last executing test programs: 3m28.936976291s ago: executing program 4 (id=1669): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10) r1 = memfd_create(&(0x7f0000000100)='\vem\xda\x99R@m\xfc\xfe\x9b#*\xff', 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f000002eff0)={0x135, &(0x7f0000000000)=[{}]}, 0x10) 3m28.837446731s ago: executing program 4 (id=1671): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=ANY=[@ANYBLOB="c4000000", @ANYRES16, @ANYBLOB="0100000000000000000001"], 0xc4}}, 0x4008800) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000011c0)={[{}, {@errors_remount}, {@errors_remount}, {@noinit_itable}]}, 0x0, 0x4e5, &(0x7f0000000980)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) r5 = add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @desc2}, &(0x7f0000000300)={0x0, "1e4e1557a609bff6a596dea0fb0503f22231b15d27fce60137b6c6cbf512f89b435f5dd9b4ae337bbf37b108c1ec26276567359e079abe967f5d8aad34301a48", 0x13}, 0x48, 0xfffffffffffffffc) request_key(&(0x7f0000000180)='encrypted\x00', &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000280)='&}}\x00', r5) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = dup(r6) fsetxattr$security_selinux(r7, &(0x7f0000000000), &(0x7f0000000040)='system_u:object_r:mouse_device_t:s0\x00', 0x20, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f00000004c0)={0x0, @in={{0x2, 0x4e24, @empty}}}, &(0x7f00000002c0)=0x84) 3m27.840104173s ago: executing program 4 (id=1679): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01c21668f6d1d66edb251c00000018000180140002006c6f"], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x44, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xfff2, 0xf}, {}, {0x7, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_EMATCHES={0x10, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x2008c014) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000880)={'syztnl2\x00', &(0x7f0000000740)={'ip6_vti0\x00', 0x0, 0x29, 0xe, 0x81, 0xfffff045, 0x40, @private1, @private1, 0x7800, 0x80, 0x1, 0x1ff}}) r9 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e40)=@newqdisc={0x40, 0x24, 0x3fe3aa0262d8c583, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xf}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x4aa66f51}}]}, 0x40}, 0x1, 0x0, 0x0, 0xc083}, 0x2000400c) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r12, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r12, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r11, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000f80)=@newqdisc={0x48, 0x24, 0xf0b, 0x70bd2e, 0x25dfdbfc, {0x0, 0x0, 0x12, r13, {0x0, 0x4}, {0xfff1, 0xffff}, {0xfff3, 0x9}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xc}, @TCA_RATE={0x6, 0x5, {0x6, 0x10}}, @qdisc_kind_options=@q_clsact={0xb}]}, 0x48}, 0x1, 0x0, 0x0, 0x8004001}, 0x0) r14 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000000)={'xfrm0\x00', 0x0}) r16 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r16, &(0x7f0000000180)='`', 0x5dc, 0x0, &(0x7f0000000740)={0x6, 0x0, r15, 0x1, 0x0, 0x6, @random="4a99fee2084d"}, 0x14) 3m27.695568735s ago: executing program 4 (id=1684): r0 = syz_open_dev$hiddev(&(0x7f0000000000), 0xd, 0x10800) r1 = syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000280)={[{@usrquota}, {@nodelalloc}]}, 0xff, 0x25e, &(0x7f0000000e80)="$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") r2 = gettid() r3 = msgget$private(0x0, 0x0) r4 = getgid() newfstatat(0xffffffffffffff9c, &(0x7f00000006c0)='./file0\x00', &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$ARCH_SET_GS(0x1e, r6, 0x0, 0x1001) msgctl$IPC_SET(r3, 0x1, &(0x7f0000000180)={{0x0, 0x0, r4, r5, 0xee00, 0x140, 0x3ff}, 0x0, 0x0, 0xffffffff, 0xc, 0x5, 0xc0e, 0x7, 0x4, 0x1, 0x1, r6}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r9 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f00000005c0)={0x0, 0x0, 0x0}, &(0x7f0000000580)=0xfffffffffffffc63) setregid(r11, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000013c0)=0xc) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$unix(r12, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000014c0)="ae", 0x1}], 0x1, &(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r13, @ANYRESHEX=r14, @ANYRES32=r15, @ANYRESHEX, @ANYRES32=r10, @ANYRES16=r14], 0x38, 0x80}}], 0x1, 0x4) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f0000000300)=0xc) fsetxattr$system_posix_acl(r8, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f0000000340)=ANY=[@ANYBLOB="0200000001000900000000000200f993", @ANYRES32=0x0, @ANYBLOB="02000400", @ANYRES32=0x0, @ANYBLOB="02000700", @ANYRES32, @ANYBLOB="040001000000000008000500", @ANYRES32=r11, @ANYBLOB="08000400", @ANYRES32=r15, @ANYBLOB="08000600", @ANYRES32=r17, @ANYBLOB="1000f100000000002000000000000000"], 0x54, 0x3) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003200)=[{{&(0x7f0000000200)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f00000002c0)=[{&(0x7f0000001100)="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", 0x1000}], 0x1, &(0x7f0000002280)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES16=r18, @ANYRESHEX=r18, @ANYRES32, @ANYRES32=r1, @ANYBLOB="38000000000000000100000001000000", @ANYRES32, @ANYRES32=r0, @ANYRES32, @ANYRESOCT=r19, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="0000000038000000000000000100000001006825967fa368242aaa015e0000", @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32, @ANYRES32, @ANYBLOB="20000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r1], 0x130, 0x8000}}, {{&(0x7f0000000b40)=@file={0x0, './file1\x00'}, 0x6e, &(0x7f0000000d80)=[{&(0x7f0000000bc0)}, {&(0x7f0000000c00)="c59f2e8dfee03b753afc48e8977a6d57b6608cefe4cc412f917b19db79546452c21dd34824cbc441a702a23ab424bf3d", 0x30}, {&(0x7f0000000c40)="5dcff1e01ade04184fbe28117ff706a2ecaf891b62a9e472a10849e3c2113bf8fce7131a5e8035e2bc69ae08e4045cfb400548bfd023ba6d96c212a3309cd246719f08d7fd5c2f4fc4afb1037e0696510cbc6117948e6aec5c67dd41ae8dd0dd29c826ad229d1947211e50bd9a115e", 0x6f}, {&(0x7f0000000cc0)="1c78c72444faffccd4ff09d49f1af1d70f8698594fd4667875e9bc9065cb572925a749095ac999017927db0b0f915da4d22354f17e26d1d1153c24ceb438d3397ef954596013ac6b11c70eed6c6404aadb51b630a7009b569331a8c8b9d59e76186081bd0c3e35abe12770d8a3179c35c346f15fd8252b05f080388f44fc2126a6f19d4b77ae1dbf150f16", 0x8b}], 0x4, &(0x7f0000002100)=ANY=[@ANYBLOB="14000000000000000100000001009d2af600a896d67939fd00004615d388e3b97499dcf02da12693b083ff1c9e5170d15cd8ef3fb480dd1936b06eff6b9deb23d0d0c8cba77df382a461ac0fea076af75bdda56f7e604ec9f5bd767a95a5a37a619e6419cc6389bc48d4690368f75f2acc9d585b1ddd4d83e72e6515c65a6d5331485271bc26c7b4639f5cd9e7aa6ff5a4b04a0cc52d4cd6b861d7712209df28ebe6dd3a56c9a450b111b9e7b68715bdff03175f92a7ca174346c89f8843d5f71459772baf5e5dbf054717f0e4afe683203186b9467600d73c5780fef6d87e4d2043192f4f0f6bc322a374e18cdccc716178f2de", @ANYRES32=r1, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r1, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=r16, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x90, 0x4040084}}, {{&(0x7f0000002480)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000002800)=[{&(0x7f0000002500)="1217e1d7165a30f72f0e343470ffd4c0d8f5f1eeeb73bc3e2fc95f56cd9928fe82549a218be79341cbdd44e608c3531b8295c6d2abb02abf4025a32da7d67cf0287d7ec7eb50053d43b8d4de39b96f895c2f66a23ece416a0e17e65c41679a88b5dd5e0a9def9e6cb31669d344750538bb35713ee1fe2a7449384a42b920dea37c8afebd904cfe53b739c36a51ebe69f0730f08f767db2f04f130a0502ff12763cc9cffd05ba589ebd445bbc8ed76b4313490dbde458cd32cd9eeea1e76f33c8a62c8fcc619723e50c739f271ee0c6cc53b9845060714e0a0e309a9efb08adbc52b51aaefb4ac10adcb1ddb7e1", 0xed}, {&(0x7f0000002600)="79fc7a9c964088524d7d9248", 0xc}, {&(0x7f0000002640)="b3946698968a0606f6dadb27646c0cc55c79dadea31feb88101fc8a43d318a434e2b0140b3958eb21798a60d0e95e1e70c1c478e8b68166bd1225b90e15b542c3055853635d76991806754f36a2313b2483e8beab0e0ddd4e44ed5357822074680bf686eb3e7d243e96b0d959ce670b13f4194a21686adfc7cc69ef9c3d322109151f0ef18044ce5e5fa63aeea0f19937429141ff9274f02bf1b818103cbaef1ef2b1aabf62bfae354b240172791b95031ae984f8257dc6a8974", 0xba}, {&(0x7f0000002700)="c2f9d7fe74ef8c5fcca4c990973429749e0696cb879dc85ceddf1bf4d4c21d695d18d370b917d9562802dfe48174c7d1b4ebb1d04094dc020acbad4527fb89f1534e77e41d2623d19b81bc9ea534649b9492634d916f4dd875276b194091560912a8f8034589976190f15b9753529b3e99aef371170011f8aae86a4b51d587fea74e4fd0d4d0aaaaf4fd6bbdeee199a12685ab347f34fa04c3c116b81c130410e26000c55f1f63010a10d403f2830aa678f6c71e76b1575927a31172b2ca6462350f6f3493dbb52efe19efc85a0a850187263e922618c39ac92e0c260b9d9056c18b09bbf1a8dc0b492c8c4678ef60", 0xef}], 0x4, &(0x7f0000002940)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}], 0x20, 0x4000000}}, {{&(0x7f0000002980)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000002d80)=[{&(0x7f0000002a00)="2d972c6e5444b8dba0aaa64fd3daf22ef78b79c9d1c761ed991091e2bd62696b8a82b717c9bf918a2d2ae3072969b4893c93d64c0ac85a0a7a203baf70980d788de0b975ead8744bbdcad9f8d2defc6ac8eef19747476b452631ae0c436bf347fd2f8c69779c5ac9cc4f6d40eb7c4fb83a812a4e64e138409b17cb850bcab8f0944478711da8bc7a9f3ec283ec9320f3cc97c03b30bb45f320b664ede7d9bba918c0d8f9441d1c8b7b21671e4469ea1223ebece155b45693185d4d9a035bae737afe08b46974d44747dc58bce81d11db1bad", 0xd2}, {&(0x7f0000002b00)="02bbf7b58e44a4bd0856cfff013583c9406a839ab1232a9b6e720fbd99a1bf9b7558838423fe32bb44dc127677cc86fc28f0d327757e82a9abab4e54af9bf81d4534e3f54ca0d149b72fa56e0eb20b8322f81086e993e9bf27ecde84bd717a10a1be057aba8aafacf3f94cbe65087552a193e1a7437c298e8b8ce23aaa49168dbe492d62962002fab1c27ede8fc0a682f917abda0334b8d8f0b01a428620dfb7ef8078eff02108c2a71af5ed9e1cbfe1c72ecaafe9f041ad76e3f981eb4d8b1915ac", 0xc2}, {&(0x7f0000002c00)="9f5375482b744668d55aea242c5cf331af0ed652250d7ea0be804793edf05b25cc5b1baf26d9f4bd8d126701e8d6c81362115c1913cb87", 0x37}, {&(0x7f0000002c40)="1469393367abdd63ccbc21035f2653e079892131a90ce86c48cf7b099a63636b923874fe5f50df22438a36cd1a429b28e6d9087f9c47bdc761c76ae7b006cd8d1205e4e17b0380c8af35f1243db469573255925375b236653faea99b3e0b674137c528071d2ad604de08458dbc7136d6424234f2eba828e9a6c506c32d35499df1fcb4e966029d2515c15eba7a66199d5b4699e9d809e6f4dcede0ba095859926de4e7b1bc6be5f21b425b3a9dfa9de99e4879aea3d2f84b7177315689c4eb27873bd1a9eaeb9860d9baee70d93a6038638e616accdd2f723271b2f36337ff1da1566a528ea23ef279c99a", 0xeb}, {&(0x7f0000002d40)="09361ca25cba40c866b7d8", 0xb}], 0x5, &(0x7f0000002e40)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}], 0x40, 0x1}}, {{&(0x7f0000002e80)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000003140)=[{&(0x7f0000002f00)="cb7710d8aeca7a0db251531fa58a", 0xe}, {&(0x7f0000002f40)="144d5d73ad37b3317603af59b37a8b982909138e8df78a0557369bf109cbce8fcb88e728aabf2b79c494d1c411ad9df746c14f48e655d9c4af8bf88b2b0b2c3e9d7d584382ff5c6a1e0398a161", 0x4d}, {&(0x7f0000002fc0)="63822889ef074edf228a919692722c46567aed853a50ba806752a37d2abf99ab723d672e67d68711dccfdbe268b337189845a6646856b01dd18dbfb0fc977b3cf3", 0x41}, {&(0x7f0000003040)="98d781156e53facc1391ac99629f26bfd33861ee514c9d30ad0f0da83ea44f0431c1bbee7d7e9c9fc40747060662842fb78740ef9644f02db55aaccaf91cd528485a8032044c202a65e04c9e1c7436d0ae53d244f5b4eea5baf21cc1f9fadd95604cc807106a8d69fc3a7fa73371e92de9421b933792cab56f75d6fd1803855b5c2ccefc3edf99c38393af14a3ad6eb5409b12e29f", 0x95}, {&(0x7f0000003100)="90bbd5f929c1b37b2a9404a44a2cad0a9a68f967d42eb6a74452", 0x1a}], 0x5, &(0x7f00000031c0)=[@cred={{0x1c, 0x1, 0x2, {r2, r5, r15}}}], 0x20, 0x54}}], 0x5, 0x40000) r20 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x45) ioctl$FS_IOC_SETFLAGS(r20, 0x40086602, &(0x7f0000000140)) ioctl$HIDIOCINITREPORT(r0, 0x4805, 0x0) r21 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r21, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x310, 0x0, 0x1170, 0x1170, 0x178, 0x1170, 0x240, 0x1398, 0x1398, 0x240, 0x1398, 0x3, 0x0, {[{{@uncond, 0x0, 0x108, 0x178, 0x0, {}, [@common=@unspec=@devgroup={{0x38}, {0x5, 0xef4, 0x0, 0x3, 0x4}}, @inet=@rpfilter={{0x28}, {0xb}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x48a, 0x5, 0x4, 0x1, 0x0, "f342a67c2c8839f34dc41410843d9d5b6c0bffd9272e2a6bbb41043c26f552454c4da82330ce9be65548dea046d85e62aee4e92396bc1c01a84b1d197d6754c2"}}}, {{@uncond, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x370) r22 = add_key$fscrypt_provisioning(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, &(0x7f00000001c0)={0x7, 0x0, @auto=[0x3f]}, 0x9, 0xfffffffffffffff8) keyctl$setperm(0x5, r22, 0x2000802) 3m27.247782397s ago: executing program 4 (id=1687): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r3) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000180)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000024000280040001001c000380"], 0x50}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) splice(r2, 0x0, r3, 0x0, 0xfffd, 0x0) 3m25.627420546s ago: executing program 4 (id=1698): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0xd, 0x0, 0x41800}, 0x48d1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x2, &(0x7f0000000140)=[{0x30, 0x0, 0x0, 0xfffff024}, {0x6}]}, 0x10) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x9400, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x9, 0x7}, 0x100, 0xa88, 0x8406, 0x5, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x0, &(0x7f00000001c0)={[{@noinit_itable}]}, 0x1, 0x512, &(0x7f0000000c40)="$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") r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x93, &(0x7f00000003c0)=""/147}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="10000000040000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r3}, &(0x7f0000000a00), &(0x7f0000000400)=r2}, 0x20) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r4, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r4, &(0x7f0000000540)="b84ca9c2", 0x4, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r4, 0x84, 0x17, &(0x7f0000000180)=ANY=[@ANYRES32=0x0, @ANYBLOB="04"], 0x9) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f0000000300), 0x8) iopl(0x3) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, 0x0, 0x1) 3m25.627283556s ago: executing program 32 (id=1698): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0xd, 0x0, 0x41800}, 0x48d1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x2, &(0x7f0000000140)=[{0x30, 0x0, 0x0, 0xfffff024}, {0x6}]}, 0x10) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x9400, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x9, 0x7}, 0x100, 0xa88, 0x8406, 0x5, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x0, &(0x7f00000001c0)={[{@noinit_itable}]}, 0x1, 0x512, &(0x7f0000000c40)="$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") r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x93, &(0x7f00000003c0)=""/147}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="10000000040000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r3}, &(0x7f0000000a00), &(0x7f0000000400)=r2}, 0x20) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r4, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r4, &(0x7f0000000540)="b84ca9c2", 0x4, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r4, 0x84, 0x17, &(0x7f0000000180)=ANY=[@ANYRES32=0x0, @ANYBLOB="04"], 0x9) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f0000000300), 0x8) iopl(0x3) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, 0x0, 0x1) 4.064316206s ago: executing program 0 (id=3823): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000008c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="000129bd7000fcdbdf250e0000000400018040de018006000b000200000005000d000000000014000100fc0200000000000000000000000000010800060020c4000006000400000054000380140002006970766c616e300000000000000000000800050064010101140002006e657464657673696d3000000000000008000500ac1414bb060007004e220000060004000100000005000800000000001400038006000400ffff0000080003000300000008000500ffffffff080004004e6e"], 0xd0}, 0x1, 0x0, 0x0, 0x20040040}, 0x8044) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000011c0)={[{}, {@errors_remount}, {@errors_remount}, {@noinit_itable}]}, 0x0, 0x4e5, &(0x7f0000000980)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) r5 = add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @desc2}, &(0x7f0000000300)={0x0, "1e4e1557a609bff6a596dea0fb0503f22231b15d27fce60137b6c6cbf512f89b435f5dd9b4ae337bbf37b108c1ec26276567359e079abe967f5d8aad34301a48", 0x13}, 0x48, 0xfffffffffffffffc) request_key(&(0x7f0000000180)='encrypted\x00', &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000280)='&}}\x00', r5) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = dup(r6) fsetxattr$security_selinux(r7, &(0x7f0000000000), &(0x7f0000000040)='system_u:object_r:mouse_device_t:s0\x00', 0x20, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f00000004c0)={0x0, @in={{0x2, 0x4e24, @empty}}}, &(0x7f00000002c0)=0x84) 2.906405442s ago: executing program 0 (id=3835): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x2, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x10}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) socketpair$unix(0x1, 0x2, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000040), 0x100000000000000c, 0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00"/14], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x10) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c000000030605000000000000000000000000060500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x24040800}, 0x8d0) close(r3) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) socket$unix(0x1, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00'}, 0x10) 2.71668004s ago: executing program 1 (id=3837): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003f80)=ANY=[], 0x1, 0x2f4, &(0x7f0000000900)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008000000a5"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) socket(0x29, 0x5, 0x0) socket$kcm(0x29, 0x5, 0x0) socket$kcm(0x29, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net/kcm\x00') preadv(r3, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000400)=""/95, 0x5f}], 0x2, 0x185, 0x0) getsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f0000001040), &(0x7f0000000000)) socket$netlink(0x10, 0x3, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x400000, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu\x00', 0x275a, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$lock(r4, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r4, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x9, 0x9}) fcntl$lock(r4, 0x7, &(0x7f0000000140)={0x1, 0x1, 0x7, 0x5}) writev(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r5, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 2.638932327s ago: executing program 0 (id=3838): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003f80)=ANY=[], 0x1, 0x2f4, &(0x7f0000000900)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) socket$can_raw(0x1d, 0x3, 0x1) socket(0x29, 0x5, 0x0) socket$kcm(0x29, 0x5, 0x0) socket$kcm(0x29, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='net/kcm\x00') preadv(r2, &(0x7f00000001c0)=[{&(0x7f0000000300)=""/230, 0xe6}, {&(0x7f0000000400)=""/95, 0x5f}], 0x2, 0x185, 0x0) socket$netlink(0x10, 0x3, 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100003}, 0x94) socket$nl_rdma(0x10, 0x3, 0x14) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu\x00', 0x275a, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$lock(r3, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r3, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x9, 0x9}) fcntl$lock(r3, 0x7, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 2.589830181s ago: executing program 2 (id=3839): r0 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000000, 0x12, r0, 0x0) socket(0x2b, 0x80801, 0x1) poll(&(0x7f0000000200), 0x0, 0x4) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='sched_switch\x00', r5}, 0x10) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003f80)=ANY=[], 0x1, 0x2f4, &(0x7f0000000900)="$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") mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x389b0d52417bb351) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') read$hiddev(r6, &(0x7f0000000100)=""/100, 0x64) openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) 2.414269098s ago: executing program 5 (id=3843): r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x3, 0x40000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={&(0x7f00000004c0), 0x4}, 0x6025, 0x4005, 0xb, 0x0, 0xffffffffffffffff, 0x1, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04", 0x13}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xfe33) socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8224, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0xfffd, 0x8, 0x8, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) mknod(&(0x7f0000000100)='./bus\x00', 0x8000, 0x10007) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r3, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, 0x0, 0x2, 0x70bd2a, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0xae1bfdf449d8c1a3) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000001040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100fdffffff0400d1000800000008000300", @ANYRES32=r6], 0x20}}, 0x0) r7 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_ADD(r4, &(0x7f0000000600)={&(0x7f0000000500), 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x24, r7, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x40008000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="b9ff03316844268cb89e14f0080047e0ffff00124000632f77fbac14fe16e000030a07080403fe80000020006558845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0x24, 0x60000000}, 0x2c) r8 = getpid() r9 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) splice(r9, 0x0, r9, 0x0, 0x2, 0xe) syz_pidfd_open(r8, 0x0) flistxattr(r0, &(0x7f00000002c0)=""/229, 0xe5) socket$inet_udplite(0x2, 0x2, 0x88) 2.040800212s ago: executing program 5 (id=3846): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x101}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f00000001c0)={0x80000002}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'veth1_to_bond\x00'}) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="28000000190001000000000000000010021800000000ff000000000208000100ac141400040008"], 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000480)=@ethtool_flash={0x33, 0x200ea6, './file1\x00'}}) (fail_nth: 8) 1.62465272s ago: executing program 3 (id=3848): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000240), &(0x7f0000000280)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) lsetxattr$security_selinux(&(0x7f0000000900)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000940), &(0x7f0000000980)='system_u:object_r:netutils_exec_t:s0\x00', 0xf, 0x0) 1.590222903s ago: executing program 2 (id=3849): pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000200)='\xe7},-!@#$\x00', 0x0, r2) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c00)={r0, 0x58, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$inet6(r0, &(0x7f0000001080)={&(0x7f0000000280)={0xa, 0x4e24, 0x800, @mcast1, 0x5}, 0x1c, &(0x7f0000000800)=[{&(0x7f00000002c0)="be8b52f0550ec3c08223099d8985d0fe9bf9b6595e012c36b289fd9dceecbc329de9f56e9f1f9e35e5ac556b8892d61a01ad6b21dba5", 0x36}, {&(0x7f0000000a00)="b17b69dc4b68b9b8f37e861473085b551f6cc73232510cf691c904b653399e7ae76633eb759cdd771918a46113d0846c25f5f6b4dcd083c5c06342c2e7e435925b61e78a6dd56cdfddb094e8ee89f8e414cf037883b43659f2c1dd87da4ee124493563ac7ebdc1003e017f486c2b1743cd80d23fc1d55bfc95d3e546fbca5ae15d8fc9feb770ef8090ab5683836156f50f4d5edd42d990a6c215bcdbfc5440ec2e7b46879c2b00771b6f1ffbbfc47d92de6702257bb3373bc521943ca613599bd31c7898582bfdffac", 0xc9}, {&(0x7f0000000b00)="5ce4ac6c516cea6bd06761a66a7c04c03ab1a404ac3486bbe7b7387c85d29621a21e096d50cd925dd02a0cfc58683b2b10e9fb57507927047655b4102418dfdfc4054be62ce597abddcae2a9b5b3d1807cd188a83ae92a317b86553c1d8bc690c395020d2f9a181de66b5fd864c852da236d5896f9702b0c4b6b2369fcedf9edcf00f56add2c58ead8f46fe88a018e0faa3b491b9392bdc2478b35716ccecaeb8e0375e62f9f9d7528cde09cd525e203a1f3b0379a632342e202bc803f0acb6db8fc341307b6ef08edbd40f7e114d17f0aed58eb437fb0f25bc4b7b67cac584b", 0xe0}, {&(0x7f0000000640)="3bc6f8c2194c2be10389486e83af7d79a9e6f399a85013cd28d0bbca66d081f7d2a1666abe1e04b4b00366a4e29b401c06e3c6dcd14c1998ad3dde5301905453329cadfa91f6c3c86521dd2bab3999d41e141e21e233f5b8876f0cb1d7d1bf73081e2caa9c0362a890895925d2e1e487ca755f876c47", 0x76}, {&(0x7f0000000740)="fba509e0433c54acb2d772af027a224ef277eac7bdfa488c0acc6805da180848ced3677179585205ec65f9bee3666cd0d51ec99fb70bcaa7e54708a45291ad636711160117069169885ac4f0135481c63b71841d252d7d5c4c638a13120545fab57986f5d4265fd52d9017ff1366", 0x6e}, {&(0x7f0000000d00)="81cdb252ee8e8f75ee405ddd5a9d1da775fdc00903d26cbb47f733a6921eaa785a33329a571cbf702aa540d70e2b1f040991daaec6c0472ab9325b7eab1063fcb601c5312a6254616b65222f0d85445b5ae92843f1352c5342a41faadcc05bc2f9b94f55d14082aee33596bcf73be4d541d8ea6fb62bb28516449c966a307ea9034857eb2b5a472497c503c701625459d93a82b78e51d9375fca58d4a8baf3ebff654492e74100e038925a673af6a72189988ce6c66798599d29392fe61561b109fe775b75b0a37e13696f13977691e9b5fd8da503f1f68c7cf2e66e353a6217399192", 0xe3}], 0x6, &(0x7f0000000e00)=[@rthdrdstopts={{0xd0, 0x29, 0x37, {0x3c, 0x16, '\x00', [@generic={0x2, 0xb3, "283aacf66581717e71deaac30854a9632cbc5946599d636a36d0c46add6f9db247586cbbcdd818524d42281f3685a8fb531f65ff78093fbfdc038b784246c236103d4b5f0ea0cd0eb7ab0044e70c32cd5efe5baa4dfc155d3a2b506ec723bac2663e690a517353e06f0566592dd9f4169cdd79ac0435ffe462923c071a452f47cc0d077b70fc82c19dfac42c43c48768e96012a61fbf94b064930139736918d8e2fdfcad8f55e3077bb165bbfdbbd5c2d49435"}]}}}, @tclass={{0x14, 0x29, 0x43, 0x69e0}}, @pktinfo={{0x24, 0x29, 0x32, {@local, r4}}}, @rthdr={{0xa8, 0x29, 0x39, {0x88, 0x12, 0x0, 0x5b, 0x0, [@private2, @mcast1, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast1, @dev={0xfe, 0x80, '\x00', 0x25}, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1]}}}, @rthdr_2292={{0xa8, 0x29, 0x39, {0x2f, 0x12, 0x0, 0xb8, 0x0, [@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @ipv4={'\x00', '\xff\xff', @local}, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x2f}, @ipv4={'\x00', '\xff\xff', @loopback}, @mcast2, @rand_addr=' \x01\x00', @private1, @remote]}}}], 0x260}, 0x4) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000f1ffff000000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000e}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000080)='kfree\x00', r6, 0x0, 0x101}, 0x18) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000007c0)=ANY=[@ANYBLOB="140100002900010000000000fcdbdf2503"], 0x114}], 0x1, 0x0, 0x0, 0x2004c000}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r5, 0xffffffffffffffff}, &(0x7f00000008c0), &(0x7f0000000880)=r8}, 0x20) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000300)={r3, r9}, 0xc) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r10 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000300)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000000)='ceph\x00', 0x0, &(0x7f0000000080)="010000000037a788a11d1f000000000000006923c63a4541062101b60a2156566de77062086575a59ea9cb", 0x2b, r10) 1.511317291s ago: executing program 5 (id=3850): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0x60, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000004c0)='kfree\x00', r1}, 0x18) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000048000000030a05020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a3000000000080007006e6174"], 0xcc}, 0x1, 0x0, 0x0, 0x880}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="400000001000010001000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="850b010000000000140003006d6163736563300000000000000000000a000100aaaaaaaaaabb0000"], 0x40}, 0x1, 0x0, 0x0, 0x90}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSWINSZ(r3, 0x5414, &(0x7f0000000040)={0x1, 0x0, 0x5, 0x2}) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCGSOFTCAR(r4, 0x5419, &(0x7f0000000000)) 1.503727701s ago: executing program 3 (id=3851): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x20081e, &(0x7f0000000300)={[{@nombcache}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xa30}}, {@journal_dev={'journal_dev', 0x3d, 0x460b8000}}]}, 0x1, 0x52a, &(0x7f0000001440)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) open(&(0x7f0000000000)='./bus\x00', 0x40, 0x24) 1.449269566s ago: executing program 2 (id=3852): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00"/11], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00'}, 0x10) r2 = socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x100}) 1.328283217s ago: executing program 1 (id=3853): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x2, 0xfffffffc, @empty, 0x80000001}, 0x1c) r1 = dup(r0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000000)={0x6, 0x4, 0x7, 0x6, 0x2, 0x5, 0x2}, 0xc) sendto$packet(r1, &(0x7f00000003c0)='(', 0x1, 0x24004090, 0x0, 0x0) 1.273816222s ago: executing program 3 (id=3854): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c30000"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8ff20c2c10f0093d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a3a0000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a31"], 0xf0}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 1.215046568s ago: executing program 1 (id=3855): bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000140), 0xc, 0x0, 0x1, 0x0, 0x0, 0xc005}, 0x800) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={{0x14}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x28}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030003130000002cbd7000fbdbdf2503000900800000001cdc0dca1d9f68846960e56de42944af05000600000000000a004e2400000004ff010000000000000000000000000001"], 0x98}, 0x1, 0x7}, 0x8890) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/timers\x00', 0x0, 0x0) close(r1) r2 = creat(&(0x7f0000000200)='./file0\x00', 0x109) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000480)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) kexec_load(0x7, 0x0, 0x0, 0x3e0000) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e8500000001000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f2f}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r4}, 0x0, &(0x7f0000000880)=r5}, 0x20) r6 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r6, 0x0, 0x0, 0xfc0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000100001000c000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073"], 0x7c}, 0x1, 0x0, 0x0, 0x2000c080}, 0x0) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) r9 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r10, 0x8933, &(0x7f0000000840)={'batadv_slave_0\x00', 0x0}) r12 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r11}, 0x90) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001000010027bd70000000000000000000", @ANYRES32=r11, @ANYBLOB="004100000000000014002b8008000100", @ANYRES32=r12], 0x34}, 0x1, 0x0, 0x0, 0x8040}, 0x4008000) close_range(r8, 0xffffffffffffffff, 0x0) 1.181732211s ago: executing program 2 (id=3856): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000118110000", @ANYRES32=r0, @ANYRESDEC=r0], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000b80)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kmem_cache_free\x00'}, 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xc3, 0x0, 0x0, 0x0, 0x0, 0x100000000000, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffd, 0x1000}, 0x0, 0x0, 0xffffffff, 0x5, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f0000000340)='cpu\t&0&&\t') utimes(0x0, 0x0) 1.158870533s ago: executing program 1 (id=3857): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f00000003c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@journal_dev={'journal_dev', 0x3d, 0x1}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@nouid32}]}, 0x1, 0x441, &(0x7f00000011c0)="$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") r3 = socket$pppoe(0x18, 0x1, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000840)={&(0x7f0000000080)='kfree\x00', r4, 0x0, 0x97a3}, 0x18) connect$pppoe(r3, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'geneve0\x00'}}, 0x1e) connect$pppoe(r3, &(0x7f0000000040)={0x18, 0x0, {0x0, @empty, 'netpci0\x00'}}, 0x1e) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bind$inet(r6, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x2, 0x1, 0xc}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000080)=ANY=[], 0xfe37, 0x0) r7 = open_tree(r2, &(0x7f0000000200)='./file2\x00', 0x900) sendmsg$ETHTOOL_MSG_WOL_GET(r7, &(0x7f0000000300)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={0x0}}, 0x48041) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x18) socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r8, 0x0, 0x25, 0x2, @void}, 0x10) bind$xdp(r7, &(0x7f0000000340)={0x2c, 0xb, 0x0, 0x30, r7}, 0x10) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000100)='./file2\x00') 1.158069023s ago: executing program 3 (id=3858): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000480)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@grpquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@errors_continue}, {@user_xattr}, {@bh}, {@errors_remount}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f00000005c0)='\"', 0x1, 0x4fed0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018090037e30900", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b000000b7000000000000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000100000024000180060005004e230000060001000200000008000300ac1414aa0800060001"], 0x38}, 0x1, 0x0, 0x0, 0x4000011}, 0x4c080) r5 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0xb76e}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x800, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200a}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r6}, &(0x7f0000000180), &(0x7f00000001c0)=r5}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="010028bd7000fcdbdf2504"], 0x14}}, 0x0) r8 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x50) sendfile(r8, r8, 0x0, 0x800000009) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r10 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r10) syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000000)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) readlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=""/211, 0xd3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r9}, 0x10) r11 = getpid() r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r12, 0x0, 0x0) syz_pidfd_open(r11, 0x0) 951.244342ms ago: executing program 3 (id=3859): r0 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000000, 0x12, r0, 0x0) socket(0x2b, 0x80801, 0x1) poll(&(0x7f0000000200), 0x0, 0x4) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='sched_switch\x00', r5}, 0x10) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003f80)=ANY=[], 0x1, 0x2f4, &(0x7f0000000900)="$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") mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x389b0d52417bb351) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') read$hiddev(r6, &(0x7f0000000100)=""/100, 0x64) openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) 943.813603ms ago: executing program 2 (id=3860): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_dev$usbfs(&(0x7f00000000c0), 0x70, 0x103301) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'veth0_virt_wifi\x00', 0x2000000}, 0x18) setsockopt$IP_VS_SO_SET_STOPDAEMON(r4, 0x0, 0x48c, &(0x7f00000002c0)={0x1, 'ipvlan1\x00', 0x100}, 0x18) 922.968465ms ago: executing program 5 (id=3861): syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f00000000c0), 0x2, 0xbd1, &(0x7f0000001340)="$eJzs3M1rHOcZAPBnRquVbKtduZRS91KVUmwoXUsuMrUp1C4uvfRQaK8Fq/LKCK0/kFRcyTqskn8gX+dALoEkJiGH+OxLQnLNJbGvCTkETFCsBEJIFGY/pI2lleR4V6PIvx+8mvedd7TP8+ywO/PC7gbwxBrJ/qQRxyLiYhJRau5PI6JY7w1G1BrHra4sTX65sjSZxNravz5LIomIBytLk63HSprbI83BYES8/9ckfvb05rhzC4szE9VqZbY5Pjl/5frJuYXFP0xfmbhcuVy5Onb6T+Onxk+PnhnvWq1ffXTu9he/+fsnta9f/ebW58+/nMS5GGrOtdfRLSMxsv6ctCtExES3g+Wkr1lPe51JYYd/SnucFAAAHaVt93C/iFL0xcbNWyne/iDX5AAAAICuWOuLWAMAAAAOuMT6HwAAAA641ucAHqwsTbZavp9I2Fv3z0fEcKP+1WZrzBSiVt8ORn9EHH6QRPvXWpPGvz22kYj4+N6ZN7IWPfoe8nZqyxHxy63Of1Kvf7j+Le7N9acRMdqF+CMPjX9M9Z/rQvy86wfgyXTnfONCtvn6l67f/8QW17/CFteuHyLv61/r/m910/3fRv19He7//rnLGDdfefFGp7ms/j/f/tvrrZbFz7aPVdQjuL8c8avCVvUn6/UnHeq/uMsYpW9vVDrN5V3/2ksRx2Pr+luS7X+f6OTUdLUy2vi7ZYzl98Zf6xQ/7/qz83+4Q/2t33/qdP6v7zLGfy5ceHPTznsb3e3rTz8tJv+u94rNPf+fmJ+fHYsoJv/YvP/U9rm0jmk9Rlb/id9u//rfqv7sPaHWfB6ytcByc5uNn3oo5l9u3XyrUz6t9V+e5/9Sh/PfXv+7hc3n/5ldxvjdO8+d6DTXvv7NWha/tRYGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgJY0IoYiScvr/TQtlyOORMTP43BavTY3//upa/+7eimbixiO/nRquloZjYhSY5xk47F6f2N86qHxHyPiaES8UDpUH5cnr1Uv5V08AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA645ExFAkaTki0ohYLaVpuZx3VgAAAEDXDeedAAAAANBz1v8AAABw8Fn/AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0GNHf33nbhIRtbOH6i1TbM7155oZ0Gtp3gkAuenLOwEgN4W8EwBy84hrfLcLcAAlO8wPdpwZ6HouAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOxfx4/duZtERO3soXrLFJtz/blmBvRa2tZPcswD2Ht9200W9i4PYO95icOTyxof2GntP7hxTO37MwM9ywkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/Weo3pK0HBHF5r5yOeInETEc/cnUdLUyGhE/jYgPS/0D2Xgs55wBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADovrmFxZmJarUym3XSaHbW9/Sg09eM3MMQvekkjbxr+yWfg90ZeHanY/4bjxmiGPui0n3ayfNdCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAvMwtLM5MVKuV2bm8MwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADyNrewODNRrVZme9jJu0YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPLzXQAAAP//jAsGRw==") renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file1\x00', 0x2) 875.475749ms ago: executing program 1 (id=3862): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f00000003c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@journal_dev={'journal_dev', 0x3d, 0x1}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@nouid32}]}, 0x1, 0x441, &(0x7f00000011c0)="$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") r3 = socket$pppoe(0x18, 0x1, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000840)={&(0x7f0000000080)='kfree\x00', r4, 0x0, 0x97a3}, 0x18) connect$pppoe(r3, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'geneve0\x00'}}, 0x1e) connect$pppoe(r3, &(0x7f0000000040)={0x18, 0x0, {0x0, @empty, 'netpci0\x00'}}, 0x1e) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bind$inet(r6, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x2, 0x1, 0xc}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000080)=ANY=[], 0xfe37, 0x0) r7 = open_tree(r2, &(0x7f0000000200)='./file2\x00', 0x900) sendmsg$ETHTOOL_MSG_WOL_GET(r7, &(0x7f0000000300)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={0x0}}, 0x48041) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x18) r9 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r8, r10, 0x25, 0x2, @void}, 0x10) bind$xdp(r7, &(0x7f0000000340)={0x2c, 0xb, r10, 0x30, r7}, 0x10) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000100)='./file2\x00') 668.994308ms ago: executing program 5 (id=3863): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01c21668f6d1d66edb251c00000018000180140002006c6f"], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x44, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xfff2, 0xf}, {}, {0x7, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_EMATCHES={0x10, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x2008c014) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000880)={'syztnl2\x00', &(0x7f0000000740)={'ip6_vti0\x00', 0x0, 0x29, 0xe, 0x81, 0xfffff045, 0x40, @private1, @private1, 0x7800, 0x80, 0x1, 0x1ff}}) r9 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e40)=@newqdisc={0x40, 0x24, 0x3fe3aa0262d8c583, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xf}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x4aa66f51}}]}, 0x40}, 0x1, 0x0, 0x0, 0xc083}, 0x2000400c) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r12, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r12, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r11, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000f80)=@newqdisc={0x48, 0x24, 0xf0b, 0x70bd2e, 0x25dfdbfc, {0x0, 0x0, 0x12, r13, {0x0, 0x4}, {0xfff1, 0xffff}, {0xfff3, 0x9}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xc}, @TCA_RATE={0x6, 0x5, {0x6, 0x10}}, @qdisc_kind_options=@q_clsact={0xb}]}, 0x48}, 0x1, 0x0, 0x0, 0x8004001}, 0x0) r14 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000000)={'xfrm0\x00', 0x0}) r16 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r16, &(0x7f0000000180)='`', 0x5dc, 0x0, &(0x7f0000000740)={0x6, 0x0, r15, 0x1, 0x0, 0x6, @random="4a99fee2084d"}, 0x14) 201.951411ms ago: executing program 0 (id=3864): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r3) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="010000000000000000000800"], 0x50}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) splice(r2, 0x0, r3, 0x0, 0xfffd, 0x0) 161.103705ms ago: executing program 0 (id=3865): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd9b, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) lsetxattr$security_selinux(&(0x7f0000000900)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000940), &(0x7f0000000980)='system_u:object_r:netutils_exec_t:s0\x00', 0xf, 0x0) 156.445026ms ago: executing program 5 (id=3866): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00"/11], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00'}, 0x10) r2 = socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x100}) 117.757459ms ago: executing program 1 (id=3867): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) arch_prctl$ARCH_GET_CPUID(0x1011) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x40) set_mempolicy(0x3, &(0x7f0000000080)=0x1ff, 0x5) set_mempolicy(0x8000, &(0x7f0000000040)=0xff, 0x8) r2 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r2, 0x0) r3 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r3, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) write$binfmt_elf64(r3, &(0x7f0000000240)=ANY=[], 0x40000) r4 = accept4$unix(r2, 0x0, 0x0, 0x0) recvfrom$unix(r4, &(0x7f0000000380)=""/236, 0xec, 0x2, 0x0, 0x0) r5 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) writev(r5, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000300)='scsi_dispatch_cmd_start\x00'}, 0x18) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000f1ffff000000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000e}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000080)='kfree\x00', r6, 0x0, 0x101}, 0x18) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x4e21, 0x2, @empty, 0x6}]}, &(0x7f0000000280)=0x10) 107.30439ms ago: executing program 0 (id=3868): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r2 = syz_open_dev$sg(&(0x7f0000000100), 0x7, 0x200) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f00000003c0)={0x6a, 0x0, 0xf8, "8d12a5e90c9d10c82784e09c2d2bc243619ae1d563f01a5737547cc0c3e8318c90d88cede259a4091ff19867b925db2769c72efe3c8f17558aaaaeaf4fcdeaf386987c12ff62a87cb016ca9db7848908414eec33b4c22c95371b01e79553d193992808236248cf9c76c2"}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) socket$kcm(0x29, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r3}}) write$P9_RVERSION(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065fffffc7f020008003950323030302e4c"], 0x41) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000000)='./file0\x00') 24.419428ms ago: executing program 3 (id=3869): syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x3000011, &(0x7f0000000100), 0x1, 0x519, &(0x7f00000009c0)="$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") prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]}) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb0100180000dd5800000000263200000018000000060000000b000000040000005d9d92f77a18414a66ac8678040000400b0000000000000000000079828812613000"], &(0x7f00000001c0)=""/5, 0x36, 0x5, 0x0, 0x1, 0x10000}, 0x28) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030097850000007b00000095"], &(0x7f0000000240)='syzkaller\x00', 0x7d0, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_buf(r2, 0x6, 0x21, &(0x7f0000000280)="dc8daf8d760c0b8caa98fa19c6a35a18", 0x10) 0s ago: executing program 2 (id=3870): r0 = socket$netlink(0x10, 0x3, 0x13) close(r0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x166) sendmsg$kcm(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000100)="150ab7f7d39d51210849686441862998ba382c5cd2952714c009ed53651f9e7bca64495672784819ddcb8ec43a3a2ca72e540fcc07b619", 0x37}, {&(0x7f0000000140)="25f096462cfe3ee51128e1cc57397b649bfa64815f752df6b84a600531dd22d659f0991f54e99f75d8ecfa1d9b", 0x2d}, {&(0x7f0000000180)="4c9e88055b73a74ff758ce86ab9490e849e255aacf2c7315e63283388836395baa2404bbbc7c418b1833ba7624edeba692cc4f674f5d8124519c9724a3deefbd080d2a5a406e7edda8bbfd671c06222f2a8092c35fdf03465fc9f6f239579f", 0x5f}, {&(0x7f0000000200)}, {&(0x7f0000000240)="134497d416f3adaddfb99dc456be3fff873d6968ea5f6046329f443216e1", 0x1e}], 0x5, &(0x7f0000000300)=[{0x60, 0x112, 0x7, "6c24a40f6e58d8a8ba468df847a592c08ad74d6268638e17b57e58b3c2760b7c47b1114c36a262fe6c113f35cc95b7f6ef3fdb4748ebf1d5a3ff972b3db067210be0e0f92eec1e57838a87bf61b267"}, {0x28, 0x113, 0xffff0001, "a58dec7bcb4a39b0a0a665db7f51747b50eb"}, {0x60, 0x101, 0x0, "21347d60b022bfd65a32262a1d0e4aec2aae1d5920b575e0dea319e4c62513fedc827e22ee207a500c44aba307470f650259b7227326d909ed33545a6aecccc1f1341b7f96473cf88f5fbe"}], 0xe8}, 0x90) (async) r2 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) (async) ioctl$TIOCMSET(r1, 0x5418, &(0x7f00000004c0)=0x6) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r2, 0x6612) (async) unshare(0x40000) unshare(0x30800) (async) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000540), r0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r1, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r3, 0xd20, 0x70bd25, 0x25dfdbfc, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1000}, 0x40090) (async) ioctl$FIOCLEX(r1, 0x5451) (async) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000640), 0x80100, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r4, 0x894b, &(0x7f0000000680)) (async) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r4, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x30, r3, 0x1, 0x70bd29, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x0, 0x800, 0xfffffff7, 0xa5}}}, ["", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x24000004) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000800)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000007c0), 0x106, 0xa}}, 0x20) r5 = dup2(r0, r1) fsetxattr$trusted_overlay_redirect(r5, &(0x7f0000000840), &(0x7f0000000880)='./file0\x00', 0x8, 0x1) sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x10, 0x3e8, 0x8, 0x70bd27, 0x25dfdbfe, "", ["", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40000}, 0x4000804) (async) ftruncate(0xffffffffffffffff, 0x1) sendmsg(r0, &(0x7f0000001d00)={&(0x7f00000009c0)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0x80, &(0x7f0000001bc0)=[{&(0x7f0000000a40)="4f5f832165b27e10bd1924ddafd48a4a4c2d45ca82d44d5583d82c4c02dac5bb00bcbd428128363f64a8d9342f06663ff49f5f8c680c1f12e67ffe5c98c1018e2826803957cef1cb42e03cc5e9a99bf9546ade571ace74c7e08b2ee2b0040a4f6e9748077c545ffe83160759321f041d9d7225a1d25a05f4ea1a66c2308c2326e90857a2c0e76bb7dbeca73b54a2bc7d28f59a19d0e96644246e88e95a7c81294c768f210c5c3e2624d7b73f051190d2f8b38b1d7ed93be7be5b60ce0102d5035e07be090066e82af3d7ff9488696bf03b2b26c9e9f6152ff3deb8979458fd965a185ebc88", 0xe5}, {&(0x7f0000000b40)="6b58d05c97624f4319c4ac141936a77950192be4d50b5ec4b7aa420b0fa339c318d31be905a13b9ec55c30e56ac09110480effc06dc0c9025300472f8a7d63a0f71785f2c790c8135695291014cd8c8ff8950d11bd93e901106888a46f6d184439a4cdd4b9024617d999ec8b528c0cb97ba53f24c67ea7cef3dbbd889b24301976ccdde6e894ab94e685fb63f3cf8d5abb5e25594a9136006346130cace763027424c408496ea806fa7e58df842527f23c7e6329fd430af40725a57bc2d6d7be57868846b7b25bb9b3db48fa7da7d3cd88213ba990c05c0be1bbe4f10c260ee43530862cba775a48909da3f0076658d5735a28e0ab48e319f90a774529b74f8e9dedd013ea4242fcfc8f072114099f513a60c5c59cdb2994c8289e98077c7ac9478b43ba2c4b105d6fd7894ddb06236e8e7654a86a44cb5aa4b6b537ea1519ddb4be95b3f2b5c7adb937faa9053b4d97f331d77068a93fc242d124c44f057073723886d3fbae7817a2af0fc45fe7801e961874c13802e896775dba523dd09cc9d3a083eff950c9f3fb39a6405ce87ab3f1a219e0c0ad4fac50a3c87d8b290ef10395925460b0d02a9fc2d27c19cbf94a8272815dca4bfdd02c7bb7b0ae75f16ad278444cd2993d5f5fe67dbf4a379eb74a8669384bc102c951fce2c44edda657e4907a6ec994defa7d075cb74b121bf9fe9cf2b6b9dd9e4351e73f64d7721e34c21a967d8368c60b0f9324482f8ffc74fd26d72b8f6c6c8f738bb1137e532fc429f29fcad72dae224754451d7242643925a85a45bc024f6f642ee18ab3c33116468e0bdc12d6350686ca7f9e2eff450dbb6c562a0bf04b22c518f383247b94b8f0c38d6ed2b7ed5986eee63dfbf77ec18d9e1d5cde597230c2e5bb1e6799ab99f1b102796273a0adf2a7432413cfe0e4d8d261f1afc2531df3426930bdc08971cb7795e07088c1a6427ab4dc4a18b8068710a650e849b2e093286742e9311033ee50473b601062d76a1906093dbb2f6c10129d0acb7967303a1c6f19e47a501584286c51cdf756e84f4c5fd594db3761b509e9c4ffff9441409114099eaf158f1ec3a53c2561e499c1aac7c48aff655ab2254493c08e5cce31b40fe61e074e54fa856c8eddea261f6abb852fbb5220b8e5659b2f8b333890dd2c46524380269a69abd514bd164adf0c081fe8f10c99a5706e6eb725f5ef2e10fd10a9567e8ee2fb8c7f406d4eec48b1cd39088cc3cdce19b5892a4afc4bb5812586edb976c1c54cd05849a8eeb6e2074c3396258a073a0f455a6dbe2ecd4564a7df2d3a2cac94a36e8553a677700d54eeec6e6b0b577da3a2e7fd8ab04b0377663f04e1bb8c2b3f0ee3a1fe60615490a2ecc72a6a4fa64c62117f3e48a6d934246b44dad985020d9302975b946d636ae15dcb025e2e42b89d082cff1da3a78c17caebfea2cc3af7485e4975d0293404130d2dd598f99702a0216f8822321014795a753a7b6a38d3f772172cfeedbcb5af74591dbdbf98da63beb750e0b4771c4c80d30c61a9054860d364c4692eb6973ae392645e7a25365b628ef25b599cc74c6cf75b0f405cc006ebf21fec01fec235463f3953f28b09d2b70facd9dd60d363e0b85bbc87f6c0b8806157f81e930ac742f8301eafe66ea616154bf75d1b10e8d7e65a57a04dc81a226c43f4355410e4460e2d7f396801fa999144f29a3625487210eaffc447413011b9b57709d1f15ea33afb607c19c95c6ac2fb7191243a4bc05460d50340584fdc73f3dff6988177497f14bbbe5dd56e84b159aeb261a5d3111a8c8bd0f9b94d7e79b5c0c3e62141f31504b6a9544b9e98469327b1bc5c6b55f75fe6cce7e74adb817febf99c2a1b83973169e87a4a71013d91932e28d824c958d36ed243c047b58caea6c903c47c2114af44c35e0f3125d36458aa6e48ab43824279ed98e9db9887efd6f41b468e10f7f6c069f382049aac807cba33b2d11b654787a7ed11766095fad2f8481b59929b0a7c746d5c5ce70b958f89fbbf5019857957b8189243bbd32b96d66a232fd0c8f2f4fc11bc37d2486233234651218d9d8cbb6235f4813a06df313a4c035e51fed3b7ceddfdcb5b5cb5012d8bf7784c5db1bc25c8ea21a612b0b15398716de1e6de68101386b3bc9ba2c1245a4061a483abc05062cc5bc22b29cabb065092417c26e409739ca04a092900c43b4d6045d5d090e1e8622f4096a7f57c415e49328062ae8c184af8ca1aca25c52ec1965f5d71b66cf50d4c085dd2fef6990935f0cbb701b08ae0c974b4a9524e551b8e681fb67c7fbaa76d7b9aa48d8dae8256d9191b3c10f0380a4a20aa22e70895a1044b7260f83debf41bc6aa6e3870e3272b392206208251cf2db175ae4915949b2d9efdb382bdce30c1ab74c3462035a3e27ee4f37cee74f4d1ae2e85329db690262bd73350bd17a729f1346431e67b9861c6f07f466b07ab90e7dfbd910eafe417adbb5bae8f957e2cb255d494385239707c7b60a2946f0036f2090ecc648148543c3d7fb6d82ea9200090d715353e866fd203e528515d65ed061ec300e14fc2a22b7cea2b4ba4ae5a008133d2b599f09b41354ca9ab45cdf13b073819b78c1f9d935565efe567276cbdf9c0be46a50b1573183013426492fe620c84609c6d1a507c5787fb6ad75e422a756c396f970fa36cd65fd0ca593fb40fc2554aea1ad84d38ffe724f83a148bca0ba4bf1124183935b45bdb43aeed32ad5ad9961194ac7fffa8f549e0c9065bdc583eb20e92b6afdce3c01291eef30325041f328ecc792625f7d18c65ca0d7bc18422a1792cc7871dec4127d3c1b254aa6eef97e4b796fda84d976c57e268418abad805ac674180212a30c90aeb7d89c142decf54886cbfe9d4337934d72bd36289e078ef93511047303990720f00f18233b31d6756cb24fb8d661a1dd2976ccd3859100440a1c076e34ac82916000a1001aebec92ee54e4cfd5b1594ccecdfa2ec5bd18a256e057cfb6579769824c30e7f1e1afea74a8fc1346893df9d27be282cc88bb02eaf97766060fb970a22686c2a39a786cfdce474fcb84833fa99d65b043f97a9334d58afe78cff6ef0042e55f0d0d280a78376abeb2150e88fb74a04ab5173a0478477360158802aaa3ebb042fa694ce9cfad66659627bb9fe6a8ea8b392ceb4e4a592416108c2c570152d26e36c2b361a3112f97ee47f12c8dd79ff18a75f7a0be2d01fae6d1abd270f1ab63904ee9a4795df7ed4aced973aad29fe8588ff05f76beaa3dd5122ed28a8d902e8bc7d2f80ba7de87a81f6a81a39f226e7659998ffb792147bd4d222c8637f4b8ac967bfe9574e7cd191da5da743b25fe496e710039f62c9aca0ef859403dee9b0b8bf52d379aa42fbb23ea71fb82453e594535985171c92a75dbaf0458a2edcec2da9da72d1db14618caca0456423e99ffdef40776b1d1ac1a6638d00ebd5de941df623c8d0e1ad15d77167965dc22816af17778bbdf78edbff63b57b8e1956880ceee0bb9701cebefcc25889ec68307168152bdd4067acc5292dd5f8b27951fdfe7ce88c32de92288500fcd9fbe039caa27d4f4f5366c75459272dfffa8ad3d8afb8f3278be17815f74ee3c483ec72f5eb128051f771c23ee73ddc8b3ed22e1eb716cb7e1d90e27569b7edfaa4695e248a35aaf707d8692aa154b85a6fe461157e4a512ffc5fdface72bb48b09ee39249075cf00697878ac9b9cc5db3105f43eb4ea6f7cc38837fd26d4c6b0686667c929a853a3e4c0da7c8c244ea8113b580703fba925aa13aaf8c27a8c88b1586635fc31e97b3347be5e29b6c2a0507424975dc71d26c5b71b75d73a3079df8dc13965a81b92ce4cdc138f4d098b5a6c414630aebfc21b7e2cf76fdf01dc39b6451e13bc1d8f530e622fba94cd7bf159936a18efe508c2b464650e5c276ecf0e7d9094a7af36e4e2c51e28f4f1000851d00a9c2325d3c5ff52e8a542b7e449ff36254c50ff789ec2e2d19521f8227f881c1889baae7b275dca25baa03c4719e686c0ec6cfb71115ff2eb372e270328ca4dca50c050db0901574da9b41d96d36efd0875f95634ff1c0d4dc6a553c4a5c0273d122bbd64e0e74d249a33d67304308a7c3db9e2db676766882013fd6f8a6a4f244659280e21cd3b5b73343e879b3822bea19bfb60b7be8e7ecae443f007fde32f9cbb1a40caaf195038875d0653b059bb7e6dcbbc898f64bb655ccf3458c83e7af9b77c953d11488e51376dc2b0ae52d5998a34d6dead258ab160258b0a15a272c8ee2eee6a6770efdb5bda329edaf8905a59675026dc750ac89c5d1243ada29b87b870801792f89d8f8f8a4fc330677f2214afe3cb53db524b5abe46fea08742142c0b97796d80df93edaae58ab0f9852eb597efe2d423f4528f99efc06be4843cd5f82d50a48777ec340822e36295f048a010a442d056b175d7b31821a747adc06921e1167731059caa69d6b017b5134f937cb4d6a326346277be1446334e42930938006c49dcd03f0e0ea2d9e88fd959f15030e68af7ddb02c8fad6cfc4ea108f3caf8c0976b75a97f6f4dde412174a56bbc84b8435cb4ecfe628f0b47ee0da6eeea8e45c08d8a902c0d379ac09267234c5b6055178ed4b3a0df7ffd08b655d143afdee989a6e7043ee8d7e4704b9fa4b16a623529c599a59efb2aa7c372555878802d0841524c45f9153ca005e70844a34b3fcdf4a687eb991be5bb0477982de1d7ca61f84b4a314c37f7fc43bf9bff31bc5ea6db9c3b7361689c3e1d1b117414bd59a3473931517afe68fd3efb792cec0bdd0f16c2b06bdd351174b36d31136d74d5a394b9fcf32cbcfd1758cd93fdc0e1bfa3f948c72795cce85ecd303fcdfe0fa312a0c8e1d49ebed8fbccf33bae8e7b4a5f5e3514fe6611376d27b2df9aaacc59323ed8a191cec3631c6904c39b5f28ca14cde4321afc43150d067f349f63d09c6c0668f7e7c27167bf95c42cc688ca51f6ac49ae9e8d9b97a1e9e4d8c14b5b7d2d91730109f2287bb720c658f1cda3679d780771cc482ef0d4c7a0e85abff134124e79fe2002a44fda007ef1c2233509bc6dfcb7a9142d6e05de7fe0c0c03888501683f8be585bcb930dd9102261b8b6788782fdaa56d8410d9fb687892e1f27c616ca77964d93077637ae756bdc65e436195102cdae8d4215a0da83319d6d227007b3523ff62cf842db338f46c2513f297ee60557b173ba9d9f9be1c009575b2c24d8dcb5d27a579958525ff465edf17835951b716e8e7f43df513010a7bccbeee7d621480789f4990217fa80aa4e0e2a88ef4e7844e7e40b6316c52cbc403e4146d381dd83d3f42cc319cec81b18a640933aca6fa6d7b89a0dd75835ff88379bd27c89bcad30757f30c33eca117c4207256e242e99a0947705c1cf4cbbc564fe08edb0f03c950d31f63b45541643aa786f0365fd8392af97c90d24e0adb27aca4af78ce3b64bc72e9746a22d1b218ea0deea36989ed859d34a62ab53d240a23f1e6f873b932ebdb1593e5b38f39055508cb06f1692783acae88c07edeb096d25886697fbe3eb2d47fca91f277cdc3b17168f9eec5bdbe8fcb97361711d8db33874c818528ea970fe5d3a9a137c67fd36c95f4c3e1e6eb975b46ac774b2bf9139b266e79670d68cbd3f587d1d1b84cbe1b19741ff7e19fda807342a68f47ff1a3e484e27b3541ff3cd9f613850e7be4378a0efa16aa6c32c15d02e7cdd7bf2a4709740f692d7ed2848e4985e7b049e796d0e77befcde49d9c32105de8966bae80e0c6fff3f1fd", 0x1000}, {&(0x7f0000001b40)="c95d2e7485d932e33b08ad3351a313b02bdaa924b3b0b1e066ea286fea51455bf5d4adaafea82714f8961a7f4eecb1137007ee88984f2014e0f428c01990799aa25378f73add1a46903bcf6a8402845141991a2a28a2a3c98ad172bae1523b48d94f2b22f5c6da22400fab2851f10bc7dd69df60052d519a0e4df6", 0x7b}], 0x3, &(0x7f0000001c00)=[{0xc8, 0xf, 0x1, "0fb5e4c4c832a32e140140f599d125e4f02329d5a3d996f5ab8ab4339623b2ec2d98c28a1a8b3ef4d39404d7372c765bd9dc977aedb934a8708ae9db94eef0df9ed7bab61cdd69a8091067c3cc9001068a13bdf74cbbc9385fdc24e67df7adc1b2d5be592da37b38cf6cf1308279c27e9fb32c900837a495376f2e3f43dad508201440f6196fb2c7200564188c81287d662c7ff3f6c1caf343ecaad591ff27855f1cb42bd335e29a7ba39db4434bf4ce1d75523a186bca"}], 0xc8}, 0x800) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001d80)={0x5, &(0x7f0000001d40)=[{0x3ff, 0x3, 0x4, 0x6}, {0x8, 0x3, 0xf9, 0x2}, {0x9, 0xf9, 0x8, 0x8}, {0x8, 0x9, 0x27, 0xfffffffe}, {0x1ff, 0x0, 0x8, 0x9}]}) bind$tipc(r5, &(0x7f0000001dc0)=@id={0x1e, 0x3, 0x0, {0x4e21, 0x2}}, 0x10) (async) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r4, 0xc04c5349, &(0x7f0000001e00)={0x1, 0x2, 0x5}) (async) ioctl$TIOCGSERIAL(r5, 0x541e, &(0x7f0000001f80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001e80)=""/198}) readv(r5, &(0x7f0000003140)=[{&(0x7f0000002000)=""/4096, 0x1000}, {&(0x7f0000003000)=""/202, 0xca}, {&(0x7f0000003100)=""/17, 0x11}], 0x3) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000003180)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x6, '\x00', 0x0, r1, 0x1, 0x0, 0x2}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000003500)=@bloom_filter={0x1e, 0x0, 0x2, 0x0, 0xb00, r6, 0x1000, '\x00', 0x0, r1, 0x1, 0x1, 0x2, 0x7}, 0x50) kernel console output (not intermixed with test programs): ncrypted files will use data=ordered instead of data journaling mode [ 334.707538][T14188] EXT4-fs (loop0): 1 truncate cleaned up [ 334.713925][T14188] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 334.759264][T12481] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 334.894642][T14196] loop0: detected capacity change from 0 to 128 [ 335.353637][T14210] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 335.353893][T14209] IPVS: stopping master sync thread 14210 ... [ 335.659412][T11363] bio_check_eod: 188 callbacks suppressed [ 335.659432][T11363] kworker/u8:36: attempt to access beyond end of device [ 335.659432][T11363] loop0: rw=1, sector=145, nr_sectors = 216 limit=128 [ 335.679577][T11363] kworker/u8:36: attempt to access beyond end of device [ 335.679577][T11363] loop0: rw=1, sector=369, nr_sectors = 8 limit=128 [ 335.693710][T11363] kworker/u8:36: attempt to access beyond end of device [ 335.693710][T11363] loop0: rw=1, sector=385, nr_sectors = 8 limit=128 [ 335.707760][T11363] kworker/u8:36: attempt to access beyond end of device [ 335.707760][T11363] loop0: rw=1, sector=401, nr_sectors = 8 limit=128 [ 335.722190][T11363] kworker/u8:36: attempt to access beyond end of device [ 335.722190][T11363] loop0: rw=1, sector=417, nr_sectors = 8 limit=128 [ 335.736067][T11363] kworker/u8:36: attempt to access beyond end of device [ 335.736067][T11363] loop0: rw=1, sector=433, nr_sectors = 8 limit=128 [ 335.751274][T11363] kworker/u8:36: attempt to access beyond end of device [ 335.751274][T11363] loop0: rw=1, sector=449, nr_sectors = 8 limit=128 [ 335.765491][T11363] kworker/u8:36: attempt to access beyond end of device [ 335.765491][T11363] loop0: rw=1, sector=465, nr_sectors = 8 limit=128 [ 335.787592][T11363] kworker/u8:36: attempt to access beyond end of device [ 335.787592][T11363] loop0: rw=1, sector=481, nr_sectors = 8 limit=128 [ 335.803990][T11363] kworker/u8:36: attempt to access beyond end of device [ 335.803990][T11363] loop0: rw=1, sector=497, nr_sectors = 8 limit=128 [ 335.839643][T14220] loop2: detected capacity change from 0 to 512 [ 335.862295][T14220] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 335.915420][T14220] ext4 filesystem being mounted at /21/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 336.017842][T14229] loop1: detected capacity change from 0 to 512 [ 336.025787][T14229] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 336.045725][T14229] EXT4-fs (loop1): 1 truncate cleaned up [ 336.052072][T14229] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 336.075803][T14227] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #19: comm syz.2.3188: corrupted inode contents [ 336.088338][T14227] EXT4-fs error (device loop2): ext4_dirty_inode:6502: inode #19: comm syz.2.3188: mark_inode_dirty error [ 336.103640][T14227] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #19: comm syz.2.3188: corrupted inode contents [ 336.119235][T14226] loop0: detected capacity change from 0 to 8192 [ 336.126206][T14227] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3000: inode #19: comm syz.2.3188: mark_inode_dirty error [ 336.143346][T12972] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 336.153226][T14227] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3003: inode #19: comm syz.2.3188: mark inode dirty (error -117) [ 336.167164][T14227] EXT4-fs warning (device loop2): ext4_evict_inode:273: xattr delete (err -117) [ 336.182799][T14236] loop1: detected capacity change from 0 to 128 [ 336.240433][T13596] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 336.252567][T14239] loop0: detected capacity change from 0 to 128 [ 336.385237][T14251] loop3: detected capacity change from 0 to 512 [ 336.410352][T14253] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3197'. [ 336.419946][T14251] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 336.558989][ T29] kauditd_printk_skb: 648 callbacks suppressed [ 336.559012][ T29] audit: type=1326 audit(1766892066.199:14303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14235 comm="syz.1.3191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7fdd812ef749 code=0x7ffc0000 [ 336.562110][ T29] audit: type=1326 audit(1766892066.309:14304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14235 comm="syz.1.3191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7fdd812ef749 code=0x7ffc0000 [ 336.570444][T14251] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 336.570595][T14251] ext4 filesystem being mounted at /4/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 336.601128][ T29] audit: type=1326 audit(1766892066.339:14305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14235 comm="syz.1.3191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7fdd812ef749 code=0x7ffc0000 [ 336.675877][ T29] audit: type=1326 audit(1766892066.409:14306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14235 comm="syz.1.3191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7fdd812ef749 code=0x7ffc0000 [ 336.675911][ T29] audit: type=1400 audit(1766892066.419:14307): avc: denied { write } for pid=14250 comm="syz.3.3196" path="/4/bus/bus" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 336.675977][ T29] audit: type=1400 audit(1766892066.419:14308): avc: denied { append } for pid=14250 comm="syz.3.3196" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 336.676064][ T29] audit: type=1326 audit(1766892066.419:14309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14235 comm="syz.1.3191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7fdd812ef749 code=0x7ffc0000 [ 336.685675][ T29] audit: type=1326 audit(1766892066.429:14310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14235 comm="syz.1.3191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7fdd812ef749 code=0x7ffc0000 [ 336.715689][ T29] audit: type=1326 audit(1766892066.459:14311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14235 comm="syz.1.3191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7fdd812ef749 code=0x7ffc0000 [ 336.762438][ T29] audit: type=1326 audit(1766892066.489:14312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14235 comm="syz.1.3191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7fdd812ef749 code=0x7ffc0000 [ 337.050272][T13827] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 337.186531][T14267] IPVS: stopping master sync thread 14266 ... [ 337.373143][T14269] loop1: detected capacity change from 0 to 512 [ 337.424381][T14269] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 337.424850][T14269] ext4 filesystem being mounted at /67/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 337.640809][T12972] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 337.703296][T14274] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 337.703519][T14274] ext4 filesystem being mounted at /292/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 337.805272][ T8813] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 338.050592][T14296] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 338.081955][T14302] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 338.170139][T14296] EXT4-fs (loop2): 1 truncate cleaned up [ 338.176605][T14296] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 338.192585][T14302] EXT4-fs (loop5): 1 truncate cleaned up [ 338.199889][T14302] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 338.258507][T13596] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 338.289605][ T8813] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 338.409027][T14310] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 338.420108][T14308] IPVS: stopping master sync thread 14310 ... [ 338.440605][T14311] random: crng reseeded on system resumption [ 338.510643][T14315] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 338.518845][T14315] EXT4-fs (loop5): orphan cleanup on readonly fs [ 338.525710][T14315] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.3217: Failed to acquire dquot type 1 [ 338.537512][T14315] EXT4-fs (loop5): Remounting filesystem read-only [ 338.544174][T14315] EXT4-fs (loop5): 1 truncate cleaned up [ 338.550854][T14315] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 338.896554][T14322] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 338.915648][T14331] macsec0: entered promiscuous mode [ 338.921332][T14331] macsec0: entered allmulticast mode [ 338.926745][T14331] veth1_macvtap: entered allmulticast mode [ 338.999328][T14322] ext4 filesystem being mounted at /6/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 339.549993][T14348] set_capacity_and_notify: 8 callbacks suppressed [ 339.550008][T14348] loop3: detected capacity change from 0 to 512 [ 339.571155][T14350] 9p: Bad value for 'rfdno' [ 339.599612][T14348] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 339.604359][T14345] syzkaller0: entered promiscuous mode [ 339.613661][T14345] syzkaller0: entered allmulticast mode [ 339.637962][T14354] loop5: detected capacity change from 0 to 128 [ 339.683420][T14348] ext4 filesystem being mounted at /10/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 339.740751][T14363] loop2: detected capacity change from 0 to 128 [ 339.847711][T14369] loop1: detected capacity change from 0 to 512 [ 339.907543][T14369] ext4 filesystem being mounted at /74/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 339.940415][T14376] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.974134][T14378] loop3: detected capacity change from 0 to 512 [ 340.003361][T14378] ext4 filesystem being mounted at /12/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 340.014389][T14376] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.070895][T14376] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.084353][T14388] loop3: detected capacity change from 0 to 512 [ 340.100097][T14388] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 340.108279][T14388] EXT4-fs (loop3): orphan cleanup on readonly fs [ 340.115366][T14388] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.3238: Failed to acquire dquot type 1 [ 340.126998][T14388] EXT4-fs (loop3): Remounting filesystem read-only [ 340.133634][T14388] EXT4-fs (loop3): 1 truncate cleaned up [ 340.136020][T14376] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.154973][T14382] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #19: comm syz.1.3234: corrupted inode contents [ 340.207629][T14382] EXT4-fs error (device loop1): ext4_dirty_inode:6502: inode #19: comm syz.1.3234: mark_inode_dirty error [ 340.279367][T11383] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.291366][T14382] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #19: comm syz.1.3234: corrupted inode contents [ 340.309026][T11383] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.327127][ T2698] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.332140][T14382] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3000: inode #19: comm syz.1.3234: mark_inode_dirty error [ 340.348841][ T2698] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.373338][T14382] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3003: inode #19: comm syz.1.3234: mark inode dirty (error -117) [ 340.391264][T14382] EXT4-fs warning (device loop1): ext4_evict_inode:273: xattr delete (err -117) [ 340.451230][T14394] loop0: detected capacity change from 0 to 512 [ 340.467218][T14394] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 340.488457][T14394] EXT4-fs (loop0): 1 truncate cleaned up [ 340.509936][T14397] loop1: detected capacity change from 0 to 512 [ 340.556080][T14397] ext4 filesystem being mounted at /75/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 340.907382][T14414] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 340.919494][T14413] IPVS: stopping master sync thread 14414 ... [ 341.145797][T14416] syzkaller0: entered promiscuous mode [ 341.151460][T14416] syzkaller0: entered allmulticast mode [ 341.276973][T14424] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 341.291006][T14424] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3248'. [ 341.300167][T14424] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3248'. [ 341.310050][T14424] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3248'. [ 341.329048][T14424] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 341.336534][T14424] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 341.344673][T14424] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 341.352368][T14424] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 341.374349][T14428] loop3: detected capacity change from 0 to 128 [ 341.522255][T14433] loop5: detected capacity change from 0 to 128 [ 341.569113][ T29] kauditd_printk_skb: 232 callbacks suppressed [ 341.569133][ T29] audit: type=1326 audit(1766892071.309:14541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14434 comm="syz.1.3253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd812ef749 code=0x7ffc0000 [ 341.600628][ T29] audit: type=1326 audit(1766892071.349:14542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14434 comm="syz.1.3253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd812ef749 code=0x7ffc0000 [ 341.624508][ T29] audit: type=1326 audit(1766892071.349:14543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14434 comm="syz.1.3253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd812ef749 code=0x7ffc0000 [ 341.648187][ T29] audit: type=1326 audit(1766892071.349:14544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14434 comm="syz.1.3253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7fdd812ef749 code=0x7ffc0000 [ 341.827805][T14440] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 341.850652][ T29] audit: type=1400 audit(1766892071.419:14545): avc: denied { mounton } for pid=14434 comm="syz.1.3253" path="/79/file0/bus" dev="loop1" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=file permissive=1 [ 341.972242][T14440] ext4 filesystem being mounted at /90/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 342.025882][ T29] audit: type=1400 audit(1766892071.719:14546): avc: denied { mount } for pid=14439 comm="syz.0.3254" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 342.048015][ T29] audit: type=1400 audit(1766892071.749:14547): avc: denied { create } for pid=14439 comm="syz.0.3254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 342.067924][ T29] audit: type=1400 audit(1766892071.749:14548): avc: denied { ioctl } for pid=14439 comm="syz.0.3254" path="socket:[46470]" dev="sockfs" ino=46470 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 342.093095][ T29] audit: type=1400 audit(1766892071.749:14549): avc: denied { add_name } for pid=14439 comm="syz.0.3254" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 342.114683][ T29] audit: type=1400 audit(1766892071.749:14550): avc: denied { create } for pid=14439 comm="syz.0.3254" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 342.398807][T14449] syzkaller0: entered promiscuous mode [ 342.404452][T14449] syzkaller0: entered allmulticast mode [ 342.646641][T14457] 9p: Bad value for 'rfdno' [ 342.762502][T14458] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 342.885151][T14458] ext4 filesystem being mounted at /93/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 343.560580][T14482] random: crng reseeded on system resumption [ 343.609210][T14483] ext4 filesystem being mounted at /301/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 343.759257][T14487] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 343.803851][T14487] EXT4-fs (loop3): 1 truncate cleaned up [ 343.984927][T14494] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 344.001275][T14494] ext4 filesystem being mounted at /19/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 344.816888][T14517] macsec0: entered promiscuous mode [ 344.816971][T14517] macsec0: entered allmulticast mode [ 344.816991][T14517] veth1_macvtap: entered allmulticast mode [ 344.977128][T14522] set_capacity_and_notify: 9 callbacks suppressed [ 344.977152][T14522] loop3: detected capacity change from 0 to 512 [ 345.001496][T14522] ext4 filesystem being mounted at /22/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 345.443822][T14543] IPVS: stopping master sync thread 14544 ... [ 345.564915][T14546] loop0: detected capacity change from 0 to 512 [ 345.611528][T14546] ext4 filesystem being mounted at /95/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 345.683953][T14548] syzkaller0: entered promiscuous mode [ 345.689618][T14548] syzkaller0: entered allmulticast mode [ 345.894336][T14558] loop2: detected capacity change from 0 to 512 [ 345.908828][T14560] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 345.918028][T14558] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 345.972972][T14558] ext4 filesystem being mounted at /43/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 345.999256][T14566] loop1: detected capacity change from 0 to 512 [ 346.011041][T14568] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3290'. [ 346.020133][T14568] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3290'. [ 346.050547][T14566] ext4 filesystem being mounted at /84/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 346.071472][T14560] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3290'. [ 346.227650][T14581] loop0: detected capacity change from 0 to 8192 [ 346.250792][T14585] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 346.265607][T14586] loop2: detected capacity change from 0 to 512 [ 346.280138][T14585] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3297'. [ 346.289243][T14585] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3297'. [ 346.299404][T14590] loop5: detected capacity change from 0 to 128 [ 346.312996][T14586] ext4 filesystem being mounted at /45/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 346.335495][T14585] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3297'. [ 346.364681][T14585] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 346.372235][T14585] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 346.382795][T14585] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 346.390327][T14585] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 346.582819][T14602] loop3: detected capacity change from 0 to 512 [ 346.777273][ T29] kauditd_printk_skb: 556 callbacks suppressed [ 346.777302][ T29] audit: type=1400 audit(1766892076.519:15107): avc: denied { write } for pid=14595 comm="syz.1.3305" name="001" dev="devtmpfs" ino=150 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 346.817882][T14597] IPVS: stopping master sync thread 14607 ... [ 346.842773][ T29] audit: type=1400 audit(1766892076.559:15108): avc: denied { create } for pid=14595 comm="syz.1.3305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 346.862689][ T29] audit: type=1400 audit(1766892076.559:15109): avc: denied { setopt } for pid=14595 comm="syz.1.3305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 346.886743][T14602] ext4 filesystem being mounted at /26/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 346.999012][ T29] audit: type=1400 audit(1766892076.649:15110): avc: denied { setattr } for pid=14601 comm="syz.3.3306" path="/26/bus/file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 347.024239][ T29] audit: type=1326 audit(1766892076.769:15111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14609 comm="syz.2.3307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cbdeef749 code=0x7ffc0000 [ 347.098964][ T29] audit: type=1326 audit(1766892076.809:15112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14609 comm="syz.2.3307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cbdeef749 code=0x7ffc0000 [ 347.122845][ T29] audit: type=1326 audit(1766892076.809:15113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14609 comm="syz.2.3307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7cbdeef749 code=0x7ffc0000 [ 347.146521][ T29] audit: type=1326 audit(1766892076.809:15114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14609 comm="syz.2.3307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cbdeef749 code=0x7ffc0000 [ 347.170316][ T29] audit: type=1326 audit(1766892076.809:15115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14609 comm="syz.2.3307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cbdeef749 code=0x7ffc0000 [ 347.194349][ T29] audit: type=1326 audit(1766892076.809:15116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14609 comm="syz.2.3307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7cbdeef749 code=0x7ffc0000 [ 347.382781][T13827] EXT4-fs unmount: 35 callbacks suppressed [ 347.382902][T13827] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 347.483369][T14626] loop3: detected capacity change from 0 to 512 [ 347.502978][T14626] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 347.522310][T14626] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 347.556020][T14626] ext4 filesystem being mounted at /28/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 347.574152][T14632] loop5: detected capacity change from 0 to 128 [ 347.684453][T13827] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 347.841994][T14648] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 347.916394][T14648] ext4 filesystem being mounted at /30/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 347.934972][T14652] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 347.947151][T14652] EXT4-fs (loop0): 1 truncate cleaned up [ 347.954470][T14652] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 348.040565][T12481] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 348.057419][T13827] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 348.118622][T14662] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 348.225035][T14662] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 348.279248][T14662] ext4 filesystem being mounted at /31/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 348.493717][T13827] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 348.571593][T14675] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 348.579927][T14675] EXT4-fs (loop3): orphan cleanup on readonly fs [ 348.587752][T14675] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.3328: Failed to acquire dquot type 1 [ 348.602416][T14675] EXT4-fs (loop3): Remounting filesystem read-only [ 348.609212][T14675] EXT4-fs (loop3): 1 truncate cleaned up [ 348.615870][T14675] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 348.963834][T14689] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 349.195189][T14686] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3331'. [ 349.204423][T14686] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3331'. [ 349.370294][T14686] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3331'. [ 349.557982][T13827] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 349.657323][T14708] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 349.703193][T14708] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 349.716480][T14708] ext4 filesystem being mounted at /34/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 349.757675][T14717] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 349.782166][T13827] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 349.793551][T14717] EXT4-fs (loop2): 1 truncate cleaned up [ 349.819523][T14717] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 349.851834][T14721] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 349.879956][T14721] EXT4-fs (loop3): 1 truncate cleaned up [ 349.892770][T14721] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 349.927594][T13596] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 349.932115][T13827] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 349.992370][T14727] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 350.005229][T14727] ext4 filesystem being mounted at /49/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 350.048826][T14735] set_capacity_and_notify: 13 callbacks suppressed [ 350.048869][T14735] loop3: detected capacity change from 0 to 512 [ 350.081203][T14735] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 350.094159][T14735] ext4 filesystem being mounted at /38/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 350.124840][T13827] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 350.152145][T14740] loop3: detected capacity change from 0 to 512 [ 350.170959][T14740] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 350.184520][T14740] ext4 filesystem being mounted at /39/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 350.253312][T13596] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 350.383037][T14752] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #19: comm syz.3.3347: corrupted inode contents [ 350.402814][T14752] EXT4-fs error (device loop3): ext4_dirty_inode:6502: inode #19: comm syz.3.3347: mark_inode_dirty error [ 350.466911][T14752] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #19: comm syz.3.3347: corrupted inode contents [ 350.531546][T14752] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3000: inode #19: comm syz.3.3347: mark_inode_dirty error [ 350.548706][T11403] bio_check_eod: 162 callbacks suppressed [ 350.548726][T11403] kworker/u8:67: attempt to access beyond end of device [ 350.548726][T11403] loop1: rw=1, sector=145, nr_sectors = 216 limit=128 [ 350.553930][T14752] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3003: inode #19: comm syz.3.3347: mark inode dirty (error -117) [ 350.555982][T11403] kworker/u8:67: attempt to access beyond end of device [ 350.555982][T11403] loop1: rw=1, sector=369, nr_sectors = 8 limit=128 [ 350.572489][T14752] EXT4-fs warning (device loop3): ext4_evict_inode:273: xattr delete (err -117) [ 350.605276][T11403] kworker/u8:67: attempt to access beyond end of device [ 350.605276][T11403] loop1: rw=1, sector=385, nr_sectors = 8 limit=128 [ 350.619557][T11403] kworker/u8:67: attempt to access beyond end of device [ 350.619557][T11403] loop1: rw=1, sector=401, nr_sectors = 8 limit=128 [ 350.653750][T11403] kworker/u8:67: attempt to access beyond end of device [ 350.653750][T11403] loop1: rw=1, sector=417, nr_sectors = 8 limit=128 [ 350.667858][T11403] kworker/u8:67: attempt to access beyond end of device [ 350.667858][T11403] loop1: rw=1, sector=433, nr_sectors = 8 limit=128 [ 350.683479][T11403] kworker/u8:67: attempt to access beyond end of device [ 350.683479][T11403] loop1: rw=1, sector=449, nr_sectors = 8 limit=128 [ 350.698641][T11403] kworker/u8:67: attempt to access beyond end of device [ 350.698641][T11403] loop1: rw=1, sector=465, nr_sectors = 8 limit=128 [ 350.717535][T13827] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 350.727083][T11403] kworker/u8:67: attempt to access beyond end of device [ 350.727083][T11403] loop1: rw=1, sector=481, nr_sectors = 8 limit=128 [ 350.741109][T11403] kworker/u8:67: attempt to access beyond end of device [ 350.741109][T11403] loop1: rw=1, sector=497, nr_sectors = 8 limit=128 [ 350.780769][T14776] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 350.791871][T14775] IPVS: stopping master sync thread 14776 ... [ 350.841942][T14783] loop5: detected capacity change from 0 to 512 [ 350.867034][T14783] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 350.931663][T14783] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 350.945540][T14783] ext4 filesystem being mounted at /324/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 351.166002][ T8813] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 351.309247][T14796] IPVS: stopping master sync thread 14795 ... [ 351.431106][T14798] loop2: detected capacity change from 0 to 512 [ 351.472110][T14798] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 351.548139][T14798] ext4 filesystem being mounted at /52/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 351.642949][T13596] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 351.807869][T14807] loop1: detected capacity change from 0 to 128 [ 351.820135][T14805] loop2: detected capacity change from 0 to 512 [ 351.834996][ T29] kauditd_printk_skb: 447 callbacks suppressed [ 351.835015][ T29] audit: type=1400 audit(1766892081.579:15562): avc: denied { mount } for pid=14804 comm="syz.1.3365" name="/" dev="loop1" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 351.873982][T14805] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 351.948565][ T29] audit: type=1400 audit(1766892081.619:15563): avc: denied { name_bind } for pid=14804 comm="syz.1.3365" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 351.970739][ T29] audit: type=1400 audit(1766892081.619:15564): avc: denied { node_bind } for pid=14804 comm="syz.1.3365" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 351.970747][T14805] EXT4-fs (loop2): 1 truncate cleaned up [ 351.970779][ T29] audit: type=1326 audit(1766892081.619:15565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14804 comm="syz.1.3365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd812ef749 code=0x7ffc0000 [ 351.992868][T14805] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 351.997423][ T29] audit: type=1326 audit(1766892081.619:15566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14804 comm="syz.1.3365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fdd812ef749 code=0x7ffc0000 [ 352.056888][ T29] audit: type=1400 audit(1766892081.629:15567): avc: denied { allowed } for pid=14804 comm="syz.1.3365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 352.076803][ T29] audit: type=1400 audit(1766892081.689:15568): avc: denied { create } for pid=14804 comm="syz.1.3365" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 352.098447][ T29] audit: type=1326 audit(1766892081.689:15569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14804 comm="syz.1.3365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fdd812ef783 code=0x7ffc0000 [ 352.122164][ T29] audit: type=1400 audit(1766892081.689:15570): avc: denied { map } for pid=14804 comm="syz.1.3365" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=47533 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 352.146642][ T29] audit: type=1400 audit(1766892081.689:15571): avc: denied { read write } for pid=14804 comm="syz.1.3365" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=47533 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 352.281228][T14825] loop3: detected capacity change from 0 to 512 [ 352.300576][T14825] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 352.365075][T14825] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 352.502694][T14825] ext4 filesystem being mounted at /43/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 352.514226][T13596] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 352.892855][T14832] IPVS: stopping master sync thread 14831 ... [ 352.960621][T13827] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 353.001791][T14838] loop2: detected capacity change from 0 to 512 [ 353.021137][T14838] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 353.039268][T14838] ext4 filesystem being mounted at /54/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 353.165964][T14844] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 353.200629][T14844] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3375'. [ 353.209702][T14844] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3375'. [ 353.219416][T14844] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3375'. [ 353.240821][T14850] loop5: detected capacity change from 0 to 512 [ 353.257001][T14850] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 353.265225][T14850] EXT4-fs (loop5): orphan cleanup on readonly fs [ 353.279710][T14850] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.3376: Failed to acquire dquot type 1 [ 353.291859][T14850] EXT4-fs (loop5): Remounting filesystem read-only [ 353.295319][T13596] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 353.298449][T14850] EXT4-fs (loop5): 1 truncate cleaned up [ 353.300471][T14850] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 353.688293][T14877] loop0: detected capacity change from 0 to 512 [ 353.702426][T14877] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 353.740309][T14877] ext4 filesystem being mounted at /115/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 353.769866][T12481] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 353.822557][T14883] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 353.839659][T14880] IPVS: stopping master sync thread 14883 ... [ 353.944879][T14887] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 353.957898][T14887] ext4 filesystem being mounted at /103/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 353.970369][T14892] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 354.010383][T14892] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3389'. [ 354.019473][T14892] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3389'. [ 354.029570][T14892] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3389'. [ 354.136364][ T8813] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 354.189964][T12972] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 354.223301][T14902] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 354.260228][T14902] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 354.273374][T14902] ext4 filesystem being mounted at /104/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 354.526808][T12972] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 354.980789][T14937] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 355.012107][T14937] EXT4-fs (loop2): 1 truncate cleaned up [ 355.018469][T14937] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 355.162111][T13596] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 355.243129][T14943] set_capacity_and_notify: 5 callbacks suppressed [ 355.243149][T14943] loop0: detected capacity change from 0 to 128 [ 355.701093][T14952] loop1: detected capacity change from 0 to 512 [ 355.716419][T14952] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 355.763041][T14952] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 355.787807][T14952] ext4 filesystem being mounted at /107/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 355.993120][T12972] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 356.170501][T14973] loop5: detected capacity change from 0 to 512 [ 356.200627][T14973] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 356.491404][T14981] IPVS: stopping master sync thread 14980 ... [ 356.498611][T14973] EXT4-fs (loop5): 1 truncate cleaned up [ 356.561871][T14973] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 356.958448][ T29] kauditd_printk_skb: 448 callbacks suppressed [ 356.958490][ T29] audit: type=1400 audit(1766892086.549:16018): avc: denied { execmem } for pid=14988 comm="syz.3.3421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 357.005953][ T29] audit: type=1400 audit(1766892086.739:16019): avc: denied { remove_name } for pid=14971 comm="syz.5.3417" name="file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 357.029005][ T29] audit: type=1400 audit(1766892086.739:16020): avc: denied { rename } for pid=14971 comm="syz.5.3417" name="file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 357.051664][ T29] audit: type=1400 audit(1766892086.739:16021): avc: denied { add_name } for pid=14971 comm="syz.5.3417" name="file2" dev="loop5" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 357.074389][ T29] audit: type=1400 audit(1766892086.739:16022): avc: denied { unlink } for pid=14971 comm="syz.5.3417" name="file2" dev="loop5" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 357.097631][ T29] audit: type=1400 audit(1766892086.749:16023): avc: denied { unmount } for pid=8813 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 357.110956][ T8813] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 357.180112][T14992] loop3: detected capacity change from 0 to 128 [ 357.266643][T14995] loop0: detected capacity change from 0 to 512 [ 357.430650][T14998] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 357.701152][T15001] loop1: detected capacity change from 0 to 128 [ 357.728900][T14995] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 357.757783][ T29] audit: type=1400 audit(1766892087.189:16024): avc: denied { mounton } for pid=14994 comm="syz.0.3424" path="/127/bus" dev="tmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 357.780576][ T29] audit: type=1400 audit(1766892087.499:16025): avc: denied { mount } for pid=15002 comm="syz.3.3426" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 357.909628][T14999] IPVS: stopping master sync thread 14998 ... [ 357.933532][T14995] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 357.972421][T14995] ext4 filesystem being mounted at /127/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 357.997067][ T29] audit: type=1400 audit(1766892087.559:16026): avc: denied { watch watch_reads } for pid=15002 comm="syz.3.3426" path="/53/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 358.020500][ T29] audit: type=1400 audit(1766892087.559:16027): avc: denied { create } for pid=15002 comm="syz.3.3426" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 358.256909][T15016] loop1: detected capacity change from 0 to 512 [ 358.279110][T15016] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 358.304038][T12481] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 358.349790][T15016] EXT4-fs (loop1): 1 truncate cleaned up [ 358.393628][T15016] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 358.456418][T15022] loop5: detected capacity change from 0 to 8192 [ 358.529909][T12972] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 358.558096][T15027] loop5: detected capacity change from 0 to 512 [ 358.595749][T15027] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 358.612872][T15027] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 358.631164][T15027] ext4 filesystem being mounted at /336/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 358.827077][ T8813] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 358.859568][T15041] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 358.870674][T15040] IPVS: stopping master sync thread 15041 ... [ 359.361331][T15054] loop0: detected capacity change from 0 to 512 [ 359.370051][T15054] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 359.390912][T15054] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 359.403905][T15054] ext4 filesystem being mounted at /130/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 359.471198][T12481] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 359.708273][T15070] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 359.730172][T15069] IPVS: stopping master sync thread 15070 ... [ 359.987848][T15080] syzkaller0: entered promiscuous mode [ 359.993494][T15080] syzkaller0: entered allmulticast mode [ 360.620338][T11363] bio_check_eod: 162 callbacks suppressed [ 360.620433][T11363] kworker/u8:36: attempt to access beyond end of device [ 360.620433][T11363] loop0: rw=1, sector=145, nr_sectors = 216 limit=128 [ 360.736424][T11363] kworker/u8:36: attempt to access beyond end of device [ 360.736424][T11363] loop0: rw=1, sector=369, nr_sectors = 8 limit=128 [ 360.828624][T11363] kworker/u8:36: attempt to access beyond end of device [ 360.828624][T11363] loop0: rw=1, sector=385, nr_sectors = 8 limit=128 [ 360.855498][T15090] IPVS: stopping master sync thread 15089 ... [ 360.865230][T11363] kworker/u8:36: attempt to access beyond end of device [ 360.865230][T11363] loop0: rw=1, sector=401, nr_sectors = 8 limit=128 [ 360.878884][T11363] kworker/u8:36: attempt to access beyond end of device [ 360.878884][T11363] loop0: rw=1, sector=417, nr_sectors = 8 limit=128 [ 360.892662][T11363] kworker/u8:36: attempt to access beyond end of device [ 360.892662][T11363] loop0: rw=1, sector=433, nr_sectors = 8 limit=128 [ 360.906184][T15097] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 360.916564][T15092] IPVS: stopping master sync thread 15097 ... [ 360.917726][T11363] kworker/u8:36: attempt to access beyond end of device [ 360.917726][T11363] loop0: rw=1, sector=449, nr_sectors = 8 limit=128 [ 360.941077][T11363] kworker/u8:36: attempt to access beyond end of device [ 360.941077][T11363] loop0: rw=1, sector=465, nr_sectors = 8 limit=128 [ 360.960826][T11363] kworker/u8:36: attempt to access beyond end of device [ 360.960826][T11363] loop0: rw=1, sector=481, nr_sectors = 8 limit=128 [ 360.981562][T11363] kworker/u8:36: attempt to access beyond end of device [ 360.981562][T11363] loop0: rw=1, sector=497, nr_sectors = 8 limit=128 [ 361.160346][T15102] set_capacity_and_notify: 1 callbacks suppressed [ 361.160363][T15102] loop3: detected capacity change from 0 to 128 [ 361.190799][T15105] loop0: detected capacity change from 0 to 128 [ 361.243025][T15106] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 361.254099][T15104] IPVS: stopping master sync thread 15106 ... [ 361.803474][T15125] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 361.865691][T15125] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3460'. [ 361.875041][T15125] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3460'. [ 361.885428][T15125] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3460'. [ 361.967533][ T29] kauditd_printk_skb: 266 callbacks suppressed [ 361.967553][ T29] audit: type=1400 audit(1766892091.709:16294): avc: denied { create } for pid=15130 comm="syz.2.3462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 362.016347][ T29] audit: type=1400 audit(1766892091.759:16295): avc: denied { setopt } for pid=15130 comm="syz.2.3462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 362.036639][ T29] audit: type=1400 audit(1766892091.759:16296): avc: denied { bind } for pid=15130 comm="syz.2.3462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 362.056337][ T29] audit: type=1400 audit(1766892091.759:16297): avc: denied { name_bind } for pid=15130 comm="syz.2.3462" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 362.076577][T15136] loop2: detected capacity change from 0 to 128 [ 362.079057][ T29] audit: type=1400 audit(1766892091.759:16298): avc: denied { node_bind } for pid=15130 comm="syz.2.3462" saddr=::1 src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 362.107530][ T29] audit: type=1400 audit(1766892091.759:16299): avc: denied { write } for pid=15130 comm="syz.2.3462" laddr=::1 lport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 362.129206][ T29] audit: type=1400 audit(1766892091.759:16300): avc: denied { connect } for pid=15130 comm="syz.2.3462" laddr=::1 lport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 362.150908][ T29] audit: type=1400 audit(1766892091.759:16301): avc: denied { name_connect } for pid=15130 comm="syz.2.3462" dest=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 362.176769][T15133] loop1: detected capacity change from 0 to 512 [ 362.233333][T15133] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 362.242760][ T29] audit: type=1400 audit(1766892091.829:16302): avc: denied { mounton } for pid=15130 comm="syz.2.3462" path="/68/file0" dev="tmpfs" ino=387 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 362.266142][ T29] audit: type=1400 audit(1766892091.869:16303): avc: denied { mount } for pid=15130 comm="syz.2.3462" name="/" dev="loop2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 362.300716][T15133] EXT4-fs (loop1): 1 truncate cleaned up [ 362.306936][T15133] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 362.377713][T15146] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 362.439479][T15150] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3466'. [ 362.448605][T15150] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3466'. [ 362.472062][T15150] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3466'. [ 362.551762][T15153] loop5: detected capacity change from 0 to 128 [ 362.559839][T12972] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 362.600370][T15156] loop3: detected capacity change from 0 to 512 [ 362.607490][T15156] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 362.622159][T15157] loop1: detected capacity change from 0 to 512 [ 362.633823][T15156] EXT4-fs (loop3): 1 truncate cleaned up [ 362.642542][T15156] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 362.660939][T15157] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 362.693728][T15157] ext4 filesystem being mounted at /122/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 362.718398][T13827] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 362.788248][T12972] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 362.955178][T15176] loop0: detected capacity change from 0 to 512 [ 362.967826][T15178] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 362.979030][T15170] IPVS: stopping master sync thread 15178 ... [ 362.985676][T15176] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 363.001681][T15180] loop1: detected capacity change from 0 to 512 [ 363.002144][T15176] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 363.023788][T15180] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 363.037120][T15176] ext4 filesystem being mounted at /137/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 363.048575][T15180] EXT4-fs (loop1): 1 truncate cleaned up [ 363.055060][T15180] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 363.093267][T12972] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 363.135800][T15188] loop2: detected capacity change from 0 to 512 [ 363.151248][T15188] ext4 filesystem being mounted at /71/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 363.347912][T15186] macsec0: entered promiscuous mode [ 363.353319][T15186] macsec0: entered allmulticast mode [ 363.358691][T15186] veth1_macvtap: entered allmulticast mode [ 363.467818][T15202] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 363.482466][T15204] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 363.494232][T15204] EXT4-fs (loop2): 1 truncate cleaned up [ 363.512379][T15202] EXT4-fs (loop1): 1 truncate cleaned up [ 363.551571][T15209] ext4 filesystem being mounted at /346/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 363.726454][T15224] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 363.761312][T15224] ext4 filesystem being mounted at /74/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 363.773904][T15227] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 363.791557][T15229] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3492'. [ 363.838213][T15227] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3489'. [ 363.847288][T15227] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3489'. [ 363.909839][T15243] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3489'. [ 364.025053][T15251] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 364.026957][T15254] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 364.118288][T15251] EXT4-fs (loop3): 1 truncate cleaned up [ 364.128225][T15254] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 364.135822][T15254] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 364.163040][T15254] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 364.170626][T15254] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 364.213996][T15264] ext4 filesystem being mounted at /131/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 364.260646][T15272] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 364.272813][T15261] IPVS: stopping master sync thread 15272 ... [ 364.573356][T15286] random: crng reseeded on system resumption [ 365.110254][T15319] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 365.167569][T15322] FAULT_INJECTION: forcing a failure. [ 365.167569][T15322] name failslab, interval 1, probability 0, space 0, times 0 [ 365.180376][T15322] CPU: 0 UID: 0 PID: 15322 Comm: syz.5.3525 Not tainted syzkaller #0 PREEMPT(voluntary) [ 365.180413][T15322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 365.180432][T15322] Call Trace: [ 365.180454][T15322] [ 365.180465][T15322] __dump_stack+0x1d/0x30 [ 365.180543][T15322] dump_stack_lvl+0x95/0xd0 [ 365.180592][T15322] dump_stack+0x15/0x1b [ 365.180614][T15322] should_fail_ex+0x265/0x280 [ 365.180647][T15322] should_failslab+0x8c/0xb0 [ 365.180679][T15322] kmem_cache_alloc_node_noprof+0x6b/0x4c0 [ 365.180787][T15322] ? __alloc_skb+0x2ff/0x4b0 [ 365.180814][T15322] __alloc_skb+0x2ff/0x4b0 [ 365.180839][T15322] ? __alloc_skb+0x228/0x4b0 [ 365.180872][T15322] netlink_alloc_large_skb+0xbf/0xf0 [ 365.180950][T15322] netlink_sendmsg+0x3cf/0x6b0 [ 365.180995][T15322] ? __pfx_netlink_sendmsg+0x10/0x10 [ 365.181149][T15322] __sock_sendmsg+0x145/0x180 [ 365.181216][T15322] ____sys_sendmsg+0x31e/0x4a0 [ 365.181287][T15322] ___sys_sendmsg+0x17b/0x1d0 [ 365.181348][T15322] __x64_sys_sendmsg+0xd4/0x160 [ 365.181433][T15322] x64_sys_call+0x17ba/0x3000 [ 365.181460][T15322] do_syscall_64+0xca/0x2b0 [ 365.181530][T15322] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 365.181609][T15322] RIP: 0033:0x7f1016c7f749 [ 365.181700][T15322] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 365.181811][T15322] RSP: 002b:00007f10156df038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 365.181837][T15322] RAX: ffffffffffffffda RBX: 00007f1016ed5fa0 RCX: 00007f1016c7f749 [ 365.181900][T15322] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 365.181918][T15322] RBP: 00007f10156df090 R08: 0000000000000000 R09: 0000000000000000 [ 365.181985][T15322] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 365.182003][T15322] R13: 00007f1016ed6038 R14: 00007f1016ed5fa0 R15: 00007ffe7eb12948 [ 365.182026][T15322] [ 365.183121][T15319] EXT4-fs (loop0): 1 truncate cleaned up [ 365.711892][T15339] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 365.723159][T15334] IPVS: stopping master sync thread 15339 ... [ 365.809260][T15344] IPVS: stopping master sync thread 15346 ... [ 366.234179][T15360] set_capacity_and_notify: 11 callbacks suppressed [ 366.234221][T15360] loop3: detected capacity change from 0 to 512 [ 366.249635][T15360] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 366.285132][T15360] ext4 filesystem being mounted at /74/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 366.367551][T15365] loop2: detected capacity change from 0 to 512 [ 366.480334][T15365] ext4 filesystem being mounted at /85/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 366.519228][T15374] loop0: detected capacity change from 0 to 512 [ 366.526676][T15374] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 366.571540][T15374] ext4 filesystem being mounted at /151/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 366.933229][T15398] loop1: detected capacity change from 0 to 128 [ 366.940451][T15398] EXT4-fs: Ignoring removed nobh option [ 366.951377][T15398] ext4 filesystem being mounted at /140/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 366.972758][T15391] loop5: detected capacity change from 0 to 128 [ 367.011541][ T29] kauditd_printk_skb: 410 callbacks suppressed [ 367.011559][ T29] audit: type=1326 audit(1766892096.759:16714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15396 comm="syz.1.3549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fdd812edf90 code=0x7ffc0000 [ 367.055133][T15391] EXT4-fs: Ignoring removed nobh option [ 367.076670][ T29] audit: type=1326 audit(1766892096.789:16715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15396 comm="syz.1.3549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7fdd812ee497 code=0x7ffc0000 [ 367.100516][ T29] audit: type=1326 audit(1766892096.789:16716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15396 comm="syz.1.3549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fdd812edf90 code=0x7ffc0000 [ 367.124248][ T29] audit: type=1326 audit(1766892096.789:16717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15396 comm="syz.1.3549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd812ef749 code=0x7ffc0000 [ 367.147881][ T29] audit: type=1326 audit(1766892096.789:16718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15396 comm="syz.1.3549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fdd812edf90 code=0x7ffc0000 [ 367.171998][ T29] audit: type=1326 audit(1766892096.789:16719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15396 comm="syz.1.3549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fdd812edf90 code=0x7ffc0000 [ 367.196063][ T29] audit: type=1326 audit(1766892096.789:16720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15396 comm="syz.1.3549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd812ef749 code=0x7ffc0000 [ 367.219115][T15391] ext4 filesystem being mounted at /357/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 367.220239][ T29] audit: type=1326 audit(1766892096.789:16721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15396 comm="syz.1.3549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fdd812ef749 code=0x7ffc0000 [ 367.220300][ T29] audit: type=1326 audit(1766892096.789:16722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15396 comm="syz.1.3549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd812ef749 code=0x7ffc0000 [ 367.220337][ T29] audit: type=1326 audit(1766892096.789:16723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15396 comm="syz.1.3549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7fdd812ef749 code=0x7ffc0000 [ 367.283069][T15409] loop2: detected capacity change from 0 to 512 [ 367.326428][T15411] loop1: detected capacity change from 0 to 1024 [ 367.333312][T15412] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 367.344429][T15401] IPVS: stopping master sync thread 15412 ... [ 367.352414][T15409] ext4 filesystem being mounted at /86/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 367.355587][T15411] EXT4-fs: Ignoring removed bh option [ 367.385233][T15411] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 367.474898][T15426] loop0: detected capacity change from 0 to 128 [ 367.680230][T15440] loop1: detected capacity change from 0 to 128 [ 367.701100][T15440] EXT4-fs: Ignoring removed nobh option [ 367.936839][T15440] ext4 filesystem being mounted at /144/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 367.975664][T15442] loop2: detected capacity change from 0 to 8192 [ 368.237993][T15449] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 368.256855][T15457] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 368.267578][T15451] bond1 (unregistering): Released all slaves [ 368.274264][T15449] EXT4-fs (loop3): orphan cleanup on readonly fs [ 368.284465][T15449] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #16: comm syz.3.3564: corrupted inode contents [ 368.301343][T15452] netem: incorrect gi model size [ 368.306343][T15452] netem: change failed [ 368.321290][T15458] netem: incorrect gi model size [ 368.326285][T15458] netem: change failed [ 368.334773][T15449] EXT4-fs (loop3): Remounting filesystem read-only [ 368.344278][T15449] EXT4-fs (loop3): 1 truncate cleaned up [ 368.350240][T11381] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 368.361012][T11381] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 368.372411][T15457] ext4 filesystem being mounted at /145/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 368.449215][T11381] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started [ 368.641543][T15467] macsec0: entered promiscuous mode [ 368.646891][T15467] macsec0: entered allmulticast mode [ 368.652250][T15467] veth1_macvtap: entered allmulticast mode [ 368.700346][T15475] __nla_validate_parse: 15 callbacks suppressed [ 368.700367][T15475] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3569'. [ 368.715901][T15475] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3569'. [ 368.738574][T15475] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3569'. [ 368.899899][T15488] IPVS: stopping master sync thread 15487 ... [ 368.980802][T15482] ext4 filesystem being mounted at /146/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 369.241140][T15490] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 369.249264][T15490] EXT4-fs (loop3): orphan cleanup on readonly fs [ 369.256235][T15490] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.3575: Failed to acquire dquot type 1 [ 369.267833][T15490] EXT4-fs (loop3): Remounting filesystem read-only [ 369.274543][T15490] EXT4-fs (loop3): 1 truncate cleaned up [ 369.350290][T15501] ext4 filesystem being mounted at /157/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 369.497295][T15508] FAULT_INJECTION: forcing a failure. [ 369.497295][T15508] name failslab, interval 1, probability 0, space 0, times 0 [ 369.510037][T15508] CPU: 1 UID: 0 PID: 15508 Comm: syz.2.3579 Not tainted syzkaller #0 PREEMPT(voluntary) [ 369.510071][T15508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 369.510116][T15508] Call Trace: [ 369.510126][T15508] [ 369.510136][T15508] __dump_stack+0x1d/0x30 [ 369.510170][T15508] dump_stack_lvl+0x95/0xd0 [ 369.510193][T15508] dump_stack+0x15/0x1b [ 369.510258][T15508] should_fail_ex+0x265/0x280 [ 369.510298][T15508] should_failslab+0x8c/0xb0 [ 369.510328][T15508] __kmalloc_cache_noprof+0x65/0x4c0 [ 369.510360][T15508] ? getname_flags+0x208/0x3b0 [ 369.510450][T15508] getname_flags+0x208/0x3b0 [ 369.510597][T15508] __x64_sys_symlinkat+0x40/0x70 [ 369.510629][T15508] x64_sys_call+0x2a36/0x3000 [ 369.510706][T15508] do_syscall_64+0xca/0x2b0 [ 369.510744][T15508] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.510816][T15508] RIP: 0033:0x7f7cbdeef749 [ 369.510837][T15508] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 369.510863][T15508] RSP: 002b:00007f7cbc957038 EFLAGS: 00000246 ORIG_RAX: 000000000000010a [ 369.510887][T15508] RAX: ffffffffffffffda RBX: 00007f7cbe145fa0 RCX: 00007f7cbdeef749 [ 369.510900][T15508] RDX: 0000200000000000 RSI: ffffffffffffff9c RDI: 0000200000003040 [ 369.510920][T15508] RBP: 00007f7cbc957090 R08: 0000000000000000 R09: 0000000000000000 [ 369.510938][T15508] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 369.510950][T15508] R13: 00007f7cbe146038 R14: 00007f7cbe145fa0 R15: 00007fffa57df248 [ 369.510976][T15508] [ 369.681252][T15512] FAULT_INJECTION: forcing a failure. [ 369.681252][T15512] name failslab, interval 1, probability 0, space 0, times 0 [ 369.694487][T15512] CPU: 0 UID: 0 PID: 15512 Comm: syz.5.3580 Not tainted syzkaller #0 PREEMPT(voluntary) [ 369.694599][T15512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 369.694613][T15512] Call Trace: [ 369.694621][T15512] [ 369.694631][T15512] __dump_stack+0x1d/0x30 [ 369.694688][T15512] dump_stack_lvl+0x95/0xd0 [ 369.694719][T15512] dump_stack+0x15/0x1b [ 369.694748][T15512] should_fail_ex+0x265/0x280 [ 369.694787][T15512] should_failslab+0x8c/0xb0 [ 369.694817][T15512] __kvmalloc_node_noprof+0x149/0x6b0 [ 369.694846][T15512] ? alloc_fdtable+0xc2/0x1d0 [ 369.694890][T15512] alloc_fdtable+0xc2/0x1d0 [ 369.694919][T15512] dup_fd+0x492/0x510 [ 369.695015][T15512] copy_files+0x98/0xf0 [ 369.695038][T15512] copy_process+0xc17/0x1ef0 [ 369.695071][T15512] kernel_clone+0x16c/0x5c0 [ 369.695100][T15512] ? vfs_write+0x7e8/0x960 [ 369.695129][T15512] __x64_sys_clone+0xe6/0x120 [ 369.695202][T15512] x64_sys_call+0x12d0/0x3000 [ 369.695260][T15512] do_syscall_64+0xca/0x2b0 [ 369.695305][T15512] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.695337][T15512] RIP: 0033:0x7f1016c7f749 [ 369.695351][T15512] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 369.695403][T15512] RSP: 002b:00007f10156defe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 369.695497][T15512] RAX: ffffffffffffffda RBX: 00007f1016ed5fa0 RCX: 00007f1016c7f749 [ 369.695509][T15512] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000002000000 [ 369.695521][T15512] RBP: 00007f10156df090 R08: 0000000000000000 R09: 0000000000000000 [ 369.695533][T15512] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 369.695620][T15512] R13: 00007f1016ed6038 R14: 00007f1016ed5fa0 R15: 00007ffe7eb12948 [ 369.695645][T15512] [ 369.893334][T15516] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3582'. [ 370.061888][T15522] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 370.080416][T15522] EXT4-fs (loop1): 1 truncate cleaned up [ 370.200808][T15529] IPVS: stopping master sync thread 15530 ... [ 370.284609][T15532] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 370.371021][T15532] ext4 filesystem being mounted at /159/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 370.708000][T15551] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 370.732017][T15551] ext4 filesystem being mounted at /161/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 370.878702][T15559] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 370.961114][T15559] ext4 filesystem being mounted at /162/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 371.318539][T15585] set_capacity_and_notify: 10 callbacks suppressed [ 371.318562][T15585] loop0: detected capacity change from 0 to 128 [ 371.488190][T15590] loop5: detected capacity change from 0 to 512 [ 371.513319][T15594] loop3: detected capacity change from 0 to 512 [ 371.539285][T15594] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 371.559162][T15590] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 371.577725][T15590] EXT4-fs (loop5): 1 truncate cleaned up [ 371.587257][T15594] ext4 filesystem being mounted at /84/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 371.638235][T15601] loop2: detected capacity change from 0 to 512 [ 371.650707][T15601] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 371.720591][T15601] EXT4-fs (loop2): 1 truncate cleaned up [ 371.811432][T15606] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3611'. [ 371.948375][T15620] loop1: detected capacity change from 0 to 8192 [ 372.030418][T15623] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3616'. [ 372.039714][T15623] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3616'. [ 372.049096][ T29] kauditd_printk_skb: 534 callbacks suppressed [ 372.049115][ T29] audit: type=1400 audit(1766892101.739:17250): avc: denied { ioctl } for pid=15621 comm="syz.5.3616" path="socket:[49867]" dev="sockfs" ino=49867 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 372.081499][ T29] audit: type=1400 audit(1766892101.759:17251): avc: denied { sys_module } for pid=15621 comm="syz.5.3616" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 372.114400][T15623] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3616'. [ 372.183153][ T29] audit: type=1400 audit(1766892101.929:17252): avc: denied { unmount } for pid=12481 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 372.231028][T15636] loop0: detected capacity change from 0 to 512 [ 372.245115][T15634] netlink: 9 bytes leftover after parsing attributes in process `syz.3.3620'. [ 372.252916][ T29] audit: type=1400 audit(1766892101.959:17253): avc: denied { create } for pid=15633 comm="syz.3.3620" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 372.274296][ T29] audit: type=1400 audit(1766892101.989:17254): avc: denied { bind } for pid=15633 comm="syz.3.3620" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 372.294127][ T29] audit: type=1400 audit(1766892101.989:17255): avc: denied { listen } for pid=15633 comm="syz.3.3620" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 372.313995][ T29] audit: type=1400 audit(1766892101.989:17256): avc: denied { connect } for pid=15633 comm="syz.3.3620" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 372.339074][ T29] audit: type=1400 audit(1766892102.039:17257): avc: denied { write } for pid=15633 comm="syz.3.3620" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 372.350340][T15636] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 372.367146][T15636] EXT4-fs (loop0): orphan cleanup on readonly fs [ 372.369455][T15634] netlink: 9 bytes leftover after parsing attributes in process `syz.3.3620'. [ 372.375163][T15636] Quota error (device loop0): find_block_dqentry: Quota for id 0 referenced but not present [ 372.392652][T15636] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 372.402315][T15636] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.3621: Failed to acquire dquot type 1 [ 372.436062][T15636] EXT4-fs (loop0): Remounting filesystem read-only [ 372.443021][T15636] EXT4-fs (loop0): 1 truncate cleaned up [ 372.532242][T15644] loop3: detected capacity change from 0 to 512 [ 372.547746][T15646] loop2: detected capacity change from 0 to 512 [ 372.560414][T15646] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 372.587233][T15646] EXT4-fs (loop2): 1 truncate cleaned up [ 372.650917][T15644] ext4 filesystem being mounted at /88/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 372.846362][T15663] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 372.857407][T15663] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 372.900296][T15658] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #19: comm syz.3.3624: corrupted inode contents [ 372.949240][T15658] EXT4-fs error (device loop3): ext4_dirty_inode:6502: inode #19: comm syz.3.3624: mark_inode_dirty error [ 372.969490][T15658] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #19: comm syz.3.3624: corrupted inode contents [ 373.002219][T15658] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3000: inode #19: comm syz.3.3624: mark_inode_dirty error [ 373.020384][T15658] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3003: inode #19: comm syz.3.3624: mark inode dirty (error -117) [ 373.034689][T15658] EXT4-fs warning (device loop3): ext4_evict_inode:273: xattr delete (err -117) [ 373.185688][T15674] syzkaller0: entered promiscuous mode [ 373.191292][T15674] syzkaller0: entered allmulticast mode [ 373.258642][T15679] loop5: detected capacity change from 0 to 512 [ 373.300618][T15679] ext4 filesystem being mounted at /377/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 373.544206][T15698] loop1: detected capacity change from 0 to 128 [ 373.676285][T15705] IPVS: stopping master sync thread 15706 ... [ 374.476565][T15711] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 374.487844][T15710] IPVS: stopping master sync thread 15711 ... [ 374.518010][T15708] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 374.526524][T15708] EXT4-fs (loop5): orphan cleanup on readonly fs [ 374.535360][T15708] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.3643: Failed to acquire dquot type 1 [ 374.547404][T15708] EXT4-fs (loop5): Remounting filesystem read-only [ 374.554222][T15708] EXT4-fs (loop5): 1 truncate cleaned up [ 374.746517][T15719] syzkaller0: entered promiscuous mode [ 374.752165][T15719] syzkaller0: entered allmulticast mode [ 374.910072][T15729] __nla_validate_parse: 2 callbacks suppressed [ 374.910091][T15729] netlink: 176 bytes leftover after parsing attributes in process `syz.2.3651'. [ 375.003587][T15736] ext4 filesystem being mounted at /162/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 375.435863][T15760] syzkaller0: entered promiscuous mode [ 375.441575][T15760] syzkaller0: entered allmulticast mode [ 375.708532][T15770] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 375.719684][T15766] IPVS: stopping master sync thread 15770 ... [ 375.740465][T15768] ext4 filesystem being mounted at /115/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 375.885284][T15776] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3666'. [ 375.935405][T15782] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3666'. [ 376.030359][T15785] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3669'. [ 376.440910][T15799] IPVS: stopping master sync thread 15797 ... [ 376.696634][T15801] set_capacity_and_notify: 4 callbacks suppressed [ 376.696651][T15801] loop5: detected capacity change from 0 to 512 [ 376.739646][T15801] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 376.782189][T15801] EXT4-fs (loop5): 1 truncate cleaned up [ 376.890859][T15806] loop0: detected capacity change from 0 to 8192 [ 377.048174][T15809] loop2: detected capacity change from 0 to 512 [ 377.060435][ T29] kauditd_printk_skb: 106 callbacks suppressed [ 377.060454][ T29] audit: type=1326 audit(1766892106.789:17360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15802 comm="syz.2.3675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cbdeef749 code=0x7ffc0000 [ 377.090529][ T29] audit: type=1326 audit(1766892106.789:17361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15802 comm="syz.2.3675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cbdeef749 code=0x7ffc0000 [ 377.114859][ T29] audit: type=1326 audit(1766892106.789:17362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15802 comm="syz.2.3675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f7cbdeef749 code=0x7ffc0000 [ 377.138679][ T29] audit: type=1326 audit(1766892106.789:17363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15802 comm="syz.2.3675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cbdeef749 code=0x7ffc0000 [ 377.162608][ T29] audit: type=1326 audit(1766892106.789:17364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15802 comm="syz.2.3675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cbdeef749 code=0x7ffc0000 [ 377.186414][ T29] audit: type=1326 audit(1766892106.789:17365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15802 comm="syz.2.3675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7cbdeef749 code=0x7ffc0000 [ 377.210838][ T29] audit: type=1326 audit(1766892106.789:17366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15802 comm="syz.2.3675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cbdeef749 code=0x7ffc0000 [ 377.234927][ T29] audit: type=1326 audit(1766892106.789:17367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15802 comm="syz.2.3675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cbdeef749 code=0x7ffc0000 [ 377.258559][ T29] audit: type=1326 audit(1766892106.789:17368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15802 comm="syz.2.3675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7cbdeef749 code=0x7ffc0000 [ 377.282243][ T29] audit: type=1326 audit(1766892106.789:17369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15802 comm="syz.2.3675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cbdeef749 code=0x7ffc0000 [ 378.321768][T15809] EXT4-fs mount: 73 callbacks suppressed [ 378.321784][T15809] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 378.341395][T15809] ext4 filesystem being mounted at /117/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 378.382728][T15826] loop1: detected capacity change from 0 to 128 [ 378.461461][T15826] EXT4-fs: Ignoring removed nobh option [ 378.564867][T15826] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 378.602758][T13596] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 378.614014][T15826] ext4 filesystem being mounted at /165/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 378.668062][T15831] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 378.679381][T15810] IPVS: stopping master sync thread 15831 ... [ 378.842995][T15836] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3684'. [ 378.852094][T15836] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3684'. [ 378.874425][T12972] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 378.884684][T15836] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3684'. [ 379.048531][T15847] loop1: detected capacity change from 0 to 512 [ 379.092141][T15847] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 379.115376][T15855] loop3: detected capacity change from 0 to 1024 [ 379.239543][T15847] ext4 filesystem being mounted at /167/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 379.266602][T15855] EXT4-fs (loop3): filesystem is read-only [ 379.279490][T15855] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 379.290378][T15855] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (11891!=20869) [ 379.306252][T15855] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 379.317209][T15855] EXT4-fs error (device loop3): ext4_get_journal_inode:5849: comm syz.3.3689: inode #1: comm syz.3.3689: iget: illegal inode # [ 379.333855][T15857] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 379.351200][T15855] EXT4-fs (loop3): no journal found [ 379.356637][T15855] EXT4-fs (loop3): can't get journal size [ 379.378107][T15857] loop2: detected capacity change from 0 to 512 [ 379.379721][T15855] EXT4-fs error (device loop3): __ext4_fill_super:5553: inode #2: comm syz.3.3689: iget: special inode unallocated [ 379.407164][T15855] EXT4-fs (loop3): get root inode failed [ 379.412895][T15855] EXT4-fs (loop3): mount failed [ 379.500451][T15859] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #19: comm syz.1.3687: corrupted inode contents [ 379.531513][T15857] EXT4-fs warning (device loop2): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 379.550455][T15855] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3689'. [ 379.572679][T15857] EXT4-fs (loop2): mount failed [ 379.585918][T15870] random: crng reseeded on system resumption [ 379.593662][T15855] bridge_slave_1: left allmulticast mode [ 379.599435][T15855] bridge_slave_1: left promiscuous mode [ 379.605361][T15855] bridge0: port 2(bridge_slave_1) entered disabled state [ 379.609355][T15859] EXT4-fs error (device loop1): ext4_dirty_inode:6502: inode #19: comm syz.1.3687: mark_inode_dirty error [ 379.634443][T15857] loop2: detected capacity change from 0 to 512 [ 379.665711][T15859] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #19: comm syz.1.3687: corrupted inode contents [ 379.677952][T15855] bridge_slave_0: left allmulticast mode [ 379.683704][T15855] bridge_slave_0: left promiscuous mode [ 379.689652][T15855] bridge0: port 1(bridge_slave_0) entered disabled state [ 379.698039][T15859] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3000: inode #19: comm syz.1.3687: mark_inode_dirty error [ 379.712894][T15857] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 379.739311][T15859] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3003: inode #19: comm syz.1.3687: mark inode dirty (error -117) [ 379.767162][T15859] EXT4-fs warning (device loop1): ext4_evict_inode:273: xattr delete (err -117) [ 379.796827][T15857] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.3688: bg 0: block 104: invalid block bitmap [ 379.809755][T15857] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 379.821825][T15857] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.3688: invalid indirect mapped block 1 (level 1) [ 379.835750][T15857] EXT4-fs (loop2): 1 truncate cleaned up [ 379.842016][T15857] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 379.933932][T12972] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 379.969033][T15877] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3693'. [ 379.978051][T15877] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3693'. [ 379.987614][T15877] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3693'. [ 379.997885][T13596] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 380.159021][T15890] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 380.169906][T15884] IPVS: stopping master sync thread 15890 ... [ 380.292971][T15894] loop2: detected capacity change from 0 to 512 [ 380.320627][T15894] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 380.381475][T15894] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 380.400993][T15894] ext4 filesystem being mounted at /122/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 380.413965][T15896] loop1: detected capacity change from 0 to 128 [ 380.462078][T15896] EXT4-fs: Ignoring removed nobh option [ 380.507998][T15896] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 380.523812][T15896] ext4 filesystem being mounted at /171/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 380.553439][T15896] FAULT_INJECTION: forcing a failure. [ 380.553439][T15896] name failslab, interval 1, probability 0, space 0, times 0 [ 380.566999][T15896] CPU: 0 UID: 0 PID: 15896 Comm: syz.1.3700 Not tainted syzkaller #0 PREEMPT(voluntary) [ 380.567037][T15896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 380.567055][T15896] Call Trace: [ 380.567116][T15896] [ 380.567124][T15896] __dump_stack+0x1d/0x30 [ 380.567149][T15896] dump_stack_lvl+0x95/0xd0 [ 380.567229][T15896] dump_stack+0x15/0x1b [ 380.567250][T15896] should_fail_ex+0x265/0x280 [ 380.567306][T15896] should_failslab+0x8c/0xb0 [ 380.567336][T15896] kmem_cache_alloc_node_noprof+0x6b/0x4c0 [ 380.567369][T15896] ? __alloc_skb+0x2ff/0x4b0 [ 380.567468][T15896] __alloc_skb+0x2ff/0x4b0 [ 380.567499][T15896] ? __alloc_skb+0x228/0x4b0 [ 380.567579][T15896] audit_log_start+0x3a0/0x720 [ 380.567648][T15896] ? kstrtouint+0x76/0xc0 [ 380.567676][T15896] audit_seccomp+0x48/0x100 [ 380.567761][T15896] ? __seccomp_filter+0x832/0x1260 [ 380.567872][T15896] __seccomp_filter+0x843/0x1260 [ 380.567918][T15896] ? sysvec_apic_timer_interrupt+0x44/0x80 [ 380.567966][T15896] __secure_computing+0x82/0x150 [ 380.567997][T15896] syscall_trace_enter+0xcf/0x1e0 [ 380.568104][T15896] do_syscall_64+0xa4/0x2b0 [ 380.568152][T15896] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.568182][T15896] RIP: 0033:0x7fdd812ee1ff [ 380.568202][T15896] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 380.568276][T15896] RSP: 002b:00007fdd7fd57000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 380.568301][T15896] RAX: ffffffffffffffda RBX: 00007fdd81545fa0 RCX: 00007fdd812ee1ff [ 380.568318][T15896] RDX: 000000000000004a RSI: 0000200000000780 RDI: 00000000000000c8 [ 380.568331][T15896] RBP: 00007fdd7fd57090 R08: 0000000000000000 R09: 0000000000000000 [ 380.568348][T15896] R10: 000000000000004a R11: 0000000000000293 R12: 0000000000000001 [ 380.568365][T15896] R13: 00007fdd81546038 R14: 00007fdd81545fa0 R15: 00007ffd38703448 [ 380.568389][T15896] [ 380.816738][T12972] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 380.842902][T13596] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 380.939622][T15909] IPv6: NLM_F_CREATE should be specified when creating new route [ 381.022328][T15909] EXT4-fs: Ignoring removed orlov option [ 382.060464][T15909] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 382.208996][ T29] kauditd_printk_skb: 166 callbacks suppressed [ 382.209024][ T29] audit: type=1326 audit(1766892111.939:17533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15908 comm="syz.1.3703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fdd812edf90 code=0x7ffc0000 [ 382.239099][ T29] audit: type=1326 audit(1766892111.939:17534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15908 comm="syz.1.3703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7fdd812ee497 code=0x7ffc0000 [ 382.263942][ T29] audit: type=1326 audit(1766892111.939:17535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15908 comm="syz.1.3703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fdd812edf90 code=0x7ffc0000 [ 382.287790][ T29] audit: type=1326 audit(1766892111.939:17536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15908 comm="syz.1.3703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd812ef749 code=0x7ffc0000 [ 382.311528][ T29] audit: type=1326 audit(1766892111.949:17537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15908 comm="syz.1.3703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fdd812ef749 code=0x7ffc0000 [ 382.438272][T15924] IPVS: stopping master sync thread 15922 ... [ 382.488976][ T29] audit: type=1326 audit(1766892112.139:17538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15908 comm="syz.1.3703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd812ef749 code=0x7ffc0000 [ 382.513114][ T29] audit: type=1326 audit(1766892112.139:17539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15908 comm="syz.1.3703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd812ef749 code=0x7ffc0000 [ 382.527699][T15927] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3707'. [ 382.536873][ T29] audit: type=1326 audit(1766892112.219:17540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15908 comm="syz.1.3703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fdd812ef749 code=0x7ffc0000 [ 382.569326][ T29] audit: type=1326 audit(1766892112.219:17541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15908 comm="syz.1.3703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd812ef749 code=0x7ffc0000 [ 382.593020][ T29] audit: type=1326 audit(1766892112.219:17542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15908 comm="syz.1.3703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdd812ef749 code=0x7ffc0000 [ 382.638271][T15928] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3703'. [ 382.718187][T15933] set_capacity_and_notify: 2 callbacks suppressed [ 382.718243][T15933] loop2: detected capacity change from 0 to 512 [ 382.772665][T15933] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 382.819284][T15933] ext4 filesystem being mounted at /125/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 382.869199][T15940] loop5: detected capacity change from 0 to 512 [ 382.894915][T15940] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 382.929662][T15940] EXT4-fs (loop5): 1 truncate cleaned up [ 382.969702][T15940] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 382.982756][T13596] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 383.094816][ T8813] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 383.111445][T12972] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 383.196510][T15948] syzkaller0: entered promiscuous mode [ 383.202100][T15948] syzkaller0: entered allmulticast mode [ 383.210704][T15946] loop3: detected capacity change from 0 to 512 [ 383.233103][T15946] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 383.267900][T15951] loop1: detected capacity change from 0 to 8192 [ 383.276389][T15946] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 383.291395][T15946] ext4 filesystem being mounted at /112/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 383.351302][T15957] loop5: detected capacity change from 0 to 512 [ 383.378441][T15957] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 383.408193][T15962] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3720'. [ 383.409467][T15959] loop2: detected capacity change from 0 to 1024 [ 383.426170][T13827] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 383.438650][T15957] EXT4-fs (loop5): 1 truncate cleaned up [ 383.445313][T15959] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 383.451882][T15957] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 383.483938][T15959] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 383.541903][T15959] EXT4-fs (loop2): orphan cleanup on readonly fs [ 383.548670][T15959] EXT4-fs error (device loop2): ext4_free_blocks:6728: comm syz.2.3718: Freeing blocks not in datazone - block = 0, count = 4096 [ 383.584297][T15959] EXT4-fs (loop2): 1 orphan inode deleted [ 383.592263][T15972] loop1: detected capacity change from 0 to 128 [ 383.595676][T15959] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 383.644020][T13596] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 383.676392][ T8813] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 383.694502][T15976] FAULT_INJECTION: forcing a failure. [ 383.694502][T15976] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 383.707625][T15976] CPU: 1 UID: 0 PID: 15976 Comm: syz.2.3725 Not tainted syzkaller #0 PREEMPT(voluntary) [ 383.707729][T15976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 383.707746][T15976] Call Trace: [ 383.707755][T15976] [ 383.707766][T15976] __dump_stack+0x1d/0x30 [ 383.707801][T15976] dump_stack_lvl+0x95/0xd0 [ 383.707829][T15976] dump_stack+0x15/0x1b [ 383.707872][T15976] should_fail_ex+0x265/0x280 [ 383.707902][T15976] should_fail+0xb/0x20 [ 383.707923][T15976] should_fail_usercopy+0x1a/0x20 [ 383.707964][T15976] _copy_from_user+0x1c/0xb0 [ 383.708006][T15976] ___sys_sendmsg+0xc1/0x1d0 [ 383.708050][T15976] __x64_sys_sendmsg+0xd4/0x160 [ 383.708085][T15976] x64_sys_call+0x17ba/0x3000 [ 383.708112][T15976] do_syscall_64+0xca/0x2b0 [ 383.708192][T15976] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.708216][T15976] RIP: 0033:0x7f7cbdeef749 [ 383.708232][T15976] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 383.708252][T15976] RSP: 002b:00007f7cbc957038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 383.708273][T15976] RAX: ffffffffffffffda RBX: 00007f7cbe145fa0 RCX: 00007f7cbdeef749 [ 383.708311][T15976] RDX: 0000000000000000 RSI: 0000200000002e80 RDI: 0000000000000003 [ 383.708325][T15976] RBP: 00007f7cbc957090 R08: 0000000000000000 R09: 0000000000000000 [ 383.708339][T15976] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 383.708353][T15976] R13: 00007f7cbe146038 R14: 00007f7cbe145fa0 R15: 00007fffa57df248 [ 383.708373][T15976] [ 384.032881][T15985] IPVS: stopping master sync thread 15987 ... [ 384.149880][T15989] syzkaller0: entered promiscuous mode [ 384.155542][T15989] syzkaller0: entered allmulticast mode [ 384.466250][T16000] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3732'. [ 384.530766][T15997] loop0: detected capacity change from 0 to 8192 [ 384.574417][T16006] loop3: detected capacity change from 0 to 512 [ 384.606032][T16006] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 384.614128][T16006] EXT4-fs (loop3): orphan cleanup on readonly fs [ 384.621117][T16006] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.3734: Failed to acquire dquot type 1 [ 384.632865][T16006] EXT4-fs (loop3): Remounting filesystem read-only [ 384.639517][T16006] EXT4-fs (loop3): 1 truncate cleaned up [ 384.645750][T16006] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 384.774306][T16017] loop1: detected capacity change from 0 to 512 [ 384.821865][T16017] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 384.859711][T16017] ext4 filesystem being mounted at /178/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 385.229745][T16039] IPVS: stopping master sync thread 16040 ... [ 385.659075][T13827] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 385.706873][T12972] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 385.751712][T16046] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3744'. [ 386.474684][T16059] IPVS: stopping master sync thread 16060 ... [ 386.639655][T16062] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 386.701191][T16062] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 386.754025][T16062] ext4 filesystem being mounted at /181/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 387.106625][T12972] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 387.124743][T16083] IPVS: stopping master sync thread 16086 ... [ 387.124743][T16086] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 387.194026][T16088] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3753'. [ 387.239021][ T29] kauditd_printk_skb: 313 callbacks suppressed [ 387.239042][ T29] audit: type=1400 audit(1766892116.979:17854): avc: denied { getopt } for pid=16087 comm="syz.1.3754" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 387.925919][T16093] syzkaller0: entered promiscuous mode [ 387.931514][T16093] syzkaller0: entered allmulticast mode [ 388.289594][ T29] audit: type=1326 audit(1766892118.039:17855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16095 comm="syz.3.3756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf88f0f749 code=0x7ffc0000 [ 388.410870][ T29] audit: type=1326 audit(1766892118.039:17856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16095 comm="syz.3.3756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf88f0f749 code=0x7ffc0000 [ 388.434878][ T29] audit: type=1326 audit(1766892118.069:17857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16095 comm="syz.3.3756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fdf88f0f749 code=0x7ffc0000 [ 388.458993][ T29] audit: type=1326 audit(1766892118.069:17858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16095 comm="syz.3.3756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fdf88f0f783 code=0x7ffc0000 [ 388.482468][ T29] audit: type=1400 audit(1766892118.069:17859): avc: denied { map } for pid=16095 comm="syz.3.3756" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=52237 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 388.506976][ T29] audit: type=1400 audit(1766892118.069:17860): avc: denied { read write } for pid=16095 comm="syz.3.3756" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=52237 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 388.532341][ T29] audit: type=1326 audit(1766892118.069:17861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16095 comm="syz.3.3756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fdf88f0f783 code=0x7ffc0000 [ 388.556020][ T29] audit: type=1326 audit(1766892118.069:17862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16095 comm="syz.3.3756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf88f0f749 code=0x7ffc0000 [ 388.579772][ T29] audit: type=1326 audit(1766892118.069:17863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16095 comm="syz.3.3756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf88f0f749 code=0x7ffc0000 [ 389.027767][T16103] set_capacity_and_notify: 7 callbacks suppressed [ 389.027788][T16103] loop0: detected capacity change from 0 to 512 [ 389.089450][T16103] EXT4-fs: Ignoring removed orlov option [ 389.095225][T16103] EXT4-fs: Ignoring removed i_version option [ 389.278853][T16103] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 389.336854][T16103] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 389.379999][T16115] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 389.380247][T16114] IPVS: stopping master sync thread 16115 ... [ 389.449377][T16103] ext4 filesystem being mounted at /187/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 389.558245][T12481] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 390.109325][T16134] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 390.120234][T16131] IPVS: stopping master sync thread 16134 ... [ 390.143744][T16133] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3767'. [ 390.239441][T16133] bond1: entered allmulticast mode [ 390.249102][T16133] 8021q: adding VLAN 0 to HW filter on device bond1 [ 390.464753][T16143] loop1: detected capacity change from 0 to 128 [ 390.536561][T16146] loop3: detected capacity change from 0 to 128 [ 390.545204][T16147] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3773'. [ 390.594652][T16150] loop2: detected capacity change from 0 to 512 [ 390.612345][T16150] EXT4-fs (loop2): Invalid log cluster size: 184549377 [ 390.678385][T16150] program syz.2.3774 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 391.031614][T16167] loop2: detected capacity change from 0 to 128 [ 391.046373][T16167] 9p: Bad value for 'wfdno' [ 391.109844][T16169] loop5: detected capacity change from 0 to 128 [ 391.213532][T16171] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3780'. [ 391.377711][T16177] loop1: detected capacity change from 0 to 128 [ 391.402306][T16177] 9p: Bad value for 'wfdno' [ 391.487840][T16179] loop0: detected capacity change from 0 to 512 [ 391.501603][T16179] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 391.509850][T16179] EXT4-fs (loop0): orphan cleanup on readonly fs [ 391.517102][T16179] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.3783: Failed to acquire dquot type 1 [ 391.530569][T16179] EXT4-fs (loop0): Remounting filesystem read-only [ 391.537223][T16179] EXT4-fs (loop0): 1 truncate cleaned up [ 391.543504][T16179] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 391.623150][T16183] FAULT_INJECTION: forcing a failure. [ 391.623150][T16183] name failslab, interval 1, probability 0, space 0, times 0 [ 391.635997][T16183] CPU: 1 UID: 0 PID: 16183 Comm: syz.1.3782 Not tainted syzkaller #0 PREEMPT(voluntary) [ 391.636102][T16183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 391.636227][T16183] Call Trace: [ 391.636237][T16183] [ 391.636247][T16183] __dump_stack+0x1d/0x30 [ 391.636274][T16183] dump_stack_lvl+0x95/0xd0 [ 391.636302][T16183] dump_stack+0x15/0x1b [ 391.636398][T16183] should_fail_ex+0x265/0x280 [ 391.636430][T16183] should_failslab+0x8c/0xb0 [ 391.636462][T16183] __kmalloc_cache_noprof+0x65/0x4c0 [ 391.636538][T16183] ? __se_sys_mount+0xef/0x2e0 [ 391.636628][T16183] ? memdup_user+0x99/0xd0 [ 391.636655][T16183] __se_sys_mount+0xef/0x2e0 [ 391.636756][T16183] ? fput+0x8f/0xc0 [ 391.636798][T16183] ? ksys_write+0x192/0x1a0 [ 391.636820][T16183] __x64_sys_mount+0x67/0x80 [ 391.636849][T16183] x64_sys_call+0x2cca/0x3000 [ 391.636931][T16183] do_syscall_64+0xca/0x2b0 [ 391.636969][T16183] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.636996][T16183] RIP: 0033:0x7fdd812ef749 [ 391.637012][T16183] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 391.637078][T16183] RSP: 002b:00007fdd7fa15038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 391.637104][T16183] RAX: ffffffffffffffda RBX: 00007fdd81546090 RCX: 00007fdd812ef749 [ 391.637122][T16183] RDX: 0000200000000280 RSI: 00002000000002c0 RDI: 0000000000000000 [ 391.637139][T16183] RBP: 00007fdd7fa15090 R08: 0000200000000540 R09: 0000000000000000 [ 391.637157][T16183] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 391.637174][T16183] R13: 00007fdd81546128 R14: 00007fdd81546090 R15: 00007ffd38703448 [ 391.637215][T16183] [ 391.888137][T16187] loop2: detected capacity change from 0 to 512 [ 391.896809][T16187] EXT4-fs: Ignoring removed orlov option [ 391.902733][T16187] EXT4-fs: Ignoring removed mblk_io_submit option [ 391.929871][T16187] EXT4-fs error (device loop2): ext4_iget_extra_inode:5073: inode #15: comm syz.2.3784: corrupted in-inode xattr: e_value size too large [ 391.947749][T16187] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.3784: couldn't read orphan inode 15 (err -117) [ 391.961533][T16187] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 392.026407][T16196] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3786'. [ 392.035540][T16196] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3786'. [ 392.047235][T16196] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3786'. [ 392.069576][T13596] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 392.079688][ T3407] IPVS: starting estimator thread 0... [ 392.130190][T16203] loop3: detected capacity change from 0 to 512 [ 392.151870][T16203] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 392.165042][T16203] ext4 filesystem being mounted at /126/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 392.175414][T16199] IPVS: using max 1824 ests per chain, 91200 per kthread [ 392.185379][T16207] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 392.196469][T16200] IPVS: stopping master sync thread 16207 ... [ 392.241455][T16210] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 392.255524][ T29] kauditd_printk_skb: 381 callbacks suppressed [ 392.255542][ T29] audit: type=1400 audit(1766892121.999:18243): avc: denied { ioctl } for pid=16202 comm="syz.3.3789" path="/126/bus/file1" dev="loop3" ino=15 ioctlcmd=0x9367 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 392.288874][T16214] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3788'. [ 392.297943][T16214] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3788'. [ 392.309918][T16210] EXT4-fs (loop5): 1 truncate cleaned up [ 392.315954][T16210] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 392.348323][ T29] audit: type=1400 audit(1766892122.079:18244): avc: denied { read write } for pid=16202 comm="syz.3.3789" name="virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 392.354581][T16208] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3788'. [ 392.372515][ T29] audit: type=1400 audit(1766892122.079:18245): avc: denied { open } for pid=16202 comm="syz.3.3789" path="/dev/virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 392.410303][ T29] audit: type=1400 audit(1766892122.129:18246): avc: denied { create } for pid=16209 comm="syz.5.3790" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 392.441521][ T29] audit: type=1400 audit(1766892122.189:18247): avc: denied { connect } for pid=16209 comm="syz.5.3790" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 392.476676][ T29] audit: type=1400 audit(1766892122.189:18248): avc: denied { name_bind } for pid=16209 comm="syz.5.3790" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 392.477693][T12481] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 392.498697][ T29] audit: type=1400 audit(1766892122.209:18249): avc: denied { remove_name } for pid=16209 comm="syz.5.3790" name="file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 392.531346][ T29] audit: type=1400 audit(1766892122.209:18250): avc: denied { rename } for pid=16209 comm="syz.5.3790" name="file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 392.554133][ T29] audit: type=1400 audit(1766892122.209:18251): avc: denied { unlink } for pid=16209 comm="syz.5.3790" name="file2" dev="loop5" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 392.582840][ T8813] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 392.684342][ T29] audit: type=1326 audit(1766892122.359:18252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16225 comm="syz.0.3794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2af1b8f749 code=0x7ffc0000 [ 392.719361][T13827] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 392.933224][T16239] netlink: 'syz.1.3796': attribute type 1 has an invalid length. [ 393.062639][T16242] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3796'. [ 393.267957][T16237] IPVS: stopping master sync thread 16236 ... [ 393.275144][T16232] EXT4-fs error (device loop5): ext4_orphan_get:1391: inode #15: comm syz.5.3792: inode has both inline data and extents flags [ 393.288569][T16232] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.3792: couldn't read orphan inode 15 (err -117) [ 393.300987][T16232] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 393.327097][T16239] 8021q: adding VLAN 0 to HW filter on device bond1 [ 393.335789][ T8813] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 393.381761][T16243] bond1: (slave dummy0): making interface the new active one [ 393.391480][T16243] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 393.405090][T16244] bond1 (unregistering): (slave dummy0): Releasing active interface [ 393.415680][T16244] bond1 (unregistering): Released all slaves [ 393.502104][T16247] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 393.516667][T16247] ext4 filesystem being mounted at /401/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 393.545273][T16251] syzkaller0: entered promiscuous mode [ 393.550848][T16251] syzkaller0: entered allmulticast mode [ 393.717707][T16258] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 393.744312][T16259] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 393.752479][T16259] EXT4-fs (loop1): orphan cleanup on readonly fs [ 393.759682][T16259] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.3800: Failed to acquire dquot type 1 [ 393.771351][T16259] EXT4-fs (loop1): Remounting filesystem read-only [ 393.778055][T16259] EXT4-fs (loop1): 1 truncate cleaned up [ 393.787499][T16259] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 393.840471][T16258] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 393.859193][T16258] ext4 filesystem being mounted at /197/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 394.011870][T12481] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 394.040167][ T8813] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 394.091631][T16275] set_capacity_and_notify: 6 callbacks suppressed [ 394.091653][T16275] loop3: detected capacity change from 0 to 8192 [ 394.115186][T16279] loop5: detected capacity change from 0 to 512 [ 394.202156][T16279] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 394.226932][T16279] ext4 filesystem being mounted at /402/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 394.360633][T16288] veth0_to_team: entered promiscuous mode [ 394.479743][T16293] IPVS: stopping master sync thread 16294 ... [ 394.661620][ T8813] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 395.053701][T12972] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 395.187794][T16300] loop0: detected capacity change from 0 to 512 [ 395.219477][T16300] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 395.448479][T16300] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 395.461837][T16305] IPVS: stopping master sync thread 16306 ... [ 395.533013][T16312] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3811'. [ 395.554936][T16300] ext4 filesystem being mounted at /200/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 395.642690][T16314] random: crng reseeded on system resumption [ 395.834020][T12481] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 395.887245][T16321] loop0: detected capacity change from 0 to 128 [ 396.006147][T16327] loop2: detected capacity change from 0 to 128 [ 397.140854][T16341] IPVS: stopping master sync thread 16344 ... [ 397.151850][T16343] IPVS: stopping master sync thread 16345 ... [ 397.361164][T16348] loop0: detected capacity change from 0 to 512 [ 397.381511][T16350] netlink: 256 bytes leftover after parsing attributes in process `syz.5.3822'. [ 397.405109][T16348] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 397.413413][T16348] EXT4-fs (loop0): orphan cleanup on readonly fs [ 397.420492][T16348] __quota_error: 83 callbacks suppressed [ 397.420572][T16348] Quota error (device loop0): find_block_dqentry: Quota for id 0 referenced but not present [ 397.436648][T16348] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 397.446190][T16348] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.3823: Failed to acquire dquot type 1 [ 397.457987][T16348] EXT4-fs (loop0): Remounting filesystem read-only [ 397.464699][T16348] EXT4-fs (loop0): 1 truncate cleaned up [ 397.471297][T16348] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 397.486011][ T29] audit: type=1400 audit(1766892127.229:18334): avc: denied { mount } for pid=16347 comm="syz.0.3823" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 397.586463][T16357] audit: audit_backlog=65 > audit_backlog_limit=64 [ 397.593156][T16357] audit: audit_lost=6 audit_rate_limit=0 audit_backlog_limit=64 [ 397.601494][T16357] audit: backlog limit exceeded [ 397.606382][T16357] audit: audit_backlog=65 > audit_backlog_limit=64 [ 397.612955][T16357] audit: audit_lost=7 audit_rate_limit=0 audit_backlog_limit=64 [ 397.612961][ T29] audit: type=1400 audit(1766892127.279:18335): avc: denied { read } for pid=3046 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 397.620637][T16357] audit: backlog limit exceeded [ 397.750261][T16363] loop3: detected capacity change from 0 to 128 [ 397.762849][T16362] loop2: detected capacity change from 0 to 512 [ 397.786786][T16359] loop5: detected capacity change from 0 to 8192 [ 397.823197][T16362] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 397.855245][T16362] ext4 filesystem being mounted at /152/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 398.249663][T13596] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 398.487561][T12481] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 398.566853][T16384] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 398.577948][T16385] IPVS: stopping master sync thread 16384 ... [ 398.640657][T16393] loop2: detected capacity change from 0 to 512 [ 398.647937][T16393] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 398.661191][T16392] syzkaller0: entered promiscuous mode [ 398.666781][T16392] syzkaller0: entered allmulticast mode [ 398.703560][T16393] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 398.716808][T16393] ext4 filesystem being mounted at /153/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 398.855254][T13596] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 398.997943][T16413] netlink: 'syz.5.3843': attribute type 1 has an invalid length. [ 399.005938][T16413] netlink: 'syz.5.3843': attribute type 4 has an invalid length. [ 399.014104][T16413] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.3843'. [ 399.106189][T16413] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3843'. [ 399.116638][T16411] set_capacity_and_notify: 3 callbacks suppressed [ 399.116654][T16411] loop2: detected capacity change from 0 to 128 [ 399.303468][T16420] syzkaller0: entered promiscuous mode [ 399.309210][T16420] syzkaller0: entered allmulticast mode [ 399.430866][T16423] FAULT_INJECTION: forcing a failure. [ 399.430866][T16423] name failslab, interval 1, probability 0, space 0, times 0 [ 399.443824][T16423] CPU: 0 UID: 0 PID: 16423 Comm: syz.5.3846 Not tainted syzkaller #0 PREEMPT(voluntary) [ 399.443880][T16423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 399.443899][T16423] Call Trace: [ 399.443910][T16423] [ 399.443922][T16423] __dump_stack+0x1d/0x30 [ 399.443956][T16423] dump_stack_lvl+0x95/0xd0 [ 399.444004][T16423] dump_stack+0x15/0x1b [ 399.444058][T16423] should_fail_ex+0x265/0x280 [ 399.444083][T16423] should_failslab+0x8c/0xb0 [ 399.444114][T16423] __kmalloc_node_track_caller_noprof+0xb9/0x5b0 [ 399.444289][T16423] ? sidtab_sid2str_get+0xa0/0x130 [ 399.444329][T16423] kmemdup_noprof+0x2b/0x70 [ 399.444350][T16423] sidtab_sid2str_get+0xa0/0x130 [ 399.444468][T16423] security_sid_to_context_core+0x1eb/0x2e0 [ 399.444514][T16423] security_sid_to_context+0x27/0x40 [ 399.444556][T16423] avc_audit_post_callback+0x10f/0x520 [ 399.444677][T16423] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 399.444728][T16423] common_lsm_audit+0x1bb/0x230 [ 399.444782][T16423] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 399.444837][T16423] slow_avc_audit+0x104/0x140 [ 399.444889][T16423] avc_has_perm+0x13a/0x180 [ 399.444920][T16423] selinux_kernel_module_request+0xb0/0xe0 [ 399.444966][T16423] security_kernel_module_request+0x36/0x70 [ 399.445104][T16423] __request_module+0x121/0x3e0 [ 399.445128][T16423] ? capable+0x7c/0xb0 [ 399.445168][T16423] dev_load+0x61/0xc0 [ 399.445242][T16423] dev_ioctl+0x2d1/0x960 [ 399.445331][T16423] sock_do_ioctl+0x197/0x220 [ 399.445361][T16423] sock_ioctl+0x41b/0x610 [ 399.445406][T16423] ? __pfx_sock_ioctl+0x10/0x10 [ 399.445453][T16423] __se_sys_ioctl+0xce/0x140 [ 399.445542][T16423] __x64_sys_ioctl+0x43/0x50 [ 399.445587][T16423] x64_sys_call+0x14b0/0x3000 [ 399.445623][T16423] do_syscall_64+0xca/0x2b0 [ 399.445744][T16423] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.445775][T16423] RIP: 0033:0x7f1016c7f749 [ 399.445866][T16423] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 399.445893][T16423] RSP: 002b:00007f10156df038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 399.445921][T16423] RAX: ffffffffffffffda RBX: 00007f1016ed5fa0 RCX: 00007f1016c7f749 [ 399.445940][T16423] RDX: 0000200000000340 RSI: 0000000000008946 RDI: 0000000000000003 [ 399.445958][T16423] RBP: 00007f10156df090 R08: 0000000000000000 R09: 0000000000000000 [ 399.445977][T16423] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 399.445994][T16423] R13: 00007f1016ed6038 R14: 00007f1016ed5fa0 R15: 00007ffe7eb12948 [ 399.446017][T16423] [ 399.729086][T16426] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3847'. [ 399.854860][T16431] netlink: 256 bytes leftover after parsing attributes in process `syz.2.3849'. [ 399.899546][T16437] loop3: detected capacity change from 0 to 512 [ 399.943419][T16437] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 399.969211][T16437] ext4 filesystem being mounted at /143/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 400.115716][T13827] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 400.140257][T16443] loop2: detected capacity change from 0 to 8192 [ 400.149491][T16448] batadv_slave_0: entered promiscuous mode [ 400.169036][T16448] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3855'. [ 400.252175][T16454] loop1: detected capacity change from 0 to 512 [ 400.258830][T16453] loop3: detected capacity change from 0 to 1024 [ 400.274264][T16453] EXT4-fs: Ignoring removed bh option [ 400.280425][T16454] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 400.308513][T16453] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 400.333304][T16454] EXT4-fs (loop1): 1 truncate cleaned up [ 400.341944][T16454] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 400.399003][T13827] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 400.516463][T12972] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 400.544748][T16465] loop5: detected capacity change from 0 to 4096 [ 400.704212][T16469] IPVS: stopping master sync thread 16470 ... [ 400.726467][T16468] loop3: detected capacity change from 0 to 128 [ 401.174567][T16472] loop1: detected capacity change from 0 to 512 [ 401.189274][T16472] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 401.212551][T16472] EXT4-fs (loop1): 1 truncate cleaned up [ 401.366868][ T3515] ================================================================== [ 401.375021][ T3515] BUG: KCSAN: data-race in fill_mg_cmtime / shmem_symlink [ 401.382236][ T3515] [ 401.384593][ T3515] write to 0xffff8881074c7544 of 4 bytes by task 3514 on cpu 0: [ 401.392251][ T3515] shmem_symlink+0x387/0x3b0 [ 401.396879][ T3515] vfs_symlink+0x1b4/0x1f0 [ 401.401316][ T3515] do_symlinkat+0xf0/0x470 [ 401.405812][ T3515] __x64_sys_symlink+0x50/0x60 [ 401.410599][ T3515] x64_sys_call+0x24a9/0x3000 [ 401.415397][ T3515] do_syscall_64+0xca/0x2b0 [ 401.419931][ T3515] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.425851][ T3515] [ 401.428190][ T3515] read to 0xffff8881074c7544 of 4 bytes by task 3515 on cpu 1: [ 401.435840][ T3515] fill_mg_cmtime+0x5b/0x260 [ 401.440472][ T3515] generic_fillattr+0x24a/0x340 [ 401.445350][ T3515] shmem_getattr+0x181/0x200 [ 401.449973][ T3515] vfs_getattr_nosec+0x146/0x1e0 [ 401.454963][ T3515] vfs_statx+0x113/0x390 [ 401.459233][ T3515] vfs_fstatat+0x115/0x170 [ 401.463670][ T3515] __se_sys_newfstatat+0x55/0x260 [ 401.468719][ T3515] __x64_sys_newfstatat+0x55/0x70 [ 401.473779][ T3515] x64_sys_call+0x111f/0x3000 [ 401.478482][ T3515] do_syscall_64+0xca/0x2b0 [ 401.483039][ T3515] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.488954][ T3515] [ 401.491310][ T3515] value changed: 0x06ad6142 -> 0x0727a9a8 [ 401.497045][ T3515] [ 401.499385][ T3515] Reported by Kernel Concurrency Sanitizer on: [ 401.505557][ T3515] CPU: 1 UID: 0 PID: 3515 Comm: udevd Not tainted syzkaller #0 PREEMPT(voluntary) [ 401.514876][ T3515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 401.525140][ T3515] ================================================================== [ 401.535566][T16481] loop5: detected capacity change from 0 to 8192 [ 401.584058][T16488] loop3: detected capacity change from 0 to 512 [ 401.605962][T16488] EXT4-fs (loop3): orphan cleanup on readonly fs [ 401.643433][T16488] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #3: comm syz.3.3869: corrupted inode contents [ 401.658641][T16488] EXT4-fs error (device loop3): ext4_dirty_inode:6502: inode #3: comm syz.3.3869: mark_inode_dirty error [ 401.670462][T16488] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #3: comm syz.3.3869: corrupted inode contents [ 401.682547][T16488] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #3: comm syz.3.3869: mark_inode_dirty error [ 401.694211][T16488] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.3869: Failed to acquire dquot type 0 [ 401.706207][T16488] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #16: comm syz.3.3869: corrupted inode contents [ 401.718510][T16488] EXT4-fs error (device loop3): ext4_dirty_inode:6502: inode #16: comm syz.3.3869: mark_inode_dirty error [ 401.730082][T16488] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #16: comm syz.3.3869: corrupted inode contents [ 401.742481][T16488] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #16: comm syz.3.3869: mark_inode_dirty error [ 401.754107][T16488] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #16: comm syz.3.3869: corrupted inode contents [ 401.766420][T16488] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 401.775346][T16488] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #16: comm syz.3.3869: corrupted inode contents [ 401.787573][T16488] EXT4-fs error (device loop3): ext4_truncate:4635: inode #16: comm syz.3.3869: mark_inode_dirty error [ 401.799025][T16488] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 401.808597][T16488] EXT4-fs (loop3): 1 truncate cleaned up