last executing test programs: 4.126060005s ago: executing program 0 (id=480): symlinkat(&(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) 4.036746593s ago: executing program 0 (id=482): bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r0}, 0x10) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r3}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r5 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), r2) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) r7 = openat$cgroup_int(r6, &(0x7f00000001c0)='cgroup.max.depth\x00', 0x2, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00') preadv(r9, &(0x7f0000000040)=[{&(0x7f0000002240)=""/13, 0xd}], 0x1, 0x3a, 0x3) pread64(r9, &(0x7f00000000c0)=""/118, 0x76, 0x9) write$cgroup_int(r7, &(0x7f0000000000), 0x12) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x17, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x87, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r10}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x40000}, {0x85, 0x0, 0x0, 0x86}}, {}, [@printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000080)='GPL\x00', 0x6, 0x1001, &(0x7f0000001cc0)=""/4097, 0x41000, 0x23}, 0x94) sendfile(r8, r7, 0x0, 0x4) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000000209000200737997310000000008000a40fffffffc14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}], {0xb}}, 0x54}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004000) unshare(0x20040600) r11 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r11, 0x11b, 0x8, 0xffffffffffffffff, &(0x7f00000001c0)=0x4) write$cgroup_int(r2, &(0x7f00000001c0), 0xfffffdef) 3.733575083s ago: executing program 1 (id=483): timer_create(0x3, 0x0, &(0x7f00000001c0)=0x0) openat2(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x290400, 0x1ce, 0x52}, 0x18) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x3938700}, {0x0, 0x9}}, 0x0) timer_gettime(r0, &(0x7f0000000380)) r1 = gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) writev(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) open(0x0, 0x60840, 0x0) r3 = add_key$keyring(&(0x7f0000000480), &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000009c0)="010000000037a788a11d1f000000000000006923c63a4541062101b60a2156566de770620865", 0x26, r3) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000007000000000000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r4}, 0x18) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x122}, 0x1, 0x0, 0x0, 0x40000}, 0x80d0) timer_getoverrun(r2) 3.623093834s ago: executing program 1 (id=484): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) rseq(&(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3, 0xad, 0x66, 0x9b}, 0x4}, 0x20, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x3996}}, './file0\x00'}) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0x4, 0x81, 0xfffffffb}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setreuid(0xee01, 0xee01) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, r3, 0x0, 0x4, 0x0) r4 = syz_pidfd_open(r3, 0x0) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xf32}) pidfd_send_signal(r4, 0x2, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x89f2, &(0x7f0000000900)={'ip6_vti0\x00', @random="0600002000"}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MPATH(r1, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x40, r5, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0xd13508aa2f81b777) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, r7, 0x8001}}, 0x48) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r9}, 0x10) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0), r1) sendmsg$TIPC_NL_SOCK_GET(r1, &(0x7f0000000580)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80002000}, 0xc, &(0x7f0000000540)={&(0x7f0000000400)={0x10c, r10, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'gretap0\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @multicast1}}, {0x14, 0x2, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x448b}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8000}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x40}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xc}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xad5d}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}, @TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_LINK={0x2c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x10c}, 0x1, 0x0, 0x0, 0x20008001}, 0x800) 3.439095562s ago: executing program 1 (id=485): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000000000f6000000006debff00850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendfile(r0, r0, &(0x7f0000000080)=0x8, 0xd) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) openat$ptp0(0xffffffffffffff9c, 0x0, 0x88000, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="1900000004"], 0x48) r2 = syz_open_dev$vcsa(&(0x7f0000000000), 0xf69, 0x4040) ioctl$TUNSETOFFLOAD(r2, 0x541b, 0xf0ff1f00000002) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) mincore(&(0x7f0000ff5000/0x4000)=nil, 0x4000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000818"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$vsock_stream(0x28, 0x1, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="09000000070000000000010003"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00'}, 0x18) bind$vsock_stream(r3, &(0x7f0000000440), 0x10) listen(r3, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) writev(r5, &(0x7f0000000080)=[{&(0x7f00000001c0)='?', 0x1}], 0x1) r6 = accept4$unix(r3, 0x0, 0x0, 0x0) recvmsg(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000480)=""/68, 0x44}], 0x1}, 0x4c2103a0) r7 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x32) write(r7, &(0x7f00000001c0)="49bda8f11851b8436bebb25ac5f8202ffbcc3d0b6c01", 0x16) sendfile(r7, r1, 0x0, 0x3ffff) sendfile(r7, r1, 0x0, 0x7ffffffffffffffd) epoll_create(0x80f04) socket$nl_route(0x10, 0x3, 0x0) 3.350678651s ago: executing program 2 (id=486): syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @random="6cf6566994c6", @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x0, 0x1a, 0x24, 0x64, 0x1, 0x81, 0x21, 0x0, @remote, @rand_addr=0x64010102}, {{0x4e21, 0x4e21, 0x4, 0x1, 0x3, 0x0, 0x0, 0x7, 0x6, "d754e9", 0xdf, "b23ccc"}}}}}}, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000ec0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000100d01000001000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1}, &(0x7f0000000340), &(0x7f0000000380)=r2}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000006c0)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000580)="9e14f088a8000000000000000000", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r4 = fcntl$dupfd(r3, 0x0, r3) write$sndseq(r4, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32={[0xc, 0x40]}}, {0x0, 0x0, 0x0, 0x0, @time={0x7f63, 0xa}, {0x0, 0x59}, {0x0, 0xff}, @time=@tick=0xfffffffe}], 0x38) read$char_usb(r4, 0x0, 0x0) 3.269423819s ago: executing program 2 (id=487): r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r1}, 0x18) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0x1, 0x120d, &(0x7f0000001280)="$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") r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x2, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = memfd_secret(0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={r5, r4, 0x2e, 0x4608, @void}, 0x10) ioctl$BTRFS_IOC_SYNC(r4, 0x9408, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x2}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r7, 0x0, r9, 0x0, 0x8000f28, 0x0) splice(r8, 0x0, r7, 0x0, 0x7f, 0xe) write(r6, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x4012831, 0xffffffffffffffff, 0x0) r10 = syz_open_procfs(0x0, &(0x7f0000000580)='smaps_rollup\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) lseek(r10, 0x2004, 0x0) socket(0x40000000015, 0x5, 0x0) 3.062405279s ago: executing program 0 (id=488): syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000000)='./file0\x00', 0x800090, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x6, 0x2d1, &(0x7f0000000740)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) ftruncate(r0, 0xc17a) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000002000a54000000060a01040000000000a77c7599a958fdc9377d880000000200ffff200004801c0001800b00010065787468647200000c00028008000140000000130900010073791c646d4a000009ffffffffffffffff00000005000740ba000000140000001100010000000000000000000000000a"], 0x7c}}, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x200000e, 0x6c033, 0xffffffffffffffff, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r2, &(0x7f0000000500)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, r3, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x400c0c4}, 0x4000) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000080000000c"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000000000000000000000080021850000006d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r5}, 0xd) r6 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$PIO_UNIMAPCLR(r6, 0x4b68, 0x0) 2.987955006s ago: executing program 4 (id=489): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0, 0x0, 0x7}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b40500000000fd8f711075000000000072050200000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) gettid() timer_create(0x0, 0x0, &(0x7f0000000300)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000007800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x18, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) symlink(&(0x7f00000003c0)='./file0/file0/..\x00', &(0x7f0000000240)='./file1\x00') 2.893098316s ago: executing program 2 (id=491): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x4, 0x0, &(0x7f00000000c0)=0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff000000aa30d38ed4993b3691a7731300bfa200000000000007020000f8ffffffb703000008000000b7040000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000a00)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000002a00000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = open(0x0, 0x4001410c2, 0x766c618eb221465a) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r2, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000380)=[0x0], 0x0, 0x54, &(0x7f00000003c0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000400), &(0x7f0000000440), 0x8, 0xce, 0x8, 0x8, &(0x7f0000000480)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000700)={0x6, r0, 'id0\x00'}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYRES32=0x0, @ANYBLOB], 0x50) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) r4 = socket(0x10, 0x803, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=@newtfilter={0x24, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0xf}, {}, {0x7, 0x9}}}, 0x24}}, 0x404c004) 2.863979188s ago: executing program 0 (id=492): open(&(0x7f0000000180)='./file0\x00', 0x8000, 0x179) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x2, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x21, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000ffffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000e0000001811"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000240), 0x4) r2 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010029bd7000fcdbdf2500010000", @ANYRES32=0x0, @ANYBLOB="1a8904000a00000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x6000000) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x609, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1b011}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_NET_NS_PID={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x0) 2.834711021s ago: executing program 2 (id=493): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r1}, 0x10) r2 = io_uring_setup(0x792b, &(0x7f0000000600)={0x0, 0x2002, 0x400, 0x0, 0x4b1}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001580)={0x0, 0xffffffffffffff3c, &(0x7f0000000300)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911040000000000000003c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62458c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f00000025c0)="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", 0xcb3}, {&(0x7f00000006c0)="97b13f5cf9f584c87e0e637d2ff483a311bb412cb3b03c3d9e97e435f2fceb58ff0402ed7b96244b43386c222917662028d7a01206a1990722ccef1d8f39f7c8ae242e58359217b1c6161ea741445cf16b0c48eb18a6c72174dfb7cd1bd0f409dad5a432bed4afb470da3656dd30d70769e229dc91037321d618e1eff4a176ea46d5cd4d5da97f80356e46d9e8166bf2d97210b631654ece218a2a204a1786ab5a60a881a7a294cd2f92438350e6e3ec4439ebe06133ff65b1e32b809ba0482783b563ec8e5778285da5211e5821135433053a7921319c544d5e797f"}, {&(0x7f00000007c0)="75c37714a0bada8343bceb64ccb6d95a2a37b020e0bf1f6a1de4584223a2f285aaca30a9554cd5cdc1659cb9fec462cc5c2220a7cd891ec3bad99fe3c06e15a109ec0fdb6aeeee5ef8e4bfc28e17984a3860b907d549492d47a447782b7357ea72f4b2c26512a6a33c0247b730a6182ea5a99aee25fcee07f9cb0a80595cd5f744fa6898fdffda5b34b19474b8e853467329e4aea36cfd0e00735d37beb0f895c5688259a8935194eefd3a96d55707133a08f03e14da563160a545396b93341f41c161c93687e28a"}, {&(0x7f0000000b00)="1b080b7a30aec939ce8e26e0cbbe37fc064ceef965fd5e3b6739c966492dbdf71c04423d8a403e56dfd224e4e55918a5e31e683fec5cc9460882a0d1628d02d51a8da997073f856e2cd00586c6e8c89c71cf8be6121b0b3a85d597a1afb0cc311f30cc26183c8e594ce5ff62661c9e32cbc9dd9a72985e9857f3bddb52382b6c27ca85d5774cf17b92e2d2097f12a8687e70f90d46381a47706a9124a2cf61b84f26aae22fd4da84ae35b93f7be9fdfdfbf33c59f5c657e9f7e81b81b786082f88af4de07808ff3c954bae"}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r4, &(0x7f0000001140)={0x0, 0x2, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1}, 0x40000100) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) socket$nl_route(0x10, 0x3, 0x0) socket(0xa, 0x1, 0x0) openat(0xffffffffffffff9c, 0x0, 0x142, 0x106) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x3, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}, {0x8, 0x5, 0xd, 0x3e51}, {0xd, 0x8, 0x3, 0x8}]}) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x9400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x9, 0x7}, 0x100, 0xa88, 0x8406, 0x5, 0x0, 0x3c, 0xffff, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) ioperm(0x4, 0x1, 0x6) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18000, &(0x7f0000000240)=ANY=[@ANYRES32=0x0, @ANYRESOCT, @ANYRES16=0x0, @ANYRES32, @ANYBLOB="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", @ANYRESOCT], 0x8, 0x2f6, &(0x7f0000000880)="$eJzs3M9PE1sUwPHTH5S2BMri5b08E8ONbnQzgepaaQwkxiYSpMYfickAU206tqTTQGqM6Mqt8Y9wQViyI1H+ATbudOPGHRsTF7Iwjul0htIyUCmljfT7Scgceu+ZObct5EzTmZ17b57ms5aW1csSjCoJiIjsioxKUDwBdxt04ojs91IuD33/dP7O/Qe3Uun01KxS06m5K0ml1MjY+5XnMXfa5qBsjz7a+Zb8uv3v9v87v+ae5CyVs1ShWFa6mi9+KevzpqEWc1ZeU2rGNHTLULmCZZRq48XaeNYsLi1VlF5YHI4vlQzLUnqhovJGRZWLqlyqqNBjPVdQmqap4biglcza7KyeajN5ocPF4JSUSik9JCKxAyOZtZ4UBAAAeqq5/w+K6mT/v35hqzx0d2PE7f83I379/9XPtX019P9REfHt/73j+/b/+vH6/4MdUX85Uf9fFe1gMWjPWOTAQ4F6WB0spfS4+/frePVwfdwJ6P8BAAAAAAAAAAAAAAAAAAAAAPgb7Np2wrbthLf1fgbdizu8331SQyJyvQclo4NO8PrjDKhfuBceETFfL2eWM7WtO2FLREwxZFwS8tN5P7iqsXflkaoalQ/mqpu/upwJOSOprOSc/AlJDEhzvm1P30xPTaiaxvwBie/PT0pC/vHPT/rmR+TSxX35miTk44IUxZRFp456/osJpW7cTjflx5x5AAAAAACcBZra43v+rmmHjdfy986vmz8fCNXPr8d9z8/Dci7c27UDAAAAANAvrMqzvG6aRumIICat57QfhE9pz94K/zTL+y7D6a30iMA7eMOQd3Pdjj8tgWM8LYcEwYZSV7xKW2SNVeeok67C+9josDkyM9n9V9AJ/nv77kfndnhtI9pipe0HoaPfAANd+ecDAAAAoKvqTb/3yGRvCwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoA914+5ojUfkpv8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADoX78DAAD//0WxAls=") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x5}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=@newtfilter={0x4e8, 0x2c, 0xd2b, 0x70bd2b, 0x35dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xf}, {}, {0x9, 0x2}}, [@filter_kind_options=@f_u32={{0x8}, {0x4bc, 0x2, [@TCA_U32_POLICE={0x444, 0x6, [@TCA_POLICE_RATE={0x404, 0x2, [0x2dbc04b6, 0x1, 0x10, 0xa, 0x4, 0x0, 0x3, 0x10, 0x7, 0x9, 0x0, 0xd, 0x8, 0x5, 0x7f, 0x9, 0x9, 0x4, 0x81, 0x5, 0x537d, 0x0, 0xfffffffa, 0x12000000, 0x6, 0x3, 0x4, 0x0, 0xffffffff, 0x8, 0x0, 0x1, 0x7, 0x7fff, 0x0, 0x8, 0x10, 0x258, 0x5, 0x8, 0x4, 0x1d, 0x5, 0x1, 0xfffff173, 0x1, 0x401, 0x7, 0x8000, 0x10000, 0xe, 0x3, 0x1, 0xd, 0x8, 0x0, 0x0, 0x4, 0xa79, 0x5, 0xc, 0x2, 0x0, 0x30000, 0xd, 0x81, 0xfff, 0x40, 0xfffeffff, 0x7fff, 0x6b81102, 0x7f, 0xfffffffe, 0x800000, 0x6, 0x8, 0x0, 0xe, 0x20000, 0xffff, 0x80000001, 0x1, 0x99c, 0x4, 0x8, 0x6, 0x7, 0xfffffffb, 0x1ff, 0x3ff, 0x0, 0x40, 0xfc5, 0x800000, 0xb422, 0x7, 0x1, 0x8, 0x1, 0xa0bd, 0x200, 0x400, 0x1, 0xc, 0xff, 0x3, 0x2, 0xffffffc0, 0x8, 0x8001, 0x3f3, 0x8, 0x9, 0xf, 0x4, 0x3, 0x0, 0x6, 0xd, 0x8, 0x9, 0x800, 0x0, 0x9, 0x3, 0x8, 0x2, 0xf4, 0x81, 0x0, 0x6, 0x200, 0xad07, 0x8001, 0x8, 0x9, 0x100, 0x1, 0xb10, 0x8, 0x7, 0xfff, 0xa, 0x4e, 0x80, 0xfec300, 0xe815, 0x1, 0xfffffff9, 0xfffff801, 0x9, 0x1, 0xff, 0x7, 0x7, 0x7, 0x8001, 0x7, 0x1ff, 0x401, 0x5, 0x2, 0x1ff, 0x4, 0x2, 0x5f, 0x2, 0x1, 0x1, 0xb, 0x7, 0xb, 0x7, 0x9, 0x9, 0x68, 0x8, 0x6, 0x4, 0x9ca, 0x100, 0x9, 0xfff, 0xfffffffd, 0x1, 0xf, 0x2, 0xfffffff8, 0x80000001, 0x4, 0x3, 0x8, 0x8, 0x9, 0x3, 0x1, 0x7, 0x8, 0x5, 0x4, 0xc, 0x0, 0xf, 0x80000000, 0x5, 0x5, 0xfffffff7, 0xd6f, 0x4, 0x38, 0x1, 0x6, 0x9bb, 0xd31d, 0xfff, 0xfff, 0x40, 0x101, 0x3, 0x4, 0x0, 0x1ff, 0x6, 0x0, 0x9, 0x1, 0x4, 0x0, 0x1000, 0x5, 0x1c000000, 0x1, 0x6, 0x9, 0x6, 0x3, 0x1, 0x0, 0x10000, 0x2, 0x7, 0x7, 0x6, 0xfffffff0, 0x2, 0x3, 0x8090, 0x7, 0x6d8, 0xfffffffb, 0x6, 0x400, 0x800, 0x8, 0x6, 0x76]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x6e8ccd9d, 0x8, 0x9, 0x9, 0x7fffffff, {0x8, 0x2, 0x92fd, 0x0, 0x1, 0x100}, {0x1, 0x2, 0xab11, 0x7, 0x8}, 0x3, 0x2, 0x6}}]}, @TCA_U32_SEL={0x74, 0x5, {0x10, 0x9, 0x6, 0x10da, 0xa760, 0x0, 0x10, 0x100, [{0x1000, 0xe, 0xfffff000, 0x9f6}, {0xdeb2, 0x3, 0x6, 0x3}, {0x1, 0xfffffffb, 0x100, 0x3ff}, {0x200, 0x3ff, 0x3, 0x4}, {0x9, 0x7, 0x40, 0x80}, {0x3ff, 0xb, 0x3, 0xa6d}]}}]}}]}, 0x4e8}, 0x1, 0x0, 0x0, 0xccd4ddef28b9e10e}, 0x40094) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000500)={@mcast2, 0x16}) unshare(0x2c020400) msgsnd(0x0, &(0x7f0000000180)=ANY=[], 0x2000, 0x0) msgrcv(0x0, &(0x7f0000001080)={0x0, ""/1}, 0x2000, 0x2, 0x3000) 2.525864191s ago: executing program 1 (id=494): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xfc, 0x0, 0x7ffc0002}]}) r0 = gettid() r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) read$ptp(r1, 0x0, 0x0) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(r3, &(0x7f0000000000)='map_files\x00') mq_notify(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x35, 0x0, @thr={&(0x7f0000001200)="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", &(0x7f0000002600)="b828d3f4e7585aa8f936c7722540dcde48f06225f3b385bd1f04747009e5f544b093850e9d88d97e99a4e449f9ab0c8ead0f8ca3ae5ba196bc3bd82a2bc4d4274c2b2f6343cf9e9d1ea0b0ed5c9ee62aa2410ca4cdc1c8d4918ae6384d3c3105f8f4025a236e61382a5664638a5393c5f29541c382171b3de48cd19a11d26cc81144a491b1391d653e3499712d30c08dd2cd019e21d078a6f346e7a780d902183417b3e8036d60fd944d4e21a9682593c87f87c0900c7e990a993cc99afbefd7eb051a0709e6d02e9403c15469613a2e36ae6b5853928ad1d2271a6d70dd4ac1fe6849ea294583e4fdbc6d8963757a38bedca39b765531e6eee67116b9505fcc9dd205d1ba2063ab7710b145b37640fb7875dff7a4ba49ebb5fd50d7f7a64d3e5508184e3977f569e4de590a45bc31dc8e14269e0692899c04693406e3451f3bfe63abe3a9dec091c749eb3282b5d24ccab54fc49e4d5ece445202636171b69fc0b5c43502e49bdea5010605c942b15ff8cacbfbd0fa5d6a150dd87ebf5c4a6145b25ff8b4a72d1b4daed7c7b8aa17ba7ade826ae478cd0d0d5c7d178e451c875b191ae06ccfdd2092f3d40b81646ea1401024d0adc679ece45e763721db173d0a8b63d08161d13e67433aecceae2d33f2f44f1e65849b12f5ace7577c6714ea9c848b1a2f4ecf025bbd950e9529a24d1ec280dab86c574ed1cc36e304b3ef8493e632f75312847a85abbd6afed204f6bfab2d1df7f8c6325badd80a097b4b9b5703a3add281b1887d2b5054975547bd965221d1fb3d7e6c843b9a241cfcf936a78392b42fda840d720e4d7a52bcdcd76b9b5520a0b6f7aa41bc47d19f3bf91e79044239089d01c99033fb5fe0783ba01a92f9d3b22132200aa395bca2194056d55551"}}) timer_settime(r2, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') dup(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x500, &(0x7f0000000380)={[{@errors_remount}, {@discard}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5e}}, {@noauto_da_alloc}, {@bsdgroups}, {@jqfmt_vfsv1}, {@abort}, {@data_err_ignore}]}, 0x1, 0x476, &(0x7f0000000540)="$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") chmod(&(0x7f0000000000)='./file0\x00', 0x60) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x53) memfd_create(&(0x7f0000000ac0)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) getsockopt$nfc_llcp(r5, 0x118, 0x4, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f00000024c0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffe00}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000040)="6eb79ef94ce952944dc0e223e8437111f8ef70db310490593804bd07152b8cafe0760456e76fd4ffad7384335b219f62a60b65ad56b5ae11c2ad0a0223a96116aa87680604b2ba563205ef17253d39ccb4a0caa9a813210c1c093717cdcd04de76708bff20ea89a2f5ba7021cb37d80eeec4d92824971e8c296b5fb3b4eff3c6ae3e7e37dbb47b35dac99c05011b1a12fab0f0abe35eea0367986789d42d4d4d041a171e31da047e675434dba73b8b0599a38e2666a3a55529dca36329b3f9160d8e4bd878f1e7495b8e5c143b3462a2bd28252376300e96e087977fb8c207efd6a9ead16991491bffbe53c903f79543", 0xf0}, {&(0x7f0000000140)="22ce5846e4935904b088c14712df9d18dd6f97f3e0e6df98e23fb4aed11bb495454aea7e07c67bd715cf1199cdd305af236a33a51fec1e64bffd844b215f13a065e89604932d985c8cc20b74fa2d774b72e1eecc23be392663c785b174f5857d3c908e269d6d7cc7d40be30e62e43907a003a95411cebdc6399f63a642485b7d69be62dcdcebf26fb298bca91a454ccffa6f65d24cb5364d2a24ebc5a8702c99d6735874e02bb4e5af78d1cbb3792e19c07012f9c2809bd1160e59d0d7f0b331f655f2ae0dbc34873e705ccaabc85d20f27b4a89bd", 0xd5}, {&(0x7f0000000240)="b9411d0cd4513a8b2dd98b4da930b192a837be0c6d26be62c63c6944bce1a0f122453f0f03d3e01b8af5aee2acd43d3f7f0595d9d065133d84d46c00092530092158a7ab4bf33a12f397356acb70e42eddcb043f097f7c8d98b68500c4d1e15714e681f10b2029c47a595359b0051b27088affccc7b354439fef94ca4b843b8729e0a2fb70f34fef786d1b8ba67a6517812f88761f2b947fc925e322735e50a0b0187cf40651541539a593028c158cc4db642b1287b84cb264d99361894f6f26cbd3381e5025abf925af1d7794fabf3871d48501702fd9339e892eaea7e51acb0bedb1", 0xe3}, {&(0x7f0000000340)="44d8c1d4921e16cbb8b29fe3123746487cb352e0de94a3c72c565376486bb96fa286458a99d6b229bd7f98a934e4ba13d07266e155c12873cdb794c351d0071d16694525266dac554929c64f928c131eebff4c", 0x53}, {&(0x7f00000003c0)="4a000819e6ba919b7273f439a42779c129e5c89333d451beb9d93f128ae57e7fc65accf869122ea7fc32a4a0", 0x2c}, {&(0x7f0000000400)="1be14c68600fd7ed71c8b40afa2d0ba36f586e58e52b002043df18897611f836795da489ec0fea28b4da0d0c2d5e1061fb718513485635dd5a92d3c0d9cab4a3ebe9ef36656fc1b24ac80c01777f6d4ab3eeab7a4cc25fb04d719b59b19afbde268e22acfce8d747324bc7701edb137c4135cd202300f685f9f7f6ad15c42cafcc1c24adefd6eefb1382b95be5dc6a28a3edd392f151028a557fa2c5e672b4bdba7f9637dfef0f2062b0053f9cf5aa5ce68ce877e8a3836fdd55e6aca7e6bf5636ecdc587c", 0xc5}], 0x6, &(0x7f0000000580)=[@rthdrdstopts={{0x158, 0x29, 0x37, {0x33, 0x27, '\x00', [@hao={0xc9, 0x10, @empty}, @enc_lim={0x4, 0x1, 0x4}, @generic={0x4, 0x54, "3f1306e87e88478942853c64d094e7b4eeb1371ff5c982d551e02610f4646cec163228af77ed7430281e9bcdbb946bdc6d0e81fc813d8aa54ee6f145a9cf94efdced4f4396add8eac0d9f1a8f3560e4a7ef83f9e"}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x2a}}, @generic={0x3, 0x6c, "56b4f0145b74e7d90e6159904fb568bcca464b4bf1b3bd6af2d07bd1d3c6fab80ad382d6c22c7701c5def9a12fc52aabc9a9d5dc8bd2b8269bb6e98cf69f22bc9be4a153886da5248b75773aa74f232a6cc45d0753e30265d6cf958a6f6db5b87a986d567d14120dcb5429c0"}, @calipso={0x7, 0x38, {0x3, 0xc, 0x0, 0x7, [0x4163d5ed, 0x551, 0x0, 0x0, 0x100000000, 0x8000000000000000]}}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x34}}}, @padn={0x1, 0x1, [0x0]}, @enc_lim={0x4, 0x1, 0x6}]}}}], 0x158}}, {{&(0x7f0000000700)={0xa, 0x4e20, 0xf5, @private0, 0x1}, 0x1c, &(0x7f0000000c80)=[{&(0x7f0000000740)="bad646aa03da37dbfa0f30a81cf9e90837504caf93937c5c4b659d2cfa36c44022256722e28096754f4de828abe543134187384f1d03420271197eae6422556a96b5242a562239637c7175ecfe8675431f6810effe82f7050c908a3cf0f1d7a823cf35b6b9bf053fadc532c914faedf210a8cfe33bd631e2ff79e565402bde92381261d1341fb99eac0f664e4f02d4225c6132c65acd06cb86ad667def249e2ca469b6eba5dafb597a37f87bdb79c85557be016f21df42217cd6ba43de77dfe18922c9f67e5266f486c9b374ea63d30f630847984cc8ce9fd608", 0xda}, {&(0x7f0000000840)="567fee524e05f5c4ebdf355e44eba24c84cd35514bd8c517e49ae78a81e6884d8aa578c537f4f95ee8c787445cf0baff31aeecc802fda5e222faa158c15f11fd5b0df0f1b6d89439d619b9c01bf984e1e9e7fc5f17eee9f73360bd8543b25414c1186cc3b974ad7f4622decf2daee98ad130d66717f2afcfa5082aa8254109dcda74c486b516e9dabf5ce8aeffe699876eea1646b27de1fa705679e8c2e5338ea9751a5e665cc0f8964b19bc0dda3ef58fe0464f0259ac1d26d376089edfe22023c9ceda6634b59d1cfa7dcc4c8b601e1eeac8d86e138bc730adb37f16eee207d118ea11f2a3a3c3a94ce84607", 0xed}, {&(0x7f0000000940)="86c7030cf6e627fed236685a5d9848fe5ad089c8dda0b5eec9dde0aca25da19ff36cc6f8410b08a8eb194fbdbb4450ee5fa7be169d6cc18240697af4b89c31b862f8a395ccdf58643eedd7dfd36be8666ba8e3a16ffcc2e92c796153523c01d3302ec4be078bb3530b845865c672d3f52fae4a5d3d8c4f150268fbf666aa", 0x7e}, {&(0x7f00000009c0)="9a73073fe8f6e6013f4897b351887a8dacebacadc2f68a0781033ad8ce5d03c6e3ab14d365aa7c561ba74d4b2ce1cf4bae0c3caed45f6191e5a5c7d0ea9118d2bcb7a297b57ac33a99bd323abb3f614afa77fb742daf", 0x56}, {&(0x7f0000000a40)="4fe87d8bde689566e837eb5633389422060e57887b51f5c60e970d24cc4bcd705a79b2df02dcf5c42893e1d6de79f48c4b612b6d8c5d5c1900156dc81b47b770e377c1ace74bd37c2ceafba4fa83f595638d131f4cc63e1f102faf2cb0e3a3459487b6361fc9b6b4fe7d170d8ea0c562e550affc7ba9984482c55fc35eabca3374a09248564b397b0b", 0x89}, {&(0x7f0000000b40)="531e8112c4fc4f9f3240e39c5168be58c365ff963603a434afeaf37dddeef70949cf60aafc3947deae8883a5886e50ba297975eda953a41984a8dac49aeacbb910b6d561ed679e809510dcc347cf0dcab6470e242a97cb92", 0x58}, {&(0x7f0000000bc0)="e87a25ff52303e7f71164535c0e51968eae12446119121618eee24fc55d7813275298767b8dc5aec9e4dd430f2947dd006f4f010ea3b0c0dc015ef1f3ca147581d5fe56eac520f238fefa1ce75c50d48583c6a631b3da368036e1ae5411a2e798257a3cc0a14a157921f", 0x6a}, {&(0x7f0000000c40)="7d7361b018743e6bb007f77f423bf4e09056c4aa75983e", 0x17}], 0x8, &(0x7f0000000d40)=[@tclass={{0x14, 0x29, 0x43, 0x1}}, @tclass={{0x14, 0x29, 0x43, 0x6}}, @dstopts={{0x110, 0x29, 0x37, {0x2c, 0x1e, '\x00', [@generic={0x2, 0xdb, "47b01cc343e98c9ef612689779f2c76cd21dc41917c31ecda43bb882fd9ee1a2571dff827b9d03f785e49e29dfac190fa75902ec652d89549d86cb8567571071d4bc620c1be4ea6c3cd192e6fc2c019cbefce8d574dceda0baaa05ee75a2351bc53d7801a54cb07aaccefbbe45d193f8c956eda346bf5a0c2b37002eb11c3c699ed3bd7dce0f50e4ae04d6dabb0b43878b2d9c886ec003f751870e3ccb1b32d5bf5b994848bb947550b021470e2908f0fe406809b2ba456965090e824083147bcbae15b59fdc301ee83bcb6a16f70d360b6270fcd943e852e9d639"}, @ra={0x5, 0x2, 0x2}, @calipso={0x7, 0x8, {0x3, 0x0, 0x3, 0xd}}, @pad1, @ra={0x5, 0x2, 0x4}]}}}, @hopopts_2292={{0x30, 0x29, 0x36, {0x4e50cd32d2027e11, 0x2, '\x00', [@pad1, @hao={0xc9, 0x10, @mcast2}]}}}, @rthdr_2292={{0x98, 0x29, 0x39, {0x5c, 0x10, 0x0, 0x8, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, @local, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @remote]}}}], 0x208}}, {{0x0, 0x0, &(0x7f0000001240)=[{&(0x7f0000000f80)="3d40edeae88bc70bf37388a27897db4f54ae5cb8ef3b22bf8a0212264d4e42f9a1ebdabf83d3398a8d23c74d326b7862f5fd33adb09e56f60f409be471ea5b27a278e797eaff12eb3fa076a3a86c7353600712fe8c30884e08422e7ee87ac8007a2a4b23776d21a85b8c5dcf77438d002d73bfbcfedf3f7e75efe8bc5d9b261719457d53098975a9497e01413f80b4f4c34b2909a9092f5df824c843d89a23499774fad30d904c3fbe437b7983751fd8260ae8a71a4702f14b2b3abb85dbccf0cf9e9e5f097b3d01507fe31834558b02e4af419f45f77f4c13", 0xd9}, {&(0x7f0000001080)="98ef204d7bc983f8ef72166e22962adbeefd5f4bb118e29a47125fd6e617d9d17b5884a3e345608a16d417343149b92b322d06067e78f86fe8866c696211730b1d169bd2d5394c86979b553266e404ff8b7ad8969727b75f27dbe4aa5e4986d4691755e59fc69019a9dda0f2b40c2871584ed7fce24c7ed50d8c352db07d187848f41ded002f03d0435ec381175e30d2c5a8d5d42bb22a79d493a98b462f4ada9d879372af314999780923c60aa38b", 0xaf}, {&(0x7f0000001140)="9f1e69a153b91e25bc4b69a5174a89fb142944746d7018d2121f5b388d", 0x1d}, {&(0x7f0000001180)="e08dafa0837d1491a5c70a6d59301860a63dc162d652bd115538fdad9c3794c8c41fd9a5d822e0c2b4d2c684b1a3b83af99a89a7002c6fbc80f7c246a759e440b81f82418ebb08c4cd3fabf9b19d8bad3e27192ab9a84596907ffc0045227fbbe60bc5cfed2bafa4e62b6743868e74f91dd5b6c6f845789c5b6cd570e4720ab0c02c691f7fd1002544eaeba68288b14f6ac096", 0x93}], 0x4, &(0x7f0000001280)=[@flowinfo={{0x14, 0x29, 0xb, 0x8}}, @pktinfo={{0x24, 0x29, 0x32, {@remote, r4}}}, @rthdr={{0x68, 0x29, 0x39, {0x2c, 0xa, 0x0, 0x3, 0x0, [@private1={0xfc, 0x1, '\x00', 0x1}, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={'\x00', '\xff\xff', @loopback}, @private1]}}}, @hopopts={{0x1138, 0x29, 0x36, {0x2b, 0x223, '\x00', [@generic={0x4, 0x1000, "3ede6e0066a7db2a4d4897562c5567596d918db3c253a6f0423d18bd035a8876195e659f63f82bc12c02ca107015f27beca9ab613e7f2491d28104c274b09804214d0f721c6e90bd187c6ff6a2cd8e511644c233658b642d7e913d0d448ff26f3abcbd09368ccebdfe116f1d52e56688b940f0e51dd702b55e0d64c68f889fa55d7d780e308b578af6038eb108fcb47e3eb8bf2151a43d893739c37c62aa3bcb36d4ec5345db3662c1a7608dc23f3972bfc20bb356897e831124920aef5c7f47ffdd14e2bff3d1c33e50fc55aafa470bb6172ef79fac663d116ca7ed6cd98cb8225fd09c69623087262797f51cb1b48aa908b887d5e76d861b5b5ec9d53e2683c2a3f640da33c60b1b1125c9d25419aa8a0e9aac96291593623401c1bffb7f857a5476cf62c6c26bb472feb2abc19d96eebcf8157505e97217bbe16129623bd264717df959c9e389dc5a7829da9f208495654490c24405929b0663b1887c0421ca248e2cab5a22a4738f0950ae58a4dca38c66278535e78db4054a38e49e10820093338ca927e11908764021e1ce2995fd4df6cb56cefc2e9c6cd0d0da06a6ddd8ed16fa400308cb868eda5aa815198a489a68ded4770aeb3bf5284794e83c03cc46ec142a4497558a0e61da1b9f7a7d729ac8a63b82a75d590c3a41a327c1361d00f26b71e49c4d429473981e836b61eb112579ad9a232fef4cbbbe81957467fcb6e1c184fd998dc899c6b8fa0a3650a0f8b4457fa56c17bf5df5f3768ca5115e1bfa57f6063466954697a65263a1587f89e60d4f5aa4d1ac02a022b8d95868f5343338176163683bfc382627c5d8f40ce15a15f1ac1308592d65098d41cf5f620366ab389e6f53db325c8f07efd671b257d8507f524b64e28b4d0caa37cebd3a092cc920b0f714907e15ba4ed719fd2babf4720bcdb9b39a0d39b4d279d34ae20dc01339e68b15aa0c63739e6857bc229a207b85a431875cc39c1fea9b84534605a39e6ba23509fdab137a2dfa71f644bd2c09ec2df9f562efd4f162ba44d7faeaa8f932930d9e61e8bd433d58a500efdc214410ae6ed4860611d6435a4ea136d8646b54e3fde4d650d97dfeba07332a076a374a0280aab25aa3b5147952362eb5db74395169ab67bcb2a0edbd985c298c1299035c4446d33d330380de1bc4b850264f7080e2caf943f7bcd36c640270adbc081f84e87fc399c60e644d489a9703223549b8b72f197ff7385da6eb5a6dfdb0fcd54d32d287dcf41b8b867550c628263a1642beffd6e03ef9cd47cebc79331ea2ce09220ecf72e03f1d89aa7e6fa9a54d3cee56950e12361354f2fe68b0279e82573f79261b0dbdebf0a38921e1b0c6ccd6a748a41765144b778e7728e0ac2d28d45230e90f47e4f7193d7c718a7749d531cd46026ca210b6c08c4f4225f1b5fec72fc1a90b32b89849e3357ded06d761481979f4636061baeb5ce4973c9eb638e35fcf39daff986e653abdd479171c957be1580bb81335be548ff6c4d0f75c17f6e1afc2b7a2fd56c7aff4b65c1bf8847ea0a987da46d65186ec4006d5ddc9d3ea94afd216b402795247d460b9516e4006b912b0188952c0189b9ee9934c49a2dab6cf778c0f726dc503b749756754a60309b4c8181f83467e2ddff4daac367595bb136a017602f6d226b0c3f1ad6b360432715e0b08980704f57eb660c9bf96fa4ff6b0c2731bc3542352606c17d2d721c6935459779dc4dbc6153b78b901461f210c2b306472bf82454bb1310c764dd9cb66c068240232ce333ba81d7fe954a3ea81e00fa557e33093d73250e504efe553446bb66ea55700a0a057180e825c0679a0d6b8ff7f4b556fb02b9cdf3d21db1868cce4ed79c568d6310192a52008c374d7bbfb8d0597799967f1af79f08faa047f10aa75e53bae6cafe3937e600832ed74308dec1c19abd58e76de3a491eb7e7788622f03100335a7afe682389b9428763c40bbb3f67396bd1cc9e6fc182f3436137343eaf602a5d5fe1d688015803484f87054b2204249af1974400fba7f677860caef933d66236292170adb68bbaecb135f8d116fd554d9016ba83fe084eb27e102fb9ac7869407ebf5e1d14a82553981a314d93284b5017db649ff31788dd20e20b6f5d40075002c5e550af4557fcda353249631fbb78b1aa51c2cd2543fa808ff345b9acd62efc885aee685c2f5e795f79745a96fb8ac28108dedb58044e1eb73ccc4af7d9cc9790d8c90711740b027714c8e59303e548bb79dc7b52d60976435d0b43c524c9db8de26577b7be6bad8a43630d2e1fe4ea9de96adfa821ace1d891eea60876906cca1495722c7d87205385bb5f973bf12ef41585b9049a9b921cd8407a93f7302fa2c3fb86b864a20619d93295760f1e13bcfdce0c7ff8adcf2acedc9da8f065a0c7750ed4e53ba5499cc1b173861d3797e373dfeebc44cd9dc9bf4a922f99f43723620325d8be1e2a0b20a226717c2189f327b3c417b1d91bb13ab49412552a45f1879a1488d39c4822590e653067b713f4735086b377c95ae53ecb506815392f11731059c7753aab42030e090ecf288f699f2cc68922c2b3d3d61638355c10c63b3a0924fa79107a4e1cae8ccd3d257ec99d4e17e0dddacc6b9c17fab4c63e8e653a62311e3d57ea86e9b5ef7359fcfb2b73e6545d0a02d763f9e9bb0ecfbf3c02ac6bc6e621c2839ad71139fc7726bb08a952b64e45e6530541ff80c76e6cf3c199368e7c7971568daaded8f42c5e21df1bb38a30bce3b3b08ebf6d43e3bf02a63a5dd63f6c6dde5d17eaf5497d7fdb7f01be2c8bcdb42c6c8df2b1a6e098350006fc983043a892a985feb1cb9a6bc0d6922486181b20565e49d00251cedb035f7b280bc75f016121fc5cb9b8ac47c28af283420a0059a9f71c8ce4c86790d984a229dc41a028fe52b754c9a5b6a54fe9947219a879f44adafcaf87734e4ee7ed86b3d4ebddbbdde4216a3f848673ec2ada2d21add79af285bd79ef931e40ea641a4c936edcb710ffb40037b52d77e9e02707887419bde7ddcca261c5a25684561adc4384bc846150d7537fb698924144e187c3ca35407abf67220813c90fb794d2b1632b5a475e68cd269284adb6286c9d15896485f0b5b499eea3fdbd08ec0444936b489b6a6ef6149ced8d28ce5cec101905f8ec4e456f4bbdf26cd9ea49f01473ebaa12ed07b127ec8aed980f8d4b85c00133ccd6c56bea0092a8fcca0d84d118ddeabb21392f90df47116fe297002e88a803752e2c2ffd9905aa1d4d0e3798c6687eb04af66aa88f1302fffe734c6490e6200f3ef2be9c4983629aeec8b2ecba4ad8c6a3ff6b7d23200395d8410fa04bcb86c5f96c1799b57c95afcc6574c5efb6f44920bc4c9323aa564a31345db5a0ff0a38369d4ecb04694cef5c895cf180cffeaec400eaecd5b031ed31bf2382e06665466f5838671089dcc75ecd7b4e06813ddaaf8f976ef3f0453848d854e2ea91410526b2fa7fc8db59c33b1b62cfce33c6bc70769e698961fdf9b9345feb99f0764b72ce68dfd0abbd4d64d10958d7ff27bb6fe81d8085ba6a9295f2f242cbc2309166f349b1a8b4f85a8cd02781133c7aa522646f49c2f4bf071ea928385c4899ce6fd2c8effe232ad07289d15d05c71570538c431af3e38329f9cd0ff6c5523632dcb7835d5a36f39b35fe7a48fdc12ac8a1e777bc4e151ecd5ac45bd772d366f81c02493b7f74efdf9838bd38ab132a87261a6973526e29dc715657f708fab74df217d9d978ec11e623b6d68791e2a033368955a394aa20f13f451ecf0a2948f2f99efd9a7449ff7fd51f46d757cb4321235479a2a6951050b389a8a96fb359d7cd344d115d860e8623acf3a076596ef9162667fbb67e08d0ac1b436a58434c84a34e4241cb4e03537d0f4e3c2e1dadfaadc2a5bb5f86434f8ea9b2901ca23467362f503f889883794a29c5a4a6f61c77efcfc070442d61ae82f96e3c0a78c26a5ad6fe5dedc0b1c7f322eebca4a5e4043d66e765dc8c4bf92d5e9aeb63fdb363b6c2d7010c5fbc6d72e9e183e17064233a8edf70e747cf032880843a4a308d018d0cd1774ef612e8dbdf9574b45d8e88324c93288291e4d177986645e0af8859b455180378fd8c76eaa9ee1d5f86ab01445cbf69ec7aeb0f5a701b676eb1f1de25f5259f27f7440ebaf132d91ae2efecf1641c20bb78ded7c1e5c092a2de903d8e3aed2f1f3b44dcb5274f976063fc799419c870bbb3d13fba816193a08191a59765f16b64036d645a090cc43956f110858e3b18f1fc3c3513a1922fa294641d52e529b6453b4da21d0af7b812597de3f6cd9d432fced1cb529e0bb036e7fc422aea4f894b9df09ccae5c93c6fd13432e1f94087bfeab96bfc530d88ac1af056d2a545b7109ad9b0ca37b671eb8ab9234cd3435dbb77f25160652cad451201cb1683408725dfa25bd350029776c4d6af65fd56946c0dfe30920417f2bc4e2bfe5afa3c914cad61565b49f56b0df520dce5f76f0ce6fc268543faa0b47096b887b8c8ba1a9fdf16210ed5b91828997a92c59cb173b545c59fd215c8a5ac80db0cee3ba09b94aa57760f7e1d6ca5cd66b658f8ae409e4818b6320d1e579217b1ee916df2405ccc9af5f69108f27640b4c82eec08861684f4acaa79d817ed8249ebaf8229af61f07c12545a79eafae6b58771cc88d04c558b012cc6b3666b6b304b1843defbca3d54f478453f8209a4e0136891e50607536e9cb80e50217fbc55d881233a0bd6c33d377a4a903ba55a149d197860a43d54ea67597dc7d21420f2ef529d13cbf63ff13c7b2509d2a4618af19bd7f384b4878e2555418c0d0f392f3086645a43541dd5f15280c0bc97a15268644260181e97a68fb4f5345969c059d69ebdf87c6ba369996f257e8124d4baf2169738a1616fe23fa2920f0349b69a089f9714006ac72ea07f68897d023b080d598164222c787ccf0e75c4fe1b2d271a0c70fb273d2abe0260212b7edd3d19f54b50d7debb48dcf56512f877a4671ed9bd548c307d5b93ae9edc52f2f9dd6e3b50cba2e4273fc73df814ec1bc88b2344c25ffca80c913140287b5e14ca68e5c465e0b499af9b7d0f75d9d9df039b4a77785afd490975b8c9a5c4d28a7871cdda66bc3c2b0813f851d90d7932cf09776783432fa6e08bf707725035da2b9104e9bcf0e0439ac70a43da87d63fb9a1a4b4dbea603f21a524590a1e7efcdf446c112ac6eb192e0e89d14560086dd688f7240daaf970b3f74770c66a6720e422e3a6aae11bb4f35df5c9fe9bd3c39426a0d176561f5e8104cbb68fa52a86c81f650005f62b800e68f8c0a4975a46cb2d3963089513b0cf8ecfd71804e1d1f43c090d117c7ce22363b002fd00d59b1495c5d1bd056a76bed169eaca1e2a21101ffae3766fc8417643fb65c36781fe72d5ea5d76f167378f7fb6d7bc158091e82f427b3c719f9af02447644e47d2f02b7c567632572111654a9174a07ecc501fb863796481e014cefd2262427ddbc00cc15d7d5c906c9d1c85254cab52f774188591e8340c137bfb6b8c23ce25b7a1465bdd1d2d9aecab80eebc82891a09dfe49ab40d46c0f068929041dc675b40feb8341ced3464d2c2dd6c45031cd59caec7eb26119c6e4e37c59d5fa1ee8e3c7b40d6113643bdad11f3e49a70ef086d77251e173ba86adad4e50f2920f81bb23ac0f850ec64603a809ee45a4b416553f2e71d969da569ae3247761d83cd4c5e4a924d13a8ca0af8e8858cfd1f277b82fa70ce88db69f6a7cce6a1100c7dda21"}, @jumbo, @ra={0x5, 0x2, 0x9}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x10, {0x3, 0x2, 0xd, 0x1, [0x6]}}, @hao={0xc9, 0x10, @local}, @generic={0xb, 0xc5, "af2d4472a2c70936dc59413ff68699f571b73e9121cdf0b25e7061abc03f9470d59d7bfdae49ff7594dde4c31d61976dc0ff3cc9544730b41f0c2dacb49e2c3981092b2042fde2339b47fefe315c63f90d7a2f122d67440af9dd4b59e7a13ae5b86f860f83aa7190dbd5d5bd1f1196086bb83e52aa54cb142fc2bca5d1f12468680d45c0ce26240047d9fe2875f7c5482719cad3f22609a9fc790a69333e7617917e2c097ab3507a688e27b6a0ab4ad2297adf42a4479fda61298fe7e4ee346d426d76f3bd"}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @mcast1}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}]}}}, @tclass={{0x14, 0x29, 0x43, 0x2}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x16}}], 0x1210}}], 0x3, 0x0) 1.926899201s ago: executing program 3 (id=498): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x500, &(0x7f0000000380)={[{@errors_remount}, {@discard}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5e}}, {@noauto_da_alloc}, {@bsdgroups}, {@jqfmt_vfsv1}, {@abort}, {@data_err_ignore}]}, 0x1, 0x476, &(0x7f0000000540)="$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") chmod(&(0x7f0000000000)='./file0\x00', 0x60) 1.921757461s ago: executing program 4 (id=499): open(&(0x7f0000000180)='./file0\x00', 0x8000, 0x179) bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x2, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x21, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000ffffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000e0000001811"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000240), 0x4) r3 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010029bd7000fcdbdf2500010000", @ANYRES32=0x0, @ANYBLOB="1a8904000a00000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x6000000) r5 = syz_clone(0x0, 0x0, 0xfffffffffffffead, 0x0, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x609, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1b011}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_NET_NS_PID={0x8, 0x13, r5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x0) 1.906473213s ago: executing program 0 (id=500): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x141900) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000340)={{0x80, 0xfc}, 'port0\x00', 0x0, 0x60004, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000dfff75390000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) syz_io_uring_setup(0x14f, &(0x7f0000000e80)={0x0, 0x657f, 0x1000, 0x1, 0x290}, &(0x7f0000000f00), &(0x7f0000000f40)) r1 = syz_open_procfs(0x0, &(0x7f0000000940)='net/snmp\x00') readv(r1, &(0x7f0000000140)=[{&(0x7f0000000040)=""/140, 0x8c}], 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3800002, 0x204031, 0xffffffffffffffff, 0x2798c000) r2 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KDGKBDIACR(r2, 0x4b4a, &(0x7f0000000000)=""/34) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000180)={{0x80, 0x80}, 'port0\x00', 0x25, 0x60041, 0x8000, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x9}) close(0x3) 1.851674908s ago: executing program 2 (id=501): r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r1}, 0x18) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0x1, 0x120d, &(0x7f0000001280)="$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") r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x2, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = memfd_secret(0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={r5, r4, 0x2e, 0x4608, @void}, 0x10) ioctl$BTRFS_IOC_SYNC(r4, 0x9408, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x2}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r7, 0x0, r9, 0x0, 0x8000f28, 0x0) splice(r8, 0x0, r7, 0x0, 0x7f, 0xe) write(r6, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x4012831, 0xffffffffffffffff, 0x0) r10 = syz_open_procfs(0x0, &(0x7f0000000580)='smaps_rollup\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) lseek(r10, 0x2004, 0x0) socket(0x40000000015, 0x5, 0x0) 805.851231ms ago: executing program 4 (id=502): r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$PIO_UNIMAPCLR(r0, 0x4b68, 0x0) 773.233374ms ago: executing program 3 (id=503): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000000000500150004000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="44000000090605000000000000000000010000050900020073797a300000060005000100070000000800094000000001140008801000"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x4050) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="28000000030605000000000000000000000000000500010007"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20000010) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r4, 0x11b, 0x6, &(0x7f0000000000)=0x40000000, 0x4) 516.286519ms ago: executing program 1 (id=504): mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='.\x00', &(0x7f0000000280), 0x808008, &(0x7f0000000440)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @multicast1}}}], 0x20}}], 0x1, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r2 = openat$sndseq(0xffffffffffffff9c, 0x0, 0xc0d00) write$sndseq(r2, &(0x7f0000000340)=[{0x3, 0x6, 0x1, 0x6, @time={0x5bcd8317, 0x7}, {0x0, 0xa9}, {0x3, 0x1}, @connect={{0x9, 0x3}, {0x2, 0x2}}}, {0x76, 0x9, 0x5, 0xc, @time={0x8, 0x5}, {0x7, 0x9}, {0x2, 0xe0}, @note={0x0, 0x2, 0x4, 0x2, 0x8}}, {0x5, 0x80, 0x6, 0x3e, @tick=0x7, {0xe}, {0x3, 0x1}, @quote={{0x5d, 0x1}, 0x100}}, {0x0, 0x5, 0x4c, 0x24, @time={0x8}, {0x1, 0x7}, {0xe, 0x7}, @control={0x98, 0x3, 0xf8d}}], 0x70) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r3, 0x0, 0xff}, 0x18) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_inet_SIOCSARP(r5, 0x8955, &(0x7f0000000940)={{0x2, 0x4e1f, @dev={0xac, 0x14, 0x14, 0x28}}, {0x6, @local}, 0x0, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x3b}}}) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=@newlink={0x48, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x121}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0xa1}]}}}, @IFLA_ADDRESS={0xa, 0x1, @random="14fd06cfb0c1"}]}, 0x48}, 0x1, 0x0, 0x0, 0xc0}, 0x0) socket(0x10, 0x3, 0xa) munlockall() bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x200000, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="9c000000b800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x94) linkat(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x400) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, 0x0, 0x0) writev(r1, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r6 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r6, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r6, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027f"], 0x57) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 231.091017ms ago: executing program 2 (id=505): io_uring_enter(0xffffffffffffffff, 0x92, 0x0, 0x0, 0x0, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x4004944) sendmsg$NFT_BATCH(r1, &(0x7f0000019280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000194c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a140000001100", @ANYRES8=0x0, @ANYRES16=r0, @ANYRES8, @ANYRES16], 0x64}}, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r3 = gettid() r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) read$ptp(r4, 0x0, 0x0) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=0x0) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(r6, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x35, 0x0, @thr={0x0, 0x0}}) timer_settime(r5, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) syz_open_procfs(0x0, 0x0) dup(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x500, &(0x7f0000000380)={[{@errors_remount}, {@discard}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5e}}, {@noauto_da_alloc}, {@bsdgroups}, {@jqfmt_vfsv1}, {@abort}, {@data_err_ignore}]}, 0x1, 0x476, &(0x7f0000000540)="$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") chmod(&(0x7f0000000000)='./file0\x00', 0x60) write$P9_RLERRORu(r2, &(0x7f0000000080)=ANY=[], 0x53) memfd_create(&(0x7f0000000ac0)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0) openat2(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x290400, 0x1ce, 0x52}, 0x18) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x3938700}, {0x0, 0x9}}, 0x0) timer_gettime(r0, &(0x7f0000000380)) r1 = gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) writev(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) open(0x0, 0x60840, 0x0) r3 = add_key$keyring(&(0x7f0000000480), &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000009c0)="010000000037a788a11d1f000000000000006923c63a4541062101b60a2156566de77062086575a59e", 0x29, r3) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000007000000000000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r4}, 0x18) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x122}, 0x1, 0x0, 0x0, 0x40000}, 0x80d0) timer_getoverrun(r2) 133.314787ms ago: executing program 0 (id=507): syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000000)='./file0\x00', 0x800090, &(0x7f0000000a40)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c756e695f786c6174653d312c756e695f786c6174653d302c757466383d302c73686f72746e616d653d6c6f7765722c73686f72746e616d653d6d697865642c696f636861727365743d64656661756c742c6e6f6e756d7461696c3d302c73686f72746e616d653d6c6f7765722c726f6469722c757466383d302c6572726f72733d72656d6f756e742d726f2c6572726f72733d636f6e74696e75652c756e695f786c6174653d302c756e695f786c6174653d302c646d61736b3d30303030303030303030303030303030303030303030312c747a3d5554432c6e6f6e756d7461696c3d302c73686f72746e616d653d6d697865642c6572726f72733d72656d6f756e742d726f2c6e6f6e756d7461696c3d302c6e6f6e756d7461696c3d302c756e695f786c6174653d302c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e6e742c756e695f786c6174653d302c726f6469722c696f636861727365743d63703733372c73686f72746e616d653d77696e39352c696f636861727365743d6370313235312c73686f72746e616d653d77696e39352c73686f72746e616d653d77696e6e742c6e6f6e756d7461696c3d303e002804de526a2962c96269574f352812653af3f6cd668c31a51bb3ea504a07f361244709ddea94f616bfbdb1850c78c12060f961cc4c0f80ed3390fb03dbe82a2014852c59665501cd64f0a6a4ba839cf58fe10e184c735b4692a267d276169f0c203459a3f8899e6c3ac3bd115cdd185ca2972692171eed646eb083d9c646931c7987d8c087efbb77b881ceaaef4cf13f59d8417bf2ba94f6f9bcf2d707ff2c4f28415a5fa5517f85d05882"], 0x6, 0x2d1, &(0x7f0000000740)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) ftruncate(r0, 0xc17a) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000002000a54000000060a01040000000000a77c7599a958fdc9377d880000000200ffff200004801c0001800b00010065787468647200000c00028008000140000000130900010073791c646d4a000009ffffffffffffffff00000005000740ba000000140000001100010000000000000000000000000a"], 0x7c}}, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x200000e, 0x6c033, 0xffffffffffffffff, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r2, &(0x7f0000000500)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, r3, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x400c0c4}, 0x4000) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000080000000c"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000000000000000000000080021850000006d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r5}, 0xd) r6 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$PIO_UNIMAPCLR(r6, 0x4b68, 0x0) r7 = io_uring_setup(0x2e71, &(0x7f00000003c0)={0x0, 0x800000, 0x400, 0x2, 0x131}) io_uring_register$IORING_REGISTER_PBUF_RING(r7, 0x16, &(0x7f0000000740)={&(0x7f0000002000)={[{0x0, 0x0, 0x3}, {0x0}, {0x0, 0x0, 0xfffe}, {0x0}]}, 0x4}, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) 86.956861ms ago: executing program 4 (id=508): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000001fc0)=ANY=[@ANYBLOB="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"], 0x0, 0x2, 0x0, 0x0, 0x40f00}, 0x94) r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000000)={0xa0000001}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r4}, &(0x7f0000000840), &(0x7f0000000880)=r5}, 0x20) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = syz_open_dev$usbfs(&(0x7f0000000240), 0x7, 0x10000) ioctl$USBDEVFS_REAPURBNDELAY(r7, 0x4008550d, &(0x7f0000000340)) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) syz_emit_ethernet(0x2a, &(0x7f0000000140)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @local, @void, {@ipv4={0x8100, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x67, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, @address_reply={0x12, 0x0, 0x0, 0x400}}}}}, 0x0) epoll_pwait(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0xfffffffc, &(0x7f00000002c0)={[0x1]}, 0x8) 78.924822ms ago: executing program 3 (id=509): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1, 0x7fff0000}]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x7fff}, 0x18) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) getsockopt$nfc_llcp(r5, 0x118, 0x4, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f00000024c0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffe00}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000040)="6eb79ef94ce952944dc0e223e8437111f8ef70db310490593804bd07152b8cafe0760456e76fd4ffad7384335b219f62a60b65ad56b5ae11c2ad0a0223a96116aa87680604b2ba563205ef17253d39ccb4a0caa9a813210c1c093717cdcd04de76708bff20ea89a2f5ba7021cb37d80eeec4d92824971e8c296b5fb3b4eff3c6ae3e7e37dbb47b35dac99c05011b1a12fab0f0abe35eea0367986789d42d4d4d041a171e31da047e675434dba73b8b0599a38e2666a3a55529dca36329b3f9160d8e4bd878f1e7495b8e5c143b3462a2bd28252376300e96e087977fb8c207efd6a9ead16991491bffbe53c903f79543", 0xf0}, {&(0x7f0000000140)="22ce5846e4935904b088c14712df9d18dd6f97f3e0e6df98e23fb4aed11bb495454aea7e07c67bd715cf1199cdd305af236a33a51fec1e64bffd844b215f13a065e89604932d985c8cc20b74fa2d774b72e1eecc23be392663c785b174f5857d3c908e269d6d7cc7d40be30e62e43907a003a95411cebdc6399f63a642485b7d69be62dcdcebf26fb298bca91a454ccffa6f65d24cb5364d2a24ebc5a8702c99d6735874e02bb4e5af78d1cbb3792e19c07012f9c2809bd1160e59d0d7f0b331f655f2ae0dbc34873e705ccaabc85d20f27b4a89bd", 0xd5}, {&(0x7f0000000240)="b9411d0cd4513a8b2dd98b4da930b192a837be0c6d26be62c63c6944bce1a0f122453f0f03d3e01b8af5aee2acd43d3f7f0595d9d065133d84d46c00092530092158a7ab4bf33a12f397356acb70e42eddcb043f097f7c8d98b68500c4d1e15714e681f10b2029c47a595359b0051b27088affccc7b354439fef94ca4b843b8729e0a2fb70f34fef786d1b8ba67a6517812f88761f2b947fc925e322735e50a0b0187cf40651541539a593028c158cc4db642b1287b84cb264d99361894f6f26cbd3381e5025abf925af1d7794fabf3871d48501702fd9339e892eaea7e51acb0bedb1", 0xe3}, {&(0x7f0000000340)="44d8c1d4921e16cbb8b29fe3123746487cb352e0de94a3c72c565376486bb96fa286458a99d6b229bd7f98a934e4ba13d07266e155c12873cdb794c351d0071d16694525266dac554929c64f928c131eebff4c", 0x53}, {&(0x7f00000003c0)="4a000819e6ba919b7273f439a42779c129e5c89333d451beb9d93f128ae57e7fc65accf869122ea7fc32a4a0", 0x2c}, {&(0x7f0000000400)="1be14c68600fd7ed71c8b40afa2d0ba36f586e58e52b002043df18897611f836795da489ec0fea28b4da0d0c2d5e1061fb718513485635dd5a92d3c0d9cab4a3ebe9ef36656fc1b24ac80c01777f6d4ab3eeab7a4cc25fb04d719b59b19afbde268e22acfce8d747324bc7701edb137c4135cd202300f685f9f7f6ad15c42cafcc1c24adefd6eefb1382b95be5dc6a28a3edd392f151028a557fa2c5e672b4bdba7f9637dfef0f2062b0053f9cf5aa5ce68ce877e8a3836fdd55e6aca7e6bf5636ecdc587c", 0xc5}], 0x6, &(0x7f0000000580)=[@rthdrdstopts={{0x158, 0x29, 0x37, {0x33, 0x27, '\x00', [@hao={0xc9, 0x10, @empty}, @enc_lim={0x4, 0x1, 0x4}, @generic={0x4, 0x54, "3f1306e87e88478942853c64d094e7b4eeb1371ff5c982d551e02610f4646cec163228af77ed7430281e9bcdbb946bdc6d0e81fc813d8aa54ee6f145a9cf94efdced4f4396add8eac0d9f1a8f3560e4a7ef83f9e"}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x2a}}, @generic={0x3, 0x6c, "56b4f0145b74e7d90e6159904fb568bcca464b4bf1b3bd6af2d07bd1d3c6fab80ad382d6c22c7701c5def9a12fc52aabc9a9d5dc8bd2b8269bb6e98cf69f22bc9be4a153886da5248b75773aa74f232a6cc45d0753e30265d6cf958a6f6db5b87a986d567d14120dcb5429c0"}, @calipso={0x7, 0x38, {0x3, 0xc, 0x0, 0x7, [0x4163d5ed, 0x551, 0x0, 0x0, 0x100000000, 0x8000000000000000]}}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x34}}}, @padn={0x1, 0x1, [0x0]}, @enc_lim={0x4, 0x1, 0x6}]}}}], 0x158}}, {{&(0x7f0000000700)={0xa, 0x4e20, 0xf5, @private0, 0x1}, 0x1c, &(0x7f0000000c80)=[{&(0x7f0000000740)="bad646aa03da37dbfa0f30a81cf9e90837504caf93937c5c4b659d2cfa36c44022256722e28096754f4de828abe543134187384f1d03420271197eae6422556a96b5242a562239637c7175ecfe8675431f6810effe82f7050c908a3cf0f1d7a823cf35b6b9bf053fadc532c914faedf210a8cfe33bd631e2ff79e565402bde92381261d1341fb99eac0f664e4f02d4225c6132c65acd06cb86ad667def249e2ca469b6eba5dafb597a37f87bdb79c85557be016f21df42217cd6ba43de77dfe18922c9f67e5266f486c9b374ea63d30f630847984cc8ce9fd608", 0xda}, {&(0x7f0000000840)="567fee524e05f5c4ebdf355e44eba24c84cd35514bd8c517e49ae78a81e6884d8aa578c537f4f95ee8c787445cf0baff31aeecc802fda5e222faa158c15f11fd5b0df0f1b6d89439d619b9c01bf984e1e9e7fc5f17eee9f73360bd8543b25414c1186cc3b974ad7f4622decf2daee98ad130d66717f2afcfa5082aa8254109dcda74c486b516e9dabf5ce8aeffe699876eea1646b27de1fa705679e8c2e5338ea9751a5e665cc0f8964b19bc0dda3ef58fe0464f0259ac1d26d376089edfe22023c9ceda6634b59d1cfa7dcc4c8b601e1eeac8d86e138bc730adb37f16eee207d118ea11f2a3a3c3a94ce84607", 0xed}, {&(0x7f0000000940)="86c7030cf6e627fed236685a5d9848fe5ad089c8dda0b5eec9dde0aca25da19ff36cc6f8410b08a8eb194fbdbb4450ee5fa7be169d6cc18240697af4b89c31b862f8a395ccdf58643eedd7dfd36be8666ba8e3a16ffcc2e92c796153523c01d3302ec4be078bb3530b845865c672d3f52fae4a5d3d8c4f150268fbf666aa", 0x7e}, {&(0x7f00000009c0)="9a73073fe8f6e6013f4897b351887a8dacebacadc2f68a0781033ad8ce5d03c6e3ab14d365aa7c561ba74d4b2ce1cf4bae0c3caed45f6191e5a5c7d0ea9118d2bcb7a297b57ac33a99bd323abb3f614afa77fb742daf", 0x56}, {&(0x7f0000000a40)="4fe87d8bde689566e837eb5633389422060e57887b51f5c60e970d24cc4bcd705a79b2df02dcf5c42893e1d6de79f48c4b612b6d8c5d5c1900156dc81b47b770e377c1ace74bd37c2ceafba4fa83f595638d131f4cc63e1f102faf2cb0e3a3459487b6361fc9b6b4fe7d170d8ea0c562e550affc7ba9984482c55fc35eabca3374a09248564b397b0b", 0x89}, {&(0x7f0000000b40)="531e8112c4fc4f9f3240e39c5168be58c365ff963603a434afeaf37dddeef70949cf60aafc3947deae8883a5886e50ba297975eda953a41984a8dac49aeacbb910b6d561ed679e809510dcc347cf0dcab6470e242a97cb92", 0x58}, {&(0x7f0000000bc0)="e87a25ff52303e7f71164535c0e51968eae12446119121618eee24fc55d7813275298767b8dc5aec9e4dd430f2947dd006f4f010ea3b0c0dc015ef1f3ca147581d5fe56eac520f238fefa1ce75c50d48583c6a631b3da368036e1ae5411a2e798257a3cc0a14a157921f", 0x6a}, {&(0x7f0000000c40)="7d7361b018743e6bb007f77f423bf4e09056c4aa75983e", 0x17}], 0x8, &(0x7f0000000d40)=[@tclass={{0x14, 0x29, 0x43, 0x1}}, @tclass={{0x14, 0x29, 0x43, 0x6}}, @dstopts={{0x110, 0x29, 0x37, {0x2c, 0x1e, '\x00', [@generic={0x2, 0xdb, "47b01cc343e98c9ef612689779f2c76cd21dc41917c31ecda43bb882fd9ee1a2571dff827b9d03f785e49e29dfac190fa75902ec652d89549d86cb8567571071d4bc620c1be4ea6c3cd192e6fc2c019cbefce8d574dceda0baaa05ee75a2351bc53d7801a54cb07aaccefbbe45d193f8c956eda346bf5a0c2b37002eb11c3c699ed3bd7dce0f50e4ae04d6dabb0b43878b2d9c886ec003f751870e3ccb1b32d5bf5b994848bb947550b021470e2908f0fe406809b2ba456965090e824083147bcbae15b59fdc301ee83bcb6a16f70d360b6270fcd943e852e9d639"}, @ra={0x5, 0x2, 0x2}, @calipso={0x7, 0x8, {0x3, 0x0, 0x3, 0xd}}, @pad1, @ra={0x5, 0x2, 0x4}]}}}, @hopopts_2292={{0x30, 0x29, 0x36, {0x4e50cd32d2027e11, 0x2, '\x00', [@pad1, @hao={0xc9, 0x10, @mcast2}]}}}, @rthdr_2292={{0x98, 0x29, 0x39, {0x5c, 0x10, 0x0, 0x8, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, @local, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @remote]}}}], 0x208}}, {{0x0, 0x0, &(0x7f0000001240)=[{&(0x7f0000000f80)="3d40edeae88bc70bf37388a27897db4f54ae5cb8ef3b22bf8a0212264d4e42f9a1ebdabf83d3398a8d23c74d326b7862f5fd33adb09e56f60f409be471ea5b27a278e797eaff12eb3fa076a3a86c7353600712fe8c30884e08422e7ee87ac8007a2a4b23776d21a85b8c5dcf77438d002d73bfbcfedf3f7e75efe8bc5d9b261719457d53098975a9497e01413f80b4f4c34b2909a9092f5df824c843d89a23499774fad30d904c3fbe437b7983751fd8260ae8a71a4702f14b2b3abb85dbccf0cf9e9e5f097b3d01507fe31834558b02e4af419f45f77f4c13", 0xd9}, {&(0x7f0000001080)="98ef204d7bc983f8ef72166e22962adbeefd5f4bb118e29a47125fd6e617d9d17b5884a3e345608a16d417343149b92b322d06067e78f86fe8866c696211730b1d169bd2d5394c86979b553266e404ff8b7ad8969727b75f27dbe4aa5e4986d4691755e59fc69019a9dda0f2b40c2871584ed7fce24c7ed50d8c352db07d187848f41ded002f03d0435ec381175e30d2c5a8d5d42bb22a79d493a98b462f4ada9d879372af314999780923c60aa38b", 0xaf}, {&(0x7f0000001140)="9f1e69a153b91e25bc4b69a5174a89fb142944746d7018d2121f5b388d", 0x1d}, {&(0x7f0000001180)="e08dafa0837d1491a5c70a6d59301860a63dc162d652bd115538fdad9c3794c8c41fd9a5d822e0c2b4d2c684b1a3b83af99a89a7002c6fbc80f7c246a759e440b81f82418ebb08c4cd3fabf9b19d8bad3e27192ab9a84596907ffc0045227fbbe60bc5cfed2bafa4e62b6743868e74f91dd5b6c6f845789c5b6cd570e4720ab0c02c691f7fd1002544eaeba68288b14f6ac096", 0x93}], 0x4, &(0x7f0000001280)=[@flowinfo={{0x14, 0x29, 0xb, 0x8}}, @pktinfo={{0x24, 0x29, 0x32, {@remote, r4}}}, @rthdr={{0x68, 0x29, 0x39, {0x2c, 0xa, 0x0, 0x3, 0x0, [@private1={0xfc, 0x1, '\x00', 0x1}, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={'\x00', '\xff\xff', @loopback}, @private1]}}}, @hopopts={{0x1138, 0x29, 0x36, {0x2b, 0x223, '\x00', [@generic={0x4, 0x1000, "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"}, @jumbo, @ra={0x5, 0x2, 0x9}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x10, {0x3, 0x2, 0xd, 0x1, [0x6]}}, @hao={0xc9, 0x10, @local}, @generic={0xb, 0xc5, "af2d4472a2c70936dc59413ff68699f571b73e9121cdf0b25e7061abc03f9470d59d7bfdae49ff7594dde4c31d61976dc0ff3cc9544730b41f0c2dacb49e2c3981092b2042fde2339b47fefe315c63f90d7a2f122d67440af9dd4b59e7a13ae5b86f860f83aa7190dbd5d5bd1f1196086bb83e52aa54cb142fc2bca5d1f12468680d45c0ce26240047d9fe2875f7c5482719cad3f22609a9fc790a69333e7617917e2c097ab3507a688e27b6a0ab4ad2297adf42a4479fda61298fe7e4ee346d426d76f3bd"}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @mcast1}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}]}}}, @tclass={{0x14, 0x29, 0x43, 0x2}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x16}}], 0x1210}}], 0x3, 0x0) 51.354475ms ago: executing program 1 (id=510): syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r1}, 0x18) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r2, &(0x7f0000000180)=""/65, 0x41) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc5, 0x0, 0x0, 0xf}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2) 0s ago: executing program 3 (id=511): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000000000f6000000006debff00850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendfile(r0, r0, &(0x7f0000000080)=0x8, 0xd) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) openat$ptp0(0xffffffffffffff9c, 0x0, 0x88000, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="1900000004"], 0x48) syz_open_dev$vcsa(&(0x7f0000000000), 0xf69, 0x4040) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r2}, &(0x7f0000000000), &(0x7f00000005c0)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) mincore(&(0x7f0000ff5000/0x4000)=nil, 0x4000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000818"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$vsock_stream(0x28, 0x1, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="09000000070000000000010003"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00'}, 0x18) bind$vsock_stream(r3, &(0x7f0000000440), 0x10) listen(r3, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) writev(r5, &(0x7f0000000080)=[{&(0x7f00000001c0)='?', 0x1}], 0x1) r6 = accept4$unix(r3, 0x0, 0x0, 0x0) recvmsg(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000480)=""/68, 0x44}], 0x1}, 0x4c2103a0) r7 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x32) write(r7, &(0x7f00000001c0)="49bda8f11851b8436bebb25ac5f8202ffbcc3d0b6c01", 0x16) sendfile(r7, r1, 0x0, 0x3ffff) sendfile(r7, r1, 0x0, 0x7ffffffffffffffd) epoll_create(0x80f04) socket$nl_route(0x10, 0x3, 0x0) kernel console output (not intermixed with test programs): n't mark inode dirty (err -30) [ 49.693965][ T3892] EXT4-fs: Ignoring removed nomblk_io_submit option [ 49.698134][ T3893] EXT4-fs (loop3): 1 orphan inode deleted [ 49.727740][ T3893] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.748586][ T3907] netlink: 12 bytes leftover after parsing attributes in process `syz.2.99'. [ 49.780255][ T3892] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.935561][ T3913] netlink: 12 bytes leftover after parsing attributes in process `syz.4.101'. [ 50.064800][ T3919] netlink: 7 bytes leftover after parsing attributes in process `syz.4.103'. [ 50.093675][ T3919] netlink: 7 bytes leftover after parsing attributes in process `syz.4.103'. [ 50.470053][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.751516][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.919337][ T3936] loop1: detected capacity change from 0 to 512 [ 50.936705][ T3936] EXT4-fs: Ignoring removed mblk_io_submit option [ 50.953116][ T3936] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 50.961956][ T3936] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 50.991321][ T3936] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4193: comm syz.1.108: Allocating blocks 41-42 which overlap fs metadata [ 51.058916][ T3936] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.108: Failed to acquire dquot type 1 [ 51.108498][ T3945] netlink: 12 bytes leftover after parsing attributes in process `syz.2.111'. [ 51.113086][ T3936] EXT4-fs error (device loop1): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 51.129921][ T3945] warn_alloc: 4 callbacks suppressed [ 51.129935][ T3945] syz.2.111: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 51.140347][ T3936] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #12: comm syz.1.108: corrupted inode contents [ 51.151488][ T3945] CPU: 0 UID: 0 PID: 3945 Comm: syz.2.111 Not tainted syzkaller #0 PREEMPT(voluntary) [ 51.151512][ T3945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 51.151523][ T3945] Call Trace: [ 51.151529][ T3945] [ 51.151537][ T3945] __dump_stack+0x1d/0x30 [ 51.151559][ T3945] dump_stack_lvl+0xe8/0x140 [ 51.151598][ T3945] dump_stack+0x15/0x1b [ 51.151616][ T3945] warn_alloc+0x12b/0x1a0 [ 51.151646][ T3945] ? __rcu_read_unlock+0x4f/0x70 [ 51.151680][ T3945] __vmalloc_node_range_noprof+0x9d/0xed0 [ 51.151709][ T3945] ? __futex_wait+0x1fa/0x260 [ 51.151729][ T3945] ? __pfx_futex_wake_mark+0x10/0x10 [ 51.151779][ T3945] ? __rcu_read_unlock+0x4f/0x70 [ 51.151802][ T3945] ? avc_has_perm_noaudit+0x1b1/0x200 [ 51.151821][ T3945] ? should_fail_ex+0x30/0x280 [ 51.151920][ T3945] ? xskq_create+0x36/0xe0 [ 51.151941][ T3945] vmalloc_user_noprof+0x7d/0xb0 [ 51.151971][ T3945] ? xskq_create+0x80/0xe0 [ 51.152065][ T3945] xskq_create+0x80/0xe0 [ 51.152084][ T3945] xsk_init_queue+0x95/0xf0 [ 51.152103][ T3945] xsk_setsockopt+0x3f5/0x640 [ 51.152154][ T3945] ? __pfx_xsk_setsockopt+0x10/0x10 [ 51.152172][ T3945] __sys_setsockopt+0x184/0x200 [ 51.152201][ T3945] __x64_sys_setsockopt+0x64/0x80 [ 51.152268][ T3945] x64_sys_call+0x20ec/0x3000 [ 51.152317][ T3945] do_syscall_64+0xd2/0x200 [ 51.152334][ T3945] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 51.152359][ T3945] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 51.152390][ T3945] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.152413][ T3945] RIP: 0033:0x7f01e341efc9 [ 51.152428][ T3945] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 51.152505][ T3945] RSP: 002b:00007f01e1e87038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 51.152522][ T3945] RAX: ffffffffffffffda RBX: 00007f01e3675fa0 RCX: 00007f01e341efc9 [ 51.152535][ T3945] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000009 [ 51.152547][ T3945] RBP: 00007f01e34a1f91 R08: 0000000000000004 R09: 0000000000000000 [ 51.152606][ T3945] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 51.152618][ T3945] R13: 00007f01e3676038 R14: 00007f01e3675fa0 R15: 00007ffc9eca46f8 [ 51.152673][ T3945] [ 51.152679][ T3945] Mem-Info: [ 51.185153][ T3936] EXT4-fs error (device loop1): ext4_dirty_inode:6517: inode #12: comm syz.1.108: mark_inode_dirty error [ 51.186316][ T3945] active_anon:21023 inactive_anon:0 isolated_anon:0 [ 51.186316][ T3945] active_file:27521 inactive_file:2247 isolated_file:0 [ 51.186316][ T3945] unevictable:0 dirty:421 writeback:0 [ 51.186316][ T3945] slab_reclaimable:3240 slab_unreclaimable:14092 [ 51.186316][ T3945] mapped:42124 shmem:14008 pagetables:1260 [ 51.186316][ T3945] sec_pagetables:0 bounce:0 [ 51.186316][ T3945] kernel_misc_reclaimable:0 [ 51.186316][ T3945] free:1869004 free_pcp:5919 free_cma:0 [ 51.194970][ T3936] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #12: comm syz.1.108: corrupted inode contents [ 51.198162][ T3945] Node 0 active_anon:84904kB inactive_anon:0kB active_file:110084kB inactive_file:8988kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:168496kB dirty:1684kB writeback:0kB shmem:56844kB kernel_stack:3696kB pagetables:5040kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 51.211238][ T3936] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #12: comm syz.1.108: mark_inode_dirty error [ 51.211635][ T3945] Node 0 [ 51.226419][ T3936] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #12: comm syz.1.108: corrupted inode contents [ 51.227317][ T3945] DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 51.246674][ T3936] EXT4-fs error (device loop1) in ext4_orphan_del:301: Corrupt filesystem [ 51.246937][ T3945] lowmem_reserve[]: 0 [ 51.263967][ T3936] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #12: comm syz.1.108: corrupted inode contents [ 51.265088][ T3945] 2881 7859 [ 51.279311][ T3936] EXT4-fs error (device loop1): ext4_truncate:4637: inode #12: comm syz.1.108: mark_inode_dirty error [ 51.279904][ T3945] 7859 [ 51.300424][ T3936] EXT4-fs error (device loop1) in ext4_process_orphan:343: Corrupt filesystem [ 51.305857][ T3945] [ 51.305862][ T3945] Node 0 DMA32 free:2946744kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2950272kB mlocked:0kB bounce:0kB free_pcp:3528kB local_pcp:3528kB free_cma:0kB [ 51.314043][ T3936] EXT4-fs (loop1): 1 truncate cleaned up [ 51.316315][ T3945] lowmem_reserve[]: 0 0 [ 51.343666][ T3936] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.344378][ T3945] 4978 [ 51.539370][ T29] kauditd_printk_skb: 914 callbacks suppressed [ 51.539385][ T29] audit: type=1326 audit(1761260375.505:1181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3934 comm="syz.1.108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5ed4e4d810 code=0x7ffc0000 [ 51.540802][ T3945] 4978 [ 51.644840][ T3937] loop4: detected capacity change from 0 to 4096 [ 51.646862][ T3945] Node 0 Normal free:4507948kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:107712kB inactive_anon:0kB active_file:110084kB inactive_file:8940kB unevictable:0kB writepending:1692kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:2316kB local_pcp:1160kB free_cma:0kB [ 51.653598][ T3937] EXT4-fs: Ignoring removed nomblk_io_submit option [ 51.655781][ T3945] lowmem_reserve[]: 0 0 0 [ 51.683458][ T3937] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.688155][ T3945] 0 [ 51.688169][ T3945] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 51.747134][ T3945] Node 0 DMA32: 2*4kB (M) 2*8kB (M) 6*16kB (M) 2*32kB (M) 4*64kB (M) 2*128kB (M) 2*256kB (M) 3*512kB (M) 3*1024kB (M) 2*2048kB (M) 717*4096kB (M) = 2946744kB [ 51.747340][ T3945] Node 0 Normal: 5*4kB (ME) 52*8kB (UE) 28*16kB (UE) 377*32kB (UME) 353*64kB (UME) 264*128kB (UME) 148*256kB (UME) 39*512kB (UM) 22*1024kB (UM) 10*2048kB (UME) 1059*4096kB (UM) = 4507860kB [ 51.747528][ T3945] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 51.747543][ T3945] 49736 total pagecache pages [ 51.747606][ T3945] 0 pages in swap cache [ 51.747611][ T3945] Free swap = 124996kB [ 51.747618][ T3945] Total swap = 124996kB [ 51.747632][ T3945] 2097051 pages RAM [ 51.747638][ T3945] 0 pages HighMem/MovableOnly [ 51.747681][ T3945] 81083 pages reserved [ 52.066969][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.089019][ T3965] netlink: 7 bytes leftover after parsing attributes in process `syz.2.115'. [ 52.108752][ T3965] netlink: 7 bytes leftover after parsing attributes in process `syz.2.115'. [ 52.193127][ T3971] netlink: 12 bytes leftover after parsing attributes in process `syz.1.114'. [ 52.260995][ T3970] loop3: detected capacity change from 0 to 8192 [ 52.301948][ T3967] loop0: detected capacity change from 0 to 8192 [ 52.417225][ T3978] loop2: detected capacity change from 0 to 512 [ 52.430261][ T3978] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.118: error while reading EA inode 32 err=-116 [ 52.469360][ T3978] EXT4-fs (loop2): Remounting filesystem read-only [ 52.514165][ T3978] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 52.611893][ T3978] EXT4-fs (loop2): 1 orphan inode deleted [ 52.618406][ T3978] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.655768][ T3978] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.828077][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.053783][ T29] audit: type=1326 audit(1761260377.015:1182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3973 comm="syz.1.119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ed4e4efc9 code=0x7ffc0000 [ 53.077224][ T29] audit: type=1326 audit(1761260377.015:1183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3973 comm="syz.1.119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ed4e4efc9 code=0x7ffc0000 [ 53.083282][ T3999] 9pnet_fd: p9_fd_create_unix (3999): problem connecting socket: ./file0: -2 [ 53.100574][ T29] audit: type=1326 audit(1761260377.015:1184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3973 comm="syz.1.119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ed4e4efc9 code=0x7ffc0000 [ 53.100598][ T29] audit: type=1326 audit(1761260377.015:1185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3973 comm="syz.1.119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5ed4e4efc9 code=0x7ffc0000 [ 53.100629][ T29] audit: type=1326 audit(1761260377.015:1186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3973 comm="syz.1.119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ed4e4efc9 code=0x7ffc0000 [ 53.100721][ T29] audit: type=1326 audit(1761260377.015:1187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3973 comm="syz.1.119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ed4e4efc9 code=0x7ffc0000 [ 53.203073][ T29] audit: type=1326 audit(1761260377.015:1188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3973 comm="syz.1.119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ed4e4efc9 code=0x7ffc0000 [ 53.242351][ T4002] netlink: 12 bytes leftover after parsing attributes in process `syz.4.123'. [ 53.256594][ T4000] netlink: 'syz.3.125': attribute type 4 has an invalid length. [ 53.309006][ T29] audit: type=1326 audit(1761260377.095:1189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3973 comm="syz.1.119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5ed4e4efc9 code=0x7ffc0000 [ 53.332459][ T29] audit: type=1326 audit(1761260377.095:1190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3973 comm="syz.1.119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ed4e4efc9 code=0x7ffc0000 [ 53.341827][ T4010] loop2: detected capacity change from 0 to 512 [ 53.359762][ T4000] bridge1: entered promiscuous mode [ 53.417208][ T3999] netlink: 'syz.3.125': attribute type 4 has an invalid length. [ 53.442992][ T4014] netlink: 12 bytes leftover after parsing attributes in process `syz.0.130'. [ 53.478469][ T4010] EXT4-fs: Ignoring removed mblk_io_submit option [ 53.522490][ T4012] netlink: 7 bytes leftover after parsing attributes in process `syz.4.129'. [ 53.533613][ T4012] netlink: 7 bytes leftover after parsing attributes in process `syz.4.129'. [ 53.589398][ T4010] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 53.598524][ T4010] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 53.691917][ T4010] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4193: comm syz.2.127: Allocating blocks 41-42 which overlap fs metadata [ 53.707288][ T4010] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4193: comm syz.2.127: Allocating blocks 41-42 which overlap fs metadata [ 53.730526][ T4010] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.127: Failed to acquire dquot type 1 [ 53.742780][ T4010] EXT4-fs error (device loop2): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 53.757837][ T4010] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #12: comm syz.2.127: corrupted inode contents [ 54.229758][ T4029] netlink: 8 bytes leftover after parsing attributes in process `syz.1.134'. [ 54.312434][ T4010] EXT4-fs error (device loop2): ext4_dirty_inode:6517: inode #12: comm syz.2.127: mark_inode_dirty error [ 54.486554][ T4010] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #12: comm syz.2.127: corrupted inode contents [ 54.702472][ T4010] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #12: comm syz.2.127: mark_inode_dirty error [ 54.790385][ T4040] loop1: detected capacity change from 0 to 164 [ 54.828584][ T4010] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #12: comm syz.2.127: corrupted inode contents [ 54.880755][ T4010] EXT4-fs error (device loop2) in ext4_orphan_del:301: Corrupt filesystem [ 54.890618][ T4010] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #12: comm syz.2.127: corrupted inode contents [ 54.891077][ T4023] loop3: detected capacity change from 0 to 4096 [ 54.902728][ T4010] EXT4-fs error (device loop2): ext4_truncate:4637: inode #12: comm syz.2.127: mark_inode_dirty error [ 54.920966][ T4023] EXT4-fs: Ignoring removed nomblk_io_submit option [ 55.021093][ T4010] EXT4-fs error (device loop2) in ext4_process_orphan:343: Corrupt filesystem [ 55.040665][ T4042] netlink: 12 bytes leftover after parsing attributes in process `syz.1.138'. [ 55.092456][ T4010] EXT4-fs (loop2): 1 truncate cleaned up [ 55.098516][ T4010] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.136648][ T4047] loop1: detected capacity change from 0 to 164 [ 55.172190][ T4023] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.884390][ T4046] 8021q: adding VLAN 0 to HW filter on device bond1 [ 55.949388][ T4053] netlink: 12 bytes leftover after parsing attributes in process `syz.0.141'. [ 56.001628][ T4047] syz.1.140: attempt to access beyond end of device [ 56.001628][ T4047] loop1: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 56.060378][ T4047] syz.1.140: attempt to access beyond end of device [ 56.060378][ T4047] loop1: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 56.134037][ T4059] 9pnet_fd: p9_fd_create_unix (4059): problem connecting socket: ./file0: -2 [ 56.184380][ T4060] netlink: 'syz.1.144': attribute type 4 has an invalid length. [ 56.209804][ T4060] bridge1: entered promiscuous mode [ 56.246656][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.264241][ T4059] netlink: 'syz.1.144': attribute type 4 has an invalid length. [ 56.316993][ T4066] loop2: detected capacity change from 0 to 128 [ 56.385304][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.518084][ T4077] loop3: detected capacity change from 0 to 164 [ 56.632384][ T4072] syz.2.147: attempt to access beyond end of device [ 56.632384][ T4072] loop2: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 56.645793][ T4072] Buffer I/O error on dev loop2, logical block 128, lost async page write [ 56.654705][ T4069] syz.2.147: attempt to access beyond end of device [ 56.654705][ T4069] loop2: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 56.668080][ T4069] Buffer I/O error on dev loop2, logical block 128, lost async page write [ 56.707286][ T4069] syz.2.147: attempt to access beyond end of device [ 56.707286][ T4069] loop2: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 56.720683][ T4069] Buffer I/O error on dev loop2, logical block 128, lost async page write [ 56.749486][ T4086] 9pnet_fd: p9_fd_create_unix (4086): problem connecting socket: ./file0: -2 [ 56.759559][ T4086] netlink: 'syz.4.142': attribute type 4 has an invalid length. [ 56.773421][ T4086] bridge1: entered promiscuous mode [ 56.781161][ T4086] netlink: 'syz.4.142': attribute type 4 has an invalid length. [ 56.795531][ T4083] loop1: detected capacity change from 0 to 512 [ 56.837090][ T4091] loop3: detected capacity change from 0 to 128 [ 56.860314][ T4083] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.152: error while reading EA inode 32 err=-116 [ 56.894701][ T4083] EXT4-fs (loop1): Remounting filesystem read-only [ 56.914055][ T4083] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 56.939365][ T4083] EXT4-fs (loop1): 1 orphan inode deleted [ 56.950033][ T4083] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.022167][ T4083] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.231637][ T4096] syz.3.155: attempt to access beyond end of device [ 57.231637][ T4096] loop3: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 57.245285][ T4096] Buffer I/O error on dev loop3, logical block 128, lost async page write [ 57.254657][ T4091] syz.3.155: attempt to access beyond end of device [ 57.254657][ T4091] loop3: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 57.268029][ T4091] Buffer I/O error on dev loop3, logical block 128, lost async page write [ 57.366582][ T29] kauditd_printk_skb: 62 callbacks suppressed [ 57.366664][ T29] audit: type=1326 audit(1761260381.325:1249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4101 comm="syz.2.157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01e341efc9 code=0x7ffc0000 [ 57.428226][ T4096] syz.3.155: attempt to access beyond end of device [ 57.428226][ T4096] loop3: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 57.441580][ T4096] Buffer I/O error on dev loop3, logical block 128, lost async page write [ 57.451471][ T29] audit: type=1326 audit(1761260381.355:1250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4101 comm="syz.2.157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f01e341efc9 code=0x7ffc0000 [ 57.474810][ T29] audit: type=1326 audit(1761260381.355:1251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4101 comm="syz.2.157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01e341efc9 code=0x7ffc0000 [ 57.498093][ T29] audit: type=1326 audit(1761260381.355:1252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4101 comm="syz.2.157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01e341efc9 code=0x7ffc0000 [ 57.521418][ T29] audit: type=1326 audit(1761260381.365:1253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4101 comm="syz.2.157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f01e341efc9 code=0x7ffc0000 [ 57.544766][ T29] audit: type=1326 audit(1761260381.365:1254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4101 comm="syz.2.157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01e341efc9 code=0x7ffc0000 [ 57.568147][ T29] audit: type=1326 audit(1761260381.365:1255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4101 comm="syz.2.157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f01e341efc9 code=0x7ffc0000 [ 57.699234][ T29] audit: type=1326 audit(1761260381.615:1256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4101 comm="syz.2.157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f01e3415e67 code=0x7ffc0000 [ 57.722652][ T29] audit: type=1326 audit(1761260381.615:1257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4101 comm="syz.2.157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f01e33bb099 code=0x7ffc0000 [ 57.745962][ T29] audit: type=1326 audit(1761260381.615:1258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4101 comm="syz.2.157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f01e341efc9 code=0x7ffc0000 [ 57.840317][ T4103] loop2: detected capacity change from 0 to 512 [ 57.945311][ T4103] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.157: error while reading EA inode 32 err=-116 [ 58.092933][ T4103] EXT4-fs (loop2): Remounting filesystem read-only [ 58.153687][ T4103] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 58.265163][ T4123] loop4: detected capacity change from 0 to 164 [ 59.014635][ T4103] EXT4-fs (loop2): 1 orphan inode deleted [ 59.102537][ T4103] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.254127][ T4128] 8021q: adding VLAN 0 to HW filter on device bond2 [ 59.356296][ T4127] loop4: detected capacity change from 0 to 8192 [ 59.386131][ T4134] __nla_validate_parse: 1 callbacks suppressed [ 59.386144][ T4134] netlink: 12 bytes leftover after parsing attributes in process `syz.1.165'. [ 59.418372][ T4115] loop3: detected capacity change from 0 to 4096 [ 59.448786][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.459028][ T4115] EXT4-fs: Ignoring removed nomblk_io_submit option [ 59.651207][ T4115] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.777945][ T4150] netlink: 7 bytes leftover after parsing attributes in process `syz.4.170'. [ 59.798040][ T4150] netlink: 7 bytes leftover after parsing attributes in process `syz.4.170'. [ 59.842404][ T4144] loop0: detected capacity change from 0 to 512 [ 59.877454][ T4144] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.168: error while reading EA inode 32 err=-116 [ 59.904510][ T4144] EXT4-fs (loop0): Remounting filesystem read-only [ 59.916411][ T4144] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 59.916601][ T4156] 9pnet_fd: p9_fd_create_unix (4156): problem connecting socket: ./file0: -2 [ 59.926720][ T4144] EXT4-fs (loop0): 1 orphan inode deleted [ 59.941666][ T4144] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.961832][ T4156] netlink: 'syz.1.172': attribute type 4 has an invalid length. [ 59.970133][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.975795][ T4156] bridge2: entered promiscuous mode [ 60.019751][ T4163] loop3: detected capacity change from 0 to 128 [ 60.033148][ T4165] netlink: 12 bytes leftover after parsing attributes in process `syz.4.175'. [ 60.287790][ T4171] syz.3.173: attempt to access beyond end of device [ 60.287790][ T4171] loop3: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 60.301153][ T4171] Buffer I/O error on dev loop3, logical block 128, lost async page write [ 60.310928][ T4170] syz.3.173: attempt to access beyond end of device [ 60.310928][ T4170] loop3: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 60.324302][ T4170] Buffer I/O error on dev loop3, logical block 128, lost async page write [ 60.392193][ T4179] netlink: 8 bytes leftover after parsing attributes in process `syz.1.179'. [ 60.418851][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.631863][ T4185] loop1: detected capacity change from 0 to 4096 [ 60.638683][ T4185] EXT4-fs: Ignoring removed nomblk_io_submit option [ 60.656312][ T4185] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.765907][ T4196] 9pnet_fd: p9_fd_create_unix (4196): problem connecting socket: ./file0: -2 [ 60.776205][ T4196] netlink: 'syz.0.185': attribute type 4 has an invalid length. [ 60.791336][ T4196] bridge1: entered promiscuous mode [ 60.877252][ T4202] netlink: 12 bytes leftover after parsing attributes in process `syz.0.187'. [ 61.183683][ T4218] loop4: detected capacity change from 0 to 512 [ 61.211345][ T4218] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.193: error while reading EA inode 32 err=-116 [ 61.234631][ T4218] EXT4-fs (loop4): Remounting filesystem read-only [ 61.241320][ T4218] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 61.328133][ T4225] loop2: detected capacity change from 0 to 512 [ 61.342895][ T4225] EXT4-fs: Ignoring removed bh option [ 61.348590][ T4218] EXT4-fs (loop4): 1 orphan inode deleted [ 61.350676][ T4227] 9pnet_fd: p9_fd_create_unix (4227): problem connecting socket: ./file0: -2 [ 61.355191][ T4218] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 61.376574][ T4225] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 61.387648][ T4225] EXT4-fs (loop2): 1 truncate cleaned up [ 61.395422][ T4225] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 61.409371][ T4227] netlink: 'syz.3.196': attribute type 4 has an invalid length. [ 61.429921][ T4227] bridge2: entered promiscuous mode [ 61.462777][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.519433][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.597682][ T4237] loop2: detected capacity change from 0 to 512 [ 61.605756][ T4237] EXT4-fs: Ignoring removed mblk_io_submit option [ 61.613550][ T4237] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 61.622378][ T4237] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 61.625927][ T4241] netlink: 12 bytes leftover after parsing attributes in process `syz.1.199'. [ 61.641087][ T4237] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4193: comm syz.2.197: Allocating blocks 41-42 which overlap fs metadata [ 61.643916][ T4241] warn_alloc: 10 callbacks suppressed [ 61.643928][ T4241] syz.1.199: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 61.655172][ T4237] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4193: comm syz.2.197: Allocating blocks 41-42 which overlap fs metadata [ 61.660294][ T4241] ,cpuset= [ 61.675148][ T4237] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.197: Failed to acquire dquot type 1 [ 61.686207][ T4241] /,mems_allowed=0 [ 61.686233][ T4241] CPU: 0 UID: 0 PID: 4241 Comm: syz.1.199 Not tainted syzkaller #0 PREEMPT(voluntary) [ 61.686317][ T4241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 61.686337][ T4241] Call Trace: [ 61.686344][ T4241] [ 61.686351][ T4241] __dump_stack+0x1d/0x30 [ 61.686372][ T4241] dump_stack_lvl+0xe8/0x140 [ 61.686391][ T4241] dump_stack+0x15/0x1b [ 61.686413][ T4241] warn_alloc+0x12b/0x1a0 [ 61.686480][ T4241] ? __rcu_read_unlock+0x4f/0x70 [ 61.686502][ T4241] __vmalloc_node_range_noprof+0x9d/0xed0 [ 61.686531][ T4241] ? __futex_wait+0x1fa/0x260 [ 61.686552][ T4241] ? __pfx_futex_wake_mark+0x10/0x10 [ 61.686571][ T4241] ? ___slab_alloc+0x332/0xb70 [ 61.686617][ T4241] ? xskq_create+0x36/0xe0 [ 61.686741][ T4241] vmalloc_user_noprof+0x7d/0xb0 [ 61.686770][ T4241] ? xskq_create+0x80/0xe0 [ 61.686789][ T4241] xskq_create+0x80/0xe0 [ 61.686809][ T4241] xsk_init_queue+0x95/0xf0 [ 61.686828][ T4241] xsk_setsockopt+0x3f5/0x640 [ 61.686890][ T4241] ? __pfx_xsk_setsockopt+0x10/0x10 [ 61.686908][ T4241] __sys_setsockopt+0x184/0x200 [ 61.686938][ T4241] __x64_sys_setsockopt+0x64/0x80 [ 61.687039][ T4241] x64_sys_call+0x20ec/0x3000 [ 61.687061][ T4241] do_syscall_64+0xd2/0x200 [ 61.687078][ T4241] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 61.687104][ T4241] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 61.687194][ T4241] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.687214][ T4241] RIP: 0033:0x7f5ed4e4efc9 [ 61.687229][ T4241] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 61.687246][ T4241] RSP: 002b:00007f5ed38b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 61.687315][ T4241] RAX: ffffffffffffffda RBX: 00007f5ed50a5fa0 RCX: 00007f5ed4e4efc9 [ 61.687328][ T4241] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000009 [ 61.687340][ T4241] RBP: 00007f5ed4ed1f91 R08: 0000000000000004 R09: 0000000000000000 [ 61.687352][ T4241] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 61.687364][ T4241] R13: 00007f5ed50a6038 R14: 00007f5ed50a5fa0 R15: 00007ffce346f8d8 [ 61.687382][ T4241] [ 61.687388][ T4241] Mem-Info: [ 61.689962][ T4237] EXT4-fs error (device loop2): mb_free_blocks:2017: group 0, [ 61.700417][ T4241] active_anon:9399 inactive_anon:0 isolated_anon:0 [ 61.700417][ T4241] active_file:27652 inactive_file:2248 isolated_file:0 [ 61.700417][ T4241] unevictable:0 dirty:174 writeback:0 [ 61.700417][ T4241] slab_reclaimable:3246 slab_unreclaimable:14322 [ 61.700417][ T4241] mapped:29436 shmem:334 pagetables:1247 [ 61.700417][ T4241] sec_pagetables:0 bounce:0 [ 61.700417][ T4241] kernel_misc_reclaimable:0 [ 61.700417][ T4241] free:1875432 free_pcp:10992 free_cma:0 [ 61.704132][ T4237] inode 12: block 14: [ 61.713746][ T4241] Node 0 active_anon:37596kB inactive_anon:0kB active_file:110608kB inactive_file:8992kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:117744kB dirty:696kB writeback:0kB shmem:1336kB kernel_stack:3744kB pagetables:4988kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 61.723804][ T4237] freeing already freed block (bit 14); block bitmap corrupt. [ 61.727092][ T4241] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 61.733706][ T4237] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #12: comm syz.2.197: corrupted inode contents [ 61.734371][ T4241] lowmem_reserve[]: 0 [ 61.739089][ T4237] EXT4-fs error (device loop2): ext4_dirty_inode:6517: inode #12: comm syz.2.197: mark_inode_dirty error [ 61.743111][ T4241] 2881 [ 61.747869][ T4237] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #12: comm syz.2.197: corrupted inode contents [ 61.752345][ T4241] 7859 7859 [ 61.758373][ T4237] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #12: comm syz.2.197: mark_inode_dirty error [ 61.762727][ T4241] Node 0 [ 61.768630][ T4237] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #12: comm syz.2.197: corrupted inode contents [ 61.772741][ T4241] DMA32 free:2946744kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2950272kB mlocked:0kB bounce:0kB free_pcp:3528kB local_pcp:3528kB free_cma:0kB [ 61.777385][ T4237] EXT4-fs error (device loop2) in ext4_orphan_del:301: Corrupt filesystem [ 61.782104][ T4241] lowmem_reserve[]: 0 0 4978 4978 [ 61.789039][ T4237] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #12: comm syz.2.197: corrupted inode contents [ 61.790778][ T4241] Node 0 Normal free:4539624kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:37596kB inactive_anon:0kB active_file:110608kB inactive_file:8992kB unevictable:0kB writepending:696kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:40432kB local_pcp:39768kB free_cma:0kB [ 61.795594][ T4237] EXT4-fs error (device loop2): ext4_truncate:4637: inode #12: comm syz.2.197: mark_inode_dirty error [ 61.800061][ T4241] lowmem_reserve[]: 0 0 0 0 [ 61.800097][ T4241] Node 0 DMA: 0*4kB [ 61.806013][ T4237] EXT4-fs error (device loop2) in ext4_process_orphan:343: Corrupt filesystem [ 61.810133][ T4241] 0*8kB 0*16kB [ 61.815603][ T4237] EXT4-fs (loop2): 1 truncate cleaned up [ 61.819819][ T4241] 0*32kB 0*64kB [ 61.825036][ T4237] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.830409][ T4241] 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 62.263098][ T4241] Node 0 DMA32: 2*4kB (M) 2*8kB (M) 6*16kB (M) 2*32kB (M) 4*64kB (M) 2*128kB (M) 2*256kB (M) 3*512kB (M) 3*1024kB (M) 2*2048kB (M) 717*4096kB (M) = 2946744kB [ 62.279287][ T4241] Node 0 Normal: 1021*4kB (UME) 773*8kB (UME) 542*16kB (UME) 475*32kB (UME) 421*64kB (UME) 351*128kB (UME) 182*256kB (UME) 56*512kB (UM) 26*1024kB (UM) 8*2048kB (UME) 1055*4096kB (UM) = 4545564kB [ 62.298780][ T4241] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 62.308083][ T4241] 30234 total pagecache pages [ 62.312792][ T4241] 0 pages in swap cache [ 62.316948][ T4241] Free swap = 124996kB [ 62.321136][ T4241] Total swap = 124996kB [ 62.325301][ T4241] 2097051 pages RAM [ 62.329122][ T4241] 0 pages HighMem/MovableOnly [ 62.329676][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.333901][ T4241] 81083 pages reserved [ 62.403555][ T4253] loop4: detected capacity change from 0 to 164 [ 62.418607][ T4253] syz.4.204: attempt to access beyond end of device [ 62.418607][ T4253] loop4: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 62.449133][ T4253] syz.4.204: attempt to access beyond end of device [ 62.449133][ T4253] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 62.456324][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.473906][ T4253] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 62.481530][ T29] kauditd_printk_skb: 855 callbacks suppressed [ 62.481541][ T29] audit: type=1326 audit(1761260386.435:2110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4254 comm="syz.0.206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32221eefc9 code=0x7ffc0000 [ 62.511035][ T29] audit: type=1326 audit(1761260386.435:2111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4254 comm="syz.0.206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32221eefc9 code=0x7ffc0000 [ 62.534544][ T29] audit: type=1326 audit(1761260386.435:2112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4254 comm="syz.0.206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32221eefc9 code=0x7ffc0000 [ 62.557937][ T29] audit: type=1326 audit(1761260386.435:2113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4254 comm="syz.0.206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=66 compat=0 ip=0x7f32221eefc9 code=0x7ffc0000 [ 62.581361][ T29] audit: type=1326 audit(1761260386.435:2114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4254 comm="syz.0.206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32221eefc9 code=0x7ffc0000 [ 62.604677][ T29] audit: type=1326 audit(1761260386.435:2115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4254 comm="syz.0.206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32221eefc9 code=0x7ffc0000 [ 62.628224][ T29] audit: type=1326 audit(1761260386.435:2116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4254 comm="syz.0.206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32221eefc9 code=0x7ffc0000 [ 62.651533][ T29] audit: type=1326 audit(1761260386.435:2117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4254 comm="syz.0.206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f32221eefc9 code=0x7ffc0000 [ 62.674941][ T29] audit: type=1326 audit(1761260386.435:2118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4254 comm="syz.0.206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32221eefc9 code=0x7ffc0000 [ 62.698323][ T29] audit: type=1326 audit(1761260386.435:2119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4254 comm="syz.0.206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32221eefc9 code=0x7ffc0000 [ 62.747925][ T4265] netlink: 7 bytes leftover after parsing attributes in process `syz.2.207'. [ 62.771239][ T4265] netlink: 7 bytes leftover after parsing attributes in process `syz.2.207'. [ 62.944846][ T4263] loop3: detected capacity change from 0 to 4096 [ 62.962856][ T4263] EXT4-fs: Ignoring removed nomblk_io_submit option [ 63.025597][ T4263] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.064532][ T4281] loop1: detected capacity change from 0 to 164 [ 63.243445][ T4288] netlink: 12 bytes leftover after parsing attributes in process `syz.4.216'. [ 63.391801][ T4292] loop0: detected capacity change from 0 to 128 [ 63.782139][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.872387][ T4295] syz.0.218: attempt to access beyond end of device [ 63.872387][ T4295] loop0: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 63.885808][ T4295] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 63.900457][ T4298] syz.0.218: attempt to access beyond end of device [ 63.900457][ T4298] loop0: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 63.913822][ T4298] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 63.926783][ T4298] syz.0.218: attempt to access beyond end of device [ 63.926783][ T4298] loop0: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 63.940204][ T4298] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 63.951521][ T4307] loop4: detected capacity change from 0 to 512 [ 63.970017][ T4307] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.224: inode has both inline data and extents flags [ 63.999929][ T4311] loop2: detected capacity change from 0 to 128 [ 64.009358][ T4307] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.224: couldn't read orphan inode 15 (err -117) [ 64.022026][ T4307] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.071417][ T4315] 9pnet_fd: p9_fd_create_unix (4315): problem connecting socket: ./file0: -2 [ 64.081684][ T4315] netlink: 'syz.3.228': attribute type 4 has an invalid length. [ 64.101639][ T4315] bridge3: entered promiscuous mode [ 64.108132][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.121702][ T4315] netlink: 'syz.3.228': attribute type 4 has an invalid length. [ 64.471641][ T4329] loop0: detected capacity change from 0 to 4096 [ 64.485351][ T4329] EXT4-fs: Ignoring removed nomblk_io_submit option [ 64.502464][ T4329] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.554541][ T4311] syz.2.225: attempt to access beyond end of device [ 64.554541][ T4311] loop2: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 64.567997][ T4311] Buffer I/O error on dev loop2, logical block 128, lost async page write [ 64.871150][ T4343] __nla_validate_parse: 2 callbacks suppressed [ 64.871163][ T4343] netlink: 7 bytes leftover after parsing attributes in process `syz.3.237'. [ 64.904944][ T4343] netlink: 7 bytes leftover after parsing attributes in process `syz.3.237'. [ 65.053125][ T4351] 9pnet_fd: p9_fd_create_unix (4351): problem connecting socket: ./file0: -2 [ 65.062974][ T4351] netlink: 'syz.4.240': attribute type 4 has an invalid length. [ 65.076443][ T4351] bridge2: entered promiscuous mode [ 65.092005][ T4351] netlink: 'syz.4.240': attribute type 4 has an invalid length. [ 65.147580][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.160203][ T4355] 8021q: adding VLAN 0 to HW filter on device bond2 [ 65.438483][ T4370] loop0: detected capacity change from 0 to 164 [ 65.476597][ T4374] loop0: detected capacity change from 0 to 128 [ 65.483716][ T4375] loop4: detected capacity change from 0 to 512 [ 65.546761][ T4375] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.243: error while reading EA inode 32 err=-116 [ 65.649761][ T4375] EXT4-fs (loop4): Remounting filesystem read-only [ 65.694205][ T4375] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 65.705655][ T4382] netlink: 7 bytes leftover after parsing attributes in process `syz.2.249'. [ 65.721931][ T4374] syz.0.247: attempt to access beyond end of device [ 65.721931][ T4374] loop0: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 65.735398][ T4374] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 65.744967][ T4382] netlink: 7 bytes leftover after parsing attributes in process `syz.2.249'. [ 65.753880][ T4375] EXT4-fs (loop4): 1 orphan inode deleted [ 65.760388][ T4375] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 65.774397][ T4375] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.860127][ T4391] 9pnet_fd: p9_fd_create_unix (4391): problem connecting socket: ./file0: -2 [ 65.880789][ T4391] netlink: 'syz.3.253': attribute type 4 has an invalid length. [ 65.903335][ T4391] bridge4: entered promiscuous mode [ 65.912175][ T4391] netlink: 'syz.3.253': attribute type 4 has an invalid length. [ 65.972791][ T4397] loop3: detected capacity change from 0 to 164 [ 66.085547][ T4388] loop2: detected capacity change from 0 to 4096 [ 66.119604][ T4388] EXT4-fs: Ignoring removed nomblk_io_submit option [ 66.138813][ T4387] loop0: detected capacity change from 0 to 4096 [ 66.146325][ T4387] EXT4-fs: Ignoring removed nomblk_io_submit option [ 66.155299][ T4388] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.169447][ T4407] Driver unsupported XDP return value 0 on prog (id 173) dev N/A, expect packet loss! [ 66.191779][ T4387] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.296706][ T4410] loop4: detected capacity change from 0 to 128 [ 66.322102][ T4412] loop3: detected capacity change from 0 to 128 [ 66.389513][ T4412] EXT4-fs: Ignoring removed nobh option [ 66.395386][ T4410] EXT4-fs: Ignoring removed nobh option [ 66.432614][ T4412] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 66.481244][ T4410] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 66.515773][ T4410] ext4 filesystem being mounted at /58/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 66.525993][ T4412] ext4 filesystem being mounted at /51/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 66.651617][ T3322] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 66.776167][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.660523][ T3313] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 67.818977][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.949855][ T29] kauditd_printk_skb: 1528 callbacks suppressed [ 67.949867][ T29] audit: type=1400 audit(1761260391.915:3648): avc: denied { ioctl } for pid=4447 comm="+}[@" path="socket:[7376]" dev="sockfs" ino=7376 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 67.986035][ T4448] loop4: detected capacity change from 0 to 512 [ 68.062499][ T4455] loop3: detected capacity change from 0 to 512 [ 68.088470][ T4461] 9pnet_fd: p9_fd_create_unix (4461): problem connecting socket: ./file0: -2 [ 68.094592][ T29] audit: type=1326 audit(1761260391.925:3649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4446 comm="syz.3.273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38cde7efc9 code=0x7ffc0000 [ 68.120662][ T29] audit: type=1326 audit(1761260391.925:3650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4446 comm="syz.3.273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f38cde7efc9 code=0x7ffc0000 [ 68.140550][ T4461] netlink: 'syz.2.265': attribute type 4 has an invalid length. [ 68.144055][ T29] audit: type=1326 audit(1761260391.925:3651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4446 comm="syz.3.273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38cde7efc9 code=0x7ffc0000 [ 68.162024][ T4455] EXT4-fs: Ignoring removed mblk_io_submit option [ 68.174985][ T29] audit: type=1326 audit(1761260391.925:3652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4446 comm="syz.3.273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f38cde7efc9 code=0x7ffc0000 [ 68.186441][ T4461] bridge2: entered promiscuous mode [ 68.204753][ T29] audit: type=1326 audit(1761260391.925:3653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4446 comm="syz.3.273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38cde7efc9 code=0x7ffc0000 [ 68.233297][ T29] audit: type=1326 audit(1761260391.925:3654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4446 comm="syz.3.273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f38cde7efc9 code=0x7ffc0000 [ 68.246286][ T4461] netlink: 'syz.2.265': attribute type 4 has an invalid length. [ 68.256615][ T29] audit: type=1326 audit(1761260391.925:3655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4446 comm="syz.3.273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38cde7efc9 code=0x7ffc0000 [ 68.256641][ T29] audit: type=1326 audit(1761260391.925:3656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4446 comm="syz.3.273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f38cde7efc9 code=0x7ffc0000 [ 68.256661][ T29] audit: type=1326 audit(1761260391.925:3657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4446 comm="syz.3.273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38cde7efc9 code=0x7ffc0000 [ 68.294998][ T4455] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 68.342958][ T4455] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 68.353159][ T4448] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 68.353364][ T4448] EXT4-fs (loop4): orphan cleanup on readonly fs [ 68.355083][ T4448] EXT4-fs warning (device loop4): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 68.439586][ T4448] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 68.441076][ T4448] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm +}[@: bg 0: block 40: padding at end of block bitmap is not set [ 68.441414][ T4448] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 68.441744][ T4448] EXT4-fs (loop4): 1 truncate cleaned up [ 68.442854][ T4448] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 68.481492][ T4455] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4193: comm syz.3.273: Allocating blocks 41-42 which overlap fs metadata [ 68.482198][ T4455] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4193: comm syz.3.273: Allocating blocks 41-42 which overlap fs metadata [ 68.482592][ T4455] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.273: Failed to acquire dquot type 1 [ 68.488835][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.488955][ T4455] EXT4-fs error (device loop3): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 68.489187][ T4455] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #12: comm syz.3.273: corrupted inode contents [ 68.490190][ T4455] EXT4-fs error (device loop3): ext4_dirty_inode:6517: inode #12: comm syz.3.273: mark_inode_dirty error [ 68.490733][ T4455] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #12: comm syz.3.273: corrupted inode contents [ 68.507522][ T4455] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #12: comm syz.3.273: mark_inode_dirty error [ 68.508040][ T4455] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #12: comm syz.3.273: corrupted inode contents [ 68.508462][ T4455] EXT4-fs error (device loop3) in ext4_orphan_del:301: Corrupt filesystem [ 68.508859][ T4455] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #12: comm syz.3.273: corrupted inode contents [ 68.509072][ T4455] EXT4-fs error (device loop3): ext4_truncate:4637: inode #12: comm syz.3.273: mark_inode_dirty error [ 68.511271][ T4455] EXT4-fs error (device loop3) in ext4_process_orphan:343: Corrupt filesystem [ 68.511611][ T4455] EXT4-fs (loop3): 1 truncate cleaned up [ 68.512270][ T4455] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.321051][ T4489] netlink: 'syz.0.281': attribute type 10 has an invalid length. [ 69.321071][ T4489] netlink: 156 bytes leftover after parsing attributes in process `syz.0.281'. [ 69.421734][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.478945][ T4500] 9pnet_fd: p9_fd_create_unix (4500): problem connecting socket: ./file0: -2 [ 69.491536][ T4500] netlink: 'syz.1.285': attribute type 4 has an invalid length. [ 69.517297][ T4504] netlink: 12 bytes leftover after parsing attributes in process `syz.3.286'. [ 69.549662][ T4500] bridge3: entered promiscuous mode [ 69.565834][ T4500] netlink: 'syz.1.285': attribute type 4 has an invalid length. [ 69.652753][ T4510] netlink: 12 bytes leftover after parsing attributes in process `syz.2.288'. [ 69.702507][ T4510] 8021q: adding VLAN 0 to HW filter on device bond2 [ 69.728463][ T4515] 8021q: adding VLAN 0 to HW filter on device bond2 [ 69.781971][ T4515] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 69.832629][ T4501] netlink: 36 bytes leftover after parsing attributes in process `syz.0.284'. [ 69.833478][ T4515] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 70.185633][ T4527] netlink: 12 bytes leftover after parsing attributes in process `syz.3.293'. [ 70.210766][ T4528] loop2: detected capacity change from 0 to 512 [ 70.238968][ T4528] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.292: error while reading EA inode 32 err=-116 [ 70.255251][ T4528] EXT4-fs (loop2): Remounting filesystem read-only [ 70.262758][ T4528] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 70.279491][ T4528] EXT4-fs (loop2): 1 orphan inode deleted [ 70.292138][ T4528] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.249483][ T4541] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 71.333657][ T4549] netlink: 12 bytes leftover after parsing attributes in process `syz.3.299'. [ 71.379599][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.598818][ T4560] loop2: detected capacity change from 0 to 128 [ 71.726060][ T4567] netlink: 12 bytes leftover after parsing attributes in process `syz.0.305'. [ 71.737853][ T4567] warn_alloc: 8 callbacks suppressed [ 71.737867][ T4567] syz.0.305: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 71.757732][ T4567] CPU: 1 UID: 0 PID: 4567 Comm: syz.0.305 Not tainted syzkaller #0 PREEMPT(voluntary) [ 71.757760][ T4567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 71.757849][ T4567] Call Trace: [ 71.757856][ T4567] [ 71.757864][ T4567] __dump_stack+0x1d/0x30 [ 71.757887][ T4567] dump_stack_lvl+0xe8/0x140 [ 71.757981][ T4567] dump_stack+0x15/0x1b [ 71.758008][ T4567] warn_alloc+0x12b/0x1a0 [ 71.758037][ T4567] __vmalloc_node_range_noprof+0x9d/0xed0 [ 71.758067][ T4567] ? css_rstat_updated+0xb7/0x240 [ 71.758111][ T4567] ? plist_check_list+0x1e4/0x210 [ 71.758133][ T4567] ? tracing_record_taskinfo_sched_switch+0x71/0x260 [ 71.758214][ T4567] ? should_fail_ex+0x30/0x280 [ 71.758240][ T4567] ? xskq_create+0x36/0xe0 [ 71.758259][ T4567] vmalloc_user_noprof+0x7d/0xb0 [ 71.758310][ T4567] ? xskq_create+0x80/0xe0 [ 71.758328][ T4567] xskq_create+0x80/0xe0 [ 71.758349][ T4567] xsk_init_queue+0x95/0xf0 [ 71.758388][ T4567] xsk_setsockopt+0x3f5/0x640 [ 71.758485][ T4567] ? __pfx_xsk_setsockopt+0x10/0x10 [ 71.758504][ T4567] __sys_setsockopt+0x184/0x200 [ 71.758546][ T4567] __x64_sys_setsockopt+0x64/0x80 [ 71.758631][ T4567] x64_sys_call+0x20ec/0x3000 [ 71.758652][ T4567] do_syscall_64+0xd2/0x200 [ 71.758711][ T4567] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 71.758773][ T4567] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 71.758797][ T4567] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.758815][ T4567] RIP: 0033:0x7f32221eefc9 [ 71.758830][ T4567] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 71.758870][ T4567] RSP: 002b:00007f3220c4f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 71.758890][ T4567] RAX: ffffffffffffffda RBX: 00007f3222445fa0 RCX: 00007f32221eefc9 [ 71.758903][ T4567] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000009 [ 71.758915][ T4567] RBP: 00007f3222271f91 R08: 0000000000000004 R09: 0000000000000000 [ 71.758927][ T4567] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 71.758958][ T4567] R13: 00007f3222446038 R14: 00007f3222445fa0 R15: 00007ffdeb6c3868 [ 71.759009][ T4567] [ 71.759014][ T4567] Mem-Info: [ 71.978034][ T4567] active_anon:19938 inactive_anon:0 isolated_anon:0 [ 71.978034][ T4567] active_file:27792 inactive_file:2251 isolated_file:0 [ 71.978034][ T4567] unevictable:0 dirty:366 writeback:0 [ 71.978034][ T4567] slab_reclaimable:3298 slab_unreclaimable:14512 [ 71.978034][ T4567] mapped:44605 shmem:15758 pagetables:1217 [ 71.978034][ T4567] sec_pagetables:0 bounce:0 [ 71.978034][ T4567] kernel_misc_reclaimable:0 [ 71.978034][ T4567] free:1842224 free_pcp:33516 free_cma:0 [ 72.023222][ T4567] Node 0 active_anon:84740kB inactive_anon:0kB active_file:111168kB inactive_file:9004kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:181668kB dirty:1464kB writeback:0kB shmem:68020kB kernel_stack:3584kB pagetables:4984kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 72.050660][ T4567] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 72.080360][ T4567] lowmem_reserve[]: 0 2881 7859 7859 [ 72.085667][ T4567] Node 0 DMA32 free:2946744kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2950272kB mlocked:0kB bounce:0kB free_pcp:3528kB local_pcp:0kB free_cma:0kB [ 72.116881][ T4567] lowmem_reserve[]: 0 0 4978 4978 [ 72.121990][ T4567] Node 0 Normal free:4406792kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:101212kB inactive_anon:0kB active_file:111168kB inactive_file:9004kB unevictable:0kB writepending:1464kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:109072kB local_pcp:41444kB free_cma:0kB [ 72.155267][ T4567] lowmem_reserve[]: 0 0 0 0 [ 72.159959][ T4567] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 72.172739][ T4567] Node 0 DMA32: 2*4kB (M) 2*8kB (M) 6*16kB (M) 2*32kB (M) 4*64kB (M) 2*128kB (M) 2*256kB (M) 3*512kB (M) 3*1024kB (M) 2*2048kB (M) 717*4096kB (M) = 2946744kB [ 72.188854][ T4567] Node 0 Normal: 2*4kB (ME) 11*8kB (UE) 10*16kB (U) 34*32kB (UE) 23*64kB (UME) 20*128kB (UME) 99*256kB (UME) 39*512kB (UM) 20*1024kB (UM) 9*2048kB (UME) 1054*4096kB (UM) = 4406784kB [ 72.207186][ T4567] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 72.216562][ T4567] 52814 total pagecache pages [ 72.221351][ T4567] 0 pages in swap cache [ 72.225573][ T4567] Free swap = 124996kB [ 72.229772][ T4567] Total swap = 124996kB [ 72.233941][ T4567] 2097051 pages RAM [ 72.237741][ T4567] 0 pages HighMem/MovableOnly [ 72.242494][ T4567] 81083 pages reserved [ 72.820649][ T4585] program syz.2.308 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 72.993164][ T29] kauditd_printk_skb: 298 callbacks suppressed [ 72.993177][ T29] audit: type=1400 audit(1761260396.955:3951): avc: denied { write } for pid=4588 comm="syz.1.310" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 73.080869][ T4591] loop1: detected capacity change from 0 to 1024 [ 73.186042][ T4594] loop2: detected capacity change from 0 to 512 [ 73.194000][ T4591] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 73.207067][ T4591] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 73.249468][ T4594] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.309: error while reading EA inode 32 err=-116 [ 73.272222][ T4594] EXT4-fs (loop2): Remounting filesystem read-only [ 73.281458][ T4580] loop0: detected capacity change from 0 to 4096 [ 73.308193][ T4594] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 73.318652][ T4580] EXT4-fs: Ignoring removed nomblk_io_submit option [ 73.338627][ T4594] EXT4-fs (loop2): 1 orphan inode deleted [ 73.349669][ T4580] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.369772][ T4594] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.419753][ T4591] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 73.430787][ T4591] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 73.453345][ T4591] JBD2: no valid journal superblock found [ 73.459110][ T4591] EXT4-fs (loop1): Could not load journal inode [ 73.529958][ T4591] ÿÿÿÿÿÿ: renamed from vlan1 (while UP) [ 73.612061][ T29] audit: type=1326 audit(1761260397.575:3952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4588 comm="syz.1.310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ed4e4efc9 code=0x7ffc0000 [ 73.685666][ T29] audit: type=1326 audit(1761260397.575:3953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4588 comm="syz.1.310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ed4e4efc9 code=0x7ffc0000 [ 73.709205][ T29] audit: type=1326 audit(1761260397.575:3954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4588 comm="syz.1.310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5ed4e4efc9 code=0x7ffc0000 [ 73.732443][ T29] audit: type=1326 audit(1761260397.575:3955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4588 comm="syz.1.310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ed4e4efc9 code=0x7ffc0000 [ 73.755786][ T29] audit: type=1326 audit(1761260397.575:3956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4588 comm="syz.1.310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ed4e4efc9 code=0x7ffc0000 [ 73.849095][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.939069][ T29] audit: type=1400 audit(1761260397.895:3957): avc: denied { create } for pid=4599 comm="syz.3.311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 73.958463][ T29] audit: type=1400 audit(1761260397.895:3958): avc: denied { bind } for pid=4599 comm="syz.3.311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 74.027717][ T4614] loop1: detected capacity change from 0 to 128 [ 74.062364][ T4616] netlink: 7 bytes leftover after parsing attributes in process `syz.2.315'. [ 74.087454][ T4616] netlink: 7 bytes leftover after parsing attributes in process `syz.2.315'. [ 74.121304][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.144882][ T29] audit: type=1400 audit(1761260398.105:3959): avc: denied { ioctl } for pid=4617 comm="syz.3.317" path="socket:[8396]" dev="sockfs" ino=8396 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 74.235927][ T29] audit: type=1400 audit(1761260398.195:3960): avc: denied { write } for pid=4617 comm="syz.3.317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 74.290824][ T4628] FAULT_INJECTION: forcing a failure. [ 74.290824][ T4628] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 74.304148][ T4628] CPU: 1 UID: 0 PID: 4628 Comm: syz.2.319 Not tainted syzkaller #0 PREEMPT(voluntary) [ 74.304226][ T4628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 74.304289][ T4628] Call Trace: [ 74.304296][ T4628] [ 74.304305][ T4628] __dump_stack+0x1d/0x30 [ 74.304327][ T4628] dump_stack_lvl+0xe8/0x140 [ 74.304344][ T4628] dump_stack+0x15/0x1b [ 74.304380][ T4628] should_fail_ex+0x265/0x280 [ 74.304416][ T4628] should_fail_alloc_page+0xf2/0x100 [ 74.304493][ T4628] __alloc_frozen_pages_noprof+0xff/0x360 [ 74.304526][ T4628] alloc_pages_mpol+0xb3/0x260 [ 74.304559][ T4628] vma_alloc_folio_noprof+0x1aa/0x300 [ 74.304582][ T4628] handle_mm_fault+0xec2/0x2be0 [ 74.304604][ T4628] ? vma_start_read+0x141/0x1f0 [ 74.304720][ T4628] do_user_addr_fault+0x630/0x1080 [ 74.304744][ T4628] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 74.304831][ T4628] exc_page_fault+0x62/0xa0 [ 74.304855][ T4628] asm_exc_page_fault+0x26/0x30 [ 74.304875][ T4628] RIP: 0033:0x7f01e33cc4cb [ 74.304891][ T4628] Code: c0 8b 87 c0 00 00 00 66 0f 6c c0 85 c0 0f 85 44 01 00 00 c7 87 c0 00 00 00 ff ff ff ff 48 8d 84 24 20 21 00 00 48 8d 7c 24 20 <0f> 29 44 24 40 49 89 e4 48 89 44 24 50 8b 43 74 48 89 9c 24 00 01 [ 74.304907][ T4628] RSP: 002b:00007f01e1e84e10 EFLAGS: 00010246 [ 74.304992][ T4628] RAX: 00007f01e1e86f30 RBX: 00007f01e3647640 RCX: 0000000000000000 [ 74.305004][ T4628] RDX: 00007f01e1e86f78 RSI: 00007f01e347edf8 RDI: 00007f01e1e84e30 [ 74.305016][ T4628] RBP: 0000000000000009 R08: 0000000000000000 R09: 0000000000000000 [ 74.305027][ T4628] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 74.305041][ T4628] R13: 00007f01e3676038 R14: 00007f01e3675fa0 R15: 00007ffc9eca46f8 [ 74.305056][ T4628] [ 74.305065][ T4628] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 74.642273][ T4641] netlink: 12 bytes leftover after parsing attributes in process `syz.2.320'. [ 74.854451][ T4625] syz.1.314: attempt to access beyond end of device [ 74.854451][ T4625] loop1: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 74.867932][ T4625] Buffer I/O error on dev loop1, logical block 128, lost async page write [ 74.889394][ T4618] syz.1.314: attempt to access beyond end of device [ 74.889394][ T4618] loop1: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 74.902824][ T4618] Buffer I/O error on dev loop1, logical block 128, lost async page write [ 74.954174][ T4623] loop0: detected capacity change from 0 to 4096 [ 74.980469][ T4623] EXT4-fs: Ignoring removed nomblk_io_submit option [ 75.000146][ T4623] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.158281][ T4663] loop1: detected capacity change from 0 to 512 [ 75.170247][ T4656] loop3: detected capacity change from 0 to 4096 [ 75.190276][ T4663] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.323: error while reading EA inode 32 err=-116 [ 75.197045][ T4656] EXT4-fs: Ignoring removed nomblk_io_submit option [ 75.241940][ T4663] EXT4-fs (loop1): Remounting filesystem read-only [ 75.249073][ T4656] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.268038][ T4663] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 75.284168][ T4663] EXT4-fs (loop1): 1 orphan inode deleted [ 75.291464][ T4663] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.874948][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.882084][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.927093][ T4686] 9pnet_fd: p9_fd_create_unix (4686): problem connecting socket: ./file0: -2 [ 75.969692][ T4686] netlink: 'syz.1.327': attribute type 4 has an invalid length. [ 75.984227][ T4686] bridge4: entered promiscuous mode [ 75.991590][ T4686] netlink: 'syz.1.327': attribute type 4 has an invalid length. [ 76.023092][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.311542][ T4696] syz.3.329 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 76.441423][ T4693] loop1: detected capacity change from 0 to 4096 [ 76.448045][ T4709] loop0: detected capacity change from 0 to 512 [ 76.448413][ T4693] EXT4-fs: Ignoring removed nomblk_io_submit option [ 76.462645][ T4709] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.331: error while reading EA inode 32 err=-116 [ 76.477422][ T4693] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.547616][ T4709] EXT4-fs (loop0): Remounting filesystem read-only [ 76.581036][ T4709] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 76.650784][ T4709] EXT4-fs (loop0): 1 orphan inode deleted [ 76.667338][ T4709] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.722483][ T4721] loop3: detected capacity change from 0 to 128 [ 76.956750][ T4726] syz.3.336: attempt to access beyond end of device [ 76.956750][ T4726] loop3: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 76.970214][ T4726] Buffer I/O error on dev loop3, logical block 128, lost async page write [ 76.979515][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.979676][ T4721] syz.3.336: attempt to access beyond end of device [ 76.979676][ T4721] loop3: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 77.002059][ T4721] Buffer I/O error on dev loop3, logical block 128, lost async page write [ 77.011419][ T4726] syz.3.336: attempt to access beyond end of device [ 77.011419][ T4726] loop3: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 77.024790][ T4726] Buffer I/O error on dev loop3, logical block 128, lost async page write [ 77.061802][ T4735] loop3: detected capacity change from 0 to 512 [ 77.076754][ T4735] EXT4-fs: Ignoring removed bh option [ 77.106555][ T4735] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 77.116418][ T4735] EXT4-fs (loop3): 1 truncate cleaned up [ 77.124719][ T4728] loop4: detected capacity change from 0 to 4096 [ 77.125725][ T4735] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.131571][ T4728] EXT4-fs: Ignoring removed nomblk_io_submit option [ 77.169809][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.180292][ T4728] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.201766][ T4744] loop3: detected capacity change from 0 to 164 [ 77.236388][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.296185][ T4751] loop0: detected capacity change from 0 to 164 [ 77.600171][ T4739] loop1: detected capacity change from 0 to 128 [ 78.171751][ T29] kauditd_printk_skb: 248 callbacks suppressed [ 78.171766][ T29] audit: type=1400 audit(1761260402.135:4209): avc: denied { mounton } for pid=4773 comm="syz.0.353" path="/proc/230/task" dev="proc" ino=7834 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 78.233041][ T4752] loop3: detected capacity change from 0 to 4096 [ 78.269608][ T4752] EXT4-fs: Ignoring removed nomblk_io_submit option [ 78.277744][ T4775] serio: Serial port ptm0 [ 78.291444][ T4781] loop1: detected capacity change from 0 to 512 [ 78.303871][ T29] audit: type=1400 audit(1761260402.215:4210): avc: denied { read write } for pid=4773 comm="syz.0.353" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 78.327170][ T29] audit: type=1400 audit(1761260402.215:4211): avc: denied { open } for pid=4773 comm="syz.0.353" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 78.334532][ T4752] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.350948][ T29] audit: type=1400 audit(1761260402.215:4212): avc: denied { ioctl } for pid=4773 comm="syz.0.353" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 78.377286][ T4781] EXT4-fs: Ignoring removed bh option [ 78.408889][ T4781] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 78.419686][ T4781] EXT4-fs (loop1): 1 truncate cleaned up [ 78.425860][ T4781] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.502747][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.530862][ T4764] loop2: detected capacity change from 0 to 4096 [ 78.549586][ T4788] netlink: 12 bytes leftover after parsing attributes in process `syz.1.355'. [ 78.569228][ T4764] EXT4-fs: Ignoring removed nomblk_io_submit option [ 78.589550][ T4764] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.607740][ T29] audit: type=1400 audit(1761260402.565:4213): avc: denied { setopt } for pid=4792 comm="syz.1.357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 78.607868][ T4793] netlink: 'syz.1.357': attribute type 21 has an invalid length. [ 78.696304][ T4793] loop1: detected capacity change from 0 to 512 [ 78.703020][ T4793] EXT4-fs: Ignoring removed bh option [ 78.708465][ T4793] EXT4-fs: Ignoring removed mblk_io_submit option [ 78.716491][ T4793] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 78.733180][ T4793] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 78.774329][ T4793] EXT4-fs (loop1): orphan cleanup on readonly fs [ 78.801679][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.848053][ T4793] Quota error (device loop1): do_insert_tree: Free block already used in tree: block 4 [ 78.857816][ T4793] Quota error (device loop1): qtree_write_dquot: Error -5 occurred while creating quota [ 78.889191][ T4793] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.357: Failed to acquire dquot type 1 [ 78.915609][ T4793] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.357: Invalid block bitmap block 0 in block_group 0 [ 78.929968][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.939421][ T4793] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.357: Invalid block bitmap block 0 in block_group 0 [ 78.953258][ T4793] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.357: Invalid block bitmap block 0 in block_group 0 [ 79.003923][ T4793] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.357: Invalid block bitmap block 0 in block_group 0 [ 79.029396][ T4793] Quota error (device loop1): write_blk: dquota write failed [ 79.036828][ T4793] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 79.046700][ T4793] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.357: Failed to acquire dquot type 1 [ 79.077278][ T4800] loop4: detected capacity change from 0 to 512 [ 79.083956][ T4793] Quota error (device loop1): write_blk: dquota write failed [ 79.091388][ T4793] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.357: Failed to acquire dquot type 1 [ 79.108209][ T4810] loop2: detected capacity change from 0 to 128 [ 79.110097][ T4800] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.358: error while reading EA inode 32 err=-116 [ 79.129264][ T4793] EXT4-fs (loop1): 1 orphan inode deleted [ 79.134875][ T4800] EXT4-fs (loop4): Remounting filesystem read-only [ 79.142166][ T4793] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 79.175420][ T4800] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 79.198903][ T4793] syz.1.357 (4793) used greatest stack depth: 8992 bytes left [ 79.206506][ T4800] EXT4-fs (loop4): 1 orphan inode deleted [ 79.207162][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.212616][ T4800] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.226159][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.243742][ T4800] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.321212][ T4817] loop3: detected capacity change from 0 to 512 [ 79.337972][ T4817] EXT4-fs: Ignoring removed nobh option [ 79.347127][ T4820] loop2: detected capacity change from 0 to 512 [ 79.353798][ T4820] EXT4-fs: Ignoring removed mblk_io_submit option [ 79.361015][ T4807] loop0: detected capacity change from 0 to 4096 [ 79.367667][ T4820] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 79.367646][ T4807] EXT4-fs: Ignoring removed nomblk_io_submit option [ 79.376412][ T4820] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 79.399587][ T4817] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #3: comm syz.3.363: corrupted inode contents [ 79.411670][ T4817] EXT4-fs (loop3): Remounting filesystem read-only [ 79.418667][ T4817] EXT4-fs (loop3): 1 truncate cleaned up [ 79.425924][ T4817] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.426429][ T4820] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4193: comm syz.2.365: Allocating blocks 41-42 which overlap fs metadata [ 79.438584][ T4817] ext4 filesystem being mounted at /77/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.468134][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.481386][ T4807] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.494095][ T4820] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.365: Failed to acquire dquot type 1 [ 79.506067][ T4820] EXT4-fs error (device loop2): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 79.529278][ T4829] netlink: 12 bytes leftover after parsing attributes in process `syz.3.366'. [ 79.548780][ T4820] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #12: comm syz.2.365: corrupted inode contents [ 79.597684][ T4820] EXT4-fs error (device loop2): ext4_dirty_inode:6517: inode #12: comm syz.2.365: mark_inode_dirty error [ 79.623341][ T4820] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #12: comm syz.2.365: corrupted inode contents [ 79.656329][ T4820] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #12: comm syz.2.365: mark_inode_dirty error [ 79.668337][ T4820] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #12: comm syz.2.365: corrupted inode contents [ 79.681291][ T4820] EXT4-fs error (device loop2) in ext4_orphan_del:301: Corrupt filesystem [ 79.711076][ T4820] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #12: comm syz.2.365: corrupted inode contents [ 79.731897][ T4820] EXT4-fs error (device loop2): ext4_truncate:4637: inode #12: comm syz.2.365: mark_inode_dirty error [ 79.810356][ T4820] EXT4-fs error (device loop2) in ext4_process_orphan:343: Corrupt filesystem [ 79.931609][ T4820] EXT4-fs (loop2): 1 truncate cleaned up [ 79.944373][ T4820] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.038202][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.230127][ T4858] loop0: detected capacity change from 0 to 128 [ 80.345338][ T4859] loop4: detected capacity change from 0 to 512 [ 80.357909][ T4859] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.372: error while reading EA inode 32 err=-116 [ 80.373376][ T4859] EXT4-fs (loop4): Remounting filesystem read-only [ 80.393749][ T4859] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 80.422069][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.429391][ T4859] EXT4-fs (loop4): 1 orphan inode deleted [ 80.437214][ T4859] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.500319][ T4872] netlink: 12 bytes leftover after parsing attributes in process `syz.1.379'. [ 80.504492][ T4862] syz.0.376: attempt to access beyond end of device [ 80.504492][ T4862] loop0: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 80.522819][ T4862] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 80.533086][ T4862] syz.0.376: attempt to access beyond end of device [ 80.533086][ T4862] loop0: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 80.546522][ T4862] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 80.591654][ T4874] loop2: detected capacity change from 0 to 512 [ 80.609533][ T4874] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.377: error while reading EA inode 32 err=-116 [ 80.627078][ T4879] netlink: 12 bytes leftover after parsing attributes in process `syz.1.381'. [ 80.631928][ T4874] EXT4-fs (loop2): Remounting filesystem read-only [ 80.642649][ T4874] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 80.653096][ T4874] EXT4-fs (loop2): 1 orphan inode deleted [ 80.659320][ T4874] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.672866][ T4874] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.485322][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.529797][ T4888] loop3: detected capacity change from 0 to 512 [ 81.536486][ T4888] EXT4-fs: Ignoring removed nobh option [ 81.555073][ T4888] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #3: comm syz.3.385: corrupted inode contents [ 81.573096][ T4888] EXT4-fs (loop3): Remounting filesystem read-only [ 81.585800][ T4888] EXT4-fs (loop3): 1 truncate cleaned up [ 81.596202][ T4888] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.609434][ T4888] ext4 filesystem being mounted at /81/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.629553][ T4888] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.700942][ T4901] netlink: 7 bytes leftover after parsing attributes in process `syz.0.384'. [ 81.718419][ T4901] netlink: 7 bytes leftover after parsing attributes in process `syz.0.384'. [ 81.799947][ T4886] loop1: detected capacity change from 0 to 4096 [ 81.806691][ T4886] EXT4-fs: Ignoring removed nomblk_io_submit option [ 81.815622][ T4886] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.861941][ T4911] hub 6-0:1.0: USB hub found [ 81.866736][ T4911] hub 6-0:1.0: 8 ports detected [ 81.925438][ T4917] netlink: 12 bytes leftover after parsing attributes in process `syz.0.395'. [ 81.935765][ T4917] warn_alloc: 5 callbacks suppressed [ 81.935778][ T4917] syz.0.395: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 81.955605][ T4917] CPU: 0 UID: 0 PID: 4917 Comm: syz.0.395 Not tainted syzkaller #0 PREEMPT(voluntary) [ 81.955660][ T4917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 81.955673][ T4917] Call Trace: [ 81.955680][ T4917] [ 81.955688][ T4917] __dump_stack+0x1d/0x30 [ 81.955709][ T4917] dump_stack_lvl+0xe8/0x140 [ 81.955727][ T4917] dump_stack+0x15/0x1b [ 81.955742][ T4917] warn_alloc+0x12b/0x1a0 [ 81.955776][ T4917] ? __rcu_read_unlock+0x4f/0x70 [ 81.955801][ T4917] ? __cgroup_account_cputime+0x81/0xa0 [ 81.955820][ T4917] __vmalloc_node_range_noprof+0x9d/0xed0 [ 81.955897][ T4917] ? bpf_bprintf_prepare+0xbd9/0xd20 [ 81.955918][ T4917] ? tracing_record_taskinfo_sched_switch+0x71/0x260 [ 81.955963][ T4917] ? bstr_printf+0x677/0x6e0 [ 81.955989][ T4917] ? __rcu_read_unlock+0x4f/0x70 [ 81.956016][ T4917] ? avc_has_perm_noaudit+0x1b1/0x200 [ 81.956033][ T4917] ? should_fail_ex+0x30/0x280 [ 81.956135][ T4917] ? xskq_create+0x36/0xe0 [ 81.956155][ T4917] vmalloc_user_noprof+0x7d/0xb0 [ 81.956226][ T4917] ? xskq_create+0x80/0xe0 [ 81.956302][ T4917] xskq_create+0x80/0xe0 [ 81.956323][ T4917] xsk_init_queue+0x95/0xf0 [ 81.956378][ T4917] xsk_setsockopt+0x3f5/0x640 [ 81.956395][ T4917] ? __pfx_xsk_setsockopt+0x10/0x10 [ 81.956414][ T4917] __sys_setsockopt+0x184/0x200 [ 81.956445][ T4917] __x64_sys_setsockopt+0x64/0x80 [ 81.956492][ T4917] x64_sys_call+0x20ec/0x3000 [ 81.956516][ T4917] do_syscall_64+0xd2/0x200 [ 81.956530][ T4917] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 81.956559][ T4917] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 81.956588][ T4917] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.956658][ T4917] RIP: 0033:0x7f32221eefc9 [ 81.956751][ T4917] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 81.956765][ T4917] RSP: 002b:00007f3220c4f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 81.956783][ T4917] RAX: ffffffffffffffda RBX: 00007f3222445fa0 RCX: 00007f32221eefc9 [ 81.956795][ T4917] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000009 [ 81.956884][ T4917] RBP: 00007f3222271f91 R08: 0000000000000004 R09: 0000000000000000 [ 81.956895][ T4917] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 81.956906][ T4917] R13: 00007f3222446038 R14: 00007f3222445fa0 R15: 00007ffdeb6c3868 [ 81.956921][ T4917] [ 81.956930][ T4917] Mem-Info: [ 82.196604][ T4917] active_anon:10245 inactive_anon:0 isolated_anon:0 [ 82.196604][ T4917] active_file:27857 inactive_file:2261 isolated_file:0 [ 82.196604][ T4917] unevictable:0 dirty:475 writeback:0 [ 82.196604][ T4917] slab_reclaimable:3273 slab_unreclaimable:14672 [ 82.196604][ T4917] mapped:32185 shmem:3539 pagetables:1176 [ 82.196604][ T4917] sec_pagetables:0 bounce:0 [ 82.196604][ T4917] kernel_misc_reclaimable:0 [ 82.196604][ T4917] free:1862327 free_pcp:22680 free_cma:0 [ 82.242652][ T4917] Node 0 active_anon:40980kB inactive_anon:0kB active_file:111428kB inactive_file:9044kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:128740kB dirty:1900kB writeback:0kB shmem:14156kB kernel_stack:3680kB pagetables:4704kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 82.270248][ T4917] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 82.299866][ T4917] lowmem_reserve[]: 0 2881 7859 7859 [ 82.305191][ T4917] Node 0 DMA32 free:2946744kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2950272kB mlocked:0kB bounce:0kB free_pcp:3528kB local_pcp:3528kB free_cma:0kB [ 82.336793][ T4917] lowmem_reserve[]: 0 0 4978 4978 [ 82.336886][ T4917] Node 0 Normal free:4487204kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:40980kB inactive_anon:0kB active_file:111428kB inactive_file:9044kB unevictable:0kB writepending:1900kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:87188kB local_pcp:55376kB free_cma:0kB [ 82.336950][ T4917] lowmem_reserve[]: 0 0 0 0 [ 82.336977][ T4917] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 82.392471][ T4917] Node 0 DMA32: 2*4kB (M) 2*8kB (M) 6*16kB (M) 2*32kB (M) 4*64kB (M) 2*128kB (M) 2*256kB (M) 3*512kB (M) 3*1024kB (M) 2*2048kB (M) 717*4096kB (M) = 2946744kB [ 82.408688][ T4917] Node 0 Normal: 1325*4kB (UME) 1092*8kB (UME) 757*16kB (UM) 492*32kB (UME) 154*64kB (UME) 40*128kB (UME) 168*256kB (UME) 63*512kB (UM) 19*1024kB (UM) 9*2048kB (UME) 1054*4096kB (UM) = 4487204kB [ 82.427966][ T4917] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 82.437275][ T4917] 33682 total pagecache pages [ 82.441964][ T4917] 29 pages in swap cache [ 82.446188][ T4917] Free swap = 124880kB [ 82.450442][ T4917] Total swap = 124996kB [ 82.454587][ T4917] 2097051 pages RAM [ 82.458383][ T4917] 0 pages HighMem/MovableOnly [ 82.463074][ T4917] 81083 pages reserved [ 82.626212][ T4936] loop4: detected capacity change from 0 to 512 [ 82.641239][ T4936] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.399: error while reading EA inode 32 err=-116 [ 82.686071][ T4936] EXT4-fs (loop4): Remounting filesystem read-only [ 82.712362][ T4936] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 82.736167][ T4935] loop0: detected capacity change from 0 to 512 [ 82.751256][ T4936] EXT4-fs (loop4): 1 orphan inode deleted [ 82.769605][ T4935] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.400: error while reading EA inode 32 err=-116 [ 82.785969][ T4936] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.803391][ T4936] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.813358][ T4935] EXT4-fs (loop0): Remounting filesystem read-only [ 82.836533][ T4935] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 82.852986][ T4935] EXT4-fs (loop0): 1 orphan inode deleted [ 82.951941][ T4935] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.000000][ T4950] netlink: 12 bytes leftover after parsing attributes in process `syz.2.403'. [ 83.084224][ T4952] loop2: detected capacity change from 0 to 4096 [ 83.094467][ T4952] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.126505][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.212658][ T4957] IPv6: NLM_F_CREATE should be specified when creating new route [ 83.397719][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.408767][ T4960] 9pnet_fd: p9_fd_create_unix (4960): problem connecting socket: ./file0: -2 [ 83.409561][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.419569][ T4960] netlink: 'syz.4.408': attribute type 4 has an invalid length. [ 83.436938][ T29] kauditd_printk_skb: 55 callbacks suppressed [ 83.436950][ T29] audit: type=1326 audit(1761260407.395:4261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4954 comm="syz.1.405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ed4e4efc9 code=0x7ffc0000 [ 83.486635][ T4962] loop2: detected capacity change from 0 to 128 [ 83.495898][ T29] audit: type=1326 audit(1761260407.395:4262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4954 comm="syz.1.405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ed4e4efc9 code=0x7ffc0000 [ 83.512563][ T4966] loop0: detected capacity change from 0 to 164 [ 83.519321][ T29] audit: type=1326 audit(1761260407.395:4263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4954 comm="syz.1.405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ed4e4efc9 code=0x7ffc0000 [ 83.543529][ T4960] bridge3: entered promiscuous mode [ 83.548790][ T29] audit: type=1326 audit(1761260407.395:4264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4954 comm="syz.1.405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5ed4e4efc9 code=0x7ffc0000 [ 83.577459][ T29] audit: type=1326 audit(1761260407.395:4265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4954 comm="syz.1.405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ed4e4efc9 code=0x7ffc0000 [ 83.600885][ T29] audit: type=1326 audit(1761260407.395:4266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4954 comm="syz.1.405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ed4e4efc9 code=0x7ffc0000 [ 83.624219][ T29] audit: type=1326 audit(1761260407.395:4267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4954 comm="syz.1.405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ed4e4efc9 code=0x7ffc0000 [ 83.647765][ T29] audit: type=1326 audit(1761260407.395:4268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4954 comm="syz.1.405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5ed4e4efc9 code=0x7ffc0000 [ 83.671117][ T29] audit: type=1326 audit(1761260407.395:4269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4954 comm="syz.1.405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ed4e4efc9 code=0x7ffc0000 [ 83.687829][ T4965] mmap: syz.3.409 (4965) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 83.694444][ T29] audit: type=1326 audit(1761260407.395:4270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4954 comm="syz.1.405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ed4e4efc9 code=0x7ffc0000 [ 83.732006][ T4960] netlink: 'syz.4.408': attribute type 4 has an invalid length. [ 83.930065][ T4970] syz.2.406: attempt to access beyond end of device [ 83.930065][ T4970] loop2: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 83.944295][ T4970] Buffer I/O error on dev loop2, logical block 128, lost async page write [ 83.953238][ T4967] syz.2.406: attempt to access beyond end of device [ 83.953238][ T4967] loop2: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 83.966635][ T4967] Buffer I/O error on dev loop2, logical block 128, lost async page write [ 83.992129][ T4970] syz.2.406: attempt to access beyond end of device [ 83.992129][ T4970] loop2: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 84.005546][ T4970] Buffer I/O error on dev loop2, logical block 128, lost async page write [ 84.182323][ T4986] loop3: detected capacity change from 0 to 128 [ 84.325934][ T4990] FAULT_INJECTION: forcing a failure. [ 84.325934][ T4990] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 84.339089][ T4990] CPU: 0 UID: 0 PID: 4990 Comm: syz.0.416 Not tainted syzkaller #0 PREEMPT(voluntary) [ 84.339113][ T4990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 84.339182][ T4990] Call Trace: [ 84.339189][ T4990] [ 84.339196][ T4990] __dump_stack+0x1d/0x30 [ 84.339216][ T4990] dump_stack_lvl+0xe8/0x140 [ 84.339232][ T4990] dump_stack+0x15/0x1b [ 84.339249][ T4990] should_fail_ex+0x265/0x280 [ 84.339299][ T4990] should_fail+0xb/0x20 [ 84.339314][ T4990] should_fail_usercopy+0x1a/0x20 [ 84.339397][ T4990] _copy_from_user+0x1c/0xb0 [ 84.339424][ T4990] copy_from_sockptr+0x5e/0xa0 [ 84.339443][ T4990] packet_setsockopt+0x941/0xfd0 [ 84.339516][ T4990] ? __pfx_packet_setsockopt+0x10/0x10 [ 84.339543][ T4990] __sys_setsockopt+0x184/0x200 [ 84.339572][ T4990] __x64_sys_setsockopt+0x64/0x80 [ 84.339598][ T4990] x64_sys_call+0x20ec/0x3000 [ 84.339702][ T4990] do_syscall_64+0xd2/0x200 [ 84.339720][ T4990] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 84.339745][ T4990] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 84.339892][ T4990] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.339912][ T4990] RIP: 0033:0x7f32221eefc9 [ 84.339927][ T4990] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 84.339943][ T4990] RSP: 002b:00007f3220c4f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 84.340012][ T4990] RAX: ffffffffffffffda RBX: 00007f3222445fa0 RCX: 00007f32221eefc9 [ 84.340024][ T4990] RDX: 0000000000000012 RSI: 0000000000000107 RDI: 0000000000000003 [ 84.340115][ T4990] RBP: 00007f3220c4f090 R08: 0000000000000004 R09: 0000000000000000 [ 84.340130][ T4990] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000001 [ 84.340141][ T4990] R13: 00007f3222446038 R14: 00007f3222445fa0 R15: 00007ffdeb6c3868 [ 84.340158][ T4990] [ 84.401568][ T4993] xt_hashlimit: size too large, truncated to 1048576 [ 84.401595][ T4993] xt_hashlimit: max too large, truncated to 1048576 [ 85.247902][ T5003] loop0: detected capacity change from 0 to 512 [ 85.264207][ T5003] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.418: error while reading EA inode 32 err=-116 [ 85.264368][ T5003] EXT4-fs (loop0): Remounting filesystem read-only [ 85.264455][ T5003] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 85.264474][ T5003] EXT4-fs (loop0): 1 orphan inode deleted [ 85.264839][ T5003] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.265226][ T5003] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.392866][ T5009] loop4: detected capacity change from 0 to 512 [ 85.403796][ T5009] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.420: error while reading EA inode 32 err=-116 [ 85.403909][ T5009] EXT4-fs (loop4): Remounting filesystem read-only [ 85.403922][ T5009] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 85.403941][ T5009] EXT4-fs (loop4): 1 orphan inode deleted [ 85.404422][ T5009] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.540999][ T5019] 9pnet_fd: p9_fd_create_unix (5019): problem connecting socket: ./file0: -2 [ 85.589515][ T5021] netlink: 'syz.0.424': attribute type 4 has an invalid length. [ 85.607072][ T5021] bridge2: entered promiscuous mode [ 85.617097][ T5020] netlink: 108 bytes leftover after parsing attributes in process `syz.3.422'. [ 85.627915][ T5021] netlink: 'syz.0.424': attribute type 4 has an invalid length. [ 85.702739][ T5027] hub 6-0:1.0: USB hub found [ 85.707970][ T5027] hub 6-0:1.0: 8 ports detected [ 85.740572][ T5030] loop0: detected capacity change from 0 to 164 [ 85.787275][ T5020] loop3: detected capacity change from 0 to 8192 [ 85.843334][ T5036] loop2: detected capacity change from 0 to 1024 [ 85.850512][ T5036] EXT4-fs: Ignoring removed nomblk_io_submit option [ 85.857444][ T5036] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 85.867970][ T5020] loop3: p1 p3 p4 [ 85.875020][ T5036] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.877663][ T5035] loop5: detected capacity change from 0 to 7 [ 85.908495][ T5020] loop3: p3 start 331777 is beyond EOD, truncated [ 85.915478][ T5020] loop3: p4 size 17041152 extends beyond EOD, truncated [ 86.025430][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.078849][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.130404][ T5053] 9pnet_fd: p9_fd_create_unix (5053): problem connecting socket: ./file0: -2 [ 86.134010][ T5052] netlink: 12 bytes leftover after parsing attributes in process `syz.3.435'. [ 86.149983][ T5053] netlink: 'syz.0.437': attribute type 4 has an invalid length. [ 86.163864][ T5053] bridge3: entered promiscuous mode [ 86.193272][ T5064] loop3: detected capacity change from 0 to 164 [ 86.207169][ T5059] loop4: detected capacity change from 0 to 8192 [ 86.217368][ T5053] netlink: 'syz.0.437': attribute type 4 has an invalid length. [ 86.259622][ T5059] loop4: p1 p2[DM] p3 p4 [ 86.264017][ T5059] loop4: p1 size 196608 extends beyond EOD, truncated [ 86.287953][ T5059] loop4: p2 start 4292936063 is beyond EOD, truncated [ 86.294798][ T5059] loop4: p3 size 189005824 extends beyond EOD, truncated [ 86.302681][ T5059] loop4: p4 size 50331648 extends beyond EOD, truncated [ 86.390284][ T5076] loop0: detected capacity change from 0 to 512 [ 86.398923][ T5076] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.441: error while reading EA inode 32 err=-116 [ 86.411417][ T5076] EXT4-fs (loop0): Remounting filesystem read-only [ 86.418106][ T5076] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 86.428489][ T5076] EXT4-fs (loop0): 1 orphan inode deleted [ 86.436981][ T5076] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.553877][ T5082] loop4: detected capacity change from 0 to 512 [ 86.564785][ T5082] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.444: error while reading EA inode 32 err=-116 [ 86.578542][ T5082] EXT4-fs (loop4): Remounting filesystem read-only [ 86.585586][ T5082] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 86.597421][ T5082] EXT4-fs (loop4): 1 orphan inode deleted [ 86.604964][ T5082] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.003700][ T5092] loop1: detected capacity change from 0 to 8192 [ 87.049401][ T5092] loop1: p1 p2[DM] p3 p4 [ 87.054258][ T5092] loop1: p1 size 196608 extends beyond EOD, truncated [ 87.061907][ T5092] loop1: p2 start 4292936063 is beyond EOD, truncated [ 87.068761][ T5092] loop1: p3 size 189005824 extends beyond EOD, truncated [ 87.077436][ T5092] loop1: p4 size 50331648 extends beyond EOD, truncated [ 88.151499][ T5107] pim6reg: entered allmulticast mode [ 88.169113][ T5107] pim6reg: left allmulticast mode [ 88.230696][ T5109] Zero length message leads to an empty skb [ 88.641878][ T29] kauditd_printk_skb: 269 callbacks suppressed [ 88.641895][ T29] audit: type=1400 audit(1761260412.195:4540): avc: denied { write } for pid=5108 comm="syz.1.451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 88.838853][ T5112] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 88.953838][ T29] audit: type=1400 audit(1761260412.915:4541): avc: denied { write } for pid=5124 comm="syz.4.459" name="anycast6" dev="proc" ino=4026532699 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 89.047133][ T5117] loop1: detected capacity change from 0 to 4096 [ 89.072323][ T5130] netlink: 8 bytes leftover after parsing attributes in process `syz.0.453'. [ 89.082008][ T5117] EXT4-fs: Ignoring removed nomblk_io_submit option [ 89.140563][ T29] audit: type=1400 audit(1761260413.105:4542): avc: denied { validate_trans } for pid=5132 comm="syz.0.460" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 89.267827][ T5136] loop2: detected capacity change from 0 to 164 [ 89.284190][ T5138] FAULT_INJECTION: forcing a failure. [ 89.284190][ T5138] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 89.297316][ T5138] CPU: 0 UID: 0 PID: 5138 Comm: syz.0.461 Not tainted syzkaller #0 PREEMPT(voluntary) [ 89.297366][ T5138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 89.297378][ T5138] Call Trace: [ 89.297386][ T5138] [ 89.297393][ T5138] __dump_stack+0x1d/0x30 [ 89.297463][ T5138] dump_stack_lvl+0xe8/0x140 [ 89.297492][ T5138] dump_stack+0x15/0x1b [ 89.297506][ T5138] should_fail_ex+0x265/0x280 [ 89.297531][ T5138] should_fail+0xb/0x20 [ 89.297615][ T5138] should_fail_usercopy+0x1a/0x20 [ 89.297692][ T5138] _copy_from_iter+0xd2/0xe80 [ 89.297713][ T5138] ? __build_skb_around+0x1ab/0x200 [ 89.297740][ T5138] ? __alloc_skb+0x223/0x320 [ 89.297836][ T5138] netlink_sendmsg+0x471/0x6b0 [ 89.297855][ T5138] ? __pfx_netlink_sendmsg+0x10/0x10 [ 89.297938][ T5138] __sock_sendmsg+0x145/0x180 [ 89.297957][ T5138] ____sys_sendmsg+0x31e/0x4e0 [ 89.297995][ T5138] ___sys_sendmsg+0x17b/0x1d0 [ 89.298070][ T5138] __x64_sys_sendmsg+0xd4/0x160 [ 89.298102][ T5138] x64_sys_call+0x191e/0x3000 [ 89.298156][ T5138] do_syscall_64+0xd2/0x200 [ 89.298173][ T5138] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 89.298288][ T5138] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 89.298314][ T5138] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.298377][ T5138] RIP: 0033:0x7f32221eefc9 [ 89.298392][ T5138] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 89.298407][ T5138] RSP: 002b:00007f3220c4f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 89.298423][ T5138] RAX: ffffffffffffffda RBX: 00007f3222445fa0 RCX: 00007f32221eefc9 [ 89.298433][ T5138] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 89.298443][ T5138] RBP: 00007f3220c4f090 R08: 0000000000000000 R09: 0000000000000000 [ 89.298453][ T5138] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 89.298471][ T5138] R13: 00007f3222446038 R14: 00007f3222445fa0 R15: 00007ffdeb6c3868 [ 89.298488][ T5138] [ 89.553995][ T29] audit: type=1404 audit(1761260413.505:4543): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 89.569047][ T29] audit: type=1404 audit(1761260413.505:4544): enforcing=0 old_enforcing=1 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 89.584036][ T29] audit: type=1400 audit(1761260413.505:4545): avc: denied { map_create } for pid=5139 comm="syz.0.462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 89.603403][ T29] audit: type=1400 audit(1761260413.505:4546): avc: denied { bpf } for pid=5139 comm="syz.0.462" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 89.624089][ T29] audit: type=1400 audit(1761260413.505:4547): avc: denied { map_read } for pid=5139 comm="syz.0.462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 89.700191][ T5147] netlink: 19 bytes leftover after parsing attributes in process `syz.3.465'. [ 89.744186][ T29] audit: type=1400 audit(1761260413.565:4548): avc: denied { unmount } for pid=3323 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 89.764542][ T29] audit: type=1400 audit(1761260413.585:4549): avc: denied { prog_load } for pid=5139 comm="syz.0.462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 89.876744][ T5160] bridge_slave_0: left allmulticast mode [ 89.882607][ T5160] bridge_slave_0: left promiscuous mode [ 89.888388][ T5160] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.954013][ T5164] loop2: detected capacity change from 0 to 4096 [ 89.971391][ T5160] bridge_slave_1: left allmulticast mode [ 89.977116][ T5160] bridge_slave_1: left promiscuous mode [ 89.982886][ T5160] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.001509][ T5160] bond0: (slave bond_slave_0): Releasing backup interface [ 90.030734][ T5160] bond0: (slave bond_slave_1): Releasing backup interface [ 90.063802][ T5160] team0: Port device team_slave_0 removed [ 90.073053][ T5160] team0: Port device team_slave_1 removed [ 90.080044][ T5160] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 90.087451][ T5160] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 90.096235][ T5160] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 90.103736][ T5160] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 90.121028][ T5160] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 90.278574][ T5157] loop4: detected capacity change from 0 to 4096 [ 90.309394][ T5178] loop1: detected capacity change from 0 to 512 [ 90.309619][ T5157] EXT4-fs: Ignoring removed nomblk_io_submit option [ 90.316093][ T5178] EXT4-fs: Ignoring removed mblk_io_submit option [ 90.329456][ T5178] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 90.338173][ T5178] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 90.361842][ T5155] loop0: detected capacity change from 0 to 128 [ 90.365374][ T5178] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4193: comm syz.1.475: Allocating blocks 41-42 which overlap fs metadata [ 90.433861][ T5178] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4193: comm syz.1.475: Allocating blocks 41-42 which overlap fs metadata [ 90.479389][ T5178] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.475: Failed to acquire dquot type 1 [ 90.514038][ T5178] EXT4-fs error (device loop1): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 90.530546][ T5178] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #12: comm syz.1.475: corrupted inode contents [ 90.589349][ T5178] EXT4-fs error (device loop1): ext4_dirty_inode:6517: inode #12: comm syz.1.475: mark_inode_dirty error [ 90.630373][ T5178] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #12: comm syz.1.475: corrupted inode contents [ 90.649487][ T5178] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #12: comm syz.1.475: mark_inode_dirty error [ 90.683828][ T5178] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #12: comm syz.1.475: corrupted inode contents [ 90.747805][ T5178] EXT4-fs error (device loop1) in ext4_orphan_del:301: Corrupt filesystem [ 90.773460][ T5178] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #12: comm syz.1.475: corrupted inode contents [ 90.809405][ T5178] EXT4-fs error (device loop1): ext4_truncate:4637: inode #12: comm syz.1.475: mark_inode_dirty error [ 90.826405][ T5185] loop2: detected capacity change from 0 to 4096 [ 90.833168][ T5178] EXT4-fs error (device loop1) in ext4_process_orphan:343: Corrupt filesystem [ 90.846782][ T5185] EXT4-fs: Ignoring removed nomblk_io_submit option [ 90.859490][ T5178] EXT4-fs (loop1): 1 truncate cleaned up [ 90.911570][ T5196] loop3: detected capacity change from 0 to 512 [ 90.918183][ T5196] EXT4-fs: Ignoring removed mblk_io_submit option [ 90.935515][ T5196] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 90.944251][ T5196] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 91.066013][ T5196] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4193: comm syz.3.479: Allocating blocks 41-42 which overlap fs metadata [ 91.103522][ T5196] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4193: comm syz.3.479: Allocating blocks 41-42 which overlap fs metadata [ 91.144880][ T5196] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.479: Failed to acquire dquot type 1 [ 91.220616][ T5196] EXT4-fs error (device loop3): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 91.255167][ T5206] netlink: 7 bytes leftover after parsing attributes in process `syz.1.483'. [ 91.264413][ T5206] netlink: 7 bytes leftover after parsing attributes in process `syz.1.483'. [ 91.284116][ T5196] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #12: comm syz.3.479: corrupted inode contents [ 91.389572][ T5196] EXT4-fs error (device loop3): ext4_dirty_inode:6517: inode #12: comm syz.3.479: mark_inode_dirty error [ 91.400165][ T5213] capability: warning: `syz.1.484' uses 32-bit capabilities (legacy support in use) [ 91.428858][ T5209] ucma_write: process 300 (syz.1.484) changed security contexts after opening file descriptor, this is not allowed. [ 91.456503][ T5196] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #12: comm syz.3.479: corrupted inode contents [ 91.484209][ T5196] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #12: comm syz.3.479: mark_inode_dirty error [ 91.487397][ T5200] loop4: detected capacity change from 0 to 4096 [ 91.503364][ T5215] loop1: detected capacity change from 0 to 128 [ 91.510475][ T5196] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #12: comm syz.3.479: corrupted inode contents [ 91.526016][ T5200] EXT4-fs: Ignoring removed nomblk_io_submit option [ 91.529405][ T5196] EXT4-fs error (device loop3) in ext4_orphan_del:301: Corrupt filesystem [ 91.541632][ T5196] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #12: comm syz.3.479: corrupted inode contents [ 91.554306][ T5196] EXT4-fs error (device loop3): ext4_truncate:4637: inode #12: comm syz.3.479: mark_inode_dirty error [ 91.585871][ T5196] EXT4-fs error (device loop3) in ext4_process_orphan:343: Corrupt filesystem [ 91.599977][ T5196] EXT4-fs (loop3): 1 truncate cleaned up [ 91.837994][ T5222] loop2: detected capacity change from 0 to 8192 [ 91.923283][ T5216] syz.1.485: attempt to access beyond end of device [ 91.923283][ T5216] loop1: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 91.936643][ T5216] Buffer I/O error on dev loop1, logical block 128, lost async page write [ 91.952566][ T5220] syz.1.485: attempt to access beyond end of device [ 91.952566][ T5220] loop1: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 91.966147][ T5220] Buffer I/O error on dev loop1, logical block 128, lost async page write [ 91.977352][ T5226] loop0: detected capacity change from 0 to 256 [ 92.010540][ T5226] syz.0.488: attempt to access beyond end of device [ 92.010540][ T5226] loop0: rw=2049, sector=256, nr_sectors = 100 limit=256 [ 92.029939][ T5226] netlink: 64 bytes leftover after parsing attributes in process `syz.0.488'. [ 92.210279][ T5238] loop3: detected capacity change from 0 to 512 [ 92.220670][ T5238] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.490: error while reading EA inode 32 err=-116 [ 92.237427][ T5238] EXT4-fs (loop3): Remounting filesystem read-only [ 92.244281][ T5238] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 92.254568][ T5238] EXT4-fs (loop3): 1 orphan inode deleted [ 92.817125][ T5250] loop1: detected capacity change from 0 to 512 [ 92.830376][ T5254] loop2: detected capacity change from 0 to 128 [ 92.848826][ T5250] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.494: error while reading EA inode 32 err=-116 [ 92.879168][ T5250] EXT4-fs (loop1): Remounting filesystem read-only [ 92.886312][ T5250] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 92.896923][ T5250] EXT4-fs (loop1): 1 orphan inode deleted [ 92.908910][ T5257] loop4: detected capacity change from 0 to 512 [ 92.933269][ T5257] EXT4-fs: Ignoring removed bh option [ 92.949370][ T5257] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 92.974623][ T5257] EXT4-fs (loop4): 1 truncate cleaned up [ 93.021024][ T5266] loop3: detected capacity change from 0 to 512 [ 93.061321][ T5266] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.498: error while reading EA inode 32 err=-116 [ 93.089852][ T5266] EXT4-fs (loop3): Remounting filesystem read-only [ 93.107424][ T5266] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 93.130698][ T5266] EXT4-fs (loop3): 1 orphan inode deleted [ 93.288553][ T5272] 8021q: adding VLAN 0 to HW filter on device bond3 [ 93.950993][ T29] kauditd_printk_skb: 431 callbacks suppressed [ 93.951006][ T29] audit: type=1326 audit(1761260417.915:4973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5247 comm="syz.1.494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5ed4e45e67 code=0x7ffc0000 [ 93.982142][ T29] audit: type=1326 audit(1761260417.945:4974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5247 comm="syz.1.494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5ed4deb099 code=0x7ffc0000 [ 94.005882][ T29] audit: type=1326 audit(1761260417.945:4975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5247 comm="syz.1.494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5ed4e45e67 code=0x7ffc0000 [ 94.029180][ T29] audit: type=1326 audit(1761260417.945:4976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5247 comm="syz.1.494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5ed4deb099 code=0x7ffc0000 [ 94.052567][ T29] audit: type=1326 audit(1761260417.945:4977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5247 comm="syz.1.494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f5ed4e4efc9 code=0x7ffc0000 [ 94.081213][ T29] audit: type=1326 audit(1761260418.045:4978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5247 comm="syz.1.494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5ed4e45e67 code=0x7ffc0000 [ 94.104850][ T29] audit: type=1326 audit(1761260418.045:4979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5247 comm="syz.1.494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5ed4deb099 code=0x7ffc0000 [ 94.128538][ T29] audit: type=1326 audit(1761260418.045:4980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5247 comm="syz.1.494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f5ed4e4efc9 code=0x7ffc0000 [ 94.163947][ T5271] loop2: detected capacity change from 0 to 8192 [ 94.198703][ T5277] warn_alloc: 4 callbacks suppressed [ 94.198718][ T5277] syz.3.503: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 94.218674][ T5277] CPU: 1 UID: 0 PID: 5277 Comm: syz.3.503 Not tainted syzkaller #0 PREEMPT(voluntary) [ 94.218698][ T5277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 94.218784][ T5277] Call Trace: [ 94.218791][ T5277] [ 94.218798][ T5277] __dump_stack+0x1d/0x30 [ 94.218818][ T5277] dump_stack_lvl+0xe8/0x140 [ 94.218838][ T5277] dump_stack+0x15/0x1b [ 94.218857][ T5277] warn_alloc+0x12b/0x1a0 [ 94.218890][ T5277] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 94.218975][ T5277] ? trie_delete_elem+0x5d/0x5b0 [ 94.218997][ T5277] __vmalloc_node_range_noprof+0x9d/0xed0 [ 94.219026][ T5277] ? __rcu_read_unlock+0x4f/0x70 [ 94.219048][ T5277] ? xfd_validate_state+0x45/0xf0 [ 94.219067][ T5277] ? save_fpregs_to_fpstate+0x100/0x160 [ 94.219096][ T5277] ? should_fail_ex+0x30/0x280 [ 94.219202][ T5277] ? xskq_create+0x36/0xe0 [ 94.219224][ T5277] vmalloc_user_noprof+0x7d/0xb0 [ 94.219254][ T5277] ? xskq_create+0x80/0xe0 [ 94.219271][ T5277] xskq_create+0x80/0xe0 [ 94.219291][ T5277] xsk_init_queue+0x95/0xf0 [ 94.219326][ T5277] xsk_setsockopt+0x3f5/0x640 [ 94.219345][ T5277] ? __pfx_xsk_setsockopt+0x10/0x10 [ 94.219361][ T5277] __sys_setsockopt+0x184/0x200 [ 94.219499][ T5277] __x64_sys_setsockopt+0x64/0x80 [ 94.219530][ T5277] x64_sys_call+0x20ec/0x3000 [ 94.219553][ T5277] do_syscall_64+0xd2/0x200 [ 94.219571][ T5277] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 94.219639][ T5277] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 94.219662][ T5277] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.219680][ T5277] RIP: 0033:0x7f38cde7efc9 [ 94.219697][ T5277] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 94.219783][ T5277] RSP: 002b:00007f38cc8df038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 94.219799][ T5277] RAX: ffffffffffffffda RBX: 00007f38ce0d5fa0 RCX: 00007f38cde7efc9 [ 94.219810][ T5277] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 94.219822][ T5277] RBP: 00007f38cdf01f91 R08: 0000000000000004 R09: 0000000000000000 [ 94.219834][ T5277] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 94.219905][ T5277] R13: 00007f38ce0d6038 R14: 00007f38ce0d5fa0 R15: 00007fffe0af8a08 [ 94.219924][ T5277] [ 94.279457][ T29] audit: type=1400 audit(1761260418.155:4981): avc: denied { setopt } for pid=5276 comm="syz.3.503" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 94.279950][ T5277] Mem-Info: [ 94.279957][ T5277] active_anon:27026 inactive_anon:0 isolated_anon:0 [ 94.279957][ T5277] active_file:28101 inactive_file:2267 isolated_file:0 [ 94.279957][ T5277] unevictable:0 dirty:262 writeback:7 [ 94.279957][ T5277] slab_reclaimable:3334 slab_unreclaimable:14687 [ 94.279957][ T5277] mapped:29436 shmem:16994 pagetables:1151 [ 94.279957][ T5277] sec_pagetables:0 bounce:0 [ 94.279957][ T5277] kernel_misc_reclaimable:0 [ 94.279957][ T5277] free:1830790 free_pcp:37996 free_cma:0 [ 94.513646][ T5277] Node 0 active_anon:45348kB inactive_anon:0kB active_file:112404kB inactive_file:9068kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:117744kB dirty:1048kB writeback:28kB shmem:5220kB kernel_stack:3616kB pagetables:4720kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 94.541095][ T5277] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 94.551025][ T29] audit: type=1400 audit(1761260418.505:4982): avc: denied { map } for pid=5280 comm="syz.0.500" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=10342 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 94.570713][ T5277] lowmem_reserve[]: 0 2881 7859 7859 [ 94.594826][ T5277] Node 0 DMA32 free:2946744kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2950272kB mlocked:0kB bounce:0kB free_pcp:3528kB local_pcp:0kB free_cma:0kB [ 94.594920][ T5277] lowmem_reserve[]: 0 0 4978 4978 [ 94.594998][ T5277] Node 0 Normal free:4361000kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:45392kB inactive_anon:0kB active_file:112404kB inactive_file:9080kB unevictable:0kB writepending:992kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:210892kB local_pcp:70284kB free_cma:0kB [ 94.595065][ T5277] lowmem_reserve[]: 0 0 0 0 [ 94.595088][ T5277] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 94.687076][ T5277] Node 0 DMA32: 2*4kB (M) 2*8kB (M) 6*16kB (M) 2*32kB (M) 4*64kB (M) 2*128kB (M) 2*256kB (M) 3*512kB (M) 3*1024kB (M) 2*2048kB (M) 717*4096kB (M) = 2946744kB [ 94.703349][ T5277] Node 0 Normal: 1556*4kB (UME) 786*8kB (UME) 137*16kB (UM) 287*32kB (UME) 60*64kB (UME) 18*128kB (UM) 5*256kB (UME) 10*512kB (U) 5*1024kB (UM) 5*2048kB (UME) 1052*4096kB (UM) = 4360784kB [ 94.722299][ T5277] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 94.731802][ T5277] 31625 total pagecache pages [ 94.735516][ T5288] netlink: 7 bytes leftover after parsing attributes in process `syz.4.506'. [ 94.736494][ T5277] 0 pages in swap cache [ 94.736502][ T5277] Free swap = 124996kB [ 94.753542][ T5277] Total swap = 124996kB [ 94.757685][ T5277] 2097051 pages RAM [ 94.761520][ T5277] 0 pages HighMem/MovableOnly [ 94.766229][ T5277] 81083 pages reserved [ 94.772089][ T5288] netlink: 7 bytes leftover after parsing attributes in process `syz.4.506'. [ 94.806471][ T5294] 9pnet_fd: p9_fd_create_unix (5294): problem connecting socket: ./file0: -2 [ 94.817672][ T5294] netlink: 'syz.1.504': attribute type 4 has an invalid length. [ 94.823093][ T5295] loop0: detected capacity change from 0 to 256 [ 94.839465][ T5294] bridge5: entered promiscuous mode [ 94.860235][ T5294] netlink: 'syz.1.504': attribute type 4 has an invalid length. [ 94.910369][ T5295] syz.0.507: attempt to access beyond end of device [ 94.910369][ T5295] loop0: rw=2049, sector=256, nr_sectors = 100 limit=256 [ 94.935007][ T5298] loop2: detected capacity change from 0 to 512 [ 94.941496][ T5308] loop3: detected capacity change from 0 to 128 [ 94.943897][ T5295] netlink: 64 bytes leftover after parsing attributes in process `syz.0.507'. [ 94.957120][ T5298] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.505: error while reading EA inode 32 err=-116 [ 94.969860][ T5298] EXT4-fs (loop2): Remounting filesystem read-only [ 94.976473][ T5298] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 94.987620][ T5298] EXT4-fs (loop2): 1 orphan inode deleted [ 95.061803][ T5313] ================================================================== [ 95.070006][ T5313] BUG: KCSAN: data-race in __mark_inode_dirty / __mark_inode_dirty [ 95.077918][ T5313] [ 95.080242][ T5313] write to 0xffff88811a4b5928 of 4 bytes by task 5311 on cpu 1: [ 95.087867][ T5313] __mark_inode_dirty+0x248/0x750 [ 95.092897][ T5313] fat_update_time+0x1ec/0x200 [ 95.097673][ T5313] touch_atime+0x148/0x340 [ 95.102103][ T5313] filemap_splice_read+0x6ba/0x740 [ 95.107233][ T5313] splice_direct_to_actor+0x26f/0x680 [ 95.112638][ T5313] do_splice_direct+0xda/0x150 [ 95.117406][ T5313] do_sendfile+0x380/0x650 [ 95.121847][ T5313] __x64_sys_sendfile64+0x105/0x150 [ 95.127062][ T5313] x64_sys_call+0x2bb4/0x3000 [ 95.131751][ T5313] do_syscall_64+0xd2/0x200 [ 95.136277][ T5313] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.142189][ T5313] [ 95.144538][ T5313] read to 0xffff88811a4b5928 of 4 bytes by task 5313 on cpu 0: [ 95.152082][ T5313] __mark_inode_dirty+0x191/0x750 [ 95.157159][ T5313] fat_update_time+0x1ec/0x200 [ 95.161943][ T5313] touch_atime+0x148/0x340 [ 95.166379][ T5313] filemap_splice_read+0x6ba/0x740 [ 95.171502][ T5313] splice_direct_to_actor+0x26f/0x680 [ 95.176882][ T5313] do_splice_direct+0xda/0x150 [ 95.181654][ T5313] do_sendfile+0x380/0x650 [ 95.186089][ T5313] __x64_sys_sendfile64+0x105/0x150 [ 95.191300][ T5313] x64_sys_call+0x2bb4/0x3000 [ 95.195993][ T5313] do_syscall_64+0xd2/0x200 [ 95.200517][ T5313] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.206426][ T5313] [ 95.208746][ T5313] value changed: 0x00000000 -> 0x00000070 [ 95.214458][ T5313] [ 95.216777][ T5313] Reported by Kernel Concurrency Sanitizer on: [ 95.217703][ T5311] syz.3.511: attempt to access beyond end of device [ 95.217703][ T5311] loop3: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 95.222920][ T5313] CPU: 0 UID: 0 PID: 5313 Comm: syz.3.511 Not tainted syzkaller #0 PREEMPT(voluntary) [ 95.222945][ T5313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 95.222957][ T5313] ================================================================== [ 95.264222][ T5311] Buffer I/O error on dev loop3, logical block 128, lost async page write