last executing test programs: 42.679931757s ago: executing program 4 (id=430): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040040) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x60000000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x74}, 0x1, 0xfffffffffffffff5, 0x0, 0x24004005}, 0x8040) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f0000001100)=ANY=[@ANYBLOB="440300000a0a030000000000000000000000000a18031280a00101800e000100696d6d6564696174650000008c010280080001400000000408000140000000080800014000000014080001400000001264010280ff000100428f07b1209546b28695cf4575a8afa118fc35732ca37be5de0222b59f68bef6464ab4b9140716dbe7c79ce5b0b5923dbfe38e792f0038ee4aead4f779dacd24281439fb1ae80e7f58834b76b33a0e2d0ab8e1986316f7c8720ad541ca8b6532fa65c21c993de8a5448773db5d0ca7c7a37deda7c35fadc8e776ba905887c64805a347fdfa10d424751e28e05c0c6bb3e51bc256e4c91287b69eb5ad4230979d33eaea2c8a44466e0aef78a634528aca2df68c686ca299dae9c62444a5f85792ece5c828a85e5b557ddc3b6a01775fa8e4877c844de411f867dc84312b6310dc452d432ab1645b8b384307011aa696f3f43fc2ddee8f7ef8813b85005d000100c5316bd5a358ed162640f2d6c366e59387837b5b369df10aaf0adec728f76552529af6926543c4010a8c8f1f92ac06769151b4014618aaff904ca5a3fa58085e42b68578837877cb06202f12857729bbeaceceb972ebf9d45f000000040002801000018009000100686173680000000020000180080001006669620014000280080003400000000408000140000000002c0001800c00010062697477697365001c00028008000640000000010800034000000007080001656f7264657200000034000280080001400000000a0800024000000000080002400000000f080005400000002c08000440000000d70800034000000001600001800a0001006d617463680000005000028035000300e41fdce0556e95e2cead1f437ceaf8609abd8f9ccdeb732a9bd99b44d5fb7b6c6f98ea64b9bb4a62c5a7a395795489569b00000008000240000000030900010069636d700000000060000180080001006e617400540002800800074000000088080005400000000808000240000000000800034000000016080006400000000c08000140000000010800044000000012080002400000000a0800034000000000080006400000000d100001800a00010072656469720000000900020073797a31000000000900020073797a3000000000f785b3273175027a7728fced10ea6c3073dbfca4b2a6db356c2558e6f6da9b8be89e6370507a30bb9fb9e5795ce2efea7962fb6447485c2ca36fb79c256467d50c6598e4e9a3c4976f4ff2dbedf602a1eb71bccd9953f44bbffacd3a"], 0x344}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) unshare(0x26020480) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x80001, 0x0) r1 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x200, 0x0, 0x1}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0}) io_uring_enter(r1, 0x3c0, 0x9e8, 0x25, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000280)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@bh}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xfe, 0x44d, &(0x7f0000000900)="$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") r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1900000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000e17a00000000000000d865390f89434e3e40c5666ebc050000000000000004d5f53f4e5b2591a4823b3f1a5fc7b6f738f26cc5e58af5c35bfac18c3157ce407061fa0cc73b3ccaec711e38ae97a325ce7fdc1e0a73aec6534fafcc04ff55b140a8af9a494fbf45f38d6999826bff8aed97d34f9b4d663b774eb50bb046d2222a937a2e52e0031d451fa7fc05a86692dfb2de77329262ac96384fb6aafc5d43db5811d1eb16304c13f436e018e604f93717e01b291396c3c4beaff850729c56ce35c54034ceac99"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r4, @ANYBLOB="00000000000000cbc189be00000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000200)={0x6c, r7, 0x1, 0x170bd2b, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x1000, 0x0, @dev={0xfe, 0x80, '\x00', 0x10}, 0xf8}}, {0x20, 0x2, @in6={0xa, 0x0, 0x5, @mcast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xb, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2d00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000300)='kmem_cache_free\x00', r8}, 0x18) open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x80000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r4}, &(0x7f0000000000), &(0x7f00000005c0)=r5}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x8040, 0x0) ioctl$TCSETS(r9, 0x40045431, &(0x7f0000000040)={0x0, 0x2, 0x8, 0x1000009, 0x0, "ff00f7000000000000000000af3730ffffffff"}) r10 = syz_open_pts(r9, 0x141601) ioctl$TIOCGWINSZ(r10, 0x5413, &(0x7f0000000140)) 42.493077742s ago: executing program 4 (id=432): r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x200, 0x0) r1 = openat(r0, &(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000f00)='kfree\x00', 0xffffffffffffffff, 0x0, 0xffffdffffffffffe}, 0x18) (async) sendfile(r1, r0, 0x0, 0x6) 42.441517496s ago: executing program 4 (id=434): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x13) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000003c0)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x10, 0x0, &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x5, 0x6, 0x8, 0xad, 0x0, 0xffffffffffffffff, 0x4000000}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0xd, 0x2, 0x4, 0x4002, 0x5, r3, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x8000000}, 0x48) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x5) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000100)={0xfffffff8, 0xfffffe00, 0xe57, 0x1, 0x7, "3ce6920887000000000000000d00", 0x4, 0x1ff}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x80000001}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffee1, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r7}, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_SET(r4, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000005f00)={0x30, r5, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x4}]}, 0x30}}, 0x4004) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0x8) socket$nl_route(0x10, 0x3, 0x0) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r0, 0x8008f511, &(0x7f0000000080)) 42.310204426s ago: executing program 4 (id=439): syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000840)='./file0\x00', 0x0, &(0x7f0000000340)=ANY=[], 0x14, 0x2f9, &(0x7f0000000880)="$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") r0 = syz_clone(0x4000, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x210000, &(0x7f0000000280)={[{@user_xattr}, {@noquota}, {@dioread_nolock}, {@jqfmt_vfsv1}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x70}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@stripe={'stripe', 0x3d, 0x20}}, {@bsdgroups}, {@max_batch_time={'max_batch_time', 0x3d, 0x3fe}}, {@user_xattr}, {@noinit_itable}]}, 0x3, 0x583, &(0x7f0000000800)="$eJzs3c9rHGUfAPDvbHb7+32bQilvX15eCj1Yqd00iT8qeKhH0WJBPdclmYaSTbdkN6WJBduDvXiRIohYEO969+ChePHoX1HQQpES9OBlZTazybbZJJt0Y2L384Fpn2dmNs8888z34Zl9dpgABtaJ7J9CxPGI+CyJONyxrRj5xhNL+y0+vjmRLUk0m+/9lkSSr2vvn+T/H8wz/4mIHz+JOF1YXW59fmG6Uq2ms3l+pDFzbaQ+v3DmykxlKp1Kr46Nj597ZXzs9dde7VtdX7z4x5fv3n/r3KcnF7/47uGRu0mcj0P5ts56PINbnZkTzWZ+Tkpx/qkdR/tQ2G6S7PQBsCVDeZyXIuJ46XCpHfXA8+/jiGgCAyrZZPzv1V/Ac6I9Dmjf2/fpPvgf49GbSzdAq+tfXPpuJPa17o0OLCZP3Bll97vDfSg/K+P7X+/dzZbo3/cQABu6dTsizhaLq/u/JO//tu5sD/s8XYb+D/4+97Pxz0vdxj+F5fFPdBn/HOwSu1uxcfwXHvahmDVl4783uo5/lyethofy3L9aY75ScvlKNc36tn9HxKko7c3y683nnFt80FxrW+f4L1uy8ttjwfw4Hhb3PvmZyUqj8ix17vTodsR/u45/k+X2T7q0f3Y+PuixjGPpvf+vtW3j+m+v5jcRL3Rt/5UZrWT9+cmR1vUw0r4qVvv9zrGf1yq/e/1/+mEbqtpV1v4H1q//cNI5X1vffBlf7/szXWvbVq//Pcn7rfSefN2NSqMxOxqxJ3ln9fqxlc+28+39s/qfOrl+/9ft+t8fER/2WP87R7/939brv72y+k9uqv03n3jw9kdfrVV+b+3/cit1Kl/TS//X6wE+y7kDAAAAAACA3aYQEYciKZRjX54uFMrlpd93HI0DhWqt3jh9uTZ3dTJaz8oOR6nQnuk+3PF7iNH897Dt/NhT+fGIOBIRnw/tb+XLE7Xq5E5XHgAAAAAAAAAAAAAAAAAAAHaJg8vP/8cTz/9nfhna6aMDtl1x6f3fwADa8JX//XjTE7ArbRj/wHNL/MPgEv8wuMQ/DKTWFJ/4h8El/mFwiX8YXOIfAAAAAAAAAAAAAAAAAAAAAAAAAAAA+urihQvZ0lx8fHMiy09en5+brl0/M5nWp8szcxPlidrstfJUrTZVTcsTtZmN/l61Vrs2OhZzN0Yaab0xUp9fuDRTm7vauHRlpjKVXkq9ZxwAAAAAAAAAAAAAAAAAAABWq88vTFeq1XS2D4lStZoWIqKXnSP6VOgAJrJ2u1Xs7TxvTyKJlTXF3XJaJPqa2OmeCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABW/BUAAP//2SsyHQ==") r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r2, &(0x7f0000000140)='2', 0xfdef, 0xfecc) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYRESDEC], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES16=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r4 = socket(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e24, 0xff, @remote, 0xfff}, 0x1c) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x4e64, 0x3, @ipv4={'\x00', '\xff\xff', @empty}, 0x80000002}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080200000e"], 0x50) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x8010, 0xffffffffffffffff, 0xdbd16000) bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYRESOCT=r5, @ANYBLOB="d9fe27caf8cccd8ed0612aedd7fa1407369f7e6d22b6938f6fa8aa7738513d0111374fede34069c85c62267985611332a7b24e7b48e595501c864e6e1ebb1ce420c3f71f76d5afa848f4dd2564bdadf80efd3f0e545ab405c9316e28a0ea555888251001d009895cefc7ddef4660b4cfaeca6865bea958e3590a5be8d97d9939720eb791e8d05066f7dff24b0be54e3ab5d6fd14c894755f89493244156d73a0213681f29daa9893848416324ea5f5ffb4e09193319170adc33309bf1e2d849363843fe9ec39103116bc32e115d9bfdd9b079008ff9c3e", @ANYRES32=r0, @ANYBLOB="c9fa3f578fbe016418525285a87004620013e68d3fb3968df27b2afff60b6459e17cbcf2244ec96704cf6a948e3e5195d982acb99eb450a0d861a05e6e7b98cef397f499f635252d7e53540622e97630637d7c545561db4e45a32928bf39f3d9b4186054912f7eee6d7c12a736f7c7f33ec2a9322814f0b92ab684263393667071450bc3cf681a609d6ee4f01c11f8fff8ca520f7302d37cf98da5da9a7ed447440e0d1c62569959ef", @ANYRESDEC=0x0, @ANYRES64=r3, @ANYRESOCT=0x0], 0x50) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x68}, 0x1, 0x0, 0x0, 0x814}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a48000000160a01080000000000000000020000000900020073797a30000000000900010073797a30000000001c000380180003800d0001006261746164765f736c"], 0x70}}, 0x24040880) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x17, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x40, 0x7ffc0002}]}) r8 = syz_open_dev$usbmon(&(0x7f0000000000), 0x6, 0x200) read$usbmon(r8, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000240), 0x10, 0x80100) syz_open_dev$tty1(0xc, 0x4, 0x4) getpriority(0x1, r0) r9 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4207, r9) ptrace$peekuser(0x3, r9, 0x380) 41.668879549s ago: executing program 4 (id=446): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0x14, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8ab8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xb, &(0x7f0000000040)=@framed={{0x18, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00'}, 0x94) 41.516885961s ago: executing program 4 (id=451): creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYRESOCT, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4e, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20) syz_io_uring_setup(0x5c6, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000580)) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) timer_create(0x2, &(0x7f0000000000)={0x0, 0x0, 0x1, @thr={&(0x7f0000000640)="8ec9cb18ca83a556e3f4d922bd8d367db947e2e6d92a2211a06bd32ec8059c0965a6cf0b401282e6e896c54a994b5e60bfe06c56a620a849d60677ce154bb8406a080fafdbb0466fb9c5ff083576df341bd09a08f0369452", &(0x7f0000000380)="34e69d59bb42d7a4ad4851a3b57179aa8d0f28dafb5689cdc53182b46500b3912fb80574d548c28133ae45934e736bcb7add65f45547444274ceb2fdb6e7b8ff773375fee5b1d09d8a5eb3b7376fe4e77780e0bfa63440"}}, &(0x7f0000044000)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00'}, 0x9) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 41.492880063s ago: executing program 32 (id=451): creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYRESOCT, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4e, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20) syz_io_uring_setup(0x5c6, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000580)) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) timer_create(0x2, &(0x7f0000000000)={0x0, 0x0, 0x1, @thr={&(0x7f0000000640)="8ec9cb18ca83a556e3f4d922bd8d367db947e2e6d92a2211a06bd32ec8059c0965a6cf0b401282e6e896c54a994b5e60bfe06c56a620a849d60677ce154bb8406a080fafdbb0466fb9c5ff083576df341bd09a08f0369452", &(0x7f0000000380)="34e69d59bb42d7a4ad4851a3b57179aa8d0f28dafb5689cdc53182b46500b3912fb80574d548c28133ae45934e736bcb7add65f45547444274ceb2fdb6e7b8ff773375fee5b1d09d8a5eb3b7376fe4e77780e0bfa63440"}}, &(0x7f0000044000)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00'}, 0x9) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 4.403490993s ago: executing program 3 (id=1102): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x18) clock_getres(0xffffffea, 0x0) (fail_nth: 1) 4.256910315s ago: executing program 3 (id=1105): writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000100)="390000fa461ad7e48489bffa560200130011186809fc071200000f", 0x1b}], 0x1) r0 = syz_open_dev$sg(0x0, 0x0, 0x22c01) setreuid(0x0, 0xee00) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000000c0)=ANY=[@ANYRES64=r0]) 4.206125419s ago: executing program 3 (id=1107): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r3, 0x11, 0x67, &(0x7f0000000000)=0x10005, 0xffffffffffffff63) recvmmsg(r3, &(0x7f0000007280)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 3.301225283s ago: executing program 3 (id=1113): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000001400000000000000ff000000850000000e000000850000000700000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r0}, 0x18) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{0x0}], 0x1, 0x7c00, 0x0, 0x3) link(&(0x7f0000000ac0)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0) 3.237669728s ago: executing program 3 (id=1115): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x14, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x51, 0x0, 0x40f00}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000007000000000000000000008500000023000000", @ANYRES32], &(0x7f00000001c0)='GPL\x00', 0x4}, 0xf5) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="1b00000000000000000000001402000000000000", @ANYRES32, @ANYBLOB="ff00"/20, @ANYBLOB="ee417fad2114e3d52106bc9a70166fd0cac7a969b4ca6872a3957f21e9243d9b8ae96aa78e4ee3d44189a6927451bba203a99d9fd1fe74768e192378a8ebaffffc2c011b505db50593950979c14cf916f7fcf1ac1c196271ea442bc6e22a0b236ee9412f063dfef9877cd1d086487a24ba78d95ab9d64ce4db75e46c16e88dbd1f8a9186fd3a398fcf7e14b97d0347fe22f822dea9", @ANYRES32=r0, @ANYBLOB="0004002c05"], 0x50) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18010000008000000000000000000004850000006d00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000380)='kfree\x00', r2}, 0x18) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x4, 0x1}) ioctl$BLKTRACESETUP(r1, 0x1276, 0x0) r3 = syz_clone(0x100000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$setregs(0xd, r3, 0xfffffffffffffffe, &(0x7f0000000140)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178c0900000000000000f39ed4b41924dc225ad4028dd63debb87d698be5c749450b350a789dcfc6b2d6a69600026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fbf057bb711116e53eb0b55667f1a28c2d6506cf26422d389b") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WOWLAN(r4, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010300000000fedbdf"], 0x1c}, 0x1, 0x0, 0x0, 0x4004015}, 0x20000000) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=ANY=[@ANYBLOB="1400000041f4e488720da6e144fbb588ca05d8c9c1b8a328ec2b4fadb45dc2b1e774ef535ea75bfff500cd348a87a0c6", @ANYRES32, @ANYBLOB="01002cbd7000ffdbdf0f04"], 0x14}}, 0x4) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x3000010, &(0x7f0000000040)={[{@errors_remount}, {@discard}]}, 0x1, 0x512, &(0x7f0000000380)="$eJzs3d9rY1kdAPDvvW1mOzNdk1WRdcF1cVc6i07Sbt3dIqLriz4tqOv7WNu0lCZNadJ1Whbt4H8ggoJPPvki+AcIwzz4B8jAgL6ID6KiiM7og6DOlSQ3TidN2rrTNp3m84HTnHPvzf2ec0NO7o/TewMYWy9FxFsRMRERr0ZEMZ+e5in2uqm93IP77y21UxJZ9s5fk0jyab11tdcxGRFX87dNRcTXvhzxzeRg3ObO7vpirVbdysuVVn2z0tzZvb5WX1ytrlY35ufn3lh4c+H1hdks90TtLPUyP/nS529/+lu/u/Hna99uV+tzH4lC9LXjJHWbXuhsi572Nto6jWAj0PvMC6OuCAAAx9Lex/9gRHyis/9fjInO3lyfiVHUDAAAADgp2Rem499JRAYAAABcWGlETEeSlvOxANORppfycwMfjitprdFsfWqlsb2x3J4XUYpCurJWq87mY4VLUUja5bl8jG2v/FpfeT4inouI7xcvd8rlpUZtecTnPgAAAGBcXO07/v9HMe3kjzbg/wQAAACA86s0tAAAAABcFA75AQAA4OLrP/6/PaJ6AAAAAKfiK2+/3U5Z7/nXy+/ubK833r2+XG2ul+vbS+WlxtZmebXRWO3cs69+1PpqjcbmZ2Jj+2alVW22Ks2d3Rv1xvZG68baY4/ABgAAAM7Qcx+/8+skIvY+e7mTIr8PIMBj/jDqCgAnaWLUFQBGxl28YXwVRl0BYOSSI+YbvAMAAE+/mY8evP7fe/6/cwNwsRnrAwDjx/V/GF8FIwBhrKUR8YFu9plhywy9/v/L40bJsoi7xf1TnF8EAICzNd1JSVrOjwOmI03L5YhnI9JSFJKVtVp1Nj8++FWx8Ey7PNd5Z3LkmGEAAAAAAAAAAAAAAAAAAAAAAAAAoCvLksgAAACACy0i/VPSuZt/xEzxlen+8wOXkn8W44954Ufv/ODmYqu1Ndee/rfOs7wuRUTrh/n014Y+PgwAAAA4acne0Fnd4/T8de5MawUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAGHhw/72lXjrLuH/5YkSUBsWfjKnO61QUIuLK35OY3Pe+JCImTiD+3q2IeH5Q/CQeZllWymvRHz+NiMunHL/U2TTD4189gfgwzu60+5+3Bn3/0nip8zr4+zeZpyc1vP9L88jPd/q5Qf3fswfWVh8Y44V7P6sMjX8r4oXJwf1Pr/9NhsR/+cDa/pVl2cEY3/j67u6w+NmPI2YG/v4kj8WqtOqblebO7vW1+uJqdbW6MT8/98bCmwuvL8xWVtZq1fzvwBjf+9jPHx7W/isD4v/2N93+97D2vzJspX3+c+/m/Q91s4VB8a+9PPD3dyqGxE/z375P5vn2/Jlefq+b3+/Fn9598bD2Lw/Z/kd9/teO2f5Xv/rd3x9zUQDgDDR3dtcXa7Xq1iGZqWMs8zRmfjF1Lqrxf2ay73Q/ufNSn/ebae+tPprSa9U5qNi+THZmsSbinDT5f5mRdksAAMApeLTTP+qaAAAAAAAAAAAAAAAAAAAAwPg6i9uJ9cfcG01TAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAO9d8AAAD//yLg4A8=") socket$inet_udplite(0x2, 0x2, 0x88) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1000}, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f00001aa000/0x4000)=nil, 0x4000, 0x300000e, 0x1010, 0xffffffffffffffff, 0x2) r7 = io_uring_setup(0x1694, &(0x7f0000000000)={0x0, 0x0, 0x80, 0x1, 0x17b}) io_uring_register$IORING_REGISTER_BUFFERS(r7, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 2.71545981s ago: executing program 3 (id=1122): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r4, @ANYBLOB="0000000000000000b7020000140000e5b7030000000700008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x25dfdbfb, {}, [@IFLA_MASTER={0x8}]}, 0x28}}, 0x4) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x22000406, &(0x7f0000000580)={[{@init_itable}, {@orlov}, {@nogrpid}, {@init_itable}, {@grpquota}, {@grpjquota, 0x2e}, {@test_dummy_encryption}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2}}, {@jqfmt_vfsv1}, {@grpid}], [], 0x2c}, 0x0, 0x4ec, &(0x7f0000001000)="$eJzs3MtrHdUfAPDvTF5NX0n760/tQxutYvCRtGnVLlyoKHQjCLrQjRDTtNSmrTQRbCmmFalL8S9Ql4Lgyo0rBRF1pbjVvQhFuml1IVfmzkw6yc1N7k3SxCafD0xyzjzunO+cOXPPnXPvBLBhDWR/koitEfFrRPTl2dkrDOT/bl6/NPbX9UtjSdRqL/+Z1Ne7cf3SWLlqud2WIjOYRqTvJ7F3nv1OXrh4enRiYvx8kR+eOvPW8OSFi4+fOjN6cvzk+NmRo0ePHD701JMjT6xInFlcN/a8e27f7mOvffTiWC3e+OHzrLxbi+XVOHL9y97nQAxsioha5tbc7vrfh5b96v8t2yrppLPJSrWOVSoNrcpqJKuurnr774uOuFV5ffHCezOZb9eogMBtk7037WiYW16n0/zNC1inkkXaeFL07FerPMBqKd/xs8+/5bSa/Y+1du3Z/PKWxX2zmPIlnZFmi/rzT+zNPrnetcz9b42IVy///XE2xbz3IQAAVtbXWf/nsfn6f+msvs32YgylPyIejYidEfG/iNgVEf8v+kF3R8Q9be5/YE6+sf/zc++SAmtR1v97uhjbyqfXZ+LPJTO5bfX4u5ITpybGDxbHZDC6ek4sUsJvnv/lw2bLBir9v2zKylD2BXOd0dkze5vjo1OjS413rmtXIvZ0VuMvj38yMxKQHYHdEbFnCa+fHbNTj3y2L0tv39K4vDH+rKddjX8BzcaZ2lD7NOLhvP4vx5z4S0m+p2bjk8ObYmL84HB5VjT68aerL1XzXZV0Hn8lkhZi2tR+mE1l9b855q//urIZlOO1k+3v4+pvHzT9TNNY/0l2PCrSP+rnf6WNZed/d/JKPd1dzHtndGrq/KGI7mLGrPkjt7Yt8+X6WfyDB+aLP82ucf98Umy3NyKyk/jeiLgvIvYXZb8/Ih6IiAMLxP/9cw++ufARWqj939bLXz3+4wvVf0R/Uh2vb0x0RtNFeaLj9HdfzexwzjVg8etfVv9H6qnBYk4r178FijMrsdzjBwAAAHeCtD4GnaRDZbpyc2pXbC5vNb199ng+Vt0fXWl5p6uvcj/0UHFvuMyPzMkfno7YUf8OUW89PzR2bmLbWgUN1G2Z2/4jTYeG8mW/+7kGrH9tjaNVfx34xZcrXxhgVa3AODpwh9L+YePS/mHj0v5h45qv/U9H3FyDogCrzPs/bFzttP/U1QLWFS0aNi7tHzakxp/El88baO33880SO48ta/MlJMqIWtuq1ndbinG5/a06Ji9cOT060Vt9xsYyEhFRf3xGlmh8wVpPZU6tJ/8259L2FenC63S3FM70CldB72IPo8gT6aLrPLPEw9JGYn+R6ImIVreaXpGTpMUTCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYB34NwAA//+3Kr5C") 1.991726459s ago: executing program 0 (id=1135): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r0}, &(0x7f00000008c0), &(0x7f0000000880)=r1}, 0x20) r2 = socket$inet_icmp(0x2, 0x2, 0x1) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000540)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e24, @broadcast}, 0x4}}, 0x26) 1.919660614s ago: executing program 0 (id=1136): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000180)={0x0, 0x4, 0x1000000b, 0x9, 0x4, "00000000000000000000c2041a02003d00"}) r1 = syz_open_pts(r0, 0x62080) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001b00)=@newqdisc={0x210, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1e0, 0x2, {{0x10000, 0x0, 0x57b2}, [@TCA_NETEM_REORDER={0xc, 0x3, {0xdc, 0x3}}, @TCA_NETEM_LOSS={0xc0, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x8, 0x4, 0x2, 0x3e}}, @NETEM_LOSS_GE={0x14, 0x2, {0x2, 0x7, 0x2}}, @NETEM_LOSS_GE={0x14, 0x2, {0x2, 0xffffdb68, 0xf, 0x4}}, @NETEM_LOSS_GI={0x18, 0x1, {0x7, 0x1, 0x8, 0x85bc, 0x1ff}}, @NETEM_LOSS_GE={0x14, 0x2, {0x5, 0x8000000, 0x5}}, @NETEM_LOSS_GE={0x14, 0x2, {0x8, 0x5, 0x7, 0x7}}, @NETEM_LOSS_GE={0x14, 0x2, {0x6, 0xf, 0xa9c8}}, @NETEM_LOSS_GI={0x18, 0x1, {0x7, 0x0, 0x8, 0x50195274, 0x1}}, @NETEM_LOSS_GE={0x14, 0x2, {0x4, 0x0, 0x59, 0x2}}]}, @TCA_NETEM_LOSS={0xcc}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x7, 0x100, 0x40, 0x9, 0x2, 0x94}}]}}}]}, 0x210}}, 0x0) dup3(r1, r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x1fffffe, 0x12, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_STOP_UNIT(r5, 0x6) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00'}, 0x10) syz_mount_image$ext4(&(0x7f0000000d80)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x21881e, &(0x7f00000000c0)={[{@errors_continue}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nombcache}]}, 0x1, 0x529, &(0x7f0000001c80)="$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") 1.527322436s ago: executing program 1 (id=1142): bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002a20702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x8, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000240), &(0x7f00000006c0)}, 0x20) 1.48098746s ago: executing program 1 (id=1143): writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000100)="390000fa461ad7e48489bffa560200130011186809fc071200000f", 0x1b}], 0x1) r0 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x22c01) setreuid(0x0, 0xee00) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000000c0)=ANY=[]) 1.34778131s ago: executing program 1 (id=1146): r0 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x22c01) setreuid(0x0, 0xee00) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000000c0)=ANY=[@ANYRES64=r0]) 1.253694718s ago: executing program 2 (id=1148): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff0000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r3, 0x11, 0x67, &(0x7f0000000000)=0x10005, 0xffffffffffffff63) recvmmsg(r3, &(0x7f0000007280)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 1.250686979s ago: executing program 1 (id=1149): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x14, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x51, 0x0, 0x40f00}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000007000000000000000000008500000023000000", @ANYRES32], &(0x7f00000001c0)='GPL\x00', 0x4}, 0xf5) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="1b000000000000000000000014020000000000", @ANYRES32, @ANYBLOB="ff00"/20, @ANYBLOB="ee417fad2114e3d52106bc9a70166fd0cac7a969b4ca6872a3957f21e9243d9b8ae96aa78e4ee3d44189a6927451bba203a99d9fd1fe74768e192378a8ebaffffc2c011b505db50593950979c14cf916f7fcf1ac1c196271ea442bc6e22a0b236ee9412f063dfef9877cd1d086487a24ba78d95ab9d64ce4db75e46c16e88dbd1f8a9186fd3a398fcf7e14b97d0347fe22f822dea9", @ANYRES32=r0, @ANYBLOB="0004002c05"], 0x50) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000380)='kfree\x00'}, 0x18) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x4, 0x1}) ioctl$BLKTRACESETUP(r1, 0x1276, 0x0) r2 = syz_clone(0x100000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$setregs(0xd, r2, 0xfffffffffffffffe, &(0x7f0000000140)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178c0900000000000000f39ed4b41924dc225ad4028dd63debb87d698be5c749450b350a789dcfc6b2d6a69600026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fbf057bb711116e53eb0b55667f1a28c2d6506cf26422d389b") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WOWLAN(r3, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010300000000fedbdf2505"], 0x1c}, 0x1, 0x0, 0x0, 0x4004015}, 0x20000000) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=ANY=[@ANYBLOB="1400000041f4e488720da6e144fbb588ca05d8c9c1b8a328ec2b4fadb45dc2b1e774ef535ea75bfff500cd348a87a0c6", @ANYRES32, @ANYBLOB="01002cbd7000ffdbdf0f04"], 0x14}}, 0x4) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x3000010, &(0x7f0000000040)={[{@errors_remount}, {@discard}]}, 0x1, 0x512, &(0x7f0000000380)="$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") socket$inet_udplite(0x2, 0x2, 0x88) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1000}, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f00001aa000/0x4000)=nil, 0x4000, 0x300000e, 0x1010, 0xffffffffffffffff, 0x2) r6 = io_uring_setup(0x1694, &(0x7f0000000000)={0x0, 0x0, 0x80, 0x1, 0x17b}) io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 1.069325463s ago: executing program 0 (id=1152): r0 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x22c01) setreuid(0x0, 0xee00) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000000c0)=ANY=[@ANYRES64=r0]) 984.69762ms ago: executing program 5 (id=1153): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000180)={0x0, 0x4, 0x1000000b, 0x9, 0x4, "00000000000000000000c2041a02003d00"}) r1 = syz_open_pts(r0, 0x62080) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001b00)=@newqdisc={0x210, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1e0, 0x2, {{0x10000, 0x0, 0x57b2}, [@TCA_NETEM_REORDER={0xc, 0x3, {0xdc, 0x3}}, @TCA_NETEM_LOSS={0xc0, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x8, 0x4, 0x2, 0x3e}}, @NETEM_LOSS_GE={0x14, 0x2, {0x2, 0x7, 0x2}}, @NETEM_LOSS_GE={0x14, 0x2, {0x2, 0xffffdb68, 0xf, 0x4}}, @NETEM_LOSS_GI={0x18, 0x1, {0x7, 0x1, 0x8, 0x85bc, 0x1ff}}, @NETEM_LOSS_GE={0x14, 0x2, {0x5, 0x8000000, 0x5}}, @NETEM_LOSS_GE={0x14, 0x2, {0x8, 0x5, 0x7, 0x7}}, @NETEM_LOSS_GE={0x14, 0x2, {0x6, 0xf, 0xa9c8}}, @NETEM_LOSS_GI={0x18, 0x1, {0x7, 0x0, 0x8, 0x50195274, 0x1}}, @NETEM_LOSS_GE={0x14, 0x2, {0x4, 0x0, 0x59, 0x2}}]}, @TCA_NETEM_LOSS={0xcc}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x7, 0x100, 0x40, 0x9, 0x2, 0x94}}]}}}]}, 0x210}}, 0x0) dup3(r1, r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x1fffffe, 0x12, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r5}, 0x10) syz_mount_image$ext4(&(0x7f0000000d80)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x21881e, &(0x7f00000000c0)={[{@errors_continue}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nombcache}]}, 0x1, 0x529, &(0x7f0000001c80)="$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") 925.627985ms ago: executing program 0 (id=1154): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002a20702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r0}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x8, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r1}, &(0x7f0000000240), &(0x7f00000006c0)}, 0x20) 888.469488ms ago: executing program 0 (id=1155): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x3c, 0x800, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="4000000010000300047ece80b946decd1367b30e946b58ce0f344fd91b2fd73395330eb1815515d246d53105b6bc494e6b7c2e55c2022e0fb364187499934c050362359c4140a340305165877ce6ab08", @ANYRES32=0x0, @ANYBLOB="0000000000100000180012800e0001007769726567756172640000000400028008000a00", @ANYRESDEC=r0], 0x40}, 0x1, 0x0, 0x0, 0x884}, 0x4c0b0) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) io_destroy(0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r4 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5, 0x0, 0x2}, 0x18) dup3(0xffffffffffffffff, r4, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073f97a310000000008000440080000000900010073797a3000000000080003400000000114000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x814}, 0x0) 693.491254ms ago: executing program 0 (id=1156): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000000)={0x0, 0x4eb, 0x5, [0x5, 0x8, 0x8, 0x7, 0x3]}, &(0x7f0000000040)=0x12) 485.801531ms ago: executing program 5 (id=1157): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket(0x2b, 0x80801, 0x1) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4, 0x3ff, @empty, 0x1}, 0x1c) setsockopt$inet6_mtu(r0, 0x29, 0x1e, &(0x7f0000000000)=0x2, 0x4) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x12}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d000000140000001100"], 0xa8}}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r3, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x2, 0x1}, 0x1205, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x40000000000000, 0xffffffffffffffff, 0x0) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) 394.340368ms ago: executing program 2 (id=1158): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket$inet_icmp(0x2, 0x2, 0x1) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000540)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @broadcast}, 0x4}}, 0x26) 385.700548ms ago: executing program 2 (id=1159): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000080), &(0x7f00000006c0)='%-010d \x00'}, 0x20) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYBLOB="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", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040), 0x208e24b) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r3}, 0x10) r4 = inotify_init1(0x0) inotify_add_watch(r4, &(0x7f00000000c0)='./file0\x00', 0x60004ce) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) fdatasync(r2) 376.139759ms ago: executing program 5 (id=1160): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYBLOB="fe2ecf20a9a17bd2ed7e803f830375c150a1f848f604c2c1f932d2b7163be4b2b9a5bd521d185cfbee555b27608594beba6325923aaf5db74cff01000053db92c6c5fcbba0abd975fc76bea49b00513afc856ed89d3fadeda307ca587354322803b0983cc65725ae7f45fb95e7cdb28c6b886959b7dde2c87c73f6008cf6eed7861f24b7423704b95f3d05b92d3d7ff9d392833ecd02443320b60131a350360fcc1d659e2a03cb469caf0498bacae0735a161345b3d71a55f14ef636b6f832c7a6071fce83904dfd871b6d8e03648dbaa3a039eb5673792cae80335732030f9aeabaf3bb3cc4ca5fe75271d69b2e78beb2b81fc3cf3a18a7ae93a3cdbe6599b99408275e2b4b4477c6fcf4806134e839e13533ec000000000000006a1c000000000000000000000000000000000000000000000000000069c3288311b7414705e975eb3f1b77a120", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$eJzs3E1PE10UwPHTF0pbAmXx5DGaGG50o5sJVNdKYyAxNpEgNb4kJgNMtenYkpkGU2NEV26NH8IFYcmORPkCbNzpxo07NiYuZGEc0+kMhTKAlNIi/H8JmcPce6b3zgzk3AnD+r23T4t5W8vrFQnHlYRERDZEBiUsvpC3DbtxTLZ6JZf7fnw+f+f+g1uZbHZsUqnxzNSVtFJqYOjDsxcJr9tKr6wNPlr/nv629v/a2fXfU08KtirYqlSuKF1Nl79W9GnTULMFu6gpNWEaum2oQsk2rHp7ud6eN8tzc1Wll2b7k3OWYdtKL1VV0aiqSllVrKqKPNYLJaVpmupPCvaTW5yc1DMtJs+0eTA4IpaV0SMiktjRklvsyoAAAEBXNdf/YVHtrP+XLqxW+u4uD3j1/0osqP6/+qV+rG31f1xEAut///MD63/9YPX/zorodDlU/Y/jYSi2Y1eoEdYarYye9H5+Xa8fLg27AfU/AAAAAAAAAAAAAAAAAAAAAAD/gg3HSTmOk/K3/leviMRFxP8+IDUiIte7MGS00SGuP06Axot70QER8818bj5X33odVkXEFEOGJSW/3PvBU4v9N49UzaB8NBe8/IX5XMRtyeSl4OaPSKpHmvMdZ/xmdmxE1W3P75Hk1vy0pOS/4Px0YH5MLl3ckq9JSj7NSFlMmXXH0ch/OaLUjdvZpvyE2w8AAAAAgJNAU5sC1++atlt7PX9zfd38fCDSWF8PB67Po3Iu2t25AwAAAABwWtjV50XdNA1rjyAh+/dpPYge0ZH9Gf5tlv+3DEc30z0C/8O3NcW9nW0/LaEDnJZdgrC0kjVUm4067Cz8x0a79ZGJ0c5fQTc48+79z/Yd8NpyfJ+Zth5E9r4Bejr2CwgAAABAxzSKfn/PaHcHBAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAKdSJ/47W7TkCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAx8WfAAAA//+SWQVN") r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f00000000c0)='./file0\x00', 0x60004ce) 319.422094ms ago: executing program 1 (id=1161): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000200000000000000000000030000000003000000030000000000000000000000000000010500000010000000000000000000000b02"], 0x0, 0x4e}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00'}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000008, &(0x7f0000000300)={[{@grpid}, {@grpjquota}, {@nobarrier}]}, 0x1, 0x521, &(0x7f0000000640)="$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") 174.747645ms ago: executing program 2 (id=1162): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008f"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x3}, 0x18) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000580)="d8000000180081034e91f783db4cb9040a1d020006007409e8fc55a10a0015000400142603600e120800060000000401a8000800080002000000000004000461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d4e1cace81ed0bffece0b42a9ecbeeccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d93000000000000004867edef090d82c399b3b549", 0xd8}], 0x1}, 0x0) 174.519495ms ago: executing program 5 (id=1163): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) mq_open(&(0x7f00000002c0)='\x00', 0x840, 0x11a, &(0x7f0000000300)={0x1, 0x80000001, 0x7f, 0xab43}) 153.023188ms ago: executing program 1 (id=1164): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000000)={0x0, 0x4eb, 0x5, [0x5, 0x8, 0x8, 0x7, 0x3]}, &(0x7f0000000040)=0x12) 96.334702ms ago: executing program 2 (id=1165): r0 = socket$can_raw(0x1d, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002a20702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0xf00) 43.914306ms ago: executing program 5 (id=1166): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd885000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x3}, 0x18) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000580)="d8000000180081034e91f783db4cb9040a1d020006007409e8fc55a10a0015000400142603600e120800060000000401a8000800080002000000000004000461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d4e1cace81ed0bffece0b42a9ecbeeccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d93000000000000004867edef090d82c399b3b549", 0xd8}], 0x1}, 0x0) 43.412576ms ago: executing program 2 (id=1167): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000180)={0x0, 0x4, 0x1000000b, 0x9, 0x4, "00000000000000000000c2041a02003d00"}) r1 = syz_open_pts(r0, 0x62080) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001b00)=@newqdisc={0x210, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1e0, 0x2, {{0x10000, 0x0, 0x57b2}, [@TCA_NETEM_REORDER={0xc, 0x3, {0xdc, 0x3}}, @TCA_NETEM_LOSS={0xc0, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x8, 0x4, 0x2, 0x3e}}, @NETEM_LOSS_GE={0x14, 0x2, {0x2, 0x7, 0x2}}, @NETEM_LOSS_GE={0x14, 0x2, {0x2, 0xffffdb68, 0xf, 0x4}}, @NETEM_LOSS_GI={0x18, 0x1, {0x7, 0x1, 0x8, 0x85bc, 0x1ff}}, @NETEM_LOSS_GE={0x14, 0x2, {0x5, 0x8000000, 0x5}}, @NETEM_LOSS_GE={0x14, 0x2, {0x8, 0x5, 0x7, 0x7}}, @NETEM_LOSS_GE={0x14, 0x2, {0x6, 0xf, 0xa9c8}}, @NETEM_LOSS_GI={0x18, 0x1, {0x7, 0x0, 0x8, 0x50195274, 0x1}}, @NETEM_LOSS_GE={0x14, 0x2, {0x4, 0x0, 0x59, 0x2}}]}, @TCA_NETEM_LOSS={0xcc}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x7, 0x100, 0x40, 0x9, 0x2, 0x94}}]}}}]}, 0x210}}, 0x0) dup3(r1, r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x1fffffe, 0x12, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r5}, 0x10) syz_mount_image$ext4(&(0x7f0000000d80)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x21881e, &(0x7f00000000c0)={[{@errors_continue}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nombcache}]}, 0x1, 0x529, &(0x7f0000001c80)="$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") 0s ago: executing program 5 (id=1168): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff0000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r3, 0x11, 0x67, &(0x7f0000000000)=0x10005, 0xffffffffffffff63) recvmmsg(r3, &(0x7f0000007280)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) kernel console output (not intermixed with test programs): "/root/syzkaller.3ziP5u/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 57.589078][ T5051] netlink: 8 bytes leftover after parsing attributes in process `syz.5.493'. [ 57.633362][ T5051] loop5: detected capacity change from 0 to 512 [ 57.659081][ T5051] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 57.689851][ T5051] EXT4-fs (loop5): orphan cleanup on readonly fs [ 57.700574][ T5051] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.493: corrupted inode contents [ 57.725981][ T5059] loop3: detected capacity change from 0 to 2048 [ 57.732616][ T5051] EXT4-fs (loop5): Remounting filesystem read-only [ 57.739468][ T5051] EXT4-fs (loop5): 1 truncate cleaned up [ 57.745617][ T3430] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 57.756752][ T3430] Quota error (device loop5): write_blk: dquota write failed [ 57.764446][ T3430] Quota error (device loop5): remove_free_dqentry: Can't write block (5) with free entries [ 57.774650][ T3430] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 57.785406][ T3430] Quota error (device loop5): write_blk: dquota write failed [ 57.792901][ T3430] Quota error (device loop5): free_dqentry: Can't move quota data block (5) to free list [ 57.803698][ T3430] EXT4-fs (loop5): Quota write (off=8, len=24) cancelled because transaction is not started [ 57.814470][ T3430] Quota error (device loop5): v2_write_file_info: Can't write info structure [ 57.827285][ T3292] loop3: p2 p3 p7 [ 57.834881][ T3430] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 57.861764][ T5061] loop1: detected capacity change from 0 to 512 [ 57.903046][ T5059] loop3: p2 p3 p7 [ 57.924046][ T5061] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 57.943219][ T5061] EXT4-fs (loop1): orphan cleanup on readonly fs [ 57.964011][ T3294] udevd[3294]: inotify_add_watch(7, /dev/loop3p7, 10) failed: No such file or directory [ 57.975265][ T4102] udevd[4102]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 57.985486][ T29] audit: type=1400 audit(1755942344.358:828): avc: denied { setopt } for pid=5065 comm="syz.3.497" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 58.006574][ T3292] udevd[3292]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 58.018922][ T5061] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.496: corrupted inode contents [ 58.035602][ T5061] EXT4-fs (loop1): Remounting filesystem read-only [ 58.047821][ T5061] EXT4-fs (loop1): 1 truncate cleaned up [ 58.053908][ T3430] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 58.054945][ T3292] udevd[3292]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 58.064819][ T3430] Quota error (device loop1): write_blk: dquota write failed [ 58.064856][ T3430] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 58.064966][ T3430] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started [ 58.076378][ T4024] udevd[4024]: inotify_add_watch(7, /dev/loop3p7, 10) failed: No such file or directory [ 58.114493][ T4102] udevd[4102]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 58.360365][ T4928] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 255: padding at end of block bitmap is not set [ 58.735839][ T5093] program syz.1.507 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 59.002027][ T5103] loop1: detected capacity change from 0 to 2048 [ 59.067109][ T3292] loop1: p2 p3 p7 [ 59.099957][ T5105] loop3: detected capacity change from 0 to 512 [ 59.114817][ T5105] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 59.133748][ T5103] loop1: p2 p3 p7 [ 59.183720][ T5105] EXT4-fs (loop3): 1 orphan inode deleted [ 59.211202][ T5105] ext4 filesystem being mounted at /88/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.212343][ T3873] EXT4-fs error (device loop3): ext4_release_dquot:6973: comm kworker/u8:8: Failed to release dquot type 1 [ 59.245595][ T5114] __nla_validate_parse: 3 callbacks suppressed [ 59.245675][ T5114] netlink: 8 bytes leftover after parsing attributes in process `syz.1.515'. [ 59.355719][ T3294] udevd[3294]: inotify_add_watch(7, /dev/loop1p7, 10) failed: No such file or directory [ 59.362424][ T3292] udevd[3292]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 59.382024][ T4024] udevd[4024]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 59.387047][ T5121] program syz.3.518 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 59.411718][ T5123] program syz.2.519 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 59.450955][ T4102] udevd[4102]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 59.574673][ T5130] loop2: detected capacity change from 0 to 2048 [ 59.592447][ T5131] program syz.5.520 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 59.634795][ T3292] loop2: p2 p3 p7 [ 59.668453][ T5137] loop1: detected capacity change from 0 to 2048 [ 59.681664][ T5139] program syz.5.526 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 59.702751][ T5130] loop2: p2 p3 p7 [ 59.717413][ T2993] loop2: p2 p3 p7 [ 59.732580][ T5141] netlink: 32 bytes leftover after parsing attributes in process `syz.5.527'. [ 59.773902][ T5141] bridge_slave_0: left allmulticast mode [ 59.779683][ T5141] bridge_slave_0: left promiscuous mode [ 59.785666][ T5141] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.808352][ T4102] loop1: p2 p3 p7 [ 59.819005][ T5141] bridge_slave_1: left allmulticast mode [ 59.824844][ T5141] bridge_slave_1: left promiscuous mode [ 59.830805][ T5141] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.868980][ T5141] bond0: (slave bond_slave_0): Releasing backup interface [ 59.878643][ T5137] loop1: p2 p3 p7 [ 59.885864][ T5146] process 'syz.0.529' launched './file0' with NULL argv: empty string added [ 59.905288][ T5148] netlink: 8 bytes leftover after parsing attributes in process `syz.2.530'. [ 59.914206][ T5148] netlink: 4 bytes leftover after parsing attributes in process `syz.2.530'. [ 59.950821][ T5141] bond0: (slave bond_slave_1): Releasing backup interface [ 59.955885][ T5141] team0: Port device team_slave_0 removed [ 59.969257][ T5141] team0: Port device team_slave_1 removed [ 59.973726][ T5154] loop3: detected capacity change from 0 to 512 [ 59.974058][ T5154] EXT4-fs: Ignoring removed orlov option [ 59.974387][ T5141] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 59.974405][ T5141] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 59.979008][ T5141] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 59.979026][ T5141] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 59.987991][ T5154] EXT4-fs error (device loop3): dx_probe:791: inode #2: comm syz.3.523: Attempting to read directory block (0) that is past i_size (256) [ 59.988141][ T5154] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 60.195922][ T5164] netlink: 44 bytes leftover after parsing attributes in process `syz.5.532'. [ 60.195941][ T5164] netem: unknown loss type 12 [ 60.195950][ T5164] netem: change failed [ 60.196506][ T5164] program syz.5.532 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 60.196700][ T5164] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 60.201333][ T5161] netlink: 20 bytes leftover after parsing attributes in process `syz.2.533'. [ 60.203735][ T5164] support for the xor transformation has been removed. [ 60.214325][ T5164] loop5: detected capacity change from 0 to 512 [ 60.222139][ T5164] EXT4-fs warning (device loop5): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 60.222313][ T5164] EXT4-fs (loop5): mount failed [ 60.323660][ T5170] netlink: 4 bytes leftover after parsing attributes in process `syz.2.535'. [ 60.331371][ T5170] loop2: detected capacity change from 0 to 1024 [ 60.452226][ T5176] program syz.0.537 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 60.875356][ T5159] netlink: 320 bytes leftover after parsing attributes in process `syz.5.532'. [ 60.997223][ T5199] netlink: 12 bytes leftover after parsing attributes in process `syz.1.547'. [ 61.038230][ T5201] program syz.5.549 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 61.131588][ T5206] program syz.5.551 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 61.154331][ T5204] loop1: detected capacity change from 0 to 512 [ 61.193989][ T5204] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 61.233490][ T5204] EXT4-fs (loop1): orphan cleanup on readonly fs [ 61.257079][ T5204] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.550: corrupted inode contents [ 61.340398][ T5204] EXT4-fs (loop1): Remounting filesystem read-only [ 61.362198][ T5204] EXT4-fs (loop1): 1 truncate cleaned up [ 61.371397][ T31] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 61.382215][ T31] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 61.405770][ T5217] netlink: 'syz.2.554': attribute type 21 has an invalid length. [ 61.413647][ T5217] IPv6: NLM_F_CREATE should be specified when creating new route [ 61.431006][ T31] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started [ 61.505378][ T5226] netlink: 64 bytes leftover after parsing attributes in process `syz.2.557'. [ 61.735257][ T5237] FAULT_INJECTION: forcing a failure. [ 61.735257][ T5237] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 61.748838][ T5237] CPU: 1 UID: 0 PID: 5237 Comm: syz.2.561 Not tainted syzkaller #0 PREEMPT(voluntary) [ 61.748891][ T5237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 61.748903][ T5237] Call Trace: [ 61.748911][ T5237] [ 61.748919][ T5237] __dump_stack+0x1d/0x30 [ 61.748944][ T5237] dump_stack_lvl+0xe8/0x140 [ 61.748966][ T5237] dump_stack+0x15/0x1b [ 61.748985][ T5237] should_fail_ex+0x265/0x280 [ 61.749140][ T5237] should_fail+0xb/0x20 [ 61.749171][ T5237] should_fail_usercopy+0x1a/0x20 [ 61.749197][ T5237] _copy_from_user+0x1c/0xb0 [ 61.749228][ T5237] ___sys_sendmsg+0xc1/0x1d0 [ 61.749265][ T5237] __x64_sys_sendmsg+0xd4/0x160 [ 61.749340][ T5237] x64_sys_call+0x191e/0x2ff0 [ 61.749362][ T5237] do_syscall_64+0xd2/0x200 [ 61.749390][ T5237] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 61.749454][ T5237] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 61.749482][ T5237] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.749505][ T5237] RIP: 0033:0x7febe1f3ebe9 [ 61.749522][ T5237] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 61.749542][ T5237] RSP: 002b:00007febe09a7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 61.749564][ T5237] RAX: ffffffffffffffda RBX: 00007febe2165fa0 RCX: 00007febe1f3ebe9 [ 61.749578][ T5237] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000006 [ 61.749619][ T5237] RBP: 00007febe09a7090 R08: 0000000000000000 R09: 0000000000000000 [ 61.749632][ T5237] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 61.749645][ T5237] R13: 00007febe2166038 R14: 00007febe2165fa0 R15: 00007ffee1d2d5e8 [ 61.749664][ T5237] [ 61.984686][ T5242] netem: unknown loss type 12 [ 61.989595][ T5242] netem: change failed [ 62.032029][ T5242] program syz.1.559 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 62.033713][ T1037] IPVS: starting estimator thread 0... [ 62.051817][ T5242] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 62.085161][ T5248] program syz.3.564 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 62.097454][ T5242] support for the xor transformation has been removed. [ 62.110380][ T5250] loop5: detected capacity change from 0 to 1024 [ 62.140393][ T5246] IPVS: using max 2304 ests per chain, 115200 per kthread [ 62.173600][ T5242] loop1: detected capacity change from 0 to 512 [ 62.224247][ T5242] EXT4-fs warning (device loop1): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 62.345238][ T5242] EXT4-fs (loop1): mount failed [ 62.361470][ T5265] program syz.0.569 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 62.389515][ T3873] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.410018][ T3873] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.439584][ T3873] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.453777][ T3873] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.515696][ T29] kauditd_printk_skb: 103 callbacks suppressed [ 62.515713][ T29] audit: type=1400 audit(1755942348.908:918): avc: denied { bind } for pid=5280 comm="syz.5.575" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 62.551381][ T29] audit: type=1400 audit(1755942348.948:919): avc: denied { setopt } for pid=5280 comm="syz.5.575" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 62.573757][ T5285] program syz.3.577 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 62.639256][ T5287] loop1: detected capacity change from 0 to 512 [ 62.648450][ T5283] netlink: 'syz.5.575': attribute type 10 has an invalid length. [ 62.658674][ T5283] team0: Port device dummy0 added [ 62.667948][ T5283] netlink: 'syz.5.575': attribute type 10 has an invalid length. [ 62.688684][ T5283] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 62.711912][ T5283] team0: Failed to send options change via netlink (err -105) [ 62.721069][ T5283] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 62.731420][ T5283] team0: Port device dummy0 removed [ 62.738650][ T5283] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 62.750810][ T5293] tipc: Started in network mode [ 62.755806][ T5293] tipc: Node identity ac14140f, cluster identity 4711 [ 62.763206][ T5293] tipc: New replicast peer: 255.255.255.255 [ 62.769435][ T5293] tipc: Enabled bearer , priority 10 [ 62.790592][ T5287] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 62.800199][ T5283] syz.5.575 (5283) used greatest stack depth: 10112 bytes left [ 62.819109][ T5287] EXT4-fs (loop1): orphan cleanup on readonly fs [ 62.834852][ T5287] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.579: corrupted inode contents [ 62.860625][ T5287] EXT4-fs (loop1): Remounting filesystem read-only [ 62.867614][ T5287] EXT4-fs (loop1): 1 truncate cleaned up [ 62.874161][ T170] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 62.879963][ T5300] program syz.2.582 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 62.884774][ T170] Quota error (device loop1): write_blk: dquota write failed [ 62.901326][ T170] Quota error (device loop1): remove_free_dqentry: Can't write block (5) with free entries [ 62.911387][ T170] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 62.922113][ T170] Quota error (device loop1): write_blk: dquota write failed [ 62.929506][ T170] Quota error (device loop1): free_dqentry: Can't move quota data block (5) to free list [ 62.940524][ T170] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started [ 62.950853][ T170] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 62.959907][ T170] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 62.993428][ T29] audit: type=1326 audit(1755942349.378:920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5305 comm="syz.2.584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febe1f3ebe9 code=0x7ffc0000 [ 63.017609][ T29] audit: type=1326 audit(1755942349.378:921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5305 comm="syz.2.584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7febe1f3ebe9 code=0x7ffc0000 [ 63.083821][ T5308] loop2: detected capacity change from 0 to 512 [ 63.091492][ T5308] EXT4-fs: Ignoring removed bh option [ 63.115652][ T5308] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 63.127765][ T5310] bond0: (slave dummy0): Releasing backup interface [ 63.157968][ T5308] EXT4-fs (loop2): 1 truncate cleaned up [ 63.168653][ T5308] tipc: Enabling of bearer rejected, failed to enable media [ 63.283354][ T5321] loop2: detected capacity change from 0 to 2048 [ 63.375184][ T5321] loop2: p2 p3 p7 [ 63.472777][ T5332] program syz.1.594 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 63.555507][ T3292] udevd[3292]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 63.570688][ T5336] loop5: detected capacity change from 0 to 512 [ 63.577314][ T5336] EXT4-fs: Ignoring removed orlov option [ 63.662407][ T4102] udevd[4102]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 63.673951][ T4024] udevd[4024]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory [ 63.722375][ T5336] EXT4-fs error (device loop5): dx_probe:791: inode #2: comm syz.5.588: Attempting to read directory block (0) that is past i_size (256) [ 63.736862][ T5336] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117 [ 63.754116][ T5342] bond0: (slave bond_slave_0): Releasing backup interface [ 63.763332][ T5342] bond0: (slave bond_slave_1): Releasing backup interface [ 63.781933][ T5341] loop1: detected capacity change from 0 to 512 [ 63.792626][ T5341] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 63.806078][ T5341] EXT4-fs (loop1): orphan cleanup on readonly fs [ 63.869069][ T5341] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.596: corrupted inode contents [ 63.881076][ T3410] tipc: Node number set to 2886997007 [ 63.905235][ T5349] loop3: detected capacity change from 0 to 512 [ 63.913751][ T5341] EXT4-fs (loop1): Remounting filesystem read-only [ 63.930545][ T5341] EXT4-fs (loop1): 1 truncate cleaned up [ 63.936512][ T3873] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 63.947206][ T3873] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 63.972270][ T3873] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started [ 64.010161][ T5349] EXT4-fs warning (device loop3): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 64.078659][ T5349] EXT4-fs (loop3): mount failed [ 64.188336][ T5360] loop3: detected capacity change from 0 to 512 [ 64.222645][ T5360] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 64.257353][ T5360] EXT4-fs (loop3): orphan cleanup on readonly fs [ 64.305177][ T5360] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.601: corrupted inode contents [ 64.333265][ T5367] netlink: 'syz.1.603': attribute type 21 has an invalid length. [ 64.341085][ T5367] IPv6: NLM_F_CREATE should be specified when creating new route [ 64.376645][ T5365] loop2: detected capacity change from 0 to 2048 [ 64.384194][ T5360] EXT4-fs (loop3): Remounting filesystem read-only [ 64.400567][ T5360] EXT4-fs (loop3): 1 truncate cleaned up [ 64.406585][ T170] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 64.417303][ T170] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 64.454354][ T3292] loop2: p2 p3 p7 [ 64.455666][ T170] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started [ 64.477242][ T5373] program syz.1.606 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 64.510031][ T5365] loop2: p2 p3 p7 [ 64.520357][ T5312] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 255: padding at end of block bitmap is not set [ 64.568592][ T5381] program syz.2.610 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 64.599919][ T4102] udevd[4102]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory [ 64.601501][ T3292] udevd[3292]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 64.620104][ T5179] udevd[5179]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 64.666715][ T5179] udevd[5179]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 64.666803][ T4102] udevd[4102]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory [ 64.677962][ T3292] udevd[3292]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 64.697930][ T5385] __nla_validate_parse: 15 callbacks suppressed [ 64.697948][ T5385] netlink: 32 bytes leftover after parsing attributes in process `syz.2.612'. [ 64.734755][ T5385] bridge_slave_0: left allmulticast mode [ 64.740914][ T5385] bridge_slave_0: left promiscuous mode [ 64.746736][ T5385] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.764839][ T5388] netlink: 4 bytes leftover after parsing attributes in process `syz.1.611'. [ 64.808012][ T5389] netlink: 4 bytes leftover after parsing attributes in process `syz.2.612'. [ 64.829478][ T5383] loop1: detected capacity change from 0 to 1024 [ 64.855638][ T5385] bridge_slave_1: left allmulticast mode [ 64.861628][ T5385] bridge_slave_1: left promiscuous mode [ 64.867448][ T5385] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.876764][ T5385] bond0: (slave bond_slave_0): Releasing backup interface [ 64.886550][ T5385] bond0: (slave bond_slave_1): Releasing backup interface [ 64.896522][ T5385] bond2: (slave veth3): Releasing active interface [ 64.950603][ T5395] netlink: 'syz.1.613': attribute type 10 has an invalid length. [ 64.959086][ T5395] netlink: 'syz.1.613': attribute type 10 has an invalid length. [ 64.969788][ T5395] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 64.989347][ T5395] tipc: New replicast peer: 255.255.255.255 [ 64.995755][ T5395] tipc: Enabled bearer , priority 10 [ 65.088846][ T5410] netlink: 12 bytes leftover after parsing attributes in process `syz.0.609'. [ 65.101570][ T5409] program syz.2.618 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 65.223670][ T5418] program syz.1.621 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 65.342134][ T5425] netlink: 8 bytes leftover after parsing attributes in process `syz.1.622'. [ 65.350995][ T5425] netlink: 4 bytes leftover after parsing attributes in process `syz.1.622'. [ 65.522974][ T5432] netlink: 4 bytes leftover after parsing attributes in process `syz.2.624'. [ 65.547996][ T5432] loop2: detected capacity change from 0 to 1024 [ 65.599886][ T5444] program syz.2.625 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 65.780157][ T5456] program syz.2.630 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 65.835041][ T5461] program syz.2.632 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 65.860512][ T5464] program syz.2.633 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 65.971855][ T5475] loop2: detected capacity change from 0 to 128 [ 65.990387][ T1037] tipc: Node number set to 4269801488 [ 65.997797][ T5475] serio: Serial port ptm0 [ 66.036150][ T5479] netlink: 32 bytes leftover after parsing attributes in process `syz.3.641'. [ 66.047519][ T5479] netlink: 4 bytes leftover after parsing attributes in process `syz.3.641'. [ 66.102529][ T5484] loop3: detected capacity change from 0 to 512 [ 66.109621][ T5484] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 66.124143][ T5484] EXT4-fs (loop3): 1 orphan inode deleted [ 66.131128][ T5484] ext4 filesystem being mounted at /114/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.142453][ T37] EXT4-fs error (device loop3): ext4_release_dquot:6973: comm kworker/u8:2: Failed to release dquot type 1 [ 66.243391][ T5496] loop3: detected capacity change from 0 to 2048 [ 66.294677][ T3292] loop3: p2 p3 p7 [ 66.307587][ T5496] loop3: p2 p3 p7 [ 66.429961][ T5509] serio: Serial port ptm0 [ 66.459191][ T5511] netlink: 32 bytes leftover after parsing attributes in process `syz.2.653'. [ 66.478195][ T3292] udevd[3292]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 66.544305][ T5521] netem: unknown loss type 12 [ 66.549158][ T5521] netem: change failed [ 66.564597][ T5521] program syz.1.654 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 66.596807][ T5521] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 66.617029][ T5526] netlink: 'syz.3.659': attribute type 21 has an invalid length. [ 66.622881][ T5527] program syz.0.660 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 66.654308][ T5523] loop2: detected capacity change from 0 to 512 [ 66.667647][ T5521] support for the xor transformation has been removed. [ 66.692979][ T5521] loop1: detected capacity change from 0 to 512 [ 66.708603][ T5523] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 66.731530][ T5521] EXT4-fs warning (device loop1): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 66.744823][ T5523] EXT4-fs (loop2): orphan cleanup on readonly fs [ 66.755507][ T5521] EXT4-fs (loop1): mount failed [ 66.797421][ T5523] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.658: corrupted inode contents [ 66.827969][ T5523] EXT4-fs (loop2): Remounting filesystem read-only [ 66.840567][ T5523] EXT4-fs (loop2): 1 truncate cleaned up [ 66.846609][ T2722] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 66.857512][ T2722] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 66.889210][ T2722] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started [ 67.000484][ T5557] loop5: detected capacity change from 0 to 512 [ 67.224938][ T5557] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 67.255561][ T5557] EXT4-fs (loop5): orphan cleanup on readonly fs [ 67.323825][ T5577] loop3: detected capacity change from 0 to 2048 [ 67.334177][ T5557] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.670: corrupted inode contents [ 67.398208][ T3292] loop3: p2 p3 p7 [ 67.403134][ T5557] EXT4-fs (loop5): Remounting filesystem read-only [ 67.424992][ T5557] EXT4-fs (loop5): 1 truncate cleaned up [ 67.431392][ T37] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 67.442220][ T37] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 67.464672][ T5577] loop3: p2 p3 p7 [ 67.470706][ T37] EXT4-fs (loop5): Quota write (off=8, len=24) cancelled because transaction is not started [ 67.498567][ T5557] EXT4-fs mount: 72 callbacks suppressed [ 67.498635][ T5557] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 67.557513][ T5557] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.697170][ T5603] loop2: detected capacity change from 0 to 512 [ 67.801303][ T5603] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 67.848840][ T5603] EXT4-fs (loop2): orphan cleanup on readonly fs [ 67.895210][ T5603] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.679: corrupted inode contents [ 67.951831][ T5617] loop5: detected capacity change from 0 to 512 [ 67.958877][ T5618] netem: unknown loss type 12 [ 67.963839][ T5618] netem: change failed [ 67.968440][ T5618] program syz.0.681 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 67.977949][ T5603] EXT4-fs (loop2): Remounting filesystem read-only [ 67.985330][ T5618] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 68.000621][ T5603] EXT4-fs (loop2): 1 truncate cleaned up [ 68.006520][ T2722] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 68.017183][ T2722] __quota_error: 137 callbacks suppressed [ 68.017200][ T2722] Quota error (device loop2): write_blk: dquota write failed [ 68.030817][ T2722] Quota error (device loop2): remove_free_dqentry: Can't write block (5) with free entries [ 68.041239][ T2722] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 68.052583][ T2722] Quota error (device loop2): write_blk: dquota write failed [ 68.060001][ T2722] Quota error (device loop2): free_dqentry: Can't move quota data block (5) to free list [ 68.073658][ T5618] support for the xor transformation has been removed. [ 68.081351][ T5617] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 68.120564][ T5617] EXT4-fs (loop5): orphan cleanup on readonly fs [ 68.163743][ T2722] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started [ 68.173923][ T2722] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 68.186765][ T5633] loop3: detected capacity change from 0 to 512 [ 68.193548][ T5633] EXT4-fs: Ignoring removed orlov option [ 68.210004][ T5617] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.682: corrupted inode contents [ 68.224546][ T5617] EXT4-fs (loop5): Remounting filesystem read-only [ 68.231338][ T5617] EXT4-fs (loop5): 1 truncate cleaned up [ 68.237259][ T2722] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 68.247311][ T2722] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 68.258067][ T2722] Quota error (device loop5): write_blk: dquota write failed [ 68.265599][ T2722] Quota error (device loop5): remove_free_dqentry: Can't write block (5) with free entries [ 68.276004][ T2722] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 68.286742][ T2722] Quota error (device loop5): write_blk: dquota write failed [ 68.294276][ T2722] Quota error (device loop5): free_dqentry: Can't move quota data block (5) to free list [ 68.330197][ T5633] EXT4-fs error (device loop3): dx_probe:791: inode #2: comm syz.3.678: Attempting to read directory block (0) that is past i_size (256) [ 68.355521][ T5633] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 68.364589][ T5633] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.458176][ T2722] EXT4-fs (loop5): Quota write (off=8, len=24) cancelled because transaction is not started [ 68.469536][ T5638] program syz.1.684 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 68.488097][ T5603] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 68.516000][ T5617] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 68.529557][ T5617] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.555556][ T5640] program syz.1.685 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 68.566491][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.611531][ T5642] loop1: detected capacity change from 0 to 512 [ 68.631727][ T5642] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 68.640100][ T5642] EXT4-fs (loop1): orphan cleanup on readonly fs [ 68.654654][ T5642] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.686: corrupted inode contents [ 68.679617][ T5642] EXT4-fs (loop1): Remounting filesystem read-only [ 68.694453][ T5642] EXT4-fs (loop1): 1 truncate cleaned up [ 68.700367][ T2722] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 68.711013][ T2722] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 68.745681][ T2722] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started [ 68.757693][ T5647] program syz.0.688 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 68.767732][ T5642] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 68.790760][ T5642] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.303379][ T5674] program syz.2.692 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 69.408553][ T5676] loop5: detected capacity change from 0 to 512 [ 69.468937][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.478558][ T5676] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 69.508397][ T5676] EXT4-fs (loop5): orphan cleanup on readonly fs [ 69.525257][ T5687] program syz.3.695 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 69.531461][ T5676] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.693: corrupted inode contents [ 69.552229][ T5676] EXT4-fs (loop5): Remounting filesystem read-only [ 69.559062][ T5676] EXT4-fs (loop5): 1 truncate cleaned up [ 69.564986][ T170] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 69.575536][ T170] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 69.641183][ T170] EXT4-fs (loop5): Quota write (off=8, len=24) cancelled because transaction is not started [ 69.653773][ T5701] program syz.0.701 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 69.663736][ T5676] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 69.684363][ T5676] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.007186][ T5736] loop3: detected capacity change from 0 to 512 [ 70.014022][ T5736] EXT4-fs: Ignoring removed orlov option [ 70.034285][ T5736] EXT4-fs error (device loop3): dx_probe:791: inode #2: comm syz.3.706: Attempting to read directory block (0) that is past i_size (256) [ 70.048819][ T5736] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 70.057620][ T5736] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.353705][ T5742] __nla_validate_parse: 11 callbacks suppressed [ 70.353726][ T5742] netlink: 4 bytes leftover after parsing attributes in process `syz.0.711'. [ 70.543230][ T5750] netlink: 4 bytes leftover after parsing attributes in process `syz.2.714'. [ 70.585724][ T5750] loop2: detected capacity change from 0 to 1024 [ 70.622165][ T5750] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.737073][ T5759] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8 sclass=netlink_route_socket pid=5759 comm=syz.0.718 [ 70.790878][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.854864][ T5767] netlink: 'syz.0.720': attribute type 21 has an invalid length. [ 70.862801][ T5767] IPv6: NLM_F_CREATE should be specified when creating new route [ 70.939156][ T5773] program syz.2.719 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 70.955061][ T5772] program syz.5.722 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 71.074907][ T5781] loop5: detected capacity change from 0 to 512 [ 71.092545][ T5778] netlink: 'syz.2.724': attribute type 21 has an invalid length. [ 71.132311][ T5781] EXT4-fs warning (device loop5): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 71.204568][ T5781] EXT4-fs (loop5): mount failed [ 71.260069][ T5791] program syz.2.729 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 71.308539][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.376217][ T5799] netlink: 'syz.2.734': attribute type 21 has an invalid length. [ 71.392432][ T5802] netlink: 4 bytes leftover after parsing attributes in process `syz.3.731'. [ 71.407002][ T5802] netlink: 4 bytes leftover after parsing attributes in process `syz.3.731'. [ 71.418684][ T5806] loop5: detected capacity change from 0 to 512 [ 71.430363][ T5802] netlink: 58 bytes leftover after parsing attributes in process `syz.3.731'. [ 71.430413][ T5804] netlink: 4 bytes leftover after parsing attributes in process `syz.0.735'. [ 71.439497][ T5802] netlink: 24 bytes leftover after parsing attributes in process `syz.3.731'. [ 71.466244][ T5809] program syz.2.737 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 71.509093][ T5806] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 71.519491][ T5806] EXT4-fs (loop5): orphan cleanup on readonly fs [ 71.545058][ T5806] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.736: corrupted inode contents [ 71.557209][ T5806] EXT4-fs (loop5): Remounting filesystem read-only [ 71.570502][ T5806] EXT4-fs (loop5): 1 truncate cleaned up [ 71.576498][ T2722] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 71.587328][ T2722] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 71.587559][ T2722] EXT4-fs (loop5): Quota write (off=8, len=24) cancelled because transaction is not started [ 71.588438][ T5806] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 71.635950][ T4818] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.672667][ T5826] program syz.5.743 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 71.773759][ T5833] loop3: detected capacity change from 0 to 512 [ 71.802701][ T5833] EXT4-fs warning (device loop3): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 71.826848][ T5833] EXT4-fs (loop3): mount failed [ 71.877153][ T5835] loop2: detected capacity change from 0 to 512 [ 71.891607][ T5843] netlink: 4 bytes leftover after parsing attributes in process `syz.1.748'. [ 71.929572][ T5843] netlink: 4 bytes leftover after parsing attributes in process `syz.1.748'. [ 71.948727][ T5835] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 71.957241][ T5843] netlink: 58 bytes leftover after parsing attributes in process `syz.1.748'. [ 72.030607][ T5835] EXT4-fs (loop2): orphan cleanup on readonly fs [ 72.047459][ T5860] program syz.1.751 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 72.059229][ T5835] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.747: corrupted inode contents [ 72.072133][ T5835] EXT4-fs (loop2): Remounting filesystem read-only [ 72.081124][ T5835] EXT4-fs (loop2): 1 truncate cleaned up [ 72.086905][ T31] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 72.097644][ T31] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 72.114422][ T5862] loop3: detected capacity change from 0 to 512 [ 72.149074][ T5862] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 72.180410][ T31] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started [ 72.202075][ T5835] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 72.211331][ T5862] EXT4-fs (loop3): orphan cleanup on readonly fs [ 72.233045][ T5835] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.266574][ T5875] loop1: detected capacity change from 0 to 512 [ 72.288661][ T5862] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.753: corrupted inode contents [ 72.319768][ T5875] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 72.335817][ T5875] EXT4-fs (loop1): orphan cleanup on readonly fs [ 72.349672][ T5862] EXT4-fs (loop3): Remounting filesystem read-only [ 72.370514][ T5862] EXT4-fs (loop3): 1 truncate cleaned up [ 72.376405][ T31] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 72.387055][ T31] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 72.398894][ T5875] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.758: corrupted inode contents [ 72.438284][ T5875] EXT4-fs (loop1): Remounting filesystem read-only [ 72.460346][ T31] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started [ 72.460502][ T5875] EXT4-fs (loop1): 1 truncate cleaned up [ 72.476449][ T31] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 72.487160][ T31] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 72.518503][ T31] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started [ 72.539393][ T5862] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 72.554711][ T5875] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 72.574269][ T5862] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.665355][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.689987][ T5887] loop5: detected capacity change from 0 to 2048 [ 72.734935][ T5891] loop1: detected capacity change from 0 to 512 [ 72.745784][ T3292] loop5: p2 p3 p7 [ 72.761688][ T5891] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 72.784496][ T5887] loop5: p2 p3 p7 [ 72.793392][ T5891] EXT4-fs (loop1): 1 orphan inode deleted [ 72.816754][ T31] EXT4-fs error (device loop1): ext4_release_dquot:6973: comm kworker/u8:1: Failed to release dquot type 1 [ 72.834045][ T5891] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.889858][ T5891] ext4 filesystem being mounted at /153/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 72.941895][ T3292] udevd[3292]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 72.950482][ T5179] udevd[5179]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 72.963457][ T4102] udevd[4102]: inotify_add_watch(7, /dev/loop5p7, 10) failed: No such file or directory [ 72.995178][ T5901] program syz.5.768 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 73.006398][ T3292] udevd[3292]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 73.011577][ T4102] udevd[4102]: inotify_add_watch(7, /dev/loop5p7, 10) failed: No such file or directory [ 73.027687][ T5179] udevd[5179]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 73.028343][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.054933][ T5903] loop3: detected capacity change from 0 to 512 [ 73.081447][ T5903] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 73.098138][ T5903] EXT4-fs (loop3): orphan cleanup on readonly fs [ 73.137417][ T5913] netem: unknown loss type 12 [ 73.142211][ T5913] netem: change failed [ 73.150927][ T5913] program syz.5.771 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 73.171544][ T5903] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.769: corrupted inode contents [ 73.201319][ T5913] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 73.230510][ T5903] EXT4-fs (loop3): Remounting filesystem read-only [ 73.237332][ T5903] EXT4-fs (loop3): 1 truncate cleaned up [ 73.243329][ T31] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 73.253904][ T31] __quota_error: 210 callbacks suppressed [ 73.253918][ T31] Quota error (device loop3): write_blk: dquota write failed [ 73.267332][ T31] Quota error (device loop3): remove_free_dqentry: Can't write block (5) with free entries [ 73.277522][ T31] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 73.288284][ T31] Quota error (device loop3): write_blk: dquota write failed [ 73.295899][ T31] Quota error (device loop3): free_dqentry: Can't move quota data block (5) to free list [ 73.340435][ T5913] loop5: detected capacity change from 0 to 512 [ 73.376468][ T5913] Quota error (device loop5): v2_read_file_info: Number of blocks too big for quota file size (16979335168 > 6144). [ 73.393010][ T5913] EXT4-fs warning (device loop5): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 73.398975][ T31] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started [ 73.418624][ T31] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 73.427977][ T31] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 73.428243][ T5913] EXT4-fs (loop5): mount failed [ 73.440922][ T5903] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 73.441277][ T5903] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.619376][ T5925] loop2: detected capacity change from 0 to 512 [ 73.645784][ T5927] loop5: detected capacity change from 0 to 1024 [ 73.654870][ T29] audit: type=1326 audit(1755942360.028:1201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5926 comm="syz.5.776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faff829ebe9 code=0x7ffc0000 [ 73.678606][ T29] audit: type=1326 audit(1755942360.028:1202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5926 comm="syz.5.776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7faff829ebe9 code=0x7ffc0000 [ 73.702367][ T29] audit: type=1326 audit(1755942360.038:1203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5926 comm="syz.5.776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7faff829ec23 code=0x7ffc0000 [ 73.732604][ T5927] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.745573][ T5925] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 73.753725][ T5925] EXT4-fs (loop2): orphan cleanup on readonly fs [ 73.761927][ T5925] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.775: corrupted inode contents [ 73.825565][ T4818] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.847464][ T5925] EXT4-fs (loop2): Remounting filesystem read-only [ 73.871145][ T5925] EXT4-fs (loop2): 1 truncate cleaned up [ 73.877289][ T2722] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 73.887927][ T2722] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 73.955137][ T2722] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started [ 73.985409][ T5925] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 74.047334][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.057115][ T5946] program syz.3.781 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 74.067665][ T5928] loop1: detected capacity change from 0 to 1024 [ 74.082027][ T5948] program syz.5.783 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 74.084791][ T5928] EXT4-fs: Ignoring removed orlov option [ 74.184432][ T5928] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.234569][ T5964] netem: unknown loss type 12 [ 74.239303][ T5964] netem: change failed [ 74.299729][ T5964] program syz.3.785 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 74.344623][ T5964] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 74.393142][ T5974] loop5: detected capacity change from 0 to 512 [ 74.402543][ T5964] loop3: detected capacity change from 0 to 512 [ 74.421295][ T5974] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 74.429505][ T5974] EXT4-fs (loop5): orphan cleanup on readonly fs [ 74.457352][ T5974] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.789: corrupted inode contents [ 74.492862][ T5964] EXT4-fs warning (device loop3): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 74.520650][ T5964] EXT4-fs (loop3): mount failed [ 74.525591][ T5974] EXT4-fs (loop5): Remounting filesystem read-only [ 74.532624][ T5974] EXT4-fs (loop5): 1 truncate cleaned up [ 74.538493][ T37] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 74.569298][ T37] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 74.600350][ T37] EXT4-fs (loop5): Quota write (off=8, len=24) cancelled because transaction is not started [ 74.615965][ T5974] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 74.672404][ T4818] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.833384][ T5985] netem: unknown loss type 12 [ 74.838164][ T5985] netem: change failed [ 74.843352][ T5985] program syz.3.791 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 74.852746][ T5985] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 74.866880][ T5985] support for the xor transformation has been removed. [ 74.877039][ T5985] loop3: detected capacity change from 0 to 512 [ 74.923823][ T5985] EXT4-fs warning (device loop3): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 75.037232][ T5985] EXT4-fs (loop3): mount failed [ 75.043062][ T5994] loop2: detected capacity change from 0 to 2048 [ 75.139869][ T5994] loop2: p2 p3 p7 [ 75.188522][ T2993] loop2: p2 p3 p7 [ 75.203770][ T3292] udevd[3292]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 75.220652][ T5179] udevd[5179]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 75.234832][ T4102] udevd[4102]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory [ 75.293345][ T5179] udevd[5179]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 75.385943][ T6003] __nla_validate_parse: 16 callbacks suppressed [ 75.385991][ T6003] netlink: 4 bytes leftover after parsing attributes in process `syz.2.798'. [ 75.423506][ T6003] loop2: detected capacity change from 0 to 1024 [ 75.452604][ T6003] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.519529][ T6012] netlink: 32 bytes leftover after parsing attributes in process `syz.3.800'. [ 75.567538][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.591584][ T6012] netlink: 4 bytes leftover after parsing attributes in process `syz.3.800'. [ 75.611964][ T6015] netlink: 44 bytes leftover after parsing attributes in process `syz.5.801'. [ 75.620983][ T6015] netem: unknown loss type 12 [ 75.625681][ T6015] netem: change failed [ 75.631575][ T6015] program syz.5.801 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 75.641172][ T6015] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 75.665132][ T6015] support for the xor transformation has been removed. [ 75.674849][ T6015] loop5: detected capacity change from 0 to 512 [ 75.694641][ T6017] loop2: detected capacity change from 0 to 2048 [ 75.759386][ T6017] loop2: p2 p3 p7 [ 75.781498][ T6019] program syz.3.803 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 75.884980][ T6015] EXT4-fs warning (device loop5): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 75.915134][ T6015] EXT4-fs (loop5): mount failed [ 75.921385][ T6024] program syz.2.805 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 76.048757][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.061962][ T6032] loop2: detected capacity change from 0 to 2048 [ 76.092718][ T6037] netlink: 32 bytes leftover after parsing attributes in process `syz.0.809'. [ 76.107342][ T6037] bridge_slave_0: left allmulticast mode [ 76.113073][ T6037] bridge_slave_0: left promiscuous mode [ 76.118787][ T6037] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.132433][ T3292] loop2: p2 p3 p7 [ 76.150743][ T6032] loop2: p2 p3 p7 [ 76.158075][ T6037] bridge_slave_1: left allmulticast mode [ 76.163885][ T6037] bridge_slave_1: left promiscuous mode [ 76.169755][ T6037] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.174042][ T6041] netlink: 4 bytes leftover after parsing attributes in process `syz.0.809'. [ 76.222054][ T6037] bond0: (slave bond_slave_0): Releasing backup interface [ 76.244631][ T6045] loop2: detected capacity change from 0 to 512 [ 76.245203][ T6037] bond0: (slave bond_slave_1): Releasing backup interface [ 76.260155][ T6037] team0: Port device team_slave_0 removed [ 76.270675][ T6037] team0: Port device team_slave_1 removed [ 76.329535][ T6045] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 76.339713][ T6045] EXT4-fs (loop2): orphan cleanup on readonly fs [ 76.347737][ T6045] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.811: corrupted inode contents [ 76.360202][ T6045] EXT4-fs (loop2): Remounting filesystem read-only [ 76.367031][ T6045] EXT4-fs (loop2): 1 truncate cleaned up [ 76.372972][ T2722] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 76.383651][ T2722] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 76.396273][ T6053] netlink: 44 bytes leftover after parsing attributes in process `syz.0.813'. [ 76.405386][ T6053] netem: unknown loss type 12 [ 76.410186][ T6053] netem: change failed [ 76.426374][ T6057] program syz.5.814 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 76.436579][ T6053] program syz.0.813 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 76.446387][ T6053] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 76.454799][ T2722] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started [ 76.465718][ T6045] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 76.479012][ T6045] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.558726][ T6061] program syz.1.817 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 76.781415][ T6065] loop3: detected capacity change from 0 to 512 [ 76.799887][ T6067] program syz.2.821 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 76.847623][ T6076] netlink: 32 bytes leftover after parsing attributes in process `syz.1.824'. [ 76.880676][ T6065] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 76.893243][ T6076] bond0: (slave dummy0): Releasing backup interface [ 76.908070][ T6065] EXT4-fs (loop3): orphan cleanup on readonly fs [ 76.916264][ T6081] netlink: 'syz.2.825': attribute type 21 has an invalid length. [ 76.927518][ T6065] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.819: corrupted inode contents [ 76.981514][ T6084] program syz.0.826 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 76.991526][ T6065] EXT4-fs (loop3): Remounting filesystem read-only [ 76.998226][ T6065] EXT4-fs (loop3): 1 truncate cleaned up [ 77.004500][ T170] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 77.015251][ T170] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 77.035053][ T6082] netlink: 4 bytes leftover after parsing attributes in process `syz.1.824'. [ 77.035083][ T6076] bridge_slave_0: left allmulticast mode [ 77.035102][ T6076] bridge_slave_0: left promiscuous mode [ 77.055804][ T6076] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.067677][ T6089] program syz.2.828 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 77.079458][ T170] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started [ 77.091996][ T6076] bridge_slave_1: left allmulticast mode [ 77.097766][ T6076] bridge_slave_1: left promiscuous mode [ 77.103547][ T6076] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.111766][ T6065] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 77.152613][ T6076] bond0: (slave bond_slave_0): Releasing backup interface [ 77.164269][ T6076] bond0: (slave bond_slave_1): Releasing backup interface [ 77.171345][ T6093] netlink: 28 bytes leftover after parsing attributes in process `syz.2.831'. [ 77.211250][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.242574][ T6063] loop5: detected capacity change from 0 to 1024 [ 77.280644][ T6101] program syz.2.833 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 77.282673][ T6063] EXT4-fs: Ignoring removed orlov option [ 77.374890][ T6063] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.388638][ T6114] netem: unknown loss type 12 [ 77.393554][ T6114] netem: change failed [ 77.401808][ T6114] program syz.1.832 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 77.411590][ T6115] netlink: 'syz.2.838': attribute type 21 has an invalid length. [ 77.442357][ T6114] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 77.511223][ T6131] support for the xor transformation has been removed. [ 77.562292][ T6114] loop1: detected capacity change from 0 to 512 [ 77.712994][ T6114] EXT4-fs warning (device loop1): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 77.748232][ T6114] EXT4-fs (loop1): mount failed [ 77.858642][ T6162] netem: unknown loss type 12 [ 77.863461][ T6162] netem: change failed [ 77.874803][ T6162] program syz.0.848 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 77.919755][ T6162] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 77.947867][ T6169] capability: warning: `syz.3.851' uses deprecated v2 capabilities in a way that may be insecure [ 78.058929][ T6177] netlink: 'syz.2.852': attribute type 21 has an invalid length. [ 78.122488][ T6181] FAULT_INJECTION: forcing a failure. [ 78.122488][ T6181] name failslab, interval 1, probability 0, space 0, times 0 [ 78.135360][ T6181] CPU: 0 UID: 0 PID: 6181 Comm: syz.2.853 Not tainted syzkaller #0 PREEMPT(voluntary) [ 78.135389][ T6181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 78.135402][ T6181] Call Trace: [ 78.135409][ T6181] [ 78.135418][ T6181] __dump_stack+0x1d/0x30 [ 78.135443][ T6181] dump_stack_lvl+0xe8/0x140 [ 78.135471][ T6181] dump_stack+0x15/0x1b [ 78.135564][ T6181] should_fail_ex+0x265/0x280 [ 78.135586][ T6181] should_failslab+0x8c/0xb0 [ 78.135614][ T6181] kmem_cache_alloc_noprof+0x50/0x310 [ 78.135678][ T6181] ? __rds_conn_create+0x3e7/0x1040 [ 78.135696][ T6181] ? mntput_no_expire+0x6f/0x460 [ 78.135725][ T6181] __rds_conn_create+0x3e7/0x1040 [ 78.135751][ T6181] rds_conn_create_outgoing+0x43/0x60 [ 78.135876][ T6181] rds_sendmsg+0xbd2/0x14a0 [ 78.135906][ T6181] ? __pfx_rds_sendmsg+0x10/0x10 [ 78.135939][ T6181] __sock_sendmsg+0x142/0x180 [ 78.135971][ T6181] __sys_sendto+0x268/0x330 [ 78.136000][ T6181] __x64_sys_sendto+0x76/0x90 [ 78.136023][ T6181] x64_sys_call+0x2d05/0x2ff0 [ 78.136103][ T6181] do_syscall_64+0xd2/0x200 [ 78.136132][ T6181] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 78.136157][ T6181] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 78.136188][ T6181] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.136227][ T6181] RIP: 0033:0x7febe1f3ebe9 [ 78.136245][ T6181] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 78.136303][ T6181] RSP: 002b:00007febe09a7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 78.136386][ T6181] RAX: ffffffffffffffda RBX: 00007febe2165fa0 RCX: 00007febe1f3ebe9 [ 78.136401][ T6181] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 78.136415][ T6181] RBP: 00007febe09a7090 R08: 0000000000000000 R09: 0000000000000000 [ 78.136426][ T6181] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 78.136438][ T6181] R13: 00007febe2166038 R14: 00007febe2165fa0 R15: 00007ffee1d2d5e8 [ 78.136455][ T6181] [ 78.441521][ T6191] program syz.2.858 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 78.609858][ T6210] netlink: 'syz.0.864': attribute type 21 has an invalid length. [ 78.653448][ T6217] FAULT_INJECTION: forcing a failure. [ 78.653448][ T6217] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 78.666724][ T6217] CPU: 1 UID: 0 PID: 6217 Comm: syz.2.865 Not tainted syzkaller #0 PREEMPT(voluntary) [ 78.666783][ T6217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 78.666797][ T6217] Call Trace: [ 78.666805][ T6217] [ 78.666814][ T6217] __dump_stack+0x1d/0x30 [ 78.666839][ T6217] dump_stack_lvl+0xe8/0x140 [ 78.666862][ T6217] dump_stack+0x15/0x1b [ 78.666882][ T6217] should_fail_ex+0x265/0x280 [ 78.666933][ T6217] should_fail+0xb/0x20 [ 78.666950][ T6217] should_fail_usercopy+0x1a/0x20 [ 78.666970][ T6217] _copy_from_user+0x1c/0xb0 [ 78.667000][ T6217] ___sys_sendmsg+0xc1/0x1d0 [ 78.667110][ T6217] __x64_sys_sendmsg+0xd4/0x160 [ 78.667142][ T6217] x64_sys_call+0x191e/0x2ff0 [ 78.667166][ T6217] do_syscall_64+0xd2/0x200 [ 78.667195][ T6217] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 78.667292][ T6217] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 78.667327][ T6217] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.667351][ T6217] RIP: 0033:0x7febe1f3ebe9 [ 78.667369][ T6217] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 78.667387][ T6217] RSP: 002b:00007febe09a7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 78.667408][ T6217] RAX: ffffffffffffffda RBX: 00007febe2165fa0 RCX: 00007febe1f3ebe9 [ 78.667489][ T6217] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 78.667503][ T6217] RBP: 00007febe09a7090 R08: 0000000000000000 R09: 0000000000000000 [ 78.667517][ T6217] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 78.667530][ T6217] R13: 00007febe2166038 R14: 00007febe2165fa0 R15: 00007ffee1d2d5e8 [ 78.667548][ T6217] [ 78.938142][ T6230] loop3: detected capacity change from 0 to 164 [ 78.959880][ T29] kauditd_printk_skb: 110 callbacks suppressed [ 78.959897][ T29] audit: type=1400 audit(1755942365.348:1286): avc: denied { mount } for pid=6221 comm="syz.3.867" name="/" dev="loop3" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 79.003986][ T6232] program syz.1.872 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 79.006946][ T6230] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 79.055232][ T29] audit: type=1400 audit(1755942365.398:1287): avc: denied { mounton } for pid=6221 comm="syz.3.867" path="/162/file0/file0" dev="loop3" ino=1862 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=file permissive=1 [ 79.078670][ T29] audit: type=1400 audit(1755942365.398:1288): avc: denied { view } for pid=6221 comm="syz.3.867" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 79.173139][ T6257] netlink: 'syz.2.877': attribute type 21 has an invalid length. [ 79.196481][ T29] audit: type=1400 audit(1755942365.518:1289): avc: denied { unmount } for pid=3302 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 79.286705][ T29] audit: type=1326 audit(1755942365.618:1290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6258 comm="syz.3.879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3189d2ebe9 code=0x7ffc0000 [ 79.310405][ T29] audit: type=1326 audit(1755942365.618:1291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6258 comm="syz.3.879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3189d2ebe9 code=0x7ffc0000 [ 79.334126][ T29] audit: type=1326 audit(1755942365.628:1292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6258 comm="syz.3.879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f3189d2ebe9 code=0x7ffc0000 [ 79.358067][ T29] audit: type=1326 audit(1755942365.628:1293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6258 comm="syz.3.879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3189d2ebe9 code=0x7ffc0000 [ 79.381541][ T29] audit: type=1326 audit(1755942365.628:1294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6258 comm="syz.3.879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3189d2ebe9 code=0x7ffc0000 [ 79.405076][ T29] audit: type=1326 audit(1755942365.628:1295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6258 comm="syz.3.879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3189d2d550 code=0x7ffc0000 [ 79.449250][ T6272] netem: unknown loss type 12 [ 79.450957][ T6259] loop3: detected capacity change from 0 to 128 [ 79.454130][ T6272] netem: change failed [ 79.493472][ T6272] program syz.0.882 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 79.523565][ T6272] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 79.535344][ T6259] syz.3.879 (6259): attempted to duplicate a private mapping with mremap. This is not supported. [ 79.617146][ T6289] program syz.1.890 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 79.699216][ T6296] FAULT_INJECTION: forcing a failure. [ 79.699216][ T6296] name failslab, interval 1, probability 0, space 0, times 0 [ 79.712050][ T6296] CPU: 1 UID: 0 PID: 6296 Comm: syz.2.893 Not tainted syzkaller #0 PREEMPT(voluntary) [ 79.712079][ T6296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 79.712092][ T6296] Call Trace: [ 79.712109][ T6296] [ 79.712118][ T6296] __dump_stack+0x1d/0x30 [ 79.712140][ T6296] dump_stack_lvl+0xe8/0x140 [ 79.712158][ T6296] dump_stack+0x15/0x1b [ 79.712187][ T6296] should_fail_ex+0x265/0x280 [ 79.712240][ T6296] should_failslab+0x8c/0xb0 [ 79.712263][ T6296] kmem_cache_alloc_node_noprof+0x57/0x320 [ 79.712289][ T6296] ? __alloc_skb+0x101/0x320 [ 79.712345][ T6296] __alloc_skb+0x101/0x320 [ 79.712389][ T6296] ? audit_log_start+0x365/0x6c0 [ 79.712417][ T6296] audit_log_start+0x380/0x6c0 [ 79.712479][ T6296] audit_seccomp+0x48/0x100 [ 79.712503][ T6296] ? __seccomp_filter+0x68c/0x10d0 [ 79.712529][ T6296] __seccomp_filter+0x69d/0x10d0 [ 79.712608][ T6296] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 79.712632][ T6296] ? vfs_write+0x7e8/0x960 [ 79.712718][ T6296] __secure_computing+0x82/0x150 [ 79.712743][ T6296] syscall_trace_enter+0xcf/0x1e0 [ 79.712771][ T6296] do_syscall_64+0xac/0x200 [ 79.712799][ T6296] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 79.712872][ T6296] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 79.712905][ T6296] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.712929][ T6296] RIP: 0033:0x7febe1f3ebe9 [ 79.712948][ T6296] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 79.712981][ T6296] RSP: 002b:00007febe09a7038 EFLAGS: 00000246 ORIG_RAX: 000000000000001a [ 79.713000][ T6296] RAX: ffffffffffffffda RBX: 00007febe2165fa0 RCX: 00007febe1f3ebe9 [ 79.713015][ T6296] RDX: 0000000000000006 RSI: 0000000000003000 RDI: 0000200000ffb000 [ 79.713030][ T6296] RBP: 00007febe09a7090 R08: 0000000000000000 R09: 0000000000000000 [ 79.713045][ T6296] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 79.713059][ T6296] R13: 00007febe2166038 R14: 00007febe2165fa0 R15: 00007ffee1d2d5e8 [ 79.713147][ T6296] [ 80.076927][ T6316] FAULT_INJECTION: forcing a failure. [ 80.076927][ T6316] name failslab, interval 1, probability 0, space 0, times 0 [ 80.090216][ T6316] CPU: 1 UID: 0 PID: 6316 Comm: syz.2.897 Not tainted syzkaller #0 PREEMPT(voluntary) [ 80.090336][ T6316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 80.090349][ T6316] Call Trace: [ 80.090356][ T6316] [ 80.090365][ T6316] __dump_stack+0x1d/0x30 [ 80.090389][ T6316] dump_stack_lvl+0xe8/0x140 [ 80.090411][ T6316] dump_stack+0x15/0x1b [ 80.090511][ T6316] should_fail_ex+0x265/0x280 [ 80.090532][ T6316] should_failslab+0x8c/0xb0 [ 80.090560][ T6316] kmem_cache_alloc_node_noprof+0x57/0x320 [ 80.090642][ T6316] ? __alloc_skb+0x101/0x320 [ 80.090689][ T6316] __alloc_skb+0x101/0x320 [ 80.090769][ T6316] netlink_alloc_large_skb+0xba/0xf0 [ 80.090800][ T6316] netlink_sendmsg+0x3cf/0x6b0 [ 80.090822][ T6316] ? __pfx_netlink_sendmsg+0x10/0x10 [ 80.090922][ T6316] __sock_sendmsg+0x142/0x180 [ 80.090951][ T6316] ____sys_sendmsg+0x31e/0x4e0 [ 80.090973][ T6316] ___sys_sendmsg+0x17b/0x1d0 [ 80.091046][ T6316] __x64_sys_sendmsg+0xd4/0x160 [ 80.091076][ T6316] x64_sys_call+0x191e/0x2ff0 [ 80.091102][ T6316] do_syscall_64+0xd2/0x200 [ 80.091197][ T6316] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 80.091227][ T6316] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 80.091256][ T6316] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.091309][ T6316] RIP: 0033:0x7febe1f3ebe9 [ 80.091327][ T6316] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 80.091348][ T6316] RSP: 002b:00007febe09a7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 80.091373][ T6316] RAX: ffffffffffffffda RBX: 00007febe2165fa0 RCX: 00007febe1f3ebe9 [ 80.091388][ T6316] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 80.091401][ T6316] RBP: 00007febe09a7090 R08: 0000000000000000 R09: 0000000000000000 [ 80.091416][ T6316] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 80.091494][ T6316] R13: 00007febe2166038 R14: 00007febe2165fa0 R15: 00007ffee1d2d5e8 [ 80.091515][ T6316] [ 80.351342][ T6326] program syz.2.903 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 80.400269][ T6328] __nla_validate_parse: 10 callbacks suppressed [ 80.406624][ T6328] netlink: 32 bytes leftover after parsing attributes in process `syz.1.905'. [ 80.438255][ T6330] program syz.2.906 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 80.460585][ T4818] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.586181][ T6341] loop2: detected capacity change from 0 to 2048 [ 80.623044][ T6347] netlink: 8 bytes leftover after parsing attributes in process `syz.1.914'. [ 80.634854][ T6345] loop5: detected capacity change from 0 to 128 [ 80.654202][ T6347] loop1: detected capacity change from 0 to 512 [ 80.664857][ T4102] loop2: p2 p3 p7 [ 80.684916][ T6347] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 80.688916][ T6341] loop2: p2 p3 p7 [ 80.699107][ T6347] EXT4-fs (loop1): orphan cleanup on readonly fs [ 80.755808][ T6347] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.914: corrupted inode contents [ 80.931611][ T6347] EXT4-fs (loop1): Remounting filesystem read-only [ 80.945217][ T6347] EXT4-fs (loop1): 1 truncate cleaned up [ 80.969212][ T6354] syz.5.907: attempt to access beyond end of device [ 80.969212][ T6354] loop5: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 81.006732][ T6354] syz.5.907: attempt to access beyond end of device [ 81.006732][ T6354] loop5: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 81.047111][ T5179] udevd[5179]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 81.058283][ T3292] udevd[3292]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 81.071549][ T4102] udevd[4102]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory [ 81.081673][ T2722] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 81.092456][ T2722] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 81.109897][ T6354] syz.5.907: attempt to access beyond end of device [ 81.109897][ T6354] loop5: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 81.126868][ T2722] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started [ 81.176706][ T6347] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 81.180947][ T6363] program syz.3.919 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 81.190500][ T6347] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.208246][ T6354] syz.5.907: attempt to access beyond end of device [ 81.208246][ T6354] loop5: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 81.239301][ T6354] syz.5.907: attempt to access beyond end of device [ 81.239301][ T6354] loop5: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 81.253147][ T6354] syz.5.907: attempt to access beyond end of device [ 81.253147][ T6354] loop5: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 81.349459][ T6354] syz.5.907: attempt to access beyond end of device [ 81.349459][ T6354] loop5: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 81.365880][ T6373] FAULT_INJECTION: forcing a failure. [ 81.365880][ T6373] name failslab, interval 1, probability 0, space 0, times 0 [ 81.378739][ T6373] CPU: 0 UID: 0 PID: 6373 Comm: syz.0.922 Not tainted syzkaller #0 PREEMPT(voluntary) [ 81.378767][ T6373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 81.378778][ T6373] Call Trace: [ 81.378848][ T6373] [ 81.378858][ T6373] __dump_stack+0x1d/0x30 [ 81.378881][ T6373] dump_stack_lvl+0xe8/0x140 [ 81.378905][ T6373] dump_stack+0x15/0x1b [ 81.378924][ T6373] should_fail_ex+0x265/0x280 [ 81.378949][ T6373] should_failslab+0x8c/0xb0 [ 81.379017][ T6373] kmem_cache_alloc_noprof+0x50/0x310 [ 81.379111][ T6373] ? io_submit_one+0xb8/0x11d0 [ 81.379136][ T6373] io_submit_one+0xb8/0x11d0 [ 81.379180][ T6373] __se_sys_io_submit+0xfb/0x280 [ 81.379212][ T6373] __x64_sys_io_submit+0x43/0x50 [ 81.379235][ T6373] x64_sys_call+0x2d5d/0x2ff0 [ 81.379254][ T6373] do_syscall_64+0xd2/0x200 [ 81.379359][ T6373] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 81.379387][ T6373] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 81.379417][ T6373] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.379439][ T6373] RIP: 0033:0x7f635e5bebe9 [ 81.379473][ T6373] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 81.379494][ T6373] RSP: 002b:00007f635d027038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 81.379517][ T6373] RAX: ffffffffffffffda RBX: 00007f635e7e5fa0 RCX: 00007f635e5bebe9 [ 81.379533][ T6373] RDX: 0000200000000940 RSI: 0000000000000001 RDI: 00007f635cfe6000 [ 81.379545][ T6373] RBP: 00007f635d027090 R08: 0000000000000000 R09: 0000000000000000 [ 81.379556][ T6373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 81.379577][ T6373] R13: 00007f635e7e6038 R14: 00007f635e7e5fa0 R15: 00007ffc9b4c6e28 [ 81.379660][ T6373] [ 81.411925][ T6354] syz.5.907: attempt to access beyond end of device [ 81.411925][ T6354] loop5: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 81.572773][ T6354] syz.5.907: attempt to access beyond end of device [ 81.572773][ T6354] loop5: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 81.586239][ T6354] syz.5.907: attempt to access beyond end of device [ 81.586239][ T6354] loop5: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 81.651598][ T6383] netlink: 'syz.0.926': attribute type 21 has an invalid length. [ 81.661712][ T6381] loop1: detected capacity change from 0 to 512 [ 81.670600][ T6381] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 81.685444][ T6381] EXT4-fs (loop1): 1 orphan inode deleted [ 81.702861][ T6381] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.716376][ T152] EXT4-fs error (device loop1): ext4_release_dquot:6973: comm kworker/u8:4: Failed to release dquot type 1 [ 81.742422][ T6381] ext4 filesystem being mounted at /186/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.771339][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.785748][ T6394] netlink: 4 bytes leftover after parsing attributes in process `syz.0.928'. [ 81.819885][ T6397] loop5: detected capacity change from 0 to 512 [ 81.839383][ T6400] program syz.0.931 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 81.849101][ T6397] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 81.873406][ T6397] EXT4-fs (loop5): 1 orphan inode deleted [ 81.879832][ T6397] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.892819][ T3873] EXT4-fs error (device loop5): ext4_release_dquot:6973: comm kworker/u8:8: Failed to release dquot type 1 [ 81.893373][ T6397] ext4 filesystem being mounted at /71/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.944309][ T4818] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.044059][ T6421] loop2: detected capacity change from 0 to 164 [ 82.053590][ T6419] loop5: detected capacity change from 0 to 512 [ 82.077242][ T6419] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 82.087201][ T6421] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 82.088421][ T6419] EXT4-fs (loop5): orphan cleanup on readonly fs [ 82.121236][ T6419] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.938: corrupted inode contents [ 82.139798][ T6419] EXT4-fs (loop5): Remounting filesystem read-only [ 82.146983][ T6419] EXT4-fs (loop5): 1 truncate cleaned up [ 82.155324][ T170] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 82.166428][ T170] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 82.179994][ T6434] program syz.2.942 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 82.182575][ T170] EXT4-fs (loop5): Quota write (off=8, len=24) cancelled because transaction is not started [ 82.201024][ T6419] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 82.214347][ T6419] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.245969][ T6438] loop2: detected capacity change from 0 to 2048 [ 82.325973][ T3292] loop2: p2 p3 p7 [ 82.338449][ T6438] loop2: p2 p3 p7 [ 82.393132][ T4102] udevd[4102]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory [ 82.394341][ T3292] udevd[3292]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 82.404291][ T5179] udevd[5179]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 82.467766][ T3292] udevd[3292]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 82.467846][ T4102] udevd[4102]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory [ 82.492408][ T5179] udevd[5179]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 82.599477][ T6463] program syz.2.955 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 82.632247][ T6458] loop1: detected capacity change from 0 to 128 [ 82.687951][ T6470] FAULT_INJECTION: forcing a failure. [ 82.687951][ T6470] name failslab, interval 1, probability 0, space 0, times 0 [ 82.700775][ T6470] CPU: 1 UID: 0 PID: 6470 Comm: syz.5.957 Not tainted syzkaller #0 PREEMPT(voluntary) [ 82.700802][ T6470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 82.700817][ T6470] Call Trace: [ 82.700824][ T6470] [ 82.700832][ T6470] __dump_stack+0x1d/0x30 [ 82.700891][ T6470] dump_stack_lvl+0xe8/0x140 [ 82.700922][ T6470] dump_stack+0x15/0x1b [ 82.700998][ T6470] should_fail_ex+0x265/0x280 [ 82.701107][ T6470] ? audit_log_d_path+0x8d/0x150 [ 82.701135][ T6470] should_failslab+0x8c/0xb0 [ 82.701162][ T6470] __kmalloc_cache_noprof+0x4c/0x320 [ 82.701241][ T6470] audit_log_d_path+0x8d/0x150 [ 82.701303][ T6470] audit_log_d_path_exe+0x42/0x70 [ 82.701406][ T6470] audit_log_task+0x1e9/0x250 [ 82.701438][ T6470] audit_seccomp+0x61/0x100 [ 82.701460][ T6470] ? __seccomp_filter+0x68c/0x10d0 [ 82.701513][ T6470] __seccomp_filter+0x69d/0x10d0 [ 82.701538][ T6470] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 82.701573][ T6470] ? vfs_write+0x7e8/0x960 [ 82.701598][ T6470] ? __rcu_read_unlock+0x4f/0x70 [ 82.701648][ T6470] ? __fget_files+0x184/0x1c0 [ 82.701679][ T6470] __secure_computing+0x82/0x150 [ 82.701715][ T6470] syscall_trace_enter+0xcf/0x1e0 [ 82.701742][ T6470] do_syscall_64+0xac/0x200 [ 82.701766][ T6470] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 82.701867][ T6470] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 82.701894][ T6470] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.701928][ T6470] RIP: 0033:0x7faff829ebe9 [ 82.701947][ T6470] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 82.701965][ T6470] RSP: 002b:00007faff6cff038 EFLAGS: 00000246 ORIG_RAX: 000000000000006f [ 82.701990][ T6470] RAX: ffffffffffffffda RBX: 00007faff84c5fa0 RCX: 00007faff829ebe9 [ 82.702041][ T6470] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffffffffffff [ 82.702053][ T6470] RBP: 00007faff6cff090 R08: 0000000000000000 R09: 0000000000000000 [ 82.702065][ T6470] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 82.702077][ T6470] R13: 00007faff84c6038 R14: 00007faff84c5fa0 R15: 00007ffcdfa59918 [ 82.702094][ T6470] [ 82.990833][ T6477] netlink: 'syz.5.960': attribute type 1 has an invalid length. [ 83.023039][ T6480] loop2: detected capacity change from 0 to 2048 [ 83.038130][ T6477] 8021q: adding VLAN 0 to HW filter on device bond1 [ 83.080143][ T6480] loop2: p2 p3 p7 [ 83.087743][ T6491] FAULT_INJECTION: forcing a failure. [ 83.087743][ T6491] name failslab, interval 1, probability 0, space 0, times 0 [ 83.100636][ T6491] CPU: 0 UID: 0 PID: 6491 Comm: syz.5.963 Not tainted syzkaller #0 PREEMPT(voluntary) [ 83.100664][ T6491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 83.100677][ T6491] Call Trace: [ 83.100683][ T6491] [ 83.100690][ T6491] __dump_stack+0x1d/0x30 [ 83.100731][ T6491] dump_stack_lvl+0xe8/0x140 [ 83.100753][ T6491] dump_stack+0x15/0x1b [ 83.100772][ T6491] should_fail_ex+0x265/0x280 [ 83.100795][ T6491] should_failslab+0x8c/0xb0 [ 83.100854][ T6491] kmem_cache_alloc_lru_noprof+0x55/0x310 [ 83.100886][ T6491] ? __d_alloc+0x3d/0x340 [ 83.100917][ T6491] __d_alloc+0x3d/0x340 [ 83.100975][ T6491] ? __rcu_read_unlock+0x4f/0x70 [ 83.101021][ T6491] d_alloc_parallel+0x53/0xc60 [ 83.101106][ T6491] ? selinux_inode_permission+0x62d/0x740 [ 83.101141][ T6491] ? make_vfsuid+0x49/0xa0 [ 83.101181][ T6491] ? lockref_get_not_dead+0x120/0x1c0 [ 83.101326][ T6491] ? __rcu_read_unlock+0x4f/0x70 [ 83.101351][ T6491] __lookup_slow+0x8c/0x250 [ 83.101471][ T6491] lookup_slow+0x3c/0x60 [ 83.101581][ T6491] walk_component+0x1ec/0x220 [ 83.101637][ T6491] path_lookupat+0xfe/0x2a0 [ 83.101666][ T6491] filename_lookup+0x147/0x340 [ 83.101699][ T6491] user_path_at+0x3e/0x130 [ 83.101793][ T6491] __se_sys_chroot+0x45/0x230 [ 83.101825][ T6491] __x64_sys_chroot+0x1f/0x30 [ 83.101852][ T6491] x64_sys_call+0x214f/0x2ff0 [ 83.101875][ T6491] do_syscall_64+0xd2/0x200 [ 83.101930][ T6491] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 83.101956][ T6491] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 83.101984][ T6491] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.102004][ T6491] RIP: 0033:0x7faff829ebe9 [ 83.102044][ T6491] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 83.102061][ T6491] RSP: 002b:00007faff6cff038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a1 [ 83.102085][ T6491] RAX: ffffffffffffffda RBX: 00007faff84c5fa0 RCX: 00007faff829ebe9 [ 83.102154][ T6491] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000040 [ 83.102182][ T6491] RBP: 00007faff6cff090 R08: 0000000000000000 R09: 0000000000000000 [ 83.102195][ T6491] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 83.102209][ T6491] R13: 00007faff84c6038 R14: 00007faff84c5fa0 R15: 00007ffcdfa59918 [ 83.102266][ T6491] [ 83.431599][ T6509] program syz.2.969 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 83.476719][ T6511] netlink: 4 bytes leftover after parsing attributes in process `syz.2.971'. [ 83.494170][ T6511] loop2: detected capacity change from 0 to 1024 [ 83.524460][ T6511] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.561341][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.582787][ T6524] netlink: 8 bytes leftover after parsing attributes in process `syz.2.973'. [ 83.611479][ T6524] __vm_enough_memory: pid: 6524, comm: syz.2.973, bytes: 21199609614336 not enough memory for the allocation [ 83.686875][ T6534] program syz.2.977 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 83.717863][ T6540] netlink: 8 bytes leftover after parsing attributes in process `syz.3.979'. [ 83.730966][ T6540] FAULT_INJECTION: forcing a failure. [ 83.730966][ T6540] name failslab, interval 1, probability 0, space 0, times 0 [ 83.743690][ T6540] CPU: 0 UID: 0 PID: 6540 Comm: syz.3.979 Not tainted syzkaller #0 PREEMPT(voluntary) [ 83.743722][ T6540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 83.743734][ T6540] Call Trace: [ 83.743739][ T6540] [ 83.743753][ T6540] __dump_stack+0x1d/0x30 [ 83.743776][ T6540] dump_stack_lvl+0xe8/0x140 [ 83.743789][ T6540] dump_stack+0x15/0x1b [ 83.743852][ T6540] should_fail_ex+0x265/0x280 [ 83.743867][ T6540] should_failslab+0x8c/0xb0 [ 83.743899][ T6540] kmem_cache_alloc_noprof+0x50/0x310 [ 83.743967][ T6540] ? audit_log_start+0x365/0x6c0 [ 83.744067][ T6540] audit_log_start+0x365/0x6c0 [ 83.744087][ T6540] audit_seccomp+0x48/0x100 [ 83.744156][ T6540] ? __seccomp_filter+0x68c/0x10d0 [ 83.744170][ T6540] __seccomp_filter+0x69d/0x10d0 [ 83.744261][ T6540] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 83.744278][ T6540] ? vfs_write+0x7e8/0x960 [ 83.744295][ T6540] __secure_computing+0x82/0x150 [ 83.744309][ T6540] syscall_trace_enter+0xcf/0x1e0 [ 83.744350][ T6540] do_syscall_64+0xac/0x200 [ 83.744368][ T6540] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 83.744423][ T6540] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 83.744439][ T6540] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.744453][ T6540] RIP: 0033:0x7f3189d2ebe9 [ 83.744465][ T6540] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 83.744483][ T6540] RSP: 002b:00007f318878f038 EFLAGS: 00000246 ORIG_RAX: 000000000000000c [ 83.744497][ T6540] RAX: ffffffffffffffda RBX: 00007f3189f55fa0 RCX: 00007f3189d2ebe9 [ 83.744542][ T6540] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000689d80000000 [ 83.744550][ T6540] RBP: 00007f318878f090 R08: 0000000000000000 R09: 0000000000000000 [ 83.744558][ T6540] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 83.744566][ T6540] R13: 00007f3189f56038 R14: 00007f3189f55fa0 R15: 00007ffe440c5db8 [ 83.744580][ T6540] [ 83.744603][ T6540] __vm_enough_memory: pid: 6540, comm: syz.3.979, bytes: 21200345788416 not enough memory for the allocation [ 83.971336][ T6548] netlink: 'syz.1.981': attribute type 21 has an invalid length. [ 83.979561][ T6546] netlink: 8 bytes leftover after parsing attributes in process `syz.0.980'. [ 83.994005][ T6550] program syz.1.982 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 84.007654][ T29] kauditd_printk_skb: 338 callbacks suppressed [ 84.007672][ T29] audit: type=1326 audit(1755942370.398:1616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6545 comm="syz.0.980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f635e5bebe9 code=0x7ffc0000 [ 84.046555][ T29] audit: type=1326 audit(1755942370.398:1617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6545 comm="syz.0.980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=284 compat=0 ip=0x7f635e5bebe9 code=0x7ffc0000 [ 84.070229][ T29] audit: type=1326 audit(1755942370.398:1618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6545 comm="syz.0.980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f635e5bebe9 code=0x7ffc0000 [ 84.078800][ T6552] netlink: 4 bytes leftover after parsing attributes in process `syz.3.983'. [ 84.094026][ T29] audit: type=1326 audit(1755942370.398:1619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6545 comm="syz.0.980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f635e5bebe9 code=0x7ffc0000 [ 84.128802][ T29] audit: type=1326 audit(1755942370.398:1620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6545 comm="syz.0.980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f635e5bebe9 code=0x7ffc0000 [ 84.152710][ T29] audit: type=1326 audit(1755942370.398:1621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6545 comm="syz.0.980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f635e5bebe9 code=0x7ffc0000 [ 84.176426][ T29] audit: type=1326 audit(1755942370.398:1622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6545 comm="syz.0.980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f635e5bebe9 code=0x7ffc0000 [ 84.200123][ T29] audit: type=1326 audit(1755942370.428:1623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6545 comm="syz.0.980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f635e5bebe9 code=0x7ffc0000 [ 84.236118][ T29] audit: type=1326 audit(1755942370.628:1624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6551 comm="syz.3.983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3189d2ebe9 code=0x7ffc0000 [ 84.260481][ T29] audit: type=1326 audit(1755942370.628:1625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6551 comm="syz.3.983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3189d2ebe9 code=0x7ffc0000 [ 84.288696][ T6552] loop3: detected capacity change from 0 to 1024 [ 84.317763][ T6561] netlink: 8 bytes leftover after parsing attributes in process `syz.0.986'. [ 84.340080][ T6552] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.436697][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.497658][ T6582] netlink: 'syz.3.993': attribute type 21 has an invalid length. [ 84.525043][ T6584] program syz.3.994 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 84.798525][ T6609] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1002'. [ 84.872276][ T6626] netlink: 'syz.2.1005': attribute type 10 has an invalid length. [ 84.884234][ T6626] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 85.387336][ T6639] program syz.1.1009 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 85.583813][ T6646] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1011'. [ 85.596534][ T6646] loop5: detected capacity change from 0 to 512 [ 85.611357][ T6646] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 85.619497][ T6646] EXT4-fs (loop5): orphan cleanup on readonly fs [ 85.629446][ T6646] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.1011: corrupted inode contents [ 85.643101][ T6646] EXT4-fs (loop5): Remounting filesystem read-only [ 85.650007][ T6646] EXT4-fs (loop5): 1 truncate cleaned up [ 85.680213][ T6650] FAULT_INJECTION: forcing a failure. [ 85.680213][ T6650] name failslab, interval 1, probability 0, space 0, times 0 [ 85.692957][ T6650] CPU: 1 UID: 0 PID: 6650 Comm: syz.1.1010 Not tainted syzkaller #0 PREEMPT(voluntary) [ 85.693043][ T6650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 85.693055][ T6650] Call Trace: [ 85.693062][ T6650] [ 85.693070][ T6650] __dump_stack+0x1d/0x30 [ 85.693092][ T6650] dump_stack_lvl+0xe8/0x140 [ 85.693114][ T6650] dump_stack+0x15/0x1b [ 85.693135][ T6650] should_fail_ex+0x265/0x280 [ 85.693240][ T6650] should_failslab+0x8c/0xb0 [ 85.693289][ T6650] kmem_cache_alloc_node_noprof+0x57/0x320 [ 85.693374][ T6650] ? dup_task_struct+0x70/0x6a0 [ 85.693400][ T6650] dup_task_struct+0x70/0x6a0 [ 85.693428][ T6650] ? _parse_integer+0x27/0x40 [ 85.693453][ T6650] copy_process+0x399/0x2000 [ 85.693544][ T6650] ? kstrtouint+0x76/0xc0 [ 85.693563][ T6650] ? kstrtouint_from_user+0x9f/0xf0 [ 85.693584][ T6650] ? sysvec_reschedule_ipi+0x4f/0x70 [ 85.693603][ T6650] ? trace_reschedule_exit+0xd/0xc0 [ 85.693623][ T6650] kernel_clone+0x16c/0x5c0 [ 85.693664][ T6650] __x64_sys_clone+0xe6/0x120 [ 85.693701][ T6650] x64_sys_call+0x119c/0x2ff0 [ 85.693727][ T6650] do_syscall_64+0xd2/0x200 [ 85.693869][ T6650] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 85.693903][ T6650] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 85.693931][ T6650] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.693973][ T6650] RIP: 0033:0x7ff225ebebe9 [ 85.693991][ T6650] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 85.694062][ T6650] RSP: 002b:00007ff2248dcfe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 85.694097][ T6650] RAX: ffffffffffffffda RBX: 00007ff2260e6180 RCX: 00007ff225ebebe9 [ 85.694112][ T6650] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a000000 [ 85.694127][ T6650] RBP: 00007ff2248dd090 R08: 0000000000000000 R09: 0000000000000000 [ 85.694141][ T6650] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 85.694222][ T6650] R13: 00007ff2260e6218 R14: 00007ff2260e6180 R15: 00007ffebd85f458 [ 85.694243][ T6650] [ 85.934445][ T152] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 85.945301][ T152] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 85.963084][ T152] EXT4-fs (loop5): Quota write (off=8, len=24) cancelled because transaction is not started [ 85.974531][ T6646] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 85.987983][ T6646] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.051647][ T6659] loop2: detected capacity change from 0 to 512 [ 86.071573][ T6659] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 86.092495][ T6659] EXT4-fs (loop2): 1 orphan inode deleted [ 86.098584][ T6659] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.111951][ T6659] ext4 filesystem being mounted at /254/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.122734][ T2722] EXT4-fs error (device loop2): ext4_release_dquot:6973: comm kworker/u8:6: Failed to release dquot type 1 [ 86.151255][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.249459][ T6667] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1017'. [ 86.259254][ T6671] netlink: 'syz.3.1018': attribute type 21 has an invalid length. [ 86.276745][ T6667] loop2: detected capacity change from 0 to 1024 [ 86.381275][ T6667] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.451057][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.480113][ T6686] loop3: detected capacity change from 0 to 1024 [ 86.521244][ T6686] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.610471][ T6686] ext4 filesystem being mounted at /193/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.622552][ T6701] loop2: detected capacity change from 0 to 512 [ 86.634322][ T6701] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 86.665606][ T6701] EXT4-fs (loop2): 1 orphan inode deleted [ 86.681181][ T3430] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 86.696860][ T152] EXT4-fs error (device loop2): ext4_release_dquot:6973: comm kworker/u8:4: Failed to release dquot type 1 [ 86.717545][ T6701] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.730179][ T3430] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 319 with max blocks 1 with error 28 [ 86.742756][ T3430] EXT4-fs (loop3): This should not happen!! Data will be lost [ 86.742756][ T3430] [ 86.752577][ T3430] EXT4-fs (loop3): Total free blocks count 0 [ 86.758935][ T3430] EXT4-fs (loop3): Free/Dirty block details [ 86.764895][ T3430] EXT4-fs (loop3): free_blocks=4293918720 [ 86.770868][ T3430] EXT4-fs (loop3): dirty_blocks=16 [ 86.776085][ T3430] EXT4-fs (loop3): Block reservation details [ 86.782383][ T3430] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 86.796115][ T6701] ext4 filesystem being mounted at /258/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.896649][ T6706] netlink: 'syz.5.1030': attribute type 21 has an invalid length. [ 86.904571][ T6706] IPv6: NLM_F_CREATE should be specified when creating new route [ 87.043777][ T6714] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1029'. [ 87.060923][ T6714] bond0: (slave bridge_slave_1): Releasing backup interface [ 87.088328][ T6714] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1029'. [ 87.113655][ T6719] program syz.3.1034 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 87.176486][ T6721] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1035'. [ 87.200531][ T6721] loop5: detected capacity change from 0 to 1024 [ 87.227396][ T6731] FAULT_INJECTION: forcing a failure. [ 87.227396][ T6731] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 87.240895][ T6731] CPU: 0 UID: 0 PID: 6731 Comm: syz.3.1040 Not tainted syzkaller #0 PREEMPT(voluntary) [ 87.240925][ T6731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 87.240939][ T6731] Call Trace: [ 87.240946][ T6731] [ 87.240954][ T6731] __dump_stack+0x1d/0x30 [ 87.240978][ T6731] dump_stack_lvl+0xe8/0x140 [ 87.241043][ T6731] dump_stack+0x15/0x1b [ 87.241061][ T6731] should_fail_ex+0x265/0x280 [ 87.241142][ T6731] should_fail+0xb/0x20 [ 87.241168][ T6731] should_fail_usercopy+0x1a/0x20 [ 87.241193][ T6731] _copy_from_user+0x1c/0xb0 [ 87.241225][ T6731] __sys_bpf+0x178/0x7b0 [ 87.241269][ T6731] __x64_sys_bpf+0x41/0x50 [ 87.241298][ T6731] x64_sys_call+0x2aea/0x2ff0 [ 87.241323][ T6731] do_syscall_64+0xd2/0x200 [ 87.241379][ T6731] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 87.241408][ T6731] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 87.241438][ T6731] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.241463][ T6731] RIP: 0033:0x7f3189d2ebe9 [ 87.241480][ T6731] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 87.241567][ T6731] RSP: 002b:00007f318878f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 87.241588][ T6731] RAX: ffffffffffffffda RBX: 00007f3189f55fa0 RCX: 00007f3189d2ebe9 [ 87.241620][ T6731] RDX: 0000000000000048 RSI: 0000200000000b00 RDI: 2000000000000000 [ 87.241634][ T6731] RBP: 00007f318878f090 R08: 0000000000000000 R09: 0000000000000000 [ 87.241729][ T6731] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 87.241745][ T6731] R13: 00007f3189f56038 R14: 00007f3189f55fa0 R15: 00007ffe440c5db8 [ 87.241762][ T6731] [ 87.469966][ T6738] loop2: detected capacity change from 0 to 512 [ 87.489169][ T6744] loop5: detected capacity change from 0 to 512 [ 87.498725][ T6738] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 87.508750][ T6744] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 87.532564][ T6738] EXT4-fs (loop2): 1 orphan inode deleted [ 87.539119][ T6738] ext4 filesystem being mounted at /262/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.554175][ T2722] EXT4-fs error (device loop2): ext4_release_dquot:6973: comm kworker/u8:6: Failed to release dquot type 1 [ 87.558908][ T6753] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1046'. [ 87.567566][ T6756] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1047'. [ 87.585634][ T6753] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1046'. [ 87.596723][ T6744] EXT4-fs (loop5): 1 orphan inode deleted [ 87.603332][ T6744] ext4 filesystem being mounted at /92/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.613933][ T2722] EXT4-fs error (device loop5): ext4_release_dquot:6973: comm kworker/u8:6: Failed to release dquot type 1 [ 87.626729][ T6756] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1047'. [ 87.690722][ T6767] program syz.0.1049 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 87.713231][ T6769] loop2: detected capacity change from 0 to 2048 [ 87.773089][ T6769] loop2: p2 p3 p7 [ 87.844775][ T6777] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1054'. [ 87.854245][ T6777] netlink: 'syz.2.1054': attribute type 2 has an invalid length. [ 87.917324][ T6780] loop2: detected capacity change from 0 to 1024 [ 88.366645][ T6797] loop2: detected capacity change from 0 to 512 [ 88.553012][ T6797] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 88.609286][ T6809] program syz.5.1064 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 88.629041][ T6797] EXT4-fs (loop2): orphan cleanup on readonly fs [ 88.681765][ T6797] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.1059: corrupted inode contents [ 88.694289][ T6797] EXT4-fs (loop2): Remounting filesystem read-only [ 88.701332][ T6797] EXT4-fs (loop2): 1 truncate cleaned up [ 88.707226][ T152] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 88.717844][ T152] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 88.769118][ T152] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started [ 88.815755][ T6816] loop3: detected capacity change from 0 to 512 [ 88.870914][ T6816] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 88.879490][ T6816] EXT4-fs (loop3): orphan cleanup on readonly fs [ 88.911868][ T6816] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.1066: corrupted inode contents [ 88.949672][ T6834] program syz.1.1071 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 88.959653][ T6816] EXT4-fs (loop3): Remounting filesystem read-only [ 88.976608][ T6816] EXT4-fs (loop3): 1 truncate cleaned up [ 89.027170][ T3430] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 89.037893][ T3430] __quota_error: 190 callbacks suppressed [ 89.037910][ T3430] Quota error (device loop3): write_blk: dquota write failed [ 89.051346][ T3430] Quota error (device loop3): remove_free_dqentry: Can't write block (5) with free entries [ 89.061385][ T3430] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 89.071954][ T3430] Quota error (device loop3): write_blk: dquota write failed [ 89.079430][ T3430] Quota error (device loop3): free_dqentry: Can't move quota data block (5) to free list [ 89.190426][ T3430] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started [ 89.200609][ T3430] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 89.223157][ T6850] loop1: detected capacity change from 0 to 2048 [ 89.232975][ T3430] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 89.327313][ T3292] loop1: p2 p3 p7 [ 89.357682][ T6850] loop1: p2 p3 p7 [ 89.431792][ T4102] udevd[4102]: inotify_add_watch(7, /dev/loop1p7, 10) failed: No such file or directory [ 89.434778][ T3292] udevd[3292]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 89.453076][ T5179] udevd[5179]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 89.496180][ T5179] udevd[5179]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 89.506772][ T3292] udevd[3292]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 89.525304][ T4102] udevd[4102]: inotify_add_watch(7, /dev/loop1p7, 10) failed: No such file or directory [ 89.710065][ T6885] FAULT_INJECTION: forcing a failure. [ 89.710065][ T6885] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 89.723451][ T6885] CPU: 1 UID: 0 PID: 6885 Comm: syz.1.1083 Not tainted syzkaller #0 PREEMPT(voluntary) [ 89.723477][ T6885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 89.723488][ T6885] Call Trace: [ 89.723495][ T6885] [ 89.723503][ T6885] __dump_stack+0x1d/0x30 [ 89.723557][ T6885] dump_stack_lvl+0xe8/0x140 [ 89.723581][ T6885] dump_stack+0x15/0x1b [ 89.723600][ T6885] should_fail_ex+0x265/0x280 [ 89.723626][ T6885] should_fail+0xb/0x20 [ 89.723647][ T6885] should_fail_usercopy+0x1a/0x20 [ 89.723674][ T6885] _copy_to_user+0x20/0xa0 [ 89.723711][ T6885] simple_read_from_buffer+0xb5/0x130 [ 89.723738][ T6885] proc_fail_nth_read+0x10e/0x150 [ 89.723765][ T6885] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 89.723789][ T6885] vfs_read+0x1a5/0x770 [ 89.723875][ T6885] ? __fput+0x555/0x650 [ 89.723900][ T6885] ? __rcu_read_unlock+0x4f/0x70 [ 89.723924][ T6885] ? __fget_files+0x184/0x1c0 [ 89.723955][ T6885] ksys_read+0xda/0x1a0 [ 89.724015][ T6885] __x64_sys_read+0x40/0x50 [ 89.724039][ T6885] x64_sys_call+0x27bc/0x2ff0 [ 89.724059][ T6885] do_syscall_64+0xd2/0x200 [ 89.724139][ T6885] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 89.724168][ T6885] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 89.724194][ T6885] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.724292][ T6885] RIP: 0033:0x7ff225ebd5fc [ 89.724311][ T6885] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 89.724431][ T6885] RSP: 002b:00007ff22491f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 89.724451][ T6885] RAX: ffffffffffffffda RBX: 00007ff2260e5fa0 RCX: 00007ff225ebd5fc [ 89.724463][ T6885] RDX: 000000000000000f RSI: 00007ff22491f0a0 RDI: 0000000000000007 [ 89.724474][ T6885] RBP: 00007ff22491f090 R08: 0000000000000000 R09: 0000000000000000 [ 89.724486][ T6885] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 89.724499][ T6885] R13: 00007ff2260e6038 R14: 00007ff2260e5fa0 R15: 00007ffebd85f458 [ 89.724520][ T6885] [ 90.094517][ T6901] loop3: detected capacity change from 0 to 512 [ 90.113890][ T6901] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 90.144893][ T6906] loop1: detected capacity change from 0 to 512 [ 90.148947][ T6901] EXT4-fs (loop3): orphan cleanup on readonly fs [ 90.157976][ T6861] loop5: detected capacity change from 0 to 1024 [ 90.176957][ T6901] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.1088: corrupted inode contents [ 90.211527][ T6906] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 90.221959][ T6861] EXT4-fs: Ignoring removed orlov option [ 90.248688][ T6901] EXT4-fs (loop3): Remounting filesystem read-only [ 90.264325][ T6906] EXT4-fs (loop1): 1 orphan inode deleted [ 90.275403][ T6906] ext4 filesystem being mounted at /223/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.286394][ T2722] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 90.296223][ T2722] EXT4-fs error (device loop1): ext4_release_dquot:6973: comm kworker/u8:6: Failed to release dquot type 1 [ 90.312742][ T6901] EXT4-fs (loop3): 1 truncate cleaned up [ 90.332648][ T2722] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 90.343575][ T2722] Quota error (device loop3): write_blk: dquota write failed [ 90.351154][ T2722] Quota error (device loop3): remove_free_dqentry: Can't write block (5) with free entries [ 90.361671][ T2722] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 90.372421][ T2722] Quota error (device loop3): write_blk: dquota write failed [ 90.420388][ T2722] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started [ 90.603984][ T6923] loop2: detected capacity change from 0 to 128 [ 90.699508][ T6927] bio_check_eod: 5 callbacks suppressed [ 90.699539][ T6927] syz.2.1094: attempt to access beyond end of device [ 90.699539][ T6927] loop2: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 90.732010][ T6927] syz.2.1094: attempt to access beyond end of device [ 90.732010][ T6927] loop2: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 90.779473][ T6933] loop5: detected capacity change from 0 to 512 [ 90.796058][ T6927] syz.2.1094: attempt to access beyond end of device [ 90.796058][ T6927] loop2: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 90.855820][ T6933] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 90.881309][ T6940] program syz.1.1101 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 90.903408][ T6927] syz.2.1094: attempt to access beyond end of device [ 90.903408][ T6927] loop2: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 90.936459][ T6927] syz.2.1094: attempt to access beyond end of device [ 90.936459][ T6927] loop2: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 90.963101][ T6942] FAULT_INJECTION: forcing a failure. [ 90.963101][ T6942] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 90.967983][ T6927] syz.2.1094: attempt to access beyond end of device [ 90.967983][ T6927] loop2: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 90.976240][ T6942] CPU: 0 UID: 0 PID: 6942 Comm: syz.3.1102 Not tainted syzkaller #0 PREEMPT(voluntary) [ 90.976321][ T6942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 90.976333][ T6942] Call Trace: [ 90.976340][ T6942] [ 90.976348][ T6942] __dump_stack+0x1d/0x30 [ 90.976439][ T6942] dump_stack_lvl+0xe8/0x140 [ 90.976501][ T6942] dump_stack+0x15/0x1b [ 90.976518][ T6942] should_fail_ex+0x265/0x280 [ 90.976539][ T6942] should_fail+0xb/0x20 [ 90.976557][ T6942] should_fail_usercopy+0x1a/0x20 [ 90.976580][ T6942] _copy_to_user+0x20/0xa0 [ 90.976655][ T6942] simple_read_from_buffer+0xb5/0x130 [ 90.976726][ T6942] proc_fail_nth_read+0x10e/0x150 [ 90.976753][ T6942] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 90.976780][ T6942] vfs_read+0x1a5/0x770 [ 90.976801][ T6942] ? __rcu_read_unlock+0x4f/0x70 [ 90.976830][ T6942] ? __fget_files+0x184/0x1c0 [ 90.976863][ T6942] ksys_read+0xda/0x1a0 [ 90.976900][ T6942] __x64_sys_read+0x40/0x50 [ 90.976921][ T6942] x64_sys_call+0x27bc/0x2ff0 [ 90.976943][ T6942] do_syscall_64+0xd2/0x200 [ 90.976969][ T6942] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 90.977044][ T6942] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 90.977069][ T6942] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.977091][ T6942] RIP: 0033:0x7f3189d2d5fc [ 90.977108][ T6942] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 90.977126][ T6942] RSP: 002b:00007f318878f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 90.977204][ T6942] RAX: ffffffffffffffda RBX: 00007f3189f55fa0 RCX: 00007f3189d2d5fc [ 90.977218][ T6942] RDX: 000000000000000f RSI: 00007f318878f0a0 RDI: 0000000000000005 [ 90.977231][ T6942] RBP: 00007f318878f090 R08: 0000000000000000 R09: 0000000000000000 [ 90.977244][ T6942] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 90.977256][ T6942] R13: 00007f3189f56038 R14: 00007f3189f55fa0 R15: 00007ffe440c5db8 [ 90.977275][ T6942] [ 91.193108][ T6927] syz.2.1094: attempt to access beyond end of device [ 91.193108][ T6927] loop2: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 91.194736][ T6949] __nla_validate_parse: 12 callbacks suppressed [ 91.194771][ T6949] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1106'. [ 91.206798][ T6927] syz.2.1094: attempt to access beyond end of device [ 91.206798][ T6927] loop2: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 91.235990][ T6927] syz.2.1094: attempt to access beyond end of device [ 91.235990][ T6927] loop2: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 91.236037][ T6955] netlink: 'syz.1.1103': attribute type 10 has an invalid length. [ 91.249466][ T6927] syz.2.1094: attempt to access beyond end of device [ 91.249466][ T6927] loop2: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 91.293342][ T6933] EXT4-fs (loop5): 1 orphan inode deleted [ 91.302455][ T6949] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1106'. [ 91.311595][ T152] EXT4-fs error (device loop5): ext4_release_dquot:6973: comm kworker/u8:4: Failed to release dquot type 1 [ 91.330970][ T6933] ext4 filesystem being mounted at /100/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.396905][ T6963] loop2: detected capacity change from 0 to 1024 [ 91.405022][ T6963] EXT4-fs: Ignoring removed orlov option [ 91.879835][ T6974] program syz.0.1111 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 92.120827][ T6983] loop3: detected capacity change from 0 to 512 [ 92.147412][ T6981] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1112'. [ 92.156768][ T6981] netem: unknown loss type 12 [ 92.161704][ T6981] netem: change failed [ 92.168088][ T6987] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1114'. [ 92.177148][ T6987] netem: unknown loss type 12 [ 92.177261][ T6987] netem: change failed [ 92.178372][ T6987] program syz.1.1114 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 92.178636][ T6987] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 92.183626][ T6987] loop1: detected capacity change from 0 to 512 [ 92.198597][ T6983] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 92.198768][ T6983] EXT4-fs (loop3): orphan cleanup on readonly fs [ 92.202666][ T6987] EXT4-fs warning (device loop1): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 92.203471][ T6987] EXT4-fs (loop1): mount failed [ 92.204147][ T6983] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.1115: corrupted inode contents [ 92.204443][ T6983] EXT4-fs (loop3): Remounting filesystem read-only [ 92.204653][ T6983] EXT4-fs (loop3): 1 truncate cleaned up [ 92.205049][ T170] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 92.205113][ T170] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 92.205216][ T170] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started [ 92.296472][ T6981] program syz.5.1112 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 92.296754][ T6981] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 92.327174][ T6981] loop5: detected capacity change from 0 to 512 [ 92.357284][ T6981] EXT4-fs warning (device loop5): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 92.357564][ T6981] EXT4-fs (loop5): mount failed [ 92.825033][ T7021] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1127'. [ 92.832556][ T7021] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1127'. [ 92.972897][ T7034] program syz.5.1132 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 93.018342][ T7036] loop3: detected capacity change from 0 to 512 [ 93.018738][ T7036] EXT4-fs: Ignoring removed orlov option [ 93.027051][ T7036] EXT4-fs error (device loop3): dx_probe:791: inode #2: comm syz.3.1122: Attempting to read directory block (0) that is past i_size (256) [ 93.027427][ T7036] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 93.271929][ T7044] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1134'. [ 93.281422][ T7044] netem: unknown loss type 12 [ 93.286305][ T7044] netem: change failed [ 93.343109][ T7044] program syz.2.1134 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 93.360619][ T7044] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 93.394377][ T7044] loop2: detected capacity change from 0 to 512 [ 93.432187][ T7044] EXT4-fs warning (device loop2): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 93.499837][ T7044] EXT4-fs (loop2): mount failed [ 93.520301][ T7053] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1136'. [ 93.529302][ T7053] netem: unknown loss type 12 [ 93.529538][ T7052] loop5: detected capacity change from 0 to 512 [ 93.534106][ T7053] netem: change failed [ 93.565675][ T7052] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 93.631250][ T7052] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.1137: bg 0: block 16: invalid block bitmap [ 93.661514][ T7058] netlink: 'syz.1.1139': attribute type 21 has an invalid length. [ 93.680784][ T7052] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 93.700893][ T7059] program syz.0.1136 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 93.736512][ T7052] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.1137: invalid indirect mapped block 5 (level 0) [ 93.781030][ T7059] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 93.784812][ T7061] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1140'. [ 93.805190][ T7052] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.1137: invalid indirect mapped block 4294967295 (level 1) [ 93.835401][ T7061] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1140'. [ 93.855766][ T7068] program syz.1.1143 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 93.875670][ T7070] program syz.2.1144 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 93.891387][ T7052] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.1137: invalid indirect mapped block 4294967295 (level 2) [ 93.946136][ T7052] EXT4-fs (loop5): 1 truncate cleaned up [ 94.001100][ T7074] program syz.1.1146 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 94.114892][ T7081] loop1: detected capacity change from 0 to 512 [ 94.127066][ T7082] netlink: 'syz.5.1150': attribute type 21 has an invalid length. [ 94.152752][ T7081] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 94.171191][ T7081] EXT4-fs (loop1): orphan cleanup on readonly fs [ 94.187879][ T7081] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.1149: corrupted inode contents [ 94.238365][ T7081] EXT4-fs (loop1): Remounting filesystem read-only [ 94.264464][ T7081] EXT4-fs (loop1): 1 truncate cleaned up [ 94.270708][ T152] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 94.281436][ T152] __quota_error: 21 callbacks suppressed [ 94.281452][ T152] Quota error (device loop1): write_blk: dquota write failed [ 94.294649][ T152] Quota error (device loop1): remove_free_dqentry: Can't write block (5) with free entries [ 94.304684][ T152] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 94.315233][ T152] Quota error (device loop1): write_blk: dquota write failed [ 94.322636][ T152] Quota error (device loop1): free_dqentry: Can't move quota data block (5) to free list [ 94.344802][ T7092] program syz.0.1152 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 94.363239][ T152] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started [ 94.373394][ T152] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 94.390737][ T152] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 94.421787][ T7097] netem: unknown loss type 12 [ 94.426574][ T7097] netem: change failed [ 94.485935][ T7097] loop5: detected capacity change from 0 to 512 [ 94.519417][ T7097] Quota error (device loop5): v2_read_file_info: Number of blocks too big for quota file size (16979335168 > 6144). [ 94.543881][ T7097] EXT4-fs warning (device loop5): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 94.560752][ T7097] EXT4-fs (loop5): mount failed [ 94.962332][ T7112] loop2: detected capacity change from 0 to 128 [ 94.973169][ T7114] loop5: detected capacity change from 0 to 128 [ 95.036685][ T7116] loop1: detected capacity change from 0 to 512 [ 95.060972][ T7116] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 95.083318][ T7116] EXT4-fs (loop1): 1 orphan inode deleted [ 95.090513][ T7116] ext4 filesystem being mounted at /237/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.130383][ T152] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 95.140157][ T152] EXT4-fs error (device loop1): ext4_release_dquot:6973: comm kworker/u8:4: Failed to release dquot type 1 [ 95.166550][ T7121] netlink: 'syz.2.1162': attribute type 21 has an invalid length. [ 95.226134][ T7125] loop1: detected capacity change from 0 to 1024 [ 95.240331][ T7038] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 255: padding at end of block bitmap is not set [ 95.269644][ T7125] EXT4-fs: Ignoring removed orlov option [ 95.290679][ T7129] netlink: 'syz.5.1166': attribute type 21 has an invalid length. [ 95.381435][ T7136] netem: unknown loss type 12 [ 95.386180][ T7136] netem: change failed [ 95.428783][ T7136] loop2: detected capacity change from 0 to 512 [ 95.642421][ T7136] Quota error (device loop2): v2_read_file_info: Number of blocks too big for quota file size (16979335168 > 6144). [ 95.657398][ T7136] EXT4-fs warning (device loop2): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 95.698878][ T7136] EXT4-fs (loop2): mount failed [ 95.727931][ T7135] ================================================================== [ 95.736150][ T7135] BUG: KCSAN: data-race in filemap_splice_read / filemap_splice_read [ 95.744240][ T7135] [ 95.746582][ T7135] write to 0xffff88810dcfe9a8 of 8 bytes by task 7125 on cpu 0: [ 95.754240][ T7135] filemap_splice_read+0x4f4/0x740 [ 95.759409][ T7135] ext4_file_splice_read+0x8f/0xb0 [ 95.764639][ T7135] splice_direct_to_actor+0x26c/0x680 [ 95.770031][ T7135] do_splice_direct+0xda/0x150 [ 95.774818][ T7135] do_sendfile+0x380/0x650 [ 95.779343][ T7135] __x64_sys_sendfile64+0x105/0x150 [ 95.784741][ T7135] x64_sys_call+0x2bb0/0x2ff0 [ 95.789445][ T7135] do_syscall_64+0xd2/0x200 [ 95.794152][ T7135] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.800247][ T7135] [ 95.802585][ T7135] write to 0xffff88810dcfe9a8 of 8 bytes by task 7135 on cpu 1: [ 95.810235][ T7135] filemap_splice_read+0x4f4/0x740 [ 95.815460][ T7135] ext4_file_splice_read+0x8f/0xb0 [ 95.820705][ T7135] splice_direct_to_actor+0x26c/0x680 [ 95.826097][ T7135] do_splice_direct+0xda/0x150 [ 95.830881][ T7135] do_sendfile+0x380/0x650 [ 95.835327][ T7135] __x64_sys_sendfile64+0x105/0x150 [ 95.840561][ T7135] x64_sys_call+0x2bb0/0x2ff0 [ 95.845455][ T7135] do_syscall_64+0xd2/0x200 [ 95.850177][ T7135] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.856194][ T7135] [ 95.858587][ T7135] value changed: 0x0000000000000762 -> 0x0000000000000763 [ 95.865783][ T7135] [ 95.868121][ T7135] Reported by Kernel Concurrency Sanitizer on: [ 95.874364][ T7135] CPU: 1 UID: 0 PID: 7135 Comm: syz.1.1164 Not tainted syzkaller #0 PREEMPT(voluntary) [ 95.884364][ T7135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 95.894695][ T7135] ==================================================================