 0x6, &(0x7f0000000080)=0x2, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r2 = mq_open(&(0x7f000084dff0)='\xa1sxt\x1a\x00\x00\x00\x00\x00\x00\x00\x01\x88\xbdd', 0x6e93ebbbcc0884f2, 0x9a, &(0x7f0000000300)={0x800000, 0x1, 0x84}) mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0) 241.908706ms ago: executing program 5 (id=936): syz_open_procfs(0x0, &(0x7f00000004c0)='map_files\x00') bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00"/13], 0x50) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, 0x0, 0x48) bind$tipc(0xffffffffffffffff, 0x0, 0x0) r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 214.673506ms ago: executing program 5 (id=937): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) bind$inet(0xffffffffffffffff, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200087fd, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0a00000004000000ff0f00000700000000000000", @ANYRES32, @ANYBLOB="00000000000052d13f9c807a3900"/27, @ANYRES32=0x0, @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00'/21], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000580)=ANY=[@ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x18) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)=@generic={&(0x7f0000000240)='./file0\x00', 0x0, 0x8}, 0x18) prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000131000/0x4000)=nil) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) link(0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r3, 0x0, 0x2ca}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x94eb2000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r4 = gettid() perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x53, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x32, 0xfffffbef, 0x3, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) process_vm_writev(r4, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) 162.362657ms ago: executing program 4 (id=938): r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='map_files\x00') r1 = bpf$MAP_CREATE(0x0, 0x0, 0x50) ioctl$USBDEVFS_ALLOC_STREAMS(r0, 0x8008551c, &(0x7f0000000240)={0x5f63, 0x1a, [{0xb}, {0x6, 0x1}, {0x1, 0x1}, {0xb, 0x1}, {0x6, 0x1}, {0xb, 0x1}, {0xa}, {0x3}, {0xd}, {0xc, 0x1}, {0x4}, {0x3, 0x1}, {0x5, 0x1}, {0xc}, {0x5}, {0xc}, {0x3}, {0x9}, {0x1, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x8, 0x1}, {0xf, 0x1}, {0x9}, {0xf}, {0xa, 0x1}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2, 0x0, 0x20000}, 0x18) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000480)={r0, 0x20, &(0x7f0000000400)={&(0x7f00000002c0)=""/107, 0x6b, 0x0, &(0x7f0000000ac0)=""/4096, 0x1000}}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r3}, 0x10) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/wakeup_count', 0x141000, 0x20) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000340)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x8}}, {@jqfmt_vfsold}, {@journal_path={'journal_path', 0x3d, './file0/../file0'}}, {@noquota}, {@nodioread_nolock}, {@journal_checksum}, {@data_err_abort}], [{@seclabel}]}, 0x3, 0x473, &(0x7f0000000640)="$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") mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) clock_gettime(0x1, &(0x7f0000000000)) socket$nl_route(0x10, 0x3, 0x0) clock_settime(0x1ed5d7403, &(0x7f0000000180)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={0x0}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) rt_sigaction(0x19, 0x0, 0x0, 0x8, &(0x7f0000000440)) 161.812427ms ago: executing program 0 (id=939): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x113a0, 0x0, 0x3, 0x5, 0x0, 0x800001, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)=[{0x0}], 0x1, 0x0, 0x0, 0x1f000008}, 0x4800) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002080)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x7}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0x2}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, {0xfffffffc}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {0x7}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {0x0, 0x800000}, {0x0, 0x0, 0x0, 0x0, 0xb4d0}, {}, {}, {0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x9c33}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2, 0xfffffffd}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0xfffffffd}, {}, {}, {}, {0x8}, {}, {}, {}, {0x0, 0x2}, {0x400}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x10}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x16e}, {}, {}, {}, {0x0, 0x5}], [{0x2}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) sendmmsg(r2, &(0x7f00000008c0)=[{{&(0x7f0000000240)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x80, &(0x7f00000002c0)=[{&(0x7f00000007c0)="3a2c4bfeba25db2ec98b5e6f9e333243e0df291f4c7bd42d98846445d993e122e52bcb413a3b22ecf51ecc5c6b050d7027b2947ffc264a6359c130c1316648b69805c4163f22c4fe8dbb96e3a43337c6cc5a4505af457bb52f5368b8e02e9f269a9230a4cd68967fd0997be28cfe032a649f284b0fd8f63f72c01b71ee93ba21e432c921aca21a0ecb4465b25047cb60456b32d0aad3c2fb2b7f919689e906b6e0c4879c2c4cb5d4beeb80e113f80ee1780d4282fb21b0db62b33dea1b9d2c224c7d27", 0xc3}], 0x1, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], 0x1460}}, {{&(0x7f00000005c0)=@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x80, &(0x7f0000000340)}}], 0x2, 0x5) fgetxattr(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="73797374656d2ece003abcc852afbf1e8c7463f28ffe56b90679543123db82"], &(0x7f00000003c0)=""/139, 0x8b) 128.249648ms ago: executing program 0 (id=940): r0 = open(0x0, 0x14927e, 0x20) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) copy_file_range(r0, 0x0, r0, &(0x7f00000000c0)=0xc615, 0x39ea, 0x0) 83.708658ms ago: executing program 4 (id=941): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000040000000000000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x26, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x2000) sync() setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x56) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0x10) write$selinux_attr(r3, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x50, 0xffffffffffffffff, 0x6770c000) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff0000", @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000240)='kfree\x00', r5, 0x0, 0x4ab}, 0x18) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000200)=@sack_info={0x0, 0xa, 0x1}, 0xc) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00') acct(&(0x7f00000001c0)='./file0\x00') setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00020201"], 0x18) 47.323539ms ago: executing program 1 (id=942): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 0s ago: executing program 0 (id=943): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r0}, 0x10) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f00000002c0)={{}, {0x20}}, 0xfe44, 0x0) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) pipe2(&(0x7f0000000080), 0x4800) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000"], 0x7c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8000000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r7}, 0x10) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x8, &(0x7f00000005c0)={[{@errors_remount}, {}]}, 0x4, 0x4f3, &(0x7f00000012c0)="$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") kernel console output (not intermixed with test programs): comm="syz.4.126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3b478e929 code=0x7ffc0000 [ 45.048269][ T3889] netlink: 68 bytes leftover after parsing attributes in process `syz.4.129'. [ 45.049572][ T29] audit: type=1326 audit(1751165709.891:985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3884 comm="syz.4.126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3b478e929 code=0x7ffc0000 [ 45.054071][ T3889] team0: No ports can be present during mode change [ 45.059439][ T29] audit: type=1326 audit(1751165709.891:986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3884 comm="syz.4.126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd3b478e929 code=0x7ffc0000 [ 45.059475][ T29] audit: type=1326 audit(1751165709.891:987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3884 comm="syz.4.126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3b478e929 code=0x7ffc0000 [ 45.313524][ T3386] usb 4-1: enqueue for inactive port 0 [ 45.319359][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.331874][ T3895] FAULT_INJECTION: forcing a failure. [ 45.331874][ T3895] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 45.345131][ T3895] CPU: 0 UID: 0 PID: 3895 Comm: syz.0.131 Tainted: G W 6.16.0-rc3-syzkaller-00319-gded779017ad7 #0 PREEMPT(voluntary) [ 45.345173][ T3895] Tainted: [W]=WARN [ 45.345181][ T3895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 45.345232][ T3895] Call Trace: [ 45.345238][ T3895] [ 45.345245][ T3895] __dump_stack+0x1d/0x30 [ 45.345269][ T3895] dump_stack_lvl+0xe8/0x140 [ 45.345294][ T3895] dump_stack+0x15/0x1b [ 45.345315][ T3895] should_fail_ex+0x265/0x280 [ 45.345366][ T3895] should_fail+0xb/0x20 [ 45.345444][ T3895] should_fail_usercopy+0x1a/0x20 [ 45.345477][ T3895] _copy_from_user+0x1c/0xb0 [ 45.345503][ T3895] ___sys_sendmsg+0xc1/0x1d0 [ 45.345626][ T3895] __x64_sys_sendmsg+0xd4/0x160 [ 45.345671][ T3895] x64_sys_call+0x2999/0x2fb0 [ 45.345760][ T3895] do_syscall_64+0xd2/0x200 [ 45.345783][ T3895] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 45.345845][ T3895] ? clear_bhb_loop+0x40/0x90 [ 45.345868][ T3895] ? clear_bhb_loop+0x40/0x90 [ 45.345896][ T3895] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 45.345941][ T3895] RIP: 0033:0x7f176e33e929 [ 45.345968][ T3895] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 45.345986][ T3895] RSP: 002b:00007f176c9a7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 45.346009][ T3895] RAX: ffffffffffffffda RBX: 00007f176e565fa0 RCX: 00007f176e33e929 [ 45.346023][ T3895] RDX: 0000000000000800 RSI: 0000200000000600 RDI: 0000000000000005 [ 45.346038][ T3895] RBP: 00007f176c9a7090 R08: 0000000000000000 R09: 0000000000000000 [ 45.346052][ T3895] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 45.346067][ T3895] R13: 0000000000000000 R14: 00007f176e565fa0 R15: 00007ffe1e8c1e48 [ 45.346105][ T3895] [ 45.537896][ T3893] pim6reg1: entered promiscuous mode [ 45.543559][ T3893] pim6reg1: entered allmulticast mode [ 45.584602][ T3902] macvlan1: entered promiscuous mode [ 45.591265][ T3902] ipvlan0: entered promiscuous mode [ 45.598517][ T3902] ipvlan0: left promiscuous mode [ 45.603743][ T3902] macvlan1: left promiscuous mode [ 45.634488][ T3908] loop4: detected capacity change from 0 to 512 [ 45.643963][ T3910] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.655673][ T3910] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.683792][ T3908] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.696876][ T3908] ext4 filesystem being mounted at /26/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.735490][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.764309][ T3918] 9pnet_fd: Insufficient options for proto=fd [ 45.814243][ T3928] loop3: detected capacity change from 0 to 512 [ 45.823041][ T3928] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 45.834537][ T3927] netlink: 68 bytes leftover after parsing attributes in process `syz.0.144'. [ 45.847441][ T3927] team0: No ports can be present during mode change [ 45.864650][ T3928] EXT4-fs (loop3): 1 truncate cleaned up [ 45.878749][ T3928] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.891795][ T3933] netlink: 'syz.0.147': attribute type 10 has an invalid length. [ 45.900990][ T3933] team0: Device ipvlan0 failed to register rx_handler [ 45.929948][ T3935] loop0: detected capacity change from 0 to 512 [ 45.936794][ T3935] EXT4-fs: quotafile must be on filesystem root [ 46.025564][ T3937] pim6reg1: entered promiscuous mode [ 46.030967][ T3937] pim6reg1: entered allmulticast mode [ 46.055329][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.077930][ T3950] loop0: detected capacity change from 0 to 512 [ 46.090849][ T3950] EXT4-fs: inline encryption not supported [ 46.098225][ T3950] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 46.258045][ T3963] netlink: 'syz.1.159': attribute type 10 has an invalid length. [ 46.269300][ T3952] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 46.295435][ T3963] ipvlan0: entered allmulticast mode [ 46.300800][ T3963] veth0_vlan: entered allmulticast mode [ 46.308073][ T3963] team0: Device ipvlan0 failed to register rx_handler [ 46.330178][ T3963] syz.1.159 (3963) used greatest stack depth: 10232 bytes left [ 46.334331][ T3844] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.376084][ T3844] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.415686][ T3844] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.449455][ T3844] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.472149][ T3386] usb usb4-port1: attempt power cycle [ 46.556708][ T3980] loop2: detected capacity change from 0 to 512 [ 46.593850][ T3980] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 46.610297][ T3980] EXT4-fs (loop2): 1 truncate cleaned up [ 46.629941][ T3980] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.710346][ T3993] loop0: detected capacity change from 0 to 512 [ 46.733537][ T3991] pim6reg1: entered promiscuous mode [ 46.738992][ T3991] pim6reg1: entered allmulticast mode [ 46.762753][ T3993] EXT4-fs: inline encryption not supported [ 46.796475][ T3993] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 46.844393][ T3996] loop0: detected capacity change from 0 to 1024 [ 46.852752][ T3996] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 46.888273][ T3996] EXT4-fs error (device loop0): ext4_map_blocks:816: inode #3: block 1: comm syz.0.169: lblock 1 mapped to illegal pblock 1 (length 1) [ 46.929046][ T3999] loop4: detected capacity change from 0 to 512 [ 46.945212][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.971741][ T3999] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 46.984035][ T3996] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.169: Failed to acquire dquot type 0 [ 47.011878][ T4001] netlink: 'syz.2.171': attribute type 10 has an invalid length. [ 47.032221][ T3999] EXT4-fs (loop4): orphan cleanup on readonly fs [ 47.043892][ T3999] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:517: comm syz.4.170: Block bitmap for bg 0 marked uninitialized [ 47.058185][ T3996] EXT4-fs error (device loop0): ext4_free_blocks:6587: comm syz.0.169: Freeing blocks not in datazone - block = 0, count = 4096 [ 47.071751][ T4001] ipvlan0: entered allmulticast mode [ 47.077136][ T4001] veth0_vlan: entered allmulticast mode [ 47.084794][ T3996] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm syz.0.169: Invalid inode bitmap blk 0 in block_group 0 [ 47.093559][ T4001] team0: Device ipvlan0 failed to register rx_handler [ 47.102404][ T3996] EXT4-fs error (device loop0) in ext4_free_inode:361: Corrupt filesystem [ 47.104287][ T3999] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 47.112922][ T3841] EXT4-fs error (device loop0): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:8: lblock 1 mapped to illegal pblock 1 (length 1) [ 47.132190][ T3996] EXT4-fs (loop0): 1 orphan inode deleted [ 47.141245][ T3841] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:8: Failed to release dquot type 0 [ 47.141804][ T3999] EXT4-fs (loop4): 1 orphan inode deleted [ 47.160454][ T3999] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 47.169304][ T3996] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.200283][ T3996] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.219676][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.230780][ T4005] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 47.325965][ T4011] netlink: 32 bytes leftover after parsing attributes in process `syz.2.176'. [ 47.340419][ T4013] loop1: detected capacity change from 0 to 512 [ 47.347554][ T4013] EXT4-fs: quotafile must be on filesystem root [ 47.377272][ T4013] FAULT_INJECTION: forcing a failure. [ 47.377272][ T4013] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 47.390414][ T4013] CPU: 1 UID: 0 PID: 4013 Comm: syz.1.177 Tainted: G W 6.16.0-rc3-syzkaller-00319-gded779017ad7 #0 PREEMPT(voluntary) [ 47.390547][ T4013] Tainted: [W]=WARN [ 47.390555][ T4013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 47.390570][ T4013] Call Trace: [ 47.390577][ T4013] [ 47.390584][ T4013] __dump_stack+0x1d/0x30 [ 47.390604][ T4013] dump_stack_lvl+0xe8/0x140 [ 47.390623][ T4013] dump_stack+0x15/0x1b [ 47.390663][ T4013] should_fail_ex+0x265/0x280 [ 47.390702][ T4013] should_fail+0xb/0x20 [ 47.390740][ T4013] should_fail_usercopy+0x1a/0x20 [ 47.390770][ T4013] _copy_to_iter+0x24b/0xe30 [ 47.390810][ T4013] ? should_fail_ex+0xdb/0x280 [ 47.390842][ T4013] copy_page_to_iter+0x18f/0x2d0 [ 47.390865][ T4013] process_vm_rw+0x672/0x950 [ 47.390949][ T4013] __x64_sys_process_vm_readv+0x78/0x90 [ 47.391075][ T4013] x64_sys_call+0x2978/0x2fb0 [ 47.391101][ T4013] do_syscall_64+0xd2/0x200 [ 47.391123][ T4013] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 47.391156][ T4013] ? clear_bhb_loop+0x40/0x90 [ 47.391210][ T4013] ? clear_bhb_loop+0x40/0x90 [ 47.391235][ T4013] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.391287][ T4013] RIP: 0033:0x7f73da92e929 [ 47.391305][ T4013] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 47.391325][ T4013] RSP: 002b:00007f73d8f97038 EFLAGS: 00000246 ORIG_RAX: 0000000000000136 [ 47.391421][ T4013] RAX: ffffffffffffffda RBX: 00007f73dab55fa0 RCX: 00007f73da92e929 [ 47.391435][ T4013] RDX: 0000000000000002 RSI: 0000200000008400 RDI: 0000000000000049 [ 47.391449][ T4013] RBP: 00007f73d8f97090 R08: 0000000000000286 R09: 0000000000000000 [ 47.391517][ T4013] R10: 0000200000008640 R11: 0000000000000246 R12: 0000000000000001 [ 47.391530][ T4013] R13: 0000000000000000 R14: 00007f73dab55fa0 R15: 00007ffc91a52288 [ 47.391554][ T4013] [ 47.434529][ T4018] netlink: 4 bytes leftover after parsing attributes in process `syz.4.173'. [ 47.787427][ T4033] netlink: 'syz.1.182': attribute type 10 has an invalid length. [ 47.815877][ T4033] team0: Device ipvlan0 failed to register rx_handler [ 47.982303][ T4048] netlink: 12 bytes leftover after parsing attributes in process `syz.4.187'. [ 48.020001][ T4049] loop4: detected capacity change from 0 to 128 [ 48.123572][ T4047] bio_check_eod: 103 callbacks suppressed [ 48.123590][ T4047] syz.4.187: attempt to access beyond end of device [ 48.123590][ T4047] loop4: rw=2049, sector=657, nr_sectors = 89 limit=128 [ 48.213902][ T4049] syz.4.187: attempt to access beyond end of device [ 48.213902][ T4049] loop4: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 48.252141][ T4049] syz.4.187: attempt to access beyond end of device [ 48.252141][ T4049] loop4: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 48.295429][ T4049] syz.4.187: attempt to access beyond end of device [ 48.295429][ T4049] loop4: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 48.344272][ T4049] syz.4.187: attempt to access beyond end of device [ 48.344272][ T4049] loop4: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 48.365151][ T4049] syz.4.187: attempt to access beyond end of device [ 48.365151][ T4049] loop4: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 48.415347][ T4049] syz.4.187: attempt to access beyond end of device [ 48.415347][ T4049] loop4: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 48.485714][ T4049] syz.4.187: attempt to access beyond end of device [ 48.485714][ T4049] loop4: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 48.552871][ T4049] syz.4.187: attempt to access beyond end of device [ 48.552871][ T4049] loop4: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 48.607179][ T4049] syz.4.187: attempt to access beyond end of device [ 48.607179][ T4049] loop4: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 48.701474][ T3386] usb usb4-port1: unable to enumerate USB device [ 48.722572][ T4061] FAULT_INJECTION: forcing a failure. [ 48.722572][ T4061] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 48.735698][ T4061] CPU: 1 UID: 0 PID: 4061 Comm: syz.2.190 Tainted: G W 6.16.0-rc3-syzkaller-00319-gded779017ad7 #0 PREEMPT(voluntary) [ 48.735734][ T4061] Tainted: [W]=WARN [ 48.735742][ T4061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 48.735764][ T4061] Call Trace: [ 48.735770][ T4061] [ 48.735777][ T4061] __dump_stack+0x1d/0x30 [ 48.735803][ T4061] dump_stack_lvl+0xe8/0x140 [ 48.735825][ T4061] dump_stack+0x15/0x1b [ 48.735844][ T4061] should_fail_ex+0x265/0x280 [ 48.735880][ T4061] should_fail+0xb/0x20 [ 48.735916][ T4061] should_fail_usercopy+0x1a/0x20 [ 48.735972][ T4061] _copy_from_user+0x1c/0xb0 [ 48.735992][ T4061] ___sys_sendmsg+0xc1/0x1d0 [ 48.736039][ T4061] __x64_sys_sendmsg+0xd4/0x160 [ 48.736082][ T4061] x64_sys_call+0x2999/0x2fb0 [ 48.736109][ T4061] do_syscall_64+0xd2/0x200 [ 48.736131][ T4061] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 48.736159][ T4061] ? clear_bhb_loop+0x40/0x90 [ 48.736195][ T4061] ? clear_bhb_loop+0x40/0x90 [ 48.736217][ T4061] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.736237][ T4061] RIP: 0033:0x7f3c5384e929 [ 48.736344][ T4061] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 48.736365][ T4061] RSP: 002b:00007f3c51eb7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 48.736387][ T4061] RAX: ffffffffffffffda RBX: 00007f3c53a75fa0 RCX: 00007f3c5384e929 [ 48.736402][ T4061] RDX: 0000000000000800 RSI: 0000200000000600 RDI: 0000000000000003 [ 48.736415][ T4061] RBP: 00007f3c51eb7090 R08: 0000000000000000 R09: 0000000000000000 [ 48.736468][ T4061] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 48.736554][ T4061] R13: 0000000000000000 R14: 00007f3c53a75fa0 R15: 00007ffdd0d20d28 [ 48.736573][ T4061] [ 49.099622][ T4066] netlink: 'syz.2.194': attribute type 10 has an invalid length. [ 49.118845][ T4066] team0: Device ipvlan0 failed to register rx_handler [ 49.187572][ T4073] syz.2.195 uses obsolete (PF_INET,SOCK_PACKET) [ 49.190409][ T4073] netlink: 'syz.2.195': attribute type 2 has an invalid length. [ 49.190427][ T4073] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.195'. [ 49.211536][ T4067] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 49.378609][ T4087] netlink: 4 bytes leftover after parsing attributes in process `syz.0.199'. [ 49.387544][ T4087] netlink: 60 bytes leftover after parsing attributes in process `syz.0.199'. [ 49.396459][ T4087] netlink: 60 bytes leftover after parsing attributes in process `syz.0.199'. [ 49.705329][ T4099] loop0: detected capacity change from 0 to 1024 [ 49.743991][ T4099] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.801551][ T4099] ext4 filesystem being mounted at /48/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.825135][ T4102] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 49.840429][ T4104] loop1: detected capacity change from 0 to 8192 [ 49.870896][ T29] kauditd_printk_skb: 199 callbacks suppressed [ 49.870913][ T29] audit: type=1326 audit(1751165714.781:1184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4083 comm="syz.4.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3b478e929 code=0x7ffc0000 [ 49.907577][ T4110] netlink: 'syz.2.207': attribute type 10 has an invalid length. [ 49.918185][ T4110] team0: Device ipvlan0 failed to register rx_handler [ 49.966060][ T29] audit: type=1326 audit(1751165714.781:1185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4083 comm="syz.4.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3b478e929 code=0x7ffc0000 [ 49.989558][ T29] audit: type=1326 audit(1751165714.851:1186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4083 comm="syz.4.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=311 compat=0 ip=0x7fd3b478e929 code=0x7ffc0000 [ 50.012920][ T29] audit: type=1326 audit(1751165714.861:1187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4109 comm="syz.2.207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c5384e929 code=0x7ffc0000 [ 50.036307][ T29] audit: type=1326 audit(1751165714.861:1188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4109 comm="syz.2.207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c5384e929 code=0x7ffc0000 [ 50.059703][ T29] audit: type=1326 audit(1751165714.861:1189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4109 comm="syz.2.207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=114 compat=0 ip=0x7f3c5384e929 code=0x7ffc0000 [ 50.083101][ T29] audit: type=1326 audit(1751165714.861:1190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4109 comm="syz.2.207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c5384e929 code=0x7ffc0000 [ 50.106492][ T29] audit: type=1326 audit(1751165714.861:1191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4109 comm="syz.2.207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=194 compat=0 ip=0x7f3c5384e929 code=0x7ffc0000 [ 50.129868][ T29] audit: type=1326 audit(1751165714.861:1192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4109 comm="syz.2.207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c5384e929 code=0x7ffc0000 [ 50.153226][ T29] audit: type=1326 audit(1751165714.861:1193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4109 comm="syz.2.207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c5384e929 code=0x7ffc0000 [ 50.187446][ T4115] loop1: detected capacity change from 0 to 1024 [ 50.204053][ T4115] EXT4-fs: Ignoring removed bh option [ 50.210042][ T4115] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 50.235500][ T4115] EXT4-fs error (device loop1): ext4_quota_enable:7124: comm syz.1.209: inode #2304: comm syz.1.209: iget: illegal inode # [ 50.259240][ T4115] EXT4-fs (loop1): Remounting filesystem read-only [ 50.265909][ T4115] EXT4-fs warning (device loop1): ext4_enable_quotas:7168: Failed to enable quota tracking (type=2, err=-117, ino=2304). Please run e2fsck to fix. [ 50.291602][ T4115] EXT4-fs (loop1): mount failed [ 50.321434][ T4127] FAULT_INJECTION: forcing a failure. [ 50.321434][ T4127] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 50.334692][ T4127] CPU: 0 UID: 0 PID: 4127 Comm: syz.2.212 Tainted: G W 6.16.0-rc3-syzkaller-00319-gded779017ad7 #0 PREEMPT(voluntary) [ 50.334791][ T4127] Tainted: [W]=WARN [ 50.334799][ T4127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 50.334813][ T4127] Call Trace: [ 50.334821][ T4127] [ 50.334829][ T4127] __dump_stack+0x1d/0x30 [ 50.334854][ T4127] dump_stack_lvl+0xe8/0x140 [ 50.334873][ T4127] dump_stack+0x15/0x1b [ 50.334935][ T4127] should_fail_ex+0x265/0x280 [ 50.334967][ T4127] should_fail+0xb/0x20 [ 50.335002][ T4127] should_fail_usercopy+0x1a/0x20 [ 50.335050][ T4127] strncpy_from_user+0x25/0x230 [ 50.335079][ T4127] ? __kmalloc_cache_noprof+0x189/0x320 [ 50.335165][ T4127] __se_sys_memfd_create+0x1ff/0x590 [ 50.335290][ T4127] __x64_sys_memfd_create+0x31/0x40 [ 50.335389][ T4127] x64_sys_call+0x122f/0x2fb0 [ 50.335423][ T4127] do_syscall_64+0xd2/0x200 [ 50.335440][ T4127] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 50.335584][ T4127] ? clear_bhb_loop+0x40/0x90 [ 50.335667][ T4127] ? clear_bhb_loop+0x40/0x90 [ 50.335695][ T4127] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.335723][ T4127] RIP: 0033:0x7f3c5384e929 [ 50.335741][ T4127] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 50.335768][ T4127] RSP: 002b:00007f3c51eb6e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 50.335790][ T4127] RAX: ffffffffffffffda RBX: 0000000000001221 RCX: 00007f3c5384e929 [ 50.335808][ T4127] RDX: 00007f3c51eb6ef0 RSI: 0000000000000000 RDI: 00007f3c538d14cc [ 50.335822][ T4127] RBP: 0000200000002300 R08: 00007f3c51eb6bb7 R09: 00007f3c51eb6e40 [ 50.335854][ T4127] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000080 [ 50.335868][ T4127] R13: 00007f3c51eb6ef0 R14: 00007f3c51eb6eb0 R15: 0000200000000500 [ 50.335887][ T4127] [ 50.546212][ T4131] loop1: detected capacity change from 0 to 512 [ 50.568056][ T4131] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 50.592469][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.615305][ T4131] EXT4-fs (loop1): 1 truncate cleaned up [ 50.667112][ T4131] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.735403][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.783529][ T4150] loop0: detected capacity change from 0 to 1024 [ 50.927591][ T4150] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.972775][ T4150] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2848: Unable to expand inode 13. Delete some EAs or run e2fsck. [ 51.013000][ T4165] __nla_validate_parse: 1 callbacks suppressed [ 51.013081][ T4165] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 51.026783][ T4150] pim6reg1: entered promiscuous mode [ 51.085189][ T4177] loop2: detected capacity change from 0 to 512 [ 51.095043][ T4177] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 51.107252][ T4177] EXT4-fs (loop2): 1 truncate cleaned up [ 51.114895][ T4177] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.140198][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.185731][ T4165] hsr_slave_0 (unregistering): left promiscuous mode [ 51.302994][ T4193] loop2: detected capacity change from 0 to 512 [ 51.309920][ T4193] EXT4-fs: Ignoring removed nomblk_io_submit option [ 51.322424][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.334803][ T4193] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.351681][ T4193] ext4 filesystem being mounted at /53/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 51.364616][ T4193] FAULT_INJECTION: forcing a failure. [ 51.364616][ T4193] name failslab, interval 1, probability 0, space 0, times 0 [ 51.377284][ T4193] CPU: 1 UID: 0 PID: 4193 Comm: syz.2.238 Tainted: G W 6.16.0-rc3-syzkaller-00319-gded779017ad7 #0 PREEMPT(voluntary) [ 51.377316][ T4193] Tainted: [W]=WARN [ 51.377395][ T4193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 51.377410][ T4193] Call Trace: [ 51.377418][ T4193] [ 51.377426][ T4193] __dump_stack+0x1d/0x30 [ 51.377449][ T4193] dump_stack_lvl+0xe8/0x140 [ 51.377466][ T4193] dump_stack+0x15/0x1b [ 51.377480][ T4193] should_fail_ex+0x265/0x280 [ 51.377510][ T4193] should_failslab+0x8c/0xb0 [ 51.377548][ T4193] __kmalloc_noprof+0xa5/0x3e0 [ 51.377571][ T4193] ? copy_splice_read+0xc2/0x5f0 [ 51.377625][ T4193] copy_splice_read+0xc2/0x5f0 [ 51.377664][ T4193] ? __pfx_ext4_file_splice_read+0x10/0x10 [ 51.377692][ T4193] splice_direct_to_actor+0x290/0x680 [ 51.377786][ T4193] ? __pfx_direct_splice_actor+0x10/0x10 [ 51.377845][ T4193] do_splice_direct+0xda/0x150 [ 51.377881][ T4193] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 51.377940][ T4193] do_sendfile+0x380/0x650 [ 51.377971][ T4193] __x64_sys_sendfile64+0x105/0x150 [ 51.377995][ T4193] x64_sys_call+0xb39/0x2fb0 [ 51.378015][ T4193] do_syscall_64+0xd2/0x200 [ 51.378032][ T4193] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 51.378115][ T4193] ? clear_bhb_loop+0x40/0x90 [ 51.378134][ T4193] ? clear_bhb_loop+0x40/0x90 [ 51.378161][ T4193] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.378185][ T4193] RIP: 0033:0x7f3c5384e929 [ 51.378282][ T4193] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 51.378300][ T4193] RSP: 002b:00007f3c51eb7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 51.378347][ T4193] RAX: ffffffffffffffda RBX: 00007f3c53a75fa0 RCX: 00007f3c5384e929 [ 51.378361][ T4193] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000005 [ 51.378408][ T4193] RBP: 00007f3c51eb7090 R08: 0000000000000000 R09: 0000000000000000 [ 51.378423][ T4193] R10: 0000000800000009 R11: 0000000000000246 R12: 0000000000000001 [ 51.378438][ T4193] R13: 0000000000000000 R14: 00007f3c53a75fa0 R15: 00007ffdd0d20d28 [ 51.378462][ T4193] [ 51.643970][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.707562][ T4200] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 51.780046][ T4211] loop0: detected capacity change from 0 to 512 [ 51.803203][ T4214] loop1: detected capacity change from 0 to 1024 [ 51.810032][ T4214] EXT4-fs: Ignoring removed i_version option [ 51.817402][ T4211] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 51.859201][ T4214] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.882488][ T4211] EXT4-fs (loop0): 1 truncate cleaned up [ 51.888755][ T4211] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.914123][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.985696][ T3308] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 88: padding at end of block bitmap is not set [ 52.022079][ T3308] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 52.051591][ T4228] loop0: detected capacity change from 0 to 512 [ 52.058658][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.087473][ T4228] EXT4-fs: Ignoring removed orlov option [ 52.094801][ T4228] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 52.105771][ T4228] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 52.113876][ T4228] EXT4-fs error (device loop0): ext4_iget_extra_inode:5035: inode #15: comm syz.0.251: corrupted in-inode xattr: e_value size too large [ 52.132039][ T4228] EXT4-fs error (device loop0): ext4_orphan_get:1398: comm syz.0.251: couldn't read orphan inode 15 (err -117) [ 52.146997][ T4228] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.162396][ T4228] EXT4-fs error (device loop0): ext4_check_dx_root:2203: inode #2: comm syz.0.251: Corrupt dir, invalid name_len for '..', running e2fsck is recommended [ 52.198626][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.323168][ T4238] loop0: detected capacity change from 0 to 8192 [ 52.367673][ T4231] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 52.459754][ T4254] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.477189][ T4252] netlink: '$+\]': attribute type 13 has an invalid length. [ 52.504986][ T4254] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.557114][ T4254] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.565675][ T4254] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.575543][ T4254] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.581080][ T4252] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.584408][ T4254] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.591165][ T4252] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.632362][ T4254] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.641675][ T4254] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.699890][ T4252] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 52.711171][ T4252] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 52.750675][ T4252] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.759920][ T4252] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.769173][ T4252] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.774438][ T4267] FAULT_INJECTION: forcing a failure. [ 52.774438][ T4267] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 52.778295][ T4252] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.791276][ T4267] CPU: 1 UID: 0 PID: 4267 Comm: syz.2.264 Tainted: G W 6.16.0-rc3-syzkaller-00319-gded779017ad7 #0 PREEMPT(voluntary) [ 52.791322][ T4267] Tainted: [W]=WARN [ 52.791330][ T4267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 52.791348][ T4267] Call Trace: [ 52.791430][ T4267] [ 52.791440][ T4267] __dump_stack+0x1d/0x30 [ 52.791460][ T4267] dump_stack_lvl+0xe8/0x140 [ 52.791478][ T4267] dump_stack+0x15/0x1b [ 52.791493][ T4267] should_fail_ex+0x265/0x280 [ 52.791533][ T4267] should_fail+0xb/0x20 [ 52.791686][ T4267] should_fail_usercopy+0x1a/0x20 [ 52.791730][ T4267] _copy_to_user+0x20/0xa0 [ 52.791758][ T4267] simple_read_from_buffer+0xb5/0x130 [ 52.791846][ T4267] proc_fail_nth_read+0x100/0x140 [ 52.791893][ T4267] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 52.791957][ T4267] vfs_read+0x19d/0x6f0 [ 52.792014][ T4267] ? __rcu_read_unlock+0x4f/0x70 [ 52.792042][ T4267] ? __rcu_read_unlock+0x4f/0x70 [ 52.792095][ T4267] ? __fget_files+0x184/0x1c0 [ 52.792126][ T4267] ksys_read+0xda/0x1a0 [ 52.792171][ T4267] __x64_sys_read+0x40/0x50 [ 52.792261][ T4267] x64_sys_call+0x2d77/0x2fb0 [ 52.792291][ T4267] do_syscall_64+0xd2/0x200 [ 52.792315][ T4267] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 52.792420][ T4267] ? clear_bhb_loop+0x40/0x90 [ 52.792459][ T4267] ? clear_bhb_loop+0x40/0x90 [ 52.792537][ T4267] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.792566][ T4267] RIP: 0033:0x7f3c5384d33c [ 52.792586][ T4267] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 52.792611][ T4267] RSP: 002b:00007f3c51eb7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 52.792641][ T4267] RAX: ffffffffffffffda RBX: 00007f3c53a75fa0 RCX: 00007f3c5384d33c [ 52.792658][ T4267] RDX: 000000000000000f RSI: 00007f3c51eb70a0 RDI: 0000000000000004 [ 52.792675][ T4267] RBP: 00007f3c51eb7090 R08: 0000000000000000 R09: 0000000000000000 [ 52.792692][ T4267] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 52.792783][ T4267] R13: 0000000000000000 R14: 00007f3c53a75fa0 R15: 00007ffdd0d20d28 [ 52.792810][ T4267] [ 53.021148][ T4252] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 256 - 0 [ 53.030160][ T4252] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 256 - 0 [ 53.039125][ T4252] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 256 - 0 [ 53.047998][ T4252] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 256 - 0 [ 53.257794][ T4292] loop2: detected capacity change from 0 to 512 [ 53.265830][ T4292] journal_path: Lookup failure for './file0/../file0' [ 53.272839][ T4292] EXT4-fs: error: could not find journal device path [ 53.334903][ T4287] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 53.521974][ T4306] loop2: detected capacity change from 0 to 512 [ 53.537709][ T4320] FAULT_INJECTION: forcing a failure. [ 53.537709][ T4320] name failslab, interval 1, probability 0, space 0, times 0 [ 53.550456][ T4320] CPU: 0 UID: 0 PID: 4320 Comm: syz.1.286 Tainted: G W 6.16.0-rc3-syzkaller-00319-gded779017ad7 #0 PREEMPT(voluntary) [ 53.550490][ T4320] Tainted: [W]=WARN [ 53.550498][ T4320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 53.550513][ T4320] Call Trace: [ 53.550520][ T4320] [ 53.550568][ T4320] __dump_stack+0x1d/0x30 [ 53.550590][ T4320] dump_stack_lvl+0xe8/0x140 [ 53.550614][ T4320] dump_stack+0x15/0x1b [ 53.550635][ T4320] should_fail_ex+0x265/0x280 [ 53.550675][ T4320] should_failslab+0x8c/0xb0 [ 53.550705][ T4320] kmem_cache_alloc_node_noprof+0x57/0x320 [ 53.550773][ T4320] ? __alloc_skb+0x101/0x320 [ 53.550849][ T4320] __alloc_skb+0x101/0x320 [ 53.550905][ T4320] netlink_alloc_large_skb+0xba/0xf0 [ 53.550989][ T4320] netlink_sendmsg+0x3cf/0x6b0 [ 53.551017][ T4320] ? __pfx_netlink_sendmsg+0x10/0x10 [ 53.551047][ T4320] __sock_sendmsg+0x145/0x180 [ 53.551071][ T4320] ____sys_sendmsg+0x31e/0x4e0 [ 53.551189][ T4320] ___sys_sendmsg+0x17b/0x1d0 [ 53.551241][ T4320] __x64_sys_sendmsg+0xd4/0x160 [ 53.551364][ T4320] x64_sys_call+0x2999/0x2fb0 [ 53.551386][ T4320] do_syscall_64+0xd2/0x200 [ 53.551450][ T4320] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 53.551495][ T4320] ? clear_bhb_loop+0x40/0x90 [ 53.551513][ T4320] ? clear_bhb_loop+0x40/0x90 [ 53.551544][ T4320] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.551569][ T4320] RIP: 0033:0x7f73da92e929 [ 53.551586][ T4320] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 53.551607][ T4320] RSP: 002b:00007f73d8f97038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 53.551627][ T4320] RAX: ffffffffffffffda RBX: 00007f73dab55fa0 RCX: 00007f73da92e929 [ 53.551638][ T4320] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 53.551655][ T4320] RBP: 00007f73d8f97090 R08: 0000000000000000 R09: 0000000000000000 [ 53.551688][ T4320] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 53.551699][ T4320] R13: 0000000000000000 R14: 00007f73dab55fa0 R15: 00007ffc91a52288 [ 53.551716][ T4320] [ 53.876585][ T4306] EXT4-fs (loop2): 1 orphan inode deleted [ 53.899674][ T4306] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.914745][ T3841] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:8: Failed to release dquot type 1 [ 53.935546][ T4306] ext4 filesystem being mounted at /67/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.959801][ T4306] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 53.997809][ T4359] loop1: detected capacity change from 0 to 1024 [ 54.015497][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.054831][ T4359] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.188659][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.255251][ T4381] macvlan1: entered promiscuous mode [ 54.261784][ T4381] ipvlan0: entered promiscuous mode [ 54.281662][ T4381] ipvlan0: left promiscuous mode [ 54.297491][ T4381] macvlan1: left promiscuous mode [ 54.338446][ T4366] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 54.388238][ T4390] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=4390 comm=syz.1.302 [ 54.426814][ T4390] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=35 sclass=netlink_audit_socket pid=4390 comm=syz.1.302 [ 54.458261][ T4390] netlink: 4 bytes leftover after parsing attributes in process `syz.1.302'. [ 54.477953][ T4396] loop0: detected capacity change from 0 to 1024 [ 54.486834][ T4396] EXT4-fs: Ignoring removed i_version option [ 54.518027][ T4396] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.524359][ T4400] loop1: detected capacity change from 0 to 512 [ 54.559201][ T4400] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 54.569123][ T4400] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 54.607204][ T3306] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 88: padding at end of block bitmap is not set [ 54.643781][ T3306] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 54.679911][ T4410] loop1: detected capacity change from 0 to 1024 [ 54.688849][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.713682][ T4410] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.782510][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.834565][ T4413] loop4: detected capacity change from 0 to 512 [ 54.856802][ T4424] macvlan1: entered promiscuous mode [ 54.874986][ T4424] ipvlan0: entered promiscuous mode [ 54.880923][ T4424] ipvlan0: left promiscuous mode [ 54.886856][ T4424] macvlan1: left promiscuous mode [ 54.924980][ T4413] EXT4-fs (loop4): 1 orphan inode deleted [ 54.936688][ T4413] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.952595][ T4344] __quota_error: 349 callbacks suppressed [ 54.952611][ T4344] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 54.968297][ T4344] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:25: Failed to release dquot type 1 [ 54.970488][ T4413] ext4 filesystem being mounted at /60/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.980349][ T4435] netlink: 4 bytes leftover after parsing attributes in process `syz.0.313'. [ 55.007997][ T4413] FAULT_INJECTION: forcing a failure. [ 55.007997][ T4413] name failslab, interval 1, probability 0, space 0, times 0 [ 55.024282][ T4413] CPU: 1 UID: 0 PID: 4413 Comm: syz.4.311 Tainted: G W 6.16.0-rc3-syzkaller-00319-gded779017ad7 #0 PREEMPT(voluntary) [ 55.024332][ T4413] Tainted: [W]=WARN [ 55.024339][ T4413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 55.024351][ T4413] Call Trace: [ 55.024356][ T4413] [ 55.024362][ T4413] __dump_stack+0x1d/0x30 [ 55.024387][ T4413] dump_stack_lvl+0xe8/0x140 [ 55.024412][ T4413] dump_stack+0x15/0x1b [ 55.024496][ T4413] should_fail_ex+0x265/0x280 [ 55.024592][ T4413] ? alloc_fs_context+0x44/0x4e0 [ 55.024628][ T4413] should_failslab+0x8c/0xb0 [ 55.024651][ T4413] __kmalloc_cache_noprof+0x4c/0x320 [ 55.024727][ T4413] alloc_fs_context+0x44/0x4e0 [ 55.024761][ T4413] ? security_capable+0x83/0x90 [ 55.024879][ T4413] fs_context_for_reconfigure+0x42/0x50 [ 55.024917][ T4413] path_mount+0x9ec/0xb20 [ 55.024995][ T4413] ? user_path_at+0x109/0x130 [ 55.025029][ T4413] __se_sys_mount+0x28f/0x2e0 [ 55.025056][ T4413] __x64_sys_mount+0x67/0x80 [ 55.025117][ T4413] x64_sys_call+0xd36/0x2fb0 [ 55.025145][ T4413] do_syscall_64+0xd2/0x200 [ 55.025168][ T4413] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 55.025229][ T4413] ? clear_bhb_loop+0x40/0x90 [ 55.025323][ T4413] ? clear_bhb_loop+0x40/0x90 [ 55.025352][ T4413] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.025379][ T4413] RIP: 0033:0x7fd3b478e929 [ 55.025397][ T4413] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 55.025419][ T4413] RSP: 002b:00007fd3b2df7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 55.025459][ T4413] RAX: ffffffffffffffda RBX: 00007fd3b49b5fa0 RCX: 00007fd3b478e929 [ 55.025475][ T4413] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000000 [ 55.025490][ T4413] RBP: 00007fd3b2df7090 R08: 0000000000000000 R09: 0000000000000000 [ 55.025506][ T4413] R10: 0000000000000021 R11: 0000000000000246 R12: 0000000000000001 [ 55.025520][ T4413] R13: 0000000000000000 R14: 00007fd3b49b5fa0 R15: 00007fff63f60b68 [ 55.025545][ T4413] [ 55.237717][ T4439] program syz.3.318 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 55.257682][ T4441] loop1: detected capacity change from 0 to 512 [ 55.264614][ T4441] journal_path: Lookup failure for './file0/../file0' [ 55.271416][ T4441] EXT4-fs: error: could not find journal device path [ 55.280061][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.310286][ T29] audit: type=1326 audit(1751165720.221:1540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4440 comm="syz.1.319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73da92e929 code=0x7ffc0000 [ 55.354905][ T29] audit: type=1326 audit(1751165720.221:1541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4440 comm="syz.1.319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f73da92e929 code=0x7ffc0000 [ 55.378296][ T29] audit: type=1326 audit(1751165720.221:1542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4440 comm="syz.1.319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73da92e929 code=0x7ffc0000 [ 55.401746][ T29] audit: type=1326 audit(1751165720.221:1543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4440 comm="syz.1.319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f73da92e929 code=0x7ffc0000 [ 55.425185][ T29] audit: type=1326 audit(1751165720.221:1544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4440 comm="syz.1.319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73da92e929 code=0x7ffc0000 [ 55.448674][ T29] audit: type=1326 audit(1751165720.221:1545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4440 comm="syz.1.319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f73da92e929 code=0x7ffc0000 [ 55.472453][ T29] audit: type=1326 audit(1751165720.221:1546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4440 comm="syz.1.319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73da92e929 code=0x7ffc0000 [ 55.495915][ T29] audit: type=1326 audit(1751165720.251:1547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4440 comm="syz.1.319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f73da92e929 code=0x7ffc0000 [ 55.519382][ T29] audit: type=1326 audit(1751165720.251:1548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4440 comm="syz.1.319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73da92e929 code=0x7ffc0000 [ 55.659042][ T4464] loop3: detected capacity change from 0 to 128 [ 55.739932][ T4471] bio_check_eod: 64 callbacks suppressed [ 55.739951][ T4471] syz.3.330: attempt to access beyond end of device [ 55.739951][ T4471] loop3: rw=1, sector=297, nr_sectors = 8 limit=128 [ 55.779196][ T4471] syz.3.330: attempt to access beyond end of device [ 55.779196][ T4471] loop3: rw=1, sector=361, nr_sectors = 8 limit=128 [ 55.802265][ T4471] syz.3.330: attempt to access beyond end of device [ 55.802265][ T4471] loop3: rw=1, sector=393, nr_sectors = 8 limit=128 [ 55.818409][ T4473] sd 0:0:1:0: device reset [ 55.828718][ T4471] syz.3.330: attempt to access beyond end of device [ 55.828718][ T4471] loop3: rw=1, sector=425, nr_sectors = 8 limit=128 [ 55.843871][ T4473] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 55.850564][ T4473] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 55.858383][ T4473] vhci_hcd vhci_hcd.0: Device attached [ 55.871438][ T4479] loop2: detected capacity change from 0 to 512 [ 55.871859][ T4471] syz.3.330: attempt to access beyond end of device [ 55.871859][ T4471] loop3: rw=1, sector=457, nr_sectors = 8 limit=128 [ 55.894997][ T4471] syz.3.330: attempt to access beyond end of device [ 55.894997][ T4471] loop3: rw=1, sector=521, nr_sectors = 8 limit=128 [ 55.908328][ T4471] syz.3.330: attempt to access beyond end of device [ 55.908328][ T4471] loop3: rw=1, sector=553, nr_sectors = 8 limit=128 [ 55.943524][ T4471] syz.3.330: attempt to access beyond end of device [ 55.943524][ T4471] loop3: rw=1, sector=585, nr_sectors = 8 limit=128 [ 55.972150][ T4479] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.975264][ T4471] syz.3.330: attempt to access beyond end of device [ 55.975264][ T4471] loop3: rw=1, sector=617, nr_sectors = 8 limit=128 [ 55.998036][ T4471] syz.3.330: attempt to access beyond end of device [ 55.998036][ T4471] loop3: rw=1, sector=681, nr_sectors = 8 limit=128 [ 56.019971][ T4486] loop4: detected capacity change from 0 to 512 [ 56.036940][ T4486] journal_path: Lookup failure for './file0/../file0' [ 56.039621][ T4479] ext4 filesystem being mounted at /72/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.043881][ T4486] EXT4-fs: error: could not find journal device path [ 56.073110][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.152224][ T3559] usb 2-1: SetAddress Request (2) to port 0 [ 56.158539][ T3559] usb 2-1: new SuperSpeed USB device number 2 using vhci_hcd [ 56.215429][ T4502] loop2: detected capacity change from 0 to 512 [ 56.225455][ T4496] program syz.1.341 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 56.243417][ T4502] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 56.260554][ T4505] loop4: detected capacity change from 0 to 512 [ 56.272202][ T4502] EXT4-fs (loop2): 1 truncate cleaned up [ 56.273487][ T4505] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 56.289727][ T4505] EXT4-fs (loop4): 1 truncate cleaned up [ 56.292954][ T4502] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.304739][ T4505] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.353662][ T4502] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.460606][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.474133][ T4508] hub 4-0:1.0: USB hub found [ 56.482016][ T4508] hub 4-0:1.0: 8 ports detected [ 56.582180][ T4521] loop3: detected capacity change from 0 to 512 [ 56.589066][ T4521] journal_path: Lookup failure for './file0/../file0' [ 56.595912][ T4521] EXT4-fs: error: could not find journal device path [ 56.677096][ T4528] netlink: 'syz.3.351': attribute type 2 has an invalid length. [ 56.763753][ T4532] netlink: 156 bytes leftover after parsing attributes in process `syz.3.351'. [ 56.785071][ T4532] netlink: 24 bytes leftover after parsing attributes in process `syz.3.351'. [ 56.798427][ T4534] loop4: detected capacity change from 0 to 512 [ 56.913171][ T4534] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 56.934478][ T4532] loop3: detected capacity change from 0 to 2048 [ 56.941189][ T4532] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 56.977557][ T4534] EXT4-fs (loop4): 1 truncate cleaned up [ 57.117099][ T4541] sd 0:0:1:0: device reset [ 57.134820][ T4541] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 57.141384][ T4541] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 57.149126][ T4541] vhci_hcd vhci_hcd.0: Device attached [ 57.199118][ T4550] loop4: detected capacity change from 0 to 512 [ 57.212415][ T4550] journal_path: Lookup failure for './file0/../file0' [ 57.219234][ T4550] EXT4-fs: error: could not find journal device path [ 57.315431][ T4564] loop4: detected capacity change from 0 to 512 [ 57.324079][ T4564] journal_path: Non-blockdev passed as './bus' [ 57.330292][ T4564] EXT4-fs: error: could not find journal device path [ 57.344685][ T4566] netlink: 32 bytes leftover after parsing attributes in process `syz.1.368'. [ 57.421985][ T3414] usb 8-1: SetAddress Request (2) to port 0 [ 57.428047][ T3414] usb 8-1: new SuperSpeed USB device number 2 using vhci_hcd [ 57.814449][ T4598] loop0: detected capacity change from 0 to 512 [ 57.834056][ T4598] journal_path: Non-blockdev passed as './bus' [ 57.840272][ T4598] EXT4-fs: error: could not find journal device path [ 57.867340][ T4603] loop4: detected capacity change from 0 to 512 [ 57.878680][ T4593] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 57.892260][ T4603] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 57.915651][ T4603] EXT4-fs (loop4): 1 truncate cleaned up [ 58.114026][ T4625] netlink: 24 bytes leftover after parsing attributes in process `syz.3.392'. [ 58.208044][ T4633] loop3: detected capacity change from 0 to 512 [ 58.214738][ T4633] journal_path: Lookup failure for './file0/../file0' [ 58.221650][ T4633] EXT4-fs: error: could not find journal device path [ 58.356212][ T4644] macvlan1: entered promiscuous mode [ 58.381892][ T4644] ipvlan0: entered promiscuous mode [ 58.398435][ T4650] loop1: detected capacity change from 0 to 1024 [ 58.407674][ T4644] ipvlan0: left promiscuous mode [ 58.413383][ T4644] macvlan1: left promiscuous mode [ 58.452339][ T3386] usb usb4-port1: attempt power cycle [ 58.503789][ T4656] loop3: detected capacity change from 0 to 1024 [ 58.545414][ T4665] sd 0:0:1:0: device reset [ 58.562122][ T4665] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 58.568838][ T4665] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 58.576627][ T4665] vhci_hcd vhci_hcd.0: Device attached [ 58.604325][ T4671] netlink: 4 bytes leftover after parsing attributes in process `syz.4.406'. [ 58.705063][ T4655] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 58.720548][ T4655] EXT4-fs (loop3): Remounting filesystem read-only [ 58.727516][ T4676] loop4: detected capacity change from 0 to 8192 [ 58.812141][ T3386] usb 4-1: SetAddress Request (8) to port 0 [ 58.819063][ T3386] usb 4-1: new SuperSpeed USB device number 8 using vhci_hcd [ 58.828951][ T4679] loop0: detected capacity change from 0 to 1024 [ 58.836009][ T4679] EXT4-fs: Ignoring removed i_version option [ 58.897960][ T4686] loop4: detected capacity change from 0 to 512 [ 58.906209][ T4686] journal_path: Non-blockdev passed as './bus' [ 58.912449][ T4686] EXT4-fs: error: could not find journal device path [ 59.107732][ T4703] netlink: 4 bytes leftover after parsing attributes in process `syz.0.420'. [ 59.132266][ T4703] bond0: (slave bond_slave_0): Releasing backup interface [ 59.204841][ T4708] loop1: detected capacity change from 0 to 1024 [ 59.347122][ T4719] loop0: detected capacity change from 0 to 512 [ 59.364806][ T4719] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 59.390439][ T4719] EXT4-fs (loop0): 1 truncate cleaned up [ 59.447393][ T4707] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 59.470700][ T4707] EXT4-fs (loop1): Remounting filesystem read-only [ 59.480835][ T4722] loop3: detected capacity change from 0 to 1024 [ 59.501477][ T4722] EXT4-fs: Ignoring removed i_version option [ 59.538155][ T4726] macvlan1: entered promiscuous mode [ 59.545992][ T4726] ipvlan0: entered promiscuous mode [ 59.551875][ T4726] ipvlan0: left promiscuous mode [ 59.557763][ T4726] macvlan1: left promiscuous mode [ 59.579794][ T4730] program syz.4.431 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 59.611790][ T4735] loop0: detected capacity change from 0 to 512 [ 59.619912][ T4735] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 59.637198][ T4735] EXT4-fs (loop0): 1 truncate cleaned up [ 59.682280][ T4739] loop3: detected capacity change from 0 to 1024 [ 59.890980][ T4754] loop0: detected capacity change from 0 to 1024 [ 59.915562][ T4738] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 59.944564][ T4738] EXT4-fs (loop3): Remounting filesystem read-only [ 59.965472][ T29] kauditd_printk_skb: 624 callbacks suppressed [ 59.965489][ T29] audit: type=1326 audit(1751165724.881:2173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4747 comm="syz.4.436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3b478e929 code=0x7ffc0000 [ 60.015667][ T29] audit: type=1326 audit(1751165724.921:2174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4747 comm="syz.4.436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd3b478e929 code=0x7ffc0000 [ 60.039079][ T29] audit: type=1326 audit(1751165724.921:2175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4747 comm="syz.4.436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3b478e929 code=0x7ffc0000 [ 60.046997][ T4753] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, [ 60.062467][ T29] audit: type=1326 audit(1751165724.921:2176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4747 comm="syz.4.436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3b478e929 code=0x7ffc0000 [ 60.062536][ T29] audit: type=1326 audit(1751165724.921:2177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4747 comm="syz.4.436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7fd3b478e929 code=0x7ffc0000 [ 60.070780][ T4753] block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 60.094132][ T29] audit: type=1326 audit(1751165724.921:2178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4747 comm="syz.4.436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3b478e929 code=0x7ffc0000 [ 60.133613][ T4753] EXT4-fs (loop0): Remounting filesystem read-only [ 60.149917][ T29] audit: type=1326 audit(1751165724.921:2179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4747 comm="syz.4.436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd3b478d290 code=0x7ffc0000 [ 60.179832][ T29] audit: type=1326 audit(1751165724.921:2180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4747 comm="syz.4.436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd3b478d290 code=0x7ffc0000 [ 60.203215][ T29] audit: type=1326 audit(1751165724.921:2181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4747 comm="syz.4.436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3b478e929 code=0x7ffc0000 [ 60.250824][ T4767] loop4: detected capacity change from 0 to 512 [ 60.261776][ T4767] journal_path: Lookup failure for './file0/../file0' [ 60.268813][ T4767] EXT4-fs: error: could not find journal device path [ 60.277959][ T29] audit: type=1326 audit(1751165725.191:2182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4766 comm="syz.4.444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3b478e929 code=0x7ffc0000 [ 60.385508][ T4777] loop0: detected capacity change from 0 to 512 [ 60.404862][ T4777] journal_path: Lookup failure for './file0/../file0' [ 60.412290][ T4777] EXT4-fs: error: could not find journal device path [ 60.488642][ T4787] loop0: detected capacity change from 0 to 512 [ 60.495982][ T4787] journal_path: Lookup failure for './file0/../file0' [ 60.502913][ T4787] EXT4-fs: error: could not find journal device path [ 60.516768][ T4789] loop1: detected capacity change from 0 to 512 [ 60.530551][ T4789] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 60.555027][ T4789] EXT4-fs (loop1): 1 truncate cleaned up [ 60.687509][ T4804] netlink: 24 bytes leftover after parsing attributes in process `syz.3.459'. [ 60.862940][ T4825] loop3: detected capacity change from 0 to 512 [ 60.869658][ T4825] journal_path: Lookup failure for './file0/../file0' [ 60.876607][ T4825] EXT4-fs: error: could not find journal device path [ 60.934537][ T4830] program syz.3.469 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 60.944034][ T4833] loop0: detected capacity change from 0 to 512 [ 60.950880][ T4833] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 60.962719][ T4833] EXT4-fs (loop0): 1 truncate cleaned up [ 60.998246][ T4837] loop0: detected capacity change from 0 to 512 [ 61.008668][ T4837] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 61.028522][ T4837] EXT4-fs (loop0): 1 truncate cleaned up [ 61.083118][ T4846] sd 0:0:1:0: device reset [ 61.089627][ T4846] vhci_hcd vhci_hcd.0: port 0 already used [ 61.115158][ T4851] loop1: detected capacity change from 0 to 128 [ 61.181647][ T4854] bio_check_eod: 103 callbacks suppressed [ 61.181678][ T4854] syz.1.475: attempt to access beyond end of device [ 61.181678][ T4854] loop1: rw=1, sector=601, nr_sectors = 8 limit=128 [ 61.201060][ T4854] syz.1.475: attempt to access beyond end of device [ 61.201060][ T4854] loop1: rw=1, sector=617, nr_sectors = 8 limit=128 [ 61.214550][ T4854] syz.1.475: attempt to access beyond end of device [ 61.214550][ T4854] loop1: rw=1, sector=633, nr_sectors = 8 limit=128 [ 61.229440][ T4854] syz.1.475: attempt to access beyond end of device [ 61.229440][ T4854] loop1: rw=1, sector=665, nr_sectors = 8 limit=128 [ 61.243303][ T4854] syz.1.475: attempt to access beyond end of device [ 61.243303][ T4854] loop1: rw=1, sector=681, nr_sectors = 8 limit=128 [ 61.262032][ T4854] syz.1.475: attempt to access beyond end of device [ 61.262032][ T4854] loop1: rw=1, sector=697, nr_sectors = 8 limit=128 [ 61.288462][ T4854] syz.1.475: attempt to access beyond end of device [ 61.288462][ T4854] loop1: rw=1, sector=729, nr_sectors = 8 limit=128 [ 61.302559][ T4854] syz.1.475: attempt to access beyond end of device [ 61.302559][ T4854] loop1: rw=1, sector=745, nr_sectors = 8 limit=128 [ 61.315731][ T4854] syz.1.475: attempt to access beyond end of device [ 61.315731][ T4854] loop1: rw=1, sector=761, nr_sectors = 8 limit=128 [ 61.331388][ T4854] syz.1.475: attempt to access beyond end of device [ 61.331388][ T4854] loop1: rw=1, sector=777, nr_sectors = 8 limit=128 [ 61.390975][ T4864] netlink: 4 bytes leftover after parsing attributes in process `syz.4.480'. [ 61.511956][ T4879] program syz.4.486 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 61.537022][ T4868] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 61.537125][ T4874] geneve0: entered allmulticast mode [ 61.737608][ T4902] program syz.0.493 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 61.853798][ T4914] loop4: detected capacity change from 0 to 1024 [ 61.950737][ T4920] loop1: detected capacity change from 0 to 512 [ 61.965771][ T4919] __nla_validate_parse: 1 callbacks suppressed [ 61.965784][ T4919] netlink: 24 bytes leftover after parsing attributes in process `syz.3.499'. [ 62.014165][ T4920] ext4 filesystem being mounted at /88/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.031108][ T4913] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 62.049085][ T4922] sd 0:0:1:0: device reset [ 62.056165][ T4913] EXT4-fs (loop4): Remounting filesystem read-only [ 62.059082][ T4922] vhci_hcd vhci_hcd.0: port 0 already used [ 62.211575][ T4940] netlink: 4 bytes leftover after parsing attributes in process `syz.3.504'. [ 62.307762][ T4948] loop3: detected capacity change from 0 to 128 [ 62.324219][ T4946] loop4: detected capacity change from 0 to 1024 [ 62.336149][ T4946] EXT4-fs: Ignoring removed i_version option [ 62.398144][ T3313] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 88: padding at end of block bitmap is not set [ 62.413383][ T3313] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 62.478308][ T4954] loop4: detected capacity change from 0 to 512 [ 62.494645][ T4956] loop1: detected capacity change from 0 to 1024 [ 62.509256][ T4954] journal_path: Lookup failure for './file0/../file0' [ 62.516128][ T4954] EXT4-fs: error: could not find journal device path [ 62.546488][ T4958] program syz.3.511 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 62.634446][ T4963] netlink: 24 bytes leftover after parsing attributes in process `syz.4.513'. [ 62.651651][ T4955] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 62.669554][ T4955] EXT4-fs (loop1): Remounting filesystem read-only [ 62.768866][ T4968] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 62.838015][ T4980] program syz.3.520 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 62.851484][ T4984] netlink: 4 bytes leftover after parsing attributes in process `syz.4.517'. [ 62.890562][ T4986] loop4: detected capacity change from 0 to 128 [ 63.030072][ T4994] loop3: detected capacity change from 0 to 512 [ 63.045771][ T4994] journal_path: Lookup failure for './file0/../file0' [ 63.052639][ T4994] EXT4-fs: error: could not find journal device path [ 63.119764][ T4996] loop3: detected capacity change from 0 to 128 [ 63.158261][ T4998] sd 0:0:1:0: device reset [ 63.192255][ T4998] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9) [ 63.198817][ T4998] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 63.206594][ T4998] vhci_hcd vhci_hcd.0: Device attached [ 63.299007][ T5005] loop1: detected capacity change from 0 to 1024 [ 63.405271][ T4999] vhci_hcd: connection closed [ 63.405709][ T4344] vhci_hcd: stop threads [ 63.414842][ T4344] vhci_hcd: release socket [ 63.419361][ T4344] vhci_hcd: disconnect device [ 63.482632][ T5011] netlink: 24 bytes leftover after parsing attributes in process `syz.3.527'. [ 63.610981][ T5015] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 63.636511][ T5023] netlink: 4 bytes leftover after parsing attributes in process `syz.3.531'. [ 63.754524][ T5033] netlink: 4 bytes leftover after parsing attributes in process `syz.3.533'. [ 63.770114][ T5033] bond0: (slave bond_slave_0): Releasing backup interface [ 63.783687][ T5032] loop0: detected capacity change from 0 to 512 [ 63.790451][ T5032] journal_path: Lookup failure for './file0/../file0' [ 63.797572][ T5032] EXT4-fs: error: could not find journal device path [ 63.983422][ T5052] sd 0:0:1:0: device reset [ 63.993457][ T5049] netlink: 4 bytes leftover after parsing attributes in process `syz.1.542'. [ 64.020589][ T5052] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9) [ 64.027151][ T5052] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 64.035084][ T5052] vhci_hcd vhci_hcd.0: Device attached [ 64.046678][ T5055] loop1: detected capacity change from 0 to 1024 [ 64.054491][ T5055] EXT4-fs: Ignoring removed i_version option [ 64.115244][ T3308] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 88: padding at end of block bitmap is not set [ 64.140283][ T5045] loop3: detected capacity change from 0 to 512 [ 64.147694][ T3308] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 64.189218][ T5064] loop1: detected capacity change from 0 to 1024 [ 64.198341][ T5064] EXT4-fs: Ignoring removed i_version option [ 64.246865][ T5045] ext4 filesystem being mounted at /123/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.320177][ T3308] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 88: padding at end of block bitmap is not set [ 64.337621][ T3308] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 64.360948][ T5070] loop3: detected capacity change from 0 to 512 [ 64.368542][ T5070] journal_path: Lookup failure for './file0/../file0' [ 64.375393][ T5070] EXT4-fs: error: could not find journal device path [ 64.417743][ T5072] loop1: detected capacity change from 0 to 512 [ 64.439261][ T1040] usb 10-1: SetAddress Request (2) to port 0 [ 64.441021][ T5072] journal_path: Lookup failure for './file0/../file0' [ 64.446591][ T1040] usb 10-1: new SuperSpeed USB device number 2 using vhci_hcd [ 64.452242][ T5072] EXT4-fs: error: could not find journal device path [ 64.531298][ T5084] loop0: detected capacity change from 0 to 512 [ 64.553882][ T5084] journal_path: Non-blockdev passed as './bus' [ 64.560118][ T5084] EXT4-fs: error: could not find journal device path [ 64.594278][ T5089] loop0: detected capacity change from 0 to 1024 [ 64.622487][ T5089] EXT4-fs: Ignoring removed i_version option [ 64.622457][ T5091] loop1: detected capacity change from 0 to 128 [ 64.646328][ T5083] loop3: detected capacity change from 0 to 8192 [ 64.737656][ T3306] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 88: padding at end of block bitmap is not set [ 64.792790][ T5102] program syz.3.562 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 64.812486][ T3306] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 64.958640][ T5115] loop1: detected capacity change from 0 to 512 [ 64.983057][ T5115] journal_path: Lookup failure for './file0/../file0' [ 64.989883][ T5115] EXT4-fs: error: could not find journal device path [ 65.057906][ T5125] loop0: detected capacity change from 0 to 512 [ 65.104650][ T5125] journal_path: Non-blockdev passed as './bus' [ 65.110955][ T5125] EXT4-fs: error: could not find journal device path [ 65.186508][ T5136] program syz.1.577 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 65.210731][ T5134] program syz.0.575 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 65.391619][ T29] kauditd_printk_skb: 716 callbacks suppressed [ 65.391674][ T29] audit: type=1326 audit(1751165730.301:2899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5142 comm="syz.4.578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3b478e929 code=0x7ffc0000 [ 65.424750][ T29] audit: type=1326 audit(1751165730.341:2900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5142 comm="syz.4.578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3b478e929 code=0x7ffc0000 [ 65.448557][ T29] audit: type=1326 audit(1751165730.341:2901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5142 comm="syz.4.578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7fd3b478e929 code=0x7ffc0000 [ 65.472318][ T29] audit: type=1326 audit(1751165730.341:2902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5142 comm="syz.4.578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3b478e929 code=0x7ffc0000 [ 65.495769][ T29] audit: type=1326 audit(1751165730.341:2903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5142 comm="syz.4.578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=132 compat=0 ip=0x7fd3b478e929 code=0x7ffc0000 [ 65.519385][ T29] audit: type=1326 audit(1751165730.341:2904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5142 comm="syz.4.578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3b478e929 code=0x7ffc0000 [ 65.542846][ T29] audit: type=1326 audit(1751165730.341:2905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5142 comm="syz.4.578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fd3b478e929 code=0x7ffc0000 [ 65.566337][ T29] audit: type=1326 audit(1751165730.341:2906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5142 comm="syz.4.578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3b478e929 code=0x7ffc0000 [ 65.590020][ T29] audit: type=1326 audit(1751165730.341:2907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5142 comm="syz.4.578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fd3b478e929 code=0x7ffc0000 [ 65.626318][ T29] audit: type=1326 audit(1751165730.531:2908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5142 comm="syz.4.578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3b478e929 code=0x7ffc0000 [ 65.692059][ T5158] loop1: detected capacity change from 0 to 1024 [ 65.710738][ T5162] loop0: detected capacity change from 0 to 1024 [ 65.718631][ T5162] EXT4-fs: Ignoring removed i_version option [ 65.821869][ T3306] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 88: padding at end of block bitmap is not set [ 65.886093][ T3306] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 65.919031][ T5179] loop3: detected capacity change from 0 to 512 [ 65.967556][ T5179] ext4 filesystem being mounted at /135/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.058580][ T5188] program syz.3.592 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 66.095696][ T5190] loop0: detected capacity change from 0 to 512 [ 66.120683][ T5190] ext4 filesystem being mounted at /134/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.180301][ T5157] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 66.195986][ T5157] EXT4-fs (loop1): Remounting filesystem read-only [ 66.408802][ T5206] loop1: detected capacity change from 0 to 128 [ 66.515802][ T5215] bio_check_eod: 555 callbacks suppressed [ 66.515819][ T5215] syz.1.594: attempt to access beyond end of device [ 66.515819][ T5215] loop1: rw=1, sector=457, nr_sectors = 8 limit=128 [ 66.537720][ T5214] loop4: detected capacity change from 0 to 1024 [ 66.548080][ T5214] EXT4-fs: Ignoring removed i_version option [ 66.559719][ T5215] syz.1.594: attempt to access beyond end of device [ 66.559719][ T5215] loop1: rw=1, sector=473, nr_sectors = 8 limit=128 [ 66.578255][ T5215] syz.1.594: attempt to access beyond end of device [ 66.578255][ T5215] loop1: rw=1, sector=489, nr_sectors = 8 limit=128 [ 66.605779][ T5215] syz.1.594: attempt to access beyond end of device [ 66.605779][ T5215] loop1: rw=1, sector=505, nr_sectors = 8 limit=128 [ 66.621156][ T5215] syz.1.594: attempt to access beyond end of device [ 66.621156][ T5215] loop1: rw=1, sector=521, nr_sectors = 8 limit=128 [ 66.634833][ T5215] syz.1.594: attempt to access beyond end of device [ 66.634833][ T5215] loop1: rw=1, sector=537, nr_sectors = 8 limit=128 [ 66.648697][ T5215] syz.1.594: attempt to access beyond end of device [ 66.648697][ T5215] loop1: rw=1, sector=553, nr_sectors = 8 limit=128 [ 66.662216][ T5215] syz.1.594: attempt to access beyond end of device [ 66.662216][ T5215] loop1: rw=1, sector=569, nr_sectors = 8 limit=128 [ 66.675455][ T5215] syz.1.594: attempt to access beyond end of device [ 66.675455][ T5215] loop1: rw=1, sector=585, nr_sectors = 8 limit=128 [ 66.676913][ T3313] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 88: padding at end of block bitmap is not set [ 66.688947][ T5215] syz.1.594: attempt to access beyond end of device [ 66.688947][ T5215] loop1: rw=1, sector=601, nr_sectors = 8 limit=128 [ 66.718371][ T3313] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 66.760097][ T5226] program syz.0.602 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 66.875697][ T5238] program syz.1.604 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 66.881016][ T5241] program syz.4.607 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 66.993072][ T5247] program syz.0.609 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 67.115904][ T5260] __nla_validate_parse: 8 callbacks suppressed [ 67.115923][ T5260] netlink: 4 bytes leftover after parsing attributes in process `syz.1.611'. [ 67.140677][ T5260] bond0: (slave bond_slave_0): Releasing backup interface [ 67.148248][ T5262] netlink: 'syz.3.613': attribute type 2 has an invalid length. [ 67.165052][ T5258] netlink: 4 bytes leftover after parsing attributes in process `syz.4.614'. [ 67.275036][ T5269] program syz.0.616 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 67.367193][ T5267] loop4: detected capacity change from 0 to 512 [ 67.398696][ T5267] ext4 filesystem being mounted at /143/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.434062][ T5273] sd 0:0:1:0: device reset [ 67.440662][ T5273] vhci_hcd vhci_hcd.0: port 0 already used [ 67.620001][ T5285] program syz.0.623 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 67.904673][ T5289] loop1: detected capacity change from 0 to 1024 [ 67.911695][ T5289] EXT4-fs: Ignoring removed i_version option [ 67.942617][ T3308] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 88: padding at end of block bitmap is not set [ 67.961000][ T3308] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 68.057402][ T5297] macvlan1: entered promiscuous mode [ 68.073561][ T5301] program syz.4.629 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 68.074402][ T5297] ipvlan0: entered promiscuous mode [ 68.096051][ T5297] ipvlan0: left promiscuous mode [ 68.101225][ T5297] macvlan1: left promiscuous mode [ 68.298282][ T5307] loop3: detected capacity change from 0 to 512 [ 68.305290][ T5307] journal_path: Lookup failure for './file0/../file0' [ 68.312236][ T5307] EXT4-fs: error: could not find journal device path [ 68.329207][ T5309] loop0: detected capacity change from 0 to 512 [ 68.385049][ T5309] EXT4-fs mount: 60 callbacks suppressed [ 68.385067][ T5309] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.451644][ T5318] program syz.4.636 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 68.465445][ T5309] ext4 filesystem being mounted at /149/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 68.487752][ T5314] loop3: detected capacity change from 0 to 8192 [ 68.505467][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.610736][ T5326] netlink: 'syz.3.638': attribute type 2 has an invalid length. [ 68.648079][ T5327] loop0: detected capacity change from 0 to 512 [ 68.668110][ T5327] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.683239][ T5327] ext4 filesystem being mounted at /151/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 68.716246][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.733503][ T5331] loop4: detected capacity change from 0 to 1024 [ 68.756271][ T5331] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.830407][ T5336] program syz.0.651 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 68.893699][ T5330] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 68.908896][ T5330] EXT4-fs (loop4): Remounting filesystem read-only [ 68.960627][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.984677][ T5343] loop1: detected capacity change from 0 to 1024 [ 69.014674][ T5343] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.034255][ T5343] ext4 filesystem being mounted at /115/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.047353][ T5349] netlink: '$+\]': attribute type 13 has an invalid length. [ 69.095894][ T5349] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.103249][ T5349] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.156941][ T5349] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 69.169250][ T5349] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 69.208415][ T5349] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.217408][ T5349] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.226664][ T5349] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.235772][ T5349] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.324061][ T5354] loop0: detected capacity change from 0 to 512 [ 69.330847][ T5354] journal_path: Lookup failure for './file0/../file0' [ 69.337736][ T5354] EXT4-fs: error: could not find journal device path [ 69.377375][ T5358] loop4: detected capacity change from 0 to 1024 [ 69.396939][ T5358] EXT4-fs: Ignoring removed i_version option [ 69.417787][ T5358] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.457219][ T3313] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 88: padding at end of block bitmap is not set [ 69.473642][ T3313] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 69.486867][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.532774][ T5368] loop4: detected capacity change from 0 to 512 [ 69.541061][ T5370] sd 0:0:1:0: device reset [ 69.549000][ T5368] journal_path: Lookup failure for './file0/../file0' [ 69.555874][ T5368] EXT4-fs: error: could not find journal device path [ 69.569246][ T5370] vhci_hcd vhci_hcd.0: port 0 already used [ 69.582431][ T5224] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 69.664915][ T5382] macvlan1: entered promiscuous mode [ 69.670985][ T5382] ipvlan0: entered promiscuous mode [ 69.677492][ T5382] ipvlan0: left promiscuous mode [ 69.687121][ T5382] macvlan1: left promiscuous mode [ 69.711049][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.824524][ T5387] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 69.945854][ T5393] loop0: detected capacity change from 0 to 512 [ 69.952821][ T5393] journal_path: Lookup failure for './file0/../file0' [ 69.959713][ T5393] EXT4-fs: error: could not find journal device path [ 70.007381][ T5395] loop0: detected capacity change from 0 to 1024 [ 70.014887][ T5395] EXT4-fs: Ignoring removed i_version option [ 70.044097][ T5395] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.121412][ T3306] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 88: padding at end of block bitmap is not set [ 70.130193][ T5403] loop4: detected capacity change from 0 to 512 [ 70.136307][ T3306] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 70.193191][ T5403] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.209332][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.244775][ T5411] loop1: detected capacity change from 0 to 128 [ 70.252667][ T5403] ext4 filesystem being mounted at /157/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.296568][ T5413] program syz.0.664 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 70.307531][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.364265][ T5416] program syz.4.667 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 70.503131][ T29] kauditd_printk_skb: 435 callbacks suppressed [ 70.503145][ T29] audit: type=1326 audit(1751165735.421:3344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5431 comm="syz.0.672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f176e33e929 code=0x7ffc0000 [ 70.548916][ T29] audit: type=1326 audit(1751165735.451:3345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5431 comm="syz.0.672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f176e33e929 code=0x7ffc0000 [ 70.572306][ T29] audit: type=1326 audit(1751165735.451:3346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5431 comm="syz.0.672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f176e33e929 code=0x7ffc0000 [ 70.595929][ T29] audit: type=1326 audit(1751165735.451:3347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5431 comm="syz.0.672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=132 compat=0 ip=0x7f176e33e929 code=0x7ffc0000 [ 70.619359][ T29] audit: type=1326 audit(1751165735.451:3348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5431 comm="syz.0.672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f176e33e929 code=0x7ffc0000 [ 70.642828][ T29] audit: type=1326 audit(1751165735.451:3349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5431 comm="syz.0.672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f176e33e929 code=0x7ffc0000 [ 70.666306][ T29] audit: type=1326 audit(1751165735.451:3350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5431 comm="syz.0.672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f176e33e929 code=0x7ffc0000 [ 70.689684][ T29] audit: type=1326 audit(1751165735.451:3351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5431 comm="syz.0.672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f176e33e929 code=0x7ffc0000 [ 70.713138][ T29] audit: type=1326 audit(1751165735.451:3352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5431 comm="syz.0.672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f176e33e929 code=0x7ffc0000 [ 70.736506][ T29] audit: type=1326 audit(1751165735.451:3353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5431 comm="syz.0.672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f176e33e929 code=0x7ffc0000 [ 70.861489][ T5442] loop0: detected capacity change from 0 to 1024 [ 70.916526][ T5442] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.327493][ T5440] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 71.343739][ T5440] EXT4-fs (loop0): Remounting filesystem read-only [ 71.478735][ T5456] loop1: detected capacity change from 0 to 8192 [ 71.511276][ T5462] loop4: detected capacity change from 0 to 1024 [ 71.533668][ T3520] vhci_hcd: connection reset by peer [ 71.549125][ T4344] vhci_hcd: stop threads [ 71.551845][ T5462] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.553433][ T4344] vhci_hcd: release socket [ 71.570175][ T4344] vhci_hcd: disconnect device [ 71.575068][ T3393] usb 6-1: device descriptor read/8, error -110 [ 71.679626][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.689152][ T3393] usb 6-1: new SuperSpeed USB device number 2 using vhci_hcd [ 71.713102][ T3393] usb 6-1: enqueue for inactive port 0 [ 71.724241][ T3393] usb 6-1: enqueue for inactive port 0 [ 71.747179][ T3393] usb 6-1: enqueue for inactive port 0 [ 71.755944][ T5478] macvlan1: entered promiscuous mode [ 71.762577][ T5478] ipvlan0: entered promiscuous mode [ 71.768832][ T5478] ipvlan0: left promiscuous mode [ 71.782154][ T5478] macvlan1: left promiscuous mode [ 71.880213][ T5486] loop0: detected capacity change from 0 to 1024 [ 71.892491][ T5486] EXT4-fs: Ignoring removed i_version option [ 71.942872][ T5486] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.977807][ T5465] chnl_net:caif_netlink_parms(): no params data found [ 72.021259][ T3306] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 88: padding at end of block bitmap is not set [ 72.062497][ T3306] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 72.079123][ T5461] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 72.098221][ T5461] EXT4-fs (loop4): Remounting filesystem read-only [ 72.119323][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.129083][ T5465] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.136189][ T5465] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.162555][ T5465] bridge_slave_0: entered allmulticast mode [ 72.184024][ T5465] bridge_slave_0: entered promiscuous mode [ 72.193368][ T5500] loop0: detected capacity change from 0 to 1024 [ 72.201422][ T5465] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.208533][ T5465] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.218352][ T5465] bridge_slave_1: entered allmulticast mode [ 72.226566][ T5465] bridge_slave_1: entered promiscuous mode [ 72.242264][ T5500] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.277385][ T5465] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.303601][ T5465] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.306620][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.347056][ T5465] team0: Port device team_slave_0 added [ 72.354174][ T5465] team0: Port device team_slave_1 added [ 72.421802][ T5465] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.428956][ T5465] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.455040][ T5465] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.470451][ T5510] loop4: detected capacity change from 0 to 1024 [ 72.479367][ T5510] EXT4-fs: Ignoring removed i_version option [ 72.490807][ T5465] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.497902][ T5465] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.524437][ T5465] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.566920][ T5510] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.581025][ T5499] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 72.596309][ T5499] EXT4-fs (loop0): Remounting filesystem read-only [ 72.622230][ T3313] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 88: padding at end of block bitmap is not set [ 72.632536][ T5465] hsr_slave_0: entered promiscuous mode [ 72.642079][ T3313] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 72.643284][ T5465] hsr_slave_1: entered promiscuous mode [ 72.663060][ T5465] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.670687][ T5465] Cannot create hsr debugfs directory [ 72.679225][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.782336][ T3393] usb usb6-port1: attempt power cycle [ 72.886457][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.897932][ T5465] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 72.913591][ T5465] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 72.940895][ T5465] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 72.960028][ T5465] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 72.970164][ T5535] netlink: 4 bytes leftover after parsing attributes in process `syz.4.702'. [ 73.030227][ T5551] macvlan1: entered promiscuous mode [ 73.036312][ T5551] ipvlan0: entered promiscuous mode [ 73.042191][ T5551] ipvlan0: left promiscuous mode [ 73.052670][ T5551] macvlan1: left promiscuous mode [ 73.164964][ T5465] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.186924][ T5465] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.215564][ T4341] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.217986][ T5562] sd 0:0:1:0: device reset [ 73.222684][ T4341] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.236751][ T4341] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.243866][ T4341] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.295475][ T5565] loop1: detected capacity change from 0 to 512 [ 73.305294][ T5565] journal_path: Lookup failure for './file0/../file0' [ 73.312342][ T5565] EXT4-fs: error: could not find journal device path [ 73.404406][ T5465] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.455072][ T5572] geneve0: entered allmulticast mode [ 73.586324][ T5589] loop1: detected capacity change from 0 to 512 [ 73.610203][ T5589] journal_path: Lookup failure for './file0/../file0' [ 73.617094][ T5589] EXT4-fs: error: could not find journal device path [ 73.627407][ T5465] veth0_vlan: entered promiscuous mode [ 73.657774][ T5465] veth1_vlan: entered promiscuous mode [ 73.687046][ T5465] veth0_macvtap: entered promiscuous mode [ 73.705090][ T5465] veth1_macvtap: entered promiscuous mode [ 73.718725][ T5465] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.745497][ T5465] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.760885][ T5465] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.769782][ T5465] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.779158][ T5465] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.787987][ T5465] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.800690][ T5601] macvlan1: entered promiscuous mode [ 73.807021][ T5601] ipvlan0: entered promiscuous mode [ 73.813360][ T5601] ipvlan0: left promiscuous mode [ 73.824386][ T5604] sd 0:0:1:0: device reset [ 73.843329][ T5601] macvlan1: left promiscuous mode [ 73.857945][ T5607] macvlan1: entered promiscuous mode [ 73.865887][ T5607] ipvlan0: entered promiscuous mode [ 73.871794][ T5607] ipvlan0: left promiscuous mode [ 73.877280][ T5607] macvlan1: left promiscuous mode [ 73.941369][ T5612] sd 0:0:1:0: device reset [ 73.979533][ T5615] program syz.5.682 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 74.006447][ T5618] loop3: detected capacity change from 0 to 1024 [ 74.017345][ T5618] EXT4-fs: Ignoring removed i_version option [ 74.034937][ T5618] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.067189][ T3305] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 88: padding at end of block bitmap is not set [ 74.095302][ T3305] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 74.114703][ T5627] loop0: detected capacity change from 0 to 1024 [ 74.121478][ T5627] EXT4-fs: Ignoring removed i_version option [ 74.135555][ T5627] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.140253][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.191793][ T3306] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 88: padding at end of block bitmap is not set [ 74.208112][ T3306] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 74.221452][ T5635] program syz.3.726 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 74.241235][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.301834][ T5645] loop5: detected capacity change from 0 to 512 [ 74.308940][ T5645] journal_path: Lookup failure for './file0/../file0' [ 74.315944][ T5645] EXT4-fs: error: could not find journal device path [ 74.366036][ T5648] netlink: 4 bytes leftover after parsing attributes in process `syz.1.731'. [ 74.421645][ T5653] loop0: detected capacity change from 0 to 8192 [ 74.438993][ T5656] loop5: detected capacity change from 0 to 1024 [ 74.455411][ T5656] EXT4-fs: Ignoring removed i_version option [ 74.484461][ T5656] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.527191][ T5465] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 88: padding at end of block bitmap is not set [ 74.548905][ T5465] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 74.557002][ T5665] program syz.3.741 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 74.589135][ T5658] netlink: 4 bytes leftover after parsing attributes in process `syz.1.738'. [ 74.599727][ T5465] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.642178][ T3393] usb usb6-port1: unable to enumerate USB device [ 74.681123][ T5679] loop5: detected capacity change from 0 to 512 [ 74.690106][ T5679] journal_path: Lookup failure for './file0/../file0' [ 74.697061][ T5679] EXT4-fs: error: could not find journal device path [ 74.713121][ T5681] loop0: detected capacity change from 0 to 512 [ 74.756566][ T5681] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.772051][ T5685] program syz.1.746 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 74.778425][ T5681] ext4 filesystem being mounted at /187/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.819186][ T5693] program syz.3.749 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 74.829950][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.841326][ T5690] netlink: 4 bytes leftover after parsing attributes in process `syz.5.748'. [ 74.857670][ T5690] bond0: (slave bond_slave_0): Releasing backup interface [ 75.004092][ T5697] loop1: detected capacity change from 0 to 512 [ 75.011022][ T5698] netlink: 96 bytes leftover after parsing attributes in process `syz.0.760'. [ 75.020337][ T5697] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 75.033155][ T5697] EXT4-fs (loop1): 1 truncate cleaned up [ 75.039416][ T5697] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.189468][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.219137][ T5709] netlink: 'syz.3.754': attribute type 2 has an invalid length. [ 75.293772][ T5714] netlink: 156 bytes leftover after parsing attributes in process `syz.3.754'. [ 75.314987][ T5714] netlink: 24 bytes leftover after parsing attributes in process `syz.3.754'. [ 75.385396][ T5714] loop3: detected capacity change from 0 to 2048 [ 75.401072][ T5714] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 75.427196][ T5718] loop1: detected capacity change from 0 to 512 [ 75.455068][ T5718] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.469327][ T5718] ext4 filesystem being mounted at /146/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 75.507813][ T5722] loop0: detected capacity change from 0 to 512 [ 75.514946][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.515433][ T5722] journal_path: Lookup failure for './file0/../file0' [ 75.531034][ T5722] EXT4-fs: error: could not find journal device path [ 75.540952][ T29] kauditd_printk_skb: 444 callbacks suppressed [ 75.540967][ T29] audit: type=1326 audit(1751165740.451:3798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5721 comm="syz.0.758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f176e33e929 code=0x7ffc0000 [ 75.592197][ T29] audit: type=1326 audit(1751165740.481:3799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5721 comm="syz.0.758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f176e33e929 code=0x7ffc0000 [ 75.615545][ T29] audit: type=1326 audit(1751165740.481:3800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5721 comm="syz.0.758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f176e33e929 code=0x7ffc0000 [ 75.637335][ T5728] program syz.1.762 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 75.639067][ T29] audit: type=1326 audit(1751165740.501:3801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5723 comm="syz.1.759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73da92e929 code=0x7ffc0000 [ 75.671957][ T29] audit: type=1326 audit(1751165740.501:3802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5723 comm="syz.1.759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73da92e929 code=0x7ffc0000 [ 75.695456][ T29] audit: type=1326 audit(1751165740.501:3803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5723 comm="syz.1.759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f73da92d290 code=0x7ffc0000 [ 75.719012][ T29] audit: type=1326 audit(1751165740.501:3804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5723 comm="syz.1.759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f73da930157 code=0x7ffc0000 [ 75.742420][ T29] audit: type=1326 audit(1751165740.501:3805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5723 comm="syz.1.759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f73da92e929 code=0x7ffc0000 [ 75.765726][ T29] audit: type=1326 audit(1751165740.501:3806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5723 comm="syz.1.759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f73da930157 code=0x7ffc0000 [ 75.789078][ T29] audit: type=1326 audit(1751165740.501:3807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5723 comm="syz.1.759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f73da92d58a code=0x7ffc0000 [ 76.027205][ T5746] loop1: detected capacity change from 0 to 512 [ 76.075857][ T5751] netlink: 4 bytes leftover after parsing attributes in process `syz.0.767'. [ 76.077995][ T5746] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.097402][ T5746] ext4 filesystem being mounted at /152/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.138546][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.181289][ T5759] loop0: detected capacity change from 0 to 512 [ 76.189650][ T5759] journal_path: Lookup failure for './file0/../file0' [ 76.196617][ T5759] EXT4-fs: error: could not find journal device path [ 76.279449][ T5766] macvlan1: entered promiscuous mode [ 76.294213][ T5765] loop3: detected capacity change from 0 to 1024 [ 76.307435][ T5766] ipvlan0: entered promiscuous mode [ 76.326404][ T5766] ipvlan0: left promiscuous mode [ 76.341553][ T5765] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.353833][ T5766] macvlan1: left promiscuous mode [ 76.362152][ T5765] ext4 filesystem being mounted at /165/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.394710][ T5778] netlink: 'syz.0.778': attribute type 2 has an invalid length. [ 76.522225][ T5785] netlink: 156 bytes leftover after parsing attributes in process `syz.0.778'. [ 76.531261][ T5785] netlink: 24 bytes leftover after parsing attributes in process `syz.0.778'. [ 76.537101][ T5788] loop4: detected capacity change from 0 to 1024 [ 76.549458][ T5788] EXT4-fs: Ignoring removed i_version option [ 76.549503][ T5789] loop5: detected capacity change from 0 to 512 [ 76.574758][ T5791] loop1: detected capacity change from 0 to 512 [ 76.581580][ T5789] journal_path: Lookup failure for './file0/../file0' [ 76.588484][ T5789] EXT4-fs: error: could not find journal device path [ 76.595742][ T5791] journal_path: Lookup failure for './file0/../file0' [ 76.602666][ T5791] EXT4-fs: error: could not find journal device path [ 76.636821][ T5788] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.686987][ T3313] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 88: padding at end of block bitmap is not set [ 76.718599][ T5778] loop0: detected capacity change from 0 to 2048 [ 76.726436][ T5778] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 76.810745][ T3313] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 76.839623][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.870532][ T5808] loop5: detected capacity change from 0 to 128 [ 76.974134][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.048759][ T4342] bio_check_eod: 103 callbacks suppressed [ 77.048776][ T4342] kworker/u8:23: attempt to access beyond end of device [ 77.048776][ T4342] loop5: rw=1, sector=145, nr_sectors = 8 limit=128 [ 77.071376][ T4342] kworker/u8:23: attempt to access beyond end of device [ 77.071376][ T4342] loop5: rw=1, sector=161, nr_sectors = 8 limit=128 [ 77.085237][ T4342] kworker/u8:23: attempt to access beyond end of device [ 77.085237][ T4342] loop5: rw=1, sector=177, nr_sectors = 8 limit=128 [ 77.099870][ T4342] kworker/u8:23: attempt to access beyond end of device [ 77.099870][ T4342] loop5: rw=1, sector=193, nr_sectors = 8 limit=128 [ 77.113541][ T4342] kworker/u8:23: attempt to access beyond end of device [ 77.113541][ T4342] loop5: rw=1, sector=209, nr_sectors = 8 limit=128 [ 77.127245][ T4342] kworker/u8:23: attempt to access beyond end of device [ 77.127245][ T4342] loop5: rw=1, sector=225, nr_sectors = 8 limit=128 [ 77.140946][ T4342] kworker/u8:23: attempt to access beyond end of device [ 77.140946][ T4342] loop5: rw=1, sector=241, nr_sectors = 8 limit=128 [ 77.155487][ T4342] kworker/u8:23: attempt to access beyond end of device [ 77.155487][ T4342] loop5: rw=1, sector=257, nr_sectors = 8 limit=128 [ 77.169198][ T4342] kworker/u8:23: attempt to access beyond end of device [ 77.169198][ T4342] loop5: rw=1, sector=273, nr_sectors = 8 limit=128 [ 77.182865][ T4342] kworker/u8:23: attempt to access beyond end of device [ 77.182865][ T4342] loop5: rw=1, sector=289, nr_sectors = 8 limit=128 [ 77.219513][ T5826] loop4: detected capacity change from 0 to 1024 [ 77.266195][ T5830] loop3: detected capacity change from 0 to 512 [ 77.273641][ T5826] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.289960][ T5828] loop5: detected capacity change from 0 to 512 [ 77.304070][ T5830] journal_path: Lookup failure for './file0/../file0' [ 77.310921][ T5830] EXT4-fs: error: could not find journal device path [ 77.335940][ T5826] ext4 filesystem being mounted at /179/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 77.349403][ T5828] journal_path: Lookup failure for './file0/../file0' [ 77.356323][ T5828] EXT4-fs: error: could not find journal device path [ 77.432915][ T5837] loop1: detected capacity change from 0 to 512 [ 77.451388][ T5840] netlink: 'syz.3.799': attribute type 2 has an invalid length. [ 77.460875][ T5837] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.473753][ T5837] ext4 filesystem being mounted at /159/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 77.498520][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.532809][ T5843] loop3: detected capacity change from 0 to 2048 [ 77.539521][ T5843] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 77.767662][ T5861] loop0: detected capacity change from 0 to 1024 [ 77.777166][ T5861] EXT4-fs: Ignoring removed i_version option [ 77.818325][ T5861] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.859916][ T3306] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 88: padding at end of block bitmap is not set [ 77.881118][ T5868] loop1: detected capacity change from 0 to 512 [ 77.889745][ T3306] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 77.891044][ T5868] journal_path: Lookup failure for './file0/../file0' [ 77.905483][ T5868] EXT4-fs: error: could not find journal device path [ 77.925252][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.940020][ T5866] geneve0: entered allmulticast mode [ 77.946337][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.985362][ T5873] loop0: detected capacity change from 0 to 512 [ 78.016535][ T5873] journal_path: Lookup failure for './file0/../file0' [ 78.023506][ T5873] EXT4-fs: error: could not find journal device path [ 78.196625][ T5890] __nla_validate_parse: 3 callbacks suppressed [ 78.196644][ T5890] netlink: 8 bytes leftover after parsing attributes in process `syz.0.819'. [ 78.238963][ T5890] netlink: 8 bytes leftover after parsing attributes in process `syz.0.819'. [ 78.268942][ T5896] loop4: detected capacity change from 0 to 512 [ 78.356818][ T5896] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.382385][ T5896] ext4 filesystem being mounted at /181/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 78.455088][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.478419][ T5909] netlink: 4 bytes leftover after parsing attributes in process `syz.3.821'. [ 78.537912][ T5914] loop0: detected capacity change from 0 to 512 [ 78.546272][ T5914] journal_path: Lookup failure for './file0/../file0' [ 78.553166][ T5914] EXT4-fs: error: could not find journal device path [ 78.627921][ T5916] netlink: 4 bytes leftover after parsing attributes in process `syz.4.823'. [ 78.700948][ T5930] loop4: detected capacity change from 0 to 512 [ 78.723514][ T5930] journal_path: Lookup failure for './file0/../file0' [ 78.730404][ T5930] EXT4-fs: error: could not find journal device path [ 78.768423][ T5938] netlink: 'syz.3.831': attribute type 2 has an invalid length. [ 78.823976][ T5941] macvlan1: entered promiscuous mode [ 78.834965][ T5941] ipvlan0: entered promiscuous mode [ 78.836958][ T5942] netlink: 156 bytes leftover after parsing attributes in process `syz.3.831'. [ 78.841169][ T5941] ipvlan0: left promiscuous mode [ 78.857024][ T5941] macvlan1: left promiscuous mode [ 78.863730][ T5942] netlink: 24 bytes leftover after parsing attributes in process `syz.3.831'. [ 78.866787][ T5944] loop0: detected capacity change from 0 to 512 [ 78.901786][ T5944] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.914548][ T5944] ext4 filesystem being mounted at /211/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 78.939446][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.964672][ T5949] loop1: detected capacity change from 0 to 1024 [ 78.983831][ T5942] loop3: detected capacity change from 0 to 2048 [ 78.993357][ T5949] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.006823][ T5942] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 79.020001][ T5949] ext4 filesystem being mounted at /168/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.077460][ T5956] loop4: detected capacity change from 0 to 512 [ 79.093600][ T5956] journal_path: Lookup failure for './file0/../file0' [ 79.100489][ T5956] EXT4-fs: error: could not find journal device path [ 79.263822][ T5957] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 79.395732][ T5973] program syz.4.854 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 79.410456][ T5975] sd 0:0:1:0: device reset [ 79.418329][ T5975] vhci_hcd vhci_hcd.0: port 0 already used [ 79.745532][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.799749][ T5996] loop3: detected capacity change from 0 to 512 [ 79.845788][ T5996] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.858821][ T5996] ext4 filesystem being mounted at /176/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.918808][ T6002] loop5: detected capacity change from 0 to 512 [ 79.925753][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.935101][ T5994] loop1: detected capacity change from 0 to 2048 [ 79.964103][ T6002] journal_path: Lookup failure for './file0/../file0' [ 79.971041][ T6002] EXT4-fs: error: could not find journal device path [ 79.996462][ T6004] program syz.0.856 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 80.006354][ T5994] EXT4-fs (loop1): invalid inodes per group: 1 [ 80.006354][ T5994] [ 80.083267][ T6008] netlink: 'syz.5.857': attribute type 2 has an invalid length. [ 80.173184][ T6016] netlink: 156 bytes leftover after parsing attributes in process `syz.5.857'. [ 80.212551][ T6016] netlink: 24 bytes leftover after parsing attributes in process `syz.5.857'. [ 80.244016][ T6006] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 80.257649][ T6021] program syz.0.861 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 80.276190][ T6019] loop5: detected capacity change from 0 to 2048 [ 80.294138][ T6019] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 80.491692][ T6033] loop5: detected capacity change from 0 to 512 [ 80.508327][ T6033] journal_path: Lookup failure for './file0/../file0' [ 80.513168][ T6036] macvlan1: entered promiscuous mode [ 80.515433][ T6033] EXT4-fs: error: could not find journal device path [ 80.521646][ T6036] ipvlan0: entered promiscuous mode [ 80.573651][ T29] kauditd_printk_skb: 285 callbacks suppressed [ 80.573680][ T29] audit: type=1326 audit(1751165745.481:4093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6032 comm="syz.5.867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59ec4de929 code=0x7ffc0000 [ 80.574165][ T6036] ipvlan0: left promiscuous mode [ 80.580340][ T29] audit: type=1326 audit(1751165745.491:4094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6032 comm="syz.5.867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f59ec4de929 code=0x7ffc0000 [ 80.609882][ T6039] program syz.0.868 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 80.680771][ T29] audit: type=1326 audit(1751165745.551:4095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6032 comm="syz.5.867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59ec4de929 code=0x7ffc0000 [ 80.704444][ T29] audit: type=1326 audit(1751165745.551:4096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6032 comm="syz.5.867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59ec4de929 code=0x7ffc0000 [ 80.728195][ T6036] macvlan1: left promiscuous mode [ 80.763963][ T6053] loop5: detected capacity change from 0 to 512 [ 80.771081][ T6052] loop0: detected capacity change from 0 to 512 [ 80.788599][ T6052] EXT4-fs (loop0): orphan cleanup on readonly fs [ 80.791794][ T6053] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.812193][ T6053] ext4 filesystem being mounted at /26/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.857025][ T6052] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.874: bg 0: block 248: padding at end of block bitmap is not set [ 80.871866][ T6052] Quota error (device loop0): write_blk: dquota write failed [ 80.879377][ T6052] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 80.880680][ T5465] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.889414][ T6052] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.874: Failed to acquire dquot type 1 [ 80.915109][ T6060] loop4: detected capacity change from 0 to 512 [ 80.922114][ T6060] EXT4-fs: Ignoring removed nomblk_io_submit option [ 80.932923][ T6052] EXT4-fs (loop0): 1 truncate cleaned up [ 80.940676][ T29] audit: type=1326 audit(1751165745.841:4097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6062 comm="syz.1.878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73da92e929 code=0x7ffc0000 [ 80.964078][ T29] audit: type=1326 audit(1751165745.841:4098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6062 comm="syz.1.878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73da92e929 code=0x7ffc0000 [ 80.987610][ T29] audit: type=1326 audit(1751165745.851:4099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6062 comm="syz.1.878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f73da92d290 code=0x7ffc0000 [ 81.010975][ T29] audit: type=1326 audit(1751165745.851:4100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6062 comm="syz.1.878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f73da930157 code=0x7ffc0000 [ 81.034813][ T6071] netlink: 'syz.3.877': attribute type 2 has an invalid length. [ 81.062796][ T6052] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 81.084513][ T6052] EXT4-fs error (device loop0): ext4_lookup:1791: inode #2: comm syz.0.874: deleted inode referenced: 12 [ 81.097314][ T6060] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.117553][ T6060] ext4 filesystem being mounted at /198/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 81.128698][ T6074] loop5: detected capacity change from 0 to 512 [ 81.166139][ T6052] syz.0.874 (6052) used greatest stack depth: 9304 bytes left [ 81.194977][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.195193][ T6074] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.216682][ T6077] loop3: detected capacity change from 0 to 2048 [ 81.232178][ T6077] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 81.264825][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.289749][ T6074] ext4 filesystem being mounted at /28/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.325027][ T6086] program syz.0.882 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 81.365372][ T5465] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.458164][ T6091] loop4: detected capacity change from 0 to 512 [ 81.485788][ T6091] ext4 filesystem being mounted at /199/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.607298][ T6098] macvlan1: entered promiscuous mode [ 81.629966][ T6098] ipvlan0: entered promiscuous mode [ 81.649042][ T6098] ipvlan0: left promiscuous mode [ 81.663371][ T6098] macvlan1: left promiscuous mode [ 81.768617][ T6107] program syz.0.892 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 81.928886][ T6120] program syz.4.897 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 81.947232][ T6124] loop3: detected capacity change from 0 to 512 [ 81.965754][ T6124] EXT4-fs: Ignoring removed nomblk_io_submit option [ 81.995138][ T6124] ext4 filesystem being mounted at /183/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 82.035078][ T6124] FAULT_INJECTION: forcing a failure. [ 82.035078][ T6124] name failslab, interval 1, probability 0, space 0, times 0 [ 82.047957][ T6124] CPU: 0 UID: 0 PID: 6124 Comm: syz.3.898 Tainted: G W 6.16.0-rc3-syzkaller-00319-gded779017ad7 #0 PREEMPT(voluntary) [ 82.048036][ T6124] Tainted: [W]=WARN [ 82.048044][ T6124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 82.048100][ T6124] Call Trace: [ 82.048108][ T6124] [ 82.048118][ T6124] __dump_stack+0x1d/0x30 [ 82.048161][ T6124] dump_stack_lvl+0xe8/0x140 [ 82.048187][ T6124] dump_stack+0x15/0x1b [ 82.048237][ T6124] should_fail_ex+0x265/0x280 [ 82.048276][ T6124] should_failslab+0x8c/0xb0 [ 82.048307][ T6124] __kmalloc_noprof+0xa5/0x3e0 [ 82.048340][ T6124] ? copy_splice_read+0xc2/0x5f0 [ 82.048406][ T6124] copy_splice_read+0xc2/0x5f0 [ 82.048516][ T6124] ? __pfx_ext4_file_splice_read+0x10/0x10 [ 82.048601][ T6124] splice_direct_to_actor+0x290/0x680 [ 82.048667][ T6124] ? __pfx_direct_splice_actor+0x10/0x10 [ 82.048711][ T6124] do_splice_direct+0xda/0x150 [ 82.048746][ T6124] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 82.048790][ T6124] do_sendfile+0x380/0x650 [ 82.048834][ T6124] __x64_sys_sendfile64+0x105/0x150 [ 82.048863][ T6124] x64_sys_call+0xb39/0x2fb0 [ 82.048888][ T6124] do_syscall_64+0xd2/0x200 [ 82.048910][ T6124] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 82.048960][ T6124] ? clear_bhb_loop+0x40/0x90 [ 82.048980][ T6124] ? clear_bhb_loop+0x40/0x90 [ 82.049008][ T6124] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.049034][ T6124] RIP: 0033:0x7efe7557e929 [ 82.049060][ T6124] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 82.049147][ T6124] RSP: 002b:00007efe73be7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 82.049223][ T6124] RAX: ffffffffffffffda RBX: 00007efe757a5fa0 RCX: 00007efe7557e929 [ 82.049235][ T6124] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000007 [ 82.049247][ T6124] RBP: 00007efe73be7090 R08: 0000000000000000 R09: 0000000000000000 [ 82.049260][ T6124] R10: 0000000800000009 R11: 0000000000000246 R12: 0000000000000001 [ 82.049271][ T6124] R13: 0000000000000000 R14: 00007efe757a5fa0 R15: 00007fff639cf088 [ 82.049291][ T6124] [ 82.291794][ T6133] loop5: detected capacity change from 0 to 128 [ 82.346033][ T6140] macvlan1: entered promiscuous mode [ 82.353210][ T6140] ipvlan0: entered promiscuous mode [ 82.365349][ T6140] ipvlan0: left promiscuous mode [ 82.370746][ T6140] macvlan1: left promiscuous mode [ 82.396774][ T6142] loop0: detected capacity change from 0 to 512 [ 82.425434][ T6142] ext4 filesystem being mounted at /226/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 82.444599][ T6149] bio_check_eod: 103 callbacks suppressed [ 82.444612][ T6149] syz.5.901: attempt to access beyond end of device [ 82.444612][ T6149] loop5: rw=1, sector=649, nr_sectors = 8 limit=128 [ 82.477407][ T6149] syz.5.901: attempt to access beyond end of device [ 82.477407][ T6149] loop5: rw=1, sector=665, nr_sectors = 8 limit=128 [ 82.493835][ T6149] syz.5.901: attempt to access beyond end of device [ 82.493835][ T6149] loop5: rw=1, sector=681, nr_sectors = 8 limit=128 [ 82.531689][ T6149] syz.5.901: attempt to access beyond end of device [ 82.531689][ T6149] loop5: rw=1, sector=697, nr_sectors = 8 limit=128 [ 82.546980][ T6149] syz.5.901: attempt to access beyond end of device [ 82.546980][ T6149] loop5: rw=1, sector=713, nr_sectors = 8 limit=128 [ 82.584818][ T6149] syz.5.901: attempt to access beyond end of device [ 82.584818][ T6149] loop5: rw=1, sector=729, nr_sectors = 8 limit=128 [ 82.612207][ T6158] program syz.3.908 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 82.626017][ T6149] syz.5.901: attempt to access beyond end of device [ 82.626017][ T6149] loop5: rw=1, sector=745, nr_sectors = 8 limit=128 [ 82.643654][ T6149] syz.5.901: attempt to access beyond end of device [ 82.643654][ T6149] loop5: rw=1, sector=761, nr_sectors = 8 limit=128 [ 82.666956][ T6149] syz.5.901: attempt to access beyond end of device [ 82.666956][ T6149] loop5: rw=1, sector=777, nr_sectors = 8 limit=128 [ 82.688644][ T6149] syz.5.901: attempt to access beyond end of device [ 82.688644][ T6149] loop5: rw=1, sector=793, nr_sectors = 8 limit=128 [ 82.760243][ T6166] program syz.0.912 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 82.797904][ T6170] program syz.4.913 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 82.869107][ T6176] loop3: detected capacity change from 0 to 1024 [ 83.021058][ T6186] macvlan1: entered promiscuous mode [ 83.035633][ T6186] ipvlan0: entered promiscuous mode [ 83.070356][ T6186] ipvlan0: left promiscuous mode [ 83.085547][ T6186] macvlan1: left promiscuous mode [ 83.155288][ T6192] loop4: detected capacity change from 0 to 8192 [ 83.176828][ T6175] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 83.220470][ T6196] loop0: detected capacity change from 0 to 512 [ 83.232705][ T6196] journal_path: Lookup failure for './file0/../file0' [ 83.239621][ T6196] EXT4-fs: error: could not find journal device path [ 83.252277][ T6175] EXT4-fs (loop3): Remounting filesystem read-only [ 83.288176][ T6194] loop1: detected capacity change from 0 to 512 [ 83.356352][ T6203] program syz.5.930 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 83.394468][ T6207] program syz.0.931 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 83.452945][ T6194] ext4 filesystem being mounted at /182/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.469547][ T6213] loop4: detected capacity change from 0 to 512 [ 83.487391][ T6213] ext4 filesystem being mounted at /209/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.685251][ T6226] loop1: detected capacity change from 0 to 8192 [ 83.708595][ T6232] loop4: detected capacity change from 0 to 512 [ 83.718339][ T6232] journal_path: Lookup failure for './file0/../file0' [ 83.725373][ T6232] EXT4-fs: error: could not find journal device path [ 83.824701][ T3585] ================================================================== [ 83.832842][ T3585] BUG: KCSAN: data-race in fill_mg_cmtime / shmem_mknod [ 83.839811][ T3585] [ 83.842157][ T3585] write to 0xffff8881045fc6c4 of 4 bytes by task 3292 on cpu 1: [ 83.849815][ T3585] shmem_mknod+0x137/0x180 [ 83.854266][ T3585] shmem_create+0x34/0x50 [ 83.858618][ T3585] path_openat+0x1102/0x2170 [ 83.863247][ T3585] do_filp_open+0x109/0x230 [ 83.867791][ T3585] do_sys_openat2+0xa6/0x110 [ 83.872441][ T3585] __x64_sys_openat+0xf2/0x120 [ 83.877247][ T3585] x64_sys_call+0x1af/0x2fb0 [ 83.881863][ T3585] do_syscall_64+0xd2/0x200 [ 83.886403][ T3585] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.892334][ T3585] [ 83.894689][ T3585] read to 0xffff8881045fc6c4 of 4 bytes by task 3585 on cpu 0: [ 83.902260][ T3585] fill_mg_cmtime+0x5b/0x260 [ 83.906891][ T3585] generic_fillattr+0x24a/0x340 [ 83.911774][ T3585] shmem_getattr+0x181/0x200 [ 83.916386][ T3585] vfs_getattr_nosec+0x143/0x1e0 [ 83.921363][ T3585] vfs_statx+0x113/0x390 [ 83.925634][ T3585] vfs_fstatat+0x115/0x170 [ 83.930070][ T3585] __se_sys_newfstatat+0x55/0x260 [ 83.935206][ T3585] __x64_sys_newfstatat+0x55/0x70 [ 83.940265][ T3585] x64_sys_call+0x2c22/0x2fb0 [ 83.944973][ T3585] do_syscall_64+0xd2/0x200 [ 83.949499][ T3585] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.955415][ T3585] [ 83.957758][ T3585] value changed: 0x2cc3d1d2 -> 0x2ccbb3a5 [ 83.963487][ T3585] [ 83.965829][ T3585] Reported by Kernel Concurrency Sanitizer on: [ 83.972006][ T3585] CPU: 0 UID: 0 PID: 3585 Comm: udevd Tainted: G W 6.16.0-rc3-syzkaller-00319-gded779017ad7 #0 PREEMPT(voluntary) [ 83.985588][ T3585] Tainted: [W]=WARN [ 83.989410][ T3585] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 83.999483][ T3585] ================================================================== [ 84.109281][ T6246] loop0: detected capacity change from 0 to 512 [ 84.149781][ T6246] ext4 filesystem being mounted at /238/file0 supports timestamps until 2038-01-19 (0x7fffffff)