last executing test programs: 2m31.818880964s ago: executing program 2 (id=664): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'ip6gre0\x00', 0x0, 0x29, 0x40, 0x94, 0x6, 0x6, @private0, @mcast2, 0x10, 0x40, 0x8, 0x5}}) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x1, 0x800001, 0x0, 0x0, 0x0) socket(0x18, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) gettid() r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r0, &(0x7f0000000b40)={&(0x7f0000000080)={0x2, 0x4e20, @remote}, 0x10, &(0x7f00000000c0)=[{0x0, 0x4f}], 0x1, &(0x7f0000000180)=[@ip_pktinfo={{0x2f, 0x0, 0x7, {0x0, @dev, @loopback}}}], 0x30}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, 0x0, 0x0, 0x4}, 0x94) open_tree(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r4 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) 2m31.759577302s ago: executing program 2 (id=667): bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa2000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1ff, 0x1}, 0x4352, 0x0, 0xfffffffc, 0xb95b5ec032cc8e84, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) ptrace$setregs(0xd, r2, 0xfffffffffffffffb, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r6}, &(0x7f0000000180), &(0x7f0000000080)=r5}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r8, 0x7, &(0x7f00000000c0)={0x0, 0x2, 0x80000000000007, 0x401}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) syz_clone(0x41aa1000, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000240)={0xffffffffffffffff, r6, 0x5d32d793}) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000016000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m30.115558234s ago: executing program 2 (id=670): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = memfd_secret(0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) lsetxattr$security_selinux(0x0, &(0x7f0000000300), 0x0, 0x0, 0x5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00'}, 0x18) r3 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={r2, r1, 0x2e, 0x4608, @void}, 0x10) close(0xffffffffffffffff) bpf$LINK_DETACH(0x22, &(0x7f0000000080)=r3, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r0}, &(0x7f0000000000), &(0x7f0000000200)}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYRES8], 0x48) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000023896) close(0xffffffffffffffff) 2m30.026606936s ago: executing program 2 (id=672): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x800714, &(0x7f0000000000), 0xff, 0x4a7, &(0x7f0000000280)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) syz_clone(0x0, 0x0, 0x43, 0x0, 0x0, 0x0) unshare(0x22020400) write(r0, &(0x7f0000000180)="7e7226ce9b4d", 0x6) 2m29.925930099s ago: executing program 2 (id=675): perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, @perf_bp={0x0, 0x6}, 0x4, 0x9, 0xfff, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000000c0)=[@window={0x3, 0x9, 0x3}, @mss={0x2, 0x5}, @sack_perm], 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x9) 2m29.222516779s ago: executing program 2 (id=678): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001740)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r6, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0x1, 0x9, 0x8000, 0x3, 0x5, 0x5, 0xb762, 0x4, 0x7, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x7fc, 0xffff8000, 0x6, 0x401, 0x9, 0xb89, 0xffffe4f5, 0xd6, 0x4, 0xffff, 0x7, 0x0, 0x2, 0x101, 0x1, 0xfffffffc, 0x4, 0x1, 0x1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x44, 0x8, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x7, 0x80000001, 0x400, 0x8, 0xfffffa72, 0xcd, 0xffffff80, 0x80000000, 0xc, 0x4, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0x1, 0x7, 0x40, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0x3, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x2, 0x0, 0x3, 0x1000, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4, 0xffffffff, 0x80000000, 0x1966f9ab, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0xffffffff, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x3, 0xfffffffb, 0x1, 0x0, 0x0, 0x2, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x5, 0x5, 0x4d15, 0x1ff, 0xfffff060, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x1, 0x8, 0x42ba, 0x4, 0x9, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0xfff, 0x1ff, 0x8000, 0x3, 0x8, 0x3, 0x9, 0x9a6, 0xe4cb, 0x402, 0x1, 0x1ff, 0x3e, 0x9b4, 0x1, 0x8, 0x0, 0x8, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7b, 0xfffffeff, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x4, 0x1, 0x6, 0x200, 0x2]}, @TCA_TBF_PTAB={0x404, 0x3, [0x5, 0x200006, 0xd, 0x400, 0x0, 0x3, 0x5, 0x10000, 0x7, 0x4, 0x81, 0x0, 0x8, 0x0, 0x9, 0x5, 0xc0000, 0x8001, 0x1, 0x2000, 0x1, 0x8da5, 0x1, 0x4, 0x2, 0x6, 0x58, 0x7, 0x6f, 0x8, 0x3, 0x4, 0x9, 0x1000, 0x4, 0x9, 0x6, 0x80000001, 0x3, 0x1, 0xd4, 0x100, 0xa, 0xfff, 0x8, 0x9, 0x7, 0x7fffffff, 0xf4b3, 0x1, 0x0, 0x8, 0x8, 0x6, 0xd815, 0xfffffff9, 0x2, 0x401, 0x9, 0x36, 0xf, 0x74, 0xbbc, 0x9, 0x0, 0x6, 0x8, 0x5, 0x6, 0xb, 0x5, 0x5, 0x4e3, 0x200, 0x0, 0x9, 0x8001, 0x2, 0x1000, 0x7fffffff, 0x46a3, 0x6, 0x2, 0x1dd50645, 0x401, 0x5, 0x101, 0xbf, 0x0, 0x9, 0x3, 0x65, 0xffffff13, 0x2, 0x30, 0x1a3f, 0x2, 0x389c, 0x4, 0xffffffff, 0x3ff, 0x4, 0x4, 0x6, 0xf3bb, 0x1ff, 0x8, 0xf, 0xb, 0x401, 0x4, 0x1000, 0x1, 0x8, 0x1, 0x7ff, 0x7fff, 0x8, 0xd, 0x3ff, 0x4, 0x1, 0xffff, 0x7ffc, 0x2, 0x9, 0x1, 0xfff, 0x0, 0xfffffffe, 0x4, 0x0, 0x101, 0x78f0, 0xf, 0x7, 0x0, 0x3, 0xf1c7, 0x100, 0x3, 0x4, 0xfffffffe, 0xffffff7f, 0x3, 0x8, 0x6, 0xd, 0x3, 0xa, 0xd0, 0x200, 0x0, 0x400, 0x9, 0x6, 0x132c, 0xaba3, 0x1, 0x3, 0x1, 0x5, 0x6f788000, 0xc, 0x1ff, 0x40, 0x8, 0x3, 0x2, 0x1, 0x0, 0x71, 0xb13, 0x4, 0xbc5, 0x0, 0x7, 0xffff, 0x100, 0x7b58, 0x1, 0x807, 0x1ff, 0x3, 0x400, 0x80000000, 0x1040, 0x3, 0xfffffffa, 0x9a5, 0x8, 0x5, 0x1, 0x9, 0x3, 0x9, 0x7, 0x3, 0x1, 0x101, 0x2, 0x6, 0x598f, 0x5, 0x8e, 0x0, 0xa, 0x9, 0x1000, 0x8, 0xd00f, 0x2, 0x1, 0x6, 0x2a, 0x7, 0x100, 0x24e, 0xbd, 0x2, 0x2800000, 0x807, 0x0, 0x401, 0x6, 0x2, 0x9, 0x7039, 0x4, 0x1, 0x9, 0x1, 0xb18, 0x2, 0xfffffffe, 0x26e, 0x6, 0x5c, 0x8, 0x100, 0x3ff, 0x1, 0x0, 0xb, 0x10000, 0x8, 0x6, 0x2, 0x6, 0x7, 0x6, 0x7ff, 0x1, 0x4, 0x8001, 0x3]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r8, &(0x7f0000000200)="2478546ca4fa3b0bfe4ddf30cc5a", 0xe, 0x4000050, &(0x7f00000001c0)={0x11, 0xf7, r7, 0x1, 0xd8, 0x6, @multicast}, 0x14) r9 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmmsg$inet(r0, 0x0, 0x0, 0x8000004) 2m29.21820014s ago: executing program 32 (id=678): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001740)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r6, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0x1, 0x9, 0x8000, 0x3, 0x5, 0x5, 0xb762, 0x4, 0x7, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x7fc, 0xffff8000, 0x6, 0x401, 0x9, 0xb89, 0xffffe4f5, 0xd6, 0x4, 0xffff, 0x7, 0x0, 0x2, 0x101, 0x1, 0xfffffffc, 0x4, 0x1, 0x1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x44, 0x8, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x7, 0x80000001, 0x400, 0x8, 0xfffffa72, 0xcd, 0xffffff80, 0x80000000, 0xc, 0x4, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0x1, 0x7, 0x40, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0x3, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x2, 0x0, 0x3, 0x1000, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4, 0xffffffff, 0x80000000, 0x1966f9ab, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0xffffffff, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x3, 0xfffffffb, 0x1, 0x0, 0x0, 0x2, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x5, 0x5, 0x4d15, 0x1ff, 0xfffff060, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x1, 0x8, 0x42ba, 0x4, 0x9, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0xfff, 0x1ff, 0x8000, 0x3, 0x8, 0x3, 0x9, 0x9a6, 0xe4cb, 0x402, 0x1, 0x1ff, 0x3e, 0x9b4, 0x1, 0x8, 0x0, 0x8, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7b, 0xfffffeff, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x4, 0x1, 0x6, 0x200, 0x2]}, @TCA_TBF_PTAB={0x404, 0x3, [0x5, 0x200006, 0xd, 0x400, 0x0, 0x3, 0x5, 0x10000, 0x7, 0x4, 0x81, 0x0, 0x8, 0x0, 0x9, 0x5, 0xc0000, 0x8001, 0x1, 0x2000, 0x1, 0x8da5, 0x1, 0x4, 0x2, 0x6, 0x58, 0x7, 0x6f, 0x8, 0x3, 0x4, 0x9, 0x1000, 0x4, 0x9, 0x6, 0x80000001, 0x3, 0x1, 0xd4, 0x100, 0xa, 0xfff, 0x8, 0x9, 0x7, 0x7fffffff, 0xf4b3, 0x1, 0x0, 0x8, 0x8, 0x6, 0xd815, 0xfffffff9, 0x2, 0x401, 0x9, 0x36, 0xf, 0x74, 0xbbc, 0x9, 0x0, 0x6, 0x8, 0x5, 0x6, 0xb, 0x5, 0x5, 0x4e3, 0x200, 0x0, 0x9, 0x8001, 0x2, 0x1000, 0x7fffffff, 0x46a3, 0x6, 0x2, 0x1dd50645, 0x401, 0x5, 0x101, 0xbf, 0x0, 0x9, 0x3, 0x65, 0xffffff13, 0x2, 0x30, 0x1a3f, 0x2, 0x389c, 0x4, 0xffffffff, 0x3ff, 0x4, 0x4, 0x6, 0xf3bb, 0x1ff, 0x8, 0xf, 0xb, 0x401, 0x4, 0x1000, 0x1, 0x8, 0x1, 0x7ff, 0x7fff, 0x8, 0xd, 0x3ff, 0x4, 0x1, 0xffff, 0x7ffc, 0x2, 0x9, 0x1, 0xfff, 0x0, 0xfffffffe, 0x4, 0x0, 0x101, 0x78f0, 0xf, 0x7, 0x0, 0x3, 0xf1c7, 0x100, 0x3, 0x4, 0xfffffffe, 0xffffff7f, 0x3, 0x8, 0x6, 0xd, 0x3, 0xa, 0xd0, 0x200, 0x0, 0x400, 0x9, 0x6, 0x132c, 0xaba3, 0x1, 0x3, 0x1, 0x5, 0x6f788000, 0xc, 0x1ff, 0x40, 0x8, 0x3, 0x2, 0x1, 0x0, 0x71, 0xb13, 0x4, 0xbc5, 0x0, 0x7, 0xffff, 0x100, 0x7b58, 0x1, 0x807, 0x1ff, 0x3, 0x400, 0x80000000, 0x1040, 0x3, 0xfffffffa, 0x9a5, 0x8, 0x5, 0x1, 0x9, 0x3, 0x9, 0x7, 0x3, 0x1, 0x101, 0x2, 0x6, 0x598f, 0x5, 0x8e, 0x0, 0xa, 0x9, 0x1000, 0x8, 0xd00f, 0x2, 0x1, 0x6, 0x2a, 0x7, 0x100, 0x24e, 0xbd, 0x2, 0x2800000, 0x807, 0x0, 0x401, 0x6, 0x2, 0x9, 0x7039, 0x4, 0x1, 0x9, 0x1, 0xb18, 0x2, 0xfffffffe, 0x26e, 0x6, 0x5c, 0x8, 0x100, 0x3ff, 0x1, 0x0, 0xb, 0x10000, 0x8, 0x6, 0x2, 0x6, 0x7, 0x6, 0x7ff, 0x1, 0x4, 0x8001, 0x3]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r8, &(0x7f0000000200)="2478546ca4fa3b0bfe4ddf30cc5a", 0xe, 0x4000050, &(0x7f00000001c0)={0x11, 0xf7, r7, 0x1, 0xd8, 0x6, @multicast}, 0x14) r9 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmmsg$inet(r0, 0x0, 0x0, 0x8000004) 2.133626774s ago: executing program 1 (id=2740): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0}, 0x18) r1 = syz_io_uring_setup(0x2439, &(0x7f0000001480)={0x0, 0x1064, 0x1000, 0x7, 0x40222}, &(0x7f00000006c0)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000040)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000340)=@IORING_OP_SENDMSG={0x9, 0x10, 0x0, r1, 0x0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000180)=[{0x0}, {0x0}], 0x2}, 0x0, 0x1000}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x14c, &(0x7f0000000000)=0xe, 0x0, 0x4) io_uring_enter(r1, 0x47f8, 0x1e43, 0x2000000000000000, 0x0, 0x0) (fail_nth: 2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.956130117s ago: executing program 1 (id=2743): bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) r0 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) r1 = fsopen(&(0x7f00000004c0)='mqueue\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000001d40)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xaei\xb6\xb7\xc1Y\xd5YG\xf9\xc2\xf1\xa4\xdb$\xf6]\xab\x1a\xdaY\xfb\x03dhS\x97nZ\xf8\xc6\x1f\x03\x00\x00\x00\x00\x00\x00\x00\x9bg-D#g\x16\xf4\xd9\x00\x00\x00\x00\x00eA\x9f\xc3\x11\x18\xe6\xc5\x95\x9e!^W\xf6\xacE\xa3\xc8\xe7\xec\xd6\xbd\x1c+\n\xc7Q( \xba\xff\x17N\x1fB\x91\x15\x83\xec(B\xc5\x05\x9d\xd6\x02|6\xdc\xee$\xb5\x1deC\xfb\xa2\xaa\xe0#\xcb\xde;sA\xad\xa6\xb6P\xa3\xf7\xc3q\xd4\xb6\x95\x02\xd8*\xa8\xd2\x94\xa3\x89\xa9\xa0\xc5\xc9=\xa5^\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xcd\xd3\t\x01A\xd5\x81\xc1;9\xeez\xba\x00\x00\x00\xdc\x94\xff)\xa4\xe6\xfb]\x90bG\x11\b\x98#\xaa99ez|\x8b5\x92\xa5\xba\x96\xb3\xb26I\xbb\xdeb\x95?\xc0\x81', &(0x7f0000000200)='Yockfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000040)='\x00', &(0x7f00000001c0)='dE\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000079e8850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x23, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000280)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf10xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0x20002017}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000050b6850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00'}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setxattr$incfs_id(&(0x7f0000000180)='./cgroup.cpu/cgroup.procs\x00', &(0x7f00000001c0), 0x0, 0x0, 0x2) unshare(0x22020400) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x240, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4, 0x0, 0x3}, 0x18) syz_clone3(&(0x7f00000001c0)={0x100000000, 0x0, 0x0, 0x0, {0x20}, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x58) 1.554108099s ago: executing program 3 (id=2751): r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=@delqdisc={0x44, 0x25, 0x2, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xb, 0xb}, {0x7, 0x6}, {0xfff1, 0xfff9}}, [@TCA_RATE={0x6, 0x5, {0xf7, 0x7}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x5}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xff}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) openat$tun(0xffffffffffffff9c, 0x0, 0x101000, 0x0) syz_mount_image$ext4(&(0x7f0000000340)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000380)={[{@data_err_abort}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@bh}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xfe, 0x44d, &(0x7f0000000900)="$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") r3 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0xc9) ftruncate(r3, 0x2007ffc) sendfile(r3, r3, 0x0, 0x800000009) 1.549451589s ago: executing program 1 (id=2752): socket$kcm(0xa, 0x3, 0x73) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x80102, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b0000000000000017ff63f27405f800ff6492308178b4146341bf6c1192152dbe81114f002eac2e15091b14c5db2330bd6ef8bc5ef84272a10aba83e12c37f1a8806a04bb484e979e9d373553926e301cd993e383345c4fb4e0d22d46c54a0de20f4b5c6cdae973c1f205b4c035871af69254b36b848951b0099980d16f1ab7b584d46e767e0c1fd8dd8c442c7694ea4a"], 0x48) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000080)='mem\x00\x10\x00\x00\x00\x00\x00\x00I\xa2l') r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)) readv(r1, &(0x7f0000000000)=[{&(0x7f0000000140)=""/131, 0x83}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) write$selinux_access(0xffffffffffffffff, &(0x7f0000000800)=ANY=[@ANYBLOB="7379730f74656d5f753a6f626a6563745f723a6367726f75705f743a7330202f7573722f6c6962b5c9656c6570617468792f6d697373696f6e2d636f6e74726f6c2d352030"], 0x58) socket$nl_audit(0x10, 0x3, 0x9) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008000000182300", @ANYRES32=r2, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='kfree\x00', r3}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0xc17a) perf_event_open(&(0x7f0000004cc0)={0x0, 0x80, 0x2, 0x0, 0x0, 0x8, 0x0, 0x9, 0x154444, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x5, 0x1, @perf_bp={&(0x7f0000000140)}, 0x100410, 0x1fc, 0x2, 0x4, 0x9, 0xa, 0x480, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x22, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xfffffffffffffffe, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0xee00, 0xee00, 0x0) syz_io_uring_setup(0x4e1, &(0x7f0000000180)={0x0, 0xf5ea, 0x3180, 0x8000, 0x400252}, &(0x7f0000000700), &(0x7f0000000480)) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x80, 0x2, 0x1f9}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r5, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x183000, 0x12345}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) io_uring_enter(r5, 0x47f6, 0x0, 0x0, 0x0, 0x0) 1.493393627s ago: executing program 5 (id=2753): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r0}, 0x18) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x3000010, &(0x7f0000000340)={[{@errors_remount}, {@nodioread_nolock}]}, 0x1, 0x512, &(0x7f0000000380)="$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") 1.410567747s ago: executing program 1 (id=2754): syz_open_dev$evdev(&(0x7f0000000140), 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_config_ext, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) unshare(0x20000400) r0 = socket$vsock_stream(0x28, 0x1, 0x0) recvmmsg(r0, 0x0, 0x0, 0x10042, 0x0) socket(0x10, 0x803, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2, 0x0, 0x3}, 0x18) r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r3, 0x402, 0x5) fcntl$notify(r3, 0x402, 0x8000003d) pselect6(0x40, &(0x7f0000000080)={0xf, 0x10, 0x9, 0x5, 0x1, 0x8, 0xfffffffffffffff9, 0xf}, &(0x7f00000000c0)={0x5, 0x10001, 0x7f, 0x1, 0xd1, 0x80000001, 0xfffffffffffffb48, 0xfffffffffffffff5}, &(0x7f0000000100)={0x8, 0x7fff, 0x4, 0x40, 0x5, 0x5, 0x59d48ae6, 0x2}, 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) perf_event_open(0x0, 0x0, 0xfffffeffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={0x0, 0xffffffffffffffff, 0x0, 0x6}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0003402e60000000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516337ce06bbace8017cbec4c2ee5a7cef4090000001fb79119d0d68898b8a722a2643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d9345", 0xd8}], 0x1}, 0x60044084) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2e, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000202070"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x1, 0x4, 0x17fe2, 0x1}, 0x50) 1.275852945s ago: executing program 0 (id=2755): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRESOCT, @ANYRESOCT=0x0], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = epoll_create1(0x0) epoll_pwait2(r1, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000100)={0x20002017}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000050b6850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00'}) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) setxattr$incfs_id(&(0x7f0000000180)='./cgroup.cpu/cgroup.procs\x00', &(0x7f00000001c0), 0x0, 0x0, 0x2) unshare(0x22020400) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x240, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3, 0x0, 0x3}, 0x18) syz_clone3(&(0x7f00000001c0)={0x100000000, 0x0, 0x0, 0x0, {0x20}, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x58) 1.221815112s ago: executing program 5 (id=2757): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x4004001) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'hsr0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=ANY=[@ANYBLOB="64000000100001004b2baa2000"/36, @ANYRES32=0x0, @ANYBLOB="ffc3000000000037003c0012800c0001006d9ef4386163766c616e002c0002800a000900ffffbfffffff00000a000400aa6f39f7446951bb46fd43f659aaaaaaaabb000006000200010000dbdadf0498c81b3e8daf85bafaf45a8bfbbd137d5e3471457d42a5", @ANYRES64=r0, @ANYBLOB="3d7aa9d0aac70f2b31f7485244591306d4a9e94982d12e8b1ca406c52cf6f1cad317296b495daee6ab3e08ac56de12258a5e03439ca9c96455277fcb218d7694d390257acc0a56094491053d55f2c3901a937e4907995eabdc1b713b130508af9aadf084add1c21f96dbe46b4bb992a352c1ef097aae2aeefb878f38a7560232c186ef16092457d8a215037fa69f0a0196097d1799b14803c6b850827394047d16a7f79494952abc63070f8863cedf371e9284c72faffcf53ead59eed32cd6b2cc7d4bc7475e84ee693b2bfae62868998960e8d8dd09f190fb9ac7551d602ee2", @ANYRESOCT=0x0, @ANYRESDEC, @ANYRES64=r1, @ANYBLOB="aab574f3932c2b8f0724420f17e3c0e4fd2d2a24c031dd86c95b6e0519e514e23524ab2362450d050852ec585c4c08e49a79ec22e330cc55d7abcfc1dbe758bef1ed3287a9b4a61cbe762afb429cbb9b5817c65d4e10f4f704223d5141da65c65fa04e6662dffe147e99cf81550dfe6262e62cb1f8d3dab9bedea0ea7f8cdc072a52870dac", @ANYRES32=r1, @ANYRES8=r1, @ANYRESHEX=r0], 0x64}}, 0x8094) r2 = openat$full(0xffffffffffffff9c, &(0x7f00000007c0), 0x402, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f00000006c0)={{{@in=@loopback, @in=@multicast2}}, {{@in=@broadcast}, 0x0, @in6=@remote}}, &(0x7f0000000840)=0xe8) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000480)=ANY=[], &(0x7f0000001480)='GPL\x00', 0x15, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xc, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_io_uring_setup(0x5c2, &(0x7f0000000280)={0x0, 0xb84, 0x0, 0x8003, 0x25f}, &(0x7f0000000240)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000004c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x68, 0x3, r4, 0x0, 0x0, 0x0, 0x1, 0x1, {0x2}}) io_uring_enter(r4, 0x6e2, 0x620, 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kfree\x00', r3, 0x0, 0x4804}, 0x18) unshare(0x400) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") fallocate(0xffffffffffffffff, 0x20, 0x0, 0x8000) 1.195713445s ago: executing program 4 (id=2758): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0xff, 0x7ffc1ffd}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000c00000000000000008500000007000000040000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r1}, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) pipe(&(0x7f0000000000)) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000007c0)={@ifindex, r4, 0x2f, 0x2028, r4}, 0x20) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)={0x2c, r6, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x2}]}, @ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x818}, 0x20000004) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000c000000"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0xfffffffffffffffc}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x1f2) listxattr(&(0x7f0000006440)='./file0\x00', 0x0, 0x0) 1.168500689s ago: executing program 3 (id=2759): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @rand_addr=0x64010102}]}, &(0x7f00000007c0)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={r1, 0x8001}, 0x8) getsockopt$bt_hci(r0, 0x84, 0x7f, &(0x7f0000000080)=""/4050, &(0x7f0000000000)=0xfd2) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00', r2}, 0x18) io_uring_setup(0xb3c, &(0x7f00000000c0)={0x0, 0x45d6, 0x1, 0x4, 0x7}) 1.16170399s ago: executing program 4 (id=2760): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000ed074479000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x0) r0 = open(0x0, 0x518282, 0x78e22799f4a46e8e) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r1) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x8040) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8ff20c2c10f0093d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) write(r2, &(0x7f0000004200)='t', 0x1) 1.107064197s ago: executing program 0 (id=2761): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000640)='ext4\x00', &(0x7f0000000200)='./file2\x00', 0x200000, &(0x7f0000000300), 0xfc, 0x580, &(0x7f0000000f80)="$eJzs3UtrXFUcAPD/nUzS9KFJoRR1IYEurNROmsRHBRd1KVos6L4OyTSUTDolMylNLNgu7MaNFEHEgujOhXuXxS/gpyhooUgJunATuZM76bSZaV4zmdT5/eC259xzZ/7nzL3nzLmPIQH0rbH0n1zEyxHxdRIx0lSWj6xwbG27lUc3ptMlidXVT/5KIsnWNbZPsv8PZ5mXIuK3LyNO5TbGrS4tzxXL5dJClh+vzV8dry4tn748X5wtzZauTE5NnX1ravLdd97uWFtfv/DPdx/f++DsVydWvv3lwdE7SZyLI1lZczt24WZzZizGss9kMM49teFEB4LtJ0mvK8CODGT9fDDSMWAkBtZzLayO7HX1gC76Iu3WQJ9K9H/oU415QOPcvkPnwc+Nh++vnQBtbH9+7dpIDNfPhg6tJNn1kDXp+e5oB+KnMX798+6ddInOXYcA2NTNWxFxJp/fOP4l2fi3c2e2sM3TMbL4bS5AAZ10L53/vNFq/pNbn/9Ei/nP4RZ9dyfa9P8muQcdCNNWOv97r+X8d/2m1ehAlnuhPucbTC5dLpfSse3FiDgZgwfS/DPu53yWW7m/2q6wef6XLmn8xlwwq8eD/IEnXzNTrBV31egmD29FvNJy/pus7/+kxf5PP48LW4xxvHT31XZlm7d/XVduMa3+GPFay/2fPBH4Gfcnx+vHw3jjqNjo79vHf28Xfxvt74qHP2eJ9u0fTZrv11a3H+OH4X9L7cp2evwPJZ/W00PZuuvFWm1hImIo+Wjj+snHr23kG9unx//JE88e/1od/wfTjr3F9t8+drt50+Httb+70vbPtD/+Bzbu/+0n7n/4+fft4m9t/79ZT53M1mxl/NtqBXf7+QEAAAAAAMB+kouII5HkCuvpXK5QWHu+41gcypUr1dqpS5XFKzNR/63saAzmGne6R5qeh5jInodt5Cefyk9FxNGI+GbgYD1fmK6UZ3rdeAAAAAAAAAAAAAAAAAAAANgnDkcMt/r9f+qPgV7XDui6fK8rAPRM+/6flXTiLz0B+9KOv/+HO1sPYO+Z/0P/0v+hf+n/0L/0f+hf+j/0r+b+P9TDegB7bzvf/z+d72JFAAAAAAAAAAAAAAAAAAAAAAAAAAAA4P/hwvnz6bK68ujGdJqfuba0OFe5dnqmVJ0rzC9OF6YrC1cLs5XKbLlUmK7Mb/Z+5Url6sRkLF4fr5WqtfHq0vLF+crildrFy/PF2dLF0uCetAoAAAAAAAAAAAAAAAAAAACeL9Wl5bliuVxakJDYUSK/P6oh0ZwY2v379HpkAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDH/gsAAP//3Kw5xQ==") listxattr(&(0x7f0000000080)='./file1\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000440)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x14, 0x6, 0x0, @dev={0xfe, 0x80, '\x00', 0x20}, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}}, 0x0) 1.072125671s ago: executing program 3 (id=2762): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$IMADDTIMER(r1, 0x80044940, 0x0) read(r1, &(0x7f00000019c0)=""/4097, 0x1001) 973.805104ms ago: executing program 0 (id=2763): mkdir(&(0x7f0000000280)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x700000, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1b, 0x2000000000000016, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000004000000e27f000001"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r2, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000340)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000040)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000005c0)='sched_switch\x00', r4}, 0x10) pwrite64(r1, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) lstat(0x0, 0x0) write$P9_RGETATTR(r1, 0x0, 0x0) lseek(r1, 0x5, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x12}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000500)='9p_client_req\x00', r5}, 0x10) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) 972.682414ms ago: executing program 5 (id=2764): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000007c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB="01002dbd7000faffffff2a000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 945.417277ms ago: executing program 4 (id=2765): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000004000000850000008600000095"], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="070000000400000008000000d9"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000001000080000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) signalfd4(r0, &(0x7f0000000080)={[0x400]}, 0x8, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='kfree\x00', r3, 0x0, 0x2}, 0x18) r4 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000000)={'syztnl1\x00', &(0x7f0000000200)={'tunl0\x00', 0x0, 0x8000, 0x700, 0x400000a, 0x9, {{0x5, 0x4, 0x3, 0xc, 0x14, 0x67, 0x0, 0xf7, 0x4, 0x0, @broadcast, @multicast2}}}}) r7 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r8 = dup(r7) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r8, 0x84, 0x79, 0x0, 0x0) write$tun(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB="70000000ffff00004000002f90780000655800189078040000000000000086dd"], 0xfdef) write$selinux_attr(r4, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000005c0)='kmem_cache_free\x00', r1}, 0x10) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r9, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000040), &(0x7f0000000c00)={0x0, 0xfb, 0x1015, 0x4, 0x83, "50884b1c2c8765be909ef33a4843416c", "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"}, 0x1015, 0x3) r11 = syz_io_uring_setup(0x3bd4, &(0x7f0000000180)={0x0, 0xcc19, 0x130c8, 0x1, 0x30e}, &(0x7f0000000100), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_RESTRICTIONS(r11, 0xb, &(0x7f0000000b00)=[@ioring_restriction_sqe_op], 0x1) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r11, 0xc, 0x0, 0x0) io_uring_enter(r11, 0x2e6f, 0x8555, 0x2, 0x0, 0x0) sendto$packet(r9, &(0x7f0000000180)="10030600e0ff020004004788aa96a13bb100001100007fca1a00", 0x10608, 0x0, &(0x7f0000000140)={0x11, 0x0, r10}, 0x14) 879.329966ms ago: executing program 5 (id=2766): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x1050c1, 0x170) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000580)='sched_switch\x00', r0}, 0x18) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r1, 0x0, 0x7fffffff}, 0x18) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000640)=0x1802, 0x4) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0xfd, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x4008084) 716.820007ms ago: executing program 4 (id=2767): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000404000000002e"], 0x0, 0x37}, 0x20) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="25a55cf04e000000000008"], 0x14}}, 0x4800) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1200000006000000040000000200000000000000", @ANYRES32, @ANYBLOB="00000000000007faff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r2}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) syz_mount_image$ext4(&(0x7f0000000ac0)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x3810744, &(0x7f0000000700)={[{@noauto_da_alloc}, {@user_xattr}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x10000}}, {@jqfmt_vfsv0}, {@delalloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x400000}}, {@noauto_da_alloc}, {@jqfmt_vfsv0}]}, 0x1, 0x451, &(0x7f0000000d00)="$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") openat(0xffffffffffffff9c, &(0x7f0000000200)='.\x00', 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000002c0)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6, 0x0, 0xfffffffffffffffc}, 0x18) socket$igmp6(0xa, 0x3, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000404000000002e"], 0x0, 0x37}, 0x20) socket$can_raw(0x1d, 0x3, 0x1) socket$pppl2tp(0x18, 0x1, 0x1) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00'}, 0x94) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x19, 0x4, 0x8, 0x27c8}, 0x50) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r11}, &(0x7f0000000240), &(0x7f00000006c0)=r7}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000340)={r12, r9, 0x25, 0x2, @val=@tcx={@void, @value=r12}}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f00000002c0)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x9, 0x6, "9e00", 0x14, 0x6, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, @local, {[], {{0x4e22, 0x4e24, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x2, 0xfffd, 0x0, 0x3}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 267.280095ms ago: executing program 4 (id=2768): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRESOCT, @ANYRESOCT=0x0], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff27}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r2 = epoll_create1(0x0) epoll_pwait2(r2, &(0x7f0000000000)=[{}], 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0x20002017}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000050b6850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001cc0)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x30bd27, 0x4000005, {0x0, 0x0, 0x42c, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x0, 0x101, 0x3, 0xc, 0x13}, {0x7, 0x2, 0x8001, 0x200, 0x2, 0x7}, 0xffffff80, 0x947, 0xe03}}, @TCA_TBF_RTAB={0x404, 0x2, [0x6, 0x6, 0x6b16, 0x7, 0xfffffffd, 0x8, 0x8, 0x3, 0x7, 0xb, 0x5, 0x0, 0x80, 0x9, 0x30, 0x8, 0x81, 0x9, 0x2, 0x8, 0x40, 0x8, 0x80000001, 0x80, 0x10000400, 0x7a2, 0x5, 0x400, 0x3, 0xfffffffa, 0x6, 0x6, 0xaf8, 0x1, 0x3, 0x3ff, 0x9, 0x2, 0x3, 0x10001, 0x1, 0x5, 0x10001, 0x3, 0x59, 0x3, 0xd54e, 0x40, 0x6, 0xd, 0x0, 0x28, 0x9, 0xa4800000, 0x3, 0xa0, 0xad4, 0x7, 0x4, 0x1, 0x7, 0x4, 0x102, 0x5, 0x4, 0x402, 0x3, 0xf6a5, 0x7fffffff, 0x8, 0x2, 0xcff, 0xfffffacf, 0x0, 0x4, 0x10001, 0xa, 0x1, 0x2, 0x8002, 0x5, 0x5, 0x5, 0xfffffffb, 0x5, 0x0, 0x4, 0x4edcaeea, 0x2, 0xe, 0xe, 0xfff, 0x4, 0x496c01fc, 0x4, 0x7fffffff, 0x9, 0x8, 0x12, 0x9, 0x80000001, 0x325b, 0x7, 0x0, 0x80000006, 0x2, 0xffffffff, 0x5, 0x1, 0x18001, 0x5, 0x94, 0x2, 0x9, 0x2fcb, 0x3, 0x5, 0x7, 0x1, 0xffffffff, 0x4, 0x0, 0x4, 0x3, 0x4, 0x5, 0xa993, 0x200, 0x6847adf1, 0x6, 0x9, 0x81, 0x7, 0x5, 0x5, 0x7fffffff, 0x8, 0xc, 0xd, 0x2, 0x1, 0x7fffffff, 0x8, 0x0, 0x8, 0x8, 0x91e, 0x4, 0xe, 0x8001, 0x8, 0x40000, 0x0, 0x9, 0xd, 0x5, 0x8, 0xfe, 0x8, 0x0, 0x1, 0x2, 0x9, 0x6, 0x3ff, 0x5, 0x1, 0xf682, 0x40, 0x6, 0x8, 0x3, 0x1fffe, 0xfffdfffe, 0x5, 0x1, 0xfffffff8, 0xa608, 0x23972b48, 0x407, 0x2, 0x0, 0xd, 0x4, 0xa, 0x5, 0x6, 0x10, 0x5, 0x5, 0x10, 0x41, 0x9, 0x76, 0x3, 0xfffffffa, 0x7, 0x2, 0x20004, 0x40, 0x9, 0x6, 0x2ef, 0xfffffffb, 0xcf30, 0x8, 0x4, 0xffffff8a, 0x0, 0x4, 0x80000000, 0x4, 0x2, 0x0, 0x2, 0x6, 0xfff, 0x4, 0x1, 0x40, 0x5, 0x9, 0x5, 0x8, 0x80000000, 0x0, 0x3, 0xeff, 0x6, 0x8001, 0x8, 0xc, 0x3, 0x1, 0x0, 0x5, 0x8, 0x6c67, 0x800, 0xffffff59, 0x9, 0x0, 0x303, 0x7, 0x1, 0x2, 0x6, 0x6561, 0x7, 0x4, 0xc, 0x42, 0x3c04, 0x5f, 0x5fa, 0x1]}]}}]}, 0x45c}}, 0x8000) bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setxattr$incfs_id(&(0x7f0000000180)='./cgroup.cpu/cgroup.procs\x00', &(0x7f00000001c0), 0x0, 0x0, 0x2) unshare(0x22020400) r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x240, 0x0) ioctl$LOOP_CTL_REMOVE(r8, 0x4c81, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_clone3(&(0x7f00000001c0)={0x100000000, 0x0, 0x0, 0x0, {0x20}, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x58) 266.004065ms ago: executing program 5 (id=2769): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r0}, 0x18) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x3000010, &(0x7f0000000340)={[{@errors_remount}, {@nodioread_nolock}]}, 0x1, 0x512, &(0x7f0000000380)="$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") 119.657864ms ago: executing program 3 (id=2770): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="000800000000000003000000000000000000000000000000fd"], 0xfc}}, 0x0) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="5c0000001200000026bd7000fcdbdf2508060a014e244e0bf8ffffff", @ANYRES32=0x0, @ANYBLOB], 0x5c}, 0x1, 0x0, 0x0, 0x24000004}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000001280)=ANY=[@ANYBLOB="5c0000005b7fa1b44acb2c2f8df0a5b8cb4d8d4736e0b8148e6be69a79415bd7beb649aa85ddf0578e781920a689f659cf9a28808638dac327c65ad498889e3c63a2040e8067e5e14fa0ca100dfe74288b81c7d870972f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x2044000) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1e000000000000000100"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000590000"], 0x0, 0x8, 0x0, 0x0, 0x41100}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x18) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) preadv(r4, &(0x7f0000000140)=[{&(0x7f0000000280)=""/4096, 0x1000}], 0x1, 0x40, 0x101) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000001f80)=ANY=[@ANYRES64=r2, @ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000480)='asymmetric\x00', &(0x7f00000004c0)={'syz', 0x0}, &(0x7f0000000500)='abcdefghijklmnop', 0x0) socket$inet6(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = getpgrp(0x0) tkill(r5, 0x6) r6 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000300)={0x0, 0x77ff, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a30000000000800410073697700140033006c6f"], 0xffaf}, 0x1, 0x0, 0x0, 0x40814}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) poll(&(0x7f00000003c0)=[{r7}], 0x1, 0xfffffff9) 118.885144ms ago: executing program 1 (id=2771): r0 = socket$inet6(0xa, 0x5, 0x0) listen(r0, 0xa) syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x400000, 0x10100, 0x0, 0x1}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffff86}) bpf$MAP_CREATE(0x1101000000000000, &(0x7f0000000540)=@base={0x5, 0x80, 0x1a00, 0xf7, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe}, 0x50) r3 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x100000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x9, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000880), 0x10}, 0x94) syz_read_part_table(0x5c2, &(0x7f0000000e00)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c3002, 0xf0) eventfd2(0x7, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) close_range(r4, 0xffffffffffffffff, 0x0) 89.127688ms ago: executing program 4 (id=2772): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r0 = socket$rds(0x15, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x2718, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffd98, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$inet6(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r2}, 0x10) sendto$inet6(r1, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731a", 0x8c, 0x0, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xd3, 0x1, 0x0, 0x0, 0x0, 0xf, 0x1211, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={0x0}, 0x4, 0x100004, 0x0, 0x2, 0x75a3f7, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000000, 0x11, r3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="180000000700008000000000feffffff95"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r5}, 0x10) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000840)=ANY=[@ANYRESHEX, @ANYRESDEC=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b70200"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x2003ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) pselect6(0x40, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0xffff, 0xbd, 0x0, 0xfffffffffffffffc}, 0x0, &(0x7f0000000240)={0x3ff, 0x3, 0x0, 0x9, 0x8, 0x3af81fdd, 0x7}, 0x0, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x8088e3ad132bc192, 0x4002011, r3, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x80078b, &(0x7f0000000680)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x473, &(0x7f0000000bc0)="$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") syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') pselect6(0x40, &(0x7f0000000280)={0x0, 0x2, 0x8, 0x8000000000000000, 0x3, 0x80, 0x8000000000000, 0xfffffffffffffffe}, &(0x7f0000000300)={0x3, 0x2, 0x0, 0x3, 0x4, 0x69, 0x66, 0xe}, &(0x7f00000003c0)={0x3ff, 0x6, 0x3, 0x3, 0xab, 0x214, 0x7, 0xfffffffffffffffc}, &(0x7f0000000400)={0x77359400}, &(0x7f0000000600)={&(0x7f0000000500)={[0x2]}, 0x8}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) 68.250391ms ago: executing program 0 (id=2773): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0xe7fd}, 0x100002, 0x3, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, 0x0, &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB='\v\x00\x00\x00\b\x00\x00\x00\f'], 0x48) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001200)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x4}}], 0x18}}, {{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f00000010c0)="05", 0x1}, {&(0x7f0000001100)="91905a0e013c23016b518727663f397044342b8dedc08f9d3395b8ef96eb064d7cdf1af248effbaa9b39e91b67ffc43461068f29462f57652482d85c0dead8c398f371d78738f0c2319ccc054b86f19f4171182b122ebff7213f3d2653b652fc72f1c3fe6f93436ac8406f741502943c76188da284cf37e32924c04fa1f062dbac5cd008edf96a1cddd0", 0x8a}], 0x2, &(0x7f0000001380)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x8}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}, @ip_retopts={{0x34, 0x0, 0x7, {[@end, @generic={0x89, 0xb, "bcc33225cebf94ea54"}, @timestamp_addr={0x44, 0x14, 0x1e, 0x1, 0x5, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}, {@private=0xa010102, 0x3}]}, @end, @noop]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x4}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}, @ip_ttl={{0x14, 0x0, 0x2, 0xfffffffa}}, @ip_retopts={{0x80, 0x0, 0x7, {[@cipso={0x86, 0x6, 0xffffffffffffffff}, @rr={0x7, 0x3, 0x19}, @lsrr={0x83, 0x7, 0x44, [@rand_addr=0x64010101]}, @ssrr={0x89, 0x7, 0x30, [@private=0xa010102]}, @lsrr={0x83, 0x7, 0x48, [@multicast1]}, @cipso={0x86, 0x35, 0x3, [{0x1, 0x6, '|:\a9'}, {0x7, 0xe, "8333a70a0e93ac621fd7f587"}, {0x1, 0xa, "63a20de1a69eb4dd"}, {0x7, 0x11, "99481a2754b946f04f781ea455b386"}]}, @timestamp_prespec={0x44, 0x1c, 0x52, 0x3, 0x0, [{@empty, 0xa5}, {@broadcast, 0xe}, {@local, 0x80000}]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x6}}], 0x148}}], 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r3, 0x89a2, &(0x7f0000000200)='bridge0\x00') 1.748919ms ago: executing program 0 (id=2774): r0 = socket$inet6(0xa, 0x5, 0x0) listen(r0, 0xa) syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x400000, 0x10100, 0x0, 0x1}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffff86}) bpf$MAP_CREATE(0x1101000000000000, &(0x7f0000000540)=@base={0x5, 0x80, 0x1a00, 0xf7, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe}, 0x50) r3 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x100000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x9, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="b702000008000000bfa300000000000007030000ffffffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000001404000001007d60b7030000000000006a0a00fe40000900850000001f000000b70000000000000095000000000000006623848adf1dc9a764ab51a064caff0c9b27a26293fddf0180000071ff31f1622271d5518193e09483c5a020c334f8c76334d8ce8303b81ddaa52e8756ad60a07d6f27c125e16d024098f755d8583da60f27c162dbba0700002ac9170f50f2568836077b7f711a18ebf608d87b885297b6b6981978d51514b00dcc4a2748b376358c33c9753beab62bdf27dc04e4cb4bc598affd989b1ca58949a54d5827df14feecea46408a05d572077f1252fbb72c3d099c501bc4ded6fca17a3447222c95edb47b770009524edd5fa5c53e9c37251709f1ff7f0000f07bf7f53ce129a9ecd3b4dd15100f2b450f98526a0d8cac7c97fc2f64015306a1bd88345710fb6379b4c53cf55eefb4c0974486a8d25a363adbd83b49e13fbd1757b27020bd9b8cff3f48c9411670c34f23ab8caf7851b290feb3045a1b622f20c4383a0280f040de7667f8b1d0842835e81c35af41e5b5b924275cb1749289b44e9728e7a73f148ac8206afe120c1437490d9900000011000003971b32fdffffffffffffffaf580278e1342aabd1b623f6c4f128858e4eb6b42f2173184c2b99b645f6ec0e14e5d7c95a0008000000f30f6c0000000000ff0000b8f5001a1d2a34dc0973ec302bc23211d3e3b6e6dad65a51e5497a3419cecec38126247b27113ad4c7915c8f82c333a7b350802f0311807010d1ed50c18411aa6900daccc02f4ba4b078f07e41f781eee222c7d071d5a94d82ca9a0846c1af59cee16639b4970f8f0a82c6a712fd5722d677d406160ffaffffffb4e0bde6749aa52c408b74251914c5d3255fd88a42e7ebb69ebcd8eee623e51dbb1f1b548c91a6825c0686fdc16be1cbb72c217fda18bd746253ca66093daf35923300b600000000ac376e0a4649a8a84e1d293a6b109c5e59b366bca5cc3d936c53d4a48c05099e6fc37e5aa23bff8cce0600000000000300a568a8532623d12b40b50ac26f2e8255470a04bfbe7acb581b90991d965a01d1f84cb6b973558e1e3f8118c77ccf0b3c6eb6443870004da10c75723b65f83769ad1f0e4ef6b9ef1cec23264fd8fdac6264af1cb467020bdc12b797b6c156c439105829d2ae1c45f7cfa40df68f536a03353a55a8a8e176e5d48887d31c8e0f77f2c1e68ec7c01bd5a2028a8fc107007f5f4c67600a6ade3deb1f200abe1f753754678dae8b4e3ba3d086d4b95dfc5817e3dafae2d38b522f942cc750399d9029f071fdb1e05882f8a4b8fbd219ccac3a895828b4f22b6527ce31ceb02b7b2b4492510134552f0b076b168394f8417f25cc82ae04007193cbe69de8bf35e4bebd15412426b2020ab1f05fc44ae9ae094c1b81d3ef947692b44d2afb09c7498dedf0f87c38bbcab7357836f03e8a7c392e535694a3ead2de11e6b1781e2a017ac341fda2e563ee95085742f5fee9f95f4741b226e428d20b00bc140000e4b2f5efd0a0b1ceba000830ba8634b5aa26bdbe91614e92fae3c7349531df9bf4c01ebf5d8eb7d53e5f30647661623fbdb3f6c3652c423ce6ecc1be5d4e8133fc32f68ea86a2df1e7df98a0ae216c405d0ae9eed114ff2d6fe27dfdff1cf9194849c4cc0da9533e5983863e526a7dc0d8728f3b573ca4427bdb44df9341e9b8420e896598a156c935c800436a312e7ae3c011e46851ac599f0427729ab9c55ae0ab4c0000000000000000000000000000c87bcc2ac5aed9467b51d92e0993af4beaf1f3d47dcdfab9165f98155d93e383d6b85158b54675c1585037508c1e9461a1c3d1a6e2402045cae150a7016f716eebbdf6afc4414d900be0bdf19f4a273f44f4357380b4387f1c8b104f0e406b2f04e5ed88631be6411f9927fe9f83412b7c5a676ceec8b454ebf6481c98e86b6933a02daea0b4ec0be5b3d916bd70208b4588626c27c318475802e2c62681bd1a331422a6e47bbd40857d52c4894944fae5c5000000000000000000000000e0c47613e950b6aefeae054fc723f62ac7d13941de11b018f1f48ac50335df91c771729f81929128135b2803562c1171ee00a3f4a31281aa363e087d53d86dd85e3ff979a7e72d16fdd7e1a0f07a1c8e6085d280d760f74975ceb3a5be6cfb4da8e0aeb769b8b75f4aad803ed77d34872eed2711aa40a3b38099dc2752e8ec9b520faf39e416752aa0830206736570f5d41a4df848c9052551cf8dcb1be000000000eb2577188e8e96bd825d462350905d3eb916b397d2a46a64081e85661d7a5a2716cc87cb1976d15d9b6418e94f165911803e43830432226c660f4da67bb7c8ceb3755c07197d8b80b8d16b12c2ec63bebe107aa2350a7ae564bf69a6c52a2da1496016dd66a1"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000880), 0x10}, 0x94) openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x8200, 0x0) syz_read_part_table(0x5c2, &(0x7f0000000e00)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c3002, 0xf0) eventfd2(0x7, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) close_range(r4, 0xffffffffffffffff, 0x0) 0s ago: executing program 5 (id=2775): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x4004001) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'hsr0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=ANY=[@ANYBLOB="64000000100001004b2baa2000"/36, @ANYRES32=0x0, @ANYBLOB="ffc3000000000037003c0012800c0001006d9ef4386163766c616e002c0002800a000900ffffbfffffff00000a000400aa6f39f7446951bb46fd43f659aaaaaaaabb000006000200010000dbdadf0498c81b3e8daf85bafaf45a8bfbbd137d5e3471457d42a5", @ANYRES64=r0, @ANYBLOB="3d7aa9d0aac70f2b31f7485244591306d4a9e94982d12e8b1ca406c52cf6f1cad317296b495daee6ab3e08ac56de12258a5e03439ca9c96455277fcb218d7694d390257acc0a56094491053d55f2c3901a937e4907995eabdc1b713b130508af9aadf084add1c21f96dbe46b4bb992a352c1ef097aae2aeefb878f38a7560232c186ef16092457d8a215037fa69f0a0196097d1799b14803c6b850827394047d16a7f79494952abc63070f8863cedf371e9284c72faffcf53ead59eed32cd6b2cc7d4bc7475e84ee693b2bfae62868998960e8d8dd09f190fb9ac7551d602ee2", @ANYRESOCT=0x0, @ANYRESDEC, @ANYRES64=r1, @ANYBLOB="aab574f3932c2b8f0724420f17e3c0e4fd2d2a24c031dd86c95b6e0519e514e23524ab2362450d050852ec585c4c08e49a79ec22e330cc55d7abcfc1dbe758bef1ed3287a9b4a61cbe762afb429cbb9b5817c65d4e10f4f704223d5141da65c65fa04e6662dffe147e99cf81550dfe6262e62cb1f8d3dab9bedea0ea7f8cdc072a52870dac", @ANYRES32=r1, @ANYRES8=r1, @ANYRESHEX=r0], 0x64}}, 0x8094) r2 = openat$full(0xffffffffffffff9c, &(0x7f00000007c0), 0x402, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f00000006c0)={{{@in=@loopback, @in=@multicast2}}, {{@in=@broadcast}, 0x0, @in6=@remote}}, &(0x7f0000000840)=0xe8) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000480)=ANY=[], &(0x7f0000001480)='GPL\x00', 0x15, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xc, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_io_uring_setup(0x5c2, &(0x7f0000000280)={0x0, 0xb84, 0x0, 0x8003, 0x25f}, &(0x7f0000000240)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000004c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x68, 0x3, r4, 0x0, 0x0, 0x0, 0x1, 0x1, {0x2}}) io_uring_enter(r4, 0x6e2, 0x620, 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kfree\x00', r3, 0x0, 0x4804}, 0x18) unshare(0x400) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$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") fallocate(0xffffffffffffffff, 0x20, 0x0, 0x8000) kernel console output (not intermixed with test programs): [ 210.077646][ T3553] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 210.360895][T10063] netlink: 'syz.0.2131': attribute type 1 has an invalid length. [ 210.644574][T10090] loop3: detected capacity change from 0 to 512 [ 210.652127][T10090] EXT4-fs (loop3): Invalid log cluster size: 184549377 [ 210.809371][T10100] loop3: detected capacity change from 0 to 8192 [ 210.818721][T10097] lo speed is unknown, defaulting to 1000 [ 210.826059][T10097] lo speed is unknown, defaulting to 1000 [ 210.829382][T10100] vfat: Unknown parameter '3òûé+NíåPhfÀeË:``FÚìõ&XÀ•ÔÕn_Àµt÷ø–àšh³EïSŠí~A¨Ñûýrþ¹ù%ëÿ0¬N­ÿû_À0dÚ®ÿCÁú? ¯F#×ížÿÑí…' [ 211.007477][T10099] netlink: 'syz.1.2143': attribute type 1 has an invalid length. [ 211.156349][T10106] usb usb7: usbfs: process 10106 (syz.1.2144) did not claim interface 0 before use [ 211.353081][T10125] FAULT_INJECTION: forcing a failure. [ 211.353081][T10125] name failslab, interval 1, probability 0, space 0, times 0 [ 211.366023][T10125] CPU: 1 UID: 0 PID: 10125 Comm: syz.1.2151 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 211.366155][T10125] Tainted: [W]=WARN [ 211.366165][T10125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 211.366182][T10125] Call Trace: [ 211.366191][T10125] [ 211.366201][T10125] __dump_stack+0x1d/0x30 [ 211.366236][T10125] dump_stack_lvl+0x95/0xd0 [ 211.366264][T10125] dump_stack+0x15/0x1b [ 211.366293][T10125] should_fail_ex+0x265/0x280 [ 211.366327][T10125] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 211.366367][T10125] should_failslab+0x8c/0xb0 [ 211.366437][T10125] kmem_cache_alloc_lru_noprof+0x6d/0x4c0 [ 211.366467][T10125] ? shmem_alloc_inode+0x34/0x50 [ 211.366552][T10125] ? kstrtouint_from_user+0x9f/0xf0 [ 211.366583][T10125] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 211.366621][T10125] shmem_alloc_inode+0x34/0x50 [ 211.366702][T10125] alloc_inode+0x40/0x170 [ 211.366730][T10125] new_inode+0x1d/0xe0 [ 211.366760][T10125] shmem_get_inode+0x246/0x750 [ 211.366800][T10125] __shmem_file_setup+0x113/0x210 [ 211.366910][T10125] shmem_file_setup+0x3b/0x50 [ 211.366935][T10125] __se_sys_memfd_create+0x2f7/0x6b0 [ 211.366971][T10125] __x64_sys_memfd_create+0x31/0x40 [ 211.367014][T10125] x64_sys_call+0x28cb/0x3000 [ 211.367070][T10125] do_syscall_64+0xca/0x2b0 [ 211.367142][T10125] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.367169][T10125] RIP: 0033:0x7fd6aa5af749 [ 211.367189][T10125] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 211.367268][T10125] RSP: 002b:00007fd6a9016e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 211.367326][T10125] RAX: ffffffffffffffda RBX: 00000000000004f2 RCX: 00007fd6aa5af749 [ 211.367342][T10125] RDX: 00007fd6a9016ef0 RSI: 0000000000000000 RDI: 00007fd6aa634960 [ 211.367375][T10125] RBP: 0000200000000600 R08: 00007fd6a9016bb7 R09: 00007fd6a9016e40 [ 211.367388][T10125] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000000 [ 211.367403][T10125] R13: 00007fd6a9016ef0 R14: 00007fd6a9016eb0 R15: 0000200000000380 [ 211.367435][T10125] [ 211.869005][T10140] usb usb7: usbfs: process 10140 (syz.3.2157) did not claim interface 0 before use [ 212.007913][T10144] loop3: detected capacity change from 0 to 1024 [ 212.009828][T10134] netlink: 'syz.1.2155': attribute type 1 has an invalid length. [ 212.043082][T10144] EXT4-fs: Ignoring removed orlov option [ 212.263854][T10171] usb usb7: usbfs: process 10171 (syz.5.2168) did not claim interface 0 before use [ 212.282301][T10169] loop4: detected capacity change from 0 to 764 [ 212.292335][T10169] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 212.402737][T10181] IPv6: NLM_F_CREATE should be specified when creating new route [ 212.427026][T10183] syzkaller0: entered promiscuous mode [ 212.432628][T10183] syzkaller0: entered allmulticast mode [ 212.559139][T10200] loop5: detected capacity change from 0 to 1024 [ 212.566386][T10200] EXT4-fs: Ignoring removed orlov option [ 212.572177][T10200] EXT4-fs: Ignoring removed nomblk_io_submit option [ 212.674337][T10190] netlink: 'syz.1.2174': attribute type 1 has an invalid length. [ 212.788493][ T29] kauditd_printk_skb: 660 callbacks suppressed [ 212.788512][ T29] audit: type=1326 audit(1768393603.374:11188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10209 comm="syz.1.2179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd6aa5af749 code=0x7ffc0000 [ 212.817892][T10210] netlink: 'syz.1.2179': attribute type 4 has an invalid length. [ 212.833832][ T29] audit: type=1326 audit(1768393603.374:11189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10209 comm="syz.1.2179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6aa5af749 code=0x7ffc0000 [ 212.857907][ T29] audit: type=1326 audit(1768393603.374:11190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10209 comm="syz.1.2179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd6aa5af749 code=0x7ffc0000 [ 212.881865][ T29] audit: type=1326 audit(1768393603.374:11191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10209 comm="syz.1.2179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6aa5af749 code=0x7ffc0000 [ 212.906006][ T29] audit: type=1326 audit(1768393603.374:11192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10209 comm="syz.1.2179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd6aa5af749 code=0x7ffc0000 [ 212.907808][T10210] syz.1.2179 (10210) used greatest stack depth: 10120 bytes left [ 212.930082][ T29] audit: type=1326 audit(1768393603.374:11193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10209 comm="syz.1.2179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6aa5af749 code=0x7ffc0000 [ 212.961483][ T29] audit: type=1326 audit(1768393603.374:11194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10209 comm="syz.1.2179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd6aa5af749 code=0x7ffc0000 [ 212.985220][ T29] audit: type=1326 audit(1768393603.374:11195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10209 comm="syz.1.2179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6aa5af749 code=0x7ffc0000 [ 213.009938][ T29] audit: type=1326 audit(1768393603.374:11196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10209 comm="syz.1.2179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fd6aa5af749 code=0x7ffc0000 [ 213.033813][ T29] audit: type=1326 audit(1768393603.374:11197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10209 comm="syz.1.2179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6aa5af749 code=0x7ffc0000 [ 213.060743][T10212] usb usb7: usbfs: process 10212 (syz.1.2180) did not claim interface 0 before use [ 213.100832][T10214] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2181'. [ 213.435883][T10234] syzkaller0: entered promiscuous mode [ 213.441545][T10234] syzkaller0: entered allmulticast mode [ 213.509783][T10240] vhci_hcd vhci_hcd.0: invalid port number 23 [ 213.599719][T10242] loop4: detected capacity change from 0 to 1024 [ 213.809177][T10253] lo speed is unknown, defaulting to 1000 [ 213.815846][T10253] lo speed is unknown, defaulting to 1000 [ 214.017313][T10248] loop1: detected capacity change from 0 to 128 [ 214.034803][T10248] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 214.192311][T10260] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2193'. [ 214.382800][T10264] netlink: 'syz.5.2195': attribute type 13 has an invalid length. [ 214.394451][T10264] gretap0: refused to change device tx_queue_len [ 214.402423][T10264] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 214.522327][T10273] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2198'. [ 214.574409][T10277] siw: device registration error -23 [ 214.800458][T10280] syzkaller0: entered promiscuous mode [ 214.806107][T10280] syzkaller0: entered allmulticast mode [ 215.035624][T10293] loop1: detected capacity change from 0 to 2048 [ 215.061812][T10299] serio: Serial port ttyS3 [ 215.078597][T10293] loop1: p1 p3 p4 [ 215.084376][T10293] loop1: p4 size 589824 extends beyond EOD, truncated [ 215.203820][T10308] vhci_hcd vhci_hcd.0: invalid port number 23 [ 215.305517][T10318] loop4: detected capacity change from 0 to 128 [ 215.446992][T10327] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2219'. [ 215.478250][T10327] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2219'. [ 215.507047][T10324] loop1: detected capacity change from 0 to 8192 [ 215.878290][T10335] loop5: detected capacity change from 0 to 1024 [ 215.885320][T10335] EXT4-fs: Ignoring removed orlov option [ 215.897548][T10333] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2221'. [ 215.973613][T10324] netlink: 'syz.1.2218': attribute type 10 has an invalid length. [ 215.982303][T10324] bond0: (slave dummy0): Releasing backup interface [ 216.000426][T10324] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 216.017818][T10324] team0: Failed to send options change via netlink (err -105) [ 216.025552][T10324] team0: Port device dummy0 added [ 216.038030][T10345] netlink: 'syz.1.2218': attribute type 10 has an invalid length. [ 216.050836][T10346] loop3: detected capacity change from 0 to 512 [ 216.070608][T10348] siw: device registration error -23 [ 216.089895][T10346] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 216.117841][T10346] EXT4-fs (loop3): orphan cleanup on readonly fs [ 216.128245][T10345] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 216.141228][T10345] team0: Failed to send options change via netlink (err -105) [ 216.164166][T10356] FAULT_INJECTION: forcing a failure. [ 216.164166][T10356] name failslab, interval 1, probability 0, space 0, times 0 [ 216.176971][T10356] CPU: 0 UID: 0 PID: 10356 Comm: syz.5.2227 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 216.177083][T10356] Tainted: [W]=WARN [ 216.177089][T10356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 216.177102][T10356] Call Trace: [ 216.177108][T10356] [ 216.177171][T10356] __dump_stack+0x1d/0x30 [ 216.177203][T10356] dump_stack_lvl+0x95/0xd0 [ 216.177250][T10356] dump_stack+0x15/0x1b [ 216.177270][T10356] should_fail_ex+0x265/0x280 [ 216.177295][T10356] should_failslab+0x8c/0xb0 [ 216.177339][T10356] __kmalloc_cache_node_noprof+0x6a/0x4d0 [ 216.177418][T10356] ? __get_vm_area_node+0x106/0x1d0 [ 216.177450][T10356] __get_vm_area_node+0x106/0x1d0 [ 216.177481][T10356] __vmalloc_node_range_noprof+0x28e/0x1310 [ 216.177511][T10356] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 216.177635][T10356] ? strncpy_from_kernel_nofault+0x78/0x130 [ 216.177741][T10356] ? spurious_kernel_fault+0xf7/0x490 [ 216.177776][T10356] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 216.177819][T10356] __vmalloc_noprof+0xa4/0xf0 [ 216.177849][T10356] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 216.177968][T10356] bpf_prog_alloc_no_stats+0x47/0x390 [ 216.178003][T10356] ? bpf_prog_alloc+0x2a/0x150 [ 216.178023][T10356] bpf_prog_alloc+0x3c/0x150 [ 216.178103][T10356] bpf_prog_load+0x506/0x1140 [ 216.178132][T10356] ? security_bpf+0x2b/0x90 [ 216.178221][T10356] __sys_bpf+0x469/0x7c0 [ 216.178251][T10356] __x64_sys_bpf+0x41/0x50 [ 216.178282][T10356] x64_sys_call+0x28e1/0x3000 [ 216.178330][T10356] do_syscall_64+0xca/0x2b0 [ 216.178373][T10356] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.178399][T10356] RIP: 0033:0x7f44b68ff749 [ 216.178419][T10356] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 216.178462][T10356] RSP: 002b:00007f44b535f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 216.178647][T10356] RAX: ffffffffffffffda RBX: 00007f44b6b55fa0 RCX: 00007f44b68ff749 [ 216.178663][T10356] RDX: 0000000000000094 RSI: 0000200000000140 RDI: 0000000000000005 [ 216.178680][T10356] RBP: 00007f44b535f090 R08: 0000000000000000 R09: 0000000000000000 [ 216.178694][T10356] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 216.178716][T10356] R13: 00007f44b6b56038 R14: 00007f44b6b55fa0 R15: 00007ffc2d459c08 [ 216.178738][T10356] [ 216.185047][T10345] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 216.190198][T10356] syz.5.2227: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null) [ 216.194880][T10345] team0: Port device dummy0 removed [ 216.204299][T10356] ,cpuset=/,mems_allowed=0 [ 216.223011][T10346] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #16: comm syz.3.2223: corrupted inode contents [ 216.223986][T10356] CPU: 0 UID: 0 PID: 10356 Comm: syz.5.2227 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 216.224113][T10356] Tainted: [W]=WARN [ 216.224136][T10356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 216.224241][T10356] Call Trace: [ 216.224263][T10356] [ 216.224293][T10356] __dump_stack+0x1d/0x30 [ 216.224404][T10356] dump_stack_lvl+0x95/0xd0 [ 216.224511][T10356] dump_stack+0x15/0x1b [ 216.224577][T10356] warn_alloc+0x12b/0x1a0 [ 216.224666][T10356] __vmalloc_node_range_noprof+0x2b3/0x1310 [ 216.224760][T10356] ? strncpy_from_kernel_nofault+0x78/0x130 [ 216.224951][T10356] ? spurious_kernel_fault+0xf7/0x490 [ 216.225084][T10356] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 216.225191][T10356] __vmalloc_noprof+0xa4/0xf0 [ 216.225295][T10356] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 216.225518][T10356] bpf_prog_alloc_no_stats+0x47/0x390 [ 216.225640][T10356] ? bpf_prog_alloc+0x2a/0x150 [ 216.225712][T10356] bpf_prog_alloc+0x3c/0x150 [ 216.225770][T10356] bpf_prog_load+0x506/0x1140 [ 216.225876][T10356] ? security_bpf+0x2b/0x90 [ 216.225957][T10356] __sys_bpf+0x469/0x7c0 [ 216.226044][T10356] __x64_sys_bpf+0x41/0x50 [ 216.226142][T10356] x64_sys_call+0x28e1/0x3000 [ 216.226238][T10356] do_syscall_64+0xca/0x2b0 [ 216.226346][T10356] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.226412][T10356] RIP: 0033:0x7f44b68ff749 [ 216.226464][T10356] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 216.226601][T10356] RSP: 002b:00007f44b535f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 216.226657][T10356] RAX: ffffffffffffffda RBX: 00007f44b6b55fa0 RCX: 00007f44b68ff749 [ 216.226709][T10356] RDX: 0000000000000094 RSI: 0000200000000140 RDI: 0000000000000005 [ 216.226753][T10356] RBP: 00007f44b535f090 R08: 0000000000000000 R09: 0000000000000000 [ 216.226788][T10356] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 216.226901][T10356] R13: 00007f44b6b56038 R14: 00007f44b6b55fa0 R15: 00007ffc2d459c08 [ 216.226960][T10356] [ 216.226983][T10356] Mem-Info: [ 216.238380][T10346] EXT4-fs (loop3): Remounting filesystem read-only [ 216.239408][T10356] active_anon:9233 inactive_anon:1 isolated_anon:0 [ 216.239408][T10356] active_file:9355 inactive_file:2706 isolated_file:0 [ 216.239408][T10356] unevictable:0 dirty:817 writeback:0 [ 216.239408][T10356] slab_reclaimable:3438 slab_unreclaimable:18504 [ 216.239408][T10356] mapped:30032 shmem:1335 pagetables:1435 [ 216.239408][T10356] sec_pagetables:0 bounce:0 [ 216.239408][T10356] kernel_misc_reclaimable:0 [ 216.239408][T10356] free:1886534 free_pcp:11571 free_cma:0 [ 216.261017][T10346] EXT4-fs (loop3): 1 truncate cleaned up [ 216.267016][T10356] Node 0 active_anon:36932kB inactive_anon:4kB active_file:37420kB inactive_file:10824kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:120128kB dirty:3268kB writeback:0kB shmem:5340kB kernel_stack:4064kB pagetables:5740kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 216.278700][T10345] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 216.282785][T10356] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 216.794105][T10356] lowmem_reserve[]: 0 2880 7859 7859 [ 216.799775][T10356] Node 0 DMA32 free:2945992kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2949520kB mlocked:0kB bounce:0kB free_pcp:3528kB local_pcp:3528kB free_cma:0kB [ 216.831249][T10356] lowmem_reserve[]: 0 0 4978 4978 [ 216.836511][T10356] Node 0 Normal free:4592800kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:36700kB inactive_anon:4kB active_file:37420kB inactive_file:10824kB unevictable:0kB writepending:3268kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:34972kB local_pcp:21676kB free_cma:0kB [ 216.870252][T10356] lowmem_reserve[]: 0 0 0 0 [ 216.874882][T10356] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 216.888227][T10356] Node 0 DMA32: 2*4kB (M) 2*8kB (M) 3*16kB (M) 4*32kB (M) 4*64kB (M) 2*128kB (M) 3*256kB (M) 3*512kB (M) 4*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2945992kB [ 216.904626][T10356] Node 0 Normal: 742*4kB (UM) 993*8kB (UME) 273*16kB (UM) 171*32kB (UME) 267*64kB (UME) 102*128kB (UM) 40*256kB (UM) 23*512kB (UME) 20*1024kB (UME) 19*2048kB (UM) 1089*4096kB (UM) = 4592848kB [ 216.924117][T10356] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 216.933547][T10356] 13329 total pagecache pages [ 216.938269][T10356] 4 pages in swap cache [ 216.942587][T10356] Free swap = 124980kB [ 216.946761][T10356] Total swap = 124996kB [ 216.950958][T10356] 2097051 pages RAM [ 216.954833][T10356] 0 pages HighMem/MovableOnly [ 216.959570][T10356] 81271 pages reserved [ 216.964085][ T52] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 216.974682][ T52] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 217.013007][ T52] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started [ 217.320360][T10368] lo speed is unknown, defaulting to 1000 [ 217.327232][T10368] lo speed is unknown, defaulting to 1000 [ 217.504263][T10371] loop5: detected capacity change from 0 to 512 [ 217.604971][T10371] EXT4-fs (loop5): orphan cleanup on readonly fs [ 217.619979][T10371] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.2230: bg 0: block 127: padding at end of block bitmap is not set [ 217.634949][T10371] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #15: comm syz.5.2230: corrupted inode contents [ 217.689273][T10371] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem [ 217.698808][T10371] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #15: comm syz.5.2230: corrupted inode contents [ 217.712832][T10371] EXT4-fs error (device loop5): ext4_evict_inode:301: inode #15: comm syz.5.2230: mark_inode_dirty error [ 217.729357][T10371] EXT4-fs (loop5): 1 orphan inode deleted [ 217.777228][T10363] netlink: 'syz.4.2231': attribute type 1 has an invalid length. [ 217.802392][ T29] kauditd_printk_skb: 581 callbacks suppressed [ 217.802412][ T29] audit: type=1326 audit(1768393608.384:11773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10362 comm="syz.4.2231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38a2c3f749 code=0x7ffc0000 [ 217.832785][ T29] audit: type=1326 audit(1768393608.384:11774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10362 comm="syz.4.2231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f38a2c3f749 code=0x7ffc0000 [ 217.856907][ T29] audit: type=1326 audit(1768393608.384:11775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10362 comm="syz.4.2231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38a2c3f749 code=0x7ffc0000 [ 217.880716][ T29] audit: type=1326 audit(1768393608.384:11776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10362 comm="syz.4.2231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=51 compat=0 ip=0x7f38a2c3f749 code=0x7ffc0000 [ 217.904884][ T29] audit: type=1326 audit(1768393608.384:11777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10362 comm="syz.4.2231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38a2c3f749 code=0x7ffc0000 [ 217.928748][ T29] audit: type=1326 audit(1768393608.394:11778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10362 comm="syz.4.2231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38a2c3f749 code=0x7ffc0000 [ 218.034896][ T29] audit: type=1326 audit(1768393608.614:11779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10377 comm="syz.1.2233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6aa5af749 code=0x7ffc0000 [ 218.058745][ T29] audit: type=1326 audit(1768393608.614:11780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10377 comm="syz.1.2233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6aa5af749 code=0x7ffc0000 [ 218.090601][ T29] audit: type=1326 audit(1768393608.664:11781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10377 comm="syz.1.2233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd6aa5adf90 code=0x7ffc0000 [ 218.114391][ T29] audit: type=1326 audit(1768393608.664:11782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10377 comm="syz.1.2233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fd6aa5b0f77 code=0x7ffc0000 [ 218.162535][T10378] netlink: 'syz.1.2233': attribute type 13 has an invalid length. [ 218.174243][T10380] loop3: detected capacity change from 0 to 1024 [ 218.194693][T10378] gretap0: refused to change device tx_queue_len [ 218.207679][T10385] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2235'. [ 218.208723][T10380] EXT4-fs: Ignoring removed orlov option [ 218.223781][T10378] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 218.306184][T10382] loop4: detected capacity change from 0 to 512 [ 218.319908][T10391] siw: device registration error -23 [ 218.364223][T10397] vhci_hcd vhci_hcd.0: invalid port number 23 [ 218.380729][T10382] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 218.423154][T10382] EXT4-fs (loop4): orphan cleanup on readonly fs [ 218.446833][T10382] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #16: comm syz.4.2235: corrupted inode contents [ 218.479359][T10382] EXT4-fs (loop4): Remounting filesystem read-only [ 218.493536][T10413] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2243'. [ 218.522288][T10382] EXT4-fs (loop4): 1 truncate cleaned up [ 218.552947][T10413] loop5: detected capacity change from 0 to 512 [ 218.568650][T10413] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 218.577049][T10413] EXT4-fs (loop5): orphan cleanup on readonly fs [ 218.586084][T10413] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #16: comm syz.5.2243: corrupted inode contents [ 218.619562][T10413] EXT4-fs (loop5): Remounting filesystem read-only [ 218.626430][T10413] EXT4-fs (loop5): 1 truncate cleaned up [ 218.636787][ T851] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 218.647558][ T851] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 218.672087][T10430] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2245'. [ 218.677747][ T851] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 218.691189][T10430] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2245'. [ 218.693792][ T851] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 218.702872][T10430] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2245'. [ 218.711323][ T851] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 218.711897][ T851] EXT4-fs (loop5): Quota write (off=8, len=24) cancelled because transaction is not started [ 218.722724][T10430] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2245'. [ 218.883466][T10432] lo speed is unknown, defaulting to 1000 [ 218.891132][T10432] lo speed is unknown, defaulting to 1000 [ 219.394751][T10437] netlink: 'syz.1.2248': attribute type 13 has an invalid length. [ 219.419859][T10437] gretap0: refused to change device tx_queue_len [ 219.437993][T10437] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 219.624477][T10460] loop4: detected capacity change from 0 to 512 [ 219.649723][T10460] EXT4-fs (loop4): orphan cleanup on readonly fs [ 219.679028][T10460] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.2247: bg 0: block 127: padding at end of block bitmap is not set [ 219.694135][T10460] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #15: comm syz.4.2247: corrupted inode contents [ 219.706515][T10460] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 219.715329][T10460] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #15: comm syz.4.2247: corrupted inode contents [ 219.748149][T10460] EXT4-fs error (device loop4): ext4_evict_inode:301: inode #15: comm syz.4.2247: mark_inode_dirty error [ 219.759821][T10460] EXT4-fs (loop4): 1 orphan inode deleted [ 219.776621][T10466] IPv6: NLM_F_CREATE should be specified when creating new route [ 219.785792][T10443] netlink: 'syz.3.2251': attribute type 1 has an invalid length. [ 219.937197][T10481] serio: Serial port ttyS3 [ 219.967150][T10482] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 219.976864][T10482] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2259'. [ 220.208610][T10493] lo speed is unknown, defaulting to 1000 [ 220.215070][T10493] lo speed is unknown, defaulting to 1000 [ 220.553402][ T3315] EXT4-fs unmount: 23 callbacks suppressed [ 220.553428][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.556231][T10500] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2267'. [ 220.625912][T10500] loop3: detected capacity change from 0 to 512 [ 220.640788][T10500] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 220.659423][T10500] EXT4-fs (loop3): orphan cleanup on readonly fs [ 220.676241][T10510] loop4: detected capacity change from 0 to 512 [ 220.695562][T10500] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #16: comm syz.3.2267: corrupted inode contents [ 220.713190][T10510] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 220.727317][T10500] EXT4-fs (loop3): Remounting filesystem read-only [ 220.735409][T10500] EXT4-fs (loop3): 1 truncate cleaned up [ 220.741320][ T5140] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 220.750899][T10510] EXT4-fs (loop4): orphan cleanup on readonly fs [ 220.752017][ T5140] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 220.779105][T10510] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #16: comm syz.4.2268: corrupted inode contents [ 220.792148][T10510] EXT4-fs (loop4): Remounting filesystem read-only [ 220.799749][T10510] EXT4-fs (loop4): 1 truncate cleaned up [ 220.839187][ T5140] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started [ 220.849639][ T5140] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 220.860323][ T5140] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 220.871336][ T5140] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 220.882092][T10510] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 220.890816][ T5140] Bluetooth: hci0: Frame reassembly failed (-84) [ 220.896491][T10500] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 220.941766][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.968741][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.092741][T10534] netlink: 'syz.5.2277': attribute type 10 has an invalid length. [ 221.101645][T10534] bond0: (slave dummy0): Releasing backup interface [ 221.108936][T10536] netlink: 'syz.5.2277': attribute type 10 has an invalid length. [ 221.120767][T10534] team0: Port device dummy0 added [ 221.139637][T10536] team0: Port device dummy0 removed [ 221.168016][T10536] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 221.192224][T10543] serio: Serial port ttyS3 [ 221.409265][T10548] lo speed is unknown, defaulting to 1000 [ 221.415711][T10548] lo speed is unknown, defaulting to 1000 [ 222.123978][T10553] lo speed is unknown, defaulting to 1000 [ 222.130741][T10553] lo speed is unknown, defaulting to 1000 [ 222.310688][T10560] siw: device registration error -23 [ 222.404326][T10564] x_tables: duplicate underflow at hook 3 [ 222.410834][T10564] sctp: [Deprecated]: syz.4.2284 (pid 10564) Use of struct sctp_assoc_value in delayed_ack socket option. [ 222.410834][T10564] Use struct sctp_sack_info instead [ 222.437841][T10565] siw: device registration error -23 [ 222.450520][T10564] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2284'. [ 222.554638][T10569] loop5: detected capacity change from 0 to 128 [ 222.576034][T10569] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 222.589405][T10569] ext4 filesystem being mounted at /308/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 222.624205][T10569] EXT4-fs error (device loop5): dx_make_map:1296: inode #2: block 20: comm syz.5.2286: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1 [ 222.643296][T10569] EXT4-fs error (device loop5) in do_split:2027: Corrupt filesystem [ 222.728179][T10570] netlink: 'syz.4.2285': attribute type 1 has an invalid length. [ 222.762758][ T5495] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 222.835839][T10580] loop4: detected capacity change from 0 to 512 [ 222.860728][T10580] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 222.869637][T10580] EXT4-fs (loop4): orphan cleanup on readonly fs [ 222.879817][T10580] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #16: comm syz.4.2289: corrupted inode contents [ 222.892864][T10580] EXT4-fs (loop4): Remounting filesystem read-only [ 222.900322][T10580] EXT4-fs (loop4): 1 truncate cleaned up [ 222.906852][ T12] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 222.917422][ T12] __quota_error: 453 callbacks suppressed [ 222.917435][ T12] Quota error (device loop4): write_blk: dquota write failed [ 222.930710][ T12] Quota error (device loop4): remove_free_dqentry: Can't write block (5) with free entries [ 222.940787][ T12] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 222.951450][ T12] Quota error (device loop4): write_blk: dquota write failed [ 222.959138][ T12] Quota error (device loop4): free_dqentry: Can't move quota data block (5) to free list [ 222.967743][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 222.969230][ T12] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 222.985487][ T12] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 222.996546][ T12] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 223.007383][T10580] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 223.032047][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.164199][T10588] loop1: detected capacity change from 0 to 2048 [ 223.208275][ T3307] loop1: p1 p3 p4 [ 223.213410][ T3307] loop1: p4 size 589824 extends beyond EOD, truncated [ 223.225201][T10588] loop1: p1 p3 p4 [ 223.231623][T10588] loop1: p4 size 589824 extends beyond EOD, truncated [ 223.277997][T10592] netlink: 'syz.3.2294': attribute type 3 has an invalid length. [ 223.285869][T10592] netlink: 'syz.3.2294': attribute type 1 has an invalid length. [ 223.293764][T10592] netlink: 181400 bytes leftover after parsing attributes in process `syz.3.2294'. [ 223.322034][T10592] loop3: detected capacity change from 0 to 512 [ 223.328968][T10592] EXT4-fs: Ignoring removed bh option [ 223.334678][T10592] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 223.345572][T10592] EXT4-fs (loop3): 1 truncate cleaned up [ 223.359064][T10592] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 223.402524][ T29] audit: type=1400 audit(1768393613.984:12212): avc: denied { ioctl } for pid=10591 comm="syz.3.2294" path="/481/file0/file1" dev="loop3" ino=15 ioctlcmd=0x5829 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 223.440062][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.463532][T10595] loop1: detected capacity change from 0 to 2048 [ 223.503150][ T29] audit: type=1326 audit(1768393614.084:12213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10597 comm="syz.3.2296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb5352f749 code=0x7ffc0000 [ 223.527726][ T29] audit: type=1326 audit(1768393614.084:12214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10597 comm="syz.3.2296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb5352f749 code=0x7ffc0000 [ 223.552422][ T29] audit: type=1326 audit(1768393614.084:12216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10597 comm="syz.3.2296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffb5352f749 code=0x7ffc0000 [ 223.587532][T10595] loop1: p1 p3 p4 [ 223.592659][T10595] loop1: p4 size 589824 extends beyond EOD, truncated [ 223.608787][T10600] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2297'. [ 223.850823][T10618] loop3: detected capacity change from 0 to 8192 [ 223.873280][T10620] netlink: 'syz.5.2305': attribute type 13 has an invalid length. [ 223.910133][T10620] gretap0: refused to change device tx_queue_len [ 223.923404][T10620] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 223.971113][T10627] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 223.973467][T10628] vhci_hcd vhci_hcd.0: invalid port number 23 [ 223.990555][T10627] netlink: 16 bytes leftover after parsing attributes in process `+}[@'. [ 224.047156][T10634] tipc: Enabled bearer , priority 0 [ 224.059491][T10634] syzkaller0: entered promiscuous mode [ 224.065036][T10634] syzkaller0: entered allmulticast mode [ 224.083097][T10634] tipc: Resetting bearer [ 224.089736][T10633] tipc: Resetting bearer [ 224.104406][T10633] tipc: Disabling bearer [ 224.436228][T10649] lo speed is unknown, defaulting to 1000 [ 224.443108][T10649] lo speed is unknown, defaulting to 1000 [ 224.746135][T10652] loop5: detected capacity change from 0 to 8192 [ 224.856304][T10655] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 224.865535][T10655] netlink: 16 bytes leftover after parsing attributes in process `+}[@'. [ 224.910857][T10665] vhci_hcd vhci_hcd.0: invalid port number 23 [ 225.063304][T10683] loop4: detected capacity change from 0 to 128 [ 225.077872][T10683] vfat: Unknown parameter './file0' [ 225.099066][T10683] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2329'. [ 225.210856][T10697] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2334'. [ 225.238317][T10696] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 225.258361][T10707] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2337'. [ 225.277462][T10697] loop1: detected capacity change from 0 to 512 [ 225.291152][T10696] netlink: 16 bytes leftover after parsing attributes in process `+}[@'. [ 225.315335][T10697] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 225.332377][T10697] EXT4-fs (loop1): orphan cleanup on readonly fs [ 225.359385][T10697] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #16: comm syz.1.2334: corrupted inode contents [ 225.374600][T10697] EXT4-fs (loop1): Remounting filesystem read-only [ 225.391879][T10697] EXT4-fs (loop1): 1 truncate cleaned up [ 225.436848][ T851] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 225.447730][ T851] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 225.458968][ T851] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started [ 225.469760][T10697] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 225.498569][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.657653][T10720] lo speed is unknown, defaulting to 1000 [ 225.664505][T10720] lo speed is unknown, defaulting to 1000 [ 226.012176][T10734] FAULT_INJECTION: forcing a failure. [ 226.012176][T10734] name failslab, interval 1, probability 0, space 0, times 0 [ 226.025228][T10734] CPU: 1 UID: 0 PID: 10734 Comm: syz.5.2345 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 226.025327][T10734] Tainted: [W]=WARN [ 226.025459][T10734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 226.025476][T10734] Call Trace: [ 226.025485][T10734] [ 226.025495][T10734] __dump_stack+0x1d/0x30 [ 226.025560][T10734] dump_stack_lvl+0x95/0xd0 [ 226.025582][T10734] dump_stack+0x15/0x1b [ 226.025601][T10734] should_fail_ex+0x265/0x280 [ 226.025673][T10734] should_failslab+0x8c/0xb0 [ 226.025775][T10734] __kmalloc_cache_node_noprof+0x6a/0x4d0 [ 226.025829][T10734] ? alloc_workqueue_noprof+0x4f7/0x1320 [ 226.025866][T10734] alloc_workqueue_noprof+0x4f7/0x1320 [ 226.025964][T10734] ? dev_set_name+0x83/0xb0 [ 226.025986][T10734] hci_register_dev+0x167/0x570 [ 226.026015][T10734] hci_uart_tty_ioctl+0x520/0x5c0 [ 226.026049][T10734] ? __pfx_hci_uart_tty_ioctl+0x10/0x10 [ 226.026108][T10734] tty_ioctl+0x83f/0xb80 [ 226.026141][T10734] ? __pfx_tty_ioctl+0x10/0x10 [ 226.026218][T10734] __se_sys_ioctl+0xce/0x140 [ 226.026262][T10734] __x64_sys_ioctl+0x43/0x50 [ 226.026301][T10734] x64_sys_call+0x14b0/0x3000 [ 226.026395][T10734] do_syscall_64+0xca/0x2b0 [ 226.026430][T10734] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.026451][T10734] RIP: 0033:0x7f44b68ff749 [ 226.026471][T10734] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 226.026495][T10734] RSP: 002b:00007f44b535f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 226.026599][T10734] RAX: ffffffffffffffda RBX: 00007f44b6b55fa0 RCX: 00007f44b68ff749 [ 226.026617][T10734] RDX: 0000000000000000 RSI: 00000000400455c8 RDI: 0000000000000007 [ 226.026634][T10734] RBP: 00007f44b535f090 R08: 0000000000000000 R09: 0000000000000000 [ 226.026650][T10734] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 226.026679][T10734] R13: 00007f44b6b56038 R14: 00007f44b6b55fa0 R15: 00007ffc2d459c08 [ 226.026702][T10734] [ 226.026725][T10734] Bluetooth: Can't register HCI device [ 226.305463][T10744] loop4: detected capacity change from 0 to 1024 [ 226.314576][T10744] EXT4-fs: Ignoring removed orlov option [ 226.355915][T10744] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 226.420813][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.456543][T10761] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 226.467545][T10761] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2352'. [ 226.636232][T10769] vhci_hcd vhci_hcd.0: invalid port number 23 [ 226.974798][T10773] lo speed is unknown, defaulting to 1000 [ 226.981969][T10773] lo speed is unknown, defaulting to 1000 [ 227.378165][T10783] EXT4-fs: Ignoring removed orlov option [ 227.391409][T10789] usb usb7: usbfs: process 10789 (syz.3.2366) did not claim interface 0 before use [ 227.409463][T10783] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 227.427934][T10786] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2365'. [ 227.492004][T10786] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 227.507092][T10786] EXT4-fs (loop5): orphan cleanup on readonly fs [ 227.517235][T10786] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #16: comm syz.5.2365: corrupted inode contents [ 227.530068][T10786] EXT4-fs (loop5): Remounting filesystem read-only [ 227.537149][T10786] EXT4-fs (loop5): 1 truncate cleaned up [ 227.543132][ T124] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 227.553786][ T124] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 227.577656][ T124] EXT4-fs (loop5): Quota write (off=8, len=24) cancelled because transaction is not started [ 227.598061][T10803] FAULT_INJECTION: forcing a failure. [ 227.598061][T10803] name failslab, interval 1, probability 0, space 0, times 0 [ 227.611009][T10803] CPU: 1 UID: 0 PID: 10803 Comm: syz.1.2369 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 227.611062][T10803] Tainted: [W]=WARN [ 227.611068][T10803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 227.611080][T10803] Call Trace: [ 227.611086][T10803] [ 227.611093][T10803] __dump_stack+0x1d/0x30 [ 227.611167][T10803] dump_stack_lvl+0x95/0xd0 [ 227.611190][T10803] dump_stack+0x15/0x1b [ 227.611209][T10803] should_fail_ex+0x265/0x280 [ 227.611232][T10803] should_failslab+0x8c/0xb0 [ 227.611316][T10803] kmem_cache_alloc_noprof+0x69/0x4b0 [ 227.611344][T10803] ? alloc_empty_file+0x76/0x200 [ 227.611398][T10803] alloc_empty_file+0x76/0x200 [ 227.611470][T10803] alloc_file_pseudo+0xc6/0x160 [ 227.611506][T10803] __shmem_file_setup+0x1de/0x210 [ 227.611534][T10803] shmem_file_setup+0x3b/0x50 [ 227.611556][T10803] __se_sys_memfd_create+0x2f7/0x6b0 [ 227.611631][T10803] __x64_sys_memfd_create+0x31/0x40 [ 227.611668][T10803] x64_sys_call+0x28cb/0x3000 [ 227.611691][T10803] do_syscall_64+0xca/0x2b0 [ 227.611735][T10803] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.611814][T10803] RIP: 0033:0x7fd6aa5af749 [ 227.611829][T10803] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 227.611847][T10803] RSP: 002b:00007fd6a9016e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 227.611866][T10803] RAX: ffffffffffffffda RBX: 0000000000000483 RCX: 00007fd6aa5af749 [ 227.611878][T10803] RDX: 00007fd6a9016ef0 RSI: 0000000000000000 RDI: 00007fd6aa634960 [ 227.611892][T10803] RBP: 0000200000001040 R08: 00007fd6a9016bb7 R09: 00007fd6a9016e40 [ 227.611904][T10803] R10: 000000000000000a R11: 0000000000000202 R12: 00002000000001c0 [ 227.611950][T10803] R13: 00007fd6a9016ef0 R14: 00007fd6a9016eb0 R15: 00002000000002c0 [ 227.611973][T10803] [ 227.614088][T10786] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 227.639285][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.804401][T10809] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2372'. [ 227.824181][T10802] set_capacity_and_notify: 2 callbacks suppressed [ 227.824201][T10802] loop3: detected capacity change from 0 to 2048 [ 227.877213][T10811] netlink: 'syz.4.2370': attribute type 1 has an invalid length. [ 227.885685][ T3569] loop3: p1 p3 p4 [ 227.894866][ T5495] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.904724][ T3569] loop3: p4 size 589824 extends beyond EOD, truncated [ 227.913613][T10811] 8021q: adding VLAN 0 to HW filter on device bond1 [ 227.921907][T10802] loop3: p1 p3 p4 [ 227.926908][T10802] loop3: p4 size 589824 extends beyond EOD, truncated [ 227.951459][ T29] kauditd_printk_skb: 344 callbacks suppressed [ 227.951476][ T29] audit: type=1400 audit(1768393618.534:12548): avc: denied { ioctl } for pid=10810 comm="syz.4.2370" path="socket:[30450]" dev="sockfs" ino=30450 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 228.005076][T10819] siw: device registration error -23 [ 228.023930][T10811] macvlan2: entered promiscuous mode [ 228.029468][T10811] macvlan2: entered allmulticast mode [ 228.058298][T10811] bond1: entered allmulticast mode [ 228.063658][T10811] bond1: entered promiscuous mode [ 228.071970][T10811] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 228.089355][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 228.093387][ T3569] udevd[3569]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 228.110204][ T3309] udevd[3309]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 228.123046][T10811] team0: Port device macvlan2 added [ 228.132196][T10826] usb usb7: usbfs: process 10826 (syz.1.2378) did not claim interface 0 before use [ 228.196705][T10832] serio: Serial port ttyS3 [ 228.271137][ T29] audit: type=1326 audit(1768393618.854:12549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10845 comm="syz.1.2386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6aa5af749 code=0x7ffc0000 [ 228.309097][T10848] loop3: detected capacity change from 0 to 512 [ 228.317332][T10848] EXT4-fs (loop3): orphan cleanup on readonly fs [ 228.340404][ T29] audit: type=1326 audit(1768393618.854:12550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10845 comm="syz.1.2386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6aa5af749 code=0x7ffc0000 [ 228.352716][T10848] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.2382: bg 0: block 127: padding at end of block bitmap is not set [ 228.364243][ T29] audit: type=1326 audit(1768393618.894:12551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10845 comm="syz.1.2386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd6aa5af749 code=0x7ffc0000 [ 228.402378][ T29] audit: type=1326 audit(1768393618.894:12552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10845 comm="syz.1.2386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6aa5af749 code=0x7ffc0000 [ 228.426121][ T29] audit: type=1326 audit(1768393618.894:12553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10845 comm="syz.1.2386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6aa5af749 code=0x7ffc0000 [ 228.450552][ T29] audit: type=1326 audit(1768393618.894:12554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10845 comm="syz.1.2386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd6aa5af749 code=0x7ffc0000 [ 228.474447][ T29] audit: type=1326 audit(1768393618.894:12555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10845 comm="syz.1.2386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6aa5af749 code=0x7ffc0000 [ 228.498177][ T29] audit: type=1326 audit(1768393618.894:12556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10845 comm="syz.1.2386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6aa5af749 code=0x7ffc0000 [ 228.521981][ T29] audit: type=1326 audit(1768393618.894:12557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10845 comm="syz.1.2386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd6aa5af749 code=0x7ffc0000 [ 228.550196][T10848] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #15: comm syz.3.2382: corrupted inode contents [ 228.569020][T10848] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 228.590093][T10848] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #15: comm syz.3.2382: corrupted inode contents [ 228.619957][T10848] EXT4-fs error (device loop3): ext4_evict_inode:301: inode #15: comm syz.3.2382: mark_inode_dirty error [ 228.639421][T10846] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2386'. [ 228.649445][T10848] EXT4-fs (loop3): 1 orphan inode deleted [ 228.655697][T10848] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 228.794900][T10856] loop1: detected capacity change from 0 to 8192 [ 228.813529][T10856] netlink: 'syz.1.2389': attribute type 10 has an invalid length. [ 228.824378][T10856] bond0: (slave dummy0): Releasing backup interface [ 228.856628][T10856] team0: Port device dummy0 added [ 228.863350][T10856] netlink: 'syz.1.2389': attribute type 10 has an invalid length. [ 228.874722][T10856] team0: Port device dummy0 removed [ 228.903214][T10856] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 228.924820][T10858] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 228.933637][T10858] netlink: 16 bytes leftover after parsing attributes in process `+}[@'. [ 229.013006][T10862] usb usb7: usbfs: process 10862 (syz.1.2391) did not claim interface 0 before use [ 229.037931][T10863] tipc: Enabled bearer , priority 0 [ 229.049597][T10863] syzkaller0: entered promiscuous mode [ 229.055178][T10863] syzkaller0: entered allmulticast mode [ 229.090739][T10863] tipc: Resetting bearer [ 229.100341][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.118238][T10861] tipc: Resetting bearer [ 229.127852][T10861] tipc: Disabling bearer [ 229.151355][T10868] loop1: detected capacity change from 0 to 1024 [ 229.161121][T10868] EXT4-fs: Ignoring removed orlov option [ 229.200290][T10868] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 229.289014][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.346080][T10886] loop5: detected capacity change from 0 to 1024 [ 229.367204][T10891] usb usb7: usbfs: process 10891 (syz.0.2403) did not claim interface 0 before use [ 229.387662][T10886] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 229.451435][T10889] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2399'. [ 229.464952][ T5495] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.622744][T10898] loop5: detected capacity change from 0 to 2048 [ 229.658273][T10898] loop5: p1 p3 p4 [ 229.664698][T10898] loop5: p4 size 589824 extends beyond EOD, truncated [ 229.743950][T10920] serio: Serial port ttyS3 [ 229.784889][T10922] loop1: detected capacity change from 0 to 1024 [ 229.804263][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 229.812026][T10922] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 229.817159][ T3569] udevd[3569]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 229.911100][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.201256][T10943] netlink: 'syz.0.2422': attribute type 10 has an invalid length. [ 230.241738][T10943] bond0: (slave dummy0): Releasing backup interface [ 230.267345][T10951] __nla_validate_parse: 1 callbacks suppressed [ 230.267365][T10951] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2426'. [ 230.290308][T10958] netlink: 'syz.0.2422': attribute type 10 has an invalid length. [ 230.315477][T10943] team0: Port device dummy0 added [ 230.376892][T10958] team0: Port device dummy0 removed [ 230.400824][T10963] loop4: detected capacity change from 0 to 512 [ 230.412630][T10958] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 230.439847][T10963] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 230.457819][T10963] EXT4-fs (loop4): orphan cleanup on readonly fs [ 230.492294][T10963] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #16: comm syz.4.2426: corrupted inode contents [ 230.504629][T10963] EXT4-fs (loop4): Remounting filesystem read-only [ 230.511977][T10963] EXT4-fs (loop4): 1 truncate cleaned up [ 230.518514][ T1773] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 230.529146][ T1773] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 230.549475][ T1773] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 230.560533][T10963] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 230.580642][T10971] netlink: 'syz.0.2430': attribute type 3 has an invalid length. [ 230.588565][T10971] netlink: 'syz.0.2430': attribute type 1 has an invalid length. [ 230.596350][T10971] netlink: 181400 bytes leftover after parsing attributes in process `syz.0.2430'. [ 230.629707][T10976] loop5: detected capacity change from 0 to 512 [ 230.642858][T10977] loop1: detected capacity change from 0 to 1024 [ 230.699673][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.723447][T10977] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 230.765506][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.771879][T10991] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 230.791888][T10991] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2435'. [ 230.831413][T10994] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 230.851841][T10994] vhci_hcd vhci_hcd.2: invalid port number 96 [ 230.858474][T10994] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0 [ 230.923657][T10994] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 230.923657][T10994] program syz.1.2438 not setting count and/or reply_len properly [ 230.964511][T10998] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2440'. [ 231.033196][T11003] netlink: 'syz.3.2442': attribute type 13 has an invalid length. [ 231.044011][T11003] gretap0: refused to change device tx_queue_len [ 231.051764][T11003] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 231.108193][T11007] vhci_hcd vhci_hcd.0: invalid port number 23 [ 231.160651][T11009] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2444'. [ 231.211803][T11009] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 231.223478][T11009] EXT4-fs (loop1): orphan cleanup on readonly fs [ 231.232252][T11009] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #16: comm syz.1.2444: corrupted inode contents [ 231.244809][T11009] EXT4-fs (loop1): Remounting filesystem read-only [ 231.252509][T11009] EXT4-fs (loop1): 1 truncate cleaned up [ 231.258601][ T53] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 231.268088][T11012] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2446'. [ 231.269252][ T53] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 231.269511][ T53] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started [ 231.270646][T11009] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 231.330889][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.374859][T11023] netlink: 'syz.1.2448': attribute type 3 has an invalid length. [ 231.382778][T11023] netlink: 'syz.1.2448': attribute type 1 has an invalid length. [ 231.390701][T11023] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.2448'. [ 231.405123][T11023] EXT4-fs: Ignoring removed bh option [ 231.417531][T11023] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 231.427515][T11023] EXT4-fs (loop1): 1 truncate cleaned up [ 231.434797][T11023] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 231.491079][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.629872][T11038] FAULT_INJECTION: forcing a failure. [ 231.629872][T11038] name failslab, interval 1, probability 0, space 0, times 0 [ 231.642861][T11038] CPU: 0 UID: 0 PID: 11038 Comm: syz.4.2455 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 231.642900][T11038] Tainted: [W]=WARN [ 231.642910][T11038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 231.642953][T11038] Call Trace: [ 231.642962][T11038] [ 231.642976][T11038] __dump_stack+0x1d/0x30 [ 231.643009][T11038] dump_stack_lvl+0x95/0xd0 [ 231.643067][T11038] dump_stack+0x15/0x1b [ 231.643093][T11038] should_fail_ex+0x265/0x280 [ 231.643123][T11038] should_failslab+0x8c/0xb0 [ 231.643222][T11038] kmem_cache_alloc_noprof+0x69/0x4b0 [ 231.643325][T11038] ? security_inode_alloc+0x37/0x100 [ 231.643354][T11038] security_inode_alloc+0x37/0x100 [ 231.643379][T11038] inode_init_always_gfp+0x4b7/0x500 [ 231.643410][T11038] alloc_inode+0x58/0x170 [ 231.643435][T11038] create_pipe_files+0x41/0x440 [ 231.643513][T11038] __do_pipe_flags+0x44/0x150 [ 231.643637][T11038] do_pipe2+0x61/0x130 [ 231.643668][T11038] ? ksys_write+0x192/0x1a0 [ 231.643693][T11038] __x64_sys_pipe+0x21/0x30 [ 231.643716][T11038] x64_sys_call+0x3a0/0x3000 [ 231.643796][T11038] do_syscall_64+0xca/0x2b0 [ 231.643840][T11038] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.643868][T11038] RIP: 0033:0x7f38a2c3f749 [ 231.643941][T11038] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 231.643991][T11038] RSP: 002b:00007f38a169f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000016 [ 231.644015][T11038] RAX: ffffffffffffffda RBX: 00007f38a2e95fa0 RCX: 00007f38a2c3f749 [ 231.644032][T11038] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffffffffffff [ 231.644048][T11038] RBP: 00007f38a169f090 R08: 0000000000000000 R09: 0000000000000000 [ 231.644114][T11038] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 231.644134][T11038] R13: 00007f38a2e96038 R14: 00007f38a2e95fa0 R15: 00007ffd8d88f7c8 [ 231.644158][T11038] [ 231.872185][T11041] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2452'. [ 231.923179][ T3307] loop3: p1 p3 p4 [ 231.928447][ T3307] loop3: p4 size 589824 extends beyond EOD, truncated [ 231.954605][T11043] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 231.964572][T11043] EXT4-fs (loop4): orphan cleanup on readonly fs [ 231.975225][T11051] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2458'. [ 231.981569][T11043] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #16: comm syz.4.2457: corrupted inode contents [ 231.997083][T11043] EXT4-fs (loop4): Remounting filesystem read-only [ 232.006169][T11043] EXT4-fs (loop4): 1 truncate cleaned up [ 232.012694][ T5140] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 232.023283][ T5140] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 232.043554][ T5140] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 232.054035][T11034] loop3: p1 p3 p4 [ 232.055393][T11043] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 232.073463][T11034] loop3: p4 size 589824 extends beyond EOD, truncated [ 232.101373][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.116061][T11051] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 232.127616][T11051] EXT4-fs (loop5): orphan cleanup on readonly fs [ 232.160121][T11051] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #16: comm syz.5.2458: corrupted inode contents [ 232.183249][T11051] EXT4-fs (loop5): Remounting filesystem read-only [ 232.201454][T11051] EXT4-fs (loop5): 1 truncate cleaned up [ 232.221559][ T851] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 232.232174][ T851] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 232.249472][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 232.261396][ T3309] udevd[3309]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 232.272645][ T3569] udevd[3569]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 232.295101][T11065] serio: Serial port ttyS3 [ 232.304401][ T851] EXT4-fs (loop5): Quota write (off=8, len=24) cancelled because transaction is not started [ 232.316047][T11051] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 232.339169][ T3569] udevd[3569]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 232.339704][ T3309] udevd[3309]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 232.366523][ T5495] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.378276][T11072] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 232.406595][T11072] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2464'. [ 232.472246][T11081] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 232.497243][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.668315][ T3307] loop1: p2 < > p4 [ 232.672989][ T3307] loop1: p4 size 262144 extends beyond EOD, truncated [ 232.682610][T11095] loop1: p2 < > p4 [ 232.687168][T11095] loop1: p4 size 262144 extends beyond EOD, truncated [ 232.834607][T11099] netlink: 'syz.1.2474': attribute type 13 has an invalid length. [ 232.848665][T11099] gretap0: refused to change device tx_queue_len [ 232.856408][T11099] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 232.901617][T11102] set_capacity_and_notify: 7 callbacks suppressed [ 232.901636][T11102] loop1: detected capacity change from 0 to 512 [ 232.936527][T11102] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 232.944905][T11102] EXT4-fs (loop1): orphan cleanup on readonly fs [ 232.953755][T11102] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #16: comm syz.1.2475: corrupted inode contents [ 232.966275][T11102] EXT4-fs (loop1): Remounting filesystem read-only [ 232.967293][T11103] lo speed is unknown, defaulting to 1000 [ 232.973989][T11102] EXT4-fs (loop1): 1 truncate cleaned up [ 232.980315][T11103] lo speed is unknown, defaulting to 1000 [ 232.990566][ T5140] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 233.001328][ T5140] __quota_error: 738 callbacks suppressed [ 233.001344][ T5140] Quota error (device loop1): write_blk: dquota write failed [ 233.014683][ T5140] Quota error (device loop1): remove_free_dqentry: Can't write block (5) with free entries [ 233.025054][ T5140] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 233.035755][ T5140] Quota error (device loop1): write_blk: dquota write failed [ 233.043600][ T5140] Quota error (device loop1): free_dqentry: Can't move quota data block (5) to free list [ 233.054723][ T5140] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started [ 233.064991][ T5140] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 233.075471][ T5140] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 233.085812][T11102] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 233.136956][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.217220][T11112] serio: Serial port ttyS3 [ 233.256301][ T29] audit: type=1326 audit(1768393623.834:13270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11117 comm="syz.5.2481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44b68ff749 code=0x7ffc0000 [ 233.281889][ T29] audit: type=1326 audit(1768393623.864:13271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11117 comm="syz.5.2481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f44b68ff749 code=0x7ffc0000 [ 233.306104][ T29] audit: type=1326 audit(1768393623.864:13272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11117 comm="syz.5.2481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44b68ff749 code=0x7ffc0000 [ 233.332979][ T29] audit: type=1326 audit(1768393623.864:13273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11117 comm="syz.5.2481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44b68ff749 code=0x7ffc0000 [ 233.405424][ T4702] lo speed is unknown, defaulting to 1000 [ 233.411301][ T4702] syz0: Port: 1 Link DOWN [ 233.421964][T11123] gretap0: refused to change device tx_queue_len [ 233.429624][T11123] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 233.450682][ T4702] lo speed is unknown, defaulting to 1000 [ 233.456554][ T4702] syz0: Port: 1 Link ACTIVE [ 233.567343][T11133] loop3: detected capacity change from 0 to 512 [ 233.589212][T11135] loop5: detected capacity change from 0 to 1024 [ 233.599831][T11133] EXT4-fs: Ignoring removed bh option [ 233.606203][T11135] EXT4-fs: Ignoring removed orlov option [ 233.629264][T11133] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 233.629447][T11135] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 233.655891][T11133] EXT4-fs (loop3): 1 truncate cleaned up [ 233.668874][T11133] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 233.672763][ T5495] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.750458][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.795443][T11142] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 233.803198][T11142] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 233.811891][T11142] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 233.819634][T11142] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 233.904007][T11144] lo speed is unknown, defaulting to 1000 [ 233.910297][T11144] lo speed is unknown, defaulting to 1000 [ 234.069202][T11119] serio: Serial port ttyS3 [ 234.305757][T11172] tipc: Enabled bearer , priority 0 [ 234.320605][T11176] validate_nla: 3 callbacks suppressed [ 234.320621][T11176] netlink: 'syz.1.2496': attribute type 3 has an invalid length. [ 234.334217][T11176] netlink: 'syz.1.2496': attribute type 1 has an invalid length. [ 234.351058][T11172] syzkaller0: entered promiscuous mode [ 234.356787][T11172] syzkaller0: entered allmulticast mode [ 234.367246][T11176] loop1: detected capacity change from 0 to 512 [ 234.379944][T11172] tipc: Resetting bearer [ 234.388493][T11171] tipc: Resetting bearer [ 234.399688][T11176] EXT4-fs: Ignoring removed bh option [ 234.408014][T11171] tipc: Disabling bearer [ 234.434643][T11176] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 234.460994][T11176] EXT4-fs (loop1): 1 truncate cleaned up [ 234.467296][T11176] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 234.515213][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.578459][T11199] serio: Serial port ttyS3 [ 234.644804][T11193] loop4: detected capacity change from 0 to 8192 [ 234.669905][T11193] netlink: 'syz.4.2498': attribute type 10 has an invalid length. [ 234.678813][T11193] bond0: (slave dummy0): Releasing backup interface [ 234.689579][T11193] team0: Port device dummy0 added [ 234.699931][T11193] netlink: 'syz.4.2498': attribute type 10 has an invalid length. [ 234.727965][T11193] team0: Port device dummy0 removed [ 234.735591][T11193] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 234.750642][T11219] loop1: detected capacity change from 0 to 128 [ 234.766231][T11219] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 234.779150][T11219] ext4 filesystem being mounted at /491/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 234.825595][ T3316] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 234.863973][T11228] vhci_hcd vhci_hcd.0: invalid port number 23 [ 234.893524][T11224] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 234.942232][T11232] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 234.965535][T11234] netlink: 'syz.4.2509': attribute type 3 has an invalid length. [ 234.973396][T11234] netlink: 'syz.4.2509': attribute type 1 has an invalid length. [ 234.988960][T11234] loop4: detected capacity change from 0 to 512 [ 234.996089][T11234] EXT4-fs: Ignoring removed bh option [ 235.002425][T11234] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 235.012742][T11234] EXT4-fs (loop4): 1 truncate cleaned up [ 235.019263][T11234] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 235.068438][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.095473][T11237] loop4: detected capacity change from 0 to 512 [ 235.487295][T11252] __nla_validate_parse: 7 callbacks suppressed [ 235.487309][T11252] netlink: 424 bytes leftover after parsing attributes in process `syz.0.2516'. [ 235.559388][T11255] program syz.0.2517 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 235.754113][T11264] siw: device registration error -23 [ 235.765035][T11258] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2518'. [ 235.803391][T11269] loop5: detected capacity change from 0 to 512 [ 236.125503][T11287] loop4: detected capacity change from 0 to 512 [ 236.149210][T11287] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 236.157350][T11287] EXT4-fs (loop4): orphan cleanup on readonly fs [ 236.185121][T11287] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #16: comm syz.4.2529: corrupted inode contents [ 236.217808][T11287] EXT4-fs (loop4): Remounting filesystem read-only [ 236.224722][T11287] EXT4-fs (loop4): 1 truncate cleaned up [ 236.230735][ T1773] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 236.241343][ T1773] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 236.293062][ T1773] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 236.304285][T11287] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 236.334165][T11304] netlink: 'syz.3.2533': attribute type 10 has an invalid length. [ 236.343176][T11304] bond0: (slave dummy0): Releasing backup interface [ 236.353768][T11304] team0: Port device dummy0 added [ 236.361024][T11304] netlink: 'syz.3.2533': attribute type 10 has an invalid length. [ 236.378543][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.398906][T11304] team0: Port device dummy0 removed [ 236.411446][T11304] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 236.450221][T11314] vhci_hcd vhci_hcd.0: invalid port number 23 [ 236.621306][T11321] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 236.673621][T11321] ext4 filesystem being mounted at /531/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 236.702185][T11321] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2539'. [ 236.748270][T11321] gretap0: left allmulticast mode [ 236.753406][T11321] gretap0: left promiscuous mode [ 236.758794][T11321] bridge0: port 3(gretap0) entered disabled state [ 236.799315][T11333] EXT4-fs: Ignoring removed orlov option [ 236.829311][T11333] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 236.850236][T11321] bond0: (slave dummy0): Releasing backup interface [ 236.884404][T11321] bridge_slave_0: left allmulticast mode [ 236.890312][T11321] bridge_slave_0: left promiscuous mode [ 236.896268][T11321] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.936609][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.956770][T11321] bridge_slave_1: left allmulticast mode [ 236.962607][T11321] bridge_slave_1: left promiscuous mode [ 236.968575][T11321] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.989865][T11321] bond0: (slave bond_slave_0): Releasing backup interface [ 237.009311][T11321] bond0: (slave bond_slave_1): Releasing backup interface [ 237.036739][T11321] team0: Port device team_slave_0 removed [ 237.066891][T11321] team0: Port device team_slave_1 removed [ 237.084711][T11341] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 237.100039][T11321] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 237.121694][T11341] EXT4-fs (loop1): orphan cleanup on readonly fs [ 237.132322][T11341] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #16: comm syz.1.2545: corrupted inode contents [ 237.173992][T11341] EXT4-fs (loop1): Remounting filesystem read-only [ 237.180800][T11341] EXT4-fs (loop1): 1 truncate cleaned up [ 237.186705][ T851] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 237.197571][ T851] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 237.209507][ T851] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started [ 237.220486][T11341] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 237.245308][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.279128][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.317704][T11350] program syz.0.2547 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 237.549262][ T3307] loop3: p1 p3 p4 [ 237.553821][T11365] serio: Serial port ttyS3 [ 237.561884][ T3307] loop3: p4 size 589824 extends beyond EOD, truncated [ 237.800108][T11354] loop3: p1 p3 p4 [ 237.807293][T11354] loop3: p4 size 589824 extends beyond EOD, truncated [ 237.872584][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 237.883122][ T3569] udevd[3569]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 237.894932][ T3309] udevd[3309]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 237.947325][T11372] set_capacity_and_notify: 5 callbacks suppressed [ 237.947347][T11372] loop3: detected capacity change from 0 to 8192 [ 237.972542][T11372] netlink: 'syz.3.2555': attribute type 10 has an invalid length. [ 237.983905][T11372] team0: Port device dummy0 added [ 237.993510][T11372] netlink: 'syz.3.2555': attribute type 10 has an invalid length. [ 238.020970][T11372] team0: Port device dummy0 removed [ 238.031204][T11372] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 238.312749][T11385] bond0: (slave dummy0): Releasing backup interface [ 238.323374][T11385] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 238.332470][T11385] team0: Failed to send options change via netlink (err -105) [ 238.340046][T11385] team0: Port device dummy0 added [ 238.347387][T11385] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 238.363395][T11385] team0: Failed to send options change via netlink (err -105) [ 238.372243][T11385] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 238.382041][T11385] team0: Port device dummy0 removed [ 238.409014][T11385] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 238.490747][T11398] tipc: Enabled bearer , priority 0 [ 238.505228][T11398] syzkaller0: entered promiscuous mode [ 238.511570][T11398] syzkaller0: entered allmulticast mode [ 238.524876][T11402] loop3: detected capacity change from 0 to 512 [ 238.542847][T11402] EXT4-fs (loop3): orphan cleanup on readonly fs [ 238.552808][T11402] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.2564: bg 0: block 127: padding at end of block bitmap is not set [ 238.568749][T11402] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2857: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 238.569089][ T29] kauditd_printk_skb: 715 callbacks suppressed [ 238.569131][ T29] audit: type=1326 audit(1768393629.134:13977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11403 comm="syz.4.2567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38a2c3f749 code=0x7ffc0000 [ 238.582526][T11402] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #15: comm syz.3.2564: corrupted inode contents [ 238.588295][ T29] audit: type=1326 audit(1768393629.134:13978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11403 comm="syz.4.2567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38a2c3f749 code=0x7ffc0000 [ 238.647316][T11402] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 238.656485][T11402] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #15: comm syz.3.2564: corrupted inode contents [ 238.669043][T11402] EXT4-fs error (device loop3): ext4_evict_inode:301: inode #15: comm syz.3.2564: mark_inode_dirty error [ 238.680761][T11402] EXT4-fs (loop3): 1 orphan inode deleted [ 238.687124][T11402] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 238.695634][T11398] tipc: Resetting bearer [ 238.704510][ T29] audit: type=1326 audit(1768393629.234:13979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11403 comm="syz.4.2567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f38a2c3f749 code=0x7ffc0000 [ 238.728979][ T29] audit: type=1326 audit(1768393629.234:13980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11403 comm="syz.4.2567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38a2c3f749 code=0x7ffc0000 [ 238.753415][ T29] audit: type=1326 audit(1768393629.234:13981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11403 comm="syz.4.2567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38a2c3f749 code=0x7ffc0000 [ 238.777308][ T29] audit: type=1326 audit(1768393629.234:13982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11403 comm="syz.4.2567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f38a2c3f749 code=0x7ffc0000 [ 238.801048][ T29] audit: type=1326 audit(1768393629.234:13983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11403 comm="syz.4.2567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38a2c3f749 code=0x7ffc0000 [ 238.824996][ T29] audit: type=1326 audit(1768393629.234:13984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11403 comm="syz.4.2567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38a2c3f749 code=0x7ffc0000 [ 238.848838][ T29] audit: type=1326 audit(1768393629.234:13985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11403 comm="syz.4.2567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f38a2c3f749 code=0x7ffc0000 [ 238.852844][T11406] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2567'. [ 238.872717][ T29] audit: type=1326 audit(1768393629.234:13986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11403 comm="syz.4.2567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38a2c3f749 code=0x7ffc0000 [ 238.906853][T11397] tipc: Resetting bearer [ 238.918014][T11401] loop1: detected capacity change from 0 to 2048 [ 238.942636][T11397] tipc: Disabling bearer [ 238.948497][ T3307] loop1: p1 p3 p4 [ 238.963790][ T3307] loop1: p4 size 589824 extends beyond EOD, truncated [ 238.979495][T11401] loop1: p1 p3 p4 [ 238.984878][T11401] loop1: p4 size 589824 extends beyond EOD, truncated [ 239.017598][T11412] loop5: detected capacity change from 0 to 512 [ 239.037505][T11411] siw: device registration error -23 [ 239.064791][T11412] EXT4-fs (loop5): orphan cleanup on readonly fs [ 239.078308][T11417] loop1: detected capacity change from 0 to 512 [ 239.088506][T11412] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.2568: bg 0: block 127: padding at end of block bitmap is not set [ 239.103480][T11412] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #15: comm syz.5.2568: corrupted inode contents [ 239.115770][T11412] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem [ 239.124864][T11412] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #15: comm syz.5.2568: corrupted inode contents [ 239.141441][T11412] EXT4-fs error (device loop5): ext4_evict_inode:301: inode #15: comm syz.5.2568: mark_inode_dirty error [ 239.153145][T11412] EXT4-fs (loop5): 1 orphan inode deleted [ 239.156541][T11419] serio: Serial port ttyS3 [ 239.160419][T11412] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 239.184353][ T3309] udevd[3309]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 239.184944][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 239.206784][ T3569] udevd[3569]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 239.229543][T11417] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 239.238007][T11417] EXT4-fs (loop1): orphan cleanup on readonly fs [ 239.243015][ T3309] udevd[3309]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 239.259137][ T3569] udevd[3569]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 239.270401][T11417] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #16: comm syz.1.2571: corrupted inode contents [ 239.274070][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 239.291974][T11417] EXT4-fs (loop1): Remounting filesystem read-only [ 239.299376][T11417] EXT4-fs (loop1): 1 truncate cleaned up [ 239.305330][ T320] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 239.315918][ T320] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 239.328476][ T320] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started [ 239.341810][T11417] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 239.392416][T11429] loop1: detected capacity change from 0 to 128 [ 239.413054][T11429] ext4 filesystem being mounted at /506/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 239.506730][T11444] tipc: Enabled bearer , priority 0 [ 239.514224][T11444] syzkaller0: entered promiscuous mode [ 239.518067][T11443] siw: device registration error -23 [ 239.520007][T11444] syzkaller0: entered allmulticast mode [ 239.536256][T11444] tipc: Resetting bearer [ 239.543343][T11441] tipc: Resetting bearer [ 239.552621][T11441] tipc: Disabling bearer [ 239.607687][T11447] loop3: detected capacity change from 0 to 512 [ 239.618708][T11447] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 239.626885][T11447] EXT4-fs (loop3): orphan cleanup on readonly fs [ 239.635064][T11447] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #16: comm syz.3.2581: corrupted inode contents [ 239.647472][T11447] EXT4-fs (loop3): Remounting filesystem read-only [ 239.654431][T11447] EXT4-fs (loop3): 1 truncate cleaned up [ 239.660421][ T320] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 239.671060][ T320] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 239.681754][ T320] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started [ 239.827993][T11451] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2582'. [ 239.949796][T11455] loop5: detected capacity change from 0 to 1024 [ 240.050949][T11470] loop3: detected capacity change from 0 to 128 [ 240.061889][T11470] ext4 filesystem being mounted at /544/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 240.086539][T11472] loop5: detected capacity change from 0 to 512 [ 240.098431][T11472] EXT4-fs (loop5): orphan cleanup on readonly fs [ 240.105535][T11472] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.2587: bg 0: block 127: padding at end of block bitmap is not set [ 240.125799][T11472] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #15: comm syz.5.2587: corrupted inode contents [ 240.150392][T11472] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem [ 240.160416][T11475] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 240.169051][T11472] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #15: comm syz.5.2587: corrupted inode contents [ 240.177228][T11475] EXT4-fs (loop3): orphan cleanup on readonly fs [ 240.187852][T11472] EXT4-fs error (device loop5): ext4_evict_inode:301: inode #15: comm syz.5.2587: mark_inode_dirty error [ 240.191824][T11475] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #16: comm syz.3.2589: corrupted inode contents [ 240.215992][T11472] EXT4-fs (loop5): 1 orphan inode deleted [ 240.221996][T11475] EXT4-fs (loop3): Remounting filesystem read-only [ 240.237771][T11479] vhci_hcd vhci_hcd.0: invalid port number 23 [ 240.239422][T11475] EXT4-fs (loop3): 1 truncate cleaned up [ 240.264639][ T37] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 240.275727][ T37] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 240.286659][ T37] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started [ 240.368123][T11486] validate_nla: 2 callbacks suppressed [ 240.368142][T11486] netlink: 'syz.4.2594': attribute type 3 has an invalid length. [ 240.374067][T11487] netlink: 'syz.1.2593': attribute type 3 has an invalid length. [ 240.381755][T11486] netlink: 'syz.4.2594': attribute type 1 has an invalid length. [ 240.381775][T11486] netlink: 181400 bytes leftover after parsing attributes in process `syz.4.2594'. [ 240.389718][T11487] netlink: 'syz.1.2593': attribute type 1 has an invalid length. [ 240.414543][T11487] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.2593'. [ 240.425574][T11486] EXT4-fs: Ignoring removed bh option [ 240.445397][T11486] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 240.458741][T11487] EXT4-fs: Ignoring removed bh option [ 240.470451][T11487] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 240.487857][T11486] EXT4-fs (loop4): 1 truncate cleaned up [ 240.503674][T11487] EXT4-fs (loop1): 1 truncate cleaned up [ 240.750697][T11505] EXT4-fs: Ignoring removed orlov option [ 240.938691][T11511] lo speed is unknown, defaulting to 1000 [ 240.945326][T11511] lo speed is unknown, defaulting to 1000 [ 241.356066][T11520] program syz.4.2602 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 241.407420][T11522] random: crng reseeded on system resumption [ 241.663033][T11540] netlink: 'syz.5.2610': attribute type 10 has an invalid length. [ 241.669578][T11541] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2609'. [ 241.706632][T11552] netlink: 'syz.3.2612': attribute type 13 has an invalid length. [ 241.720307][T11554] netlink: 'syz.5.2610': attribute type 10 has an invalid length. [ 241.738591][T11540] bond0: (slave dummy0): Releasing backup interface [ 241.751979][T11540] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 241.761473][T11540] team0: Failed to send options change via netlink (err -105) [ 241.769095][T11540] team0: Port device dummy0 added [ 241.783707][T11552] gretap0: refused to change device tx_queue_len [ 241.790678][T11552] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 241.807127][T11554] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 241.832652][T11554] team0: Failed to send options change via netlink (err -105) [ 241.849447][T11554] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 241.859160][T11554] team0: Port device dummy0 removed [ 241.875017][T11554] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 241.902679][T11564] EXT4-fs (loop4): orphan cleanup on readonly fs [ 241.912324][T11564] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.2613: bg 0: block 127: padding at end of block bitmap is not set [ 241.928418][T11564] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #15: comm syz.4.2613: corrupted inode contents [ 241.943809][T11564] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 241.955843][T11564] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #15: comm syz.4.2613: corrupted inode contents [ 241.968630][T11564] EXT4-fs error (device loop4): ext4_evict_inode:301: inode #15: comm syz.4.2613: mark_inode_dirty error [ 241.982876][T11564] EXT4-fs (loop4): 1 orphan inode deleted [ 242.117164][ T4702] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 242.124780][ T4702] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 242.132234][ T4702] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 242.139944][ T4702] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 242.147502][ T4702] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 242.154989][ T4702] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 242.162671][ T4702] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 242.170316][ T4702] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 242.177783][ T4702] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 242.185362][ T4702] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 242.293601][ T4702] hid-generic 0003:0004:0000.0001: hidraw0: USB HID v0.02 Device [syz0] on syz1 [ 242.379523][T11589] fido_id[11589]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 242.531775][ T3307] loop1: p1 p3 p4 [ 242.539439][ T3307] loop1: p4 size 589824 extends beyond EOD, truncated [ 242.568537][T11595] loop1: p1 p3 p4 [ 242.576830][T11595] loop1: p4 size 589824 extends beyond EOD, truncated [ 242.683528][T11599] EXT4-fs: Ignoring removed orlov option [ 242.728869][ T3569] udevd[3569]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 242.827487][T11603] netlink: 'syz.4.2630': attribute type 10 has an invalid length. [ 242.861324][T11603] bond0: (slave dummy0): Releasing backup interface [ 242.871979][T11603] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 242.881373][T11609] netlink: 'syz.4.2630': attribute type 10 has an invalid length. [ 242.893949][T11603] team0: Failed to send options change via netlink (err -105) [ 242.901784][T11603] team0: Port device dummy0 added [ 242.908366][T11609] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 242.953958][T11609] team0: Failed to send options change via netlink (err -105) [ 242.978297][T11609] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 242.987465][T11609] team0: Port device dummy0 removed [ 242.999633][T11609] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 243.109850][T11613] set_capacity_and_notify: 10 callbacks suppressed [ 243.109867][T11613] loop5: detected capacity change from 0 to 128 [ 243.150492][T11613] ext4 filesystem being mounted at /370/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 243.570779][T11626] serio: Serial port ttyS3 [ 243.737871][T11630] loop1: detected capacity change from 0 to 512 [ 243.747819][T11630] EXT4-fs (loop1): orphan cleanup on readonly fs [ 243.760350][T11630] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.2639: bg 0: block 127: padding at end of block bitmap is not set [ 243.870742][T11630] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #15: comm syz.1.2639: corrupted inode contents [ 243.901410][T11630] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 243.924614][T11630] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #15: comm syz.1.2639: corrupted inode contents [ 243.945123][T11630] EXT4-fs error (device loop1): ext4_evict_inode:301: inode #15: comm syz.1.2639: mark_inode_dirty error [ 243.960268][T11630] EXT4-fs (loop1): 1 orphan inode deleted [ 244.045885][T11635] loop4: detected capacity change from 0 to 1024 [ 244.108975][T11646] loop3: detected capacity change from 0 to 512 [ 244.259187][T11648] loop4: detected capacity change from 0 to 8192 [ 244.284744][T11652] loop3: detected capacity change from 0 to 2048 [ 244.291158][T11648] netlink: 'syz.4.2645': attribute type 10 has an invalid length. [ 244.310015][T11648] bond0: (slave dummy0): Releasing backup interface [ 244.333238][T11648] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 244.342175][T11648] team0: Failed to send options change via netlink (err -105) [ 244.349814][T11648] team0: Port device dummy0 added [ 244.355682][ T3569] loop3: p1 p3 p4 [ 244.360930][T11655] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 244.371563][ T3569] loop3: p4 size 589824 extends beyond EOD, truncated [ 244.384353][T11655] team0: Failed to send options change via netlink (err -105) [ 244.392804][T11655] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 244.403405][T11655] team0: Port device dummy0 removed [ 244.412318][T11655] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 244.426326][T11652] loop3: p1 p3 p4 [ 244.433789][T11652] loop3: p4 size 589824 extends beyond EOD, truncated [ 244.528886][ T3569] udevd[3569]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 244.534109][ T3309] udevd[3309]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 244.541433][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 244.586745][T11659] netlink: 181400 bytes leftover after parsing attributes in process `syz.3.2650'. [ 244.596500][T11658] serio: Serial port ttyS3 [ 244.616204][T11659] loop3: detected capacity change from 0 to 512 [ 244.623150][T11659] EXT4-fs: Ignoring removed bh option [ 244.635903][T11659] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 244.645454][T11659] EXT4-fs (loop3): 1 truncate cleaned up [ 244.660345][ T29] kauditd_printk_skb: 470 callbacks suppressed [ 244.660363][ T29] audit: type=1400 audit(1768393635.244:14439): avc: denied { read write } for pid=11656 comm="syz.3.2650" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 244.689693][ T29] audit: type=1400 audit(1768393635.244:14440): avc: denied { open } for pid=11656 comm="syz.3.2650" path="/561/file0/file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 244.701876][T11663] siw: device registration error -23 [ 244.843827][T11670] netlink: 181400 bytes leftover after parsing attributes in process `syz.4.2654'. [ 244.859779][T11670] loop4: detected capacity change from 0 to 512 [ 244.876955][T11670] EXT4-fs: Ignoring removed bh option [ 244.894375][T11670] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 244.910601][T11670] EXT4-fs (loop4): 1 truncate cleaned up [ 244.963325][ T29] audit: type=1326 audit(1768393635.544:14441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11590 comm="syz.0.2625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f9a3666f807 code=0x7ffc0000 [ 244.963364][T11674] loop3: detected capacity change from 0 to 2048 [ 244.998382][ T29] audit: type=1326 audit(1768393635.574:14442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11590 comm="syz.0.2625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a3666f749 code=0x7ffc0000 [ 245.022322][ T29] audit: type=1326 audit(1768393635.574:14443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11590 comm="syz.0.2625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a3666f749 code=0x7ffc0000 [ 245.046055][ T29] audit: type=1326 audit(1768393635.584:14444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11590 comm="syz.0.2625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f9a36626bdd code=0x7ffc0000 [ 245.070183][ T29] audit: type=1326 audit(1768393635.584:14445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11590 comm="syz.0.2625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f9a366a3e89 code=0x7ffc0000 [ 245.093839][ T29] audit: type=1326 audit(1768393635.584:14446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11590 comm="syz.0.2625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f9a36626c47 code=0x7ffc0000 [ 245.117823][ T29] audit: type=1326 audit(1768393635.584:14447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11590 comm="syz.0.2625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a3666f749 code=0x7ffc0000 [ 245.141837][ T29] audit: type=1326 audit(1768393635.584:14448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11590 comm="syz.0.2625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a3666f749 code=0x7ffc0000 [ 245.178494][ T3307] loop3: p1 p3 p4 [ 245.198258][ T3307] loop3: p4 size 589824 extends beyond EOD, truncated [ 245.213917][T11674] loop3: p1 p3 p4 [ 245.219099][T11674] loop3: p4 size 589824 extends beyond EOD, truncated [ 245.329310][ T3309] udevd[3309]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 245.340659][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 245.351945][ T3569] udevd[3569]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 245.365458][T11682] loop4: detected capacity change from 0 to 8192 [ 245.388543][T11684] gretap0: refused to change device tx_queue_len [ 245.413842][T11684] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 245.438346][T11682] validate_nla: 6 callbacks suppressed [ 245.438405][T11682] netlink: 'syz.4.2658': attribute type 10 has an invalid length. [ 245.475640][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 245.486343][T11682] bond0: (slave dummy0): Releasing backup interface [ 245.494411][ T3309] udevd[3309]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 245.494476][ T3569] udevd[3569]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 245.512079][T11688] netlink: 'syz.4.2658': attribute type 10 has an invalid length. [ 245.539428][T11682] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 245.578140][T11682] team0: Failed to send options change via netlink (err -105) [ 245.585781][T11682] team0: Port device dummy0 added [ 245.607198][T11688] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 245.691835][T11688] team0: Failed to send options change via netlink (err -105) [ 245.699601][T11688] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 245.712477][T11688] team0: Port device dummy0 removed [ 245.721455][T11688] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 245.730192][T11696] bridge0: port 1(gretap0) entered blocking state [ 245.736774][T11696] bridge0: port 1(gretap0) entered disabled state [ 245.747303][T11696] gretap0: entered allmulticast mode [ 245.753485][T11696] gretap0: entered promiscuous mode [ 245.759845][T11696] bridge0: port 1(gretap0) entered blocking state [ 245.766508][T11696] bridge0: port 1(gretap0) entered forwarding state [ 245.856578][T11706] netlink: 'syz.0.2668': attribute type 3 has an invalid length. [ 245.864526][T11706] netlink: 'syz.0.2668': attribute type 1 has an invalid length. [ 245.872337][T11706] netlink: 181400 bytes leftover after parsing attributes in process `syz.0.2668'. [ 246.577101][T11730] tipc: Enabled bearer , priority 0 [ 246.584552][T11730] syzkaller0: entered promiscuous mode [ 246.590233][T11730] syzkaller0: entered allmulticast mode [ 246.606589][T11730] tipc: Resetting bearer [ 246.617101][T11729] tipc: Resetting bearer [ 246.633813][T11729] tipc: Disabling bearer [ 246.832256][T11738] netlink: 'syz.1.2681': attribute type 13 has an invalid length. [ 246.875544][T11738] gretap0: refused to change device tx_queue_len [ 246.887609][T11738] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 247.355586][T11759] serio: Serial port ttyS3 [ 247.412282][T11751] ext4 filesystem being mounted at /378/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 247.574858][T11769] EXT4-fs: Ignoring removed orlov option [ 247.627860][T11774] EXT4-fs (loop3): orphan cleanup on readonly fs [ 247.667783][T11774] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.2688: bg 0: block 127: padding at end of block bitmap is not set [ 247.683867][T11779] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2692'. [ 247.701063][T11774] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #15: comm syz.3.2688: corrupted inode contents [ 247.723380][T11783] netlink: 'syz.1.2695': attribute type 13 has an invalid length. [ 247.736836][T11774] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 247.745649][T11783] gretap0: refused to change device tx_queue_len [ 247.758151][T11777] siw: device registration error -23 [ 247.766569][T11783] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 247.794626][T11774] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #15: comm syz.3.2688: corrupted inode contents [ 247.811419][T11774] EXT4-fs error (device loop3): ext4_evict_inode:301: inode #15: comm syz.3.2688: mark_inode_dirty error [ 247.825093][T11774] EXT4-fs (loop3): 1 orphan inode deleted [ 247.918091][T11797] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2701'. [ 247.951241][T11793] netlink: 'syz.1.2699': attribute type 10 has an invalid length. [ 247.976630][T11793] bond0: (slave dummy0): Releasing backup interface [ 247.985228][T11797] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 247.994039][T11797] EXT4-fs (loop4): orphan cleanup on readonly fs [ 248.004065][T11793] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 248.013739][T11805] netlink: 'syz.1.2699': attribute type 10 has an invalid length. [ 248.022388][T11793] team0: Failed to send options change via netlink (err -105) [ 248.030523][T11793] team0: Port device dummy0 added [ 248.037428][T11797] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #16: comm syz.4.2701: corrupted inode contents [ 248.050567][T11797] EXT4-fs (loop4): Remounting filesystem read-only [ 248.053604][T11805] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 248.057503][T11797] EXT4-fs (loop4): 1 truncate cleaned up [ 248.080218][T11805] team0: Failed to send options change via netlink (err -105) [ 248.088395][T11805] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 248.097238][ T851] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 248.097878][T11805] team0: Port device dummy0 removed [ 248.107991][ T851] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 248.118792][T11805] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 248.133132][ T851] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 248.194465][T11809] program syz.0.2704 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 248.215111][T11811] siw: device registration error -23 [ 248.254681][T11815] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2705'. [ 248.355671][T11825] set_capacity_and_notify: 5 callbacks suppressed [ 248.355691][T11825] loop1: detected capacity change from 0 to 512 [ 248.370280][T11825] EXT4-fs: Ignoring removed bh option [ 248.380216][T11825] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 248.393801][T11825] EXT4-fs (loop1): 1 truncate cleaned up [ 248.482419][T11831] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2713'. [ 248.560171][T11831] loop4: detected capacity change from 0 to 512 [ 248.579096][T11831] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 248.588109][T11831] EXT4-fs (loop4): orphan cleanup on readonly fs [ 248.601656][T11847] loop5: detected capacity change from 0 to 512 [ 248.616928][T11831] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #16: comm syz.4.2713: corrupted inode contents [ 248.631279][T11831] EXT4-fs (loop4): Remounting filesystem read-only [ 248.638612][T11831] EXT4-fs (loop4): 1 truncate cleaned up [ 248.641592][T11847] ext4 filesystem being mounted at /382/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 248.657536][ T851] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 248.668223][ T851] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 248.682204][ T851] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 248.720921][T11847] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2718'. [ 248.898827][T11870] loop3: detected capacity change from 0 to 128 [ 248.907475][T11872] loop4: detected capacity change from 0 to 512 [ 248.932587][T11870] ext4 filesystem being mounted at /573/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 248.947103][T11868] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 248.964234][T11872] ext4 filesystem being mounted at /516/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 248.989345][T11870] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2727'. [ 249.012971][T11872] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2728'. [ 249.028497][T11879] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2730'. [ 249.032821][T11872] gretap0: left allmulticast mode [ 249.042700][T11872] gretap0: left promiscuous mode [ 249.047859][T11872] bridge0: port 3(gretap0) entered disabled state [ 249.065934][T11872] bond0: (slave dummy0): Releasing backup interface [ 249.072094][T11884] netlink: 'syz.5.2731': attribute type 10 has an invalid length. [ 249.090760][T11872] bridge_slave_0: left allmulticast mode [ 249.096477][T11872] bridge_slave_0: left promiscuous mode [ 249.102230][T11872] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.112195][T11872] bridge_slave_1: left allmulticast mode [ 249.118007][T11872] bridge_slave_1: left promiscuous mode [ 249.123829][T11872] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.131791][T11887] netlink: 'syz.5.2731': attribute type 10 has an invalid length. [ 249.143378][T11872] bond0: (slave bond_slave_0): Releasing backup interface [ 249.161064][T11872] bond0: (slave bond_slave_1): Releasing backup interface [ 249.178165][T11872] team0: Port device team_slave_0 removed [ 249.188040][T11872] team0: Port device team_slave_1 removed [ 249.196125][T11872] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 249.203774][T11872] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 249.212954][T11872] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 249.220573][T11872] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 249.231085][T11872] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 249.262824][T11884] bond0: (slave dummy0): Releasing backup interface [ 249.274371][T11884] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 249.283674][T11884] team0: Failed to send options change via netlink (err -105) [ 249.291336][T11884] team0: Port device dummy0 added [ 249.299995][T11887] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 249.347430][T11887] team0: Failed to send options change via netlink (err -105) [ 249.359154][T11887] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 249.369551][T11887] team0: Port device dummy0 removed [ 249.399319][T11887] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 249.420556][ T3593] syz!: Port: 1 Link DOWN [ 249.458798][T11897] serio: Serial port ttyS3 [ 249.492425][T11910] FAULT_INJECTION: forcing a failure. [ 249.492425][T11910] name failslab, interval 1, probability 0, space 0, times 0 [ 249.505275][T11910] CPU: 0 UID: 0 PID: 11910 Comm: syz.1.2740 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 249.505315][T11910] Tainted: [W]=WARN [ 249.505324][T11910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 249.505349][T11910] Call Trace: [ 249.505362][T11910] [ 249.505373][T11910] __dump_stack+0x1d/0x30 [ 249.505462][T11910] dump_stack_lvl+0x95/0xd0 [ 249.505488][T11910] dump_stack+0x15/0x1b [ 249.505513][T11910] should_fail_ex+0x265/0x280 [ 249.505542][T11910] should_failslab+0x8c/0xb0 [ 249.505569][T11910] __kmalloc_noprof+0xb9/0x5a0 [ 249.505620][T11910] ? io_cache_alloc_new+0x2a/0xb0 [ 249.505650][T11910] ? __rcu_read_unlock+0x4f/0x70 [ 249.505676][T11910] io_cache_alloc_new+0x2a/0xb0 [ 249.505724][T11910] io_sendmsg_prep+0x2b0/0x3c0 [ 249.505748][T11910] io_submit_sqes+0x70f/0x11b0 [ 249.505806][T11910] __se_sys_io_uring_enter+0x1bd/0x1a30 [ 249.505847][T11910] ? 0xffffffff81000000 [ 249.505865][T11910] ? __rcu_read_unlock+0x4f/0x70 [ 249.505891][T11910] ? proc_fail_nth_write+0x13b/0x160 [ 249.506000][T11910] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 249.506036][T11910] ? vfs_write+0x7e8/0x960 [ 249.506058][T11910] ? __rcu_read_unlock+0x4f/0x70 [ 249.506090][T11910] ? __fget_files+0x184/0x1c0 [ 249.506139][T11910] ? mutex_unlock+0x4f/0x90 [ 249.506168][T11910] ? fput+0x8f/0xc0 [ 249.506200][T11910] __x64_sys_io_uring_enter+0x78/0x90 [ 249.506301][T11910] x64_sys_call+0x27e4/0x3000 [ 249.506335][T11910] do_syscall_64+0xca/0x2b0 [ 249.506379][T11910] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.506402][T11910] RIP: 0033:0x7fd6aa5af749 [ 249.506417][T11910] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 249.506436][T11910] RSP: 002b:00007fd6a9017038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 249.506527][T11910] RAX: ffffffffffffffda RBX: 00007fd6aa805fa0 RCX: 00007fd6aa5af749 [ 249.506543][T11910] RDX: 0000000000001e43 RSI: 00000000000047f8 RDI: 0000000000000003 [ 249.506559][T11910] RBP: 00007fd6a9017090 R08: 0000000000000000 R09: 0000000000000000 [ 249.506575][T11910] R10: 2000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 249.506591][T11910] R13: 00007fd6aa806038 R14: 00007fd6aa805fa0 R15: 00007fff79d2b9e8 [ 249.506611][T11910] [ 249.764473][ T29] kauditd_printk_skb: 608 callbacks suppressed [ 249.764491][ T29] audit: type=1326 audit(1768393640.344:15045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11914 comm="syz.0.2741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a3666f749 code=0x7ffc0000 [ 249.794601][ T29] audit: type=1326 audit(1768393640.344:15046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11914 comm="syz.0.2741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9a3666f749 code=0x7ffc0000 [ 249.818277][ T29] audit: type=1326 audit(1768393640.344:15047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11914 comm="syz.0.2741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a3666f749 code=0x7ffc0000 [ 249.842078][ T29] audit: type=1326 audit(1768393640.344:15048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11914 comm="syz.0.2741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a3666f749 code=0x7ffc0000 [ 249.866099][ T29] audit: type=1326 audit(1768393640.344:15049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11914 comm="syz.0.2741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9a3666f749 code=0x7ffc0000 [ 249.889892][ T29] audit: type=1326 audit(1768393640.344:15050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11914 comm="syz.0.2741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a3666f749 code=0x7ffc0000 [ 249.913873][ T29] audit: type=1326 audit(1768393640.344:15051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11914 comm="syz.0.2741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9a3666f749 code=0x7ffc0000 [ 249.949545][T11923] FAULT_INJECTION: forcing a failure. [ 249.949545][T11923] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 249.962875][T11923] CPU: 1 UID: 0 PID: 11923 Comm: syz.1.2743 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 249.962914][T11923] Tainted: [W]=WARN [ 249.962923][T11923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 249.963017][T11923] Call Trace: [ 249.963026][T11923] [ 249.963036][T11923] __dump_stack+0x1d/0x30 [ 249.963068][T11923] dump_stack_lvl+0x95/0xd0 [ 249.963095][T11923] dump_stack+0x15/0x1b [ 249.963117][T11923] should_fail_ex+0x265/0x280 [ 249.963147][T11923] should_fail+0xb/0x20 [ 249.963233][T11923] should_fail_usercopy+0x1a/0x20 [ 249.963265][T11923] _copy_to_user+0x20/0xa0 [ 249.963357][T11923] simple_read_from_buffer+0xb5/0x130 [ 249.963434][T11923] proc_fail_nth_read+0x10e/0x150 [ 249.963474][T11923] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 249.963508][T11923] vfs_read+0x1a8/0x770 [ 249.963527][T11923] ? __rcu_read_unlock+0x4f/0x70 [ 249.963588][T11923] ? __fget_files+0x184/0x1c0 [ 249.963610][T11923] ? mutex_lock+0x58/0x90 [ 249.963645][T11923] ksys_read+0xda/0x1a0 [ 249.963733][T11923] __x64_sys_read+0x40/0x50 [ 249.963757][T11923] x64_sys_call+0x2889/0x3000 [ 249.963785][T11923] do_syscall_64+0xca/0x2b0 [ 249.963826][T11923] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.963920][T11923] RIP: 0033:0x7fd6aa5ae15c [ 249.963939][T11923] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 249.963964][T11923] RSP: 002b:00007fd6a9017030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 249.963988][T11923] RAX: ffffffffffffffda RBX: 00007fd6aa805fa0 RCX: 00007fd6aa5ae15c [ 249.964046][T11923] RDX: 000000000000000f RSI: 00007fd6a90170a0 RDI: 0000000000000005 [ 249.964174][T11923] RBP: 00007fd6a9017090 R08: 0000000000000000 R09: 0000000000000000 [ 249.964217][T11923] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 249.964229][T11923] R13: 00007fd6aa806038 R14: 00007fd6aa805fa0 R15: 00007fff79d2b9e8 [ 249.964248][T11923] [ 250.190970][ T29] audit: type=1326 audit(1768393640.354:15052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11914 comm="syz.0.2741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a3666f749 code=0x7ffc0000 [ 250.214877][ T29] audit: type=1326 audit(1768393640.354:15053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11914 comm="syz.0.2741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9a3666f749 code=0x7ffc0000 [ 250.238683][ T29] audit: type=1326 audit(1768393640.354:15054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11914 comm="syz.0.2741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a3666f749 code=0x7ffc0000 [ 250.331189][T11935] bond0: (slave dummy0): Releasing backup interface [ 250.343094][T11935] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 250.361123][T11937] loop3: detected capacity change from 0 to 512 [ 250.363501][T11935] team0: Failed to send options change via netlink (err -105) [ 250.375069][T11935] team0: Port device dummy0 added [ 250.381809][T11940] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 250.391310][T11937] EXT4-fs: Ignoring removed bh option [ 250.412363][T11940] team0: Failed to send options change via netlink (err -105) [ 250.426293][T11943] loop5: detected capacity change from 0 to 512 [ 250.429033][T11937] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 250.451771][T11940] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 250.461319][T11943] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 250.469755][T11943] EXT4-fs (loop5): orphan cleanup on readonly fs [ 250.477009][T11940] team0: Port device dummy0 removed [ 250.483861][T11943] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #16: comm syz.5.2753: corrupted inode contents [ 250.498279][T11937] EXT4-fs (loop3): 1 truncate cleaned up [ 250.499062][T11940] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 250.505921][T11943] EXT4-fs (loop5): Remounting filesystem read-only [ 250.523197][T11943] EXT4-fs (loop5): 1 truncate cleaned up [ 250.529708][ T37] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 250.540448][ T37] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 250.551760][ T37] EXT4-fs (loop5): Quota write (off=8, len=24) cancelled because transaction is not started [ 250.564879][T11943] EXT4-fs mount: 54 callbacks suppressed [ 250.564896][T11943] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 250.648471][ T5495] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 250.710694][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 250.746148][T11964] loop5: detected capacity change from 0 to 1024 [ 250.768527][T11963] loop4: detected capacity change from 0 to 1024 [ 250.775457][T11963] EXT4-fs: Ignoring removed orlov option [ 250.808957][T11964] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 250.844951][T11963] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 250.898744][ T5495] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 250.926970][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.022583][T11984] validate_nla: 2 callbacks suppressed [ 251.022625][T11984] netlink: 'syz.5.2766': attribute type 10 has an invalid length. [ 251.076523][T11986] netlink: 'syz.5.2766': attribute type 10 has an invalid length. [ 251.083716][T11984] bond0: (slave dummy0): Releasing backup interface [ 251.105718][T11984] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 251.119654][T11987] netlink: 'syz.1.2754': attribute type 4 has an invalid length. [ 251.127484][T11987] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2754'. [ 251.155638][T11984] team0: Failed to send options change via netlink (err -105) [ 251.163320][T11984] team0: Port device dummy0 added [ 251.184951][T11989] loop4: detected capacity change from 0 to 512 [ 251.222994][T11989] EXT4-fs error (device loop4): __ext4_iget:5426: inode #11: block 1: comm syz.4.2767: invalid block [ 251.248212][T11989] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.2767: couldn't read orphan inode 11 (err -117) [ 251.250723][T11987] .`: renamed from bond0 (while UP) [ 251.274347][T11989] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 251.343625][T11986] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 251.382857][T11986] team0: Failed to send options change via netlink (err -105) [ 251.398711][T11986] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 251.428106][T11986] team0: Port device dummy0 removed [ 251.437425][T11986] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 251.575154][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.641879][T11995] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 251.655202][T11995] EXT4-fs (loop5): orphan cleanup on readonly fs [ 251.664744][T11995] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #16: comm syz.5.2769: corrupted inode contents [ 251.680206][T11995] EXT4-fs (loop5): Remounting filesystem read-only [ 251.689457][T11993] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 251.706192][T11995] EXT4-fs (loop5): 1 truncate cleaned up [ 251.712340][ T1773] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 251.723129][ T1773] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 251.742515][T12000] siw: device registration error -23 [ 251.771026][ T1773] EXT4-fs (loop5): Quota write (off=8, len=24) cancelled because transaction is not started [ 251.828023][T11995] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 251.869664][ T5495] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.879541][T12005] ================================================================== [ 251.887763][T12005] BUG: KCSAN: data-race in perf_event_set_state / perf_mmap_rb [ 251.895352][T12005] [ 251.897692][T12005] write to 0xffff88812279f1a0 of 8 bytes by task 12011 on cpu 1: [ 251.905605][T12005] perf_mmap_rb+0x71c/0x910 [ 251.910243][T12005] perf_mmap+0x1ce/0x2f0 [ 251.914513][T12005] mmap_region+0x1045/0x1410 [ 251.919134][T12005] do_mmap+0x9b3/0xbe0 [ 251.923310][T12005] vm_mmap_pgoff+0x17a/0x2e0 [ 251.927919][T12005] ksys_mmap_pgoff+0x268/0x310 [ 251.932767][T12005] x64_sys_call+0x16bb/0x3000 [ 251.937475][T12005] do_syscall_64+0xca/0x2b0 [ 251.942011][T12005] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.947919][T12005] [ 251.950282][T12005] read to 0xffff88812279f1a0 of 8 bytes by task 12005 on cpu 0: [ 251.957940][T12005] perf_event_set_state+0x153/0x440 [ 251.963178][T12005] event_sched_out+0x2d4/0x4d0 [ 251.967975][T12005] __pmu_ctx_sched_out+0x3e7/0x530 [ 251.973114][T12005] ctx_sched_out+0x273/0x2d0 [ 251.977749][T12005] task_ctx_sched_out+0x4d/0x70 [ 251.982629][T12005] __perf_event_task_sched_out+0x286/0x370 [ 251.988460][T12005] __schedule+0xbf0/0xcd0 [ 251.992840][T12005] schedule+0x5f/0xd0 [ 251.996876][T12005] schedule_preempt_disabled+0x10/0x20 [ 252.002378][T12005] __mutex_lock+0x4ff/0xe20 [ 252.006928][T12005] __mutex_lock_slowpath+0xa/0x10 [ 252.012126][T12005] mutex_lock+0x89/0x90 [ 252.016320][T12005] perf_poll+0x180/0x1f0 [ 252.020608][T12005] do_select+0x8f1/0xf40 [ 252.024868][T12005] core_sys_select+0x3dc/0x6e0 [ 252.029652][T12005] __se_sys_pselect6+0x213/0x280 [ 252.034713][T12005] __x64_sys_pselect6+0x78/0x90 [ 252.039861][T12005] x64_sys_call+0x2e98/0x3000 [ 252.044670][T12005] do_syscall_64+0xca/0x2b0 [ 252.049389][T12005] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.055506][T12005] [ 252.057849][T12005] value changed: 0x000000000038c145 -> 0x00000000003929d3 [ 252.064974][T12005] [ 252.067410][T12005] Reported by Kernel Concurrency Sanitizer on: [ 252.073577][T12005] CPU: 0 UID: 0 PID: 12005 Comm: syz.4.2772 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 252.084973][T12005] Tainted: [W]=WARN [ 252.088788][T12005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 252.099034][T12005] ================================================================== [ 252.115770][T12011] EXT4-fs (loop4): orphan cleanup on readonly fs [ 252.122885][T12006] loop1: p1 p3 p4 [ 252.138254][T12011] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.2772: bg 0: block 127: padding at end of block bitmap is not set [ 252.166294][T12006] loop1: p4 size 589824 extends beyond EOD, truncated [ 252.201198][T12011] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #15: comm syz.4.2772: corrupted inode contents [ 252.218993][T12011] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 252.227937][T12011] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #15: comm syz.4.2772: corrupted inode contents [ 252.240719][T12011] EXT4-fs error (device loop4): ext4_evict_inode:301: inode #15: comm syz.4.2772: mark_inode_dirty error [ 252.253072][T12011] EXT4-fs (loop4): 1 orphan inode deleted [ 252.263225][T12011] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 252.280270][T12015] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 252.339881][ T5495] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.345874][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 252.360498][ T3569] udevd[3569]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 252.362146][ T3309] udevd[3309]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 252.394439][ T3569] udevd[3569]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 252.397244][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 252.420688][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 252.659036][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.