last executing test programs: 3.121567945s ago: executing program 4 (id=3834): creat(&(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x100) symlink(&(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newtfilter={0x70, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xfff3, 0x7}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x40, 0x2, [@TCA_CGROUP_EMATCHES={0x3c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x2c, 0x1, 0x0, 0x0, {{0xe37, 0x9, 0x4}, [@TCA_EM_IPT_MATCH_DATA={0x4}, @TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xa}]}}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x40010) 2.852797819s ago: executing program 4 (id=3844): creat(&(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x100) symlink(&(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffd59}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x2d) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000040)={{{@in=@rand_addr=0x64010100, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e23, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x1, 0x0, 0x0, 0x5, 0xfffffffffffffffa}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x3c}, 0xa, @in6=@ipv4={'\x00', '\xff\xff', @local}, 0x3507, 0x4}}, 0xe8) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newtfilter={0x70, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xfff3, 0x7}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x40, 0x2, [@TCA_CGROUP_EMATCHES={0x3c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x2c, 0x1, 0x0, 0x0, {{0xe37, 0x9, 0x4}, [@TCA_EM_IPT_MATCH_DATA={0x4}, @TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xa}]}}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x40010) 1.687198106s ago: executing program 1 (id=3858): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') getdents64(r1, &(0x7f0000002f40)=""/4094, 0x102e) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='mm_page_free\x00', r2}, 0x10) bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r3 = getpid() r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RELOAD(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="010026bd700000000001250000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008b00", @ANYRES32=r3, @ANYBLOB="9a144c1edd7ab15e6705ef3511f4820e66dc9516bcb6cc727bca1cd81ff68163d434a80e3c0cea92001f9a385fe3a1c1101db1bcc80d186adc77634eafb03a9bee35aafca3d16c6ad860ec9a9b83cd29f65f30893700177d532a2597c0e6635295353ad4ca27dcee67a64f9678e06b1634166c2770673a354cf2b6ced8af706d272bd063c2775908394900a2eab887c0a52468a9c6672734ae57b51582e2014828a51635c61a9597d29e5da6f4962105242aed7fa29795fbedeb8e26b653ded5308765bb4897295316f141a4ce80ac7a5ee91441effd0d403e5e2eaf42176a8a063cef4bbb74257ba3077d71fbb50677d4"], 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r5, 0x1, &(0x7f0000000580)=ANY=[@ANYBLOB="00000000ff"]) 1.614545317s ago: executing program 1 (id=3859): socket$nl_route(0x10, 0x3, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0xe22, 0xfffffeff, @empty, 0x4000000}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000600)={0x2, 0x4e20, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4}, 0x1c) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e26, 0x2, @remote, 0x3}, 0x1c) socket$netlink(0x10, 0x3, 0x8000000004) prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x3, &(0x7f0000000040)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x42, &(0x7f0000000080)=0x205, 0x4) setsockopt$inet6_int(r2, 0x29, 0x2, &(0x7f00000000c0)=0x4d, 0x4) getsockopt$inet6_buf(r2, 0x29, 0x6, 0x0, &(0x7f0000000240)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffdfc, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r4) sendmsg$NL80211_CMD_GET_WIPHY(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="59bb22bd7000000020001100000008002b01"], 0x28}}, 0x0) 1.581786527s ago: executing program 1 (id=3860): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='\t\x00\x00\x00\x00', @ANYRES32, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRESHEX=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fffffc}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x18, 0x5, &(0x7f00000007c0)=ANY=[@ANYBLOB="180000001800ff0f00130000001b0000850000006d00000085000000230000aa0c8a7e8d1b1cde50d6ac80a62e04a507199316c6f69021c49be53be55b050000000185d50e0000e65feb190035c65bc5c8ff145b7ca35d15adcee0d1309f9857f09504bd1d5bc43e569278f8a2be7019c8ca31c9db4956893e2681b065b7f7b28b06e65337a9d4d443320147a2703ace00"/158], &(0x7f0000000080)='GPL\x00', 0xc4, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fffffff, @void, @value}, 0x12) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000340)='xprtrdma_err_chunk\x00', r1, 0x0, 0x4000000000}, 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x7c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0xa, 0x4, 0x7, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5, 0x0, 0x8}, 0x18) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206010100000000000000000000000005000100070000000900020073797a300000000014000780050015000000000008001240000000000d000300686173683a6e657400000000050005000a000000050004"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="1c00000003060500000000000000000000000006050001000700000035d5c83b97f1e7cd2de9b891a9fed26f010100e6ff55e6da0bfdb5e2146a08e4424d869483700d69da4eac5bfb03434d7a8aaa0e3b1c982170bf672264acc2e54639810b7d4585f759c3ed3c66c7bbc5f58ec8d88514efe1ee54d6d2d47d5848fac7bbd3f27a17631e84316ffc06f5e648427383"], 0x1c}, 0x1, 0x0, 0x0, 0x24040800}, 0x8d0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r8}, 0x10) r9 = syz_mount_image$iso9660(&(0x7f0000000180), &(0x7f0000000280)='./file0\x00', 0x14806, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0], 0x0, 0x700, &(0x7f0000000a40)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000140)='fsi_master_gpio_in\x00', r8, 0x0, 0x7}, 0x18) r10 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg(r10, &(0x7f0000002340), 0x0, 0x40050) r11 = openat2(0xffffffffffffff9c, &(0x7f00000012c0)='./file0\x00', &(0x7f0000001300)={0x8000, 0x100, 0x11}, 0x18) ioctl$TUNSETTXFILTER(r11, 0x400454d1, &(0x7f0000001340)=ANY=[]) r12 = socket(0x28, 0x5, 0x0) getsockopt$inet_mreqn(r12, 0x0, 0x24, 0x0, 0x0) socket$rds(0x15, 0x5, 0x0) futimesat(r9, &(0x7f0000000000)='./file1\x00', 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r6, {}, {}, {0x8, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x8881}, 0x0) request_key(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000140)='\\\\@[*#)\x00', 0xfffffffffffffffe) 1.199036193s ago: executing program 1 (id=3865): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000880)='kfree\x00', r0}, 0x18) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="0500000008000000f100000000000000", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0300000011000000040000e0050000001b34b86b471f0adc"], 0x48}, 0x1, 0x0, 0x0, 0xc801}, 0x0) sendmsg$can_bcm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x5, 0x0, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "f8ca44dfaa00"}}, 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000540)={'vxcan0\x00', 0x0}) sendmsg$can_bcm(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, r3}, 0x10, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB="0700002a688f0000184f809a88020000377fba3d00000000bca7", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000000001000000000000000300"/24], 0x48}, 0x1, 0x0, 0x0, 0x8004}, 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_raw(r4, &(0x7f0000000000), 0x10) read(r4, &(0x7f00000017c0)=""/4090, 0xffa) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000007c0)=ANY=[@ANYBLOB="18000000000000000000000095980000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095000000000000000000000000243c589fe1420b2e7f293c36d3bf321325429c7d52b73761ef7bce32816818c9f464e5a983cc2e4551e052ac2a9f9ab41f8936f77be401f216cd63cb7a2ec805724d71ad6fa7c6a3cfdfac360d6a6836f65e49da507c2566a30167e0ac"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pivot_root(&(0x7f0000000000)='.\x00', &(0x7f0000000080)='./file0/../file0\x00') acct(&(0x7f00000001c0)='./file0/../file0\x00') setsockopt$CAN_RAW_RECV_OWN_MSGS(r4, 0x65, 0x4, &(0x7f0000000740), 0x2) sendmsg$can_raw(r4, &(0x7f0000000240)={&(0x7f0000000780)={0x1d, r5}, 0x10, &(0x7f0000000200)={&(0x7f0000000140)=@can={{0x3, 0x0, 0x1, 0x1}, 0x0, 0x0, 0x0, 0x0, "e5631d6f20af6daa"}, 0x10}}, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRES32=r6], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000380)={r10, r8, 0x25, 0x2, @val=@tcx={@void, @value}}, 0x1c) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f0000000580)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB, @ANYRES32=r3, @ANYBLOB="080006003200000008000600080000002400018008000700", @ANYRES32=r5, @ANYBLOB="080006000000000008000700", @ANYRES32=r8, @ANYBLOB="08000300e0000001080002000800"/23], 0x78}, 0x1, 0x0, 0x0, 0x20000012}, 0x240041c0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="07000000040000000800000003000000140000", @ANYRES32], 0x48) socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) 914.005637ms ago: executing program 0 (id=3870): socket$nl_route(0x10, 0x3, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0xe22, 0xfffffeff, @empty, 0x4000000}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000600)={0x2, 0x4e20, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4}, 0x1c) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e26, 0x2, @remote, 0x3}, 0x1c) socket$netlink(0x10, 0x3, 0x8000000004) prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x3, &(0x7f0000000040)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x42, &(0x7f0000000080)=0x205, 0x4) setsockopt$inet6_int(r2, 0x29, 0x2, &(0x7f00000000c0)=0x4d, 0x4) getsockopt$inet6_buf(r2, 0x29, 0x6, 0x0, &(0x7f0000000240)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffdfc, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r4) sendmsg$NL80211_CMD_GET_WIPHY(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="59bb22bd7000000020001100000008002b01"], 0x28}}, 0x0) 891.055387ms ago: executing program 0 (id=3872): r0 = socket$kcm(0x10, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000280)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@nombcache}]}, 0x1, 0x42f, &(0x7f0000000940)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='rdma.current\x00', 0x275a, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x48041, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x78}}, 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(r2, 0xb, &(0x7f00000000c0)=[@ioring_restriction_sqe_flags_required={0x3, 0x10}, @ioring_restriction_register_op={0x0, 0x17}], 0x2) pwrite64(r2, &(0x7f0000000140)="f6", 0xffffff07, 0x8000c61) fsetxattr(r1, &(0x7f0000000000)=@known='security.selinux\x00', &(0x7f0000000080)=':\x00', 0xffdf, 0x0) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000), 0x1, 0x0, 0xfffffffffffffe10}, 0x4040) 784.598649ms ago: executing program 2 (id=3875): r0 = io_uring_setup(0xf08, &(0x7f000000c480)={0x0, 0xeb9e, 0x400, 0x20001, 0x3}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000540)=[{0x0}], 0x1) r1 = io_uring_setup(0x7623, &(0x7f0000000280)={0x0, 0x6966, 0x1, 0x3, 0x289}) io_uring_register$IORING_REGISTER_FILES(r1, 0x1e, &(0x7f0000000000)=[r0], 0x1) 767.451769ms ago: executing program 2 (id=3876): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0x2, 0xf0, 0x2, 0x80000001}, {0xe0, 0x40, 0x1, 0x100}, {0x98e, 0x0, 0x7, 0x9}, {0x0, 0x5, 0x6a, 0x61}]}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) close(0xffffffffffffffff) truncate(&(0x7f00000000c0)='./file0\x00', 0x5) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) select(0x40, &(0x7f0000000100)={0x9, 0xb2eb, 0x3, 0x5, 0x2, 0xffffffffffffffff, 0x9}, &(0x7f0000000140)={0x9, 0x8000000000000000, 0x7, 0x8, 0x9, 0x2, 0x6, 0x9}, &(0x7f0000000180)={0x8, 0x4, 0x1, 0x7fffffffffffffff, 0xb6, 0x2, 0xfff, 0x5}, &(0x7f0000000200)={r1, r2/1000+10000}) syz_open_dev$usbfs(&(0x7f0000000240), 0x5, 0x2c0002) syz_io_uring_setup(0x7d1f, &(0x7f0000000280)={0x0, 0xc151, 0x200, 0x3, 0x20e}, &(0x7f0000000300)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000380), 0x0, 0x4) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000003c0)={0x0, 0x0, 0x273, 0x2}) r5 = perf_event_open(&(0x7f0000000500)={0x0, 0x80, 0x0, 0xd7, 0x1, 0x9, 0x0, 0x7fff, 0x10010, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_bp={&(0x7f00000004c0)}, 0xc31, 0x67b, 0x444, 0x7, 0x7f, 0x1, 0x6, 0x0, 0x3, 0x0, 0x7}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x8) r6 = perf_event_open(&(0x7f0000000440)={0x0, 0x80, 0x3, 0x9, 0x0, 0x9, 0x0, 0xe9f, 0x400, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x919bb794, 0x0, @perf_bp={&(0x7f0000000400), 0x10}, 0x4008, 0x4, 0x80, 0x7, 0x80, 0x4, 0xfff7, 0x0, 0x401, 0x0, 0x5e}, 0x0, 0x3, r5, 0x3) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(0xffffffffffffffff, 0x28, 0x6, &(0x7f0000000580)={0x0, 0xea60}, 0x10) r7 = socket$netlink(0x10, 0x3, 0x9) r8 = accept4$llc(0xffffffffffffffff, &(0x7f00000005c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000600)=0x10, 0x80000) ioctl$sock_SIOCETHTOOL(r8, 0x8946, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x18, 0x22, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7f}}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0xdd96}, @ldst={0x3, 0x3, 0x6, 0xa, 0x3, 0x30}, @ldst={0x2, 0x0, 0x1, 0x2, 0x2, 0x1}, @exit, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x986}}]}, &(0x7f0000000880)='GPL\x00', 0x9, 0xcb, &(0x7f00000008c0)=""/203, 0x41100, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000009c0)={0x4, 0xa, 0x2, 0x4}, 0x10, 0x0, 0x0, 0x9, &(0x7f0000000a00)=[0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000a40)=[{0x3, 0x4, 0x1}, {0x4, 0x5, 0x3, 0x9}, {0x5, 0x3, 0x0, 0x8}, {0x1, 0x5, 0xc, 0x8}, {0x2, 0x5, 0x6}, {0x4, 0x4, 0x7, 0xa}, {0x4, 0x5, 0x10}, {0x4, 0x4, 0xf, 0xe}, {0x2, 0x5, 0xb, 0x4}], 0x10, 0xee8, @void, @value}, 0x94) r10 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000700)='rxrpc_disconnect_call\x00', r9, 0x0, 0x7}, 0x18) open_by_handle_at(r6, &(0x7f0000000c00)=@orangefs={0x14, 0x1, {"f04e4d146e36d6caaf204676c36faf9c", 0x7}}, 0x0) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000c40)) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000c80)={'vxcan0\x00'}) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r7, &(0x7f0000000d80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x2c, 0x0, 0x8, 0x101, 0x0, 0x0, {0x1, 0x0, 0x9}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x10}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xf8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000050}, 0x20000800) r11 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000dc0)='syz0\x00', 0x200002, 0x0) r12 = openat$cgroup_ro(r11, &(0x7f0000000e00)='blkio.bfq.io_service_bytes_recursive\x00', 0x0, 0x0) syz_io_uring_setup(0x7009, &(0x7f0000000e40)={0x0, 0xfcf4, 0x8000, 0x1, 0x2a8, 0x0, r12}, &(0x7f0000000ec0)=0x0, &(0x7f0000000f00)) ioctl$IOCTL_GET_NCIDEV_IDX(r12, 0x0, &(0x7f0000000f40)=0x0) syz_io_uring_submit(r13, r4, &(0x7f0000001000)=@IORING_OP_CONNECT={0x10, 0x28, 0x0, r10, 0x80, &(0x7f0000000f80)=@nfc={0x27, r14, 0x1, 0x4}}) accept$inet6(r12, &(0x7f0000001040)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000001080)=0x1c) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r10, 0xf501, 0x0) alarm(0x8000) 767.123269ms ago: executing program 3 (id=3877): r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000b5ffffffffffff", 0xc) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x40, @private1={0xfc, 0x1, '\x00', 0xa}, 0xee3e}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000002940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}}], 0x62, 0x0) 668.83503ms ago: executing program 2 (id=3878): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') getdents64(r1, &(0x7f0000002f40)=""/4094, 0x102e) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='mm_page_free\x00', r2}, 0x10) bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r3 = getpid() r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RELOAD(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="010026bd700000000001250000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008b00", @ANYRES32=r3, @ANYBLOB="9a144c1edd7ab15e6705ef3511f4820e66dc9516bcb6cc727bca1cd81ff68163d434a80e3c0cea92001f9a385fe3a1c1101db1bcc80d186adc77634eafb03a9bee35aafca3d16c6ad860ec9a9b83cd29f65f30893700177d532a2597c0e6635295353ad4ca27dcee67a64f9678e06b1634166c2770673a354cf2b6ced8af706d272bd063c2775908394900a2eab887c0a52468a9c6672734ae57b51582e2014828a51635c61a9597d29e5da6f4962105242aed7fa29795fbedeb8e26b653ded5308765bb4897295316f141a4ce80ac7a5ee91441effd0d403e5e2eaf42176a8a063cef4bbb74257ba3077d71fbb50677d4"], 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000580)=ANY=[]) 668.01458ms ago: executing program 3 (id=3879): r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) fallocate(r0, 0x0, 0x0, 0x1000f4) mkdir(&(0x7f0000000040)='.\x02\x00', 0xe88022b11028290f) r1 = perf_event_open(&(0x7f0000000040)={0x6, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x3) mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x307, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x7, 0x4, 0x400008, 0x8000, 0x0, 0x0, 0x0, 0x20000}, 0x0, 0x0, r1, 0x3) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, 0xffffffffffffffff) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd25, 0x0, {0x60, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x80000000, 0xb, 0xef39bdd396ae7deb}}}}]}, 0x40}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff4e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x4e21, @loopback}}, 0xfffffffc, 0x0, 0x400, 0x0, 0x30}, 0x9c) bind$inet6(r6, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r6, &(0x7f0000847fff)='X', 0x34000, 0xcc03, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r6, 0x2) socket$packet(0x11, 0x3, 0x300) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000400), 0xff, 0x23f, &(0x7f0000000540)="$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") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) removexattr(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)=@known='system.posix_acl_access\x00') 612.818222ms ago: executing program 2 (id=3880): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') getdents64(r1, &(0x7f0000002f40)=""/4094, 0x102e) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='mm_page_free\x00', r2}, 0x10) bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r3 = getpid() r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RELOAD(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="010026bd700000000001250000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008b00", @ANYRES32=r3, @ANYBLOB="9a144c1edd7ab15e6705ef3511f4820e66dc9516bcb6cc727bca1cd81ff68163d434a80e3c0cea92001f9a385fe3a1c1101db1bcc80d186adc77634eafb03a9bee35aafca3d16c6ad860ec9a9b83cd29f65f30893700177d532a2597c0e6635295353ad4ca27dcee67a64f9678e06b1634166c2770673a354cf2b6ced8af706d272bd063c2775908394900a2eab887c0a52468a9c6672734ae57b51582e2014828a51635c61a9597d29e5da6f4962105242aed7fa29795fbedeb8e26b653ded5308765bb4897295316f141a4ce80ac7a5ee91441effd0d403e5e2eaf42176a8a063cef4bbb74257ba3077d71fbb50677d4"], 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r5, 0x1, &(0x7f0000000580)=ANY=[@ANYBLOB="00000000ff"]) 605.290711ms ago: executing program 4 (id=3881): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001d40)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB='\b\x00'/20, @ANYRES32=0x0, @ANYRES32=0xffffffffffffffff, @ANYBLOB="020000000100000004000000000000000000000000000084a35bba5b14d076316a05703e02e6f18c6d3d57cdf170245e1d6a660cd4e9c30fbe0816a8048443f40000d8a36ae5cf6aa4845e583e3cb1ad707da045c5a706febc6e532c16a951acaa1bfc175d0dd5c67270a517c81f823e05eb93174d80"], 0x50) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001c00)=@bpf_ext={0x1c, 0x11, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32, @ANYBLOB="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"], &(0x7f0000000a00)='syzkaller\x00', 0x7d, 0x1000, &(0x7f0000000b00)=""/4096, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001b00)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001b40)={0x5, 0xa, 0x3, 0x6d1}, 0x10, 0x1680e, 0xffffffffffffffff, 0x1, &(0x7f0000001b80)=[0x1, 0x1], &(0x7f0000001bc0)=[{0x4, 0x1, 0x8, 0x2}], 0x10, 0x4, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001d00)={{r0, 0xffffffffffffffff}, &(0x7f0000000780), &(0x7f0000001cc0)=r4}, 0x20) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="16000500000000000000000001", @ANYRES32=r1, @ANYRESOCT=r2, @ANYRESDEC=r5], 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r6}, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setxattr$trusted_overlay_upper(&(0x7f0000000200)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) sync() rename(&(0x7f0000000340)='./file0/file0\x00', &(0x7f00000003c0)='./file1\x00') io_getevents(0x0, 0x1, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x13, 0x0, 0x0) r8 = getuid() syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000040)='./file2\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYRES32=r8, @ANYRESHEX=r7, @ANYRESHEX=r3], 0x1, 0x53c, &(0x7f0000002340)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000000c0)='macvlan0\x00', 0x10) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r9}, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB="291a00"/20, @ANYRES32=0x0, @ANYRES32, @ANYRESHEX=r2], 0x50) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1011, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000000000000000, 0x5}, 0x0, 0x8, 0x6, 0x8, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r10 = perf_event_open$cgroup(&(0x7f0000000300)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32514, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0, 0x1}, 0x100000, 0xbc65, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9}, 0xffffffffffffffff, 0x0, r10, 0x8) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x90020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r11, 0x2007ffc) sendfile(r11, r11, 0x0, 0x800000009) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000400000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r12}, 0x10) 564.199342ms ago: executing program 2 (id=3882): socket$nl_route(0x10, 0x3, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0xe22, 0xfffffeff, @empty, 0x4000000}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000600)={0x2, 0x4e20, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4}, 0x1c) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e26, 0x2, @remote, 0x3}, 0x1c) socket$netlink(0x10, 0x3, 0x8000000004) prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x3, &(0x7f0000000040)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x42, &(0x7f0000000080)=0x205, 0x4) setsockopt$inet6_int(r2, 0x29, 0x2, &(0x7f00000000c0)=0x4d, 0x4) getsockopt$inet6_buf(r2, 0x29, 0x6, 0x0, &(0x7f0000000240)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffdfc, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r4) sendmsg$NL80211_CMD_GET_WIPHY(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="59bb22bd7000000020001100000008002b01"], 0x28}}, 0x0) 537.831272ms ago: executing program 2 (id=3883): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0xa0e54044ef4acb5, &(0x7f0000000340)={0x11, 0xd}, 0x14) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendfile(r1, r0, 0x0, 0x7ffff000) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000510700140000000000000001b7080000000000007b8af8ff00000000b7080000fcffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000001823", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) setpriority(0x1, 0x0, 0x8) 474.917773ms ago: executing program 3 (id=3884): sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000426bd7000fcdbdf252100000009001f0070687930000000000a0001007770616e330000000a0001007770616e300000000c00050000000000000000000c0005000201aaaaaaaaaaaa0c00054a0802aaaaaaaaaaaa09001f0070687933000000000c0005000202aaaaaaaaaaaa"], 0x74}, 0x1, 0x0, 0x0, 0x81}, 0x4000000) syz_emit_ethernet(0x72, &(0x7f0000000500)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '-Z\x00', 0x3c, 0x3c, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, {[@hopopts={0x33, 0x4, '\x00', [@calipso={0x7, 0x8}, @hao={0xc9, 0x10, @mcast2}, @ra]}], {{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x5, 0x0, 0x0, 0x5, &(0x7f0000000200)={0x77359400}, 0x1, 0x8}) io_uring_enter(0xffffffffffffffff, 0x47f6, 0x0, 0x0, 0x0, 0x0) 429.031664ms ago: executing program 0 (id=3885): r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) fallocate(r0, 0x0, 0x0, 0x1000f4) mkdir(&(0x7f0000000040)='.\x02\x00', 0xe88022b11028290f) r1 = perf_event_open(&(0x7f0000000040)={0x6, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x3) mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x307, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x7, 0x4, 0x400008, 0x8000, 0x0, 0x0, 0x0, 0x20000}, 0x0, 0x0, r1, 0x3) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, 0xffffffffffffffff) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd25, 0x0, {0x60, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x80000000, 0xb, 0xef39bdd396ae7deb}}}}]}, 0x40}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff4e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x4e21, @loopback}}, 0xfffffffc, 0x0, 0x400, 0x0, 0x30}, 0x9c) bind$inet6(r6, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r6, &(0x7f0000847fff)='X', 0x34000, 0xcc03, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r6, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000400), 0xff, 0x23f, &(0x7f0000000540)="$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") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) removexattr(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)=@known='system.posix_acl_access\x00') 368.664195ms ago: executing program 3 (id=3886): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000118110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014002000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket(0x11, 0x3, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x84, &(0x7f0000000440)={0x0, @in6={{0xa, 0x4e27, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x10000}}}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r1}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x50) r3 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x590, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xa5d4}, 0xd1ce, 0x0, 0x0, 0x1, 0x8, 0x2, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r3) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010326bd6000000000002d9300000c000180080001"], 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x20040814) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x19, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x66, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r5}, 0x10) r6 = io_uring_setup(0xf08, &(0x7f000000c480)={0x0, 0xeb9e, 0x400, 0x20001, 0x3}) io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f0000000540)=[{0x0}], 0x1) r7 = io_uring_setup(0x7623, &(0x7f0000000280)={0x0, 0x6966, 0x1, 0x3, 0x289}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'lo\x00'}) io_uring_register$IORING_REGISTER_FILES(r7, 0x1e, &(0x7f0000000000)=[r6], 0x1) 360.524215ms ago: executing program 4 (id=3887): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000500)='kfree\x00', r0, 0x0, 0x2}, 0x18) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x2710, @my=0x0}, 0x10) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x18c9f, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0xf5, 0x30a, &(0x7f0000000480)="$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") seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000580)={0x1, &(0x7f0000000140)=[{0x6, 0x8, 0x0, 0x7fff0000}]}) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000140)='./file0\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1adc51, 0x0) mount$tmpfs(0x0, &(0x7f0000000400)='./file0/../file0\x00', &(0x7f00000001c0), 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) 314.968886ms ago: executing program 1 (id=3888): r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r1 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22, 0xfffffffe, @mcast1, 0x36c}, 0x1c) socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_GET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x3f8, 0x100, 0x70bd28, 0x7}, 0x6d}, 0x1, 0x0, 0x0, 0x4000040}, 0xc000) listen(r1, 0x3) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000001441ee5ad612643636000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00'/28], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xf, 0xf, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x129, @void, @value}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r3}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000004c0)={{r5, 0xffffffffffffffff}, &(0x7f00000003c0), &(0x7f0000000400)='%ps \x00'}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="4fa65c75b1af08d145b23891b939b19c76825a768c574760fa83e3ada70667abf675511e59dc5ea988f9615c6c14f33473e7d5d40c4e1f26c44254a08f4acc9c89095f871b25e83cd78efff09eab990728ca1b095b5a54a0e6e637142912d914697ef48ab27013036e67c74e97683a87cd175a9cd3a59a585467000000f2c3cf6efc18634f6ba6", @ANYBLOB="bca7192881cda4627d99d673c716d6fa34062e46204a33e67cb7e72ff434e901f853d864a8073450f9c4b86e6c1e815fe336209db1e42f2d284df788f5c262e4c8d1db195b9b6f257a57595132b92efc840c0f10", @ANYRESDEC=r4, @ANYBLOB="2177a1a3ecce909178b41cfb7e5cd9f2c699a9010008da7970b06d1b080e034aba3333962466c25bfe95478469ccf68afc91fddecbe3a891d8b82fc4e368db091228bc7f274afe29b7a750945526821f90b8e8b9399a06399a9389a5e418aa71399ca672e254b1d79754ef411ebc8989db9e8c89188bd555e48616f05be7e9d9b588b44f1c7499ca9ef1a123081aecb10de2f2d119a5aa3191f4f2720b787b915a1ac7a985cd8a38f6e25abf0e04329de183cba018c53213b5d7d179e7", @ANYRES64=r7, @ANYRESHEX=r2, @ANYRES8=r1, @ANYRESDEC=r7, @ANYRES8=r3], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4e, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10) r9 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x458, 0x258, 0x4c, 0x232, 0x258, 0x0, 0x388, 0x2e8, 0x2e8, 0x388, 0x2e8, 0x3, 0x0, {[{{@ipv6={@mcast2, @mcast2, [], [], 'veth1_to_bond\x00', 'ip6gre0\x00', {}, {}, 0x6, 0x0, 0x3}, 0x0, 0x230, 0x258, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@inet=@policy={{0x158}, {[{@ipv4=@dev, [], @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@ipv4, [], @ipv4=@broadcast}, {@ipv4=@multicast2, [], @ipv4=@dev}, {@ipv6=@loopback, [], @ipv6=@private2}], 0x1}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @remote}, @private1, [], [], 'team_slave_0\x00', 'xfrm0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r10, 0x4004743d, 0x110e22fff6) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRES8=r6], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r11}, 0x10) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') r12 = syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0x114df, 0x0, 0x1, 0x87}, &(0x7f00000003c0), &(0x7f0000000200)) io_uring_enter(r12, 0x3516, 0xaddf, 0x2, 0x0, 0x1517f) 303.816676ms ago: executing program 4 (id=3889): r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000b5ffffffffffffffff2e2be82d", 0x12) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x40, @private1={0xfc, 0x1, '\x00', 0xa}, 0xee3e}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000002940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}}], 0x62, 0x0) 277.831086ms ago: executing program 0 (id=3890): openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x58900, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x4, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="660a00000600000061115f0000000000850000001e00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0xb6e1}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x200}}}, 0x108) socket(0x400000000010, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="14000000f958a4b800000000000000000000000a4da8ee3c030a01040000000000000000010000000900030073797a30000000000900010073797a3100000000140000001100010000000000000000000000000a"], 0x54}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16, @ANYBLOB="000327bd7037fddbdf250700000014002000fc02000000000000000000000000000005002100"], 0x30}, 0x1, 0x0, 0x0, 0x40880}, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setresuid(0x0, 0xee00, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') 273.372016ms ago: executing program 1 (id=3891): creat(&(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x100) symlink(&(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffd59}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x2d) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000040)={{{@in=@rand_addr=0x64010100, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e23, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x1, 0x0, 0x0, 0x5, 0xfffffffffffffffa}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x3c}, 0xa, @in6=@ipv4={'\x00', '\xff\xff', @local}, 0x3507, 0x4}}, 0xe8) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newtfilter={0x70, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xfff3, 0x7}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x40, 0x2, [@TCA_CGROUP_EMATCHES={0x3c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x2c, 0x1, 0x0, 0x0, {{0xe37, 0x9, 0x4}, [@TCA_EM_IPT_MATCH_DATA={0x4}, @TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xa}]}}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x40010) 214.422547ms ago: executing program 4 (id=3892): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001d40)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB='\b\x00'/20, @ANYRES32=0x0, @ANYRES32=0xffffffffffffffff, @ANYBLOB="020000000100000004000000000000000000000000000084a35bba5b14d076316a05703e02e6f18c6d3d57cdf170245e1d6a660cd4e9c30fbe0816a8048443f40000d8a36ae5cf6aa4845e583e3cb1ad707da045c5a706febc6e532c16a951acaa1bfc175d0dd5c67270a517c81f823e05eb93174d80"], 0x50) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001c00)=@bpf_ext={0x1c, 0x11, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32, @ANYBLOB="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"], &(0x7f0000000a00)='syzkaller\x00', 0x7d, 0x1000, &(0x7f0000000b00)=""/4096, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001b00)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001b40)={0x5, 0xa, 0x3, 0x6d1}, 0x10, 0x1680e, 0xffffffffffffffff, 0x1, &(0x7f0000001b80)=[0x1, 0x1], &(0x7f0000001bc0)=[{0x4, 0x1, 0x8, 0x2}], 0x10, 0x4, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001d00)={{r0, 0xffffffffffffffff}, &(0x7f0000000780), &(0x7f0000001cc0)=r4}, 0x20) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="16000500000000000000000001", @ANYRES32=r1, @ANYRESOCT=r2, @ANYRESDEC=r5], 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r6}, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setxattr$trusted_overlay_upper(&(0x7f0000000200)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) sync() rename(&(0x7f0000000340)='./file0/file0\x00', &(0x7f00000003c0)='./file1\x00') io_getevents(0x0, 0x1, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x13, 0x0, 0x0) r8 = getuid() syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000040)='./file2\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYRES32=r8, @ANYRESHEX=r7, @ANYRESHEX=r3], 0x1, 0x53c, &(0x7f0000002340)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000000c0)='macvlan0\x00', 0x10) r9 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r9}, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB="291a00"/20, @ANYRES32=0x0, @ANYRES32, @ANYRESHEX=r2], 0x50) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1011, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000000000000000, 0x5}, 0x0, 0x8, 0x6, 0x8, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r10 = perf_event_open$cgroup(&(0x7f0000000300)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32514, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0, 0x1}, 0x100000, 0xbc65, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9}, 0xffffffffffffffff, 0x0, r10, 0x8) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x90020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r11, 0x2007ffc) sendfile(r11, r11, 0x0, 0x800000009) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000400000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r12}, 0x10) 151.100428ms ago: executing program 3 (id=3893): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') getdents64(r1, &(0x7f0000002f40)=""/4094, 0x102e) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='mm_page_free\x00', r2}, 0x10) bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r3 = getpid() r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RELOAD(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="010026bd700000000001250000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008b00", @ANYRES32=r3, @ANYBLOB="9a144c1edd7ab15e6705ef3511f4820e66dc9516bcb6cc727bca1cd81ff68163d434a80e3c0cea92001f9a385fe3a1c1101db1bcc80d186adc77634eafb03a9bee35aafca3d16c6ad860ec9a9b83cd29f65f30893700177d532a2597c0e6635295353ad4ca27dcee67a64f9678e06b1634166c2770673a354cf2b6ced8af706d272bd063c2775908394900a2eab887c0a52468a9c6672734ae57b51582e2014828a51635c61a9597d29e5da6f4962105242aed7fa29795fbedeb8e26b653ded5308765bb4897295316f141a4ce80ac7a5ee91441effd0d403e5e2eaf42176a8a063cef4bbb74257ba3077d71fbb50677d4"], 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r5, 0x1, &(0x7f0000000580)=ANY=[@ANYBLOB="00000000ff0f00"]) 60.720929ms ago: executing program 0 (id=3894): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$pppoe(0x18, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0xfffffffffffffffa}, 0x18) openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) socket$netlink(0x10, 0x3, 0xb) socket$tipc(0x1e, 0x2, 0x0) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) openat$cgroup_subtree(r3, &(0x7f0000000100), 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r5], 0x90}}, 0x0) 6.14255ms ago: executing program 3 (id=3895): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001d40)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB='\b\x00'/20, @ANYRES32=0x0, @ANYRES32=0xffffffffffffffff, @ANYBLOB="020000000100000004000000000000000000000000000084a35bba5b14d076316a05703e02e6f18c6d3d57cdf170245e1d6a660cd4e9c30fbe0816a8048443f40000d8a36ae5cf6aa4845e583e3cb1ad707da045c5a706febc6e532c16a951acaa1bfc175d0dd5c67270a517c81f823e05eb93174d80"], 0x50) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001c00)=@bpf_ext={0x1c, 0x11, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32, @ANYBLOB="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"], &(0x7f0000000a00)='syzkaller\x00', 0x7d, 0x1000, &(0x7f0000000b00)=""/4096, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001b00)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001b40)={0x5, 0xa, 0x3, 0x6d1}, 0x10, 0x1680e, 0xffffffffffffffff, 0x1, &(0x7f0000001b80)=[0x1, 0x1], &(0x7f0000001bc0)=[{0x4, 0x1, 0x8, 0x2}], 0x10, 0x4, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001d00)={{r0, 0xffffffffffffffff}, &(0x7f0000000780), &(0x7f0000001cc0)=r3}, 0x20) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="16000500000000000000000001", @ANYRESOCT=r1, @ANYRESDEC=r4], 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r5}, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setxattr$trusted_overlay_upper(&(0x7f0000000200)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) sync() rename(&(0x7f0000000340)='./file0/file0\x00', &(0x7f00000003c0)='./file1\x00') io_getevents(0x0, 0x1, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x13, 0x0, 0x0) r7 = getuid() syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000040)='./file2\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYRES32=r7, @ANYRESHEX=r6, @ANYRESHEX=r2], 0x1, 0x53c, &(0x7f0000002340)="$eJzs1L9u01AUB+DTNGkDU2bEcCUWpqqwMRGEUqkiEhIoA0xEalhihJQsTqY+Ag/AxFMx8BAoUzajyumfVB1ru7Tft/jo/q597j2Dvzz9Nj35Pv/6+8fP6PZ3otWPR631TvSiFedOAwC4T9ZF8atTlkXTZwEA6rEuivhblC5XWxH7TZ4KAKjSx0+f370ZDgcfUupGrE7zUT4qn2V+dDwcHKYze1feWuX5aPcif5FK23knHm/ylzfme/H8WZmfZW/fD6/l+3FS+e0BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBhO0ipHREppdS7XF3l+Wi3zA/SuWt5WR0dDweHmw3beTuetGu7BgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHAL5ovldJxlk9k9KyL+RK1NWxcj3Yo6UXX3/qbtjXu6m7C2yUevyhavr6y045a+/KrO+fw/RSO/IwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4A6YL5bTcZZNZvOmTwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3BXzxXI6zrLJrMKi6TsCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAzfgXAAD//6tSITk=") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r8}, 0x10) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1011, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000000000000000, 0x5}, 0x0, 0x8, 0x6, 0x8, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r9 = perf_event_open$cgroup(&(0x7f0000000300)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32514, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0, 0x1}, 0x100000, 0xbc65, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9}, 0xffffffffffffffff, 0x0, r9, 0x8) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x90020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r10 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r10, 0x2007ffc) sendfile(r10, r10, 0x0, 0x800000009) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) 0s ago: executing program 0 (id=3896): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) kernel console output (not intermixed with test programs): t_free: invalid cluster chain (i_pos 194) [ 366.219625][T29804] program syz.2.3302 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 366.254884][T29813] loop4: detected capacity change from 0 to 2048 [ 366.279024][T29815] loop1: detected capacity change from 0 to 512 [ 366.308313][T29808] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 194) [ 366.317572][T29808] FAT-fs (loop4): Filesystem has been set read-only [ 366.319169][T29815] EXT4-fs (loop1): 1 orphan inode deleted [ 366.332603][T29815] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 366.346003][T29808] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 194) [ 366.365097][T29808] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 194) [ 366.409434][T29822] loop2: detected capacity change from 0 to 1024 [ 366.416665][T29822] EXT4-fs: Ignoring removed orlov option [ 366.445455][T29825] Cannot find add_set index 0 as target [ 366.608481][T29827] loop1: detected capacity change from 0 to 8192 [ 366.618228][T29834] loop3: detected capacity change from 0 to 2048 [ 366.636555][T29834] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 194) [ 366.646035][T29834] FAT-fs (loop3): Filesystem has been set read-only [ 366.653469][T29834] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 194) [ 366.662487][T29834] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 194) [ 366.792638][T29840] loop3: detected capacity change from 0 to 1024 [ 366.799705][T29840] EXT4-fs: Ignoring removed orlov option [ 366.864269][T29827] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 366.872091][T29827] FAT-fs (loop1): Filesystem has been set read-only [ 366.885700][T29838] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 367.005161][T29846] loop1: detected capacity change from 0 to 2048 [ 367.015158][T29846] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 194) [ 367.024933][T29846] FAT-fs (loop1): Filesystem has been set read-only [ 367.031765][T29846] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 194) [ 367.040690][T29846] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 194) [ 367.192737][T29850] loop1: detected capacity change from 0 to 512 [ 367.220674][T29850] EXT4-fs (loop1): 1 orphan inode deleted [ 367.231247][ T31] EXT4-fs error (device loop1): ext4_release_dquot:6971: comm kworker/u8:1: Failed to release dquot type 1 [ 367.246654][T29850] ext4 filesystem being mounted at /14/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 367.271440][T29856] Cannot find add_set index 0 as target [ 367.453991][T29865] vhci_hcd: invalid port number 65 [ 367.459283][T29865] vhci_hcd: invalid port number 65 [ 367.534038][T29868] loop2: detected capacity change from 0 to 2048 [ 367.560600][T29868] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 194) [ 367.569662][T29868] FAT-fs (loop2): Filesystem has been set read-only [ 367.580962][T29868] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 194) [ 367.589267][T29868] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 194) [ 367.735498][T29872] lo speed is unknown, defaulting to 1000 [ 367.753998][T29879] loop2: detected capacity change from 0 to 164 [ 367.762021][T29879] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 367.775202][T29879] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 367.790687][T29879] Symlink component flag not implemented [ 367.797104][T29879] Symlink component flag not implemented [ 367.818405][T29879] Symlink component flag not implemented (7) [ 367.824565][T29879] Symlink component flag not implemented (116) [ 367.849039][T29882] __nla_validate_parse: 11 callbacks suppressed [ 367.849060][T29882] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3329'. [ 367.907653][T29886] loop4: detected capacity change from 0 to 1024 [ 367.936836][T29886] EXT4-fs: Ignoring removed orlov option [ 367.956792][T29891] loop3: detected capacity change from 0 to 512 [ 367.976162][T29894] loop2: detected capacity change from 0 to 2048 [ 368.009134][T29891] EXT4-fs (loop3): 1 orphan inode deleted [ 368.021805][ T51] EXT4-fs error (device loop3): ext4_release_dquot:6971: comm kworker/u8:3: Failed to release dquot type 1 [ 368.033559][T29891] ext4 filesystem being mounted at /23/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 368.107170][T29872] netlink: 'syz.1.3328': attribute type 2 has an invalid length. [ 368.115063][T29872] netlink: 'syz.1.3328': attribute type 1 has an invalid length. [ 368.158362][T29908] vhci_hcd: invalid port number 65 [ 368.163584][T29908] vhci_hcd: invalid port number 65 [ 368.369471][T29917] loop1: detected capacity change from 0 to 2048 [ 368.385247][T29921] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3343'. [ 368.402676][T29914] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 194) [ 368.405153][T29923] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3344'. [ 368.412111][T29914] FAT-fs (loop1): Filesystem has been set read-only [ 368.418385][T29914] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 194) [ 368.429214][T29923] loop0: detected capacity change from 0 to 1024 [ 368.443821][T29914] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 194) [ 368.453310][T29923] EXT4-fs: Ignoring removed oldalloc option [ 368.459714][T29923] EXT4-fs: Ignoring removed bh option [ 368.492454][T29923] EXT4-fs (loop0): can't mount with data_err=abort, fs mounted w/o journal [ 368.548627][T29930] loop3: detected capacity change from 0 to 512 [ 368.561881][T29928] loop1: detected capacity change from 0 to 164 [ 368.574007][T29928] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 368.583745][T29932] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3348'. [ 368.593914][T29932] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3348'. [ 368.595266][T29928] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 368.613590][T29930] EXT4-fs (loop3): 1 orphan inode deleted [ 368.620360][T29930] ext4 filesystem being mounted at /28/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 368.623202][T29932] vhci_hcd: invalid port number 65 [ 368.633878][T29928] Symlink component flag not implemented [ 368.636054][T29932] vhci_hcd: invalid port number 65 [ 368.647015][T29928] Symlink component flag not implemented [ 368.653241][ T59] EXT4-fs error (device loop3): ext4_release_dquot:6971: comm kworker/u8:4: Failed to release dquot type 1 [ 368.655209][T29928] Symlink component flag not implemented (7) [ 368.671199][T29928] Symlink component flag not implemented (116) [ 368.712366][T29936] vhci_hcd: invalid port number 65 [ 368.717564][T29936] vhci_hcd: invalid port number 65 [ 368.723266][T29928] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3346'. [ 368.764228][T29928] team0 (unregistering): Port device team_slave_0 removed [ 368.806538][T29928] team0 (unregistering): Port device team_slave_1 removed [ 368.830029][T29945] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3352'. [ 368.830779][T29938] lo speed is unknown, defaulting to 1000 [ 368.839158][T29945] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3352'. [ 368.965698][T29953] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3356'. [ 369.028738][T29954] loop2: detected capacity change from 0 to 164 [ 369.038580][T29954] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 369.054379][T29954] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 369.072165][T29954] Symlink component flag not implemented [ 369.077884][T29954] Symlink component flag not implemented [ 369.090333][T29954] Symlink component flag not implemented (7) [ 369.097662][T29954] Symlink component flag not implemented (116) [ 369.105358][T29964] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3355'. [ 369.128039][T29963] bond1: entered promiscuous mode [ 369.133231][T29963] bond1: entered allmulticast mode [ 369.163871][T29963] 8021q: adding VLAN 0 to HW filter on device bond1 [ 369.182215][T29963] bond1 (unregistering): Released all slaves [ 369.251104][T29972] loop2: detected capacity change from 0 to 512 [ 369.263422][T29943] netlink: 'syz.3.3350': attribute type 2 has an invalid length. [ 369.271717][T29943] netlink: 'syz.3.3350': attribute type 1 has an invalid length. [ 369.330357][T29975] vhci_hcd: invalid port number 65 [ 369.335979][T29975] vhci_hcd: invalid port number 65 [ 369.352506][T29972] EXT4-fs (loop2): 1 orphan inode deleted [ 369.359130][T29972] ext4 filesystem being mounted at /76/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 369.376588][ T289] EXT4-fs error (device loop2): ext4_release_dquot:6971: comm kworker/u8:6: Failed to release dquot type 1 [ 369.459568][T29981] loop3: detected capacity change from 0 to 2048 [ 369.486784][T29981] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 194) [ 369.495841][T29981] FAT-fs (loop3): Filesystem has been set read-only [ 369.497763][T29987] loop2: detected capacity change from 0 to 164 [ 369.509842][T29987] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 369.511246][T29981] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 194) [ 369.524199][T29987] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 369.536599][T29987] Symlink component flag not implemented [ 369.542961][T29987] Symlink component flag not implemented [ 369.549033][T29987] Symlink component flag not implemented (7) [ 369.551094][T29981] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 194) [ 369.555117][T29987] Symlink component flag not implemented (116) [ 369.592291][ T29] kauditd_printk_skb: 717 callbacks suppressed [ 369.592348][ T29] audit: type=1326 audit(1747429836.842:33369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29991 comm="syz.0.3365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5f4ade969 code=0x7ffc0000 [ 369.625434][ T29] audit: type=1326 audit(1747429836.872:33370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29991 comm="syz.0.3365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd5f4ade969 code=0x7ffc0000 [ 369.649310][ T29] audit: type=1326 audit(1747429836.872:33371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29991 comm="syz.0.3365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5f4ade969 code=0x7ffc0000 [ 369.673267][ T29] audit: type=1326 audit(1747429836.872:33372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29991 comm="syz.0.3365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd5f4ae0887 code=0x7ffc0000 [ 369.697168][ T29] audit: type=1326 audit(1747429836.872:33373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29991 comm="syz.0.3365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fd5f4ae07fc code=0x7ffc0000 [ 369.721175][ T29] audit: type=1326 audit(1747429836.872:33374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29991 comm="syz.0.3365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fd5f4ae0734 code=0x7ffc0000 [ 369.745480][ T29] audit: type=1326 audit(1747429836.872:33375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29991 comm="syz.0.3365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fd5f4add5ca code=0x7ffc0000 [ 369.768944][ T29] audit: type=1326 audit(1747429836.872:33376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29991 comm="syz.0.3365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5f4ade969 code=0x7ffc0000 [ 369.778621][T29996] tc_dump_action: action bad kind [ 369.792891][ T29] audit: type=1326 audit(1747429836.872:33377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29991 comm="syz.0.3365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fd5f4ade969 code=0x7ffc0000 [ 369.822701][ T29] audit: type=1326 audit(1747429836.872:33378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29991 comm="syz.0.3365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5f4ade969 code=0x7ffc0000 [ 369.887867][T29998] bond1: entered promiscuous mode [ 369.893014][T29998] bond1: entered allmulticast mode [ 369.905610][T29998] 8021q: adding VLAN 0 to HW filter on device bond1 [ 369.905923][T30004] loop3: detected capacity change from 0 to 164 [ 369.919597][T30004] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 369.922208][T29998] bond1 (unregistering): Released all slaves [ 369.929811][T30004] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 369.943038][T30004] Symlink component flag not implemented [ 369.948763][T30004] Symlink component flag not implemented [ 369.954825][T30004] Symlink component flag not implemented (7) [ 369.960891][T30004] Symlink component flag not implemented (116) [ 369.979510][T30004] team0 (unregistering): Port device team_slave_0 removed [ 369.994272][T30004] team0 (unregistering): Port device team_slave_1 removed [ 369.997722][T30006] infiniband syz!: set down [ 370.006401][T30006] infiniband syz!: added team_slave_0 [ 370.017734][T30006] RDS/IB: syz!: added [ 370.021992][T30006] smc: adding ib device syz! with port count 1 [ 370.028377][T30006] smc: ib device syz! port 1 has pnetid [ 370.079118][T30013] vhci_hcd: invalid port number 65 [ 370.084445][T30013] vhci_hcd: invalid port number 65 [ 370.177106][T30017] loop3: detected capacity change from 0 to 2048 [ 370.190295][T30017] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 194) [ 370.199270][T30017] FAT-fs (loop3): Filesystem has been set read-only [ 370.207799][T30017] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 194) [ 370.216051][T30017] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 194) [ 370.300155][T30021] vhci_hcd: invalid port number 65 [ 370.305457][T30021] vhci_hcd: invalid port number 65 [ 370.679105][T30033] loop1: detected capacity change from 0 to 1024 [ 370.686045][T30033] EXT4-fs: Ignoring removed oldalloc option [ 370.692464][T30033] EXT4-fs: Ignoring removed bh option [ 370.701556][T30033] EXT4-fs (loop1): can't mount with data_err=abort, fs mounted w/o journal [ 370.797293][T30039] Cannot find add_set index 0 as target [ 370.807509][T30042] vhci_hcd: invalid port number 65 [ 370.812844][T30036] loop1: detected capacity change from 0 to 164 [ 370.819361][T30042] vhci_hcd: invalid port number 65 [ 370.819866][T30036] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 370.857587][T30036] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 370.867600][T30036] Symlink component flag not implemented [ 370.873718][T30036] Symlink component flag not implemented [ 370.881500][T30036] Symlink component flag not implemented (7) [ 370.888332][T30036] Symlink component flag not implemented (116) [ 370.923124][T30046] loop3: detected capacity change from 0 to 2048 [ 370.938777][T30050] vhci_hcd: invalid port number 65 [ 370.943998][T30050] vhci_hcd: invalid port number 65 [ 370.997567][T30055] program syz.3.3391 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 371.042258][T30061] bond1: entered promiscuous mode [ 371.048231][T30061] bond1: entered allmulticast mode [ 371.054726][T30061] 8021q: adding VLAN 0 to HW filter on device bond1 [ 371.065952][T30061] bond1 (unregistering): Released all slaves [ 371.068938][T30058] loop1: detected capacity change from 0 to 2048 [ 371.087932][T30058] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 194) [ 371.098046][T30058] FAT-fs (loop1): Filesystem has been set read-only [ 371.105519][T30058] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 194) [ 371.114210][T30058] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 194) [ 371.119192][T30061] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 371.145709][T30066] loop3: detected capacity change from 0 to 1024 [ 371.154264][T30066] EXT4-fs: Ignoring removed oldalloc option [ 371.161046][T30066] EXT4-fs: Ignoring removed bh option [ 371.180053][T30068] loop4: detected capacity change from 0 to 164 [ 371.187853][T30066] EXT4-fs (loop3): can't mount with data_err=abort, fs mounted w/o journal [ 371.199291][T30068] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 371.215681][T30068] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 371.225305][T30068] Symlink component flag not implemented [ 371.231256][T30068] Symlink component flag not implemented [ 371.239353][T30068] Symlink component flag not implemented (7) [ 371.245940][T30068] Symlink component flag not implemented (116) [ 371.275641][T30078] Cannot find add_set index 0 as target [ 371.279274][T30075] bond1: entered promiscuous mode [ 371.287283][T30075] bond1: entered allmulticast mode [ 371.293045][T30075] 8021q: adding VLAN 0 to HW filter on device bond1 [ 371.304542][T30075] bond1 (unregistering): Released all slaves [ 371.317475][T30082] loop4: detected capacity change from 0 to 512 [ 371.334757][T30083] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 371.346787][T30082] EXT4-fs (loop4): 1 orphan inode deleted [ 371.348698][T30087] Cannot find add_set index 0 as target [ 371.354721][T30082] ext4 filesystem being mounted at /60/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 371.369612][ T289] EXT4-fs error (device loop4): ext4_release_dquot:6971: comm kworker/u8:6: Failed to release dquot type 1 [ 371.423013][T30090] loop2: detected capacity change from 0 to 128 [ 371.443299][T30090] ext4 filesystem being mounted at /83/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 371.483344][T30095] loop4: detected capacity change from 0 to 2048 [ 371.505580][T30095] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 194) [ 371.514732][T30095] FAT-fs (loop4): Filesystem has been set read-only [ 371.522815][T30097] program syz.2.3405 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 371.525788][T30095] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 194) [ 371.542298][T30095] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 194) [ 371.582826][T30100] loop2: detected capacity change from 0 to 1024 [ 371.591146][T30100] EXT4-fs: Ignoring removed orlov option [ 371.635022][T30103] loop3: detected capacity change from 0 to 2048 [ 371.662499][T30103] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 194) [ 371.671398][T30103] FAT-fs (loop3): Filesystem has been set read-only [ 371.679737][T30103] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 194) [ 371.688241][T30103] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 194) [ 371.747949][T30112] loop0: detected capacity change from 0 to 1024 [ 371.775098][T30112] ext4 filesystem being mounted at /109/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 371.795892][T30112] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm +}[@: bg 0: block 393: padding at end of block bitmap is not set [ 371.812304][T30112] EXT4-fs (loop0): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 186 with error 117 [ 371.825146][T30112] EXT4-fs (loop0): This should not happen!! Data will be lost [ 371.825146][T30112] [ 371.880530][T30112] siw: device registration error -23 [ 371.915997][T30120] tc_dump_action: action bad kind [ 372.147949][T30123] loop0: detected capacity change from 0 to 1024 [ 372.224934][T30123] EXT4-fs: Ignoring removed orlov option [ 372.254261][T30125] vhci_hcd: invalid port number 65 [ 372.259541][T30125] vhci_hcd: invalid port number 65 [ 372.808726][T30131] loop1: detected capacity change from 0 to 8192 [ 372.913229][T30138] __nla_validate_parse: 16 callbacks suppressed [ 372.913248][T30138] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3419'. [ 373.084650][T25139] EXT4-fs unmount: 68 callbacks suppressed [ 373.084668][T25139] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 373.137024][T30149] loop0: detected capacity change from 0 to 1024 [ 373.144983][T30149] EXT4-fs: Ignoring removed orlov option [ 373.155107][T30149] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 373.209543][T30131] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 373.217194][T30131] FAT-fs (loop1): Filesystem has been set read-only [ 373.247070][T30153] loop2: detected capacity change from 0 to 2048 [ 373.254456][T30153] msdos: Unknown parameter '0xffffffffffffffff0xffffffffffffffff' [ 373.265965][T30145] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 373.910504][T30157] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3425'. [ 374.013807][T30162] bond1: entered promiscuous mode [ 374.018920][T30162] bond1: entered allmulticast mode [ 374.030943][T30162] 8021q: adding VLAN 0 to HW filter on device bond1 [ 374.043393][T30162] bond1 (unregistering): Released all slaves [ 374.074274][T30165] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 374.175601][T30169] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3428'. [ 374.187968][T30167] loop2: detected capacity change from 0 to 1024 [ 374.205198][T30167] EXT4-fs: Ignoring removed orlov option [ 374.223599][T25139] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 374.229588][T30167] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 374.272626][T30176] bond1: entered promiscuous mode [ 374.277835][T30176] bond1: entered allmulticast mode [ 374.283558][T30176] 8021q: adding VLAN 0 to HW filter on device bond1 [ 374.301778][T30176] bond1 (unregistering): Released all slaves [ 374.321160][T30182] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3432'. [ 374.342533][T30178] loop4: detected capacity change from 0 to 2048 [ 374.388852][T30176] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 374.398884][T30173] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 194) [ 374.407757][T30173] FAT-fs (loop4): Filesystem has been set read-only [ 374.442459][T30173] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 194) [ 374.452890][T30173] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 194) [ 374.478030][T30187] loop0: detected capacity change from 0 to 512 [ 374.493493][T30187] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 374.506185][T30187] EXT4-fs (loop0): 1 truncate cleaned up [ 374.514692][T30187] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 374.543512][T30192] loop4: detected capacity change from 0 to 512 [ 374.552703][T30192] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 374.578233][T30192] EXT4-fs (loop4): 1 truncate cleaned up [ 374.595168][T30192] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 374.613130][ T29] kauditd_printk_skb: 1437 callbacks suppressed [ 374.613150][ T29] audit: type=1326 audit(1747429841.852:34815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30159 comm="syz.1.3424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f16d0e95927 code=0x7ffc0000 [ 374.643357][ T29] audit: type=1326 audit(1747429841.852:34816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30159 comm="syz.1.3424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f16d0e3ab39 code=0x7ffc0000 [ 374.667109][ T29] audit: type=1326 audit(1747429841.852:34817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30159 comm="syz.1.3424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7f16d0e9e969 code=0x7ffc0000 [ 374.714046][T30197] loop3: detected capacity change from 0 to 512 [ 374.720533][T25139] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 374.764496][ T29] audit: type=1326 audit(1747429841.972:34818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30159 comm="syz.1.3424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f16d0e95927 code=0x7ffc0000 [ 374.764840][T30197] EXT4-fs (loop3): 1 orphan inode deleted [ 374.789914][ T29] audit: type=1326 audit(1747429841.972:34819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30159 comm="syz.1.3424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f16d0e3ab39 code=0x7ffc0000 [ 374.813204][T30197] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 374.819027][ T29] audit: type=1326 audit(1747429841.972:34820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30159 comm="syz.1.3424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7f16d0e9e969 code=0x7ffc0000 [ 374.855114][ T29] audit: type=1326 audit(1747429841.982:34821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30159 comm="syz.1.3424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f16d0e95927 code=0x7ffc0000 [ 374.878837][ T29] audit: type=1326 audit(1747429841.982:34822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30159 comm="syz.1.3424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f16d0e3ab39 code=0x7ffc0000 [ 374.883586][T30197] ext4 filesystem being mounted at /52/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 374.902588][ T29] audit: type=1326 audit(1747429841.982:34823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30159 comm="syz.1.3424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7f16d0e9e969 code=0x7ffc0000 [ 374.902633][ T29] audit: type=1326 audit(1747429841.992:34824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30159 comm="syz.1.3424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f16d0e95927 code=0x7ffc0000 [ 374.960321][ T12] EXT4-fs error (device loop3): ext4_release_dquot:6971: comm kworker/u8:0: Failed to release dquot type 1 [ 374.981198][T30203] tc_dump_action: action bad kind [ 375.005636][T28242] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 375.015611][T29023] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 375.050284][T26862] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 375.077114][T30212] Cannot find add_set index 0 as target [ 375.095496][T30218] loop0: detected capacity change from 0 to 2048 [ 375.102214][T30211] loop1: detected capacity change from 0 to 164 [ 375.110029][T30211] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 375.119671][T30211] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 375.131809][T30211] Symlink component flag not implemented [ 375.137496][T30211] Symlink component flag not implemented [ 375.146550][T30207] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 194) [ 375.155470][T30207] FAT-fs (loop0): Filesystem has been set read-only [ 375.167530][T30211] Symlink component flag not implemented (7) [ 375.173612][T30211] Symlink component flag not implemented (116) [ 375.174877][T30220] loop4: detected capacity change from 0 to 1024 [ 375.188122][T30207] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 194) [ 375.190338][T30220] EXT4-fs: Ignoring removed orlov option [ 375.201492][T30222] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3444'. [ 375.202559][T30207] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 194) [ 375.233963][T30220] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 375.275891][T30227] loop1: detected capacity change from 0 to 512 [ 375.283110][T30227] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 375.303501][T30227] EXT4-fs (loop1): 1 truncate cleaned up [ 375.309724][T30227] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 375.317265][T30225] bond1: entered promiscuous mode [ 375.327381][T30225] bond1: entered allmulticast mode [ 375.470983][T30225] 8021q: adding VLAN 0 to HW filter on device bond1 [ 375.502195][T30225] bond1 (unregistering): Released all slaves [ 375.508441][T30231] syz!: rxe_newlink: already configured on team_slave_0 [ 375.662503][T29462] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 375.666234][T30239] loop0: detected capacity change from 0 to 2048 [ 375.692455][T30239] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 194) [ 375.701381][T30239] FAT-fs (loop0): Filesystem has been set read-only [ 375.746727][T30239] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 194) [ 375.755874][T30241] loop2: detected capacity change from 0 to 512 [ 375.785424][T30239] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 194) [ 375.804150][T30241] EXT4-fs (loop2): 1 orphan inode deleted [ 375.816294][T30241] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 375.844001][T30248] tc_dump_action: action bad kind [ 375.851085][ T289] EXT4-fs error (device loop2): ext4_release_dquot:6971: comm kworker/u8:6: Failed to release dquot type 1 [ 375.887562][T30241] ext4 filesystem being mounted at /91/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 375.946536][T30252] Cannot find add_set index 0 as target [ 375.965430][T26862] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 376.006850][T30254] Cannot find add_set index 0 as target [ 376.029007][T30256] loop0: detected capacity change from 0 to 1024 [ 376.038818][T28242] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 376.040097][T30256] EXT4-fs: Ignoring removed orlov option [ 376.062975][T30256] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 376.109612][T30263] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3460'. [ 376.330711][T30267] program syz.1.3461 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 376.425113][T30277] bond1: entered promiscuous mode [ 376.430274][T30277] bond1: entered allmulticast mode [ 376.438139][T30277] 8021q: adding VLAN 0 to HW filter on device bond1 [ 376.450122][T30277] bond1 (unregistering): Released all slaves [ 376.474295][T30280] program syz.1.3465 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 376.475384][T30282] syz!: rxe_newlink: already configured on team_slave_0 [ 376.532843][T30283] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 376.589880][T30285] loop1: detected capacity change from 0 to 2048 [ 376.607915][T30285] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 194) [ 376.616828][T30285] FAT-fs (loop1): Filesystem has been set read-only [ 376.617179][T30287] loop2: detected capacity change from 0 to 512 [ 376.625430][T30285] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 194) [ 376.638400][T30285] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 194) [ 376.665614][T30287] EXT4-fs (loop2): 1 orphan inode deleted [ 376.674262][T30287] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 376.687948][ T31] EXT4-fs error (device loop2): ext4_release_dquot:6971: comm kworker/u8:1: Failed to release dquot type 1 [ 376.760125][T30287] ext4 filesystem being mounted at /96/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 376.850319][T26862] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 376.864000][T30292] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3468'. [ 376.879361][T30292] loop1: detected capacity change from 0 to 1024 [ 376.901316][T30292] EXT4-fs: Ignoring removed oldalloc option [ 376.917533][T30292] EXT4-fs: Ignoring removed bh option [ 376.937511][T30292] EXT4-fs (loop1): can't mount with data_err=abort, fs mounted w/o journal [ 376.993301][T30294] loop2: detected capacity change from 0 to 164 [ 377.002188][T30299] loop1: detected capacity change from 0 to 1024 [ 377.008789][T30294] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 377.033161][T30299] EXT4-fs: Ignoring removed orlov option [ 377.054359][T30294] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 377.073985][T30299] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 377.088212][T30294] Symlink component flag not implemented [ 377.093927][T30294] Symlink component flag not implemented [ 377.153063][T30294] Symlink component flag not implemented (7) [ 377.153133][T30305] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3469'. [ 377.159190][T30294] Symlink component flag not implemented (116) [ 377.221394][T30308] loop4: detected capacity change from 0 to 1024 [ 377.229093][T30308] EXT4-fs: Ignoring removed orlov option [ 377.241386][T25139] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 377.267284][T30308] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 377.354957][T30314] loop0: detected capacity change from 0 to 512 [ 377.402131][T30314] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 377.467365][T30314] EXT4-fs (loop0): 1 truncate cleaned up [ 377.504573][T30314] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 377.669119][T25139] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 377.808750][T30322] loop0: detected capacity change from 0 to 8192 [ 377.889293][T29462] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 377.949800][T30327] loop1: detected capacity change from 0 to 1024 [ 377.958415][T30327] EXT4-fs: Ignoring removed orlov option [ 377.973560][T30328] loop3: detected capacity change from 0 to 2048 [ 377.982493][T30327] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 378.056962][T30330] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 194) [ 378.066298][T30330] FAT-fs (loop3): Filesystem has been set read-only [ 378.080465][T30330] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 194) [ 378.089170][T30330] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 194) [ 378.112928][T28242] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 378.141803][T30334] loop4: detected capacity change from 0 to 512 [ 378.149230][T30334] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 378.164058][T30334] EXT4-fs (loop4): 1 truncate cleaned up [ 378.169688][T30325] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 0) [ 378.178360][T30325] FAT-fs (loop0): Filesystem has been set read-only [ 378.185174][T30325] FAT-fs (loop0): error, corrupted directory (invalid entries) [ 378.195191][T30322] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 378.204474][T30334] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 378.316088][T28242] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 378.330633][T30340] loop3: detected capacity change from 0 to 1024 [ 378.345439][T30340] EXT4-fs: Ignoring removed orlov option [ 378.353524][T30343] loop0: detected capacity change from 0 to 512 [ 378.375440][T30343] EXT4-fs (loop0): 1 orphan inode deleted [ 378.386357][T30338] loop2: detected capacity change from 0 to 8192 [ 378.393023][ T31] EXT4-fs error (device loop0): ext4_release_dquot:6971: comm kworker/u8:1: Failed to release dquot type 1 [ 378.405804][T30343] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 378.419562][T30340] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 378.432808][T30343] ext4 filesystem being mounted at /124/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 378.522509][T25139] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 378.607092][T30350] loop4: detected capacity change from 0 to 164 [ 378.625517][T30350] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 378.640249][T30350] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 378.649551][T30350] Symlink component flag not implemented [ 378.655298][T30350] Symlink component flag not implemented [ 378.661472][T30350] Symlink component flag not implemented (7) [ 378.667536][T30350] Symlink component flag not implemented (116) [ 378.674726][T30350] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3485'. [ 378.711668][T30353] bond1: entered promiscuous mode [ 378.716793][T30353] bond1: entered allmulticast mode [ 378.732123][T30338] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 378.739771][T30338] FAT-fs (loop2): Filesystem has been set read-only [ 378.750237][T30353] 8021q: adding VLAN 0 to HW filter on device bond1 [ 378.750288][T30352] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 378.770131][T30353] bond1 (unregistering): Released all slaves [ 378.828828][T29462] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 378.906133][T30366] loop4: detected capacity change from 0 to 2048 [ 378.906187][T30367] loop1: detected capacity change from 0 to 2048 [ 378.934648][T30364] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 194) [ 378.943538][T30364] FAT-fs (loop4): Filesystem has been set read-only [ 378.950520][T30364] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 194) [ 378.951687][T30367] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 378.958760][T30364] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 194) [ 378.976554][T30370] vhci_hcd: invalid port number 65 [ 378.984174][T30370] vhci_hcd: invalid port number 65 [ 379.000156][T30374] loop2: detected capacity change from 0 to 2048 [ 379.024216][T30367] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 379.076408][T30378] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3492'. [ 379.085621][T30378] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3492'. [ 379.104637][T30380] loop0: detected capacity change from 0 to 512 [ 379.112016][T30380] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 379.112447][T30371] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 194) [ 379.130657][T30371] FAT-fs (loop2): Filesystem has been set read-only [ 379.137660][T30371] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 194) [ 379.147359][T30371] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 194) [ 379.160102][T30380] EXT4-fs (loop0): 1 truncate cleaned up [ 379.166706][T30380] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 379.199382][T30383] loop1: detected capacity change from 0 to 2048 [ 379.216225][T25139] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 379.240422][T29023] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 379.255466][T30383] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 194) [ 379.264401][T30383] FAT-fs (loop1): Filesystem has been set read-only [ 379.274710][T30387] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3497'. [ 379.278622][T30389] program syz.0.3496 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 379.283889][T30383] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 194) [ 379.283931][T30383] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 194) [ 379.306151][T30387] loop2: detected capacity change from 0 to 1024 [ 379.321400][T30387] EXT4-fs: Ignoring removed oldalloc option [ 379.327495][T30387] EXT4-fs: Ignoring removed bh option [ 379.345183][T30393] loop3: detected capacity change from 0 to 1024 [ 379.360717][T30393] EXT4-fs: Ignoring removed orlov option [ 379.369039][T30387] EXT4-fs (loop2): can't mount with data_err=abort, fs mounted w/o journal [ 379.383057][T30393] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 379.509155][T30400] loop4: detected capacity change from 0 to 8192 [ 379.535091][T30402] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3501'. [ 379.544193][T30402] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3501'. [ 379.653675][ T29] kauditd_printk_skb: 749 callbacks suppressed [ 379.653693][ T29] audit: type=1326 audit(1747429846.902:35570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30407 comm="syz.1.3503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16d0e9e969 code=0x7ffc0000 [ 379.694814][T30413] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 379.704523][ T29] audit: type=1326 audit(1747429846.932:35571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30407 comm="syz.1.3503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f16d0e9e969 code=0x7ffc0000 [ 379.728331][ T29] audit: type=1326 audit(1747429846.932:35572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30407 comm="syz.1.3503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16d0e9e969 code=0x7ffc0000 [ 379.752259][ T29] audit: type=1326 audit(1747429846.932:35573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30407 comm="syz.1.3503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f16d0ea0887 code=0x7ffc0000 [ 379.775806][ T29] audit: type=1326 audit(1747429846.932:35574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30407 comm="syz.1.3503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f16d0ea07fc code=0x7ffc0000 [ 379.799483][ T29] audit: type=1326 audit(1747429846.932:35575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30407 comm="syz.1.3503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f16d0ea0734 code=0x7ffc0000 [ 379.823116][ T29] audit: type=1326 audit(1747429846.932:35576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30407 comm="syz.1.3503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f16d0e9d5ca code=0x7ffc0000 [ 379.846789][ T29] audit: type=1326 audit(1747429846.932:35577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30407 comm="syz.1.3503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16d0e9e969 code=0x7ffc0000 [ 379.870662][ T29] audit: type=1326 audit(1747429846.932:35578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30407 comm="syz.1.3503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f16d0e9e969 code=0x7ffc0000 [ 379.894626][ T29] audit: type=1326 audit(1747429846.932:35579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30407 comm="syz.1.3503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16d0e9e969 code=0x7ffc0000 [ 379.998528][T30421] loop1: detected capacity change from 0 to 512 [ 380.001220][T30419] lo speed is unknown, defaulting to 1000 [ 380.029198][T30421] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 380.089572][T30414] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 380.097246][T30414] FAT-fs (loop4): Filesystem has been set read-only [ 380.106003][T30421] EXT4-fs (loop1): 1 truncate cleaned up [ 380.121130][T30421] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 380.136030][T30415] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 380.288000][T30419] netlink: 'syz.2.3505': attribute type 2 has an invalid length. [ 380.296011][T30419] netlink: 'syz.2.3505': attribute type 1 has an invalid length. [ 380.321199][T29462] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 380.359905][T30430] loop4: detected capacity change from 0 to 2048 [ 380.364751][T30432] loop1: detected capacity change from 0 to 1024 [ 380.398014][T30436] tc_dump_action: action bad kind [ 380.407567][T30432] EXT4-fs: Ignoring removed orlov option [ 380.420566][T30430] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 194) [ 380.429423][T30430] FAT-fs (loop4): Filesystem has been set read-only [ 380.455746][T30430] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 194) [ 380.472675][T30432] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 380.487930][T30430] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 194) [ 380.513524][T29023] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 380.528841][T30444] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3513'. [ 380.538593][T30444] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3513'. [ 380.564658][T30442] loop0: detected capacity change from 0 to 164 [ 380.582397][T30442] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 380.601178][T30448] loop3: detected capacity change from 0 to 128 [ 380.610377][T30448] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 380.624899][T30442] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 380.631718][T30448] ext4 filesystem being mounted at /58/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 380.633506][T30442] Symlink component flag not implemented [ 380.649051][T30442] Symlink component flag not implemented [ 380.656400][T30452] vhci_hcd: invalid port number 65 [ 380.658926][T30442] Symlink component flag not implemented (7) [ 380.661581][T30452] vhci_hcd: invalid port number 65 [ 380.672944][T30442] Symlink component flag not implemented (116) [ 380.683098][T30458] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3512'. [ 380.710079][T29023] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 380.752915][T30462] loop0: detected capacity change from 0 to 512 [ 380.760713][T30462] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 380.776165][T30465] Cannot find add_set index 0 as target [ 380.783823][T30462] EXT4-fs (loop0): 1 truncate cleaned up [ 380.789989][T30462] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 380.838312][T25139] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 380.974803][T30469] loop3: detected capacity change from 0 to 8192 [ 381.006537][T30474] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3521'. [ 381.358503][T30474] loop0: detected capacity change from 0 to 1024 [ 381.422771][T30474] EXT4-fs: Ignoring removed oldalloc option [ 381.478287][T30474] EXT4-fs: Ignoring removed bh option [ 381.542033][T30474] EXT4-fs (loop0): can't mount with data_err=abort, fs mounted w/o journal [ 381.674285][T29462] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 381.777807][T30478] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 381.785945][T30478] FAT-fs (loop3): Filesystem has been set read-only [ 381.804267][T30484] Cannot find add_set index 0 as target [ 381.827578][T30480] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 381.889989][T30491] loop4: detected capacity change from 0 to 164 [ 381.897476][T30495] vhci_hcd: invalid port number 65 [ 381.902958][T30495] vhci_hcd: invalid port number 65 [ 381.913195][T30492] loop1: detected capacity change from 0 to 2048 [ 381.919804][T30497] loop0: detected capacity change from 0 to 2048 [ 381.928999][T30491] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 381.939111][T30491] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 381.947939][T30491] Symlink component flag not implemented [ 381.953836][T30491] Symlink component flag not implemented [ 381.959588][T30491] Symlink component flag not implemented (7) [ 381.965710][T30491] Symlink component flag not implemented (116) [ 381.977016][T30501] loop3: detected capacity change from 0 to 512 [ 381.978743][T30488] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 194) [ 381.990134][T30492] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 194) [ 381.992145][T30488] FAT-fs (loop0): Filesystem has been set read-only [ 382.000765][T30492] FAT-fs (loop1): Filesystem has been set read-only [ 382.010334][T30488] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 194) [ 382.022839][T30488] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 194) [ 382.023899][T30501] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 382.032251][T30492] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 194) [ 382.060333][T30492] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 194) [ 382.073332][T30501] EXT4-fs (loop3): 1 truncate cleaned up [ 382.080636][T30501] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 382.094168][T30508] loop4: detected capacity change from 0 to 1024 [ 382.101073][T30508] journal_path: Lookup failure for './file1/file0' [ 382.108133][T30508] EXT4-fs: error: could not find journal device path [ 382.118614][T30508] 9pnet_fd: Insufficient options for proto=fd [ 382.140761][T30510] loop2: detected capacity change from 0 to 2048 [ 382.155796][T30512] program syz.0.3534 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 382.179913][T29023] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 382.189219][T30515] loop4: detected capacity change from 0 to 1024 [ 382.196189][T30515] EXT4-fs: Ignoring removed orlov option [ 382.210643][T30505] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 194) [ 382.219622][T30505] FAT-fs (loop2): Filesystem has been set read-only [ 382.224669][T30515] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 382.226924][T30505] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 194) [ 382.248064][T30505] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 194) [ 382.297798][T30522] loop3: detected capacity change from 0 to 1024 [ 382.307414][T30522] EXT4-fs: Ignoring removed oldalloc option [ 382.319118][T30517] bond1: entered promiscuous mode [ 382.324332][T30517] bond1: entered allmulticast mode [ 382.332251][T30522] EXT4-fs: Ignoring removed bh option [ 382.338428][T30517] 8021q: adding VLAN 0 to HW filter on device bond1 [ 382.354020][T30522] EXT4-fs (loop3): can't mount with data_err=abort, fs mounted w/o journal [ 382.374662][T30517] bond1 (unregistering): Released all slaves [ 382.859417][T30538] vhci_hcd: invalid port number 65 [ 382.864764][T30538] vhci_hcd: invalid port number 65 [ 382.975093][T30535] lo speed is unknown, defaulting to 1000 [ 383.198416][T28242] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 383.211458][T30550] loop0: detected capacity change from 0 to 164 [ 383.229927][T30548] loop1: detected capacity change from 0 to 512 [ 383.237990][T30550] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 383.259771][T30548] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 383.271454][T30544] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 383.281212][T30544] Symlink component flag not implemented [ 383.287139][T30544] Symlink component flag not implemented [ 383.295167][T30548] EXT4-fs (loop1): 1 truncate cleaned up [ 383.309167][T30548] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 383.317646][T30552] loop4: detected capacity change from 0 to 8192 [ 383.328837][T30544] Symlink component flag not implemented (7) [ 383.334926][T30544] Symlink component flag not implemented (116) [ 383.372262][T29462] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 383.394160][T30560] loop3: detected capacity change from 0 to 2048 [ 383.411982][T30552] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 383.420555][T30552] FAT-fs (loop4): Filesystem has been set read-only [ 383.429733][T30535] netlink: 'syz.2.3541': attribute type 2 has an invalid length. [ 383.437663][T30535] netlink: 'syz.2.3541': attribute type 1 has an invalid length. [ 383.453017][T30560] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 194) [ 383.462000][T30560] FAT-fs (loop3): Filesystem has been set read-only [ 383.469008][T30552] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 383.473746][T30560] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 194) [ 383.487537][T30560] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 194) [ 383.503417][T30565] loop1: detected capacity change from 0 to 1024 [ 383.512620][T30565] EXT4-fs: Ignoring removed oldalloc option [ 383.524464][T30565] EXT4-fs: Ignoring removed bh option [ 383.530690][T30568] loop0: detected capacity change from 0 to 1024 [ 383.537146][T30565] EXT4-fs (loop1): can't mount with data_err=abort, fs mounted w/o journal [ 383.537524][T30568] EXT4-fs: Ignoring removed orlov option [ 383.572934][T30568] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 383.682300][T30578] program syz.4.3554 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 383.712515][T30583] vhci_hcd: invalid port number 65 [ 383.717687][T30583] vhci_hcd: invalid port number 65 [ 383.868946][T30594] __nla_validate_parse: 6 callbacks suppressed [ 383.868966][T30594] netlink: 92 bytes leftover after parsing attributes in process `syz.2.3559'. [ 383.961766][T30592] program syz.4.3558 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 384.045788][T30598] loop4: detected capacity change from 0 to 512 [ 384.086974][T30598] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 384.204428][T30598] EXT4-fs (loop4): 1 truncate cleaned up [ 384.255076][T30598] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 384.331364][T30600] program syz.2.3561 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 384.463973][T28242] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 384.583927][T30604] FAULT_INJECTION: forcing a failure. [ 384.583927][T30604] name failslab, interval 1, probability 0, space 0, times 0 [ 384.596914][T30604] CPU: 1 UID: 0 PID: 30604 Comm: syz.4.3562 Not tainted 6.15.0-rc6-syzkaller-00208-g3c21441eeffc #0 PREEMPT(voluntary) [ 384.596950][T30604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 384.597009][T30604] Call Trace: [ 384.597017][T30604] [ 384.597026][T30604] __dump_stack+0x1d/0x30 [ 384.597123][T30604] dump_stack_lvl+0xe8/0x140 [ 384.597149][T30604] dump_stack+0x15/0x1b [ 384.597166][T30604] should_fail_ex+0x265/0x280 [ 384.597199][T30604] should_failslab+0x8c/0xb0 [ 384.597304][T30604] kmem_cache_alloc_noprof+0x50/0x310 [ 384.597334][T30604] ? skb_clone+0x151/0x1f0 [ 384.597364][T30604] skb_clone+0x151/0x1f0 [ 384.597391][T30604] __netlink_deliver_tap+0x2c9/0x500 [ 384.597423][T30604] netlink_unicast+0x64c/0x670 [ 384.597455][T30604] netlink_sendmsg+0x58b/0x6b0 [ 384.597497][T30604] ? __pfx_netlink_sendmsg+0x10/0x10 [ 384.597523][T30604] __sock_sendmsg+0x142/0x180 [ 384.597585][T30604] ____sys_sendmsg+0x31e/0x4e0 [ 384.597677][T30604] ___sys_sendmsg+0x17b/0x1d0 [ 384.597724][T30604] __x64_sys_sendmsg+0xd4/0x160 [ 384.597758][T30604] x64_sys_call+0x2999/0x2fb0 [ 384.597795][T30604] do_syscall_64+0xd0/0x1a0 [ 384.597826][T30604] ? clear_bhb_loop+0x40/0x90 [ 384.597853][T30604] ? clear_bhb_loop+0x40/0x90 [ 384.597875][T30604] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.597942][T30604] RIP: 0033:0x7fed3a9ae969 [ 384.597961][T30604] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 384.597984][T30604] RSP: 002b:00007fed39017038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 384.598007][T30604] RAX: ffffffffffffffda RBX: 00007fed3abd5fa0 RCX: 00007fed3a9ae969 [ 384.598046][T30604] RDX: 0000000020000080 RSI: 00002000000000c0 RDI: 0000000000000003 [ 384.598097][T30604] RBP: 00007fed39017090 R08: 0000000000000000 R09: 0000000000000000 [ 384.598113][T30604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 384.598129][T30604] R13: 0000000000000000 R14: 00007fed3abd5fa0 R15: 00007ffc16df2778 [ 384.598176][T30604] [ 384.860739][T30606] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3563'. [ 384.870030][T30606] IPVS: Error joining to the multicast group [ 384.905595][ T29] kauditd_printk_skb: 28 callbacks suppressed [ 384.905616][ T29] audit: type=1400 audit(1747429852.102:35608): avc: denied { mount } for pid=30605 comm="syz.4.3563" name="/" dev="ramfs" ino=43487 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 384.934517][ T29] audit: type=1400 audit(1747429852.132:35609): avc: denied { execute } for pid=30605 comm="syz.4.3563" path="/97/file0/bus" dev="ramfs" ino=43492 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 384.968315][T30609] loop3: detected capacity change from 0 to 1024 [ 384.986956][T25139] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 384.987911][T30609] EXT4-fs: Ignoring removed oldalloc option [ 385.017532][T30609] EXT4-fs: Ignoring removed bh option [ 385.037805][T30609] EXT4-fs (loop3): can't mount with data_err=abort, fs mounted w/o journal [ 385.063362][T30616] loop1: detected capacity change from 0 to 1024 [ 385.070419][T30616] EXT4-fs: Ignoring removed orlov option [ 385.081059][T30616] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 385.098485][T30620] loop2: detected capacity change from 0 to 2048 [ 385.107291][ T29] audit: type=1400 audit(1747429852.352:35610): avc: denied { getopt } for pid=30617 comm="syz.0.3566" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 385.142209][T30620] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 194) [ 385.150981][T30620] FAT-fs (loop2): Filesystem has been set read-only [ 385.175569][T30620] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 194) [ 385.185645][T30622] vhci_hcd: invalid port number 65 [ 385.191001][T30622] vhci_hcd: invalid port number 65 [ 385.209813][T30620] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 194) [ 385.351245][T30631] netlink: 92 bytes leftover after parsing attributes in process `syz.2.3571'. [ 385.401688][T30628] lo speed is unknown, defaulting to 1000 [ 385.488654][ T29] audit: type=1400 audit(1747429852.732:35611): avc: denied { unmount } for pid=28242 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 385.516213][T30636] bond1: entered promiscuous mode [ 385.521508][T30636] bond1: entered allmulticast mode [ 385.526925][T30636] 8021q: adding VLAN 0 to HW filter on device bond1 [ 385.584145][T30641] Cannot find add_set index 0 as target [ 385.604722][T30636] bond1 (unregistering): Released all slaves [ 385.612422][T30639] syz!: rxe_newlink: already configured on team_slave_0 [ 386.132231][ T29] audit: type=1326 audit(1747429853.372:35612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30648 comm="syz.0.3577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5f4ade969 code=0x7ffc0000 [ 386.156019][ T29] audit: type=1326 audit(1747429853.372:35613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30648 comm="syz.0.3577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5f4ade969 code=0x7ffc0000 [ 386.179651][ T29] audit: type=1326 audit(1747429853.372:35614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30648 comm="syz.0.3577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd5f4ade969 code=0x7ffc0000 [ 386.203266][ T29] audit: type=1326 audit(1747429853.372:35615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30648 comm="syz.0.3577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5f4ade969 code=0x7ffc0000 [ 386.226903][ T29] audit: type=1326 audit(1747429853.372:35616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30648 comm="syz.0.3577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5f4ade969 code=0x7ffc0000 [ 386.250505][ T29] audit: type=1326 audit(1747429853.372:35617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30648 comm="syz.0.3577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7fd5f4ade969 code=0x7ffc0000 [ 386.356028][T30647] loop2: detected capacity change from 0 to 2048 [ 386.535426][T29462] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 386.616247][T30647] loop2: unable to read partition table [ 386.618339][T30652] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=2048 sclass=netlink_audit_socket pid=30652 comm=syz.4.3579 [ 386.629522][T30647] loop2: partition table beyond EOD, truncated [ 386.641263][T30647] loop_reread_partitions: partition scan of loop2 () failed (rc=-5) [ 386.675947][T30653] loop1: detected capacity change from 0 to 164 [ 386.699079][T30653] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 386.709416][T30653] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 386.719387][T30653] Symlink component flag not implemented [ 386.725218][T30653] Symlink component flag not implemented [ 386.732670][T30653] Symlink component flag not implemented (7) [ 386.738692][T30653] Symlink component flag not implemented (116) [ 386.780275][T30659] loop4: detected capacity change from 0 to 512 [ 386.787921][T30661] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3578'. [ 386.803705][T30663] netlink: 92 bytes leftover after parsing attributes in process `syz.2.3583'. [ 386.821949][T30659] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 386.843555][T30659] ext4 filesystem being mounted at /101/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 386.863724][T30668] syzkaller1: entered promiscuous mode [ 386.869375][T30668] syzkaller1: entered allmulticast mode [ 386.878649][T30670] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3585'. [ 386.934677][T30673] loop1: detected capacity change from 0 to 128 [ 386.947784][T30668] lo speed is unknown, defaulting to 1000 [ 386.996342][T30678] loop3: detected capacity change from 0 to 512 [ 387.003134][T30679] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3588'. [ 387.022138][T30678] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 387.038281][T30679] IPVS: Error joining to the multicast group [ 387.044490][T30659] lo speed is unknown, defaulting to 1000 [ 387.081199][T30673] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3586'. [ 387.090159][T30673] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3586'. [ 387.121224][T30678] EXT4-fs (loop3): 1 truncate cleaned up [ 387.130263][T30678] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 387.144085][T30684] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=2048 sclass=netlink_audit_socket pid=30684 comm=syz.2.3589 [ 387.194416][T28242] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 387.236555][T30678] 9pnet_fd: Insufficient options for proto=fd [ 387.298439][T30678] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 387.354484][T30698] netlink: 92 bytes leftover after parsing attributes in process `syz.4.3594'. [ 387.396531][T30705] loop1: detected capacity change from 0 to 1024 [ 387.406164][T30705] EXT4-fs: Ignoring removed orlov option [ 387.461032][T30703] loop4: detected capacity change from 0 to 764 [ 387.468335][T30703] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 387.958250][T30723] loop0: detected capacity change from 0 to 2048 [ 388.096551][T30723] loop0: unable to read partition table [ 388.116520][T30723] loop0: partition table beyond EOD, truncated [ 388.122817][T30723] loop_reread_partitions: partition scan of loop0 () failed (rc=-5) [ 388.444528][T30733] lo speed is unknown, defaulting to 1000 [ 388.492960][T30749] bond1: entered promiscuous mode [ 388.498055][T30749] bond1: entered allmulticast mode [ 388.519048][T30749] 8021q: adding VLAN 0 to HW filter on device bond1 [ 388.531393][T30749] bond1 (unregistering): Released all slaves [ 388.613878][T30749] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 388.704311][T30758] Cannot find add_set index 0 as target [ 388.895050][T30768] __nla_validate_parse: 1 callbacks suppressed [ 388.895072][T30768] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3618'. [ 388.910576][T30768] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3618'. [ 389.048496][T30772] loop4: detected capacity change from 0 to 128 [ 389.063637][T30772] ext4 filesystem being mounted at /113/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 389.144534][T30776] loop2: detected capacity change from 0 to 1024 [ 389.156370][T30776] EXT4-fs: Ignoring removed orlov option [ 389.208922][T30778] program syz.4.3622 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 389.496488][T30787] vhci_hcd: invalid port number 65 [ 389.501688][T30787] vhci_hcd: invalid port number 65 [ 389.716658][T30792] loop3: detected capacity change from 0 to 1024 [ 389.848303][T30790] loop1: detected capacity change from 0 to 128 [ 389.885473][T30792] EXT4-fs: Ignoring removed nobh option [ 389.891179][T30792] EXT4-fs: Ignoring removed bh option [ 389.989480][T30792] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4113: comm syz.3.3621: Allocating blocks 385-513 which overlap fs metadata [ 390.041339][T30804] loop0: detected capacity change from 0 to 512 [ 390.070447][T30792] EXT4-fs (loop3): pa ffff88810718a770: logic 16, phys. 129, len 24 [ 390.078676][T30792] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 390.094716][T30802] loop4: detected capacity change from 0 to 2048 [ 390.111294][T30804] ext4 filesystem being mounted at /153/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 390.156886][T30804] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #2: comm syz.0.3630: corrupted inode contents [ 390.196778][T30804] EXT4-fs error (device loop0): ext4_dirty_inode:6103: inode #2: comm syz.0.3630: mark_inode_dirty error [ 390.218181][T30802] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 194) [ 390.227047][T30802] FAT-fs (loop4): Filesystem has been set read-only [ 390.255628][T30804] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #2: comm syz.0.3630: corrupted inode contents [ 390.286067][T30804] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #2: comm syz.0.3630: mark_inode_dirty error [ 390.328556][ T29] kauditd_printk_skb: 177 callbacks suppressed [ 390.328572][ T29] audit: type=1400 audit(1747429857.572:35795): avc: denied { create } for pid=30803 comm="syz.0.3630" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 390.361385][T30804] xt_hashlimit: max too large, truncated to 1048576 [ 390.388873][T30802] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 194) [ 390.422290][T30802] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 194) [ 390.457500][ T29] audit: type=1400 audit(1747429857.622:35796): avc: denied { read } for pid=30803 comm="syz.0.3630" name="file0" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 390.479992][ T29] audit: type=1326 audit(1747429857.642:35797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30803 comm="syz.0.3630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5f4ade969 code=0x7ffc0000 [ 390.503770][ T29] audit: type=1326 audit(1747429857.642:35798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30803 comm="syz.0.3630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5f4ade969 code=0x7ffc0000 [ 390.527484][ T29] audit: type=1326 audit(1747429857.642:35799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30803 comm="syz.0.3630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd5f4ade969 code=0x7ffc0000 [ 390.551622][ T29] audit: type=1326 audit(1747429857.642:35800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30803 comm="syz.0.3630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5f4ade969 code=0x7ffc0000 [ 390.575623][ T29] audit: type=1326 audit(1747429857.652:35801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30803 comm="syz.0.3630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd5f4ade969 code=0x7ffc0000 [ 390.599305][ T29] audit: type=1326 audit(1747429857.652:35802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30803 comm="syz.0.3630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5f4ade969 code=0x7ffc0000 [ 390.622970][ T29] audit: type=1326 audit(1747429857.652:35803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30803 comm="syz.0.3630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=121 compat=0 ip=0x7fd5f4ade969 code=0x7ffc0000 [ 390.646602][ T29] audit: type=1326 audit(1747429857.652:35804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30803 comm="syz.0.3630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5f4ade969 code=0x7ffc0000 [ 390.709673][T30813] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3632'. [ 390.761767][T30817] program syz.0.3634 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 390.785773][T30819] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 390.839710][T30823] loop4: detected capacity change from 0 to 1024 [ 390.854227][T30823] ext4 filesystem being mounted at /117/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 390.866840][T30824] loop0: detected capacity change from 0 to 1024 [ 390.895501][T30824] EXT4-fs: Ignoring removed orlov option [ 390.904750][T30823] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm +}[@: bg 0: block 393: padding at end of block bitmap is not set [ 390.940474][T30823] EXT4-fs (loop4): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 186 with error 117 [ 390.953154][T30823] EXT4-fs (loop4): This should not happen!! Data will be lost [ 390.953154][T30823] [ 391.449145][T30843] tc_dump_action: action bad kind [ 391.539174][T30845] tc_dump_action: action bad kind [ 391.645969][T30852] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3644'. [ 391.703238][T30854] loop2: detected capacity change from 0 to 128 [ 391.752298][T30854] ext4 filesystem being mounted at /136/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 391.804444][T30862] loop4: detected capacity change from 0 to 2048 [ 391.812799][T30861] loop0: detected capacity change from 0 to 1024 [ 391.841599][T30862] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 194) [ 391.850686][T30862] FAT-fs (loop4): Filesystem has been set read-only [ 391.860605][T30861] EXT4-fs: Ignoring removed orlov option [ 391.894166][T30862] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 194) [ 391.902574][T30864] loop2: detected capacity change from 0 to 2048 [ 391.902889][T30862] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 194) [ 391.977217][T30871] loop4: detected capacity change from 0 to 1024 [ 391.997524][T30871] ext4 filesystem being mounted at /126/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 392.062723][T30864] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 194) [ 392.071520][T30864] FAT-fs (loop2): Filesystem has been set read-only [ 392.098646][T30864] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 194) [ 392.157084][T30876] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=2048 sclass=netlink_audit_socket pid=30876 comm=syz.3.3652 [ 392.171258][T30864] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 194) [ 392.181829][T30871] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm +}[@: bg 0: block 393: padding at end of block bitmap is not set [ 392.242832][T30871] EXT4-fs (loop4): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 186 with error 117 [ 392.255785][T30871] EXT4-fs (loop4): This should not happen!! Data will be lost [ 392.255785][T30871] [ 392.384927][T30884] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3654'. [ 392.447830][T30886] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3656'. [ 392.606428][T30894] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3658'. [ 392.607713][T30897] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3655'. [ 392.615524][T30894] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3658'. [ 392.645195][T30893] loop2: detected capacity change from 0 to 128 [ 392.716433][T30893] ext4 filesystem being mounted at /139/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 392.766725][T30904] loop3: detected capacity change from 0 to 2048 [ 392.801580][T30899] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 194) [ 392.810431][T30899] FAT-fs (loop3): Filesystem has been set read-only [ 392.839589][T30899] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 194) [ 392.866507][T30899] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 194) [ 392.875819][T30906] loop1: detected capacity change from 0 to 8192 [ 392.885587][T30908] loop2: detected capacity change from 0 to 2048 [ 392.889588][T30913] loop4: detected capacity change from 0 to 1024 [ 392.905314][T30908] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 194) [ 392.914691][T30908] FAT-fs (loop2): Filesystem has been set read-only [ 392.925530][T30908] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 194) [ 392.946986][T30908] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 194) [ 392.958790][T30913] ext4 filesystem being mounted at /128/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 392.996303][T30921] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3667'. [ 393.006014][T30913] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm +}[@: bg 0: block 393: padding at end of block bitmap is not set [ 393.022201][T30913] EXT4-fs (loop4): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 186 with error 117 [ 393.035089][T30913] EXT4-fs (loop4): This should not happen!! Data will be lost [ 393.035089][T30913] [ 393.070283][T30926] loop2: detected capacity change from 0 to 512 [ 393.078877][T30926] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 393.091106][T30926] EXT4-fs (loop2): 1 truncate cleaned up [ 393.129969][T30932] loop3: detected capacity change from 0 to 512 [ 393.137252][T30932] EXT4-fs: Ignoring removed orlov option [ 393.155822][T30929] loop4: detected capacity change from 0 to 164 [ 393.162877][T30932] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.3669: casefold flag without casefold feature [ 393.179073][T30932] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.3669: couldn't read orphan inode 15 (err -117) [ 393.193564][T30939] loop2: detected capacity change from 0 to 128 [ 393.205200][T30929] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 393.205281][T30906] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 393.221213][T30906] FAT-fs (loop1): Filesystem has been set read-only [ 393.233517][T30929] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 393.241850][T30932] 9pnet_fd: Insufficient options for proto=fd [ 393.243594][T30929] Symlink component flag not implemented [ 393.249204][T30918] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 393.253773][T30929] Symlink component flag not implemented [ 393.261334][T30929] Symlink component flag not implemented (7) [ 393.274145][T30929] Symlink component flag not implemented (116) [ 393.306028][T30943] loop2: detected capacity change from 0 to 1024 [ 393.323562][T30945] loop4: detected capacity change from 0 to 128 [ 393.346015][T30947] loop1: detected capacity change from 0 to 764 [ 393.353882][T30947] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 393.426774][T30954] loop4: detected capacity change from 0 to 2048 [ 393.440222][T30954] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 194) [ 393.449113][T30954] FAT-fs (loop4): Filesystem has been set read-only [ 393.456098][T30959] loop1: detected capacity change from 0 to 1024 [ 393.459726][T30954] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 194) [ 393.471273][T30954] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 194) [ 393.553982][T30966] loop4: detected capacity change from 0 to 2048 [ 393.746981][T30973] loop0: detected capacity change from 0 to 512 [ 393.785262][T30973] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 393.825689][T30973] EXT4-fs (loop0): 1 truncate cleaned up [ 393.905711][T30976] loop0: detected capacity change from 0 to 128 [ 393.962947][T30976] __nla_validate_parse: 5 callbacks suppressed [ 393.962967][T30976] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3683'. [ 393.978230][T30976] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3683'. [ 394.026513][T30978] loop4: detected capacity change from 0 to 8192 [ 394.093581][T30984] loop0: detected capacity change from 0 to 164 [ 394.115973][T30980] lo speed is unknown, defaulting to 1000 [ 394.126123][T30984] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 394.153671][T30984] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 394.166934][T30984] Symlink component flag not implemented [ 394.173629][T30984] Symlink component flag not implemented [ 394.190882][T30984] Symlink component flag not implemented (7) [ 394.197362][T30984] Symlink component flag not implemented (116) [ 394.241211][T30988] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3686'. [ 394.440649][T30978] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 394.449373][T30978] FAT-fs (loop4): Filesystem has been set read-only [ 394.527885][T30987] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 394.537934][T30999] loop3: detected capacity change from 0 to 512 [ 394.541922][T31001] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3691'. [ 394.563549][T31002] loop0: detected capacity change from 0 to 2048 [ 394.599215][T31002] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 194) [ 394.609525][T31002] FAT-fs (loop0): Filesystem has been set read-only [ 394.630059][T30999] EXT4-fs (loop3): 1 orphan inode deleted [ 394.639369][T30999] ext4 filesystem being mounted at /87/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 394.655132][T31002] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 194) [ 394.663641][ T59] EXT4-fs error (device loop3): ext4_release_dquot:6971: comm kworker/u8:4: Failed to release dquot type 1 [ 394.701724][T31002] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 194) [ 394.715940][T31007] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 394.747265][T31007] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 394.749224][T31009] tc_dump_action: action bad kind [ 394.763638][T31007] loop2: detected capacity change from 0 to 256 [ 394.796592][T31014] Cannot find add_set index 0 as target [ 394.840865][T31007] FAULT_INJECTION: forcing a failure. [ 394.840865][T31007] name failslab, interval 1, probability 0, space 0, times 0 [ 394.854794][T31007] CPU: 0 UID: 0 PID: 31007 Comm: syz.2.3694 Not tainted 6.15.0-rc6-syzkaller-00208-g3c21441eeffc #0 PREEMPT(voluntary) [ 394.854892][T31007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 394.854914][T31007] Call Trace: [ 394.854922][T31007] [ 394.854930][T31007] __dump_stack+0x1d/0x30 [ 394.855007][T31007] dump_stack_lvl+0xe8/0x140 [ 394.855026][T31007] dump_stack+0x15/0x1b [ 394.855092][T31007] should_fail_ex+0x265/0x280 [ 394.855139][T31007] should_failslab+0x8c/0xb0 [ 394.855203][T31007] kmem_cache_alloc_node_noprof+0x57/0x320 [ 394.855226][T31007] ? __alloc_skb+0x101/0x320 [ 394.855317][T31007] __alloc_skb+0x101/0x320 [ 394.855348][T31007] ? audit_log_start+0x365/0x6c0 [ 394.855449][T31007] audit_log_start+0x380/0x6c0 [ 394.855517][T31007] audit_seccomp+0x48/0x100 [ 394.855547][T31007] ? __seccomp_filter+0x68c/0x10d0 [ 394.855569][T31007] __seccomp_filter+0x69d/0x10d0 [ 394.855591][T31007] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 394.855624][T31007] ? vfs_write+0x75e/0x8d0 [ 394.855722][T31007] __secure_computing+0x82/0x150 [ 394.855745][T31007] syscall_trace_enter+0xcf/0x1e0 [ 394.855790][T31007] do_syscall_64+0xaa/0x1a0 [ 394.855821][T31007] ? clear_bhb_loop+0x40/0x90 [ 394.855877][T31007] ? clear_bhb_loop+0x40/0x90 [ 394.855924][T31007] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 394.855950][T31007] RIP: 0033:0x7f60e539e969 [ 394.855970][T31007] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 394.855993][T31007] RSP: 002b:00007f60e3a07038 EFLAGS: 00000246 ORIG_RAX: 0000000000000043 [ 394.856017][T31007] RAX: ffffffffffffffda RBX: 00007f60e55c5fa0 RCX: 00007f60e539e969 [ 394.856057][T31007] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000ffc000 [ 394.856069][T31007] RBP: 00007f60e3a07090 R08: 0000000000000000 R09: 0000000000000000 [ 394.856085][T31007] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 394.856099][T31007] R13: 0000000000000000 R14: 00007f60e55c5fa0 R15: 00007fff70c9a118 [ 394.856118][T31007] [ 395.091955][T31016] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 395.149458][T31019] loop1: detected capacity change from 0 to 164 [ 395.159795][T31019] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 395.170508][T31019] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 395.180504][T31019] Symlink component flag not implemented [ 395.188138][T31019] Symlink component flag not implemented [ 395.198512][T31019] Symlink component flag not implemented (7) [ 395.205041][T31019] Symlink component flag not implemented (116) [ 395.236164][T31026] program syz.0.3701 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 395.246572][T31031] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3698'. [ 395.324140][T31036] loop1: detected capacity change from 0 to 1024 [ 395.331492][T31036] EXT4-fs: Ignoring removed orlov option [ 395.441374][ T29] kauditd_printk_skb: 424 callbacks suppressed [ 395.441396][ T29] audit: type=1400 audit(1747429862.602:36226): avc: denied { write } for pid=31035 comm="syz.1.3703" name="bus" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 395.470813][ T29] audit: type=1400 audit(1747429862.662:36227): avc: denied { create } for pid=31035 comm="syz.1.3703" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 395.492038][ T29] audit: type=1400 audit(1747429862.662:36228): avc: denied { ioctl } for pid=31035 comm="syz.1.3703" path="socket:[45130]" dev="sockfs" ino=45130 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 395.518498][ T29] audit: type=1400 audit(1747429862.672:36229): avc: denied { write } for pid=31035 comm="syz.1.3703" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 395.573908][T31042] loop0: detected capacity change from 0 to 128 [ 395.922056][T31046] loop2: detected capacity change from 0 to 1024 [ 396.172762][T31046] ext4 filesystem being mounted at /147/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 396.209252][T31046] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm +}[@: bg 0: block 393: padding at end of block bitmap is not set [ 396.234962][ T29] audit: type=1326 audit(1747429863.472:36230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31050 comm="syz.0.3709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5f4ade969 code=0x7ffc0000 [ 396.259112][ T29] audit: type=1326 audit(1747429863.472:36231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31050 comm="syz.0.3709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd5f4ade969 code=0x7ffc0000 [ 396.262599][T31046] EXT4-fs (loop2): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 186 with error 117 [ 396.283448][ T29] audit: type=1326 audit(1747429863.472:36232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31050 comm="syz.0.3709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5f4ade969 code=0x7ffc0000 [ 396.296445][T31046] EXT4-fs (loop2): This should not happen!! Data will be lost [ 396.296445][T31046] [ 396.331072][ T29] audit: type=1326 audit(1747429863.472:36233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31050 comm="syz.0.3709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fd5f4ade969 code=0x7ffc0000 [ 396.355598][ T29] audit: type=1326 audit(1747429863.482:36234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31050 comm="syz.0.3709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5f4ade969 code=0x7ffc0000 [ 396.358206][T31063] siw: device registration error -23 [ 396.379549][ T29] audit: type=1326 audit(1747429863.482:36235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31050 comm="syz.0.3709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd5f4ade969 code=0x7ffc0000 [ 396.439055][T31057] program syz.4.3711 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 396.463754][T31065] loop0: detected capacity change from 0 to 164 [ 396.477792][T31065] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 396.495981][T31072] loop1: detected capacity change from 0 to 2048 [ 396.524151][T31072] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 194) [ 396.533745][T31072] FAT-fs (loop1): Filesystem has been set read-only [ 396.536084][T31065] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 396.541649][T31072] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 194) [ 396.557836][T31072] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 194) [ 396.559933][T31065] Symlink component flag not implemented [ 396.572191][T31065] Symlink component flag not implemented [ 396.579842][T31065] Symlink component flag not implemented (7) [ 396.585998][T31065] Symlink component flag not implemented (116) [ 396.595359][T31075] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3713'. [ 396.625527][T31074] loop4: detected capacity change from 0 to 2048 [ 396.645817][T31077] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3716'. [ 396.656189][T31077] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3716'. [ 396.683752][T31074] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 194) [ 396.693415][T31074] FAT-fs (loop4): Filesystem has been set read-only [ 396.702027][T31074] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 194) [ 396.710168][T31074] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 194) [ 396.739965][T31087] loop3: detected capacity change from 0 to 1024 [ 396.753282][T31087] EXT4-fs: Ignoring removed orlov option [ 396.831612][T31094] loop2: detected capacity change from 0 to 164 [ 396.849252][T31094] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 396.953473][T31094] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 396.964934][T31094] Symlink component flag not implemented [ 396.970707][T31094] Symlink component flag not implemented [ 396.976508][T31094] Symlink component flag not implemented (7) [ 396.982830][T31094] Symlink component flag not implemented (116) [ 396.989674][T31094] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3723'. [ 397.002422][T31107] tmpfs: Unknown parameter 'dtfcontext3C XqEY#Cai|_.װRYXgNktCf/~: [ 397.002422][T31107] " c5#Ő{9y^pV6ž2oDQ'4lޒ{Q"sşf9A!js(;/+-$(A.*@ʱo0!e7 ' [ 397.035621][T31100] program syz.0.3725 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 397.059854][T31104] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 397.089517][T31112] loop2: detected capacity change from 0 to 1024 [ 397.096846][T31112] EXT4-fs: Ignoring removed orlov option [ 397.159547][T31117] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 397.177169][T31117] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 397.188021][T31114] loop0: detected capacity change from 0 to 2048 [ 397.203763][T31114] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 194) [ 397.212616][T31114] FAT-fs (loop0): Filesystem has been set read-only [ 397.220510][T31114] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 194) [ 397.232652][T31114] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 194) [ 397.296634][T31117] loop4: detected capacity change from 0 to 256 [ 397.402315][T31127] loop2: detected capacity change from 0 to 2048 [ 397.412894][T31129] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3733'. [ 397.428442][T31124] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 194) [ 397.437351][T31124] FAT-fs (loop2): Filesystem has been set read-only [ 397.444451][T31124] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 194) [ 397.453033][T31124] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 194) [ 397.551849][T31133] program syz.2.3735 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 397.572727][T31119] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 397.627302][T31138] Cannot find add_set index 0 as target [ 397.638763][T31141] loop2: detected capacity change from 0 to 1024 [ 397.646405][T31141] EXT4-fs: Ignoring removed orlov option [ 397.667596][T31142] program syz.0.3739 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 397.713137][T31149] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 397.754770][T31152] loop1: detected capacity change from 0 to 1024 [ 397.761877][T31152] EXT4-fs: Ignoring removed orlov option [ 397.784719][T31158] tc_dump_action: action bad kind [ 397.805800][T31155] loop3: detected capacity change from 0 to 1024 [ 397.814431][T31155] EXT4-fs: Ignoring removed nobh option [ 397.820099][T31155] EXT4-fs: Ignoring removed bh option [ 397.884268][T31155] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4113: comm syz.3.3743: Allocating blocks 385-513 which overlap fs metadata [ 397.907048][T31164] loop0: detected capacity change from 0 to 1024 [ 397.915151][T31164] EXT4-fs: Ignoring removed nobh option [ 397.921770][T31164] EXT4-fs: Ignoring removed bh option [ 397.940189][T31155] EXT4-fs (loop3): pa ffff88810718a770: logic 16, phys. 129, len 24 [ 397.948498][T31155] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 397.967367][T31169] loop4: detected capacity change from 0 to 1024 [ 397.975073][T31169] EXT4-fs: Ignoring removed orlov option [ 397.979464][T31164] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4113: comm syz.0.3746: Allocating blocks 385-513 which overlap fs metadata [ 397.997926][T31163] EXT4-fs (loop0): pa ffff88810718a8c0: logic 16, phys. 129, len 24 [ 398.006161][T31163] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 398.162955][T31173] program syz.3.3748 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 398.218545][T31181] FAULT_INJECTION: forcing a failure. [ 398.218545][T31181] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 398.232520][T31181] CPU: 0 UID: 0 PID: 31181 Comm: syz.3.3751 Not tainted 6.15.0-rc6-syzkaller-00208-g3c21441eeffc #0 PREEMPT(voluntary) [ 398.232629][T31181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 398.232644][T31181] Call Trace: [ 398.232654][T31181] [ 398.232664][T31181] __dump_stack+0x1d/0x30 [ 398.232691][T31181] dump_stack_lvl+0xe8/0x140 [ 398.232717][T31181] dump_stack+0x15/0x1b [ 398.232792][T31181] should_fail_ex+0x265/0x280 [ 398.232838][T31181] should_fail+0xb/0x20 [ 398.232867][T31181] should_fail_usercopy+0x1a/0x20 [ 398.232902][T31181] _copy_from_user+0x1c/0xb0 [ 398.233013][T31181] ___sys_sendmsg+0xc1/0x1d0 [ 398.233060][T31181] __x64_sys_sendmsg+0xd4/0x160 [ 398.233094][T31181] x64_sys_call+0x2999/0x2fb0 [ 398.233121][T31181] do_syscall_64+0xd0/0x1a0 [ 398.233147][T31181] ? clear_bhb_loop+0x40/0x90 [ 398.233188][T31181] ? clear_bhb_loop+0x40/0x90 [ 398.233223][T31181] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 398.233250][T31181] RIP: 0033:0x7f6cab62e969 [ 398.233270][T31181] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 398.233293][T31181] RSP: 002b:00007f6ca9c97038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 398.233362][T31181] RAX: ffffffffffffffda RBX: 00007f6cab855fa0 RCX: 00007f6cab62e969 [ 398.233378][T31181] RDX: 0000000000000000 RSI: 0000200000002780 RDI: 0000000000000003 [ 398.233391][T31181] RBP: 00007f6ca9c97090 R08: 0000000000000000 R09: 0000000000000000 [ 398.233403][T31181] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 398.233415][T31181] R13: 0000000000000000 R14: 00007f6cab855fa0 R15: 00007ffd346b9e58 [ 398.233434][T31181] [ 398.423938][T31182] Cannot find add_set index 0 as target [ 398.460159][T31184] loop0: detected capacity change from 0 to 512 [ 398.467526][T31184] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 398.508648][T31184] EXT4-fs error (device loop0): ext4_get_branch:178: inode #11: block 4294967295: comm syz.0.3752: invalid block [ 398.521652][T31184] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.3752: invalid indirect mapped block 4294967295 (level 1) [ 398.589414][T31184] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.3752: invalid indirect mapped block 4294967295 (level 1) [ 398.651873][T31184] EXT4-fs (loop0): 2 truncates cleaned up [ 398.866132][T31215] loop2: detected capacity change from 0 to 1024 [ 398.884455][T31215] EXT4-fs: Ignoring removed orlov option [ 398.904434][T31219] loop1: detected capacity change from 0 to 512 [ 398.912909][T31219] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 398.915498][T31224] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=2048 sclass=netlink_audit_socket pid=31224 comm=syz.0.3767 [ 398.949027][T31225] loop4: detected capacity change from 0 to 2048 [ 398.958217][T31219] EXT4-fs (loop1): 1 truncate cleaned up [ 398.970655][T31225] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 194) [ 398.979742][T31225] FAT-fs (loop4): Filesystem has been set read-only [ 399.025345][T31225] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 194) [ 399.050984][T31225] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 194) [ 399.060013][T31236] __nla_validate_parse: 3 callbacks suppressed [ 399.060029][T31236] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3771'. [ 399.103395][T31240] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3774'. [ 399.159199][T31243] loop1: detected capacity change from 0 to 1024 [ 399.166326][T31243] EXT4-fs: Ignoring removed orlov option [ 399.254564][T31251] loop3: detected capacity change from 0 to 1024 [ 399.262743][T31251] EXT4-fs: Ignoring removed bh option [ 399.268375][T31251] EXT4-fs: inline encryption not supported [ 399.275197][T31251] EXT4-fs: Ignoring removed i_version option [ 399.283444][T31251] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 399.299244][T31251] EXT4-fs error (device loop3): ext4_map_blocks:709: inode #3: block 1: comm syz.3.3778: lblock 1 mapped to illegal pblock 1 (length 1) [ 399.317017][T31251] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.3778: Failed to acquire dquot type 0 [ 399.339203][T31255] loop4: detected capacity change from 0 to 1024 [ 399.348010][T31251] EXT4-fs error (device loop3): ext4_free_blocks:6587: comm syz.3.3778: Freeing blocks not in datazone - block = 0, count = 4096 [ 399.362256][T31251] EXT4-fs error (device loop3): ext4_read_inode_bitmap:139: comm syz.3.3778: Invalid inode bitmap blk 0 in block_group 0 [ 399.376991][T31251] EXT4-fs error (device loop3) in ext4_free_inode:361: Corrupt filesystem [ 399.381163][ T289] EXT4-fs error (device loop3): ext4_map_blocks:675: inode #3: block 1: comm kworker/u8:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 399.408950][T31251] EXT4-fs (loop3): 1 orphan inode deleted [ 399.409137][ T289] EXT4-fs error (device loop3): ext4_release_dquot:6971: comm kworker/u8:6: Failed to release dquot type 0 [ 399.433158][T31251] FAULT_INJECTION: forcing a failure. [ 399.433158][T31251] name failslab, interval 1, probability 0, space 0, times 0 [ 399.445902][T31251] CPU: 1 UID: 0 PID: 31251 Comm: syz.3.3778 Not tainted 6.15.0-rc6-syzkaller-00208-g3c21441eeffc #0 PREEMPT(voluntary) [ 399.445988][T31251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 399.446067][T31251] Call Trace: [ 399.446076][T31251] [ 399.446087][T31251] __dump_stack+0x1d/0x30 [ 399.446114][T31251] dump_stack_lvl+0xe8/0x140 [ 399.446186][T31251] dump_stack+0x15/0x1b [ 399.446204][T31251] should_fail_ex+0x265/0x280 [ 399.446243][T31251] should_failslab+0x8c/0xb0 [ 399.446273][T31251] kmem_cache_alloc_noprof+0x50/0x310 [ 399.446335][T31251] ? getname_flags+0x80/0x3b0 [ 399.446455][T31251] getname_flags+0x80/0x3b0 [ 399.446495][T31251] user_path_at+0x28/0x130 [ 399.446521][T31251] __x64_sys_umount+0x85/0xe0 [ 399.446547][T31251] x64_sys_call+0x2915/0x2fb0 [ 399.446637][T31251] do_syscall_64+0xd0/0x1a0 [ 399.446660][T31251] ? clear_bhb_loop+0x40/0x90 [ 399.446687][T31251] ? clear_bhb_loop+0x40/0x90 [ 399.446712][T31251] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.446738][T31251] RIP: 0033:0x7f6cab62e969 [ 399.446756][T31251] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 399.446775][T31251] RSP: 002b:00007f6ca9c97038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 399.446863][T31251] RAX: ffffffffffffffda RBX: 00007f6cab855fa0 RCX: 00007f6cab62e969 [ 399.446881][T31251] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 00002000000002c0 [ 399.446898][T31251] RBP: 00007f6ca9c97090 R08: 0000000000000000 R09: 0000000000000000 [ 399.446960][T31251] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 399.446977][T31251] R13: 0000000000000000 R14: 00007f6cab855fa0 R15: 00007ffd346b9e58 [ 399.447004][T31251] [ 399.631205][T31255] ext4 filesystem being mounted at /145/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 399.664679][T31255] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm +}[@: bg 0: block 393: padding at end of block bitmap is not set [ 399.681024][T31255] EXT4-fs (loop4): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 186 with error 117 [ 399.693814][T31255] EXT4-fs (loop4): This should not happen!! Data will be lost [ 399.693814][T31255] [ 399.764064][T31260] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3780'. [ 399.773334][T31260] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3780'. [ 399.790095][T31262] loop2: detected capacity change from 0 to 1024 [ 399.797227][T31262] EXT4-fs: Ignoring removed bh option [ 399.803886][T31262] EXT4-fs: inline encryption not supported [ 399.809862][T31262] EXT4-fs: Ignoring removed i_version option [ 399.856645][T31268] loop4: detected capacity change from 0 to 512 [ 399.860235][T31262] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 399.874460][T31266] loop3: detected capacity change from 0 to 1024 [ 399.881414][T31268] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 399.891929][T31266] EXT4-fs: Ignoring removed nobh option [ 399.898187][T31266] EXT4-fs: Ignoring removed bh option [ 399.914289][T31268] EXT4-fs (loop4): 1 truncate cleaned up [ 399.940722][T31272] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3785'. [ 399.943422][T31262] EXT4-fs error (device loop2): ext4_map_blocks:709: inode #3: block 1: comm syz.2.3782: lblock 1 mapped to illegal pblock 1 (length 1) [ 399.967755][T31262] EXT4-fs error (device loop2): ext4_acquire_dquot:6935: comm syz.2.3782: Failed to acquire dquot type 0 [ 399.987181][T31262] EXT4-fs error (device loop2): ext4_free_blocks:6587: comm syz.2.3782: Freeing blocks not in datazone - block = 0, count = 4096 [ 400.022938][T31277] tc_dump_action: action bad kind [ 400.028750][T31262] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.3782: Invalid inode bitmap blk 0 in block_group 0 [ 400.041870][ T1990] EXT4-fs error (device loop2): ext4_map_blocks:675: inode #3: block 1: comm kworker/u8:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 400.060055][ T1990] EXT4-fs error (device loop2): ext4_release_dquot:6971: comm kworker/u8:7: Failed to release dquot type 0 [ 400.074361][T31262] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem [ 400.098179][T31283] loop0: detected capacity change from 0 to 512 [ 400.105013][T31262] EXT4-fs (loop2): 1 orphan inode deleted [ 400.120829][T31283] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 400.154057][T31286] loop4: detected capacity change from 0 to 2048 [ 400.164220][T31283] EXT4-fs (loop0): 1 truncate cleaned up [ 400.184417][T31286] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 194) [ 400.188664][T31294] loop3: detected capacity change from 0 to 1024 [ 400.193329][T31286] FAT-fs (loop4): Filesystem has been set read-only [ 400.207306][T31286] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 194) [ 400.218164][T31286] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 194) [ 400.229794][T31296] loop1: detected capacity change from 0 to 2048 [ 400.239075][T31294] ext4 filesystem being mounted at /115/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 400.252392][T31295] loop2: detected capacity change from 0 to 164 [ 400.268041][T31295] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 400.278872][T31294] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm +}[@: bg 0: block 393: padding at end of block bitmap is not set [ 400.281158][T31296] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 194) [ 400.301606][T31296] FAT-fs (loop1): Filesystem has been set read-only [ 400.309108][T31295] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 400.310491][T31296] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 194) [ 400.326331][T31296] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 194) [ 400.326392][T31295] Symlink component flag not implemented [ 400.338689][T31302] siw: device registration error -23 [ 400.340291][T31295] Symlink component flag not implemented [ 400.350230][T31294] EXT4-fs (loop3): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 186 with error 117 [ 400.364632][T31294] EXT4-fs (loop3): This should not happen!! Data will be lost [ 400.364632][T31294] [ 400.379454][T31295] Symlink component flag not implemented (7) [ 400.385944][T31295] Symlink component flag not implemented (116) [ 400.392337][T31307] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3794'. [ 400.399644][T31306] loop0: detected capacity change from 0 to 1024 [ 400.447071][T31313] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3798'. [ 400.462260][ T29] kauditd_printk_skb: 328 callbacks suppressed [ 400.462279][ T29] audit: type=1326 audit(1747429867.712:36558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31305 comm="syz.0.3796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd5f4add2d0 code=0x7ffc0000 [ 400.482400][T31315] tc_dump_action: action bad kind [ 400.493303][ T29] audit: type=1326 audit(1747429867.712:36559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31305 comm="syz.0.3796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7fd5f4add6b7 code=0x7ffc0000 [ 400.523306][ T29] audit: type=1326 audit(1747429867.712:36560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31305 comm="syz.0.3796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd5f4add2d0 code=0x7ffc0000 [ 400.548251][ T29] audit: type=1326 audit(1747429867.712:36561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31305 comm="syz.0.3796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5f4ade969 code=0x7ffc0000 [ 400.572505][ T29] audit: type=1326 audit(1747429867.712:36562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31305 comm="syz.0.3796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5f4ade969 code=0x7ffc0000 [ 400.597453][ T29] audit: type=1326 audit(1747429867.712:36563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31305 comm="syz.0.3796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd5f4ade969 code=0x7ffc0000 [ 400.621665][ T29] audit: type=1326 audit(1747429867.712:36564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31305 comm="syz.0.3796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5f4ade969 code=0x7ffc0000 [ 400.646019][ T29] audit: type=1326 audit(1747429867.712:36565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31305 comm="syz.0.3796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd5f4ade969 code=0x7ffc0000 [ 400.669855][ T29] audit: type=1326 audit(1747429867.712:36566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31305 comm="syz.0.3796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5f4ade969 code=0x7ffc0000 [ 400.693559][ T29] audit: type=1326 audit(1747429867.712:36567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31305 comm="syz.0.3796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd5f4ade969 code=0x7ffc0000 [ 400.727466][T31319] loop4: detected capacity change from 0 to 1024 [ 400.741136][T31319] EXT4-fs: Ignoring removed orlov option [ 400.857618][T31333] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 400.990368][T31337] vhci_hcd: invalid port number 65 [ 400.995753][T31337] vhci_hcd: invalid port number 65 [ 401.005866][T31340] loop2: detected capacity change from 0 to 2048 [ 401.025056][T31342] loop1: detected capacity change from 0 to 2048 [ 401.057501][T31340] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 194) [ 401.066393][T31340] FAT-fs (loop2): Filesystem has been set read-only [ 401.080985][T31340] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 194) [ 401.090188][T31340] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 194) [ 401.111661][T31342] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 194) [ 401.121018][T31342] FAT-fs (loop1): Filesystem has been set read-only [ 401.127975][T31342] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 194) [ 401.136626][T31342] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 194) [ 401.196931][T31346] FAULT_INJECTION: forcing a failure. [ 401.196931][T31346] name failslab, interval 1, probability 0, space 0, times 0 [ 401.209916][T31346] CPU: 1 UID: 0 PID: 31346 Comm: syz.2.3812 Not tainted 6.15.0-rc6-syzkaller-00208-g3c21441eeffc #0 PREEMPT(voluntary) [ 401.209952][T31346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 401.209982][T31346] Call Trace: [ 401.209988][T31346] [ 401.209996][T31346] __dump_stack+0x1d/0x30 [ 401.210017][T31346] dump_stack_lvl+0xe8/0x140 [ 401.210036][T31346] dump_stack+0x15/0x1b [ 401.210136][T31346] should_fail_ex+0x265/0x280 [ 401.210174][T31346] should_failslab+0x8c/0xb0 [ 401.210310][T31346] kmem_cache_alloc_noprof+0x50/0x310 [ 401.210337][T31346] ? getname_flags+0x80/0x3b0 [ 401.210371][T31346] getname_flags+0x80/0x3b0 [ 401.210401][T31346] getname_uflags+0x21/0x30 [ 401.210458][T31346] __x64_sys_execveat+0x5d/0x90 [ 401.210530][T31346] x64_sys_call+0x2dae/0x2fb0 [ 401.210555][T31346] do_syscall_64+0xd0/0x1a0 [ 401.210719][T31346] ? clear_bhb_loop+0x40/0x90 [ 401.210749][T31346] ? clear_bhb_loop+0x40/0x90 [ 401.210777][T31346] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.210811][T31346] RIP: 0033:0x7f60e539e969 [ 401.210830][T31346] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 401.210949][T31346] RSP: 002b:00007f60e3a07038 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 401.210969][T31346] RAX: ffffffffffffffda RBX: 00007f60e55c5fa0 RCX: 00007f60e539e969 [ 401.210984][T31346] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 401.211000][T31346] RBP: 00007f60e3a07090 R08: 0000000000001000 R09: 0000000000000000 [ 401.211027][T31346] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 401.211043][T31346] R13: 0000000000000000 R14: 00007f60e55c5fa0 R15: 00007fff70c9a118 [ 401.211068][T31346] [ 401.657295][T31350] tc_dump_action: action bad kind [ 401.772164][T31363] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 401.805563][T31366] vhci_hcd: invalid port number 65 [ 401.810750][T31366] vhci_hcd: invalid port number 65 [ 401.928333][T31368] loop1: detected capacity change from 0 to 8192 [ 401.946289][T31372] loop0: detected capacity change from 0 to 164 [ 401.966991][T31382] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 401.981945][T31372] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 401.997991][T31372] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 402.009940][T31382] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 402.019261][T31372] Symlink component flag not implemented [ 402.025002][T31372] Symlink component flag not implemented [ 402.032473][T31372] Symlink component flag not implemented (7) [ 402.038515][T31372] Symlink component flag not implemented (116) [ 402.048184][T31387] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3823'. [ 402.062841][T31382] loop2: detected capacity change from 0 to 256 [ 402.120429][T31391] loop4: detected capacity change from 0 to 2048 [ 402.136651][T31391] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 194) [ 402.145574][T31391] FAT-fs (loop4): Filesystem has been set read-only [ 402.154700][T31391] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 194) [ 402.172411][T31391] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 194) [ 402.267562][T31388] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 0) [ 402.276344][T31388] FAT-fs (loop1): Filesystem has been set read-only [ 402.283213][T31388] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 402.303613][T31368] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 402.330293][T31402] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 402.352578][T31404] vhci_hcd: invalid port number 65 [ 402.358481][T31404] vhci_hcd: invalid port number 65 [ 402.504971][T31421] bridge_slave_1: left allmulticast mode [ 402.510868][T31421] bridge_slave_1: left promiscuous mode [ 402.516586][T31415] loop3: detected capacity change from 0 to 164 [ 402.516952][T31421] bridge0: port 2(bridge_slave_1) entered disabled state [ 402.539916][T31421] bridge_slave_0: left allmulticast mode [ 402.545727][T31421] bridge_slave_0: left promiscuous mode [ 402.551583][T31421] bridge0: port 1(bridge_slave_0) entered disabled state [ 402.560570][T31415] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 402.574420][T31421] bridge0 (unregistering): left promiscuous mode [ 402.584673][T31415] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 402.593448][T31415] Symlink component flag not implemented [ 402.599414][T31415] Symlink component flag not implemented [ 402.606693][T31415] Symlink component flag not implemented (7) [ 402.612862][T31415] Symlink component flag not implemented (116) [ 402.637520][T31415] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3841'. [ 402.687243][T31428] loop2: detected capacity change from 0 to 164 [ 402.694738][T31428] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 402.699214][T31432] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3843'. [ 402.707601][T31428] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 402.722721][T31428] Symlink component flag not implemented [ 402.729175][T31428] Symlink component flag not implemented [ 402.735362][T31428] Symlink component flag not implemented (7) [ 402.741508][T31428] Symlink component flag not implemented (116) [ 402.836881][T31438] program syz.2.3847 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 402.875706][T31440] loop3: detected capacity change from 0 to 2048 [ 402.908264][T31435] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 194) [ 402.917546][T31435] FAT-fs (loop3): Filesystem has been set read-only [ 402.925032][T31435] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 194) [ 402.959596][T31435] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 194) [ 402.985714][T31446] vhci_hcd: invalid port number 65 [ 402.991904][T31446] vhci_hcd: invalid port number 65 [ 403.052408][T31452] loop0: detected capacity change from 0 to 1024 [ 403.059613][T31452] EXT4-fs: Ignoring removed orlov option [ 403.071469][T31451] bond1: entered promiscuous mode [ 403.076943][T31451] bond1: entered allmulticast mode [ 403.083677][T31451] 8021q: adding VLAN 0 to HW filter on device bond1 [ 403.106641][T31451] bond1 (unregistering): Released all slaves [ 403.132440][T31455] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 403.147765][T31452] EXT4-fs mount: 83 callbacks suppressed [ 403.147788][T31452] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 403.235039][T31459] loop3: detected capacity change from 0 to 1024 [ 403.254331][T31460] loop2: detected capacity change from 0 to 2048 [ 403.371477][T31460] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 194) [ 403.380264][T31460] FAT-fs (loop2): Filesystem has been set read-only [ 403.392961][T31460] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 194) [ 403.404705][T31460] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 194) [ 403.434301][T31464] loop1: detected capacity change from 0 to 1024 [ 403.446583][T31464] EXT4-fs: Ignoring removed oldalloc option [ 403.453279][T31464] EXT4-fs: Ignoring removed bh option [ 403.459091][T31459] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 403.471534][T31459] ext4 filesystem being mounted at /124/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 403.494713][T31459] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm +}[@: bg 0: block 393: padding at end of block bitmap is not set [ 403.510595][T31459] EXT4-fs (loop3): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 186 with error 117 [ 403.523489][T31459] EXT4-fs (loop3): This should not happen!! Data will be lost [ 403.523489][T31459] [ 403.543307][T31459] siw: device registration error -23 [ 403.595316][T31468] loop2: detected capacity change from 0 to 8192 [ 403.631126][T31464] EXT4-fs (loop1): can't mount with data_err=abort, fs mounted w/o journal [ 403.690323][T29023] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 403.756227][T31472] program syz.1.3858 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 403.775999][T31475] loop3: detected capacity change from 0 to 1024 [ 403.793633][T31475] EXT4-fs: Ignoring removed oldalloc option [ 403.800434][T31475] EXT4-fs: Ignoring removed bh option [ 403.857756][T31475] EXT4-fs (loop3): can't mount with data_err=abort, fs mounted w/o journal [ 403.903081][T31480] loop1: detected capacity change from 0 to 164 [ 403.913700][T31480] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 403.940398][T31480] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 403.984768][T31484] loop3: detected capacity change from 0 to 164 [ 403.993545][T25139] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 403.994224][T31480] Symlink component flag not implemented [ 404.003197][T31484] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 404.008513][T31480] Symlink component flag not implemented [ 404.030937][T31480] Symlink component flag not implemented (7) [ 404.033213][T31484] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 404.036984][T31480] Symlink component flag not implemented (116) [ 404.046866][T31484] Symlink component flag not implemented [ 404.057664][T31484] Symlink component flag not implemented [ 404.064188][T31484] Symlink component flag not implemented (7) [ 404.070563][T31484] Symlink component flag not implemented (116) [ 404.086661][T31484] __nla_validate_parse: 4 callbacks suppressed [ 404.086682][T31484] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3861'. [ 404.096140][T31468] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 404.112470][T31468] FAT-fs (loop2): Filesystem has been set read-only [ 404.124524][T31470] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 404.144179][T31492] loop0: detected capacity change from 0 to 2048 [ 404.158222][T31492] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 194) [ 404.167219][T31492] FAT-fs (loop0): Filesystem has been set read-only [ 404.188295][T31492] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 194) [ 404.209857][T31492] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 194) [ 404.299193][T31500] loop3: detected capacity change from 0 to 2048 [ 404.301935][T31502] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3868'. [ 404.330838][T31500] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 194) [ 404.340983][T31500] FAT-fs (loop3): Filesystem has been set read-only [ 404.352193][T31502] loop0: detected capacity change from 0 to 1024 [ 404.360340][T31502] EXT4-fs: Ignoring removed oldalloc option [ 404.367154][T31500] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 194) [ 404.372617][T31505] loop2: detected capacity change from 0 to 1024 [ 404.376862][T31502] EXT4-fs: Ignoring removed bh option [ 404.387522][T31500] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 194) [ 404.402221][T31502] EXT4-fs (loop0): can't mount with data_err=abort, fs mounted w/o journal [ 404.402786][T31505] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 404.423938][T31505] ext4 filesystem being mounted at /179/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 404.443470][T31505] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm +}[@: bg 0: block 393: padding at end of block bitmap is not set [ 404.461084][T31505] EXT4-fs (loop2): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 186 with error 117 [ 404.474747][T31505] EXT4-fs (loop2): This should not happen!! Data will be lost [ 404.474747][T31505] [ 404.487462][T31511] program syz.0.3869 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 404.525087][T31515] siw: device registration error -23 [ 404.551473][T31519] loop0: detected capacity change from 0 to 512 [ 404.578324][T26862] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 404.595001][T31519] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 404.612472][T31519] EXT4-fs (loop0): 1 truncate cleaned up [ 404.618656][T31519] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 404.661601][T31519] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3872'. [ 404.661706][T31528] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=2048 sclass=netlink_audit_socket pid=31528 comm=syz.2.3876 [ 404.745398][T31536] SELinux: Context : is not valid (left unmapped). [ 404.764281][T31532] loop3: detected capacity change from 0 to 128 [ 404.795162][T31532] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 404.827812][T31540] program syz.2.3880 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 404.842318][T31532] ext4 filesystem being mounted at /133/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 404.893253][T31543] loop4: detected capacity change from 0 to 2048 [ 404.908786][T31543] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 194) [ 404.918222][T31543] FAT-fs (loop4): Filesystem has been set read-only [ 404.926751][T31547] loop2: detected capacity change from 0 to 1024 [ 404.949700][T29023] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 404.956306][T31543] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 194) [ 404.960058][T31547] EXT4-fs: Ignoring removed orlov option [ 404.967130][T31543] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 194) [ 404.996669][T31547] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 405.011199][T25139] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 405.051443][T31554] loop0: detected capacity change from 0 to 128 [ 405.062499][T31554] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 405.079319][T31559] loop4: detected capacity change from 0 to 128 [ 405.106996][T31554] ext4 filesystem being mounted at /217/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 405.128586][T31561] Cannot find add_set index 0 as target [ 405.197365][T25139] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 405.276239][T31569] loop4: detected capacity change from 0 to 2048 [ 405.322977][T31573] program syz.3.3893 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 405.361313][T31569] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 194) [ 405.370552][T31569] FAT-fs (loop4): Filesystem has been set read-only [ 405.427304][T31569] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 194) [ 405.465754][T31547] ================================================================== [ 405.474064][T31547] BUG: KCSAN: data-race in move_expired_inodes / vfs_fsync_range [ 405.481908][T31547] [ 405.484248][T31547] read-write to 0xffff888117b24a98 of 4 bytes by task 31 on cpu 1: [ 405.492160][T31547] move_expired_inodes+0x17a/0x400 [ 405.497554][T31547] queue_io+0xd9/0x2c0 [ 405.501910][T31547] wb_writeback+0x226/0x5c0 [ 405.506860][T31547] wb_workfn+0x4c9/0x910 [ 405.511130][T31547] process_scheduled_works+0x4ce/0x9d0 [ 405.516704][T31547] worker_thread+0x582/0x770 [ 405.521324][T31547] kthread+0x489/0x510 [ 405.525408][T31547] ret_from_fork+0x4b/0x60 [ 405.529850][T31547] ret_from_fork_asm+0x1a/0x30 [ 405.535247][T31547] [ 405.537591][T31547] read to 0xffff888117b24a98 of 4 bytes by task 31547 on cpu 0: [ 405.545508][T31547] vfs_fsync_range+0x9b/0x130 [ 405.550222][T31547] ext4_buffered_write_iter+0x34f/0x3c0 [ 405.555803][T31547] ext4_file_write_iter+0xdbf/0xf00 [ 405.561041][T31547] iter_file_splice_write+0x5ef/0x970 [ 405.566522][T31547] direct_splice_actor+0x156/0x2a0 [ 405.571657][T31547] splice_direct_to_actor+0x312/0x680 [ 405.577049][T31547] do_splice_direct+0xda/0x150 [ 405.581830][T31547] do_sendfile+0x380/0x640 [ 405.586346][T31547] __x64_sys_sendfile64+0x105/0x150 [ 405.591575][T31547] x64_sys_call+0xb39/0x2fb0 [ 405.596374][T31547] do_syscall_64+0xd0/0x1a0 [ 405.601981][T31547] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.608453][T31547] [ 405.610934][T31547] value changed: 0x00000020 -> 0x00010022 [ 405.618085][T31547] [ 405.620966][T31547] Reported by Kernel Concurrency Sanitizer on: [ 405.627793][T31547] CPU: 0 UID: 0 PID: 31547 Comm: syz.2.3883 Not tainted 6.15.0-rc6-syzkaller-00208-g3c21441eeffc #0 PREEMPT(voluntary) [ 405.642322][T31547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 405.653095][T31547] ================================================================== [ 405.672408][T31584] loop3: detected capacity change from 0 to 2048 [ 405.686072][T31584] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 194) [ 405.695226][T31584] FAT-fs (loop3): Filesystem has been set read-only [ 405.702422][T31584] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 194) [ 405.714750][T31584] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 194) [ 405.725098][T31569] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 194) [ 405.799965][T26862] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.