last executing test programs: 5.890318493s ago: executing program 4 (id=511): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000140)='\x00', 0x89901) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, 0x0, r0, 0x0, 0x46) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7dc470d00281f324, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$RTC_UIE_ON(r4, 0x7003) ioctl$RTC_WKALM_SET(r4, 0x4028700f, &(0x7f0000000000)={0x1, 0x0, {0x7, 0x17, 0x14, 0x10, 0x1, 0xe80, 0x5, 0x11b}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r3, 0x0, 0x20000ffffffff}, 0x18) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0xf) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000100)={0x28, 0x18, 0x1, 0x0, 0x0, {0x2}, [@typed={0x8, 0x800, 0x0, 0x0, @ipv4=@multicast2}, @nested={0xc, 0x8, 0x0, 0x1, [@typed={0x8, 0xc, 0x0, 0x0, @uid}]}]}, 0x28}}, 0x0) ioctl$TCFLSH(r5, 0x400455c8, 0x0) syz_usb_connect(0x2, 0xfffffffffffffe86, 0x0, 0x0) r9 = open(&(0x7f0000000080)='.\x00', 0x518282, 0x78e22799f4a46e8e) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r10) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r9, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x24, r11, 0x92a, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x4, 0x6f}}}}, [@NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r12 = timerfd_create(0x0, 0x0) timerfd_settime(r12, 0x3, &(0x7f0000000440)={{0x0, 0x3938700}}, 0x0) dup(0xffffffffffffffff) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x1}, 0x0, &(0x7f00000002c0)={0x40000000000003ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x4}, 0x0, 0x0) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) 4.412233713s ago: executing program 0 (id=523): syz_io_uring_setup(0x2ab6, &(0x7f0000000000)={0x0, 0x8be8, 0x86bf32413d81f7a5, 0x1, 0x28c}, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x8, 0x12, 0xffffffffffffffff, 0x10000000) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x8000, 0x0) ioctl$SNAPSHOT_CREATE_IMAGE(r0, 0x40043311, &(0x7f0000000180)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000200)}, 0x20) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000440)={'erspan0\x00', &(0x7f0000000340)={'gretap0\x00', 0x0, 0x8010, 0x7, 0x2c0dcf76, 0x0, {{0x14, 0x4, 0x3, 0x8, 0x50, 0x64, 0x0, 0xb, 0x4, 0x0, @multicast1, @broadcast, {[@generic={0x7, 0xb, "aa2ce34b02429d5990"}, @timestamp={0x44, 0x8, 0xbc, 0x0, 0x1, [0x8]}, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x16, 0x3, [{0x5, 0x2}, {0x2, 0xe, "c65c21099e2f64fc054c38f3"}]}, @end, @noop, @generic={0x86, 0x6, "9e4be1a9"}]}}}}}) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x6, [@fwd={0x5}, @var={0x10, 0x0, 0x0, 0xe, 0x3, 0x1}]}, {0x0, [0x0, 0x5f, 0x2e, 0x61]}}, &(0x7f00000004c0)=""/99, 0x3a, 0x63, 0x0, 0x3}, 0x28) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000005c0)={0x4, 0x0}, 0x8) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000600)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x5dd5, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x50) r6 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r7 = creat(&(0x7f0000000740)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x7, &(0x7f0000000280)=@raw=[@cb_func={0x18, 0x4, 0x4, 0x0, 0xfffffffffffffff9}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}], &(0x7f00000002c0)='syzkaller\x00', 0x2, 0x15, &(0x7f0000000300)=""/21, 0x40f00, 0x38, '\x00', r2, @sched_cls=0x2e, r3, 0x8, &(0x7f0000000580)={0x9, 0x3}, 0x8, 0x10, 0x0, 0x0, r4, 0xffffffffffffffff, 0x9, &(0x7f0000000780)=[r5, r6, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, r7], &(0x7f00000007c0)=[{0x2, 0x3, 0xf, 0x8}, {0x2, 0x5, 0xa, 0xa}, {0x3, 0x4, 0x1acf, 0x1}, {0x0, 0x3, 0x0, 0x6}, {0x1, 0x5, 0x3, 0xa}, {0x5, 0x3, 0x7, 0xc}, {0x1, 0x2, 0x1, 0xa}, {0x2, 0x4, 0xf, 0x2}, {0x3, 0x1, 0x9}], 0x10, 0x7}, 0x94) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@base={0x13, 0x7f, 0x1, 0x5, 0x4000, 0xffffffffffffffff, 0x1, '\x00', 0x0, r7, 0x2, 0x0, 0x1}, 0x50) clock_gettime(0x0, &(0x7f0000000a80)={0x0, 0x0}) nanosleep(&(0x7f0000000ac0)={r8, r9+10000000}, &(0x7f0000000b00)) r10 = getuid() stat(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000c40)='./file0\x00', &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x1, &(0x7f0000000d00)=[0xffffffffffffffff]) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000d40)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee01}}, './file0\x00'}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000d80)={0x0, 0x0, 0x0}, &(0x7f0000000dc0)=0xc) fsetxattr$system_posix_acl(r0, &(0x7f0000000b40)='system.posix_acl_access\x00', &(0x7f0000000e00)={{}, {0x1, 0x1}, [{0x2, 0x1}, {0x2, 0x4, r10}, {0x2, 0x2, 0xee00}, {0x2, 0x3, 0xee00}], {0x4, 0x3}, [{0x8, 0x7, 0xee01}, {0x8, 0x5, r11}, {0x8, 0x5, r12}, {0x8, 0x3, r13}, {0x8, 0x6, r14}, {0x8, 0x4, 0xffffffffffffffff}, {0x8, 0x0, r15}], {0x10, 0x1}, {0x20, 0x2}}, 0x7c, 0x1) r16 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000e80), 0x40, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r16, 0x8983, &(0x7f0000000ec0)={0x1, 'veth1_to_bridge\x00', {}, 0xf}) 3.497606981s ago: executing program 0 (id=527): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = syz_open_dev$sg(&(0x7f0000000740), 0x0, 0x18b203) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2285, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x8, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r2}, 0x18) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) 3.34261269s ago: executing program 0 (id=529): r0 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f0000"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000b80)=ANY=[@ANYRES64=r0, @ANYRES8=r1, @ANYRESHEX=r0, @ANYRESHEX=r2, @ANYRESHEX=r2], 0x0, 0x9, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r2}, &(0x7f0000000200), &(0x7f0000000240)=r3}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="8b3e0023ec00"/20, @ANYRES32], 0x50) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000240000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b0000e8b00000000000000000000404440000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x7, 0xf, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000ad7f5c4c3e6b3b97b7030000000000008500000005000000bf09000000000000b609f582d5e05c1f2cd00000000000023f43e523d4000000b5030000000000008500000085000000b70000000000000000000000000000002199799fe67ff934075e0203e60601f3948dfc0e6fb6990254245857e8236e5f65c5c1384e62483ea779138143cf18babbac9333b86d66c524287e"], &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000000380)={[{@errors_remount}, {@discard}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5e}}, {@noauto_da_alloc}, {@bsdgroups}, {@jqfmt_vfsv1}, {@abort}, {@data_err_ignore}]}, 0x1, 0x476, &(0x7f0000000540)="$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") prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x1, 0x0, 0x7ffc0002}]}) 3.130775468s ago: executing program 2 (id=532): syz_io_uring_setup(0x2ab6, &(0x7f0000000000)={0x0, 0x8be8, 0x86bf32413d81f7a5, 0x1, 0x28c}, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x8, 0x12, 0xffffffffffffffff, 0x10000000) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x8000, 0x0) ioctl$SNAPSHOT_CREATE_IMAGE(r0, 0x40043311, &(0x7f0000000180)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000200)}, 0x20) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000440)={'erspan0\x00', &(0x7f0000000340)={'gretap0\x00', 0x0, 0x8010, 0x7, 0x2c0dcf76, 0x0, {{0x14, 0x4, 0x3, 0x8, 0x50, 0x64, 0x0, 0xb, 0x4, 0x0, @multicast1, @broadcast, {[@generic={0x7, 0xb, "aa2ce34b02429d5990"}, @timestamp={0x44, 0x8, 0xbc, 0x0, 0x1, [0x8]}, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x16, 0x3, [{0x5, 0x2}, {0x2, 0xe, "c65c21099e2f64fc054c38f3"}]}, @end, @noop, @generic={0x86, 0x6, "9e4be1a9"}]}}}}}) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x6, [@fwd={0x5}, @var={0x10, 0x0, 0x0, 0xe, 0x3, 0x1}]}, {0x0, [0x0, 0x5f, 0x2e, 0x61]}}, &(0x7f00000004c0)=""/99, 0x3a, 0x63, 0x0, 0x3}, 0x28) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000005c0)={0x4, 0x0}, 0x8) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000600)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x5dd5, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x50) r6 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000006c0)=@o_path={&(0x7f0000000680)='./file0\x00', 0x0, 0x10, r0}, 0x18) r7 = creat(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x7, &(0x7f0000000280)=@raw=[@cb_func={0x18, 0x4, 0x4, 0x0, 0xfffffffffffffff9}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}], &(0x7f00000002c0)='syzkaller\x00', 0x2, 0x15, &(0x7f0000000300)=""/21, 0x40f00, 0x38, '\x00', r2, @sched_cls=0x2e, r3, 0x8, &(0x7f0000000580)={0x9, 0x3}, 0x8, 0x10, 0x0, 0x0, r4, 0xffffffffffffffff, 0x9, &(0x7f0000000780)=[r5, r6, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, r7], &(0x7f00000007c0)=[{0x2, 0x3, 0xf, 0x8}, {0x2, 0x5, 0xa, 0xa}, {0x3, 0x4, 0x1acf, 0x1}, {0x0, 0x3, 0x0, 0x6}, {0x1, 0x5, 0x3, 0xa}, {0x5, 0x3, 0x7, 0xc}, {0x1, 0x2, 0x1, 0xa}, {0x2, 0x4, 0xf, 0x2}, {0x3, 0x1, 0x9}], 0x10, 0x7}, 0x94) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@base={0x13, 0x7f, 0x1, 0x5, 0x4000, 0xffffffffffffffff, 0x1, '\x00', 0x0, r7, 0x2, 0x0, 0x1}, 0x50) clock_gettime(0x0, &(0x7f0000000a80)={0x0, 0x0}) nanosleep(&(0x7f0000000ac0)={r8, r9+10000000}, &(0x7f0000000b00)) r10 = getuid() stat(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000c40)='./file0\x00', &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x1, &(0x7f0000000d00)=[0xffffffffffffffff]) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000d40)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee01}}, './file0\x00'}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000d80)={0x0, 0x0, 0x0}, &(0x7f0000000dc0)=0xc) fsetxattr$system_posix_acl(r0, &(0x7f0000000b40)='system.posix_acl_access\x00', &(0x7f0000000e00)={{}, {0x1, 0x1}, [{0x2, 0x1}, {0x2, 0x4, r10}, {0x2, 0x2, 0xee00}, {0x2, 0x3, 0xee00}], {0x4, 0x3}, [{0x8, 0x7, 0xee01}, {0x8, 0x5, r11}, {0x8, 0x5, r12}, {0x8, 0x3, r13}, {0x8, 0x6, r14}, {0x8, 0x4, 0xffffffffffffffff}, {0x8, 0x0, r15}], {0x10, 0x1}, {0x20, 0x2}}, 0x7c, 0x1) r16 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000e80), 0x40, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r16, 0x8983, &(0x7f0000000ec0)={0x1, 'veth1_to_bridge\x00', {}, 0xf}) 3.11223747s ago: executing program 0 (id=533): ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000240)={{0x1, 0x1, 0x18}, './file0\x00'}) socket$inet_sctp(0x2, 0x5, 0x84) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x4000000) mbind(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x1ff, 0x3) r0 = syz_clone(0x0, 0x0, 0x43, 0x0, 0x0, 0x0) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000002040)={0x3, 0xf8, 0x200}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400df7f08000a00", @ANYRES32], 0x3c}}, 0x0) process_vm_writev(r0, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) 2.930455124s ago: executing program 0 (id=535): socket$pppl2tp(0x18, 0x1, 0x1) socket$inet_udp(0x2, 0x2, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r0, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001840)=r1, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000240)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000000000000b70300001d000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000000)={0x0, 0xe, "9b036949686590a546b45197020e"}, &(0x7f0000000040)=0x16) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r5 = socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="0700000004000000800000000400000028"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@ipv6_newrule={0x30, 0x20, 0x1, 0x70bd27, 0x25dfdbfc, {0xa, 0x0, 0x20, 0x40, 0x0, 0x0, 0x0, 0x2}, [@FRA_SRC={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x4, 0x0}}]}, 0x30}, 0x1, 0x0, 0x0, 0x24048844}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[], 0x5c}}, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xfe, 0x0, 0x7ffc9ffe}]}) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000f00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000300)='kmem_cache_free\x00', r7}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) gettid() sigaltstack(&(0x7f00000000c0)={&(0x7f0000002400)=""/4095, 0x0, 0xfff}, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f00000000c0)={r4, 0x404, 0xa, [0x4, 0x4, 0x9, 0x5, 0x8, 0xc, 0x0, 0x8, 0xff, 0x1ff]}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) 2.895562568s ago: executing program 3 (id=537): perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0x8624, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x57f32aa69792d94d, @perf_bp={0x0, 0x19}, 0x1140, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x8020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000880)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB], 0x38}}, 0x0) 2.774172084s ago: executing program 3 (id=538): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x34, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_REPLY={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x200a}]}, 0x34}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a00000709000100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41002, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$IP_SET_OP_GET_BYNAME(r5, 0x1, 0x53, 0x0, &(0x7f00000002c0)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000280)={0x1, 0x0, 0x2f, 0x9}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x198, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x164, 0x4, 0x0, 0x1, [{0x160, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x150, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_NAME={0xb, 0x1, 'policy\x00'}, @NFTA_MATCH_INFO={0x138, 0x3, "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"}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "9d"}]}], {0x14}}, 0x1c0}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) 2.57193817s ago: executing program 1 (id=540): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) socket$tipc(0x1e, 0x5, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000200850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={0x0, r2}, 0x18) msgsnd(0x0, &(0x7f0000000340)=ANY=[@ANYRES16], 0x2000, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f00000004c0)={{0x0, 0xee00, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0x0, 0xb, 0x6f76, 0x7, 0x0, 0x1, 0x8, 0x7f, 0x3}) 1.493528388s ago: executing program 0 (id=541): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) r6 = openat$cgroup_subtree(r5, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) write$cgroup_subtree(r6, 0x0, 0x0) 1.472846531s ago: executing program 4 (id=542): r0 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000b80)=ANY=[@ANYRES64=r0, @ANYRES8=r1, @ANYRESHEX=r0, @ANYRES8=r1, @ANYRESHEX=r2, @ANYRESHEX=r2], 0x0, 0x9, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r2}, &(0x7f0000000200), &(0x7f0000000240)=r3}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) ptrace(0x10, r1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="8b3e0023ec00"/20, @ANYRES32], 0x50) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000a00)='kvm_ioapic_set_irq\x00', r6, 0x0, 0xfffffffffffffffd}, 0x18) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b0000e8b00000000000000000000404440000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x7, 0xf, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000ad7f5c4c3e6b3b97b7030000000000008500000005000000bf09000000000000b609f582d5e05c1f2cd00000000000023f43e523d4000000b5030000000000008500000085000000b70000000000000000000000000000002199799fe67ff934075e0203e60601f3948dfc0e6fb6990254245857e8236e5f65c5c1384e62483ea779138143cf18babbac9333b86d66c524287e"], &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00'}, 0x10) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000000380)={[{@errors_remount}, {@discard}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5e}}, {@noauto_da_alloc}, {@bsdgroups}, {@jqfmt_vfsv1}, {@abort}, {@data_err_ignore}]}, 0x1, 0x476, &(0x7f0000000540)="$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") prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) 1.332205089s ago: executing program 3 (id=543): creat(&(0x7f0000000580)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = socket$igmp6(0xa, 0x3, 0x2) sendmsg$inet(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000100)="70f1bd881430d3e55ce39afb6054bbc3c1cc67ab145136f3856aba10e63c90a9c2a46a7ddf74b6f49106279f6c8e3248bb2a0ce49a62b55f7555ed94c175ff3039e4f1f758b3ccd2b9659bdb9b3b8f53211188307078161d1231d949398bae9cb41604f408bd96d38726ee120a029f117c04b2ed0a1a413f98450d4c3bb1b3bd6241a7e017c17fd8e134f5f42e0c110de846bcdc9ffee96a3aaac4a95c5753b0f94d00167e0415980f9e55e72b2b1a28d836e801c0880715970671f9a13aaeee127cbe857ff846a491dd7b1fd5c1450608", 0xd1}], 0x1, &(0x7f0000000340)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x3}}, @ip_retopts={{0x54, 0x0, 0x7, {[@timestamp_addr={0x44, 0x44, 0xb7, 0x1, 0x1, [{@remote, 0x2}, {@remote, 0x5}, {@broadcast, 0x9}, {@private=0xa010101, 0x3e}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}, {@loopback, 0x1}, {@loopback, 0x10}, {@local, 0x9}]}]}}}], 0x70}, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r2}, 0x10) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@version_9p2000}]}}) 1.319239221s ago: executing program 2 (id=544): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0x22c7, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000002c0)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f00000008c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000880)={&(0x7f0000000700)={0x178, 0x1403, 0x1, 0x70bd26, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'ip6tnl0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'pim6reg1\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0_to_team\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'wg2\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'dummy0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0_virt_wifi\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bridge_slave_0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth1_to_team\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'vcan0\x00'}}]}, 0x178}, 0x1, 0x0, 0x0, 0x1}, 0x0) 1.297326153s ago: executing program 1 (id=545): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) socket$inet(0x2, 0x1, 0x80000001) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r2, &(0x7f0000001e40)=[{{0x0, 0x0, &(0x7f0000001a40)=[{&(0x7f0000001580)=""/179, 0xb3}], 0x1}, 0x7}], 0x1, 0x100, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="24000000390007010000000000000000027c0000040000000c000180060006008035"], 0x24}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r4, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={0x0, 0x9c}, 0x1, 0x0, 0x0, 0x8024}, 0x4081) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl$Q_GETINFO(0xffffffff80000502, &(0x7f00000002c0)=@nbd={'/dev/nbd', 0x0}, r5, &(0x7f00000003c0)) mount$9p_rdma(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', 0x0, 0x80, &(0x7f0000000580)=ANY=[@ANYBLOB='tran3=rdma,port=0x0000000000004e23,access=', @ANYRESDEC=r5, @ANYBLOB=',rq=0x0000000000000009,timeout=0x0000000000000007,func']) r6 = creat(&(0x7f00000000c0)='./file0\x00', 0xa2) r7 = dup2(r6, r6) ioctl$BLKTRACESETUP(r7, 0xc0481273, &(0x7f0000000240)={'\x00', 0x40, 0xa9a, 0x76c4, 0x7, 0x7}) ioctl$BLKTRACESTART(r7, 0x1274, 0x0) symlinkat(&(0x7f0000000400)='./bus\x00', r7, &(0x7f0000000640)='./file0\x00') syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f00000007c0)={[{@nodioread_nolock}, {@errors_remount}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x3}}]}, 0x1, 0x46f, &(0x7f0000000bc0)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000500)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmmsg$inet(r1, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) 1.159999791s ago: executing program 2 (id=546): socket$inet_sctp(0x2, 0x5, 0x84) socket$inet_sctp(0x2, 0x5, 0x84) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x4000000) mbind(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x1ff, 0x3) r0 = syz_clone(0x0, 0x0, 0x43, 0x0, 0x0, 0x0) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000002040)={0x3, 0xf8, 0x200}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400df7f08000a00", @ANYRES32], 0x3c}}, 0x0) process_vm_writev(r0, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) 1.074777892s ago: executing program 3 (id=547): r0 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000b80)=ANY=[@ANYRES64=r0, @ANYRES8=r1, @ANYRESHEX=r0, @ANYRES8=r1, @ANYRESHEX, @ANYRESHEX], 0x0, 0x9, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{}, &(0x7f0000000200), &(0x7f0000000240)=r2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0, r4}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="8b3e0023ec00"/20, @ANYRES32], 0x50) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b0000e8b00000000000000000000404440000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x7, 0xf, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000ad7f5c4c3e6b3b97b7030000000000008500000005000000bf09000000000000b609f582d5e05c1f2cd00000000000023f43e523d4000000b5030000000000008500000085000000b70000000000000000000000000000002199799fe67ff934075e0203e60601f3948dfc0e6fb6990254245857e8236e5f65c5c1384e62483ea779138143cf18babbac9333b86d66c524287e"], &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000000380)={[{@errors_remount}, {@discard}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5e}}, {@noauto_da_alloc}, {@bsdgroups}, {@jqfmt_vfsv1}, {@abort}, {@data_err_ignore}]}, 0x1, 0x476, &(0x7f0000000540)="$eJzs3M1vFOUfAPDvzLblx2v7Q3wBUavE2PjS0oLKwYtGEw8YTfSAN2tbCKFQQ2sihEg1Bi8mhkTP6tHEv8CbF6OeTLzq3ZAQ5QJ6qpnZmbK7dLctLLuF/XySZZ9n5pl9nm9nnp1n5pklgJ41nP2TRGyLiN8jYrCarS8wXH27duXc1D9Xzk0lsbT05l9JXu7qlXNTZdFyu61FZiSNSD9JikrqzZ85e2JydnbmdJEfWzj53tj8mbPPHD85eWzm2MypiUOHDh4Yf/65iWfbEmcW19U9H87t3f3q2xdfmzpy8d2fv8vau61YXxtHg00N72s2nAX+91JueWFafXt83RFsbNtr0klfFxvCulQiIttd/Xn/H4xKXN95g/HKx11tHHBbZeemFie2xSXgLpZEt1sAdEd5os+uf8tXh4YeG8LlF6sXQFnc14pXdU1feameXxttv031D0fEkcV/v8pe0fo+BABAW3w29eXheHql8V8a99WU21HMoQxFxP8jYmdE3BMRuyLi3oi87P0R8cDqVaa1mcapoRvHP+mlmw5uDbLx3wvF3Fb9+G+5mUOVIrc9j78/OXp8dmZ/8TcZif5NWX68RR0/vPzb583W1Y7/sldWfzkWLNpxqa/hBt305MJkPihtg8sfRezpWyn+ZHkmIImI3RGxZ30fvaNMHH/y273NCq0efwttmGda+ibiier+X4yG+EtJ6/nJsf/F7Mz+sfKouNEvv154o1n9txR/G2T7f0v98d9YZCipna+dX38dF/74tOk1zc0e/wPJW/m2A8WyDyYXFk6PRwwkh/N83fKJ69uW+bJ8Fv/IvpX7/85imyz+ByMiO4gfioiHI+KRou2PRsRjEbGvRfw/vdR8XX38m7d1Y/9PN3z/bc7XLB//Dft//YnKiR+/X7n2r99Z2/4/mKdGiiX5998q1trAW/zzAQAAwB0hzZ+BT9LR5XSajo5Wn+HfFVvS2bn5haeOzr1/arr6rPxQ9Kflna7Bmvuh48li8YnV/ERxr7hcf6C4b/xFZXOeH52am53ucuzQ67Y26f+ZPyvdbh1w2600jzYx0IWGAB3X2P/T+uz51zvZGKCjmj5Hs6Wz7QA6b5Xn6NJOtQPoPP9fC/Sulfr/+Ya8uQC4Ozn/Q+/S/6F36f/Qu/R/6Emr/Ui+cou//Ze44xLJ2gpH2v2mboxEf0S05QMHNkQ4RaLb30wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADt8V8AAAD//5qI6jE=") prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x1, 0x0, 0x7ffc0002}]}) 1.064301983s ago: executing program 4 (id=548): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="18015b000200000000003b8100009edb78fa00956cda907031bb20cce259"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r0}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff27}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') unshare(0x8000000) semget$private(0x0, 0x4000, 0x555) semtimedop(0x0, &(0x7f00000002c0)=[{0x3, 0x8, 0x1800}], 0x1, 0x0) unshare(0x2c040000) socket$unix(0x1, 0x1, 0x0) lchown(&(0x7f00000006c0)='./file0\x00', 0x0, 0xee01) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000003c0)='mm_page_alloc\x00'}, 0x18) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000100"/28], 0x48) chown(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) accept$unix(0xffffffffffffffff, 0x0, 0x0) 941.276729ms ago: executing program 2 (id=549): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x3}, 0x18) open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x389b0d52417bb201) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x18) mknod$loop(&(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, 0x1) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000340)={0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000001140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000440), 0x8) sendmsg$NL80211_CMD_SET_WOWLAN(r3, &(0x7f0000000800)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000007c0)={&(0x7f00000006c0)={0x98, 0x0, 0x800, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x13}, @val={0x8}, @void}}, [@NL80211_ATTR_WOWLAN_TRIGGERS={0x74, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}, @NL80211_WOWLAN_TRIG_NET_DETECT={0x6c, 0x12, 0x0, 0x1, [@NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0xe}, @NL80211_ATTR_SCAN_SSIDS={0x28, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ibss_ssid}]}, @NL80211_ATTR_SCAN_SSIDS={0x28, 0x2d, 0x0, 0x1, [{0xc, 0x0, @random="b6fe0cf443f76022"}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ap_ssid}]}]}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x4008019}, 0x20046080) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) ioctl$GIO_UNIMAP(r2, 0x4b66, &(0x7f00000000c0)={0x0, 0x0}) 915.719863ms ago: executing program 4 (id=550): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRES16=r0], 0x7c}, 0x1, 0x0, 0x0, 0xc000}, 0x20000040) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x20081e, &(0x7f0000000840)={[{@grpjquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xa30}}, {@grpquota}]}, 0x1, 0x52a, &(0x7f0000001440)="$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") r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x1a2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0xa4c42, 0x108) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0700000004000000080000000100"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70300000003000085"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) fallocate(r1, 0x0, 0xbf5, 0x2000402) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0xc, r1, 0x0, 0x18, 0x0, 0xfffffffffe000001}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0xa, 0x2) r7 = socket$packet(0x11, 0x2, 0x300) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000c00)=@newtfilter={0x48, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0x0, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x14, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x8, 0xe}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r5, &(0x7f0000000480)=ANY=[@ANYBLOB="000086dd0003110204000000a60c6eec00be004c2ffffe80000000000000000000000000000000010000000000000000000000000001", @ANYRES8=r0, @ANYRES64=r7, @ANYRES8=0x0, @ANYRESHEX=r0, @ANYRESDEC=r7, @ANYBLOB="1a9b78da6df571d59fb74660ddbf203f55e2fddfe507d0066fab8f017960cd2d92c2e2530895604328adf0f58fab528c942b84ce568d76f2f9675fdd15edb889c67b1368c58b7a46a6e64ac614893bc66a132f6f2210062aa104a9d4f0908b5ca1226234bbd51b18b8e655f2134c3bc31678a7c0fa8368fe6c8bafe0ba1fdc3a22c643b713038184f10d635b05fd2985897fe2c2f3efe04d1c2d7b4b42adbacfb1832f0884ce2a7949b5d958fb2bba60236ba197438771cc6091be51ba748dbcdc8d3e3686a2d2c0a020d260aa8e038b71863b58cbd884b63255ae2043713da948281476acbc2afa0cb480ff09af5767ac111720c93b"], 0x82) sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x3f6, 0x200, 0x70bd25, 0x25dfdbfd, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x48000}, 0x4000041) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r12 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r12, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 811.915336ms ago: executing program 2 (id=551): r0 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f0000"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000b80)=ANY=[@ANYRES64=r0, @ANYRES8=r1, @ANYRESHEX=r0, @ANYRESHEX=r2, @ANYRESHEX=r2], 0x0, 0x9, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r2}, &(0x7f0000000200), &(0x7f0000000240)=r3}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="8b3e0023ec00"/20, @ANYRES32], 0x50) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000240000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b0000e8b00000000000000000000404440000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x7, 0xf, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000ad7f5c4c3e6b3b97b7030000000000008500000005000000bf09000000000000b609f582d5e05c1f2cd00000000000023f43e523d4000000b5030000000000008500000085000000b70000000000000000000000000000002199799fe67ff934075e0203e60601f3948dfc0e6fb6990254245857e8236e5f65c5c1384e62483ea779138143cf18babbac9333b86d66c524287e"], &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000000380)={[{@errors_remount}, {@discard}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5e}}, {@noauto_da_alloc}, {@bsdgroups}, {@jqfmt_vfsv1}, {@abort}, {@data_err_ignore}]}, 0x1, 0x476, &(0x7f0000000540)="$eJzs3M1vFOUfAPDvzLblx2v7Q3wBUavE2PjS0oLKwYtGEw8YTfSAN2tbCKFQQ2sihEg1Bi8mhkTP6tHEv8CbF6OeTLzq3ZAQ5QJ6qpnZmbK7dLctLLuF/XySZZ9n5pl9nm9nnp1n5pklgJ41nP2TRGyLiN8jYrCarS8wXH27duXc1D9Xzk0lsbT05l9JXu7qlXNTZdFyu61FZiSNSD9JikrqzZ85e2JydnbmdJEfWzj53tj8mbPPHD85eWzm2MypiUOHDh4Yf/65iWfbEmcW19U9H87t3f3q2xdfmzpy8d2fv8vau61YXxtHg00N72s2nAX+91JueWFafXt83RFsbNtr0klfFxvCulQiIttd/Xn/H4xKXN95g/HKx11tHHBbZeemFie2xSXgLpZEt1sAdEd5os+uf8tXh4YeG8LlF6sXQFnc14pXdU1feameXxttv031D0fEkcV/v8pe0fo+BABAW3w29eXheHql8V8a99WU21HMoQxFxP8jYmdE3BMRuyLi3oi87P0R8cDqVaa1mcapoRvHP+mlmw5uDbLx3wvF3Fb9+G+5mUOVIrc9j78/OXp8dmZ/8TcZif5NWX68RR0/vPzb583W1Y7/sldWfzkWLNpxqa/hBt305MJkPihtg8sfRezpWyn+ZHkmIImI3RGxZ30fvaNMHH/y273NCq0efwttmGda+ibiier+X4yG+EtJ6/nJsf/F7Mz+sfKouNEvv154o1n9txR/G2T7f0v98d9YZCipna+dX38dF/74tOk1zc0e/wPJW/m2A8WyDyYXFk6PRwwkh/N83fKJ69uW+bJ8Fv/IvpX7/85imyz+ByMiO4gfioiHI+KRou2PRsRjEbGvRfw/vdR8XX38m7d1Y/9PN3z/bc7XLB//Dft//YnKiR+/X7n2r99Z2/4/mKdGiiX5998q1trAW/zzAQAAwB0hzZ+BT9LR5XSajo5Wn+HfFVvS2bn5haeOzr1/arr6rPxQ9Kflna7Bmvuh48li8YnV/ERxr7hcf6C4b/xFZXOeH52am53ucuzQ67Y26f+ZPyvdbh1w2600jzYx0IWGAB3X2P/T+uz51zvZGKCjmj5Hs6Wz7QA6b5Xn6NJOtQPoPP9fC/Sulfr/+Ya8uQC4Ozn/Q+/S/6F36f/Qu/R/6Emr/Ui+cou//Ze44xLJ2gpH2v2mboxEf0S05QMHNkQ4RaLb30wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADt8V8AAAD//5qI6jE=") prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x1, 0x0, 0x7ffc0002}]}) 643.809028ms ago: executing program 3 (id=552): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="8b3e0023ec0000000000", @ANYRES32], 0x50) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757815"], 0x65) 545.60878ms ago: executing program 4 (id=553): r0 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000b80)=ANY=[@ANYRES64=r0, @ANYRES8=r1, @ANYRESHEX=r0, @ANYRES8=r1, @ANYRESHEX=r2, @ANYRESHEX=r2], 0x0, 0x9, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r2}, &(0x7f0000000200), &(0x7f0000000240)=r3}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) ptrace(0x10, r1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000b00)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x3f}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="8b3e0023ec00"/20, @ANYRES32], 0x50) r6 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_load(r6, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757815"], 0x65) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000a00)='kvm_ioapic_set_irq\x00', r7, 0x0, 0xfffffffffffffffd}, 0x18) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b0000e8b00000000000000000000404440000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x7, 0xf, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000ad7f5c4c3e6b3b97b7030000000000008500000005000000bf09000000000000b609f582d5e05c1f2cd00000000000023f43e523d4000000b5030000000000008500000085000000b70000000000000000000000000000002199799fe67ff934075e0203e60601f3948dfc0e6fb6990254245857e8236e5f65c5c1384e62483ea779138143cf18babbac9333b86d66c524287e"], &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ptrace$setregs(0xd, r1, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4204, r1, 0x200, &(0x7f0000000480)={0x0}) mknodat$null(0xffffffffffffff9c, 0x0, 0x0, 0x103) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xd, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x18, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r9}, 0x10) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000000380)={[{@errors_remount}, {@discard}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5e}}, {@noauto_da_alloc}, {@bsdgroups}, {@jqfmt_vfsv1}, {@abort}, {@data_err_ignore}]}, 0x1, 0x476, &(0x7f0000000540)="$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") prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x1, 0x0, 0x7ffc0002}]}) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) 519.950964ms ago: executing program 2 (id=554): syz_io_uring_setup(0x2ab6, &(0x7f0000000000)={0x0, 0x8be8, 0x86bf32413d81f7a5, 0x1, 0x28c}, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x8, 0x12, 0xffffffffffffffff, 0x10000000) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x8000, 0x0) ioctl$SNAPSHOT_CREATE_IMAGE(r0, 0x40043311, &(0x7f0000000180)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000200)}, 0x20) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000440)={'erspan0\x00', &(0x7f0000000340)={'gretap0\x00', 0x0, 0x8010, 0x7, 0x2c0dcf76, 0x0, {{0x14, 0x4, 0x3, 0x8, 0x50, 0x64, 0x0, 0xb, 0x4, 0x0, @multicast1, @broadcast, {[@generic={0x7, 0xb, "aa2ce34b02429d5990"}, @timestamp={0x44, 0x8, 0xbc, 0x0, 0x1, [0x8]}, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x16, 0x3, [{0x5, 0x2}, {0x2, 0xe, "c65c21099e2f64fc054c38f3"}]}, @end, @noop, @generic={0x86, 0x6, "9e4be1a9"}]}}}}}) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x6, [@fwd={0x5}, @var={0x10, 0x0, 0x0, 0xe, 0x3, 0x1}]}, {0x0, [0x0, 0x5f, 0x2e, 0x61]}}, &(0x7f00000004c0)=""/99, 0x3a, 0x63, 0x0, 0x3}, 0x28) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000005c0)={0x4, 0x0}, 0x8) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000600)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x5dd5, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x50) r6 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000006c0)=@o_path={&(0x7f0000000680)='./file0\x00', 0x0, 0x10, r0}, 0x18) r7 = creat(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x7, &(0x7f0000000280)=@raw=[@cb_func={0x18, 0x4, 0x4, 0x0, 0xfffffffffffffff9}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}], &(0x7f00000002c0)='syzkaller\x00', 0x2, 0x15, &(0x7f0000000300)=""/21, 0x40f00, 0x38, '\x00', r2, @sched_cls=0x2e, r3, 0x8, &(0x7f0000000580)={0x9, 0x3}, 0x8, 0x10, 0x0, 0x0, r4, 0xffffffffffffffff, 0x9, &(0x7f0000000780)=[r5, r6, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, r7], &(0x7f00000007c0)=[{0x2, 0x3, 0xf, 0x8}, {0x2, 0x5, 0xa, 0xa}, {0x3, 0x4, 0x1acf, 0x1}, {0x0, 0x3, 0x0, 0x6}, {0x1, 0x5, 0x3, 0xa}, {0x5, 0x3, 0x7, 0xc}, {0x1, 0x2, 0x1, 0xa}, {0x2, 0x4, 0xf, 0x2}, {0x3, 0x1, 0x9}], 0x10, 0x7}, 0x94) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@base={0x13, 0x7f, 0x1, 0x5, 0x4000, 0xffffffffffffffff, 0x1, '\x00', 0x0, r7, 0x2, 0x0, 0x1}, 0x50) clock_gettime(0x0, &(0x7f0000000a80)={0x0, 0x0}) nanosleep(&(0x7f0000000ac0)={r8, r9+10000000}, &(0x7f0000000b00)) r10 = getuid() stat(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000c40)='./file0\x00', &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x1, &(0x7f0000000d00)=[0xffffffffffffffff]) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000d40)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee01}}, './file0\x00'}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000d80)={0x0, 0x0, 0x0}, &(0x7f0000000dc0)=0xc) fsetxattr$system_posix_acl(r0, &(0x7f0000000b40)='system.posix_acl_access\x00', &(0x7f0000000e00)={{}, {0x1, 0x1}, [{0x2, 0x1}, {0x2, 0x4, r10}, {0x2, 0x2, 0xee00}, {0x2, 0x3, 0xee00}], {0x4, 0x3}, [{0x8, 0x7, 0xee01}, {0x8, 0x5, r11}, {0x8, 0x5, r12}, {0x8, 0x3, r13}, {0x8, 0x6, r14}, {0x8, 0x4, 0xffffffffffffffff}, {0x8, 0x0, r15}], {0x10, 0x1}, {0x20, 0x2}}, 0x7c, 0x1) r16 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000e80), 0x40, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r16, 0x8983, &(0x7f0000000ec0)={0x1, 'veth1_to_bridge\x00', {}, 0xf}) 489.001237ms ago: executing program 3 (id=555): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) socket$tipc(0x1e, 0x5, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000200850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) msgsnd(0x0, 0x0, 0x2000, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f00000004c0)={{0x0, 0xee00, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0x0, 0xb, 0x6f76, 0x7, 0x0, 0x1, 0x8, 0x7f, 0x3}) 306.629071ms ago: executing program 1 (id=556): setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRESOCT=r0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x34}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x1000000000000008}, 0x18) r3 = socket$inet(0x2, 0x3, 0x33) getsockopt$inet_mreqsrc(r3, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x8) 268.183636ms ago: executing program 1 (id=557): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) io_setup(0x8f0, &(0x7f0000002400)=0x0) io_submit(r3, 0x1, &(0x7f0000000340)=[&(0x7f0000000180)={0x2002000000, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="5400ffff0000", 0x6, 0x0, 0x0, 0x2}]) recvfrom(r0, 0x0, 0x900, 0x0, 0x0, 0x0) 151.115851ms ago: executing program 4 (id=558): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x16, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r4, 0x0, 0x9}, 0x18) ioctl$AUTOFS_IOC_FAIL(r2, 0x4c80, 0x7000000) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[], 0xff2e) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000040)={0x0, 0x7, 0x0, 0x0, 0x83, "00000000000000000000ffff00"}) r5 = syz_open_pts(r1, 0x0) dup3(r5, r1, 0x80000) close_range(r0, 0xffffffffffffffff, 0x0) 112.560406ms ago: executing program 1 (id=559): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x240000, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) timer_create(0x1, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) futex(&(0x7f0000000100)=0x1, 0x2, 0x2, &(0x7f0000000140)={0x0, 0x3938700}, &(0x7f0000000240)=0x1, 0x2) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000000)='/proc\x00\x00\x00\x00\x00\x00\x00\x00D\x00\x00v4\x00\x00s/\x92Ync_\x00le\xf44.\xab%nN\xd4\xfc\x11\x00\xd1l,'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r1) r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x120) lseek(r2, 0x100, 0x1) getdents64(r2, &(0x7f0000000180)=""/183, 0xb7) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x4, 0xa1, 0xff, 0x2}, {0x2, 0x9, 0x4, 0xac0a}]}) 0s ago: executing program 1 (id=560): socket$inet_sctp(0x2, 0x5, 0x84) socket$inet_sctp(0x2, 0x5, 0x84) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x4000000) mbind(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x1ff, 0x3) r0 = syz_clone(0x0, 0x0, 0x43, 0x0, 0x0, 0x0) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400df7f08000a00", @ANYRES32], 0x3c}}, 0x0) process_vm_writev(r0, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) kernel console output (not intermixed with test programs): 3675] EXT4-fs (loop4): 1 orphan inode deleted [ 46.454417][ T3671] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.465721][ T3675] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.479074][ T3677] EXT4-fs error (device loop2): ext4_get_branch:178: inode #11: block 4294967295: comm syz.2.52: invalid block [ 46.501275][ T3675] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.501445][ T65] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 46.544398][ T3683] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=272 sclass=netlink_route_socket pid=3683 comm=syz.1.53 [ 46.648727][ T3677] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.52: invalid indirect mapped block 4294967295 (level 1) [ 46.675079][ T3677] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.52: invalid indirect mapped block 4294967295 (level 1) [ 46.706964][ T3685] loop0: detected capacity change from 0 to 764 [ 46.720691][ T3677] EXT4-fs (loop2): 2 truncates cleaned up [ 46.730114][ T3688] loop3: detected capacity change from 0 to 512 [ 46.736866][ T3677] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.743165][ T3688] EXT4-fs: Ignoring removed bh option [ 46.765521][ T3685] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 46.784560][ T3683] vcan0 speed is unknown, defaulting to 1000 [ 46.789562][ T3688] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 46.874593][ T3677] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.52: bg 0: block 5: invalid block bitmap [ 46.886433][ T3683] lo speed is unknown, defaulting to 1000 [ 46.889840][ T3688] EXT4-fs error (device loop3): ext4_get_branch:178: inode #11: block 4294967295: comm syz.3.54: invalid block [ 46.917829][ T3688] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.54: invalid indirect mapped block 4294967295 (level 1) [ 46.932556][ T3688] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.54: invalid indirect mapped block 4294967295 (level 1) [ 46.947085][ T3688] EXT4-fs (loop3): 2 truncates cleaned up [ 46.953354][ T3688] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.015924][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.075562][ T3688] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.54: bg 0: block 5: invalid block bitmap [ 47.088654][ T3699] all (unregistering): Released all slaves [ 47.105952][ T3696] rdma_rxe: rxe_newlink: failed to add vcan0 [ 47.118934][ T3704] loop4: detected capacity change from 0 to 128 [ 47.145746][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.151343][ T3707] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 47.166773][ T3707] loop2: detected capacity change from 0 to 512 [ 47.178671][ T3704] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 47.193472][ T3707] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #18: comm syz.2.58: iget: bad extra_isize 90 (inode size 256) [ 47.266514][ T3704] ext4 filesystem being mounted at /11/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 47.303633][ T3707] EXT4-fs (loop2): Remounting filesystem read-only [ 47.341574][ T3707] EXT4-fs warning (device loop2): ext4_evict_inode:273: xattr delete (err -30) [ 47.367577][ T3720] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 47.368516][ T3707] EXT4-fs (loop2): 1 orphan inode deleted [ 47.394448][ T3707] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.426830][ T3699] EXT4-fs (loop4): re-mounted 76b65be2-f6da-4727-8c75-0525a5b65a09 ro. [ 47.444581][ T3707] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.457690][ T3723] loop1: detected capacity change from 0 to 512 [ 47.470283][ T3699] EXT4-fs (loop4): re-mounted 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w. [ 47.481718][ T3723] netlink: 'syz.1.64': attribute type 12 has an invalid length. [ 47.534452][ T3319] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 47.549892][ T3725] loop3: detected capacity change from 0 to 512 [ 47.592369][ T3725] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #18: comm syz.3.62: iget: bad extra_isize 90 (inode size 256) [ 47.625120][ T3725] EXT4-fs (loop3): Remounting filesystem read-only [ 47.641072][ T3731] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 47.642260][ T3725] EXT4-fs warning (device loop3): ext4_evict_inode:273: xattr delete (err -30) [ 47.658251][ T3725] EXT4-fs (loop3): 1 orphan inode deleted [ 47.664681][ T3725] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.678056][ T3725] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.695697][ T3731] blktrace: Concurrent blktraces are not allowed on loop8 [ 47.711024][ T3731] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: inode #18: comm syz.4.65: iget: bad extra_isize 90 (inode size 256) [ 47.726116][ T3731] EXT4-fs (loop4): Remounting filesystem read-only [ 47.732901][ T3731] EXT4-fs warning (device loop4): ext4_evict_inode:273: xattr delete (err -30) [ 47.745259][ T3731] EXT4-fs (loop4): 1 orphan inode deleted [ 47.762702][ T3733] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 47.792493][ T3731] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.818676][ T3733] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.832194][ T3731] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.832527][ T3733] ext4 filesystem being mounted at /14/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 48.023076][ T3320] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.126796][ T3744] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.182426][ T3744] ext4 filesystem being mounted at /17/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.254564][ T3758] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=272 sclass=netlink_route_socket pid=3758 comm=syz.0.73 [ 48.344226][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.438865][ T3761] vcan0 speed is unknown, defaulting to 1000 [ 48.501018][ T3761] lo speed is unknown, defaulting to 1000 [ 48.740679][ T3760] vcan0 speed is unknown, defaulting to 1000 [ 48.871263][ T3764] netlink: 'syz.4.77': attribute type 12 has an invalid length. [ 49.195907][ T3766] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 49.204765][ T3766] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 49.284378][ T3760] lo speed is unknown, defaulting to 1000 [ 49.355515][ T3769] FAULT_INJECTION: forcing a failure. [ 49.355515][ T3769] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 49.368785][ T3769] CPU: 1 UID: 0 PID: 3769 Comm: syz.4.79 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 49.368817][ T3769] Tainted: [W]=WARN [ 49.368823][ T3769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 49.368838][ T3769] Call Trace: [ 49.368847][ T3769] [ 49.368858][ T3769] __dump_stack+0x1d/0x30 [ 49.368927][ T3769] dump_stack_lvl+0x95/0xd0 [ 49.368955][ T3769] dump_stack+0x15/0x1b [ 49.368977][ T3769] should_fail_ex+0x265/0x280 [ 49.369037][ T3769] should_fail+0xb/0x20 [ 49.369155][ T3769] should_fail_usercopy+0x1a/0x20 [ 49.369178][ T3769] _copy_to_user+0x20/0xa0 [ 49.369291][ T3769] simple_read_from_buffer+0xb5/0x130 [ 49.369380][ T3769] proc_fail_nth_read+0x10e/0x150 [ 49.369418][ T3769] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 49.369453][ T3769] vfs_read+0x1a8/0x770 [ 49.369544][ T3769] ? __rcu_read_unlock+0x4f/0x70 [ 49.369563][ T3769] ? __fget_files+0x184/0x1c0 [ 49.369584][ T3769] ? mutex_lock+0x58/0x90 [ 49.369642][ T3769] ksys_read+0xda/0x1a0 [ 49.369664][ T3769] __x64_sys_read+0x40/0x50 [ 49.369681][ T3769] x64_sys_call+0x2889/0x3000 [ 49.369707][ T3769] do_syscall_64+0xca/0x2b0 [ 49.369734][ T3769] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.369764][ T3769] RIP: 0033:0x7f2071fce15c [ 49.369784][ T3769] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 49.369829][ T3769] RSP: 002b:00007f2070a37030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 49.369849][ T3769] RAX: ffffffffffffffda RBX: 00007f2072225fa0 RCX: 00007f2071fce15c [ 49.369865][ T3769] RDX: 000000000000000f RSI: 00007f2070a370a0 RDI: 0000000000000006 [ 49.369880][ T3769] RBP: 00007f2070a37090 R08: 0000000000000000 R09: 0000000000000000 [ 49.369892][ T3769] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 49.369970][ T3769] R13: 00007f2072226038 R14: 00007f2072225fa0 R15: 00007ffc33aaefc8 [ 49.369996][ T3769] [ 49.616901][ T3766] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4215: comm syz.3.78: Allocating blocks 41-42 which overlap fs metadata [ 49.705371][ T3766] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.78: Failed to acquire dquot type 1 [ 49.739345][ T3766] EXT4-fs error (device loop3): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 49.769853][ T3766] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #12: comm syz.3.78: corrupted inode contents [ 49.789170][ T3766] EXT4-fs error (device loop3): ext4_dirty_inode:6502: inode #12: comm syz.3.78: mark_inode_dirty error [ 49.817181][ T3766] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #12: comm syz.3.78: corrupted inode contents [ 49.848062][ T3766] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #12: comm syz.3.78: mark_inode_dirty error [ 49.945425][ T3766] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #12: comm syz.3.78: corrupted inode contents [ 49.949072][ T3790] rdma_rxe: rxe_newlink: failed to add vcan0 [ 50.158487][ T3766] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 50.214770][ T3766] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #12: comm syz.3.78: corrupted inode contents [ 50.240212][ T3793] bridge0: port 3(batadv1) entered blocking state [ 50.246916][ T3793] bridge0: port 3(batadv1) entered disabled state [ 50.254596][ T3793] batadv1: entered allmulticast mode [ 50.261434][ T3793] batadv1: entered promiscuous mode [ 50.350955][ T3766] EXT4-fs error (device loop3): ext4_truncate:4635: inode #12: comm syz.3.78: mark_inode_dirty error [ 50.386779][ T3800] netlink: 12 bytes leftover after parsing attributes in process `syz.4.84'. [ 50.406007][ T3793] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 50.451340][ T3793] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 50.484574][ T3805] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 50.516647][ T3805] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.588361][ T3766] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 50.599630][ T3766] EXT4-fs (loop3): 1 truncate cleaned up [ 50.608273][ T3766] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.640015][ T3766] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 50.648713][ T3805] ext4 filesystem being mounted at /20/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 50.712134][ T52] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 50.745066][ T385] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 50.754900][ T385] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 50.781826][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.833297][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.872065][ T3811] netlink: 'syz.0.90': attribute type 12 has an invalid length. [ 50.885223][ T3809] vcan0 speed is unknown, defaulting to 1000 [ 51.051092][ T3820] set_capacity_and_notify: 8 callbacks suppressed [ 51.051193][ T3820] loop2: detected capacity change from 0 to 512 [ 51.082170][ T3820] EXT4-fs: Ignoring removed bh option [ 51.088651][ T3820] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 51.106035][ T3820] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.93: invalid indirect mapped block 4294967295 (level 1) [ 51.120606][ T3820] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.93: invalid indirect mapped block 4294967295 (level 1) [ 51.134250][ T3809] lo speed is unknown, defaulting to 1000 [ 51.141117][ T3820] EXT4-fs (loop2): 2 truncates cleaned up [ 51.154918][ T29] kauditd_printk_skb: 279 callbacks suppressed [ 51.154939][ T29] audit: type=1326 audit(1768547162.133:865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3822 comm="syz.4.97" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2071fcf749 code=0x7ffc0000 [ 51.184622][ T29] audit: type=1326 audit(1768547162.133:866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3822 comm="syz.4.97" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2071fcf749 code=0x7ffc0000 [ 51.186121][ T3820] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.207804][ T29] audit: type=1326 audit(1768547162.133:867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3822 comm="syz.4.97" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2071fcf749 code=0x7ffc0000 [ 51.243520][ T29] audit: type=1326 audit(1768547162.133:868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3822 comm="syz.4.97" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2071fcf749 code=0x7ffc0000 [ 51.266729][ T29] audit: type=1326 audit(1768547162.133:869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3822 comm="syz.4.97" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2071fcf749 code=0x7ffc0000 [ 51.290518][ T29] audit: type=1326 audit(1768547162.133:870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3822 comm="syz.4.97" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2071fcf749 code=0x7ffc0000 [ 51.316193][ T29] audit: type=1326 audit(1768547162.133:871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3822 comm="syz.4.97" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2071fcf749 code=0x7ffc0000 [ 51.340299][ T29] audit: type=1326 audit(1768547162.133:872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3822 comm="syz.4.97" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2071fcf749 code=0x7ffc0000 [ 51.364245][ T29] audit: type=1326 audit(1768547162.133:873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3822 comm="syz.4.97" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2071fcf749 code=0x7ffc0000 [ 51.387849][ T29] audit: type=1326 audit(1768547162.133:874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3822 comm="syz.4.97" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2071fcf749 code=0x7ffc0000 [ 51.422116][ T3828] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=272 sclass=netlink_route_socket pid=3828 comm=syz.0.96 [ 51.440995][ T3824] netlink: 28 bytes leftover after parsing attributes in process `syz.4.97'. [ 51.441033][ T3820] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.93: bg 0: block 5: invalid block bitmap [ 51.450158][ T3824] netlink: 28 bytes leftover after parsing attributes in process `syz.4.97'. [ 51.495754][ T3824] netlink: 64 bytes leftover after parsing attributes in process `syz.4.97'. [ 51.527059][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.537153][ T3833] syz0: rxe_newlink: already configured on vcan0 [ 51.549253][ T3826] loop4: detected capacity change from 0 to 512 [ 51.598809][ T3828] vcan0 speed is unknown, defaulting to 1000 [ 51.618791][ T3826] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 51.632324][ T3826] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 51.823371][ T3826] EXT4-fs (loop4): 1 truncate cleaned up [ 51.847229][ T3826] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.876964][ T3838] bridge0: port 4(batadv2) entered blocking state [ 51.883533][ T3838] bridge0: port 4(batadv2) entered disabled state [ 51.981944][ T3845] loop2: detected capacity change from 0 to 512 [ 52.023407][ T3845] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 52.124868][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.162516][ T3845] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.177680][ T3838] batadv2: entered allmulticast mode [ 52.231438][ T3838] batadv2: entered promiscuous mode [ 52.240710][ T3850] netlink: 20 bytes leftover after parsing attributes in process `%&£Î&{-+']'. [ 52.260604][ T3845] ext4 filesystem being mounted at /23/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 52.292890][ T3846] loop3: detected capacity change from 0 to 128 [ 52.352044][ T3846] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 52.414891][ T385] batman_adv: batadv2: No IGMP Querier present - multicast optimizations disabled [ 52.424327][ T385] batman_adv: batadv2: No MLD Querier present - multicast optimizations disabled [ 52.467140][ T3828] lo speed is unknown, defaulting to 1000 [ 52.526180][ T3846] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 52.636272][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.685296][ T3854] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 52.738862][ T3856] loop2: detected capacity change from 0 to 512 [ 52.746482][ T3854] blktrace: Concurrent blktraces are not allowed on loop8 [ 52.760039][ T3854] loop4: detected capacity change from 0 to 512 [ 52.786074][ T3856] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 52.796150][ T3856] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 52.843463][ T3854] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: inode #18: comm syz.4.104: iget: bad extra_isize 90 (inode size 256) [ 52.902971][ T356] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 52.913746][ T3856] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4215: comm syz.2.103: Allocating blocks 41-42 which overlap fs metadata [ 52.929218][ T3854] EXT4-fs (loop4): Remounting filesystem read-only [ 52.937702][ T3854] EXT4-fs warning (device loop4): ext4_evict_inode:273: xattr delete (err -30) [ 52.946889][ T3854] EXT4-fs (loop4): 1 orphan inode deleted [ 52.953485][ T3854] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.968142][ T3856] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4215: comm syz.2.103: Allocating blocks 41-42 which overlap fs metadata [ 52.968531][ T3854] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.053403][ T3856] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.103: Failed to acquire dquot type 1 [ 53.092727][ T3856] EXT4-fs error (device loop2): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 53.199080][ T3856] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #12: comm syz.2.103: corrupted inode contents [ 53.298985][ T3870] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 53.346917][ T3856] EXT4-fs error (device loop2): ext4_dirty_inode:6502: inode #12: comm syz.2.103: mark_inode_dirty error [ 53.359032][ T3856] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #12: comm syz.2.103: corrupted inode contents [ 53.372156][ T3856] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #12: comm syz.2.103: mark_inode_dirty error [ 53.425810][ T3856] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #12: comm syz.2.103: corrupted inode contents [ 53.444273][ T3856] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 53.453205][ T3856] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #12: comm syz.2.103: corrupted inode contents [ 53.465302][ T3856] EXT4-fs error (device loop2): ext4_truncate:4635: inode #12: comm syz.2.103: mark_inode_dirty error [ 53.499089][ T3856] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 53.525602][ T3875] rdma_rxe: rxe_newlink: failed to add vcan0 [ 53.534497][ T3856] EXT4-fs (loop2): 1 truncate cleaned up [ 53.552022][ T3856] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.562016][ T3871] bridge0: port 5(batadv3) entered blocking state [ 53.571300][ T3871] bridge0: port 5(batadv3) entered disabled state [ 53.623525][ T3856] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 53.639257][ T3881] loop4: detected capacity change from 0 to 1024 [ 53.648345][ T3879] loop0: detected capacity change from 0 to 512 [ 53.660656][ T3881] EXT4-fs: Ignoring removed nomblk_io_submit option [ 53.671767][ T3885] loop3: detected capacity change from 0 to 128 [ 53.686256][ T3887] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 53.705872][ T3881] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 53.713843][ T3871] batadv3: entered allmulticast mode [ 53.725652][ T3871] batadv3: entered promiscuous mode [ 53.733543][ T3881] System zones: 0-1, 3-36 [ 53.745381][ T3879] /dev/loop0: Can't open blockdev [ 53.753403][ T3887] loop1: detected capacity change from 0 to 512 [ 53.774355][ T3881] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.801562][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.838020][ T3887] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #18: comm syz.1.112: iget: bad extra_isize 90 (inode size 256) [ 53.851527][ T3885] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 53.874983][ T3885] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 53.924102][ T3887] EXT4-fs (loop1): Remounting filesystem read-only [ 53.965065][ T3887] EXT4-fs warning (device loop1): ext4_evict_inode:273: xattr delete (err -30) [ 53.998176][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.040431][ T3887] EXT4-fs (loop1): 1 orphan inode deleted [ 54.055052][ T356] batman_adv: batadv3: No IGMP Querier present - multicast optimizations disabled [ 54.064325][ T356] batman_adv: batadv3: No MLD Querier present - multicast optimizations disabled [ 54.103446][ T3887] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.236179][ T3887] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.310161][ T3898] EXT4-fs: Ignoring removed nomblk_io_submit option [ 54.317779][ T385] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 54.353156][ T3898] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 54.383066][ T3903] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=272 sclass=netlink_route_socket pid=3903 comm=syz.2.116 [ 54.384678][ T3898] System zones: 0-1, 3-36 [ 54.501791][ T3898] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.565474][ T3903] vcan0 speed is unknown, defaulting to 1000 [ 54.648113][ T3912] netlink: 20 bytes leftover after parsing attributes in process `%&£Î&{-+']'. [ 54.683331][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.709875][ T3916] EXT4-fs: Ignoring removed bh option [ 54.730901][ T3916] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 54.739689][ T3903] lo speed is unknown, defaulting to 1000 [ 54.769573][ T3916] EXT4-fs error (device loop1): ext4_get_branch:178: inode #11: block 4294967295: comm syz.1.123: invalid block [ 54.824982][ T3916] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.123: invalid indirect mapped block 4294967295 (level 1) [ 54.916254][ T3916] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.123: invalid indirect mapped block 4294967295 (level 1) [ 54.948632][ T3915] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.121: error while reading EA inode 32 err=-116 [ 54.985450][ T3916] EXT4-fs (loop1): 2 truncates cleaned up [ 54.993496][ T3920] rdma_rxe: rxe_newlink: failed to add vcan0 [ 55.020993][ T3916] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.123: bg 0: block 5: invalid block bitmap [ 55.034429][ T3915] EXT4-fs (loop3): Remounting filesystem read-only [ 55.125372][ T3915] EXT4-fs warning (device loop3): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 55.208258][ T3915] EXT4-fs (loop3): 1 orphan inode deleted [ 55.278321][ T3931] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.126: error while reading EA inode 32 err=-116 [ 55.409485][ T3938] ext4 filesystem being mounted at /25/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.458103][ T3931] EXT4-fs (loop1): Remounting filesystem read-only [ 55.515072][ T3931] EXT4-fs warning (device loop1): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 55.563681][ T3931] EXT4-fs (loop1): 1 orphan inode deleted [ 55.651930][ T3944] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 55.727699][ T3944] SELinux: failed to load policy [ 55.733212][ T3947] SELinux: policydb version 533 does not match my version range 15-35 [ 55.750120][ T3951] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.130: error while reading EA inode 32 err=-116 [ 55.753982][ T3947] SELinux: failed to load policy [ 55.776490][ T3954] netlink: 20 bytes leftover after parsing attributes in process `%&£Î&{-+']'. [ 55.811633][ T3951] EXT4-fs (loop3): Remounting filesystem read-only [ 55.819634][ T3951] EXT4-fs warning (device loop3): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 55.831655][ T3951] EXT4-fs (loop3): 1 orphan inode deleted [ 55.887067][ T3957] ext4 filesystem being mounted at /29/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.939876][ T3961] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 55.987593][ T3961] ext4 filesystem being mounted at /28/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 56.036807][ T3964] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.136: error while reading EA inode 32 err=-116 [ 56.066145][ T3964] EXT4-fs (loop1): Remounting filesystem read-only [ 56.098922][ T3964] EXT4-fs warning (device loop1): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 56.156206][ T3964] EXT4-fs (loop1): 1 orphan inode deleted [ 56.213662][ T3978] set_capacity_and_notify: 9 callbacks suppressed [ 56.213683][ T3978] loop2: detected capacity change from 0 to 2048 [ 56.230642][ T29] kauditd_printk_skb: 417 callbacks suppressed [ 56.230658][ T29] audit: type=1326 audit(1768547167.213:1288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3976 comm="syz.3.140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f545282f749 code=0x7ffc0000 [ 56.261277][ T3980] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=272 sclass=netlink_route_socket pid=3980 comm=syz.4.138 [ 56.285219][ T3978] loop2: p1 p3 [ 56.291860][ T3978] loop2: p3 start 8388352 is beyond EOD, truncated [ 56.313542][ T29] audit: type=1326 audit(1768547167.213:1289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3976 comm="syz.3.140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f545282f749 code=0x7ffc0000 [ 56.343423][ T29] audit: type=1326 audit(1768547167.223:1290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3976 comm="syz.3.140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f545282f749 code=0x7ffc0000 [ 56.368820][ T29] audit: type=1326 audit(1768547167.223:1291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3976 comm="syz.3.140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f545282f749 code=0x7ffc0000 [ 56.393031][ T29] audit: type=1326 audit(1768547167.273:1292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3963 comm="syz.1.136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d538df749 code=0x7ffc0000 [ 56.456391][ T29] audit: type=1326 audit(1768547167.423:1293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3976 comm="syz.3.140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f545282f749 code=0x7ffc0000 [ 56.480224][ T29] audit: type=1326 audit(1768547167.423:1294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3976 comm="syz.3.140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f545282f749 code=0x7ffc0000 [ 56.503940][ T29] audit: type=1326 audit(1768547167.423:1295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3976 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f545282f749 code=0x7ffc0000 [ 56.527141][ T3979] loop3: detected capacity change from 0 to 1024 [ 56.527717][ T29] audit: type=1326 audit(1768547167.423:1296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3976 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f545282f749 code=0x7ffc0000 [ 56.557505][ T29] audit: type=1326 audit(1768547167.433:1297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3976 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f545282f749 code=0x7ffc0000 [ 56.615862][ T3988] netlink: 20 bytes leftover after parsing attributes in process `%&£Î&{-+']'. [ 56.684734][ T3979] EXT4-fs: Ignoring removed nomblk_io_submit option [ 56.699336][ T3990] bridge0: port 3(batadv1) entered blocking state [ 56.706120][ T3990] bridge0: port 3(batadv1) entered disabled state [ 56.717278][ T3979] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 56.733399][ T3979] System zones: 0-1, 3-36 [ 56.745777][ T3990] batadv1: entered allmulticast mode [ 56.768745][ T3990] batadv1: entered promiscuous mode [ 56.806350][ T3990] loop2: detected capacity change from 0 to 128 [ 56.816281][ T3980] vcan0 speed is unknown, defaulting to 1000 [ 56.821890][ T3990] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 56.904161][ T3990] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 56.930941][ T4002] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 56.943191][ T4002] SELinux: failed to load policy [ 56.959848][ T3980] lo speed is unknown, defaulting to 1000 [ 56.973861][ T4002] loop1: detected capacity change from 0 to 512 [ 56.991513][ T4002] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.150: error while reading EA inode 32 err=-116 [ 57.004485][ T4002] EXT4-fs (loop1): Remounting filesystem read-only [ 57.011127][ T4002] EXT4-fs warning (device loop1): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 57.021970][ T4002] EXT4-fs (loop1): 1 orphan inode deleted [ 57.115917][ T37] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 57.194968][ T37] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 57.204341][ T37] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 57.213822][ T4010] loop1: detected capacity change from 0 to 1024 [ 57.269570][ T4010] EXT4-fs: Ignoring removed nomblk_io_submit option [ 57.291887][ T4010] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 57.305370][ T4010] System zones: 0-1, 3-36 [ 57.340870][ T4017] loop4: detected capacity change from 0 to 2048 [ 57.349847][ T4016] loop3: detected capacity change from 0 to 512 [ 57.417884][ T3304] loop4: p1 p3 [ 57.434434][ T3304] loop4: p3 start 8388352 is beyond EOD, truncated [ 57.450140][ T4017] loop4: p1 p3 [ 57.471471][ T4022] loop1: detected capacity change from 0 to 512 [ 57.473313][ T4017] loop4: p3 start 8388352 is beyond EOD, truncated [ 57.501859][ T4024] loop2: detected capacity change from 0 to 512 [ 57.513170][ T4022] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 57.555325][ T4024] EXT4-fs: Ignoring removed bh option [ 57.575843][ T4022] ext4 filesystem being mounted at /36/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 57.641861][ T4024] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 57.660960][ T4027] loop3: detected capacity change from 0 to 512 [ 57.683185][ T4031] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 57.742549][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 57.767237][ T4027] ext4 filesystem being mounted at /25/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.780436][ T4024] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.157: invalid indirect mapped block 4294967295 (level 1) [ 57.795153][ T4024] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.157: invalid indirect mapped block 4294967295 (level 1) [ 57.813711][ T4024] EXT4-fs (loop2): 2 truncates cleaned up [ 57.838884][ T4024] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.157: bg 0: block 5: invalid block bitmap [ 57.863806][ T4027] siw: device registration error -23 [ 57.962282][ T4045] netlink: 40 bytes leftover after parsing attributes in process `syz.1.163'. [ 57.993076][ T4045] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 58.039924][ T4045] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #16: comm syz.1.163: invalid indirect mapped block 4294967295 (level 0) [ 58.087812][ T4045] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #16: comm syz.1.163: invalid indirect mapped block 4294967295 (level 1) [ 58.124838][ T4045] EXT4-fs (loop1): 1 orphan inode deleted [ 58.130630][ T4045] EXT4-fs (loop1): 1 truncate cleaned up [ 58.187785][ T4057] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=272 sclass=netlink_route_socket pid=4057 comm=syz.2.164 [ 58.217485][ T4058] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 58.274853][ T4058] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 58.316527][ T4056] vcan0 speed is unknown, defaulting to 1000 [ 58.413464][ T4056] lo speed is unknown, defaulting to 1000 [ 58.428776][ T4062] siw: device registration error -23 [ 58.452871][ T4067] smc: removing ib device syz0 [ 58.495582][ T4057] lo speed is unknown, defaulting to 1000 [ 58.601078][ T4071] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 58.639772][ T4071] SELinux: failed to load policy [ 58.677524][ T4075] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.171: error while reading EA inode 32 err=-116 [ 58.701164][ T4075] EXT4-fs (loop0): Remounting filesystem read-only [ 58.739569][ T4075] EXT4-fs warning (device loop0): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 58.789223][ T4075] EXT4-fs (loop0): 1 orphan inode deleted [ 59.030165][ T4082] EXT4-fs: Ignoring removed bh option [ 59.043207][ T4082] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 59.069725][ T4084] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 59.091361][ T4084] SELinux: failed to load policy [ 59.118756][ T4084] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.175: error while reading EA inode 32 err=-116 [ 59.131840][ T4084] EXT4-fs (loop0): Remounting filesystem read-only [ 59.139195][ T4084] EXT4-fs warning (device loop0): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 59.155030][ T4084] EXT4-fs (loop0): 1 orphan inode deleted [ 59.163187][ T4082] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.174: invalid indirect mapped block 4294967295 (level 1) [ 59.220237][ T4091] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 59.252816][ T4091] SELinux: failed to load policy [ 59.275432][ T4094] netlink: 48 bytes leftover after parsing attributes in process `syz.0.178'. [ 59.284690][ T4082] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.174: invalid indirect mapped block 4294967295 (level 1) [ 59.321740][ T4096] vcan0 speed is unknown, defaulting to 1000 [ 59.335181][ T4096] vcan0 speed is unknown, defaulting to 1000 [ 59.342445][ T4096] vcan0 speed is unknown, defaulting to 1000 [ 59.382844][ T4082] EXT4-fs (loop2): 2 truncates cleaned up [ 59.402680][ T4082] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.174: bg 0: block 5: invalid block bitmap [ 59.453097][ T4096] infiniband syz0: set active [ 59.458077][ T4096] infiniband syz0: added vcan0 [ 59.462925][ T9] vcan0 speed is unknown, defaulting to 1000 [ 59.490768][ T4096] RDS/IB: syz0: added [ 59.505153][ T4096] smc: adding ib device syz0 with port count 1 [ 59.520724][ T4096] smc: ib device syz0 port 1 has no pnetid [ 59.527058][ T3921] vcan0 speed is unknown, defaulting to 1000 [ 59.545290][ T4096] vcan0 speed is unknown, defaulting to 1000 [ 59.584293][ T4096] vcan0 speed is unknown, defaulting to 1000 [ 59.636386][ T4096] vcan0 speed is unknown, defaulting to 1000 [ 59.763409][ T4096] vcan0 speed is unknown, defaulting to 1000 [ 59.803382][ T4096] vcan0 speed is unknown, defaulting to 1000 [ 59.822841][ T4113] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=272 sclass=netlink_route_socket pid=4113 comm=syz.0.184 [ 59.967486][ T4113] lo speed is unknown, defaulting to 1000 [ 59.987904][ T4113] vcan0 speed is unknown, defaulting to 1000 [ 60.125703][ T4121] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 60.143723][ T4121] SELinux: failed to load policy [ 60.180597][ T4121] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.188: error while reading EA inode 32 err=-116 [ 60.194390][ T4121] EXT4-fs (loop1): Remounting filesystem read-only [ 60.213765][ T4121] EXT4-fs warning (device loop1): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 60.232211][ T4121] EXT4-fs (loop1): 1 orphan inode deleted [ 60.299468][ T4127] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.189: error while reading EA inode 32 err=-116 [ 60.319555][ T4127] EXT4-fs (loop1): Remounting filesystem read-only [ 60.327288][ T4127] EXT4-fs warning (device loop1): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 60.339285][ T4127] EXT4-fs (loop1): 1 orphan inode deleted [ 60.515707][ T4133] netlink: 4 bytes leftover after parsing attributes in process `syz.4.191'. [ 60.525653][ T4133] hsr_slave_0: left promiscuous mode [ 60.531738][ T4133] hsr_slave_1: left promiscuous mode [ 60.777452][ T4152] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 60.805328][ T4152] SELinux: failed to load policy [ 60.858917][ T4152] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.199: error while reading EA inode 32 err=-116 [ 60.882074][ T4152] EXT4-fs (loop4): Remounting filesystem read-only [ 60.910942][ T4160] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.950647][ T4152] EXT4-fs warning (device loop4): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 60.961257][ T4152] EXT4-fs (loop4): 1 orphan inode deleted [ 60.968219][ T4160] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.048307][ T4160] ext4 filesystem being mounted at /35/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.080163][ T4164] rdma_rxe: rxe_newlink: failed to add vcan0 [ 61.159119][ T4169] netlink: 28 bytes leftover after parsing attributes in process `syz.2.204'. [ 61.168125][ T4169] netlink: 28 bytes leftover after parsing attributes in process `syz.2.204'. [ 61.238106][ T29] kauditd_printk_skb: 754 callbacks suppressed [ 61.238123][ T29] audit: type=1326 audit(1768547172.223:2052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4175 comm="syz.4.207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2071fcf749 code=0x7ffc0000 [ 61.290021][ T29] audit: type=1326 audit(1768547172.233:2053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4175 comm="syz.4.207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f2071fcf749 code=0x7ffc0000 [ 61.318883][ T29] audit: type=1326 audit(1768547172.303:2054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4175 comm="syz.4.207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2071fcf749 code=0x7ffc0000 [ 61.448242][ T4185] netlink: 4 bytes leftover after parsing attributes in process `syz.2.210'. [ 61.452711][ T29] audit: type=1400 audit(1768547172.433:2055): avc: denied { create } for pid=4182 comm="syz.0.211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 61.478743][ T29] audit: type=1400 audit(1768547172.433:2056): avc: denied { create } for pid=4182 comm="syz.0.211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 61.498996][ T29] audit: type=1400 audit(1768547172.433:2057): avc: denied { read } for pid=4182 comm="syz.0.211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 61.582544][ T4188] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 61.597979][ T4188] blktrace: Concurrent blktraces are not allowed on loop0 [ 61.611319][ T4187] set_capacity_and_notify: 9 callbacks suppressed [ 61.611341][ T4187] loop0: detected capacity change from 0 to 512 [ 61.628897][ T29] audit: type=1400 audit(1768547172.563:2058): avc: denied { create } for pid=4182 comm="syz.0.211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 61.654655][ T29] audit: type=1400 audit(1768547172.563:2059): avc: denied { write } for pid=4182 comm="syz.0.211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 61.677345][ T4187] /dev/loop0: Can't open blockdev [ 61.678984][ T29] audit: type=1400 audit(1768547172.583:2060): avc: denied { read } for pid=4182 comm="syz.0.211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 61.708987][ T29] audit: type=1400 audit(1768547172.583:2061): avc: denied { create } for pid=4182 comm="syz.0.211" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 61.856546][ T4190] loop4: detected capacity change from 0 to 512 [ 61.889648][ T4190] ext4 filesystem being mounted at /38/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.949775][ T4190] siw: device registration error -23 [ 62.343857][ T4195] loop0: detected capacity change from 0 to 512 [ 62.494126][ T4198] rdma_rxe: rxe_newlink: failed to add vcan0 [ 62.532680][ T4201] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 62.540894][ T4203] loop2: detected capacity change from 0 to 512 [ 62.555490][ T4201] SELinux: failed to load policy [ 62.563936][ T4203] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 62.574432][ T4203] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 62.594751][ T4201] loop4: detected capacity change from 0 to 512 [ 62.605890][ T4201] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.213: error while reading EA inode 32 err=-116 [ 62.638942][ T4201] EXT4-fs (loop4): Remounting filesystem read-only [ 62.646781][ T4201] EXT4-fs warning (device loop4): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 62.658407][ T4201] EXT4-fs (loop4): 1 orphan inode deleted [ 62.667374][ T4203] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4215: comm syz.2.217: Allocating blocks 41-42 which overlap fs metadata [ 62.701567][ T4210] loop1: detected capacity change from 0 to 512 [ 62.723677][ T4203] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.217: Failed to acquire dquot type 1 [ 62.738556][ T4210] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.219: error while reading EA inode 32 err=-116 [ 62.753734][ T4210] EXT4-fs (loop1): Remounting filesystem read-only [ 62.767323][ T4210] EXT4-fs warning (device loop1): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 62.779103][ T4210] EXT4-fs (loop1): 1 orphan inode deleted [ 62.787678][ T4203] EXT4-fs error (device loop2): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 62.806489][ T4203] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #12: comm syz.2.217: corrupted inode contents [ 62.821791][ T4203] EXT4-fs error (device loop2): ext4_dirty_inode:6502: inode #12: comm syz.2.217: mark_inode_dirty error [ 62.837045][ T4203] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #12: comm syz.2.217: corrupted inode contents [ 62.856844][ T4203] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #12: comm syz.2.217: mark_inode_dirty error [ 62.871355][ T4203] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #12: comm syz.2.217: corrupted inode contents [ 62.891480][ T4203] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 62.923368][ T4203] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #12: comm syz.2.217: corrupted inode contents [ 62.940798][ T4203] EXT4-fs error (device loop2): ext4_truncate:4635: inode #12: comm syz.2.217: mark_inode_dirty error [ 62.941045][ T4224] rdma_rxe: rxe_newlink: failed to add vcan0 [ 62.963437][ T4203] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 62.975108][ T4203] EXT4-fs (loop2): 1 truncate cleaned up [ 62.996225][ T4223] loop1: detected capacity change from 0 to 512 [ 63.008008][ T4203] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 63.046006][ T4223] ext4 filesystem being mounted at /49/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.087067][ T4231] netlink: 28 bytes leftover after parsing attributes in process `syz.2.225'. [ 63.098913][ T4231] netlink: 28 bytes leftover after parsing attributes in process `syz.2.225'. [ 63.164948][ T4235] loop4: detected capacity change from 0 to 512 [ 63.193524][ T4235] ext4 filesystem being mounted at /42/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.209659][ T4238] loop1: detected capacity change from 0 to 512 [ 63.232588][ T4239] loop2: detected capacity change from 0 to 1024 [ 63.241384][ T4239] EXT4-fs: Ignoring removed nomblk_io_submit option [ 63.250293][ T4238] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 63.267308][ T4239] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 63.276938][ T4239] System zones: 0-1, 3-36 [ 63.292964][ T4238] ext4 filesystem being mounted at /51/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 63.410513][ T4246] ext4 filesystem being mounted at /51/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.440188][ T4252] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 63.456315][ T4252] SELinux: failed to load policy [ 63.518175][ T4252] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.232: error while reading EA inode 32 err=-116 [ 63.541066][ T4252] EXT4-fs (loop4): Remounting filesystem read-only [ 63.550993][ T4252] EXT4-fs warning (device loop4): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 63.566287][ T4252] EXT4-fs (loop4): 1 orphan inode deleted [ 63.579927][ T4255] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.233: error while reading EA inode 32 err=-116 [ 63.605062][ T4255] EXT4-fs (loop1): Remounting filesystem read-only [ 63.652236][ T4255] EXT4-fs warning (device loop1): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 63.665658][ T4255] EXT4-fs (loop1): 1 orphan inode deleted [ 63.693457][ T4263] netlink: 28 bytes leftover after parsing attributes in process `syz.0.236'. [ 63.697805][ T4260] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 63.705121][ T4263] netlink: 28 bytes leftover after parsing attributes in process `syz.0.236'. [ 63.740787][ T4260] SELinux: failed to load policy [ 63.781608][ T4267] ext4 filesystem being mounted at /53/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.822484][ T4267] siw: device registration error -23 [ 63.902905][ T4279] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 63.955940][ T4275] EXT4-fs: Ignoring removed nomblk_io_submit option [ 63.980018][ T4279] ext4 filesystem being mounted at /54/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 63.999478][ T4275] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 64.017430][ T4284] ext4 filesystem being mounted at /36/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.038001][ T4275] System zones: 0-1, 3-36 [ 64.040780][ T4288] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 64.053677][ T4288] SELinux: failed to load policy [ 64.110530][ T4288] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.245: error while reading EA inode 32 err=-116 [ 64.126571][ T4288] EXT4-fs (loop4): Remounting filesystem read-only [ 64.134414][ T4288] EXT4-fs warning (device loop4): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 64.145294][ T4288] EXT4-fs (loop4): 1 orphan inode deleted [ 64.201048][ T4298] EXT4-fs: Ignoring removed nomblk_io_submit option [ 64.214077][ T4298] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 64.234617][ T4298] System zones: 0-1, 3-36 [ 64.306005][ T4307] netlink: 28 bytes leftover after parsing attributes in process `syz.3.250'. [ 64.316200][ T4307] netlink: 28 bytes leftover after parsing attributes in process `syz.3.250'. [ 64.356800][ T4308] ext4 filesystem being mounted at /56/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.369473][ T4303] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.249: error while reading EA inode 32 err=-116 [ 64.388238][ T4303] EXT4-fs (loop4): Remounting filesystem read-only [ 64.395959][ T4303] EXT4-fs warning (device loop4): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 64.406898][ T4303] EXT4-fs (loop4): 1 orphan inode deleted [ 64.416373][ T4308] siw: device registration error -23 [ 64.472558][ T4318] syz0: rxe_newlink: already configured on vcan0 [ 64.530051][ T4320] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.253: error while reading EA inode 32 err=-116 [ 64.549548][ T4324] SELinux: Context system_u:object_r:netutils_exec_t:s0 is not valid (left unmapped). [ 64.636790][ T4320] EXT4-fs (loop0): Remounting filesystem read-only [ 64.643898][ T4320] EXT4-fs warning (device loop0): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 64.665900][ T4320] EXT4-fs (loop0): 1 orphan inode deleted [ 64.674555][ T4329] netlink: 16 bytes leftover after parsing attributes in process `syz.4.258'. [ 64.825264][ T4339] lo speed is unknown, defaulting to 1000 [ 64.832324][ T4339] vcan0 speed is unknown, defaulting to 1000 [ 64.854308][ T4338] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=272 sclass=netlink_route_socket pid=4338 comm=syz.3.257 [ 64.949987][ T4338] lo speed is unknown, defaulting to 1000 [ 65.073340][ T4350] ext4 filesystem being mounted at /54/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.115743][ T4338] vcan0 speed is unknown, defaulting to 1000 [ 65.122147][ T4348] EXT4-fs: Ignoring removed nomblk_io_submit option [ 65.149748][ T4348] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 65.177978][ T4348] System zones: 0-1, 3-36 [ 65.185046][ T4350] siw: device registration error -23 [ 65.520767][ T4363] ext4 filesystem being mounted at /60/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 65.838676][ T4370] ext4 filesystem being mounted at /61/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.059904][ T4381] Zero length message leads to an empty skb [ 66.080803][ T4356] syz.0.266 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 66.095143][ T4356] CPU: 1 UID: 0 PID: 4356 Comm: syz.0.266 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 66.095185][ T4356] Tainted: [W]=WARN [ 66.095192][ T4356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 66.095205][ T4356] Call Trace: [ 66.095213][ T4356] [ 66.095223][ T4356] __dump_stack+0x1d/0x30 [ 66.095258][ T4356] dump_stack_lvl+0x95/0xd0 [ 66.095288][ T4356] dump_stack+0x15/0x1b [ 66.095314][ T4356] dump_header+0x81/0x240 [ 66.095342][ T4356] oom_kill_process+0x295/0x350 [ 66.095371][ T4356] out_of_memory+0x97b/0xb80 [ 66.095399][ T4356] try_charge_memcg+0x610/0xa10 [ 66.095490][ T4356] obj_cgroup_charge_pages+0xa6/0x150 [ 66.095522][ T4356] __memcg_kmem_charge_page+0x9f/0x170 [ 66.095638][ T4356] __alloc_frozen_pages_noprof+0x18f/0x360 [ 66.095701][ T4356] alloc_pages_mpol+0xb3/0x260 [ 66.095741][ T4356] alloc_pages_noprof+0x90/0x130 [ 66.095829][ T4356] __vmalloc_node_range_noprof+0xa7b/0x1310 [ 66.095915][ T4356] __kvmalloc_node_noprof+0x492/0x6b0 [ 66.095947][ T4356] ? ip_set_alloc+0x24/0x30 [ 66.095981][ T4356] ? ip_set_alloc+0x24/0x30 [ 66.096050][ T4356] ip_set_alloc+0x24/0x30 [ 66.096090][ T4356] hash_netiface_create+0x282/0x740 [ 66.096136][ T4356] ? __pfx_hash_netiface_create+0x10/0x10 [ 66.096188][ T4356] ip_set_create+0x3cc/0x970 [ 66.096225][ T4356] ? __nla_parse+0x40/0x60 [ 66.096262][ T4356] nfnetlink_rcv_msg+0x4c6/0x590 [ 66.096338][ T4356] netlink_rcv_skb+0x123/0x220 [ 66.096373][ T4356] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 66.096439][ T4356] nfnetlink_rcv+0x167/0x16c0 [ 66.096473][ T4356] ? kmem_cache_free+0xe3/0x3a0 [ 66.096501][ T4356] ? __kfree_skb+0x109/0x150 [ 66.096580][ T4356] ? nlmon_xmit+0x4f/0x60 [ 66.096599][ T4356] ? consume_skb+0x49/0x150 [ 66.096632][ T4356] ? nlmon_xmit+0x4f/0x60 [ 66.096669][ T4356] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 66.096713][ T4356] ? __dev_queue_xmit+0x13a8/0x1ee0 [ 66.096803][ T4356] ? __dev_queue_xmit+0x148/0x1ee0 [ 66.096910][ T4356] ? ref_tracker_free+0x37d/0x3e0 [ 66.096966][ T4356] ? __netlink_deliver_tap+0x4dc/0x500 [ 66.097019][ T4356] netlink_unicast+0x5c0/0x690 [ 66.097050][ T4356] netlink_sendmsg+0x58b/0x6b0 [ 66.097168][ T4356] ? __pfx_netlink_sendmsg+0x10/0x10 [ 66.097200][ T4356] __sock_sendmsg+0x145/0x180 [ 66.097227][ T4356] ____sys_sendmsg+0x31e/0x4a0 [ 66.097301][ T4356] ___sys_sendmsg+0x17b/0x1d0 [ 66.097369][ T4356] __x64_sys_sendmsg+0xd4/0x160 [ 66.097415][ T4356] x64_sys_call+0x17ba/0x3000 [ 66.097443][ T4356] do_syscall_64+0xca/0x2b0 [ 66.097468][ T4356] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.097496][ T4356] RIP: 0033:0x7fa56e1ff749 [ 66.097546][ T4356] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 66.097592][ T4356] RSP: 002b:00007fa56cc5f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 66.097616][ T4356] RAX: ffffffffffffffda RBX: 00007fa56e455fa0 RCX: 00007fa56e1ff749 [ 66.097633][ T4356] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000003 [ 66.097649][ T4356] RBP: 00007fa56e283f91 R08: 0000000000000000 R09: 0000000000000000 [ 66.097665][ T4356] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 66.097685][ T4356] R13: 00007fa56e456038 R14: 00007fa56e455fa0 R15: 00007ffd60db5d18 [ 66.097732][ T4356] [ 66.098082][ T4356] memory: usage 307200kB, limit 307200kB, failcnt 555 [ 66.449740][ T4356] memory+swap: usage 308236kB, limit 9007199254740988kB, failcnt 0 [ 66.457855][ T4356] kmem: usage 307184kB, limit 9007199254740988kB, failcnt 0 [ 66.465276][ T4356] Memory cgroup stats for /syz0: [ 66.465452][ T4356] cache 4096 [ 66.473796][ T4356] rss 4096 [ 66.476864][ T4356] shmem 0 [ 66.479825][ T4356] mapped_file 4096 [ 66.483572][ T4356] dirty 0 [ 66.486573][ T4356] writeback 0 [ 66.489892][ T4356] workingset_refault_anon 44 [ 66.494547][ T4356] workingset_refault_file 184 [ 66.499400][ T4356] swap 1060864 [ 66.502810][ T4356] swapcached 12288 [ 66.506623][ T4356] pgpgin 28101 [ 66.510177][ T4356] pgpgout 28097 [ 66.513773][ T4356] pgfault 13006 [ 66.517299][ T4356] pgmajfault 36 [ 66.521576][ T4356] inactive_anon 4096 [ 66.525518][ T4356] active_anon 8192 [ 66.529266][ T4356] inactive_file 0 [ 66.532939][ T4356] active_file 0 [ 66.536470][ T4356] unevictable 0 [ 66.539962][ T4356] hierarchical_memory_limit 314572800 [ 66.545381][ T4356] hierarchical_memsw_limit 9223372036854771712 [ 66.551680][ T4356] total_cache 4096 [ 66.555469][ T4356] total_rss 4096 [ 66.559059][ T4356] total_shmem 0 [ 66.562554][ T4356] total_mapped_file 4096 [ 66.566947][ T4356] total_dirty 0 [ 66.570573][ T4356] total_writeback 0 [ 66.574404][ T4356] total_workingset_refault_anon 44 [ 66.579795][ T4356] total_workingset_refault_file 184 [ 66.585326][ T4356] total_swap 1060864 [ 66.589287][ T4356] total_swapcached 12288 [ 66.593879][ T4356] total_pgpgin 28101 [ 66.598047][ T4356] total_pgpgout 28097 [ 66.602253][ T4356] total_pgfault 13006 [ 66.606400][ T4356] total_pgmajfault 36 [ 66.610738][ T4356] total_inactive_anon 4096 [ 66.615236][ T4356] total_active_anon 8192 [ 66.619501][ T4356] total_inactive_file 0 [ 66.623697][ T4356] total_active_file 0 [ 66.627734][ T4356] total_unevictable 0 [ 66.631891][ T4356] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.266,pid=4355,uid=0 [ 66.646595][ T4356] Memory cgroup out of memory: Killed process 4355 (syz.0.266) total-vm:93968kB, anon-rss:1136kB, file-rss:22312kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 66.700629][ T4387] set_capacity_and_notify: 17 callbacks suppressed [ 66.700648][ T4387] loop4: detected capacity change from 0 to 512 [ 66.724933][ T4366] __nla_validate_parse: 2 callbacks suppressed [ 66.724955][ T4366] netlink: 8 bytes leftover after parsing attributes in process `syz.3.270'. [ 66.774172][ T4387] ext4 filesystem being mounted at /55/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.799239][ T4387] siw: device registration error -23 [ 66.968462][ T29] kauditd_printk_skb: 880 callbacks suppressed [ 66.968481][ T29] audit: type=1326 audit(1768547177.953:2939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4400 comm="syz.4.283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2071fcf749 code=0x7ffc0000 [ 66.998405][ T29] audit: type=1326 audit(1768547177.953:2940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4400 comm="syz.4.283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2071fcf749 code=0x7ffc0000 [ 67.022107][ T29] audit: type=1326 audit(1768547177.953:2941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4400 comm="syz.4.283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2071fcf749 code=0x7ffc0000 [ 67.045660][ T29] audit: type=1326 audit(1768547177.953:2942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4400 comm="syz.4.283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2071fcf749 code=0x7ffc0000 [ 67.069250][ T29] audit: type=1326 audit(1768547177.953:2943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4400 comm="syz.4.283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2071fcf749 code=0x7ffc0000 [ 67.092789][ T29] audit: type=1326 audit(1768547177.953:2944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4400 comm="syz.4.283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2071fcf749 code=0x7ffc0000 [ 67.133056][ T4401] loop4: detected capacity change from 0 to 1024 [ 67.140429][ T4401] EXT4-fs: Ignoring removed nomblk_io_submit option [ 67.170988][ T4401] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 67.180114][ T4401] System zones: 0-1, 3-36 [ 67.184845][ T29] audit: type=1326 audit(1768547178.003:2945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4403 comm="syz.0.284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa56e1ff749 code=0x7ffc0000 [ 67.208402][ T29] audit: type=1326 audit(1768547178.003:2946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4403 comm="syz.0.284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fa56e1ff749 code=0x7ffc0000 [ 67.209391][ T4408] netlink: 20 bytes leftover after parsing attributes in process `%&£Î&{-+']'. [ 67.232152][ T29] audit: type=1326 audit(1768547178.033:2947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4403 comm="syz.0.284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa56e1ff749 code=0x7ffc0000 [ 67.264521][ T29] audit: type=1326 audit(1768547178.033:2948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4403 comm="syz.0.284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa56e1ff749 code=0x7ffc0000 [ 67.334732][ T4410] loop4: detected capacity change from 0 to 512 [ 67.444026][ T4410] EXT4-fs: Ignoring removed bh option [ 67.450319][ T4410] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 67.461419][ T4419] loop2: detected capacity change from 0 to 512 [ 67.472469][ T4410] EXT4-fs error (device loop4): ext4_get_branch:178: inode #11: block 4294967295: comm syz.4.287: invalid block [ 67.505966][ T4419] ext4 filesystem being mounted at /58/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.533253][ T4410] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.287: invalid indirect mapped block 4294967295 (level 1) [ 67.575899][ T4419] siw: device registration error -23 [ 67.650891][ T4410] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.287: invalid indirect mapped block 4294967295 (level 1) [ 67.684816][ T4426] loop2: detected capacity change from 0 to 512 [ 67.701841][ T4426] ext4 filesystem being mounted at /59/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.725308][ T4410] EXT4-fs (loop4): 2 truncates cleaned up [ 67.775949][ T4410] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.287: bg 0: block 5: invalid block bitmap [ 67.899415][ T4437] netlink: 4 bytes leftover after parsing attributes in process `syz.1.296'. [ 67.921392][ T4439] loop4: detected capacity change from 0 to 1024 [ 67.945468][ T4439] EXT4-fs: Ignoring removed orlov option [ 67.959557][ T4442] netlink: 4 bytes leftover after parsing attributes in process `syz.1.296'. [ 68.026674][ T4447] FAULT_INJECTION: forcing a failure. [ 68.026674][ T4447] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 68.039854][ T4447] CPU: 0 UID: 0 PID: 4447 Comm: syz.2.299 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 68.039888][ T4447] Tainted: [W]=WARN [ 68.039894][ T4447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 68.039907][ T4447] Call Trace: [ 68.039915][ T4447] [ 68.039925][ T4447] __dump_stack+0x1d/0x30 [ 68.040024][ T4447] dump_stack_lvl+0x95/0xd0 [ 68.040052][ T4447] dump_stack+0x15/0x1b [ 68.040077][ T4447] should_fail_ex+0x265/0x280 [ 68.040107][ T4447] should_fail+0xb/0x20 [ 68.040128][ T4447] should_fail_usercopy+0x1a/0x20 [ 68.040320][ T4447] copy_to_user_nofault+0x7f/0x120 [ 68.040356][ T4447] bpf_probe_write_user+0x83/0xc0 [ 68.040389][ T4447] bpf_prog_6c46b20eb708daf7+0x49/0x51 [ 68.040412][ T4447] bpf_trace_run2+0x107/0x1d0 [ 68.040495][ T4447] ? selinux_release_secctx+0x45/0x80 [ 68.040524][ T4447] ? selinux_release_secctx+0x45/0x80 [ 68.040549][ T4447] __traceiter_kfree+0x2e/0x50 [ 68.040611][ T4447] ? selinux_release_secctx+0x45/0x80 [ 68.040638][ T4447] kfree+0x353/0x3c0 [ 68.040660][ T4447] selinux_release_secctx+0x45/0x80 [ 68.040755][ T4447] security_release_secctx+0x42/0x60 [ 68.040800][ T4447] audit_log_subj_ctx+0xe1/0x3e0 [ 68.040824][ T4447] ? skb_put+0xa9/0xf0 [ 68.040857][ T4447] audit_log_task_context+0x48/0x70 [ 68.040880][ T4447] audit_log_task+0xf4/0x250 [ 68.040972][ T4447] ? kstrtouint+0x76/0xc0 [ 68.041000][ T4447] audit_seccomp+0x61/0x100 [ 68.041038][ T4447] ? __seccomp_filter+0x832/0x1260 [ 68.041148][ T4447] __seccomp_filter+0x843/0x1260 [ 68.041184][ T4447] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 68.041221][ T4447] ? vfs_write+0x7e8/0x960 [ 68.041243][ T4447] ? __rcu_read_unlock+0x4f/0x70 [ 68.041281][ T4447] ? __fget_files+0x184/0x1c0 [ 68.041307][ T4447] __secure_computing+0x82/0x150 [ 68.041334][ T4447] syscall_trace_enter+0xcf/0x1e0 [ 68.041361][ T4447] do_syscall_64+0xa4/0x2b0 [ 68.041461][ T4447] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.041482][ T4447] RIP: 0033:0x7f3986cdf749 [ 68.041501][ T4447] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 68.041523][ T4447] RSP: 002b:00007f3985746f08 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 68.041546][ T4447] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f3986cdf749 [ 68.041562][ T4447] RDX: 00007f3985746f20 RSI: 0000000000000058 RDI: 00007f3985746f20 [ 68.041577][ T4447] RBP: 00007f3985747090 R08: 0000000000000000 R09: 0000000000000058 [ 68.041674][ T4447] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 68.041761][ T4447] R13: 00007f3986f36038 R14: 00007f3986f35fa0 R15: 00007ffe2d4c9be8 [ 68.041784][ T4447] [ 68.384578][ T4455] loop2: detected capacity change from 0 to 512 [ 68.463800][ T4455] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.301: error while reading EA inode 32 err=-116 [ 68.481638][ T4455] EXT4-fs (loop2): Remounting filesystem read-only [ 68.518958][ T4455] EXT4-fs warning (device loop2): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 68.576093][ T4455] EXT4-fs (loop2): 1 orphan inode deleted [ 68.592444][ T4463] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 68.614035][ T4463] blktrace: Concurrent blktraces are not allowed on loop0 [ 68.624295][ T4463] loop0: detected capacity change from 0 to 512 [ 68.631224][ T4463] /dev/loop0: Can't open blockdev [ 68.787670][ T4469] loop2: detected capacity change from 0 to 512 [ 68.813587][ T4468] rdma_rxe: rxe_newlink: failed to add vcan0 [ 68.963788][ T4480] loop3: detected capacity change from 0 to 128 [ 68.979956][ T4480] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 69.010308][ T4475] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.308: error while reading EA inode 32 err=-116 [ 69.027352][ T4469] ext4 filesystem being mounted at /64/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.065310][ T4480] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 69.076308][ T4475] EXT4-fs (loop1): Remounting filesystem read-only [ 69.102455][ T4475] EXT4-fs warning (device loop1): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 69.144720][ T4475] EXT4-fs (loop1): 1 orphan inode deleted [ 69.169476][ T4486] ext4 filesystem being mounted at /62/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.235019][ T52] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 69.290002][ T4490] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.312: error while reading EA inode 32 err=-116 [ 69.369951][ T4490] EXT4-fs (loop1): Remounting filesystem read-only [ 69.394532][ T4490] EXT4-fs warning (device loop1): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 69.443724][ T4490] EXT4-fs (loop1): 1 orphan inode deleted [ 69.507945][ T4503] EXT4-fs: Ignoring removed nomblk_io_submit option [ 69.525669][ T4501] EXT4-fs: Ignoring removed nomblk_io_submit option [ 69.544330][ T4501] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 69.571225][ T4503] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 69.593589][ T4503] System zones: 0-1, 3-36 [ 69.646974][ T4501] System zones: 0-1, 3-36 [ 69.816643][ T4523] ext4 filesystem being mounted at /66/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.027218][ T4529] ext4 filesystem being mounted at /67/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.947562][ T4542] netlink: 4 bytes leftover after parsing attributes in process `syz.0.328'. [ 71.118123][ T4519] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=272 sclass=netlink_route_socket pid=4519 comm=syz.3.322 [ 71.131504][ T4538] loop4: p1 p3 [ 71.136811][ T4538] loop4: p3 start 8388352 is beyond EOD, truncated [ 71.243329][ T4538] pim6reg: entered allmulticast mode [ 71.313307][ T4538] pim6reg: left allmulticast mode [ 71.387448][ T4519] lo speed is unknown, defaulting to 1000 [ 71.453750][ T4553] netlink: 20 bytes leftover after parsing attributes in process `%&£Î&{-+']'. [ 71.489302][ T4519] vcan0 speed is unknown, defaulting to 1000 [ 72.005113][ T4559] set_capacity_and_notify: 8 callbacks suppressed [ 72.005132][ T4559] loop4: detected capacity change from 0 to 512 [ 72.056014][ T4559] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 72.128054][ T4559] EXT4-fs mount: 122 callbacks suppressed [ 72.128071][ T4559] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.201472][ T29] kauditd_printk_skb: 383 callbacks suppressed [ 72.201490][ T29] audit: type=1326 audit(1768547183.183:3332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4565 comm="syz.1.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d538df749 code=0x7ffc0000 [ 72.236571][ T4559] ext4 filesystem being mounted at /70/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 72.404424][ T4574] loop3: detected capacity change from 0 to 128 [ 72.413045][ T29] audit: type=1326 audit(1768547183.233:3333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4565 comm="syz.1.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f3d538df749 code=0x7ffc0000 [ 72.436795][ T29] audit: type=1326 audit(1768547183.233:3334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4565 comm="syz.1.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d538df749 code=0x7ffc0000 [ 72.460356][ T29] audit: type=1326 audit(1768547183.233:3335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4565 comm="syz.1.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3d538df749 code=0x7ffc0000 [ 72.483723][ T29] audit: type=1326 audit(1768547183.233:3336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4565 comm="syz.1.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d538df749 code=0x7ffc0000 [ 72.507286][ T29] audit: type=1326 audit(1768547183.233:3337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4565 comm="syz.1.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3d538df749 code=0x7ffc0000 [ 72.530856][ T29] audit: type=1326 audit(1768547183.233:3338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4565 comm="syz.1.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d538df749 code=0x7ffc0000 [ 72.554430][ T29] audit: type=1326 audit(1768547183.233:3339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4565 comm="syz.1.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3d538df749 code=0x7ffc0000 [ 72.578018][ T29] audit: type=1326 audit(1768547183.233:3340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4565 comm="syz.1.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d538df749 code=0x7ffc0000 [ 72.601526][ T29] audit: type=1326 audit(1768547183.233:3341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4565 comm="syz.1.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3d538df749 code=0x7ffc0000 [ 72.635400][ T4574] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 72.665163][ T4574] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 72.755580][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.834573][ T4583] rdma_rxe: rxe_newlink: failed to add vcan0 [ 72.884367][ T4587] netlink: 20 bytes leftover after parsing attributes in process `%&£Î&{-+']'. [ 72.913573][ T1640] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 72.972940][ T4592] netlink: 4 bytes leftover after parsing attributes in process `syz.4.346'. [ 73.052482][ C1] hrtimer: interrupt took 37794 ns [ 73.460589][ T4612] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 73.519254][ T4612] blktrace: Concurrent blktraces are not allowed on loop0 [ 73.586689][ T4612] loop0: detected capacity change from 0 to 512 [ 73.643115][ T4612] /dev/loop0: Can't open blockdev [ 74.021664][ T4625] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 74.055492][ T4625] SELinux: failed to load policy [ 74.200601][ T4635] loop2: detected capacity change from 0 to 512 [ 74.230960][ T4634] loop4: detected capacity change from 0 to 512 [ 74.261441][ T4635] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.358: error while reading EA inode 32 err=-116 [ 74.295955][ T4634] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.360: error while reading EA inode 32 err=-116 [ 74.328914][ T4634] EXT4-fs (loop4): Remounting filesystem read-only [ 74.345158][ T4634] EXT4-fs warning (device loop4): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 74.365348][ T4634] EXT4-fs (loop4): 1 orphan inode deleted [ 74.380445][ T4640] loop3: detected capacity change from 0 to 1024 [ 74.386722][ T4634] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.408353][ T4635] EXT4-fs (loop2): Remounting filesystem read-only [ 74.449772][ T4634] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.459699][ T4635] EXT4-fs warning (device loop2): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 74.480854][ T4640] EXT4-fs: Ignoring removed nomblk_io_submit option [ 74.524840][ T4635] EXT4-fs (loop2): 1 orphan inode deleted [ 74.545866][ T4640] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 74.569713][ T4635] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.594492][ T4640] System zones: 0-1, 3-36 [ 74.602891][ T4635] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.623311][ T4640] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.704293][ T4661] loop2: detected capacity change from 0 to 512 [ 74.714727][ T4660] loop4: detected capacity change from 0 to 512 [ 74.746231][ T4661] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 74.754440][ T4661] EXT4-fs (loop2): orphan cleanup on readonly fs [ 74.776427][ T4660] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.801863][ T4661] EXT4-fs warning (device loop2): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 74.822363][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.842103][ T4660] ext4 filesystem being mounted at /75/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.922190][ T4661] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 74.940927][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.961841][ T4661] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.369: bg 0: block 15: invalid block bitmap [ 74.975155][ T4667] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 75.012688][ T4667] SELinux: failed to load policy [ 75.027728][ T4661] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 75.079696][ T4661] EXT4-fs (loop2): 1 truncate cleaned up [ 75.110135][ T4661] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 75.210302][ T4661] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #16: comm +}[@: corrupted xattr block 31: invalid header [ 75.279332][ T4661] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=16 [ 75.298583][ T4672] loop3: detected capacity change from 0 to 1024 [ 75.311846][ T4676] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 75.324277][ T4672] EXT4-fs: Ignoring removed nomblk_io_submit option [ 75.324978][ T4661] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #16: comm +}[@: corrupted xattr block 31: invalid header [ 75.371233][ T4678] blktrace: Concurrent blktraces are not allowed on loop8 [ 75.408031][ T4672] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 75.429979][ T4661] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=16 [ 75.440028][ T4676] loop4: detected capacity change from 0 to 512 [ 75.465025][ T4661] EXT4-fs error (device loop2): ext4_get_link:106: inode #16: comm +}[@: bad symlink. [ 75.472038][ T4672] System zones: 0-1, 3-36 [ 75.490380][ T4681] siw: device registration error -23 [ 75.535613][ T4676] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: inode #18: comm syz.4.373: iget: bad extra_isize 90 (inode size 256) [ 75.577670][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.588000][ T4672] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.662731][ T4676] EXT4-fs (loop4): Remounting filesystem read-only [ 75.695025][ T4676] EXT4-fs warning (device loop4): ext4_evict_inode:273: xattr delete (err -30) [ 75.746142][ T4676] EXT4-fs (loop4): 1 orphan inode deleted [ 75.767113][ T4676] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.809469][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.848765][ T4676] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.085787][ T4699] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.381: error while reading EA inode 32 err=-116 [ 76.086785][ T4702] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 76.145480][ T4702] SELinux: failed to load policy [ 76.200266][ T4697] EXT4-fs: Ignoring removed nomblk_io_submit option [ 76.233702][ T4699] EXT4-fs (loop3): Remounting filesystem read-only [ 76.278403][ T4699] EXT4-fs warning (device loop3): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 76.292883][ T4697] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 76.350170][ T4697] System zones: 0-1, 3-36 [ 76.362508][ T4699] EXT4-fs (loop3): 1 orphan inode deleted [ 76.386387][ T4697] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.388190][ T4699] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.478817][ T4713] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.555403][ T4699] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.565512][ T4713] ext4 filesystem being mounted at /92/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.592833][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.709760][ T3320] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.819133][ T4719] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.388: error while reading EA inode 32 err=-116 [ 76.857407][ T4719] EXT4-fs (loop2): Remounting filesystem read-only [ 76.865427][ T4724] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 76.944883][ T4719] EXT4-fs warning (device loop2): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 76.956711][ T4718] EXT4-fs: Ignoring removed nomblk_io_submit option [ 76.976050][ T4719] EXT4-fs (loop2): 1 orphan inode deleted [ 76.989405][ T4724] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.017478][ T4719] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.070960][ T4718] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 77.095918][ T4719] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.100590][ T4724] ext4 filesystem being mounted at /93/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 77.126412][ T4718] System zones: 0-1, 3-36 [ 77.132634][ T4718] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.214896][ T29] kauditd_printk_skb: 352 callbacks suppressed [ 77.214910][ T29] audit: type=1326 audit(1768547188.193:3693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4717 comm="syz.2.388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3986cdf749 code=0x7ffc0000 [ 77.325835][ T29] audit: type=1326 audit(1768547188.203:3694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4717 comm="syz.2.388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f3986cdf749 code=0x7ffc0000 [ 77.349571][ T29] audit: type=1326 audit(1768547188.203:3695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4717 comm="syz.2.388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3986cdf749 code=0x7ffc0000 [ 77.373342][ T29] audit: type=1326 audit(1768547188.253:3696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4716 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa56e1fdf90 code=0x7ffc0000 [ 77.396568][ T29] audit: type=1326 audit(1768547188.253:3697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4716 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7fa56e1fe497 code=0x7ffc0000 [ 77.419647][ T29] audit: type=1326 audit(1768547188.253:3698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4716 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa56e1fdf90 code=0x7ffc0000 [ 77.442894][ T29] audit: type=1326 audit(1768547188.253:3699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4716 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa56e1ff749 code=0x7ffc0000 [ 77.466463][ T29] audit: type=1326 audit(1768547188.253:3700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4716 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa56e1ff749 code=0x7ffc0000 [ 77.489402][ T29] audit: type=1326 audit(1768547188.253:3701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4716 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=94 compat=0 ip=0x7fa56e1ff749 code=0x7ffc0000 [ 77.512587][ T29] audit: type=1326 audit(1768547188.263:3702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4716 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa56e1ff749 code=0x7ffc0000 [ 77.538758][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.615655][ T3320] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.664288][ T4743] set_capacity_and_notify: 6 callbacks suppressed [ 77.664327][ T4743] loop1: detected capacity change from 0 to 512 [ 77.703898][ T4743] EXT4-fs: Ignoring removed bh option [ 77.711300][ T4746] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 77.719687][ T4746] SELinux: failed to load policy [ 77.728580][ T4743] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 77.747739][ T4748] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 77.775185][ T4743] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.395: invalid indirect mapped block 4294967295 (level 1) [ 77.802405][ T4748] loop4: detected capacity change from 0 to 512 [ 77.810289][ T4743] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.395: invalid indirect mapped block 4294967295 (level 1) [ 77.830708][ T4743] EXT4-fs (loop1): 2 truncates cleaned up [ 77.837043][ T4743] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.867345][ T4751] loop0: detected capacity change from 0 to 512 [ 77.880269][ T3320] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.910356][ T4748] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: inode #18: comm syz.4.396: iget: bad extra_isize 90 (inode size 256) [ 77.951053][ T4755] siw: device registration error -23 [ 77.957567][ T4754] syz0: rxe_newlink: already configured on vcan0 [ 77.964394][ T4748] EXT4-fs (loop4): Remounting filesystem read-only [ 77.997375][ T4748] EXT4-fs warning (device loop4): ext4_evict_inode:273: xattr delete (err -30) [ 77.998243][ T4751] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.020707][ T4748] EXT4-fs (loop4): 1 orphan inode deleted [ 78.054949][ T4751] ext4 filesystem being mounted at /79/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 78.065794][ T4748] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.105458][ T4751] siw: device registration error -23 [ 78.131224][ T4764] loop3: detected capacity change from 0 to 512 [ 78.136198][ T4748] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.161112][ T4766] netlink: 4 bytes leftover after parsing attributes in process `syz.2.403'. [ 78.172780][ T4767] loop2: detected capacity change from 0 to 512 [ 78.193612][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.213166][ T4766] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 78.220748][ T4766] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 78.228880][ T4768] loop1: detected capacity change from 0 to 128 [ 78.238429][ T4764] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.258917][ T4766] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 78.266609][ T4766] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 78.281211][ T4768] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 78.303610][ T4764] ext4 filesystem being mounted at /62/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 78.327449][ T4768] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 78.425854][ T4774] loop0: detected capacity change from 0 to 1024 [ 78.436687][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.447544][ T53] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 78.468062][ T4774] EXT4-fs: Ignoring removed nomblk_io_submit option [ 78.511179][ T4774] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 78.527372][ T4774] System zones: 0-1, 3-36 [ 78.542785][ T4774] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.568741][ T4780] netlink: 20 bytes leftover after parsing attributes in process `%&£Î&{-+']'. [ 78.595148][ T4779] loop3: detected capacity change from 0 to 512 [ 78.614735][ T4781] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 78.645816][ T4779] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 78.688118][ T4781] SELinux: failed to load policy [ 78.726253][ T4779] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.871197][ T4779] ext4 filesystem being mounted at /63/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 78.912280][ T4791] loop4: detected capacity change from 0 to 512 [ 79.057792][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.181147][ T4791] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.331753][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.417790][ T4791] ext4 filesystem being mounted at /83/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.769412][ T4800] siw: device registration error -23 [ 79.858251][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.992114][ T4808] rdma_rxe: rxe_newlink: failed to add vcan0 [ 80.001808][ T4807] loop3: detected capacity change from 0 to 512 [ 80.052635][ T4809] EXT4-fs: Ignoring removed nomblk_io_submit option [ 80.123863][ T4807] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.153070][ T4813] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 80.166582][ T4809] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 80.195961][ T4807] ext4 filesystem being mounted at /64/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.229700][ T4813] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 80.276161][ T4807] siw: device registration error -23 [ 80.284822][ T4809] System zones: 0-1, 3-36 [ 80.301864][ T4809] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.368194][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.422158][ T356] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 80.477233][ T4820] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.419: error while reading EA inode 32 err=-116 [ 80.506135][ T4824] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 80.548889][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.591402][ T4824] SELinux: failed to load policy [ 80.598837][ T4820] EXT4-fs (loop0): Remounting filesystem read-only [ 80.633587][ T4812] netlink: 4 bytes leftover after parsing attributes in process `syz.2.417'. [ 80.654926][ T4820] EXT4-fs warning (device loop0): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 80.696707][ T4820] EXT4-fs (loop0): 1 orphan inode deleted [ 80.738576][ T4820] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.813937][ T4830] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.422: error while reading EA inode 32 err=-116 [ 80.840033][ T4820] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.881806][ T4833] EXT4-fs: Ignoring removed nomblk_io_submit option [ 80.901593][ T4836] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 80.975112][ T4830] EXT4-fs (loop4): Remounting filesystem read-only [ 81.004732][ T4830] EXT4-fs warning (device loop4): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 81.025613][ T4833] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 81.046412][ T4836] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.076231][ T4833] System zones: 0-1, 3-36 [ 81.109878][ T4830] EXT4-fs (loop4): 1 orphan inode deleted [ 81.124657][ T4836] ext4 filesystem being mounted at /101/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 81.161720][ T4833] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.280789][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.302669][ T4830] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.431479][ T3320] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.455541][ T4848] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 81.490902][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.500665][ T4848] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.525416][ T4848] ext4 filesystem being mounted at /86/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 81.557463][ T4849] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.581906][ T4849] ext4 filesystem being mounted at /67/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.650838][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.737775][ T4858] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.765012][ T4858] ext4 filesystem being mounted at /86/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.842737][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.875660][ T4858] siw: device registration error -23 [ 81.930418][ T4860] EXT4-fs: Ignoring removed nomblk_io_submit option [ 81.989325][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.030294][ T4860] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 82.054438][ T4866] netlink: 20 bytes leftover after parsing attributes in process `%&£Î&{-+']'. [ 82.100959][ T4868] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 82.126221][ T4860] System zones: 0-1, 3-36 [ 82.176642][ T4868] SELinux: failed to load policy [ 82.183455][ T4860] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.273006][ T4870] EXT4-fs: Ignoring removed bh option [ 82.281767][ T29] kauditd_printk_skb: 868 callbacks suppressed [ 82.281790][ T29] audit: type=1326 audit(1768547193.263:4571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4859 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f545282df90 code=0x7ffc0000 [ 82.342122][ T4870] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 82.424411][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.438146][ T4870] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.434: invalid indirect mapped block 4294967295 (level 1) [ 82.451975][ T29] audit: type=1326 audit(1768547193.263:4572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4859 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7f545282e497 code=0x7ffc0000 [ 82.484736][ T29] audit: type=1326 audit(1768547193.263:4573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4859 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f545282df90 code=0x7ffc0000 [ 82.515006][ T29] audit: type=1326 audit(1768547193.263:4574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4859 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f545282f749 code=0x7ffc0000 [ 82.543138][ T29] audit: type=1326 audit(1768547193.273:4575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4859 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f545282f749 code=0x7ffc0000 [ 82.572232][ T29] audit: type=1326 audit(1768547193.303:4576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4859 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=94 compat=0 ip=0x7f545282f749 code=0x7ffc0000 [ 82.573475][ T4870] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.434: invalid indirect mapped block 4294967295 (level 1) [ 82.599740][ T29] audit: type=1326 audit(1768547193.323:4577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4859 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f545282f749 code=0x7ffc0000 [ 82.641665][ T29] audit: type=1326 audit(1768547193.323:4578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4859 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=179 compat=0 ip=0x7f545282f749 code=0x7ffc0000 [ 82.666414][ T29] audit: type=1326 audit(1768547193.323:4579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4859 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f545282f749 code=0x7ffc0000 [ 82.840346][ T4877] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 82.875256][ T4870] EXT4-fs (loop2): 2 truncates cleaned up [ 82.906136][ T4870] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.926830][ T4879] set_capacity_and_notify: 11 callbacks suppressed [ 82.926845][ T4879] loop1: detected capacity change from 0 to 512 [ 82.928695][ T4877] SELinux: failed to load policy [ 82.960976][ T4881] loop4: detected capacity change from 0 to 512 [ 83.060996][ T4881] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.438: error while reading EA inode 32 err=-116 [ 83.115141][ T4881] EXT4-fs (loop4): Remounting filesystem read-only [ 83.136187][ T4879] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.215054][ T29] audit: type=1326 audit(1768547193.823:4580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4876 comm="syz.4.438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2071fcf749 code=0x7ffc0000 [ 83.225122][ T4881] EXT4-fs warning (device loop4): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 83.264990][ T4879] ext4 filesystem being mounted at /103/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.326865][ T4888] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 83.389128][ T4889] loop2: detected capacity change from 0 to 512 [ 83.422728][ T4891] loop1: detected capacity change from 0 to 512 [ 83.424938][ T4881] EXT4-fs (loop4): 1 orphan inode deleted [ 83.441673][ T4889] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #18: comm syz.2.439: iget: bad extra_isize 90 (inode size 256) [ 83.468305][ T4891] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 83.495669][ T4889] EXT4-fs (loop2): Remounting filesystem read-only [ 83.502652][ T4889] EXT4-fs warning (device loop2): ext4_evict_inode:273: xattr delete (err -30) [ 83.530021][ T4891] ext4 filesystem being mounted at /104/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 83.535371][ T4889] EXT4-fs (loop2): 1 orphan inode deleted [ 83.619046][ T4880] lo speed is unknown, defaulting to 1000 [ 83.656162][ T4880] vcan0 speed is unknown, defaulting to 1000 [ 84.057222][ T4908] netlink: 20 bytes leftover after parsing attributes in process `%&£Î&{-+']'. [ 84.071112][ T4909] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 84.250483][ T4917] loop1: detected capacity change from 0 to 512 [ 84.292599][ T4913] loop4: detected capacity change from 0 to 1024 [ 84.321512][ T4917] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #18: comm syz.1.444: iget: bad extra_isize 90 (inode size 256) [ 84.351732][ T4913] EXT4-fs: Ignoring removed nomblk_io_submit option [ 84.365386][ T4917] EXT4-fs (loop1): Remounting filesystem read-only [ 84.374612][ T4917] EXT4-fs warning (device loop1): ext4_evict_inode:273: xattr delete (err -30) [ 84.401086][ T4917] EXT4-fs (loop1): 1 orphan inode deleted [ 84.410745][ T4913] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 84.464887][ T4913] System zones: 0-1, 3-36 [ 84.568272][ T4921] loop2: detected capacity change from 0 to 512 [ 84.605681][ T4921] /dev/loop2: Can't open blockdev [ 84.765382][ T4928] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 84.805226][ T4928] SELinux: failed to load policy [ 84.853349][ T4928] loop4: detected capacity change from 0 to 512 [ 84.903057][ T4928] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.451: error while reading EA inode 32 err=-116 [ 84.986827][ T4936] loop2: detected capacity change from 0 to 512 [ 85.015374][ T4928] EXT4-fs (loop4): Remounting filesystem read-only [ 85.023659][ T4928] EXT4-fs warning (device loop4): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 85.075283][ T4936] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 85.105406][ T4928] EXT4-fs (loop4): 1 orphan inode deleted [ 85.136825][ T4936] ext4 filesystem being mounted at /95/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 85.305885][ T4945] loop4: detected capacity change from 0 to 512 [ 85.340289][ T4945] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.457: error while reading EA inode 32 err=-116 [ 85.357020][ T4945] EXT4-fs (loop4): Remounting filesystem read-only [ 85.364658][ T4945] EXT4-fs warning (device loop4): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 85.377413][ T4945] EXT4-fs (loop4): 1 orphan inode deleted [ 85.391175][ T4942] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 85.440982][ T4952] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 85.468948][ T4942] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 85.485509][ T4952] blktrace: Concurrent blktraces are not allowed on loop0 [ 85.538691][ T4952] /dev/loop0: Can't open blockdev [ 85.570976][ T4956] rdma_rxe: rxe_newlink: failed to add vcan0 [ 85.598859][ T4954] EXT4-fs: Ignoring removed nomblk_io_submit option [ 85.614857][ T356] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 85.639657][ T4954] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 85.716636][ T4954] System zones: 0-1, 3-36 [ 85.727665][ T4961] ext4 filesystem being mounted at /108/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.749184][ T4959] lo speed is unknown, defaulting to 1000 [ 85.778652][ T4959] vcan0 speed is unknown, defaulting to 1000 [ 86.060218][ T4970] EXT4-fs: Ignoring removed nomblk_io_submit option [ 86.195924][ T4970] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 86.222778][ T4970] System zones: 0-1, 3-36 [ 86.339596][ T4981] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 86.391334][ T4981] SELinux: failed to load policy [ 87.005084][ T4993] EXT4-fs: Ignoring removed orlov option [ 87.084735][ T4995] ext4 filesystem being mounted at /71/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.152986][ T4995] siw: device registration error -23 [ 87.256125][ T4977] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 87.291196][ T29] kauditd_printk_skb: 557 callbacks suppressed [ 87.291225][ T29] audit: type=1400 audit(1768547198.273:5138): avc: denied { read } for pid=5001 comm="syz.3.475" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 87.416156][ T29] audit: type=1400 audit(1768547198.283:5139): avc: denied { setopt } for pid=4976 comm="syz.0.468" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 87.436126][ T29] audit: type=1400 audit(1768547198.283:5140): avc: denied { getopt } for pid=4976 comm="syz.0.468" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 87.541780][ T29] audit: type=1326 audit(1768547198.513:5141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4992 comm="syz.4.473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2071fcf749 code=0x7ffc0000 [ 87.567161][ T29] audit: type=1326 audit(1768547198.513:5142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4992 comm="syz.4.473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2071fcf749 code=0x7ffc0000 [ 87.684878][ T29] audit: type=1400 audit(1768547198.583:5143): avc: denied { read write } for pid=5005 comm="syz.0.476" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 87.711474][ T29] audit: type=1400 audit(1768547198.583:5144): avc: denied { ioctl open } for pid=5005 comm="syz.0.476" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 87.737018][ T29] audit: type=1326 audit(1768547198.613:5145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4992 comm="syz.4.473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2071fcf749 code=0x7ffc0000 [ 87.761472][ T29] audit: type=1326 audit(1768547198.613:5146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4992 comm="syz.4.473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2071fcf749 code=0x7ffc0000 [ 87.789720][ T29] audit: type=1326 audit(1768547198.613:5147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4992 comm="syz.4.473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2071fcf749 code=0x7ffc0000 [ 88.028205][ T5014] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 88.040253][ T5014] SELinux: failed to load policy [ 88.135641][ T5016] netlink: 4 bytes leftover after parsing attributes in process `syz.3.479'. [ 88.195646][ T5018] set_capacity_and_notify: 7 callbacks suppressed [ 88.195665][ T5018] loop0: detected capacity change from 0 to 1024 [ 88.232777][ T5018] EXT4-fs: Ignoring removed nomblk_io_submit option [ 88.297436][ T5018] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 88.326576][ T5018] System zones: 0-1, 3-36 [ 89.145175][ T5028] netlink: 20 bytes leftover after parsing attributes in process `%&£Î&{-+']'. [ 89.176018][ T5030] loop3: detected capacity change from 0 to 1024 [ 89.199811][ T5030] EXT4-fs (loop3): Invalid log cluster size: 4294967295 [ 89.231244][ T5032] loop0: detected capacity change from 0 to 1024 [ 89.254747][ T5032] EXT4-fs: Ignoring removed nomblk_io_submit option [ 89.281876][ T5035] netlink: 28 bytes leftover after parsing attributes in process `syz.4.486'. [ 89.291044][ T5035] netlink: 28 bytes leftover after parsing attributes in process `syz.4.486'. [ 89.305931][ T5032] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 89.314921][ T5032] System zones: 0-1, 3-36 [ 89.436316][ T5038] loop3: detected capacity change from 0 to 2048 [ 89.444222][ T5043] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 89.467332][ T5043] SELinux: failed to load policy [ 89.484747][ T5040] loop4: detected capacity change from 0 to 512 [ 89.495658][ T5040] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.488: error while reading EA inode 32 err=-116 [ 89.544356][ T3304] loop3: p1 p3 [ 89.550309][ T5040] EXT4-fs (loop4): Remounting filesystem read-only [ 89.580425][ T3304] loop3: p3 start 8388352 is beyond EOD, truncated [ 89.587366][ T5040] EXT4-fs warning (device loop4): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 89.597831][ T5040] EXT4-fs (loop4): 1 orphan inode deleted [ 89.635718][ T5038] loop3: p1 p3 [ 89.649687][ T5038] loop3: p3 start 8388352 is beyond EOD, truncated [ 89.670448][ T5046] netlink: 28 bytes leftover after parsing attributes in process `syz.0.490'. [ 89.690024][ T5048] pim6reg: entered allmulticast mode [ 89.695576][ T3003] loop3: p1 p3 [ 89.709608][ T5038] pim6reg: left allmulticast mode [ 89.725009][ T3003] loop3: p3 start 8388352 is beyond EOD, truncated [ 89.807874][ T5046] loop0: detected capacity change from 0 to 128 [ 89.836397][ T5046] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 89.929772][ T5046] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 90.079926][ T5060] netlink: 'syz.2.492': attribute type 9 has an invalid length. [ 90.088325][ T5060] netlink: 'syz.2.492': attribute type 7 has an invalid length. [ 90.096462][ T5060] netlink: 'syz.2.492': attribute type 8 has an invalid length. [ 90.375057][ T5056] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 90.518076][ T5072] loop0: detected capacity change from 0 to 512 [ 90.801659][ T5072] ext4 filesystem being mounted at /94/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.938432][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 90.985855][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 91.270293][ T5091] loop0: detected capacity change from 0 to 512 [ 92.206602][ T5091] ext4 filesystem being mounted at /96/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 92.219260][ T5097] rdma_rxe: rxe_newlink: failed to add vcan0 [ 92.244015][ T5100] loop3: detected capacity change from 0 to 2048 [ 92.389312][ T29] kauditd_printk_skb: 176 callbacks suppressed [ 92.389331][ T29] audit: type=1400 audit(1768547203.373:5324): avc: denied { create } for pid=5105 comm="syz.4.505" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 92.429010][ T5100] loop3: p1 p3 [ 92.536812][ T5107] pim6reg: entered allmulticast mode [ 92.576493][ T5100] loop3: p3 start 8388352 is beyond EOD, truncated [ 92.625316][ T5112] pim6reg: left allmulticast mode [ 92.658572][ T5114] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 92.671732][ T5110] netlink: 'syz.4.505': attribute type 12 has an invalid length. [ 92.753271][ T5115] blktrace: Concurrent blktraces are not allowed on loop2 [ 92.847350][ T5114] loop1: detected capacity change from 0 to 512 [ 92.989749][ T5114] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #18: comm syz.1.507: iget: bad extra_isize 90 (inode size 256) [ 93.274916][ T5119] loop3: detected capacity change from 0 to 512 [ 93.316523][ T5119] ext4 filesystem being mounted at /79/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.333999][ T5114] EXT4-fs (loop1): Remounting filesystem read-only [ 93.371448][ T5114] EXT4-fs warning (device loop1): ext4_evict_inode:273: xattr delete (err -30) [ 93.386051][ T29] audit: type=1400 audit(1768547203.403:5325): avc: denied { map } for pid=5105 comm="syz.4.505" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=9812 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 93.410314][ T29] audit: type=1400 audit(1768547203.403:5326): avc: denied { read write } for pid=5105 comm="syz.4.505" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=9812 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 93.435267][ T29] audit: type=1400 audit(1768547203.553:5327): avc: denied { create } for pid=5109 comm="syz.1.507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 93.441387][ T5114] EXT4-fs (loop1): 1 orphan inode deleted [ 93.455117][ T29] audit: type=1400 audit(1768547203.583:5328): avc: denied { read } for pid=5109 comm="syz.1.507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 93.480134][ T29] audit: type=1400 audit(1768547203.633:5329): avc: denied { create } for pid=5105 comm="syz.4.505" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 93.499674][ T29] audit: type=1400 audit(1768547203.733:5330): avc: denied { create } for pid=5109 comm="syz.1.507" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 93.520507][ T29] audit: type=1400 audit(1768547203.733:5331): avc: denied { mounton } for pid=5109 comm="syz.1.507" path="/112/file0" dev="tmpfs" ino=645 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 93.544036][ T29] audit: type=1400 audit(1768547203.733:5332): avc: denied { write } for pid=5109 comm="syz.1.507" name="file0" dev="tmpfs" ino=645 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 93.566433][ T29] audit: type=1400 audit(1768547203.733:5333): avc: denied { open } for pid=5109 comm="syz.1.507" path="/112/file0" dev="tmpfs" ino=645 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 93.594588][ T5124] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 93.612961][ T5124] blktrace: Concurrent blktraces are not allowed on loop0 [ 93.623458][ T5124] loop0: detected capacity change from 0 to 512 [ 93.630930][ T5124] /dev/loop0: Can't open blockdev [ 94.566699][ T5137] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 94.584805][ T5137] SELinux: failed to load policy [ 94.648545][ T52] Bluetooth: hci0: Frame reassembly failed (-84) [ 94.660935][ T5132] netlink: 28 bytes leftover after parsing attributes in process `syz.1.512'. [ 94.687548][ T5145] rdma_rxe: rxe_newlink: failed to add vcan0 [ 94.696493][ T5146] netlink: 20 bytes leftover after parsing attributes in process `%&£Î&{-+']'. [ 94.767543][ T5148] loop3: detected capacity change from 0 to 512 [ 94.789417][ T5132] loop1: detected capacity change from 0 to 128 [ 94.801298][ T5153] loop2: detected capacity change from 0 to 512 [ 94.810707][ T5151] loop0: detected capacity change from 0 to 512 [ 94.817307][ T5132] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 94.829441][ T5132] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 94.840545][ T5148] ext4 filesystem being mounted at /82/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.856610][ T5151] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.518: error while reading EA inode 32 err=-116 [ 94.868718][ T5153] ext4 filesystem being mounted at /108/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.887938][ T5151] EXT4-fs (loop0): Remounting filesystem read-only [ 94.924921][ T5151] EXT4-fs warning (device loop0): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 94.986276][ T5151] EXT4-fs (loop0): 1 orphan inode deleted [ 94.992969][ T52] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 95.037214][ T5161] loop2: detected capacity change from 0 to 512 [ 95.040900][ T5163] loop1: detected capacity change from 0 to 512 [ 95.067684][ T5161] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 95.096209][ T5165] syz0: rxe_newlink: already configured on vcan0 [ 95.106570][ T5163] ext4 filesystem being mounted at /114/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.143039][ T5161] ext4 filesystem being mounted at /109/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 96.197390][ T5185] loop1: detected capacity change from 0 to 1024 [ 96.207472][ T5187] loop0: detected capacity change from 0 to 512 [ 96.220829][ T5185] EXT4-fs: Ignoring removed nomblk_io_submit option [ 96.235518][ T5187] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.529: error while reading EA inode 32 err=-116 [ 96.264181][ T5185] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 96.285926][ T5187] EXT4-fs (loop0): Remounting filesystem read-only [ 96.293267][ T5185] System zones: 0-1, 3-36 [ 96.300046][ T5187] EXT4-fs warning (device loop0): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 96.324300][ T5187] EXT4-fs (loop0): 1 orphan inode deleted [ 96.426483][ T5192] ext4 filesystem being mounted at /118/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.455446][ T5194] ext4 filesystem being mounted at /85/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.516400][ T5206] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.534: error while reading EA inode 32 err=-116 [ 96.558544][ T5206] EXT4-fs (loop1): Remounting filesystem read-only [ 96.568193][ T5206] EXT4-fs warning (device loop1): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 96.585864][ T5206] EXT4-fs (loop1): 1 orphan inode deleted [ 96.700510][ T5212] ext4 filesystem being mounted at /120/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.706084][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 96.727209][ T5127] rtc_cmos 00:00: Alarms can be up to one day in the future [ 96.783936][ T5218] netlink: 4 bytes leftover after parsing attributes in process `syz.3.538'. [ 96.915125][ T5220] rdma_rxe: rxe_newlink: failed to add vcan0 [ 96.998527][ T9] rtc_cmos 00:00: Alarms can be up to one day in the future [ 97.008133][ T9] rtc_cmos 00:00: Alarms can be up to one day in the future [ 97.020987][ T9] rtc_cmos 00:00: Alarms can be up to one day in the future [ 97.030463][ T9] rtc_cmos 00:00: Alarms can be up to one day in the future [ 97.039318][ T9] rtc rtc0: __rtc_set_alarm: err=-22 [ 97.451243][ T29] kauditd_printk_skb: 242 callbacks suppressed [ 97.451265][ T29] audit: type=1326 audit(1768547208.403:5576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5209 comm="syz.0.535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa56e1ff749 code=0x7ffc0000 [ 97.484808][ T29] audit: type=1326 audit(1768547208.403:5577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5209 comm="syz.0.535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa56e1ff749 code=0x7ffc0000 [ 97.512952][ T29] audit: type=1326 audit(1768547208.403:5578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5209 comm="syz.0.535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa56e1ff749 code=0x7ffc0000 [ 97.540973][ T29] audit: type=1326 audit(1768547208.403:5579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5209 comm="syz.0.535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa56e1ff749 code=0x7ffc0000 [ 97.568037][ T29] audit: type=1326 audit(1768547208.403:5580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5209 comm="syz.0.535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa56e1ff749 code=0x7ffc0000 [ 97.595794][ T29] audit: type=1326 audit(1768547208.403:5581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5209 comm="syz.0.535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa56e1ff749 code=0x7ffc0000 [ 97.623970][ T29] audit: type=1326 audit(1768547208.403:5582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5209 comm="syz.0.535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa56e1ff749 code=0x7ffc0000 [ 97.651665][ T29] audit: type=1326 audit(1768547208.403:5583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5209 comm="syz.0.535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa56e1ff749 code=0x7ffc0000 [ 97.677207][ T29] audit: type=1326 audit(1768547208.413:5584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5209 comm="syz.0.535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fa56e1ff749 code=0x7ffc0000 [ 97.701749][ T29] audit: type=1326 audit(1768547208.413:5585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5209 comm="syz.0.535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa56e1ff749 code=0x7ffc0000 [ 98.243182][ T5235] rdma_rxe: rxe_newlink: failed to add vcan0 [ 98.271093][ T5233] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.542: error while reading EA inode 32 err=-116 [ 98.311729][ T5241] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 98.315813][ T5233] EXT4-fs (loop4): Remounting filesystem read-only [ 98.344849][ T5233] EXT4-fs warning (device loop4): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 98.368301][ T5233] EXT4-fs (loop4): 1 orphan inode deleted [ 98.389025][ T5243] blktrace: Concurrent blktraces are not allowed on loop2 [ 98.435252][ T5241] set_capacity_and_notify: 5 callbacks suppressed [ 98.435274][ T5241] loop1: detected capacity change from 0 to 512 [ 98.492367][ T5241] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #18: comm syz.1.545: iget: bad extra_isize 90 (inode size 256) [ 98.546343][ T5241] EXT4-fs (loop1): Remounting filesystem read-only [ 98.551215][ T5248] loop3: detected capacity change from 0 to 512 [ 98.572420][ T5241] EXT4-fs warning (device loop1): ext4_evict_inode:273: xattr delete (err -30) [ 98.616175][ T5241] EXT4-fs (loop1): 1 orphan inode deleted [ 98.627705][ T5248] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.547: error while reading EA inode 32 err=-116 [ 98.688554][ T5257] loop4: detected capacity change from 0 to 512 [ 98.706032][ T5248] EXT4-fs (loop3): Remounting filesystem read-only [ 98.737359][ T5257] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 98.753514][ T5248] EXT4-fs warning (device loop3): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 98.779703][ T5248] EXT4-fs (loop3): 1 orphan inode deleted [ 98.788527][ T5257] ext4 filesystem being mounted at /114/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 98.835666][ T5259] loop2: detected capacity change from 0 to 512 [ 98.899027][ T5259] /dev/loop2: Can't open blockdev [ 98.908224][ T5264] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 98.961281][ T5264] SELinux: failed to load policy [ 99.052945][ T5266] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 99.082055][ T5266] SELinux: failed to load policy [ 99.124979][ T5266] loop4: detected capacity change from 0 to 512 [ 99.200064][ T5266] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.553: error while reading EA inode 32 err=-116 [ 99.266997][ T5266] EXT4-fs (loop4): Remounting filesystem read-only [ 99.291669][ T5266] EXT4-fs warning (device loop4): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 99.324475][ T5266] EXT4-fs (loop4): 1 orphan inode deleted [ 99.564867][ C1] ================================================================== [ 99.574872][ C1] BUG: KCSAN: data-race in wq_worker_tick / wq_worker_tick [ 99.585003][ C1] [ 99.588062][ C1] read-write to 0xffff888100073ab8 of 8 bytes by interrupt on cpu 0: [ 99.598168][ C1] wq_worker_tick+0x60/0x230 [ 99.603813][ C1] sched_tick+0xd7/0x220 [ 99.608991][ C1] update_process_times+0x15f/0x190 [ 99.615824][ C1] tick_nohz_handler+0x276/0x3d0 [ 99.621349][ C1] __hrtimer_run_queues+0x20f/0x5a0 [ 99.627463][ C1] hrtimer_interrupt+0x21a/0x460 [ 99.633123][ C1] __sysvec_apic_timer_interrupt+0x5f/0x1d0 [ 99.640648][ C1] sysvec_apic_timer_interrupt+0x6f/0x80 [ 99.648025][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 99.654230][ C1] _raw_spin_unlock_irq+0x2f/0x50 [ 99.660480][ C1] process_scheduled_works+0x486/0x9d0 [ 99.667068][ C1] worker_thread+0x582/0x770 [ 99.672964][ C1] kthread+0x489/0x510 [ 99.677897][ C1] ret_from_fork+0x149/0x290 [ 99.683706][ C1] ret_from_fork_asm+0x1a/0x30 [ 99.689789][ C1] [ 99.693112][ C1] read-write to 0xffff888100073ab8 of 8 bytes by interrupt on cpu 1: [ 99.703577][ C1] wq_worker_tick+0x60/0x230 [ 99.709355][ C1] sched_tick+0xd7/0x220 [ 99.715567][ C1] update_process_times+0x15f/0x190 [ 99.721794][ C1] tick_nohz_handler+0x276/0x3d0 [ 99.728994][ C1] __hrtimer_run_queues+0x20f/0x5a0 [ 99.734855][ C1] hrtimer_interrupt+0x21a/0x460 [ 99.740478][ C1] __sysvec_apic_timer_interrupt+0x5f/0x1d0 [ 99.747576][ C1] sysvec_apic_timer_interrupt+0x6f/0x80 [ 99.755693][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 99.763040][ C1] queue_work_on+0xda/0x130 [ 99.768455][ C1] tty_insert_flip_string_and_push_buffer+0x1ce/0x1f0 [ 99.777001][ C1] pty_write+0x70/0x90 [ 99.781915][ C1] tty_put_char+0x8f/0xc0 [ 99.787177][ C1] __process_echoes+0x2f9/0x6b0 [ 99.793677][ C1] n_tty_receive_buf_common+0x918/0xc10 [ 99.802237][ C1] n_tty_receive_buf2+0x33/0x40 [ 99.807846][ C1] tty_ldisc_receive_buf+0x66/0xf0 [ 99.814519][ C1] tty_port_default_receive_buf+0x59/0x90 [ 99.821070][ C1] flush_to_ldisc+0x148/0x340 [ 99.827718][ C1] process_scheduled_works+0x4ce/0x9d0 [ 99.833610][ C1] worker_thread+0x582/0x770 [ 99.838869][ C1] kthread+0x489/0x510 [ 99.844814][ C1] ret_from_fork+0x149/0x290 [ 99.849718][ C1] ret_from_fork_asm+0x1a/0x30 [ 99.855467][ C1] [ 99.858872][ C1] value changed: 0x0000000000057e40 -> 0x000000000005a550 [ 99.867060][ C1] [ 99.869435][ C1] Reported by Kernel Concurrency Sanitizer on: [ 99.877034][ C1] CPU: 1 UID: 0 PID: 52 Comm: kworker/u8:3 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 99.890978][ C1] Tainted: [W]=WARN [ 99.895512][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 99.907298][ C1] Workqueue: events_unbound flush_to_ldisc [ 99.914698][ C1] ================================================================== [ 100.198407][ T5271] syz.3.555 (5271) used greatest stack depth: 6200 bytes left