last executing test programs: 3.316445642s ago: executing program 0 (id=1913): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@discard}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwFy9SBBEL4h/g3WPxH/CvKGihSAl68BKZzWy7TbL5uXW3zucD0743M5s3b998335nZ5cNoLBGsn9KEa9GxDdJxOG2bYORbxxZ2W/p8Y3JbEliefmzP5NI8nWt/ZP8/4N55ZWI+PWriJOlte3WFxZnKtVqOpfXRxuzV0frC4unLs9WptPp9Mr4xMSZdybG33/v3a719c0Lf3//6f2Pznx9fOm7nx8euZvEuTiUb2vvxy7caq+MxEj+nAzFuVU7jnWhsX6S9PoA2JGBPM6HIpsDDsdAHvXA/9/NiFgGCioR/1BQrTygdW3fpevgF8ajD1cugNb2f3DlvZHY17w2OrCUPHNllF3vDneh/ayNX/64dzdbYpP3IW52oT2Allu3I+L04ODa+S/J57+dO91883hjq9so2usP9NL9LP95a738p/Qk/4l18p+D68TuTmwe/6WHXWimoyz/+2Dd/PfJ1DU8kNdeauZ8Q8mly9X0dES8HBEnYmhvVt/ofs6ZpQfLnba153/ZkrXfygXz43g4uPfZx0xVGpXd9Lndo9sRrz3Nf5NYM//va+a6q8c/ez4ubLGNY+m91ztt27z/7bqfAS//FPHGuuP/9I5WsvH9ydHm+TDaOivW+uvOsd86tb+9/ndfNv4HNu7/cNJ+v7a+/TZ+3PdP2mnbTs//PcnnzfKefN31SqMxNxaxJ/lk7frxp49t1Vv7Z/0/cXzj+W+9839/RHyxxf7fOXqn4679MP5T2xr/7RcefPzlD53a39r4v90sncjXbGX+2+oB7ua5AwAAAAAAgH5TiohDkZTKT8qlUrm88vmOo3GgVK3VGycv1eavTEXzu7LDMVRq3ek+3PZ5iLH887Ct+viq+kREHImIbwf2N+vlyVp1qtedBwAAAAAAAAAAAAAAAAAAgD5xsMP3/zO/D/T66IDnzk9+Q3FtGv/d+KUnoC95/YfiEv9QXOIfikv8Q3GJfygu8Q/FJf6huMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAAdNWF8+ezZXnp8Y3JrD51bWF+pnbt1FRanynPzk+WJ2tzV8vTtdp0NS1P1mY3+3vVWu3q2HjMXx9tpPXGaH1h8eJsbf5K4+Ll2cp0ejEd+k96BQAAAAAAAAAAAAAAAAAAAC+W+sLiTKVaTecUOhbORl8cxo4LyWajfDY/GXbUxGDvO6jwHAo9npgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoM2/AQAA///fKTPH") setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) 3.115449272s ago: executing program 0 (id=1916): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000206}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000010000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000840)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x21c91c, &(0x7f0000000780)={[{@nouid32}, {@grpquota}, {@min_batch_time={'min_batch_time', 0x3d, 0x2}}, {@stripe={'stripe', 0x3d, 0x8000000000000000}}, {@barrier}, {@nomblk_io_submit}, {@minixdf}, {@minixdf}, {@grpjquota, 0x32}]}, 0x1e, 0x4ea, &(0x7f00000009c0)="$eJzs3VFrW9cdAPD/la3MSZzZYXvIAsvCkmGHLZIdL4nZQ7bB2J4C27L3zLNlYyxbxpKT2ITNYR9gMMY22NOe9jLoByiUfIRSCLTvpS0tpU3ah0LbqOhKShxHip1GllLr94MjnXt0r/7nXKGje+49XAXQt05HxJmIeFitVs9FxEijPNNIsVVPtfUe3L89W0tJVKvXPkoiknpZbbXxbe95tLHZUET8/jcRf0qejlve2FyaKRYLa43lfGV5NV/e2Dy/uDyzUFgorExNTV6avjx9cXqiI+0cjogrv3rvn3/736+vvPaTm29f/2D8z0mjPOJxOzqt3vRsui+aBiNibT+C9chg2kIAAL4Jmsf5P4yIczESA+nRHAAAAHCQVH8+HF8kEVUAAADgwMqkc2CTTK4xD2A4Mplcrj6H97txJFMslSs/ni+tr8zV58qORjYzv1gsTDTmCo9GNqktT6b5x8sXdixPRcTxiPjHyOF0OTdbKs71+uQHAAAA9ImjO8b/n47Ux//bfN6zygEAAACdM9rrCgAAAAD7zvgfAAAADj7jfwAAADjQfnv1ai1Vm/9/PXdjY32pdOP8XKG8lFten83NltZWcwul0kJ6z77l3d6vWCqt/jRW1m/lK4VyJV/e2Ly+XFpfqVxffOIvsAEAAIAuOv6Du28lEbH1s8NpqjnU60oBXTH4PCu/u3/1ALpvoNcVAHrmuX7/gQMl2+sKAD2X7PJ628k7r3e+LgAAwP4Y+17r6/8Du54b2Mp0qYrAPnH+D/qX6//Qv1z/h/6VjYEwkIf+ttstQIfajRX2fP2/Wn3uSgEAAB01nKYkk4tIzwMMRyaTy0UcS8cE2WR+sViYiIhvR8SbI9lv1ZYn0y2TXecMAwAAAAAAAAAAAAAAAAAAAAAAAAB11WoSVQAAAOBAi8i8n6R3848YGzk7vPP8wKHks5H0OSJu/ufav27NVCprk7Xyjx+VV/7dKL/QizMYAAAAwE7NcXpzHA8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnfTg/u3ZZupm3A9/GRGjreIPxlD6PBTZiDjySRKD27ZLImKgA/G37kTEiVbxk1q1YrRRi1bxD/c4/tEOxId+drfW//yi1fcvE6fT59bfv0tpD/Xi2vd/mUf930CL+LWyY3uMcfLeK/m28e9EnBxs3f804ydt+p8ze4z/xz9sbrZ7rfrfiLGWvz/JE7HyleXVfHlj8/zi8sxCYaGwMjU1eWn68vTF6Yn8/GKx0HhsGePv33/14bPaf6RN/NFd2n92j+3/8t6t+9+pZ7OPNk8exx8/0/rzP9Emfqbx+f+oka+9PtbMb9Xz2536/xunntX+uTbt3+3zH99j+8/97q/v7HFVAKALyhubSzPFYmGtrzMvtDdqh0UvRStezkxtv379zYf2tYZ/2V6SdObrUDsyfzn2/ItletotAQAA++DpMTAAAAAAAAAAAAAAAAAAAADQbd24nVh2R8yt9LETd88HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOicrwIAAP///B/QPg==") syz_read_part_table(0x59d, &(0x7f0000000000)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000200"/16], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r5}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x262) 2.008482561s ago: executing program 4 (id=1926): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r0}, 0x18) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sched_setscheduler(0x0, 0x1, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f310000"], 0xe8}}, 0x0) close(r2) 1.960777576s ago: executing program 2 (id=1927): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) syz_usbip_server_init(0x5) 1.846047767s ago: executing program 0 (id=1928): syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4) r1 = timerfd_create(0x8, 0x0) read(r1, &(0x7f0000000380)=""/189, 0x8) timerfd_settime(r1, 0x3, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000780)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x20, 0x7ffc1ffb}]}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_recvmsg\x00', r3}, 0x18) socket$kcm(0x21, 0x2, 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="c80000000002010400000000000000000a0000003c0001802c00018014000300fe80000000000000000000000000002014000400ff0100000000000000000000000000010c00028005000100980000003c0003800c00028010000100890000002c00018014000300fe80000000000000000000000000002a14000400ff0100"/139], 0xc8}, 0x1, 0x0, 0x0, 0x24000801}, 0x4) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000000)={[{@bsdgroups}, {@jqfmt_vfsv1}]}, 0xc1, 0x7da, &(0x7f0000000fc0)="$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") r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r5, 0x0) 1.758012266s ago: executing program 4 (id=1929): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) socket$nl_route(0x10, 0x3, 0x0) r2 = mq_open(0x0, 0x40, 0x3c, &(0x7f0000000480)={0x7ff, 0x0, 0x3, 0x5000}) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000580)=0x100) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0xcc04, &(0x7f0000000880)=ANY=[@ANYBLOB='dots,gid=', @ANYRESHEX=0xee01, @ANYBLOB="2c6e6f646f74732c646f74732c74696d655f6f66667365743d3078303030303030303030303030303264382c646f74732c646f74732c6e6f646f74732c6e6f646f74732c646f74732c646f74732c6e6f646f74732c6e6f646f74732c636865636b3d72656c617865642c666c7573682c64656275672c646f74732c73686f77657865632c6e6f646f74732c6572726f72733d636f6e74696e75652c646f74732c71756965742c003fa5bfd3e968f92d300444698c6f8d94d8b46ce3ce652bc8f6"], 0x1, 0x209, &(0x7f0000000200)="$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") syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="6e6f6e756d7461696c3d302c636865636b3d7374726963742c756d61736b3d30303030303030303030303030303030303133363033302c756e695f786c6174653d312c756e695f786c6174653d302c666d61736b3d30303030303030303030303030303030303030303034302c757466383d302c6e6f6e756d7461696c3d302c73686f72746e616d653d77696e39352c73686f72746e616d653d6c6f7765722c73686f72746e616d653d77696e6e742c756e695f786c6174653d312c74696d655f6f66667365743d3078303030303030303030303030303166622c666c7573682c756e695f786c6174653d302c73686f72746e616d653d77696e39352c00208893fdd4787adad4209069"], 0x6, 0x2b0, &(0x7f0000000280)="$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") mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) creat(&(0x7f00000002c0)='./file0\x00', 0x0) socket$inet6(0xa, 0x2, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) socket$key(0xf, 0x3, 0x2) fchmodat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0xfffffffb) 1.469021175s ago: executing program 4 (id=1930): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ustat(0x9, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) getpgrp(0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000fc0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000f2ffffff00000000ff000000850000002a000000850000005000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) capget(0x0, 0xffffffffffffffff) 1.436846298s ago: executing program 4 (id=1931): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000010, &(0x7f0000000040)={[{@errors_remount}, {@discard}]}, 0xfe, 0x512, &(0x7f0000000380)="$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") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000005c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c13eaf60d0000004becfaa7707b286ef8fb329e5da1e50c92", @ANYRES16=r3, @ANYBLOB="5953fcfffffffddbdf256b00000008000300", @ANYRES32=0x0, @ANYBLOB="10001d800c0000800500090009000000"], 0x2c}, 0x1, 0x0, 0x0, 0x8441}, 0x4000000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000900)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x18) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GCAUSEDIAG(r5, 0x89e6, &(0x7f00000000c0)={0xd, 0x2}) 1.381388884s ago: executing program 0 (id=1932): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021940000000c0a01030000000000000000070000000900020073797a31000000000900010073797a3000000000680003806400dec6080003400000000258000b80200001800a0001"], 0x118}}, 0x0) (fail_nth: 1) 1.340763108s ago: executing program 1 (id=1934): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd1f, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x4c, 0x2, [@TCA_FLOWER_ACT={0x48, 0x3, [@m_bpf={0x44, 0x1, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x9, 0x9, 0x20000000, 0x9}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0xf0, 0x8}}]}, 0x84}, 0x1, 0x0, 0x0, 0x8848}, 0x80) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) 1.280295414s ago: executing program 2 (id=1935): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MON_SET(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x40000) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(r1, 0x24, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = perf_event_open(0x0, 0x0, 0xc, 0xffffffffffffffff, 0x2) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x800, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200a}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000180), &(0x7f00000001c0)=r3}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, r7, 0x4e04, 0x0, 0x0, 0x0, {0xa, 0x4e22, 0xa, @private2={0xfc, 0x2, '\x00', 0x1}, 0x77f}}}, 0x32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x18) getpgrp(0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x19, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10) r9 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x468, 0x168, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3c0, 0xffffffff, 0xffffffff, 0x3c0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x148, 0x168, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x810001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x200, 0x230, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4c8) 1.193048292s ago: executing program 4 (id=1936): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@discard}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwFy9SBBEL4h/g3WPxH/CvKGihSAl68BKZzWy7TbL5uXW3zucD0743M5s3b998335nZ5cNoLBGsn9KEa9GxDdJxOG2bYORbxxZ2W/p8Y3JbEliefmzP5NI8nWt/ZP8/4N55ZWI+PWriJOlte3WFxZnKtVqOpfXRxuzV0frC4unLs9WptPp9Mr4xMSZdybG33/v3a719c0Lf3//6f2Pznx9fOm7nx8euZvEuTiUb2vvxy7caq+MxEj+nAzFuVU7jnWhsX6S9PoA2JGBPM6HIpsDDsdAHvXA/9/NiFgGCioR/1BQrTygdW3fpevgF8ajD1cugNb2f3DlvZHY17w2OrCUPHNllF3vDneh/ayNX/64dzdbYpP3IW52oT2Allu3I+L04ODa+S/J57+dO91883hjq9so2usP9NL9LP95a738p/Qk/4l18p+D68TuTmwe/6WHXWimoyz/+2Dd/PfJ1DU8kNdeauZ8Q8mly9X0dES8HBEnYmhvVt/ofs6ZpQfLnba153/ZkrXfygXz43g4uPfZx0xVGpXd9Lndo9sRrz3Nf5NYM//va+a6q8c/ez4ubLGNY+m91ztt27z/7bqfAS//FPHGuuP/9I5WsvH9ydHm+TDaOivW+uvOsd86tb+9/ndfNv4HNu7/cNJ+v7a+/TZ+3PdP2mnbTs//PcnnzfKefN31SqMxNxaxJ/lk7frxp49t1Vv7Z/0/cXzj+W+9839/RHyxxf7fOXqn4679MP5T2xr/7RcefPzlD53a39r4v90sncjXbGX+2+oB7ua5AwAAAAAAgH5TiohDkZTKT8qlUrm88vmOo3GgVK3VGycv1eavTEXzu7LDMVRq3ek+3PZ5iLH887Ct+viq+kREHImIbwf2N+vlyVp1qtedBwAAAAAAAAAAAAAAAAAAgD5xsMP3/zO/D/T66IDnzk9+Q3FtGv/d+KUnoC95/YfiEv9QXOIfikv8Q3GJfygu8Q/FJf6huMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAAdNWF8+ezZXnp8Y3JrD51bWF+pnbt1FRanynPzk+WJ2tzV8vTtdp0NS1P1mY3+3vVWu3q2HjMXx9tpPXGaH1h8eJsbf5K4+Ll2cp0ejEd+k96BQAAAAAAAAAAAAAAAAAAAC+W+sLiTKVaTecUOhbORl8cxo4LyWajfDY/GXbUxGDvO6jwHAo9npgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoM2/AQAA///fKTPH") setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="3c020000190001000000000001000000fe8800000000000000000000000001010000000000000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000002000000000000000001000000000084010500ac1414aa0000000000000000000000000000000033"], 0x23c}, 0x1, 0x0, 0x0, 0x1}, 0x4000) r2 = socket(0x400000000010, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2c, 0x2, {0x0, 0x0, 0x0, r5, {0xc, 0x1}, {}, {0x8}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_IPV4_DST={0x8, 0x1d, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_FLOWER_KEY_ENC_IPV4_DST_MASK={0x8}]}}]}, 0x44}}, 0x0) 1.192842672s ago: executing program 0 (id=1937): prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = io_uring_setup(0x4d72, &(0x7f0000000380)={0x0, 0x6555, 0x0, 0x2, 0x151}) io_uring_enter(r5, 0x7b29, 0x7687, 0x40, &(0x7f0000000300)={[0x3]}, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) syz_clone(0x63081180, 0x0, 0x0, 0x0, 0x0, 0x0) 1.176514174s ago: executing program 2 (id=1938): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000206}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000010000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000840)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x21c91c, &(0x7f0000000780)={[{@nouid32}, {@grpquota}, {@min_batch_time={'min_batch_time', 0x3d, 0x2}}, {@stripe={'stripe', 0x3d, 0x8000000000000000}}, {@barrier}, {@nomblk_io_submit}, {@minixdf}, {@minixdf}, {@grpjquota, 0x32}]}, 0x1e, 0x4ea, &(0x7f00000009c0)="$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") syz_read_part_table(0x59d, &(0x7f0000000000)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000200"/16], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r5}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x262) 1.079637894s ago: executing program 1 (id=1939): sendto(0xffffffffffffffff, &(0x7f0000000740)="120000001200ad", 0x7, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x150, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x7, 0xb}}, [@TCA_RATE={0x6, 0x5, {0x6, 0x6}}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0x104, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0xec, 0x1, [@m_simple={0xb0, 0x1e, 0x0, 0x0, {{0xb}, {0x54, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x6, 0x3, '-\x00'}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x8, 0x2, 0x20000000, 0x8, 0x13b}}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x0, 0x1, 0x6, 0x2, 0xd}}]}, {0x32, 0x6, "b83be43ce3f0453fdb55a3fbb55ce131cff5300b92efaf853271bbac333e650817fc6029bf8265bde8d86f1542fc"}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_simple={0x38, 0x1e, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x8, 0x3, 'bpf\x00'}]}, {0x4}, {0xc, 0x7, {0x0, 0x79d0f023c2b305dd}}, {0xc, 0x8, {0x3, 0x2}}}}]}]}}, @filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x150}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000b80)=ANY=[@ANYRESOCT, @ANYRES32, @ANYRESOCT=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r0}, 0x10) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}, @TCA_RATE={0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x48801}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@bloom_filter={0x1e, 0x401, 0x1, 0x3ff, 0xa0, 0xffffffffffffffff, 0x1, '\x00', r3, r1, 0x5, 0x1, 0x2, 0x3}, 0x50) fcntl$setsig(r1, 0xa, 0x13) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xc, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000711876000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x288000, 0x0) fcntl$setlease(r1, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0bea514e532f00000c00265050e6032ca602ef398cfea8341aeaee2d9a24e2f83dd1db50e0343a95ee1201e7a355aeb2e24018aa22d23552427cc6b89d72a98b032d749e0fee05ceae7130767ecd24c6abd1aa439e361e65de58ad3d2c9a1c7517e4a82aae0cbe21bc74118f18a34081ff61"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0xffffe776, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1004}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r5, 0x0, 0x3}, 0x18) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000080)={{0xa, 0x4e24, 0x101, @empty}, {0xa, 0x4e22, 0x0, @dev}, 0x0, {[0x0, 0x0, 0x0, 0x0, 0x899, 0x1]}}, 0x5c) fcntl$setlease(r1, 0x400, 0x2) r6 = socket(0x10, 0x803, 0x0) sendto(r6, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r6, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'ip6_vti0\x00'}) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f00000006c0)={0x0, @remote, @initdev}, &(0x7f0000000780)=0xc) 994.825612ms ago: executing program 1 (id=1940): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000300)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000002cc0)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16, @ANYBLOB="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", @ANYBLOB="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", @ANYRES64=0x0, @ANYRESHEX], 0x8, 0x2ee, &(0x7f00000029c0)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r2, &(0x7f0000000140)='2', 0xfdef, 0xe7c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) fsopen(&(0x7f0000000600)='v7\x00', 0x1) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x17) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4e93, 0x18445, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0xc0000000000000, 0xfffe}, 0x8080, 0xa9, 0x80000000, 0x5, 0x400000a5, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000180), &(0x7f0000000340)='system_u:object_r:fixed_disk_device_t:s0\x00', 0x29, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sys_enter\x00', r3}, 0x10) r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) mincore(&(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f00000002c0)=""/47) fsconfig$FSCONFIG_SET_BINARY(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f00000001c0), 0x5400, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r5, 0x10, &(0x7f0000000580)={0x9, 0x0, &(0x7f0000000480)=[{&(0x7f0000000380)=""/149, 0x95}, {&(0x7f0000000440)=""/5, 0x5}], &(0x7f0000000540)=[0x4, 0x2], 0x2}, 0x20) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f00000000c0)={0x0, 0x1ff}, 0x8) socket(0x10, 0x803, 0x0) 657.996035ms ago: executing program 3 (id=1941): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ustat(0x9, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) getpgrp(0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000fc0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000f2ffffff00000000ff000000850000002a000000850000005000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) capget(0x0, 0xffffffffffffffff) 589.319982ms ago: executing program 4 (id=1942): r0 = socket(0xa, 0x3, 0xff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000100000000010093797a310000000037000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4040850) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002c00)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a40000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a3100000000140004800800024081b140bb080001400000000414000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x2, @loopback, 0x3}, 0x1c) sendmmsg$inet6(r0, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="5e54e574da9388a6dc628a600b17cbe584d2e73c68141965f3fbcf0e16db6e759d420151c6c57504", 0x28}], 0x1}}], 0x1, 0x8804) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000100)="06ff03076844babeb89e14f00800", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) readv(r2, &(0x7f0000000940)=[{&(0x7f0000000180)=""/197, 0xc5}], 0x1) r3 = socket$kcm(0x2, 0x3, 0x84) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x7, 0x3, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) r5 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$IMADDTIMER(r5, 0x80044940, &(0x7f0000000280)=0x14) read(r5, &(0x7f00000019c0)=""/4097, 0x1001) accept$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000440)=0x14) sendmsg$inet(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x100, @dev={0xac, 0x14, 0x14, 0x39}}, 0x10, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000007000000890704e068000000110000000000000000dbc790ad000000fc000000000000001400000000000000000000000200000004000000000000001c0000"], 0x68}, 0x84) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="4000000010001ffffcfffffffbdbdf250f000000", @ANYRES32=0x0, @ANYBLOB="9320040000d00000200012800b0001006272696467650000100002800c002300ffffff7f00000000"], 0x40}, 0x1, 0x0, 0x0, 0x41}, 0x4040) setsockopt$IP_VS_SO_SET_ZERO(r2, 0x0, 0x48f, &(0x7f0000000040)={0x0, @local, 0x4e24, 0x1, 'dh\x00', 0x16, 0x7f, 0x5e}, 0x2c) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x778e9e63fbdc912b, &(0x7f0000000640)="2faf599489b9beb7b9f60e5eabd162c827f60f5964bf2158153115ecd02d6dd0fded379f6dacf379526921532785161e0f10706206c083859f380c5547cb01c192a18ed279e1b7bb118be19c7e", 0x4d, &(0x7f0000000700), &(0x7f0000000740), &(0x7f0000000980)="7d63dbe0c442a8a3f4d862a432805e32fd15c09d21292806174f0e1ef2e61c9e30e32cabf9e0f9d36be9bd5c2b8235a113ccf4da564f59be") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000340)='kfree\x00', r7, 0x0, 0x1ffffffffffffffd}, 0x18) r8 = gettid() timer_create(0x8, &(0x7f00000000c0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc)=0x0) timer_settime(r9, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}}, 0x0) r10 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) readv(r10, &(0x7f0000000500)=[{&(0x7f0000000240)=""/35, 0x23}], 0x1) getpgid(r8) 475.421103ms ago: executing program 3 (id=1943): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x2) fcntl$setlease(r1, 0x400, 0x0) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r2, 0x400, 0x0) close(0x3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000700)='kfree\x00', r0, 0x0, 0x7}, 0x18) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) clock_gettime(0x0, &(0x7f0000001d80)={0x0, 0x0}) futex_waitv(&(0x7f0000001640)=[{0x1000, &(0x7f00000000c0)=0x81, 0x82}, {0x2, &(0x7f0000000140)=0x8000000000000000, 0x82}, {0x5cd7dc9e, &(0x7f0000000180)=0xfffffffffffffbc8, 0x2}, {0x1, &(0x7f00000001c0)=0x8, 0x82}, {0x264, &(0x7f0000000200)=0x5, 0x2}, {0x1000, &(0x7f0000000240)=0x32, 0x2}, {0xfffffffffffff4a2, &(0x7f0000000280)=0xfff, 0x82}, {0x7, &(0x7f00000002c0), 0x2}, {0x400, &(0x7f0000000300)=0x5, 0x82}, {0x5, &(0x7f0000000340)=0x7f, 0x2}, {0x6, &(0x7f0000000380)=0x4, 0x82}, {0x2, &(0x7f0000000440)=0x972b}, {0x9, &(0x7f0000000480)=0xf530, 0x82}, {0x8000000000000000, &(0x7f0000000500)=0x4400000000000000, 0x2}, {0x8000, &(0x7f0000000580)=0x6, 0x2}, {0xa3af, &(0x7f00000005c0)=0x1, 0x2}, {0x7fffffffffffffff, &(0x7f0000000600)=0x7, 0x2}, {0x4a, &(0x7f0000000640)=0xd, 0x2}, {0xffffffff, &(0x7f0000000680)=0x10000, 0x2}, {0x200, &(0x7f00000006c0)=0x6, 0x2}, {0x3, &(0x7f0000000740)=0x4f, 0x82}, {0x0, &(0x7f0000000780)=0x6, 0x82}, {0x2, &(0x7f00000007c0)=0x6, 0x82}, {0x344, &(0x7f0000000800)=0xffffffff, 0x82}, {0x7ff, &(0x7f0000000840)=0x1000, 0x82}, {0xa1d, &(0x7f0000000880)=0xbe4, 0x82}, {0x81, &(0x7f00000008c0)=0xe, 0x82}, {0x7, &(0x7f00000009c0)=0xfb5, 0x82}, {0x120000, &(0x7f0000000a00)=0x2, 0x2}, {0x1, &(0x7f0000000a40), 0x2}, {0x6, &(0x7f0000000a80)=0x3, 0x2}, {0x8, &(0x7f0000000ac0)=0x6, 0x82}, {0x8, &(0x7f0000000b00)=0x3, 0x2}, {0xffff, &(0x7f0000000b40)=0x7, 0x82}, {0x0, &(0x7f0000000b80)=0xfffffffffffffffd, 0x82}, {0x401, &(0x7f0000000bc0)=0x2, 0x2}, {0x2, &(0x7f0000000c00)=0xf8, 0x2}, {0x80000001, &(0x7f0000000c40)=0x7ff, 0x2}, {0xe, &(0x7f0000000c80)=0xffff}, {0xffffffffffffffb0, &(0x7f0000000cc0)=0x6, 0x82}, {0x0, &(0x7f0000000d00)=0x9, 0x82}, {0xfffffffffffffffb, &(0x7f0000000d40)=0x3, 0x2}, {0x0, &(0x7f0000000d80)=0xb1ac718, 0x82}, {0xfffffffffffffffc, &(0x7f0000000dc0)=0x4, 0x82}, {0x3, &(0x7f0000000e00)=0x1024, 0x2}, {0x4, &(0x7f0000000e40)=0x4, 0x2}, {0xffffffffffffff18, &(0x7f0000000e80)=0x3, 0x2}, {0x7, &(0x7f0000000ec0)=0x8, 0x82}, {0x100000001, &(0x7f0000000f00)=0x7, 0x2}, {0x7ff, &(0x7f0000000f40)=0x100, 0x2}, {0x5, &(0x7f0000000f80)=0x80000000800, 0x2}, {0xf68, &(0x7f0000000fc0)=0x2, 0x82}, {0x1, &(0x7f0000001000), 0x2}, {0x47c, &(0x7f0000001040)=0x100000001, 0x2}, {0x3, &(0x7f0000001080)=0x8, 0x82}, {0x4, &(0x7f00000010c0)=0x4, 0x82}, {0xf, &(0x7f0000001100)=0x3, 0x82}, {0x3, &(0x7f0000001140)=0x2, 0x82}, {0x0, &(0x7f0000001180)=0x605, 0x82}, {0x2, &(0x7f00000011c0), 0x82}, {0x1, &(0x7f0000001200)=0x5, 0x82}, {0x1, &(0x7f0000001280), 0x2}, {0x401, &(0x7f00000012c0)=0xffffffffffffffff, 0x2}, {0x2, &(0x7f0000001300)=0x39cd, 0x82}, {0xe2, &(0x7f0000001340)=0x2, 0x82}, {0xfe, &(0x7f0000001380)=0x400, 0x82}, {0x5, &(0x7f00000013c0)=0x7fffffff, 0x82}, {0x7, &(0x7f0000001400)=0x4, 0x82}, {0xf, &(0x7f0000001440)=0x8, 0x2}, {0x0, &(0x7f0000001480)=0x9, 0x82}, {0x4, &(0x7f00000014c0)=0xcf03, 0x82}, {0x1, &(0x7f0000001500)=0x2, 0x2}, {0x6, &(0x7f0000001540)=0x1, 0x2}, {0x9, &(0x7f0000001580)=0x3, 0x2}, {0x1, &(0x7f00000015c0)=0x8, 0x2}, {0x5, &(0x7f0000001600)=0x80000001, 0x82}], 0x4c, 0x0, &(0x7f0000001dc0)={r5, r6+10000000}, 0x1) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f00000004c0)={r4, 0x3, 0x6, @broadcast}, 0x10) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000040)={r4, 0x1, 0x6, @local}, 0x10) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000001f00)={&(0x7f0000001e00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001ec0)={&(0x7f0000001e40)=@gettfilter={0x44, 0x2e, 0x300, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xd, 0xfff3}, {0x8, 0x10}, {0x9, 0x2}}, [{0x8, 0xb, 0xffff}, {0x8, 0xb, 0x8}, {0x8, 0xb, 0x8}, {0x8, 0xb, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x8804}, 0x8000) close_range(r7, 0xffffffffffffffff, 0x0) 448.331906ms ago: executing program 1 (id=1944): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000cc0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x4000000, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xf}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x2, 0x0, 0x0, 0x0, 0x6}, {0x1}, 0x0, 0x7f}}, @TCA_TBF_BURST={0x8, 0x6, 0xa815}]}}]}, 0x60}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="7800000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470004c00028008000100", @ANYRES32=r0], 0x78}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00'}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='task_newtask\x00', r5}, 0x18) r6 = syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) ptrace$setregs(0xd, r6, 0x3, &(0x7f0000000240)) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000002c0)=@generic={&(0x7f0000000100)='./file0\x00', r3}, 0x18) 367.073154ms ago: executing program 3 (id=1945): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x14, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x42, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000000000001800028014000380100001800800010000000000040003"], 0x44}, 0x1, 0x0, 0x0, 0x20004080}, 0x0) 336.030587ms ago: executing program 3 (id=1946): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GCAUSEDIAG(r0, 0x89e6, &(0x7f00000000c0)={0xd, 0x2}) 303.92042ms ago: executing program 3 (id=1947): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r0) sendmsg$IEEE802154_LIST_PHY(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)={0x14, r1, 0x30b, 0x0, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4044}, 0x20000004) 294.225341ms ago: executing program 1 (id=1948): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MON_SET(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x40000) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(r1, 0x24, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = perf_event_open(0x0, 0x0, 0xc, 0xffffffffffffffff, 0x2) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x800, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200a}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000180), &(0x7f00000001c0)=r3}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, r7, 0x4e04, 0x0, 0x0, 0x0, {0xa, 0x4e22, 0xa, @private2={0xfc, 0x2, '\x00', 0x1}, 0x77f}}}, 0x32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x18) getpgrp(0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x19, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10) r9 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x468, 0x168, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3c0, 0xffffffff, 0xffffffff, 0x3c0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x148, 0x168, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x810001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x200, 0x230, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4c8) 286.195722ms ago: executing program 3 (id=1949): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000300)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000002cc0)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16, @ANYBLOB="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", @ANYBLOB="fe2ecf20a9a17bd2ed7e803f830375c150a1f848f604c2c1f932d2b7163be4b2b9a5bd521d185cfbee555b27608594beba6325923aaf5db74cff01000053db92c6c5fcbba0abd975fc76bea49b00513afc856ed89d3fadeda307ca587354322803b0983cc65725ae7f45fb95e7cdb28c6b886959b7dde2c87c73f6008cf6eed7861f24b7423704b95f3d05b92d3d7ff9d392833ecd02443320b60131a350360fcc1d659e2a03cb469caf0498bacae0735a161345b3d71a55f14ef636b6f832c7a6071fce83904dfd871b6d8e03648dbaa3a039eb5673792cae80335732030f9aeabaf3bb3cc4ca5fe75271d69b2e78beb2b81fc3cf3a18a7ae93a3cdbe6599b99408275e2b4b4477c6fcf4806134e839e13533ec000000000000006a1c000000000000000000000000000000000000000000000000000069c3288311b7414705e975eb3f1b77a120", @ANYRES64=0x0, @ANYRESHEX], 0x8, 0x2ee, &(0x7f00000029c0)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r2, &(0x7f0000000140)='2', 0xfdef, 0xe7c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) fsopen(&(0x7f0000000600)='v7\x00', 0x1) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x17) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4e93, 0x18445, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0xc0000000000000, 0xfffe}, 0x8080, 0xa9, 0x80000000, 0x5, 0x400000a5, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000180), &(0x7f0000000340)='system_u:object_r:fixed_disk_device_t:s0\x00', 0x29, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sys_enter\x00', r3}, 0x10) r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) mincore(&(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f00000002c0)=""/47) fsconfig$FSCONFIG_SET_BINARY(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f00000001c0), 0x5400, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r5, 0x10, &(0x7f0000000580)={0x9, 0x0, &(0x7f0000000480)=[{&(0x7f0000000380)=""/149, 0x95}, {&(0x7f0000000440)=""/5, 0x5}], &(0x7f0000000540)=[0x4, 0x2], 0x2}, 0x20) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f00000000c0)={0x0, 0x1ff}, 0x8) socket(0x10, 0x803, 0x0) 266.943484ms ago: executing program 0 (id=1950): syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4) r1 = timerfd_create(0x8, 0x0) read(r1, &(0x7f0000000380)=""/189, 0x8) timerfd_settime(r1, 0x3, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000780)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x20, 0x7ffc1ffb}]}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_recvmsg\x00', r2}, 0x18) socket$kcm(0x21, 0x2, 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="c80000000002010400000000000000000a0000003c0001802c00018014000300fe80000000000000000000000000002014000400ff0100000000000000000000000000010c00028005000100980000003c0003800c00028010000100890000002c00018014000300fe80000000000000000000000000002a14000400ff0100"/139], 0xc8}, 0x1, 0x0, 0x0, 0x24000801}, 0x4) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000000)={[{@bsdgroups}, {@jqfmt_vfsv1}]}, 0xc1, 0x7da, &(0x7f0000000fc0)="$eJzs3c1rG80dAODfyh+ynbR2odAmJ0OhNYTIdeomLfSQ0kMpNBBoz02MrJjUshUsOcTGEOdQ6KXQlh4K7SXnfqSHQq/9uLb/ROmhJITWMW/e04tediX5U5LtxJId/Dyw2pnd2Z0Z7ezsSLtIAVxYk+lLLuJKRPw8iRhvLk8iYigLDUbcbqR7u7VRTKck6vUf/C/J0vz50u6+kub8UjPyxYj4+08iruUO5jranJdLK83QdG3p0XR1bf36w6W5hdJCafnmzOzsjVtfv3Xz8Fbv6qN/rV9+9YvvfuWPtwfjCy9+9o8kbsfl5rrtrY3ie+7+kMmYbL4nQ+lbuM93TjuzM5acdQF4J+mpOdA4y+NKjMdAFurgfU9AAOBceBoRdQDggklc/wHggml9D7C9tVFsTWf7jUR/vf52RIw06t+6v9lYM9i8ZzeS3Qcd20723RlJImLiFPKfjIjf/uVHv0+n6NF9SIB2Np9FxP2Jye2t/IH+P0n7v+Gj95DvuOar3TarN7abPLBY/wf989d0/PONw+O/qzsP9IxkrwfGPyP5Nufuuzj6/M+97LDpMfqmo6Xjv2/tebZtd/y389DaxEAz9plszDeUPHhYLqV922cjYiqG8ml8Jkva/imoqTefvOmU/97x3/9/+ePfpfmn890UuZeD+aiP79lmfq42dwpVz7x+FnF1sF39k53xb9Jh/Hu34173H5rvffOnv+mUMq1/Wt/WdLj+vVV/HvHltsd/91gmXZ9PnM6aw3SrUbTxp//8eqxT/rvHP5/N0/xbnwX6IT3+Y93rP5GGqmvri3PlcmmlevI8/vl8/G+d1u1t/+3rn7X/fdL2P5z8MAu3WtqTuVptZSZiOPn+4eU3drdtxVvp0/pPfan9+d+p/eeaz8be34l1N/hq+A/NXbWtf2azU/17K63//ImOf5dAvbnNgVUv3i4OdMr/eMd/NgtNNZccp/87oqTv0ZoBAAAAAAAAAAAAAAAAAAAAAAAA4ORyEXE5klxhJ5zLFQqN//D+fIzlypVq7dqDyuryfGT/lT0RQ7nWT12O7/k91Jnm7+G34jcOxL8WEZ+LiF/lR7N4oVgpz5915QEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACg6dL+//9/ms4Khca6/+bPunQAQM+MnHUBAIC+c/0HgIvnZNf/0Z6VAwDonxN//q8nvSkIANA3x77+3+9tOQCA/nH/HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgB67e+dOOtU/3toopvH5x2uri5XH1+dL1cXC0mqxUKysPCosVCoL5VKhWFnquKPNxqxcqTyajeXVJ9O1UrU2XV1bv7dUWV2u3Xu4NLdQulca6lvNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOD4qmvri3PlcmlFoEtgtDR6HopxjgKDcS6KcSiw+e+hrF13TRwTH0zjH+6SJjnNvEYPLtnbS4yeSd8EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8CH4NAAA//9RvRhH") r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r4, 0x0) 265.260724ms ago: executing program 2 (id=1951): sendto(0xffffffffffffffff, &(0x7f0000000740)="120000001200ad", 0x7, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x150, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x7, 0xb}}, [@TCA_RATE={0x6, 0x5, {0x6, 0x6}}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0x104, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0xec, 0x1, [@m_simple={0xb0, 0x1e, 0x0, 0x0, {{0xb}, {0x54, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x6, 0x3, '-\x00'}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x8, 0x2, 0x20000000, 0x8, 0x13b}}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x0, 0x1, 0x6, 0x2, 0xd}}]}, {0x32, 0x6, "b83be43ce3f0453fdb55a3fbb55ce131cff5300b92efaf853271bbac333e650817fc6029bf8265bde8d86f1542fc"}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_simple={0x38, 0x1e, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x8, 0x3, 'bpf\x00'}]}, {0x4}, {0xc, 0x7, {0x0, 0x79d0f023c2b305dd}}, {0xc, 0x8, {0x3, 0x2}}}}]}]}}, @filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x150}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000b80)=ANY=[@ANYRESOCT, @ANYRES32, @ANYRESOCT=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r0}, 0x10) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}, @TCA_RATE={0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x48801}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@bloom_filter={0x1e, 0x401, 0x1, 0x3ff, 0xa0, 0xffffffffffffffff, 0x1, '\x00', r3, r1, 0x5, 0x1, 0x2, 0x3}, 0x50) fcntl$setsig(r1, 0xa, 0x13) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xc, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000711876000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x288000, 0x0) fcntl$setlease(r1, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0bea514e532f00000c00265050e6032ca602ef398cfea8341aeaee2d9a24e2f83dd1db50e0343a95ee1201e7a355aeb2e24018aa22d23552427cc6b89d72a98b032d749e0fee05ceae7130767ecd24c6abd1aa439e361e65de58ad3d2c9a1c7517e4a82aae0cbe21bc74118f18a34081ff61"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0xffffe776, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1004}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r5, 0x0, 0x3}, 0x18) r6 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r6, 0x29, 0x22, &(0x7f0000000080)={{0xa, 0x4e24, 0x101, @empty}, {0xa, 0x4e22, 0x0, @dev}, 0x0, {[0x0, 0x0, 0x0, 0x0, 0x899, 0x1]}}, 0x5c) truncate(&(0x7f0000000040)='./file0\x00', 0x0) fcntl$setlease(r1, 0x400, 0x2) r7 = socket(0x10, 0x803, 0x0) sendto(r7, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r7, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'ip6_vti0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x2000008, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x40}}, 0x0) 169.776054ms ago: executing program 1 (id=1952): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000300)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000002cc0)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16, @ANYBLOB="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", @ANYBLOB="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", @ANYRES64=0x0, @ANYRESHEX], 0x8, 0x2ee, &(0x7f00000029c0)="$eJzs3E1PE10UwPHTF0pbAmXx5DGaGG50o5sJVNdKYyAxNpEgNb4kJgNMtenYkk6DqTGiK7fGD+GCsGRHonwBNu5048YdGxMXsjCO6XSGQjsUKaVF+P8SMoc590zvbQs5t2HYvPf2aT5raVm9LMGokoCIyJbIsATFE3CPQSeOyE6v5PLAj8/n79x/cCuVTk9MKzWZmrmSVEoNjXx49iLmDlvrl43hR5vfk982/t84u/l75knOUjlLFYplpavZ4teyPmsaaj5n5TWlpkxDtwyVK1hGqZYv1vJZs7iwUFF6YX4wvlAyLEvphYrKGxVVLqpyqaJCj/VcQWmapgbjgv1klqen9VSbxXMdngyOSKmU0kMiEmvKZJZ7MiEAANBTjf1/UFQn+/+VC+vlgburQ27/vxbx6/+vfqlda1f/HxUR3/7fe3zf/l8/WP/f3BGdLofq/3E8jESaTgXqYTVZSulx9+fX8frhyqgT0P8DAAAAAAAAAAAAAAAAAAAAAPAv2LLthG3bCe/offWLSFREvO99SkMicr0HU0YHHeL1xwlQv3EvPCRivlnMLGZqR3fAuoiYYsioJOSX835wVWPvziNVNSwfzSW3fmkxE3IyqazknPoxSfRJY71tT95MT4ypmt31fRLfWZ+UhPznX5/0rY/IpYs76jVJyKc5KYop88486vUvx5S6cTvdUB9zxgEAAAAAcBJoapvv/l3T9srX6rf3142fD4Tq++tR3/15WM6Fe7t2AAAAAABOC6vyPK+bplFqEcRk/zHtB+EjurK3wr+t8v6W4ehW2iLwHnxXKuqe7PjTEjjA07JHEJR2qkaqq1E+qaa1twq8j432GiNT491/BZ3gzLv3Pzt3wWur0X1W2n4Qav0G6OvW7x8AAAAA3VNv+r0z472dEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAp1A3/jtar9cIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHBd/AgAA//+NfwN1") r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r2, &(0x7f0000000140)='2', 0xfdef, 0xe7c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) fsopen(&(0x7f0000000600)='v7\x00', 0x1) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x17) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4e93, 0x18445, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0xc0000000000000, 0xfffe}, 0x8080, 0xa9, 0x80000000, 0x5, 0x400000a5, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000180), &(0x7f0000000340)='system_u:object_r:fixed_disk_device_t:s0\x00', 0x29, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sys_enter\x00', r3}, 0x10) r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) mincore(&(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f00000002c0)=""/47) fsconfig$FSCONFIG_SET_BINARY(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f00000001c0), 0x5400, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r5, 0x10, &(0x7f0000000580)={0x9, 0x0, &(0x7f0000000480)=[{&(0x7f0000000380)=""/149, 0x95}, {&(0x7f0000000440)=""/5, 0x5}], &(0x7f0000000540)=[0x4, 0x2], 0x2}, 0x20) futimesat(0xffffffffffffffff, 0x0, 0x0) shutdown(r1, 0x1) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f00000000c0)={0x0, 0x1ff}, 0x8) socket(0x10, 0x803, 0x0) 116.044459ms ago: executing program 2 (id=1953): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ustat(0x9, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000004c0)={'ip6_vti0\x00', 0x0}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) getpgrp(0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000fc0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000f2ffffff00000000ff000000850000002a000000850000005000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) capget(0x0, 0xffffffffffffffff) 0s ago: executing program 2 (id=1954): sendto(0xffffffffffffffff, &(0x7f0000000740)="120000001200ad", 0x7, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x150, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x7, 0xb}}, [@TCA_RATE={0x6, 0x5, {0x6, 0x6}}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0x104, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0xec, 0x1, [@m_simple={0xb0, 0x1e, 0x0, 0x0, {{0xb}, {0x54, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x6, 0x3, '-\x00'}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x8, 0x2, 0x20000000, 0x8, 0x13b}}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x0, 0x1, 0x6, 0x2, 0xd}}]}, {0x32, 0x6, "b83be43ce3f0453fdb55a3fbb55ce131cff5300b92efaf853271bbac333e650817fc6029bf8265bde8d86f1542fc"}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_simple={0x38, 0x1e, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x8, 0x3, 'bpf\x00'}]}, {0x4}, {0xc, 0x7, {0x0, 0x79d0f023c2b305dd}}, {0xc, 0x8, {0x3, 0x2}}}}]}]}}, @filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x150}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000b80)=ANY=[@ANYRESOCT, @ANYRES32, @ANYRESOCT=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r0}, 0x10) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}, @TCA_RATE={0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x48801}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@bloom_filter={0x1e, 0x401, 0x1, 0x3ff, 0xa0, 0xffffffffffffffff, 0x1, '\x00', r3, r1, 0x5, 0x1, 0x2, 0x3}, 0x50) fcntl$setsig(r1, 0xa, 0x13) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xc, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000711876000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x288000, 0x0) fcntl$setlease(r1, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', 0xffffffffffffffff, 0x0, 0x3}, 0x18) socket$igmp6(0xa, 0x3, 0x3a) truncate(&(0x7f0000000040)='./file0\x00', 0x0) fcntl$setlease(r1, 0x400, 0x2) r4 = socket(0x10, 0x803, 0x0) recvmmsg(r4, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'ip6_vti0\x00'}) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f00000006c0)={0x0, @remote, @initdev}, &(0x7f0000000780)=0xc) kernel console output (not intermixed with test programs): d(11) [ 123.042759][ T7204] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 123.054022][ T7204] vhci_hcd vhci_hcd.0: Device attached [ 123.082442][ T7205] vhci_hcd: connection closed [ 123.084178][ T295] vhci_hcd: stop threads [ 123.098320][ T295] vhci_hcd: release socket [ 123.107097][ T295] vhci_hcd: disconnect device [ 123.140857][ T7212] serio: Serial port ptm0 [ 123.201817][ T7216] loop4: detected capacity change from 0 to 128 [ 123.288147][ T7224] veth0: entered promiscuous mode [ 123.295995][ T7224] veth0: left promiscuous mode [ 123.425015][ T7227] loop4: detected capacity change from 0 to 2048 [ 123.457378][ T7227] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 123.559103][ T7227] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 123.634057][ T7227] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 434 with max blocks 18 with error 28 [ 123.649041][ T7227] EXT4-fs (loop4): This should not happen!! Data will be lost [ 123.649041][ T7227] [ 123.663622][ T7227] EXT4-fs (loop4): Total free blocks count 0 [ 123.672987][ T7227] EXT4-fs (loop4): Free/Dirty block details [ 123.682829][ T7227] EXT4-fs (loop4): free_blocks=2415919104 [ 123.688777][ T7227] EXT4-fs (loop4): dirty_blocks=464 [ 123.697909][ T7227] EXT4-fs (loop4): Block reservation details [ 123.712683][ T7227] EXT4-fs (loop4): i_reserved_data_blocks=29 [ 123.894196][ T7248] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1350'. [ 123.894304][ T7248] netlink: 11 bytes leftover after parsing attributes in process `syz.1.1350'. [ 123.936816][ T7250] loop0: detected capacity change from 0 to 128 [ 123.946527][ T7248] bridge6: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 124.243008][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 124.402021][ T7270] veth0: entered promiscuous mode [ 124.410519][ T7270] veth0: left promiscuous mode [ 124.452780][ T7272] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1359'. [ 124.471885][ T7272] netlink: 11 bytes leftover after parsing attributes in process `syz.3.1359'. [ 124.485112][ T7276] serio: Serial port ptm0 [ 124.502575][ T7272] bridge3: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 124.516811][ T7274] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1360'. [ 124.540096][ T7274] loop0: detected capacity change from 0 to 2048 [ 124.547378][ T7279] loop2: detected capacity change from 0 to 512 [ 124.575266][ T7279] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 124.581364][ T7274] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 124.594022][ T7279] ext4 filesystem being mounted at /286/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 124.623811][ T7279] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.717472][ T7277] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 124.736851][ T7277] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1812 with error 28 [ 124.754278][ T7277] EXT4-fs (loop0): This should not happen!! Data will be lost [ 124.754278][ T7277] [ 124.768644][ T7277] EXT4-fs (loop0): Total free blocks count 0 [ 124.783158][ T7277] EXT4-fs (loop0): Free/Dirty block details [ 124.792967][ T7277] EXT4-fs (loop0): free_blocks=2415919104 [ 124.798768][ T7277] EXT4-fs (loop0): dirty_blocks=1824 [ 124.807877][ T7277] EXT4-fs (loop0): Block reservation details [ 124.817744][ T7277] EXT4-fs (loop0): i_reserved_data_blocks=114 [ 124.902068][ T7290] loop1: detected capacity change from 0 to 512 [ 124.916807][ T7291] loop4: detected capacity change from 0 to 256 [ 124.917677][ T7291] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 124.918225][ T7291] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 125.443001][ T7296] loop3: detected capacity change from 0 to 2048 [ 125.466653][ T7296] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 125.575262][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 125.634740][ T7296] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 125.665130][ T7296] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 62 with max blocks 126 with error 28 [ 125.665169][ T7296] EXT4-fs (loop3): This should not happen!! Data will be lost [ 125.665169][ T7296] [ 125.665182][ T7296] EXT4-fs (loop3): Total free blocks count 0 [ 125.665234][ T7296] EXT4-fs (loop3): Free/Dirty block details [ 125.665250][ T7296] EXT4-fs (loop3): free_blocks=2415919104 [ 125.665263][ T7296] EXT4-fs (loop3): dirty_blocks=192 [ 125.665327][ T7296] EXT4-fs (loop3): Block reservation details [ 125.665343][ T7296] EXT4-fs (loop3): i_reserved_data_blocks=12 [ 125.781096][ T7311] loop2: detected capacity change from 0 to 128 [ 125.807780][ T7309] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1366'. [ 125.814218][ T7311] bio_check_eod: 48 callbacks suppressed [ 125.814236][ T7311] syz.2.1368: attempt to access beyond end of device [ 125.814236][ T7311] loop2: rw=2049, sector=153, nr_sectors = 8 limit=128 [ 125.814277][ T7311] syz.2.1368: attempt to access beyond end of device [ 125.814277][ T7311] loop2: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 125.814428][ T7311] syz.2.1368: attempt to access beyond end of device [ 125.814428][ T7311] loop2: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 125.814519][ T7311] syz.2.1368: attempt to access beyond end of device [ 125.814519][ T7311] loop2: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 125.814634][ T7311] syz.2.1368: attempt to access beyond end of device [ 125.814634][ T7311] loop2: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 125.814679][ T7311] syz.2.1368: attempt to access beyond end of device [ 125.814679][ T7311] loop2: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 125.814779][ T7311] syz.2.1368: attempt to access beyond end of device [ 125.814779][ T7311] loop2: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 125.814845][ T7311] syz.2.1368: attempt to access beyond end of device [ 125.814845][ T7311] loop2: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 125.814891][ T7311] syz.2.1368: attempt to access beyond end of device [ 125.814891][ T7311] loop2: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 125.815006][ T7311] syz.2.1368: attempt to access beyond end of device [ 125.815006][ T7311] loop2: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 125.975066][ T7309] loop4: detected capacity change from 0 to 2048 [ 125.996801][ T7327] veth0: entered promiscuous mode [ 126.001942][ T7327] veth0: left promiscuous mode [ 126.026598][ T7325] loop2: detected capacity change from 0 to 512 [ 126.037818][ T7309] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 126.136087][ T7325] EXT4-fs (loop2): too many log groups per flexible block group [ 126.240479][ T7325] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 126.253863][ T7325] EXT4-fs (loop2): mount failed [ 126.271159][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 126.338991][ T7309] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 126.444052][ T7309] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 412 with error 28 [ 126.463696][ T7309] EXT4-fs (loop4): This should not happen!! Data will be lost [ 126.463696][ T7309] [ 126.465883][ T7344] veth0: entered promiscuous mode [ 126.483036][ T7309] EXT4-fs (loop4): Total free blocks count 0 [ 126.492879][ T7309] EXT4-fs (loop4): Free/Dirty block details [ 126.493343][ T7341] loop3: detected capacity change from 0 to 128 [ 126.498997][ T7309] EXT4-fs (loop4): free_blocks=2415919104 [ 126.499046][ T7309] EXT4-fs (loop4): dirty_blocks=416 [ 126.499061][ T7309] EXT4-fs (loop4): Block reservation details [ 126.499075][ T7309] EXT4-fs (loop4): i_reserved_data_blocks=26 [ 126.567511][ T7344] veth0: left promiscuous mode [ 126.729109][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 126.750728][ T7359] loop2: detected capacity change from 0 to 512 [ 126.758244][ T7359] ext4: Bad value for 'stripe' [ 126.767894][ T7358] loop3: detected capacity change from 0 to 128 [ 126.783141][ T7355] loop2: detected capacity change from 0 to 2048 [ 126.867606][ T5804] Alternate GPT is invalid, using primary GPT. [ 126.880785][ T7362] serio: Serial port ptm0 [ 126.884901][ T5804] loop2: p2 p3 p7 [ 126.931528][ T7355] Alternate GPT is invalid, using primary GPT. [ 126.938051][ T7355] loop2: p2 p3 p7 [ 126.945995][ T30] kauditd_printk_skb: 427 callbacks suppressed [ 126.946014][ T30] audit: type=1326 audit(1760069526.571:11596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7361 comm="syz.4.1383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fe2b0eec9 code=0x7ffc0000 [ 127.003200][ T30] audit: type=1326 audit(1760069526.571:11597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7361 comm="syz.4.1383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f8fe2b0eec9 code=0x7ffc0000 [ 127.028670][ T30] audit: type=1326 audit(1760069526.571:11598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7361 comm="syz.4.1383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fe2b0eec9 code=0x7ffc0000 [ 127.052834][ T30] audit: type=1326 audit(1760069526.571:11599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7361 comm="syz.4.1383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f8fe2b0eec9 code=0x7ffc0000 [ 127.078660][ T30] audit: type=1326 audit(1760069526.571:11600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7361 comm="syz.4.1383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fe2b0eec9 code=0x7ffc0000 [ 127.105561][ T30] audit: type=1326 audit(1760069526.571:11601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7361 comm="syz.4.1383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7f8fe2b0eec9 code=0x7ffc0000 [ 127.132513][ T30] audit: type=1326 audit(1760069526.571:11602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7361 comm="syz.4.1383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fe2b0eec9 code=0x7ffc0000 [ 127.158824][ T30] audit: type=1326 audit(1760069526.571:11603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7361 comm="syz.4.1383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=5 compat=0 ip=0x7f8fe2b0eec9 code=0x7ffc0000 [ 127.185290][ T30] audit: type=1326 audit(1760069526.571:11604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7361 comm="syz.4.1383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fe2b0eec9 code=0x7ffc0000 [ 127.210777][ T30] audit: type=1326 audit(1760069526.571:11605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7361 comm="syz.4.1383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f8fe2b0eec9 code=0x7ffc0000 [ 127.247970][ T7375] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1385'. [ 127.292699][ T7377] loop2: detected capacity change from 0 to 1024 [ 127.297730][ T7375] netlink: 11 bytes leftover after parsing attributes in process `syz.3.1385'. [ 127.324655][ T5979] udevd[5979]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory [ 127.324622][ T5861] udevd[5861]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 127.337468][ T5804] udevd[5804]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 127.351480][ T7377] EXT4-fs: Ignoring removed orlov option [ 127.372548][ T7377] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 127.390705][ T7377] ext4 filesystem being mounted at /292/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 127.443020][ T7375] bridge4: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 127.456282][ T5979] udevd[5979]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory [ 127.468445][ T5861] udevd[5861]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 127.486918][ T5804] udevd[5804]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 127.533202][ T7384] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1388'. [ 127.582007][ T60] EXT4-fs error (device loop2): ext4_map_blocks:814: inode #15: comm kworker/u8:4: lblock 0 mapped to illegal pblock 0 (length 6) [ 127.606189][ T60] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 127.623799][ T60] EXT4-fs (loop2): This should not happen!! Data will be lost [ 127.623799][ T60] [ 127.664888][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 127.756679][ T7389] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 127.763714][ T7389] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 127.776422][ T7389] vhci_hcd vhci_hcd.0: Device attached [ 127.791718][ T7387] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1390'. [ 127.795233][ T7393] vhci_hcd: connection closed [ 127.806437][ T295] vhci_hcd: stop threads [ 127.815888][ T295] vhci_hcd: release socket [ 127.820468][ T295] vhci_hcd: disconnect device [ 127.859045][ T7387] loop0: detected capacity change from 0 to 2048 [ 127.928607][ T7387] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 127.963177][ T7403] loop1: detected capacity change from 0 to 128 [ 128.077317][ T7395] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 128.097823][ T7395] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1418 with error 28 [ 128.111906][ T7395] EXT4-fs (loop0): This should not happen!! Data will be lost [ 128.111906][ T7395] [ 128.123446][ T7395] EXT4-fs (loop0): Total free blocks count 0 [ 128.131259][ T7395] EXT4-fs (loop0): Free/Dirty block details [ 128.137476][ T7395] EXT4-fs (loop0): free_blocks=2415919104 [ 128.144714][ T7395] EXT4-fs (loop0): dirty_blocks=1424 [ 128.151491][ T7395] EXT4-fs (loop0): Block reservation details [ 128.157586][ T7395] EXT4-fs (loop0): i_reserved_data_blocks=89 [ 128.205496][ T7414] loop3: detected capacity change from 0 to 128 [ 128.408343][ T7424] loop2: detected capacity change from 0 to 512 [ 128.415184][ T7421] loop1: detected capacity change from 0 to 128 [ 128.458135][ T7424] EXT4-fs (loop2): too many log groups per flexible block group [ 128.458230][ T7424] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 128.458329][ T7424] EXT4-fs (loop2): mount failed [ 128.627062][ T7432] loop3: detected capacity change from 0 to 2048 [ 128.656935][ T7432] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 128.718435][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 128.846412][ T7454] loop4: detected capacity change from 0 to 1024 [ 128.876108][ T7454] EXT4-fs: Ignoring removed orlov option [ 128.892415][ T7437] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 128.918041][ T7437] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 616 with error 28 [ 128.935945][ T7437] EXT4-fs (loop3): This should not happen!! Data will be lost [ 128.935945][ T7437] [ 128.952965][ T7437] EXT4-fs (loop3): Total free blocks count 0 [ 128.953685][ T7454] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 128.964316][ T7437] EXT4-fs (loop3): Free/Dirty block details [ 128.974286][ T7454] ext4 filesystem being mounted at /292/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 129.004064][ T7437] EXT4-fs (loop3): free_blocks=2415919104 [ 129.015051][ T7437] EXT4-fs (loop3): dirty_blocks=624 [ 129.025079][ T7437] EXT4-fs (loop3): Block reservation details [ 129.031282][ T7437] EXT4-fs (loop3): i_reserved_data_blocks=39 [ 129.051555][ T7465] loop1: detected capacity change from 0 to 512 [ 129.064916][ T7465] ext4: Bad value for 'stripe' [ 129.076970][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 129.123458][ T7465] loop1: detected capacity change from 0 to 2048 [ 129.137560][ T7471] xt_hashlimit: max too large, truncated to 1048576 [ 129.138800][ T7469] veth0: entered promiscuous mode [ 129.173582][ T7469] veth0: left promiscuous mode [ 129.255168][ T7465] Alternate GPT is invalid, using primary GPT. [ 129.267959][ T7465] loop1: p2 p3 p7 [ 129.305675][ T7483] loop2: detected capacity change from 0 to 512 [ 129.323414][ T7480] __nla_validate_parse: 2 callbacks suppressed [ 129.323431][ T7480] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1414'. [ 129.372323][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 129.405473][ T7483] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1415: bg 0: block 248: padding at end of block bitmap is not set [ 129.435485][ T7483] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.1415: Failed to acquire dquot type 1 [ 129.449950][ T7483] EXT4-fs (loop2): 1 truncate cleaned up [ 129.471214][ T7483] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.501775][ T7483] ext4 filesystem being mounted at /300/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 129.520877][ T7483] EXT4-fs error (device loop2): ext4_lookup:1791: inode #2: comm syz.2.1415: deleted inode referenced: 12 [ 129.595904][ T7493] serio: Serial port ptm0 [ 129.605811][ T7483] syz.2.1415 (7483) used greatest stack depth: 9200 bytes left [ 129.632728][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.698060][ T7501] loop1: detected capacity change from 0 to 512 [ 129.731951][ T7501] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.746597][ T5861] udevd[5861]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 129.750668][ T5771] udevd[5771]: inotify_add_watch(7, /dev/loop1p7, 10) failed: No such file or directory [ 129.768886][ T7491] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1419'. [ 129.779948][ T7501] ext4 filesystem being mounted at /303/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 129.801056][ T7501] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.814843][ T5803] udevd[5803]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 129.895418][ T7512] loop4: detected capacity change from 0 to 128 [ 129.916632][ T7491] loop0: detected capacity change from 0 to 2048 [ 129.994113][ T7491] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 130.045497][ T7522] loop3: detected capacity change from 0 to 512 [ 130.244513][ T7529] loop4: detected capacity change from 0 to 128 [ 130.395564][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 130.457568][ T7540] loop4: detected capacity change from 0 to 512 [ 130.508871][ T7543] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1431'. [ 130.564569][ T7546] FAULT_INJECTION: forcing a failure. [ 130.564569][ T7546] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 130.581712][ T7546] CPU: 0 UID: 0 PID: 7546 Comm: syz.2.1434 Not tainted syzkaller #0 PREEMPT(voluntary) [ 130.581745][ T7546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 130.581763][ T7546] Call Trace: [ 130.581772][ T7546] [ 130.581814][ T7546] __dump_stack+0x1d/0x30 [ 130.581843][ T7546] dump_stack_lvl+0xe8/0x140 [ 130.581868][ T7546] dump_stack+0x15/0x1b [ 130.581885][ T7546] should_fail_ex+0x265/0x280 [ 130.581937][ T7546] should_fail+0xb/0x20 [ 130.582030][ T7546] should_fail_usercopy+0x1a/0x20 [ 130.582126][ T7546] _copy_from_iter+0xd2/0xe80 [ 130.582148][ T7546] ? __build_skb_around+0x1ab/0x200 [ 130.582173][ T7546] ? __alloc_skb+0x223/0x320 [ 130.582210][ T7546] netlink_sendmsg+0x471/0x6b0 [ 130.582307][ T7546] ? __pfx_netlink_sendmsg+0x10/0x10 [ 130.582338][ T7546] __sock_sendmsg+0x142/0x180 [ 130.582366][ T7546] ____sys_sendmsg+0x31e/0x4e0 [ 130.582475][ T7546] ___sys_sendmsg+0x17b/0x1d0 [ 130.582523][ T7546] __x64_sys_sendmsg+0xd4/0x160 [ 130.582568][ T7546] x64_sys_call+0x191e/0x3000 [ 130.582596][ T7546] do_syscall_64+0xd2/0x200 [ 130.582706][ T7546] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 130.582743][ T7546] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 130.582771][ T7546] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.582828][ T7546] RIP: 0033:0x7fec38a6eec9 [ 130.582847][ T7546] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 130.582872][ T7546] RSP: 002b:00007fec374d7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 130.582966][ T7546] RAX: ffffffffffffffda RBX: 00007fec38cc5fa0 RCX: 00007fec38a6eec9 [ 130.582980][ T7546] RDX: 0000000000000000 RSI: 0000200000000500 RDI: 0000000000000003 [ 130.582996][ T7546] RBP: 00007fec374d7090 R08: 0000000000000000 R09: 0000000000000000 [ 130.583009][ T7546] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 130.583021][ T7546] R13: 00007fec38cc6038 R14: 00007fec38cc5fa0 R15: 00007ffc670bb388 [ 130.583041][ T7546] [ 131.237155][ T7563] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1441'. [ 131.268228][ T7565] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1442'. [ 131.335977][ T7566] loop0: detected capacity change from 0 to 2048 [ 131.402816][ T7565] loop3: detected capacity change from 0 to 512 [ 131.472470][ T7576] loop1: detected capacity change from 0 to 128 [ 131.491249][ T7566] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 131.554043][ T7579] loop2: detected capacity change from 0 to 512 [ 131.597143][ T7563] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 131.634528][ T7579] ext4: Bad value for 'stripe' [ 131.641834][ T7563] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 126 with error 28 [ 131.641872][ T7563] EXT4-fs (loop0): This should not happen!! Data will be lost [ 131.641872][ T7563] [ 131.641890][ T7563] EXT4-fs (loop0): Total free blocks count 0 [ 131.641960][ T7563] EXT4-fs (loop0): Free/Dirty block details [ 131.641976][ T7563] EXT4-fs (loop0): free_blocks=2415919104 [ 131.641994][ T7563] EXT4-fs (loop0): dirty_blocks=128 [ 131.642008][ T7563] EXT4-fs (loop0): Block reservation details [ 131.642019][ T7563] EXT4-fs (loop0): i_reserved_data_blocks=8 [ 131.681810][ T7576] bio_check_eod: 170 callbacks suppressed [ 131.681901][ T7576] syz.1.1445: attempt to access beyond end of device [ 131.681901][ T7576] loop1: rw=2049, sector=153, nr_sectors = 8 limit=128 [ 131.778975][ T7576] syz.1.1445: attempt to access beyond end of device [ 131.778975][ T7576] loop1: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 131.811157][ T7565] EXT4-fs error (device loop3): ext4_do_update_inode:5624: inode #16: comm syz.3.1442: corrupted inode contents [ 131.828028][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 131.878950][ T7588] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1446'. [ 131.897369][ T7576] syz.1.1445: attempt to access beyond end of device [ 131.897369][ T7576] loop1: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 131.945225][ T7565] EXT4-fs error (device loop3): ext4_dirty_inode:6509: inode #16: comm syz.3.1442: mark_inode_dirty error [ 131.964030][ T7594] veth0: entered promiscuous mode [ 131.973155][ T7594] veth0: left promiscuous mode [ 131.983808][ T30] kauditd_printk_skb: 353 callbacks suppressed [ 131.983826][ T30] audit: type=1326 audit(1760069531.611:11957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7597 comm="syz.2.1449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec38a6eec9 code=0x7ffc0000 [ 131.992655][ T7576] syz.1.1445: attempt to access beyond end of device [ 131.992655][ T7576] loop1: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 131.992719][ T7576] syz.1.1445: attempt to access beyond end of device [ 131.992719][ T7576] loop1: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 131.992799][ T7576] syz.1.1445: attempt to access beyond end of device [ 131.992799][ T7576] loop1: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 131.992861][ T7576] syz.1.1445: attempt to access beyond end of device [ 131.992861][ T7576] loop1: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 131.992910][ T7576] syz.1.1445: attempt to access beyond end of device [ 131.992910][ T7576] loop1: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 131.992959][ T7576] syz.1.1445: attempt to access beyond end of device [ 131.992959][ T7576] loop1: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 131.993019][ T7576] syz.1.1445: attempt to access beyond end of device [ 131.993019][ T7576] loop1: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 131.993109][ T7576] buffer_io_error: 4 callbacks suppressed [ 131.993150][ T7576] Buffer I/O error on dev loop1, logical block 337, lost async page write [ 131.993174][ T7576] Buffer I/O error on dev loop1, logical block 338, lost async page write [ 131.993195][ T7576] Buffer I/O error on dev loop1, logical block 339, lost async page write [ 131.993219][ T7576] Buffer I/O error on dev loop1, logical block 340, lost async page write [ 131.993283][ T7576] Buffer I/O error on dev loop1, logical block 341, lost async page write [ 131.993305][ T7576] Buffer I/O error on dev loop1, logical block 342, lost async page write [ 131.993381][ T7576] Buffer I/O error on dev loop1, logical block 343, lost async page write [ 131.995603][ T7565] EXT4-fs error (device loop3): ext4_do_update_inode:5624: inode #16: comm syz.3.1442: corrupted inode contents [ 132.113207][ T30] audit: type=1326 audit(1760069531.611:11958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7597 comm="syz.2.1449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec38a6eec9 code=0x7ffc0000 [ 132.168845][ T7565] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #16: comm syz.3.1442: mark_inode_dirty error [ 132.183376][ T7565] EXT4-fs error (device loop3): ext4_do_update_inode:5624: inode #16: comm syz.3.1442: corrupted inode contents [ 132.184471][ T7565] EXT4-fs error (device loop3) in ext4_orphan_del:301: Corrupt filesystem [ 132.184661][ T7565] EXT4-fs error (device loop3): ext4_do_update_inode:5624: inode #16: comm syz.3.1442: corrupted inode contents [ 132.184790][ T7565] EXT4-fs error (device loop3): ext4_truncate:4637: inode #16: comm syz.3.1442: mark_inode_dirty error [ 132.184912][ T7565] EXT4-fs error (device loop3) in ext4_process_orphan:343: Corrupt filesystem [ 132.185784][ T7565] EXT4-fs (loop3): 1 truncate cleaned up [ 132.186245][ T7565] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.203666][ T30] audit: type=1326 audit(1760069531.611:11959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7597 comm="syz.2.1449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fec38a6d710 code=0x7ffc0000 [ 132.341079][ T7565] ext4 filesystem being mounted at /261/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 132.346683][ T30] audit: type=1326 audit(1760069531.611:11960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7597 comm="syz.2.1449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fec38a6d710 code=0x7ffc0000 [ 132.483364][ T30] audit: type=1326 audit(1760069531.611:11961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7597 comm="syz.2.1449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec38a6eec9 code=0x7ffc0000 [ 132.512814][ T30] audit: type=1326 audit(1760069531.611:11962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7597 comm="syz.2.1449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec38a6eec9 code=0x7ffc0000 [ 132.542799][ T30] audit: type=1326 audit(1760069531.611:11963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7597 comm="syz.2.1449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=217 compat=0 ip=0x7fec38a6eec9 code=0x7ffc0000 [ 132.572916][ T30] audit: type=1326 audit(1760069531.611:11964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7597 comm="syz.2.1449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec38a6eec9 code=0x7ffc0000 [ 132.603318][ T30] audit: type=1326 audit(1760069531.611:11965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7597 comm="syz.2.1449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec38a6eec9 code=0x7ffc0000 [ 132.632860][ T30] audit: type=1326 audit(1760069531.621:11966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7573 comm="syz.1.1445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e5978eec9 code=0x7ffc0000 [ 132.671496][ T41] EXT4-fs error (device loop3): ext4_release_dquot:6981: comm kworker/u8:2: Failed to release dquot type 1 [ 132.734002][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.804614][ T7613] loop0: detected capacity change from 0 to 512 [ 132.962854][ T7621] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1457'. [ 133.004444][ T7624] loop1: detected capacity change from 0 to 512 [ 133.017270][ T7624] ext4: Bad value for 'stripe' [ 133.071104][ T7626] loop2: detected capacity change from 0 to 2048 [ 133.075735][ T7624] loop1: detected capacity change from 0 to 2048 [ 133.174712][ T7626] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 133.278936][ T5804] Alternate GPT is invalid, using primary GPT. [ 133.286880][ T5804] loop1: p2 p3 p7 [ 133.316304][ T7624] Alternate GPT is invalid, using primary GPT. [ 133.327393][ T7624] loop1: p2 p3 p7 [ 133.421942][ T7621] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 133.474290][ T7621] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 582 with error 28 [ 133.488820][ T7621] EXT4-fs (loop2): This should not happen!! Data will be lost [ 133.488820][ T7621] [ 133.499489][ T7621] EXT4-fs (loop2): Total free blocks count 0 [ 133.505762][ T7621] EXT4-fs (loop2): Free/Dirty block details [ 133.512267][ T7621] EXT4-fs (loop2): free_blocks=2415919104 [ 133.518392][ T7621] EXT4-fs (loop2): dirty_blocks=592 [ 133.523934][ T7621] EXT4-fs (loop2): Block reservation details [ 133.531522][ T7621] EXT4-fs (loop2): i_reserved_data_blocks=37 [ 133.615608][ T5804] udevd[5804]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 133.635703][ T5979] udevd[5979]: inotify_add_watch(7, /dev/loop1p7, 10) failed: No such file or directory [ 133.668480][ T5861] udevd[5861]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 133.698480][ T5861] udevd[5861]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 133.713646][ T5804] udevd[5804]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 133.737512][ T5979] udevd[5979]: inotify_add_watch(7, /dev/loop1p7, 10) failed: No such file or directory [ 133.757749][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 133.783063][ T7650] netlink: 'syz.4.1467': attribute type 7 has an invalid length. [ 133.795407][ T7650] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=7650 comm=syz.4.1467 [ 133.812920][ T7650] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=7650 comm=syz.4.1467 [ 133.980539][ T7660] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1470'. [ 134.733676][ T7682] xt_hashlimit: max too large, truncated to 1048576 [ 134.760907][ T7684] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1480'. [ 134.771414][ T7684] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1480'. [ 135.008247][ T7687] netlink: 'syz.1.1481': attribute type 7 has an invalid length. [ 135.055159][ T7687] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=7687 comm=syz.1.1481 [ 135.069280][ T7687] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=7687 comm=syz.1.1481 [ 135.088896][ T7684] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1480'. [ 135.102651][ T7684] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1480'. [ 135.213256][ T7697] mmap: syz.4.1482 (7697) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 135.233167][ T7684] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1480'. [ 135.246944][ T7684] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1480'. [ 135.366709][ T7703] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 135.373376][ T7703] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 135.386073][ T7703] vhci_hcd vhci_hcd.0: Device attached [ 135.397969][ T7705] vhci_hcd: connection closed [ 135.398161][ T41] vhci_hcd: stop threads [ 135.408968][ T41] vhci_hcd: release socket [ 135.414813][ T41] vhci_hcd: disconnect device [ 135.430778][ T7704] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1486'. [ 135.438234][ T7708] veth0: entered promiscuous mode [ 135.441102][ T7704] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1486'. [ 135.455770][ T7704] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1486'. [ 135.502084][ T7708] veth0: left promiscuous mode [ 135.547413][ T7711] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1487'. [ 135.581231][ T7717] loop2: detected capacity change from 0 to 512 [ 136.223805][ T7736] loop4: detected capacity change from 0 to 128 [ 137.168059][ T7769] loop0: detected capacity change from 0 to 512 [ 137.238697][ T7769] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1504: bg 0: block 248: padding at end of block bitmap is not set [ 137.257591][ T7769] __quota_error: 138 callbacks suppressed [ 137.257608][ T7769] Quota error (device loop0): write_blk: dquota write failed [ 137.276917][ T7769] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 137.291554][ T7769] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.1504: Failed to acquire dquot type 1 [ 137.332823][ T7769] EXT4-fs (loop0): 1 truncate cleaned up [ 137.338942][ T7769] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.356234][ T7769] ext4 filesystem being mounted at /277/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 137.418771][ T7774] loop4: detected capacity change from 0 to 256 [ 137.522387][ T30] audit: type=1400 audit(1760069537.151:12104): avc: denied { mounton } for pid=7773 comm="syz.4.1508" path="/file0" dev="ramfs" ino=18818 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 137.568940][ T7778] veth0: entered promiscuous mode [ 137.586764][ T7778] veth0: left promiscuous mode [ 137.607349][ T30] audit: type=1400 audit(1760069537.191:12105): avc: denied { read } for pid=7775 comm="syz.3.1509" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 137.776983][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.902910][ T30] audit: type=1326 audit(1760069537.521:12106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7790 comm="syz.4.1515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fe2b0eec9 code=0x7ffc0000 [ 137.931786][ T30] audit: type=1326 audit(1760069537.521:12107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7790 comm="syz.4.1515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f8fe2b0eec9 code=0x7ffc0000 [ 137.962360][ T7798] netlink: 'syz.3.1516': attribute type 7 has an invalid length. [ 137.963023][ T7798] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=7798 comm=syz.3.1516 [ 137.975480][ T30] audit: type=1326 audit(1760069537.521:12108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7790 comm="syz.4.1515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fe2b0eec9 code=0x7ffc0000 [ 137.985680][ T7798] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=7798 comm=syz.3.1516 [ 138.036163][ T30] audit: type=1326 audit(1760069537.521:12109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7796 comm="syz.4.1515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f8fe2b41785 code=0x7ffc0000 [ 138.065258][ T30] audit: type=1326 audit(1760069537.521:12110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7790 comm="syz.4.1515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fe2b0eec9 code=0x7ffc0000 [ 138.096430][ T30] audit: type=1326 audit(1760069537.661:12111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7796 comm="syz.4.1515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f8fe2b0eec9 code=0x7ffc0000 [ 138.163842][ T7801] loop0: detected capacity change from 0 to 512 [ 138.253854][ T7801] EXT4-fs (loop0): too many log groups per flexible block group [ 138.267618][ T7801] EXT4-fs (loop0): failed to initialize mballoc (-12) [ 138.318383][ T7801] EXT4-fs (loop0): mount failed [ 138.475827][ T7827] netlink: 'syz.3.1529': attribute type 7 has an invalid length. [ 138.493780][ T7827] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=7827 comm=syz.3.1529 [ 138.506768][ T7827] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=7827 comm=syz.3.1529 [ 138.527724][ T7828] loop2: detected capacity change from 0 to 128 [ 138.566987][ T7828] bio_check_eod: 41 callbacks suppressed [ 138.567079][ T7828] syz.2.1528: attempt to access beyond end of device [ 138.567079][ T7828] loop2: rw=2049, sector=153, nr_sectors = 8 limit=128 [ 138.641354][ T7828] syz.2.1528: attempt to access beyond end of device [ 138.641354][ T7828] loop2: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 138.720753][ T7831] loop3: detected capacity change from 0 to 2048 [ 138.743737][ T7828] syz.2.1528: attempt to access beyond end of device [ 138.743737][ T7828] loop2: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 138.793318][ T7828] syz.2.1528: attempt to access beyond end of device [ 138.793318][ T7828] loop2: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 138.813431][ T7831] Alternate GPT is invalid, using primary GPT. [ 138.821424][ T7831] loop3: p2 p3 p7 [ 138.833471][ T7840] loop4: detected capacity change from 0 to 128 [ 138.847473][ T3001] Alternate GPT is invalid, using primary GPT. [ 138.855016][ T3001] loop3: p2 p3 p7 [ 138.897055][ T7828] syz.2.1528: attempt to access beyond end of device [ 138.897055][ T7828] loop2: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 138.928200][ T7828] syz.2.1528: attempt to access beyond end of device [ 138.928200][ T7828] loop2: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 139.012216][ T5804] udevd[5804]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 139.025925][ T5861] udevd[5861]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 139.033216][ T5979] udevd[5979]: inotify_add_watch(7, /dev/loop3p7, 10) failed: No such file or directory [ 139.060940][ T7828] syz.2.1528: attempt to access beyond end of device [ 139.060940][ T7828] loop2: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 139.130856][ T7853] loop0: detected capacity change from 0 to 512 [ 139.155494][ T7828] syz.2.1528: attempt to access beyond end of device [ 139.155494][ T7828] loop2: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 139.183459][ T7828] syz.2.1528: attempt to access beyond end of device [ 139.183459][ T7828] loop2: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 139.199742][ T7858] loop4: detected capacity change from 0 to 128 [ 139.216950][ T7828] syz.2.1528: attempt to access beyond end of device [ 139.216950][ T7828] loop2: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 139.218101][ T7853] EXT4-fs (loop0): too many log groups per flexible block group [ 139.238334][ T7828] Buffer I/O error on dev loop2, logical block 337, lost async page write [ 139.253673][ T7828] Buffer I/O error on dev loop2, logical block 338, lost async page write [ 139.262626][ T7828] Buffer I/O error on dev loop2, logical block 339, lost async page write [ 139.271850][ T7828] Buffer I/O error on dev loop2, logical block 340, lost async page write [ 139.281971][ T7828] Buffer I/O error on dev loop2, logical block 341, lost async page write [ 139.292599][ T7828] Buffer I/O error on dev loop2, logical block 342, lost async page write [ 139.302469][ T7828] Buffer I/O error on dev loop2, logical block 343, lost async page write [ 139.357793][ T7853] EXT4-fs (loop0): failed to initialize mballoc (-12) [ 139.390545][ T7853] EXT4-fs (loop0): mount failed [ 139.626928][ T7873] xt_hashlimit: max too large, truncated to 1048576 [ 139.698502][ T7882] loop1: detected capacity change from 0 to 512 [ 139.917316][ T7890] FAULT_INJECTION: forcing a failure. [ 139.917316][ T7890] name failslab, interval 1, probability 0, space 0, times 0 [ 139.934412][ T7890] CPU: 0 UID: 0 PID: 7890 Comm: syz.1.1548 Not tainted syzkaller #0 PREEMPT(voluntary) [ 139.934454][ T7890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 139.934469][ T7890] Call Trace: [ 139.934491][ T7890] [ 139.934499][ T7890] __dump_stack+0x1d/0x30 [ 139.934545][ T7890] dump_stack_lvl+0xe8/0x140 [ 139.934570][ T7890] dump_stack+0x15/0x1b [ 139.934592][ T7890] should_fail_ex+0x265/0x280 [ 139.934632][ T7890] should_failslab+0x8c/0xb0 [ 139.934659][ T7890] kmem_cache_alloc_lru_noprof+0x55/0x490 [ 139.934736][ T7890] ? __d_alloc+0x3d/0x340 [ 139.934776][ T7890] __d_alloc+0x3d/0x340 [ 139.934807][ T7890] ? mpol_shared_policy_init+0xbd/0x4c0 [ 139.934908][ T7890] d_alloc_pseudo+0x1e/0x80 [ 139.934948][ T7890] alloc_file_pseudo+0x71/0x160 [ 139.934982][ T7890] __shmem_file_setup+0x1de/0x210 [ 139.935056][ T7890] shmem_file_setup+0x3b/0x50 [ 139.935087][ T7890] __se_sys_memfd_create+0x2c3/0x590 [ 139.935123][ T7890] __x64_sys_memfd_create+0x31/0x40 [ 139.935196][ T7890] x64_sys_call+0x2ac2/0x3000 [ 139.935249][ T7890] do_syscall_64+0xd2/0x200 [ 139.935280][ T7890] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 139.935386][ T7890] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 139.935412][ T7890] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.935445][ T7890] RIP: 0033:0x7f9e5978eec9 [ 139.935497][ T7890] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 139.935522][ T7890] RSP: 002b:00007f9e581f6e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 139.935548][ T7890] RAX: ffffffffffffffda RBX: 0000000000000512 RCX: 00007f9e5978eec9 [ 139.935561][ T7890] RDX: 00007f9e581f6ef0 RSI: 0000000000000000 RDI: 00007f9e59812960 [ 139.935616][ T7890] RBP: 0000200000000380 R08: 00007f9e581f6bb7 R09: 00007f9e581f6e40 [ 139.935633][ T7890] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000080 [ 139.935646][ T7890] R13: 00007f9e581f6ef0 R14: 00007f9e581f6eb0 R15: 0000200000000000 [ 139.935665][ T7890] [ 140.318170][ T7900] loop1: detected capacity change from 0 to 512 [ 140.336278][ T7900] ext4: Bad value for 'stripe' [ 140.356868][ T7900] loop1: detected capacity change from 0 to 2048 [ 140.396357][ T5804] Alternate GPT is invalid, using primary GPT. [ 140.406690][ T5804] loop1: p2 p3 p7 [ 140.780400][ T7911] loop2: detected capacity change from 0 to 2048 [ 140.836026][ T3001] Alternate GPT is invalid, using primary GPT. [ 140.843739][ T3001] loop2: p2 p3 p7 [ 141.206550][ T7911] Alternate GPT is invalid, using primary GPT. [ 141.214409][ T7911] loop2: p2 p3 p7 [ 141.266897][ T3001] Alternate GPT is invalid, using primary GPT. [ 141.277883][ T3001] loop2: p2 p3 p7 [ 141.326128][ T5803] udevd[5803]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 141.335457][ T5861] udevd[5861]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 141.338029][ T5771] udevd[5771]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory [ 141.355592][ T5686] udevd[5686]: inotify_add_watch(7, /dev/loop1p7, 10) failed: No such file or directory [ 141.359752][ T5804] udevd[5804]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 141.374738][ T5979] udevd[5979]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 141.388672][ T5804] udevd[5804]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 141.610528][ T7933] loop2: detected capacity change from 0 to 512 [ 141.617514][ T7933] ext4: Bad value for 'stripe' [ 141.645026][ T7933] loop2: detected capacity change from 0 to 2048 [ 141.685565][ T5804] Alternate GPT is invalid, using primary GPT. [ 141.695451][ T5804] loop2: p2 p3 p7 [ 141.713976][ T7933] Alternate GPT is invalid, using primary GPT. [ 141.721977][ T7933] loop2: p2 p3 p7 [ 141.849944][ T7939] serio: Serial port ptm0 [ 141.908003][ T7945] loop0: detected capacity change from 0 to 512 [ 141.964614][ T7945] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.982527][ T7945] ext4 filesystem being mounted at /291/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 141.997333][ T7945] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.122099][ T7957] netlink: 'syz.1.1572': attribute type 7 has an invalid length. [ 142.131276][ T7957] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=7957 comm=syz.1.1572 [ 142.144672][ T7957] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=7957 comm=syz.1.1572 [ 142.572818][ T7966] serio: Serial port ptm1 [ 142.634728][ T30] kauditd_printk_skb: 242 callbacks suppressed [ 142.634747][ T30] audit: type=1326 audit(1760069542.261:12354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7965 comm="syz.1.1575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e5978eec9 code=0x7ffc0000 [ 142.680404][ T7967] loop1: detected capacity change from 0 to 512 [ 142.732555][ T7967] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.752483][ T30] audit: type=1326 audit(1760069542.301:12355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7965 comm="syz.1.1575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e5978eec9 code=0x7ffc0000 [ 142.778263][ T30] audit: type=1326 audit(1760069542.301:12356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7965 comm="syz.1.1575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f9e5978eec9 code=0x7ffc0000 [ 142.803551][ T30] audit: type=1326 audit(1760069542.301:12357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7965 comm="syz.1.1575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e5978eec9 code=0x7ffc0000 [ 142.829569][ T30] audit: type=1326 audit(1760069542.301:12358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7965 comm="syz.1.1575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f9e5978eec9 code=0x7ffc0000 [ 142.854357][ T30] audit: type=1326 audit(1760069542.301:12359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7965 comm="syz.1.1575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e5978eec9 code=0x7ffc0000 [ 142.880013][ T30] audit: type=1326 audit(1760069542.301:12360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7965 comm="syz.1.1575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7f9e5978eec9 code=0x7ffc0000 [ 142.906708][ T30] audit: type=1326 audit(1760069542.301:12361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7965 comm="syz.1.1575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e5978eec9 code=0x7ffc0000 [ 142.928474][ T7967] ext4 filesystem being mounted at /338/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 142.932347][ T30] audit: type=1326 audit(1760069542.301:12362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7965 comm="syz.1.1575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f9e5978eec9 code=0x7ffc0000 [ 142.932521][ T30] audit: type=1326 audit(1760069542.301:12363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7965 comm="syz.1.1575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e5978eec9 code=0x7ffc0000 [ 143.085687][ T7967] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.244483][ T7986] netlink: 'syz.3.1582': attribute type 7 has an invalid length. [ 143.263853][ T7986] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=7986 comm=syz.3.1582 [ 143.277916][ T7986] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=7986 comm=syz.3.1582 [ 143.333594][ T7991] loop0: detected capacity change from 0 to 512 [ 143.456705][ T8001] serio: Serial port ptm0 [ 143.484990][ T7988] __nla_validate_parse: 5 callbacks suppressed [ 143.485024][ T7988] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1583'. [ 143.524348][ T8008] loop3: detected capacity change from 0 to 512 [ 143.547566][ T8008] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.561426][ T7988] loop2: detected capacity change from 0 to 2048 [ 143.574954][ T8008] ext4 filesystem being mounted at /289/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 143.592128][ T8008] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.636422][ T7988] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 143.718743][ T7988] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 143.741090][ T7988] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1472 with error 28 [ 143.755549][ T7988] EXT4-fs (loop2): This should not happen!! Data will be lost [ 143.755549][ T7988] [ 143.766589][ T8021] serio: Serial port ptm1 [ 143.772679][ T7988] EXT4-fs (loop2): Total free blocks count 0 [ 143.778793][ T7988] EXT4-fs (loop2): Free/Dirty block details [ 143.786136][ T7988] EXT4-fs (loop2): free_blocks=2415919104 [ 143.793531][ T7988] EXT4-fs (loop2): dirty_blocks=1488 [ 143.798935][ T7988] EXT4-fs (loop2): Block reservation details [ 143.806405][ T7988] EXT4-fs (loop2): i_reserved_data_blocks=93 [ 143.930465][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 144.026977][ T8028] loop2: detected capacity change from 0 to 512 [ 144.035933][ T8028] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 144.046575][ T8028] EXT4-fs (loop2): inodes count not valid: 1 vs 32 [ 144.083541][ T8031] loop2: detected capacity change from 0 to 1024 [ 144.093725][ T8031] EXT4-fs: Ignoring removed orlov option [ 144.103493][ T8031] EXT4-fs: Ignoring removed nomblk_io_submit option [ 144.123237][ T8031] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 144.205251][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.338008][ T8037] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1601'. [ 144.581367][ T8051] loop2: detected capacity change from 0 to 512 [ 144.595656][ T8053] loop3: detected capacity change from 0 to 512 [ 144.625619][ T8051] ext4: Bad value for 'stripe' [ 144.662268][ T8053] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1603: bg 0: block 248: padding at end of block bitmap is not set [ 144.678527][ T8053] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.1603: Failed to acquire dquot type 1 [ 144.698200][ T8053] EXT4-fs (loop3): 1 truncate cleaned up [ 144.704637][ T8053] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.717551][ T8053] ext4 filesystem being mounted at /290/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 144.755778][ T8058] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.767776][ T8058] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.813504][ T8058] loop4: detected capacity change from 0 to 1024 [ 144.824250][ T8051] loop2: detected capacity change from 0 to 2048 [ 144.854027][ T8058] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 145.421422][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.433389][ T8051] Alternate GPT is invalid, using primary GPT. [ 145.440395][ T8051] loop2: p2 p3 p7 [ 145.483826][ T8066] loop3: detected capacity change from 0 to 1024 [ 145.497562][ T8066] EXT4-fs: Ignoring removed orlov option [ 145.542082][ T8066] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 145.566367][ T8066] ext4 filesystem being mounted at /291/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 145.624615][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 145.740554][ T8073] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1612'. [ 145.884937][ T8078] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1613'. [ 145.902807][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.521338][ T8094] loop0: detected capacity change from 0 to 128 [ 146.532510][ T8098] loop2: detected capacity change from 0 to 512 [ 146.561582][ T8098] EXT4-fs (loop2): too many log groups per flexible block group [ 146.581193][ T8098] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 146.621101][ T8098] EXT4-fs (loop2): mount failed [ 146.630325][ T8102] tipc: Started in network mode [ 146.635509][ T8102] tipc: Node identity ac14140f, cluster identity 4711 [ 146.644562][ T8102] tipc: New replicast peer: 255.255.255.255 [ 146.652243][ T8102] tipc: Enabled bearer , priority 10 [ 146.807102][ T8110] netlink: 'syz.4.1616': attribute type 7 has an invalid length. [ 146.854896][ T8110] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=8110 comm=syz.4.1616 [ 146.873011][ T8110] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=8110 comm=syz.4.1616 [ 146.902423][ T8114] loop2: detected capacity change from 0 to 2048 [ 146.927255][ T8118] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1625'. [ 146.991793][ T8114] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 147.154802][ T8114] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 147.191927][ T8132] loop1: detected capacity change from 0 to 128 [ 147.202349][ T8114] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 324 with error 28 [ 147.216383][ T8114] EXT4-fs (loop2): This should not happen!! Data will be lost [ 147.216383][ T8114] [ 147.226198][ T8114] EXT4-fs (loop2): Total free blocks count 0 [ 147.233699][ T8114] EXT4-fs (loop2): Free/Dirty block details [ 147.241007][ T8114] EXT4-fs (loop2): free_blocks=2415919104 [ 147.247080][ T8114] EXT4-fs (loop2): dirty_blocks=336 [ 147.253739][ T8114] EXT4-fs (loop2): Block reservation details [ 147.255301][ T8133] serio: Serial port ptm0 [ 147.261429][ T8114] EXT4-fs (loop2): i_reserved_data_blocks=21 [ 147.291186][ T8135] serio: Serial port ptm1 [ 147.321557][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 147.333314][ T8139] serio: Serial port ptm2 [ 147.397861][ T8148] loop4: detected capacity change from 0 to 512 [ 147.405871][ T8147] loop3: detected capacity change from 0 to 512 [ 147.436953][ T8151] loop1: detected capacity change from 0 to 128 [ 147.454249][ T8147] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 147.485132][ T8147] ext4 filesystem being mounted at /296/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 147.508125][ T8148] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 147.527402][ T8147] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.538593][ T8148] ext4 filesystem being mounted at /336/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 147.539090][ T8148] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.629634][ T8155] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1636'. [ 147.644107][ T30] kauditd_printk_skb: 409 callbacks suppressed [ 147.644187][ T30] audit: type=1326 audit(1760069547.261:12771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8154 comm="syz.2.1636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec38a6eec9 code=0x7ffc0000 [ 147.652723][ T8155] loop2: detected capacity change from 0 to 2048 [ 147.693024][ T8155] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 147.708061][ T30] audit: type=1326 audit(1760069547.261:12772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8154 comm="syz.2.1636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec38a6eec9 code=0x7ffc0000 [ 147.737179][ T30] audit: type=1326 audit(1760069547.271:12773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8154 comm="syz.2.1636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fec38a6eec9 code=0x7ffc0000 [ 147.766432][ T30] audit: type=1326 audit(1760069547.271:12774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8154 comm="syz.2.1636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fec38a6ef03 code=0x7ffc0000 [ 147.800534][ T3399] tipc: Node number set to 2886997007 [ 147.805709][ T30] audit: type=1326 audit(1760069547.271:12775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8154 comm="syz.2.1636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fec38a6d97f code=0x7ffc0000 [ 147.838663][ T30] audit: type=1326 audit(1760069547.281:12776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8154 comm="syz.2.1636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fec38a6ef57 code=0x7ffc0000 [ 147.873384][ T30] audit: type=1326 audit(1760069547.281:12777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8154 comm="syz.2.1636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fec38a6d710 code=0x7ffc0000 [ 147.903031][ T30] audit: type=1326 audit(1760069547.281:12778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8154 comm="syz.2.1636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fec38a6eacb code=0x7ffc0000 [ 147.903073][ T30] audit: type=1326 audit(1760069547.281:12779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8154 comm="syz.2.1636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fec38a6db2a code=0x7ffc0000 [ 147.903109][ T30] audit: type=1326 audit(1760069547.281:12780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8154 comm="syz.2.1636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fec38a6db2a code=0x7ffc0000 [ 147.932409][ T8157] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 147.932693][ T8157] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1952 with error 28 [ 147.932726][ T8157] EXT4-fs (loop2): This should not happen!! Data will be lost [ 147.932726][ T8157] [ 147.932743][ T8157] EXT4-fs (loop2): Total free blocks count 0 [ 147.932789][ T8157] EXT4-fs (loop2): Free/Dirty block details [ 147.932804][ T8157] EXT4-fs (loop2): free_blocks=2415919104 [ 147.932822][ T8157] EXT4-fs (loop2): dirty_blocks=1968 [ 147.932898][ T8157] EXT4-fs (loop2): Block reservation details [ 147.932913][ T8157] EXT4-fs (loop2): i_reserved_data_blocks=123 [ 147.946948][ T8166] netlink: 'syz.1.1638': attribute type 7 has an invalid length. [ 148.001383][ T8167] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=8167 comm=syz.1.1638 [ 148.001418][ T8167] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=8167 comm=syz.1.1638 [ 148.515753][ T8187] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1646'. [ 148.537247][ T8183] loop3: detected capacity change from 0 to 128 [ 148.567134][ T8183] bio_check_eod: 15 callbacks suppressed [ 148.567153][ T8183] syz.3.1644: attempt to access beyond end of device [ 148.567153][ T8183] loop3: rw=2049, sector=145, nr_sectors = 95 limit=128 [ 148.576488][ T8183] syz.3.1644: attempt to access beyond end of device [ 148.576488][ T8183] loop3: rw=524288, sector=145, nr_sectors = 95 limit=128 [ 148.603776][ T8189] loop0: detected capacity change from 0 to 512 [ 148.646899][ T8183] syz.3.1644: attempt to access beyond end of device [ 148.646899][ T8183] loop3: rw=0, sector=145, nr_sectors = 8 limit=128 [ 148.686987][ T8193] loop1: detected capacity change from 0 to 512 [ 148.688968][ T8183] syz.3.1644: attempt to access beyond end of device [ 148.688968][ T8183] loop3: rw=0, sector=145, nr_sectors = 8 limit=128 [ 148.719109][ T8183] syz.3.1644: attempt to access beyond end of device [ 148.719109][ T8183] loop3: rw=0, sector=145, nr_sectors = 8 limit=128 [ 148.735294][ T8183] syz.3.1644: attempt to access beyond end of device [ 148.735294][ T8183] loop3: rw=0, sector=145, nr_sectors = 8 limit=128 [ 148.735887][ T8193] EXT4-fs (loop1): too many log groups per flexible block group [ 148.758530][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 148.769551][ T8193] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 148.774121][ T8189] EXT4-fs (loop0): too many log groups per flexible block group [ 148.777084][ T8193] EXT4-fs (loop1): mount failed [ 148.804164][ T8189] EXT4-fs (loop0): failed to initialize mballoc (-12) [ 148.813039][ T8189] EXT4-fs (loop0): mount failed [ 148.928946][ T8207] loop2: detected capacity change from 0 to 256 [ 148.985440][ T8207] loop2: detected capacity change from 0 to 256 [ 149.003371][ T8215] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 149.010113][ T8215] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 149.019308][ T8215] vhci_hcd vhci_hcd.0: Device attached [ 149.048555][ T8216] vhci_hcd: connection closed [ 149.053004][ T41] vhci_hcd: stop threads [ 149.063699][ T41] vhci_hcd: release socket [ 149.068414][ T41] vhci_hcd: disconnect device [ 149.082813][ T8221] loop1: detected capacity change from 0 to 512 [ 149.094528][ T8221] ext4: Bad value for 'stripe' [ 149.123734][ T8221] loop1: detected capacity change from 0 to 2048 [ 149.206160][ T5861] Alternate GPT is invalid, using primary GPT. [ 149.217383][ T5861] loop1: p2 p3 p7 [ 149.266305][ T8221] Alternate GPT is invalid, using primary GPT. [ 149.274649][ T8221] loop1: p2 p3 p7 [ 149.288979][ T8230] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1658'. [ 149.415354][ T8232] loop0: detected capacity change from 0 to 128 [ 149.448336][ T5803] udevd[5803]: inotify_add_watch(7, /dev/loop1p7, 10) failed: No such file or directory [ 149.461137][ T5979] udevd[5979]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 149.476479][ T5804] udevd[5804]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 149.661448][ T8257] loop3: detected capacity change from 0 to 128 [ 149.671626][ T5979] udevd[5979]: inotify_add_watch(7, /dev/loop1p7, 10) failed: No such file or directory [ 149.674408][ T5804] udevd[5804]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 149.695985][ T8257] syz.3.1668: attempt to access beyond end of device [ 149.695985][ T8257] loop3: rw=2049, sector=145, nr_sectors = 95 limit=128 [ 149.704583][ T5861] udevd[5861]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 149.744544][ T8270] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1670'. [ 149.747733][ T8257] syz.3.1668: attempt to access beyond end of device [ 149.747733][ T8257] loop3: rw=524288, sector=145, nr_sectors = 95 limit=128 [ 149.827794][ T8268] loop4: detected capacity change from 0 to 512 [ 149.848804][ T8274] loop2: detected capacity change from 0 to 256 [ 149.881097][ T8257] syz.3.1668: attempt to access beyond end of device [ 149.881097][ T8257] loop3: rw=0, sector=145, nr_sectors = 8 limit=128 [ 149.902935][ T8257] syz.3.1668: attempt to access beyond end of device [ 149.902935][ T8257] loop3: rw=0, sector=145, nr_sectors = 8 limit=128 [ 149.925317][ T8268] ext4: Bad value for 'stripe' [ 150.028032][ T8268] loop4: detected capacity change from 0 to 2048 [ 150.035406][ T8281] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1676'. [ 150.077114][ T8285] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.096015][ T8285] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.114410][ T8285] loop2: detected capacity change from 0 to 1024 [ 150.145623][ T8268] Alternate GPT is invalid, using primary GPT. [ 150.157476][ T8268] loop4: p2 p3 p7 [ 150.193964][ T8285] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 150.256459][ T3001] Alternate GPT is invalid, using primary GPT. [ 150.263226][ T3001] loop4: p2 p3 p7 [ 150.283058][ T8297] loop1: detected capacity change from 0 to 256 [ 150.305504][ T8293] loop0: detected capacity change from 0 to 128 [ 150.337042][ T5804] udevd[5804]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 150.373488][ T8295] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1683'. [ 150.384561][ T8304] loop0: detected capacity change from 0 to 1024 [ 150.393749][ T8304] EXT4-fs: Ignoring removed orlov option [ 150.397053][ T8297] loop1: detected capacity change from 0 to 256 [ 150.401470][ T8304] EXT4-fs: Ignoring removed nomblk_io_submit option [ 150.414301][ T8295] loop3: detected capacity change from 0 to 2048 [ 150.428866][ T8304] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 150.442756][ T8295] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 150.513910][ T5804] udevd[5804]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 150.553882][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.570345][ T5861] udevd[5861]: inotify_add_watch(7, /dev/loop4p7, 10) failed: No such file or directory [ 150.628930][ T8300] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 150.662741][ T5771] udevd[5771]: inotify_add_watch(7, /dev/loop4p7, 10) failed: No such file or directory [ 150.698731][ T8315] loop1: detected capacity change from 0 to 512 [ 150.713372][ T8300] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 310 with error 28 [ 150.734154][ T8300] EXT4-fs (loop3): This should not happen!! Data will be lost [ 150.734154][ T8300] [ 150.753737][ T8300] EXT4-fs (loop3): Total free blocks count 0 [ 150.765070][ T8300] EXT4-fs (loop3): Free/Dirty block details [ 150.776064][ T8300] EXT4-fs (loop3): free_blocks=2415919104 [ 150.786477][ T8300] EXT4-fs (loop3): dirty_blocks=1200 [ 150.797600][ T8300] EXT4-fs (loop3): Block reservation details [ 150.808128][ T8300] EXT4-fs (loop3): i_reserved_data_blocks=75 [ 151.472811][ T8337] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1692'. [ 151.668457][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.786771][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 151.845245][ T8346] loop1: detected capacity change from 0 to 128 [ 151.868207][ T8344] loop0: detected capacity change from 0 to 512 [ 151.894367][ T8344] ext4: Bad value for 'stripe' [ 151.967276][ T8344] loop0: detected capacity change from 0 to 2048 [ 152.091738][ T8344] Alternate GPT is invalid, using primary GPT. [ 152.098345][ T8344] loop0: p2 p3 p7 [ 152.116444][ T8353] loop3: detected capacity change from 0 to 256 [ 152.131903][ T8351] loop2: detected capacity change from 0 to 256 [ 152.153168][ T8351] loop2: detected capacity change from 0 to 256 [ 152.175263][ T8353] loop3: detected capacity change from 0 to 256 [ 152.176414][ T3001] Alternate GPT is invalid, using primary GPT. [ 152.188402][ T3001] loop0: p2 p3 p7 [ 152.304161][ T8364] netlink: 'syz.4.1700': attribute type 7 has an invalid length. [ 152.366045][ T8368] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=8368 comm=syz.4.1700 [ 152.383756][ T8368] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=8368 comm=syz.4.1700 [ 152.431026][ T8371] loop0: detected capacity change from 0 to 512 [ 152.487077][ T8377] loop3: detected capacity change from 0 to 512 [ 152.508136][ T8371] EXT4-fs (loop0): too many log groups per flexible block group [ 152.523705][ T8375] loop1: detected capacity change from 0 to 128 [ 152.573024][ T8371] EXT4-fs (loop0): failed to initialize mballoc (-12) [ 152.581814][ T8371] EXT4-fs (loop0): mount failed [ 152.715309][ T8386] loop0: detected capacity change from 0 to 512 [ 152.753924][ T8386] ext4: Bad value for 'stripe' [ 152.770970][ T30] kauditd_printk_skb: 244 callbacks suppressed [ 152.770987][ T30] audit: type=1326 audit(1760069552.401:13025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8390 comm="syz.4.1710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fe2b0eec9 code=0x7ffc0000 [ 152.803902][ T30] audit: type=1326 audit(1760069552.401:13026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8390 comm="syz.4.1710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fe2b0eec9 code=0x7ffc0000 [ 152.892256][ T8398] veth1_macvtap: left promiscuous mode [ 152.902218][ T8398] macsec0: entered allmulticast mode [ 152.969411][ T30] audit: type=1326 audit(1760069552.401:13027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8390 comm="syz.4.1710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f8fe2b0eec9 code=0x7ffc0000 [ 152.994893][ T30] audit: type=1326 audit(1760069552.401:13028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8390 comm="syz.4.1710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fe2b0eec9 code=0x7ffc0000 [ 153.021735][ T30] audit: type=1326 audit(1760069552.401:13029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8390 comm="syz.4.1710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f8fe2b0eec9 code=0x7ffc0000 [ 153.046390][ T30] audit: type=1326 audit(1760069552.401:13030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8390 comm="syz.4.1710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fe2b0eec9 code=0x7ffc0000 [ 153.071419][ T30] audit: type=1326 audit(1760069552.401:13031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8390 comm="syz.4.1710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7f8fe2b0eec9 code=0x7ffc0000 [ 153.097098][ T30] audit: type=1326 audit(1760069552.401:13032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8390 comm="syz.4.1710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fe2b0eec9 code=0x7ffc0000 [ 153.122549][ T30] audit: type=1326 audit(1760069552.401:13033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8390 comm="syz.4.1710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f8fe2b0eec9 code=0x7ffc0000 [ 153.149490][ T30] audit: type=1326 audit(1760069552.401:13034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8390 comm="syz.4.1710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fe2b0eec9 code=0x7ffc0000 [ 153.156047][ T8398] bond1 (unregistering): Released all slaves [ 153.275139][ T8409] veth1_macvtap: entered promiscuous mode [ 153.285766][ T8409] veth1_macvtap: entered allmulticast mode [ 153.367753][ T8409] macsec0: entered promiscuous mode [ 153.386734][ T8414] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1717'. [ 153.478815][ T8420] loop2: detected capacity change from 0 to 512 [ 153.492598][ T8420] EXT4-fs (loop2): too many log groups per flexible block group [ 153.587945][ T8420] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 153.632404][ T8420] EXT4-fs (loop2): mount failed [ 153.637587][ T8428] serio: Serial port ptm0 [ 153.743111][ T8435] loop4: detected capacity change from 0 to 512 [ 153.774829][ T8438] loop0: detected capacity change from 0 to 512 [ 153.783935][ T8438] ext4: Bad value for 'stripe' [ 153.866920][ T8435] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 153.943862][ T8435] ext4 filesystem being mounted at /353/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 154.027530][ T8435] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.110996][ T8451] loop0: detected capacity change from 0 to 512 [ 154.486800][ T8458] loop1: detected capacity change from 0 to 512 [ 154.565158][ T8458] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1731: bg 0: block 248: padding at end of block bitmap is not set [ 154.584860][ T8458] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.1731: Failed to acquire dquot type 1 [ 154.605819][ T8458] EXT4-fs (loop1): 1 truncate cleaned up [ 154.616598][ T8458] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 154.634085][ T8458] ext4 filesystem being mounted at /367/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 154.898168][ T8466] xt_hashlimit: max too large, truncated to 1048576 [ 155.197196][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.218438][ T8470] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1735'. [ 155.296297][ T8476] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1732'. [ 155.362915][ T8470] loop2: detected capacity change from 0 to 2048 [ 155.501904][ T8470] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 155.627171][ T8483] loop0: detected capacity change from 0 to 512 [ 155.689614][ T8483] ext4: Bad value for 'stripe' [ 155.871667][ T8473] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 155.887147][ T8483] loop0: detected capacity change from 0 to 2048 [ 155.925474][ T8473] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 348 with error 28 [ 155.942680][ T8473] EXT4-fs (loop2): This should not happen!! Data will be lost [ 155.942680][ T8473] [ 155.957164][ T8473] EXT4-fs (loop2): Total free blocks count 0 [ 155.967589][ T8473] EXT4-fs (loop2): Free/Dirty block details [ 155.978010][ T8473] EXT4-fs (loop2): free_blocks=2415919104 [ 155.988516][ T8473] EXT4-fs (loop2): dirty_blocks=352 [ 155.998961][ T8473] EXT4-fs (loop2): Block reservation details [ 156.012884][ T8473] EXT4-fs (loop2): i_reserved_data_blocks=22 [ 156.035389][ T8493] loop3: detected capacity change from 0 to 512 [ 156.086555][ T5804] Alternate GPT is invalid, using primary GPT. [ 156.097844][ T5804] loop0: p2 p3 p7 [ 156.123822][ T8492] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 156.130773][ T8492] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 156.143861][ T8492] vhci_hcd vhci_hcd.0: Device attached [ 156.167677][ T8493] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1739: bg 0: block 248: padding at end of block bitmap is not set [ 156.193068][ T8493] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.1739: Failed to acquire dquot type 1 [ 156.225072][ T8493] EXT4-fs (loop3): 1 truncate cleaned up [ 156.234928][ T8493] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 156.252757][ T8493] ext4 filesystem being mounted at /316/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 156.313747][ T8494] vhci_hcd: connection closed [ 156.313933][ T60] vhci_hcd: stop threads [ 156.313946][ T60] vhci_hcd: release socket [ 156.313960][ T60] vhci_hcd: disconnect device [ 156.316348][ T8483] Alternate GPT is invalid, using primary GPT. [ 156.316689][ T8483] loop0: p2 p3 p7 [ 156.328834][ T3001] Alternate GPT is invalid, using primary GPT. [ 156.328993][ T3001] loop0: p2 p3 p7 [ 156.455839][ T5979] udevd[5979]: inotify_add_watch(7, /dev/loop0p7, 10) failed: No such file or directory [ 156.455969][ T5861] udevd[5861]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 156.469047][ T5804] udevd[5804]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 156.504990][ T5804] udevd[5804]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 156.506577][ T5979] udevd[5979]: inotify_add_watch(7, /dev/loop0p7, 10) failed: No such file or directory [ 156.511955][ T5861] udevd[5861]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 156.565969][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.581707][ T8506] loop0: detected capacity change from 0 to 128 [ 156.655304][ T8510] xt_hashlimit: max too large, truncated to 1048576 [ 156.669015][ T5979] udevd[5979]: inotify_add_watch(7, /dev/loop0p7, 10) failed: No such file or directory [ 156.673085][ T5804] udevd[5804]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 156.697027][ T5861] udevd[5861]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 156.826594][ T8515] xt_hashlimit: max too large, truncated to 1048576 [ 156.838542][ T8517] loop3: detected capacity change from 0 to 512 [ 156.998841][ T8523] loop1: detected capacity change from 0 to 2048 [ 157.040995][ T8523] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 157.088077][ T8533] loop4: detected capacity change from 0 to 128 [ 157.139118][ T8523] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 157.149234][ T8523] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 658 with error 28 [ 157.226523][ T8523] EXT4-fs (loop1): This should not happen!! Data will be lost [ 157.226523][ T8523] [ 157.226573][ T8523] EXT4-fs (loop1): Total free blocks count 0 [ 157.226590][ T8523] EXT4-fs (loop1): Free/Dirty block details [ 157.226606][ T8523] EXT4-fs (loop1): free_blocks=2415919104 [ 157.226622][ T8523] EXT4-fs (loop1): dirty_blocks=672 [ 157.226638][ T8523] EXT4-fs (loop1): Block reservation details [ 157.226653][ T8523] EXT4-fs (loop1): i_reserved_data_blocks=42 [ 157.744182][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 157.856587][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 157.912028][ T8538] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1752'. [ 157.944404][ T30] kauditd_printk_skb: 235 callbacks suppressed [ 157.944464][ T30] audit: type=1326 audit(1760069557.571:13266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8541 comm="syz.4.1756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fe2b0eec9 code=0x7ffc0000 [ 158.003528][ T30] audit: type=1326 audit(1760069557.611:13267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8541 comm="syz.4.1756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7f8fe2b0eec9 code=0x7ffc0000 [ 158.033440][ T30] audit: type=1326 audit(1760069557.611:13268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8541 comm="syz.4.1756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fe2b0eec9 code=0x7ffc0000 [ 158.049816][ T8549] loop0: detected capacity change from 0 to 128 [ 158.063189][ T30] audit: type=1326 audit(1760069557.611:13269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8541 comm="syz.4.1756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8fe2b0eec9 code=0x7ffc0000 [ 158.093608][ T30] audit: type=1326 audit(1760069557.611:13270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8541 comm="syz.4.1756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fe2b0eec9 code=0x7ffc0000 [ 158.101757][ T8551] netlink: 'syz.1.1755': attribute type 7 has an invalid length. [ 158.124710][ T30] audit: type=1326 audit(1760069557.611:13271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8541 comm="syz.4.1756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8fe2b0eec9 code=0x7ffc0000 [ 158.163601][ T30] audit: type=1326 audit(1760069557.611:13272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8541 comm="syz.4.1756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fe2b0eec9 code=0x7ffc0000 [ 158.193560][ T30] audit: type=1326 audit(1760069557.611:13273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8541 comm="syz.4.1756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=125 compat=0 ip=0x7f8fe2b0eec9 code=0x7ffc0000 [ 158.223728][ T30] audit: type=1326 audit(1760069557.611:13274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8541 comm="syz.4.1756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fe2b0eec9 code=0x7ffc0000 [ 158.278139][ T30] audit: type=1326 audit(1760069557.791:13275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8545 comm="syz.0.1757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe1f97eec9 code=0x7ffc0000 [ 158.344371][ T8551] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=8551 comm=syz.1.1755 [ 158.363336][ T8551] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=8551 comm=syz.1.1755 [ 158.492050][ T8557] netlink: 'syz.0.1759': attribute type 32 has an invalid length. [ 158.819493][ T8564] loop2: detected capacity change from 0 to 1024 [ 158.874026][ T8564] EXT4-fs: Ignoring removed orlov option [ 158.880087][ T8564] EXT4-fs: Ignoring removed nomblk_io_submit option [ 159.076311][ T8568] loop1: detected capacity change from 0 to 512 [ 159.244912][ T8564] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 159.646755][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.119504][ T8593] netlink: 'syz.3.1770': attribute type 7 has an invalid length. [ 160.201235][ T8600] netlink: 'syz.2.1773': attribute type 32 has an invalid length. [ 160.205291][ T8602] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=8602 comm=syz.3.1770 [ 160.224471][ T8602] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=8602 comm=syz.3.1770 [ 160.386426][ T8612] serio: Serial port ptm0 [ 160.468279][ T8616] loop2: detected capacity change from 0 to 512 [ 160.492306][ T8616] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.537075][ T8616] ext4 filesystem being mounted at /373/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 160.553462][ T8616] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.571965][ T8623] xt_hashlimit: max too large, truncated to 1048576 [ 160.595089][ T8608] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1776'. [ 160.657651][ T8626] loop0: detected capacity change from 0 to 512 [ 160.801444][ T8608] loop3: detected capacity change from 0 to 2048 [ 160.843751][ T8636] netlink: 'syz.4.1786': attribute type 7 has an invalid length. [ 160.868872][ T8636] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=8636 comm=syz.4.1786 [ 160.883230][ T8636] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=8636 comm=syz.4.1786 [ 160.905056][ T8639] serio: Serial port ptm1 [ 160.934484][ T8608] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 161.035777][ T8645] netlink: 'syz.4.1787': attribute type 32 has an invalid length. [ 161.067882][ T8643] loop1: detected capacity change from 0 to 512 [ 161.144272][ T8608] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 161.204873][ T8643] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.276806][ T8608] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 290 with error 28 [ 161.294900][ T8608] EXT4-fs (loop3): This should not happen!! Data will be lost [ 161.294900][ T8608] [ 161.312852][ T8608] EXT4-fs (loop3): Total free blocks count 0 [ 161.323697][ T8608] EXT4-fs (loop3): Free/Dirty block details [ 161.334663][ T8608] EXT4-fs (loop3): free_blocks=2415919104 [ 161.345424][ T8608] EXT4-fs (loop3): dirty_blocks=304 [ 161.356021][ T8608] EXT4-fs (loop3): Block reservation details [ 161.367219][ T8608] EXT4-fs (loop3): i_reserved_data_blocks=19 [ 161.376607][ T8643] ext4 filesystem being mounted at /376/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 161.391695][ T8643] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.507126][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 161.527583][ T8657] loop4: detected capacity change from 0 to 128 [ 161.564575][ T8657] bio_check_eod: 8 callbacks suppressed [ 161.564662][ T8657] syz.4.1791: attempt to access beyond end of device [ 161.564662][ T8657] loop4: rw=2049, sector=145, nr_sectors = 95 limit=128 [ 161.627076][ T8655] syz.4.1791: attempt to access beyond end of device [ 161.627076][ T8655] loop4: rw=524288, sector=145, nr_sectors = 95 limit=128 [ 161.669096][ T8657] syz.4.1791: attempt to access beyond end of device [ 161.669096][ T8657] loop4: rw=0, sector=145, nr_sectors = 8 limit=128 [ 161.691385][ T8657] syz.4.1791: attempt to access beyond end of device [ 161.691385][ T8657] loop4: rw=0, sector=145, nr_sectors = 8 limit=128 [ 161.698413][ T8663] xt_hashlimit: max too large, truncated to 1048576 [ 161.726117][ T8657] syz.4.1791: attempt to access beyond end of device [ 161.726117][ T8657] loop4: rw=0, sector=145, nr_sectors = 8 limit=128 [ 161.776157][ T8657] syz.4.1791: attempt to access beyond end of device [ 161.776157][ T8657] loop4: rw=0, sector=145, nr_sectors = 8 limit=128 [ 161.871766][ T8670] loop1: detected capacity change from 0 to 256 [ 161.909627][ T8670] loop1: detected capacity change from 0 to 256 [ 162.103996][ T8676] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1797'. [ 162.138623][ T8676] netlink: 11 bytes leftover after parsing attributes in process `syz.3.1797'. [ 162.154563][ T8678] netlink: 200 bytes leftover after parsing attributes in process `syz.1.1798'. [ 162.178829][ T8681] serio: Serial port ptm0 [ 162.206048][ T8676] bridge5: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 162.249473][ T8682] loop0: detected capacity change from 0 to 512 [ 162.284746][ T8682] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.312569][ T8682] ext4 filesystem being mounted at /342/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 162.325292][ T8682] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.376297][ T8690] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1802'. [ 162.416533][ T8690] netlink: 11 bytes leftover after parsing attributes in process `syz.2.1802'. [ 162.468400][ T8694] loop1: detected capacity change from 0 to 1024 [ 162.515648][ T8698] loop4: detected capacity change from 0 to 128 [ 162.526707][ T8690] bridge5: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 162.545549][ T8694] EXT4-fs: Ignoring removed orlov option [ 162.554465][ T8698] syz.4.1805: attempt to access beyond end of device [ 162.554465][ T8698] loop4: rw=2049, sector=145, nr_sectors = 95 limit=128 [ 162.564209][ T8696] syz.4.1805: attempt to access beyond end of device [ 162.564209][ T8696] loop4: rw=524288, sector=145, nr_sectors = 95 limit=128 [ 162.575636][ T8694] EXT4-fs: Ignoring removed nomblk_io_submit option [ 162.657432][ T8694] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 162.674897][ T8702] syz.4.1805: attempt to access beyond end of device [ 162.674897][ T8702] loop4: rw=0, sector=145, nr_sectors = 8 limit=128 [ 162.705311][ T8702] syz.4.1805: attempt to access beyond end of device [ 162.705311][ T8702] loop4: rw=0, sector=145, nr_sectors = 8 limit=128 [ 162.871913][ T8707] xt_hashlimit: max too large, truncated to 1048576 [ 163.027739][ T8714] netlink: 200 bytes leftover after parsing attributes in process `syz.4.1811'. [ 163.048605][ T8718] veth0: entered promiscuous mode [ 163.064262][ T8718] veth0: left promiscuous mode [ 163.094460][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.107516][ T8720] loop0: detected capacity change from 0 to 256 [ 163.225244][ T30] kauditd_printk_skb: 191 callbacks suppressed [ 163.225259][ T30] audit: type=1326 audit(1760069562.851:13467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8722 comm="syz.0.1814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe1f97eec9 code=0x7ffc0000 [ 163.271826][ T8723] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1814'. [ 163.333754][ T30] audit: type=1400 audit(1760069562.861:13468): avc: denied { read write } for pid=8726 comm="syz.2.1817" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 163.364117][ T30] audit: type=1400 audit(1760069562.861:13469): avc: denied { open } for pid=8726 comm="syz.2.1817" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 163.389781][ T30] audit: type=1326 audit(1760069562.891:13470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8722 comm="syz.0.1814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe1f97eec9 code=0x7ffc0000 [ 163.416818][ T8736] xt_hashlimit: max too large, truncated to 1048576 [ 163.433457][ T30] audit: type=1400 audit(1760069562.891:13471): avc: denied { ioctl } for pid=8726 comm="syz.2.1817" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 163.480829][ T8735] loop3: detected capacity change from 0 to 128 [ 163.487648][ T8723] loop0: detected capacity change from 0 to 2048 [ 163.608323][ T30] audit: type=1326 audit(1760069563.231:13472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8724 comm="syz.3.1815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f074137eec9 code=0x7ffc0000 [ 163.636986][ T30] audit: type=1326 audit(1760069563.231:13473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8724 comm="syz.3.1815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f074137eec9 code=0x7ffc0000 [ 163.694312][ T30] audit: type=1326 audit(1760069563.231:13474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8724 comm="syz.3.1815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f074137eec9 code=0x7ffc0000 [ 163.697117][ T8723] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 163.723507][ T30] audit: type=1326 audit(1760069563.231:13475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8724 comm="syz.3.1815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f074137eec9 code=0x7ffc0000 [ 163.735725][ T8749] serio: Serial port ptm0 [ 163.775215][ T30] audit: type=1326 audit(1760069563.261:13476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8724 comm="syz.3.1815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f074137eec9 code=0x7ffc0000 [ 163.824029][ T8754] veth0: entered promiscuous mode [ 163.830064][ T8751] loop2: detected capacity change from 0 to 512 [ 163.843557][ T8754] veth0: left promiscuous mode [ 163.885462][ T8751] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.902658][ T8758] serio: Serial port ptm1 [ 163.927985][ T8751] ext4 filesystem being mounted at /381/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 163.945379][ T8751] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.946085][ T8760] netlink: 200 bytes leftover after parsing attributes in process `syz.1.1826'. [ 163.993406][ T8727] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 164.007563][ T8764] loop4: detected capacity change from 0 to 256 [ 164.010594][ T8727] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 820 with error 28 [ 164.033585][ T8727] EXT4-fs (loop0): This should not happen!! Data will be lost [ 164.033585][ T8727] [ 164.048207][ T8727] EXT4-fs (loop0): Total free blocks count 0 [ 164.058108][ T8727] EXT4-fs (loop0): Free/Dirty block details [ 164.067771][ T8727] EXT4-fs (loop0): free_blocks=2415919104 [ 164.077504][ T8727] EXT4-fs (loop0): dirty_blocks=832 [ 164.087613][ T8727] EXT4-fs (loop0): Block reservation details [ 164.098271][ T8727] EXT4-fs (loop0): i_reserved_data_blocks=52 [ 164.317810][ T8772] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1830'. [ 164.344855][ T8772] loop1: detected capacity change from 0 to 2048 [ 164.372491][ T8772] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 164.416441][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 164.503630][ T8779] loop0: detected capacity change from 0 to 1024 [ 164.512146][ T8779] EXT4-fs: Ignoring removed orlov option [ 164.518001][ T8779] EXT4-fs: Ignoring removed nomblk_io_submit option [ 164.528154][ T8773] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 164.552912][ T8779] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 164.585973][ T8773] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1924 with error 28 [ 164.603919][ T8773] EXT4-fs (loop1): This should not happen!! Data will be lost [ 164.603919][ T8773] [ 164.603939][ T8773] EXT4-fs (loop1): Total free blocks count 0 [ 164.603952][ T8773] EXT4-fs (loop1): Free/Dirty block details [ 164.603963][ T8773] EXT4-fs (loop1): free_blocks=2415919104 [ 164.603976][ T8773] EXT4-fs (loop1): dirty_blocks=1936 [ 164.603991][ T8773] EXT4-fs (loop1): Block reservation details [ 164.604029][ T8773] EXT4-fs (loop1): i_reserved_data_blocks=121 [ 164.628916][ T8784] loop2: detected capacity change from 0 to 512 [ 164.630921][ T8784] ext4: Bad value for 'stripe' [ 164.641810][ T8784] loop2: detected capacity change from 0 to 2048 [ 164.675990][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.785659][ T5804] Alternate GPT is invalid, using primary GPT. [ 164.785942][ T5804] loop2: p2 p3 p7 [ 164.837363][ T8784] Alternate GPT is invalid, using primary GPT. [ 164.837499][ T8784] loop2: p2 p3 p7 [ 164.853415][ T3001] Alternate GPT is invalid, using primary GPT. [ 164.853707][ T3001] loop2: p2 p3 p7 [ 164.917037][ T8794] loop3: detected capacity change from 0 to 512 [ 164.933034][ T8794] EXT4-fs (loop3): too many log groups per flexible block group [ 164.933086][ T8794] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 164.933176][ T8794] EXT4-fs (loop3): mount failed [ 164.935687][ T8798] loop0: detected capacity change from 0 to 256 [ 164.945628][ T8798] loop0: detected capacity change from 0 to 256 [ 164.967314][ T5861] udevd[5861]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 164.975427][ T5804] udevd[5804]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 164.975463][ T5803] udevd[5803]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory [ 165.004018][ T5804] udevd[5804]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 165.005978][ T5861] udevd[5861]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 165.015461][ T5771] udevd[5771]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory [ 165.045016][ T5979] udevd[5979]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory [ 165.046885][ T5861] udevd[5861]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 165.048819][ T5804] udevd[5804]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 165.055657][ T8803] loop2: detected capacity change from 0 to 1024 [ 165.055993][ T8803] EXT4-fs: Ignoring removed orlov option [ 165.056039][ T8803] EXT4-fs: Ignoring removed nomblk_io_submit option [ 165.116114][ T8803] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 165.325710][ T8815] loop4: detected capacity change from 0 to 128 [ 165.427035][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 165.438815][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.440424][ T8819] serio: Serial port ptm0 [ 165.617043][ T8824] loop1: detected capacity change from 0 to 2048 [ 165.641492][ T8824] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 165.788602][ T8828] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 165.807420][ T8828] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1960 with error 28 [ 165.821964][ T8828] EXT4-fs (loop1): This should not happen!! Data will be lost [ 165.821964][ T8828] [ 165.834335][ T8828] EXT4-fs (loop1): Total free blocks count 0 [ 165.841788][ T8828] EXT4-fs (loop1): Free/Dirty block details [ 165.848075][ T8828] EXT4-fs (loop1): free_blocks=2415919104 [ 165.854790][ T8828] EXT4-fs (loop1): dirty_blocks=1968 [ 165.861490][ T8828] EXT4-fs (loop1): Block reservation details [ 165.867992][ T8828] EXT4-fs (loop1): i_reserved_data_blocks=123 [ 166.305062][ T8843] loop0: detected capacity change from 0 to 1024 [ 166.314966][ T8843] EXT4-fs: Ignoring removed orlov option [ 166.315006][ T8843] EXT4-fs: Ignoring removed nomblk_io_submit option [ 166.453097][ T8843] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 166.515082][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 166.536244][ T8851] loop3: detected capacity change from 0 to 128 [ 166.579634][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.657763][ T8857] netlink: 'syz.1.1856': attribute type 7 has an invalid length. [ 166.658197][ T8859] loop0: detected capacity change from 0 to 1024 [ 166.676012][ T8857] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=8857 comm=syz.1.1856 [ 166.683637][ T8856] loop3: detected capacity change from 0 to 128 [ 166.694658][ T8857] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=8857 comm=syz.1.1856 [ 166.713518][ T8859] EXT4-fs: Ignoring removed orlov option [ 166.720737][ T8859] EXT4-fs: Ignoring removed nomblk_io_submit option [ 166.768137][ T8859] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 166.812191][ T8863] __nla_validate_parse: 2 callbacks suppressed [ 166.812253][ T8863] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1861'. [ 166.925526][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.948306][ T8869] loop1: detected capacity change from 0 to 256 [ 166.968503][ T8869] loop1: detected capacity change from 0 to 256 [ 167.135351][ T8881] loop1: detected capacity change from 0 to 1024 [ 167.153595][ T8881] EXT4-fs: Ignoring removed orlov option [ 167.161508][ T8881] EXT4-fs: Ignoring removed nomblk_io_submit option [ 167.212084][ T8881] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 167.252418][ T8886] loop4: detected capacity change from 0 to 1024 [ 167.260740][ T8886] EXT4-fs: Ignoring removed orlov option [ 167.266638][ T8886] EXT4-fs: Ignoring removed nomblk_io_submit option [ 167.517735][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.588624][ T8891] loop2: detected capacity change from 0 to 128 [ 167.995088][ T8895] loop0: detected capacity change from 0 to 512 [ 168.076233][ T8886] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 168.144691][ T8900] loop3: detected capacity change from 0 to 1024 [ 168.164686][ T8900] EXT4-fs: Ignoring removed orlov option [ 168.171699][ T8900] EXT4-fs: Ignoring removed nomblk_io_submit option [ 168.173595][ T8903] loop1: detected capacity change from 0 to 256 [ 168.238012][ T8900] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 168.336565][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.461323][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.532155][ T30] kauditd_printk_skb: 391 callbacks suppressed [ 168.532171][ T30] audit: type=1326 audit(1760069568.161:13868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8910 comm="syz.4.1875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fe2b0eec9 code=0x7ffc0000 [ 168.578185][ T8911] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1875'. [ 168.589711][ T8911] loop4: detected capacity change from 0 to 2048 [ 168.621426][ T30] audit: type=1326 audit(1760069568.191:13869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8910 comm="syz.4.1875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f8fe2b0eec9 code=0x7ffc0000 [ 168.621467][ T30] audit: type=1326 audit(1760069568.191:13870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8910 comm="syz.4.1875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fe2b0eec9 code=0x7ffc0000 [ 168.621503][ T30] audit: type=1326 audit(1760069568.191:13871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8917 comm="syz.4.1875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f8fe2b41785 code=0x7ffc0000 [ 168.621598][ T30] audit: type=1326 audit(1760069568.201:13872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8910 comm="syz.4.1875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8fe2b0eec9 code=0x7ffc0000 [ 168.621633][ T30] audit: type=1326 audit(1760069568.201:13873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8910 comm="syz.4.1875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fe2b0eec9 code=0x7ffc0000 [ 168.621667][ T30] audit: type=1326 audit(1760069568.201:13874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8910 comm="syz.4.1875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fe2b0eec9 code=0x7ffc0000 [ 168.621774][ T30] audit: type=1326 audit(1760069568.201:13875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8910 comm="syz.4.1875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8fe2b0eec9 code=0x7ffc0000 [ 168.621810][ T30] audit: type=1326 audit(1760069568.201:13876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8910 comm="syz.4.1875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fe2b0eec9 code=0x7ffc0000 [ 168.621853][ T30] audit: type=1326 audit(1760069568.201:13877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8910 comm="syz.4.1875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fe2b0eec9 code=0x7ffc0000 [ 168.676219][ T8919] loop3: detected capacity change from 0 to 128 [ 168.684008][ T8925] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1879'. [ 168.684037][ T8925] netlink: 11 bytes leftover after parsing attributes in process `syz.1.1879'. [ 168.688356][ T8919] bio_check_eod: 2 callbacks suppressed [ 168.688375][ T8919] syz.3.1876: attempt to access beyond end of device [ 168.688375][ T8919] loop3: rw=2049, sector=145, nr_sectors = 95 limit=128 [ 168.716224][ T8914] syz.3.1876: attempt to access beyond end of device [ 168.716224][ T8914] loop3: rw=524288, sector=145, nr_sectors = 95 limit=128 [ 168.734490][ T8919] syz.3.1876: attempt to access beyond end of device [ 168.734490][ T8919] loop3: rw=0, sector=145, nr_sectors = 8 limit=128 [ 168.734580][ T8919] syz.3.1876: attempt to access beyond end of device [ 168.734580][ T8919] loop3: rw=0, sector=145, nr_sectors = 8 limit=128 [ 168.734662][ T8919] syz.3.1876: attempt to access beyond end of device [ 168.734662][ T8919] loop3: rw=0, sector=145, nr_sectors = 8 limit=128 [ 168.734699][ T8919] syz.3.1876: attempt to access beyond end of device [ 168.734699][ T8919] loop3: rw=0, sector=145, nr_sectors = 8 limit=128 [ 168.821940][ T8911] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 168.824161][ T8931] bridge7: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 168.830731][ T8911] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 672 with error 28 [ 168.830771][ T8911] EXT4-fs (loop4): This should not happen!! Data will be lost [ 168.830771][ T8911] [ 168.830787][ T8911] EXT4-fs (loop4): Total free blocks count 0 [ 168.830807][ T8911] EXT4-fs (loop4): Free/Dirty block details [ 168.830818][ T8911] EXT4-fs (loop4): free_blocks=2415919104 [ 168.830831][ T8911] EXT4-fs (loop4): dirty_blocks=688 [ 168.830846][ T8911] EXT4-fs (loop4): Block reservation details [ 168.830860][ T8911] EXT4-fs (loop4): i_reserved_data_blocks=43 [ 168.841753][ T8933] loop3: detected capacity change from 0 to 256 [ 169.585379][ T8949] loop4: detected capacity change from 0 to 512 [ 169.598459][ T8948] loop1: detected capacity change from 0 to 1024 [ 169.634796][ T8948] EXT4-fs: Ignoring removed orlov option [ 169.642005][ T8948] EXT4-fs: Ignoring removed nomblk_io_submit option [ 169.727594][ T8955] loop3: detected capacity change from 0 to 128 [ 169.812750][ T8960] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1889'. [ 170.263373][ T8974] loop2: detected capacity change from 0 to 256 [ 170.300148][ T8974] loop2: detected capacity change from 0 to 256 [ 170.665181][ T8983] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1897'. [ 170.757909][ T8983] netlink: 11 bytes leftover after parsing attributes in process `syz.3.1897'. [ 170.876602][ T8983] bridge6: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 170.971945][ T8995] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1901'. [ 171.062506][ T8998] loop2: detected capacity change from 0 to 128 [ 171.197626][ T9004] serio: Serial port ptm0 [ 171.227477][ T9002] loop1: detected capacity change from 0 to 128 [ 171.267076][ T9006] loop0: detected capacity change from 0 to 512 [ 171.302699][ T9002] syz.1.1904: attempt to access beyond end of device [ 171.302699][ T9002] loop1: rw=2049, sector=145, nr_sectors = 95 limit=128 [ 171.327921][ T9006] ext4 filesystem being mounted at /366/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 171.386102][ T9001] syz.1.1904: attempt to access beyond end of device [ 171.386102][ T9001] loop1: rw=524288, sector=145, nr_sectors = 95 limit=128 [ 171.447608][ T9002] syz.1.1904: attempt to access beyond end of device [ 171.447608][ T9002] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 171.475767][ T9002] syz.1.1904: attempt to access beyond end of device [ 171.475767][ T9002] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 171.501026][ T9012] loop4: detected capacity change from 0 to 512 [ 171.596403][ T9012] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 171.632555][ T9012] EXT4-fs (loop4): orphan cleanup on readonly fs [ 171.646400][ T9024] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 171.652992][ T9024] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 171.665357][ T9024] vhci_hcd vhci_hcd.0: Device attached [ 171.695371][ T9025] vhci_hcd: connection closed [ 171.695701][ T170] vhci_hcd: stop threads [ 171.714748][ T170] vhci_hcd: release socket [ 171.724318][ T170] vhci_hcd: disconnect device [ 171.730860][ T9012] EXT4-fs error (device loop4): ext4_do_update_inode:5624: inode #16: comm syz.4.1907: corrupted inode contents [ 171.731035][ T9012] EXT4-fs (loop4): Remounting filesystem read-only [ 171.731260][ T9012] EXT4-fs (loop4): 1 truncate cleaned up [ 171.781007][ T52] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 171.793122][ T52] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 171.810668][ T52] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 171.893200][ T9029] serio: Serial port ptm1 [ 171.966332][ T9032] loop4: detected capacity change from 0 to 512 [ 171.984258][ T9031] loop2: detected capacity change from 0 to 512 [ 172.014986][ T9032] EXT4-fs (loop4): too many log groups per flexible block group [ 172.044304][ T9032] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 172.087011][ T9032] EXT4-fs (loop4): mount failed [ 172.095087][ T9031] ext4 filesystem being mounted at /398/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 172.107888][ T9038] loop0: detected capacity change from 0 to 1024 [ 172.128934][ T9038] EXT4-fs: Ignoring removed orlov option [ 172.135955][ T9038] EXT4-fs: Ignoring removed nomblk_io_submit option [ 172.318809][ T9045] loop0: detected capacity change from 0 to 512 [ 172.393724][ T9045] ext4: Bad value for 'stripe' [ 172.453256][ T9045] loop0: detected capacity change from 0 to 2048 [ 172.751827][ T9059] loop3: detected capacity change from 0 to 128 [ 172.778206][ T9061] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1920'. [ 173.231710][ T9068] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1923'. [ 173.302494][ T9068] loop3: detected capacity change from 0 to 2048 [ 173.405926][ T5804] Alternate GPT is invalid, using primary GPT. [ 173.417313][ T5804] loop0: p2 p3 p7 [ 173.425305][ T9079] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1926'. [ 173.425614][ T9081] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 173.425641][ T9081] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 173.452038][ T9081] vhci_hcd vhci_hcd.0: Device attached [ 173.477027][ T9082] vhci_hcd: connection closed [ 173.477223][ T60] vhci_hcd: stop threads [ 173.477303][ T60] vhci_hcd: release socket [ 173.477356][ T60] vhci_hcd: disconnect device [ 173.534752][ T5804] udevd[5804]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 173.537370][ T5979] udevd[5979]: inotify_add_watch(7, /dev/loop0p7, 10) failed: No such file or directory [ 173.561883][ T5861] udevd[5861]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 173.576317][ T30] kauditd_printk_skb: 775 callbacks suppressed [ 173.576334][ T30] audit: type=1326 audit(1760069573.201:14647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9085 comm="syz.0.1928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe1f97eec9 code=0x7ffc0000 [ 173.576416][ T30] audit: type=1326 audit(1760069573.201:14648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9085 comm="syz.0.1928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe1f97eec9 code=0x7ffc0000 [ 173.576450][ T30] audit: type=1326 audit(1760069573.201:14649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9085 comm="syz.0.1928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fbe1f97eec9 code=0x7ffc0000 [ 173.618472][ T9089] loop4: detected capacity change from 0 to 256 [ 173.649742][ T9087] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1928'. [ 173.659519][ T9087] loop0: detected capacity change from 0 to 2048 [ 173.660276][ T30] audit: type=1326 audit(1760069573.281:14650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9085 comm="syz.0.1928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe1f97eec9 code=0x7ffc0000 [ 173.660358][ T30] audit: type=1326 audit(1760069573.281:14652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9085 comm="syz.0.1928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe1f97eec9 code=0x7ffc0000 [ 173.660389][ T30] audit: type=1326 audit(1760069573.281:14651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9090 comm="syz.0.1928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fbe1f9b1785 code=0x7ffc0000 [ 173.724460][ T30] audit: type=1326 audit(1760069573.341:14653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9085 comm="syz.0.1928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbe1f97eec9 code=0x7ffc0000 [ 173.842309][ T30] audit: type=1326 audit(1760069573.441:14654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9085 comm="syz.0.1928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe1f97eec9 code=0x7ffc0000 [ 173.868876][ T30] audit: type=1326 audit(1760069573.441:14655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9085 comm="syz.0.1928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe1f97eec9 code=0x7ffc0000 [ 173.868910][ T30] audit: type=1326 audit(1760069573.451:14656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9085 comm="syz.0.1928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fbe1f97eec9 code=0x7ffc0000 [ 173.927956][ T9096] loop4: detected capacity change from 0 to 512 [ 173.985676][ T9098] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1933'. [ 174.017832][ T9096] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 174.018038][ T9096] EXT4-fs (loop4): orphan cleanup on readonly fs [ 174.042897][ T9096] EXT4-fs error (device loop4): ext4_do_update_inode:5624: inode #16: comm syz.4.1931: corrupted inode contents [ 174.043923][ T9096] EXT4-fs (loop4): Remounting filesystem read-only [ 174.044021][ T9096] EXT4-fs (loop4): 1 truncate cleaned up [ 174.044345][ T170] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 174.044366][ T170] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 174.044428][ T170] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 174.117328][ T9108] FAULT_INJECTION: forcing a failure. [ 174.117328][ T9108] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 174.117364][ T9108] CPU: 1 UID: 0 PID: 9108 Comm: syz.0.1932 Not tainted syzkaller #0 PREEMPT(voluntary) [ 174.117431][ T9108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 174.117449][ T9108] Call Trace: [ 174.117457][ T9108] [ 174.117466][ T9108] __dump_stack+0x1d/0x30 [ 174.117494][ T9108] dump_stack_lvl+0xe8/0x140 [ 174.117532][ T9108] dump_stack+0x15/0x1b [ 174.117555][ T9108] should_fail_ex+0x265/0x280 [ 174.117674][ T9108] should_fail+0xb/0x20 [ 174.117711][ T9108] should_fail_usercopy+0x1a/0x20 [ 174.117737][ T9108] _copy_from_user+0x1c/0xb0 [ 174.117785][ T9108] ___sys_sendmsg+0xc1/0x1d0 [ 174.117831][ T9108] __x64_sys_sendmsg+0xd4/0x160 [ 174.117863][ T9108] x64_sys_call+0x191e/0x3000 [ 174.117888][ T9108] do_syscall_64+0xd2/0x200 [ 174.117997][ T9108] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 174.118031][ T9108] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 174.118111][ T9108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.118142][ T9108] RIP: 0033:0x7fbe1f97eec9 [ 174.118161][ T9108] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 174.118241][ T9108] RSP: 002b:00007fbe1e3df038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 174.118265][ T9108] RAX: ffffffffffffffda RBX: 00007fbe1fbd5fa0 RCX: 00007fbe1f97eec9 [ 174.118278][ T9108] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 174.118359][ T9108] RBP: 00007fbe1e3df090 R08: 0000000000000000 R09: 0000000000000000 [ 174.118374][ T9108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 174.118391][ T9108] R13: 00007fbe1fbd6038 R14: 00007fbe1fbd5fa0 R15: 00007ffc495f1288 [ 174.118416][ T9108] [ 174.175263][ T9112] loop4: detected capacity change from 0 to 1024 [ 174.175702][ T9112] EXT4-fs: Ignoring removed orlov option [ 174.175817][ T9112] EXT4-fs: Ignoring removed nomblk_io_submit option [ 174.305591][ T9116] loop2: detected capacity change from 0 to 512 [ 174.407326][ T9123] loop1: detected capacity change from 0 to 128 [ 174.425754][ T9116] ext4: Bad value for 'stripe' [ 174.486918][ T9123] bio_check_eod: 2 callbacks suppressed [ 174.486939][ T9123] syz.1.1940: attempt to access beyond end of device [ 174.486939][ T9123] loop1: rw=2049, sector=145, nr_sectors = 95 limit=128 [ 174.516674][ T9116] loop2: detected capacity change from 0 to 2048 [ 174.537292][ T9121] syz.1.1940: attempt to access beyond end of device [ 174.537292][ T9121] loop1: rw=524288, sector=145, nr_sectors = 95 limit=128 [ 174.695824][ T9123] syz.1.1940: attempt to access beyond end of device [ 174.695824][ T9123] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 174.712742][ T3316] EXT4-fs unmount: 18 callbacks suppressed [ 174.712762][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 174.729560][ T9123] syz.1.1940: attempt to access beyond end of device [ 174.729560][ T9123] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 174.755082][ T3001] Alternate GPT is invalid, using primary GPT. [ 174.764543][ T3001] loop2: p2 p3 p7 [ 174.772587][ T9123] syz.1.1940: attempt to access beyond end of device [ 174.772587][ T9123] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 174.780149][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.797410][ T9123] syz.1.1940: attempt to access beyond end of device [ 174.797410][ T9123] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 174.826331][ T3001] Alternate GPT is invalid, using primary GPT. [ 174.834087][ T3001] loop2: p2 p3 p7 [ 174.844033][ T9133] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1942'. [ 174.867217][ T9133] netlink: 11 bytes leftover after parsing attributes in process `syz.4.1942'. [ 174.878309][ T9116] Alternate GPT is invalid, using primary GPT. [ 174.891725][ T9137] veth0: entered promiscuous mode [ 174.892838][ T9137] veth0: left promiscuous mode [ 174.908383][ T9116] loop2: p2 p3 p7 [ 174.946534][ T9140] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1944'. [ 174.964157][ T9133] bridge10: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 175.117602][ T5804] udevd[5804]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 175.136356][ T5979] udevd[5979]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory [ 175.154873][ T5861] udevd[5861]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 175.224185][ T9154] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1950'. [ 175.246717][ T9151] loop3: detected capacity change from 0 to 128 [ 175.281558][ T5804] udevd[5804]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 175.293675][ T5979] udevd[5979]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory [ 175.305746][ T9151] syz.3.1949: attempt to access beyond end of device [ 175.305746][ T9151] loop3: rw=2049, sector=145, nr_sectors = 95 limit=128 [ 175.307275][ T9156] udevd[9156]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 175.344734][ T9161] loop1: detected capacity change from 0 to 128 [ 175.363158][ T9149] syz.3.1949: attempt to access beyond end of device [ 175.363158][ T9149] loop3: rw=524288, sector=145, nr_sectors = 95 limit=128 [ 175.364315][ T9154] loop0: detected capacity change from 0 to 2048 [ 175.394641][ T9161] syz.1.1952: attempt to access beyond end of device [ 175.394641][ T9161] loop1: rw=2049, sector=145, nr_sectors = 95 limit=128 [ 175.425285][ T5861] udevd[5861]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 175.442105][ T9160] syz.1.1952: attempt to access beyond end of device [ 175.442105][ T9160] loop1: rw=524288, sector=145, nr_sectors = 95 limit=128 [ 175.467978][ T9154] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 175.508244][ T2] ================================================================== [ 175.516563][ T2] BUG: KCSAN: data-race in copy_process / free_pid [ 175.523199][ T2] [ 175.525585][ T2] read-write to 0xffffffff8685feb8 of 4 bytes by task 3319 on cpu 1: [ 175.533947][ T2] free_pid+0x77/0x180 [ 175.538035][ T2] free_pids+0x54/0xb0 [ 175.542201][ T2] release_task+0x9a9/0xb60 [ 175.546933][ T2] wait_consider_task+0x114a/0x1660 [ 175.552256][ T2] __do_wait+0xfa/0x510 [ 175.556524][ T2] do_wait+0xb7/0x250 [ 175.560607][ T2] kernel_wait4+0x16b/0x1e0 [ 175.565145][ T2] __x64_sys_wait4+0x91/0x120 [ 175.569958][ T2] x64_sys_call+0x2a6a/0x3000 [ 175.574656][ T2] do_syscall_64+0xd2/0x200 [ 175.579270][ T2] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.585298][ T2] [ 175.587756][ T2] read to 0xffffffff8685feb8 of 4 bytes by task 2 on cpu 0: [ 175.595247][ T2] copy_process+0x17fc/0x2000 [ 175.599964][ T2] kernel_clone+0x16c/0x5c0 [ 175.604493][ T2] kernel_thread+0xad/0xe0 [ 175.609286][ T2] kthreadd+0x28d/0x360 [ 175.613828][ T2] ret_from_fork+0x122/0x1b0 [ 175.618699][ T2] ret_from_fork_asm+0x1a/0x30 [ 175.623595][ T2] [ 175.625978][ T2] value changed: 0x800000da -> 0x800000d9 [ 175.631859][ T2] [ 175.634355][ T2] Reported by Kernel Concurrency Sanitizer on: [ 175.641911][ T2] CPU: 0 UID: 0 PID: 2 Comm: kthreadd Not tainted syzkaller #0 PREEMPT(voluntary) [ 175.651451][ T2] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 175.661799][ T2] ================================================================== [ 175.682185][ T9180] netlink: 'syz.2.1955': attribute type 7 has an invalid length. [ 175.694203][ T9154] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 175.715801][ T9154] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 98 with error 28 [ 175.733515][ T9154] EXT4-fs (loop0): This should not happen!! Data will be lost [ 175.733515][ T9154] [ 175.743485][ T9180] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=9180 comm=syz.2.1955 [ 175.748662][ T9154] EXT4-fs (loop0): Total free blocks count 0 [ 175.757565][ T9180] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=9180 comm=syz.2.1955 [ 175.793026][ T9154] EXT4-fs (loop0): Free/Dirty block details [ 175.803906][ T9154] EXT4-fs (loop0): free_blocks=2415919104 [ 175.814310][ T9154] EXT4-fs (loop0): dirty_blocks=112 [ 175.823721][ T9154] EXT4-fs (loop0): Block reservation details [ 175.834758][ T9154] EXT4-fs (loop0): i_reserved_data_blocks=7 [ 175.884614][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000900.