last executing test programs: 2m28.87399497s ago: executing program 1 (id=2272): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r0}, 0x10) r1 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write$selinux_validatetrans(r1, &(0x7f00000001c0)={'system_u:object_r:devicekit_var_run_t:s0', 0x20, 'system_u:object_r:man_t:s0', 0x20, 0x1, 0x20, 'unconfined\x00'}, 0x64) 2m28.84110589s ago: executing program 1 (id=2273): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x9, 0xa0000) ioctl$USBDEVFS_REAPURB(r0, 0x4008550c, &(0x7f0000002680)) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0b000000080000000c000000ffff", @ANYRES32=r0, @ANYRESHEX], 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)) syz_emit_ethernet(0x76, &(0x7f0000000a40)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x40, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "00641a", 0x0, 0x0, 0x0, @mcast1, @mcast1, [@fragment={0x2b, 0x0, 0x1, 0x0, 0x0, 0x6, 0x66}, @fragment={0x87, 0x0, 0x0, 0x1, 0x0, 0x17, 0x67}]}}}}}}}, 0x0) sendmsg$ETHTOOL_MSG_RINGS_SET(r1, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000580)={0xa0, 0x0, 0x300, 0xffffffff, 0x25dfdbff, {}, [@ETHTOOL_A_RINGS_RX={0x8, 0x6, 0xfffffff4}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0xe}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x1ff}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x4}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x56}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0xd33}, @ETHTOOL_A_RINGS_HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x3}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4000000}, 0x400080d0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00'}, 0x10) socket$tipc(0x1e, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000780)={[{@jqfmt_vfsv1}, {}, {@barrier_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@resuid}, {@nodelalloc}, {@norecovery}, {@test_dummy_encryption}]}, 0xfc, 0x572, &(0x7f0000003780)="$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") bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000700)=0xffffffffffffffff, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000080)=0x200000001494) 2m28.79551581s ago: executing program 1 (id=2274): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r1 = socket(0x28, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, &(0x7f0000cab000)) mount$tmpfs(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x10000, &(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRESHEX, @ANYBLOB="29d73c4d5112b3a59dd52f8166b36342e6cdf2e66b8e4ce9af72b9503c27681a9a200363208c6971d5995892f9c7a78f295f89681fcfc3d7045126c1abb27d99aad7d58c6f82702a953eaa1b486d8e07dfd85857c47e2e035b67a5d25ebc0c02a0896bbc25fbb4e0627db0c92e7c2500"/125]) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') mbind(&(0x7f0000579000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x3, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0) r2 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x0) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000440)={0x4, 0x80, 0x3c, 0x1, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000400), 0x7}, 0x800, 0x0, 0xffff, 0x5, 0x7, 0xfffffffa, 0x100}, 0x0, 0x4, 0xffffffffffffffff, 0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="34000000110001000000004003000000002a7b49", @ANYRES32=0x0, @ANYBLOB="00000000000000001400350076657468315f6d616376746170"], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x4000) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r4}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000500)='f2fs_background_gc\x00', r4, 0x0, 0x4}, 0x18) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r7 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000800000000000200000014000200626f6e643000000000000000000000000900010073"], 0x34}}, 0x0) sendmsg$SMC_PNETID_DEL(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="270e28bd70000000000004070200eb895589d264cd0b4331d085651b6990002b3e1f8cfd03c9e66fc378576b77fb03005dd5a3edf0ea26dcbf3f7f7fef91ae13dc9f21c4c9fa2fe6eb25517e8500e4e46fe2d1"], 0x14}, 0x1, 0x40030000000000}, 0x4000) bpf$TOKEN_CREATE(0x24, &(0x7f00000002c0)={0x0, r5}, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) request_key(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz', 0x2}, &(0x7f0000000400)=':\x00', 0xfffffffffffffffe) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0xc, 0x6, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000030000000000000009000000186a000001000000000000000a00000000000000000000000000000200000000"], &(0x7f00000006c0)='syzkaller\x00', 0x800, 0x47, &(0x7f0000000700)=""/71, 0x41100, 0x4, '\x00', 0x0, @fallback=0x16, r2, 0x8, &(0x7f0000000780)={0x9, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, &(0x7f0000000b00)=[r2, r2, r0, r0, r6], &(0x7f0000000b40)=[{0x3, 0x4, 0x0, 0x6}, {0x5, 0x3, 0xc, 0x1}, {0x3, 0x3, 0x4, 0xb}], 0x10, 0x101, @void, @value}, 0x94) 2m28.688497179s ago: executing program 1 (id=2276): socket$nl_route(0x10, 0x3, 0x0) ioctl$AUTOFS_IOC_PROTOVER(0xffffffffffffffff, 0x80049363, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={0x0, 0xffffffffffffffff, 0x0, 0x54}, 0xffffff57) openat$ptmx(0xffffffffffffff9c, 0x0, 0x103000, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="8b1ad3c93c8e6d8a4e6c11e02bbdbd98870535ab295768f629bf675268fb14bf3db91fa94e11de88ac697c539b371b946bee15db66913cbf54a33d005782284d973ce1f2cc6f0315b6a0f1083fdf85222d947cf9c7e3a23a12218ec9c321f2ffad4f54ec6642852cf6fc72b1278955acc79f71218f155669aa6597e2a978fb72cdfd56b3cab6dd6a60ea8fecd2e0452dad450b2855625bc56bca79a429eeaa28c55f0791cecb706e367928fb8e8b203df8f3526e65dd4bf33727d58281e7", @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f0000000080), 0xff, 0x52f, &(0x7f0000001e00)="$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") prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000005000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000100007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000680)=ANY=[@ANYBLOB="200000000800000000000006000000e300000010000000040021e22409f44c0000080000000700000008fffffff7"], 0x400080) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAPCLR(r2, 0x4b68, 0x0) ioctl$PIO_UNIMAP(r2, 0x4b67, &(0x7f0000000040)={0x3ffffffffffffe96, &(0x7f0000000000)=[{0x2000, 0x5}]}) 2m28.546165199s ago: executing program 1 (id=2278): socket$nl_route(0x10, 0x3, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x103000, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="8b1ad3c93c8e6d8a4e6c11e02bbdbd98870535ab295768f629bf675268fb14bf3db91fa94e11de88ac697c539b371b946bee15db66913cbf54a33d005782284d973ce1f2cc6f0315b6a0f1083fdf85222d947cf9c7e3a23a12218ec9c321f2ffad4f54ec6642852cf6fc72b1278955acc79f71218f155669aa6597e2a978fb72cdfd56b3cab6dd6a60ea8fecd2e0452dad450b2855625bc56bca79a429eeaa28c55f0791cecb706e367928fb8e8b203df8f3526e65dd4bf33727d58281e795b433ad425aa1fe94e87645", @ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f0000000080), 0xff, 0x52f, &(0x7f0000001e00)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="0000000000000000b7080000000100007b8af8ff00000000bfa2000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000680)=ANY=[@ANYBLOB="200000000800000000000006000000e300000010000000040021e22409f44c0000080000000700000008fffffff7"], 0x400080) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAPCLR(r1, 0x4b68, 0x0) ioctl$PIO_UNIMAP(r1, 0x4b67, &(0x7f0000000040)={0x3ffffffffffffe96, &(0x7f0000000000)=[{0x2000, 0x5}]}) 2m28.419157069s ago: executing program 1 (id=2282): creat(&(0x7f0000000040)='./file0\x00', 0x180) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) chown(&(0x7f0000000580)='./file0\x00', 0x0, 0x0) write$binfmt_elf64(r2, 0x0, 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 2m13.336465891s ago: executing program 32 (id=2282): creat(&(0x7f0000000040)='./file0\x00', 0x180) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) chown(&(0x7f0000000580)='./file0\x00', 0x0, 0x0) write$binfmt_elf64(r2, 0x0, 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 1m47.270175529s ago: executing program 5 (id=2978): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b80)={{0x14}, [], {0x14}}, 0x28}}, 0x60044) capset(0x0, &(0x7f0000000040)={0x200000, 0x200000}) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000180)=0xa98) 1m47.193086149s ago: executing program 5 (id=2980): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000fb"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000003c0)=0x2) readv(r1, &(0x7f0000000140)=[{&(0x7f0000000240)=""/163, 0xa3}], 0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x2) 1m46.352030406s ago: executing program 5 (id=3003): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000072000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000200000000000000001809"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002080)={&(0x7f0000000300)='kfree\x00', r1, 0x0, 0xfffffffffffffffc}, 0x18) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$SG_SET_RESERVED_SIZE(r3, 0x2275, &(0x7f0000000000)=0xc92b) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket(0x1, 0x80802, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[], 0x48) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00008, 0x0, 0x50032, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b702000001000000850000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r5, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x7}) ioctl$sock_netdev_private(r5, 0x8943, &(0x7f0000000000)) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010000030900010073797a30000000002c000000030a01010000000000000000010000000900030073797a32000000000900010073797a300000000050200000060a010400000000000000000100000008000b400000000028000480240001800b0001007470726f7879000014000280080001400000000008000240000000010900010073797a3000000000148000001100010000000000000000000700000a"], 0xc4}}, 0x44000) iopl(0x43) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x3) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000fc0f00000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioperm(0xfe, 0x5, 0x3) pivot_root(&(0x7f0000000000)='.\x00', 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r8}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000002140)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff0200}]}) 1m46.251891315s ago: executing program 5 (id=3006): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000200)='./file2\x00', 0x1000410, &(0x7f0000000040)={[{@barrier_val={'barrier', 0x3d, 0x7}}, {@i_version}]}, 0x4, 0x504, &(0x7f0000019940)="$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") r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) write$binfmt_register(r0, &(0x7f0000000000)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x7, 0x3a, 'M', 0x3a, 'M', 0x3a, './file2', 0x3a, [0x46]}, 0x2a) io_setup(0x4082, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5f, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x8}, 0x18) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a438, &(0x7f0000000f80)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) 1m45.928252065s ago: executing program 5 (id=3013): r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f0000000040)=@in6={0x21, 0x0, 0x2, 0x1c, {0x2, 0x100, 0x0, @loopback={0xff00000000000000}}}, 0x24) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000100)}) rt_sigaction(0x19, &(0x7f0000000000)={0xfffffffffffffffc, 0x44000006, 0x0}, 0x0, 0x8, &(0x7f0000000440)) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000002300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x4000000}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0x7c}}, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0x40010, 0xffffffffffffffff, 0x62b1d000) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000400)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x4, 0xff, 0x7efc0002}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) symlink(0x0, 0x0) r4 = memfd_create(&(0x7f0000000340)='\x00\x01\x00\x00\x00\xdb\xe6\xbf\xb4\xf2\xed\x04\x00\x00\x00\xd4N\x12\x9b\x1f\x00\xd1Z+\x86T\x16\xf8\x01\x00\x00\x00\x9f+\x8d!\x0fG\xab\xc2\xdc\xa3\xb3\xae8\x9f9?\xefo\xa4k\x01\xb2>\x03\x00\x00\x00m\xe6\x9bZ4\x91\x1a\xdb\xdd\x89\xa1\xc0LF;\xd6\x84\x195\x06\x00\x00\x00~\xf3S\x12\"F\xb4\x02\xc5T\xe5\xc7\x98\xcd\fs\x1ap^\xc1jL\xfb{\xd8\x9e;L9\xdd\r\x1aZS\x01*\x1b\xfd\xbcMA\xdcq\xa1\x00\xb3\xf9\x91r\x7f\xdc\xf1,\xdb\xccS\x15\x95b\x17\xab\xe4?\x96\x95\xa4kP\x99YO\xb8V\xd5p\x90F@\x8a_\xe0\xd7\xfag\x9f\xcfp2*}=\x01h\x04\x81V9\xa1Q\xe19\x85\xa4x\xb6/\xbe~M\xac%\x03\xdfm\x174\xb0\x8a{)$\xa6\xad\xadg6\x02P\xbf\x9a\x1d\xaeR\x1f_\x1b\x9cma\xc3\xa5\x19b\'H\x94|\x18\x8a\xd5\xbb\"\xfe\xdf\x8f', 0x1) fallocate(r4, 0x0, 0x400000000000000, 0x7) 1m45.707294704s ago: executing program 5 (id=3018): bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="2100000000000000000000000000100000040000", @ANYRES32, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000200"/18], 0x50) 1m45.670711694s ago: executing program 33 (id=3018): bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="2100000000000000000000000000100000040000", @ANYRES32, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000200"/18], 0x50) 2.095949577s ago: executing program 4 (id=5466): creat(&(0x7f0000000540)='./file0\x00', 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x22802, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a00000001000000e27f00000100000012000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000006ea95bcfb274541f3a8dc86519325400"/43], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffad, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000140)='io_uring_register\x00', 0xffffffffffffffff, 0x0, 0x328}, 0x18) r1 = socket(0x10, 0x3, 0x6) r2 = socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)={0x60, r5, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r6}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000300000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r7}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@deltfilter={0x4c, 0x2d, 0x701, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x3, 0x7}, {0x9, 0x7}, {0xfff2, 0x3}}, [@TCA_CHAIN={0x8, 0xb, 0xfffff800}, @TCA_RATE={0x6, 0x5, {0xf9, 0x1}}, @TCA_RATE={0x6, 0x5, {0x40, 0x5}}, @TCA_RATE={0x6, 0x5, {0x3, 0xa6}}, @TCA_RATE={0x6, 0x5, {0x6, 0x4}}]}, 0x4c}}, 0x20000000) socket$nl_xfrm(0x10, 0x3, 0x6) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000000000000000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='netfs_failure\x00', r8, 0x0, 0x6}, 0x18) 2.030903926s ago: executing program 4 (id=5468): perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x62000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100020, 0x0, 0x0, 0x6, 0x3, 0x0, 0xa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000b00), 0x8000, 0x0) readv(r1, &(0x7f0000002ec0)=[{&(0x7f0000000b40)=""/172, 0xac}, {0x0}], 0x2) fcntl$dupfd(r0, 0x0, r0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f0000000980)={0x2, 0x80, 0x95, 0x2, 0x0, 0x0, 0x0, 0x0, 0x485, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7f, 0x10001}, 0x0, 0x0, 0x7baf376a, 0x0, 0x0, 0x8, 0x2}, 0x0, 0xfffffffbffffffff, 0xffffffffffffffff, 0x8) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x41, &(0x7f0000000100), 0x8) setsockopt$sock_attach_bpf(r3, 0x1, 0x25, &(0x7f0000000100)=r2, 0x4) 1.888806886s ago: executing program 4 (id=5472): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0xffffffffffffffff, 0x87, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f00000002c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', 0x4c0b, &(0x7f0000000080)=ANY=[@ANYRES64=0x0], 0xfb, 0x68f, &(0x7f0000001400)="$eJzs3c9v2+Ydx/EPZflnsWzYhiII0vhpsg4OlimS3LgwssM0irLZSaJA0oN9KrLGLoLI6ZZkwOJL58t+ANs/sFsvPeyPGLDzzvsHdhxQbLcBu2ggKUqWRFqOrTjZ+n4ZrR7x+ZLPlz+ix7TIhwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALLserlcsdR02zu7Jp9d973WKfXJ0gq6nRRuT21XsqL/tLSkq8mkq98eVr8d/e+mrifvrmspelnS0Vtvf+P+t4qFdP5TEjoPvewCn704evyg291/er7WetZ55nslJjJR4QxzbTltN/DcVm3LMW7gmc2NjfLd7UZgGm7TCfaC0GkZ23cKoeebNfu2qWxurhuntOfttLfqtaaTTvzg+9VyecN8uNjf/Xc/LAX2tttsuu2tOCaqjmIWB0eIU2sZc/Cou78+LckoqHKWoOq0oGq5Wq1UqtXKxr3Nex+Uy8WJCeUxmogYHrRvzs7HZZrRJzdwcYWo//+7JTW1pLZ2tCuT+WOrLl+eWjn1fWn//95dZ9hGRrsn+/+0l786rL6muP+/kby7kdf/5+RiZOIZsmqsnOnn+3mmFzrSYz1QV13t6+lslrs6i6XMzXA98362pKLkKpCnqG+uaUuOTH+K0aY2tKGyPtK2Ggpk1JCrphwF2lOgUI5a8T7x5aimUJ58Ga3J1m0ZVbSpTa3LyFFJe/K0o7a2VFdN/+71egd6FG/39VNy1IG++zVpX5XTg5IlFQfH4GRQXv//08+SOV6u/8f/n8Gxc4YY4LXr9c//881lTVx9dRkBAAAAAIBZs+K/vkfn//N6R1JPDbfplF93WgAAAAAAYIbib/6vRy/zUekdWTnn/73Lzw0AAAAAAMyGFd9jZ0laiS/qt4Z3Qp3lIoDMmwMAAAAAAMCbJf7+/8aC1IuHVluV9VLn/wAAAAAA4H/Abwej7y7HL/EYu730a/2CpKCzaP35n4vy563jzu53rMNaVFM77MdMXAEQNq5ZRSUD9cbj9S5Iit/ZznWrPz5wfxBMKxnYV/ryYGys/7nxsX4tfyyBhbn0zxcZCVw5OpHARrH/Tr/Xu0nMu/12Hx4VFNckraw03KZTsr3m/YpqtSuF0NkNf/Hk0S8lf7CeB4+6+6WPP+0+jHM5jiYdH0Z5fDaSTmFaLs/j8Rbiey6yRjdeViNt8nft1ooVt1tO139OtcPCyYbOtv6/1s0k5uZK8rpylO4BWb/qFyqleJcN1z4eHcIaZlEZX/OsHZGTxVKcxa0k5tbareQlzS/ZC0vfm5Oqpcl94J/Monoyi+nbwvrXxLaYkkV0LKxHWfwlWlBOFusvl8XEHgGA1+Vg2AvFg5gnvdByWm1ZGu93z/MpN967T4zkb/1wtJXnf+wlNxzOScX+dxPJTYh5/YqiT/S1JGwhGcW9eC3jE73c71eWlPOJXr5A7xa19afhM5D6afdrioMs/tPr9e5X4nb/MNarfh7N8PlEuzd6iaBZnYs24d3nhz+LB8CPfLL/yf6TanV9o/x+uXyvqvl4Nfov9D0AgAzTn7EzGrE07M8Gfff7g7Pqh/94LymN9LvfHFxSUNLH+lRdPdSd9BECq9ntrpy4DOHO5FlrFBv/kjIaW9Gd3LO6uC89EVsdxM4rnWX094Vh7Pqr3g0AAFyqm1P64fH+P+vc/U563r12LfO8e7QvH39CcF5s5ZK3BAAAXx2O/6W1Ev7G8n2381Flc7NSC7cd43v2j43v1rcc47ZDx7e3a+0tx3R8L/Rsr2k6vhbduhOYYKfT8fzQNDzfdLzA3Y2f/G76j34PnFatHbp20Gk6tcAxttcOa3Zo6m5gm87Oj5pusO348cxBx7HdhmvXQtdrm8Bblu2UjAkc50SgW3faodtwo2LbdHy3VfP3zE+85k7LMXUnsH23E3rJAtO23HbD81vxYkvqnfagQwAAvjKevTh6/KDb3X96SuFYSSG9Hu2U4IWsBb7mVQQAAGPopQEAAAAAAAAAAAAAAAAAAAAAePOd5f6/UwvpTYHplHllBEuDKT+/cqYlWxpO+eJvF8owvxDlnVlVGJ/SH2m3N33Jf00KxayY5aiwEDWabv6TMcczXcHVMwUrKRRnv3mXpawjYcaFt5RO+cHB6HE4Fvz1uDKzanGwL4oX/+eQVXjyRU7V9CNqcXQbLuSv4HihKOnpwgV2wWV/EgG4bP8NAAD///PWP3c=") 1.849424516s ago: executing program 4 (id=5475): socket(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000d000000bfff04000900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r2, 0xffffffffffffffff}, &(0x7f0000000100)}, 0x20) socket$inet6(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1f, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x21885e, &(0x7f0000000440)={[{@grpquota}, {@min_batch_time={'min_batch_time', 0x3d, 0x2f}}, {@dioread_lock}]}, 0x5, 0x504, &(0x7f0000001480)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9sCWE0KoEqJHkNqQuFEUO45ipzShh/TMFYlKnODIH8C5J+5cENy4lAMSPyJQg8TBaMaT1E3tJtokdhR/PtJo3ps3nu97cea9+Dn2C2BoXY2I3YgYi4h7ETGdHc9lW9xqb8l5z/ceLe3vPVrKRat155+5tDw5Fh2PSVzJrlmMiB9+N+InuVfjNrZ31har1cpmlp9t1jZmG9s7N1ZriyuVlcp6ubwwvzD3yc2Py2fW1vdqY1nqq8/+sPutnyXVmsqOdLbjLLWbXjiMkxiNiO+fR7ABGMnaMzboivC55CPi7Yh4P73/p2MkfTYBgMus1ZqO1nRnHgC47PLpHFguX8rmAqYiny+V2nN478RkvlpvNK/fr2+tL7fnymaikL+/Wq3MZXOFM1HIJfn5NP0iXz6SvxkRb0XEL8Yn0nxpqV5dHuQfPgAwxK4cGf//M94e/wGAS6446AoAAH1n/AeA4WP8B4DhY/wHgOHTHv8nBl0NAKCPvP4HgOFj/AeAofKD27eTrbWfff/18oPtrbX6gxvLlcZaqba1VFqqb26UVur1lfQ7e2rHXa9ar2/MfxRbD2e+vdFozja2d+7W6lvrzbvp93rfrRTSs3b70DIAoJe33nv651wyIn86kW7RsZZDYaA1A85bftAVAAZmZNAVAAbGal8wvE7xGt/0AFwSXZbofUmx2weEWq1W6/yqBJyza18y/w/DqmP+338Bw5Ax/w/Dy/w/DK9WK3fSNf/jpCcCABebOX6gx/v/b2f732ZvDvx4+egZT7o+bjfrXs6uggAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHABHaz/W8rWAp+KfL5UingjImaikLu/Wq3MRcSbEfGn8cJ4kp8fcJ0BgNPK/y2Xrf91bfrDqZeK3r1ymByLiJ/+6s4vHy42m5t/jBjL/Wv84HjzSXa83P/aAwDHOxin033HC/nne4+WDrZ+1ufv34mIYjv+/t5Y7B/GH43RdF+MQkRM/juX5dtyHXMXp7H7OCK+2K39uZhK50DaK58ejZ/EfqOv8fMvxc+nZe198rP4whnUBYbN06T/udXt/svH1XTf/f4vpj3U6WX9X3Kppf20D3wR/6D/G+nR/109aYyPfv+9dmri1bLHEV8ejTiIvd/R/xzEz/WI/+EJ4//lK+++36us9euIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m85Rz/YeDf7x6fU3e5Ul7Z/sEb94TPu/fsL2/+Z/9370tdfE/+YH3eLn453XxE/GxG+cMP7i5O+KvcqS+Ms92n/c83/9hPGf/XXnlWXDAYDBaWzvrC1Wq5VNCYmLn0h+ZS9ANbomPutXrLHoXvTzD9r39JGiVuv1F/yse1GvHuMsZt2Ai+Dwpo+I/w66MgAAAAAAAAAAAAAAQFf9+MTSoNsIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA5fX/AAAA//+YXdZi") acct(&(0x7f0000000200)='./file1\x00') r4 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0) 1.750247996s ago: executing program 4 (id=5478): creat(&(0x7f0000000240)='./bus\x00', 0xc2) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x4}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) gettid() r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) syz_clone(0xc0008100, 0x0, 0x1a, 0x0, 0x0, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x84000, 0x104) fcntl$setownex(r4, 0xf, &(0x7f0000000300)={0x2, r1}) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000), 0x208e24b) 1.288622254s ago: executing program 0 (id=5482): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0xb) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000440), 0x10) listen(r1, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) writev(r2, &(0x7f0000000000)=[{&(0x7f00000000c0)="f8", 0x1}], 0x1) close_range(r1, r2, 0x0) 1.275372334s ago: executing program 0 (id=5483): bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x660}}, &(0x7f0000000040)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0xfffffffffffffffe}, 0x18) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r0}, &(0x7f0000000000), &(0x7f0000000040)='%-5lx \x00'}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) 1.168617434s ago: executing program 0 (id=5484): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000003a2fea69e813000000000000000000000000021fcb31fe3f"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = socket(0x11, 0x803, 0x4) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000000)=0x526b, 0x4) pselect6(0x40, &(0x7f0000000040)={0xc}, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000200)='mm_page_free\x00', r1}, 0x10) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11011, 0xffffffffffffffff, 0x2000) syz_clone(0x1100, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) munlockall() seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x4, &(0x7f0000000200)={0x6, &(0x7f00000002c0)=[{0x5, 0x1, 0x1, 0x8000000a}, {0x0, 0x37, 0x81, 0x3ff}, {0xe, 0x2, 0x1, 0x2}, {0x0, 0xfb, 0x40, 0x6}, {0x2, 0x81, 0xb, 0x40}, {0x5, 0xfb, 0x10, 0x20003}]}) socket$key(0xf, 0x3, 0x2) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x21000) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) read(r3, 0x0, 0x0) 1.124816654s ago: executing program 3 (id=5485): getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={@local, @local, 0x0}, &(0x7f00000000c0)=0xc) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x26, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x7}, {}, {}, [@map_idx={0x18, 0x0, 0x5, 0x0, 0x6}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @jmp={0x5, 0x1, 0x4, 0xa, 0xb, 0x10, 0x1}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x1}, @generic={0x1, 0x8, 0x8, 0x3, 0xfffffff1}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000100)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41100, 0x30, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000140)=[{0x4, 0x4, 0xd, 0x5}], 0x10, 0x654b, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r4}, 0x10) clock_gettime(0x0, &(0x7f0000000000)) 1.113951544s ago: executing program 3 (id=5486): socket(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000d000000bfff04000900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r2, 0xffffffffffffffff}, &(0x7f0000000100)}, 0x20) socket$inet6(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1f, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x21885e, &(0x7f0000000440)={[{@grpquota}, {@min_batch_time={'min_batch_time', 0x3d, 0x2f}}, {@dioread_lock}]}, 0x5, 0x504, &(0x7f0000001480)="$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") acct(&(0x7f0000000200)='./file1\x00') r4 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0) 1.043529404s ago: executing program 2 (id=5487): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="6c000000100003042cbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000003c00128009000100766c616e000000002c00028006000100000000001c0003800c00010000010000800000000c00010000000000ffffff7f0400048008000a00", @ANYRES32=r4, @ANYBLOB="08000500", @ANYRES32=r4], 0x6c}, 0x1, 0xba01}, 0x0) 959.106633ms ago: executing program 3 (id=5489): socket(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000d000000bfff04000900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r2, 0xffffffffffffffff}, &(0x7f0000000100)}, 0x20) socket$inet6(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1f, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x21885e, &(0x7f0000000440)={[{@grpquota}, {@min_batch_time={'min_batch_time', 0x3d, 0x2f}}, {@dioread_lock}]}, 0x5, 0x504, &(0x7f0000001480)="$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") acct(&(0x7f0000000200)='./file1\x00') r4 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r4, 0x0, &(0x7f0000000080)='ro\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/asound/seq/clients\x00', 0x0, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) 844.960343ms ago: executing program 4 (id=5491): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x2000000, 0x0, 0x0, 0xa, "ff00f7000000000000000000af88008300"}) r1 = syz_open_pts(r0, 0x141601) socketpair$unix(0x1, 0x2, 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) write(r1, &(0x7f0000000000)="d5", 0xfffffedf) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='9p_client_req\x00', r3}, 0x10) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r4}, 0x8) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='%\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYRES32=r5, @ANYBLOB="5205"], 0x20) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) timerfd_settime(0xffffffffffffffff, 0x2, 0x0, &(0x7f0000000100)) write$RDMA_USER_CM_CMD_DESTROY_ID(r6, &(0x7f0000000380)={0x1, 0x10, 0xfa00, {0x0, r8}}, 0x18) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x15) r9 = dup(0xffffffffffffffff) write$P9_RLERRORu(r9, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r9, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r9) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0xfffffffc, 0xffffffff, 0x0, "682341f2fd71a6a76177920ea7e60c0ac7a4a5"}) 784.308633ms ago: executing program 6 (id=5494): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000fb"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0900000004"], 0x50) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000003c0)=0x2) readv(r4, &(0x7f0000000140)=[{&(0x7f0000000240)=""/163, 0xa3}], 0x1) ioctl$TIOCVHANGUP(r4, 0x5437, 0x2) r5 = socket$netlink(0x10, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, r5, 0x0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000b00)="df3bedb85e26d34058704b5a8b499aec9ee04fd955b679f85f94c06e340b531feaa2c73cdc8ddc6bd98536506221f50f5181a5a1d200c3ff94025eff52add2593e69145adafd169766fe8ca640252fee3ad03ab03820d837df0085559aeb7de5c0453ce75dfadf1d7e7a2091f7d9e11fe4414e0a1e7228f76a4080858ebe072cbebe682401b6e02e3975038b7214cbf3ebbc94a9834519042ae1e7fa1d127012b40c92c6263605a5158e9319aab459fee44af50e6fd6837c119ab00419f8adcee28bc4735b511771f9c6154e9ba57f710ec1e9f671b4f0826b1c61d04b2f42f4c7347ab16b9554d72779c08ddc314916bc74d5d5c3", 0xf5}, {&(0x7f0000000c00)="c69da8b7911789f6da63b4d9c6e5965c8073592b3fffe779fbc0906bd89ba4a0a1a886cffb819bf5d40cdcb56f7f13041ffd86584056419eec452ef5cf9fb2ed67c42c8f70ac5440474cc8d5279a21134a9e23f9b0923fc85e734b5c49b6b577b9d6c31c07b1149f94", 0x69}], 0x2, &(0x7f0000001180)=ANY=[@ANYBLOB="5000000000000000000000000600000007ffb7b540858251b410a1486e08c06a5ec9e095abc9c3bc054a52037c2cd2d006a01cafca19797e4eaa0320ed57c7bb650cbb0c63b47635fac7fec04d95dfd4000100000000000011010000080000000da8290bc018c2f026ada9108db22c2f3ccd8076a4653de3342a1476f08bb330a2b8b345c0c446fb283db195250dd9163be586f4557985b9c7d9a561f3e79e3dc26c1b4808b549c5142d1f3678c2e43523996584ec7bdbc4259de0467bc64a51d8db6ec8704faac7474e975efe3e2b64b9253e464db1d6a8881f034b2ca9821df70ee805304f65a19db280e464c7ce23564371317da4fb71af1b8b58353b64e3cd4f78d3ae84b14d05ff9206476c26cefc198f7b62dc49c6d936ac5461d9b5cbd7eb80de5a50c6785d4390a40f02006de2a8c4415be53d8061ec170deefd16000000000000200000000000000015010000060000003c080a6f2b2e345a1eb7b57f55000000c8000000000000000f010000fbffffffefec5d21731cf77dad6c746bc7ad3b6f9a274d4f3e932bb0f804096a2fba8b7e1fcddb5612b2290bb9546bfec02ea6bfbede2f349254d6e13ef91419f0175abafcedd868eb8c57ca9f3f36c91ea1a29423b48053db5a4c20f58c30baf2b7ae9c09bf8e88a819cf36801c3e0aa4dd9f78177f026634bd21b24c38c423c2c03a9998728db1bd2283e094b6044527bd98b66ed42bd0019772bf5d99d447e2287640f789befb3d109b60b94e05da17d13413a4631e310500000058000000000000001601000001000000b7b274126f898e37a9f7b0ab906a4291c144fa6202da18f1cf02bcb960e44a53b7333178746e68f2e575e3f45f8c8185f6152f37988a126ee2a22f7a27b4c17780415273d4b500"/656], 0x290}, 0x0, 0x4000041, 0x1}) r6 = mq_open(&(0x7f0000000000)='!selinu\xff\x7f\x00\x00inux\x00T\x8b\xb5\xf3\xcb\xdd\xe3\xbf2\x86\x01\x84\xdd\x8a\x8f_l\xa1L\xb1\xef\xb2\xc9\xf7+C\xb2\x8e9\xb8\xec\x1a\xe5\xaeq\x8fZ\xff\xbcY+\xaf0<\xa3\xb8\"Zm\x1c\x18\x11\x93\xb5z \xc2\x8b\xa9\xc5\x9es\t\xfe\x002\xa0-\xaf\xcdP\x9f\xe5Iv\xce*\xa8\xa3\x14i\x05\x8f\x9b\x1eB\x9f\x9d#E\x19\xdc\xfe\xc7\xeb\xb5\xcd\xc8\xe2U\xce\x00\x00', 0x6e93ebbbcc0884f2, 0x2c, &(0x7f0000000300)={0x0, 0x1, 0x3}) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x0, 0x0, &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) r7 = bpf$MAP_CREATE(0x0, 0x0, 0x50) openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES16=r2, @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mq_timedsend(r6, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r6, 0x0, 0x0, 0x0, 0x0) mq_timedreceive(r6, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) 689.441032ms ago: executing program 6 (id=5495): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) unshare(0x2040400) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000100)={r2, 0x2, 0x6}, 0x10) r3 = socket$packet(0x11, 0x3, 0x300) dup2(r3, r1) 633.234152ms ago: executing program 6 (id=5496): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000100)=ANY=[], 0x0, 0x8000004, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$SCSI_IOCTL_STOP_UNIT(r4, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000001380)}, 0x20) process_mrelease(0xffffffffffffffff, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)="2e00000010008108040f80ecdb4cb92e0a480e000f000000e8bd6efb250314000e000300240248ff050005001200", 0x2e}], 0x1}, 0x0) 559.869672ms ago: executing program 6 (id=5497): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kfree\x00', r3, 0x0, 0xfffffffffffffffe}, 0x18) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="6c000000100003042cbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000003c00128009000100766c616e000000002c00028006000100000000001c0003800c00010000010000800000000c00010000000000ffffff7f0400048008000a00", @ANYRES32=r4, @ANYBLOB="08000500", @ANYRES32=r4], 0x6c}, 0x1, 0xba01}, 0x0) 430.149462ms ago: executing program 2 (id=5498): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r1, 0xffffffffffffffff, 0x2d, 0x0, @val=@netfilter={0x2, 0x0, 0x6}}, 0x20) bpf$LINK_DETACH(0x22, &(0x7f00000001c0)=r2, 0x4) 386.416422ms ago: executing program 2 (id=5499): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000059c0)='./bus\x00', 0x1400e, &(0x7f0000000540)={[{@jqfmt_vfsv0}]}, 0x1, 0x439, &(0x7f0000000100)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f00000000c0), 0x0, 0x9000) 354.493112ms ago: executing program 6 (id=5500): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) writev(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)="f8", 0x1}], 0x1) close_range(r0, r1, 0x0) 296.273912ms ago: executing program 3 (id=5501): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000fb"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0900000004"], 0x50) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000003c0)=0x2) readv(r4, &(0x7f0000000140)=[{&(0x7f0000000240)=""/163, 0xa3}], 0x1) ioctl$TIOCVHANGUP(r4, 0x5437, 0x2) r5 = socket$netlink(0x10, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, r5, 0x0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000b00)="df3bedb85e26d34058704b5a8b499aec9ee04fd955b679f85f94c06e340b531feaa2c73cdc8ddc6bd98536506221f50f5181a5a1d200c3ff94025eff52add2593e69145adafd169766fe8ca640252fee3ad03ab03820d837df0085559aeb7de5c0453ce75dfadf1d7e7a2091f7d9e11fe4414e0a1e7228f76a4080858ebe072cbebe682401b6e02e3975038b7214cbf3ebbc94a9834519042ae1e7fa1d127012b40c92c6263605a5158e9319aab459fee44af50e6fd6837c119ab00419f8adcee28bc4735b511771f9c6154e9ba57f710ec1e9f671b4f0826b1c61d04b2f42f4c7347ab16b9554d72779c08ddc314916bc74d5d5c3", 0xf5}, {&(0x7f0000000c00)="c69da8b7911789f6da63b4d9c6e5965c8073592b3fffe779fbc0906bd89ba4a0a1a886cffb819bf5d40cdcb56f7f13041ffd86584056419eec452ef5cf9fb2ed67c42c8f70ac5440474cc8d5279a21134a9e23f9b0923fc85e734b5c49b6b577b9d6c31c07b1149f948b7218aa5ee3dc700e6fef1d8f30e891f85ed6066275f39d5d219057f6ad1060a69a25", 0x8c}], 0x2, &(0x7f0000001180)=ANY=[@ANYBLOB="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"/656], 0x290}, 0x0, 0x4000041, 0x1}) r6 = mq_open(&(0x7f0000000000)='!selinu\xff\x7f\x00\x00inux\x00T\x8b\xb5\xf3\xcb\xdd\xe3\xbf2\x86\x01\x84\xdd\x8a\x8f_l\xa1L\xb1\xef\xb2\xc9\xf7+C\xb2\x8e9\xb8\xec\x1a\xe5\xaeq\x8fZ\xff\xbcY+\xaf0<\xa3\xb8\"Zm\x1c\x18\x11\x93\xb5z \xc2\x8b\xa9\xc5\x9es\t\xfe\x002\xa0-\xaf\xcdP\x9f\xe5Iv\xce*\xa8\xa3\x14i\x05\x8f\x9b\x1eB\x9f\x9d#E\x19\xdc\xfe\xc7\xeb\xb5\xcd\xc8\xe2U\xce\x00\x00', 0x6e93ebbbcc0884f2, 0x2c, &(0x7f0000000300)={0x0, 0x1, 0x3}) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x0, 0x0, &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x50) openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES16=r2, @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r9}, 0x10) mq_timedsend(r6, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r6, 0x0, 0x0, 0x0, 0x0) mq_timedreceive(r6, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5393, &(0x7f0000000000)) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB="48000000100003bab90000000000003eb2000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006d61637365630000180002800c0004000400000100c28000050003"], 0x48}}, 0x0) 295.899101ms ago: executing program 0 (id=5502): bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000111e"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010325bd700000000000010000000800070000"], 0x30}}, 0x0) 293.410251ms ago: executing program 6 (id=5503): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000040000000000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x9, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x0, 0x18, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x6d) r1 = getuid() setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x114, 0x1, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file2\x00', 0x200000, &(0x7f00000000c0)={[{@dioread_lock}, {@noblock_validity}, {@lazytime}, {@noblock_validity}]}, 0xfc, 0x564, &(0x7f00000008c0)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.numa_stat\x00', 0x275a, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0x8004587d, &(0x7f00000003c0)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) (fail_nth: 1) timer_create(0x1, 0x0, &(0x7f00000005c0)) syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYRES64=r1, @ANYRESDEC, @ANYRESHEX=r1], 0x1, 0x522, &(0x7f0000000a80)="$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") newfstatat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r5, &(0x7f00000000c0)={0x2, 0x4e24, @private=0xa010102}, 0x10) stat(&(0x7f0000000380)='./file0\x00', &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000a40)={0x0, 0x0}, &(0x7f0000000ac0)=0xc) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000040)={0x400000000000000, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x2, 0xf, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e20, @multicast1}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x2, 0x0, 0x800000, 0xffffffff, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@empty, @in6=@mcast1}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @loopback}}]}, 0x80}}, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000c00)={{{@in=@empty, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@broadcast}}, &(0x7f0000000b00)=0xe8) lstat(&(0x7f0000000b40)='./file0\x00', &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='system.posix_acl_default\x00', &(0x7f0000000d80)={{}, {0x1, 0x4}, [{0x2, 0x0, r1}, {0x2, 0x7, 0xee01}, {0x2, 0x9, r4}, {0x2, 0x2, 0xee00}, {0x2, 0x1290947262e1c790, r6}, {0x2, 0x2, r7}, {0x2, 0x4, r9}], {}, [{0x8, 0x3, r10}, {0x8, 0x2}], {0x10, 0x5}, {0x20, 0x4}}, 0x6c, 0x2) 257.086521ms ago: executing program 0 (id=5504): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0xb) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000440), 0x10) listen(r1, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) writev(r2, &(0x7f0000000000)=[{&(0x7f00000000c0)="f8", 0x1}], 0x1) close_range(r1, r2, 0x0) 225.065431ms ago: executing program 0 (id=5505): ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001580)={0x0, 0x508, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c75256509e3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r1, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)}, 0x40000100) syz_io_uring_setup(0x362a, &(0x7f0000000040)={0x0, 0xb0da, 0x2, 0x2, 0x2f7}, &(0x7f0000000140), &(0x7f0000000180)) 188.142191ms ago: executing program 2 (id=5506): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000072000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000200000000000000001809"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002080)={&(0x7f0000000300)='kfree\x00', r1, 0x0, 0xfffffffffffffffc}, 0x18) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$SG_SET_RESERVED_SIZE(r3, 0x2275, &(0x7f0000000000)=0xc92b) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket(0x1, 0x80802, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[], 0x48) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00008, 0x0, 0x50032, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b702000001000000850000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r5, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x7}) ioctl$sock_netdev_private(r5, 0x8943, &(0x7f0000000000)) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010000030900010073797a30000000002c000000030a01010000000000000000010000000900030073797a32000000000900010073797a300000000050200000060a010400000000000000000100000008000b400000000028000480240001800b0001007470726f7879000014000280080001400000000008000240000000010900010073797a3000000000148000001100010000000000000000000700000a"], 0xc4}}, 0x44000) iopl(0x43) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x3) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000fc0f00000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioperm(0xfe, 0x5, 0x3) pivot_root(&(0x7f0000000000)='.\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000002140)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff0200}]}) 187.691111ms ago: executing program 3 (id=5507): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000100)=ANY=[], 0x0, 0x8000004, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$SCSI_IOCTL_STOP_UNIT(r4, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000001380)}, 0x20) process_mrelease(0xffffffffffffffff, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)="2e00000010008108040f80ecdb4cb92e0a480e000f000000e8bd6efb250314000e000300240248ff050005001200", 0x2e}], 0x1}, 0x0) 159.378971ms ago: executing program 3 (id=5508): r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000800)='./file0\x00', 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="757466382c626c6f636b3d307830303030303030303030303030323030006e6f726f636b2c63727566742c6d61703d6f66662c646d6f64653d3078303430303030303030303030303063664173657373696f6e3d3078303030303030303030303030303033382c756e686964652c756e686964652c6769643d29e0cd5c372ab078c28fb05c6421428d066455368833565fd726743513f4466efa8d4fba06d57341875f5775ab343c0f6bc59fbde784ec3597e0e286d8d0dbf360afa3bc5c145b6e4f8b0305932fb55ff13f9fcb5035769f5fca33ac02bdeacb24c58103edc3d8b46df7614aa493952584ee662174309b11a4ad19e64dcdeeca1c148170b8d1aaf26082364b0d90d63d8502ffa63dde945e4612ac134315f389af667a04931ad25ff10b9b5107e517dbbcf5dcb60f564f54b344218d9325b53e829c38c96c69adc9e745202923a1b8124333cce0a8f1c748d42a272eb3e5502051090f1ac34fe5e8f038", @ANYRESHEX=0x0, @ANYRESOCT], 0x2, 0x699, &(0x7f0000000140)="$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") r1 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x2) setxattr$security_selinux(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), &(0x7f0000000840)='system_u:object_r:auditd_exec_t:s0\x00', 0x23, 0x1) write$binfmt_script(r1, &(0x7f0000000300)={'#! ', './file0'}, 0xb) execveat(r1, 0x0, 0x0, 0x0, 0x1000) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) preadv(r2, &(0x7f0000000500)=[{&(0x7f0000000080)=""/243, 0xf3}, {&(0x7f0000000180)=""/75, 0x4b}, {&(0x7f0000000200)=""/156, 0xfffffe80}, {&(0x7f0000000580)=""/209, 0xcf}, {&(0x7f00000003c0)=""/157, 0x9d}, {&(0x7f0000000480)=""/105, 0x69}], 0x6, 0x0, 0x0) preadv2(r1, &(0x7f0000000e80)=[{&(0x7f0000000c80)=""/252, 0xfc}, {&(0x7f0000000d80)=""/31, 0x1f}, {&(0x7f0000000dc0)=""/173, 0xad}], 0x3, 0x3, 0x200, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000880)={{{@in6=@private1, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@initdev}}, &(0x7f0000000b40)=0xe8) stat(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000c40)={{0x1, 0x1, 0x18, r0, {r3, r4}}, '\x00'}) 145.552281ms ago: executing program 2 (id=5509): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, 0x0, 0x40, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000140)={0x0, 0xffffffffffffffff, 0x1, 0x800, 0x9, 0x2}) 0s ago: executing program 2 (id=5510): bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r2, 0x0, 0x0) kernel console output (not intermixed with test programs): 45.275632][ C0] vcan0: j1939_tp_rxtimer: 0xffff888108062c00: rx timeout, send abort [ 245.283915][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888108062c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 245.384797][T16489] tmpfs: Unknown parameter '0xffffffffffffffff)HmXW~.[g^ k%b}.|%' [ 245.767709][T16503] FAULT_INJECTION: forcing a failure. [ 245.767709][T16503] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 245.781172][T16503] CPU: 0 UID: 0 PID: 16503 Comm: syz.6.4494 Not tainted 6.13.0-syzkaller-09383-gebbb8be421ee #0 [ 245.781202][T16503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 245.781218][T16503] Call Trace: [ 245.781225][T16503] [ 245.781240][T16503] dump_stack_lvl+0xf2/0x150 [ 245.781275][T16503] dump_stack+0x15/0x1a [ 245.781330][T16503] should_fail_ex+0x24a/0x260 [ 245.781370][T16503] should_fail+0xb/0x10 [ 245.781406][T16503] should_fail_usercopy+0x1a/0x20 [ 245.781470][T16503] _copy_to_user+0x20/0xa0 [ 245.781492][T16503] simple_read_from_buffer+0xa0/0x110 [ 245.781519][T16503] proc_fail_nth_read+0xf9/0x140 [ 245.781551][T16503] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 245.781643][T16503] vfs_read+0x19b/0x6f0 [ 245.781663][T16503] ? __rcu_read_unlock+0x4e/0x70 [ 245.781684][T16503] ? __fget_files+0x17c/0x1c0 [ 245.781718][T16503] ksys_read+0xe8/0x1b0 [ 245.781751][T16503] __x64_sys_read+0x42/0x50 [ 245.781838][T16503] x64_sys_call+0x2874/0x2dc0 [ 245.781861][T16503] do_syscall_64+0xc9/0x1c0 [ 245.781963][T16503] ? clear_bhb_loop+0x55/0xb0 [ 245.781992][T16503] ? clear_bhb_loop+0x55/0xb0 [ 245.782017][T16503] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.782096][T16503] RIP: 0033:0x7f07af4bb7bc [ 245.782111][T16503] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 245.782126][T16503] RSP: 002b:00007f07adb27030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 245.782141][T16503] RAX: ffffffffffffffda RBX: 00007f07af6d5fa0 RCX: 00007f07af4bb7bc [ 245.782151][T16503] RDX: 000000000000000f RSI: 00007f07adb270a0 RDI: 0000000000000010 [ 245.782163][T16503] RBP: 00007f07adb27090 R08: 0000000000000000 R09: 0000000000000000 [ 245.782236][T16503] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 245.782247][T16503] R13: 0000000000000000 R14: 00007f07af6d5fa0 R15: 00007ffc47bb9cc8 [ 245.782262][T16503] [ 246.077867][T16511] 9pnet_fd: Insufficient options for proto=fd [ 246.132916][T16513] loop4: detected capacity change from 0 to 1024 [ 246.169852][T16515] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4500'. [ 246.176886][T16513] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 246.227728][T16513] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.4499: bg 0: block 260: invalid block bitmap [ 246.269137][T16527] loop6: detected capacity change from 0 to 256 [ 246.289580][T11263] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 246.301776][T16527] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 246.321386][T16527] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 246.329928][T16527] FAT-fs (loop6): Filesystem has been set read-only [ 246.358410][T16532] loop2: detected capacity change from 0 to 164 [ 246.371238][T16532] Unable to read rock-ridge attributes [ 246.402523][T16542] FAULT_INJECTION: forcing a failure. [ 246.402523][T16542] name failslab, interval 1, probability 0, space 0, times 0 [ 246.410784][T16540] loop2: detected capacity change from 0 to 2048 [ 246.415275][T16542] CPU: 0 UID: 0 PID: 16542 Comm: syz.3.4510 Not tainted 6.13.0-syzkaller-09383-gebbb8be421ee #0 [ 246.415306][T16542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 246.415322][T16542] Call Trace: [ 246.415330][T16542] [ 246.415338][T16542] dump_stack_lvl+0xf2/0x150 [ 246.415436][T16542] dump_stack+0x15/0x1a [ 246.415462][T16542] should_fail_ex+0x24a/0x260 [ 246.415517][T16542] should_failslab+0x8f/0xb0 [ 246.415561][T16542] kmem_cache_alloc_node_noprof+0x59/0x320 [ 246.415599][T16542] ? __alloc_skb+0x10b/0x310 [ 246.415633][T16542] __alloc_skb+0x10b/0x310 [ 246.415694][T16542] netlink_alloc_large_skb+0xad/0xe0 [ 246.415742][T16542] netlink_sendmsg+0x3b4/0x6e0 [ 246.415771][T16542] ? __pfx_netlink_sendmsg+0x10/0x10 [ 246.415795][T16542] __sock_sendmsg+0x140/0x180 [ 246.415823][T16542] ____sys_sendmsg+0x312/0x410 [ 246.415863][T16542] __sys_sendmsg+0x19d/0x230 [ 246.415969][T16542] __x64_sys_sendmsg+0x46/0x50 [ 246.416006][T16542] x64_sys_call+0x2734/0x2dc0 [ 246.416048][T16542] do_syscall_64+0xc9/0x1c0 [ 246.416080][T16542] ? clear_bhb_loop+0x55/0xb0 [ 246.416162][T16542] ? clear_bhb_loop+0x55/0xb0 [ 246.416201][T16542] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.416305][T16542] RIP: 0033:0x7f671357cda9 [ 246.416322][T16542] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 246.416342][T16542] RSP: 002b:00007f6711be7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 246.416363][T16542] RAX: ffffffffffffffda RBX: 00007f6713795fa0 RCX: 00007f671357cda9 [ 246.416440][T16542] RDX: 0000000000000000 RSI: 0000000020000600 RDI: 0000000000000003 [ 246.416454][T16542] RBP: 00007f6711be7090 R08: 0000000000000000 R09: 0000000000000000 [ 246.416467][T16542] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 246.416562][T16542] R13: 0000000000000000 R14: 00007f6713795fa0 R15: 00007ffd17c87808 [ 246.416584][T16542] [ 246.631910][T16547] netlink: 108 bytes leftover after parsing attributes in process `syz.3.4511'. [ 246.689569][T16557] netdevsim netdevsim3 : renamed from netdevsim1 (while UP) [ 246.753029][T16549] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4512'. [ 247.591364][T16599] FAULT_INJECTION: forcing a failure. [ 247.591364][T16599] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 247.604472][T16599] CPU: 1 UID: 0 PID: 16599 Comm: syz.3.4531 Not tainted 6.13.0-syzkaller-09383-gebbb8be421ee #0 [ 247.604493][T16599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 247.604556][T16599] Call Trace: [ 247.604562][T16599] [ 247.604567][T16599] dump_stack_lvl+0xf2/0x150 [ 247.604590][T16599] dump_stack+0x15/0x1a [ 247.604608][T16599] should_fail_ex+0x24a/0x260 [ 247.604639][T16599] should_fail+0xb/0x10 [ 247.604700][T16599] should_fail_usercopy+0x1a/0x20 [ 247.604735][T16599] _copy_from_iter+0xd5/0xd00 [ 247.604752][T16599] ? alloc_pages_mpol+0x208/0x260 [ 247.604833][T16599] copy_page_from_iter+0x14f/0x280 [ 247.604852][T16599] tun_get_user+0x68b/0x25c0 [ 247.604886][T16599] ? avc_has_perm+0xd4/0x160 [ 247.604940][T16599] ? ref_tracker_alloc+0x1f5/0x2f0 [ 247.604978][T16599] tun_chr_write_iter+0x188/0x240 [ 247.605009][T16599] vfs_write+0x77b/0x920 [ 247.605071][T16599] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 247.605117][T16599] ksys_write+0xe8/0x1b0 [ 247.605140][T16599] __x64_sys_write+0x42/0x50 [ 247.605174][T16599] x64_sys_call+0x287e/0x2dc0 [ 247.605202][T16599] do_syscall_64+0xc9/0x1c0 [ 247.605231][T16599] ? clear_bhb_loop+0x55/0xb0 [ 247.605258][T16599] ? clear_bhb_loop+0x55/0xb0 [ 247.605402][T16599] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.605423][T16599] RIP: 0033:0x7f671357b85f [ 247.605437][T16599] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 247.605535][T16599] RSP: 002b:00007f6711be7000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 247.605552][T16599] RAX: ffffffffffffffda RBX: 00007f6713795fa0 RCX: 00007f671357b85f [ 247.605562][T16599] RDX: 000000000000004a RSI: 0000000020000040 RDI: 00000000000000c8 [ 247.605587][T16599] RBP: 00007f6711be7090 R08: 0000000000000000 R09: 0000000000000000 [ 247.605597][T16599] R10: 000000000000004a R11: 0000000000000293 R12: 0000000000000001 [ 247.605606][T16599] R13: 0000000000000001 R14: 00007f6713795fa0 R15: 00007ffd17c87808 [ 247.605622][T16599] [ 247.610989][T16597] program syz.6.4530 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 247.767958][T16603] hub 2-0:1.0: USB hub found [ 247.840454][T16602] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4532'. [ 247.841870][T16603] hub 2-0:1.0: 8 ports detected [ 247.911290][T16612] serio: Serial port ttyS3 [ 248.744097][T16621] serio: Serial port ttyS3 [ 248.987632][T16651] loop4: detected capacity change from 0 to 512 [ 249.025878][T16644] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4546'. [ 249.035980][T16651] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.4548: bg 0: block 248: padding at end of block bitmap is not set [ 249.051335][T16651] EXT4-fs error (device loop4): ext4_acquire_dquot:6927: comm syz.4.4548: Failed to acquire dquot type 1 [ 249.072162][T16651] EXT4-fs (loop4): 1 truncate cleaned up [ 249.083302][T16651] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 249.110456][T16651] ext4 filesystem being mounted at /338/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 249.182024][T11263] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 249.393389][ T29] kauditd_printk_skb: 281 callbacks suppressed [ 249.393402][ T29] audit: type=1326 audit(1738190206.652:30572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16673 comm="syz.4.4555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f5a2312cda9 code=0x7ffc0000 [ 249.423368][ T29] audit: type=1400 audit(1738190206.662:30573): avc: denied { name_bind } for pid=16682 comm="syz.2.4559" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 249.466388][T16688] loop2: detected capacity change from 0 to 512 [ 249.473383][T16688] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 249.483179][ T29] audit: type=1400 audit(1738190206.742:30574): avc: denied { ioctl } for pid=16693 comm="syz.4.4564" path="socket:[48391]" dev="sockfs" ino=48391 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 249.487066][T16688] EXT4-fs (loop2): 1 truncate cleaned up [ 249.514365][T16688] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 249.543389][ T29] audit: type=1400 audit(1738190206.802:30575): avc: denied { write } for pid=16682 comm="syz.2.4559" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 249.565296][ T29] audit: type=1400 audit(1738190206.802:30576): avc: denied { add_name } for pid=16682 comm="syz.2.4559" name="cpuset.effective_cpus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 249.587713][ T29] audit: type=1400 audit(1738190206.802:30577): avc: denied { create } for pid=16682 comm="syz.2.4559" name="cpuset.effective_cpus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 249.609532][ T29] audit: type=1400 audit(1738190206.802:30578): avc: denied { read append open } for pid=16682 comm="syz.2.4559" path="/311/bus/cpuset.effective_cpus" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 249.634959][ T29] audit: type=1400 audit(1738190206.832:30579): avc: denied { write } for pid=16682 comm="syz.2.4559" path="/311/bus/bus" dev="loop2" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 249.655739][T16702] audit: audit_backlog=65 > audit_backlog_limit=64 [ 249.657564][ T29] audit: type=1400 audit(1738190206.832:30580): avc: denied { read write } for pid=16682 comm="syz.2.4559" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 249.783355][T16710] loop6: detected capacity change from 0 to 164 [ 249.807502][T16710] syz.6.4570: attempt to access beyond end of device [ 249.807502][T16710] loop6: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 249.808998][T16712] netlink: 200 bytes leftover after parsing attributes in process `syz.3.4571'. [ 249.849997][T16710] syz.6.4570: attempt to access beyond end of device [ 249.849997][T16710] loop6: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 250.233796][T16734] program syz.6.4581 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 250.256328][T16734] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 250.276773][T12353] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 250.278930][T16734] $H: renamed from bond0 (while UP) [ 250.301288][T16734] $H: entered promiscuous mode [ 250.306425][T16734] bond_slave_0: entered promiscuous mode [ 250.312116][T16734] bond_slave_1: entered promiscuous mode [ 250.353367][T16732] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4580'. [ 250.365774][T16741] loop2: detected capacity change from 0 to 1024 [ 250.398611][T16741] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 250.417052][T16741] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.4583: bg 0: block 260: invalid block bitmap [ 250.467528][T16749] netlink: 'syz.0.4586': attribute type 11 has an invalid length. [ 250.472937][T16751] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled [ 250.475439][T16749] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4586'. [ 250.500592][T12353] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 250.505515][T16749] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled [ 250.521341][T16755] FAULT_INJECTION: forcing a failure. [ 250.521341][T16755] name failslab, interval 1, probability 0, space 0, times 0 [ 250.534110][T16755] CPU: 0 UID: 0 PID: 16755 Comm: syz.6.4590 Not tainted 6.13.0-syzkaller-09383-gebbb8be421ee #0 [ 250.534136][T16755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 250.534149][T16755] Call Trace: [ 250.534155][T16755] [ 250.534162][T16755] dump_stack_lvl+0xf2/0x150 [ 250.534190][T16755] dump_stack+0x15/0x1a [ 250.534208][T16755] should_fail_ex+0x24a/0x260 [ 250.534312][T16755] should_failslab+0x8f/0xb0 [ 250.534418][T16755] kmem_cache_alloc_node_noprof+0x59/0x320 [ 250.534451][T16755] ? __alloc_skb+0x10b/0x310 [ 250.534481][T16755] __alloc_skb+0x10b/0x310 [ 250.534578][T16755] netlink_alloc_large_skb+0xad/0xe0 [ 250.534612][T16755] netlink_sendmsg+0x3b4/0x6e0 [ 250.534699][T16755] ? __pfx_netlink_sendmsg+0x10/0x10 [ 250.534729][T16755] __sock_sendmsg+0x140/0x180 [ 250.534754][T16755] ____sys_sendmsg+0x312/0x410 [ 250.534835][T16755] __sys_sendmsg+0x19d/0x230 [ 250.534885][T16755] __x64_sys_sendmsg+0x46/0x50 [ 250.534919][T16755] x64_sys_call+0x2734/0x2dc0 [ 250.534969][T16755] do_syscall_64+0xc9/0x1c0 [ 250.535023][T16755] ? clear_bhb_loop+0x55/0xb0 [ 250.535097][T16755] ? clear_bhb_loop+0x55/0xb0 [ 250.535119][T16755] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.535145][T16755] RIP: 0033:0x7f07af4bcda9 [ 250.535160][T16755] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 250.535216][T16755] RSP: 002b:00007f07adb27038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 250.535275][T16755] RAX: ffffffffffffffda RBX: 00007f07af6d5fa0 RCX: 00007f07af4bcda9 [ 250.535285][T16755] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000006 [ 250.535362][T16755] RBP: 00007f07adb27090 R08: 0000000000000000 R09: 0000000000000000 [ 250.535374][T16755] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 250.535385][T16755] R13: 0000000000000000 R14: 00007f07af6d5fa0 R15: 00007ffc47bb9cc8 [ 250.535401][T16755] [ 250.685591][T16757] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4591'. [ 250.776250][T16771] warn_alloc: 4 callbacks suppressed [ 250.776261][T16771] syz.3.4594: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 250.796234][T16771] CPU: 0 UID: 0 PID: 16771 Comm: syz.3.4594 Not tainted 6.13.0-syzkaller-09383-gebbb8be421ee #0 [ 250.796261][T16771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 250.796275][T16771] Call Trace: [ 250.796282][T16771] [ 250.796289][T16771] dump_stack_lvl+0xf2/0x150 [ 250.796341][T16771] dump_stack+0x15/0x1a [ 250.796365][T16771] warn_alloc+0x145/0x1b0 [ 250.796388][T16771] ? __schedule+0x75b/0x990 [ 250.796407][T16771] ? __vmalloc_node_range_noprof+0x88/0xe70 [ 250.796438][T16771] __vmalloc_node_range_noprof+0xaa/0xe70 [ 250.796610][T16771] ? __pfx_futex_wake_mark+0x10/0x10 [ 250.796716][T16771] ? __rcu_read_unlock+0x4e/0x70 [ 250.796736][T16771] ? avc_has_perm_noaudit+0x1cc/0x210 [ 250.796762][T16771] ? should_fail_ex+0x31/0x260 [ 250.796795][T16771] ? xskq_create+0x36/0xd0 [ 250.796842][T16771] ? should_failslab+0x8f/0xb0 [ 250.796869][T16771] vmalloc_user_noprof+0x59/0x70 [ 250.796894][T16771] ? xskq_create+0x79/0xd0 [ 250.796944][T16771] xskq_create+0x79/0xd0 [ 250.796974][T16771] xsk_init_queue+0x82/0xd0 [ 250.797003][T16771] xsk_setsockopt+0x409/0x520 [ 250.797026][T16771] ? __pfx_xsk_setsockopt+0x10/0x10 [ 250.797066][T16771] __sys_setsockopt+0x187/0x200 [ 250.797100][T16771] __x64_sys_setsockopt+0x66/0x80 [ 250.797131][T16771] x64_sys_call+0x282e/0x2dc0 [ 250.797162][T16771] do_syscall_64+0xc9/0x1c0 [ 250.797187][T16771] ? clear_bhb_loop+0x55/0xb0 [ 250.797216][T16771] ? clear_bhb_loop+0x55/0xb0 [ 250.797243][T16771] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.797286][T16771] RIP: 0033:0x7f671357cda9 [ 250.797299][T16771] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 250.797318][T16771] RSP: 002b:00007f6711be7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 250.797334][T16771] RAX: ffffffffffffffda RBX: 00007f6713795fa0 RCX: 00007f671357cda9 [ 250.797351][T16771] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000005 [ 250.797437][T16771] RBP: 00007f67135fe2a0 R08: 0000000000000020 R09: 0000000000000000 [ 250.797450][T16771] R10: 0000000020000080 R11: 0000000000000246 R12: 0000000000000000 [ 250.797480][T16771] R13: 0000000000000000 R14: 00007f6713795fa0 R15: 00007ffd17c87808 [ 250.797499][T16771] [ 250.797505][T16771] Mem-Info: [ 250.956003][T16773] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4596'. [ 250.969887][T16771] active_anon:7301 inactive_anon:221 isolated_anon:0 [ 250.969887][T16771] active_file:9442 inactive_file:12363 isolated_file:0 [ 250.969887][T16771] unevictable:0 dirty:311 writeback:0 [ 250.969887][T16771] slab_reclaimable:3027 slab_unreclaimable:15140 [ 250.969887][T16771] mapped:37293 shmem:3195 pagetables:959 [ 250.969887][T16771] sec_pagetables:0 bounce:0 [ 250.969887][T16771] kernel_misc_reclaimable:0 [ 250.969887][T16771] free:1879725 free_pcp:2465 free_cma:0 [ 251.078993][T16771] Node 0 active_anon:17952kB inactive_anon:884kB active_file:37768kB inactive_file:49452kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:137688kB dirty:1244kB writeback:0kB shmem:1528kB writeback_tmp:0kB kernel_stack:3264kB pagetables:4300kB sec_pagetables:0kB all_unreclaimable? no [ 251.107413][T16771] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 251.117144][T16785] FAULT_INJECTION: forcing a failure. [ 251.117144][T16785] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 251.134280][T16771] lowmem_reserve[]: 0 2885 7863 0 [ 251.134317][T16771] Node 0 [ 251.147476][T16785] CPU: 1 UID: 0 PID: 16785 Comm: syz.6.4599 Not tainted 6.13.0-syzkaller-09383-gebbb8be421ee #0 [ 251.147502][T16785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 251.147515][T16785] Call Trace: [ 251.147520][T16785] [ 251.147574][T16785] dump_stack_lvl+0xf2/0x150 [ 251.147601][T16785] dump_stack+0x15/0x1a [ 251.147623][T16785] should_fail_ex+0x24a/0x260 [ 251.147660][T16785] should_fail+0xb/0x10 [ 251.147689][T16785] should_fail_usercopy+0x1a/0x20 [ 251.147722][T16785] _copy_to_iter+0x248/0xd00 [ 251.147742][T16785] ? __virt_addr_valid+0x1ed/0x250 [ 251.147809][T16785] ? __check_object_size+0x364/0x520 [ 251.147845][T16785] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 251.147964][T16785] __skb_datagram_iter+0xc8/0x610 [ 251.147999][T16785] ? __pfx_sk_busy_loop_end+0x10/0x10 [ 251.148100][T16785] skb_copy_datagram_iter+0x41/0x130 [ 251.148137][T16785] netlink_recvmsg+0x1a4/0x740 [ 251.148165][T16785] ? __pfx_netlink_recvmsg+0x10/0x10 [ 251.148189][T16785] sock_recvmsg+0x13f/0x170 [ 251.148259][T16785] ____sys_recvmsg+0xf9/0x280 [ 251.148300][T16785] __sys_recvmsg+0x1c0/0x260 [ 251.148394][T16785] __x64_sys_recvmsg+0x46/0x50 [ 251.148430][T16785] x64_sys_call+0xc64/0x2dc0 [ 251.148457][T16785] do_syscall_64+0xc9/0x1c0 [ 251.148558][T16785] ? clear_bhb_loop+0x55/0xb0 [ 251.148587][T16785] ? clear_bhb_loop+0x55/0xb0 [ 251.148711][T16785] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.148764][T16785] RIP: 0033:0x7f07af4bcda9 [ 251.148781][T16785] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 251.148800][T16785] RSP: 002b:00007f07adb27038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 251.148819][T16785] RAX: ffffffffffffffda RBX: 00007f07af6d5fa0 RCX: 00007f07af4bcda9 [ 251.148832][T16785] RDX: 0000000000000002 RSI: 0000000020000300 RDI: 0000000000000003 [ 251.148845][T16785] RBP: 00007f07adb27090 R08: 0000000000000000 R09: 0000000000000000 [ 251.148857][T16785] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 251.148869][T16785] R13: 0000000000000000 R14: 00007f07af6d5fa0 R15: 00007ffc47bb9cc8 [ 251.148920][T16785] [ 251.336614][T16792] 9pnet_fd: Insufficient options for proto=fd [ 251.343645][T16771] DMA32 free:2950952kB boost:0kB min:4136kB low:7068kB high:10000kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2954484kB mlocked:0kB bounce:0kB free_pcp:3532kB local_pcp:3532kB free_cma:0kB [ 251.405081][T16771] lowmem_reserve[]: 0 0 4978 0 [ 251.409939][T16771] Node 0 Normal free:4552124kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB active_anon:17836kB inactive_anon:884kB active_file:37768kB inactive_file:49452kB unevictable:0kB writepending:1244kB present:5242880kB managed:5098208kB mlocked:0kB bounce:0kB free_pcp:17156kB local_pcp:3560kB free_cma:0kB [ 251.440447][T16771] lowmem_reserve[]: 0 0 0 0 [ 251.445107][T16771] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 251.450751][T16794] loop4: detected capacity change from 0 to 512 [ 251.457995][T16771] Node 0 DMA32: 4*4kB (M) 1*8kB (M) 5*16kB (M) 4*32kB (M) 3*64kB (M) 3*128kB (M) 2*256kB (M) 3*512kB (M) 3*1024kB (M) 2*2048kB (M) 718*4096kB (M) = 2950952kB [ 251.480243][T16771] Node 0 Normal: 2*4kB (UM) 67*8kB (UE) 530*16kB (UME) 372*32kB (UME) 146*64kB (UME) 62*128kB (UME) 45*256kB (UME) 39*512kB (UM) 23*1024kB (UME) 17*2048kB (UME) 1080*4096kB (UM) = 4551744kB [ 251.499111][T16771] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 251.508437][T16771] 22590 total pagecache pages [ 251.513105][T16771] 366 pages in swap cache [ 251.517452][T16771] Free swap = 123064kB [ 251.521655][T16771] Total swap = 124996kB [ 251.525846][T16771] 2097051 pages RAM [ 251.529643][T16771] 0 pages HighMem/MovableOnly [ 251.534322][T16771] 80038 pages reserved [ 251.573093][T16794] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.4603: bg 0: block 248: padding at end of block bitmap is not set [ 251.618933][T16794] EXT4-fs error (device loop4): ext4_acquire_dquot:6927: comm syz.4.4603: Failed to acquire dquot type 1 [ 251.660239][T16794] EXT4-fs (loop4): 1 truncate cleaned up [ 251.698045][T16794] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 251.744649][T16794] ext4 filesystem being mounted at /350/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 251.928774][T11263] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.959650][T16807] __nla_validate_parse: 2 callbacks suppressed [ 251.959689][T16807] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4608'. [ 251.994003][T16825] 9pnet_fd: Insufficient options for proto=fd [ 252.015824][T16835] FAULT_INJECTION: forcing a failure. [ 252.015824][T16835] name failslab, interval 1, probability 0, space 0, times 0 [ 252.028612][T16835] CPU: 0 UID: 0 PID: 16835 Comm: syz.6.4618 Not tainted 6.13.0-syzkaller-09383-gebbb8be421ee #0 [ 252.028633][T16835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 252.028646][T16835] Call Trace: [ 252.028653][T16835] [ 252.028660][T16835] dump_stack_lvl+0xf2/0x150 [ 252.028746][T16835] dump_stack+0x15/0x1a [ 252.028771][T16835] should_fail_ex+0x24a/0x260 [ 252.028870][T16835] should_failslab+0x8f/0xb0 [ 252.028898][T16835] kmem_cache_alloc_node_noprof+0x59/0x320 [ 252.028977][T16835] ? __alloc_skb+0x10b/0x310 [ 252.029010][T16835] __alloc_skb+0x10b/0x310 [ 252.029042][T16835] netlink_alloc_large_skb+0xad/0xe0 [ 252.029093][T16835] netlink_sendmsg+0x3b4/0x6e0 [ 252.029128][T16835] ? __pfx_netlink_sendmsg+0x10/0x10 [ 252.029153][T16835] __sock_sendmsg+0x140/0x180 [ 252.029180][T16835] ____sys_sendmsg+0x312/0x410 [ 252.029214][T16835] __sys_sendmsg+0x19d/0x230 [ 252.029322][T16835] __x64_sys_sendmsg+0x46/0x50 [ 252.029350][T16835] x64_sys_call+0x2734/0x2dc0 [ 252.029430][T16835] do_syscall_64+0xc9/0x1c0 [ 252.029463][T16835] ? clear_bhb_loop+0x55/0xb0 [ 252.029496][T16835] ? clear_bhb_loop+0x55/0xb0 [ 252.029569][T16835] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.029658][T16835] RIP: 0033:0x7f07af4bcda9 [ 252.029672][T16835] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 252.029730][T16835] RSP: 002b:00007f07adb27038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 252.029750][T16835] RAX: ffffffffffffffda RBX: 00007f07af6d5fa0 RCX: 00007f07af4bcda9 [ 252.029763][T16835] RDX: 000000000400c89c RSI: 0000000020000280 RDI: 0000000000000003 [ 252.029802][T16835] RBP: 00007f07adb27090 R08: 0000000000000000 R09: 0000000000000000 [ 252.029813][T16835] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 252.029824][T16835] R13: 0000000000000000 R14: 00007f07af6d5fa0 R15: 00007ffc47bb9cc8 [ 252.029840][T16835] [ 252.242253][T16838] loop2: detected capacity change from 0 to 1024 [ 252.272216][T16838] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 252.351307][T16838] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.4619: bg 0: block 260: invalid block bitmap [ 252.435496][T12353] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.452733][T16850] loop4: detected capacity change from 0 to 1764 [ 252.464997][T16850] isofs_fill_super: get root inode failed [ 252.508958][T16828] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4614'. [ 253.182417][T16868] loop4: detected capacity change from 0 to 164 [ 253.286644][T16878] serio: Serial port ttyS3 [ 253.308947][T16881] netlink: 60 bytes leftover after parsing attributes in process `syz.6.4631'. [ 253.319611][T16876] netlink: 60 bytes leftover after parsing attributes in process `syz.6.4631'. [ 253.330790][T16880] loop3: detected capacity change from 0 to 1024 [ 253.436138][T16880] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 253.602790][T16880] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.4633: bg 0: block 260: invalid block bitmap [ 253.669367][T16907] loop4: detected capacity change from 0 to 256 [ 253.677786][T16907] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 253.698875][T16907] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 253.707604][T16907] FAT-fs (loop4): Filesystem has been set read-only [ 253.730067][T16916] loop3: detected capacity change from 0 to 512 [ 253.738372][T16916] ext4 filesystem being mounted at /358/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 254.379844][T16926] netlink: 'syz.2.4645': attribute type 12 has an invalid length. [ 254.387899][T16926] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4645'. [ 254.393636][ T29] kauditd_printk_skb: 606 callbacks suppressed [ 254.393651][ T29] audit: type=1326 audit(1738190211.652:31180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16905 comm="syz.3.4641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6713573d67 code=0x7ffc0000 [ 254.426739][ T29] audit: type=1326 audit(1738190211.652:31181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16905 comm="syz.3.4641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6713518fa9 code=0x7ffc0000 [ 254.450265][ T29] audit: type=1326 audit(1738190211.652:31182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16905 comm="syz.3.4641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f671357cda9 code=0x7ffc0000 [ 254.479306][ T29] audit: type=1326 audit(1738190211.692:31183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16905 comm="syz.3.4641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6713573d67 code=0x7ffc0000 [ 254.502875][ T29] audit: type=1326 audit(1738190211.692:31184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16905 comm="syz.3.4641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6713518fa9 code=0x7ffc0000 [ 254.507440][T16927] loop2: detected capacity change from 0 to 1024 [ 254.526387][ T29] audit: type=1326 audit(1738190211.692:31185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16905 comm="syz.3.4641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f671357cda9 code=0x7ffc0000 [ 254.556103][ T29] audit: type=1326 audit(1738190211.692:31186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16905 comm="syz.3.4641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6713573d67 code=0x7ffc0000 [ 254.573471][T16927] EXT4-fs: Ignoring removed i_version option [ 254.579578][ T29] audit: type=1326 audit(1738190211.692:31187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16905 comm="syz.3.4641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6713518fa9 code=0x7ffc0000 [ 254.609195][ T29] audit: type=1326 audit(1738190211.692:31188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16905 comm="syz.3.4641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f671357cda9 code=0x7ffc0000 [ 254.615846][T16927] EXT4-fs (loop2): stripe (4) is not aligned with cluster size (16), stripe is disabled [ 254.632606][ T29] audit: type=1326 audit(1738190211.722:31189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16905 comm="syz.3.4641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6713573d67 code=0x7ffc0000 [ 254.685955][T16927] EXT4-fs error (device loop2): ext4_acquire_dquot:6927: comm syz.2.4645: Failed to acquire dquot type 0 [ 254.704542][T16927] EXT4-fs error (device loop2): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 254.729281][T16927] EXT4-fs error (device loop2): ext4_do_update_inode:5154: inode #13: comm syz.2.4645: corrupted inode contents [ 254.755458][T16927] EXT4-fs error (device loop2): ext4_dirty_inode:6042: inode #13: comm syz.2.4645: mark_inode_dirty error [ 254.772821][T16927] EXT4-fs error (device loop2): ext4_do_update_inode:5154: inode #13: comm syz.2.4645: corrupted inode contents [ 254.785153][T16927] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #13: comm syz.2.4645: mark_inode_dirty error [ 254.800962][T16927] EXT4-fs error (device loop2): ext4_do_update_inode:5154: inode #13: comm syz.2.4645: corrupted inode contents [ 254.812977][T16927] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 254.822361][T16927] EXT4-fs error (device loop2): ext4_do_update_inode:5154: inode #13: comm syz.2.4645: corrupted inode contents [ 254.838544][T16945] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=13 sclass=netlink_route_socket pid=16945 comm=syz.6.4652 [ 254.842547][T16927] EXT4-fs error (device loop2): ext4_truncate:4240: inode #13: comm syz.2.4645: mark_inode_dirty error [ 254.869156][T16927] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 254.879536][T16927] EXT4-fs (loop2): 1 truncate cleaned up [ 254.903770][T16955] loop3: detected capacity change from 0 to 512 [ 254.958528][T16955] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.4655: bg 0: block 248: padding at end of block bitmap is not set [ 254.986113][T16955] EXT4-fs error (device loop3): ext4_acquire_dquot:6927: comm syz.3.4655: Failed to acquire dquot type 1 [ 254.999733][T16955] EXT4-fs (loop3): 1 truncate cleaned up [ 255.006219][T16955] ext4 filesystem being mounted at /361/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 255.059961][T11512] EXT4-fs unmount: 6 callbacks suppressed [ 255.059972][T11512] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.096332][T16972] loop3: detected capacity change from 0 to 164 [ 255.883399][T16984] loop4: detected capacity change from 0 to 1024 [ 256.056075][T16984] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 256.058161][T16984] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.4662: bg 0: block 260: invalid block bitmap [ 256.088151][T16996] loop2: detected capacity change from 0 to 1024 [ 256.095922][T16996] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 256.097063][T16996] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.4668: bg 0: block 260: invalid block bitmap [ 256.148131][T12353] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.154645][T11263] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.219077][T17007] bridge_slave_0: left allmulticast mode [ 256.219097][T17007] bridge_slave_0: left promiscuous mode [ 256.219196][T17007] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.222562][T17007] bridge_slave_1: left allmulticast mode [ 256.222579][T17007] bridge_slave_1: left promiscuous mode [ 256.222671][T17007] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.238103][T17007] bond0: (slave 0@): Releasing backup interface [ 256.272314][T17007] bond0: (slave bond_slave_1): Releasing backup interface [ 256.278707][T17014] loop4: detected capacity change from 0 to 256 [ 256.288843][T17014] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 256.290269][T17014] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 256.290292][T17014] FAT-fs (loop4): Filesystem has been set read-only [ 256.311415][T17007] team0: Port device team_slave_0 removed [ 256.333901][T17007] team0: Port device team_slave_1 removed [ 256.337311][T17007] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 256.337331][T17007] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 256.344043][T17007] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 256.344138][T17007] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 256.370433][T17010] team0: Mode changed to "loadbalance" [ 256.565596][T17028] serio: Serial port ttyS3 [ 257.127252][T17037] loop3: detected capacity change from 0 to 2048 [ 257.128047][T17039] loop4: detected capacity change from 0 to 1024 [ 257.155797][T17037] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 257.155911][T17039] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 257.184344][T17039] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.4681: bg 0: block 260: invalid block bitmap [ 257.208387][T11263] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.228069][T11512] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.264783][T17051] loop3: detected capacity change from 0 to 164 [ 257.272154][T17051] Unable to read rock-ridge attributes [ 257.341761][T17064] loop3: detected capacity change from 0 to 1764 [ 257.349701][T17064] isofs_fill_super: get root inode failed [ 257.397752][T17032] serio: Serial port ttyS3 [ 257.432637][T17072] serio: Serial port ttyS3 [ 257.504220][T17080] loop6: detected capacity change from 0 to 1024 [ 257.515211][T17080] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 257.528490][T17080] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm syz.6.4696: bg 0: block 260: invalid block bitmap [ 257.550716][T12061] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.227251][T17111] serio: Serial port ttyS3 [ 258.563051][T17130] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4715'. [ 258.759819][T17132] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4716'. [ 258.802990][T17146] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4720'. [ 258.892889][T17160] loop3: detected capacity change from 0 to 764 [ 258.902506][T17160] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 258.927172][T17160] syzkaller0: entered allmulticast mode [ 258.935371][T17160] syzkaller0: left allmulticast mode [ 259.037683][T17171] 9pnet_fd: Insufficient options for proto=fd [ 259.079949][T17175] program syz.4.4730 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 259.089355][T17175] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 259.101235][T17176] loop3: detected capacity change from 0 to 1024 [ 259.108240][T17176] EXT4-fs: dax option not supported [ 259.117074][T17176] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=45594 sclass=netlink_xfrm_socket pid=17176 comm=syz.3.4728 [ 259.307239][T17186] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4735'. [ 259.378403][T17198] loop4: detected capacity change from 0 to 764 [ 259.388656][T17198] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 259.404374][ T29] kauditd_printk_skb: 521 callbacks suppressed [ 259.404386][ T29] audit: type=1400 audit(1738190216.662:31707): avc: denied { mount } for pid=17197 comm="syz.4.4739" name="/" dev="loop4" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 259.406688][T17198] syzkaller0: entered allmulticast mode [ 259.410614][ T29] audit: type=1326 audit(1738190216.662:31708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17197 comm="syz.4.4739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5a2312b710 code=0x7ffc0000 [ 259.437284][T17198] syzkaller0: left allmulticast mode [ 259.438895][ T29] audit: type=1326 audit(1738190216.662:31709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17197 comm="syz.4.4739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5a2312b710 code=0x7ffc0000 [ 259.491686][ T29] audit: type=1326 audit(1738190216.662:31710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17197 comm="syz.4.4739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a2312cda9 code=0x7ffc0000 [ 259.515431][ T29] audit: type=1326 audit(1738190216.662:31711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17197 comm="syz.4.4739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=121 compat=0 ip=0x7f5a2312cda9 code=0x7ffc0000 [ 259.539060][ T29] audit: type=1326 audit(1738190216.662:31712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17197 comm="syz.4.4739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a2312cda9 code=0x7ffc0000 [ 259.562710][ T29] audit: type=1326 audit(1738190216.662:31713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17197 comm="syz.4.4739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f5a2312cda9 code=0x7ffc0000 [ 259.586272][ T29] audit: type=1326 audit(1738190216.662:31714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17197 comm="syz.4.4739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a2312cda9 code=0x7ffc0000 [ 259.610150][ T29] audit: type=1326 audit(1738190216.662:31715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17197 comm="syz.4.4739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5a2312b710 code=0x7ffc0000 [ 259.633732][ T29] audit: type=1326 audit(1738190216.662:31716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17197 comm="syz.4.4739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f5a2312e5d7 code=0x7ffc0000 [ 259.664293][T17206] loop6: detected capacity change from 0 to 164 [ 259.671409][T17205] program syz.2.4743 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 259.681165][T17205] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 259.690144][T17206] Unable to read rock-ridge attributes [ 259.720184][T17212] loop6: detected capacity change from 0 to 164 [ 259.774992][T17220] loop2: detected capacity change from 0 to 164 [ 259.797971][T17220] syz.2.4750: attempt to access beyond end of device [ 259.797971][T17220] loop2: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 259.811930][T17220] syz.2.4750: attempt to access beyond end of device [ 259.811930][T17220] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 259.976299][T17237] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4756'. [ 260.006018][T17242] loop4: detected capacity change from 0 to 164 [ 260.028649][T17244] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4760'. [ 260.052945][T17248] loop3: detected capacity change from 0 to 512 [ 260.067280][T17246] bridge0: port 3(vlan0) entered blocking state [ 260.073797][T17246] bridge0: port 3(vlan0) entered disabled state [ 260.082748][T17246] vlan0: entered allmulticast mode [ 260.089006][T17246] vlan0: left allmulticast mode [ 260.097814][T17248] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.4761: bg 0: block 248: padding at end of block bitmap is not set [ 260.114788][T17248] EXT4-fs error (device loop3): ext4_acquire_dquot:6927: comm syz.3.4761: Failed to acquire dquot type 1 [ 260.116007][T17248] EXT4-fs (loop3): 1 truncate cleaned up [ 260.116446][T17248] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 260.116811][T17248] ext4 filesystem being mounted at /387/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 260.218377][T17255] bridge0: port 3(vlan0) entered blocking state [ 260.224758][T17255] bridge0: port 3(vlan0) entered disabled state [ 260.231429][T17255] vlan0: entered allmulticast mode [ 260.235643][T11512] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.246122][T17255] vlan0: left allmulticast mode [ 260.270709][T17264] loop2: detected capacity change from 0 to 164 [ 260.284267][T17264] syz.2.4769: attempt to access beyond end of device [ 260.284267][T17264] loop2: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 260.299630][T17264] syz.2.4769: attempt to access beyond end of device [ 260.299630][T17264] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 260.320409][T17267] loop3: detected capacity change from 0 to 1764 [ 260.352378][T17270] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4771'. [ 260.365809][T17267] isofs_fill_super: get root inode failed [ 260.403501][T17276] loop4: detected capacity change from 0 to 164 [ 260.413973][T17276] Unable to read rock-ridge attributes [ 260.492952][T17283] loop3: detected capacity change from 0 to 164 [ 260.505089][T17283] syz.3.4778: attempt to access beyond end of device [ 260.505089][T17283] loop3: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 260.519450][T17283] syz.3.4778: attempt to access beyond end of device [ 260.519450][T17283] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 260.557694][T17293] $H: renamed from bond0 (while UP) [ 260.575633][T17293] $H: entered promiscuous mode [ 260.580698][T17293] bond_slave_0: entered promiscuous mode [ 260.586634][T17293] bond_slave_1: entered promiscuous mode [ 260.799839][T17313] loop6: detected capacity change from 0 to 256 [ 260.809909][T17313] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 260.842668][T17313] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 260.851242][T17313] FAT-fs (loop6): Filesystem has been set read-only [ 260.889165][T17324] serio: Serial port ttyS3 [ 260.991931][T17319] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4793'. [ 261.023293][T17334] loop3: detected capacity change from 0 to 1024 [ 261.038648][T17334] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 261.057033][T17334] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.4796: bg 0: block 260: invalid block bitmap [ 261.133363][T11512] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.162836][T17351] loop3: detected capacity change from 0 to 164 [ 261.164257][T17347] bridge0: port 3(vlan0) entered blocking state [ 261.175499][T17347] bridge0: port 3(vlan0) entered disabled state [ 261.177621][T17351] syz.3.4801: attempt to access beyond end of device [ 261.177621][T17351] loop3: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 261.183155][T17347] vlan0: entered allmulticast mode [ 261.202331][T17351] syz.3.4801: attempt to access beyond end of device [ 261.202331][T17351] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 261.235156][T17347] vlan0: left allmulticast mode [ 261.355134][T17364] program syz.3.4809 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 261.364546][T17364] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 261.374556][T17364] $H: renamed from bond0 (while UP) [ 261.378780][T17365] loop4: detected capacity change from 0 to 512 [ 261.387566][T17365] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 261.387603][T17364] $H: entered promiscuous mode [ 261.387615][T17364] bond_slave_0: entered promiscuous mode [ 261.387695][T17364] bond_slave_1: entered promiscuous mode [ 261.399866][T17365] EXT4-fs (loop4): 1 truncate cleaned up [ 261.402789][T17364] dummy0: entered promiscuous mode [ 261.426695][T17365] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 261.459956][T17362] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4807'. [ 261.530202][T17375] loop3: detected capacity change from 0 to 1024 [ 261.546402][T17375] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 261.568400][T17375] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.4812: bg 0: block 260: invalid block bitmap [ 261.607075][T11512] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.721334][T17398] loop3: detected capacity change from 0 to 164 [ 261.756785][T17398] Unable to read rock-ridge attributes [ 261.775687][T17385] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4816'. [ 261.839708][T17410] $H: renamed from bond0 (while UP) [ 261.847406][T17410] $H: entered promiscuous mode [ 261.852509][T17410] bond_slave_0: entered promiscuous mode [ 261.858228][T17410] bond_slave_1: entered promiscuous mode [ 261.929467][T17422] loop2: detected capacity change from 0 to 1024 [ 261.955992][T17422] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 261.977377][T12353] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.009717][T17429] loop2: detected capacity change from 0 to 512 [ 262.025774][T17429] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.4832: bg 0: block 248: padding at end of block bitmap is not set [ 262.040892][T17429] EXT4-fs error (device loop2): ext4_acquire_dquot:6927: comm syz.2.4832: Failed to acquire dquot type 1 [ 262.053449][T17429] EXT4-fs (loop2): 1 truncate cleaned up [ 262.059649][T17429] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 262.072371][T17429] ext4 filesystem being mounted at /364/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 262.110324][T12353] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.164325][T17440] loop2: detected capacity change from 0 to 764 [ 262.173448][T11263] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.184743][T17440] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 262.311840][T17447] bridge0: port 1(vlan0) entered blocking state [ 262.318270][T17447] bridge0: port 1(vlan0) entered disabled state [ 262.331112][T17447] vlan0: entered allmulticast mode [ 262.354935][T17447] vlan0: left allmulticast mode [ 262.460116][T17459] loop4: detected capacity change from 0 to 1764 [ 262.467388][T17459] isofs_fill_super: get root inode failed [ 262.511999][T17465] syzkaller0: entered allmulticast mode [ 262.520178][T17465] syzkaller0: left allmulticast mode [ 262.614882][T17477] loop4: detected capacity change from 0 to 512 [ 262.622444][T17477] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 262.635260][T17477] EXT4-fs (loop4): 1 truncate cleaned up [ 262.641730][T17477] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 262.673855][T17480] syzkaller0: entered allmulticast mode [ 262.701284][T17480] syzkaller0: left allmulticast mode [ 263.115143][T17521] bridge0: port 3(vlan0) entered blocking state [ 263.121446][T17521] bridge0: port 3(vlan0) entered disabled state [ 263.127851][T17521] vlan0: entered allmulticast mode [ 263.133486][T17521] vlan0: left allmulticast mode [ 263.205297][T17530] loop6: detected capacity change from 0 to 1024 [ 263.215216][T17530] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 263.237448][T12061] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.258400][T17535] loop6: detected capacity change from 0 to 256 [ 263.265564][T17535] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 263.278051][T17535] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 263.286750][T17535] FAT-fs (loop6): Filesystem has been set read-only [ 263.314198][T17540] capability: warning: `syz.2.4868' uses 32-bit capabilities (legacy support in use) [ 263.426383][T17553] loop2: detected capacity change from 0 to 1024 [ 263.437847][T11263] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.448729][T17553] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 263.461935][T17553] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.4872: bg 0: block 260: invalid block bitmap [ 263.475509][T12353] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.493240][T17557] bridge0: port 3(vlan0) entered blocking state [ 263.499579][T17557] bridge0: port 3(vlan0) entered disabled state [ 263.507364][T17557] vlan0: entered allmulticast mode [ 263.512912][T17557] vlan0: left allmulticast mode [ 263.581909][T17564] bridge0: port 3(vlan0) entered blocking state [ 263.588252][T17564] bridge0: port 3(vlan0) entered disabled state [ 263.596099][T17564] vlan0: entered allmulticast mode [ 263.601946][T17564] vlan0: left allmulticast mode [ 263.640438][T17562] __nla_validate_parse: 7 callbacks suppressed [ 263.640453][T17562] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4875'. [ 263.742505][T17579] bridge_slave_0: left allmulticast mode [ 263.748331][T17579] bridge_slave_0: left promiscuous mode [ 263.754114][T17579] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.771150][T17579] bridge_slave_1: left allmulticast mode [ 263.776912][T17579] bridge_slave_1: left promiscuous mode [ 263.777370][T17583] loop4: detected capacity change from 0 to 1024 [ 263.782607][T17579] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.798356][T17579] $H: (slave bond_slave_0): Releasing backup interface [ 263.805419][T17583] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 263.818674][T17579] bond_slave_0: left promiscuous mode [ 263.818806][T17583] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.4884: bg 0: block 260: invalid block bitmap [ 263.836987][T17579] $H: (slave bond_slave_1): Releasing backup interface [ 263.846855][T17579] bond_slave_1: left promiscuous mode [ 263.855105][T11263] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.865639][T17579] team0: Port device team_slave_0 removed [ 263.877315][T17579] team0: Port device team_slave_1 removed [ 263.884012][T17579] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 263.891480][T17579] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 263.901234][T17579] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 263.908929][T17579] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 263.925232][T17593] loop4: detected capacity change from 0 to 764 [ 263.932491][T17584] team0: Mode changed to "loadbalance" [ 263.948954][T17593] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 263.970887][T17593] syzkaller0: entered allmulticast mode [ 263.987443][T17597] program syz.0.4888 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 263.994206][T17593] syzkaller0: left allmulticast mode [ 264.002324][T17597] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 264.025306][T17601] loop4: detected capacity change from 0 to 164 [ 264.034693][T17601] Unable to read rock-ridge attributes [ 264.074599][T17607] loop4: detected capacity change from 0 to 512 [ 264.127938][T17615] bridge0: port 3(vlan0) entered blocking state [ 264.134295][T17615] bridge0: port 3(vlan0) entered disabled state [ 264.142817][T17607] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.4893: bg 0: block 248: padding at end of block bitmap is not set [ 264.160437][T17615] vlan0: entered allmulticast mode [ 264.170598][T17615] vlan0: left allmulticast mode [ 264.176712][T17617] loop3: detected capacity change from 0 to 764 [ 264.185911][T17607] EXT4-fs error (device loop4): ext4_acquire_dquot:6927: comm syz.4.4893: Failed to acquire dquot type 1 [ 264.199028][T17607] EXT4-fs (loop4): 1 truncate cleaned up [ 264.204735][T17617] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 264.205368][T17607] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 264.225459][T17607] ext4 filesystem being mounted at /411/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 264.315167][T11263] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.361767][T17637] program syz.0.4905 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 264.364154][T17636] loop4: detected capacity change from 0 to 1024 [ 264.371268][T17637] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 264.396578][T17636] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 264.436956][ T29] kauditd_printk_skb: 919 callbacks suppressed [ 264.436967][ T29] audit: type=1400 audit(1738190221.702:32630): avc: denied { read write } for pid=17624 comm="syz.3.4899" name="rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 264.466683][ T29] audit: type=1400 audit(1738190221.702:32631): avc: denied { open } for pid=17624 comm="syz.3.4899" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 264.497951][T11263] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.499510][ T29] audit: type=1400 audit(1738190221.762:32632): avc: denied { read } for pid=17624 comm="syz.3.4899" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 264.552993][T17647] loop4: detected capacity change from 0 to 164 [ 264.562635][ T29] audit: type=1400 audit(1738190221.822:32633): avc: denied { execute } for pid=17646 comm="syz.4.4907" dev="tmpfs" ino=504 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 264.563963][T17647] syz.4.4907: attempt to access beyond end of device [ 264.563963][T17647] loop4: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 264.586022][ T29] audit: type=1400 audit(1738190221.822:32634): avc: denied { execute_no_trans } for pid=17646 comm="syz.4.4907" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=504 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 264.628575][T17647] syz.4.4907: attempt to access beyond end of device [ 264.628575][T17647] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 264.802122][ T29] audit: type=1326 audit(1738190222.062:32635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17650 comm="syz.4.4908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a2312cda9 code=0x7ffc0000 [ 264.825784][ T29] audit: type=1326 audit(1738190222.062:32636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17650 comm="syz.4.4908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a2312cda9 code=0x7ffc0000 [ 264.852741][T17651] loop4: detected capacity change from 0 to 764 [ 264.860761][ T29] audit: type=1326 audit(1738190222.112:32637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17650 comm="syz.4.4908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f5a2312cda9 code=0x7ffc0000 [ 264.884513][ T29] audit: type=1326 audit(1738190222.112:32638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17650 comm="syz.4.4908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f5a2312cde3 code=0x7ffc0000 [ 264.907933][ T29] audit: type=1326 audit(1738190222.112:32639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17650 comm="syz.4.4908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f5a2312b85f code=0x7ffc0000 [ 264.933793][T17651] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 265.053809][T17664] loop2: detected capacity change from 0 to 1024 [ 265.076171][T17664] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 265.091027][T17664] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.4913: bg 0: block 260: invalid block bitmap [ 265.115353][T12353] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.141746][T17669] serio: Serial port ttyS3 [ 265.199430][T17677] program syz.3.4918 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 265.209170][T17677] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 265.249605][T17682] program syz.2.4919 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 265.259600][T17681] loop3: detected capacity change from 0 to 764 [ 265.266747][T17682] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 265.277128][T17682] $H: renamed from bond0 (while UP) [ 265.283563][T17681] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 265.293449][T17682] $H: entered promiscuous mode [ 265.411066][T17695] bridge0: port 1(vlan0) entered blocking state [ 265.417542][T17695] bridge0: port 1(vlan0) entered disabled state [ 265.425309][T17695] vlan0: entered allmulticast mode [ 265.434495][T17695] vlan0: left allmulticast mode [ 265.590588][T17712] loop3: detected capacity change from 0 to 512 [ 265.598385][T17712] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 265.615200][T17712] EXT4-fs (loop3): 1 truncate cleaned up [ 265.621407][T17712] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 265.820015][T17719] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4935'. [ 266.409497][T17752] serio: Serial port ttyS3 [ 266.434200][T11512] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.533461][T17766] loop2: detected capacity change from 0 to 256 [ 266.550175][T17766] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 266.577291][T17766] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 266.585864][T17766] FAT-fs (loop2): Filesystem has been set read-only [ 266.685965][T17760] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4950'. [ 266.802528][T17778] loop3: detected capacity change from 0 to 512 [ 266.812024][T17778] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 266.826195][T17778] ext4 filesystem being mounted at /423/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 266.940494][T17782] loop6: detected capacity change from 0 to 512 [ 266.955116][T17782] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.4956: bg 0: block 248: padding at end of block bitmap is not set [ 266.969680][T17782] EXT4-fs error (device loop6): ext4_acquire_dquot:6927: comm syz.6.4956: Failed to acquire dquot type 1 [ 266.982044][T17782] EXT4-fs (loop6): 1 truncate cleaned up [ 266.988133][T17782] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 267.001448][T17782] ext4 filesystem being mounted at /319/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 267.046042][T12061] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 267.076030][T17788] program syz.6.4958 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 267.085417][T17788] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 267.161984][T17796] bridge_slave_0: left allmulticast mode [ 267.167642][T17796] bridge_slave_0: left promiscuous mode [ 267.173376][T17796] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.181880][T17796] bridge_slave_1: left allmulticast mode [ 267.187610][T17796] bridge_slave_1: left promiscuous mode [ 267.193323][T17796] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.202622][T17796] $H: (slave bond_slave_0): Releasing backup interface [ 267.210491][T17796] bond_slave_0: left promiscuous mode [ 267.217698][T17796] $H: (slave bond_slave_1): Releasing backup interface [ 267.225985][T17796] bond_slave_1: left promiscuous mode [ 267.234772][T17796] team0: Port device team_slave_0 removed [ 267.243425][T17796] team0: Port device team_slave_1 removed [ 267.250413][T17796] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 267.257861][T17796] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 267.266973][T17796] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 267.274438][T17796] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 267.300900][T17797] team0: Mode changed to "loadbalance" [ 267.340716][T17804] loop4: detected capacity change from 0 to 164 [ 267.351187][T17804] Unable to read rock-ridge attributes [ 267.383738][T17808] loop6: detected capacity change from 0 to 164 [ 267.397682][T17808] syz.6.4967: attempt to access beyond end of device [ 267.397682][T17808] loop6: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 267.415287][T17810] program syz.0.4969 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 267.425079][T17810] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 267.428976][T17812] bridge0: port 1(vlan0) entered blocking state [ 267.434078][T17808] syz.6.4967: attempt to access beyond end of device [ 267.434078][T17808] loop6: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 267.439690][T17812] bridge0: port 1(vlan0) entered disabled state [ 267.473912][T17812] vlan0: entered allmulticast mode [ 267.480146][T17812] vlan0: left allmulticast mode [ 267.488334][T17818] loop4: detected capacity change from 0 to 512 [ 267.546114][T17822] ip6tnl1: entered promiscuous mode [ 267.551962][T17818] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.4971: bg 0: block 248: padding at end of block bitmap is not set [ 267.613817][T17818] EXT4-fs error (device loop4): ext4_acquire_dquot:6927: comm syz.4.4971: Failed to acquire dquot type 1 [ 267.650267][T17818] EXT4-fs (loop4): 1 truncate cleaned up [ 267.661209][T17818] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 267.674015][T17818] ext4 filesystem being mounted at /427/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 267.686969][T11512] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 267.726901][T17835] FAULT_INJECTION: forcing a failure. [ 267.726901][T17835] name failslab, interval 1, probability 0, space 0, times 0 [ 267.726923][T17835] CPU: 0 UID: 0 PID: 17835 Comm: syz.3.4978 Not tainted 6.13.0-syzkaller-09383-gebbb8be421ee #0 [ 267.726981][T17835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 267.726993][T17835] Call Trace: [ 267.726998][T17835] [ 267.727003][T17835] dump_stack_lvl+0xf2/0x150 [ 267.727031][T17835] dump_stack+0x15/0x1a [ 267.727108][T17835] should_fail_ex+0x24a/0x260 [ 267.727142][T17835] should_failslab+0x8f/0xb0 [ 267.727169][T17835] kmem_cache_alloc_noprof+0x52/0x320 [ 267.727265][T17835] ? getname_flags+0x81/0x3b0 [ 267.727307][T17835] ? should_fail_ex+0xd7/0x260 [ 267.727339][T17835] getname_flags+0x81/0x3b0 [ 267.727369][T17835] user_path_at+0x26/0x120 [ 267.727413][T17835] __se_sys_mount+0x24b/0x2d0 [ 267.727490][T17835] __x64_sys_mount+0x67/0x80 [ 267.727522][T17835] x64_sys_call+0x2c84/0x2dc0 [ 267.727550][T17835] do_syscall_64+0xc9/0x1c0 [ 267.727616][T17835] ? clear_bhb_loop+0x55/0xb0 [ 267.727639][T17835] ? clear_bhb_loop+0x55/0xb0 [ 267.727661][T17835] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.727748][T17835] RIP: 0033:0x7f671357cda9 [ 267.727763][T17835] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 267.727782][T17835] RSP: 002b:00007f6711be7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 267.727866][T17835] RAX: ffffffffffffffda RBX: 00007f6713795fa0 RCX: 00007f671357cda9 [ 267.727878][T17835] RDX: 0000000020000100 RSI: 00000000200001c0 RDI: 0000000000000000 [ 267.727891][T17835] RBP: 00007f6711be7090 R08: 0000000000000000 R09: 0000000000000000 [ 267.727903][T17835] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 267.727914][T17835] R13: 0000000000000000 R14: 00007f6713795fa0 R15: 00007ffd17c87808 [ 267.727929][T17835] [ 267.749087][T17841] loop3: detected capacity change from 0 to 164 [ 267.776293][T17826] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4974'. [ 267.782090][T17841] syz.3.4980: attempt to access beyond end of device [ 267.782090][T17841] loop3: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 267.837604][T17844] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 267.846046][T17841] syz.3.4980: attempt to access beyond end of device [ 267.846046][T17841] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 268.008857][T11263] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.092650][T17860] loop3: detected capacity change from 0 to 1024 [ 268.108680][T17864] loop4: detected capacity change from 0 to 1024 [ 268.115801][T17860] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 268.130057][T17860] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.4988: bg 0: block 260: invalid block bitmap [ 268.154255][T11512] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.165861][T17864] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 268.181355][T17864] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.4986: bg 0: block 260: invalid block bitmap [ 268.595892][T11263] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 269.033062][T17882] loop2: detected capacity change from 0 to 1764 [ 269.064458][T17882] isofs_fill_super: get root inode failed [ 269.196509][T17872] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4992'. [ 269.327816][T17898] program syz.6.5000 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 269.337471][T17898] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 269.368187][T17902] loop6: detected capacity change from 0 to 1024 [ 270.359666][T17902] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 270.380099][ T29] kauditd_printk_skb: 681 callbacks suppressed [ 270.386368][ T29] audit: type=1400 audit(1738190227.642:33315): avc: denied { create } for pid=17913 comm="syz.2.5003" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 270.791358][T17902] ext4 filesystem being mounted at /333/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 270.933631][ T29] audit: type=1400 audit(1738190228.072:33316): avc: denied { name_bind } for pid=17913 comm="syz.2.5003" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 270.955494][ T29] audit: type=1400 audit(1738190228.102:33317): avc: denied { create } for pid=17901 comm="syz.6.5001" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 270.975841][ T29] audit: type=1400 audit(1738190228.102:33318): avc: denied { read open } for pid=17901 comm="syz.6.5001" path="/333/file1/bus" dev="loop6" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 270.999031][ T29] audit: type=1400 audit(1738190228.102:33319): avc: denied { write } for pid=17901 comm="syz.6.5001" name="bus" dev="loop6" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 271.105572][ T29] audit: type=1400 audit(1738190228.352:33320): avc: denied { create } for pid=17901 comm="syz.6.5001" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 271.127019][ T29] audit: type=1400 audit(1738190228.352:33321): avc: denied { map } for pid=17901 comm="syz.6.5001" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=52083 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 271.151381][ T29] audit: type=1400 audit(1738190228.352:33322): avc: denied { read write } for pid=17901 comm="syz.6.5001" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=52083 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 271.188799][T17920] vlan0: entered promiscuous mode [ 271.193910][ T29] audit: type=1400 audit(1738190228.442:33323): avc: denied { read write } for pid=17901 comm="syz.6.5001" name="file1" dev="loop6" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 271.216764][ T29] audit: type=1400 audit(1738190228.442:33324): avc: denied { open } for pid=17901 comm="syz.6.5001" path="/333/file1/file1" dev="loop6" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 271.237011][T17922] netlink: 592 bytes leftover after parsing attributes in process `syz.0.5005'. [ 271.248996][T17922] netlink: 3 bytes leftover after parsing attributes in process `syz.0.5005'. [ 271.257959][T17922] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5005'. [ 271.319534][T12061] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 271.446306][T17932] loop6: detected capacity change from 0 to 512 [ 271.478861][T17932] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 271.497230][T17932] ext4 filesystem being mounted at /334/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 271.530224][T17939] program syz.3.5011 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 271.580285][T17939] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 271.643458][T17942] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5012'. [ 271.686269][T17946] loop4: detected capacity change from 0 to 164 [ 271.706446][T17946] syz.4.5014: attempt to access beyond end of device [ 271.706446][T17946] loop4: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 271.720608][T17946] syz.4.5014: attempt to access beyond end of device [ 271.720608][T17946] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 271.845253][T17944] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5013'. [ 271.887502][T17954] loop4: detected capacity change from 0 to 164 [ 271.895901][T17954] Unable to read rock-ridge attributes [ 271.943981][T17958] serio: Serial port ttyS3 [ 272.021478][T17965] loop3: detected capacity change from 0 to 164 [ 272.099584][T17948] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5015'. [ 272.160710][T17971] team0: Unable to change to the same mode the team is in [ 272.181384][T17974] loop3: detected capacity change from 0 to 512 [ 272.193072][T17974] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 272.210142][T17974] EXT4-fs (loop3): 1 truncate cleaned up [ 272.217377][T17974] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 272.242259][T17977] loop2: detected capacity change from 0 to 764 [ 272.263245][T12061] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 272.276639][T17977] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 272.322059][T17983] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5026'. [ 272.570421][T17985] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5028'. [ 272.675971][T18015] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5040'. [ 272.689790][T18016] loop2: detected capacity change from 0 to 512 [ 272.698659][T18016] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 272.712553][T18016] ext4 filesystem being mounted at /414/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 272.752621][T18023] serio: Serial port ttyS3 [ 272.836041][T18030] bridge0: port 3(vlan0) entered blocking state [ 272.842367][T18030] bridge0: port 3(vlan0) entered disabled state [ 272.848945][T18030] vlan0: entered allmulticast mode [ 272.854626][T18030] vlan0: left allmulticast mode [ 272.997043][T11512] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 273.027666][T18051] serio: Serial port ttyS3 [ 273.138015][T18062] program syz.3.5059 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 273.147949][T18062] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 273.181421][T18065] bridge0: port 1(vlan0) entered blocking state [ 273.187767][T18065] bridge0: port 1(vlan0) entered disabled state [ 273.195678][T18065] vlan0: entered allmulticast mode [ 273.201403][T18065] vlan0: left allmulticast mode [ 273.225542][T18070] loop3: detected capacity change from 0 to 764 [ 273.233188][T18070] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 273.245227][T18070] syzkaller0: entered allmulticast mode [ 273.251600][T18070] syzkaller0: left allmulticast mode [ 273.296510][T18080] loop6: detected capacity change from 0 to 164 [ 273.305923][T18079] serio: Serial port ttyS3 [ 273.335975][T18074] loop3: detected capacity change from 0 to 512 [ 273.342762][T18074] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 273.494099][T12353] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 273.650792][T18101] bridge0: port 1(vlan0) entered blocking state [ 273.657253][T18101] bridge0: port 1(vlan0) entered disabled state [ 273.673837][T18101] vlan0: entered allmulticast mode [ 273.679489][T18101] vlan0: left allmulticast mode [ 273.687844][T18099] team0: Unable to change to the same mode the team is in [ 273.773350][T18109] serio: Serial port ttyS3 [ 273.842190][T18114] loop6: detected capacity change from 0 to 164 [ 273.952625][T18126] loop3: detected capacity change from 0 to 512 [ 273.988589][T18127] loop6: detected capacity change from 0 to 512 [ 273.995533][T18127] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 274.019084][T18126] loop3: detected capacity change from 0 to 1024 [ 274.034954][T18127] EXT4-fs (loop6): 1 truncate cleaned up [ 274.043258][T18127] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 274.064505][T18126] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 274.092102][T18126] EXT4-fs error (device loop3): ext4_lookup:1813: comm syz.3.5086: inode #12: comm syz.3.5086: iget: illegal inode # [ 274.142492][T11512] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 274.205647][T18139] loop3: detected capacity change from 0 to 512 [ 274.219265][T18141] serio: Serial port ttyS3 [ 274.235675][T18139] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.5088: bg 0: block 248: padding at end of block bitmap is not set [ 274.250227][T18139] EXT4-fs error (device loop3): ext4_acquire_dquot:6927: comm syz.3.5088: Failed to acquire dquot type 1 [ 274.262790][T18139] EXT4-fs (loop3): 1 truncate cleaned up [ 274.269321][T18139] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 274.282264][T18139] ext4 filesystem being mounted at /446/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 274.372465][T11512] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 274.400438][T18155] loop4: detected capacity change from 0 to 512 [ 274.401080][T18157] __nla_validate_parse: 8 callbacks suppressed [ 274.401097][T18157] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5094'. [ 274.425065][T18155] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.5096: bg 0: block 248: padding at end of block bitmap is not set [ 274.440743][T18155] EXT4-fs error (device loop4): ext4_acquire_dquot:6927: comm syz.4.5096: Failed to acquire dquot type 1 [ 274.465303][T18155] EXT4-fs (loop4): 1 truncate cleaned up [ 274.472242][T18155] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 274.849157][T18155] ext4 filesystem being mounted at /450/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 274.980641][T12061] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 275.147372][T18168] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5097'. [ 275.185519][T18174] loop2: detected capacity change from 0 to 1024 [ 275.216551][T18174] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.5102: bg 0: block 260: invalid block bitmap [ 275.471272][T18186] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5099'. [ 275.499135][T18194] program syz.0.5110 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 275.508930][T18194] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 275.645164][T18206] bridge0: port 1(vlan0) entered blocking state [ 275.651466][T18206] bridge0: port 1(vlan0) entered disabled state [ 275.661341][T18206] vlan0: entered allmulticast mode [ 275.667437][T18206] vlan0: left allmulticast mode [ 275.675546][T18192] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5109'. [ 275.685333][ T29] kauditd_printk_skb: 607 callbacks suppressed [ 275.685363][ T29] audit: type=1326 audit(1738190232.952:33928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18196 comm="syz.2.5111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d7811cda9 code=0x7fc00000 [ 275.813807][T18218] loop3: detected capacity change from 0 to 1764 [ 275.821396][T18218] isofs_fill_super: get root inode failed [ 275.834947][ T29] audit: type=1400 audit(1738190233.102:33929): avc: denied { watch watch_reads } for pid=18189 comm="syz.4.5101" path="/451/file0" dev="tmpfs" ino=2405 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 275.950510][ T29] audit: type=1400 audit(1738190233.212:33930): avc: denied { create } for pid=18224 comm="syz.4.5121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 275.970525][ T29] audit: type=1400 audit(1738190233.212:33931): avc: denied { bind } for pid=18224 comm="syz.4.5121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 275.990079][ T29] audit: type=1400 audit(1738190233.212:33932): avc: denied { write } for pid=18224 comm="syz.4.5121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 276.009692][ T29] audit: type=1400 audit(1738190233.222:33933): avc: denied { read } for pid=18224 comm="syz.4.5121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 276.037854][T18221] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5119'. [ 276.096505][T18231] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5122'. [ 276.138696][T18235] bridge0: port 3(vlan0) entered blocking state [ 276.145201][T18235] bridge0: port 3(vlan0) entered disabled state [ 276.151762][T18235] vlan0: entered allmulticast mode [ 276.157459][T18235] vlan0: left allmulticast mode [ 276.220713][T18237] loop3: detected capacity change from 0 to 764 [ 276.227873][T18237] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 276.353601][ T29] audit: type=1326 audit(1738190233.612:33934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18196 comm="syz.2.5111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2d7811cda9 code=0x7fc00000 [ 276.377173][ T29] audit: type=1326 audit(1738190233.612:33935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18196 comm="syz.2.5111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d7811cda9 code=0x7fc00000 [ 276.400824][ T29] audit: type=1326 audit(1738190233.612:33936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18196 comm="syz.2.5111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d7811cda9 code=0x7fc00000 [ 276.424550][ T29] audit: type=1326 audit(1738190233.612:33937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18196 comm="syz.2.5111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d7811cda9 code=0x7fc00000 [ 276.448281][T18244] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5128'. [ 276.618067][T18257] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5133'. [ 276.709247][T18255] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5132'. [ 276.742050][T18266] loop3: detected capacity change from 0 to 1764 [ 276.750588][T18266] isofs_fill_super: get root inode failed [ 276.786618][T18268] loop3: detected capacity change from 0 to 256 [ 276.793983][T18268] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 276.807319][T18268] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 276.815996][T18268] FAT-fs (loop3): Filesystem has been set read-only [ 276.825799][T18272] serio: Serial port ttyS3 [ 276.901108][T18282] serio: Serial port ttyS3 [ 276.906983][T18281] bridge0: port 3(vlan0) entered blocking state [ 276.913270][T18281] bridge0: port 3(vlan0) entered disabled state [ 276.921124][T18281] vlan0: entered allmulticast mode [ 276.926926][T18281] vlan0: left allmulticast mode [ 277.009784][T18290] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5144'. [ 277.039291][T18292] loop4: detected capacity change from 0 to 764 [ 277.046355][T18292] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 277.075886][T18295] program syz.4.5146 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 277.085459][T18295] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 277.260373][T18300] loop2: detected capacity change from 0 to 164 [ 277.327116][T18302] loop4: detected capacity change from 0 to 512 [ 277.357694][T18302] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.5149: bg 0: block 248: padding at end of block bitmap is not set [ 277.394011][T18302] EXT4-fs error (device loop4): ext4_acquire_dquot:6927: comm syz.4.5149: Failed to acquire dquot type 1 [ 277.406933][T18302] EXT4-fs (loop4): 1 truncate cleaned up [ 277.413005][T18302] ext4 filesystem being mounted at /460/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 277.573500][T18320] loop2: detected capacity change from 0 to 164 [ 277.580638][T18320] Unable to read rock-ridge attributes [ 277.603277][T18316] team0: Unable to change to the same mode the team is in [ 277.745465][T18339] loop3: detected capacity change from 0 to 512 [ 277.752136][T18339] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 277.763802][T18339] EXT4-fs (loop3): 1 truncate cleaned up [ 278.505332][T18364] loop6: detected capacity change from 0 to 164 [ 278.517549][T18364] syz.6.5173: attempt to access beyond end of device [ 278.517549][T18364] loop6: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 278.531931][T18364] syz.6.5173: attempt to access beyond end of device [ 278.531931][T18364] loop6: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 278.553284][T18366] loop4: detected capacity change from 0 to 1024 [ 278.596436][T18366] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.5174: bg 0: block 260: invalid block bitmap [ 278.611256][T18370] serio: Serial port ttyS3 [ 278.642739][T18375] program syz.3.5177 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 278.652446][T18375] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 278.721962][T18386] loop6: detected capacity change from 0 to 164 [ 278.740122][T18386] syz.6.5182: attempt to access beyond end of device [ 278.740122][T18386] loop6: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 278.754695][T18386] syz.6.5182: attempt to access beyond end of device [ 278.754695][T18386] loop6: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 278.774899][T18388] bridge0: port 1(vlan0) entered blocking state [ 278.781179][T18388] bridge0: port 1(vlan0) entered disabled state [ 278.788047][T18388] vlan0: entered allmulticast mode [ 278.794836][T18388] vlan0: left allmulticast mode [ 278.830619][T18394] bridge0: port 1(vlan0) entered blocking state [ 278.836950][T18394] bridge0: port 1(vlan0) entered disabled state [ 278.845092][T18394] vlan0: entered allmulticast mode [ 278.851434][T18394] vlan0: left allmulticast mode [ 278.872921][T18397] serio: Serial port ttyS3 [ 278.912906][T18402] loop2: detected capacity change from 0 to 164 [ 278.922001][T18402] syz.2.5188: attempt to access beyond end of device [ 278.922001][T18402] loop2: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 278.936028][T18402] syz.2.5188: attempt to access beyond end of device [ 278.936028][T18402] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 279.002372][T18407] loop3: detected capacity change from 0 to 1024 [ 279.065479][T18409] program syz.4.5191 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 279.075625][T18409] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 279.096718][T18407] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.5190: bg 0: block 260: invalid block bitmap [ 279.130347][T18420] loop4: detected capacity change from 0 to 164 [ 279.138821][T18418] serio: Serial port ttyS3 [ 279.148725][T18420] syz.4.5196: attempt to access beyond end of device [ 279.148725][T18420] loop4: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 279.166168][T18420] syz.4.5196: attempt to access beyond end of device [ 279.166168][T18420] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 279.224608][T18428] bridge0: port 3(vlan0) entered blocking state [ 279.230916][T18428] bridge0: port 3(vlan0) entered disabled state [ 279.269984][T18432] loop3: detected capacity change from 0 to 764 [ 279.277579][T18428] vlan0: entered allmulticast mode [ 279.283116][T18428] vlan0: left allmulticast mode [ 279.290899][T18432] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 279.306487][T18432] syzkaller0: entered allmulticast mode [ 279.312736][T18432] syzkaller0: left allmulticast mode [ 279.427218][T18446] loop4: detected capacity change from 0 to 1024 [ 279.456914][T18446] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.5206: bg 0: block 260: invalid block bitmap [ 279.513102][T18453] loop4: detected capacity change from 0 to 1764 [ 279.521719][T18453] isofs_fill_super: get root inode failed [ 279.549665][T18455] serio: Serial port ttyS3 [ 279.776560][T18462] __nla_validate_parse: 7 callbacks suppressed [ 279.776570][T18462] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5212'. [ 279.841924][T18469] bridge0: port 1(vlan0) entered blocking state [ 279.848223][T18469] bridge0: port 1(vlan0) entered disabled state [ 279.854798][T18469] vlan0: entered allmulticast mode [ 279.860476][T18469] vlan0: left allmulticast mode [ 279.964555][T18477] bridge0: port 1(vlan0) entered blocking state [ 279.971016][T18477] bridge0: port 1(vlan0) entered disabled state [ 279.978278][T18477] vlan0: entered allmulticast mode [ 279.984125][T18477] vlan0: left allmulticast mode [ 280.005224][T18483] loop2: detected capacity change from 0 to 164 [ 280.012424][T18483] Unable to read rock-ridge attributes [ 280.173323][T18489] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5223'. [ 280.339550][T18504] program syz.2.5228 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 280.359146][T18504] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 280.415487][T18511] loop2: detected capacity change from 0 to 164 [ 280.428603][T18511] syz.2.5231: attempt to access beyond end of device [ 280.428603][T18511] loop2: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 280.443481][T18511] syz.2.5231: attempt to access beyond end of device [ 280.443481][T18511] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 280.481316][T18514] loop2: detected capacity change from 0 to 164 [ 280.532553][T18516] bridge0: port 3(vlan0) entered blocking state [ 280.538880][T18516] bridge0: port 3(vlan0) entered disabled state [ 280.552775][T18518] loop2: detected capacity change from 0 to 1024 [ 280.560755][T18516] vlan0: entered allmulticast mode [ 280.569275][T18516] vlan0: left allmulticast mode [ 280.597307][T18518] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.5234: bg 0: block 260: invalid block bitmap [ 280.733536][ T29] kauditd_printk_skb: 467 callbacks suppressed [ 280.733552][ T29] audit: type=1400 audit(1738190237.912:34403): avc: denied { execmem } for pid=18522 comm="syz.4.5236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 280.921250][T18528] serio: Serial port ttyS3 [ 280.992139][ T29] audit: type=1400 audit(1738190238.252:34404): avc: denied { write } for pid=18532 comm="syz.6.5238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 281.015596][ T29] audit: type=1400 audit(1738190238.282:34405): avc: denied { cpu } for pid=18532 comm="syz.6.5238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 281.035013][ T29] audit: type=1400 audit(1738190238.282:34406): avc: denied { write } for pid=18532 comm="syz.6.5238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 281.035319][T18533] loop6: detected capacity change from 0 to 1764 [ 281.056075][ T29] audit: type=1326 audit(1738190238.282:34407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18532 comm="kmem_cache_free" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07af4bcda9 code=0x7ffc0000 [ 281.084905][ T29] audit: type=1326 audit(1738190238.282:34408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18532 comm="kmem_cache_free" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07af4bcda9 code=0x7ffc0000 [ 281.108956][ T29] audit: type=1326 audit(1738190238.282:34409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18532 comm="kmem_cache_free" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f07af4bcda9 code=0x7ffc0000 [ 281.133059][ T29] audit: type=1326 audit(1738190238.282:34410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18532 comm="kmem_cache_free" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07af4bcda9 code=0x7ffc0000 [ 281.157190][ T29] audit: type=1326 audit(1738190238.282:34411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18532 comm="kmem_cache_free" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f07af4bcda9 code=0x7ffc0000 [ 281.181253][ T29] audit: type=1326 audit(1738190238.282:34412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18532 comm="kmem_cache_free" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07af4bcda9 code=0x7ffc0000 [ 281.271569][T18542] program syz.0.5241 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 281.273742][T18539] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5240'. [ 281.290028][T18542] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 281.294570][T18547] loop6: detected capacity change from 0 to 764 [ 281.317198][T18547] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 281.332892][T18549] loop3: detected capacity change from 0 to 764 [ 281.354814][T18549] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 281.403216][T18559] loop6: detected capacity change from 0 to 764 [ 281.413124][T18559] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 281.415684][T18561] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5250'. [ 281.477222][T18569] bridge0: port 3(vlan0) entered blocking state [ 281.483513][T18569] bridge0: port 3(vlan0) entered disabled state [ 281.490236][T18569] vlan0: entered allmulticast mode [ 281.504159][T18569] vlan0: left allmulticast mode [ 281.538410][T18571] loop6: detected capacity change from 0 to 764 [ 281.547618][T18571] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 281.558761][T18563] loop2: detected capacity change from 0 to 512 [ 281.583083][T18577] serio: Serial port ttyS3 [ 281.657674][T18583] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5257'. [ 281.687753][T18585] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5256'. [ 281.738324][T18589] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 281.776734][T18589] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 281.809258][T18589] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5258'. [ 281.840985][T18595] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5261'. [ 281.910524][T18600] batadv1: entered promiscuous mode [ 281.916719][T18600] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 281.960730][T18601] vhci_hcd: invalid port number 255 [ 281.965976][T18601] vhci_hcd: default hub control req: 8031 v0005 i00ff l0 [ 282.046885][T18605] loop4: detected capacity change from 0 to 764 [ 282.053876][T18605] iso9660: Unknown parameter 'keyring' [ 282.089102][T18609] serio: Serial port ttyS3 [ 282.179165][T18613] bridge_slave_0: left allmulticast mode [ 282.184859][T18613] bridge_slave_0: left promiscuous mode [ 282.190534][T18613] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.206208][T18613] bridge_slave_1: left allmulticast mode [ 282.211867][T18613] bridge_slave_1: left promiscuous mode [ 282.212875][T18615] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5268'. [ 282.217580][T18613] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.237857][T18613] $H: (slave bond_slave_0): Releasing backup interface [ 282.246862][T18613] bond_slave_0: left promiscuous mode [ 282.253990][T18613] $H: (slave bond_slave_1): Releasing backup interface [ 282.261631][T18613] bond_slave_1: left promiscuous mode [ 282.270111][T18613] team0: Port device team_slave_0 removed [ 282.278442][T18613] team0: Port device team_slave_1 removed [ 282.285152][T18613] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 282.292579][T18613] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 282.301273][T18613] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 282.308700][T18613] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 282.327986][T18618] team0: Mode changed to "loadbalance" [ 282.373068][T18629] serio: Serial port ttyS3 [ 282.382075][T18631] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5274'. [ 283.513826][T18682] loop2: detected capacity change from 0 to 512 [ 283.557006][T18682] ext4 filesystem being mounted at /459/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 283.599060][T18682] Process accounting resumed [ 283.718737][T18682] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 283.812991][T18715] loop4: detected capacity change from 0 to 512 [ 283.822364][T18715] ext4 filesystem being mounted at /491/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 283.863394][T18718] loop3: detected capacity change from 0 to 512 [ 283.871582][T18718] ext4 filesystem being mounted at /500/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 284.639296][T18731] serio: Serial port ttyS3 [ 284.714418][T18742] loop4: detected capacity change from 0 to 164 [ 284.747985][T18743] loop2: detected capacity change from 0 to 512 [ 284.765045][T18743] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 284.776810][T18744] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.783885][T18744] bridge0: port 2(bridge_slave_1) entered forwarding state [ 284.791265][T18744] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.798422][T18744] bridge0: port 1(bridge_slave_0) entered forwarding state [ 284.809254][T18744] bridge0: left allmulticast mode [ 284.810324][T18743] EXT4-fs (loop2): 1 truncate cleaned up [ 284.838755][T18744] $H: left promiscuous mode [ 284.843761][T18744] bond_slave_0: left promiscuous mode [ 284.849203][T18744] bond_slave_1: left promiscuous mode [ 284.849314][T18750] loop4: detected capacity change from 0 to 512 [ 284.854621][T18744] dummy0: left promiscuous mode [ 284.866012][T18750] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.5318: bg 0: block 248: padding at end of block bitmap is not set [ 284.866775][T18744] 8021q: adding VLAN 0 to HW filter on device $H [ 284.881172][T18750] EXT4-fs error (device loop4): ext4_acquire_dquot:6927: comm syz.4.5318: Failed to acquire dquot type 1 [ 284.898529][T18744] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 284.900004][T18750] EXT4-fs (loop4): 1 truncate cleaned up [ 284.919980][T18750] ext4 filesystem being mounted at /495/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 284.926836][T18746] bridge0: port 1(vlan0) entered blocking state [ 284.936786][T18746] bridge0: port 1(vlan0) entered disabled state [ 284.944509][T18746] vlan0: entered allmulticast mode [ 284.951347][T18746] vlan0: left allmulticast mode [ 285.010195][T18756] loop6: detected capacity change from 0 to 512 [ 285.026457][T18756] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.5320: bg 0: block 248: padding at end of block bitmap is not set [ 285.041169][T18756] EXT4-fs error (device loop6): ext4_acquire_dquot:6927: comm syz.6.5320: Failed to acquire dquot type 1 [ 285.052953][T18756] EXT4-fs (loop6): 1 truncate cleaned up [ 285.059019][T18756] ext4 filesystem being mounted at /376/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 285.096052][T12061] EXT4-fs unmount: 27 callbacks suppressed [ 285.096062][T12061] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.138386][T18763] __nla_validate_parse: 8 callbacks suppressed [ 285.138399][T18763] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5322'. [ 285.185052][T18767] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5324'. [ 285.256262][T18773] loop6: detected capacity change from 0 to 764 [ 285.266054][T18773] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 285.345615][T18783] loop6: detected capacity change from 0 to 512 [ 285.356482][T18783] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.5332: bg 0: block 248: padding at end of block bitmap is not set [ 285.371233][T18783] EXT4-fs error (device loop6): ext4_acquire_dquot:6927: comm syz.6.5332: Failed to acquire dquot type 1 [ 285.383562][T18783] EXT4-fs (loop6): 1 truncate cleaned up [ 285.390687][T18783] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 285.403511][T18783] ext4 filesystem being mounted at /386/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 285.445990][T12061] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.468141][T18788] loop6: detected capacity change from 0 to 1024 [ 285.484868][T18788] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 285.508240][T12061] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.550308][T12353] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.596181][T18798] $H: entered promiscuous mode [ 285.601249][T18798] bond_slave_0: entered promiscuous mode [ 285.606949][T18798] bond_slave_1: entered promiscuous mode [ 285.612708][T18798] dummy0: entered promiscuous mode [ 285.623345][T18796] bridge0: port 1(vlan0) entered blocking state [ 285.629769][T18796] bridge0: port 1(vlan0) entered disabled state [ 285.643691][T18796] vlan0: entered allmulticast mode [ 285.649645][T18796] vlan0: left allmulticast mode [ 285.736004][ T29] kauditd_printk_skb: 972 callbacks suppressed [ 285.736015][ T29] audit: type=1400 audit(1738190242.992:35379): avc: denied { shutdown } for pid=18802 comm="syz.3.5339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 285.762113][ T29] audit: type=1400 audit(1738190242.992:35380): avc: denied { getopt } for pid=18802 comm="syz.3.5339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 285.781874][ T29] audit: type=1400 audit(1738190242.992:35381): avc: denied { connect } for pid=18802 comm="syz.3.5339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 285.801728][ T29] audit: type=1400 audit(1738190242.992:35382): avc: denied { name_connect } for pid=18802 comm="syz.3.5339" dest=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 285.824125][ T29] audit: type=1400 audit(1738190243.002:35383): avc: denied { setopt } for pid=18802 comm="syz.3.5339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 285.853834][ T29] audit: type=1400 audit(1738190243.022:35384): avc: denied { read } for pid=2980 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 285.876018][ T29] audit: type=1400 audit(1738190243.022:35385): avc: denied { search } for pid=2980 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 285.897706][ T29] audit: type=1400 audit(1738190243.022:35386): avc: denied { open } for pid=2980 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=11 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 285.920409][ T29] audit: type=1400 audit(1738190243.022:35387): avc: denied { getattr } for pid=2980 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=11 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 285.946057][ T29] audit: type=1400 audit(1738190243.122:35388): avc: denied { read } for pid=18807 comm="syz.2.5341" name="mISDNtimer" dev="devtmpfs" ino=249 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 285.970178][T18813] team0: Unable to change to the same mode the team is in [ 286.028132][T18818] syzkaller0: entered allmulticast mode [ 286.034270][T18818] syzkaller0: left allmulticast mode [ 286.602282][T18849] syzkaller0: entered allmulticast mode [ 286.609614][T18849] syzkaller0: left allmulticast mode [ 286.610624][T18844] tmpfs: Bad value for 'defcontext' [ 286.862969][T18858] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5360'. [ 286.944294][T18866] loop4: detected capacity change from 0 to 164 [ 286.952525][T18866] Unable to read rock-ridge attributes [ 287.128133][T18873] team0: Unable to change to the same mode the team is in [ 287.760112][T18890] loop4: detected capacity change from 0 to 164 [ 287.907358][T18897] bridge0: port 3(vlan0) entered blocking state [ 287.913888][T18897] bridge0: port 3(vlan0) entered disabled state [ 287.965782][T18897] vlan0: entered allmulticast mode [ 287.991601][T18897] vlan0: left allmulticast mode [ 288.100130][T18907] loop3: detected capacity change from 0 to 512 [ 288.168861][T18893] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5372'. [ 288.181598][T18907] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 288.190496][T18919] loop6: detected capacity change from 0 to 256 [ 288.195548][T18907] ext4 filesystem being mounted at /514/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 288.213876][T18919] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 288.226806][T18907] Process accounting resumed [ 288.235366][T18907] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 288.236620][T18919] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 288.254314][T18919] FAT-fs (loop6): Filesystem has been set read-only [ 288.277963][T11512] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.410907][T18927] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5381'. [ 288.473802][T18938] loop3: detected capacity change from 0 to 1024 [ 288.496418][T18938] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 288.521976][T11512] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.552827][T18948] bridge0: port 1(vlan0) entered blocking state [ 288.559180][T18948] bridge0: port 1(vlan0) entered disabled state [ 288.565659][T18948] vlan0: entered allmulticast mode [ 288.575046][T18948] vlan0: left allmulticast mode [ 288.601557][T18950] loop3: detected capacity change from 0 to 164 [ 288.611361][T18950] bio_check_eod: 2 callbacks suppressed [ 288.611373][T18950] syz.3.5387: attempt to access beyond end of device [ 288.611373][T18950] loop3: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 288.632460][T18950] syz.3.5387: attempt to access beyond end of device [ 288.632460][T18950] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 288.712337][T18954] serio: Serial port ttyS3 [ 288.827443][T18968] bridge0: port 1(vlan0) entered blocking state [ 288.833845][T18968] bridge0: port 1(vlan0) entered disabled state [ 288.850170][T18968] vlan0: entered allmulticast mode [ 288.913752][T18968] vlan0: left allmulticast mode [ 288.941562][T18967] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5395'. [ 288.963455][T18975] loop3: detected capacity change from 0 to 1024 [ 288.986636][T18977] loop2: detected capacity change from 0 to 764 [ 289.007925][T18977] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 289.045879][T18975] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 289.059769][T18982] loop2: detected capacity change from 0 to 1764 [ 289.078929][T11512] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 289.095745][T18982] isofs_fill_super: get root inode failed [ 289.105236][T18987] serio: Serial port ttyS3 [ 289.135613][T18993] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5405'. [ 289.210209][T19002] program syz.4.5408 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 289.219673][T19002] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 289.244234][T19005] loop4: detected capacity change from 0 to 164 [ 289.929393][T19012] loop6: detected capacity change from 0 to 164 [ 289.974053][T19012] Unable to read rock-ridge attributes [ 290.049146][T19020] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5416'. [ 290.252758][T19025] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5418'. [ 290.343083][T19041] loop2: detected capacity change from 0 to 1024 [ 290.351130][T19041] EXT4-fs: Ignoring removed orlov option [ 290.359119][T19041] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 290.387121][T12353] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 290.423540][T19049] loop2: detected capacity change from 0 to 256 [ 290.430824][T19049] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 290.445142][T19049] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 290.453761][T19049] FAT-fs (loop2): Filesystem has been set read-only [ 290.589825][T19057] loop4: detected capacity change from 0 to 512 [ 290.616903][T19057] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 290.630554][T19057] ext4 filesystem being mounted at /514/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 290.642760][T19057] Process accounting resumed [ 290.651535][T19057] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 290.671431][T11263] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 290.723263][T19061] loop4: detected capacity change from 0 to 764 [ 290.732442][T19061] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 290.762702][T19063] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5429'. [ 290.879014][ T29] kauditd_printk_skb: 471 callbacks suppressed [ 290.879029][ T29] audit: type=1400 audit(1738190248.142:35860): avc: denied { read } for pid=19067 comm="syz.6.5431" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 290.921010][T19065] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5430'. [ 290.995431][T19076] loop4: detected capacity change from 0 to 1764 [ 291.002604][T19076] isofs_fill_super: get root inode failed [ 291.027329][ T29] audit: type=1326 audit(1738190248.292:35861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19078 comm="syz.4.5435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a2312cda9 code=0x7ffc0000 [ 291.052759][ T29] audit: type=1326 audit(1738190248.292:35862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19078 comm="syz.4.5435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a2312cda9 code=0x7ffc0000 [ 291.076510][ T29] audit: type=1326 audit(1738190248.292:35863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19078 comm="syz.4.5435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5a2312cda9 code=0x7ffc0000 [ 291.076781][T19074] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5433'. [ 291.100063][ T29] audit: type=1326 audit(1738190248.292:35864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19078 comm="syz.4.5435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a2312cda9 code=0x7ffc0000 [ 291.100093][ T29] audit: type=1326 audit(1738190248.292:35865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19078 comm="syz.4.5435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5a2312cda9 code=0x7ffc0000 [ 291.156222][ T29] audit: type=1326 audit(1738190248.292:35866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19078 comm="syz.4.5435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a2312cda9 code=0x7ffc0000 [ 291.179800][ T29] audit: type=1326 audit(1738190248.292:35867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19078 comm="syz.4.5435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5a2312cda9 code=0x7ffc0000 [ 291.203513][ T29] audit: type=1326 audit(1738190248.292:35868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19078 comm="syz.4.5435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a2312cda9 code=0x7ffc0000 [ 291.227143][ T29] audit: type=1326 audit(1738190248.292:35869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19078 comm="syz.4.5435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a2312cda9 code=0x7ffc0000 [ 291.340677][T19094] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5440'. [ 291.455167][T19107] bridge0: port 1(vlan0) entered blocking state [ 291.461500][T19107] bridge0: port 1(vlan0) entered disabled state [ 291.467980][T19107] vlan0: entered allmulticast mode [ 291.503972][T19107] vlan0: left allmulticast mode [ 292.202037][T19114] bridge0: port 1(vlan0) entered blocking state [ 292.208452][T19114] bridge0: port 1(vlan0) entered disabled state [ 292.229098][T19114] vlan0: entered allmulticast mode [ 292.252365][T19114] vlan0: left allmulticast mode [ 292.315782][T19118] loop4: detected capacity change from 0 to 512 [ 292.324892][T19118] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 292.355167][T19118] EXT4-fs (loop4): 1 truncate cleaned up [ 292.361561][T19118] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 292.386853][T11263] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.478210][T19125] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5452'. [ 292.643545][T19136] loop2: detected capacity change from 0 to 1024 [ 292.650341][T19136] EXT4-fs: Ignoring removed orlov option [ 292.662804][T19136] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 292.689901][T12353] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.751217][T19145] serio: Serial port ttyS3 [ 292.835657][T19152] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5463'. [ 292.886632][T19156] program syz.4.5465 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 292.896867][T19156] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 292.962767][T19158] team0: Unable to change to the same mode the team is in [ 293.000489][T19164] loop3: detected capacity change from 0 to 1024 [ 293.007034][T19164] EXT4-fs: Ignoring removed orlov option [ 293.024847][T19164] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 293.049239][T11512] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 293.092933][T19171] loop4: detected capacity change from 0 to 164 [ 293.105360][T19173] bridge0: port 3(vlan0) entered blocking state [ 293.111748][T19173] bridge0: port 3(vlan0) entered disabled state [ 293.118463][T19173] vlan0: entered allmulticast mode [ 293.132333][T19173] vlan0: left allmulticast mode [ 293.139888][T19171] Unable to read rock-ridge attributes [ 293.174819][T19177] loop4: detected capacity change from 0 to 512 [ 293.198020][T19179] serio: Serial port ttyS3 [ 293.209393][T19177] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 293.222238][T19177] ext4 filesystem being mounted at /539/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 293.236009][T19177] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 293.256060][T19177] Process accounting resumed [ 293.266512][T11263] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 293.278338][T19185] loop3: detected capacity change from 0 to 164 [ 293.287171][T19185] Unable to read rock-ridge attributes [ 293.402362][T19190] $H: (slave dummy0): Releasing backup interface [ 293.409479][T19190] dummy0: left promiscuous mode [ 293.418913][T19190] bridge_slave_0: left allmulticast mode [ 293.424607][T19190] bridge_slave_0: left promiscuous mode [ 293.430270][T19190] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.439565][T19190] bridge_slave_1: left allmulticast mode [ 293.445352][T19190] bridge_slave_1: left promiscuous mode [ 293.450984][T19190] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.463446][T19190] $H: (slave bond_slave_0): Releasing backup interface [ 293.471493][T19190] bond_slave_0: left promiscuous mode [ 293.480183][T19190] $H: (slave bond_slave_1): Releasing backup interface [ 293.488155][T19190] bond_slave_1: left promiscuous mode [ 293.497452][T19190] team0: Port device team_slave_0 removed [ 293.524468][T19190] team0: Port device team_slave_1 removed [ 293.531287][T19190] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 293.538722][T19190] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 293.623326][T19190] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 293.631029][T19190] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 293.712191][T19199] loop2: detected capacity change from 0 to 512 [ 293.825533][T19199] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 293.852694][T19199] ext4 filesystem being mounted at /499/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 293.881744][T19199] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 293.915264][T19211] loop3: detected capacity change from 0 to 512 [ 293.942710][T19199] Process accounting resumed [ 293.955216][T19211] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 293.971344][T12353] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 293.981203][T19211] ext4 filesystem being mounted at /533/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 293.997149][T19211] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 294.041974][T19217] serio: Serial port ttyS3 [ 294.048442][T19211] Process accounting resumed [ 294.129378][T19220] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5490'. [ 294.187063][T19224] loop6: detected capacity change from 0 to 164 [ 294.195824][T19224] Unable to read rock-ridge attributes [ 294.241477][T19229] serio: Serial port ttyS3 [ 294.418716][T11512] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.455571][T19238] bridge0: port 1(vlan0) entered blocking state [ 294.461944][T19238] bridge0: port 1(vlan0) entered disabled state [ 294.502801][T19242] loop3: detected capacity change from 0 to 512 [ 294.511908][T19238] vlan0: entered allmulticast mode [ 294.518028][T19238] vlan0: left allmulticast mode [ 294.528897][T19240] bridge0: port 1(vlan0) entered blocking state [ 294.535327][T19240] bridge0: port 1(vlan0) entered disabled state [ 294.542023][T19240] vlan0: entered allmulticast mode [ 294.549672][T19240] vlan0: left allmulticast mode [ 294.568064][T19242] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 294.592609][T19242] ext4 filesystem being mounted at /534/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 294.619505][T19242] Process accounting resumed [ 294.627865][T19248] loop2: detected capacity change from 0 to 512 [ 294.645128][T19242] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 294.661450][T19248] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 294.693623][T11512] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.724533][T19252] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5502'. [ 294.735361][T19248] EXT4-fs (loop2): 1 truncate cleaned up [ 294.741290][T19257] loop6: detected capacity change from 0 to 1024 [ 294.751525][T19256] serio: Serial port ttyS3 [ 294.761532][T19248] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 294.792752][T19257] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 294.809010][T12353] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.874043][T19274] EXT4-fs (loop6): shut down requested (0) [ 294.885891][T19273] loop3: detected capacity change from 0 to 164 [ 294.891866][T19276] loop2: detected capacity change from 0 to 1024 [ 294.898975][T19276] EXT4-fs: Ignoring removed orlov option [ 294.907320][T19276] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 294.953660][T12353] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.971021][T19257] FAULT_INJECTION: forcing a failure. [ 294.971021][T19257] name failslab, interval 1, probability 0, space 0, times 0 [ 294.971488][T11448] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, [ 294.983743][T19257] CPU: 1 UID: 0 PID: 19257 Comm: syz.6.5503 Not tainted 6.13.0-syzkaller-09383-gebbb8be421ee #0 [ 294.983774][T19257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 294.983787][T19257] Call Trace: [ 294.983792][T19257] [ 294.983799][T19257] dump_stack_lvl+0xf2/0x150 [ 294.983825][T11448] ================================================================== [ 294.983851][T11448] BUG: KCSAN: data-race in data_push_tail / number [ 294.983881][T11448] [ 294.983887][T11448] write to 0xffffffff88bcbca4 of 1 bytes by task 19257 on cpu 1: [ 294.983897][T19257] dump_stack+0x15/0x1a [ 294.983905][T11448] number+0x7f0/0xac0 [ 294.983925][T11448] vsnprintf+0x6ae/0x890 [ 294.983921][T19257] should_fail_ex+0x24a/0x260 [ 294.983946][T11448] vscnprintf+0x42/0x90 [ 294.983955][T19257] should_failslab+0x8f/0xb0 [ 294.983967][T11448] printk_sprint+0x30/0x2d0 [ 294.983983][T19257] kmem_cache_alloc_noprof+0x52/0x320 [ 294.984003][T11448] vprintk_store+0x589/0x870 [ 294.984038][T11448] vprintk_emit+0x15e/0x680 [ 294.984066][T11448] vprintk_default+0x26/0x30 [ 294.984028][T19257] ? __se_sys_mbind+0x415/0x11c0 [ 294.984082][T11448] vprintk+0x1d/0x30 [ 294.984107][T19257] ? selinux_file_permission+0x22a/0x360 [ 294.984108][T11448] _printk+0x7a/0xa0 [ 294.984132][T19257] __se_sys_mbind+0x415/0x11c0 [ 294.984136][T11448] dump_stack_print_info+0xdf/0x1a0 [ 294.984166][T19257] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 294.984173][T11448] dump_stack_lvl+0xe6/0x150 [ 294.984196][T11448] dump_stack+0x15/0x1a [ 294.984214][T11448] should_fail_ex+0x24a/0x260 [ 294.984240][T11448] should_failslab+0x8f/0xb0 [ 294.984280][T11448] kmem_cache_alloc_noprof+0x52/0x320 [ 294.984252][T19257] ? fput+0x1c4/0x200 [ 294.984308][T11448] __se_sys_mbind+0x415/0x11c0 [ 294.984328][T19257] ? ksys_write+0x176/0x1b0 [ 294.984342][T11448] __x64_sys_mbind+0x78/0x90 [ 294.984371][T11448] x64_sys_call+0x2662/0x2dc0 [ 294.984395][T11448] do_syscall_64+0xc9/0x1c0 [ 294.984415][T19257] __x64_sys_mbind+0x78/0x90 [ 294.984420][T11448] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.984451][T11448] [ 294.984449][T19257] x64_sys_call+0x2662/0x2dc0 [ 294.984458][T11448] read to 0xffffffff88bcbca0 of 8 bytes by task 11448 on cpu 0: [ 294.984477][T19257] do_syscall_64+0xc9/0x1c0 [ 294.984477][T11448] data_push_tail+0x102/0x430 [ 294.984508][T19257] ? clear_bhb_loop+0x55/0xb0 [ 294.984512][T11448] prb_reserve_in_last+0x773/0xc10 [ 294.984541][T11448] vprintk_store+0x47b/0x870 [ 294.984568][T11448] vprintk_emit+0x15e/0x680 [ 294.984597][T11448] vprintk_default+0x26/0x30 [ 294.984612][T11448] vprintk+0x1d/0x30 [ 294.984633][T11448] _printk+0x7a/0xa0 [ 294.984634][T19257] ? clear_bhb_loop+0x55/0xb0 [ 294.984661][T11448] __ext4_grp_locked_error+0x5b0/0x7b0 [ 294.984664][T19257] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.984692][T19257] RIP: 0033:0x7f07af4bcda9 [ 294.984693][T11448] ext4_mb_generate_buddy+0x247/0x2d0 [ 294.984717][T11448] ext4_mb_init_cache+0x848/0xbc0 [ 294.984738][T11448] ext4_mb_init_group+0x210/0x3b0 [ 294.984756][T19257] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 294.984755][T11448] ext4_mb_regular_allocator+0xc2a/0x23a0 [ 294.984775][T19257] RSP: 002b:00007f07adb27038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 294.984782][T11448] ext4_mb_new_blocks+0x801/0x2020 [ 294.984794][T19257] RAX: ffffffffffffffda RBX: 00007f07af6d5fa0 RCX: 00007f07af4bcda9 [ 294.984806][T19257] RDX: 0000000000000004 RSI: 0000000000800000 RDI: 0000000020001000 [ 294.984807][T11448] ext4_ext_map_blocks+0x1008/0x35c0 [ 294.984819][T19257] RBP: 00007f07adb27090 R08: 0000000000000000 R09: 0000000000000002 [ 294.984831][T19257] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 294.984829][T11448] ext4_map_blocks+0x5aa/0xd20 [ 294.984843][T19257] R13: 0000000000000000 R14: 00007f07af6d5fa0 R15: 00007ffc47bb9cc8 [ 294.984852][T11448] ext4_do_writepages+0xd68/0x2130 [ 294.984868][T19257] [ 294.984878][T11448] ext4_writepages+0x159/0x2e0 [ 294.984905][T11448] do_writepages+0x1d8/0x480 [ 294.984924][T11448] __writeback_single_inode+0x89/0x850 [ 294.984954][T11448] writeback_sb_inodes+0x461/0xa30 [ 294.984987][T11448] wb_writeback+0x262/0x640 [ 294.985019][T11448] wb_workfn+0x1a8/0x940 [ 294.985047][T11448] process_scheduled_works+0x483/0x9a0 [ 294.985071][T11448] worker_thread+0x51d/0x6f0 [ 294.985094][T11448] kthread+0x4ae/0x520 [ 294.985115][T11448] ret_from_fork+0x4b/0x60 [ 294.985137][T11448] ret_from_fork_asm+0x1a/0x30 [ 294.985160][T11448] [ 294.985166][T11448] value changed: 0x00000000fffffaa2 -> 0x00000000203a4449 [ 294.985179][T11448] [ 294.985185][T11448] Reported by Kernel Concurrency Sanitizer on: [ 294.985196][T11448] CPU: 0 UID: 0 PID: 11448 Comm: kworker/u8:7 Not tainted 6.13.0-syzkaller-09383-gebbb8be421ee #0 [ 294.985222][T11448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 294.985235][T11448] Workqueue: writeback wb_workfn (flush-7:6) [ 294.985270][T11448] ================================================================== [ 294.983721][T11448] block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 295.497836][T11448] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 295.510328][T11448] EXT4-fs (loop6): This should not happen!! Data will be lost [ 295.510328][T11448] [ 295.519983][T11448] EXT4-fs (loop6): Total free blocks count 0 [ 295.525968][T11448] EXT4-fs (loop6): Free/Dirty block details [ 295.531859][T11448] EXT4-fs (loop6): free_blocks=68451041280 [ 295.537710][T11448] EXT4-fs (loop6): dirty_blocks=2704 [ 295.543048][T11448] EXT4-fs (loop6): Block reservation details [ 295.549145][T11448] EXT4-fs (loop6): i_reserved_data_blocks=169 [ 295.573458][T19257] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop6 ino=12 [ 295.582268][T19257] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop6 ino=12 [ 295.592239][T19257] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop6 ino=12 [ 295.601471][T19257] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop6 ino=12 [ 295.610533][T19257] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop6 ino=12