last executing test programs: 1m5.131996889s ago: executing program 2 (id=848): bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000400)={@map, 0xffffffffffffffff, 0x16, 0x0, 0xffffffffffffffff, @void, @value}, 0x20) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) r1 = socket$inet6_udp(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000380)=[{{&(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/103, 0x67}, {&(0x7f0000000200)=""/76, 0x4c}], 0x2, &(0x7f0000000300)=""/97, 0x61}, 0xfffffbff}], 0x1, 0x100, &(0x7f00000003c0)={0x77359400}) r2 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r2, 0x1, 0x3c, 0x0, 0x0) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_DEL(r4, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x3c, r3, 0x300, 0x0, 0x0, {0x4a}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0xa8}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008055}, 0x44040) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r2, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f00000000c0)={0x204, r3, 0x400, 0x70bd25, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x9}, {0x6}, {0x8, 0x15, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x10000}, {0x6, 0x11, 0x1c}, {0x8, 0x15, 0x2}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x21186941}, {0x6, 0x11, 0x6}, {0x8, 0x15, 0x9}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x7}, {0x8, 0x15, 0x1000}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x10}, {0x6, 0x11, 0x60bf}, {0x8, 0x15, 0xd}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x5}, {0x8, 0x15, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x9}, {0x8, 0x15, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8}, {0x6, 0x11, 0x100}, {0x8, 0x15, 0x5}}]}, 0x204}, 0x1, 0x0, 0x0, 0x10}, 0x4000010) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x400, &(0x7f0000000040)={[{@jqfmt_vfsold}, {@quota}, {@sysvgroups}, {@nouid32}, {@dioread_lock}]}, 0x1, 0x4ed, &(0x7f00000002c0)="$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") creat(0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000440)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x18) open(0x0, 0x147842, 0x49) mknod$loop(&(0x7f0000000200)='./file0\x00', 0x2000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8905, &(0x7f00000006c0)) lsetxattr$security_selinux(&(0x7f00000001c0)='.\x00', &(0x7f0000000240), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x1001, 0x0) r7 = open(&(0x7f0000000300)='.\x00', 0x0, 0x101) ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f00000001c0)=0x10) syz_emit_ethernet(0x3a, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x7, 0x7}}}}}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000800)={'erspan0\x00', &(0x7f00000007c0)={'sit0\x00', 0x0, 0x80, 0x7, 0x1, 0x10001, {{0x8, 0x4, 0x1, 0xd, 0x20, 0x66, 0x0, 0x2, 0x29, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_addr={0x44, 0xc, 0x95, 0x1, 0x6, [{@dev={0xac, 0x14, 0x14, 0x2a}, 0x6}]}]}}}}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', r8, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_route(0x10, 0x3, 0x0) 1m4.244889782s ago: executing program 2 (id=863): syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x360, &(0x7f0000000b00)="$eJzs3c1rO0UYwPEnaZImKW1yEEVBOtiLXpY2ehaDtCAELG0jtoKwbTcasiYlG6oRse3Jq3j3JHgovVnwUND+A71404sI3noRPFhBXdm3ZPPWl5g0/trvB0omM/PszmQn5dm0m718+/MPKiVLK+kNiSaVRERErkSyEpVAxH+MuuWEhB3KSzO///j8+mYx6VWolfzGyzml1Nz8dx9+kvK7nU3LRfbdy99yv148ffHs5T8b75ctVbZUtdZQutqu/dzQt01D7ZatiqbUqmnolqHKVcuoe+3f+Nsxa3t7TaVXd2fTe3XDspRebaqK0VSNmmrUm0p/Ty9XlaZpajYtuEnxeG1Nzw8ZvDPiwWBM6vW8PiUiqZ6W4vFEBgQAACaqO/+POin9MPn/lswVCstryunczv9PXjhvzLx1Oufn/2eJfvn/Kz952+rI/53TiXb+X/POD0o35/9fyh3y/96M6HEZOv/PjmEwGM58oqcq0vHMyf/T/vvXdfTOyaJbIP8HAAAAAAAAAAAAAAAAAAAAAOBJcGXbGdu2M8Fj8NO+hMB/jgdp0PGfFpGkc/Rtjv9Dtr65JUn3wj3nGJuf7Rf3i96j3+FcREwx/ra7OWsjuPJIObLyvXngxx/sF6fclnxJyk68LElGsu56CsXb9sobheUl5fHjW5cppcPxOcnIU+H4b93V6cTnOuP9/SfkxYVQvCYZ+WFHamLKrhvZ3v+nS0q9/mahKz7l9hORX+79oAAAAAAAMGKaaul7/q5pg9q9bxnJl9yPiQxZlIz81f/8frHv+Xks81xs0rMHAAAAAOBxsJofV3SJGnW3YJr9CikZ2DSCQqyjJi4ifTsnumri1215KjTD244nId4dTP7rvL4KXtW7RAX/SOEMvNXk31FFhhtPMH+3JhJrNf1513lFDsVdAIfhpqjcIjzWPfh5p0L17bwwcDtH/kRaNcHHRokBr7Os9m4nes1KiPfU2JHhFsAzX3z9x+jeIK+e+ivgo5s7H5mGfSC3OShdBWcXvU3xsf/iAQAAAHDv2kl/UPNauDl8I5HwzXL4yz0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAACM0lq/06ypMeo4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA/8W/AQAA//9/d/Qh") r0 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x130) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x51) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x17, 0x8}}, 0x20) write$9p(r0, &(0x7f0000001400), 0x0) sendfile(r0, r1, 0x0, 0xe065) 1m4.205919963s ago: executing program 2 (id=865): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a000000020000000900000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000200), &(0x7f0000000280)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x18) lgetxattr(0x0, 0x0, 0x0, 0x0) 1m4.151917214s ago: executing program 2 (id=867): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000001000)={0x2000200e}) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0xa00008, &(0x7f0000000100), 0x1, 0x7c8, &(0x7f0000001280)="$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") mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2901090, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) pivot_root(0x0, &(0x7f00000001c0)='./file0/../file0/../file0\x00') 1m3.820532289s ago: executing program 2 (id=872): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_GET_TAGGED_ADDR_CTRL(0x38) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x200088c0}, 0x20000851) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000000)={[{@oldalloc}, {@acl}]}, 0xff, 0x257, &(0x7f0000000500)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) pwritev2(r1, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000200)={0xffffffff, 0x8000000003ff, 0x4, 0x100}) 1m3.504761784s ago: executing program 2 (id=882): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000001000)={0x2000200e}) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0xa00008, &(0x7f0000000100), 0x1, 0x7c8, &(0x7f0000001280)="$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") mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2901090, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) pivot_root(0x0, &(0x7f00000001c0)='./file0/../file0/../file0\x00') 1m3.503616913s ago: executing program 32 (id=882): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000001000)={0x2000200e}) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0xa00008, &(0x7f0000000100), 0x1, 0x7c8, &(0x7f0000001280)="$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") mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2901090, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) pivot_root(0x0, &(0x7f00000001c0)='./file0/../file0/../file0\x00') 3.658570965s ago: executing program 1 (id=2096): socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0000004650690b000000a241ee2a165353d00b7a54889286a277806bb841f3de6b9cf83e0990d830cbbf3870b4f0228c95b4209ff5376e6ef6e2b7fc640819d990147d8adf3a104d00129a89950b7e5fee58c3b708a43e6a5d", @ANYRES32=0x0, @ANYBLOB="90010000305200001c00128009000100626f6e64000000000c0002800500160000000000"], 0x3c}}, 0x8000) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYRES64=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$SG_SET_FORCE_PACK_ID(0xffffffffffffffff, 0x227b, &(0x7f00000001c0)=0x2001) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) unshare(0x2a020400) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) r1 = mq_open(&(0x7f0000000d80)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]\xd6\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.T\xd4\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3l\xfc\x13\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\x91\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00C\xae~\x983~\xb4\xf3x\xe5\xc8\xefS\xf1?\xb5\x90\x87\xb7\xd8\xc9\x98\x06B\xc9\xa1\xaa\xfb\xb9T\x13\x17\xb3*\x98\x04r\xd6\xdb:\xf2o\xc3\xf0\xcc\v\x1f\x91\xc9 Z\x15\x1d\x97\xc1^\xc0\x06nC\xd6l\x93\xd5\xec\x03:\x11\x06z\x00\x00\x00\x00\x00\x00\x00', 0x40, 0x9, 0x0) fcntl$setlease(r1, 0x400, 0x0) 3.636202235s ago: executing program 1 (id=2097): socket$netlink(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8052, &(0x7f0000000380)={[{@grpjquota}, {@init_itable_val={'init_itable', 0x3d, 0x7}}, {@dioread_nolock}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7ffffffe}}]}, 0x3, 0x4de, &(0x7f0000000c40)="$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") prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000900)=ANY=[@ANYBLOB="1800000000000000000000009d3ae4d35a110000a4b4aa85cc13693055893abf4ff6864aafce38edc32ced995708f4b29099394042887d19d80e76503dda001051626a77567764f487c8dc1e8422b4f5a6e621cd1b6913e353ec49f7c3837306b36ed40c3d600db936cdd94701319b2cdb3867212d23051a8e2fa8da76979b1046d99dabb91fb457b1f539c3e67098f61f03658d6f1ac27eb639b172f6acd9a0d9c5b27c6559", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000007000000040000000000000e0400000000000000000000000100000d0000000004000000040000000000000000000002040000000000000000000009030000000000000061"], 0x0, 0x5b, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000, 0x2, &(0x7f0000ffe000/0x2000)=nil) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prctl$PR_SET_NAME(0xf, &(0x7f0000000680)='+}[@\x00[$oB\xfa=\xee\xc4F\xba\xed\x97') r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000080)='kfree\x00', r4, 0x0, 0x2}, 0x18) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0xc0a85320, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r3, 0x40505330, &(0x7f00000001c0)={0x800000, 0x80, 0xfdfffffd, 0x5, 0x3ffd, 0x7}) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r6 = gettid() r7 = socket(0x40000000015, 0x5, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r5, 0xc04c5349, &(0x7f0000000880)={0x400, 0xeb, 0x1}) recvmmsg(r7, &(0x7f0000003c40)=[{{0x0, 0x0, 0x0}, 0x80000000}], 0x1, 0x60010002, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000002700)=""/4096, 0x1a00}], 0x0, 0x11a}, 0x20) bpf$TOKEN_CREATE(0x24, &(0x7f0000000580)={0x0, r2}, 0x8) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xe, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x17, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r8, 0x0, 0x9}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000f73f0000380200000080000000000020", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 2.981324115s ago: executing program 4 (id=2111): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000ffffffff00000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000028500000006000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000356ffc)=0xeb46, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000f07000)=[{0x6}]}, 0x10) listen(r0, 0x0) close(r0) io_uring_setup(0x563b, &(0x7f00000000c0)={0x0, 0xfffffff6, 0x800, 0x400, 0x20002bb}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f00000000c0)="e0b9545dd30a3731677b2d0bfa91", 0x0, 0x27cb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_mount_image$iso9660(&(0x7f0000000180), &(0x7f0000000280)='./file0\x00', 0x14806, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0], 0x0, 0x70a, &(0x7f00000232c0)="$eJzs3V+P21gZBvDnJJkkk0JVAapWVbdzOmWlqRhSJ7NNFRUkjHOSMSRxZHtgRkJaFTqDRs0UaItEc9PODX+k5Qtwtzdc8CFW4oKr/RZwBdIKhIR2BUJGPraTTOJkJm3a2aXPb7Qb5/j18etjr896xj4GERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERQVgNw6gItO3uzq6czWq4Tif5ksXU/Ki2FdyMJm7OW+dKuF5AhP+gWMRbUfFbXxmFXA7/tY6r0berKIYfRQwuXL5098u5TLL8nIRfBBat8PHTwYN7/f7+ozPEZrFw9ecJmTMEtVTX9hy7Y7aUtD1H1ms149Z205NNu628Pc9XHWm5KuM7rtywbspKvb4lVXnP2em2GmZbJYV3vl41jJr8TiHa0QDKnrVtt9t2t6VjwtlhzB35/g+iAGV2pDw47O9vjeXzLK2Nw6BKSvKZ8eAwqHra5laNarVSqVYrtdv123cMIzdVYISEMYSpiKUftHSeMvHxusAiyzt5E72kjNX4j/FnAbRRRBc72IVM/bHQgAsHnRnzY0n//84tNXe94/1/0suvjGZfge7/r0Xfrs3q/2fkIiH1AmlzxIzyxX5WdEYSj/EUAzzAPfTRxz4eLaFuCbn20jXkjbgll5LPzJ8WFLqw4cGBjQ5MtPBFyLhEoo4aajDwHrbRhAeJJmy0oeBhDx58qPCIyoeZKpjw4cCFxAYs3IREBXXUsQUJhTL24GAHXbTQgIlPgiA4wKFu9604n+cpW40kqDJjIwrIJcfdPqpztnZW///DZ9HScf9vsP9/U0XHQSH6+GheDNFnQBBf/y9o7dVkQ0RERERERESvgtC/fRf6r/JvAwjQtNvKOBFTOLfsiIiIiIiIiGgZBIICrkJEd+XjbYjp638iIiIiIiIi+nwT+hk7AaCkb+oXo8elzvJLgOxrSJGIiIiIiIiIXpJ+8v9aHgj0Xf5rEAtd/xMRERERERHR58Cvx8bYz2XjMXaD5M/6GQBrfymID/9egLsijnu7XxVHZjjHPIpjpu4A8JtXxMV4oF79kQegv1nqqojXJoF/Jb99CH18kD7W//MgIoRwJxLIZ8crmJGACNdcy8Xf8D6uR4tcj8eZvz/IQM+JRhQuNe22KltO+24Fpnkx46td/+cPD38BuMPtPDjs75d/9JP+fZ3LcVh0fBRW+uxEOpn0xhjl8kSPt6CfuUgb3XgVzWSVv+l2SkKv10i2PwvzKDO+onk7oLYKRFv5S6xH+2w9iGJLg+GI+wJY04M/VMp6l53YendFjLKoTG552o6YseVFncWNKObGxo3oI2mTsJ6MKH4tC1TLk/sgTHQsi+p4Fqe3hfjHRPvPzwKiGLbFVpjFH8OKJtri+x9GC2/1dpPhMc6SxdRRQER0Xg5GvZAexHxqjP2ke0hOamfvd5AD4rPcjN59tJYg7j+S3v3J74Koh8oCufhvE+lrSfoVhGf0DaHryUcDuueupJzRjfKnQRCYF4sYP6P/NwiSDTIW6N2OgyCYPKP/YfQOpDjtqSz+HQTB3YruSX470at+EC7wwcz1eu1qFkUU8OTop/gkmb3/4/2H1epWzXjXMG5XsaL/VyH+yIJ9DxERTTn9HTs6IjMnQryL61Ed1+//7Z1o6kSP96X4lgLtFtDHfWwmrxBYS6+1hAN885/RbQib0VUrsF6KPksDefnS3fCqdhh7KHL6DS+bM6/qdGcZxerbG6rD2OS9Q5NXgKPYrVe8F4iIiF6v9Rn9MHCi/8fJ/r94ov/fxEYUsXEl9bq7NHZL4WZydTy8pB9cOE6NrZye/LeW3BhERERvCOV+LEr+r4Tr2r33KvV6xfS3lXQd67vStRstJe2ur1xr2+y2lOy5ju9YTlv2XBTsVeVJb6fXc1xfNh1X9hzP3tVvfpfxq9891TG7vm15vbYyPSUtp+ubli8btmfJ3s6327a3rVy9sNdTlt20LdO3na70nB3XUmUpPaXGAu2G6vp20w4nu7Ln2h3T3ZPfc9o7HSUbyrNcu+c7UYXJuuxu03E7utoygoVfdEhERPT/6PHTwYN7/f7+o8mJ1fDSPCo5xoyY6Yl8SoUcI4iIiOgzZtRdL7BQ8RUmREREREREREREREREREREREREREREREREU05/pG/BiZW0hwWBYcnPLsYleI7RI4ZT9Qi8bD6fun/SA/u9yOKZYYkAcIalkkciBg8+mhO8OixJmn885niRDHEJeOH2+esXgAu6BFFJbokHwPTzo0s/xtImvnEQteisGD0zdVZhuC9yy//PIZx4+PvpWSJs+SAIgvmLF062Yf7sx3MOwKP8nF2wesrx87rPRET0uv0vAAD//ySOL9Y=") r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x800, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) getdents(r2, &(0x7f0000000380)=""/107, 0x6b) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x2b) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x18) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB], 0x48) r8 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_DISCONNECT_CLAIM(r8, 0x8108551b, &(0x7f0000000000)={0x0, 0x0, "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"}) ioctl$USBDEVFS_SUBMITURB(r8, 0x8038550a, &(0x7f0000000300)=@urb_type_iso={0x0, {0x1, 0x1}, 0x10000, 0x3, 0x0, 0x0, 0x2, 0x1c0, 0x1, 0x10000, 0x1ff, 0x0, [{0x8, 0x9, 0x4}]}) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70300000003000085"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r9}, 0x18) r10 = msgget$private(0x0, 0x100) msgsnd(r10, &(0x7f0000000000)=ANY=[@ANYRES64=r6], 0xfd1, 0x0) 2.772179328s ago: executing program 1 (id=2113): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c460407000307000000000000"], 0x58) close(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1, 0xffffffffffffffff}, &(0x7f0000000300), &(0x7f00000002c0)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xd, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) 2.742450509s ago: executing program 1 (id=2114): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0xfffffffe, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000040)=@gcm_256={{0x303, 0x36}, "0000000000000080", "a14748a65151e96d6d2a01e49419560000000000000000000000004000", "6d40e581", "066580001e00"}, 0x38) 2.690528449s ago: executing program 1 (id=2117): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000002000000000000000000000d03000000000000000000000110000000800000000000000000000003000000000100000002"], 0x0, 0x4e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0xfc, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="160000000000000004000000"], 0x50) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=@delchain={0x34, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x3f, &(0x7f00000001c0)={&(0x7f0000000000)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) 2.578998341s ago: executing program 1 (id=2122): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[], 0x0, 0x43, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) syz_clone3(&(0x7f0000000cc0)={0x2000000, 0x0, 0x0, 0x0, {0x3e}, 0x0, 0x0, 0x0, &(0x7f0000000b80)=[0x0], 0x1}, 0x58) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xd4, 0xd4, 0x3, [@var={0x4, 0x0, 0x0, 0xe, 0x3, 0x2}, @volatile={0xb, 0x0, 0x0, 0x9, 0x4}, @union={0x7, 0x1, 0x0, 0x5, 0x1, 0x1, [{0x6, 0x2, 0x7}]}, @enum64={0x8, 0x5, 0x0, 0x13, 0x0, 0x1, [{0xd, 0x3ff, 0x20000000}, {0x9, 0x1, 0xadf}, {0xf, 0x5, 0xada}, {0x5, 0x8, 0xc}, {0x9, 0x85e6, 0x6}]}, @var={0x9, 0x0, 0x0, 0xe, 0x4, 0x1}, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{0x10, 0x3}, {0x3, 0x1}, {0x6, 0x2}, {0xf}, {0x10}, {0x6}]}, @float={0x6, 0x0, 0x0, 0x10, 0xc}]}, {0x0, [0x5f]}}, &(0x7f0000000680)=""/213, 0xef, 0xd5, 0x1, 0x1, 0x10000, @value}, 0x28) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) syz_usb_connect$uac1(0x3, 0xd1, &(0x7f00000007c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xbf, 0x3, 0x1, 0x3, 0x80, 0x7, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x2, 0x2}, [@selector_unit={0xb, 0x24, 0x5, 0x2, 0xfb, "78b6990303a2"}, @processing_unit={0xa, 0x24, 0x7, 0x5, 0x3, 0xe2, "6d21ac"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x21, 0x4, 0x39, 0x2}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x2, 0x1, 0x9, 0x7, "8146e1"}, @as_header={0x7, 0x24, 0x1, 0x4, 0x74, 0x2}, @as_header={0x7, 0x24, 0x1, 0x8, 0x3}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0xeb, 0x1, 0x5, 0x1, "0818708a7f"}, @format_type_i_continuous={0xe, 0x24, 0x2, 0x1, 0x4, 0x3, 0x7f, 0x6, "53191b", "0fb733"}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x1, 0x8, 0x0, {0x7, 0x25, 0x1, 0x81, 0x2, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x98, 0x9, 0x8, "b1655ca5796d"}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x5, 0x4, 0x7, {0x7, 0x25, 0x1, 0x2, 0x2b, 0xd6}}}}}}}]}}, &(0x7f0000000a00)={0xa, &(0x7f00000004c0)={0xa, 0x6, 0x250, 0x81, 0x0, 0x2, 0x20, 0xff}, 0x45, &(0x7f00000008c0)=ANY=[@ANYBLOB="050f4500055c100a03c4000000000f000100000000000000000060000030c00000107303100b14100454f20dc6bd87b382d947980d992e02dd67d53fb60000000000000000"], 0x2, [{0x97, &(0x7f0000000940)=@string={0x97, 0x3, "79bc8cdcc15ac1d292ecb6eecbcc8b2068bd163b9f49bc6f095b6e162c0d9f26fc5a92013eed6389116c7b4cc6f6d5f92cdda45d3ae64c83a868b098663516f11c64d6fc9a3f950778ea81987b0b9b0af7e968a27470f84afff3c793401f57261c2064d362f72db9a1690689d1d32577c219f503acb45c16ac9a673a340ecb87136f85d0fcb9cc318c908ac36f1dfd701784adbb9c"}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0xfcff}}]}) pwritev2(0xffffffffffffffff, &(0x7f0000001f00)=[{&(0x7f0000000480)="c4f4af9f7d18598f6d29fb57fd9bedd68c6115e899306118ad1a4d09594e71bf04cf3eedbcea5da6f4520ad8da687c9907c749a1b3f83d569513f4e9", 0x3c}, {&(0x7f0000000bc0)="332775b093f075a2710f7e03afc3a2322161d34a3b93109ebe4816687ee21b05947a13398f9f70d5aed26c", 0x2b}, {&(0x7f0000000c00)="629ec50578ff991c7ebe2d966bcea54cc882", 0x12}, {&(0x7f0000000c40)="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", 0x1000}, {&(0x7f0000001c40)="5959ba1e89ffef62a305186df9a9fbd3f7e1972732927c0a193e4d66ae9fd215e65c9e424b9488b939731107d36a324aae2b2d080d58658fc1babb049345692fd04d0f3e1b5a0b547a40f4577c97020c5512c9ee73c1da990d5432a26f04224d6380223e4f0ac52b0a1d577e3e0c2ced9c88e0eaf85467db50a9c9dcf45a315fd7283382f8f902726e968a432129c5757b5ede0b0a4e2272a63aad3b8aeb4c98a9", 0xa1}, {&(0x7f0000001d00)="915b7bea118bc0dc2f1b196979d615f212cfbc3eb3ed88a33f01a4ea888b6b0218a4ea14a3edda99d81b410908905ceec6c83b8e031382be02ab9689905b10b900b828f8eac1eca5c39fd6f93da0c4034e4ede332a753b2152d1d4eff9233aa28d2a5d8697eebbd1477bd80fafec9fb7aabed186ac7611277991d9705f446b027963535b4889ff6ac714047d6b4f8e038e7e5903480da88f64d0d314964f46fbd84b17470909e7887006dff41be58f2598b1ff36d7ac0c3a2864fe5d871cd261f136ff378b09cab40a0648468955f995cda4086c4cbda4f3706ae8b8c523357ca9d9c01b330f6377722ded6fd7067e2b9477e58e49054f", 0xf7}, {&(0x7f0000001e00)="f51f847337f9ea7e582fb8d1a0382700e698653be27814ebd42177dc65aeb1d028d20d745a2da2adfca6109d35274ce07287001480495bd471b1ea91da11632684f3d83456e69f1049b4c6cd41e4ac0a81a199f1237f6fba3b54ac0a0e9cbbb31eb01292c4a64c6210771ecc1a7c2d2cc74823386eacace4a970ed002964e95ae648d44abac428924ee836f3233461cb546303fd16e12e7e980c744b9a44fa9d2bfbb2012aa43763005a66bef94427c45278e4d90c024c22f45c15cfa6934c20a8384ed50318258813a33cf01a06e42338f63f1e4305f46e401976d9707954dd1b2fa227974529565e42e0", 0xeb}], 0x7, 0x4, 0xfff, 0x0) dup(0xffffffffffffffff) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x1000000, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000000)=0x3) 2.520324342s ago: executing program 3 (id=2123): unshare(0x2c020400) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r1 = signalfd4(r0, &(0x7f0000000400)={[0xfffffffffffffff5]}, 0x8, 0x80000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000280)={'syztnl2\x00', &(0x7f0000000640)={'ip_vti0\x00', 0x0, 0x40, 0x1, 0x28, 0x8000, {{0x10, 0x4, 0x1, 0x4, 0x40, 0x66, 0x0, 0x6, 0x6, 0x0, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ssrr={0x89, 0x1f, 0x57, [@multicast1, @loopback, @private=0xa010101, @multicast1, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote]}, @ssrr={0x89, 0x7, 0xd2, [@broadcast]}, @noop, @ra={0x94, 0x4}]}}}}}) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1b, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r4, 0x0, 0x5}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f0000000bc0)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80}}, {@grpjquota}, {@errors_remount}, {@max_batch_time={'max_batch_time', 0x3d, 0x8}}]}, 0x1, 0x43a, &(0x7f0000000340)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='./file0/file0\x00') bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_lsm={0x4, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000050002000000000085000000cc00000085000000000000000500feff000000009500000000000000"], &(0x7f00000003c0)='GPL\x00', 0x4, 0xff9, &(0x7f0000000a80)=""/4089, 0x0, 0x2, '\x00', r2, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="617e2a4134280d00030000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x18, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) poll(0x0, 0x0, 0x100) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008108040f80ecdb4cb92e0a480e000f000000e8bd6efb250314000e000300240248ff050005001200", 0x2e}], 0x1}, 0x0) 2.035622559s ago: executing program 4 (id=2125): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x89a0, &(0x7f0000000000)={'syzkaller0\x00'}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syzkaller0\x00'}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="020000000000000007050000000000000000bfa200000000000007020000f8ffffffb703000008000000000082000000000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSKBENT(r3, 0x4b47, &(0x7f0000000500)={0x2, 0xfc, 0x8}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000440)='kmem_cache_free\x00', r2}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="5800000010004b04000000000000ff007a000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000380012800b000100627269646765000028000280060006000004000005000700070000000500260001"], 0x58}}, 0x0) capget(&(0x7f0000001dc0)={0x19980330, 0xffffffffffffffff}, &(0x7f0000001e00)={0x6, 0x8, 0x1, 0x5, 0x6, 0x6}) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000180), 0x12) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_mems\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000380), 0x101bf) ioctl$EXT4_IOC_MOVE_EXT(r6, 0xc028660f, &(0x7f0000000080)={0x0, r5, 0x18}) r7 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r7, &(0x7f0000000400)={0xa, 0x0, 0x0, @empty}, 0x1c) dup2(r7, r7) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f0000000180)='./file0\x00') link(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/../file0\x00') r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r8}, 0x10) bind$tipc(r1, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x1, {0x43, 0x0, 0x4}}, 0x10) socket$tipc(0x1e, 0x5, 0x0) 1.807653403s ago: executing program 3 (id=2126): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000e0000085"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000400)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x300, 0x30, 0x2c}, 0x18) 1.768110824s ago: executing program 3 (id=2128): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000356ffc)=0xeb46, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000f07000)=[{0x6}]}, 0x10) listen(r0, 0x0) close(r0) io_uring_setup(0x563b, &(0x7f00000000c0)={0x0, 0xfffffff6, 0x800, 0x400, 0x20002bb}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f00000000c0)="e0b9545dd30a3731677b2d0bfa91", 0x0, 0x27cb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_mount_image$iso9660(&(0x7f0000000180), &(0x7f0000000280)='./file0\x00', 0x14806, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0], 0x0, 0x70a, &(0x7f00000232c0)="$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") r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x800, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) getdents(r2, &(0x7f0000000380)=""/107, 0x6b) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x2b) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x18) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) r7 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_DISCONNECT_CLAIM(r7, 0x8108551b, &(0x7f0000000000)={0x0, 0x0, "ec9fe44d4dbe56a60274fcffffffffffffff14e315eeb406bfdd73835e57efa94b1a0275781c647aa7e3470c6028643b17832b10b386a6f73791011c26a9aa141f406e312295ee620a9a46577b9249b738fe7750bec83bf6ed5b67213fa7d6c0823fd154ed29ede1ff379742c3f0b46caa357d70ee438f901d7645c3f87e4b21482b76f2ad8eaac090272081f98fd2e3e5a63e006204df635e731a5bfcf142f4529517454618de595cd179445b4bdbf698b9986356f0ebf7d25a57774ef474f86a3ad24ae9f0bf94b99e6b87de5f79d383d05bb32701daed400785a49788f08caecc9e0c48a3740bbe6e1c1fd400cfdfe756bc00d08e36655c00"}) ioctl$USBDEVFS_SUBMITURB(r7, 0x8038550a, &(0x7f0000000300)=@urb_type_iso={0x0, {0x1, 0x1}, 0x10000, 0x3, 0x0, 0x0, 0x2, 0x1c0, 0x1, 0x10000, 0x1ff, 0x0, [{0x8, 0x9, 0x4}]}) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x18) r9 = msgget$private(0x0, 0x100) msgsnd(r9, &(0x7f0000000000)=ANY=[@ANYRES64=r6], 0xfd1, 0x0) 1.611721646s ago: executing program 0 (id=2132): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffdfc, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x28, r3, 0x505, 0x0, 0x25dfdbfd, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @multicast1}}]}, 0x28}}, 0x10) 1.611123646s ago: executing program 0 (id=2133): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f00000005c0)={[{@discard}, {@bh}, {@nomblk_io_submit}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000", @ANYRES32=0x0, @ANYRES32], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 1.160577073s ago: executing program 4 (id=2136): unshare(0x2c020400) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r1 = signalfd4(r0, &(0x7f0000000400)={[0xfffffffffffffff5]}, 0x8, 0x80000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000280)={'syztnl2\x00', &(0x7f0000000640)={'ip_vti0\x00', 0x0, 0x40, 0x1, 0x28, 0x8000, {{0x10, 0x4, 0x1, 0x4, 0x40, 0x66, 0x0, 0x6, 0x6, 0x0, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ssrr={0x89, 0x1f, 0x57, [@multicast1, @loopback, @private=0xa010101, @multicast1, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote]}, @ssrr={0x89, 0x7, 0xd2, [@broadcast]}, @noop, @ra={0x94, 0x4}]}}}}}) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1b, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r4, 0x0, 0x5}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f0000000bc0)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80}}, {@grpjquota}, {@errors_remount}, {@max_batch_time={'max_batch_time', 0x3d, 0x8}}]}, 0x1, 0x43a, &(0x7f0000000340)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='./file0/file0\x00') bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_lsm={0x4, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000050002000000000085000000cc00000085000000000000000500feff000000009500000000000000"], &(0x7f00000003c0)='GPL\x00', 0x4, 0xff9, &(0x7f0000000a80)=""/4089, 0x0, 0x2, '\x00', r2, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="617e2a4134280d00030000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x18, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) poll(0x0, 0x0, 0x100) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008108040f80ecdb4cb92e0a480e000f000000e8bd6efb250314000e000300240248ff050005001200", 0x2e}], 0x1}, 0x0) 913.419546ms ago: executing program 3 (id=2137): socket$netlink(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8052, &(0x7f0000000380)={[{@grpjquota}, {@init_itable_val={'init_itable', 0x3d, 0x7}}, {@dioread_nolock}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7ffffffe}}]}, 0x3, 0x4de, &(0x7f0000000c40)="$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") prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000900)=ANY=[@ANYBLOB="1800000000000000000000009d3ae4d35a110000a4b4aa85cc13693055893abf4ff6864aafce38edc32ced995708f4b29099394042887d19d80e76503dda001051626a77567764f487c8dc1e8422b4f5a6e621cd1b6913e353ec49f7c3837306b36ed40c3d600db936cdd94701319b2cdb3867212d23051a8e2fa8da76979b1046d99dabb91fb457b1f539c3e67098f61f03658d6f1ac27eb639b172f6acd9a0d9c5b27c6559", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000007000000040000000000000e0400000000000000000000000100000d0000000004000000040000000000000000000002040000000000000000000009030000000000000061"], 0x0, 0x5b, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000, 0x2, &(0x7f0000ffe000/0x2000)=nil) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prctl$PR_SET_NAME(0xf, &(0x7f0000000680)='+}[@\x00[$oB\xfa=\xee\xc4F\xba\xed\x97') r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000080)='kfree\x00', r4, 0x0, 0x2}, 0x18) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x62, 0x11cfa, 0x5, 0x8000008, 0x3, 0x4, 0x1, 0x0, 0x7cce8c743ee810d8, 0x8}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r3, 0x40505330, &(0x7f00000001c0)={0x800000, 0x80, 0xfdfffffd, 0x5, 0x3ffd, 0x7}) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r6 = gettid() r7 = socket(0x40000000015, 0x5, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r5, 0xc04c5349, &(0x7f0000000880)={0x400, 0xeb, 0x1}) recvmmsg(r7, &(0x7f0000003c40)=[{{0x0, 0x0, 0x0}, 0x80000000}], 0x1, 0x60010002, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000002700)=""/4096, 0x1a00}], 0x0, 0x11a}, 0x20) bpf$TOKEN_CREATE(0x24, &(0x7f0000000580)={0x0, r2}, 0x8) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xe, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x17, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r8, 0x0, 0x9}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000f73f0000380200000080000000000020", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) 797.569698ms ago: executing program 4 (id=2138): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b7"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000400)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x300, 0x30, 0x2c}, 0x18) 774.388938ms ago: executing program 4 (id=2139): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x5, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000280)=@gcm_256={{0x304}, "54164ace389ff5c0", "faad50724acb18aba4e3bc654d684ad9c694f3e96ca4b72643dd3689727968e9", "5cb6d054", "ea54d77e7604e8ae"}, 0x38) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r0}, &(0x7f00000003c0), &(0x7f0000000400)}, 0x20) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0xfffffffe, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000040)=@gcm_256={{0x303, 0x36}, "0000000000000080", "a14748a65151e96d6d2a01e49419560000000000000000000000004000", "6d40e581", "066580001e00"}, 0x38) 719.955539ms ago: executing program 4 (id=2140): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f00000005c0)={[{@discard}, {@bh}, {@nomblk_io_submit}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000", @ANYRES32=0x0, @ANYRES32], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 719.359209ms ago: executing program 0 (id=2141): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000300)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@minixdf}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000040)=ANY=[], 0xfe37, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42042, 0x14a) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x18) getdents64(r1, &(0x7f0000002f40)=""/4098, 0x1002) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x5, &(0x7f0000000540)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x4c, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r5, 0x0, 0x6}, 0x18) fallocate(r0, 0x8, 0x0, 0x8000) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000300)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@minixdf}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") (async) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000040)=ANY=[], 0xfe37, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42042, 0x14a) (async) syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') (async) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) (async) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x18) (async) getdents64(r1, &(0x7f0000002f40)=""/4098, 0x1002) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x5, &(0x7f0000000540)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x4c, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r5, 0x0, 0x6}, 0x18) (async) fallocate(r0, 0x8, 0x0, 0x8000) (async) 656.920191ms ago: executing program 0 (id=2142): socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0000004650690b000000a241ee2a165353d00b7a54889286a277806bb841f3de6b9cf83e0990d830cbbf3870b4f0228c95b4209ff5376e6ef6e2b7fc640819d990147d8adf3a104d00129a89950b7e5fee58c3b708a43e6a5d", @ANYRES32=0x0, @ANYBLOB="90010000305200001c00128009000100626f6e64000000000c0002800500160000000000"], 0x3c}}, 0x8000) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$SG_SET_FORCE_PACK_ID(0xffffffffffffffff, 0x227b, &(0x7f00000001c0)=0x2001) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) unshare(0x2a020400) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) r0 = mq_open(&(0x7f0000000d80)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]\xd6\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.T\xd4\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3l\xfc\x13\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\x91\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00C\xae~\x983~\xb4\xf3x\xe5\xc8\xefS\xf1?\xb5\x90\x87\xb7\xd8\xc9\x98\x06B\xc9\xa1\xaa\xfb\xb9T\x13\x17\xb3*\x98\x04r\xd6\xdb:\xf2o\xc3\xf0\xcc\v\x1f\x91\xc9 Z\x15\x1d\x97\xc1^\xc0\x06nC\xd6l\x93\xd5\xec\x03:\x11\x06z\x00\x00\x00\x00\x00\x00\x00', 0x40, 0x9, 0x0) fcntl$setlease(r0, 0x400, 0x0) 656.451771ms ago: executing program 0 (id=2143): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0x21, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = io_uring_setup(0x1612, &(0x7f0000000200)={0x0, 0xfffffffc, 0x1, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS2(r2, 0xf, &(0x7f0000001580)={0x2, 0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000040)=""/168, 0xa8}, {0x0}], &(0x7f0000001540)=[0x2]}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x80, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='cpu~\t0||\t') r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000001850000001b000000b70000000000070095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r4}, 0x18) r5 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f00000000c0)=0xc) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, 0x18, 0x1, 0x0, 0x0, {0x2}, [@typed={0x8, 0x800, 0x0, 0x0, @u32=0x4}, @nested={0xc, 0x8, 0x0, 0x1, [@typed={0x8, 0xc, 0x0, 0x0, @uid=r6}]}]}, 0x28}}, 0x0) 592.608801ms ago: executing program 0 (id=2144): socket$netlink(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8052, &(0x7f0000000380)={[{@grpjquota}, {@init_itable_val={'init_itable', 0x3d, 0x7}}, {@dioread_nolock}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7ffffffe}}]}, 0x3, 0x4de, &(0x7f0000000c40)="$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") prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000900)=ANY=[@ANYBLOB="1800000000000000000000009d3ae4d35a110000a4b4aa85cc13693055893abf4ff6864aafce38edc32ced995708f4b29099394042887d19d80e76503dda001051626a77567764f487c8dc1e8422b4f5a6e621cd1b6913e353ec49f7c3837306b36ed40c3d600db936cdd94701319b2cdb3867212d23051a8e2fa8da76979b1046d99dabb91fb457b1f539c3e67098f61f03658d6f1ac27eb639b172f6acd9a0d9c5b27c6559", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000007000000040000000000000e0400000000000000000000000100000d0000000004000000040000000000000000000002040000000000000000000009030000000000000061"], 0x0, 0x5b, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000, 0x2, &(0x7f0000ffe000/0x2000)=nil) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prctl$PR_SET_NAME(0xf, &(0x7f0000000680)='+}[@\x00[$oB\xfa=\xee\xc4F\xba\xed\x97') r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000080)='kfree\x00', r4, 0x0, 0x2}, 0x18) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0xc0a85320, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r3, 0x40505330, &(0x7f00000001c0)={0x800000, 0x80, 0xfdfffffd, 0x5, 0x3ffd, 0x7}) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r6 = gettid() r7 = socket(0x40000000015, 0x5, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r5, 0xc04c5349, &(0x7f0000000880)={0x400, 0xeb, 0x1}) recvmmsg(r7, &(0x7f0000003c40)=[{{0x0, 0x0, 0x0}, 0x80000000}], 0x1, 0x60010002, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000002700)=""/4096, 0x1a00}], 0x0, 0x11a}, 0x20) bpf$TOKEN_CREATE(0x24, &(0x7f0000000580)={0x0, r2}, 0x8) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xe, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x17, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r8, 0x0, 0x9}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000f73f0000380200000080000000000020", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 278.961176ms ago: executing program 5 (id=2146): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002ec0)={0x38, r2, 0x10ada85e65c25359, 0xfffffffd, 0x25dfdbfd, {{0x6b}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x72}}}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x4}]}]}]}]}, 0x38}}, 0x0) 256.453716ms ago: executing program 5 (id=2147): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0xfffffffe, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000040)=@gcm_256={{0x303, 0x36}, "0000000000000080", "a14748a65151e96d6d2a01e49419560000000000000000000000004000", "6d40e581", "066580001e00"}, 0x38) 201.998107ms ago: executing program 5 (id=2148): bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0xf0b, 0x13, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x5}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x8000) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x1058, [{0x11}, {0x0, 0x100000000000000}]}, 0x68) 177.739618ms ago: executing program 5 (id=2149): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b7"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000400)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x300, 0x30, 0x2c}, 0x18) 156.259348ms ago: executing program 5 (id=2150): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x5, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000280)=@gcm_256={{0x304}, "54164ace389ff5c0", "faad50724acb18aba4e3bc654d684ad9c694f3e96ca4b72643dd3689727968e9", "5cb6d054", "ea54d77e7604e8ae"}, 0x38) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r0}, &(0x7f00000003c0), &(0x7f0000000400)}, 0x20) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0xfffffffe, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000040)=@gcm_256={{0x303, 0x36}, "0000000000000080", "a14748a65151e96d6d2a01e49419560000000000000000000000004000", "6d40e581", "066580001e00"}, 0x38) 101.570508ms ago: executing program 5 (id=2151): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f00000005c0)={[{@discard}, {@bh}, {@nomblk_io_submit}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000", @ANYRES32=0x0, @ANYRES32], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 51.5527ms ago: executing program 3 (id=2152): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) connect$netlink(r1, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000001540)=@newtaction={0x68, 0x30, 0x829, 0x0, 0x0, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PRIORITY={0x8}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 0s ago: executing program 3 (id=2153): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a0ef010095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$kcm(0x1e, 0x5, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x8, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c80)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0xb, [@struct={0xc, 0x2, 0x0, 0x4, 0x1, 0x1, [{0x6, 0x5, 0x1ed}, {0xb, 0x4, 0x8}]}]}, {0x0, [0x5f, 0x30, 0x30, 0x0, 0x61, 0x0, 0x61, 0x0, 0x2e]}}, &(0x7f0000000380)=""/12, 0x47, 0xc, 0x1, 0x8, 0x0, @void, @value}, 0x28) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$sock_bt_hci(r0, 0x400448c9, &(0x7f0000000bc0)="69817a1908401281316be091bd7d3f9807b6b3f7b64ef103b56c867a84b18ad8a06619fdea2b4b0861adfa9e8d3070350e15e36d336e0181346b09158844d50664cb142e848b5c6aec4c69bf3fd8dfd1c9061ae60720decd81cd2af0a2472a72be30d5ca9fefefc4866b4e1f09cb9cc41cbfbce7592ec793555312dd191fbea5a1ab17cd53ca3dde32b62715aee395552f39e421") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000078000000030a01030000000000000000050000000900010073797a300000000008000540000000001c0008800c00024000000000000000000c00014000000000000000000900030073797a3200000000280004800800024000000000140003007465616d5f736c6176655f3000000000080001"], 0xd4}}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x13, 0xf, &(0x7f0000000380)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x401, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='mm_page_free\x00', r5}, 0x18) setsockopt$RXRPC_SECURITY_KEY(r6, 0x110, 0x1, &(0x7f0000000400)='syzkaller\x00', 0xa) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000cc0)) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_NAME(0xf, 0x0) syz_read_part_table(0x593, &(0x7f00000005c0)="$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") r7 = syz_open_dev$tty1(0xc, 0x4, 0x3) r8 = dup(r7) write$UHID_INPUT(r8, &(0x7f0000000000)={0x1a, {"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", 0xd54}}, 0x1051) sendmsg$kcm(r1, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0xfdef}], 0x1}, 0x0) r9 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r9, 0x0, 0x80, &(0x7f00000007c0)=@broute={'broute\x00', 0x20, 0x1, 0x220, [0x0, 0x2, 0x0, 0x0, 0x4, 0x20000500], 0x7, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="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"/544]}, 0x298) recvmsg(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000580)=""/248, 0xf8}], 0x1}, 0x0) kernel console output (not intermixed with test programs): 040 RSI: 00000000c0105512 RDI: 0000000000000003 [ 115.086478][ T6868] RBP: 00007f2b98fa7090 R08: 0000000000000000 R09: 0000000000000000 [ 115.086496][ T6868] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 115.086513][ T6868] R13: 0000000000000000 R14: 00007f2b9ab65fa0 R15: 00007ffe8b29c9b8 [ 115.086541][ T6868] [ 115.087022][ T6872] loop5: detected capacity change from 0 to 1024 [ 115.101018][ T6869] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.112965][ T6863] EXT4-fs error (device loop3): ext4_lookup:1779: inode #2: comm syz.3.1148: bad inode number: 15 [ 115.124126][ T6868] hub 5-0:1.0: 8 ports detected [ 115.135947][ T6872] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 115.357991][ T6876] loop1: detected capacity change from 0 to 128 [ 115.396832][ T6872] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 115.402381][ T6876] EXT4-fs: Ignoring removed oldalloc option [ 115.415094][ T6872] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e02c, mo2=0000] [ 115.419530][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.427261][ T6872] EXT4-fs error (device loop5): ext4_map_blocks:780: inode #3: block 2: comm syz.5.1151: lblock 2 mapped to illegal pblock 2 (length 1) [ 115.449483][ T6872] EXT4-fs (loop5): Remounting filesystem read-only [ 115.449729][ T6876] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 115.456224][ T6872] EXT4-fs (loop5): 1 orphan inode deleted [ 115.470496][ T6876] ext4 filesystem being mounted at /213/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.492543][ T6872] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.506070][ T6872] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.520129][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.605170][ T6872] loop5: detected capacity change from 0 to 2048 [ 115.631012][ T3316] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 115.654194][ T6872] Alternate GPT is invalid, using primary GPT. [ 115.660612][ T6872] loop5: p1 p2 p3 [ 115.700912][ T6903] netlink: 'syz.4.1161': attribute type 13 has an invalid length. [ 115.749336][ T6903] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.756720][ T6903] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.793393][ T6907] loop5: detected capacity change from 0 to 128 [ 115.835393][ T6907] syz.5.1162: attempt to access beyond end of device [ 115.835393][ T6907] loop5: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 115.849143][ T6907] Buffer I/O error on dev loop5, logical block 128, lost async page write [ 115.883666][ T6903] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 115.894458][ T6903] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 115.939479][ T6903] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.948770][ T6903] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.958039][ T6903] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.967282][ T6903] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.155444][ T6929] loop5: detected capacity change from 0 to 512 [ 116.162790][ T6929] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 116.174820][ T6929] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.187446][ T6929] ext4 filesystem being mounted at /54/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 116.431213][ T6934] FAULT_INJECTION: forcing a failure. [ 116.431213][ T6934] name failslab, interval 1, probability 0, space 0, times 0 [ 116.444042][ T6934] CPU: 0 UID: 0 PID: 6934 Comm: syz.3.1171 Not tainted 6.16.0-rc1-syzkaller-00101-g27605c8c0f69 #0 PREEMPT(voluntary) [ 116.444072][ T6934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 116.444088][ T6934] Call Trace: [ 116.444096][ T6934] [ 116.444105][ T6934] __dump_stack+0x1d/0x30 [ 116.444191][ T6934] dump_stack_lvl+0xe8/0x140 [ 116.444210][ T6934] dump_stack+0x15/0x1b [ 116.444226][ T6934] should_fail_ex+0x265/0x280 [ 116.444265][ T6934] should_failslab+0x8c/0xb0 [ 116.444295][ T6934] kmem_cache_alloc_noprof+0x50/0x310 [ 116.444365][ T6934] ? security_inode_alloc+0x37/0x100 [ 116.444404][ T6934] security_inode_alloc+0x37/0x100 [ 116.444462][ T6934] inode_init_always_gfp+0x4b7/0x500 [ 116.444556][ T6934] alloc_inode+0x58/0x170 [ 116.444580][ T6934] new_inode+0x1d/0xe0 [ 116.444604][ T6934] ramfs_get_inode+0x24/0x1b0 [ 116.444634][ T6934] ramfs_tmpfile+0x36/0x100 [ 116.444667][ T6934] vfs_tmpfile+0x223/0x4d0 [ 116.444705][ T6934] do_tmpfile+0xa8/0x190 [ 116.444763][ T6934] path_openat+0x1dd7/0x2170 [ 116.444799][ T6934] ? __bpf_get_stack+0x5c0/0x630 [ 116.444866][ T6934] ? _parse_integer_limit+0x170/0x190 [ 116.444916][ T6934] ? kstrtouint+0x76/0xc0 [ 116.445088][ T6934] do_filp_open+0x109/0x230 [ 116.445133][ T6934] ? __pfx_page_put_link+0x10/0x10 [ 116.445242][ T6934] do_sys_openat2+0xa6/0x110 [ 116.445271][ T6934] __x64_sys_openat+0xf2/0x120 [ 116.445299][ T6934] x64_sys_call+0x1af/0x2fb0 [ 116.445383][ T6934] do_syscall_64+0xd2/0x200 [ 116.445402][ T6934] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 116.445494][ T6934] ? clear_bhb_loop+0x40/0x90 [ 116.445513][ T6934] ? clear_bhb_loop+0x40/0x90 [ 116.445532][ T6934] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.445595][ T6934] RIP: 0033:0x7f9530e8e929 [ 116.445608][ T6934] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 116.445642][ T6934] RSP: 002b:00007f952f4f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 116.445659][ T6934] RAX: ffffffffffffffda RBX: 00007f95310b5fa0 RCX: 00007f9530e8e929 [ 116.445670][ T6934] RDX: 0000000000515a02 RSI: 00002000000000c0 RDI: 0000000000000005 [ 116.445681][ T6934] RBP: 00007f952f4f7090 R08: 0000000000000000 R09: 0000000000000000 [ 116.445692][ T6934] R10: 52abe154ad664fa4 R11: 0000000000000246 R12: 0000000000000001 [ 116.445726][ T6934] R13: 0000000000000000 R14: 00007f95310b5fa0 R15: 00007ffc94b052a8 [ 116.445744][ T6934] [ 116.709780][ T6936] Cannot find del_set index 0 as target [ 116.950027][ T6033] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.010143][ T29] kauditd_printk_skb: 246 callbacks suppressed [ 117.010164][ T29] audit: type=1326 audit(1749804041.232:6791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6945 comm="syz.5.1175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac6d46e929 code=0x7ffc0000 [ 117.039933][ T29] audit: type=1326 audit(1749804041.232:6792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6945 comm="syz.5.1175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac6d46e929 code=0x7ffc0000 [ 117.064306][ T29] audit: type=1326 audit(1749804041.292:6793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6945 comm="syz.5.1175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=313 compat=0 ip=0x7fac6d46e929 code=0x7ffc0000 [ 117.105838][ T29] audit: type=1326 audit(1749804041.292:6794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6945 comm="syz.5.1175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac6d46e929 code=0x7ffc0000 [ 117.129481][ T29] audit: type=1326 audit(1749804041.292:6795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6945 comm="syz.5.1175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac6d46e929 code=0x7ffc0000 [ 117.153177][ T29] audit: type=1326 audit(1749804041.292:6796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6945 comm="syz.5.1175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fac6d46e929 code=0x7ffc0000 [ 117.176736][ T29] audit: type=1326 audit(1749804041.292:6797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6945 comm="syz.5.1175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac6d46e929 code=0x7ffc0000 [ 117.200569][ T29] audit: type=1326 audit(1749804041.292:6798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6945 comm="syz.5.1175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fac6d46e929 code=0x7ffc0000 [ 117.224057][ T29] audit: type=1326 audit(1749804041.292:6799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6945 comm="syz.5.1175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac6d46e929 code=0x7ffc0000 [ 117.247669][ T29] audit: type=1326 audit(1749804041.292:6800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6945 comm="syz.5.1175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=193 compat=0 ip=0x7fac6d46e929 code=0x7ffc0000 [ 117.284388][ T6959] vhci_hcd: default hub control req: c517 v0020 i0000 l0 [ 117.350947][ T6974] loop5: detected capacity change from 0 to 512 [ 117.359451][ T6974] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 117.369989][ T6974] EXT4-fs error (device loop5): ext4_get_branch:178: inode #11: block 4294967295: comm syz.5.1186: invalid block [ 117.384101][ T6974] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.1186: invalid indirect mapped block 4294967295 (level 1) [ 117.399003][ T6974] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.1186: invalid indirect mapped block 4294967295 (level 1) [ 117.415380][ T6974] EXT4-fs (loop5): 2 truncates cleaned up [ 117.421618][ T6974] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.553845][ T6985] loop1: detected capacity change from 0 to 1024 [ 117.577932][ T6985] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.630550][ T6985] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 117.780533][ T6980] can0: slcan on ttyS3. [ 118.200709][ T6995] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1190'. [ 118.216337][ T6033] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.252033][ T6995] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1190'. [ 118.313748][ T6971] can0 (unregistered): slcan off ttyS3. [ 118.388327][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.513739][ T7009] loop4: detected capacity change from 0 to 128 [ 118.524837][ T7008] loop3: detected capacity change from 0 to 128 [ 118.531264][ T7001] loop1: detected capacity change from 0 to 8192 [ 118.538732][ T7009] EXT4-fs: Ignoring removed oldalloc option [ 118.549489][ T7010] loop5: detected capacity change from 0 to 512 [ 118.556706][ T7010] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 118.565875][ T7001] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 118.574213][ T7009] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 118.596855][ T7009] ext4 filesystem being mounted at /252/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 118.632276][ T7010] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.650741][ T7010] ext4 filesystem being mounted at /58/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 118.710578][ T7022] loop3: detected capacity change from 0 to 512 [ 118.717998][ T7022] EXT4-fs: dax option not supported [ 118.736146][ T3305] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 118.754360][ T7024] loop1: detected capacity change from 0 to 164 [ 118.762117][ T7024] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 118.775970][ T7024] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 118.856931][ T7037] loop4: detected capacity change from 0 to 2048 [ 118.906628][ T7042] 9pnet_fd: Insufficient options for proto=fd [ 118.942695][ T7044] loop4: detected capacity change from 0 to 8192 [ 118.950437][ T7044] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 118.995230][ T7046] loop4: detected capacity change from 0 to 1024 [ 119.002045][ T7046] EXT4-fs: Ignoring removed bh option [ 119.007644][ T7046] EXT4-fs: Ignoring removed nomblk_io_submit option [ 119.017247][ T7046] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.271768][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.401827][ T6033] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.442252][ T7069] FAULT_INJECTION: forcing a failure. [ 119.442252][ T7069] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 119.444562][ T7067] loop5: detected capacity change from 0 to 2048 [ 119.455608][ T7069] CPU: 1 UID: 0 PID: 7069 Comm: syz.4.1219 Not tainted 6.16.0-rc1-syzkaller-00101-g27605c8c0f69 #0 PREEMPT(voluntary) [ 119.455653][ T7069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 119.455672][ T7069] Call Trace: [ 119.455683][ T7069] [ 119.455696][ T7069] __dump_stack+0x1d/0x30 [ 119.455725][ T7069] dump_stack_lvl+0xe8/0x140 [ 119.455754][ T7069] dump_stack+0x15/0x1b [ 119.455778][ T7069] should_fail_ex+0x265/0x280 [ 119.455916][ T7069] should_fail+0xb/0x20 [ 119.455998][ T7069] should_fail_usercopy+0x1a/0x20 [ 119.456087][ T7069] _copy_from_iter+0xcf/0xe40 [ 119.456181][ T7069] ? __build_skb_around+0x1a0/0x200 [ 119.456236][ T7069] ? __alloc_skb+0x223/0x320 [ 119.456285][ T7069] netlink_sendmsg+0x471/0x6b0 [ 119.456362][ T7069] ? __pfx_netlink_sendmsg+0x10/0x10 [ 119.456394][ T7069] __sock_sendmsg+0x145/0x180 [ 119.456434][ T7069] ____sys_sendmsg+0x31e/0x4e0 [ 119.456531][ T7069] ___sys_sendmsg+0x17b/0x1d0 [ 119.456633][ T7069] __x64_sys_sendmsg+0xd4/0x160 [ 119.456744][ T7069] x64_sys_call+0x2999/0x2fb0 [ 119.456774][ T7069] do_syscall_64+0xd2/0x200 [ 119.456804][ T7069] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 119.456842][ T7069] ? clear_bhb_loop+0x40/0x90 [ 119.456974][ T7069] ? clear_bhb_loop+0x40/0x90 [ 119.457050][ T7069] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.457082][ T7069] RIP: 0033:0x7f781c95e929 [ 119.457104][ T7069] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 119.457149][ T7069] RSP: 002b:00007f781afc7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 119.457177][ T7069] RAX: ffffffffffffffda RBX: 00007f781cb85fa0 RCX: 00007f781c95e929 [ 119.457208][ T7069] RDX: 0000000000000000 RSI: 00002000000004c0 RDI: 0000000000000003 [ 119.457226][ T7069] RBP: 00007f781afc7090 R08: 0000000000000000 R09: 0000000000000000 [ 119.457242][ T7069] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 119.457259][ T7069] R13: 0000000000000000 R14: 00007f781cb85fa0 R15: 00007ffc3d528048 [ 119.457327][ T7069] [ 119.678416][ T7067] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.765531][ T7084] loop4: detected capacity change from 0 to 256 [ 119.772457][ T7084] msdos: Bad value for 'uid' [ 119.777135][ T7084] msdos: Bad value for 'uid' [ 119.809815][ T7088] syzkaller0: entered allmulticast mode [ 119.815890][ T7088] syzkaller0: entered promiscuous mode [ 119.839591][ T7088] loop3: detected capacity change from 0 to 2048 [ 119.850826][ T7067] EXT4-fs error (device loop5): ext4_ext_precache:632: inode #2: comm syz.5.1218: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 119.892160][ T7067] EXT4-fs (loop5): Remounting filesystem read-only [ 119.893955][ T7088] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 119.930638][ T6033] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.954179][ T7087] syzkaller0: left promiscuous mode [ 119.959632][ T7087] syzkaller0: left allmulticast mode [ 120.017763][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.044549][ T7106] FAULT_INJECTION: forcing a failure. [ 120.044549][ T7106] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 120.057791][ T7106] CPU: 0 UID: 0 PID: 7106 Comm: syz.3.1233 Not tainted 6.16.0-rc1-syzkaller-00101-g27605c8c0f69 #0 PREEMPT(voluntary) [ 120.057871][ T7106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 120.057889][ T7106] Call Trace: [ 120.057896][ T7106] [ 120.057904][ T7106] __dump_stack+0x1d/0x30 [ 120.057925][ T7106] dump_stack_lvl+0xe8/0x140 [ 120.057944][ T7106] dump_stack+0x15/0x1b [ 120.057963][ T7106] should_fail_ex+0x265/0x280 [ 120.058076][ T7106] should_fail+0xb/0x20 [ 120.058230][ T7106] should_fail_usercopy+0x1a/0x20 [ 120.058293][ T7106] _copy_from_iter+0xcf/0xe40 [ 120.058321][ T7106] ? __build_skb_around+0x1a0/0x200 [ 120.058365][ T7106] ? __alloc_skb+0x223/0x320 [ 120.058451][ T7106] netlink_sendmsg+0x471/0x6b0 [ 120.058480][ T7106] ? __pfx_netlink_sendmsg+0x10/0x10 [ 120.058502][ T7106] __sock_sendmsg+0x145/0x180 [ 120.058531][ T7106] ____sys_sendmsg+0x31e/0x4e0 [ 120.058626][ T7106] ___sys_sendmsg+0x17b/0x1d0 [ 120.058666][ T7106] __x64_sys_sendmsg+0xd4/0x160 [ 120.058700][ T7106] x64_sys_call+0x2999/0x2fb0 [ 120.058736][ T7106] do_syscall_64+0xd2/0x200 [ 120.058761][ T7106] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 120.058788][ T7106] ? clear_bhb_loop+0x40/0x90 [ 120.058827][ T7106] ? clear_bhb_loop+0x40/0x90 [ 120.058853][ T7106] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.058881][ T7106] RIP: 0033:0x7f9530e8e929 [ 120.058901][ T7106] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 120.058995][ T7106] RSP: 002b:00007f952f4f7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 120.059014][ T7106] RAX: ffffffffffffffda RBX: 00007f95310b5fa0 RCX: 00007f9530e8e929 [ 120.059027][ T7106] RDX: 0000000000008080 RSI: 0000200000000080 RDI: 0000000000000005 [ 120.059039][ T7106] RBP: 00007f952f4f7090 R08: 0000000000000000 R09: 0000000000000000 [ 120.059051][ T7106] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 120.059064][ T7106] R13: 0000000000000000 R14: 00007f95310b5fa0 R15: 00007ffc94b052a8 [ 120.059089][ T7106] [ 120.121053][ T7094] syzkaller1: entered promiscuous mode [ 120.275156][ T7094] syzkaller1: entered allmulticast mode [ 120.437580][ T7126] loop3: detected capacity change from 0 to 8192 [ 120.446099][ T7124] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1241'. [ 120.456812][ T7126] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 120.470378][ T7129] FAULT_INJECTION: forcing a failure. [ 120.470378][ T7129] name failslab, interval 1, probability 0, space 0, times 0 [ 120.483267][ T7129] CPU: 1 UID: 0 PID: 7129 Comm: syz.1.1243 Not tainted 6.16.0-rc1-syzkaller-00101-g27605c8c0f69 #0 PREEMPT(voluntary) [ 120.483299][ T7129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 120.483312][ T7129] Call Trace: [ 120.483320][ T7129] [ 120.483328][ T7129] __dump_stack+0x1d/0x30 [ 120.483350][ T7129] dump_stack_lvl+0xe8/0x140 [ 120.483377][ T7129] dump_stack+0x15/0x1b [ 120.483457][ T7129] should_fail_ex+0x265/0x280 [ 120.483494][ T7129] ? kobject_uevent_env+0x1c0/0x570 [ 120.483526][ T7129] should_failslab+0x8c/0xb0 [ 120.483612][ T7129] __kmalloc_cache_noprof+0x4c/0x320 [ 120.483644][ T7129] kobject_uevent_env+0x1c0/0x570 [ 120.483675][ T7129] ? sysfs_remove_groups+0x64/0x80 [ 120.483741][ T7129] kobject_uevent+0x1d/0x30 [ 120.483844][ T7129] device_del+0x710/0x790 [ 120.483872][ T7129] ? __try_to_del_timer_sync+0x152/0x170 [ 120.483963][ T7129] device_unregister+0x15/0x40 [ 120.483990][ T7129] wakeup_source_sysfs_remove+0x25/0x30 [ 120.484057][ T7129] wakeup_source_unregister+0xf0/0x330 [ 120.484084][ T7129] ep_clear_and_put+0x26f/0x2c0 [ 120.484113][ T7129] ? __pfx_ep_eventpoll_release+0x10/0x10 [ 120.484140][ T7129] ep_eventpoll_release+0x2c/0x40 [ 120.484187][ T7129] __fput+0x29b/0x650 [ 120.484220][ T7129] fput_close_sync+0x6e/0x120 [ 120.484250][ T7129] __x64_sys_close+0x56/0xf0 [ 120.484299][ T7129] x64_sys_call+0x2747/0x2fb0 [ 120.484322][ T7129] do_syscall_64+0xd2/0x200 [ 120.484345][ T7129] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 120.484451][ T7129] ? clear_bhb_loop+0x40/0x90 [ 120.484474][ T7129] ? clear_bhb_loop+0x40/0x90 [ 120.484497][ T7129] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.484580][ T7129] RIP: 0033:0x7f2b9a93e929 [ 120.484596][ T7129] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 120.484616][ T7129] RSP: 002b:00007f2b98fa7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 120.484636][ T7129] RAX: ffffffffffffffda RBX: 00007f2b9ab65fa0 RCX: 00007f2b9a93e929 [ 120.484650][ T7129] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 120.484663][ T7129] RBP: 00007f2b98fa7090 R08: 0000000000000000 R09: 0000000000000000 [ 120.484676][ T7129] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 120.484715][ T7129] R13: 0000000000000000 R14: 00007f2b9ab65fa0 R15: 00007ffe8b29c9b8 [ 120.484777][ T7129] [ 120.770287][ T7135] netlink: 'syz.4.1246': attribute type 13 has an invalid length. [ 120.778344][ T7131] loop1: detected capacity change from 0 to 164 [ 120.806001][ T7139] netlink: 'syz.4.1248': attribute type 1 has an invalid length. [ 120.814001][ T7139] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1248'. [ 120.814900][ T7131] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 120.834762][ T7131] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 120.870012][ T7146] FAULT_INJECTION: forcing a failure. [ 120.870012][ T7146] name failslab, interval 1, probability 0, space 0, times 0 [ 120.882735][ T7146] CPU: 0 UID: 0 PID: 7146 Comm: syz.5.1251 Not tainted 6.16.0-rc1-syzkaller-00101-g27605c8c0f69 #0 PREEMPT(voluntary) [ 120.882830][ T7146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 120.882846][ T7146] Call Trace: [ 120.882854][ T7146] [ 120.882865][ T7146] __dump_stack+0x1d/0x30 [ 120.882893][ T7146] dump_stack_lvl+0xe8/0x140 [ 120.882948][ T7146] dump_stack+0x15/0x1b [ 120.882970][ T7146] should_fail_ex+0x265/0x280 [ 120.883014][ T7146] ? alloc_fs_context+0x44/0x4e0 [ 120.883116][ T7146] should_failslab+0x8c/0xb0 [ 120.883155][ T7146] __kmalloc_cache_noprof+0x4c/0x320 [ 120.883192][ T7146] ? ida_alloc_range+0x68f/0x6c0 [ 120.883223][ T7146] alloc_fs_context+0x44/0x4e0 [ 120.883283][ T7146] fs_context_for_mount+0x22/0x30 [ 120.883326][ T7146] mq_init_ns+0xab/0x2f0 [ 120.883363][ T7146] copy_ipcs+0x214/0x3b0 [ 120.883474][ T7146] create_new_namespaces+0x12a/0x3d0 [ 120.883593][ T7146] unshare_nsproxy_namespaces+0xe8/0x120 [ 120.883635][ T7146] ksys_unshare+0x3d0/0x6d0 [ 120.883665][ T7146] ? ksys_write+0x15f/0x1a0 [ 120.883720][ T7146] __x64_sys_unshare+0x1f/0x30 [ 120.883755][ T7146] x64_sys_call+0x2d4b/0x2fb0 [ 120.883788][ T7146] do_syscall_64+0xd2/0x200 [ 120.883810][ T7146] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 120.883838][ T7146] ? clear_bhb_loop+0x40/0x90 [ 120.883878][ T7146] ? clear_bhb_loop+0x40/0x90 [ 120.883956][ T7146] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.883980][ T7146] RIP: 0033:0x7fac6d46e929 [ 120.883999][ T7146] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 120.884022][ T7146] RSP: 002b:00007fac6bad7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 120.884119][ T7146] RAX: ffffffffffffffda RBX: 00007fac6d695fa0 RCX: 00007fac6d46e929 [ 120.884136][ T7146] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008000080 [ 120.884151][ T7146] RBP: 00007fac6bad7090 R08: 0000000000000000 R09: 0000000000000000 [ 120.884167][ T7146] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 120.884182][ T7146] R13: 0000000000000000 R14: 00007fac6d695fa0 R15: 00007fff7dfe9998 [ 120.884233][ T7146] [ 121.448580][ T7170] loop4: detected capacity change from 0 to 4096 [ 121.502521][ T7170] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.632139][ T7177] loop1: detected capacity change from 0 to 1024 [ 121.657527][ T7177] EXT4-fs: Ignoring removed bh option [ 121.663167][ T7177] EXT4-fs: Ignoring removed nomblk_io_submit option [ 122.127037][ T29] kauditd_printk_skb: 1391 callbacks suppressed [ 122.127055][ T29] audit: type=1400 audit(1749804046.342:8192): avc: denied { watch watch_reads } for pid=7196 comm="syz.0.1268" path="/247" dev="tmpfs" ino=1313 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 122.382632][ T7203] loop5: detected capacity change from 0 to 8192 [ 122.394442][ T7203] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 122.436810][ T29] audit: type=1400 audit(1749804046.662:8193): avc: denied { mount } for pid=7195 comm="syz.3.1267" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 122.439427][ T7206] program syz.3.1267 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 122.512504][ T7206] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 122.544329][ T7215] loop5: detected capacity change from 0 to 512 [ 122.560306][ T7215] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 122.623426][ T7215] EXT4-fs error (device loop5): ext4_get_branch:178: inode #11: block 4294967295: comm syz.5.1274: invalid block [ 122.651554][ T7215] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.1274: invalid indirect mapped block 4294967295 (level 1) [ 122.667220][ T7215] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.1274: invalid indirect mapped block 4294967295 (level 1) [ 122.717312][ T7215] EXT4-fs (loop5): 2 truncates cleaned up [ 122.739182][ T29] audit: type=1326 audit(1749804046.962:8194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7214 comm="syz.5.1274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac6d46e929 code=0x7ffc0000 [ 122.765136][ T29] audit: type=1326 audit(1749804046.992:8195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7214 comm="syz.5.1274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fac6d46e929 code=0x7ffc0000 [ 122.788721][ T29] audit: type=1326 audit(1749804046.992:8196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7214 comm="syz.5.1274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac6d46e929 code=0x7ffc0000 [ 122.812402][ T29] audit: type=1326 audit(1749804046.992:8197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7214 comm="syz.5.1274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac6d46e929 code=0x7ffc0000 [ 122.837592][ T29] audit: type=1326 audit(1749804047.002:8198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7214 comm="syz.5.1274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fac6d46e929 code=0x7ffc0000 [ 122.861171][ T29] audit: type=1326 audit(1749804047.002:8199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7214 comm="syz.5.1274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac6d46e929 code=0x7ffc0000 [ 122.884684][ T29] audit: type=1326 audit(1749804047.002:8200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7214 comm="syz.5.1274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac6d46e929 code=0x7ffc0000 [ 122.908499][ T29] audit: type=1326 audit(1749804047.002:8201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7214 comm="syz.5.1274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fac6d46e929 code=0x7ffc0000 [ 122.951508][ T7245] loop4: detected capacity change from 0 to 512 [ 122.977665][ T7245] EXT4-fs (loop4): too many log groups per flexible block group [ 122.985712][ T7245] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 122.993556][ T7245] EXT4-fs (loop4): mount failed [ 123.000087][ T7240] loop3: detected capacity change from 0 to 8192 [ 123.008589][ T7240] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 123.149824][ T7257] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.192564][ T7257] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.371605][ T7271] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1296'. [ 123.449976][ T7271] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1296'. [ 123.684668][ T7291] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1305'. [ 123.688973][ T7292] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1306'. [ 123.742151][ T7292] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=7292 comm=syz.0.1306 [ 123.784224][ T7292] netlink: 'syz.0.1306': attribute type 10 has an invalid length. [ 123.796200][ T7292] hsr_slave_0: left promiscuous mode [ 123.832404][ T7297] loop3: detected capacity change from 0 to 512 [ 123.833178][ T7292] hsr_slave_1: left promiscuous mode [ 123.862145][ T7297] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 123.889747][ T7300] loop5: detected capacity change from 0 to 164 [ 123.904990][ T7300] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 123.920800][ T7300] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 123.944858][ T7297] EXT4-fs error (device loop3): ext4_get_branch:178: inode #11: block 4294967295: comm syz.3.1308: invalid block [ 123.957529][ T7297] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.1308: invalid indirect mapped block 4294967295 (level 1) [ 123.973540][ T7297] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.1308: invalid indirect mapped block 4294967295 (level 1) [ 123.990629][ T7297] EXT4-fs (loop3): 2 truncates cleaned up [ 124.047224][ T7292] syz.0.1306 (7292) used greatest stack depth: 9880 bytes left [ 124.282352][ T7315] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1315'. [ 124.304544][ T7315] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1315'. [ 124.765305][ T7327] loop3: detected capacity change from 0 to 1024 [ 124.775932][ T7327] EXT4-fs (loop3): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 124.822145][ T7328] loop5: detected capacity change from 0 to 512 [ 124.832857][ T7328] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 124.868340][ T7330] loop4: detected capacity change from 0 to 128 [ 124.876552][ T7330] EXT4-fs: Ignoring removed oldalloc option [ 124.886817][ T7328] ext4 filesystem being mounted at /76/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 124.898506][ T7330] ext4 filesystem being mounted at /275/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 125.014110][ T7344] loop3: detected capacity change from 0 to 128 [ 125.137862][ T7356] loop3: detected capacity change from 0 to 164 [ 125.146482][ T7356] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 125.153503][ T7358] loop4: detected capacity change from 0 to 164 [ 125.157055][ T7356] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 125.170559][ T7358] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 125.181102][ T7358] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 125.341420][ T7362] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1332'. [ 125.358095][ T7362] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1332'. [ 125.541801][ T7364] syzkaller1: entered promiscuous mode [ 125.547408][ T7364] syzkaller1: entered allmulticast mode [ 125.688226][ T7379] loop5: detected capacity change from 0 to 128 [ 125.696808][ T7379] EXT4-fs: Ignoring removed oldalloc option [ 125.706595][ T7379] ext4 filesystem being mounted at /82/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 125.764117][ T7384] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1342'. [ 125.920199][ T7396] loop5: detected capacity change from 0 to 256 [ 125.939105][ T7396] msdos: Bad value for 'uid' [ 125.943881][ T7396] msdos: Bad value for 'uid' [ 126.012111][ T7403] loop3: detected capacity change from 0 to 8192 [ 126.020993][ T7403] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 126.158397][ T7418] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1358'. [ 126.274342][ T7400] syzkaller1: entered promiscuous mode [ 126.279892][ T7400] syzkaller1: entered allmulticast mode [ 126.308408][ T7430] loop1: detected capacity change from 0 to 164 [ 126.325302][ T7430] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 126.333730][ T7432] loop4: detected capacity change from 0 to 1024 [ 126.341531][ T7430] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 126.351042][ T7432] EXT4-fs (loop4): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 126.545744][ T7461] syz.3.1373 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 126.597383][ T7466] loop3: detected capacity change from 0 to 1024 [ 126.605134][ T7466] EXT4-fs: Ignoring removed bh option [ 126.610618][ T7466] EXT4-fs: Ignoring removed nomblk_io_submit option [ 126.767983][ T7470] syzkaller1: entered promiscuous mode [ 126.773738][ T7470] syzkaller1: entered allmulticast mode [ 126.823715][ T7477] loop5: detected capacity change from 0 to 2048 [ 126.831353][ T7477] EXT4-fs: Ignoring removed nobh option [ 127.185561][ T29] kauditd_printk_skb: 879 callbacks suppressed [ 127.185621][ T29] audit: type=1326 audit(1749804051.412:9081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7487 comm="syz.1.1382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2b9a9358e7 code=0x7ffc0000 [ 127.211667][ T7466] syz.3.1376 (7466) used greatest stack depth: 9648 bytes left [ 127.223296][ T29] audit: type=1326 audit(1749804051.412:9082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7487 comm="syz.1.1382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2b9a8dab19 code=0x7ffc0000 [ 127.246855][ T29] audit: type=1326 audit(1749804051.412:9083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7487 comm="syz.1.1382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2b9a9358e7 code=0x7ffc0000 [ 127.270286][ T29] audit: type=1326 audit(1749804051.412:9084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7487 comm="syz.1.1382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2b9a8dab19 code=0x7ffc0000 [ 127.293776][ T29] audit: type=1326 audit(1749804051.412:9085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7487 comm="syz.1.1382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2b9a9358e7 code=0x7ffc0000 [ 127.317264][ T29] audit: type=1326 audit(1749804051.412:9086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7487 comm="syz.1.1382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2b9a8dab19 code=0x7ffc0000 [ 127.340659][ T29] audit: type=1326 audit(1749804051.412:9087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7487 comm="syz.1.1382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2b9a9358e7 code=0x7ffc0000 [ 127.364091][ T29] audit: type=1326 audit(1749804051.412:9088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7487 comm="syz.1.1382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2b9a8dab19 code=0x7ffc0000 [ 127.387585][ T29] audit: type=1326 audit(1749804051.412:9089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7487 comm="syz.1.1382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2b9a9358e7 code=0x7ffc0000 [ 127.411121][ T29] audit: type=1326 audit(1749804051.412:9090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7487 comm="syz.1.1382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2b9a8dab19 code=0x7ffc0000 [ 127.463410][ T7493] loop1: detected capacity change from 0 to 128 [ 127.472463][ T7493] EXT4-fs: Ignoring removed oldalloc option [ 127.491834][ T7493] ext4 filesystem being mounted at /242/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 127.576437][ T7500] loop1: detected capacity change from 0 to 512 [ 127.587275][ T7500] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 127.599098][ T7500] EXT4-fs (loop1): 1 truncate cleaned up [ 127.674800][ T7508] $H˙: renamed from bond0 (while UP) [ 127.695067][ T7508] $H˙: entered promiscuous mode [ 127.708753][ T7511] loop5: detected capacity change from 0 to 1024 [ 127.728792][ T7511] EXT4-fs (loop5): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 127.760036][ T7506] syzkaller1: entered promiscuous mode [ 127.765634][ T7506] syzkaller1: entered allmulticast mode [ 127.831909][ T7522] loop5: detected capacity change from 0 to 128 [ 127.859828][ T7522] syz.5.1393: attempt to access beyond end of device [ 127.859828][ T7522] loop5: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 127.873383][ T7522] Buffer I/O error on dev loop5, logical block 128, lost async page write [ 127.878814][ T7524] loop3: detected capacity change from 0 to 512 [ 127.889926][ T7524] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 127.900663][ T7524] EXT4-fs error (device loop3): ext4_get_branch:178: inode #11: block 4294967295: comm syz.3.1394: invalid block [ 127.914630][ T7524] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.1394: invalid indirect mapped block 4294967295 (level 1) [ 127.928903][ T7524] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.1394: invalid indirect mapped block 4294967295 (level 1) [ 127.949039][ T7524] EXT4-fs (loop3): 2 truncates cleaned up [ 127.969900][ T7524] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.1394: bg 0: block 5: invalid block bitmap [ 127.975423][ T7531] loop5: detected capacity change from 0 to 128 [ 127.988968][ T7531] EXT4-fs: Ignoring removed oldalloc option [ 127.997209][ T7531] ext4 filesystem being mounted at /94/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 128.032307][ T7534] 9pnet_fd: Insufficient options for proto=fd [ 128.043619][ T7536] loop3: detected capacity change from 0 to 128 [ 128.052702][ T7534] loop5: detected capacity change from 0 to 512 [ 128.060277][ T7534] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 128.076070][ T7534] EXT4-fs (loop5): 1 truncate cleaned up [ 128.094844][ T7534] EXT4-fs error (device loop5): mb_free_blocks:1948: group 0, inode 15: block 33:freeing already freed block (bit 32); block bitmap corrupt. [ 128.154507][ T7545] loop3: detected capacity change from 0 to 256 [ 128.164167][ T7545] msdos: Bad value for 'uid' [ 128.168814][ T7545] msdos: Bad value for 'uid' [ 128.175875][ T7543] loop5: detected capacity change from 0 to 8192 [ 128.184940][ T7543] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 128.342347][ T7547] syzkaller1: entered promiscuous mode [ 128.347964][ T7547] syzkaller1: entered allmulticast mode [ 128.525938][ T7561] loop1: detected capacity change from 0 to 512 [ 128.534988][ T7561] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 128.545456][ T7563] loop4: detected capacity change from 0 to 128 [ 128.549341][ T7561] EXT4-fs error (device loop1): ext4_get_branch:178: inode #11: block 4294967295: comm syz.1.1410: invalid block [ 128.552422][ T7563] EXT4-fs: Ignoring removed oldalloc option [ 128.568254][ T7561] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.1410: invalid indirect mapped block 4294967295 (level 1) [ 128.585185][ T7561] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.1410: invalid indirect mapped block 4294967295 (level 1) [ 128.600069][ T7561] EXT4-fs (loop1): 2 truncates cleaned up [ 128.613913][ T7563] ext4 filesystem being mounted at /290/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 128.641004][ T7567] __nla_validate_parse: 6 callbacks suppressed [ 128.641023][ T7567] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1411'. [ 128.665423][ T7567] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1411'. [ 128.693498][ T7561] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.1410: bg 0: block 5: invalid block bitmap [ 128.712060][ T7561] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1410'. [ 128.806466][ T7577] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1416'. [ 128.828729][ T7581] loop1: detected capacity change from 0 to 512 [ 128.831948][ T7584] loop4: detected capacity change from 0 to 512 [ 128.838975][ T7583] loop5: detected capacity change from 0 to 128 [ 128.848159][ T7584] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 128.865232][ T7581] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 128.881872][ T7583] syz.5.1420: attempt to access beyond end of device [ 128.881872][ T7583] loop5: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 128.882306][ T7584] ext4 filesystem being mounted at /291/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 128.895508][ T7583] Buffer I/O error on dev loop5, logical block 128, lost async page write [ 128.918990][ T7581] EXT4-fs error (device loop1): ext4_get_branch:178: inode #11: block 4294967295: comm syz.1.1417: invalid block [ 128.931925][ T7581] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.1417: invalid indirect mapped block 4294967295 (level 1) [ 128.957302][ T7581] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.1417: invalid indirect mapped block 4294967295 (level 1) [ 128.974322][ T7581] EXT4-fs (loop1): 2 truncates cleaned up [ 129.007466][ T7597] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1425'. [ 129.026964][ T7597] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1425'. [ 129.056467][ T7602] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1427'. [ 129.136105][ T7613] loop5: detected capacity change from 0 to 128 [ 129.143433][ T7613] EXT4-fs: Ignoring removed oldalloc option [ 129.151829][ T7613] ext4 filesystem being mounted at /110/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 129.174144][ T7618] loop3: detected capacity change from 0 to 128 [ 129.200356][ T7618] syz.3.1434: attempt to access beyond end of device [ 129.200356][ T7618] loop3: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 129.214053][ T7618] Buffer I/O error on dev loop3, logical block 128, lost async page write [ 129.256822][ T7626] loop3: detected capacity change from 0 to 256 [ 129.258451][ T7628] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1439'. [ 129.263888][ T7626] msdos: Bad value for 'uid' [ 129.276952][ T7626] msdos: Bad value for 'uid' [ 129.415033][ T7630] syzkaller1: entered promiscuous mode [ 129.420618][ T7630] syzkaller1: entered allmulticast mode [ 129.630492][ T7648] loop4: detected capacity change from 0 to 128 [ 129.638516][ T7648] EXT4-fs: Ignoring removed oldalloc option [ 129.648891][ T7648] ext4 filesystem being mounted at /292/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 129.689410][ T7651] loop5: detected capacity change from 0 to 8192 [ 129.701174][ T7651] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 129.762129][ T7657] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1450'. [ 129.765693][ T7660] 9pnet_fd: Insufficient options for proto=fd [ 129.789132][ T7660] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1452'. [ 129.802620][ T7660] loop1: detected capacity change from 0 to 512 [ 129.811203][ T7660] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 129.855592][ T7663] loop4: detected capacity change from 0 to 1024 [ 129.875690][ T7660] EXT4-fs (loop1): 1 truncate cleaned up [ 129.885930][ T7663] EXT4-fs (loop4): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 129.913044][ T7660] EXT4-fs error (device loop1): mb_free_blocks:1948: group 0, inode 15: block 33:freeing already freed block (bit 32); block bitmap corrupt. [ 129.997822][ T7679] loop1: detected capacity change from 0 to 128 [ 130.004198][ T7661] syzkaller1: entered promiscuous mode [ 130.004220][ T7661] syzkaller1: entered allmulticast mode [ 130.019006][ T7679] EXT4-fs: Ignoring removed oldalloc option [ 130.028553][ T7679] ext4 filesystem being mounted at /249/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 130.066510][ T7683] loop1: detected capacity change from 0 to 512 [ 130.102890][ T7683] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 130.115859][ T7683] EXT4-fs error (device loop1): ext4_get_branch:178: inode #11: block 4294967295: comm syz.1.1460: invalid block [ 130.156484][ T7683] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.1460: invalid indirect mapped block 4294967295 (level 1) [ 130.189193][ T7683] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.1460: invalid indirect mapped block 4294967295 (level 1) [ 130.211158][ T7683] EXT4-fs (loop1): 2 truncates cleaned up [ 130.224980][ T7683] EXT4-fs mount: 51 callbacks suppressed [ 130.225020][ T7683] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.243453][ T7698] loop3: detected capacity change from 0 to 1024 [ 130.253014][ T7698] EXT4-fs (loop3): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 130.285683][ T7698] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 130.308461][ T7708] loop5: detected capacity change from 0 to 128 [ 130.315828][ T7708] EXT4-fs: Ignoring removed oldalloc option [ 130.326328][ T7708] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 130.339610][ T7708] ext4 filesystem being mounted at /127/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 130.352032][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.372507][ T6033] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 130.387940][ T7715] loop3: detected capacity change from 0 to 512 [ 130.396051][ T7715] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 130.402493][ T7717] loop5: detected capacity change from 0 to 1024 [ 130.410380][ T7715] EXT4-fs (loop3): 1 orphan inode deleted [ 130.413881][ T7717] EXT4-fs: Ignoring removed bh option [ 130.418368][ T7715] EXT4-fs (loop3): 1 truncate cleaned up [ 130.419843][ T7715] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 130.423893][ T7717] EXT4-fs: Ignoring removed nomblk_io_submit option [ 130.440034][ T7715] EXT4-fs error (device loop3): ext4_lookup:1779: inode #2: comm syz.3.1471: bad inode number: 12 [ 130.445680][ T7717] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.449986][ T7715] EXT4-fs (loop3): Remounting filesystem read-only [ 130.916290][ T7724] loop4: detected capacity change from 0 to 256 [ 130.924178][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.939727][ T7724] msdos: Bad value for 'uid' [ 130.944581][ T7724] msdos: Bad value for 'uid' [ 131.361037][ T7726] syzkaller1: entered promiscuous mode [ 131.366771][ T7726] syzkaller1: entered allmulticast mode [ 131.505213][ T6033] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.547161][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.621347][ T7754] loop5: detected capacity change from 0 to 164 [ 131.630218][ T7754] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 131.643619][ T7754] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 131.673873][ T7761] loop1: detected capacity change from 0 to 512 [ 131.689490][ T7761] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 131.712722][ T7761] EXT4-fs error (device loop1): ext4_get_branch:178: inode #11: block 4294967295: comm syz.1.1489: invalid block [ 131.738536][ T7761] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.1489: invalid indirect mapped block 4294967295 (level 1) [ 131.762193][ T7761] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.1489: invalid indirect mapped block 4294967295 (level 1) [ 131.782914][ T7761] EXT4-fs (loop1): 2 truncates cleaned up [ 131.789492][ T7761] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.830667][ T7764] loop4: detected capacity change from 0 to 8192 [ 131.840782][ T7764] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 131.865700][ T7758] syzkaller1: entered promiscuous mode [ 131.871424][ T7758] syzkaller1: entered allmulticast mode [ 131.988053][ T7780] loop3: detected capacity change from 0 to 164 [ 131.997506][ T7780] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 132.007406][ T7780] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 132.199164][ T29] kauditd_printk_skb: 1854 callbacks suppressed [ 132.199184][ T29] audit: type=1326 audit(1749804056.422:10945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7749 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f44b48b58e7 code=0x7ffc0000 [ 132.229194][ T29] audit: type=1326 audit(1749804056.422:10946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7749 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f44b485ab19 code=0x7ffc0000 [ 132.252250][ T29] audit: type=1326 audit(1749804056.422:10947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7749 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f44b48be929 code=0x7ffc0000 [ 132.275373][ T29] audit: type=1326 audit(1749804056.432:10948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7759 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2b9a9358e7 code=0x7ffc0000 [ 132.298300][ T29] audit: type=1326 audit(1749804056.432:10949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7759 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2b9a8dab19 code=0x7ffc0000 [ 132.321275][ T29] audit: type=1326 audit(1749804056.432:10950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7759 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f2b9a93e929 code=0x7ffc0000 [ 132.344500][ T29] audit: type=1326 audit(1749804056.432:10951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7749 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f44b48b58e7 code=0x7ffc0000 [ 132.367447][ T29] audit: type=1326 audit(1749804056.432:10952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7749 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f44b485ab19 code=0x7ffc0000 [ 132.390407][ T29] audit: type=1326 audit(1749804056.432:10953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7749 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f44b48be929 code=0x7ffc0000 [ 132.413616][ T29] audit: type=1326 audit(1749804056.432:10954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7759 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2b9a9358e7 code=0x7ffc0000 [ 132.541571][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.587455][ T7796] loop1: detected capacity change from 0 to 128 [ 132.621085][ T7796] syz.1.1505: attempt to access beyond end of device [ 132.621085][ T7796] loop1: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 132.634644][ T7796] Buffer I/O error on dev loop1, logical block 128, lost async page write [ 132.859756][ T7815] loop3: detected capacity change from 0 to 512 [ 132.876409][ T7815] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 132.964315][ T7815] EXT4-fs error (device loop3): ext4_get_branch:178: inode #11: block 4294967295: comm syz.3.1512: invalid block [ 133.017488][ T7815] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.1512: invalid indirect mapped block 4294967295 (level 1) [ 133.080983][ T7815] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.1512: invalid indirect mapped block 4294967295 (level 1) [ 133.148112][ T7815] EXT4-fs (loop3): 2 truncates cleaned up [ 133.178748][ T7815] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.222804][ T7817] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 133.237230][ T7833] loop4: detected capacity change from 0 to 512 [ 133.265482][ T7833] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 133.337020][ T7837] loop1: detected capacity change from 0 to 256 [ 133.348500][ T7833] EXT4-fs error (device loop4): ext4_get_branch:178: inode #11: block 4294967295: comm syz.4.1519: invalid block [ 133.353833][ T7837] msdos: Bad value for 'uid' [ 133.363639][ T7833] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.1519: invalid indirect mapped block 4294967295 (level 1) [ 133.365367][ T7837] msdos: Bad value for 'uid' [ 133.381590][ T7833] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.1519: invalid indirect mapped block 4294967295 (level 1) [ 133.399711][ T7833] EXT4-fs (loop4): 2 truncates cleaned up [ 133.406333][ T7833] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.651500][ T7861] __nla_validate_parse: 3 callbacks suppressed [ 133.651523][ T7861] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1530'. [ 133.671236][ T7861] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1530'. [ 133.709235][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.753447][ T7859] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.1529'. [ 133.802372][ T7859] netlink: zone id is out of range [ 133.812053][ T7859] netlink: zone id is out of range [ 133.827062][ T7859] netlink: zone id is out of range [ 133.832291][ T7859] netlink: zone id is out of range [ 133.837601][ T7859] netlink: zone id is out of range [ 133.842832][ T7859] netlink: zone id is out of range [ 133.847974][ T7859] netlink: zone id is out of range [ 133.853124][ T7859] netlink: zone id is out of range [ 133.858266][ T7859] netlink: zone id is out of range [ 133.863479][ T7859] netlink: zone id is out of range [ 134.034498][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.100891][ T7886] loop4: detected capacity change from 0 to 1024 [ 134.114660][ T7886] EXT4-fs: Ignoring removed bh option [ 134.120139][ T7886] EXT4-fs: Ignoring removed nomblk_io_submit option [ 134.158271][ T7888] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1543'. [ 134.169982][ T7886] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.246559][ T7888] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1543'. [ 135.048945][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.085335][ T7905] loop3: detected capacity change from 0 to 1024 [ 135.120585][ T7914] loop1: detected capacity change from 0 to 1024 [ 135.123596][ T7905] EXT4-fs: Ignoring removed bh option [ 135.132473][ T7905] EXT4-fs: Ignoring removed nomblk_io_submit option [ 135.147045][ T7915] loop4: detected capacity change from 0 to 1024 [ 135.165584][ T7914] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.174703][ T7915] EXT4-fs (loop4): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 135.190204][ T7914] EXT4-fs error (device loop1): __ext4_new_inode:1073: comm syz.1.1552: reserved inode found cleared - inode=18 [ 135.215042][ T7905] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.228282][ T7914] EXT4-fs error (device loop1): ext4_lookup:1779: inode #2: comm syz.1.1552: bad inode number: 15 [ 135.244591][ T7915] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.306643][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.349555][ T7925] loop4: detected capacity change from 0 to 1024 [ 135.358738][ T7927] 9pnet_fd: Insufficient options for proto=fd [ 135.421902][ T7925] EXT4-fs (loop4): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 135.471972][ T7930] loop5: detected capacity change from 0 to 128 [ 135.490779][ T7930] EXT4-fs: Ignoring removed oldalloc option [ 135.499008][ T7925] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.517411][ T7930] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 135.530790][ T7930] ext4 filesystem being mounted at /135/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 135.544121][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.588185][ T7939] loop4: detected capacity change from 0 to 256 [ 135.595289][ T7939] msdos: Bad value for 'uid' [ 135.599957][ T7939] msdos: Bad value for 'uid' [ 135.633423][ T6033] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 135.918365][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.930652][ T7944] loop5: detected capacity change from 0 to 1024 [ 135.939144][ T7944] EXT4-fs (loop5): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 135.946740][ T7946] loop3: detected capacity change from 0 to 1024 [ 135.955018][ T7944] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.955881][ T7946] EXT4-fs: Ignoring removed bh option [ 135.973146][ T7946] EXT4-fs: Ignoring removed nomblk_io_submit option [ 135.985083][ T7946] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.023321][ T6033] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.045539][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.154226][ T7962] loop1: detected capacity change from 0 to 8192 [ 136.166497][ T7962] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 136.200608][ T7967] $H˙: renamed from bond0 (while UP) [ 136.209804][ T7967] $H˙: entered promiscuous mode [ 136.215172][ T7967] bond_slave_0: entered promiscuous mode [ 136.221553][ T7967] bond_slave_1: entered promiscuous mode [ 136.299714][ T7971] loop5: detected capacity change from 0 to 1024 [ 136.319517][ T7971] EXT4-fs (loop5): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 136.346025][ T7971] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 136.520942][ T7985] loop4: detected capacity change from 0 to 128 [ 136.617449][ T6033] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.657331][ T7985] syz.4.1577: attempt to access beyond end of device [ 136.657331][ T7985] loop4: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 136.670939][ T7985] Buffer I/O error on dev loop4, logical block 128, lost async page write [ 136.856892][ T7998] loop4: detected capacity change from 0 to 8192 [ 136.893589][ T7998] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 136.978327][ T8006] loop1: detected capacity change from 0 to 164 [ 136.988573][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.995968][ T8008] 9pnet_fd: Insufficient options for proto=fd [ 137.015760][ T8006] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 137.025000][ T8006] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 137.139435][ T8023] loop3: detected capacity change from 0 to 164 [ 137.159913][ T8023] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 137.177265][ T8023] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 137.317453][ T8037] loop5: detected capacity change from 0 to 8192 [ 137.325279][ T8037] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 137.339600][ T8043] 9pnet_fd: Insufficient options for proto=fd [ 137.348974][ T29] kauditd_printk_skb: 1434 callbacks suppressed [ 137.348989][ T29] audit: type=1326 audit(1749804061.582:12389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8042 comm="syz.0.1599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44b48be929 code=0x7ffc0000 [ 137.392148][ T29] audit: type=1326 audit(1749804061.612:12390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8042 comm="syz.0.1599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f44b48be929 code=0x7ffc0000 [ 137.415906][ T29] audit: type=1326 audit(1749804061.612:12391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8042 comm="syz.0.1599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44b48be929 code=0x7ffc0000 [ 137.439598][ T29] audit: type=1326 audit(1749804061.612:12392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8042 comm="syz.0.1599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f44b48be929 code=0x7ffc0000 [ 137.463374][ T29] audit: type=1326 audit(1749804061.612:12393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8042 comm="syz.0.1599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44b48be929 code=0x7ffc0000 [ 137.486989][ T29] audit: type=1326 audit(1749804061.612:12394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8042 comm="syz.0.1599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f44b48be929 code=0x7ffc0000 [ 137.510818][ T29] audit: type=1326 audit(1749804061.612:12395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8042 comm="syz.0.1599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44b48be929 code=0x7ffc0000 [ 137.534594][ T29] audit: type=1326 audit(1749804061.612:12396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8042 comm="syz.0.1599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f44b48be929 code=0x7ffc0000 [ 137.558197][ T29] audit: type=1326 audit(1749804061.612:12397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8042 comm="syz.0.1599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44b48be929 code=0x7ffc0000 [ 137.635972][ T8049] loop5: detected capacity change from 0 to 128 [ 137.665275][ T8049] syz.5.1600: attempt to access beyond end of device [ 137.665275][ T8049] loop5: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 137.678916][ T8049] Buffer I/O error on dev loop5, logical block 128, lost async page write [ 137.704615][ T29] audit: type=1326 audit(1749804061.932:12398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8050 comm="syz.0.1602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44b48be929 code=0x7ffc0000 [ 137.800151][ T8056] loop1: detected capacity change from 0 to 1024 [ 137.808027][ T8056] EXT4-fs: Ignoring removed bh option [ 137.813633][ T8056] EXT4-fs: Ignoring removed nomblk_io_submit option [ 137.827134][ T8058] loop5: detected capacity change from 0 to 164 [ 137.836772][ T8056] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.854279][ T8058] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 137.890938][ T8058] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 138.124425][ T8073] loop3: detected capacity change from 0 to 1024 [ 138.141281][ T8073] EXT4-fs (loop3): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 138.223821][ T8073] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 138.328399][ T8086] loop4: detected capacity change from 0 to 164 [ 138.335861][ T8086] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 138.345073][ T8086] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 138.391385][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.462061][ T8095] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1618'. [ 138.498523][ T8095] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1618'. [ 138.626795][ T8101] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1620'. [ 138.687248][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.745028][ T8112] loop1: detected capacity change from 0 to 512 [ 138.760075][ T8112] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 138.792463][ T8113] loop3: detected capacity change from 0 to 8192 [ 138.805900][ T8112] EXT4-fs (loop1): 1 truncate cleaned up [ 138.817167][ T8113] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 138.830758][ T8112] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 138.917632][ T8127] loop3: detected capacity change from 0 to 128 [ 138.937294][ T8127] syz.3.1631: attempt to access beyond end of device [ 138.937294][ T8127] loop3: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 138.937332][ T8127] Buffer I/O error on dev loop3, logical block 128, lost async page write [ 139.056484][ T8138] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1633'. [ 139.092093][ T8140] 9pnet_fd: Insufficient options for proto=fd [ 139.148976][ T8112] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.240221][ T8145] loop4: detected capacity change from 0 to 164 [ 139.260710][ T8145] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 139.283960][ T8145] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 139.557609][ T8153] loop3: detected capacity change from 0 to 8192 [ 139.583420][ T8153] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 139.689701][ T8167] loop5: detected capacity change from 0 to 164 [ 139.696368][ T8169] loop1: detected capacity change from 0 to 164 [ 139.728135][ T8171] loop3: detected capacity change from 0 to 1024 [ 139.735228][ T8171] EXT4-fs: Ignoring removed bh option [ 139.740759][ T8171] EXT4-fs: Ignoring removed nomblk_io_submit option [ 139.750221][ T8167] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 139.759140][ T8169] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 139.769944][ T8169] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 139.778900][ T8167] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 139.794485][ T8171] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.091789][ T8179] loop4: detected capacity change from 0 to 1024 [ 140.108767][ T8179] EXT4-fs (loop4): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 140.125760][ T8179] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 140.157654][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.175571][ T8184] $H˙: renamed from bond0 (while UP) [ 140.207383][ T8184] $H˙: entered promiscuous mode [ 140.212512][ T8184] bond_slave_0: entered promiscuous mode [ 140.218490][ T8184] bond_slave_1: entered promiscuous mode [ 140.286807][ T8189] loop4: detected capacity change from 0 to 512 [ 140.294735][ T8189] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 140.316903][ T8189] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.329752][ T8189] ext4 filesystem being mounted at /327/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 140.460431][ T8197] program syz.0.1657 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 140.470050][ T8197] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 140.568933][ T8207] loop5: detected capacity change from 0 to 1024 [ 140.603846][ T8207] EXT4-fs: Ignoring removed bh option [ 140.609509][ T8207] EXT4-fs: Ignoring removed nomblk_io_submit option [ 140.630113][ T8207] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.660734][ T8211] loop1: detected capacity change from 0 to 1024 [ 140.668571][ T8211] EXT4-fs (loop1): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 140.706597][ T8211] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 140.753227][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.777237][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.834869][ T8222] loop3: detected capacity change from 0 to 164 [ 140.856418][ T8222] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 140.868781][ T8222] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 141.074672][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.124220][ T8231] loop4: detected capacity change from 0 to 1024 [ 141.131855][ T8231] EXT4-fs (loop4): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 141.145644][ T8231] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.179426][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.223766][ T8235] loop4: detected capacity change from 0 to 164 [ 141.231695][ T8235] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 141.241607][ T8235] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 141.426086][ T6033] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.588902][ T8237] syzkaller1: entered promiscuous mode [ 141.594503][ T8237] syzkaller1: entered allmulticast mode [ 141.707521][ T8244] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1675'. [ 141.710706][ T8242] loop3: detected capacity change from 0 to 8192 [ 141.737936][ T8242] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 141.752649][ T8244] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1675'. [ 141.906031][ T8266] loop5: detected capacity change from 0 to 164 [ 141.913910][ T8266] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 141.933462][ T8266] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 142.075687][ T8282] loop4: detected capacity change from 0 to 164 [ 142.084153][ T8282] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 142.098513][ T8282] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 142.106093][ T8274] syzkaller1: entered promiscuous mode [ 142.112404][ T8274] syzkaller1: entered allmulticast mode [ 142.759732][ T8292] loop5: detected capacity change from 0 to 1024 [ 142.767098][ T8296] loop3: detected capacity change from 0 to 1024 [ 142.768046][ T8292] EXT4-fs (loop5): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 142.776775][ T8296] EXT4-fs (loop3): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 142.795954][ T8292] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 142.814838][ T8296] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 142.868751][ T6033] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.878795][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.902461][ T8314] vhci_hcd: default hub control req: c517 v0020 i0000 l0 [ 142.932882][ T8312] loop1: detected capacity change from 0 to 1024 [ 142.947130][ T8312] EXT4-fs (loop1): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 142.957901][ T8319] loop4: detected capacity change from 0 to 128 [ 142.964371][ T8320] loop5: detected capacity change from 0 to 512 [ 142.972253][ T8320] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 142.979938][ T8322] loop3: detected capacity change from 0 to 164 [ 142.986181][ T8320] EXT4-fs (loop5): 1 truncate cleaned up [ 142.996427][ T8320] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 143.011552][ T8319] syz.4.1702: attempt to access beyond end of device [ 143.011552][ T8319] loop4: rw=34817, sector=97, nr_sectors = 32 limit=128 [ 143.012024][ T8312] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 143.037551][ T29] kauditd_printk_skb: 136 callbacks suppressed [ 143.037570][ T29] audit: type=1326 audit(1749804067.262:12535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8318 comm="syz.5.1701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac6d46e929 code=0x7ffc0000 [ 143.067305][ T29] audit: type=1326 audit(1749804067.262:12536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8318 comm="syz.5.1701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fac6d46e929 code=0x7ffc0000 [ 143.090958][ T29] audit: type=1326 audit(1749804067.262:12537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8318 comm="syz.5.1701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac6d46e929 code=0x7ffc0000 [ 143.114627][ T29] audit: type=1326 audit(1749804067.262:12538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8318 comm="syz.5.1701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fac6d46e929 code=0x7ffc0000 [ 143.138167][ T29] audit: type=1326 audit(1749804067.262:12539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8318 comm="syz.5.1701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac6d46e929 code=0x7ffc0000 [ 143.140103][ T8322] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 143.161705][ T29] audit: type=1326 audit(1749804067.262:12540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8318 comm="syz.5.1701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fac6d46e929 code=0x7ffc0000 [ 143.180689][ T8322] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 143.193419][ T29] audit: type=1326 audit(1749804067.262:12541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8318 comm="syz.5.1701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac6d46e929 code=0x7ffc0000 [ 143.225236][ T29] audit: type=1326 audit(1749804067.262:12542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8318 comm="syz.5.1701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fac6d46e929 code=0x7ffc0000 [ 143.248763][ T29] audit: type=1326 audit(1749804067.262:12543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8318 comm="syz.5.1701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac6d46e929 code=0x7ffc0000 [ 143.272341][ T29] audit: type=1326 audit(1749804067.262:12544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8318 comm="syz.5.1701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fac6d46e929 code=0x7ffc0000 [ 143.306070][ T8336] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1706'. [ 143.308053][ T8320] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.336415][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.401693][ T8347] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1711'. [ 143.404243][ T8342] loop1: detected capacity change from 0 to 1024 [ 143.418927][ T8342] EXT4-fs (loop1): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 143.433893][ T8348] loop5: detected capacity change from 0 to 2048 [ 143.454642][ T8348] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 143.457783][ T8342] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 143.494239][ T6033] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.510783][ T8361] 9pnet_fd: Insufficient options for proto=fd [ 144.225001][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.535649][ T8389] capability: warning: `syz.0.1721' uses deprecated v2 capabilities in a way that may be insecure [ 144.555742][ T8384] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.596057][ T8384] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.883656][ T8378] syzkaller1: entered promiscuous mode [ 144.889236][ T8378] syzkaller1: entered allmulticast mode [ 145.135990][ T8404] loop1: detected capacity change from 0 to 164 [ 145.144552][ T8404] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 145.153957][ T8404] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 145.170345][ T8406] loop5: detected capacity change from 0 to 512 [ 145.182215][ T8406] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 145.194315][ T8406] EXT4-fs (loop5): 1 truncate cleaned up [ 145.375973][ T8411] 9pnet_fd: Insufficient options for proto=fd [ 145.498174][ T8419] loop5: detected capacity change from 0 to 1024 [ 145.515485][ T8419] EXT4-fs (loop5): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 145.630689][ T8435] loop4: detected capacity change from 0 to 1024 [ 145.665830][ T8435] EXT4-fs: Ignoring removed bh option [ 145.671380][ T8435] EXT4-fs: Ignoring removed nomblk_io_submit option [ 145.707879][ T8440] loop5: detected capacity change from 0 to 164 [ 145.746608][ T8440] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 145.766620][ T8445] 9pnet_fd: Insufficient options for proto=fd [ 145.804546][ T8440] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 145.819837][ T8450] loop3: detected capacity change from 0 to 1024 [ 145.833615][ T8450] EXT4-fs (loop3): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 146.395898][ T8484] SELinux: Context system_u:object_r:systemd_logger_exec_t:s0 is not valid (left unmapped). [ 146.439744][ T8486] loop1: detected capacity change from 0 to 8192 [ 146.455861][ T8486] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 146.553440][ T8493] SELinux: policydb magic number 0x69662f2e does not match expected magic number 0xf97cff8c [ 146.598567][ T8493] SELinux: failed to load policy [ 146.624755][ T8477] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1758'. [ 146.711887][ T8501] loop1: detected capacity change from 0 to 1024 [ 146.719307][ T8501] EXT4-fs (loop1): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 146.858968][ T8518] loop1: detected capacity change from 0 to 512 [ 146.867306][ T8518] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 146.878242][ T8518] EXT4-fs error (device loop1): ext4_get_branch:178: inode #11: block 4294967295: comm syz.1.1773: invalid block [ 146.892122][ T8518] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.1773: invalid indirect mapped block 4294967295 (level 1) [ 146.907580][ T8518] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.1773: invalid indirect mapped block 4294967295 (level 1) [ 146.922020][ T8518] EXT4-fs (loop1): 2 truncates cleaned up [ 146.944115][ T8511] syzkaller1: entered promiscuous mode [ 146.949752][ T8511] syzkaller1: entered allmulticast mode [ 147.109465][ T8539] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1783'. [ 147.117005][ T8540] loop5: detected capacity change from 0 to 512 [ 147.141087][ T8540] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 147.150610][ T8539] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1783'. [ 147.167512][ T8540] EXT4-fs error (device loop5): ext4_get_branch:178: inode #11: block 4294967295: comm syz.5.1782: invalid block [ 147.180132][ T8540] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.1782: invalid indirect mapped block 4294967295 (level 1) [ 147.195989][ T8540] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.1782: invalid indirect mapped block 4294967295 (level 1) [ 147.210584][ T8540] EXT4-fs (loop5): 2 truncates cleaned up [ 147.219246][ T8549] loop4: detected capacity change from 0 to 1024 [ 147.227973][ T8549] EXT4-fs (loop4): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 147.251790][ T8551] loop3: detected capacity change from 0 to 1024 [ 147.259142][ T8551] EXT4-fs (loop3): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 147.418501][ T8577] loop4: detected capacity change from 0 to 512 [ 147.426574][ T8577] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 147.444997][ T8577] ext4 filesystem being mounted at /351/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 147.457697][ T8583] loop3: detected capacity change from 0 to 1024 [ 147.466236][ T8583] EXT4-fs (loop3): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 147.572269][ T8595] loop3: detected capacity change from 0 to 1024 [ 147.579940][ T8595] EXT4-fs (loop3): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 147.662513][ T8603] 9pnet_fd: Insufficient options for proto=fd [ 147.741651][ T8613] 9pnet_fd: Insufficient options for proto=fd [ 147.761164][ T8615] loop3: detected capacity change from 0 to 1024 [ 147.768760][ T8615] EXT4-fs (loop3): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 147.809193][ T8623] loop1: detected capacity change from 0 to 1024 [ 147.817210][ T8623] EXT4-fs (loop1): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 147.899492][ T8639] 9pnet_fd: Insufficient options for proto=fd [ 147.969152][ T8643] loop1: detected capacity change from 0 to 8192 [ 147.978950][ T8643] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 148.027407][ T8652] net_ratelimit: 17 callbacks suppressed [ 148.027427][ T8652] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 148.109887][ T8669] 9pnet_fd: Insufficient options for proto=fd [ 148.119651][ T29] kauditd_printk_skb: 2715 callbacks suppressed [ 148.119670][ T29] audit: type=1326 audit(1749804072.342:15260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8668 comm="syz.1.1830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b9a93e929 code=0x7ffc0000 [ 148.187371][ T29] audit: type=1326 audit(1749804072.372:15261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8668 comm="syz.1.1830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f2b9a93e929 code=0x7ffc0000 [ 148.194621][ T8678] loop5: detected capacity change from 0 to 512 [ 148.211107][ T29] audit: type=1326 audit(1749804072.372:15262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8668 comm="syz.1.1830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b9a93e929 code=0x7ffc0000 [ 148.241121][ T29] audit: type=1326 audit(1749804072.382:15263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8668 comm="syz.1.1830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f2b9a93e929 code=0x7ffc0000 [ 148.250677][ T8680] loop1: detected capacity change from 0 to 164 [ 148.264645][ T29] audit: type=1326 audit(1749804072.382:15264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8668 comm="syz.1.1830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b9a93e929 code=0x7ffc0000 [ 148.294624][ T29] audit: type=1326 audit(1749804072.382:15265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8668 comm="syz.1.1830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f2b9a93e929 code=0x7ffc0000 [ 148.295841][ T8678] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 148.318129][ T29] audit: type=1326 audit(1749804072.382:15266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8668 comm="syz.1.1830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b9a93e929 code=0x7ffc0000 [ 148.318173][ T29] audit: type=1326 audit(1749804072.382:15267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8668 comm="syz.1.1830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f2b9a93e929 code=0x7ffc0000 [ 148.367292][ T8678] EXT4-fs (loop5): 1 truncate cleaned up [ 148.375035][ T29] audit: type=1326 audit(1749804072.382:15268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8668 comm="syz.1.1830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b9a93e929 code=0x7ffc0000 [ 148.407439][ T29] audit: type=1326 audit(1749804072.622:15269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8677 comm="syz.5.1832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac6d46e929 code=0x7ffc0000 [ 148.432382][ T8680] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 148.462212][ T8680] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 148.560629][ T8692] loop4: detected capacity change from 0 to 8192 [ 148.568968][ T8692] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 148.688303][ T8704] loop4: detected capacity change from 0 to 164 [ 148.696709][ T8704] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 148.706644][ T8704] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 148.933144][ T8710] loop5: detected capacity change from 0 to 8192 [ 148.940986][ T8710] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 148.976362][ T8712] loop3: detected capacity change from 0 to 1024 [ 148.986564][ T8712] EXT4-fs (loop3): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 149.031869][ T8714] loop5: detected capacity change from 0 to 8192 [ 149.040068][ T8714] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 149.093451][ T8724] loop1: detected capacity change from 0 to 164 [ 149.101190][ T8724] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 149.110320][ T8724] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 149.137213][ T8730] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1852'. [ 149.156209][ T8730] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1852'. [ 149.159507][ T8732] loop5: detected capacity change from 0 to 512 [ 149.172219][ T8732] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 149.184461][ T8732] EXT4-fs (loop5): 1 truncate cleaned up [ 149.280646][ T8738] loop3: detected capacity change from 0 to 256 [ 149.288516][ T8738] vfat: Unknown parameter 'iocha_xlate' [ 149.384527][ T8743] loop3: detected capacity change from 0 to 8192 [ 149.392567][ T8743] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 149.461337][ T8741] syzkaller1: entered promiscuous mode [ 149.467055][ T8741] syzkaller1: entered allmulticast mode [ 149.478337][ T8746] loop3: detected capacity change from 0 to 8192 [ 149.488109][ T8746] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 149.631809][ T8764] FAULT_INJECTION: forcing a failure. [ 149.631809][ T8764] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 149.645392][ T8764] CPU: 1 UID: 0 PID: 8764 Comm: syz.0.1866 Not tainted 6.16.0-rc1-syzkaller-00101-g27605c8c0f69 #0 PREEMPT(voluntary) [ 149.645430][ T8764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 149.645447][ T8764] Call Trace: [ 149.645494][ T8764] [ 149.645501][ T8764] __dump_stack+0x1d/0x30 [ 149.645524][ T8764] dump_stack_lvl+0xe8/0x140 [ 149.645544][ T8764] dump_stack+0x15/0x1b [ 149.645565][ T8764] should_fail_ex+0x265/0x280 [ 149.645637][ T8764] should_fail_alloc_page+0xf2/0x100 [ 149.645663][ T8764] __alloc_frozen_pages_noprof+0xff/0x360 [ 149.645713][ T8764] alloc_pages_mpol+0xb3/0x250 [ 149.645785][ T8764] alloc_migration_target_by_mpol+0x11b/0x280 [ 149.645817][ T8764] migrate_pages_batch+0x2e4/0x17d0 [ 149.645858][ T8764] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 149.645890][ T8764] ? __walk_page_range+0x324/0x340 [ 149.645952][ T8764] ? mas_ascend+0x1e9/0x560 [ 149.645982][ T8764] migrate_pages+0xf5f/0x1770 [ 149.646116][ T8764] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 149.646174][ T8764] __se_sys_mbind+0x975/0xac0 [ 149.646223][ T8764] __x64_sys_mbind+0x78/0x90 [ 149.646346][ T8764] x64_sys_call+0x14af/0x2fb0 [ 149.646375][ T8764] do_syscall_64+0xd2/0x200 [ 149.646401][ T8764] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 149.646435][ T8764] ? clear_bhb_loop+0x40/0x90 [ 149.646456][ T8764] ? clear_bhb_loop+0x40/0x90 [ 149.646560][ T8764] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.646589][ T8764] RIP: 0033:0x7f44b48be929 [ 149.646613][ T8764] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 149.646679][ T8764] RSP: 002b:00007f44b2f27038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 149.646704][ T8764] RAX: ffffffffffffffda RBX: 00007f44b4ae5fa0 RCX: 00007f44b48be929 [ 149.646720][ T8764] RDX: 0000000000000000 RSI: 0100000000004000 RDI: 00002000005b4000 [ 149.646737][ T8764] RBP: 00007f44b2f27090 R08: 0000000000000000 R09: 0000000000000002 [ 149.646752][ T8764] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 149.646768][ T8764] R13: 0000000000000000 R14: 00007f44b4ae5fa0 R15: 00007ffcea811418 [ 149.646856][ T8764] [ 149.881198][ T8762] SELinux: policydb magic number 0x28 does not match expected magic number 0xf97cff8c [ 149.914616][ T8762] SELinux: failed to load policy [ 149.945259][ T8768] loop3: detected capacity change from 0 to 8192 [ 149.953828][ T8768] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 149.971492][ T8776] 9pnet_fd: Insufficient options for proto=fd [ 150.040864][ T8787] loop4: detected capacity change from 0 to 512 [ 150.057498][ T8787] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 150.092698][ T8787] ext4 filesystem being mounted at /363/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 150.145207][ T8799] x_tables: duplicate underflow at hook 1 [ 150.190620][ T8804] loop3: detected capacity change from 0 to 1024 [ 150.230737][ T8785] syzkaller1: entered promiscuous mode [ 150.236561][ T8785] syzkaller1: entered allmulticast mode [ 150.243580][ T8810] loop3: detected capacity change from 0 to 4096 [ 150.310259][ T8816] 9pnet_fd: Insufficient options for proto=fd [ 150.361743][ T8820] loop3: detected capacity change from 0 to 512 [ 150.381442][ T8820] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 150.405360][ T8820] EXT4-fs error (device loop3): ext4_get_branch:178: inode #11: block 4294967295: comm syz.3.1888: invalid block [ 150.428620][ T8820] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.1888: invalid indirect mapped block 4294967295 (level 1) [ 150.445162][ T8820] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.1888: invalid indirect mapped block 4294967295 (level 1) [ 150.459461][ T8833] loop1: detected capacity change from 0 to 512 [ 150.465083][ T8820] EXT4-fs (loop3): 2 truncates cleaned up [ 150.466894][ T8833] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 150.493531][ T8833] EXT4-fs (loop1): 1 truncate cleaned up [ 150.857125][ T8850] 9pnet_fd: Insufficient options for proto=fd [ 150.986964][ T8866] loop1: detected capacity change from 0 to 512 [ 150.995030][ T8866] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 151.006997][ T8866] EXT4-fs (loop1): 1 truncate cleaned up [ 151.047403][ T8856] syzkaller1: entered promiscuous mode [ 151.052987][ T8856] syzkaller1: entered allmulticast mode [ 151.325363][ T8894] loop1: detected capacity change from 0 to 164 [ 151.333873][ T8894] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 151.347174][ T8894] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 151.388030][ T8902] loop4: detected capacity change from 0 to 1024 [ 151.396225][ T8902] EXT4-fs (loop4): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 151.457063][ T8908] loop4: detected capacity change from 0 to 4096 [ 151.511929][ T8917] loop4: detected capacity change from 0 to 1024 [ 151.520777][ T8917] EXT4-fs (loop4): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 151.632466][ T8937] loop4: detected capacity change from 0 to 1024 [ 151.640183][ T8937] EXT4-fs (loop4): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 151.665321][ T8943] loop3: detected capacity change from 0 to 1024 [ 151.673143][ T8943] EXT4-fs (loop3): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 151.729582][ T8945] loop4: detected capacity change from 0 to 8192 [ 151.737784][ T8945] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 151.764587][ T8953] loop3: detected capacity change from 0 to 512 [ 151.771504][ T8953] ext4: Bad value for 'init_itable' [ 151.868846][ T8967] loop3: detected capacity change from 0 to 512 [ 151.876635][ T8967] EXT4-fs: journaled quota format not specified [ 151.888198][ T8967] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1942'. [ 151.923043][ T8973] loop3: detected capacity change from 0 to 1024 [ 151.937972][ T8975] loop4: detected capacity change from 0 to 164 [ 151.944767][ T8973] EXT4-fs (loop3): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 151.954783][ T8975] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 151.965956][ T8975] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 152.070531][ T8995] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1953'. [ 152.088285][ T8995] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1953'. [ 152.175621][ T8991] syzkaller1: entered promiscuous mode [ 152.181167][ T8991] syzkaller1: entered allmulticast mode [ 152.256275][ T9006] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1958'. [ 152.279348][ T9006] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1958'. [ 152.326896][ T9014] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1962'. [ 152.371537][ T9020] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1965'. [ 152.377818][ T9018] loop1: detected capacity change from 0 to 164 [ 152.388844][ T9018] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 152.389529][ T9020] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1965'. [ 152.398359][ T9018] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 152.485058][ T9022] loop3: detected capacity change from 0 to 1024 [ 152.492329][ T9022] EXT4-fs (loop3): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 152.707032][ T9040] loop3: detected capacity change from 0 to 8192 [ 152.715144][ T9040] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 152.796439][ T9048] loop3: detected capacity change from 0 to 1024 [ 152.804160][ T9048] EXT4-fs (loop3): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 152.817487][ T9050] loop4: detected capacity change from 0 to 1024 [ 152.824845][ T9050] EXT4-fs (loop4): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 152.913878][ T9062] loop3: detected capacity change from 0 to 8192 [ 152.921504][ T9062] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 153.035784][ T9072] loop4: detected capacity change from 0 to 8192 [ 153.044627][ T9072] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 153.067694][ T9074] loop3: detected capacity change from 0 to 164 [ 153.075313][ T9074] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 153.085506][ T9074] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 153.242257][ T9084] loop1: detected capacity change from 0 to 1024 [ 153.249420][ T9084] EXT4-fs: Ignoring removed bh option [ 153.255088][ T9084] EXT4-fs: Ignoring removed nomblk_io_submit option [ 153.417520][ T9092] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.426046][ T9092] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.944178][ T9097] loop5: detected capacity change from 0 to 8192 [ 153.969943][ T9097] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 154.032912][ T29] kauditd_printk_skb: 813 callbacks suppressed [ 154.032926][ T29] audit: type=1326 audit(1749804078.252:16083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9104 comm="syz.5.1996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac6d46e929 code=0x7ffc0000 [ 154.062870][ T29] audit: type=1326 audit(1749804078.252:16084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9104 comm="syz.5.1996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fac6d46e929 code=0x7ffc0000 [ 154.086718][ T29] audit: type=1326 audit(1749804078.252:16085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9104 comm="syz.5.1996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac6d46e929 code=0x7ffc0000 [ 154.110304][ T29] audit: type=1326 audit(1749804078.252:16086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9104 comm="syz.5.1996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fac6d46e929 code=0x7ffc0000 [ 154.133937][ T29] audit: type=1326 audit(1749804078.252:16087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9104 comm="syz.5.1996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac6d46e929 code=0x7ffc0000 [ 154.157660][ T29] audit: type=1326 audit(1749804078.252:16088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9104 comm="syz.5.1996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fac6d46e929 code=0x7ffc0000 [ 154.181315][ T29] audit: type=1326 audit(1749804078.252:16089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9104 comm="syz.5.1996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac6d46e929 code=0x7ffc0000 [ 154.205010][ T29] audit: type=1326 audit(1749804078.252:16090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9104 comm="syz.5.1996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=305 compat=0 ip=0x7fac6d46e929 code=0x7ffc0000 [ 154.228819][ T29] audit: type=1326 audit(1749804078.270:16091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9104 comm="syz.5.1996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac6d46e929 code=0x7ffc0000 [ 154.307198][ T29] audit: type=1326 audit(1749804078.540:16092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9115 comm="syz.3.2001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9530e8e929 code=0x7ffc0000 [ 154.348277][ T9114] loop5: detected capacity change from 0 to 8192 [ 154.357262][ T9114] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 154.407406][ T9118] loop3: detected capacity change from 0 to 512 [ 154.419305][ T9120] loop5: detected capacity change from 0 to 512 [ 154.420967][ T9118] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 154.427528][ T9120] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 154.438459][ T9118] EXT4-fs error (device loop3): ext4_get_branch:178: inode #11: block 4294967295: comm syz.3.2002: invalid block [ 154.445481][ T9120] EXT4-fs error (device loop5): ext4_get_branch:178: inode #11: block 4294967295: comm syz.5.2003: invalid block [ 154.456230][ T9118] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.2002: invalid indirect mapped block 4294967295 (level 1) [ 154.469572][ T9120] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.2003: invalid indirect mapped block 4294967295 (level 1) [ 154.495218][ T9120] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.2003: invalid indirect mapped block 4294967295 (level 1) [ 154.509684][ T9118] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.2002: invalid indirect mapped block 4294967295 (level 1) [ 154.523933][ T9120] EXT4-fs (loop5): 2 truncates cleaned up [ 154.530030][ T9124] loop1: detected capacity change from 0 to 164 [ 154.538170][ T9124] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 154.544874][ T9118] EXT4-fs (loop3): 2 truncates cleaned up [ 154.547827][ T9124] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 155.215557][ T9128] syzkaller1: entered promiscuous mode [ 155.221147][ T9128] syzkaller1: entered allmulticast mode [ 155.296263][ T9131] loop3: detected capacity change from 0 to 8192 [ 155.304770][ T9131] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 155.332700][ T9133] loop5: detected capacity change from 0 to 8192 [ 155.340947][ T9133] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 155.519050][ T9153] loop5: detected capacity change from 0 to 512 [ 155.545876][ T9153] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 155.584994][ T9153] EXT4-fs error (device loop5): ext4_get_branch:178: inode #11: block 4294967295: comm syz.5.2017: invalid block [ 155.604127][ T9153] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.2017: invalid indirect mapped block 4294967295 (level 1) [ 155.640702][ T9153] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.2017: invalid indirect mapped block 4294967295 (level 1) [ 155.675832][ T9153] EXT4-fs (loop5): 2 truncates cleaned up [ 155.744174][ T9173] loop1: detected capacity change from 0 to 8192 [ 155.751933][ T9173] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 156.033287][ T9197] loop1: detected capacity change from 0 to 8192 [ 156.050831][ T9197] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 156.104818][ T9204] loop1: detected capacity change from 0 to 1024 [ 156.111963][ T9204] EXT4-fs (loop1): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 156.384729][ T9223] FAULT_INJECTION: forcing a failure. [ 156.384729][ T9223] name failslab, interval 1, probability 0, space 0, times 0 [ 156.397601][ T9223] CPU: 1 UID: 0 PID: 9223 Comm: syz.1.2039 Not tainted 6.16.0-rc1-syzkaller-00101-g27605c8c0f69 #0 PREEMPT(voluntary) [ 156.397653][ T9223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 156.397691][ T9223] Call Trace: [ 156.397697][ T9223] [ 156.397705][ T9223] __dump_stack+0x1d/0x30 [ 156.397791][ T9223] dump_stack_lvl+0xe8/0x140 [ 156.397891][ T9223] dump_stack+0x15/0x1b [ 156.397923][ T9223] should_fail_ex+0x265/0x280 [ 156.398049][ T9223] should_failslab+0x8c/0xb0 [ 156.398153][ T9223] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 156.398194][ T9223] ? p9_client_create+0x207/0xbc0 [ 156.398240][ T9223] kstrdup+0x3e/0xd0 [ 156.398317][ T9223] p9_client_create+0x207/0xbc0 [ 156.398364][ T9223] v9fs_session_init+0xf7/0xde0 [ 156.398399][ T9223] ? obj_cgroup_charge_account+0x122/0x1a0 [ 156.398478][ T9223] ? __rcu_read_unlock+0x4f/0x70 [ 156.398507][ T9223] ? v9fs_mount+0x51/0x590 [ 156.398546][ T9223] ? __kmalloc_cache_noprof+0x299/0x320 [ 156.398629][ T9223] v9fs_mount+0x67/0x590 [ 156.398760][ T9223] ? __pfx_v9fs_mount+0x10/0x10 [ 156.398800][ T9223] legacy_get_tree+0x75/0xd0 [ 156.398825][ T9223] vfs_get_tree+0x54/0x1d0 [ 156.398880][ T9223] do_new_mount+0x207/0x680 [ 156.398908][ T9223] path_mount+0x4a4/0xb20 [ 156.398937][ T9223] ? user_path_at+0x109/0x130 [ 156.398981][ T9223] __se_sys_mount+0x28f/0x2e0 [ 156.399010][ T9223] __x64_sys_mount+0x67/0x80 [ 156.399036][ T9223] x64_sys_call+0xd36/0x2fb0 [ 156.399122][ T9223] do_syscall_64+0xd2/0x200 [ 156.399147][ T9223] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 156.399180][ T9223] ? clear_bhb_loop+0x40/0x90 [ 156.399207][ T9223] ? clear_bhb_loop+0x40/0x90 [ 156.399235][ T9223] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.399261][ T9223] RIP: 0033:0x7f2b9a93e929 [ 156.399280][ T9223] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 156.399304][ T9223] RSP: 002b:00007f2b98fa7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 156.399383][ T9223] RAX: ffffffffffffffda RBX: 00007f2b9ab65fa0 RCX: 00007f2b9a93e929 [ 156.399399][ T9223] RDX: 00002000000002c0 RSI: 0000200000000080 RDI: 0000000000000000 [ 156.399415][ T9223] RBP: 00007f2b98fa7090 R08: 0000200000000240 R09: 0000000000000000 [ 156.399430][ T9223] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 156.399445][ T9223] R13: 0000000000000000 R14: 00007f2b9ab65fa0 R15: 00007ffe8b29c9b8 [ 156.399470][ T9223] [ 156.725766][ T9225] loop5: detected capacity change from 0 to 512 [ 156.754535][ T9225] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 156.813992][ T9225] EXT4-fs (loop5): 1 truncate cleaned up [ 156.852387][ T9233] loop1: detected capacity change from 0 to 8192 [ 156.864406][ T9233] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 156.919471][ T9244] loop1: detected capacity change from 0 to 512 [ 156.929319][ T9244] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 156.939030][ T9244] EXT4-fs (loop1): orphan cleanup on readonly fs [ 156.947469][ T9244] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.2048: bg 0: block 248: padding at end of block bitmap is not set [ 156.962489][ T9244] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.2048: Failed to acquire dquot type 1 [ 156.976545][ T9244] EXT4-fs (loop1): 1 truncate cleaned up [ 156.985007][ T9244] syz.1.2048 (9244) used greatest stack depth: 9304 bytes left [ 156.992781][ T9249] loop3: detected capacity change from 0 to 8192 [ 157.000684][ T9249] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 157.085079][ T9259] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2055'. [ 157.100768][ T9259] wg2: entered promiscuous mode [ 157.105795][ T9259] wg2: entered allmulticast mode [ 157.165718][ T9261] loop1: detected capacity change from 0 to 8192 [ 157.179910][ T9261] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 157.313161][ T9275] loop5: detected capacity change from 0 to 8192 [ 157.322344][ T9275] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 157.372381][ T9283] FAULT_INJECTION: forcing a failure. [ 157.372381][ T9283] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 157.385570][ T9283] CPU: 1 UID: 0 PID: 9283 Comm: syz.5.2065 Not tainted 6.16.0-rc1-syzkaller-00101-g27605c8c0f69 #0 PREEMPT(voluntary) [ 157.385597][ T9283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 157.385609][ T9283] Call Trace: [ 157.385614][ T9283] [ 157.385621][ T9283] __dump_stack+0x1d/0x30 [ 157.385643][ T9283] dump_stack_lvl+0xe8/0x140 [ 157.385660][ T9283] dump_stack+0x15/0x1b [ 157.385675][ T9283] should_fail_ex+0x265/0x280 [ 157.385706][ T9283] should_fail+0xb/0x20 [ 157.385807][ T9283] should_fail_usercopy+0x1a/0x20 [ 157.385857][ T9283] _copy_from_user+0x1c/0xb0 [ 157.385879][ T9283] ___sys_sendmsg+0xc1/0x1d0 [ 157.385913][ T9283] __x64_sys_sendmsg+0xd4/0x160 [ 157.385937][ T9283] x64_sys_call+0x2999/0x2fb0 [ 157.385956][ T9283] do_syscall_64+0xd2/0x200 [ 157.386050][ T9283] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 157.386074][ T9283] ? clear_bhb_loop+0x40/0x90 [ 157.386092][ T9283] ? clear_bhb_loop+0x40/0x90 [ 157.386112][ T9283] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.386215][ T9283] RIP: 0033:0x7fac6d46e929 [ 157.386235][ T9283] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 157.386260][ T9283] RSP: 002b:00007fac6bad7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 157.386333][ T9283] RAX: ffffffffffffffda RBX: 00007fac6d695fa0 RCX: 00007fac6d46e929 [ 157.386350][ T9283] RDX: 0000000000000041 RSI: 0000200000002dc0 RDI: 0000000000000005 [ 157.386366][ T9283] RBP: 00007fac6bad7090 R08: 0000000000000000 R09: 0000000000000000 [ 157.386381][ T9283] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 157.386395][ T9283] R13: 0000000000000000 R14: 00007fac6d695fa0 R15: 00007fff7dfe9998 [ 157.386422][ T9283] [ 157.615277][ T9288] loop5: detected capacity change from 0 to 512 [ 157.625383][ T9288] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 157.679542][ T9288] EXT4-fs (loop5): 1 truncate cleaned up [ 157.706210][ T9297] loop3: detected capacity change from 0 to 8192 [ 157.714832][ T9297] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 157.725990][ T9304] loop1: detected capacity change from 0 to 1024 [ 157.732694][ T9304] EXT4-fs: Ignoring removed bh option [ 157.738189][ T9304] EXT4-fs: Ignoring removed nomblk_io_submit option [ 157.746526][ T9305] loop4: detected capacity change from 0 to 512 [ 157.755977][ T9305] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 157.776596][ T9305] ext4 filesystem being mounted at /402/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 157.817063][ T9311] loop3: detected capacity change from 0 to 8192 [ 157.828647][ T9311] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 157.918914][ T9320] loop3: detected capacity change from 0 to 512 [ 157.926332][ T9320] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 157.939129][ T9320] EXT4-fs (loop3): 1 truncate cleaned up [ 158.064104][ T9327] loop5: detected capacity change from 0 to 164 [ 158.123903][ T9327] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 158.136933][ T9327] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 158.221645][ T9335] loop3: detected capacity change from 0 to 8192 [ 158.231119][ T9335] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 158.540468][ T9346] loop4: detected capacity change from 0 to 512 [ 158.548229][ T9346] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 158.558859][ T9346] EXT4-fs error (device loop4): ext4_get_branch:178: inode #11: block 4294967295: comm syz.4.2091: invalid block [ 158.571582][ T9346] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.2091: invalid indirect mapped block 4294967295 (level 1) [ 158.586869][ T9346] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.2091: invalid indirect mapped block 4294967295 (level 1) [ 158.601455][ T9346] EXT4-fs (loop4): 2 truncates cleaned up [ 158.718950][ T9355] ALSA: seq fatal error: cannot create timer (-19) [ 158.727842][ T9355] loop1: detected capacity change from 0 to 128 [ 158.734714][ T9355] vfat: Unknown parameter '˙˙˙˙˙˙˙˙˙˙˙˙00000000000000000000000˙˙˙˙˙˙˙˙0xffffffffffffffff˙˙˙˙˙˙˙˙0xffffffffffffffff' [ 158.807352][ T9362] loop1: detected capacity change from 0 to 512 [ 158.815005][ T9362] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 158.825777][ T9362] EXT4-fs error (device loop1): ext4_get_branch:178: inode #11: block 4294967295: comm syz.1.2097: invalid block [ 158.840112][ T9362] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.2097: invalid indirect mapped block 4294967295 (level 1) [ 158.856057][ T9362] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.2097: invalid indirect mapped block 4294967295 (level 1) [ 158.870998][ T9362] EXT4-fs (loop1): 2 truncates cleaned up [ 159.046300][ T29] kauditd_printk_skb: 1062 callbacks suppressed [ 159.046320][ T29] audit: type=1326 audit(1749804083.280:17153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9345 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f781c9558e7 code=0x7ffc0000 [ 159.076555][ T29] audit: type=1326 audit(1749804083.280:17154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9345 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f781c8fab19 code=0x7ffc0000 [ 159.099611][ T29] audit: type=1326 audit(1749804083.280:17155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9345 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f781c95e929 code=0x7ffc0000 [ 159.122835][ T29] audit: type=1326 audit(1749804083.280:17156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9361 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2b9a9358e7 code=0x7ffc0000 [ 159.146195][ T29] audit: type=1326 audit(1749804083.280:17157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9361 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2b9a8dab19 code=0x7ffc0000 [ 159.169289][ T29] audit: type=1326 audit(1749804083.280:17158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9361 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f2b9a93e929 code=0x7ffc0000 [ 159.192673][ T29] audit: type=1326 audit(1749804083.290:17159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9345 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f781c9558e7 code=0x7ffc0000 [ 159.215866][ T29] audit: type=1326 audit(1749804083.290:17160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9345 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f781c8fab19 code=0x7ffc0000 [ 159.238887][ T29] audit: type=1326 audit(1749804083.290:17161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9345 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f781c95e929 code=0x7ffc0000 [ 159.262387][ T29] audit: type=1326 audit(1749804083.290:17162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9361 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2b9a9358e7 code=0x7ffc0000 [ 159.310829][ T9391] loop3: detected capacity change from 0 to 512 [ 159.318983][ T9391] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 159.330646][ T9391] EXT4-fs (loop3): 1 truncate cleaned up [ 159.342039][ T9394] loop5: detected capacity change from 0 to 164 [ 159.349832][ T9394] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 159.358940][ T9394] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 159.420514][ T9396] loop4: detected capacity change from 0 to 8192 [ 159.429063][ T9396] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 159.473402][ T9399] loop4: detected capacity change from 0 to 164 [ 159.480754][ T9399] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 159.489963][ T9399] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 159.620835][ T9401] loop3: detected capacity change from 0 to 512 [ 159.634609][ T9401] ext4 filesystem being mounted at /488/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 159.649687][ T9401] EXT4-fs error (device loop3): ext4_empty_dir:3075: inode #12: comm syz.3.2112: invalid size [ 159.660756][ T9401] EXT4-fs (loop3): Remounting filesystem read-only [ 159.695810][ T6411] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 159.751933][ T9417] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2117'. [ 159.777022][ T9417] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2117'. [ 159.851929][ T9425] loop3: detected capacity change from 0 to 8192 [ 159.861028][ T9425] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 159.926516][ T9430] loop3: detected capacity change from 0 to 512 [ 159.935108][ T9430] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 159.946932][ T9430] EXT4-fs (loop3): 1 truncate cleaned up [ 160.171257][ T9434] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 160.179926][ T9434] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 160.245415][ T9430] EXT4-fs unmount: 93 callbacks suppressed [ 160.245436][ T9430] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.347643][ T9436] loop5: detected capacity change from 0 to 512 [ 160.387815][ T9436] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 160.457585][ T9436] EXT4-fs error (device loop5): ext4_get_branch:178: inode #11: block 4294967295: comm syz.5.2124: invalid block [ 160.479814][ T9436] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.2124: invalid indirect mapped block 4294967295 (level 1) [ 160.480158][ T9436] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.2124: invalid indirect mapped block 4294967295 (level 1) [ 160.480625][ T9436] EXT4-fs (loop5): 2 truncates cleaned up [ 160.482035][ T9436] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.540106][ T9441] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2125'. [ 160.551075][ T9441] loop4: detected capacity change from 0 to 128 [ 160.583815][ T9441] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 160.602833][ T9441] ext4 filesystem being mounted at /406/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 160.679985][ T9450] loop3: detected capacity change from 0 to 164 [ 160.687631][ T9450] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 160.697299][ T9450] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 161.155394][ T6033] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.207399][ T9469] loop5: detected capacity change from 0 to 164 [ 161.228340][ T9469] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 161.233902][ T3305] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 161.238679][ T9469] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 161.277127][ T9471] loop4: detected capacity change from 0 to 512 [ 161.284991][ T9471] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 161.297748][ T9471] EXT4-fs (loop4): 1 truncate cleaned up [ 161.304717][ T9471] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 161.381700][ T9473] $H˙: renamed from bond0 [ 161.393201][ T9473] $H˙: entered promiscuous mode [ 161.398312][ T9473] bond_slave_0: entered promiscuous mode [ 161.404200][ T9473] bond_slave_1: entered promiscuous mode [ 161.530465][ T9475] loop3: detected capacity change from 0 to 512 [ 161.537659][ T9475] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 161.548953][ T9475] EXT4-fs error (device loop3): ext4_get_branch:178: inode #11: block 4294967295: comm syz.3.2137: invalid block [ 161.562178][ T9475] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.2137: invalid indirect mapped block 4294967295 (level 1) [ 161.577929][ T9475] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.2137: invalid indirect mapped block 4294967295 (level 1) [ 161.592380][ T9475] EXT4-fs (loop3): 2 truncates cleaned up [ 161.599922][ T9475] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.621601][ T9471] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.713682][ T9483] loop4: detected capacity change from 0 to 1024 [ 161.720743][ T9483] EXT4-fs: Ignoring removed bh option [ 161.726319][ T9483] EXT4-fs: Ignoring removed nomblk_io_submit option [ 161.738497][ T9483] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.053843][ T9500] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2145'. [ 162.080343][ T9500] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2145'. [ 162.345748][ T9520] loop5: detected capacity change from 0 to 1024 [ 162.353448][ T9520] EXT4-fs: Ignoring removed bh option [ 162.358920][ T9520] EXT4-fs: Ignoring removed nomblk_io_submit option [ 162.381218][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.384118][ T9520] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.456303][ T9525] loop3: detected capacity change from 0 to 2048 [ 162.503372][ T9526] ================================================================== [ 162.511534][ T9526] BUG: KCSAN: data-race in generic_buffers_fsync_noflush / writeback_single_inode [ 162.520809][ T9526] [ 162.523163][ T9526] write to 0xffff888106f78ea8 of 4 bytes by task 9520 on cpu 1: [ 162.530827][ T9526] writeback_single_inode+0x14a/0x3e0 [ 162.536252][ T9526] sync_inode_metadata+0x5b/0x90 [ 162.541256][ T9526] generic_buffers_fsync_noflush+0xd9/0x120 [ 162.547203][ T9526] ext4_sync_file+0x1ab/0x690 [ 162.551913][ T9526] vfs_fsync_range+0x10d/0x130 [ 162.556714][ T9526] ext4_buffered_write_iter+0x34f/0x3c0 [ 162.562299][ T9526] ext4_file_write_iter+0x383/0xf00 [ 162.567541][ T9526] iter_file_splice_write+0x5f2/0x970 [ 162.572961][ T9526] direct_splice_actor+0x156/0x2a0 [ 162.578128][ T9526] splice_direct_to_actor+0x312/0x680 [ 162.583560][ T9526] do_splice_direct+0xda/0x150 [ 162.588381][ T9526] do_sendfile+0x380/0x650 [ 162.592846][ T9526] __x64_sys_sendfile64+0x105/0x150 [ 162.598079][ T9526] x64_sys_call+0xb39/0x2fb0 [ 162.602707][ T9526] do_syscall_64+0xd2/0x200 [ 162.607265][ T9526] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.613202][ T9526] [ 162.615551][ T9526] read to 0xffff888106f78ea8 of 4 bytes by task 9526 on cpu 0: [ 162.623124][ T9526] generic_buffers_fsync_noflush+0x80/0x120 [ 162.629064][ T9526] ext4_sync_file+0x1ab/0x690 [ 162.633780][ T9526] vfs_fsync_range+0x10d/0x130 [ 162.638569][ T9526] ext4_buffered_write_iter+0x34f/0x3c0 [ 162.644155][ T9526] ext4_file_write_iter+0x383/0xf00 [ 162.649387][ T9526] iter_file_splice_write+0x5f2/0x970 [ 162.654819][ T9526] direct_splice_actor+0x156/0x2a0 [ 162.659982][ T9526] splice_direct_to_actor+0x312/0x680 [ 162.665415][ T9526] do_splice_direct+0xda/0x150 [ 162.670230][ T9526] do_sendfile+0x380/0x650 [ 162.674681][ T9526] __x64_sys_sendfile64+0x105/0x150 [ 162.679935][ T9526] x64_sys_call+0xb39/0x2fb0 [ 162.684575][ T9526] do_syscall_64+0xd2/0x200 [ 162.689127][ T9526] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.695058][ T9526] [ 162.697407][ T9526] value changed: 0x00000038 -> 0x00000002 [ 162.703151][ T9526] [ 162.705504][ T9526] Reported by Kernel Concurrency Sanitizer on: [ 162.711678][ T9526] CPU: 0 UID: 0 PID: 9526 Comm: syz.5.2151 Not tainted 6.16.0-rc1-syzkaller-00101-g27605c8c0f69 #0 PREEMPT(voluntary) [ 162.724132][ T9526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 162.734229][ T9526] ================================================================== [ 162.777531][ T9525] loop3: p2 p3 p7 [ 162.941378][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.195909][ T6033] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.