last executing test programs: 2.854931188s ago: executing program 0 (id=973): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000380), 0x84d03, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0b00000000cf1c7b18"], 0x48) r2 = socket$packet(0x11, 0x3, 0x300) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000002600)=ANY=[@ANYBLOB="180000eaff90e3debea2b627b8000000caa2d46639a7a6d4af402ac2cf6151a9733d9f657357a55ae16246fbb5400fe222e3aab7e3b08f", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x18) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x2c, r5, 0x10ada85e65c25359, 0xfffffffd, 0x25dfdbfd, {{0x6b}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x9}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8441}, 0x4000000) setsockopt$packet_int(r2, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) r7 = getpid() sched_setscheduler(r7, 0x2, 0x0) process_vm_writev(r7, &(0x7f0000000800)=[{&(0x7f0000000600)=""/158, 0x9e}, {&(0x7f00000006c0)=""/156, 0x9c}, {&(0x7f0000000540)=""/89, 0x59}, {&(0x7f00000007c0)=""/9, 0x9}], 0x4, &(0x7f0000001980)=[{&(0x7f0000000840)=""/180, 0xb4}, {&(0x7f0000000900)=""/1, 0x1}, {&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f0000001940)=""/25, 0x19}], 0x4, 0x0) recvmmsg(r2, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000004002000000000f010400", @ANYRES16, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r9, 0x0, 0xffffffffffffffff}, 0x18) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x7, &(0x7f0000000200)=ANY=[@ANYBLOB="18110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b702000000000000850000008600000018610020010000000000000001000000850000008e000000"], &(0x7f0000000240)='syzkaller\x00', 0x5, 0x3f, &(0x7f0000000280)=""/63, 0x41000, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000000300)={0x1, 0x2, 0x9, 0x400}, 0x10, 0x0, 0x0, 0xa, &(0x7f0000000340)=[0x1, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f0000000380)=[{0x2, 0x4, 0x9}, {0x0, 0x3, 0xa, 0x2}, {0x3, 0x1, 0x4, 0x2}, {0x4, 0x4, 0x1, 0x2}, {0x3, 0x2, 0xc}, {0x5, 0x1, 0x1, 0x2}, {0x3, 0x4, 0x4, 0x6}, {0x0, 0x4, 0xe, 0x8}, {0x4, 0x1, 0x4, 0xc}, {0x1, 0x2, 0x1}], 0x10, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000000)='rpcgss_oid_to_mech\x00', r10, 0x0, 0x2}, 0x18) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000007c0)=ANY=[@ANYBLOB="18010000400100000000000000040000850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r11}, 0x10) 1.904247955s ago: executing program 0 (id=991): socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x10) r0 = socket$netlink(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0x35, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x4c58, 0x30000, 0x0, 0x6, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000380)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@max_batch_time={'max_batch_time', 0x3d, 0x131}}, {@mblk_io_submit}, {@quota}]}, 0x3, 0x437, &(0x7f0000000d80)="$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") unlink(&(0x7f0000000180)='./file1\x00') bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setfsgid(0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{0x1}, &(0x7f00000001c0), &(0x7f0000000240)=r1}, 0x20) socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r3 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r3, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000000), r2) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) write$selinux_load(r2, &(0x7f0000000000)=ANY=[], 0x6000) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r4, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x28, 0xfc, 0x0, 0xfffff034}, {0x48}, {0x6, 0x37, 0x0, 0xd}]}, 0x10) io_uring_setup(0x77bb, &(0x7f00000000c0)={0x0, 0xab40, 0x2, 0xf7fffffe, 0x209}) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 1.890508627s ago: executing program 4 (id=992): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ff8000/0x3000)=nil) 1.831929281s ago: executing program 4 (id=993): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000380), 0x84d03, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0b00000000cf1c7b18"], 0x48) r2 = socket$packet(0x11, 0x3, 0x300) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000002600)=ANY=[@ANYBLOB="180000eaff90e3debea2b627b8000000caa2d46639a7a6d4af402ac2cf6151a9733d9f657357a55ae16246fbb5400fe222e3aab7e3b08f", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x18) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x2c, r5, 0x10ada85e65c25359, 0xfffffffd, 0x25dfdbfd, {{0x6b}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x9}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8441}, 0x4000000) setsockopt$packet_int(r2, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) r7 = getpid() sched_setscheduler(r7, 0x2, 0x0) process_vm_writev(r7, &(0x7f0000000800)=[{&(0x7f0000000600)=""/158, 0x9e}, {&(0x7f00000006c0)=""/156, 0x9c}, {&(0x7f0000000540)=""/89, 0x59}, {&(0x7f00000007c0)=""/9, 0x9}], 0x4, &(0x7f0000001980)=[{&(0x7f0000000840)=""/180, 0xb4}, {&(0x7f0000000900)=""/1, 0x1}, {&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f0000001940)=""/25, 0x19}], 0x4, 0x0) recvmmsg(r2, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) 1.5939874s ago: executing program 0 (id=997): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000380), 0x84d03, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0b00000000cf1c7b18"], 0x48) r2 = socket$packet(0x11, 0x3, 0x300) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000002600)=ANY=[@ANYBLOB="180000eaff90e3debea2b627b8000000caa2d46639a7a6d4af402ac2cf6151a9733d9f657357a55ae16246fbb5400fe222e3aab7e3b08f", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x18) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x2c, r5, 0x10ada85e65c25359, 0xfffffffd, 0x25dfdbfd, {{0x6b}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x9}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8441}, 0x4000000) setsockopt$packet_int(r2, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) r7 = getpid() sched_setscheduler(r7, 0x2, 0x0) process_vm_writev(r7, &(0x7f0000000800)=[{&(0x7f0000000600)=""/158, 0x9e}, {&(0x7f00000006c0)=""/156, 0x9c}, {&(0x7f0000000540)=""/89, 0x59}, {&(0x7f00000007c0)=""/9, 0x9}], 0x4, &(0x7f0000001980)=[{&(0x7f0000000840)=""/180, 0xb4}, {&(0x7f0000000900)=""/1, 0x1}, {&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f0000001940)=""/25, 0x19}], 0x4, 0x0) recvmmsg(r2, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000004002000000000f010400", @ANYRES16, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r9, 0x0, 0xffffffffffffffff}, 0x18) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x7, &(0x7f0000000200)=ANY=[@ANYBLOB="18110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b702000000000000850000008600000018610020010000000000000001000000850000008e000000"], &(0x7f0000000240)='syzkaller\x00', 0x5, 0x3f, &(0x7f0000000280)=""/63, 0x41000, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000000300)={0x1, 0x2, 0x9, 0x400}, 0x10, 0x0, 0x0, 0xa, &(0x7f0000000340)=[0x1, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f0000000380)=[{0x2, 0x4, 0x9}, {0x0, 0x3, 0xa, 0x2}, {0x3, 0x1, 0x4, 0x2}, {0x4, 0x4, 0x1, 0x2}, {0x3, 0x2, 0xc}, {0x5, 0x1, 0x1, 0x2}, {0x3, 0x4, 0x4, 0x6}, {0x0, 0x4, 0xe, 0x8}, {0x4, 0x1, 0x4, 0xc}, {0x1, 0x2, 0x1}], 0x10, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000000)='rpcgss_oid_to_mech\x00', r10, 0x0, 0x2}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000007c0)=ANY=[@ANYBLOB="18010000400100000000000000040000850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) 1.426564934s ago: executing program 3 (id=1001): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x8, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) recvmmsg(0xffffffffffffffff, &(0x7f0000007700), 0x318, 0xfc0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000001440), 0x0, 0x0) readv(r3, &(0x7f0000001180)=[{&(0x7f0000000000)=""/186, 0xba}], 0x1) 972.327791ms ago: executing program 4 (id=1010): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000002200)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001080)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'syzkaller0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040000}, 0x100) 859.039821ms ago: executing program 4 (id=1014): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x80) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000000000000"], 0x0, 0xe}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd']) 855.167291ms ago: executing program 1 (id=1015): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = gettid() r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000700), 0x0) read(r2, &(0x7f0000000200)=""/202, 0xca) tkill(r1, 0x7) 827.118433ms ago: executing program 4 (id=1016): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="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", 0x0, 0x8, 0x60000000}, 0x1e) 820.737703ms ago: executing program 2 (id=1017): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x12, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1e, 0x9, 0x78, 0x3, 0x7fffffff, 0xd, 0xffff, 0x2, 0xca9e}}}}]}, 0x58}}, 0x4000010) 795.804395ms ago: executing program 2 (id=1018): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="020000000400000008000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x12, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r2}, 0x10) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000f40)=@mangle={'mangle\x00', 0x44, 0x6, 0x4e0, 0x130, 0x0, 0x200, 0x398, 0x98, 0x448, 0x448, 0x448, 0x448, 0x448, 0x6, 0x0, {[{{@ip={@local, @broadcast, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00', {0xff}, {}, 0x0, 0x0, 0x18}, 0x0, 0x70, 0x98, 0x0, {0x0, 0x2000000}}, @inet=@DSCP={0x28}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @private=0xa010101, 0x0, 0x0, 'dvmrp0\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0, 0x0, {}, [@common=@unspec=@time={{0x38}, {0xffffffff, 0x8000, 0x8d84, 0xcafc, 0xffffff8e, 0x70, 0x1}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@loopback, @local, 0x0, 0x0, 'geneve0\x00', 'veth1_to_team\x00', {}, {}, 0x0, 0x0, 0x3}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'system_u:object_r:dbusd_etc_t:s0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3, 0x8, @ipv4=@multicast1, 0x5e20}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x540) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1e, 0x9, 0x78, 0x3, 0x7fffffff, 0xd, 0xffff, 0x2, 0xca9e}}}}]}, 0x58}}, 0x4000010) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8943, &(0x7f0000000100)={'macvtap0\x00', @random='\x00\x00\b\x00'}) 746.22427ms ago: executing program 4 (id=1019): syz_mount_image$ext4(&(0x7f0000000180)='ext3\x00', &(0x7f0000000200)='./file1\x00', 0x0, &(0x7f0000000580), 0xfe, 0x507, &(0x7f0000001780)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000013c0)=ANY=[@ANYBLOB, @ANYRESHEX=r0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, &(0x7f0000000000)=0x2a, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) set_mempolicy_home_node(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000000c0)="010001000000000000001000015b097ead85847817353d2dbad05dd5", 0x1c, 0xfffffffffffffffd) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f00000083c0)={{0x1}}) r3 = gettid() bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x0}, 0x94) syz_io_uring_setup(0x102c0c, &(0x7f0000000400)={0x0, 0xfffffffc, 0x400, 0x3, 0xfffffffd, 0x0, r0}, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x38, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x2, 0x1, 0x8, 0x1020005, 0x2b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) wait4(r4, 0x0, 0x40000000, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) read(r2, &(0x7f00000003c0)=""/4096, 0x1000) 719.074631ms ago: executing program 2 (id=1020): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = socket(0x10, 0x3, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) openat$selinux_validatetrans(0xffffffffffffff9c, 0x0, 0x1, 0x0) setpriority(0x1, 0x0, 0x8) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4}, 0x4) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000040), 0xfe, 0x4f2, &(0x7f0000000b00)="$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") socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x7}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @counter={{0xc}, @void}}]}, @NFT_MSG_NEWSETELEM={0x50, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x24, 0x3, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x14, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @objref={{0xb}, @void}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xe4}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) add_key(&(0x7f0000000300)='dns_resolver\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000200)="75a1d70300", 0x5, 0xfffffffffffffffe) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r5}, 0x10) connect$inet6(r3, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000180)=@gcm_256={{0x304}, "67c3f71bb8188109", "2c9e910757c2725dd5795f705ac44b9d43498e33fe93a0c9001c5c65f7107d0d", "ddfb00", "5a3e2c1b40238e79"}, 0x38) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0x2}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x10, 0x3, 0x1, 0x3, 0x800400, 0x8}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x2}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40001d4}, 0x8840) 710.044382ms ago: executing program 0 (id=1021): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x2e3, &(0x7f0000000280)="$eJzs3M9LG2kYwPEnMYkxoslh2WUXFh92L7uXQbP3paEolAYq1pT+gNJRJ23INJFMsKSU2p56Lf0jehCP3oTWf8BLbz310puXQg/1UDol8yNGjdXGH/HH9wPyvvq8T+Z9Z1Sed2Bm4+bLh+WiYxTNukSTKhERkU2RjEQlFAnaqNdPSLtn8u/g5/d/Xr91+2ounx+fUp3ITf+XVdXhkTePngwEw1b7ZT1zd+NT9uP6r+u/b3ybflBytORopVpXU2eqH+rmjG3pXMkpG6qTtmU6lpYqjlXz41U/XrSr8/MNNStzQ6n5muU4alYaWrYaWq9qvdZQ875ZqqhhGDqUEuynsDQ1Zea6TJ494sngmNRqObNPRAZ2RQpLPZkQAADoqaD+b1X70WZJ3039H+tY/y//tVYfvLEyHNT/q4lm/S/SVv/f2/qsbfV/UkSOvf7fXRGdL6774/ih6n+cEc36PxX8/Xqe31ke9TrU/wAAAAAAAAAAAAAAAAAAAAAAnAWbrpt2XTcdtuFXv4gkvSdI/O97PU8cD67/xbb14o7YsIj9YqGwUPDbYMCaiNhiyaik5av3+xBo9hOi3iBtyshbezHIX1wo9HmRXFFKXv6YpCWzM991J67kx8fUtz0/Lqn2/Kyk5ZfO+dmd+fFmm5B//m7LNyQt72alKrbMBU/GhflPx1QvX8vvOP6ANw4AAAAAgPPA0JbW/r2/PW7sjvv7Yz/e2l93vD/g769HO+7vY/JHrFerBgAAAADgYnEaj8umbVu1c9cJV3jQrPC9xnuMiUhkr9ARdMKDn4JTFz/QGYt2NdWRxE9elI6d8LbRXmNksptPdtMihz2Hv716/eXorsX/K8l9VtptJ7HfSuMn9x8IAAAAwEnZKvrDn1zq7YQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALiATuLFcr1eIwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHBafA8AAP//ohEIjg==") r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001480)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r2}, 0x18) ftruncate(r0, 0x2007ffc) sendfile(r0, r0, 0x0, 0x800000009) 581.796463ms ago: executing program 0 (id=1022): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1018e58, &(0x7f00000001c0), 0x6, 0x623, &(0x7f0000001fc0)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0x5c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x94) close(0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1e, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000356000)=0x1, 0x4) connect$inet6(r0, 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000300), 0x100, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r5, 0x0, 0x7}, 0x18) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0x3}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xe5}}}]}, 0x38}}, 0x4080) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000ac0)=@newtfilter={0x104, 0x2c, 0xd2b, 0x70bd2b, 0x35dfdbfb, {0x0, 0x0, 0x0, r3, {0xf}, {}, {0xe, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0xd8, 0x2, [@TCA_U32_SEL={0xd4, 0x5, {0x3, 0x8, 0xd, 0x4, 0x7ff, 0x365, 0x7, 0x6, [{0x1, 0xffff, 0x7706, 0x18}, {0x7fffffff, 0x8, 0xd7, 0x3}, {0x3, 0x2, 0xea9a, 0x6}, {0x7, 0x9, 0x1, 0x9}, {0xf, 0x3a1, 0x8, 0x405}, {0x10000, 0x9, 0x6, 0x7fffffff}, {0x4, 0x0, 0x80, 0x40}, {0x43, 0x5, 0x5, 0x4}, {0xfffffffb, 0x5, 0xff, 0x9}, {0x11, 0x7f, 0x1, 0x8}, {0x5, 0x6, 0x80, 0x3000}, {0x6, 0xc25a0, 0x3, 0x1000}]}}]}}]}, 0x104}}, 0x24040084) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)}, 0x0) 535.062106ms ago: executing program 1 (id=1023): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1018e58, &(0x7f00000001c0), 0x6, 0x623, &(0x7f0000001fc0)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0x5c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x94) close(0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1e, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000356000)=0x1, 0x4) connect$inet6(r0, 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r4, 0x0, 0x7}, 0x18) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0x3}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xe5}}}]}, 0x38}}, 0x4080) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000ac0)=@newtfilter={0x30, 0x2c, 0xd2b, 0x70bd2b, 0x35dfdbfb, {0x0, 0x0, 0x0, r2, {0xf}, {}, {0xe, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}}, 0x24040084) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)}, 0x0) 517.889208ms ago: executing program 3 (id=1024): symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00') syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x800000, &(0x7f0000000500)=ANY=[@ANYRES8=0x0, @ANYRESOCT, @ANYRESOCT, @ANYRES32, @ANYBLOB="b7ad7cd65c46a5be7840094fc88ed3944440d445ac89758d3aa4a6c77ea3e1e50196a99f88ba68f3377383de4de11c07aa5d22d9f4f3c58344d6011b6ea5ee82cf40e4ca5976370cb73c872e576f936791a0ffa5639ac237214be5926acea5405e00f1a144cf7a5240bc1e56ed617e19d6a5a268505f0012b4baf36d3a71eb34c8b67281dbba4b20c3d724ef150deff6f7d908bc72575a1f43b608e0d118", @ANYBLOB="a1fffd2e4c38a7b17fef1a78ad1943012e7b7711a1517cd8b4288a2fbb7d202d8c4a1809add074e6dde0703158125f2f114c49f5ee5f249d63ac0d851c212ccd8d82b7c694ead23c417021e8bc78d646d07e3513568bb81d2179a012dcdcb845b0a58b6d5e46a177de56e3e77ed573967e4eea299078019693ca486edbaa44e947802c7f46f1de18cf7f0e1af02964d04cc84d979855e8d3a3fda262f6a7d2b4b4849fd880c9b9af9be818ba05386754a3505e833ca0b9770f63e91f3a9a04e9fca51d88273d5491ed", @ANYRES8=0x0], 0x3, 0x7ec, &(0x7f0000001580)="$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") (fail_nth: 1) 496.99747ms ago: executing program 1 (id=1025): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000002200)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001080)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'syzkaller0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040000}, 0x100) 477.820611ms ago: executing program 2 (id=1026): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001080)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'syzkaller0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040000}, 0x100) 394.194938ms ago: executing program 3 (id=1027): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x14) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000"], 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0xc, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x4}, [@cb_func={0x18, 0xa, 0x4, 0x0, 0x2}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x800003}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x8}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f0000000300)='GPL\x00', 0x24, 0xea, &(0x7f00000004c0)=""/234, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x3, 0x1, 0x51f0, 0x7}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[r1, r1, r1, r1, r1, r1, r1], 0x0, 0x10, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000200)='rxrpc_tx_packet\x00', r2, 0x0, 0x100000001}, 0x18) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) r7 = gettid() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, r6, 0x1, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_PID={0x8, 0x1c, r7}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) mmap(&(0x7f000090e000/0x4000)=nil, 0x4000, 0x100000a, 0x13, 0xffffffffffffffff, 0x86e45000) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x25c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0xee8f010b3d1e850f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xe8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r9}, 0x10) r10 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fstatfs(r10, &(0x7f0000000700)=""/147) r11 = shmget$private(0x0, 0x3000, 0x800, &(0x7f0000ffc000/0x3000)=nil) shmat(r11, &(0x7f0000000000/0x4000)=nil, 0x6000) get_mempolicy(0x0, 0x0, 0xf, &(0x7f0000001000/0x3000)=nil, 0x2) r12 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYRESDEC=r0, @ANYBLOB="06a84ce5023f36e9ca7b8d4997cf44f225107f69d56ff0dea6841f3ff75ba9f4066a281d94105240ce"], 0x50) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x28, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kfree\x00', r13}, 0x18) r14 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r14, 0x0, 0x4}, 0x18) 393.901058ms ago: executing program 3 (id=1028): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x80) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200000000000000"], 0x0, 0xe}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd']) 345.326812ms ago: executing program 3 (id=1029): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = socket(0x10, 0x3, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) openat$selinux_validatetrans(0xffffffffffffff9c, 0x0, 0x1, 0x0) setpriority(0x1, 0x0, 0x8) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4}, 0x4) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000040), 0xfe, 0x4f2, &(0x7f0000000b00)="$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") socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x7}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @counter={{0xc}, @void}}]}, @NFT_MSG_NEWSETELEM={0x50, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x24, 0x3, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x14, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @objref={{0xb}, @void}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xe4}, 0x1, 0x0, 0x0, 0x8000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) add_key(&(0x7f0000000300)='dns_resolver\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000200)="75a1d70300", 0x5, 0xfffffffffffffffe) connect$inet6(r3, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000180)=@gcm_256={{0x304}, "67c3f71bb8188109", "2c9e910757c2725dd5795f705ac44b9d43498e33fe93a0c9001c5c65f7107d0d", "ddfb00", "5a3e2c1b40238e79"}, 0x38) sendmsg$nl_route_sched(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0x2}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x10, 0x3, 0x1, 0x3, 0x800400, 0x8}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x2}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40001d4}, 0x8840) 326.521244ms ago: executing program 1 (id=1030): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000f40)=@mangle={'mangle\x00', 0x44, 0x6, 0x4e0, 0x130, 0x0, 0x200, 0x398, 0x98, 0x448, 0x448, 0x448, 0x448, 0x448, 0x6, 0x0, {[{{@ip={@local, @broadcast, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00', {0xff}, {}, 0x0, 0x0, 0x18}, 0x0, 0x70, 0x98, 0x0, {0x0, 0x2000000}}, @inet=@DSCP={0x28}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @private=0xa010101, 0x0, 0x0, 'dvmrp0\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0, 0x0, {}, [@common=@unspec=@time={{0x38}, {0xffffffff, 0x8000, 0x8d84, 0xcafc, 0xffffff8e, 0x70, 0x1}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@loopback, @local, 0x0, 0x0, 'geneve0\x00', 'veth1_to_team\x00', {}, {}, 0x0, 0x0, 0x3}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'system_u:object_r:dbusd_etc_t:s0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3, 0x8, @ipv4=@multicast1, 0x5e20}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x540) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1e, 0x9, 0x78, 0x3, 0x7fffffff, 0xd, 0xffff, 0x2, 0xca9e}}}}]}, 0x58}}, 0x4000010) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000000100)={'macvtap0\x00', @random='\x00\x00\b\x00'}) 305.026245ms ago: executing program 2 (id=1031): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x2e3, &(0x7f0000000280)="$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") r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000001480)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) sendfile(r0, r0, 0x0, 0x800000009) 241.653871ms ago: executing program 1 (id=1032): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = gettid() r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000700), 0x0) read(r2, &(0x7f0000000200)=""/202, 0xca) tkill(r1, 0x7) 35.178337ms ago: executing program 1 (id=1033): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = gettid() r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000700), 0x0) read(r3, &(0x7f0000000200)=""/202, 0xca) tkill(r2, 0x7) 31.897787ms ago: executing program 3 (id=1034): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00'}, 0x10) r0 = perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000180)='cpu==0||!') 7.271879ms ago: executing program 0 (id=1035): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x400}, 0x100002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000480)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r2, 0x0, 0x8}, 0x18) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={0xffffffffffffffff, 0xfffffffe}, 0xc) sendmsg$NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, &(0x7f0000002300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x240088c0}, 0x54) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000000)={0x18, 0x0, {0x4, @multicast, 'vcan0\x00'}}, 0x1e) sendmmsg(r3, &(0x7f0000002a40)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)='G', 0x1}], 0x1, &(0x7f0000002c00)=ANY=[], 0x3d8}}], 0x1, 0x40884) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000380)={[{@grpid}, {@grpquota}], [{@smackfsfloor={'smackfsfloor', 0x3d, '9p\x00'}}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@appraise_type}]}, 0x4, 0x4f4, &(0x7f0000000bc0)="$eJzs3c9vVFsdAPDvnXZoKQMFZaFGBRFFQ5j+ABqCC2GjMYTESFy5gNoOTdMZpum0SCuLsnRvIokr/RPcuTBh5cKdO925wYUJKnkv9CVvMS/3zqUd2g7te7Qd6Hw+yZ17z7nDfM+Z4Zxz74GZE0DPOhsRqxFxJCLuRcRwnp/kW9xobenzXr18PLX28vFUEs3mnf8l2fk0L9r+TOpY/pqDEfGzH0f8Mtkat7G8MjdZrVYW8vTIYm1+pLG8cmm2kOeMT4xNjF67fHV8z+p6pvanFz+avfXzv/z5G8//vvr9X6fFKv3meHauvR57qVX1YpTa8voj4tZ+BOuS/vzvDx+etLV9KSLOZe1/OPqyTxMAOMyazeFoDrenAYDDLr3/L0VSKOdzAaUoFMrl1hze6RgqVOuNxYvD9aUH05HNYZ2MYuH+bLUyms8VnoxikqbHsuON9Pim9OWIOBURvx04mqXLU/XqdDcvfACghx3bNP5/PNAa/wGAQ26w2wUAAA6c8R8Aeo/xHwB6z+cY/307EAAOCff/ANB7jP8A0Ht2HP+fHEw5AIAD8dPbt9OtuZb//vX0w+WlH5QeXpquNObKtaWp8lR9Yb48U6/PVCvlqWZzp9er1uvzY1fWk43llbu1+tKDxbuztcmZyt1KcZ/rAwDs7NSZZ/9MImL1+tFsi7a1HIzVcLgVul0AoGv6ul0AoGve+D6P/wcEPWUX9/imAeCQ22aJ3jd0vDR4avFX+FBd+Kr5f+hV5v+hd32x+f8f7nk5gIPn97ygdzWbiTX/AaDHmOMH3unf/wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKBHlbItKZSztcBX08dCuRxxPCJORjG5P1utjEbEiYj4x0BxIE2PdbvQAMA7Kvwnydf/ujB8vrT57JHkk4FsHxG/+v2d3z2aXFxcGEvz/7+ev/g0zx8/0o0KAADtbmzNao3T+b7tRv7Vy8dTr7eDLOKLm63FRdO4a/nWOtMf/dl+MIoRMfRRkqdb0uuVvj2Iv/okIr6yUf9HbRFK2RxIa+XTzfHT2Mf3If7G+785fuGN+IXsXLovZu/Fl/egLNBrnt1s9ZN520ubWN7+CnE222/f/gezHurdve7/1rb0f4X1/q9vS/wka/Nn19NvL8mLK3/9yZbM5nDr3JOIr/VvFz9Zj5906H/P77KO//r6N891Otf8Q8SF2D5+Sy3rZkcWa/MjjeWVS7O1yZnKTOXB+PjE2MTotctXx0eyOerW49+2i/Hf6xdPdIqf1n+oQ/zBHer/nV3W/4+f3vvFt94S/3vf3v7zP/2W+OmY+N1dxp8cutFx+e40/nSH+m/3+b8ec9O8i7uM//zfK9O7fCoAcAAayytzk9VqZWGHg/Rac6fnOPgwD2I14j0ohoP36qDbPROw3zYafbdLAgAAAAAAAAAAAAAAdNJYXpkbiP39OlG36wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDh9VkAAAD//ykCzv4=") openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) open(&(0x7f0000000740)='./bus\x00', 0x143c62, 0x0) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') 0s ago: executing program 2 (id=1036): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1018e58, &(0x7f00000001c0), 0x6, 0x623, &(0x7f0000001fc0)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0x5c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x94) close(0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1e, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000356000)=0x1, 0x4) connect$inet6(r0, 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r4, 0x0, 0x7}, 0x18) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0x3}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xe5}}}]}, 0x38}}, 0x4080) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000ac0)=@newtfilter={0x30, 0x2c, 0xd2b, 0x70bd2b, 0x35dfdbfb, {0x0, 0x0, 0x0, r2, {0xf}, {}, {0xe, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}}, 0x24040084) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)}, 0x0) kernel console output (not intermixed with test programs): h(7, /dev/loop4p3, 10) failed: No such file or directory [ 44.603159][ T4092] udevd[4092]: inotify_add_watch(7, /dev/loop4p7, 10) failed: No such file or directory [ 44.603299][ T3523] udevd[3523]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 44.623829][ T3290] udevd[3290]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 44.633997][ T4353] netlink: 60 bytes leftover after parsing attributes in process `syz.3.283'. [ 44.637171][ T29] audit: type=1326 audit(1753839601.222:1099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4350 comm="syz.2.282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7afa64e9a9 code=0x7ffc0000 [ 44.666182][ T29] audit: type=1326 audit(1753839601.222:1100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4350 comm="syz.2.282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7afa64e9a9 code=0x7ffc0000 [ 44.668197][ T4353] loop3: detected capacity change from 0 to 512 [ 44.702445][ T4364] loop0: detected capacity change from 0 to 128 [ 44.713417][ T4349] ext4 filesystem being mounted at /56/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 44.725654][ T4351] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 44.746191][ T29] audit: type=1326 audit(1753839601.352:1101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4350 comm="syz.2.282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7afa64e9a9 code=0x7ffc0000 [ 44.776103][ T29] audit: type=1326 audit(1753839601.352:1102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4350 comm="syz.2.282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7afa64e9a9 code=0x7ffc0000 [ 44.799708][ T29] audit: type=1326 audit(1753839601.352:1103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4350 comm="syz.2.282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7afa64e9a9 code=0x7ffc0000 [ 44.811236][ T4091] udevd[4091]: inotify_add_watch(7, /dev/loop4p7, 10) failed: No such file or directory [ 44.826286][ T4353] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 44.875560][ T4364] ext4 filesystem being mounted at /56/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 44.941063][ T4353] ext4 filesystem being mounted at /52/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 45.100941][ T4393] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 45.110360][ T4394] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 45.174753][ T4398] loop2: detected capacity change from 0 to 512 [ 45.200973][ T4398] ext4: Unknown parameter 'smackfsroot' [ 45.318115][ T4409] loop4: detected capacity change from 0 to 1024 [ 45.331643][ T4412] Zero length message leads to an empty skb [ 45.377724][ T4401] loop3: detected capacity change from 0 to 512 [ 45.401554][ T4401] ext4: Unknown parameter 'smackfsfloor' [ 45.500255][ T4424] loop2: detected capacity change from 0 to 512 [ 45.540272][ T4424] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 45.669809][ T4426] netlink: 'syz.3.301': attribute type 1 has an invalid length. [ 45.677552][ T4426] netlink: 224 bytes leftover after parsing attributes in process `syz.3.301'. [ 45.725378][ T4436] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 45.799371][ T4380] netlink: 'syz.1.285': attribute type 39 has an invalid length. [ 45.814971][ T4438] loop3: detected capacity change from 0 to 128 [ 45.825505][ T4438] ext4 filesystem being mounted at /56/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 45.939502][ T4441] loop0: detected capacity change from 0 to 512 [ 45.977380][ T4446] loop3: detected capacity change from 0 to 512 [ 45.984693][ T4441] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 46.008262][ T4448] 9pnet_fd: Insufficient options for proto=fd [ 46.022559][ T4441] EXT4-fs (loop0): 1 truncate cleaned up [ 46.028472][ T4446] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 46.056852][ T4446] EXT4-fs (loop3): 1 truncate cleaned up [ 46.129905][ T4454] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 46.197511][ T4456] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 46.227942][ T4458] siw: device registration error -23 [ 46.312074][ T4462] loop4: detected capacity change from 0 to 8192 [ 46.353307][ T4462] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 46.384045][ T4469] loop0: detected capacity change from 0 to 2048 [ 46.398391][ T4471] loop2: detected capacity change from 0 to 2048 [ 46.422362][ T4473] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=8192 sclass=netlink_tcpdiag_socket pid=4473 comm=syz.1.318 [ 46.505787][ T3290] Alternate GPT is invalid, using primary GPT. [ 46.512215][ T3290] loop0: p2 p3 p7 [ 46.527582][ T4480] netlink: 60 bytes leftover after parsing attributes in process `syz.1.319'. [ 46.546191][ T4471] Alternate GPT is invalid, using primary GPT. [ 46.552538][ T4471] loop2: p2 p3 p7 [ 46.572922][ T4469] Alternate GPT is invalid, using primary GPT. [ 46.579263][ T4469] loop0: p2 p3 p7 [ 46.583183][ T4482] loop1: detected capacity change from 0 to 512 [ 46.589467][ T4462] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1052) [ 46.598318][ T4462] FAT-fs (loop4): Filesystem has been set read-only [ 46.605181][ T4462] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1052) [ 46.614117][ T4462] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1052) [ 46.629604][ T4482] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 46.675506][ T4482] ext4 filesystem being mounted at /65/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 46.716195][ T4486] netlink: 28 bytes leftover after parsing attributes in process `syz.2.320'. [ 46.767048][ T4488] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 46.781214][ T4486] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 46.832687][ T4490] siw: device registration error -23 [ 46.872365][ T4494] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 46.962511][ T4504] loop1: detected capacity change from 0 to 1024 [ 46.973372][ T4506] loop2: detected capacity change from 0 to 128 [ 47.000712][ T4504] EXT4-fs (loop1): invalid first ino: 9 [ 47.083690][ T4510] netlink: 60 bytes leftover after parsing attributes in process `syz.2.333'. [ 47.085426][ T4512] loop0: detected capacity change from 0 to 2048 [ 47.099138][ T4510] loop2: detected capacity change from 0 to 512 [ 47.107163][ T4510] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 47.127285][ T4517] 9pnet_fd: Insufficient options for proto=fd [ 47.139081][ T4510] ext4 filesystem being mounted at /67/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 47.161943][ T3290] Alternate GPT is invalid, using primary GPT. [ 47.168306][ T3290] loop0: p2 p3 p7 [ 47.188906][ T4512] Alternate GPT is invalid, using primary GPT. [ 47.195372][ T4512] loop0: p2 p3 p7 [ 47.217037][ T4524] loop3: detected capacity change from 0 to 8192 [ 47.276058][ T2989] Alternate GPT is invalid, using primary GPT. [ 47.282391][ T2989] loop0: p2 p3 p7 [ 47.393855][ T4530] loop1: detected capacity change from 0 to 8192 [ 47.427546][ T4535] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 47.457937][ T4530] netlink: 12 bytes leftover after parsing attributes in process `syz.1.339'. [ 47.493338][ T4540] loop0: detected capacity change from 0 to 128 [ 47.532631][ T4545] loop2: detected capacity change from 0 to 128 [ 47.545872][ T4544] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 47.637261][ T4549] syz.2.344: attempt to access beyond end of device [ 47.637261][ T4549] loop2: rw=0, sector=97, nr_sectors = 120 limit=128 [ 47.700726][ T51] kworker/u8:3: attempt to access beyond end of device [ 47.700726][ T51] loop2: rw=1, sector=217, nr_sectors = 824 limit=128 [ 47.803528][ T4556] loop0: detected capacity change from 0 to 1024 [ 47.821287][ T4551] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 48.076676][ T4570] loop3: detected capacity change from 0 to 128 [ 48.129819][ T4573] loop0: detected capacity change from 0 to 1024 [ 48.192133][ T4576] syz.3.355: attempt to access beyond end of device [ 48.192133][ T4576] loop3: rw=2049, sector=169, nr_sectors = 48 limit=128 [ 48.219880][ T4582] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 48.242927][ T1796] kworker/u8:6: attempt to access beyond end of device [ 48.242927][ T1796] loop3: rw=1, sector=217, nr_sectors = 824 limit=128 [ 48.285975][ T4589] loop0: detected capacity change from 0 to 512 [ 48.295034][ T4588] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 48.335440][ T4585] netlink: 60 bytes leftover after parsing attributes in process `syz.2.363'. [ 48.354328][ T4589] ext4 filesystem being mounted at /71/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 48.366516][ T4585] loop2: detected capacity change from 0 to 512 [ 48.391883][ T4585] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 48.420647][ T4585] ext4 filesystem being mounted at /73/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 48.425249][ T4603] loop1: detected capacity change from 0 to 1024 [ 48.435162][ T4589] EXT4-fs error (device loop0): ext4_do_update_inode:5563: inode #2: comm syz.0.361: corrupted inode contents [ 48.442026][ T4606] netlink: 28 bytes leftover after parsing attributes in process `syz.4.368'. [ 48.483201][ T4606] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 48.487403][ T4589] EXT4-fs error (device loop0): ext4_dirty_inode:6454: inode #2: comm syz.0.361: mark_inode_dirty error [ 48.502264][ T4600] loop3: detected capacity change from 0 to 8192 [ 48.510445][ T4589] EXT4-fs error (device loop0): ext4_do_update_inode:5563: inode #2: comm syz.0.361: corrupted inode contents [ 48.647709][ T4617] loop1: detected capacity change from 0 to 128 [ 48.694201][ T4619] loop2: detected capacity change from 0 to 512 [ 48.706226][ T4619] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 48.723198][ T4619] EXT4-fs (loop2): 1 truncate cleaned up [ 48.981368][ T4621] syz.1.370: attempt to access beyond end of device [ 48.981368][ T4621] loop1: rw=0, sector=97, nr_sectors = 120 limit=128 [ 49.040386][ T4626] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 49.083148][ T51] kworker/u8:3: attempt to access beyond end of device [ 49.083148][ T51] loop1: rw=1, sector=217, nr_sectors = 824 limit=128 [ 49.124379][ T4628] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 49.163521][ T4631] loop2: detected capacity change from 0 to 1024 [ 49.176137][ T4614] netlink: 'syz.4.371': attribute type 39 has an invalid length. [ 49.204453][ T4637] netlink: 28 bytes leftover after parsing attributes in process `syz.0.379'. [ 49.216975][ T4636] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 49.272571][ T4637] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 49.296158][ T4641] loop1: detected capacity change from 0 to 128 [ 49.328469][ T4641] ext4 filesystem being mounted at /87/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 49.396843][ T4646] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 49.417534][ T4648] siw: device registration error -23 [ 49.533211][ T29] kauditd_printk_skb: 473 callbacks suppressed [ 49.533231][ T29] audit: type=1400 audit(1753839606.172:1577): avc: denied { read write } for pid=4654 comm="syz.1.387" name="rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 49.563511][ T29] audit: type=1400 audit(1753839606.172:1578): avc: denied { open } for pid=4654 comm="syz.1.387" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 49.597156][ T4659] loop2: detected capacity change from 0 to 2048 [ 49.611076][ T4656] hub 9-0:1.0: USB hub found [ 49.615980][ T4656] hub 9-0:1.0: 8 ports detected [ 49.623239][ T4658] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 49.624715][ T4662] 9pnet_fd: Insufficient options for proto=fd [ 49.653985][ T3484] loop2: p1 < > p2 p3 < > p4 [ 49.658774][ T3484] loop2: partition table partially beyond EOD, truncated [ 49.665959][ T3484] loop2: p1 start 4278190080 is beyond EOD, truncated [ 49.672792][ T3484] loop2: p2 start 16908800 is beyond EOD, truncated [ 49.679423][ T3484] loop2: p3 start 15794176 is beyond EOD, truncated [ 49.702394][ T4659] loop2: p1 < > p2 p3 < > p4 [ 49.703877][ T4664] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 49.707092][ T4659] loop2: partition table partially beyond EOD, truncated [ 49.722314][ T4670] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 49.733116][ T4659] loop2: p1 start 4278190080 is beyond EOD, truncated [ 49.740046][ T4659] loop2: p2 start 16908800 is beyond EOD, truncated [ 49.746782][ T4659] loop2: p3 start 15794176 is beyond EOD, truncated [ 49.831578][ T4666] netlink: 4 bytes leftover after parsing attributes in process `syz.4.393'. [ 49.840904][ T4671] loop3: detected capacity change from 0 to 8192 [ 49.850703][ T4666] netlink: 'syz.4.393': attribute type 1 has an invalid length. [ 49.858383][ T4666] netlink: 224 bytes leftover after parsing attributes in process `syz.4.393'. [ 49.874848][ T29] audit: type=1326 audit(1753839606.512:1579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4665 comm="syz.4.393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa67354e9a9 code=0x7ffc0000 [ 49.898598][ T29] audit: type=1326 audit(1753839606.512:1580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4665 comm="syz.4.393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fa67354e9a9 code=0x7ffc0000 [ 49.899149][ T4681] loop2: detected capacity change from 0 to 2048 [ 49.921915][ T29] audit: type=1326 audit(1753839606.512:1581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4665 comm="syz.4.393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa67354e9a9 code=0x7ffc0000 [ 49.951647][ T29] audit: type=1326 audit(1753839606.512:1582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4665 comm="syz.4.393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7fa67354e9a9 code=0x7ffc0000 [ 49.975012][ T29] audit: type=1326 audit(1753839606.512:1583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4665 comm="syz.4.393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa67354e9a9 code=0x7ffc0000 [ 49.998419][ T29] audit: type=1326 audit(1753839606.512:1584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4665 comm="syz.4.393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7fa67354e9a9 code=0x7ffc0000 [ 50.021691][ T29] audit: type=1326 audit(1753839606.512:1585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4665 comm="syz.4.393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa67354e9a9 code=0x7ffc0000 [ 50.045001][ T29] audit: type=1326 audit(1753839606.512:1586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4665 comm="syz.4.393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa67354e9a9 code=0x7ffc0000 [ 50.103365][ T3290] Alternate GPT is invalid, using primary GPT. [ 50.109743][ T3290] loop2: p2 p3 p7 [ 50.120397][ T4690] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 50.138189][ T4681] Alternate GPT is invalid, using primary GPT. [ 50.140381][ T4688] siw: device registration error -23 [ 50.144568][ T4681] loop2: p2 p3 p7 [ 50.264443][ T4686] loop0: detected capacity change from 0 to 512 [ 50.274203][ T4686] ext4: Unknown parameter 'smackfsfloor' [ 50.343332][ T4699] 9pnet_fd: Insufficient options for proto=fd [ 50.357049][ T4700] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 50.422812][ T4702] netlink: 28 bytes leftover after parsing attributes in process `syz.2.404'. [ 50.444490][ T4704] 9pnet_fd: Insufficient options for proto=fd [ 50.500992][ T4709] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 50.566216][ T3290] udevd[3290]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 50.596510][ T3523] udevd[3523]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 50.650021][ T4715] loop4: detected capacity change from 0 to 1024 [ 50.663395][ T4092] udevd[4092]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory [ 50.690987][ T4715] EXT4-fs (loop4): invalid first ino: 9 [ 50.697887][ T4711] loop0: detected capacity change from 0 to 512 [ 50.718051][ T4723] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 50.719193][ T3523] udevd[3523]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 50.743672][ T3290] udevd[3290]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 50.744783][ T4711] ext4 filesystem being mounted at /82/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.903995][ T4735] loop3: detected capacity change from 0 to 1024 [ 50.908802][ T4737] 9pnet_fd: Insufficient options for proto=fd [ 50.969119][ T4745] loop2: detected capacity change from 0 to 512 [ 50.970409][ T4747] 9pnet_fd: Insufficient options for proto=fd [ 50.978582][ T4745] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 50.999426][ T4745] EXT4-fs (loop2): 1 truncate cleaned up [ 51.045788][ T4752] loop4: detected capacity change from 0 to 512 [ 51.066370][ T4752] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 51.075926][ T4752] EXT4-fs (loop4): orphan cleanup on readonly fs [ 51.085980][ T4752] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 51.103331][ T4752] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 51.120062][ T4754] loop0: detected capacity change from 0 to 8192 [ 51.149882][ T4762] loop3: detected capacity change from 0 to 1024 [ 51.156641][ T4752] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.421: bg 0: block 40: padding at end of block bitmap is not set [ 51.171435][ T4762] EXT4-fs (loop3): invalid first ino: 9 [ 51.179253][ T4752] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 51.207804][ T4752] EXT4-fs (loop4): 1 truncate cleaned up [ 51.242824][ T4765] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 51.332156][ T4775] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 51.413088][ T4777] 9pnet_fd: Insufficient options for proto=fd [ 51.477357][ T4784] loop4: detected capacity change from 0 to 1024 [ 51.494823][ T4785] loop2: detected capacity change from 0 to 1024 [ 51.583597][ T4799] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 51.588175][ T4800] loop4: detected capacity change from 0 to 2048 [ 51.605874][ T4796] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 51.689861][ T4800] netlink: 24 bytes leftover after parsing attributes in process `syz.4.436'. [ 51.705813][ T4808] loop3: detected capacity change from 0 to 128 [ 51.712729][ T4811] loop2: detected capacity change from 0 to 512 [ 51.730367][ T4811] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 51.749022][ T4808] ext4 filesystem being mounted at /80/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 51.800060][ T4811] EXT4-fs (loop2): 1 truncate cleaned up [ 51.811927][ T4817] 9pnet_fd: Insufficient options for proto=fd [ 51.868047][ T4819] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 51.966229][ T4825] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 51.993688][ T4827] siw: device registration error -23 [ 52.033482][ T4836] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 52.082475][ T4833] netlink: 4 bytes leftover after parsing attributes in process `syz.2.450'. [ 52.099427][ T4846] loop3: detected capacity change from 0 to 1024 [ 52.114849][ T4845] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 52.131553][ T4833] netlink: 'syz.2.450': attribute type 1 has an invalid length. [ 52.139261][ T4833] netlink: 224 bytes leftover after parsing attributes in process `syz.2.450'. [ 52.211744][ T4854] loop4: detected capacity change from 0 to 8192 [ 52.243069][ T4858] FAULT_INJECTION: forcing a failure. [ 52.243069][ T4858] name failslab, interval 1, probability 0, space 0, times 0 [ 52.255783][ T4858] CPU: 0 UID: 0 PID: 4858 Comm: syz.2.459 Not tainted 6.16.0-syzkaller-03556-g0919a5b3b11c #0 PREEMPT(voluntary) [ 52.255869][ T4858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 52.255880][ T4858] Call Trace: [ 52.255886][ T4858] [ 52.255893][ T4858] __dump_stack+0x1d/0x30 [ 52.255915][ T4858] dump_stack_lvl+0xe8/0x140 [ 52.255933][ T4858] dump_stack+0x15/0x1b [ 52.255971][ T4858] should_fail_ex+0x265/0x280 [ 52.255991][ T4858] should_failslab+0x8c/0xb0 [ 52.256012][ T4858] kmem_cache_alloc_noprof+0x50/0x310 [ 52.256036][ T4858] ? getname_flags+0x80/0x3b0 [ 52.256090][ T4858] getname_flags+0x80/0x3b0 [ 52.256112][ T4858] do_sys_openat2+0x60/0x110 [ 52.256168][ T4858] __x64_sys_creat+0x65/0x90 [ 52.256238][ T4858] x64_sys_call+0x2d94/0x2ff0 [ 52.256256][ T4858] do_syscall_64+0xd2/0x200 [ 52.256276][ T4858] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 52.256299][ T4858] ? clear_bhb_loop+0x40/0x90 [ 52.256338][ T4858] ? clear_bhb_loop+0x40/0x90 [ 52.256455][ T4858] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.256475][ T4858] RIP: 0033:0x7f7afa64e9a9 [ 52.256491][ T4858] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 52.256506][ T4858] RSP: 002b:00007f7af8cb7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 52.256526][ T4858] RAX: ffffffffffffffda RBX: 00007f7afa875fa0 RCX: 00007f7afa64e9a9 [ 52.256610][ T4858] RDX: 0000000000000000 RSI: 00000000000001f4 RDI: 00002000000000c0 [ 52.256622][ T4858] RBP: 00007f7af8cb7090 R08: 0000000000000000 R09: 0000000000000000 [ 52.256687][ T4858] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 52.256699][ T4858] R13: 0000000000000000 R14: 00007f7afa875fa0 R15: 00007ffc421eb4b8 [ 52.256716][ T4858] [ 52.457520][ T4863] loop1: detected capacity change from 0 to 512 [ 52.475624][ T4863] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 52.486498][ T4866] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 52.511763][ T4863] EXT4-fs (loop1): 1 truncate cleaned up [ 52.577238][ T4872] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 52.587586][ T4870] netlink: 60 bytes leftover after parsing attributes in process `syz.3.463'. [ 52.609804][ T4870] loop3: detected capacity change from 0 to 512 [ 52.649403][ T4875] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 52.700779][ T4870] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 52.704549][ T4877] 9pnet_fd: Insufficient options for proto=fd [ 52.726828][ T4879] random: crng reseeded on system resumption [ 52.809452][ T4881] loop0: detected capacity change from 0 to 8192 [ 52.824863][ T4870] ext4 filesystem being mounted at /84/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 52.908853][ T4893] loop1: detected capacity change from 0 to 128 [ 53.006076][ T4897] syz.1.472: attempt to access beyond end of device [ 53.006076][ T4897] loop1: rw=0, sector=97, nr_sectors = 120 limit=128 [ 53.061717][ T564] kworker/u8:5: attempt to access beyond end of device [ 53.061717][ T564] loop1: rw=1, sector=217, nr_sectors = 824 limit=128 [ 53.113529][ T4902] loop3: detected capacity change from 0 to 512 [ 53.126609][ T4902] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 53.147471][ T4902] EXT4-fs (loop3): 1 truncate cleaned up [ 53.161645][ T4903] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 53.214012][ T4909] 9pnet_fd: Insufficient options for proto=fd [ 53.278268][ T4911] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 53.398736][ T4921] loop3: detected capacity change from 0 to 1024 [ 53.413558][ T4921] EXT4-fs (loop3): invalid first ino: 9 [ 53.458483][ T4922] netlink: 4 bytes leftover after parsing attributes in process `syz.4.484'. [ 53.476048][ T4922] netlink: 'syz.4.484': attribute type 1 has an invalid length. [ 53.483818][ T4922] netlink: 224 bytes leftover after parsing attributes in process `syz.4.484'. [ 53.500942][ T4932] loop3: detected capacity change from 0 to 128 [ 53.576110][ T4932] syz.3.486: attempt to access beyond end of device [ 53.576110][ T4932] loop3: rw=0, sector=97, nr_sectors = 120 limit=128 [ 53.620859][ T564] kworker/u8:5: attempt to access beyond end of device [ 53.620859][ T564] loop3: rw=1, sector=217, nr_sectors = 824 limit=128 [ 53.663212][ T4944] loop2: detected capacity change from 0 to 512 [ 53.668948][ T4945] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 53.679236][ T4947] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 53.717837][ T4944] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 53.760955][ T4951] loop3: detected capacity change from 0 to 2048 [ 53.775558][ T4955] loop0: detected capacity change from 0 to 128 [ 53.793790][ T4955] ext4 filesystem being mounted at /88/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 53.853367][ T4962] loop1: detected capacity change from 0 to 1024 [ 53.871694][ T3290] Alternate GPT is invalid, using primary GPT. [ 53.878134][ T3290] loop3: p2 p3 p7 [ 53.898334][ T4951] Alternate GPT is invalid, using primary GPT. [ 53.904733][ T4951] loop3: p2 p3 p7 [ 53.921288][ T4960] loop4: detected capacity change from 0 to 8192 [ 53.978357][ T3523] udevd[3523]: inotify_add_watch(7, /dev/loop3p7, 10) failed: No such file or directory [ 53.984545][ T4970] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 53.991797][ T3290] udevd[3290]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 54.006244][ T3484] udevd[3484]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 54.065571][ T4092] udevd[4092]: inotify_add_watch(7, /dev/loop3p7, 10) failed: No such file or directory [ 54.076794][ T3484] udevd[3484]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 54.100134][ T4974] siw: device registration error -23 [ 54.176504][ T4984] loop1: detected capacity change from 0 to 128 [ 54.196428][ T4986] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 54.202739][ T4984] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 54.224137][ T4988] loop3: detected capacity change from 0 to 1024 [ 54.304454][ T4993] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 54.373917][ T5000] loop0: detected capacity change from 0 to 2048 [ 54.428267][ T3290] Alternate GPT is invalid, using primary GPT. [ 54.434788][ T3290] loop0: p2 p3 p7 [ 54.464204][ T5000] Alternate GPT is invalid, using primary GPT. [ 54.470741][ T5000] loop0: p2 p3 p7 [ 54.545618][ T5008] loop2: detected capacity change from 0 to 512 [ 54.556656][ T5008] journal_path: Lookup failure for './file0/../file0' [ 54.563645][ T5008] EXT4-fs: error: could not find journal device path [ 54.623610][ T29] kauditd_printk_skb: 299 callbacks suppressed [ 54.623639][ T29] audit: type=1400 audit(1753839611.262:1885): avc: denied { connect } for pid=5007 comm="syz.2.519" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 54.655608][ T29] audit: type=1400 audit(1753839611.262:1886): avc: denied { connect } for pid=5007 comm="syz.2.519" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 54.689464][ T5014] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 54.703622][ T5016] loop2: detected capacity change from 0 to 1024 [ 54.800083][ T5022] xt_CT: You must specify a L4 protocol and not use inversions on it [ 54.858290][ T5025] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 54.889360][ T5028] 9pnet_fd: Insufficient options for proto=fd [ 54.955451][ T5031] loop0: detected capacity change from 0 to 512 [ 54.964133][ T5031] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 54.993347][ T5031] EXT4-fs (loop0): 1 truncate cleaned up [ 55.004769][ T5034] loop2: detected capacity change from 0 to 8192 [ 55.123175][ T5040] IPv6: Can't replace route, no match found [ 55.254204][ T5048] random: crng reseeded on system resumption [ 55.267406][ T5051] loop4: detected capacity change from 0 to 1024 [ 55.307831][ T5053] FAULT_INJECTION: forcing a failure. [ 55.307831][ T5053] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 55.320970][ T5053] CPU: 1 UID: 0 PID: 5053 Comm: syz.3.538 Not tainted 6.16.0-syzkaller-03556-g0919a5b3b11c #0 PREEMPT(voluntary) [ 55.320998][ T5053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 55.321012][ T5053] Call Trace: [ 55.321017][ T5053] [ 55.321024][ T5053] __dump_stack+0x1d/0x30 [ 55.321076][ T5053] dump_stack_lvl+0xe8/0x140 [ 55.321095][ T5053] dump_stack+0x15/0x1b [ 55.321111][ T5053] should_fail_ex+0x265/0x280 [ 55.321147][ T5053] should_fail+0xb/0x20 [ 55.321245][ T5053] should_fail_usercopy+0x1a/0x20 [ 55.321331][ T5053] _copy_from_user+0x1c/0xb0 [ 55.321357][ T5053] ___sys_sendmsg+0xc1/0x1d0 [ 55.321431][ T5053] __x64_sys_sendmsg+0xd4/0x160 [ 55.321456][ T5053] x64_sys_call+0x191e/0x2ff0 [ 55.321533][ T5053] do_syscall_64+0xd2/0x200 [ 55.321559][ T5053] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 55.321583][ T5053] ? clear_bhb_loop+0x40/0x90 [ 55.321621][ T5053] ? clear_bhb_loop+0x40/0x90 [ 55.321698][ T5053] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.321719][ T5053] RIP: 0033:0x7f050df4e9a9 [ 55.321734][ T5053] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 55.321788][ T5053] RSP: 002b:00007f050c5b7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 55.321808][ T5053] RAX: ffffffffffffffda RBX: 00007f050e175fa0 RCX: 00007f050df4e9a9 [ 55.321888][ T5053] RDX: 0000000000048002 RSI: 0000200000000080 RDI: 0000000000000003 [ 55.321901][ T5053] RBP: 00007f050c5b7090 R08: 0000000000000000 R09: 0000000000000000 [ 55.321913][ T5053] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 55.321925][ T5053] R13: 0000000000000000 R14: 00007f050e175fa0 R15: 00007ffd949aa558 [ 55.321942][ T5053] [ 55.518099][ T5049] netlink: 60 bytes leftover after parsing attributes in process `syz.1.533'. [ 55.522209][ T5058] 9pnet_fd: Insufficient options for proto=fd [ 55.564102][ T5049] loop1: detected capacity change from 0 to 512 [ 55.579490][ T5049] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 55.618807][ T5064] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 55.642106][ T5049] ext4 filesystem being mounted at /120/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 55.907077][ T5070] loop1: detected capacity change from 0 to 8192 [ 55.974022][ T5075] loop2: detected capacity change from 0 to 512 [ 55.986025][ T5075] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 56.002913][ T5075] EXT4-fs (loop2): 1 truncate cleaned up [ 56.209891][ T5084] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 56.279300][ T5082] loop0: detected capacity change from 0 to 512 [ 56.312116][ T5086] loop2: detected capacity change from 0 to 1024 [ 56.323913][ T5082] ext4: Unknown parameter 'smackfsfloor' [ 56.354599][ T29] audit: type=1326 audit(1753839612.982:1887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5087 comm="syz.3.551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f050df4e9a9 code=0x7ffc0000 [ 56.414394][ T29] audit: type=1326 audit(1753839613.022:1888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5087 comm="syz.3.551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f050df4e9a9 code=0x7ffc0000 [ 56.437916][ T29] audit: type=1326 audit(1753839613.022:1889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5087 comm="syz.3.551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f050df4e9a9 code=0x7ffc0000 [ 56.461460][ T29] audit: type=1326 audit(1753839613.022:1890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5087 comm="syz.3.551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f050df4e9a9 code=0x7ffc0000 [ 56.484823][ T29] audit: type=1326 audit(1753839613.022:1891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5087 comm="syz.3.551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f050df4e9a9 code=0x7ffc0000 [ 56.508189][ T29] audit: type=1326 audit(1753839613.022:1892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5087 comm="syz.3.551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f050df4e9a9 code=0x7ffc0000 [ 56.531566][ T29] audit: type=1326 audit(1753839613.022:1893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5087 comm="syz.3.551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f050df4e9a9 code=0x7ffc0000 [ 56.554883][ T29] audit: type=1326 audit(1753839613.022:1894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5087 comm="syz.3.551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f050df4e9a9 code=0x7ffc0000 [ 56.662464][ T5092] IPVS: Error connecting to the multicast addr [ 56.753519][ T5100] loop2: detected capacity change from 0 to 512 [ 56.762301][ T5100] EXT4-fs: Ignoring removed mblk_io_submit option [ 56.771188][ T5100] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 56.790344][ T5100] EXT4-fs (loop2): 1 truncate cleaned up [ 56.902121][ T5106] netlink: 60 bytes leftover after parsing attributes in process `syz.1.554'. [ 56.921049][ T5106] loop1: detected capacity change from 0 to 512 [ 56.939391][ T5106] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 56.950967][ T5114] loop0: detected capacity change from 0 to 512 [ 56.980740][ T5118] loop3: detected capacity change from 0 to 512 [ 56.987172][ T5114] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 56.998663][ T5106] ext4 filesystem being mounted at /122/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 57.024164][ T5114] EXT4-fs (loop0): 1 truncate cleaned up [ 57.048635][ T5124] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 57.064772][ T5118] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 57.094652][ T5118] EXT4-fs (loop3): orphan cleanup on readonly fs [ 57.101194][ T5118] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 57.140063][ T5118] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 57.181867][ T5118] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.561: bg 0: block 40: padding at end of block bitmap is not set [ 57.272669][ T5133] loop4: detected capacity change from 0 to 512 [ 57.284601][ T5129] loop1: detected capacity change from 0 to 8192 [ 57.286683][ T5136] loop0: detected capacity change from 0 to 1024 [ 57.297501][ T5118] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 57.312487][ T5133] journal_path: Lookup failure for './file0/../file0' [ 57.319288][ T5133] EXT4-fs: error: could not find journal device path [ 57.328580][ T5118] EXT4-fs (loop3): 1 truncate cleaned up [ 57.334878][ T5136] EXT4-fs: Ignoring removed nomblk_io_submit option [ 57.363032][ T5141] netlink: 'syz.2.567': attribute type 21 has an invalid length. [ 57.371142][ T5141] netlink: 132 bytes leftover after parsing attributes in process `syz.2.567'. [ 57.383315][ T5136] EXT4-fs error (device loop0): ext4_find_dest_de:2052: inode #2: block 16: comm syz.0.566: bad entry in directory: rec_len is too small for name_len - offset=76, inode=16, rec_len=16, size=1024 fake=0 [ 57.427868][ T5137] Invalid ELF header magic: != ELF [ 57.461133][ T5136] EXT4-fs (loop0): Remounting filesystem read-only [ 57.467882][ T5144] loop4: detected capacity change from 0 to 1024 [ 57.503593][ T5144] EXT4-fs (loop4): invalid first ino: 9 [ 57.567572][ T5153] 9pnet_fd: Insufficient options for proto=fd [ 57.657921][ T5161] loop0: detected capacity change from 0 to 512 [ 57.665237][ T5159] loop3: detected capacity change from 0 to 8192 [ 57.682977][ T5163] loop2: detected capacity change from 0 to 1024 [ 57.704894][ T5163] EXT4-fs (loop2): invalid first ino: 9 [ 57.742264][ T5161] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 57.768575][ T5161] EXT4-fs (loop0): 1 truncate cleaned up [ 57.975293][ T5171] netlink: 24 bytes leftover after parsing attributes in process `syz.0.578'. [ 58.002569][ T5175] loop0: detected capacity change from 0 to 128 [ 58.030613][ T5175] ext4 filesystem being mounted at /109/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 58.075597][ T5179] loop2: detected capacity change from 0 to 512 [ 58.082341][ T5179] EXT4-fs: Ignoring removed mblk_io_submit option [ 58.177286][ T5183] 9pnet_fd: Insufficient options for proto=fd [ 58.242823][ T5179] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 58.301179][ T5185] loop4: detected capacity change from 0 to 512 [ 58.310819][ T5185] ext4: Unknown parameter 'smackfsfloor' [ 58.365181][ T5179] EXT4-fs (loop2): 1 truncate cleaned up [ 58.484690][ T5192] loop0: detected capacity change from 0 to 512 [ 58.493168][ T5198] loop1: detected capacity change from 0 to 512 [ 58.512888][ T5192] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 58.543071][ T5198] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 58.558423][ T5206] loop4: detected capacity change from 0 to 128 [ 58.571997][ T5206] ext4 filesystem being mounted at /115/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 58.619853][ T5198] EXT4-fs (loop1): 1 truncate cleaned up [ 58.687845][ T5214] 9pnet_fd: Insufficient options for proto=fd [ 58.726544][ T5218] netlink: 12 bytes leftover after parsing attributes in process `syz.4.600'. [ 58.745375][ T5218] netlink: 12 bytes leftover after parsing attributes in process `syz.4.600'. [ 58.749420][ T5216] loop3: detected capacity change from 0 to 1024 [ 58.755903][ T5218] netlink: 'syz.4.600': attribute type 4 has an invalid length. [ 58.768328][ T5218] netlink: 17 bytes leftover after parsing attributes in process `syz.4.600'. [ 58.774214][ T5216] EXT4-fs (loop3): invalid first ino: 9 [ 58.795192][ T5218] tipc: Started in network mode [ 58.800087][ T5218] tipc: Node identity 5a1f8c17f97, cluster identity 4711 [ 58.807187][ T5218] tipc: Enabled bearer , priority 0 [ 58.814764][ T5218] syzkaller0: entered promiscuous mode [ 58.820320][ T5218] syzkaller0: entered allmulticast mode [ 58.845427][ T5218] tipc: Resetting bearer [ 58.853304][ T5217] tipc: Resetting bearer [ 58.874704][ T5217] tipc: Disabling bearer [ 58.892784][ T5227] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 58.970627][ T5238] loop1: detected capacity change from 0 to 128 [ 58.977582][ T5237] loop4: detected capacity change from 0 to 512 [ 58.995011][ T5237] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 59.005398][ T5238] ext4 filesystem being mounted at /131/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 59.036979][ T5233] loop3: detected capacity change from 0 to 512 [ 59.045799][ T5237] EXT4-fs (loop4): 1 truncate cleaned up [ 59.051177][ T5233] ext4: Unknown parameter 'smackfsfloor' [ 59.127828][ T5245] 9pnet_fd: Insufficient options for proto=fd [ 59.207698][ T5250] loop3: detected capacity change from 0 to 512 [ 59.233973][ T5256] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 59.245434][ T5250] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 59.264677][ T5250] EXT4-fs (loop3): orphan cleanup on readonly fs [ 59.274665][ T5250] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 59.295352][ T5250] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 59.303032][ T5250] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.612: bg 0: block 40: padding at end of block bitmap is not set [ 59.323004][ T5250] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 59.335640][ T5250] EXT4-fs (loop3): 1 truncate cleaned up [ 59.342608][ T5268] loop2: detected capacity change from 0 to 128 [ 59.364194][ T5259] netlink: 'syz.1.617': attribute type 21 has an invalid length. [ 59.382956][ T5259] netlink: 132 bytes leftover after parsing attributes in process `syz.1.617'. [ 59.392641][ T5268] ext4 filesystem being mounted at /124/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 59.434408][ T5275] FAULT_INJECTION: forcing a failure. [ 59.434408][ T5275] name failslab, interval 1, probability 0, space 0, times 0 [ 59.434531][ T5275] CPU: 0 UID: 0 PID: 5275 Comm: syz.4.622 Not tainted 6.16.0-syzkaller-03556-g0919a5b3b11c #0 PREEMPT(voluntary) [ 59.434564][ T5275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 59.434580][ T5275] Call Trace: [ 59.434586][ T5275] [ 59.434592][ T5275] __dump_stack+0x1d/0x30 [ 59.434614][ T5275] dump_stack_lvl+0xe8/0x140 [ 59.434632][ T5275] dump_stack+0x15/0x1b [ 59.434647][ T5275] should_fail_ex+0x265/0x280 [ 59.434733][ T5275] ? create_io_worker+0x5e/0x370 [ 59.434809][ T5275] should_failslab+0x8c/0xb0 [ 59.434830][ T5275] __kmalloc_cache_noprof+0x4c/0x320 [ 59.434857][ T5275] create_io_worker+0x5e/0x370 [ 59.434906][ T5275] io_wq_enqueue+0x2c1/0x3a0 [ 59.434924][ T5275] ? __pfx_io_wq_work_match_item+0x10/0x10 [ 59.434947][ T5275] io_queue_iowq+0x201/0x2e0 [ 59.434968][ T5275] io_queue_sqe_fallback+0xe6/0x140 [ 59.435061][ T5275] io_submit_sqes+0xc1d/0x1050 [ 59.435089][ T5275] __se_sys_io_uring_enter+0x1c1/0x1b70 [ 59.435114][ T5275] ? timerqueue_add+0x14e/0x180 [ 59.435214][ T5275] ? read_tsc+0x9/0x20 [ 59.435241][ T5275] ? ktime_get+0x1eb/0x210 [ 59.435263][ T5275] ? lapic_next_event+0x11/0x20 [ 59.435332][ T5275] ? clockevents_program_event+0x240/0x4e0 [ 59.435360][ T5275] ? sysvec_apic_timer_interrupt+0x44/0x80 [ 59.435383][ T5275] __x64_sys_io_uring_enter+0x78/0x90 [ 59.435432][ T5275] x64_sys_call+0x2de1/0x2ff0 [ 59.435451][ T5275] do_syscall_64+0xd2/0x200 [ 59.435530][ T5275] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 59.435582][ T5275] ? clear_bhb_loop+0x40/0x90 [ 59.435601][ T5275] ? clear_bhb_loop+0x40/0x90 [ 59.435643][ T5275] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.435738][ T5275] RIP: 0033:0x7fa67354e9a9 [ 59.435756][ T5275] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 59.435773][ T5275] RSP: 002b:00007fa671bb7038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 59.435813][ T5275] RAX: ffffffffffffffda RBX: 00007fa673775fa0 RCX: 00007fa67354e9a9 [ 59.435825][ T5275] RDX: 0000000000000600 RSI: 00000000000006e2 RDI: 0000000000000009 [ 59.435837][ T5275] RBP: 00007fa671bb7090 R08: 0000000000000000 R09: 0000000000000000 [ 59.435903][ T5275] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 59.435944][ T5275] R13: 0000000000000000 R14: 00007fa673775fa0 R15: 00007ffc2850a5d8 [ 59.435962][ T5275] [ 59.474773][ T5266] Invalid ELF header magic: != ELF [ 59.478733][ T5278] FAULT_INJECTION: forcing a failure. [ 59.478733][ T5278] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 59.719202][ T5278] CPU: 0 UID: 0 PID: 5278 Comm: syz.0.623 Not tainted 6.16.0-syzkaller-03556-g0919a5b3b11c #0 PREEMPT(voluntary) [ 59.719285][ T5278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 59.719296][ T5278] Call Trace: [ 59.719304][ T5278] [ 59.719313][ T5278] __dump_stack+0x1d/0x30 [ 59.719334][ T5278] dump_stack_lvl+0xe8/0x140 [ 59.719414][ T5278] dump_stack+0x15/0x1b [ 59.719429][ T5278] should_fail_ex+0x265/0x280 [ 59.719452][ T5278] should_fail+0xb/0x20 [ 59.719480][ T5278] should_fail_usercopy+0x1a/0x20 [ 59.719507][ T5278] _copy_from_user+0x1c/0xb0 [ 59.719536][ T5278] kstrtouint_from_user+0x69/0xf0 [ 59.719561][ T5278] ? 0xffffffff81000000 [ 59.719573][ T5278] ? selinux_file_permission+0x1e4/0x320 [ 59.719625][ T5278] proc_fail_nth_write+0x50/0x160 [ 59.719644][ T5278] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 59.719664][ T5278] vfs_write+0x266/0x8e0 [ 59.719753][ T5278] ? vfs_read+0x47f/0x6f0 [ 59.719777][ T5278] ? __rcu_read_unlock+0x4f/0x70 [ 59.719799][ T5278] ? __fget_files+0x184/0x1c0 [ 59.719818][ T5278] ksys_write+0xda/0x1a0 [ 59.719847][ T5278] __x64_sys_write+0x40/0x50 [ 59.719912][ T5278] x64_sys_call+0x27fe/0x2ff0 [ 59.719932][ T5278] do_syscall_64+0xd2/0x200 [ 59.719956][ T5278] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 59.720023][ T5278] ? clear_bhb_loop+0x40/0x90 [ 59.720042][ T5278] ? clear_bhb_loop+0x40/0x90 [ 59.720064][ T5278] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.720084][ T5278] RIP: 0033:0x7f83a720d45f [ 59.720098][ T5278] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 59.720138][ T5278] RSP: 002b:00007f83a584e030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 59.720156][ T5278] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f83a720d45f [ 59.720168][ T5278] RDX: 0000000000000001 RSI: 00007f83a584e0a0 RDI: 000000000000000a [ 59.720180][ T5278] RBP: 00007f83a584e090 R08: 0000000000000000 R09: 0000000000000010 [ 59.720192][ T5278] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 59.720233][ T5278] R13: 0000000000000000 R14: 00007f83a7436080 R15: 00007fffb0816cc8 [ 59.720251][ T5278] [ 59.772931][ T5284] loop3: detected capacity change from 0 to 512 [ 59.773924][ T5284] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 59.775392][ T5284] EXT4-fs (loop3): 1 truncate cleaned up [ 59.863414][ T5289] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 59.930391][ T5300] netlink: 60 bytes leftover after parsing attributes in process `syz.3.632'. [ 59.933777][ T5300] loop3: detected capacity change from 0 to 512 [ 59.936971][ T5300] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 59.942609][ T5300] ext4 filesystem being mounted at /127/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 59.942974][ T5298] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 59.949761][ T5303] loop0: detected capacity change from 0 to 128 [ 60.010288][ T5303] syz.0.633: attempt to access beyond end of device [ 60.010288][ T5303] loop0: rw=0, sector=97, nr_sectors = 120 limit=128 [ 60.026219][ T31] kworker/u8:1: attempt to access beyond end of device [ 60.026219][ T31] loop0: rw=1, sector=217, nr_sectors = 824 limit=128 [ 60.034649][ T5311] loop4: detected capacity change from 0 to 128 [ 60.062645][ T5311] ext4 filesystem being mounted at /128/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 60.108969][ T5310] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 60.375243][ T5320] loop1: detected capacity change from 0 to 512 [ 60.386103][ T5320] EXT4-fs: Ignoring removed mblk_io_submit option [ 60.407078][ T5322] loop0: detected capacity change from 0 to 1024 [ 60.415646][ T5318] loop4: detected capacity change from 0 to 512 [ 60.423973][ T5320] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 60.439582][ T5322] EXT4-fs: inline encryption not supported [ 60.445462][ T5322] EXT4-fs: Ignoring removed i_version option [ 60.476177][ T5322] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 60.486950][ T5318] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 60.487442][ T5320] EXT4-fs (loop1): 1 truncate cleaned up [ 60.532251][ T5318] EXT4-fs (loop4): 1 truncate cleaned up [ 60.539032][ T5322] EXT4-fs error (device loop0): ext4_map_blocks:816: inode #3: block 1: comm syz.0.639: lblock 1 mapped to illegal pblock 1 (length 1) [ 60.540565][ T29] kauditd_printk_skb: 31 callbacks suppressed [ 60.540644][ T29] audit: type=1400 audit(1753839617.172:1924): avc: denied { load_policy } for pid=5319 comm="syz.1.640" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 60.582150][ T5322] Quota error (device loop0): write_blk: dquota write failed [ 60.589669][ T5322] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 60.601381][ T5322] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.639: Failed to acquire dquot type 0 [ 60.607568][ T5320] SELinux: failed to load policy [ 60.618755][ T29] audit: type=1326 audit(1753839617.252:1925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5333 comm="syz.2.644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7afa64e9a9 code=0x7ffc0000 [ 60.642203][ T29] audit: type=1326 audit(1753839617.252:1926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5333 comm="syz.2.644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7afa64e9a9 code=0x7ffc0000 [ 60.665517][ T29] audit: type=1326 audit(1753839617.252:1927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5333 comm="syz.2.644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7afa64e9a9 code=0x7ffc0000 [ 60.666500][ T5322] EXT4-fs error (device loop0): ext4_free_blocks:6587: comm syz.0.639: Freeing blocks not in datazone - block = 0, count = 4096 [ 60.688936][ T29] audit: type=1326 audit(1753839617.252:1928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5333 comm="syz.2.644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7afa64e9a9 code=0x7ffc0000 [ 60.725500][ T29] audit: type=1326 audit(1753839617.252:1929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5333 comm="syz.2.644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f7afa64e9a9 code=0x7ffc0000 [ 60.749000][ T29] audit: type=1326 audit(1753839617.252:1930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5333 comm="syz.2.644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7afa64e9a9 code=0x7ffc0000 [ 60.749021][ T29] audit: type=1326 audit(1753839617.252:1931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5333 comm="syz.2.644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7afa64e9a9 code=0x7ffc0000 [ 60.762559][ T5322] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm syz.0.639: Invalid inode bitmap blk 0 in block_group 0 [ 60.778864][ T564] EXT4-fs error (device loop0): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 60.806833][ T5334] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 60.815869][ T5322] EXT4-fs error (device loop0) in ext4_free_inode:361: Corrupt filesystem [ 60.855777][ T564] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:5: Failed to release dquot type 0 [ 60.893179][ T5322] EXT4-fs (loop0): 1 orphan inode deleted [ 60.910181][ T5345] loop2: detected capacity change from 0 to 128 [ 60.917349][ T5343] x_tables: ip_tables: ah match: only valid for protocol 51 [ 60.939003][ T5345] ext4 filesystem being mounted at /129/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 61.042378][ T5322] EXT4-fs error (device loop0): ext4_search_dir:1474: inode #2: block 16: comm syz.0.639: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 61.081159][ T5322] EXT4-fs error (device loop0): ext4_search_dir:1474: inode #2: block 16: comm syz.0.639: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 61.102287][ T5357] netlink: 'syz.4.650': attribute type 21 has an invalid length. [ 61.110109][ T5357] netlink: 132 bytes leftover after parsing attributes in process `syz.4.650'. [ 61.133413][ T5360] EXT4-fs error (device loop0): ext4_map_blocks:780: inode #3: block 1: comm syz.0.639: lblock 1 mapped to illegal pblock 1 (length 1) [ 61.175974][ T5360] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.639: Failed to acquire dquot type 0 [ 61.178950][ T5352] Invalid ELF header magic: != ELF [ 61.236726][ T5369] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 61.264335][ T5373] loop2: detected capacity change from 0 to 512 [ 61.271481][ T5372] siw: device registration error -23 [ 61.275549][ T5373] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 61.292851][ T5373] EXT4-fs (loop2): 1 truncate cleaned up [ 61.337916][ T5378] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 61.376006][ T5380] 9pnet_fd: Insufficient options for proto=fd [ 61.417356][ T5382] loop3: detected capacity change from 0 to 8192 [ 61.468475][ T5386] loop1: detected capacity change from 0 to 512 [ 61.496103][ T5386] EXT4-fs: Ignoring removed mblk_io_submit option [ 61.504997][ T5392] netlink: 60 bytes leftover after parsing attributes in process `syz.2.666'. [ 61.519858][ T5392] loop2: detected capacity change from 0 to 512 [ 61.533001][ T5386] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 61.544655][ T5391] netlink: 'syz.4.668': attribute type 21 has an invalid length. [ 61.560902][ T5392] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 61.561426][ T5386] EXT4-fs (loop1): 1 truncate cleaned up [ 61.604957][ T5392] ext4 filesystem being mounted at /134/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 61.620935][ T5386] SELinux: failed to load policy [ 61.654108][ T5391] Invalid ELF header magic: != ELF [ 61.987087][ T5418] loop2: detected capacity change from 0 to 512 [ 62.020310][ T5418] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 62.035352][ T5418] EXT4-fs (loop2): 1 truncate cleaned up [ 62.080373][ T5425] loop1: detected capacity change from 0 to 1024 [ 62.107634][ T5425] EXT4-fs (loop1): invalid first ino: 9 [ 62.163345][ T5428] loop2: detected capacity change from 0 to 1024 [ 62.202774][ T36] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 62.210243][ T36] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 62.217675][ T36] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 62.225107][ T36] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 62.232635][ T36] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 62.240079][ T36] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 62.247502][ T36] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 62.254925][ T36] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 62.262417][ T36] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 62.269810][ T36] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 62.277264][ T36] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 62.284697][ T36] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 62.292223][ T36] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 62.299604][ T36] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 62.307114][ T36] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 62.314536][ T36] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 62.322024][ T36] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 62.329478][ T36] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 62.335075][ T5435] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 62.337072][ T36] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 62.351604][ T36] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 62.359102][ T36] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 62.366535][ T36] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 62.373943][ T36] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 62.380576][ T5437] __nla_validate_parse: 1 callbacks suppressed [ 62.380591][ T5437] netlink: 60 bytes leftover after parsing attributes in process `syz.1.682'. [ 62.381332][ T36] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 62.392007][ T5437] loop1: detected capacity change from 0 to 512 [ 62.396345][ T36] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 62.415464][ T5437] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 62.417398][ T36] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 62.432595][ T5437] ext4 filesystem being mounted at /143/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 62.433449][ T36] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 62.451245][ T36] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 62.458677][ T36] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 62.466075][ T36] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 62.473465][ T36] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 62.480944][ T36] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 62.488418][ T36] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 62.495815][ T36] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 62.503208][ T36] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 62.510580][ T36] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 62.518234][ T36] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 62.525618][ T36] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 62.533015][ T36] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 62.540388][ T36] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 62.547798][ T36] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 62.555185][ T36] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 62.562693][ T36] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 62.573395][ T36] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz0] on syz1 [ 62.609018][ T5441] loop3: detected capacity change from 0 to 2048 [ 62.621998][ T5442] fido_id[5442]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 62.645184][ T3290] Alternate GPT is invalid, using primary GPT. [ 62.651533][ T3290] loop3: p2 p3 p7 [ 62.688890][ T5441] Alternate GPT is invalid, using primary GPT. [ 62.695400][ T5441] loop3: p2 p3 p7 [ 62.708957][ T2989] Alternate GPT is invalid, using primary GPT. [ 62.715455][ T2989] loop3: p2 p3 p7 [ 62.738404][ T5448] netlink: 4 bytes leftover after parsing attributes in process `syz.4.687'. [ 62.757128][ T5448] netlink: 'syz.4.687': attribute type 1 has an invalid length. [ 62.764885][ T5448] netlink: 224 bytes leftover after parsing attributes in process `syz.4.687'. [ 62.765142][ T5460] loop2: detected capacity change from 0 to 512 [ 62.783572][ T3290] udevd[3290]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 62.794447][ T3523] udevd[3523]: inotify_add_watch(7, /dev/loop3p7, 10) failed: No such file or directory [ 62.808577][ T5460] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 62.811907][ T3484] udevd[3484]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 62.855496][ T5460] EXT4-fs (loop2): 1 truncate cleaned up [ 62.869347][ T3523] udevd[3523]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 62.871678][ T4092] udevd[4092]: inotify_add_watch(7, /dev/loop3p7, 10) failed: No such file or directory [ 62.918257][ T3290] udevd[3290]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 62.928241][ T5466] loop1: detected capacity change from 0 to 1024 [ 62.938937][ T5466] EXT4-fs (loop1): invalid first ino: 9 [ 62.945499][ T4092] udevd[4092]: inotify_add_watch(7, /dev/loop3p7, 10) failed: No such file or directory [ 62.946790][ T3523] udevd[3523]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 62.948228][ T3290] udevd[3290]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 63.058669][ T5476] netlink: 60 bytes leftover after parsing attributes in process `syz.4.696'. [ 63.067476][ T5478] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 63.110274][ T5481] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 63.124192][ T5476] loop4: detected capacity change from 0 to 512 [ 63.144692][ T5476] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 63.176189][ T5491] loop0: detected capacity change from 0 to 512 [ 63.196962][ T5476] ext4 filesystem being mounted at /144/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 63.242381][ T5491] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 63.254706][ T5491] EXT4-fs (loop0): orphan cleanup on readonly fs [ 63.259455][ T5503] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 63.263462][ T5491] EXT4-fs warning (device loop0): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 63.289116][ T5491] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 63.332801][ T5491] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.702: bg 0: block 40: padding at end of block bitmap is not set [ 63.359889][ T5491] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 63.369133][ T5491] EXT4-fs (loop0): 1 truncate cleaned up [ 63.405511][ T5508] loop2: detected capacity change from 0 to 512 [ 63.414994][ T5508] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 63.444265][ T5517] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 63.453230][ T5519] loop3: detected capacity change from 0 to 128 [ 63.460284][ T5508] EXT4-fs (loop2): 1 truncate cleaned up [ 63.520383][ T5519] syz.3.712: attempt to access beyond end of device [ 63.520383][ T5519] loop3: rw=0, sector=97, nr_sectors = 120 limit=128 [ 63.569401][ T51] kworker/u8:3: attempt to access beyond end of device [ 63.569401][ T51] loop3: rw=1, sector=217, nr_sectors = 824 limit=128 [ 63.596903][ T5524] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 63.625878][ T5531] loop3: detected capacity change from 0 to 128 [ 63.660127][ T5531] ext4 filesystem being mounted at /138/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 63.698907][ T5535] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 63.716728][ T5538] 9pnet_fd: Insufficient options for proto=fd [ 63.822890][ T5550] loop3: detected capacity change from 0 to 512 [ 63.844509][ T5550] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 63.871404][ T5550] EXT4-fs (loop3): 1 truncate cleaned up [ 63.974752][ T5562] loop2: detected capacity change from 0 to 512 [ 63.982681][ T5562] EXT4-fs: Ignoring removed i_version option [ 63.998742][ T5567] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 64.010442][ T5562] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 64.031155][ T5562] EXT4-fs (loop2): can't mount with data=, fs mounted w/o journal [ 64.126100][ T5579] 9pnet_fd: Insufficient options for proto=fd [ 64.210501][ T5586] loop1: detected capacity change from 0 to 512 [ 64.265064][ T5586] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 64.297155][ T5594] netlink: 4 bytes leftover after parsing attributes in process `syz.4.744'. [ 64.323818][ T5586] EXT4-fs (loop1): 1 truncate cleaned up [ 64.407368][ T5594] netlink: 'syz.4.744': attribute type 1 has an invalid length. [ 64.415116][ T5594] netlink: 224 bytes leftover after parsing attributes in process `syz.4.744'. [ 64.473367][ T5605] loop3: detected capacity change from 0 to 512 [ 64.509173][ T5605] ext4: Unknown parameter 'smackfsfloor' [ 64.523190][ T5618] random: crng reseeded on system resumption [ 64.599169][ T5623] loop3: detected capacity change from 0 to 128 [ 64.628153][ T5626] netlink: 'syz.1.750': attribute type 13 has an invalid length. [ 64.636091][ T5626] netlink: 'syz.1.750': attribute type 17 has an invalid length. [ 64.652524][ T5614] loop0: detected capacity change from 0 to 512 [ 64.659727][ T5623] ext4 filesystem being mounted at /145/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 64.717637][ T5614] ext4: Unknown parameter 'smackfsfloor' [ 64.750995][ T5626] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 64.804494][ T5635] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 64.812172][ T5635] netlink: 100 bytes leftover after parsing attributes in process `syz.3.756'. [ 64.823236][ T5633] loop0: detected capacity change from 0 to 8192 [ 64.882131][ T5637] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 64.889678][ T5637] netlink: 100 bytes leftover after parsing attributes in process `syz.3.757'. [ 64.957185][ T5639] netlink: 4 bytes leftover after parsing attributes in process `syz.4.758'. [ 64.976057][ T5639] netlink: 'syz.4.758': attribute type 1 has an invalid length. [ 64.983795][ T5639] netlink: 224 bytes leftover after parsing attributes in process `syz.4.758'. [ 65.003640][ T5649] netlink: 'syz.3.759': attribute type 21 has an invalid length. [ 65.057671][ T5649] Invalid ELF header magic: != ELF [ 65.154541][ T5654] netlink: 'syz.2.761': attribute type 1 has an invalid length. [ 65.173271][ T5670] loop4: detected capacity change from 0 to 512 [ 65.180342][ T5670] EXT4-fs: Ignoring removed mblk_io_submit option [ 65.188101][ T5670] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 65.217231][ T5673] loop2: detected capacity change from 0 to 128 [ 65.225742][ T5670] EXT4-fs (loop4): 1 truncate cleaned up [ 65.227657][ T5673] EXT4-fs mount: 149 callbacks suppressed [ 65.227671][ T5673] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 65.232222][ T5670] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.263690][ T5676] random: crng reseeded on system resumption [ 65.280167][ T5673] ext4 filesystem being mounted at /161/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 65.340129][ T5670] SELinux: failed to load policy [ 65.345217][ T5677] netlink: 'syz.3.766': attribute type 13 has an invalid length. [ 65.353013][ T5677] netlink: 'syz.3.766': attribute type 17 has an invalid length. [ 65.401180][ T3303] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 65.493515][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.529224][ T5677] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 65.698216][ T5703] loop2: detected capacity change from 0 to 128 [ 65.716330][ T5703] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 65.740272][ T5706] loop4: detected capacity change from 0 to 128 [ 65.754802][ T5706] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 65.776254][ T5706] ext4 filesystem being mounted at /164/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 65.883911][ T3299] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 66.019553][ T29] kauditd_printk_skb: 435 callbacks suppressed [ 66.019628][ T29] audit: type=1326 audit(1753839622.652:2363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5721 comm="syz.1.784" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f607b53e9a9 code=0x0 [ 66.138935][ T3387] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 66.146621][ T3387] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 66.154127][ T3387] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 66.161812][ T3387] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 66.161946][ T5729] loop4: detected capacity change from 0 to 8192 [ 66.169187][ T3387] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 66.169234][ T3387] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 66.190404][ T3387] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 66.197833][ T3387] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 66.205245][ T3387] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 66.212683][ T3387] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 66.220110][ T3387] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 66.227525][ T3387] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 66.234971][ T3387] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 66.242407][ T3387] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 66.249848][ T3387] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 66.257307][ T3387] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 66.264739][ T3387] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 66.272230][ T3387] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 66.279630][ T3387] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 66.287064][ T3387] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 66.294481][ T3387] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 66.301901][ T3387] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 66.309309][ T3387] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 66.316869][ T3387] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 66.324352][ T3387] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 66.331777][ T3387] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 66.339172][ T3387] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 66.346597][ T3387] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 66.354020][ T3387] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 66.361432][ T3387] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 66.368880][ T3387] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 66.376334][ T3387] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 66.383757][ T3387] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 66.391195][ T3387] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 66.398742][ T3387] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 66.406193][ T3387] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 66.413673][ T3387] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 66.421173][ T3387] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 66.428677][ T3387] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 66.436091][ T3387] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 66.443499][ T3387] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 66.450911][ T3387] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 66.458301][ T3387] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 66.470472][ T3387] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz0] on syz1 [ 66.665588][ T5734] loop3: detected capacity change from 0 to 128 [ 66.682684][ T5735] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 66.706962][ T5739] loop2: detected capacity change from 0 to 128 [ 66.719826][ T5739] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 66.753913][ T5739] ext4 filesystem being mounted at /166/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 66.777090][ T5734] syz.3.789: attempt to access beyond end of device [ 66.777090][ T5734] loop3: rw=0, sector=97, nr_sectors = 120 limit=128 [ 66.799279][ T5742] loop0: detected capacity change from 0 to 1024 [ 66.818454][ T5742] EXT4-fs (loop0): invalid first ino: 9 [ 66.825229][ T41] kworker/u8:2: attempt to access beyond end of device [ 66.825229][ T41] loop3: rw=1, sector=217, nr_sectors = 824 limit=128 [ 66.958397][ T3303] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 67.030951][ T5753] loop2: detected capacity change from 0 to 512 [ 67.075749][ T5753] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 67.083886][ T5753] EXT4-fs (loop2): orphan cleanup on readonly fs [ 67.095916][ T5753] Quota error (device loop2): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 67.103962][ T5760] netlink: 'syz.0.799': attribute type 21 has an invalid length. [ 67.116703][ T5753] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 67.134208][ T5753] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 67.134542][ T5753] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.795: bg 0: block 40: padding at end of block bitmap is not set [ 67.162362][ T5753] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 67.162638][ T5753] EXT4-fs (loop2): 1 truncate cleaned up [ 67.163053][ T5753] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 67.202342][ T5763] Invalid ELF header magic: != ELF [ 67.279589][ T5755] loop1: detected capacity change from 0 to 512 [ 67.295033][ T29] audit: type=1326 audit(1753839623.932:2364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5766 comm="syz.3.801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f050df4e9a9 code=0x7ffc0000 [ 67.304209][ T5755] ext4: Unknown parameter 'smackfsfloor' [ 67.318465][ T29] audit: type=1326 audit(1753839623.932:2365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5766 comm="syz.3.801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f050df4e9a9 code=0x7ffc0000 [ 67.318501][ T29] audit: type=1326 audit(1753839623.932:2366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5766 comm="syz.3.801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f050df4e9a9 code=0x7ffc0000 [ 67.318591][ T29] audit: type=1326 audit(1753839623.932:2367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5766 comm="syz.3.801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f050df4e9a9 code=0x7ffc0000 [ 67.318619][ T29] audit: type=1326 audit(1753839623.932:2368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5766 comm="syz.3.801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f050df4e9a9 code=0x7ffc0000 [ 67.318700][ T29] audit: type=1326 audit(1753839623.932:2369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5766 comm="syz.3.801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f050df4e9a9 code=0x7ffc0000 [ 67.318728][ T29] audit: type=1326 audit(1753839623.932:2370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5766 comm="syz.3.801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f050df4e9a9 code=0x7ffc0000 [ 67.318755][ T29] audit: type=1326 audit(1753839623.932:2371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5766 comm="syz.3.801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f050df4e9a9 code=0x7ffc0000 [ 67.362873][ T5771] loop0: detected capacity change from 0 to 512 [ 67.506199][ T5771] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 67.523989][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.556743][ T5773] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 67.564041][ T5775] loop3: detected capacity change from 0 to 128 [ 67.575547][ T5775] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 67.588084][ T5775] ext4 filesystem being mounted at /155/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 67.634364][ T5778] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 67.681753][ T3310] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 67.711131][ T5780] loop2: detected capacity change from 0 to 8192 [ 67.721721][ T5784] loop3: detected capacity change from 0 to 512 [ 67.736713][ T5784] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 67.777874][ T5784] EXT4-fs (loop3): orphan cleanup on readonly fs [ 67.784538][ T5784] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 67.800056][ T5784] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 67.810009][ T5784] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.807: bg 0: block 40: padding at end of block bitmap is not set [ 67.831342][ T5784] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 67.849081][ T5791] loop1: detected capacity change from 0 to 1024 [ 67.856157][ T5784] EXT4-fs (loop3): 1 truncate cleaned up [ 67.862643][ T5784] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 67.879003][ T5791] EXT4-fs (loop1): invalid first ino: 9 [ 67.977595][ T5799] loop4: detected capacity change from 0 to 128 [ 67.990583][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.992879][ T5798] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 68.072326][ T5801] syz.4.813: attempt to access beyond end of device [ 68.072326][ T5801] loop4: rw=0, sector=97, nr_sectors = 120 limit=128 [ 68.099767][ T5802] __nla_validate_parse: 6 callbacks suppressed [ 68.099784][ T5802] netlink: 4 bytes leftover after parsing attributes in process `syz.3.815'. [ 68.164453][ T3444] kworker/u8:7: attempt to access beyond end of device [ 68.164453][ T3444] loop4: rw=1, sector=217, nr_sectors = 824 limit=128 [ 68.190621][ T5811] loop4: detected capacity change from 0 to 128 [ 68.200318][ T5811] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 68.215608][ T5808] netlink: 'syz.1.816': attribute type 21 has an invalid length. [ 68.236343][ T5808] netlink: 132 bytes leftover after parsing attributes in process `syz.1.816'. [ 68.240962][ T5811] ext4 filesystem being mounted at /171/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 68.287125][ T5815] loop3: detected capacity change from 0 to 2048 [ 68.381852][ T5808] Invalid ELF header magic: != ELF [ 68.391829][ T5815] Alternate GPT is invalid, using primary GPT. [ 68.398205][ T5815] loop3: p2 p3 p7 [ 68.403449][ T3299] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 68.509943][ T5835] random: crng reseeded on system resumption [ 68.536860][ T3523] udevd[3523]: inotify_add_watch(7, /dev/loop3p7, 10) failed: No such file or directory [ 68.549262][ T3484] udevd[3484]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 68.562281][ T3290] udevd[3290]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 68.590083][ T5841] netlink: 'syz.3.828': attribute type 13 has an invalid length. [ 68.597924][ T5841] netlink: 'syz.3.828': attribute type 17 has an invalid length. [ 68.655192][ T5841] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 68.678206][ T5837] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 68.682476][ T5849] loop2: detected capacity change from 0 to 512 [ 68.689281][ T5837] netlink: 100 bytes leftover after parsing attributes in process `syz.1.829'. [ 68.713990][ T5849] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 68.729440][ T5851] loop0: detected capacity change from 0 to 128 [ 68.746257][ T5851] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 68.762343][ T5851] ext4 filesystem being mounted at /155/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 68.821549][ T3302] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 68.864223][ T5857] netlink: 4 bytes leftover after parsing attributes in process `syz.1.836'. [ 68.873083][ T5857] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 68.880512][ T5857] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 68.890465][ T5857] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 68.897938][ T5857] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 68.932289][ T5866] netlink: 'syz.1.836': attribute type 1 has an invalid length. [ 68.939979][ T5866] netlink: 224 bytes leftover after parsing attributes in process `syz.1.836'. [ 68.976345][ T5862] loop0: detected capacity change from 0 to 512 [ 68.994501][ T5862] ext4: Unknown parameter 'smackfsfloor' [ 69.006263][ T5865] loop3: detected capacity change from 0 to 512 [ 69.018431][ T5865] ext4: Unknown parameter 'smackfsfloor' [ 69.082891][ T5869] loop1: detected capacity change from 0 to 2048 [ 69.092061][ T5872] loop3: detected capacity change from 0 to 128 [ 69.098953][ T5872] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 69.152413][ T5874] netlink: 'syz.0.842': attribute type 21 has an invalid length. [ 69.152970][ T3290] Alternate GPT is invalid, using primary GPT. [ 69.160467][ T5874] netlink: 132 bytes leftover after parsing attributes in process `syz.0.842'. [ 69.166487][ T3290] loop1: p2 p3 p7 [ 69.188406][ T5869] Alternate GPT is invalid, using primary GPT. [ 69.194948][ T5869] loop1: p2 p3 p7 [ 69.228484][ T3523] udevd[3523]: inotify_add_watch(7, /dev/loop1p7, 10) failed: No such file or directory [ 69.229579][ T3290] udevd[3290]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 69.252746][ T5874] Invalid ELF header magic: != ELF [ 69.262937][ T3484] udevd[3484]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 69.345360][ T5882] loop0: detected capacity change from 0 to 1024 [ 69.347042][ T3290] udevd[3290]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 69.362812][ T5887] loop1: detected capacity change from 0 to 128 [ 69.363273][ T3523] udevd[3523]: inotify_add_watch(7, /dev/loop1p7, 10) failed: No such file or directory [ 69.379524][ T5882] EXT4-fs (loop0): invalid first ino: 9 [ 69.386589][ T3484] udevd[3484]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 69.406244][ T5889] loop4: detected capacity change from 0 to 512 [ 69.424388][ T5887] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 69.464839][ T5889] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 69.475046][ T5887] ext4 filesystem being mounted at /178/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 69.493567][ T5889] EXT4-fs (loop4): orphan cleanup on readonly fs [ 69.540808][ T5889] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 69.541498][ T5891] netlink: 4 bytes leftover after parsing attributes in process `syz.0.849'. [ 69.556274][ T5889] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 69.588031][ T5891] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 69.595728][ T5891] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 69.604616][ T5889] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.848: bg 0: block 40: padding at end of block bitmap is not set [ 69.619627][ T5891] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 69.621758][ T3298] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 69.627181][ T5891] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 69.643699][ T5889] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 69.653982][ T5889] EXT4-fs (loop4): 1 truncate cleaned up [ 69.661105][ T5898] netlink: 'syz.0.849': attribute type 1 has an invalid length. [ 69.668835][ T5898] netlink: 224 bytes leftover after parsing attributes in process `syz.0.849'. [ 69.684825][ T5907] loop1: detected capacity change from 0 to 128 [ 69.686409][ T5889] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 69.743110][ T5907] syz.1.851: attempt to access beyond end of device [ 69.743110][ T5907] loop1: rw=0, sector=97, nr_sectors = 120 limit=128 [ 69.779241][ T3444] kworker/u8:7: attempt to access beyond end of device [ 69.779241][ T3444] loop1: rw=1, sector=217, nr_sectors = 824 limit=128 [ 69.844894][ T5909] loop2: detected capacity change from 0 to 2048 [ 69.873855][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.923793][ T3290] Alternate GPT is invalid, using primary GPT. [ 69.930261][ T3290] loop2: p2 p3 p7 [ 69.940121][ T5916] loop4: detected capacity change from 0 to 512 [ 69.956925][ T5918] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 69.966058][ T5914] netlink: 'syz.1.855': attribute type 21 has an invalid length. [ 69.974458][ T5914] netlink: 132 bytes leftover after parsing attributes in process `syz.1.855'. [ 69.992928][ T5916] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 70.006416][ T5916] EXT4-fs (loop4): orphan cleanup on readonly fs [ 70.006958][ T5909] Alternate GPT is invalid, using primary GPT. [ 70.013314][ T5916] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 70.019128][ T5909] loop2: p2 p3 p7 [ 70.056638][ T5916] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 70.071712][ T5916] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.854: bg 0: block 40: padding at end of block bitmap is not set [ 70.081944][ T5928] loop0: detected capacity change from 0 to 1024 [ 70.094081][ T5916] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 70.103163][ T5916] EXT4-fs (loop4): 1 truncate cleaned up [ 70.103595][ T5916] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 70.114472][ T5928] EXT4-fs (loop0): invalid first ino: 9 [ 70.141306][ T5926] Invalid ELF header magic: != ELF [ 70.141601][ T2989] Alternate GPT is invalid, using primary GPT. [ 70.158582][ T2989] loop2: p2 p3 p7 [ 70.187566][ T3290] udevd[3290]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 70.198262][ T5932] loop1: detected capacity change from 0 to 128 [ 70.235962][ T5934] loop0: detected capacity change from 0 to 512 [ 70.251021][ T5934] EXT4-fs: Ignoring removed mblk_io_submit option [ 70.262683][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.290145][ T5931] netlink: 'syz.2.860': attribute type 21 has an invalid length. [ 70.314661][ T5934] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 70.325665][ T5931] netlink: 132 bytes leftover after parsing attributes in process `syz.2.860'. [ 70.327672][ T5934] EXT4-fs (loop0): 1 truncate cleaned up [ 70.340703][ T5936] syz.1.861: attempt to access beyond end of device [ 70.340703][ T5936] loop1: rw=0, sector=97, nr_sectors = 120 limit=128 [ 70.349269][ T5934] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.381748][ T1796] kworker/u8:6: attempt to access beyond end of device [ 70.381748][ T1796] loop1: rw=1, sector=217, nr_sectors = 824 limit=128 [ 70.414685][ T5941] loop1: detected capacity change from 0 to 128 [ 70.416943][ T5934] SELinux: failed to load policy [ 70.436591][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.437039][ T5945] Invalid ELF header magic: != ELF [ 70.475529][ T5941] syz.1.864: attempt to access beyond end of device [ 70.475529][ T5941] loop1: rw=0, sector=97, nr_sectors = 120 limit=128 [ 70.498131][ T3444] kworker/u8:7: attempt to access beyond end of device [ 70.498131][ T3444] loop1: rw=1, sector=217, nr_sectors = 824 limit=128 [ 70.524915][ T5950] loop0: detected capacity change from 0 to 1024 [ 70.535568][ T5950] EXT4-fs (loop0): invalid first ino: 9 [ 70.593931][ T5954] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 70.605096][ T5957] loop2: detected capacity change from 0 to 2048 [ 70.628538][ T5959] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 70.643333][ T3290] Alternate GPT is invalid, using primary GPT. [ 70.649806][ T3290] loop2: p2 p3 p7 [ 70.660392][ T5963] loop4: detected capacity change from 0 to 1024 [ 70.680972][ T5963] EXT4-fs (loop4): invalid first ino: 9 [ 70.720023][ T5957] Alternate GPT is invalid, using primary GPT. [ 70.726418][ T5957] loop2: p2 p3 p7 [ 70.893609][ T5981] loop0: detected capacity change from 0 to 512 [ 70.923187][ T5981] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 70.945935][ T5988] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 70.947772][ T5991] loop3: detected capacity change from 0 to 128 [ 70.978083][ T5981] EXT4-fs (loop0): 1 truncate cleaned up [ 70.982615][ T5986] loop4: detected capacity change from 0 to 512 [ 70.990804][ T5981] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.007095][ T5986] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 71.020768][ T29] kauditd_printk_skb: 201 callbacks suppressed [ 71.020781][ T29] audit: type=1326 audit(1753839627.652:2570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5994 comm="syz.1.884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f607b53e9a9 code=0x7ffc0000 [ 71.050352][ T29] audit: type=1326 audit(1753839627.652:2571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5994 comm="syz.1.884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f607b53e9a9 code=0x7ffc0000 [ 71.073665][ T29] audit: type=1326 audit(1753839627.652:2572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5994 comm="syz.1.884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f607b53e9a9 code=0x7ffc0000 [ 71.097000][ T29] audit: type=1326 audit(1753839627.652:2573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5994 comm="syz.1.884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f607b53e9a9 code=0x7ffc0000 [ 71.120335][ T29] audit: type=1326 audit(1753839627.652:2574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5994 comm="syz.1.884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f607b53e9a9 code=0x7ffc0000 [ 71.143695][ T29] audit: type=1326 audit(1753839627.652:2575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5994 comm="syz.1.884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f607b53e9a9 code=0x7ffc0000 [ 71.167120][ T29] audit: type=1326 audit(1753839627.652:2576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5994 comm="syz.1.884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f607b53e9a9 code=0x7ffc0000 [ 71.190455][ T29] audit: type=1326 audit(1753839627.652:2577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5994 comm="syz.1.884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f607b53e9a9 code=0x7ffc0000 [ 71.213894][ T29] audit: type=1326 audit(1753839627.652:2578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5994 comm="syz.1.884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f607b53e9a9 code=0x7ffc0000 [ 71.237257][ T29] audit: type=1326 audit(1753839627.652:2579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5994 comm="syz.1.884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f607b53e9a9 code=0x7ffc0000 [ 71.247798][ T5986] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.273151][ T5995] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 71.273199][ T5986] ext4 filesystem being mounted at /181/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 71.296478][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.315502][ T6002] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 71.396390][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.429562][ T6014] loop2: detected capacity change from 0 to 1024 [ 71.456984][ T6014] EXT4-fs (loop2): invalid first ino: 9 [ 71.464932][ T6020] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 71.489749][ T6024] loop3: detected capacity change from 0 to 512 [ 71.508498][ T6024] EXT4-fs: Ignoring removed mblk_io_submit option [ 71.530853][ T6024] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 71.557563][ T6030] loop2: detected capacity change from 0 to 512 [ 71.567751][ T6026] loop1: detected capacity change from 0 to 512 [ 71.577229][ T6024] EXT4-fs (loop3): 1 truncate cleaned up [ 71.588498][ T6033] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 71.596209][ T6024] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.608786][ T6026] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 71.629407][ T6030] EXT4-fs: Ignoring removed mblk_io_submit option [ 71.655460][ T6030] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 71.671064][ T6030] EXT4-fs (loop2): 1 truncate cleaned up [ 71.677340][ T6024] SELinux: failed to load policy [ 71.683193][ T6030] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.712976][ T6030] SELinux: policydb magic number 0x6d616574 does not match expected magic number 0xf97cff8c [ 71.723498][ T6030] SELinux: failed to load policy [ 71.756974][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.797151][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.826032][ T6051] loop3: detected capacity change from 0 to 512 [ 71.843739][ T6045] loop2: detected capacity change from 0 to 512 [ 71.846135][ T6051] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 71.860744][ T6045] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 71.871812][ T6051] EXT4-fs (loop3): orphan cleanup on readonly fs [ 71.884567][ T6051] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 71.905391][ T6051] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 71.912447][ T6056] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 71.912512][ T6051] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.905: bg 0: block 40: padding at end of block bitmap is not set [ 71.935336][ T6051] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 71.950622][ T6045] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.952416][ T6051] EXT4-fs (loop3): 1 truncate cleaned up [ 71.966694][ T6045] ext4 filesystem being mounted at /183/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 71.979847][ T6051] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 72.034918][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.045413][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.077403][ T6069] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 72.098008][ T6073] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 72.148316][ T6080] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 72.201762][ T6086] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 72.201786][ T6084] loop4: detected capacity change from 0 to 2048 [ 72.232034][ T6090] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 72.232951][ T3484] Alternate GPT is invalid, using primary GPT. [ 72.245939][ T3484] loop4: p2 p3 p7 [ 72.255246][ T6084] Alternate GPT is invalid, using primary GPT. [ 72.261623][ T6084] loop4: p2 p3 p7 [ 72.305698][ T6094] loop2: detected capacity change from 0 to 512 [ 72.341674][ T6094] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 72.355450][ T6096] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 72.381591][ T6098] loop3: detected capacity change from 0 to 512 [ 72.407116][ T6104] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 72.422674][ T6098] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 72.437933][ T6098] EXT4-fs (loop3): orphan cleanup on readonly fs [ 72.464006][ T6111] loop0: detected capacity change from 0 to 128 [ 72.476685][ T6098] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 72.495976][ T6098] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 72.508490][ T6098] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.924: bg 0: block 40: padding at end of block bitmap is not set [ 72.523990][ T6098] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 72.536215][ T6113] loop1: detected capacity change from 0 to 128 [ 72.542732][ T6098] EXT4-fs (loop3): 1 truncate cleaned up [ 72.545039][ T6114] bio_check_eod: 2 callbacks suppressed [ 72.545053][ T6114] syz.0.930: attempt to access beyond end of device [ 72.545053][ T6114] loop0: rw=0, sector=97, nr_sectors = 120 limit=128 [ 72.549399][ T6098] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 72.593283][ T6113] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 72.605851][ T6113] ext4 filesystem being mounted at /190/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 72.658932][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.669534][ T31] kworker/u8:1: attempt to access beyond end of device [ 72.669534][ T31] loop0: rw=1, sector=217, nr_sectors = 824 limit=128 [ 72.684783][ T3298] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 72.736552][ T6123] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 72.761569][ T6127] loop3: detected capacity change from 0 to 2048 [ 72.793158][ T3523] Alternate GPT is invalid, using primary GPT. [ 72.799635][ T3523] loop3: p2 p3 p7 [ 72.826182][ T6131] 9pnet_fd: Insufficient options for proto=fd [ 72.851353][ T6127] Alternate GPT is invalid, using primary GPT. [ 72.857799][ T6127] loop3: p2 p3 p7 [ 72.939934][ T6144] loop0: detected capacity change from 0 to 512 [ 72.950067][ T6144] EXT4-fs: Ignoring removed mblk_io_submit option [ 72.963344][ T6146] 9pnet_fd: Insufficient options for proto=fd [ 72.971099][ T6144] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 72.985522][ T6144] EXT4-fs (loop0): 1 truncate cleaned up [ 72.997291][ T6144] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.037309][ T6144] SELinux: failed to load policy [ 73.065941][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.103918][ T6156] loop0: detected capacity change from 0 to 128 [ 73.112947][ T6156] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 73.206379][ T6160] random: crng reseeded on system resumption [ 73.280101][ T6163] 9pnet_fd: Insufficient options for proto=fd [ 73.297120][ T6164] netlink: 'syz.2.950': attribute type 13 has an invalid length. [ 73.304921][ T6164] netlink: 'syz.2.950': attribute type 17 has an invalid length. [ 73.374806][ T6166] random: crng reseeded on system resumption [ 73.393115][ T6164] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 73.483041][ T6178] netlink: 'syz.3.952': attribute type 13 has an invalid length. [ 73.490928][ T6178] netlink: 'syz.3.952': attribute type 17 has an invalid length. [ 73.518740][ T6178] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 73.585130][ T6184] 9pnet_fd: Insufficient options for proto=fd [ 73.591944][ T6183] loop4: detected capacity change from 0 to 128 [ 73.604640][ T6183] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 73.623160][ T6183] ext4 filesystem being mounted at /202/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 73.685725][ T6190] loop1: detected capacity change from 0 to 512 [ 73.693289][ T6190] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 73.740882][ T3299] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 73.782937][ T6194] 9pnet_fd: Insufficient options for proto=fd [ 73.993859][ T6202] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 74.017690][ T6204] FAULT_INJECTION: forcing a failure. [ 74.017690][ T6204] name failslab, interval 1, probability 0, space 0, times 0 [ 74.030415][ T6204] CPU: 0 UID: 0 PID: 6204 Comm: syz.4.966 Not tainted 6.16.0-syzkaller-03556-g0919a5b3b11c #0 PREEMPT(voluntary) [ 74.030485][ T6204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 74.030497][ T6204] Call Trace: [ 74.030503][ T6204] [ 74.030510][ T6204] __dump_stack+0x1d/0x30 [ 74.030547][ T6204] dump_stack_lvl+0xe8/0x140 [ 74.030564][ T6204] dump_stack+0x15/0x1b [ 74.030580][ T6204] should_fail_ex+0x265/0x280 [ 74.030600][ T6204] ? __se_sys_memfd_create+0x1cc/0x590 [ 74.030785][ T6204] should_failslab+0x8c/0xb0 [ 74.030804][ T6204] __kmalloc_cache_noprof+0x4c/0x320 [ 74.030838][ T6204] ? fput+0x8f/0xc0 [ 74.030909][ T6204] __se_sys_memfd_create+0x1cc/0x590 [ 74.030936][ T6204] __x64_sys_memfd_create+0x31/0x40 [ 74.030959][ T6204] x64_sys_call+0x2abe/0x2ff0 [ 74.030999][ T6204] do_syscall_64+0xd2/0x200 [ 74.031025][ T6204] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 74.031051][ T6204] ? clear_bhb_loop+0x40/0x90 [ 74.031152][ T6204] ? clear_bhb_loop+0x40/0x90 [ 74.031229][ T6204] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.031248][ T6204] RIP: 0033:0x7fa67354e9a9 [ 74.031261][ T6204] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 74.031308][ T6204] RSP: 002b:00007fa671bb6e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 74.031326][ T6204] RAX: ffffffffffffffda RBX: 00000000000004c0 RCX: 00007fa67354e9a9 [ 74.031336][ T6204] RDX: 00007fa671bb6ef0 RSI: 0000000000000000 RDI: 00007fa6735d16fc [ 74.031347][ T6204] RBP: 0000200000000ac0 R08: 00007fa671bb6bb7 R09: 00007fa671bb6e40 [ 74.031358][ T6204] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000000 [ 74.031375][ T6204] R13: 00007fa671bb6ef0 R14: 00007fa671bb6eb0 R15: 0000200000000500 [ 74.031393][ T6204] [ 74.050175][ T6206] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 74.258539][ T6213] random: crng reseeded on system resumption [ 74.270383][ T6215] 9pnet_fd: Insufficient options for proto=fd [ 74.276712][ T6217] loop2: detected capacity change from 0 to 128 [ 74.301054][ T6217] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 74.316552][ T6222] random: crng reseeded on system resumption [ 74.332632][ T6224] netlink: 'syz.4.969': attribute type 13 has an invalid length. [ 74.340410][ T6224] netlink: 'syz.4.969': attribute type 17 has an invalid length. [ 74.348802][ T6217] ext4 filesystem being mounted at /188/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 74.388603][ T6225] netlink: 'syz.0.973': attribute type 13 has an invalid length. [ 74.396533][ T6225] netlink: 'syz.0.973': attribute type 17 has an invalid length. [ 74.426989][ T6224] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 74.443754][ T3303] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 74.471423][ T6225] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 74.510279][ T6236] loop2: detected capacity change from 0 to 128 [ 74.519747][ T6236] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 74.650378][ T6240] __nla_validate_parse: 6 callbacks suppressed [ 74.650422][ T6240] netlink: 60 bytes leftover after parsing attributes in process `syz.1.979'. [ 74.669619][ T6240] loop1: detected capacity change from 0 to 512 [ 74.683972][ T6240] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 74.713271][ T6240] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.732120][ T6240] ext4 filesystem being mounted at /204/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 74.754808][ T6248] FAULT_INJECTION: forcing a failure. [ 74.754808][ T6248] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 74.768004][ T6248] CPU: 1 UID: 0 PID: 6248 Comm: syz.3.980 Not tainted 6.16.0-syzkaller-03556-g0919a5b3b11c #0 PREEMPT(voluntary) [ 74.768031][ T6248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 74.768042][ T6248] Call Trace: [ 74.768048][ T6248] [ 74.768131][ T6248] __dump_stack+0x1d/0x30 [ 74.768150][ T6248] dump_stack_lvl+0xe8/0x140 [ 74.768166][ T6248] dump_stack+0x15/0x1b [ 74.768179][ T6248] should_fail_ex+0x265/0x280 [ 74.768203][ T6248] should_fail+0xb/0x20 [ 74.768264][ T6248] should_fail_usercopy+0x1a/0x20 [ 74.768289][ T6248] strncpy_from_user+0x25/0x230 [ 74.768307][ T6248] ? kmem_cache_alloc_noprof+0x186/0x310 [ 74.768362][ T6248] ? getname_flags+0x80/0x3b0 [ 74.768383][ T6248] getname_flags+0xae/0x3b0 [ 74.768400][ T6248] path_setxattrat+0x223/0x310 [ 74.768469][ T6248] __x64_sys_lsetxattr+0x71/0x90 [ 74.768506][ T6248] x64_sys_call+0x2877/0x2ff0 [ 74.768523][ T6248] do_syscall_64+0xd2/0x200 [ 74.768556][ T6248] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 74.768582][ T6248] ? clear_bhb_loop+0x40/0x90 [ 74.768649][ T6248] ? clear_bhb_loop+0x40/0x90 [ 74.768671][ T6248] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.768692][ T6248] RIP: 0033:0x7f050df4e9a9 [ 74.768709][ T6248] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 74.768733][ T6248] RSP: 002b:00007f050c5b7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 74.768752][ T6248] RAX: ffffffffffffffda RBX: 00007f050e175fa0 RCX: 00007f050df4e9a9 [ 74.768765][ T6248] RDX: 0000000000000000 RSI: 0000200000000940 RDI: 0000000000000000 [ 74.768776][ T6248] RBP: 00007f050c5b7090 R08: 0000000000000000 R09: 0000000000000000 [ 74.768800][ T6248] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 74.768810][ T6248] R13: 0000000000000000 R14: 00007f050e175fa0 R15: 00007ffd949aa558 [ 74.768827][ T6248] [ 74.981295][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.999581][ T6255] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 75.030493][ T6257] 9pnet_fd: Insufficient options for proto=fd [ 75.062759][ T6259] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 75.101016][ T6262] loop3: detected capacity change from 0 to 128 [ 75.132389][ T6262] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 75.148101][ T6262] ext4 filesystem being mounted at /192/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 75.240531][ T3310] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 75.272865][ T6272] loop1: detected capacity change from 0 to 512 [ 75.283632][ T6272] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 75.315290][ T6275] loop0: detected capacity change from 0 to 512 [ 75.331086][ T6280] random: crng reseeded on system resumption [ 75.337181][ T6278] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 75.337856][ T6275] EXT4-fs: Ignoring removed mblk_io_submit option [ 75.358933][ T6275] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 75.405211][ T6275] EXT4-fs (loop0): 1 truncate cleaned up [ 75.407607][ T6283] 9pnet_fd: Insufficient options for proto=fd [ 75.411380][ T6275] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.502216][ T6285] netlink: 'syz.3.995': attribute type 21 has an invalid length. [ 75.505512][ T6287] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 75.510018][ T6285] netlink: 132 bytes leftover after parsing attributes in process `syz.3.995'. [ 75.521451][ T6275] SELinux: failed to load policy [ 75.561585][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.563039][ T6285] Invalid ELF header magic: != ELF [ 75.585958][ T6290] random: crng reseeded on system resumption [ 75.627424][ T6294] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 75.630251][ T6296] loop3: detected capacity change from 0 to 128 [ 75.646824][ T6296] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 75.651244][ T6298] netlink: 'syz.0.997': attribute type 13 has an invalid length. [ 75.670072][ T6296] ext4 filesystem being mounted at /197/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 75.703561][ T6298] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 75.730136][ T3310] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 75.966162][ T6311] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 75.994458][ T6313] loop2: detected capacity change from 0 to 2048 [ 76.033025][ T3290] Alternate GPT is invalid, using primary GPT. [ 76.039483][ T3290] loop2: p2 p3 p7 [ 76.049180][ T6313] Alternate GPT is invalid, using primary GPT. [ 76.055554][ T6313] loop2: p2 p3 p7 [ 76.091326][ T6315] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 76.095592][ T3484] udevd[3484]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 76.101185][ T3523] udevd[3523]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory [ 76.110900][ T3290] udevd[3290]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 76.158941][ T6317] loop2: detected capacity change from 0 to 1024 [ 76.167053][ T6317] EXT4-fs (loop2): invalid first ino: 9 [ 76.203297][ T6321] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 76.216814][ T6319] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1009'. [ 76.254597][ T6319] Invalid ELF header magic: != ELF [ 76.254638][ T6325] loop2: detected capacity change from 0 to 1024 [ 76.260491][ T6325] EXT4-fs (loop2): invalid first ino: 9 [ 76.314070][ T6330] 9pnet_fd: Insufficient options for proto=fd [ 76.381670][ T6338] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 76.381799][ T6340] loop4: detected capacity change from 0 to 512 [ 76.400592][ T6340] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 76.462092][ T6342] loop2: detected capacity change from 0 to 512 [ 76.463412][ T6344] loop0: detected capacity change from 0 to 128 [ 76.491354][ T6342] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 76.499593][ T6342] EXT4-fs (loop2): orphan cleanup on readonly fs [ 76.506152][ T6342] __quota_error: 308 callbacks suppressed [ 76.506167][ T6342] Quota error (device loop2): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 76.520272][ T6344] syz.0.1021: attempt to access beyond end of device [ 76.520272][ T6344] loop0: rw=0, sector=97, nr_sectors = 120 limit=128 [ 76.522695][ T6342] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 76.550532][ T6342] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 76.557945][ T6342] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1020: bg 0: block 40: padding at end of block bitmap is not set [ 76.574258][ T1796] kworker/u8:6: attempt to access beyond end of device [ 76.574258][ T1796] loop0: rw=1, sector=217, nr_sectors = 824 limit=128 [ 76.589391][ T6342] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 76.598611][ T6342] EXT4-fs (loop2): 1 truncate cleaned up [ 76.604731][ T6342] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 76.630008][ T6349] loop1: detected capacity change from 0 to 1024 [ 76.637420][ T6349] EXT4-fs (loop1): invalid first ino: 9 [ 76.670289][ T6353] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 76.675689][ T6351] loop0: detected capacity change from 0 to 1024 [ 76.687336][ T6351] EXT4-fs (loop0): invalid first ino: 9 [ 76.687697][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.693927][ T6355] FAULT_INJECTION: forcing a failure. [ 76.693927][ T6355] name failslab, interval 1, probability 0, space 0, times 0 [ 76.714922][ T6355] CPU: 0 UID: 0 PID: 6355 Comm: syz.3.1024 Not tainted 6.16.0-syzkaller-03556-g0919a5b3b11c #0 PREEMPT(voluntary) [ 76.714996][ T6355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 76.715008][ T6355] Call Trace: [ 76.715015][ T6355] [ 76.715022][ T6355] __dump_stack+0x1d/0x30 [ 76.715039][ T6355] dump_stack_lvl+0xe8/0x140 [ 76.715055][ T6355] dump_stack+0x15/0x1b [ 76.715078][ T6355] should_fail_ex+0x265/0x280 [ 76.715100][ T6355] ? __se_sys_memfd_create+0x1cc/0x590 [ 76.715166][ T6355] should_failslab+0x8c/0xb0 [ 76.715185][ T6355] __kmalloc_cache_noprof+0x4c/0x320 [ 76.715216][ T6355] ? fput+0x8f/0xc0 [ 76.715235][ T6355] __se_sys_memfd_create+0x1cc/0x590 [ 76.715263][ T6355] __x64_sys_memfd_create+0x31/0x40 [ 76.715311][ T6355] x64_sys_call+0x2abe/0x2ff0 [ 76.715332][ T6355] do_syscall_64+0xd2/0x200 [ 76.715357][ T6355] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 76.715389][ T6355] ? clear_bhb_loop+0x40/0x90 [ 76.715429][ T6355] ? clear_bhb_loop+0x40/0x90 [ 76.715450][ T6355] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.715552][ T6355] RIP: 0033:0x7f050df4e9a9 [ 76.715567][ T6355] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 76.715585][ T6355] RSP: 002b:00007f050c5b6e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 76.715604][ T6355] RAX: ffffffffffffffda RBX: 00000000000007ec RCX: 00007f050df4e9a9 [ 76.715617][ T6355] RDX: 00007f050c5b6ef0 RSI: 0000000000000000 RDI: 00007f050dfd16fc [ 76.715628][ T6355] RBP: 0000200000001580 R08: 00007f050c5b6bb7 R09: 00007f050c5b6e40 [ 76.715718][ T6355] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000280 [ 76.715731][ T6355] R13: 00007f050c5b6ef0 R14: 00007f050c5b6eb0 R15: 0000200000000500 [ 76.715809][ T6355] [ 76.770545][ T6362] 9pnet_fd: Insufficient options for proto=fd [ 76.778629][ T6360] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 76.821852][ T6365] loop3: detected capacity change from 0 to 512 [ 76.839066][ T6367] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 76.847187][ T6365] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 76.847420][ T6365] EXT4-fs (loop3): orphan cleanup on readonly fs [ 76.847611][ T6365] Quota error (device loop3): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 76.847645][ T6365] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 76.847809][ T6365] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 76.848064][ T6365] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1029: bg 0: block 40: padding at end of block bitmap is not set [ 76.848201][ T6365] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 76.848360][ T6365] EXT4-fs (loop3): 1 truncate cleaned up [ 76.848726][ T6365] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 76.875466][ T6371] loop2: detected capacity change from 0 to 128 [ 77.123961][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.168869][ T3484] ================================================================== [ 77.176978][ T3484] BUG: KCSAN: data-race in fill_mg_cmtime / shmem_mknod [ 77.183925][ T3484] [ 77.186244][ T3484] write to 0xffff8881044d5834 of 4 bytes by task 3523 on cpu 1: [ 77.193901][ T3484] shmem_mknod+0x137/0x180 [ 77.198329][ T3484] shmem_create+0x34/0x50 [ 77.202660][ T3484] path_openat+0x1102/0x2170 [ 77.207256][ T3484] do_filp_open+0x109/0x230 [ 77.211764][ T3484] do_sys_openat2+0xa6/0x110 [ 77.216364][ T3484] __x64_sys_openat+0xf2/0x120 [ 77.221143][ T3484] x64_sys_call+0x2e9c/0x2ff0 [ 77.225831][ T3484] do_syscall_64+0xd2/0x200 [ 77.230342][ T3484] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.236237][ T3484] [ 77.238558][ T3484] read to 0xffff8881044d5834 of 4 bytes by task 3484 on cpu 0: [ 77.246101][ T3484] fill_mg_cmtime+0x5b/0x260 [ 77.250697][ T3484] generic_fillattr+0x24a/0x340 [ 77.255552][ T3484] shmem_getattr+0x181/0x200 [ 77.260143][ T3484] vfs_getattr_nosec+0x143/0x1e0 [ 77.265084][ T3484] vfs_statx+0x113/0x390 [ 77.269331][ T3484] vfs_fstatat+0x115/0x170 [ 77.273746][ T3484] __se_sys_newfstatat+0x55/0x260 [ 77.278779][ T3484] __x64_sys_newfstatat+0x55/0x70 [ 77.283806][ T3484] x64_sys_call+0x135a/0x2ff0 [ 77.288486][ T3484] do_syscall_64+0xd2/0x200 [ 77.293000][ T3484] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.298893][ T3484] [ 77.301211][ T3484] value changed: 0x30540f17 -> 0x30734aab [ 77.306922][ T3484] [ 77.309243][ T3484] Reported by Kernel Concurrency Sanitizer on: [ 77.315393][ T3484] CPU: 0 UID: 0 PID: 3484 Comm: udevd Not tainted 6.16.0-syzkaller-03556-g0919a5b3b11c #0 PREEMPT(voluntary) [ 77.327025][ T3484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 77.337079][ T3484] ================================================================== [ 77.351083][ T6383] loop2: detected capacity change from 0 to 1024 [ 77.360859][ T6383] EXT4-fs (loop2): invalid first ino: 9 [ 77.434970][ T6380] loop0: detected capacity change from 0 to 512 [ 77.444839][ T6380] ext4: Unknown parameter 'smackfsfloor'