last executing test programs: 2m12.634581902s ago: executing program 1 (id=1204): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @multicast2}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) ptrace$cont(0x9, 0x0, 0x7, 0x3) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) openat$ipvs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f00000002c0)=@ethtool_sfeatures={0x3b, 0x2, [{0xfe, 0x80000000}, {0xfffffff9}]}}) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x18) add_key$keyring(&(0x7f0000000480), &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000020500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000002b0900020073797a310000000008000a40fffffffc140000001100010000000000000000000100800a"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2m12.530515804s ago: executing program 1 (id=1216): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff530000008003950323030302e75"], 0x15) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[], 0x15) r3 = dup(r2) write$P9_RLERRORu(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000005800)={0x18, 0xf, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b700000000200000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20) write$binfmt_elf64(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) 2m12.381540967s ago: executing program 1 (id=1209): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_io_uring_setup(0x117, &(0x7f0000000300)={0x0, 0x0, 0x10100, 0x200000, 0x1000000}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='rdma.current\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f00000000c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x24, 0x0, 0x94}) io_uring_enter(r1, 0x2d3e, 0x0, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) connect$unix(0xffffffffffffffff, 0x0, 0x0) r5 = syz_open_dev$mouse(&(0x7f00000004c0), 0x0, 0x800) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r5, &(0x7f0000000740)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f0000000600)=ANY=[@ANYBLOB="10000000101420002dbdc66f9787df25"], 0x10}, 0x1, 0x0, 0x0, 0x400c800}, 0x4004000) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0b00000008000000020000000400000005000000", @ANYRES32, @ANYRESDEC=r0, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\a\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r6, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000eb000000004000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000340)={r10, r8}) r11 = socket(0x40000000015, 0x5, 0x0) connect$inet(r11, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r11, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r11, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r11, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000900)="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", 0x3f1}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}], 0x3}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40) pselect6(0x40, &(0x7f00000002c0)={0x4, 0xffff, 0x645b, 0x5, 0x854c, 0x5, 0x67, 0x5}, 0x0, &(0x7f00000005c0)={0x9, 0x6, 0x3, 0x6, 0xd, 0x10000, 0x4, 0x5}, &(0x7f0000000600)={0x0, 0x989680}, 0x0) openat$cgroup_procs(r9, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) 2m12.289175589s ago: executing program 1 (id=1211): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='dctcp', 0x5) socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, 0x0, 0x0) unshare(0x8000000) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)={[{@usrquota}, {@noblock_validity}, {@bh}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@debug}, {@inlinecrypt}]}, 0x6, 0x5fc, &(0x7f0000000c00)="$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") syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1aca421, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) socket$inet6_tcp(0xa, 0x1, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r3, 0x0, 0x0) sendmsg$inet(r3, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0xff0f}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x21, &(0x7f0000000040), 0x4) recvmsg(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1, 0x0, 0x1800}, 0x0) 2m11.770137769s ago: executing program 1 (id=1215): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x5, 0x4, 0x9, 0xb}, 0x50) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000004c0)=ANY=[@ANYRES32=r0, @ANYRES32, @ANYBLOB='\a'], 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x3, &(0x7f0000000140)=[{0x45, 0x0, 0x1, 0xffffffd0}, {0x3d}, {0x16, 0x0, 0x3, 0x20000000}]}) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_LBT_MODE(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000cc0), r1) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000012c0), r1) sendmsg$NLBL_MGMT_C_VERSION(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000300)={0x58, r2, 0xf03, 0x0, 0x0, {}, [@NLBL_MGMT_A_DOMAIN={0x41, 0x1, '\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x02\x00\x00\v\"\xd6\xdc\xb5\xf9\rt\x85\xfb\x03\x80\xa8\x9f\x88\x0e\xab\x9d\xa4J\x86\xf5\x12\xed\x83\xfaAp\r(\xed\xdft\xec\xcf\xde\xfa\xf3?5\xe5c\xd0\xcf'}]}, 0x58}}, 0x20008000) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010023010000340200000200000008000100", @ANYRES32=r4], 0x1c}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000180)) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000001c0)) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r7 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r8 = socket$nl_rdma(0x10, 0x3, 0x14) syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r11, 0xf000, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r9, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r10, &(0x7f00000001c0)='m', 0xfffffdfc}]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000006040)={&(0x7f00000001c0)={0x20, 0x140f, 0x1, 0x70bd27, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x8, 0x45, 'srp\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000010}, 0xc4000) r12 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r12, 0x0, &(0x7f00000000c0)=0x0) bind(r7, &(0x7f00000001c0)=@nfc_llcp={0x27, r13, 0x0, 0x5, 0x6, 0x4, "e53f4758cd8343c099b6b1cf9d980968224b7dab2e8e6d72b70604a0be2f47ba6b3c2a0f0bff37d8587f642ce8c971dd84e6673763b339cdd065c6286796c8"}, 0x80) 2m11.586922422s ago: executing program 1 (id=1222): socket$kcm(0x11, 0x2, 0x300) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000003a00)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x9}}, 0x10, &(0x7f0000000b40)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001a00), 0x101d0}], 0x4}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0xa1, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) 2m11.572846353s ago: executing program 32 (id=1222): socket$kcm(0x11, 0x2, 0x300) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000003a00)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x9}}, 0x10, &(0x7f0000000b40)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001a00), 0x101d0}], 0x4}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0xa1, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) 1.237025147s ago: executing program 2 (id=3938): mkdir(&(0x7f0000000540)='./file0\x00', 0x43) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000791000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b708000000000044eb42007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000112dd627d5d42fb41d000201000085000000410000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x51}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = dup(r1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000500)='9p_client_req\x00', r4}, 0x10) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x1010010, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[], [], 0x6b}}) 1.217912887s ago: executing program 4 (id=3939): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x1001a, &(0x7f0000000240)={[{@jqfmt_vfsv1}, {@resuid={'resuid', 0x3d, 0xee01}}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@block_validity}, {@jqfmt_vfsv1}]}, 0x1, 0x42e, &(0x7f0000000940)="$eJzs20tvG0UcAPD/rpOUvkgo5dEHECiIiEfSpAV64AICiQsSEhzKMSRpFeI2qAkSrSIICHFFlbgjjkh8Ak5wQcAJiSsfAFWqUC4tnIzW3k1sx3k4deKCfz9pk5ndcWb+3hl7dicbQM8azn4kEYci4o+IGKxlGwsM137dXlma+ntlaSqJSuXtv5JquVsrS1NF0eJ1B/PMSBqRfp7EiRb1Lly9NjdZLs9cyfNji5c+GFu4eu352UuTF2cuzlyeOHfu7Jnxl16ceKEjcWZtunX84/mTx9549/qbU+evv/fLd0kRf1McHTK82cGnKpUOV9ddh+vSSV8XG0JbShGRna7+6vgfjFKsnbzBeP2zrjYO2FWVSqVycOPDyxXgfyyJbrcA6I7iiz67/i22PZp63BVuvlK7AMrivp1vtSN9keZl+puubztpOCLOL//zdbbF7tyHAABo8EM2/3mu1fwvjQfryt2brw0NRcR9EXEkIu6PiKMR8UBEtexDEfFwm/U3L5Ksn/+kN3YU2DZl87+X87WtxvlfMfuLoVKeO1yNvz+5MFueOZ2/JyPRvy/Lj29Sx4+v/f7lRsfq53/ZltVfzAXzdtzo29f4munJxck7ibnezU8jjve1ij9ZXQlIIuJYRBzfYR2zz3x7cqNjW8e/iQ6sM1W+iXi6dv6Xoyn+QrL5+uTYPVGeOT1W9Ir1fv3ti7c2qv+O4u+A7PwfaNn/V+MfSurXaxfa+/v7tji+0/4/kLxTTQ/k+z6aXFy8Mh4xMNfYKar7J9bni/JZ/COnWo//I7H2TpyIiKwTPxIRj0bEY3nbH4+IJyLi1CYx/vzqk+/vPP7dlcU/3db5X0sMRPOe1onS3E/fN1Q61E782fk/W02N5Hu28/m3nXa135sBAADgvymNiEORpKOr6TQdHa39v/zROJCW5xcWn70w/+Hl6dozAkPRnxZ3ugbr7oeO55f1RX6iKX8mv2/8VWl/NT86NV+e7nbw0OMObjD+M3+Wut06YNd5Xgt6l/EPvcv4h95l/EPvajH+93ejHcDea/X9/0kX2gHsvabxb9kPeojrf+hdxj/0LuMfetLC/tj6IXkJiXWJSO+KZkjsUqLbn0wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACd8W8AAAD//9Oa5Js=") socket$netlink(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x0, 0x4}}, 0x10) listen(r1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000200)=0x87) r2 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r2, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x3, {0x41}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x480c0}, 0x0) r3 = accept4(r1, 0x0, 0x0, 0x400000000000000) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=@newlink={0x34, 0x10, 0x200, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5a303}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}]}, 0x34}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) utime(&(0x7f0000000080)='./file1\x00', 0x0) 1.156911388s ago: executing program 4 (id=3941): bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000540)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$iso9660(&(0x7f0000001240), &(0x7f0000000000)='./file1\x00', 0x214c19, &(0x7f00000004c0)=ANY=[], 0x2f, 0x5b2, &(0x7f0000001280)="$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") 1.129258609s ago: executing program 2 (id=3942): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000340)='mm_page_free\x00', r2, 0x0, 0x100000002}, 0x18) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0}, 0x50) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) connect$inet6(r5, &(0x7f00000003c0)={0xa, 0xfffe, 0x3000001, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) write(r5, &(0x7f00000000c0)="8f2a0a65bd8c002b0304000e0580a7b6070d63e286a5cefe", 0x5ac) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r6, 0x0, 0x3}, 0x18) r7 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r8 = openat$random(0xffffffffffffff9c, &(0x7f0000000380), 0x80100, 0x0) ioctl$RNDGETENTCNT(r8, 0x80045200, &(0x7f00000003c0)) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_GETFMT(r7, 0xffffffff80000402, r9, &(0x7f0000000140)) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) ioctl$PIO_UNIMAP(r3, 0x4b67, &(0x7f0000000f40)={0x2, &(0x7f0000000f00)=[{0x8, 0xc}, {0xd, 0xfffb}]}) recvmmsg(r7, &(0x7f0000000e80)=[{{&(0x7f0000000580)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000600)=""/240, 0xf0}, {&(0x7f0000000700)=""/104, 0x68}, {&(0x7f0000000780)=""/136, 0x88}, {&(0x7f0000000840)=""/135, 0x87}], 0x4, &(0x7f0000000900)=""/221, 0xdd}, 0x9}, {{&(0x7f0000000a00)=@nl, 0x80, &(0x7f0000000e00)=[{&(0x7f0000000a80)=""/86, 0x56}, {&(0x7f0000000b00)=""/173, 0xad}, {&(0x7f0000000bc0)=""/210, 0xd2}, {&(0x7f0000000cc0)=""/160, 0xa0}, {&(0x7f0000000d80)=""/70, 0x46}], 0x5}}], 0x2, 0x40002100, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c00024000000000000000000c000140000000000000000714000000110001"], 0xdc}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) sendmsg$NFT_MSG_GETRULE(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="44000000190a0102"], 0x44}}, 0x0) pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f00000002c0)='./file0/file0\x00') 1.096376399s ago: executing program 4 (id=3944): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0, 0x0, 0x40}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x35, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000018000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) 1.06905641s ago: executing program 4 (id=3946): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='kmem_cache_free\x00', r1, 0x0, 0x100000000}, 0x18) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000640)=0x1802, 0x4) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0xfd, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x8084) 840.319684ms ago: executing program 4 (id=3949): r0 = syz_usb_connect(0x3, 0x3e, &(0x7f00000004c0)={{0x12, 0x1, 0x110, 0x8c, 0x66, 0x27, 0x40, 0x19d2, 0x1283, 0x1e31, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2c, 0x1, 0x4, 0x4, 0xd0, 0xe3, [{{0x9, 0x4, 0x51, 0x2, 0x1, 0xff, 0xff, 0xff, 0x7, [@uac_as={[@format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0xfb, 0x2, 0x0, 0x71, "44e5"}]}], [{{0x9, 0x5, 0x6, 0x10, 0x3ff, 0x87, 0x9, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x5f, 0x3}]}}]}}]}}]}}, &(0x7f0000000640)={0xa, &(0x7f0000000400)={0xa, 0x6, 0x0, 0x8, 0x8, 0xd, 0x90081057c3f35ee5, 0x4}, 0x105, &(0x7f0000000c00)={0x5, 0xf, 0x105, 0x2, [@generic={0xf5, 0x10, 0x1, "25407320feca4af6565504c6465d8dcde91a662bf33179aefb5c79deb00b175139996eb9a55c31346cea45e2fa4114af8ab63a10a130a428a2077a168a6405ff1db52ed7921a7f93800a4be49aabd4e3740b120fbd6c5dd502e71e381eb2f35cc65787d921ce47cfd323dc52d6373295d6d5cdfd20af271ac741016f0e0e4bba8b49e5cfa07083d57e55f7607079e1ab853eb540a50dc65dbd265181f896122a6b886a1901c20cf324260e0cbc46a83d71c7d889716f15690b30377f95701bee235106334f0e623f1951d05a0abe563a9f9af30ac89297b94becaa277f3c4479447479974cb15ee30d16fc32e0cfb0af97b4"}, @wireless={0xb, 0x10, 0x1, 0xc, 0xd7, 0x7f, 0xfe, 0x8, 0x1}]}, 0x2, [{0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x401}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x80c}}]}) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000e00)={0x14, &(0x7f0000000d40)={0x40, 0x4, 0x68, {0x68, 0x23, "cf1195ab8cd953dd9efce1f8a8315409b7b967330fd3907780af955fe40a41d297ee67e6118f4d0039954f267131ff0ef8251ed57abc2b55fbe4950bb547edc430b086f81c491a1ff8337e3aae10466bffc14bcfd9f06013d6c4e18a2c1f466a6f59eae06799"}}, &(0x7f0000000dc0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000002000)={0x1c, &(0x7f0000000e40)={0x0, 0x16, 0xa5, "956fcb577232d99ab144779ec76a7fae7b23ac48937d6c9180f9a66ed67020e9e044c7a553a0a1455fb1a32000ac48765044b59288e56fbc983b2a76a808149596976455668e5bb7bbc0750ec2b400895ac6079a35c4829c69cf2abbea8905ac349fcc0e634e4ad878e973e5692f8dcad1d292dfcc9eac384ae4d5903e1e8106a3a96d282ee325e0e2556ecaed23179d9b555fdac3954f02f178ddc06010ceff9350befaab"}, &(0x7f0000001f80)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000001fc0)={0x0, 0x8, 0xfffffffffffffe0f, 0x7}}) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a500850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000080000000c"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f00000002c0)='rxrpc_peer\x00'}, 0x18) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=[{0x18, 0x110, 0x1, 'p'}], 0x18}, 0x0) 531.30813ms ago: executing program 3 (id=3957): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f00000000c0)='asymmetric\x00', 0x0) 478.771141ms ago: executing program 3 (id=3959): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0x20, &(0x7f00000001c0)={&(0x7f0000000100)=""/73, 0x49, 0x0, &(0x7f0000000240)=""/194, 0xc2}}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x2, 0xa, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) listen(0xffffffffffffffff, 0x0) epoll_create(0x1) syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080)) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000180)={0x60, 0x2, &(0x7f00001c7000/0x3000)=nil, &(0x7f00001c7000/0x1000)=nil, 0x0, 0x0, 0x0, 0x2000000000000002, 0x7, 0x42, 0x51, 0x20}) r2 = syz_open_dev$loop(&(0x7f0000000280), 0x6, 0x8000) ioctl$AUTOFS_IOC_PROTOSUBVER(r2, 0x80049367, 0x0) ioctl$BLKPG(r2, 0x1269, &(0x7f0000000080)={0x1, 0x0, 0x98, &(0x7f0000000140)={0x7, 0x8000000000000000, 0x3}}) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x4, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x100, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1fb}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r4}, 0x18) r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000002e40), 0x2, 0x0) write$UHID_CREATE(r5, &(0x7f0000002ec0)={0x0, {'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000002e80)=""/53, 0x35, 0x8, 0x6, 0x7, 0xb, 0x3}}, 0x120) read(r5, &(0x7f00000076c0)=""/252, 0xfc) pwrite64(r1, &(0x7f0000000840)="ad9266171f617e07e90e782f090f39bdf5d28c2f19c23fd6c6634bdb4f98bdc016d7257147fffd496686e56778eaf62577f4bcd0d6b78292be5de00cff9302be06cb1fc0a62ca9ac6bb92f9197c376ff44bdb74cf557f4d5df8eba7c81c1a869f6fa1f84914ce1d4a1f5873a4b23418ef3d2363bfdff29e8c2f6593ab62dc3a9d1f88a140f3dae33fffa5d003e8eea7d8727df84323872450b16d7c6338861e1cf84f9fad46cf1f796b57715571643105272ba7fa7c6ddf9627cde60e4e809554c61775e2a251ea536603fcfc45e", 0xce, 0x87b) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r3}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r6}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) r8 = socket$can_j1939(0x1d, 0x2, 0x7) timer_create(0x5, &(0x7f0000000380)={0x0, 0x0, 0x4, @thr={&(0x7f0000000500)="67d54e1a582652cc50d2a38c3b9c4caa3488f269a25f33481336270e25c598e077485a2069d55bffbc660fb7319a77eb147d15d03409eb3a46fb66ed28b2347b59e7f48e28e8c1b5273bf16fc02bae7f9e0f14c874e96b6a458faf1502537f588006ce816b1bb403053d8e4e459443b5b985b7b92e3197ff4c8f82e21491a34ac76a226fc2fa9f6e1542a7111b3c85069fd43f34d921d3dc1169fad1245cfb7ce94d2adad6b92f937829c40cdf797c0e7f5787e01cb15707b8797dd4f20ca07a0902f30cc8b8021dad8ac9d7b6b7cdcc3d393551a2896ec962ebec11e0fc2bcdb3", &(0x7f0000000600)="bde0a677b70ce9bc0275d1ec7f9d5be5866afcd3681df5c33d215e9c8d2f7196f3e3709f40ac68f64ddcf15eb466136bee99d8594eba2e21a4f7d1b9f76058984e29e8074a82b402a7ce3885fdb10a45f15a41d0be56fb074d9dbc1083e550d6cac889efd7c226075c84dc5841880b1820ad31f893e3592bdb9d4bf0ef01522d76833a7f8835d1e63afa2246be70ff57d1d0aaef05aa7860fd4c8aebc7"}}, &(0x7f00000006c0)) setsockopt$SO_J1939_PROMISC(r8, 0x6b, 0x2, &(0x7f0000000000), 0x4) 478.425711ms ago: executing program 0 (id=3960): syz_mount_image$ext4(&(0x7f0000000140)='ext2\x00', &(0x7f0000000080)='./file0\x00', 0x2000008, &(0x7f00000003c0)={[{@block_validity}, {@nobarrier}, {@jqfmt_vfsv0}]}, 0xfb, 0x477, &(0x7f0000000880)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000440)='sched_switch\x00', r0}, 0x18) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=@base={0x18, 0x4, 0x41, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4002, 0x5}, 0x48) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x60000) poll(&(0x7f0000000000)=[{r1, 0x12}], 0x1, 0x24) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/pid\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x3, &(0x7f0000000000)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x1, 0xa, 0x5, 0x7, 0xc1}, 0x50) r2 = syz_io_uring_setup(0xbda, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0x1, 0x40000333}, &(0x7f0000000dc0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) 471.743602ms ago: executing program 3 (id=3961): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x10, &(0x7f00000003c0)={[], [], 0x2c}, 0x84, 0x4c2, &(0x7f0000000e80)="$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") sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x20004000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) madvise(&(0x7f0000000000/0x4000)=nil, 0x0, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000140), &(0x7f0000000040)='%pI4 \x00'}, 0x2a) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000280)={&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f00000008c0)=""/237, 0xed, 0x1, &(0x7f0000000a00)=""/213, 0xd5}, &(0x7f0000000300)=0x40) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) getgroups(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) r3 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x2000) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x300, 0x0, 0x0, 0x0}) 441.493632ms ago: executing program 5 (id=3962): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000060000000500000000100000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000100000"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000210018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010000300"/20, @ANYRES32=r3, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c0002"], 0x58}, 0x1, 0x2}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000940)={r1, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000005c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0xe, &(0x7f0000000680)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f00000006c0), &(0x7f0000000700), 0x8, 0x3d, 0x8, 0x8, &(0x7f0000000740)}}, 0x10) getpeername$packet(0xffffffffffffffff, &(0x7f0000000980)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000a40)=0x14) r6 = socket(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r8) getsockname$packet(r8, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=@newtfilter={0x34, 0x28, 0x575ac7824d421509, 0x70bd2a, 0x4, {0x0, 0x0, 0x0, r9, {}, {0x1}, {0x4, 0x3d}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}}, 0x40) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000a80)={0x0, @multicast2, @empty}, &(0x7f0000000ac0)=0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000b00)={'veth1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000c00)={'erspan0\x00', &(0x7f0000000b40)={'syztnl2\x00', 0x0, 0x8080, 0x8, 0x5, 0x4, {{0x22, 0x4, 0x1, 0x3, 0x88, 0x66, 0x0, 0x7f, 0x29, 0x0, @multicast2, @empty, {[@cipso={0x86, 0x1a, 0x3, [{0x5, 0x8, "b97dd0149659"}, {0x2, 0xc, "4acf5bfe75de61d990a2"}]}, @ssrr={0x89, 0xb, 0x54, [@dev={0xac, 0x14, 0x14, 0x28}, @local]}, @rr={0x7, 0x1f, 0x4e, [@empty, @broadcast, @multicast1, @multicast2, @loopback, @private=0xa010100, @local]}, @timestamp_prespec={0x44, 0x1c, 0x89, 0x3, 0x1, [{@remote}, {@local, 0x8}, {@empty, 0x2}]}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0xc, 0xc6, 0x1, 0xc, [{@local, 0x2}]}, @generic={0x7, 0x2}]}}}}}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c40)={'ipvlan1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000d00)={'tunl0\x00', &(0x7f0000000c80)={'tunl0\x00', 0x0, 0x1, 0x20, 0x3, 0xbc, {{0x14, 0x4, 0x1, 0x33, 0x50, 0x65, 0x0, 0x7, 0x2f, 0x0, @remote, @local, {[@timestamp_addr={0x44, 0x34, 0x5e, 0x1, 0x6, [{@local, 0x2}, {@remote, 0xffffd1c5}, {@private=0xa010101, 0x80}, {@empty, 0x8}, {@remote, 0x6}, {@local, 0x338}]}, @generic={0x88, 0x7, "152c8d6317"}, @noop]}}}}}) r15 = socket$nl_generic(0x10, 0x3, 0x10) r16 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000100)={'ipvlan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r15, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r16, @ANYBLOB="010000000000fedbdf25080000001800028014000380100001800400030008000100050000000c00018008000100", @ANYRES32=r17], 0x38}, 0x1, 0x0, 0x0, 0x4000804}, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000016c0)={&(0x7f0000001740)=ANY=[@ANYBLOB="80090000", @ANYRES16=0x0, @ANYBLOB="20002bbd7000ffdbdf250200000008000100", @ANYRES32=0x0, @ANYBLOB="3c02028040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="08000700000000004c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e670000000038000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000050003000300000008000400060000003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="40000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006c6f616462616c616e636500400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004004000000008000600", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="08000700000000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004003a2e000008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="2c0102806c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000003c000400040005201000000003000503070000000500b5070d000000ff0f0080b3000000b2860209030000000000030e0f460412010004010700000038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000080000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000200000008000600", @ANYRES32=0x0, @ANYBLOB="44000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000110004006163746976656261636b75700000000008000100", @ANYRES32=0x0, @ANYBLOB="7400028038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000300000038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000700000008000100", @ANYRES32=0x0, @ANYBLOB="a801028040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="0800070000000000400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000600000008000600", @ANYRES32=r3, @ANYBLOB="6c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000003c0004000800034705000000400001098700000009000800ff0000000300610908000000050004000900000004008005d8c50000000108800400000040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000000000008000600", @ANYRES32=r4, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000000000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000000000008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="8c0102803c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r5, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="6c01028040000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000f000400726f756e64726f62696e00003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r9, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r10, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b00000008000400feffffff080006", @ANYRES32=r11, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r12, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003", @ANYRES32=r13, @ANYBLOB="b800028040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e00000008000400fffbffff08000600", @ANYRES32=r14, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r17, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000050003000300000008000400ffffffff"], 0x980}, 0x1, 0x0, 0x0, 0x40000}, 0xc000) 399.083563ms ago: executing program 5 (id=3963): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) 380.058133ms ago: executing program 5 (id=3964): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) syz_mount_image$iso9660(&(0x7f0000001240), &(0x7f0000000000)='./file1\x00', 0x214c19, &(0x7f00000004c0)=ANY=[], 0x2f, 0x5b2, &(0x7f0000001280)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xd2b, 0x70bd2a, 0x25dfdbfa, {0x0, 0x0, 0x0, r5, {0x7}, {}, {0xe, 0x1}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x893}, 0x24000084) 347.528964ms ago: executing program 0 (id=3965): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYRESOCT, @ANYRES32, @ANYRES16], 0x1, 0x36e, &(0x7f0000000c00)="$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") r0 = open(&(0x7f0000000780)='./bus\x00', 0x145c7e, 0x0) io_setup(0x5ff, &(0x7f0000000400)=0x0) io_submit(r1, 0x1, &(0x7f0000001d00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000000)="96", 0x1}]) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000000340)={"908363d22079de6abe8f859279687f02", r3, 0x0, {0x9, 0x5}, {0x800000005, 0x9}, 0x3, [0x8001, 0x7, 0x5, 0x9, 0x2, 0x1, 0x7, 0x0, 0x100, 0x100000000000616e, 0x7, 0x4, 0x3, 0x6, 0x8d, 0x1]}) timerfd_create(0x5, 0x80000) stat(&(0x7f0000000040)='./file0\x00', 0x0) fchown(r0, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000c1010000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000070000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000059729ec6850000008200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) r6 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) 269.114245ms ago: executing program 2 (id=3966): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r0}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x52e, &(0x7f0000000640)="$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") mount(0x0, 0x0, &(0x7f0000000080)='ramfs\x00', 0x2014800, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) 260.802035ms ago: executing program 4 (id=3967): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x3f, 0x0, 0x0, 0x0, 0xb}, 0xc8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000080000000000000003000000180600000000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) read(r3, 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x6, 0xfc, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000800)="2f653db1cf70", 0x0, 0x4, 0x0, 0x1, 0x0}) 255.858065ms ago: executing program 3 (id=3968): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x7) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) sendmsg$netlink(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{0x0}], 0x1}, 0x0) 234.511466ms ago: executing program 5 (id=3969): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0x20, &(0x7f00000001c0)={&(0x7f0000000100)=""/73, 0x49, 0x0, &(0x7f0000000240)=""/194, 0xc2}}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x2, 0xa, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) listen(0xffffffffffffffff, 0x0) epoll_create(0x1) syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080)) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000180)={0x60, 0x2, &(0x7f00001c7000/0x3000)=nil, &(0x7f00001c7000/0x1000)=nil, 0x0, 0x0, 0x0, 0x2000000000000002, 0x7, 0x42, 0x51, 0x20}) r2 = syz_open_dev$loop(&(0x7f0000000280), 0x6, 0x8000) ioctl$AUTOFS_IOC_PROTOSUBVER(r2, 0x80049367, 0x0) ioctl$BLKPG(r2, 0x1269, &(0x7f0000000080)={0x1, 0x0, 0x98, &(0x7f0000000140)={0x7, 0x8000000000000000, 0x3}}) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x4, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x100, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1fb}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r4}, 0x18) r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000002e40), 0x2, 0x0) write$UHID_CREATE(r5, &(0x7f0000002ec0)={0x0, {'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000002e80)=""/53, 0x35, 0x8, 0x6, 0x7, 0xb, 0x3}}, 0x120) read(r5, &(0x7f00000076c0)=""/252, 0xfc) pwrite64(r1, &(0x7f0000000840)="ad9266171f617e07e90e782f090f39bdf5d28c2f19c23fd6c6634bdb4f98bdc016d7257147fffd496686e56778eaf62577f4bcd0d6b78292be5de00cff9302be06cb1fc0a62ca9ac6bb92f9197c376ff44bdb74cf557f4d5df8eba7c81c1a869f6fa1f84914ce1d4a1f5873a4b23418ef3d2363bfdff29e8c2f6593ab62dc3a9d1f88a140f3dae33fffa5d003e8eea7d8727df84323872450b16d7c6338861e1cf84f9fad46cf1f796b57715571643105272ba7fa7c6ddf9627cde60e4e809554c61775e2a251ea536603fcfc45e", 0xce, 0x87b) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r3}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r6}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) setsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, &(0x7f0000000000), 0x4) 227.589316ms ago: executing program 2 (id=3970): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000540)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) syz_mount_image$iso9660(&(0x7f0000001240), &(0x7f0000000000)='./file1\x00', 0x214c19, &(0x7f00000004c0)=ANY=[], 0x2f, 0x5b2, &(0x7f0000001280)="$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") 203.426566ms ago: executing program 3 (id=3971): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0x20, &(0x7f00000001c0)={&(0x7f0000000100)=""/73, 0x49, 0x0, &(0x7f0000000240)=""/194, 0xc2}}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x2, 0xa, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) listen(0xffffffffffffffff, 0x0) epoll_create(0x1) syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080)) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000180)={0x60, 0x2, &(0x7f00001c7000/0x3000)=nil, &(0x7f00001c7000/0x1000)=nil, 0x0, 0x0, 0x0, 0x2000000000000002, 0x7, 0x42, 0x51, 0x20}) r2 = syz_open_dev$loop(&(0x7f0000000280), 0x6, 0x8000) ioctl$AUTOFS_IOC_PROTOSUBVER(r2, 0x80049367, 0x0) ioctl$BLKPG(r2, 0x1269, &(0x7f0000000080)={0x1, 0x0, 0x98, &(0x7f0000000140)={0x7, 0x8000000000000000, 0x3}}) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x4, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x100, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1fb}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r4}, 0x18) r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000002e40), 0x2, 0x0) write$UHID_CREATE(r5, &(0x7f0000002ec0)={0x0, {'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000002e80)=""/53, 0x35, 0x8, 0x6, 0x7, 0xb, 0x3}}, 0x120) read(r5, &(0x7f00000076c0)=""/252, 0xfc) pwrite64(r1, &(0x7f0000000840)="ad9266171f617e07e90e782f090f39bdf5d28c2f19c23fd6c6634bdb4f98bdc016d7257147fffd496686e56778eaf62577f4bcd0d6b78292be5de00cff9302be06cb1fc0a62ca9ac6bb92f9197c376ff44bdb74cf557f4d5df8eba7c81c1a869f6fa1f84914ce1d4a1f5873a4b23418ef3d2363bfdff29e8c2f6593ab62dc3a9d1f88a140f3dae33fffa5d003e8eea7d8727df84323872450b16d7c6338861e1cf84f9fad46cf1f796b57715571643105272ba7fa7c6ddf9627cde60e4e809554c61775e2a251ea536603fcfc45e", 0xce, 0x87b) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r3}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r6}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) r8 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_PROMISC(r8, 0x6b, 0x2, &(0x7f0000000000), 0x4) 202.944466ms ago: executing program 2 (id=3972): mkdir(&(0x7f0000000540)='./file0\x00', 0x43) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000791000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b708000000000044eb42007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000112dd627d5d42fb41d000201000085000000410000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = dup(r1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000500)='9p_client_req\x00', r3}, 0x10) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x1010010, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [], 0x6b}}) 166.336477ms ago: executing program 0 (id=3973): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000060000000500000000100000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000100000"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000210018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010000300"/20, @ANYRES32=r3, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c0002"], 0x58}, 0x1, 0x2}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000940)={r1, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000005c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0xe, &(0x7f0000000680)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f00000006c0), &(0x7f0000000700), 0x8, 0x3d, 0x8, 0x8, &(0x7f0000000740)}}, 0x10) getpeername$packet(0xffffffffffffffff, &(0x7f0000000980)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000a40)=0x14) r6 = socket(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r8) getsockname$packet(r8, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=@newtfilter={0x34, 0x28, 0x575ac7824d421509, 0x70bd2a, 0x4, {0x0, 0x0, 0x0, r9, {}, {0x1}, {0x4, 0x3d}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}}, 0x40) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000a80)={0x0, @multicast2, @empty}, &(0x7f0000000ac0)=0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000b00)={'veth1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000c00)={'erspan0\x00', &(0x7f0000000b40)={'syztnl2\x00', 0x0, 0x8080, 0x8, 0x5, 0x4, {{0x22, 0x4, 0x1, 0x3, 0x88, 0x66, 0x0, 0x7f, 0x29, 0x0, @multicast2, @empty, {[@cipso={0x86, 0x1a, 0x3, [{0x5, 0x8, "b97dd0149659"}, {0x2, 0xc, "4acf5bfe75de61d990a2"}]}, @ssrr={0x89, 0xb, 0x54, [@dev={0xac, 0x14, 0x14, 0x28}, @local]}, @rr={0x7, 0x1f, 0x4e, [@empty, @broadcast, @multicast1, @multicast2, @loopback, @private=0xa010100, @local]}, @timestamp_prespec={0x44, 0x1c, 0x89, 0x3, 0x1, [{@remote}, {@local, 0x8}, {@empty, 0x2}]}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0xc, 0xc6, 0x1, 0xc, [{@local, 0x2}]}, @generic={0x7, 0x2}]}}}}}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c40)={'ipvlan1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000d00)={'tunl0\x00', &(0x7f0000000c80)={'tunl0\x00', 0x0, 0x1, 0x20, 0x3, 0xbc, {{0x14, 0x4, 0x1, 0x33, 0x50, 0x65, 0x0, 0x7, 0x2f, 0x0, @remote, @local, {[@timestamp_addr={0x44, 0x34, 0x5e, 0x1, 0x6, [{@local, 0x2}, {@remote, 0xffffd1c5}, {@private=0xa010101, 0x80}, {@empty, 0x8}, {@remote, 0x6}, {@local, 0x338}]}, @generic={0x88, 0x7, "152c8d6317"}, @noop]}}}}}) r15 = socket$nl_generic(0x10, 0x3, 0x10) r16 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000100)={'ipvlan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r15, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r16, @ANYBLOB="010000000000fedbdf25080000001800028014000380100001800400030008000100050000000c00018008000100", @ANYRES32=r17], 0x38}, 0x1, 0x0, 0x0, 0x4000804}, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000016c0)={&(0x7f0000001740)=ANY=[@ANYBLOB="80090000", @ANYRES16=0x0, @ANYBLOB="20002bbd7000ffdbdf250200000008000100", @ANYRES32=0x0, @ANYBLOB="3c02028040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="08000700000000004c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e670000000038000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000050003000300000008000400060000003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="40000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006c6f616462616c616e636500400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004004000000008000600", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="08000700000000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004003a2e000008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="2c0102806c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000003c000400040005201000000003000503070000000500b5070d000000ff0f0080b3000000b2860209030000000000030e0f460412010004010700000038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000080000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000200000008000600", @ANYRES32=0x0, @ANYBLOB="44000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000110004006163746976656261636b75700000000008000100", @ANYRES32=0x0, @ANYBLOB="7400028038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000300000038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000700000008000100", @ANYRES32=0x0, @ANYBLOB="a801028040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="0800070000000000400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000600000008000600", @ANYRES32=r3, @ANYBLOB="6c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000003c0004000800034705000000400001098700000009000800ff0000000300610908000000050004000900000004008005d8c50000000108800400000040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000000000008000600", @ANYRES32=r4, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000000000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000000000008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="8c0102803c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r5, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="6c01028040000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000f000400726f756e64726f62696e00003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r9, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r10, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b00000008000400feffffff080006", @ANYRES32=r11, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r12, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003", @ANYRES32=r13, @ANYBLOB="b800028040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e00000008000400fffbffff08000600", @ANYRES32=r14, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r17, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000050003000300000008000400ffffffff"], 0x980}, 0x1, 0x0, 0x0, 0x40000}, 0xc000) 153.742127ms ago: executing program 5 (id=3974): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) mq_open(0x0, 0x40, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x2, &(0x7f0000001480)={[{@oldalloc}]}, 0x1, 0x5ad, &(0x7f0000000180)="$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") bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001140)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00'}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000002040)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000002000ffdbdf25010000001400020077673100000000000000000000000000380008803400008006000500080d000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffef04000180"], 0x60}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={0xffffffffffffffff, 0x5, 0x1, 0x0, &(0x7f0000000000)='\x00', 0x0, 0xcd51, 0x0, 0x0, 0xfffffffffffffec8, 0x0, 0x0, 0x4}, 0x50) lstat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x3, &(0x7f0000000740)=[0xffffffffffffffff, 0x0, 0x0]) setgroups(0x2, &(0x7f0000000780)=[r4, r5]) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000010000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0xff38}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) mq_getsetattr(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x80, 0x2, 0xfffe}, &(0x7f0000000280)) 138.641637ms ago: executing program 3 (id=3975): syz_mount_image$ext4(&(0x7f0000000140)='ext2\x00', &(0x7f0000000080)='./file0\x00', 0x2000008, &(0x7f00000003c0)={[{@block_validity}, {@nobarrier}, {@jqfmt_vfsv0}]}, 0xfb, 0x477, &(0x7f0000000880)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000440)='sched_switch\x00', r0}, 0x18) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=@base={0x18, 0x4, 0x41, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4002, 0x5}, 0x48) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x60000) poll(&(0x7f0000000000)=[{r1, 0x12}], 0x1, 0x24) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/pid\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x3, &(0x7f0000000000)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x1, 0xa, 0x5, 0x7, 0xc1}, 0x50) r2 = syz_io_uring_setup(0xbda, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0x1, 0x40000333}, &(0x7f0000000dc0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) 127.180528ms ago: executing program 0 (id=3976): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x1001a, &(0x7f0000000240)={[{@jqfmt_vfsv1}, {@resuid={'resuid', 0x3d, 0xee01}}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@block_validity}, {@jqfmt_vfsv1}]}, 0x1, 0x42e, &(0x7f0000000940)="$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") socket$netlink(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x0, 0x4}}, 0x10) listen(r1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000200)=0x87) r2 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r2, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x3, {0x41}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x480c0}, 0x0) r3 = accept4(r1, 0x0, 0x0, 0x400000000000000) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=@newlink={0x34, 0x10, 0x200, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5a303}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}]}, 0x34}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) utime(&(0x7f0000000080)='./file1\x00', 0x0) 83.587559ms ago: executing program 2 (id=3977): r0 = syz_usb_connect(0x3, 0x3e, &(0x7f00000004c0)={{0x12, 0x1, 0x110, 0x8c, 0x66, 0x27, 0x40, 0x19d2, 0x1283, 0x1e31, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2c, 0x1, 0x4, 0x4, 0xd0, 0xe3, [{{0x9, 0x4, 0x51, 0x2, 0x1, 0xff, 0xff, 0xff, 0x7, [@uac_as={[@format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0xfb, 0x2, 0x0, 0x71, "44e5"}]}], [{{0x9, 0x5, 0x6, 0x10, 0x3ff, 0x87, 0x9, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x5f, 0x3}]}}]}}]}}]}}, &(0x7f0000000640)={0xa, &(0x7f0000000400)={0xa, 0x6, 0x0, 0x8, 0x8, 0xd, 0x90081057c3f35ee5, 0x4}, 0x105, &(0x7f0000000c00)={0x5, 0xf, 0x105, 0x2, [@generic={0xf5, 0x10, 0x1, "25407320feca4af6565504c6465d8dcde91a662bf33179aefb5c79deb00b175139996eb9a55c31346cea45e2fa4114af8ab63a10a130a428a2077a168a6405ff1db52ed7921a7f93800a4be49aabd4e3740b120fbd6c5dd502e71e381eb2f35cc65787d921ce47cfd323dc52d6373295d6d5cdfd20af271ac741016f0e0e4bba8b49e5cfa07083d57e55f7607079e1ab853eb540a50dc65dbd265181f896122a6b886a1901c20cf324260e0cbc46a83d71c7d889716f15690b30377f95701bee235106334f0e623f1951d05a0abe563a9f9af30ac89297b94becaa277f3c4479447479974cb15ee30d16fc32e0cfb0af97b4"}, @wireless={0xb, 0x10, 0x1, 0xc, 0xd7, 0x7f, 0xfe, 0x8, 0x1}]}, 0x2, [{0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x401}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x80c}}]}) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000e00)={0x14, &(0x7f0000000d40)={0x40, 0x4, 0x68, {0x68, 0x23, "cf1195ab8cd953dd9efce1f8a8315409b7b967330fd3907780af955fe40a41d297ee67e6118f4d0039954f267131ff0ef8251ed57abc2b55fbe4950bb547edc430b086f81c491a1ff8337e3aae10466bffc14bcfd9f06013d6c4e18a2c1f466a6f59eae06799"}}, &(0x7f0000000dc0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000002000)={0x1c, &(0x7f0000000e40)={0x0, 0x16, 0xa5, "956fcb577232d99ab144779ec76a7fae7b23ac48937d6c9180f9a66ed67020e9e044c7a553a0a1455fb1a32000ac48765044b59288e56fbc983b2a76a808149596976455668e5bb7bbc0750ec2b400895ac6079a35c4829c69cf2abbea8905ac349fcc0e634e4ad878e973e5692f8dcad1d292dfcc9eac384ae4d5903e1e8106a3a96d282ee325e0e2556ecaed23179d9b555fdac3954f02f178ddc06010ceff9350befaab"}, &(0x7f0000001f80)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000001fc0)={0x0, 0x8, 0xfffffffffffffe0f, 0x7}}) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a500850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000080000000c"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f00000002c0)='rxrpc_peer\x00'}, 0x18) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=[{0x18, 0x110, 0x1, 'p'}], 0x18}, 0x0) 54.071029ms ago: executing program 0 (id=3978): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x10, &(0x7f00000003c0)={[], [], 0x2c}, 0x84, 0x4c2, &(0x7f0000000e80)="$eJzs3DtvHEUcAPD/rh+JSYxNeOYBMQSExcOOnWdBAwIpDRIIhEJpbCcKcRIUGymJLGwQCiXKJwBKJD4BFTQIqEC0IFqEFCE3CRRo0d7tOWff+fyIz0dyv5909uzu7M7Mzoy9M6O9ANrWQP4jidgZEb9GRF95c2mEgfKvmwuz438vzI4nkWVv/JWU4t1YmB2vRK2ct6PYGEwj0o+T2Fsn3enLV86OTU1NXiy2h2fOvTc8ffnK82fOjZ2ePD15fvT48cOHeo4dHT2yKeXszfO654ML+3afePvaq+Mnr73zw1d5frPi+PaaM/rXmUJHzZ6BGFh6L6s8tc6r/9/1VoWTzhZmhHXJW21eXV2l/t8XHXGr8vrilY9amjmgqbIsy7bV7F38XzafVUuS8gnAXSLRpaFNVf7R31jIR6qz49Xj+XZw/cUojYDyct8sPuUjnZHmY/j+8tioWR6IiJPz/3yWf2LZfAoAQDN8kz//PFd+7qh8ykfSeKgq3r3F2lB/RNwXEbsi4v7i+eXBiFLchyPikSVXn1s1/YFl27XPPz/3bLhwa5A//71QrG0tff5LK1H6O4qt3lL5u5JTZ6YmDxb3ZDC6tuXbI7WXXpxW+/blXz5dKf2Bque//JOnX3kWLPLxZ+eyCbqJsZmx2y13xfUPS1N6c7XlTxZXAvKRwe6I2LOB6+f37MwzX+6re7ByixuWv4FNWGfKvoh4ulz/87Gs/LnuIlR/fXLk2NHRI8PbY2ry4HClVdT68aerrxXBmqHE6vXfXHn937PY/su/y0cWVy77k+r12un1p3H1t09WHNNstP13J2+Wwt3FvktjMzMXRyK6k/na/aO3zr001rMkfl7+wQP1+/+uiH8/L87bGxF5I340Ih6LiP1F3h+PiCci4kCD8n//0pPv1qv7tZW/ufLyT9T9+7dS/a8/0HH2u69XSn9t9X+4FBos9kyMzdQu1y+z1gzezr0DAACAO8X+iNgZSTpUTMftjDQdGorYsTiDMj3z7KkL75+fKL8j0B9daWWmq69qPnSkmBvOt/OzRqu28+OHSvPGWZZlPaXtofELU72tLTq0vR0r9P/cH7WvtAB3m3Wto630RhtwR9r4Onq2qfkAtp73taF96f/Qvtbc/5v5JhzQEvX6/1zEzRZkBdhi9fr/Wy3IB7D1jP+hfen/0L5q+3/aknwAW+p23utvFNh1okGcpLM5ia4cSKPxtwD0R6zvgr+nEZuTw45NLWnPGup0e2xGWpGuGqezwRcxvF57w/PoW9Qk0q1tfo0D2yJilda72NjmKoErzc5Yq/8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAbI7/AgAA//+7BdPO") sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x20004000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) madvise(&(0x7f0000000000/0x4000)=nil, 0x0, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000140), &(0x7f0000000040)='%pI4 \x00'}, 0x2a) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000280)={&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f00000008c0)=""/237, 0xed, 0x1, &(0x7f0000000a00)=""/213, 0xd5}, &(0x7f0000000300)=0x40) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) getgroups(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) r3 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x2000) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x300, 0x0, 0x0, 0x0}) 33.28866ms ago: executing program 5 (id=3979): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) syz_mount_image$iso9660(&(0x7f0000001240), &(0x7f0000000000)='./file1\x00', 0x214c19, &(0x7f00000004c0)=ANY=[], 0x2f, 0x5b2, &(0x7f0000001280)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xd2b, 0x70bd2a, 0x25dfdbfa, {0x0, 0x0, 0x0, r5, {0x7}, {}, {0xe, 0x1}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x893}, 0x24000084) 0s ago: executing program 0 (id=3980): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r0}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x52e, &(0x7f0000000640)="$eJzs3cFvI1cZAPBvnDib7GabFDhApZZCi7IVrJ00tI04lCIhOFVClPsSEieK4sRR7LSbqILsX4CEECBxggsXJP4AJLQSF44IqRKcQSoCIdiCBAfoINvjJDjjxFuceNf5/aTZeW/GM9/3vHnjGc/TOIAr69mIeC0i3k/T9IWImMmWF7IpDttT83XvPXh7pTklkaZv/DWJJFvW2VeSzW9km01GxFe/HPGN5HTc+v7B5nK1WtnN6uXG1k65vn9we2Nreb2yXtleXFx4eemVpZeW5gfSzpsR8eoX//i9b//kS6/+4jNv/eHOn299s5nWdLb+ZDse0vhZK9tNL16b7Npg9wMGexQ121PsVKb62+beBeYDAEBvzXP8D0XEJyPihZiJsbNPZwEAAIDHUPr56fh3EpHmm+ixHAAAAHiMFFpjYJNCKRsLMB2FQqnUHsP7kbheqNbqjU+v1fa2V9tjZWejWFjbqFbms7HCs1FMmvWFVvm4/mJXfTEinoyI785MteqllVp1ddhffgAAAMAVcaPr+v8fM+3rfwAAAGDEzA47AQAAAODCuf4HAACA0ef6HwAAAEbaV15/vTmlnd+/Xn1zf2+z9ubt1Up9s7S1t1Jaqe3ulNZrtfXWM/u2zttftVbb+Wxs790tNyr1Rrm+f3Bnq7a33bizEZOX0iAAAADglCc/fv93SUQcfm6qNTVNDDsp4FKMH5WSbJ7T+3//RHv+7iUlBVyKsT5e8+61/OXOE+DxNt69oEdfB0ZPcdgJAEOXnLO+5+CdX2fzTww2HwAAYPDmPpZ///+864GIw8IlpAdcIJ0Yrq6u+//pzLASAS5d6/5/vwN5nCzASCn2NQIQGGX/9/3/c6XpQyUEAAAM3HRrSgql7Ou96SgUSqWIm62fBSgmaxvVynxEPBERv50pXmvWF1pbJn2MEQAAAAAAAAAAAAAAAAAAAAAAAAAAovVU7iRSAAAAYKRFFP6U/LL9LP+5meenu78fmEj+1fpJ4ImIeOuHb3z/7nKjsbvQXP63o+WNH2TLXxzGNxgAAABAt851emv+z2FnAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCoee/B2yudqY+XTw0q7l++EBGzefHHY7I1n4xiRFz/exLjJ7ZLImJsAPEP70XER/PiJ820jkLmxR/Em3BO/JjN3oW8+DcGEB+usvvN489ref2vEM+25vn9bzzif+ofVO/jXxwd/8Z69P+bfcZ46p2flXvGvxfx1Hj+8acTP+kR/7k+43/9awcHvdalP4qY63z+tI54JyMcl8qNrZ1yff/g9sbW8nplvbK9uLjw8tIrSy8tzZfXNqqV7N/cGN95+ufvn9X+67mff0mWTe/2P5+zv7zPpP+8c/fBhzuVw9Pxbz2XE/9XP85ecTp+IYvzqazcXD/XKR+2yyc989PfPHNW+1eP2198mP//W7122u1UR3m63z8dAOAC1PcPNper1cruyBaaV+mPQBoKj2DhWwPdYZqmabNP5ay6HxH97CeJAbe0kJ/PcaHnEWDYRyYAAGDQjk/6h50JAAAAAAAAAAAAAAAAAAAAXF2X8ZS17pjHj0BOBvEIbQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAgfhvAAAA//89e9P5") mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x2014800, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) kernel console output (not intermixed with test programs): cted capacity change from 0 to 164 [ 207.095179][T16055] loop0: detected capacity change from 0 to 256 [ 207.173109][T16064] loop5: detected capacity change from 0 to 512 [ 207.189319][T16064] EXT4-fs error (device loop5): ext4_orphan_get:1418: comm syz.5.3168: bad orphan inode 11862016 [ 207.200698][T16064] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 207.213698][T16064] ext4 filesystem being mounted at /361/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 207.250365][ T6775] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 207.303305][T16080] loop5: detected capacity change from 0 to 128 [ 207.311338][T16080] vfat: Unknown parameter 'ÿ' [ 207.324425][T16078] SELinux: failed to load policy [ 207.364304][T16089] FAULT_INJECTION: forcing a failure. [ 207.364304][T16089] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 207.377750][T16089] CPU: 1 UID: 0 PID: 16089 Comm: syz.5.3175 Not tainted syzkaller #0 PREEMPT(voluntary) [ 207.377790][T16089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 207.377808][T16089] Call Trace: [ 207.377816][T16089] [ 207.377828][T16089] __dump_stack+0x1d/0x30 [ 207.377874][T16089] dump_stack_lvl+0xe8/0x140 [ 207.377953][T16089] dump_stack+0x15/0x1b [ 207.377994][T16089] should_fail_ex+0x265/0x280 [ 207.378037][T16089] should_fail+0xb/0x20 [ 207.378127][T16089] should_fail_usercopy+0x1a/0x20 [ 207.378149][T16089] _copy_from_user+0x1c/0xb0 [ 207.378180][T16089] input_event_from_user+0x5f/0x160 [ 207.378234][T16089] ? input_inject_event+0x43/0x120 [ 207.378253][T16089] ? evdev_write+0x1dc/0x290 [ 207.378365][T16089] evdev_write+0x1b1/0x290 [ 207.378394][T16089] ? __pfx_evdev_write+0x10/0x10 [ 207.378416][T16089] vfs_write+0x269/0x960 [ 207.378443][T16089] ? __rcu_read_unlock+0x4f/0x70 [ 207.378477][T16089] ? __fget_files+0x184/0x1c0 [ 207.378508][T16089] ksys_write+0xda/0x1a0 [ 207.378539][T16089] __x64_sys_write+0x40/0x50 [ 207.378569][T16089] x64_sys_call+0x2802/0x3000 [ 207.378598][T16089] do_syscall_64+0xd2/0x200 [ 207.378702][T16089] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 207.378739][T16089] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 207.378773][T16089] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.378805][T16089] RIP: 0033:0x7ff8180aeec9 [ 207.378826][T16089] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 207.378851][T16089] RSP: 002b:00007ff816b17038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 207.378874][T16089] RAX: ffffffffffffffda RBX: 00007ff818305fa0 RCX: 00007ff8180aeec9 [ 207.378940][T16089] RDX: 0000000000002250 RSI: 0000200000000040 RDI: 0000000000000004 [ 207.378974][T16089] RBP: 00007ff816b17090 R08: 0000000000000000 R09: 0000000000000000 [ 207.378995][T16089] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 207.379075][T16089] R13: 00007ff818306038 R14: 00007ff818305fa0 R15: 00007ffe71e672c8 [ 207.379103][T16089] [ 207.748897][T16096] __nla_validate_parse: 8 callbacks suppressed [ 207.748914][T16096] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3177'. [ 207.893972][T16104] loop3: detected capacity change from 0 to 512 [ 207.918841][T16104] EXT4-fs error (device loop3): ext4_orphan_get:1418: comm syz.3.3180: bad orphan inode 11862016 [ 207.932608][T16104] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 207.945422][T16104] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 207.950299][T16101] bridge0: entered allmulticast mode [ 207.967534][T16100] bridge_slave_1: left allmulticast mode [ 207.973230][T16100] bridge_slave_1: left promiscuous mode [ 207.979191][T16112] loop0: detected capacity change from 0 to 128 [ 207.979198][T16100] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.987572][T15428] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 208.002580][T16100] bridge_slave_0: left allmulticast mode [ 208.008404][T16100] bridge_slave_0: left promiscuous mode [ 208.014209][T16100] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.068517][T16117] loop3: detected capacity change from 0 to 1024 [ 208.089455][T16102] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 208.094333][T16117] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 208.098020][T16102] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 208.109342][T16117] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 208.127594][T16117] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 208.143338][T16117] JBD2: no valid journal superblock found [ 208.149434][T16117] EXT4-fs (loop3): Could not load journal inode [ 208.198971][T16135] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 208.209396][T16135] SELinux: failed to load policy [ 208.247321][T16133] SELinux: failed to load policy [ 208.322957][T16146] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3190'. [ 208.332129][T16146] netlink: 'syz.2.3190': attribute type 30 has an invalid length. [ 208.352021][T16148] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 208.363865][T16148] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 208.398176][T16156] loop3: detected capacity change from 0 to 256 [ 208.537363][T16164] loop4: detected capacity change from 0 to 512 [ 208.546222][T16164] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e01c, mo2=0002] [ 208.554648][T16164] System zones: 1-12 [ 208.559252][T16164] EXT4-fs error (device loop4): ext4_get_branch:178: inode #13: block 33619980: comm syz.4.3193: invalid block [ 208.571485][T16164] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.3193: invalid indirect mapped block 1819239214 (level 1) [ 208.586081][T16164] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.3193: bg 0: block 361: padding at end of block bitmap is not set [ 208.601090][T16164] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 208.610098][T16164] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #13: comm syz.4.3193: attempt to clear invalid blocks 33619980 len 1 [ 208.624287][T16164] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.3193: invalid indirect mapped block 1819239214 (level 0) [ 208.638802][T16164] EXT4-fs (loop4): 1 truncate cleaned up [ 208.644897][T16164] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 208.658054][T16164] EXT4-fs error (device loop4): dx_probe:791: inode #2: comm syz.4.3193: Directory hole found for htree index block 0 [ 208.675088][T16164] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3193'. [ 208.699616][T14807] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.722308][T16170] loop4: detected capacity change from 0 to 512 [ 208.739231][T16170] EXT4-fs warning (device loop4): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 208.755523][T16170] EXT4-fs (loop4): mount failed [ 208.807241][T16179] loop4: detected capacity change from 0 to 512 [ 208.838524][T16179] EXT4-fs warning (device loop4): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 208.854233][T16179] EXT4-fs (loop4): mount failed [ 208.909637][T16188] loop0: detected capacity change from 0 to 512 [ 208.932745][T16188] EXT4-fs warning (device loop0): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 208.948459][T16188] EXT4-fs (loop0): mount failed [ 208.983983][T16198] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3200'. [ 208.993937][T16198] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3200'. [ 209.025820][T16220] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3202'. [ 209.035014][T16220] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3202'. [ 209.047272][T16224] loop4: detected capacity change from 0 to 512 [ 209.068861][T16220] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3202'. [ 209.100490][T16231] loop4: detected capacity change from 0 to 1024 [ 209.110368][T16231] EXT4-fs: Ignoring removed oldalloc option [ 209.117724][T16231] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 209.131742][T16231] EXT4-fs (loop4): group descriptors corrupted! [ 209.177430][T16240] loop4: detected capacity change from 0 to 512 [ 209.190840][T16240] EXT4-fs warning (device loop4): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 209.207668][T16240] EXT4-fs (loop4): mount failed [ 209.275669][T16253] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3208'. [ 209.284806][T16253] netlink: 'syz.4.3208': attribute type 30 has an invalid length. [ 209.295077][T16255] random: crng reseeded on system resumption [ 209.300106][T16257] loop3: detected capacity change from 0 to 512 [ 209.306713][T16255] Restarting kernel threads ... [ 209.313094][ T1438] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 209.317197][T16255] Done restarting kernel threads. [ 209.330374][T16255] netlink: 'syz.2.3209': attribute type 8 has an invalid length. [ 209.332354][ T1438] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 209.358489][ T1438] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 209.371826][ T1438] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 209.381628][T16263] loop4: detected capacity change from 0 to 512 [ 209.382560][T16257] EXT4-fs warning (device loop3): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 209.404053][T16257] EXT4-fs (loop3): mount failed [ 209.427923][T16263] EXT4-fs warning (device loop4): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 209.457826][T16263] EXT4-fs (loop4): mount failed [ 209.474051][T16277] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3214'. [ 209.521035][T16282] loop4: detected capacity change from 0 to 128 [ 209.540773][T16285] loop3: detected capacity change from 0 to 512 [ 209.558548][T16285] EXT4-fs warning (device loop3): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 209.575682][T16285] EXT4-fs (loop3): mount failed [ 209.589838][T16291] syz.4.3216: attempt to access beyond end of device [ 209.589838][T16291] loop4: rw=2049, sector=177, nr_sectors = 16 limit=128 [ 209.603826][T16291] syz.4.3216: attempt to access beyond end of device [ 209.603826][T16291] loop4: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 209.617767][T16291] syz.4.3216: attempt to access beyond end of device [ 209.617767][T16291] loop4: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 209.631999][T16291] syz.4.3216: attempt to access beyond end of device [ 209.631999][T16291] loop4: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 209.650072][T16291] syz.4.3216: attempt to access beyond end of device [ 209.650072][T16291] loop4: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 209.665186][T16294] sctp: [Deprecated]: syz.4.3216 (pid 16294) Use of int in max_burst socket option. [ 209.665186][T16294] Use struct sctp_assoc_value instead [ 209.680428][T16282] syz.4.3216: attempt to access beyond end of device [ 209.680428][T16282] loop4: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 209.694686][T16291] syz.4.3216: attempt to access beyond end of device [ 209.694686][T16291] loop4: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 209.708576][T16282] syz.4.3216: attempt to access beyond end of device [ 209.708576][T16282] loop4: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 209.722386][T16293] SELinux: failed to load policy [ 209.728904][T16282] syz.4.3216: attempt to access beyond end of device [ 209.728904][T16282] loop4: rw=2049, sector=313, nr_sectors = 8 limit=128 [ 209.774504][T16282] syz.4.3216: attempt to access beyond end of device [ 209.774504][T16282] loop4: rw=2049, sector=329, nr_sectors = 8 limit=128 [ 209.841431][ T29] kauditd_printk_skb: 358 callbacks suppressed [ 209.841450][ T29] audit: type=1326 audit(1759591937.440:50419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16301 comm="syz.4.3221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e1c73eec9 code=0x7ffc0000 [ 209.872293][ T29] audit: type=1326 audit(1759591937.450:50420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16301 comm="syz.4.3221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9e1c73eec9 code=0x7ffc0000 [ 209.897062][ T29] audit: type=1326 audit(1759591937.450:50421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16301 comm="syz.4.3221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e1c73eec9 code=0x7ffc0000 [ 209.921463][ T29] audit: type=1326 audit(1759591937.450:50422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16301 comm="syz.4.3221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e1c73eec9 code=0x7ffc0000 [ 209.924587][T16305] FAULT_INJECTION: forcing a failure. [ 209.924587][T16305] name failslab, interval 1, probability 0, space 0, times 0 [ 209.946524][ T29] audit: type=1326 audit(1759591937.450:50423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16301 comm="syz.4.3221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9e1c73eec9 code=0x7ffc0000 [ 209.959509][T16305] CPU: 1 UID: 0 PID: 16305 Comm: syz.4.3222 Not tainted syzkaller #0 PREEMPT(voluntary) [ 209.959544][T16305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 209.959573][T16305] Call Trace: [ 209.959586][T16305] [ 209.959599][T16305] __dump_stack+0x1d/0x30 [ 209.959652][T16305] dump_stack_lvl+0xe8/0x140 [ 209.959742][T16305] dump_stack+0x15/0x1b [ 209.959793][T16305] should_fail_ex+0x265/0x280 [ 209.959915][T16305] should_failslab+0x8c/0xb0 [ 209.959973][T16305] kmem_cache_alloc_noprof+0x50/0x480 [ 209.960010][T16305] ? alloc_empty_file+0x76/0x200 [ 209.960077][T16305] alloc_empty_file+0x76/0x200 [ 209.960123][T16305] alloc_file_pseudo+0xc6/0x160 [ 209.960175][T16305] __shmem_file_setup+0x1de/0x210 [ 209.960220][T16305] shmem_file_setup+0x3b/0x50 [ 209.960343][T16305] __se_sys_memfd_create+0x2c3/0x590 [ 209.960379][T16305] __x64_sys_memfd_create+0x31/0x40 [ 209.960487][T16305] x64_sys_call+0x2ac2/0x3000 [ 209.960518][T16305] do_syscall_64+0xd2/0x200 [ 209.960556][T16305] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 209.960652][T16305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.960684][T16305] RIP: 0033:0x7f9e1c73eec9 [ 209.960708][T16305] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 209.960734][T16305] RSP: 002b:00007f9e1b19ee18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 209.960762][T16305] RAX: ffffffffffffffda RBX: 0000000000000476 RCX: 00007f9e1c73eec9 [ 209.960854][T16305] RDX: 00007f9e1b19eef0 RSI: 0000000000000000 RDI: 00007f9e1c7c2960 [ 209.960873][T16305] RBP: 0000200000000540 R08: 00007f9e1b19ebb7 R09: 00007f9e1b19ee40 [ 209.960891][T16305] R10: 000000000000000a R11: 0000000000000202 R12: 00002000000001c0 [ 209.960911][T16305] R13: 00007f9e1b19eef0 R14: 00007f9e1b19eeb0 R15: 0000200000000380 [ 209.960939][T16305] [ 210.052831][T16311] loop4: detected capacity change from 0 to 256 [ 210.055871][ T29] audit: type=1326 audit(1759591937.450:50424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16301 comm="syz.4.3221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e1c73eec9 code=0x7ffc0000 [ 210.083221][T16312] loop0: detected capacity change from 0 to 1024 [ 210.087251][ T29] audit: type=1326 audit(1759591937.450:50425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16301 comm="syz.4.3221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e1c73eec9 code=0x7ffc0000 [ 210.087290][ T29] audit: type=1326 audit(1759591937.450:50426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16301 comm="syz.4.3221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f9e1c73eec9 code=0x7ffc0000 [ 210.100726][T16312] EXT4-fs: Ignoring removed oldalloc option [ 210.104457][ T29] audit: type=1326 audit(1759591937.450:50427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16301 comm="syz.4.3221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e1c73eec9 code=0x7ffc0000 [ 210.104506][ T29] audit: type=1326 audit(1759591937.450:50428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16301 comm="syz.4.3221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e1c73eec9 code=0x7ffc0000 [ 210.132299][T16312] EXT4-fs: Ignoring removed orlov option [ 210.334631][T16312] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 210.347303][T16312] EXT4-fs (loop0): can't mount with commit=, fs mounted w/o journal [ 210.433172][T16332] loop0: detected capacity change from 0 to 512 [ 210.448604][T16332] EXT4-fs warning (device loop0): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 210.465504][T16332] EXT4-fs (loop0): mount failed [ 210.533437][T16344] SELinux: failed to load policy [ 211.079715][T16390] loop5: detected capacity change from 0 to 1024 [ 211.086587][T16390] EXT4-fs: inline encryption not supported [ 211.099519][T16390] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 211.722041][T16406] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 211.731534][T16406] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 211.807261][ T6775] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.854650][T16430] loop5: detected capacity change from 0 to 256 [ 211.885311][T16433] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 211.894324][T16433] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 212.242811][T16461] loop0: detected capacity change from 0 to 128 [ 212.256163][ T10] hid_parser_main: 60 callbacks suppressed [ 212.256217][ T10] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 212.269842][ T10] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 212.277635][ T10] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 212.285257][ T10] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 212.292778][ T10] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 212.300446][ T10] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 212.308229][ T10] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 212.316002][ T10] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 212.323737][ T10] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 212.331395][ T10] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 212.340023][ T10] hid-generic 0008:0006:0007.0003: hidraw0: HID v0.0b Device [syz1] on syz1 [ 212.367685][T16472] program syz.4.3265 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 212.447462][T16485] FAULT_INJECTION: forcing a failure. [ 212.447462][T16485] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 212.461862][T16485] CPU: 0 UID: 0 PID: 16485 Comm: syz.0.3269 Not tainted syzkaller #0 PREEMPT(voluntary) [ 212.461898][T16485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 212.461914][T16485] Call Trace: [ 212.461923][T16485] [ 212.461954][T16485] __dump_stack+0x1d/0x30 [ 212.462002][T16485] dump_stack_lvl+0xe8/0x140 [ 212.462055][T16485] dump_stack+0x15/0x1b [ 212.462091][T16485] should_fail_ex+0x265/0x280 [ 212.462134][T16485] should_fail+0xb/0x20 [ 212.462170][T16485] should_fail_usercopy+0x1a/0x20 [ 212.462193][T16485] _copy_from_user+0x1c/0xb0 [ 212.462254][T16485] ___sys_sendmsg+0xc1/0x1d0 [ 212.462296][T16485] __x64_sys_sendmsg+0xd4/0x160 [ 212.462323][T16485] x64_sys_call+0x191e/0x3000 [ 212.462347][T16485] do_syscall_64+0xd2/0x200 [ 212.462469][T16485] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 212.462500][T16485] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 212.462531][T16485] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.462556][T16485] RIP: 0033:0x7efe3009eec9 [ 212.462648][T16485] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 212.462669][T16485] RSP: 002b:00007efe2eaff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 212.462691][T16485] RAX: ffffffffffffffda RBX: 00007efe302f5fa0 RCX: 00007efe3009eec9 [ 212.462706][T16485] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 212.462720][T16485] RBP: 00007efe2eaff090 R08: 0000000000000000 R09: 0000000000000000 [ 212.462734][T16485] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 212.462749][T16485] R13: 00007efe302f6038 R14: 00007efe302f5fa0 R15: 00007fff6e5496a8 [ 212.462822][T16485] [ 212.646072][T16487] netlink: 'syz.3.3270': attribute type 5 has an invalid length. [ 212.705181][T16493] loop0: detected capacity change from 0 to 512 [ 212.723280][T16493] EXT4-fs warning (device loop0): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 212.741780][T16493] EXT4-fs (loop0): mount failed [ 212.876917][T16514] program syz.0.3277 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 212.919808][T16516] loop0: detected capacity change from 0 to 128 [ 213.051278][T16525] FAULT_INJECTION: forcing a failure. [ 213.051278][T16525] name failslab, interval 1, probability 0, space 0, times 0 [ 213.064165][T16525] CPU: 0 UID: 0 PID: 16525 Comm: syz.0.3279 Not tainted syzkaller #0 PREEMPT(voluntary) [ 213.064276][T16525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 213.064294][T16525] Call Trace: [ 213.064304][T16525] [ 213.064315][T16525] __dump_stack+0x1d/0x30 [ 213.064362][T16525] dump_stack_lvl+0xe8/0x140 [ 213.064404][T16525] dump_stack+0x15/0x1b [ 213.064459][T16525] should_fail_ex+0x265/0x280 [ 213.064504][T16525] should_failslab+0x8c/0xb0 [ 213.064535][T16525] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 213.064571][T16525] ? __alloc_skb+0x101/0x320 [ 213.064605][T16525] __alloc_skb+0x101/0x320 [ 213.064643][T16525] netlink_alloc_large_skb+0xbf/0xf0 [ 213.064683][T16525] netlink_sendmsg+0x3cf/0x6b0 [ 213.064705][T16525] ? __pfx_netlink_sendmsg+0x10/0x10 [ 213.064726][T16525] __sock_sendmsg+0x145/0x180 [ 213.064807][T16525] ____sys_sendmsg+0x345/0x4e0 [ 213.064896][T16525] ___sys_sendmsg+0x17b/0x1d0 [ 213.064940][T16525] __sys_sendmmsg+0x178/0x300 [ 213.064974][T16525] __x64_sys_sendmmsg+0x57/0x70 [ 213.065040][T16525] x64_sys_call+0x1c4a/0x3000 [ 213.065109][T16525] do_syscall_64+0xd2/0x200 [ 213.065137][T16525] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 213.065169][T16525] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 213.065200][T16525] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.065227][T16525] RIP: 0033:0x7efe3009eec9 [ 213.065300][T16525] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 213.065319][T16525] RSP: 002b:00007efe2eaff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 213.065409][T16525] RAX: ffffffffffffffda RBX: 00007efe302f5fa0 RCX: 00007efe3009eec9 [ 213.065423][T16525] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000005 [ 213.065440][T16525] RBP: 00007efe2eaff090 R08: 0000000000000000 R09: 0000000000000000 [ 213.065456][T16525] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 213.065472][T16525] R13: 00007efe302f6038 R14: 00007efe302f5fa0 R15: 00007fff6e5496a8 [ 213.065498][T16525] [ 213.769015][T16538] loop3: detected capacity change from 0 to 256 [ 213.784067][T16541] __nla_validate_parse: 9 callbacks suppressed [ 213.784085][T16541] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3284'. [ 213.799837][T16541] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3284'. [ 213.813747][T16543] loop5: detected capacity change from 0 to 512 [ 213.829806][T16543] EXT4-fs warning (device loop5): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 213.845759][T16543] EXT4-fs (loop5): mount failed [ 213.859530][T16546] FAULT_INJECTION: forcing a failure. [ 213.859530][T16546] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 213.873092][T16546] CPU: 1 UID: 0 PID: 16546 Comm: syz.4.3287 Not tainted syzkaller #0 PREEMPT(voluntary) [ 213.873168][T16546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 213.873199][T16546] Call Trace: [ 213.873207][T16546] [ 213.873216][T16546] __dump_stack+0x1d/0x30 [ 213.873391][T16546] dump_stack_lvl+0xe8/0x140 [ 213.873431][T16546] dump_stack+0x15/0x1b [ 213.873485][T16546] should_fail_ex+0x265/0x280 [ 213.873522][T16546] should_fail_alloc_page+0xf2/0x100 [ 213.873551][T16546] __alloc_frozen_pages_noprof+0xff/0x360 [ 213.873607][T16546] alloc_pages_mpol+0xb3/0x260 [ 213.873649][T16546] ? should_fail_ex+0x30/0x280 [ 213.873772][T16546] alloc_pages_noprof+0x90/0x130 [ 213.873815][T16546] rds_page_remainder_alloc+0x1fa/0x5a0 [ 213.873896][T16546] ? rds_page_remainder_alloc+0xbe/0x5a0 [ 213.873934][T16546] rds_message_copy_from_user+0x1a4/0x710 [ 213.873962][T16546] ? sg_init_table+0x3e/0x50 [ 213.874026][T16546] rds_sendmsg+0xa2b/0x14a0 [ 213.874069][T16546] ? __pfx_rds_sendmsg+0x10/0x10 [ 213.874107][T16546] __sock_sendmsg+0x145/0x180 [ 213.874204][T16546] ____sys_sendmsg+0x31e/0x4e0 [ 213.874302][T16546] ___sys_sendmsg+0x17b/0x1d0 [ 213.874347][T16546] __x64_sys_sendmsg+0xd4/0x160 [ 213.874375][T16546] x64_sys_call+0x191e/0x3000 [ 213.874405][T16546] do_syscall_64+0xd2/0x200 [ 213.874465][T16546] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 213.874503][T16546] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 213.874537][T16546] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.874569][T16546] RIP: 0033:0x7f9e1c73eec9 [ 213.874588][T16546] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 213.874681][T16546] RSP: 002b:00007f9e1b19f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 213.874709][T16546] RAX: ffffffffffffffda RBX: 00007f9e1c995fa0 RCX: 00007f9e1c73eec9 [ 213.874726][T16546] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000006 [ 213.874744][T16546] RBP: 00007f9e1b19f090 R08: 0000000000000000 R09: 0000000000000000 [ 213.874824][T16546] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 213.874843][T16546] R13: 00007f9e1c996038 R14: 00007f9e1c995fa0 R15: 00007ffc4c3a1618 [ 213.874868][T16546] [ 214.112877][T16555] program syz.5.3288 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 214.133934][T16557] loop0: detected capacity change from 0 to 512 [ 214.149343][T16557] EXT4-fs error (device loop0): ext4_orphan_get:1418: comm syz.0.3289: bad orphan inode 11862016 [ 214.166288][T16557] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 214.168221][T16563] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3290'. [ 214.191012][T16557] ext4 filesystem being mounted at /71/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 214.204341][T16557] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3289'. [ 214.243247][T14013] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 214.253767][T16572] program syz.4.3294 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 214.278825][T16575] loop5: detected capacity change from 0 to 512 [ 214.306664][T16575] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 214.322859][T16575] ext4 filesystem being mounted at /383/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 214.348182][T16575] EXT4-fs error (device loop5): ext4_empty_dir:3086: inode #12: block 32: comm syz.5.3296: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 214.373952][T16575] EXT4-fs warning (device loop5): ext4_empty_dir:3089: inode #12: comm syz.5.3296: directory missing '.' [ 214.391210][T16594] FAULT_INJECTION: forcing a failure. [ 214.391210][T16594] name failslab, interval 1, probability 0, space 0, times 0 [ 214.404130][T16594] CPU: 0 UID: 0 PID: 16594 Comm: syz.4.3300 Not tainted syzkaller #0 PREEMPT(voluntary) [ 214.404269][T16594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 214.404311][T16594] Call Trace: [ 214.404318][T16594] [ 214.404329][T16594] __dump_stack+0x1d/0x30 [ 214.404368][T16594] dump_stack_lvl+0xe8/0x140 [ 214.404403][T16594] dump_stack+0x15/0x1b [ 214.404508][T16594] should_fail_ex+0x265/0x280 [ 214.404587][T16594] ? audit_log_d_path+0x8d/0x150 [ 214.404687][T16594] should_failslab+0x8c/0xb0 [ 214.404722][T16594] __kmalloc_cache_noprof+0x4c/0x4a0 [ 214.404762][T16594] audit_log_d_path+0x8d/0x150 [ 214.404816][T16594] audit_log_d_path_exe+0x42/0x70 [ 214.404840][T16594] audit_log_task+0x1e9/0x250 [ 214.404883][T16594] audit_seccomp+0x61/0x100 [ 214.404966][T16594] ? __seccomp_filter+0x82d/0x1250 [ 214.404996][T16594] __seccomp_filter+0x83e/0x1250 [ 214.405030][T16594] ? _raw_spin_unlock+0x26/0x50 [ 214.405147][T16594] ? inet_hash+0x6de/0x750 [ 214.405200][T16594] __secure_computing+0x82/0x150 [ 214.405243][T16594] syscall_trace_enter+0xcf/0x1e0 [ 214.405280][T16594] do_syscall_64+0xac/0x200 [ 214.405332][T16594] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 214.405359][T16594] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 214.405391][T16594] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.405428][T16594] RIP: 0033:0x7f9e1c73d8dc [ 214.405448][T16594] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 214.405525][T16594] RSP: 002b:00007f9e1b19f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 214.405551][T16594] RAX: ffffffffffffffda RBX: 00007f9e1c995fa0 RCX: 00007f9e1c73d8dc [ 214.405569][T16594] RDX: 000000000000000f RSI: 00007f9e1b19f0a0 RDI: 0000000000000005 [ 214.405621][T16594] RBP: 00007f9e1b19f090 R08: 0000000000000000 R09: 0000000000000000 [ 214.405635][T16594] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 214.405652][T16594] R13: 00007f9e1c996038 R14: 00007f9e1c995fa0 R15: 00007ffc4c3a1618 [ 214.405686][T16594] [ 214.614751][ T6775] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.683145][T16612] loop4: detected capacity change from 0 to 512 [ 214.702191][T16612] EXT4-fs error (device loop4): ext4_orphan_get:1418: comm syz.4.3306: bad orphan inode 11862016 [ 214.730908][T16612] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 214.757053][T16612] ext4 filesystem being mounted at /61/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 214.785845][T16612] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3306'. [ 214.839116][T14807] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 214.959562][T16632] FAULT_INJECTION: forcing a failure. [ 214.959562][T16632] name failslab, interval 1, probability 0, space 0, times 0 [ 214.972344][T16632] CPU: 1 UID: 0 PID: 16632 Comm: syz.0.3309 Not tainted syzkaller #0 PREEMPT(voluntary) [ 214.972381][T16632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 214.972479][T16632] Call Trace: [ 214.972488][T16632] [ 214.972498][T16632] __dump_stack+0x1d/0x30 [ 214.972543][T16632] dump_stack_lvl+0xe8/0x140 [ 214.972617][T16632] dump_stack+0x15/0x1b [ 214.972666][T16632] should_fail_ex+0x265/0x280 [ 214.972708][T16632] ? sctp_add_bind_addr+0x71/0x1e0 [ 214.972799][T16632] should_failslab+0x8c/0xb0 [ 214.972829][T16632] __kmalloc_cache_noprof+0x4c/0x4a0 [ 214.972940][T16632] sctp_add_bind_addr+0x71/0x1e0 [ 214.972972][T16632] sctp_copy_local_addr_list+0x199/0x220 [ 214.973032][T16632] sctp_copy_one_addr+0x7f/0x280 [ 214.973090][T16632] sctp_bind_addr_copy+0x79/0x290 [ 214.973122][T16632] sctp_assoc_set_bind_addr_from_ep+0xce/0xe0 [ 214.973151][T16632] sctp_connect_new_asoc+0x1c3/0x3a0 [ 214.973194][T16632] sctp_sendmsg+0xf10/0x18d0 [ 214.973301][T16632] ? selinux_socket_sendmsg+0x161/0x1b0 [ 214.973329][T16632] ? __pfx_sctp_sendmsg+0x10/0x10 [ 214.973402][T16632] inet_sendmsg+0xc2/0xd0 [ 214.973507][T16632] __sock_sendmsg+0x102/0x180 [ 214.973537][T16632] __sys_sendto+0x268/0x330 [ 214.973581][T16632] __x64_sys_sendto+0x76/0x90 [ 214.973616][T16632] x64_sys_call+0x2d14/0x3000 [ 214.973723][T16632] do_syscall_64+0xd2/0x200 [ 214.973754][T16632] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 214.973794][T16632] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 214.973820][T16632] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.973846][T16632] RIP: 0033:0x7efe3009eec9 [ 214.973866][T16632] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 214.973931][T16632] RSP: 002b:00007efe2eade038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 214.973955][T16632] RAX: ffffffffffffffda RBX: 00007efe302f6090 RCX: 00007efe3009eec9 [ 214.973969][T16632] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000003 [ 214.973984][T16632] RBP: 00007efe2eade090 R08: 00002000000002c0 R09: 0000000000000010 [ 214.974000][T16632] R10: 0000000000000040 R11: 0000000000000246 R12: 0000000000000001 [ 214.974016][T16632] R13: 00007efe302f6128 R14: 00007efe302f6090 R15: 00007fff6e5496a8 [ 214.974040][T16632] [ 215.349334][T16634] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3310'. [ 215.358314][T16634] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3310'. [ 215.498112][T16637] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3311'. [ 215.545519][T16640] loop5: detected capacity change from 0 to 512 [ 215.570532][T16640] __quota_error: 238 callbacks suppressed [ 215.570554][T16640] Quota error (device loop5): v2_read_file_info: Free block number 1 out of range (1, 6). [ 215.572945][ T29] audit: type=1326 audit(1759591943.170:50662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16639 comm="syz.2.3313" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc24ddaeec9 code=0x0 [ 215.576386][T16640] EXT4-fs warning (device loop5): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 215.631619][T16640] EXT4-fs (loop5): mount failed [ 215.667755][T16649] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3314'. [ 215.676771][T16649] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3314'. [ 215.765357][T16658] FAULT_INJECTION: forcing a failure. [ 215.765357][T16658] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 215.779043][T16658] CPU: 0 UID: 0 PID: 16658 Comm: syz.5.3317 Not tainted syzkaller #0 PREEMPT(voluntary) [ 215.779134][T16658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 215.779149][T16658] Call Trace: [ 215.779157][T16658] [ 215.779205][T16658] __dump_stack+0x1d/0x30 [ 215.779253][T16658] dump_stack_lvl+0xe8/0x140 [ 215.779327][T16658] dump_stack+0x15/0x1b [ 215.779360][T16658] should_fail_ex+0x265/0x280 [ 215.779418][T16658] should_fail+0xb/0x20 [ 215.779452][T16658] should_fail_usercopy+0x1a/0x20 [ 215.779476][T16658] _copy_to_user+0x20/0xa0 [ 215.779587][T16658] simple_read_from_buffer+0xb5/0x130 [ 215.779613][T16658] proc_fail_nth_read+0x10e/0x150 [ 215.779795][T16658] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 215.779851][T16658] vfs_read+0x1a8/0x770 [ 215.779874][T16658] ? __rcu_read_unlock+0x4f/0x70 [ 215.779901][T16658] ? __fget_files+0x184/0x1c0 [ 215.779931][T16658] ksys_read+0xda/0x1a0 [ 215.780027][T16658] __x64_sys_read+0x40/0x50 [ 215.780053][T16658] x64_sys_call+0x27c0/0x3000 [ 215.780075][T16658] do_syscall_64+0xd2/0x200 [ 215.780172][T16658] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 215.780200][T16658] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 215.780235][T16658] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.780309][T16658] RIP: 0033:0x7ff8180ad8dc [ 215.780325][T16658] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 215.780361][T16658] RSP: 002b:00007ff816b17030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 215.780382][T16658] RAX: ffffffffffffffda RBX: 00007ff818305fa0 RCX: 00007ff8180ad8dc [ 215.780458][T16658] RDX: 000000000000000f RSI: 00007ff816b170a0 RDI: 0000000000000005 [ 215.780473][T16658] RBP: 00007ff816b17090 R08: 0000000000000000 R09: 0000000000000000 [ 215.780486][T16658] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 215.780500][T16658] R13: 00007ff818306038 R14: 00007ff818305fa0 R15: 00007ffe71e672c8 [ 215.780520][T16658] [ 216.013719][T16668] loop5: detected capacity change from 0 to 512 [ 216.028397][T16668] Quota error (device loop5): v2_read_file_info: Free block number 1 out of range (1, 6). [ 216.038787][T16668] EXT4-fs warning (device loop5): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 216.054271][T16668] EXT4-fs (loop5): mount failed [ 216.082058][T16675] loop5: detected capacity change from 0 to 512 [ 216.099170][T16675] Quota error (device loop5): v2_read_file_info: Free block number 1 out of range (1, 6). [ 216.109623][T16675] EXT4-fs warning (device loop5): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 216.124675][T16675] EXT4-fs (loop5): mount failed [ 216.233213][ T29] audit: type=1326 audit(1759591943.830:50663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16690 comm="syz.5.3323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8180aeec9 code=0x7ffc0000 [ 216.265766][T16691] loop5: detected capacity change from 0 to 512 [ 216.268016][ T29] audit: type=1326 audit(1759591943.860:50664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16690 comm="syz.5.3323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7ff8180aeec9 code=0x7ffc0000 [ 216.275300][T16691] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 216.296618][ T29] audit: type=1326 audit(1759591943.860:50665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16690 comm="syz.5.3323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8180aeec9 code=0x7ffc0000 [ 216.305603][T16691] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.3323: invalid indirect mapped block 2683928664 (level 1) [ 216.328800][ T29] audit: type=1326 audit(1759591943.860:50666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16690 comm="syz.5.3323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8180aeec9 code=0x7ffc0000 [ 216.347344][T16691] EXT4-fs (loop5): 1 truncate cleaned up [ 216.368781][ T29] audit: type=1326 audit(1759591943.860:50667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16690 comm="syz.5.3323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=92 compat=0 ip=0x7ff8180aeec9 code=0x7ffc0000 [ 216.375521][T16691] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 216.399447][ T29] audit: type=1400 audit(1759591943.860:50668): avc: denied { setattr } for pid=16690 comm="syz.5.3323" name="file0" dev="tmpfs" ino=2164 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 216.440467][T16691] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.490359][T16704] loop5: detected capacity change from 0 to 512 [ 216.508494][T16704] EXT4-fs error (device loop5): ext4_orphan_get:1418: comm syz.5.3326: bad orphan inode 11862016 [ 216.520369][T16704] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 216.533981][T16704] ext4 filesystem being mounted at /393/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 216.561198][ T6775] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 216.609312][T16720] loop3: detected capacity change from 0 to 512 [ 216.632480][T16720] EXT4-fs warning (device loop3): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 216.651775][T16720] EXT4-fs (loop3): mount failed [ 216.704338][T16731] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 216.715396][T16731] SELinux: failed to load policy [ 216.744077][T16736] loop3: detected capacity change from 0 to 512 [ 216.760375][T16736] EXT4-fs warning (device loop3): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 216.775678][T16736] EXT4-fs (loop3): mount failed [ 217.207041][T16764] FAULT_INJECTION: forcing a failure. [ 217.207041][T16764] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 217.220398][T16764] CPU: 0 UID: 0 PID: 16764 Comm: syz.4.3337 Not tainted syzkaller #0 PREEMPT(voluntary) [ 217.220439][T16764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 217.220457][T16764] Call Trace: [ 217.220468][T16764] [ 217.220480][T16764] __dump_stack+0x1d/0x30 [ 217.220531][T16764] dump_stack_lvl+0xe8/0x140 [ 217.220596][T16764] dump_stack+0x15/0x1b [ 217.220629][T16764] should_fail_ex+0x265/0x280 [ 217.220729][T16764] should_fail+0xb/0x20 [ 217.220761][T16764] should_fail_usercopy+0x1a/0x20 [ 217.220782][T16764] _copy_to_iter+0xd2/0xe70 [ 217.220814][T16764] ? __schedule+0x6b9/0xb30 [ 217.220904][T16764] ? __list_del_entry_valid_or_report+0x65/0x130 [ 217.221012][T16764] tun_do_read+0xa6a/0x15a0 [ 217.221039][T16764] ? __pfx_default_wake_function+0x10/0x10 [ 217.221068][T16764] tun_chr_read_iter+0x176/0x250 [ 217.221091][T16764] do_iter_readv_writev+0x4a1/0x540 [ 217.221140][T16764] vfs_readv+0x1ea/0x690 [ 217.221188][T16764] __x64_sys_preadv+0xfd/0x1c0 [ 217.221223][T16764] x64_sys_call+0x282e/0x3000 [ 217.221245][T16764] do_syscall_64+0xd2/0x200 [ 217.221311][T16764] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 217.221339][T16764] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 217.221364][T16764] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.221495][T16764] RIP: 0033:0x7f9e1c73eec9 [ 217.221520][T16764] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 217.221541][T16764] RSP: 002b:00007f9e1b19f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 217.221569][T16764] RAX: ffffffffffffffda RBX: 00007f9e1c995fa0 RCX: 00007f9e1c73eec9 [ 217.221608][T16764] RDX: 0000000000000001 RSI: 0000200000000300 RDI: 0000000000000006 [ 217.221627][T16764] RBP: 00007f9e1b19f090 R08: 0000000000000000 R09: 0000000000000000 [ 217.221644][T16764] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000001 [ 217.221657][T16764] R13: 00007f9e1c996038 R14: 00007f9e1c995fa0 R15: 00007ffc4c3a1618 [ 217.221678][T16764] [ 217.498166][T16774] loop4: detected capacity change from 0 to 512 [ 217.520441][T16774] EXT4-fs warning (device loop4): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 217.537563][T16774] EXT4-fs (loop4): mount failed [ 217.593252][T16785] loop5: detected capacity change from 0 to 8192 [ 217.638351][T16785] loop5: p1 p2 p3 p4 [ 217.644349][T16785] loop5: p2 start 151000334 is beyond EOD, truncated [ 217.651140][T16785] loop5: p3 start 331777 is beyond EOD, truncated [ 217.657660][T16785] loop5: p4 size 263168 extends beyond EOD, truncated [ 217.762516][T16804] FAULT_INJECTION: forcing a failure. [ 217.762516][T16804] name failslab, interval 1, probability 0, space 0, times 0 [ 217.775233][T16804] CPU: 0 UID: 0 PID: 16804 Comm: syz.2.3345 Not tainted syzkaller #0 PREEMPT(voluntary) [ 217.775279][T16804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 217.775296][T16804] Call Trace: [ 217.775305][T16804] [ 217.775314][T16804] __dump_stack+0x1d/0x30 [ 217.775351][T16804] dump_stack_lvl+0xe8/0x140 [ 217.775470][T16804] dump_stack+0x15/0x1b [ 217.775512][T16804] should_fail_ex+0x265/0x280 [ 217.775651][T16804] should_failslab+0x8c/0xb0 [ 217.775680][T16804] kmem_cache_alloc_noprof+0x50/0x480 [ 217.775710][T16804] ? alloc_vfsmnt+0x2d/0x300 [ 217.775784][T16804] alloc_vfsmnt+0x2d/0x300 [ 217.775820][T16804] clone_mnt+0x30/0x5d0 [ 217.775853][T16804] copy_tree+0x2cd/0x8c0 [ 217.775877][T16804] copy_mnt_ns+0x13d/0x610 [ 217.775923][T16804] ? kmem_cache_alloc_noprof+0x2b8/0x480 [ 217.775952][T16804] ? create_new_namespaces+0x3c/0x3d0 [ 217.776024][T16804] create_new_namespaces+0x83/0x3d0 [ 217.776061][T16804] unshare_nsproxy_namespaces+0xe8/0x120 [ 217.776162][T16804] ksys_unshare+0x3d0/0x6d0 [ 217.776224][T16804] ? ksys_write+0x15f/0x1a0 [ 217.776256][T16804] __x64_sys_unshare+0x1f/0x30 [ 217.776296][T16804] x64_sys_call+0x2915/0x3000 [ 217.776323][T16804] do_syscall_64+0xd2/0x200 [ 217.776419][T16804] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 217.776453][T16804] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.776482][T16804] RIP: 0033:0x7fc24ddaeec9 [ 217.776503][T16804] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 217.776527][T16804] RSP: 002b:00007fc24c80f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 217.776575][T16804] RAX: ffffffffffffffda RBX: 00007fc24e005fa0 RCX: 00007fc24ddaeec9 [ 217.776592][T16804] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000002c020400 [ 217.776604][T16804] RBP: 00007fc24c80f090 R08: 0000000000000000 R09: 0000000000000000 [ 217.776617][T16804] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 217.776629][T16804] R13: 00007fc24e006038 R14: 00007fc24e005fa0 R15: 00007fff4d09e0f8 [ 217.776656][T16804] [ 218.000123][T16807] loop5: detected capacity change from 0 to 512 [ 218.098914][T16814] loop3: detected capacity change from 0 to 256 [ 218.112318][T16807] EXT4-fs error (device loop5): ext4_orphan_get:1418: comm syz.5.3346: bad orphan inode 11862016 [ 218.123945][T16807] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 218.138100][T16807] ext4 filesystem being mounted at /397/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 218.169656][ T6775] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 218.196382][T16825] loop5: detected capacity change from 0 to 512 [ 218.349324][T16825] EXT4-fs warning (device loop5): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 218.369859][T16825] EXT4-fs (loop5): mount failed [ 218.721196][T16861] loop5: detected capacity change from 0 to 512 [ 218.739946][T16861] EXT4-fs error (device loop5): ext4_orphan_get:1418: comm syz.5.3352: bad orphan inode 11862016 [ 218.752495][T16861] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 218.766475][T16861] ext4 filesystem being mounted at /400/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 218.773972][T16864] netlink: 'syz.4.3353': attribute type 4 has an invalid length. [ 218.806796][T16864] .`: renamed from bond0 (while UP) [ 218.826118][ T6775] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 218.838320][T16864] __nla_validate_parse: 13 callbacks suppressed [ 218.838336][T16864] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3353'. [ 218.885605][T16875] netlink: 'syz.5.3355': attribute type 6 has an invalid length. [ 218.935429][T16876] loop4: detected capacity change from 0 to 512 [ 218.963312][T16876] EXT4-fs warning (device loop4): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 218.981251][T16876] EXT4-fs (loop4): mount failed [ 218.993094][T16889] loop0: detected capacity change from 0 to 512 [ 219.011837][T16889] EXT4-fs warning (device loop0): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 219.045776][T16895] netlink: 'syz.2.3357': attribute type 1 has an invalid length. [ 219.054450][T16895] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3357'. [ 219.065518][T16889] EXT4-fs (loop0): mount failed [ 219.118845][T16895] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3357'. [ 219.134093][T16901] SELinux: failed to load policy [ 219.173405][T16911] loop4: detected capacity change from 0 to 512 [ 219.194634][T16911] EXT4-fs error (device loop4): ext4_orphan_get:1418: comm syz.4.3362: bad orphan inode 11862016 [ 219.221892][T16911] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 219.255702][T16911] ext4 filesystem being mounted at /72/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 219.282608][T16911] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3362'. [ 219.349823][T14807] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 219.361933][T16945] loop5: detected capacity change from 0 to 512 [ 219.392465][T16945] EXT4-fs warning (device loop5): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 219.428905][T16945] EXT4-fs (loop5): mount failed [ 219.489031][T16956] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3367'. [ 219.498162][T16956] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3367'. [ 219.519219][T16956] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3367'. [ 219.804658][T16973] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3371'. [ 219.814363][T16973] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3371'. [ 219.845487][T16973] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3371'. [ 220.493050][T17001] SELinux: failed to load policy [ 220.589939][T17017] loop4: detected capacity change from 0 to 256 [ 220.624548][ T29] kauditd_printk_skb: 94 callbacks suppressed [ 220.624566][ T29] audit: type=1400 audit(1759591948.220:50756): avc: denied { setopt } for pid=17005 comm="syz.4.3383" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 220.765562][T17027] loop5: detected capacity change from 0 to 512 [ 220.781501][T17027] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 220.797355][T17027] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.3390: bg 0: block 104: invalid block bitmap [ 220.840523][T17027] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 220.872541][T17027] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.3390: invalid indirect mapped block 1 (level 1) [ 220.889855][T17027] EXT4-fs (loop5): 1 truncate cleaned up [ 220.897045][T17027] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 220.913378][ T29] audit: type=1400 audit(1759591948.520:50757): avc: denied { write } for pid=17025 comm="syz.5.3390" path="/408/file0/file1" dev="loop5" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 221.063178][ T6775] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.090595][ T29] audit: type=1400 audit(1759591948.690:50758): avc: denied { ioctl } for pid=17043 comm="syz.5.3394" path="socket:[40852]" dev="sockfs" ino=40852 ioctlcmd=0x9420 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 221.126861][T17045] loop5: detected capacity change from 0 to 512 [ 221.145103][T17045] EXT4-fs: inline encryption not supported [ 221.159298][T17045] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 221.182870][T17045] EXT4-fs (loop5): 1 truncate cleaned up [ 221.195695][T17045] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 221.247275][ T6775] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.279097][T17054] loop5: detected capacity change from 0 to 164 [ 221.291218][T17056] program syz.2.3397 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 221.446464][ T29] audit: type=1326 audit(1759591949.040:50759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17072 comm="syz.2.3402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc24ddaeec9 code=0x7ffc0000 [ 221.490606][ T29] audit: type=1326 audit(1759591949.040:50760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17072 comm="syz.2.3402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc24ddaeec9 code=0x7ffc0000 [ 221.521358][ T29] audit: type=1326 audit(1759591949.070:50761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17072 comm="syz.2.3402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc24ddaeec9 code=0x7ffc0000 [ 221.546597][ T29] audit: type=1326 audit(1759591949.070:50762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17072 comm="syz.2.3402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc24ddaeec9 code=0x7ffc0000 [ 221.570755][ T29] audit: type=1326 audit(1759591949.070:50763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17072 comm="syz.2.3402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc24ddaeec9 code=0x7ffc0000 [ 221.595550][ T29] audit: type=1326 audit(1759591949.080:50764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17072 comm="syz.2.3402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc24ddaeec9 code=0x7ffc0000 [ 221.626353][ T29] audit: type=1326 audit(1759591949.080:50765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17072 comm="syz.2.3402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc24ddaeec9 code=0x7ffc0000 [ 221.666994][T17075] loop5: detected capacity change from 0 to 512 [ 221.680982][T17075] EXT4-fs warning (device loop5): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 221.723466][T17085] loop3: detected capacity change from 0 to 512 [ 221.738687][T17075] EXT4-fs (loop5): mount failed [ 221.779736][T17085] EXT4-fs error (device loop3): ext4_orphan_get:1418: comm syz.3.3404: bad orphan inode 11862016 [ 221.798667][T17085] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 221.836951][T17085] ext4 filesystem being mounted at /41/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 221.916101][T17085] netlink: 'syz.3.3404': attribute type 1 has an invalid length. [ 221.924250][T17085] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.947831][T17101] loop5: detected capacity change from 0 to 164 [ 221.964943][T17085] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.972291][T17085] bridge0: port 2(bridge_slave_1) entered forwarding state [ 222.054408][T15428] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 222.093810][T17124] loop5: detected capacity change from 0 to 512 [ 222.155836][T17124] EXT4-fs error (device loop5): ext4_orphan_get:1418: comm syz.5.3416: bad orphan inode 11862016 [ 222.202704][T17124] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 222.261867][T17139] loop4: detected capacity change from 0 to 512 [ 222.277329][T17124] ext4 filesystem being mounted at /414/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 222.288871][T17141] loop3: detected capacity change from 0 to 512 [ 222.320216][T17139] EXT4-fs warning (device loop4): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 222.343236][T17141] EXT4-fs warning (device loop3): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 222.371018][T17139] EXT4-fs (loop4): mount failed [ 222.371457][T17141] EXT4-fs (loop3): mount failed [ 222.389531][ T6775] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 222.464944][T17158] loop5: detected capacity change from 0 to 512 [ 222.469119][T17159] loop4: detected capacity change from 0 to 512 [ 222.503064][T17159] EXT4-fs warning (device loop4): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 222.531362][T17159] EXT4-fs (loop4): mount failed [ 222.548096][T17158] EXT4-fs warning (device loop5): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 222.593277][T17158] EXT4-fs (loop5): mount failed [ 222.608329][T17176] netem: change failed [ 222.660132][T17182] loop3: detected capacity change from 0 to 512 [ 222.678464][T17182] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 222.681342][T17184] loop5: detected capacity change from 0 to 512 [ 222.702383][T17182] EXT4-fs (loop3): 1 truncate cleaned up [ 222.710107][T17182] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 222.729025][T17184] EXT4-fs error (device loop5): ext4_orphan_get:1418: comm syz.5.3430: bad orphan inode 11862016 [ 222.762011][T17184] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 222.782241][T15428] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.795197][T17184] ext4 filesystem being mounted at /416/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 222.922632][ T6775] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 223.204912][T17217] loop5: detected capacity change from 0 to 256 [ 223.243865][T17224] netem: change failed [ 223.741080][T17267] loop4: detected capacity change from 0 to 164 [ 223.846219][T17276] loop4: detected capacity change from 0 to 512 [ 223.868238][T17276] EXT4-fs warning (device loop4): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 223.883495][T17276] EXT4-fs (loop4): mount failed [ 224.138786][T17290] loop3: detected capacity change from 0 to 512 [ 224.141285][T17292] __nla_validate_parse: 16 callbacks suppressed [ 224.141367][T17292] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3459'. [ 224.160570][T17292] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3459'. [ 224.182985][T17290] EXT4-fs warning (device loop3): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 224.189607][T17292] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3459'. [ 224.219435][T17290] EXT4-fs (loop3): mount failed [ 224.233002][T17301] netem: change failed [ 224.279395][T17303] loop5: detected capacity change from 0 to 512 [ 224.320150][T17303] EXT4-fs warning (device loop5): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 224.372850][T17303] EXT4-fs (loop5): mount failed [ 224.435957][T17318] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3467'. [ 224.450999][ T58] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 224.470190][ T58] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 224.488389][T17324] loop4: detected capacity change from 0 to 512 [ 224.495630][ T58] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 224.514409][ T58] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 224.537454][T17324] EXT4-fs warning (device loop4): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 224.581832][T17324] EXT4-fs (loop4): mount failed [ 224.645306][T17341] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3473'. [ 224.652067][T17342] loop4: detected capacity change from 0 to 512 [ 224.654403][T17341] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3473'. [ 224.672713][T17342] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 224.699047][T17346] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3473'. [ 224.700499][T17342] EXT4-fs (loop4): 1 truncate cleaned up [ 224.719551][T17345] loop3: detected capacity change from 0 to 512 [ 224.727824][T17342] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 224.758523][T17345] EXT4-fs warning (device loop3): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 224.776801][T17345] EXT4-fs (loop3): mount failed [ 224.804984][T14807] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.825622][T17361] loop3: detected capacity change from 0 to 164 [ 224.876369][T17367] SELinux: failed to load policy [ 224.921890][T17375] loop4: detected capacity change from 0 to 512 [ 224.923062][T17377] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3481'. [ 224.943611][ T52] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 224.952912][ T52] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 224.962130][ T52] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 224.972874][ T52] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 224.977108][T17375] EXT4-fs warning (device loop4): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 224.997879][T17375] EXT4-fs (loop4): mount failed [ 225.022113][T17388] loop3: detected capacity change from 0 to 512 [ 225.049346][T17388] EXT4-fs warning (device loop3): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 225.064903][T17388] EXT4-fs (loop3): mount failed [ 225.212757][T17403] loop4: detected capacity change from 0 to 128 [ 225.242890][T17397] loop3: detected capacity change from 0 to 512 [ 225.250227][T17397] EXT4-fs: dax option not supported [ 225.320787][T17415] loop4: detected capacity change from 0 to 128 [ 225.336619][T17417] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3490'. [ 225.337636][T17415] vfat: Unknown parameter 'ÿ' [ 225.345805][T17417] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3490'. [ 225.416773][T17427] loop5: detected capacity change from 0 to 512 [ 225.435581][T17427] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 225.457634][T17433] loop4: detected capacity change from 0 to 512 [ 225.464184][T17435] loop3: detected capacity change from 0 to 512 [ 225.473980][T17427] EXT4-fs (loop5): 1 truncate cleaned up [ 225.480370][T17427] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 225.488740][T17435] EXT4-fs error (device loop3): ext4_orphan_get:1418: comm syz.3.3496: bad orphan inode 11862016 [ 225.504222][T17435] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 225.517062][T17435] ext4 filesystem being mounted at /63/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 225.517176][T17433] EXT4-fs warning (device loop4): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 225.563711][ T6775] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.575568][T17433] EXT4-fs (loop4): mount failed [ 225.591276][T15428] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 225.630448][T17459] loop5: detected capacity change from 0 to 128 [ 225.640603][ T29] kauditd_printk_skb: 305 callbacks suppressed [ 225.640671][ T29] audit: type=1326 audit(1759591953.240:51058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17457 comm="syz.5.3500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8180aeec9 code=0x7ffc0000 [ 225.672726][T17455] loop3: detected capacity change from 0 to 512 [ 225.679541][ T29] audit: type=1326 audit(1759591953.240:51059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17457 comm="syz.5.3500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8180aeec9 code=0x7ffc0000 [ 225.681556][T17458] loop4: detected capacity change from 0 to 512 [ 225.703212][ T29] audit: type=1326 audit(1759591953.240:51060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17457 comm="syz.5.3500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff8180aeec9 code=0x7ffc0000 [ 225.733225][ T29] audit: type=1326 audit(1759591953.240:51061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17457 comm="syz.5.3500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8180aeec9 code=0x7ffc0000 [ 225.739550][T17455] Quota error (device loop3): v2_read_file_info: Free block number 1 out of range (1, 6). [ 225.757359][ T29] audit: type=1326 audit(1759591953.240:51062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17457 comm="syz.5.3500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff8180aeec9 code=0x7ffc0000 [ 225.767255][T17455] EXT4-fs warning (device loop3): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 225.790523][ T29] audit: type=1326 audit(1759591953.240:51063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17457 comm="syz.5.3500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8180aeec9 code=0x7ffc0000 [ 225.790694][ T29] audit: type=1326 audit(1759591953.240:51064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17457 comm="syz.5.3500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff8180aeec9 code=0x7ffc0000 [ 225.806491][T17455] EXT4-fs (loop3): mount failed [ 225.829195][ T29] audit: type=1326 audit(1759591953.240:51065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17457 comm="syz.5.3500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8180aeec9 code=0x7ffc0000 [ 225.858967][T17458] Quota error (device loop4): v2_read_file_info: Free block number 1 out of range (1, 6). [ 225.891756][T17458] EXT4-fs warning (device loop4): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 225.908788][T17458] EXT4-fs (loop4): mount failed [ 226.019856][T17492] loop3: detected capacity change from 0 to 512 [ 226.038373][T17492] EXT4-fs error (device loop3): ext4_orphan_get:1418: comm syz.3.3510: bad orphan inode 11862016 [ 226.061418][T17492] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 226.090572][T17492] ext4 filesystem being mounted at /67/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 226.157289][T17490] loop5: detected capacity change from 0 to 512 [ 226.164203][T17490] EXT4-fs: dax option not supported [ 226.197407][T15428] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 226.265264][T17514] loop5: detected capacity change from 0 to 512 [ 226.290883][T17514] EXT4-fs warning (device loop5): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 226.307021][T17514] EXT4-fs (loop5): mount failed [ 226.390418][T17526] loop3: detected capacity change from 0 to 512 [ 226.417588][T17526] EXT4-fs warning (device loop3): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 226.442597][T17526] EXT4-fs (loop3): mount failed [ 226.935756][T17567] loop4: detected capacity change from 0 to 164 [ 227.060677][T17586] loop4: detected capacity change from 0 to 164 [ 227.235581][T17599] loop5: detected capacity change from 0 to 512 [ 227.260031][T17599] EXT4-fs error (device loop5): ext4_orphan_get:1418: comm syz.5.3541: bad orphan inode 11862016 [ 227.279208][T17599] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 227.320939][T17599] ext4 filesystem being mounted at /429/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 227.421523][ T6775] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 227.508729][T17619] loop4: detected capacity change from 0 to 512 [ 227.528647][T17619] EXT4-fs warning (device loop4): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 227.544654][T17619] EXT4-fs (loop4): mount failed [ 227.623396][T17635] loop4: detected capacity change from 0 to 512 [ 227.631966][T17635] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 227.645268][T17635] EXT4-fs (loop4): 1 truncate cleaned up [ 227.651834][T17635] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 227.685480][T14807] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.728193][T17644] loop4: detected capacity change from 0 to 512 [ 227.752109][T17644] EXT4-fs warning (device loop4): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 227.767607][T17644] EXT4-fs (loop4): mount failed [ 227.846311][T17659] loop4: detected capacity change from 0 to 512 [ 227.860530][T17659] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 227.873552][T17659] ext4 filesystem being mounted at /111/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 227.904659][T14807] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.925628][T17667] loop4: detected capacity change from 0 to 164 [ 228.173623][T17686] random: crng reseeded on system resumption [ 228.184727][T17686] Restarting kernel threads ... [ 228.189920][T17686] Done restarting kernel threads. [ 228.196259][T17686] netlink: 'syz.4.3559': attribute type 8 has an invalid length. [ 228.208935][T17686] loop4: detected capacity change from 0 to 512 [ 228.216048][T17686] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 228.226041][T17686] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.3559: bg 0: block 104: invalid block bitmap [ 228.238708][T17686] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 228.248525][T17686] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.3559: invalid indirect mapped block 1 (level 1) [ 228.262151][T17686] EXT4-fs (loop4): 1 truncate cleaned up [ 228.268416][T17686] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 228.305799][T14807] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.331003][T17697] loop5: detected capacity change from 0 to 512 [ 228.357195][T17697] EXT4-fs error (device loop5): ext4_orphan_get:1418: comm syz.5.3563: bad orphan inode 11862016 [ 228.379400][T17697] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 228.403409][T17697] ext4 filesystem being mounted at /431/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 228.417802][T17697] netlink: 'syz.5.3563': attribute type 5 has an invalid length. [ 228.443891][ T6775] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 228.464793][T17713] loop5: detected capacity change from 0 to 164 [ 228.729494][T17741] loop5: detected capacity change from 0 to 512 [ 228.748349][T17741] EXT4-fs warning (device loop5): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 228.764243][T17741] EXT4-fs (loop5): mount failed [ 229.288343][T17754] __nla_validate_parse: 14 callbacks suppressed [ 229.288358][T17754] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3577'. [ 229.349655][T17756] loop3: detected capacity change from 0 to 512 [ 229.378591][T17756] EXT4-fs error (device loop3): ext4_orphan_get:1418: comm syz.3.3578: bad orphan inode 11862016 [ 229.390191][T17756] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 229.402809][T17756] ext4 filesystem being mounted at /77/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 229.421670][T17756] netlink: 'syz.3.3578': attribute type 5 has an invalid length. [ 229.429508][T17756] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3578'. [ 229.450405][T15428] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 229.537447][T17769] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3582'. [ 229.565995][T17771] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 229.574561][T17771] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 229.786799][T17800] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3594'. [ 229.795766][T17800] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3594'. [ 229.841840][T17807] loop5: detected capacity change from 0 to 256 [ 229.891208][T17815] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3598'. [ 229.900353][T17815] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3598'. [ 229.911390][T17815] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3598'. [ 229.948376][T17823] loop5: detected capacity change from 0 to 164 [ 229.995593][T17834] netlink: 'syz.0.3604': attribute type 10 has an invalid length. [ 230.007908][T17834] team0: Port device dummy0 added [ 230.016977][T17834] netlink: 'syz.0.3604': attribute type 10 has an invalid length. [ 230.037399][T17834] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 230.055893][T17841] loop5: detected capacity change from 0 to 128 [ 230.062443][T17834] team0: Failed to send options change via netlink (err -105) [ 230.074911][T17834] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 230.084673][T17834] team0: Port device dummy0 removed [ 230.095386][T17834] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 230.106346][T17837] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3605'. [ 230.115316][T17837] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3605'. [ 230.168475][T17847] loop4: detected capacity change from 0 to 256 [ 230.253695][T17858] loop4: detected capacity change from 0 to 128 [ 230.281119][T17865] loop5: detected capacity change from 0 to 512 [ 230.299556][T17868] loop3: detected capacity change from 0 to 128 [ 230.311368][T17865] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 230.335808][T17865] ext4 filesystem being mounted at /445/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 230.386075][ T6775] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.409621][T17881] loop5: detected capacity change from 0 to 512 [ 230.428156][T17881] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 230.448690][T17881] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.3615: bg 0: block 104: invalid block bitmap [ 230.467703][T17888] loop3: detected capacity change from 0 to 512 [ 230.475424][T17881] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 230.488538][T17888] EXT4-fs warning (device loop3): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 230.504091][T17881] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.3615: invalid indirect mapped block 1 (level 1) [ 230.512906][T17888] EXT4-fs (loop3): mount failed [ 230.523048][T17881] EXT4-fs (loop5): 1 truncate cleaned up [ 230.534984][T17881] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 230.579881][T17899] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17899 comm=syz.0.3620 [ 230.669668][ T6775] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.699309][T17916] loop5: detected capacity change from 0 to 128 [ 230.714032][ T29] kauditd_printk_skb: 868 callbacks suppressed [ 230.714051][ T29] audit: type=1326 audit(1759591958.310:51928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17915 comm="syz.5.3626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8180aeec9 code=0x7ffc0000 [ 230.747680][ T29] audit: type=1326 audit(1759591958.340:51929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17915 comm="syz.5.3626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff8180aeec9 code=0x7ffc0000 [ 230.771455][ T29] audit: type=1326 audit(1759591958.340:51930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17915 comm="syz.5.3626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8180aeec9 code=0x7ffc0000 [ 230.795258][ T29] audit: type=1326 audit(1759591958.340:51931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17915 comm="syz.5.3626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8180aeec9 code=0x7ffc0000 [ 230.818880][ T29] audit: type=1326 audit(1759591958.340:51932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17915 comm="syz.5.3626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff8180aeec9 code=0x7ffc0000 [ 230.842595][ T29] audit: type=1326 audit(1759591958.340:51933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17915 comm="syz.5.3626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8180aeec9 code=0x7ffc0000 [ 230.866466][ T29] audit: type=1326 audit(1759591958.340:51934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17915 comm="syz.5.3626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8180aeec9 code=0x7ffc0000 [ 230.890160][ T29] audit: type=1326 audit(1759591958.340:51935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17915 comm="syz.5.3626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff8180aeec9 code=0x7ffc0000 [ 230.913843][ T29] audit: type=1326 audit(1759591958.340:51936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17915 comm="syz.5.3626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8180aeec9 code=0x7ffc0000 [ 230.937534][ T29] audit: type=1326 audit(1759591958.340:51937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17915 comm="syz.5.3626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8180aeec9 code=0x7ffc0000 [ 231.056303][T17931] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17931 comm=syz.2.3633 [ 231.091649][T17938] loop5: detected capacity change from 0 to 164 [ 231.188851][T17953] loop5: detected capacity change from 0 to 164 [ 231.223519][T17966] netlink: 'syz.2.3641': attribute type 10 has an invalid length. [ 231.228578][T17968] loop3: detected capacity change from 0 to 128 [ 231.247978][T17966] bond0: (slave dummy0): Releasing backup interface [ 231.265407][T17966] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 231.276059][T17966] team0: Failed to send options change via netlink (err -105) [ 231.284194][T17966] team0: Port device dummy0 added [ 231.284637][T17972] netlink: 'syz.2.3641': attribute type 10 has an invalid length. [ 231.308821][T17972] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 231.310649][T17976] loop5: detected capacity change from 0 to 512 [ 231.335720][T17982] loop3: detected capacity change from 0 to 128 [ 231.341093][T17972] team0: Failed to send options change via netlink (err -105) [ 231.353281][T17972] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 231.362559][T17976] EXT4-fs warning (device loop5): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 231.379417][T17972] team0: Port device dummy0 removed [ 231.385013][T17976] EXT4-fs (loop5): mount failed [ 231.392882][T17972] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 231.454737][T17993] loop5: detected capacity change from 0 to 512 [ 231.478344][T17993] EXT4-fs error (device loop5): ext4_orphan_get:1418: comm syz.5.3646: bad orphan inode 11862016 [ 231.514091][T17993] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 231.552534][T17993] ext4 filesystem being mounted at /451/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 231.594426][T17993] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17993 comm=syz.5.3646 [ 231.636347][ T6775] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 231.716020][T18022] loop5: detected capacity change from 0 to 128 [ 231.729993][T18025] loop3: detected capacity change from 0 to 512 [ 231.737481][T18025] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 231.748985][T18025] EXT4-fs (loop3): 1 truncate cleaned up [ 231.755283][T18025] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 231.786946][T15428] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.821439][T18032] loop3: detected capacity change from 0 to 512 [ 231.845402][T18032] EXT4-fs warning (device loop3): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 231.862947][T18032] EXT4-fs (loop3): mount failed [ 231.892440][T18047] loop5: detected capacity change from 0 to 512 [ 231.908827][T18047] EXT4-fs error (device loop5): ext4_orphan_get:1418: comm syz.5.3661: bad orphan inode 11862016 [ 231.912810][T18050] loop3: detected capacity change from 0 to 512 [ 231.920538][T18047] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 231.935258][T18050] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 231.938791][T18047] ext4 filesystem being mounted at /457/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 231.954930][T18050] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.3663: bg 0: block 104: invalid block bitmap [ 231.962775][T18047] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18047 comm=syz.5.3661 [ 231.971002][T18050] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 231.992450][T18050] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.3663: invalid indirect mapped block 1 (level 1) [ 232.005907][T18050] EXT4-fs (loop3): 1 truncate cleaned up [ 232.012077][T18050] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 232.026570][ T6775] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 232.144364][T15428] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.278063][T18077] loop4: detected capacity change from 0 to 164 [ 232.371136][T18087] loop4: detected capacity change from 0 to 512 [ 232.418674][T18087] EXT4-fs warning (device loop4): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 232.458843][T18087] EXT4-fs (loop4): mount failed [ 232.509666][T18105] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18105 comm=syz.0.3676 [ 232.535948][T18107] netlink: 'syz.2.3677': attribute type 10 has an invalid length. [ 232.565568][T18107] bond0: (slave dummy0): Releasing backup interface [ 232.579388][T18107] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 232.597969][T18112] netlink: 'syz.2.3677': attribute type 10 has an invalid length. [ 232.617387][T18107] team0: Failed to send options change via netlink (err -105) [ 232.624933][T18107] team0: Port device dummy0 added [ 232.635451][T18112] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 232.664361][T18112] team0: Failed to send options change via netlink (err -105) [ 232.664401][T18112] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 232.672309][T18112] team0: Port device dummy0 removed [ 232.674838][T18112] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 233.499647][T18141] loop4: detected capacity change from 0 to 512 [ 233.518459][T18141] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 233.531204][T18141] ext4 filesystem being mounted at /127/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 233.556441][T14807] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.594592][T18151] loop4: detected capacity change from 0 to 512 [ 233.601891][T18151] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 233.619223][T18151] EXT4-fs (loop4): 1 truncate cleaned up [ 233.625504][T18151] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 233.652924][T14807] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.691208][T18162] loop4: detected capacity change from 0 to 512 [ 233.716937][T18162] EXT4-fs warning (device loop4): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 233.732531][T18162] EXT4-fs (loop4): mount failed [ 233.887104][T18175] loop5: detected capacity change from 0 to 1024 [ 233.894027][T18175] EXT4-fs: Ignoring removed oldalloc option [ 233.900929][T18175] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 233.911958][T18175] EXT4-fs (loop5): group descriptors corrupted! [ 233.993138][T18192] loop3: detected capacity change from 0 to 512 [ 234.008825][T18192] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 234.021533][T18192] ext4 filesystem being mounted at /101/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 234.049529][T15428] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.058943][T18200] loop4: detected capacity change from 0 to 512 [ 234.062469][T18200] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 234.081965][T18200] EXT4-fs (loop4): 1 truncate cleaned up [ 234.088704][T18200] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 234.104242][ T3383] hid_parser_main: 43 callbacks suppressed [ 234.104309][ T3383] hid-generic 0008:0006:0007.0004: unknown main item tag 0x0 [ 234.117866][ T3383] hid-generic 0008:0006:0007.0004: unknown main item tag 0x0 [ 234.125696][ T3383] hid-generic 0008:0006:0007.0004: unknown main item tag 0x0 [ 234.133334][ T3383] hid-generic 0008:0006:0007.0004: unknown main item tag 0x0 [ 234.141006][ T3383] hid-generic 0008:0006:0007.0004: unknown main item tag 0x0 [ 234.148469][ T3383] hid-generic 0008:0006:0007.0004: unknown main item tag 0x0 [ 234.155905][ T3383] hid-generic 0008:0006:0007.0004: unknown main item tag 0x0 [ 234.163380][ T3383] hid-generic 0008:0006:0007.0004: unknown main item tag 0x0 [ 234.170847][ T3383] hid-generic 0008:0006:0007.0004: unknown main item tag 0x0 [ 234.178308][ T3383] hid-generic 0008:0006:0007.0004: unknown main item tag 0x0 [ 234.192378][T18213] loop5: detected capacity change from 0 to 512 [ 234.200627][ T3383] hid-generic 0008:0006:0007.0004: hidraw0: HID v0.0b Device [syz1] on syz1 [ 234.213353][T18213] EXT4-fs warning (device loop5): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 234.238184][T14807] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.251940][T18213] EXT4-fs (loop5): mount failed [ 234.281806][T18230] loop4: detected capacity change from 0 to 512 [ 234.297130][T18230] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 234.325880][T18230] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.3707: bg 0: block 104: invalid block bitmap [ 234.365339][T18230] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 234.394002][T18230] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.3707: invalid indirect mapped block 1 (level 1) [ 234.431449][T18230] EXT4-fs (loop4): 1 truncate cleaned up [ 234.444953][T18230] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 234.514873][T18224] loop3: detected capacity change from 0 to 512 [ 234.522288][T18224] EXT4-fs: dax option not supported [ 234.540534][T18235] __nla_validate_parse: 43 callbacks suppressed [ 234.540553][T18235] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3709'. [ 234.576219][T14807] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.594638][T18243] loop4: detected capacity change from 0 to 512 [ 234.608740][T18243] EXT4-fs error (device loop4): ext4_orphan_get:1418: comm syz.4.3710: bad orphan inode 11862016 [ 234.620614][T18243] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 234.633410][T18243] ext4 filesystem being mounted at /136/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 234.647504][T18243] netlink: 92 bytes leftover after parsing attributes in process `syz.4.3710'. [ 234.672423][T14807] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 234.867326][T18263] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3717'. [ 234.876370][T18263] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3717'. [ 234.888175][T18263] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3717'. [ 234.888682][T18265] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3718'. [ 234.960790][T18273] loop4: detected capacity change from 0 to 128 [ 234.987311][T18276] netlink: 92 bytes leftover after parsing attributes in process `syz.2.3722'. [ 235.098831][T18292] loop4: detected capacity change from 0 to 512 [ 235.105866][T18292] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 235.115565][T18292] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.3729: bg 0: block 104: invalid block bitmap [ 235.117574][T18296] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3730'. [ 235.128285][T18292] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 235.137100][T18296] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3730'. [ 235.155727][T18292] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.3729: invalid indirect mapped block 1 (level 1) [ 235.159053][T18296] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3730'. [ 235.169416][T18292] EXT4-fs (loop4): 1 truncate cleaned up [ 235.184293][T18292] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 235.446139][T14807] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.574027][T18335] loop4: detected capacity change from 0 to 512 [ 235.608330][T18335] EXT4-fs warning (device loop4): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 235.636377][T18335] EXT4-fs (loop4): mount failed [ 235.715857][T18350] loop4: detected capacity change from 0 to 512 [ 235.728602][T18350] EXT4-fs error (device loop4): ext4_orphan_get:1418: comm syz.4.3747: bad orphan inode 11862016 [ 235.740872][T18350] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 235.754586][T18350] ext4 filesystem being mounted at /145/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 235.780140][T14807] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 235.804281][T18360] loop4: detected capacity change from 0 to 512 [ 235.821412][T18360] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 235.836327][T18360] ext4 filesystem being mounted at /146/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 235.847447][T18365] loop3: detected capacity change from 0 to 512 [ 235.870474][T18365] __quota_error: 1104 callbacks suppressed [ 235.870495][T18365] Quota error (device loop3): v2_read_file_info: Free block number 1 out of range (1, 6). [ 235.886883][T18365] EXT4-fs warning (device loop3): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 235.887091][T14807] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.902303][T18365] EXT4-fs (loop3): mount failed [ 235.917924][ T29] audit: type=1326 audit(1759591963.520:53036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18371 comm="syz.0.3752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe3009eec9 code=0x7ffc0000 [ 235.941676][ T29] audit: type=1326 audit(1759591963.520:53037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18371 comm="syz.0.3752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe3009eec9 code=0x7ffc0000 [ 235.972001][ T29] audit: type=1326 audit(1759591963.520:53038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18371 comm="syz.0.3752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=132 compat=0 ip=0x7efe3009eec9 code=0x7ffc0000 [ 235.996019][ T29] audit: type=1326 audit(1759591963.520:53039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18371 comm="syz.0.3752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe3009eec9 code=0x7ffc0000 [ 236.020207][ T29] audit: type=1326 audit(1759591963.550:53040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18371 comm="syz.0.3752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe3009eec9 code=0x7ffc0000 [ 236.045681][ T29] audit: type=1326 audit(1759591963.620:53041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18379 comm="syz.0.3754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe3009eec9 code=0x7ffc0000 [ 236.069454][ T29] audit: type=1326 audit(1759591963.620:53042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18379 comm="syz.0.3754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7efe3009eec9 code=0x7ffc0000 [ 236.093326][ T29] audit: type=1326 audit(1759591963.620:53043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18379 comm="syz.0.3754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe3009eec9 code=0x7ffc0000 [ 236.116985][ T29] audit: type=1326 audit(1759591963.620:53044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18379 comm="syz.0.3754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efe3009eec9 code=0x7ffc0000 [ 236.232109][T18391] loop4: detected capacity change from 0 to 512 [ 236.267190][T18391] EXT4-fs error (device loop4): ext4_orphan_get:1418: comm syz.4.3758: bad orphan inode 11862016 [ 236.282333][T18391] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 236.295831][T18391] ext4 filesystem being mounted at /149/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 236.323584][T18406] loop5: detected capacity change from 0 to 512 [ 236.332554][T18406] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e01c, mo2=0002] [ 236.341873][T18406] System zones: 1-12 [ 236.346496][T18406] EXT4-fs error (device loop5): ext4_get_branch:178: inode #13: block 33619980: comm syz.5.3764: invalid block [ 236.363617][T14807] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 236.369498][T18406] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.3764: invalid indirect mapped block 1819239214 (level 1) [ 236.388450][T18406] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.3764: bg 0: block 361: padding at end of block bitmap is not set [ 236.408832][T18406] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 236.418707][T18406] EXT4-fs error (device loop5): ext4_clear_blocks:876: inode #13: comm syz.5.3764: attempt to clear invalid blocks 33619980 len 1 [ 236.420300][T18414] loop3: detected capacity change from 0 to 512 [ 236.435182][T18406] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.3764: invalid indirect mapped block 1819239214 (level 0) [ 236.454266][T18406] EXT4-fs (loop5): 1 truncate cleaned up [ 236.461572][T18406] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 236.480749][T18414] EXT4-fs warning (device loop3): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 236.487246][T18406] EXT4-fs error (device loop5): dx_probe:791: inode #2: comm syz.5.3764: Directory hole found for htree index block 0 [ 236.498255][T18414] EXT4-fs (loop3): mount failed [ 236.548389][ T6775] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.683759][T18447] loop3: detected capacity change from 0 to 512 [ 236.710491][T18447] EXT4-fs error (device loop3): ext4_orphan_get:1418: comm syz.3.3777: bad orphan inode 11862016 [ 236.730130][T18424] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 236.731965][T18447] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 236.751348][T18447] ext4 filesystem being mounted at /115/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 236.775112][T18424] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 236.783724][T15428] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 236.976275][T18466] loop3: detected capacity change from 0 to 164 [ 237.049463][T18475] loop3: detected capacity change from 0 to 512 [ 237.056764][T18475] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 237.068256][T18475] EXT4-fs (loop3): 1 truncate cleaned up [ 237.074374][T18475] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 237.105403][T15428] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.140719][T18483] loop3: detected capacity change from 0 to 512 [ 237.160266][T18483] EXT4-fs warning (device loop3): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 237.188140][T18483] EXT4-fs (loop3): mount failed [ 237.233049][T18498] loop3: detected capacity change from 0 to 512 [ 237.268871][T18498] EXT4-fs error (device loop3): ext4_orphan_get:1418: comm syz.3.3789: bad orphan inode 11862016 [ 237.286550][T18498] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 237.301167][T18498] ext4 filesystem being mounted at /123/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 237.340940][T15428] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 237.354097][T18507] netlink: 'syz.0.3792': attribute type 10 has an invalid length. [ 237.371678][T18507] bond0: (slave dummy0): Releasing backup interface [ 237.390250][T18507] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 237.399533][T18507] team0: Failed to send options change via netlink (err -105) [ 237.407220][T18507] team0: Port device dummy0 added [ 237.412739][T18513] netlink: 'syz.0.3792': attribute type 10 has an invalid length. [ 237.431470][T18513] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 237.454077][T18517] loop3: detected capacity change from 0 to 512 [ 237.455482][T18513] team0: Failed to send options change via netlink (err -105) [ 237.470204][T18517] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 237.471120][T18513] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 237.502798][T18517] EXT4-fs (loop3): 1 truncate cleaned up [ 237.509205][T18517] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 237.510845][T18513] team0: Port device dummy0 removed [ 237.534226][T18521] loop5: detected capacity change from 0 to 1024 [ 237.542275][T18521] EXT4-fs: Ignoring removed oldalloc option [ 237.546160][T18513] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 237.549191][T18521] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 237.567888][T18521] EXT4-fs (loop5): group descriptors corrupted! [ 237.594691][T15428] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.642789][T18538] loop3: detected capacity change from 0 to 512 [ 237.669474][T18538] EXT4-fs warning (device loop3): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 237.693807][T18538] EXT4-fs (loop3): mount failed [ 237.772730][T18561] netlink: 'syz.0.3809': attribute type 10 has an invalid length. [ 237.781621][T18559] netlink: 'syz.5.3808': attribute type 10 has an invalid length. [ 237.782441][T18561] bond0: (slave dummy0): Releasing backup interface [ 237.800889][T18561] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 237.800954][T18561] team0: Failed to send options change via netlink (err -105) [ 237.817357][T18561] team0: Port device dummy0 added [ 237.823327][T18564] netlink: 'syz.0.3809': attribute type 10 has an invalid length. [ 237.824294][T18559] bond0: (slave dummy0): Releasing backup interface [ 237.830592][T18559] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 237.830694][T18559] team0: Failed to send options change via netlink (err -105) [ 237.830766][T18559] team0: Port device dummy0 added [ 237.847533][T18564] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 237.854535][T18559] netlink: 'syz.5.3808': attribute type 10 has an invalid length. [ 237.855338][T18564] team0: Failed to send options change via netlink (err -105) [ 237.903573][T18564] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 237.903810][T18564] team0: Port device dummy0 removed [ 237.906712][T18564] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 237.931303][T18559] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 237.957061][T18559] team0: Failed to send options change via netlink (err -105) [ 237.964740][T18559] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 237.973740][T18559] team0: Port device dummy0 removed [ 237.981256][T18559] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 238.052909][T18579] loop5: detected capacity change from 0 to 512 [ 238.068627][T18579] EXT4-fs error (device loop5): ext4_orphan_get:1418: comm syz.5.3815: bad orphan inode 11862016 [ 238.079874][T18579] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 238.092584][T18579] ext4 filesystem being mounted at /477/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 238.127564][T18588] loop5: detected capacity change from 0 to 512 [ 238.138753][T18588] EXT4-fs warning (device loop5): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 238.155318][T18588] EXT4-fs (loop5): mount failed [ 238.190972][T18597] 9pnet_fd: Insufficient options for proto=fd [ 238.220092][T18601] loop5: detected capacity change from 0 to 164 [ 238.280109][T18612] netlink: 'syz.0.3824': attribute type 10 has an invalid length. [ 238.291327][T18612] bond0: (slave dummy0): Releasing backup interface [ 238.301134][T18612] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 238.310490][T18612] team0: Failed to send options change via netlink (err -105) [ 238.318177][T18612] team0: Port device dummy0 added [ 238.325172][T18612] netlink: 'syz.0.3824': attribute type 10 has an invalid length. [ 238.333954][T18612] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 238.345646][T18612] team0: Failed to send options change via netlink (err -105) [ 238.353476][T18612] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 238.362534][T18612] team0: Port device dummy0 removed [ 238.370755][T18612] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 238.399251][T18619] loop5: detected capacity change from 0 to 512 [ 238.419813][T18619] EXT4-fs error (device loop5): ext4_orphan_get:1418: comm syz.5.3827: bad orphan inode 11862016 [ 238.432089][T18619] ext4 filesystem being mounted at /482/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 238.468985][T18631] loop5: detected capacity change from 0 to 512 [ 238.489123][T18631] EXT4-fs warning (device loop5): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 238.504314][T18631] EXT4-fs (loop5): mount failed [ 238.553810][T18640] 9pnet_fd: Insufficient options for proto=fd [ 238.603930][T18650] loop3: detected capacity change from 0 to 512 [ 238.611677][T18650] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 238.629772][T18650] EXT4-fs (loop3): 1 truncate cleaned up [ 238.671841][T18662] loop5: detected capacity change from 0 to 128 [ 238.678315][T18661] loop3: detected capacity change from 0 to 512 [ 238.700989][T18661] EXT4-fs error (device loop3): ext4_orphan_get:1418: comm syz.3.3839: bad orphan inode 11862016 [ 238.713262][T18661] ext4 filesystem being mounted at /130/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 238.774885][T18676] 9pnet_fd: Insufficient options for proto=fd [ 238.827402][T18688] loop3: detected capacity change from 0 to 512 [ 238.842685][T18688] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 238.867832][T18688] EXT4-fs (loop3): 1 truncate cleaned up [ 238.982943][T18703] loop3: detected capacity change from 0 to 512 [ 238.998521][T18703] EXT4-fs error (device loop3): ext4_orphan_get:1418: comm syz.3.3854: bad orphan inode 11862016 [ 239.009870][T18703] ext4 filesystem being mounted at /134/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 239.048580][T18711] loop3: detected capacity change from 0 to 512 [ 239.068251][T18711] EXT4-fs warning (device loop3): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 239.083804][T18711] EXT4-fs (loop3): mount failed [ 239.089440][T18683] loop5: detected capacity change from 0 to 512 [ 239.096587][T18683] EXT4-fs: dax option not supported [ 239.309001][ T3394] hid_parser_main: 43 callbacks suppressed [ 239.309030][ T3394] hid-generic 0008:0006:0007.0005: unknown main item tag 0x0 [ 239.322425][ T3394] hid-generic 0008:0006:0007.0005: unknown main item tag 0x0 [ 239.330075][ T3394] hid-generic 0008:0006:0007.0005: unknown main item tag 0x0 [ 239.337670][ T3394] hid-generic 0008:0006:0007.0005: unknown main item tag 0x0 [ 239.345193][ T3394] hid-generic 0008:0006:0007.0005: unknown main item tag 0x0 [ 239.352751][ T3394] hid-generic 0008:0006:0007.0005: unknown main item tag 0x0 [ 239.360271][ T3394] hid-generic 0008:0006:0007.0005: unknown main item tag 0x0 [ 239.367748][ T3394] hid-generic 0008:0006:0007.0005: unknown main item tag 0x0 [ 239.375179][ T3394] hid-generic 0008:0006:0007.0005: unknown main item tag 0x0 [ 239.382650][ T3394] hid-generic 0008:0006:0007.0005: unknown main item tag 0x0 [ 239.396542][ T3394] hid-generic 0008:0006:0007.0005: hidraw0: HID v0.0b Device [syz1] on syz1 [ 239.466990][T18744] loop4: detected capacity change from 0 to 1024 [ 239.491882][T18744] EXT4-fs: Ignoring removed oldalloc option [ 239.506945][T18744] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 239.518301][T18744] EXT4-fs (loop4): group descriptors corrupted! [ 239.545857][T18753] loop5: detected capacity change from 0 to 512 [ 239.568415][T18753] EXT4-fs warning (device loop5): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 239.594135][T18760] loop4: detected capacity change from 0 to 128 [ 239.604311][T18762] netlink: 'syz.0.3869': attribute type 10 has an invalid length. [ 239.613033][T18753] EXT4-fs (loop5): mount failed [ 239.632090][T18762] bond0: (slave dummy0): Releasing backup interface [ 239.655238][T18766] netlink: 'syz.0.3869': attribute type 10 has an invalid length. [ 239.656378][T18762] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 239.690854][T18762] team0: Failed to send options change via netlink (err -105) [ 239.698495][T18762] team0: Port device dummy0 added [ 239.713116][T18766] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 239.754544][T18766] team0: Failed to send options change via netlink (err -105) [ 239.781231][T18766] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 239.808125][T18766] team0: Port device dummy0 removed [ 239.826206][T18766] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 239.942499][T18791] bond0: (slave dummy0): Releasing backup interface [ 239.971017][T18791] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 239.990171][T18791] team0: Failed to send options change via netlink (err -105) [ 239.990248][T18778] loop5: detected capacity change from 0 to 512 [ 239.997759][T18791] team0: Port device dummy0 added [ 240.009641][T18793] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 240.021050][T18793] team0: Failed to send options change via netlink (err -105) [ 240.030095][T18778] EXT4-fs: dax option not supported [ 240.044661][T18793] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 240.058893][T18793] team0: Port device dummy0 removed [ 240.069436][T18793] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 240.099455][T18799] loop3: detected capacity change from 0 to 164 [ 240.106754][T18785] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 240.117926][T18785] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 240.148650][T18810] loop3: detected capacity change from 0 to 128 [ 240.266228][T18831] loop3: detected capacity change from 0 to 128 [ 240.605712][T18841] loop3: detected capacity change from 0 to 512 [ 240.620286][T18841] EXT4-fs: dax option not supported [ 240.759765][T18849] loop3: detected capacity change from 0 to 512 [ 240.767232][T18849] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 240.780275][T18849] EXT4-fs (loop3): 1 truncate cleaned up [ 240.902769][ T29] kauditd_printk_skb: 931 callbacks suppressed [ 240.902795][ T29] audit: type=1326 audit(1759591968.500:53969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18866 comm="syz.2.3901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc24ddaeec9 code=0x7ffc0000 [ 240.938629][ T29] audit: type=1326 audit(1759591968.500:53970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18866 comm="syz.2.3901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc24ddaeec9 code=0x7ffc0000 [ 240.962399][ T29] audit: type=1326 audit(1759591968.500:53971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18866 comm="syz.2.3901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc24ddaeec9 code=0x7ffc0000 [ 240.986218][ T29] audit: type=1326 audit(1759591968.500:53972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18866 comm="syz.2.3901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc24ddaeec9 code=0x7ffc0000 [ 241.009884][ T29] audit: type=1326 audit(1759591968.500:53973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18866 comm="syz.2.3901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc24ddaeec9 code=0x7ffc0000 [ 241.033564][ T29] audit: type=1326 audit(1759591968.500:53974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18866 comm="syz.2.3901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc24ddaeec9 code=0x7ffc0000 [ 241.057183][ T29] audit: type=1326 audit(1759591968.500:53975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18866 comm="syz.2.3901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc24ddaeec9 code=0x7ffc0000 [ 241.080774][ T29] audit: type=1326 audit(1759591968.500:53976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18866 comm="syz.2.3901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7fc24ddaeec9 code=0x7ffc0000 [ 241.104564][ T29] audit: type=1326 audit(1759591968.500:53977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18866 comm="syz.2.3901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc24ddaeec9 code=0x7ffc0000 [ 241.128245][ T29] audit: type=1326 audit(1759591968.500:53978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18866 comm="syz.2.3901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=4 compat=0 ip=0x7fc24ddaeec9 code=0x7ffc0000 [ 241.427531][T18837] syz.0.3892 (18837) used greatest stack depth: 6048 bytes left [ 241.439180][T18880] __nla_validate_parse: 48 callbacks suppressed [ 241.439203][T18880] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3906'. [ 241.454517][T18880] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3906'. [ 241.465724][T18880] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3906'. [ 241.568986][T18890] bond0: (slave dummy0): Releasing backup interface [ 241.583873][T18890] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 241.592954][T18890] team0: Failed to send options change via netlink (err -105) [ 241.600608][T18890] team0: Port device dummy0 added [ 241.608135][T18890] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 241.623013][T18890] team0: Failed to send options change via netlink (err -105) [ 241.631293][T18890] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 241.640752][T18890] team0: Port device dummy0 removed [ 241.648721][T18890] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 241.723257][T18900] loop3: detected capacity change from 0 to 128 [ 241.732265][T18898] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3912'. [ 241.824934][T18907] loop3: detected capacity change from 0 to 512 [ 241.832339][T18907] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 241.843978][T18907] EXT4-fs (loop3): 1 truncate cleaned up [ 241.924116][T18915] loop3: detected capacity change from 0 to 512 [ 241.931108][T18915] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 241.940905][T18915] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.3916: bg 0: block 104: invalid block bitmap [ 241.953601][T18915] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 241.962753][T18915] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.3916: invalid indirect mapped block 1 (level 1) [ 241.976272][T18915] EXT4-fs (loop3): 1 truncate cleaned up [ 242.024976][T18919] loop5: detected capacity change from 0 to 512 [ 242.041694][T18919] EXT4-fs warning (device loop5): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 242.057580][T18919] EXT4-fs (loop5): mount failed [ 242.148136][T18942] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 242.157110][T18942] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 242.760074][T18973] loop5: detected capacity change from 0 to 128 [ 242.794508][T18976] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3937'. [ 242.841098][T18982] loop4: detected capacity change from 0 to 512 [ 242.853021][T18982] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 242.864765][T18982] EXT4-fs (loop4): 1 truncate cleaned up [ 242.878072][T18989] loop5: detected capacity change from 0 to 512 [ 242.887952][T18989] EXT4-fs warning (device loop5): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 242.903366][T18989] EXT4-fs (loop5): mount failed [ 242.927984][T18998] loop4: detected capacity change from 0 to 164 [ 242.992239][T19013] validate_nla: 4 callbacks suppressed [ 242.992287][T19013] netlink: 'syz.4.3946': attribute type 10 has an invalid length. [ 242.999141][T19011] loop5: detected capacity change from 0 to 512 [ 243.016716][T19013] team0: Port device dummy0 added [ 243.029274][T19013] netlink: 'syz.4.3946': attribute type 10 has an invalid length. [ 243.047530][T19013] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 243.069655][T19016] loop3: detected capacity change from 0 to 512 [ 243.086136][T19016] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 243.095434][T19013] team0: Failed to send options change via netlink (err -105) [ 243.103473][T19013] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 243.106518][T19011] EXT4-fs warning (device loop5): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 243.112581][T19016] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.3947: bg 0: block 104: invalid block bitmap [ 243.128166][T19011] EXT4-fs (loop5): mount failed [ 243.140019][T19013] team0: Port device dummy0 removed [ 243.145479][T19016] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 243.167347][T19013] .`: (slave dummy0): Enslaving as an active interface with an up link [ 243.167677][T19016] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.3947: invalid indirect mapped block 1 (level 1) [ 243.217131][T19016] EXT4-fs (loop3): 1 truncate cleaned up [ 243.219132][T19026] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 243.224691][T19017] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3942'. [ 243.236313][T19028] loop5: detected capacity change from 0 to 512 [ 243.246737][T19026] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 243.255189][T19028] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e01c, mo2=0002] [ 243.263327][T19028] System zones: 1-12 [ 243.267962][T19028] EXT4-fs error (device loop5): ext4_get_branch:178: inode #13: block 33619980: comm syz.5.3948: invalid block [ 243.280051][T19028] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.3948: invalid indirect mapped block 1819239214 (level 1) [ 243.294614][T19028] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.3948: bg 0: block 361: padding at end of block bitmap is not set [ 243.309157][T19028] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 243.319178][T19028] EXT4-fs error (device loop5): ext4_clear_blocks:876: inode #13: comm syz.5.3948: attempt to clear invalid blocks 33619980 len 1 [ 243.333154][T19028] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.3948: invalid indirect mapped block 1819239214 (level 0) [ 243.348607][T19028] EXT4-fs (loop5): 1 truncate cleaned up [ 243.355750][T19028] EXT4-fs error (device loop5): dx_probe:791: inode #2: comm syz.5.3948: Directory hole found for htree index block 0 [ 243.396251][T19039] loop3: detected capacity change from 0 to 128 [ 243.397768][T19040] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3951'. [ 243.411595][T19040] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3951'. [ 243.423459][T19040] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3951'. [ 243.457284][T19045] loop5: detected capacity change from 0 to 164 [ 243.553087][ T3468] hid-generic 0008:0006:0007.0006: hidraw0: HID v0.0b Device [syz1] on syz1 [ 243.587969][T19076] loop3: detected capacity change from 0 to 512 [ 243.597647][T19076] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e01c, mo2=0002] [ 243.606385][T19076] System zones: 1-12 [ 243.614417][T19080] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3962'. [ 243.624377][T19076] EXT4-fs error (device loop3): ext4_get_branch:178: inode #13: block 33619980: comm syz.3.3961: invalid block [ 243.654970][T19076] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.3961: invalid indirect mapped block 1819239214 (level 1) [ 243.679075][T19076] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.3961: bg 0: block 361: padding at end of block bitmap is not set [ 243.696561][T19087] loop5: detected capacity change from 0 to 164 [ 243.706887][T19076] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 243.717006][T19076] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #13: comm syz.3.3961: attempt to clear invalid blocks 33619980 len 1 [ 243.733915][T19076] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.3961: invalid indirect mapped block 1819239214 (level 0) [ 243.749358][T19076] EXT4-fs (loop3): 1 truncate cleaned up [ 243.756650][T19076] EXT4-fs error (device loop3): dx_probe:791: inode #2: comm syz.3.3961: Directory hole found for htree index block 0 [ 243.847707][ T3413] hid-generic 0008:0006:0007.0007: hidraw0: HID v0.0b Device [syz1] on syz1 [ 243.871591][ T3413] hid-generic 0008:0006:0007.0008: hidraw0: HID v0.0b Device [syz1] on syz1 [ 243.924563][T19133] loop5: detected capacity change from 0 to 1024 [ 243.931611][T19133] EXT4-fs: Ignoring removed oldalloc option [ 243.941529][T19133] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 243.942968][T19135] loop3: detected capacity change from 0 to 512 [ 243.952515][T19133] EXT4-fs (loop5): group descriptors corrupted! [ 243.967616][T19135] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 243.974640][T19141] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 243.985784][T19141] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 243.995205][T19135] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.3975: bg 0: block 104: invalid block bitmap [ 244.026875][T19135] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 244.026914][T19151] loop5: detected capacity change from 0 to 164 [ 244.027031][T19135] ================================================================== [ 244.027064][T19135] BUG: KCSAN: data-race in data_push_tail / vsnprintf [ 244.027133][T19135] [ 244.027143][T19135] write to 0xffffffff88e52737 of 32 bytes by task 19151 on cpu 0: [ 244.027168][T19135] vsnprintf+0x2ce/0x890 [ 244.027213][T19135] vscnprintf+0x41/0x90 [ 244.027257][T19135] printk_sprint+0x30/0x2d0 [ 244.027292][T19135] vprintk_store+0x599/0x860 [ 244.027316][T19135] vprintk_emit+0x10d/0x580 [ 244.027337][T19135] vprintk_default+0x26/0x30 [ 244.027359][T19135] vprintk+0x1d/0x30 [ 244.027395][T19135] _printk+0x79/0xa0 [ 244.027432][T19135] set_capacity_and_notify+0x14c/0x1f0 [ 244.027461][T19135] loop_set_size+0x2e/0x70 [ 244.027489][T19135] loop_configure+0x825/0x9c0 [ 244.027516][T19135] lo_ioctl+0x1e1/0x12b0 [ 244.027536][T19135] blkdev_ioctl+0x356/0x440 [ 244.027554][T19135] __se_sys_ioctl+0xcb/0x140 [ 244.027580][T19135] __x64_sys_ioctl+0x43/0x50 [ 244.027605][T19135] x64_sys_call+0x1816/0x3000 [ 244.027637][T19135] do_syscall_64+0xd2/0x200 [ 244.027673][T19135] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.027697][T19135] [ 244.027705][T19135] read to 0xffffffff88e52748 of 8 bytes by task 19135 on cpu 1: [ 244.027723][T19135] data_push_tail+0xfd/0x420 [ 244.027743][T19135] data_alloc+0xbf/0x2b0 [ 244.027778][T19135] prb_reserve+0x808/0xaf0 [ 244.027812][T19135] vprintk_store+0x56d/0x860 [ 244.027834][T19135] vprintk_emit+0x10d/0x580 [ 244.027855][T19135] vprintk_default+0x26/0x30 [ 244.027878][T19135] vprintk+0x1d/0x30 [ 244.027929][T19135] _printk+0x79/0xa0 [ 244.027959][T19135] __ext4_std_error+0x346/0x370 [ 244.027982][T19135] ext4_free_blocks+0x1367/0x1480 [ 244.028019][T19135] ext4_clear_blocks+0x2a2/0x2c0 [ 244.028046][T19135] ext4_ind_truncate+0x382/0x830 [ 244.028073][T19135] ext4_truncate+0x6e1/0xae0 [ 244.028110][T19135] ext4_process_orphan+0x110/0x1c0 [ 244.028136][T19135] ext4_orphan_cleanup+0x6a8/0xa00 [ 244.028165][T19135] ext4_fill_super+0x3483/0x3810 [ 244.028187][T19135] get_tree_bdev_flags+0x28e/0x300 [ 244.028215][T19135] get_tree_bdev+0x1f/0x30 [ 244.028240][T19135] ext4_get_tree+0x1c/0x30 [ 244.028266][T19135] vfs_get_tree+0x57/0x1d0 [ 244.028292][T19135] do_new_mount+0x24d/0x660 [ 244.028316][T19135] path_mount+0x4a5/0xb70 [ 244.028339][T19135] __se_sys_mount+0x28c/0x2e0 [ 244.028363][T19135] __x64_sys_mount+0x67/0x80 [ 244.028388][T19135] x64_sys_call+0x2b51/0x3000 [ 244.028411][T19135] do_syscall_64+0xd2/0x200 [ 244.028440][T19135] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.028463][T19135] [ 244.028469][T19135] value changed: 0x00000000fffff978 -> 0x2065676e61686320 [ 244.028483][T19135] [ 244.028488][T19135] Reported by Kernel Concurrency Sanitizer on: [ 244.028513][T19135] CPU: 1 UID: 0 PID: 19135 Comm: syz.3.3975 Not tainted syzkaller #0 PREEMPT(voluntary) [ 244.028542][T19135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 244.028558][T19135] ================================================================== [ 244.046261][T19135] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.3975: invalid indirect mapped block 1 (level 1) [ 244.073305][T19135] EXT4-fs (loop3): 1 truncate cleaned up [ 244.073502][T19151] RRIP_1991A