last executing test programs: 3.080283262s ago: executing program 4 (id=451): r0 = fsopen(&(0x7f0000000400)='autofs\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000580)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000380), &(0x7f0000000280)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000014c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r3, 0xfeffff, 0x680, 0x3f000002, &(0x7f0000000700)="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", 0x0, 0xf0, 0x0, 0xf0, 0xffffff0c}, 0x40) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000240)=',-\x10*\x00', &(0x7f0000000380)='$\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000540)='\x00', &(0x7f0000001c80)='n', 0x1) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f00000005c0)='\x00H\xeb', 0x0, r0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='syzkaller\x00', &(0x7f0000001140)='\xf1\x95\xb3>-\x8c\xd4\r\x01\xfa\xe2{eED\x0e\xaaPV\x11\xff\xb6j\xd4~6\x82^\x9b b', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f00000002c0)='\x04\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000940)="ad", 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='kfree\x00', &(0x7f0000000800)='\x00.-&]\xe1\x19\t\xe88\xces`Z1\\\x98\x8b1\xb9\xc9\xe6\xf1\x94\x1e[\x8bs\x94\x80\x96\xf2\x02\x98+vv\x8a\xf7D\x19\x8cd\xa6\a\xe0S\xda2\b\xf1\xb5\x17V\x04\fm\xe4?0\x0fL\xc5\xba\xbb\x1di+Q~\xfa\x9a}m;\xe1\xcef8\xa0\x04\f\x15\x82!-\x91\x81\xac\xa3::\xc6\x9b\xa2\x13\xde&\xc4\x80\x8c\x15\x01\n\x81\xbf1\x96$\xeeQ\xe7\' RI\x1f\x00'/133, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000a40)='t`\x16{\xf9\x8eE5\xf7\xbbE\xc94I\xb4\xbap\xc7\x13\x0f\xa8\x8c.\xc8\xe5\xbc\xbeQ#\v$z\x7f:\xe5J\xad\xf1\xdc\x8dE\x90\xf8\x01\x1f\xdd\xa6!\xf0\x1a\x9b\'\x8a\x83Y\x8d\x01\xf8\xda$\x93\xbb|\x00', &(0x7f0000000a80)='U&~=\xd8G\x93\x14\xc9o\xaf\x8b\xd4-\xc5\x12\x8d\xc8\xf1\'\xcf\x92V\xceKg\x8b\xc3\x9e\xd6H\xad0`\xaf\x06\x00xOq\xb6H\x11', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x3a0ffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000000006c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x4030582a, &(0x7f0000000040)) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x4030582a, &(0x7f0000000040)=0x6c0000000000) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000140)=ANY=[], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r6}, 0x10) close(r0) 2.894646747s ago: executing program 4 (id=458): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 2.814738574s ago: executing program 4 (id=461): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000181fff0f0000000000db0000850000006d000000850000002300000095"], &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='kfree\x00', r0}, 0x18) r1 = socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$inet_sctp(r1, &(0x7f0000000500)=[{&(0x7f0000000040)=@in={0x2, 0xb, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000700)=[{&(0x7f00000000c0)='l', 0x1}], 0x1, &(0x7f0000000280)=[@init={0x18, 0x84, 0x0, {0x7ff, 0x0, 0x3}}, @dstaddrv4={0x18, 0x84, 0x7, @broadcast}], 0x30, 0x14001}], 0x1, 0x4044040) 2.691991593s ago: executing program 4 (id=466): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004"], 0x15) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) 2.638335628s ago: executing program 4 (id=467): io_setup(0x6, &(0x7f0000001000)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(0x0, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYRES64=r0, @ANYRES64, @ANYRES32, @ANYRESHEX=r0, @ANYBLOB="847f64255b3f79dd9d70eb961c704d92cd4557770bddd6b5b5b8d99c2f9a4f106f113937b8f10c910acefda8ea4b6beeab697b929e16cbfbd418b65bb68ce5028954d8279f3bcc310c4686aec3ec5528cd09a7844175af598751811b142e732ff9e1e2cf866d6c8455b66e3f75b9d1270cb30bd01f5d1722516ad68eea082874c01fb1baf785b83f72b8eadf5e4478300b52dd606ac06208d818297e65e7a0f496db50cd"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xd7) timer_create(0x0, &(0x7f0000000040)={0x0, 0x21, 0x800000000004}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = timerfd_create(0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000000)={r1, 0x6, 0x8, 0x8}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f0000001780)=0x100000, 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES64=r3, @ANYBLOB="0000000000000000b708000000000e007b8af80800000000000000000000000007020000f8ffffffb703000008000000b704000800000020850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32=r5, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, @fallback=0x35, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='xen_mmu_set_pmd\x00', r8, 0x0, 0x7}, 0x18) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001300)={0x0, 0x9, 0x0, [0x10000, 0x7, 0x1, 0x9, 0x9], [0x8000000000000000, 0x1, 0xa, 0x5, 0xc, 0xfffffffffffffff8, 0x0, 0x7f, 0x0, 0xd0, 0xb, 0x3ff, 0x242, 0x3b, 0xe9, 0x9, 0xffffffffffffffff, 0xf3, 0x3, 0x1c00000, 0x5, 0xd20, 0x8, 0x4, 0x7fffffffffffffff, 0x23, 0x400, 0xcc, 0x0, 0x8, 0x6, 0x2, 0x33, 0x8000000000001, 0xfffffffffffffff8, 0x9, 0x5, 0x1ff, 0x1, 0x4, 0x8, 0x401, 0x40, 0x4, 0x100, 0x81df244, 0x100000001, 0x6, 0x89ff, 0x2, 0x4, 0x3, 0xe2, 0x0, 0x2, 0x100200001, 0xb3, 0x8, 0x4, 0x5, 0x1, 0x9, 0xa24, 0xb0d, 0x3, 0x9, 0xe, 0x7, 0x9, 0x3ff, 0xfffffffffffffffd, 0x1, 0xfff, 0x3, 0x2000000, 0x800000000005, 0x18, 0x8, 0xacf, 0x4000000200, 0x3, 0xe3, 0xff, 0x2, 0xb, 0x4, 0x1000, 0xd429, 0x5e5, 0x6, 0xe58, 0x10000, 0x1, 0x80, 0xffffffffffff8001, 0x6, 0x2, 0x4, 0x2421, 0xa, 0x5, 0xfffffffffffffffc, 0x7fffffffffffffff, 0x0, 0x7, 0x0, 0x2, 0x1000, 0x80000001, 0x3, 0x5, 0x20e, 0x2, 0x3, 0x8000, 0x80ff, 0x97, 0x4, 0x7, 0x8, 0xffffffff]}) ioctl$BTRFS_IOC_DEV_REPLACE(r7, 0xca289435, 0x0) ioctl$BTRFS_IOC_DEV_INFO(r6, 0xd000941e, &(0x7f00000017c0)={0x0, "0e7b325e69132379da3a5fc95f955a35"}) socket$inet(0x2, 0x7, 0x20004) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x38, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x8000, 0x0, 0x1, 0x8, 0x20005, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff7e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) lsm_set_self_attr(0x69, 0x0, 0x21, 0x0) r9 = memfd_create(&(0x7f00000009c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9b5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\\\xb0:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85l\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~7\x16\x02\x00(v\xe6`\"6\xfcgC\xb5\xf0\x13.zj\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1exQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1.E\b1\xcb\xa2\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x82\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc0r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/devices\x00', 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) io_uring_enter(0xffffffffffffffff, 0xf3, 0x80ffff, 0x49, 0x0, 0x40) r4 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000380)=ANY=[@ANYBLOB="6800fff4100000000000", @ANYRES16=r2, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r5], 0x68}, 0x1, 0x0, 0x0, 0x4810}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) preadv(r0, &(0x7f0000000580)=[{&(0x7f0000000480)=""/140, 0x8c}], 0x1, 0xf0, 0xd215) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410884, &(0x7f00000001c0)={[{@nouid32}, {@acl}]}, 0x1, 0x775, &(0x7f0000001180)="$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") link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') fallocate(0xffffffffffffffff, 0x1, 0x0, 0x1001f0) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x1}], 0x1, 0x33000, 0x0, 0x3) 1.194465144s ago: executing program 0 (id=487): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x2080, 0x0) write$snapshot(r0, &(0x7f0000000300)="4d4f8aae27e9ed0e15ac5cd2fa83465bb4431513c2d662d4113c02a8dc605fb5546d0ba1139d7e40cba6fd58a3add514efff1732499fd4ef43b2497f32ad6cb4c8772985161d17e32c5b0f9ee780463ec03a1f79292bbb655b2624b3be0274e82f3cbcf8a2927945858adc232cae8e03e4d490196ff628be12cd3f2ece89a10d07fff023c097f73da4b5abfb3bdf79eff6ba852bc12e2fcffdbb35c245c0c68b54654412b54b597a2d3de2fdbae9481c78a33580c0288ea3a17d87505ce2b8bff2a0c60c5e58", 0xc6) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/sloppy_sctp\x00', 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TCFLSH(r1, 0x80045440, 0x4000000000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000007940)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x33f}, 0x1, 0x0, 0x0, 0xc0d0}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r4, &(0x7f0000000040)={@val={0x0, 0x800}, @val={0x712ccdc180898042, 0x5, 0xe, 0xffff, 0x14, 0x6}, @mpls={[], @llc={@llc={0x80, 0x4, 'u', "3e3ffa3e78eeee6daf55080c2e19c21ed0541f6458b9db7299"}}}}, 0x2a) connect$pppl2tp(r3, &(0x7f0000000440)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e20, @multicast2}, 0xa}}, 0x26) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r6}, 0x10) sendmmsg$inet(r3, &(0x7f0000005f80)=[{{0x0, 0x0, &(0x7f0000005dc0)=[{&(0x7f00000010c0)="7d5107673289eeae3f806c5c62db497a0299399ab6101c3b", 0x1}], 0x1}}], 0x4000000000001ce, 0x8040) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./bus\x00', 0x2000414, &(0x7f0000000500)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRES64=0x0, @ANYRESHEX, @ANYRESHEX, @ANYRESDEC], 0x1, 0x2b8, &(0x7f0000000800)="$eJzs3NFLU38Yx/Hn5/y5OdEtiKCgeqibuhm6/oAaoRANCnNSXQTHPKux0ybnDGMRuZvotr9DuuwuqP4Bb6Kb7ruTIOjGi+gbnrPpmU6durml7xfIeXae74fzdZvybLCt3n/7rJj3UnmrIgMxlQGRmqyJJNeruv/qxwG/HpKwmlwd+fXt/L0HD29nstnJadWpzMy1tKqOXfz4/OW7S58rI7Pvxz5EZSX5aPVn+vvK0MrZ1T8zTwueFjwtlStq6Vy5XLHmHFvnC14xpXrXsS3P1kLJs92mft4pLyxU1SrNj8YXXNvz1CpVtWhXtVLWiltV64lVKGkqldLRuJxsg22syS1PT1uZHdsm0tEdoeuGW5103UytdTO3fAR7AgAAfWb3+T+Y9Xee/7OzwXE/8/+Zved/Eeb/Lqk13dpj/sex4LoZK17/+23G/A8AAAAAAAAAAAAAAAAAAAAAwL9gzZiEMSaxfqyf8m9HRSQmIqbe7/E20SXhx9+EfvZ4/K/3aLvosNAH92IizpvF3GIuOAb9TF4K4ogt45KQ3/7zoS6op25lJ8fVl5RPzlI9v7SYi0i0kW9ItspfODUR5LU5/7/Ew9dPS0JOt75+umV+SK5cDuVTkpAvj6Usjsz7z+vN/KsJ1Zt3slvyw/46AAAAAACOg5Ru2Pb63e/7C2KyvR/kQ+8PGGOWdnt/YMvr60E5185XVAIAAAAAgEPzqi+KluPY7gGKqIgcIt75whiR3m8jIv1xbzQXN0SkD7ZxVEVMRIIzepD4j414WynTxppBEen53bKPotf/mQAAAAB02ubQv4/Q19dd3BEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACdPu98H1li/rdVo7BIPXS5y5L8gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0Ef+BgAA//+4IRyf") mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) rename(&(0x7f0000000180)='./file0\x00', &(0x7f0000000140)='./bus/file0/file0\x00') 1.088300892s ago: executing program 2 (id=489): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000600), r0) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000680)={0x20, r1, 0x21, 0x70bd2c, 0x25dfdbfe, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_AF={0x5, 0x2, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x44}, 0x850) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r2, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000b80)={0x20, r3, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x20}}, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1000f4) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f0000000800)='GPL\x00', 0x101, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, 0x2}, 0xffffff19) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', r6}, 0x10) r7 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x8, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x4, 0xaea}, 0x14105, 0x32, 0xfffffbff, 0x3, 0x1, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x40082406, &(0x7f00000001c0)='cpu<-0\t\t\t') setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f", 0xe) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="050000"], 0x48) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r8, 0x6, 0x24, &(0x7f0000000c00), &(0x7f0000002000)=0x2) syz_mount_image$ext4(&(0x7f0000000640)='ext4\x00', &(0x7f0000000200)='./file2\x00', 0x200000, &(0x7f0000000000)={[{@dioread_lock}, {@noquota}, {@errors_remount}, {@noblock_validity}]}, 0xfc, 0x564, &(0x7f00000008c0)="$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") open(&(0x7f0000000300)='./file1\x00', 0x14927e, 0x0) 999.62303ms ago: executing program 1 (id=491): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) ioctl$SIOCX25CALLACCPTAPPRV(r1, 0x89e8) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000000140)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x4, @loopback, 0x1}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x20004000) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f0000000240)={0x0, 0x1c, "e039933149ea9736b7c770eb3c5e1462fbb1ffbd27927cc5be2d85fd"}, &(0x7f0000000280)=0x24) sendfile(r1, r0, 0x0, 0x7ffff000) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x23, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0x4}, 0x0, 0x6, 0x4, 0x1, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000009}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0xb) r3 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r3, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x7, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 965.842802ms ago: executing program 2 (id=492): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2c74664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5431bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de086553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c04f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c80f30505dd4cf2ae2a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265425d513a1294b8439276394945d94a589708e32a1cb30f1fa4b2f08e01dc5e8c6732e6dc59b5c8cb400000000000000592c9b68f09c8f5ddb20b4ae08b4d9df548e5ed6cd47b91a4bea8b6aa52edf64576aef1e43f2958437fdc20fbbd0d4e13d8cce1193b2f9b4f107e25af178d056e1b1e40bd75b013f7484fae0bc447b1ffaf34819fe3ad1a634c94345e26e1e68dec08723a37b05d1594a66a4718a51d4d67fc880c9d640f4eacc509873f1a103c87f69"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00') mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000003, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r2 = io_uring_setup(0x6c4, &(0x7f0000000080)={0x0, 0x4075, 0x18, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002700)=""/4096, 0x1000}], 0x0, 0xa}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000480), 0x1a1040, 0x0) ioctl$AUTOFS_IOC_FAIL(r3, 0x4c80, 0x7000000) 874.07402ms ago: executing program 2 (id=495): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0x8, &(0x7f0000001f80)=ANY=[@ANYBLOB="7a0af8ff7525732cbfa100000000000007010000f8ffffffb702000005000000bf130000000000008500000006000000b700000000000000950000f700000000b2595285fa97ead0169191d54f8196217fc563e2fc91f6da4dad4fdc2eb1b5956fc4a33ca263e2b5d47b2b00000000b1a297cfddd73f30f2382f6c2d3ffdd45be583823c0f092248a57d48621f3c1c65ee19ee875daf45006a4c4ea5e15b2f9618d547244a22000010000800db583620ce7243d1aebdb638d91dbef6619358399aa9c2acd068c03efefd8bc77edf2d34b12cd48a1b20fb7dd843267e0331759f4ec6b5b0af58e604f494eff289026d5045ef08000000000000007718a09f4886afc26abba34635d0e8b598a51bc742135a6e1d33fe226c944bc70bb30d435aa8b5202db761014b1b999a12df6bee431a6681000000263b6233e1c0fe30e3841bef895c5a637b0bf2eac3cb07b74a72291a1a2b523dd81b6651b1ee29e999bb004823ebcd8c65743f31f84b263ab9b3426692d01ad194f302d7a658e90000000001000000b6b2f25ddb8c640ab321a402058c92cdfbea882b0b18914781ceb10814cf4ee23ddb79fff5eb156e0a000000000000f2bd164a178d86d6935eb8b75bc4eb680d10e8b6a54c6c8674caf63ff76622939a20d4aadf85db40179c2cf83ee07e30a279d8fdf3bc282deb43a03409f8e6972f3f720d045923702cede0f3e91411f3f1b16f065624f280a7dcce8db910f93c49b9e0aa390d0da6972ed719d7e0efb2bb713d1890e317c8de105c3933fd5d5bf38f6b9fc39fc829dcfe4af8ac5fbb7314a7a433e0182767d1376eda2b9c66200349e62d4d0ab1a1dc51907c980000cfb215af2c1a3c22243cce23b00000a857d61b0d66c3f6da8aed31027c33204ea0fa0620111920d3f24980e9995a510bd87b06440a0a26130098b901c53a02cfbfd8bcbdec9f34542c3c9652adefde555ecd28ebc88082bab431ee3e1adb5b0ad14c79dd4411ecc96c512f3b72a9b3a0c3e07ec6b427bdc0bf3963e9f802a5feab82a989db62d8d1339f842b3f593d6c24fe015ec63c658ba7c4fae17514f802709ab4fa5caa932d4b65a5ecfc422899513ddde6ec04974f9981a8c155c26e0da70e524832ab04dec9ce66a62ceffbb15b1857c93666fe043a266a451f9a1e1f054211b9ae566b58f4f356c7a4054ce13f6fcc58912a175bd9cc3c494894ad39b36e34e608f4ac00cf22c27bb8c12bcf4beeb579fc"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x2800000002000000, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x500, 0x4000000}, 0x28) 831.679823ms ago: executing program 0 (id=496): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) ioctl$SIOCX25CALLACCPTAPPRV(r1, 0x89e8) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000000140)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x4, @loopback, 0x1}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x20004000) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f0000000240)={0x0, 0x1c, "e039933149ea9736b7c770eb3c5e1462fbb1ffbd27927cc5be2d85fd"}, &(0x7f0000000280)=0x24) sendfile(r1, r0, 0x0, 0x7ffff000) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x23, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0x4}, 0x0, 0x6, 0x4, 0x1, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000009}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0xb) r3 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r3, 0x2) openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 831.451093ms ago: executing program 2 (id=497): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000000040)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x800}, 0x18) socket$inet(0x2, 0x2, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000001850000001b000000b70000000000070095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) r2 = socket$netlink(0x10, 0x3, 0xb) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2fffffffd}, 0xc) close(r2) 798.184766ms ago: executing program 2 (id=499): socket$netlink(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, 0x0, 0x0, 0x4}, 0x94) socket$packet(0x11, 0x3, 0x300) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$NFT_BATCH(r1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x8051) syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r1) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[], 0x14}}, 0x4044057) 739.008081ms ago: executing program 2 (id=500): r0 = socket$inet6(0xa, 0x2, 0x3a) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@dioread_nolock}, {@data_err_abort}, {@inlinecrypt}, {@dioread_lock}, {@data_err_ignore}, {@discard}, {@data_err_ignore}, {@grpquota}, {@noblock_validity}, {@user_xattr}, {@bh}, {@errors_remount}]}, 0x1, 0x553, &(0x7f0000001080)="$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") chdir(&(0x7f0000000040)='./file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x82400, 0x184) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write(r4, &(0x7f00000001c0)="f1", 0x1) sendfile(r4, r2, 0x0, 0x40001) sendfile(r4, r3, 0x0, 0x7ffff000) setsockopt$packet_int(r3, 0x107, 0x7, &(0x7f0000000080)=0x3, 0x4) lseek(r1, 0x12, 0x1) getdents(r1, 0x0, 0x40) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bind$inet6(r0, 0x0, 0x0) 586.894383ms ago: executing program 3 (id=502): bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0a00000004000000090000000c00000000000000", @ANYRES32, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="020000fa00000000000000000000000004"], 0x50) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x58, 0x58, 0x6, [@decl_tag={0xd, 0x0, 0x0, 0x11, 0x8, 0x1}, @struct={0x0, 0x4, 0x0, 0x4, 0x1, 0x6aa, [{0xa, 0x5, 0x6}, {0xb, 0x5, 0x800}, {0x7, 0x0, 0x5}, {0xe, 0x0, 0x8c}]}, @func={0x9, 0x0, 0x0, 0xc, 0x2}]}, {0x0, [0x30, 0x2e, 0x61, 0x30]}}, &(0x7f0000000180)=""/28, 0x76, 0x1c, 0x0, 0x8, 0x10000}, 0x28) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYRES64=r0, @ANYRESHEX, @ANYBLOB="000000000001000066080000000000001800000000000000000000000000000095000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r2, 0x0, 0xfffffffffffffffd}, 0x18) r3 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x2) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r4, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x73, 0xfffff038}, {0x6, 0x0, 0x5, 0xffffffff}]}, 0x10) r5 = dup(r3) ioctl$USBDEVFS_CONTROL(r5, 0xc0185500, &(0x7f0000000440)={0x80, 0x6, 0xf00, 0x1, 0x0, 0x5, 0x0}) socket$key(0xf, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r8}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@deltfilter={0x24, 0x2d, 0x200, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {0x4, 0xe}, {0x4, 0x9}}}, 0x24}}, 0x14000000) r9 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r10, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0xb4}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) 509.110569ms ago: executing program 3 (id=503): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000600), r0) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000680)={0x20, r1, 0x21, 0x70bd2c, 0x25dfdbfe, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_AF={0x5, 0x2, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x44}, 0x850) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r2, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000b80)={0x20, r3, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x20}}, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1000f4) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f0000000800)='GPL\x00', 0x101, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, 0x2}, 0xffffff19) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', r6}, 0x10) r7 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x8, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x4, 0xaea}, 0x14105, 0x32, 0xfffffbff, 0x3, 0x1, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x40082406, &(0x7f00000001c0)='cpu<-0\t\t\t') setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f", 0xe) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="050000"], 0x48) socket$inet6_mptcp(0xa, 0x1, 0x106) syz_mount_image$ext4(&(0x7f0000000640)='ext4\x00', &(0x7f0000000200)='./file2\x00', 0x200000, &(0x7f0000000000)={[{@dioread_lock}, {@noquota}, {@errors_remount}, {@noblock_validity}]}, 0xfc, 0x564, &(0x7f00000008c0)="$eJzs3c9rHFUcAPDvbJI2/aFJoRT1IIEerNRumsQfFTzUo2ixoPe6JNNQsumW7KY0sWB7sBcvUgQRC6J37x6L/4B/RUELRUrQg5eV2cym22Y32aSbJu1+PjDJezOzee+7M9+XNzu7bAB9ayz7UYh4NSK+TSJGWrYNRr5xbHW/lYfXp7MliXr9s7+TSPJ1zf2T/PehvPJKRPz+dcTJwvp2q0vLc6VyOV3I6+O1+Svj1aXlU5fmS7PpbHp5cmrqzDtTk++/927PYn3z/L8/fHr3ozPfHF/5/tf7R24ncTYO59ta43gKN1orYzGWPydDcfaJHSd60Nhekux2B9iWgTzPhyIbA0ZiIM/6tuojz7JrwA77KktroE8l8h/6VHMe0Ly279F18HPjwYerF0Dr4x9cfW0khhvXRgdXkseujLLr3dEetJ+18dtfd25nS/TudQiATd24GRGnBwfXj39JPv5t3+ku9nmyDeMfPDt3s/nPW+3mP4W1+U+0mf8capO727F5/hfu96CZjrL53wdt579rN61GB/LaS40531By8VI5zca2lyPiRAztz+ob3M/5orByr95pY+v8L1uy9ptzwbwf9wf3P/6YmVKt9FRBt3hwM+K1tvPfZO34J22Of/Z8nO+yjWPpndc7bds8/p1V/znijbbH/9EdrWTj+5PjjfNhvHlWrPfPrWN/dGp/t+PPjv/BjeMfTVrv11a33sZPw/+lnbZt9/zfl3zeKO/L110r1WoLExH7kk/Wr5989Nhmvbl/Fv+J4xuPf+3O/wNZYncZ/62jt1p3Hd5a/Dsri39mS8d/64V7H3/5Y6f2uzv+bzdKJ/I13Yx/3XbwaZ47AAAAAAAA2GsKEXE4kkJxrVwoFIur7+84GgcL5Uq1dvJiZfHyTDQ+KzsaQ4Xmne6RlvdDTOTvh23WJ5+oT0XEkYj4buBAo16crpRndjt4AAAAAAAAAAAAAAAAAAAA2CMORQy3+/x/5s+B3e4dsOM2+Mpv4AXXOf/zLb34pidgT/L/H/qX/If+Jf+hf8l/6F/yH/qX/If+Jf+hf20l/385t4MdAQAAAAAAAAAAAAAAAAAAAAAAAAAAgBfD+XPnsqW+8vD6dFafubq0OFe5emomrc4V5xeni9OVhSvF2UpltpwWpyvzm/29cqVyZWIyFq+N19Jqbby6tHxhvrJ4uXbh0nxpNr2QDj2TqAAAAAAAAAAAAAAAAAAAAOD5Ul1aniuVy+mCgsK2CoN7oxsKPS7s9sgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAI/8HwAA///F1Dry") open(&(0x7f0000000300)='./file1\x00', 0x14927e, 0x0) 417.722717ms ago: executing program 3 (id=504): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00') mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000003, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r2 = io_uring_setup(0x6c4, &(0x7f0000000080)={0x0, 0x4075, 0x18, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002700)=""/4096, 0x1000}], 0x0, 0xa}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000480), 0x1a1040, 0x0) ioctl$AUTOFS_IOC_FAIL(r3, 0x4c80, 0x7000000) 325.185514ms ago: executing program 1 (id=505): rt_sigpending(0x0, 0x0) 285.906577ms ago: executing program 1 (id=506): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x2080, 0x0) write$snapshot(r0, &(0x7f0000000300)="4d4f8aae27e9ed0e15ac5cd2fa83465bb4431513c2d662d4113c02a8dc605fb5546d0ba1139d7e40cba6fd58a3add514efff1732499fd4ef43b2497f32ad6cb4c8772985161d17e32c5b0f9ee780463ec03a1f79292bbb655b2624b3be0274e82f3cbcf8a2927945858adc232cae8e03e4d490196ff628be12cd3f2ece89a10d07fff023c097f73da4b5abfb3bdf79eff6ba852bc12e2fcffdbb35c245c0c68b54654412b54b597a2d3de2fdbae9481c78a33580c0288ea3a17d87505ce2b8bff2a0c60c5e58", 0xc6) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/sloppy_sctp\x00', 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TCFLSH(r1, 0x80045440, 0x4000000000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000007940)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x33f}, 0x1, 0x0, 0x0, 0xc0d0}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r4, &(0x7f0000000040)={@val={0x0, 0x800}, @val={0x712ccdc180898042, 0x5, 0xe, 0xffff, 0x14, 0x6}, @mpls={[], @llc={@llc={0x80, 0x4, 'u', "3e3ffa3e78eeee6daf55080c2e19c21ed0541f6458b9db7299"}}}}, 0x2a) connect$pppl2tp(r3, &(0x7f0000000440)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e20, @multicast2}, 0xa}}, 0x26) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r6}, 0x10) sendmmsg$inet(r3, &(0x7f0000005f80)=[{{0x0, 0x0, &(0x7f0000005dc0)=[{&(0x7f00000010c0)="7d5107673289eeae3f806c5c62db497a0299399ab6101c3b", 0x1}], 0x1}}], 0x4000000000001ce, 0x8040) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./bus\x00', 0x2000414, &(0x7f0000000500)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRES64=0x0, @ANYRESHEX, @ANYRESHEX, @ANYRESDEC], 0x1, 0x2b8, &(0x7f0000000800)="$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") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000f80)='./bus/file0\x00', 0x810408, 0x0, 0xff, 0x0, &(0x7f00000007c0)) rename(&(0x7f0000000180)='./file0\x00', &(0x7f0000000140)='./bus/file0/file0\x00') 285.247447ms ago: executing program 3 (id=507): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001240)={0xffffffffffffffff, 0xe0, &(0x7f0000001140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, &(0x7f0000000d40)=[0x0], &(0x7f0000000d80)=[0x0, 0x0, 0x0], 0x0, 0xd7, &(0x7f0000000dc0)=[{}], 0x8, 0x10, &(0x7f0000001080), &(0x7f00000010c0), 0x8, 0x90, 0x8, 0x8, &(0x7f0000001100)}}, 0x10) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast2, @in=@broadcast, 0x0, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0xa0, 0x0, r1, 0xee01}, {0x0, 0x0, 0x72, 0x0, 0xfffffffffffffffe}, {0x3}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in=@dev={0xac, 0x14, 0x14, 0x19}, 0x0, 0x32}, 0x8, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x4}}, 0xe8) sendmmsg$inet6(r0, &(0x7f0000000ec0)=[{{&(0x7f0000000080)={0xa, 0x4e24, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, &(0x7f00000001c0)=[{&(0x7f00000000c0)="8a5b8357e688143724b7f8e7d43c6f51e92681c4c5ac26138616d60c89b43d607ce48da47a7be4c1b5731ad6cbc52fbc2eceb5a446af5f6c23709dac8d2f2c6d", 0x40}, {&(0x7f0000000100)="9817150ebec5857075f272", 0xb}, {&(0x7f0000000280)="fdab394cb2b15c9250fac2bddb6f8a6dc13ab83f3f712598dbbdb97fe98793befbcf3c8c6eb47fdea028e41ee77b8e113e13f07bf760b87a0524796b578585883f22095ef6e757706419e5f82e4151fa52a36332f3bbbd622be0bf28aa6191d70d685a4f73bd8e6a06fd9e0ac9dfaaf58d3079f34ed0c489842bba7acc92157158bc27fd1097ec52de5a26a3f1516decb3edaa44f741034a4755176af6d2cef3edf58e561cdb4b2cd572228dcecc45be2598f1c6b96ad1f2159eb5a7f39f3a03ebdfe02ae5df26f4c7cd1a041a445b", 0xcf}, {&(0x7f0000000140)}], 0x4, &(0x7f0000000200)=[@flowinfo={{0x14, 0x29, 0xb, 0x1}}], 0x18}}, {{&(0x7f0000000380)={0xa, 0x4e21, 0x4, @dev={0xfe, 0x80, '\x00', 0x2b}, 0x9}, 0x1c, &(0x7f00000007c0)=[{&(0x7f00000003c0)="fd569d884abaa5a14f72c6d85762e4749ddb74f0b2e600ed766ecfbaa3d03d9ed9cf6373838d7c394fd136bf31ff2f5254b9c89c620df2724708bea9dfbd71a79781d686df82a3546a8532f098117e86e9c6a092eb100a2c87098be929", 0x5d}, {&(0x7f0000000440)="ceba0d2b2c0033c48def40923bbea7247aab89b84f3906f386aa1b402b9611a6856ee547798db395d5b7a980b3eee443", 0x30}, {&(0x7f00000005c0)="a66bd580c042e0d375dd2ae01bb820be2b91209d7295b1fb0b1df0564a4c3735115fc2897b80e092a71653974b75e92a0834082d9d3de0927d79ff7f2e98d365d77f07004bb980a8b42112ceb354e86a06609d9b33d0fdc4f8a899b7d8382c2175afde120a59f88919218039643d4f48da2a7c2d6f090e943ce9e5484c3b3ee1f90ca2a02db687967ed03f3620e3efc59a7177acad1389", 0x97}, {&(0x7f0000000680)="af59f1db3a4b48012807f71d1086aada08cbf48110e796520653a2d2b32b2e468b4aa1d3054e31917899b863284bb8610e03f12262969d3d245dbddde49cdce3ec49799f5927ce65e4407236b2871b50f53d90ab0e6a85888cc674a80588bb690fb4f921147f245a6a08abf58d32aea52d5a3cc90720d6c8753476a79951378ec2230e5d091b10cef552902d521427eb", 0x90}, {&(0x7f0000000480)="ac", 0x1}, {&(0x7f0000000740)="79b912fd380f4a98a5b55e602b20deb738aefb7c6e026a16a933794cc1ae44bd94a70510e3a6d2860e47b6c004c2d51ef30ae19374d4480b4ec004aeab07200f6a3d", 0x42}], 0x6, &(0x7f0000000840)=[@dontfrag={{0x14, 0x29, 0x3e, 0x7}}], 0x18}}, {{&(0x7f0000000880)={0xa, 0x4e22, 0x8, @private0, 0x400}, 0x1c, &(0x7f0000000a80)=[{&(0x7f00000008c0)="3e11bc786e4a19afce41f62e1799cd2532db538cb224bccd3beedac1639bffb9521b7b0c7fdae3221305555d7ce848f7718d99eb371ae92b2a01a21a4582a1cd965248843e12d32cad9e3fac218a224903ccab5be21e8f436d72b91a7f47914a73abcc927b", 0x65}, {&(0x7f0000000940)="67af6879dbb64c7af89a5fa6febe7331287ecbc024b3430269990be7d3a1bb8033837bc22cf3f1c96a35471101badf7f6de54fe5920194ad35965e7b7fad98a7544f752eb65be3cf10675844ec43d03317831e058e76fce45854b093146747f1b71cb0b1ef636fe0c2ee673e917d77456fdf66fca40a51e6e0187fd2f4", 0x7d}, {&(0x7f00000009c0)="784c3bb2239083f15a8a4276a0ba", 0xe}, {&(0x7f0000000a00)="587aa95acd250f504dc2d4d9388606b5919d701a9d9839cf45725913a11a1673c7ea90e6efd2fa47a78a319fbd7db55754105bfbc7d94e022c45f83aeee4f2b64fee3aa6c82487d96a993b8c65d070c2a8d1e2506665909231c4bf31ec255c21932eef0612655d944bcdd362", 0x6c}], 0x4}}, {{0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000ac0)="e674c9a23109fdd3e51dd1c1a996f5f3c47d8a52c9292cd83fb7229c7ce0dfd9c416d5a59807d72f44907f9f1c0f67670ba6924bf0399b2b5274f092078936452323aca217ba1feb41f4559d2f0fb984e3b07df84e34c1c24d98395e66c6284b5fca4003042f1d25c78b0fe143efab72d5fec079fbd3bc5c9121aaca5997ca4315a6b62ff4229239e4f1f1c45910f2f01084bba3cf12c3f1711d2883328302ad23a78ed3540de169d9ea1c2cd93ca0e526dba25b0eee397d3aa716ee5e7e15aa94", 0xc1}, {&(0x7f0000000bc0)="1b5712c866cda322d9b5e0546902f85b5c70a0613b20c8bff3602a8dc7e2b49ac9a54386081272adec20f4bc25a1cba4a24ea9320a4a9bf49e17c24588d4389739e7d880f81fa8778fa5d9b05ce52e1bbdad167caec940e4c6fef372dc0c75fbe0621563f228e24c9d1ffb255b65e36cf8e18b164117bc2c3d5cbc88f12eef96189c947d49e2b75d04c0a3b68db56d1f4de44c9aea4f71bd4c9789943b302b7592aedac081c0c962dd31874dfea2cda99d1016f0c7830c4364beb2d766c7c72aae42e5be1671a118b0a97c5d44a954ebc6539e12e67c984614ce", 0xda}, {&(0x7f0000000cc0)="f453cb0a2856b03442514006508890241f8ce72804a1f6d121dcd34989ee904895bb6549752ccafab2ec86cdc47abab5e57b7bf29a2906811cdc1b6f156704e4edf453e69fe7411bbde83418", 0x4c}, {&(0x7f0000000fc0)="5becf204e88b791cbf8f19273f8a900e5abedb9bea15a8bdd424600ebc88a8a8355bce803fc419773e75d4ffcc9f01d5783634314803a6506b93bcf634b538993b00934e657a9da2c9c399a5f46e014c8bc1f6769ebca0bd026773dec06c4bc29b578c84e1e670f758868282755081892b56589f294bb831b8bb101a53428b4d11c582f49f", 0x85}], 0x4, &(0x7f0000000e40)=[@dstopts_2292={{0x70, 0x29, 0x4, {0x88, 0xa, '\x00', [@ra={0x5, 0x2, 0x3}, @pad1, @calipso={0x7, 0x38, {0x2, 0xc, 0x8, 0x8, [0x7ff, 0x2, 0xc, 0xe4, 0xc00000, 0xffffffffffffff99]}}, @enc_lim={0x4, 0x1, 0x5}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x17}}]}}}], 0x70}}], 0x4, 0x0) 229.422442ms ago: executing program 3 (id=508): r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, 0x0, 0x20008024) 162.564697ms ago: executing program 0 (id=509): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000000040)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x800}, 0x18) socket$inet(0x2, 0x2, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000001850000001b000000b70000000000070095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) r2 = socket$netlink(0x10, 0x3, 0xb) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2fffffffd}, 0xc) close(r2) 161.855657ms ago: executing program 3 (id=510): socket$netlink(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, 0x0, 0x0, 0x4}, 0x94) socket$packet(0x11, 0x3, 0x300) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$NFT_BATCH(r1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x8051) syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r1) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[], 0x14}}, 0x4044057) 103.907362ms ago: executing program 0 (id=511): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1809000000000000000000000001000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r0}, &(0x7f0000000540), &(0x7f0000000580)=r1}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r0, &(0x7f0000000780)}, 0x20) 79.995324ms ago: executing program 1 (id=512): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000600), r0) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000680)={0x20, r1, 0x21, 0x70bd2c, 0x25dfdbfe, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_AF={0x5, 0x2, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x44}, 0x850) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r2, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000b80)={0x20, r3, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x20}}, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1000f4) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f0000000800)='GPL\x00', 0x101, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, 0x2}, 0xffffff19) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', r6}, 0x10) r7 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x8, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x4, 0xaea}, 0x14105, 0x32, 0xfffffbff, 0x3, 0x1, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x40082406, &(0x7f00000001c0)='cpu<-0\t\t\t') setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f", 0xe) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="050000"], 0x48) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r8, 0x6, 0x24, &(0x7f0000000c00), &(0x7f0000002000)=0x2) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f00000031c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x800) connect$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0xffff, 0xffffffff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c) open(&(0x7f0000000300)='./file1\x00', 0x14927e, 0x0) 72.951244ms ago: executing program 0 (id=513): bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0a00000004000000090000000c00000000000000", @ANYRES32, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="020000fa00000000000000000000000004"], 0x50) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x58, 0x58, 0x6, [@decl_tag={0xd, 0x0, 0x0, 0x11, 0x8, 0x1}, @struct={0x0, 0x4, 0x0, 0x4, 0x1, 0x6aa, [{0xa, 0x5, 0x6}, {0xb, 0x5, 0x800}, {0x7, 0x0, 0x5}, {0xe, 0x0, 0x8c}]}, @func={0x9, 0x0, 0x0, 0xc, 0x2}]}, {0x0, [0x30, 0x2e, 0x61, 0x30]}}, &(0x7f0000000180)=""/28, 0x76, 0x1c, 0x0, 0x8, 0x10000}, 0x28) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYRES64=r0, @ANYRESHEX, @ANYBLOB="000000000001000066080000000000001800000000000000000000000000000095000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r2, 0x0, 0xfffffffffffffffd}, 0x18) r3 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x2) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r4, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x73, 0xfffff038}, {0x6, 0x0, 0x5, 0xffffffff}]}, 0x10) r5 = dup(r3) ioctl$USBDEVFS_CONTROL(r5, 0xc0185500, &(0x7f0000000440)={0x80, 0x6, 0xf00, 0x1, 0x0, 0x5, 0x0}) socket$key(0xf, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r8}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@deltfilter={0x24, 0x2d, 0x200, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {0x4, 0xe}, {0x4, 0x9}}}, 0x24}}, 0x14000000) r9 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000000c0)={'dummy0\x00'}) r10 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r10, &(0x7f00000002c0), 0x40000000000009f, 0x0) 18.854729ms ago: executing program 0 (id=514): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000200)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sys_enter\x00', r0}, 0x18) getresgid(0x0, 0x0, 0x0) 0s ago: executing program 1 (id=515): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000020000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/devices\x00', 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) io_uring_enter(0xffffffffffffffff, 0xf3, 0x80ffff, 0x49, 0x0, 0x40) r4 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000380)=ANY=[@ANYBLOB="6800fff4100000000000", @ANYRES16=r2, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r5], 0x68}, 0x1, 0x0, 0x0, 0x4810}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) preadv(r0, &(0x7f0000000580)=[{&(0x7f0000000480)=""/140, 0x8c}], 0x1, 0xf0, 0xd215) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410884, &(0x7f00000001c0)={[{@nouid32}, {@acl}]}, 0x1, 0x775, &(0x7f0000001180)="$eJzs3c9rXNUeAPDvnSRNm/a95MGD9+oqIGigdGJqbBVcVFyIYKGga9thMg01k0zJTEoTAlpEcCOouBB007U/6s6tP7b6X7gQS9W0WHEhkTu5t502M2mSJpnqfD5wM+fceyfnfOf+OGfmHu4NoGeNpn8KEYcj4t0kYjibn0TEQDPVH3Fybb1bK8vldEpidfXlX5LmOjdXlsvR8p7UwSzz/4j45q2II4X15dYXl2ZK1WplPsuPN2YvjNcXl46eny1NV6Yrc8cnJiePnXjqxPGdi/W375cOXXvvhcc/P/nHm/+7+s63SZyMQ9my1jh2ymiMZp/JQPoR3uX5nS6sy5JuV4BtSQ/NvrWjPA7HcPQ1UwDAP9nrEbEKAPSYRPsPAD0m/x3g5spyOZ+6+4vE3rr+XETsX4s/v765tqQ/u2a3v3kddOhmcteVkSQiRnag/NGI+PjLVz9Np9il65AA7bxxOSLOjoyuP/8n68YsbNUTGyzbl72O3jPf+Q/2zldp/+fpdv2/wu3+T7Tp/wy2OXa3477H/4EdKGQDaf/v2Zaxbbda4s+M9GW5fzX7fAPJufPVSnpu+3dEjMXAYJqf2KCMsRt/3ui0rLX/9+v7r32Slp++3lmj8FP/4N3vmSo1Sg8Sc6vrlyMe6W8Xf3J7+ycd+r+nN1nGi8+8/VGnZWn8abz5tD7+yEYn7Y7VKxGPtd3+d0a0JRuOTxxv7g7j+U7Rxhc/fDjUqfzW7Z9Oafn5d4G9kG7/oY3jH0lax2vWt17Gd1eGv+607P7xt9//9yWvNNN5P+JSqdGYn4jYl7y0fv6xO+/N8/n6afxjj7Y//jfa/9PvhGc3GX//tZ8/2378uyuNf2pL23/riau3Zvo6lb+57T/ZTI1lczZz/ttsBR/kswMAAAAAAAAAAAAAAAAAAAAAAACAzSpExKFICsXb6UKhWFx7hvd/Y6hQrdUbR87VFuamovms7JEYKOS3uhxuuR/qRHY//Dx/7J78kxHxn4j4YPBAkt9HcarLsQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA7mCH5/+nfhzsdu0AgF2zv9sVAAD2nPYfAHqP9h8Aeo/2HwB6j/YfAHqP9h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBddvrUqXRa/X1luZzmpy4uLszULh6dqtRnirML5WK5Nn+hOF2rTVcrxXJt9n7/r1qrXZiMuYVL441KvTFeX1w6M1tbmGucOT9bmq6cqQzsSVQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsDX1xaWZUrVamZfYRmL14ahG9xN92e70sNRnTxPJw1GNHU50+cQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8DfxVwAAAP//02Ii/w==") link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') r7 = open(&(0x7f0000000180)='./bus\x00', 0x14923e, 0x18) pwritev2(r7, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x1}], 0x1, 0x33000, 0x0, 0x3) kernel console output (not intermixed with test programs): 0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.495192][ T3305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.511896][ T3307] team0: Port device team_slave_0 added [ 38.523865][ T3302] team0: Port device team_slave_0 added [ 38.530369][ T3301] team0: Port device team_slave_1 added [ 38.536720][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.543728][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.569844][ T3305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.583922][ T3307] team0: Port device team_slave_1 added [ 38.591103][ T3309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.600980][ T3302] team0: Port device team_slave_1 added [ 38.608669][ T3309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.630046][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.637454][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.663983][ T3301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.702512][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.709663][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.735630][ T3301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.753187][ T3309] team0: Port device team_slave_0 added [ 38.759234][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.766538][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.792742][ T3307] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.808944][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.816362][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.843128][ T3302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.857286][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.864322][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.890574][ T3302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.902285][ T3309] team0: Port device team_slave_1 added [ 38.918926][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.926130][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.952785][ T3307] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.972610][ T3305] hsr_slave_0: entered promiscuous mode [ 38.978607][ T3305] hsr_slave_1: entered promiscuous mode [ 39.020386][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 39.027581][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.053895][ T3309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 39.065266][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.072577][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.098587][ T3309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.117265][ T3301] hsr_slave_0: entered promiscuous mode [ 39.123612][ T3301] hsr_slave_1: entered promiscuous mode [ 39.129494][ T3301] debugfs: 'hsr0' already exists in 'hsr' [ 39.135559][ T3301] Cannot create hsr debugfs directory [ 39.148883][ T3302] hsr_slave_0: entered promiscuous mode [ 39.155203][ T3302] hsr_slave_1: entered promiscuous mode [ 39.161391][ T3302] debugfs: 'hsr0' already exists in 'hsr' [ 39.167212][ T3302] Cannot create hsr debugfs directory [ 39.182236][ T3307] hsr_slave_0: entered promiscuous mode [ 39.188408][ T3307] hsr_slave_1: entered promiscuous mode [ 39.194575][ T3307] debugfs: 'hsr0' already exists in 'hsr' [ 39.200463][ T3307] Cannot create hsr debugfs directory [ 39.294211][ T3309] hsr_slave_0: entered promiscuous mode [ 39.300717][ T3309] hsr_slave_1: entered promiscuous mode [ 39.307158][ T3309] debugfs: 'hsr0' already exists in 'hsr' [ 39.313013][ T3309] Cannot create hsr debugfs directory [ 39.462388][ T3305] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 39.471560][ T3305] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 39.480666][ T3305] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 39.492204][ T3305] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 39.523715][ T3302] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 39.543524][ T3302] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 39.562166][ T3302] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 39.572813][ T3307] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 39.586424][ T3302] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 39.597024][ T3307] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 39.613300][ T3307] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 39.622973][ T3307] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 39.648230][ T3301] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 39.657533][ T3301] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 39.667624][ T3301] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 39.676844][ T3301] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 39.697236][ T3305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.729335][ T3305] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.754662][ T1870] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.761934][ T1870] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.774254][ T3309] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 39.783397][ T3309] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 39.792478][ T3309] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 39.803642][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.810814][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.826933][ T3309] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 39.880223][ T3302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.909742][ T3307] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.918242][ T3302] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.944091][ T1432] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.951231][ T1432] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.962367][ T3301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.979454][ T3301] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.988155][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.995376][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.008502][ T3307] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.031162][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.038418][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.047465][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.054688][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.076109][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.083400][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.095815][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.103019][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.120100][ T3309] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.155953][ T3305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.173332][ T3309] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.188754][ T3301] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 40.199624][ T3301] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 40.232431][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.239693][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.269818][ T3302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.279942][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.287743][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.317189][ T3307] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.372268][ T3301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.405678][ T3305] veth0_vlan: entered promiscuous mode [ 40.436844][ T3309] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.455219][ T3305] veth1_vlan: entered promiscuous mode [ 40.479299][ T3302] veth0_vlan: entered promiscuous mode [ 40.510141][ T3302] veth1_vlan: entered promiscuous mode [ 40.540170][ T3305] veth0_macvtap: entered promiscuous mode [ 40.564937][ T3305] veth1_macvtap: entered promiscuous mode [ 40.589341][ T3301] veth0_vlan: entered promiscuous mode [ 40.609003][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.618464][ T3302] veth0_macvtap: entered promiscuous mode [ 40.632076][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.646396][ T3301] veth1_vlan: entered promiscuous mode [ 40.653246][ T3302] veth1_macvtap: entered promiscuous mode [ 40.668509][ T3309] veth0_vlan: entered promiscuous mode [ 40.676642][ T1432] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.687886][ T3309] veth1_vlan: entered promiscuous mode [ 40.704828][ T1432] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.719481][ T1432] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.732749][ T1432] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.745102][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.757067][ T3307] veth0_vlan: entered promiscuous mode [ 40.767739][ T3307] veth1_vlan: entered promiscuous mode [ 40.777073][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.787229][ T37] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.801733][ T3309] veth0_macvtap: entered promiscuous mode [ 40.809849][ T37] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.819941][ T37] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.829742][ T37] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.847230][ T3301] veth0_macvtap: entered promiscuous mode [ 40.855445][ T3309] veth1_macvtap: entered promiscuous mode [ 40.871888][ T3301] veth1_macvtap: entered promiscuous mode [ 40.882082][ T3305] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 40.907356][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.922638][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.943702][ T3307] veth0_macvtap: entered promiscuous mode [ 40.953322][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.961920][ T3307] veth1_macvtap: entered promiscuous mode [ 40.977319][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.988826][ T29] kauditd_printk_skb: 21 callbacks suppressed [ 40.988856][ T29] audit: type=1326 audit(1754840621.146:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3473 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69749bebe9 code=0x7ffc0000 [ 40.998274][ T51] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.019036][ T29] audit: type=1326 audit(1754840621.146:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3473 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69749bebe9 code=0x7ffc0000 [ 41.031118][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.061818][ T29] audit: type=1326 audit(1754840621.156:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3473 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f69749bebe9 code=0x7ffc0000 [ 41.085210][ T29] audit: type=1400 audit(1754840621.156:96): avc: denied { map_create } for pid=3473 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 41.104155][ T29] audit: type=1400 audit(1754840621.156:97): avc: denied { bpf } for pid=3473 comm="syz.0.1" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 41.124847][ T29] audit: type=1400 audit(1754840621.156:98): avc: denied { map_read map_write } for pid=3473 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 41.144829][ T29] audit: type=1326 audit(1754840621.156:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3473 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69749bebe9 code=0x7ffc0000 [ 41.168222][ T29] audit: type=1326 audit(1754840621.156:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3473 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69749bebe9 code=0x7ffc0000 [ 41.191583][ T29] audit: type=1326 audit(1754840621.226:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3473 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f69749bebe9 code=0x7ffc0000 [ 41.215109][ T29] audit: type=1400 audit(1754840621.226:102): avc: denied { prog_load } for pid=3473 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 41.241677][ T3481] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6'. [ 41.244769][ T51] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.260133][ T3481] IPVS: Error joining to the multicast group [ 41.286742][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.296276][ T51] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.338450][ T51] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.370879][ T51] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.405085][ T51] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.432418][ T51] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.572356][ T51] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.583411][ T51] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.640670][ T51] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.663081][ T51] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.690601][ T3480] Set syz1 is full, maxelem 65536 reached [ 41.720606][ T3493] capability: warning: `syz.2.3' uses deprecated v2 capabilities in a way that may be insecure [ 41.741333][ T51] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.812026][ T3480] syz.1.2 (3480) used greatest stack depth: 10904 bytes left [ 41.833597][ T3500] 9pnet_fd: Insufficient options for proto=fd [ 41.873655][ T3501] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4'. [ 41.883607][ T3501] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4'. [ 41.939806][ T3502] 9pnet_fd: Insufficient options for proto=fd [ 42.001073][ T3501] netlink: 'syz.3.4': attribute type 1 has an invalid length. [ 42.531031][ T3519] SELinux: policydb version 65301 does not match my version range 15-35 [ 42.541949][ T3519] SELinux: failed to load policy [ 42.640830][ T3523] Zero length message leads to an empty skb [ 42.701666][ T3530] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13'. [ 42.720877][ T3530] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 42.728653][ T3530] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 42.749889][ T3532] 9pnet_fd: Insufficient options for proto=fd [ 42.758631][ T3530] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 42.766319][ T3530] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 43.132390][ T3535] loop3: detected capacity change from 0 to 8192 [ 43.158656][ T3535] FAT-fs (loop3): bogus number of directory entries (9) [ 43.165734][ T3535] FAT-fs (loop3): Can't find a valid FAT filesystem [ 43.246991][ T3525] Set syz1 is full, maxelem 65536 reached [ 43.341902][ T3545] netlink: 4 bytes leftover after parsing attributes in process `syz.3.18'. [ 43.389635][ T3545] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 43.397564][ T3545] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 43.406802][ T3545] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 43.414475][ T3545] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 43.465626][ T3525] syz.0.14 (3525) used greatest stack depth: 10728 bytes left [ 43.556485][ T3552] netlink: 'syz.1.21': attribute type 10 has an invalid length. [ 43.639409][ T3548] loop0: detected capacity change from 0 to 4096 [ 43.647146][ T3548] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 43.683866][ T3548] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.704078][ T3548] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.930420][ C1] hrtimer: interrupt took 26895 ns [ 43.974987][ T3600] FAULT_INJECTION: forcing a failure. [ 43.974987][ T3600] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 43.989579][ T3600] CPU: 1 UID: 0 PID: 3600 Comm: syz.1.25 Not tainted 6.16.0-syzkaller-12288-g2b38afce25c4 #0 PREEMPT(voluntary) [ 43.989653][ T3600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 43.989665][ T3600] Call Trace: [ 43.989672][ T3600] [ 43.989681][ T3600] __dump_stack+0x1d/0x30 [ 43.989711][ T3600] dump_stack_lvl+0xe8/0x140 [ 43.989744][ T3600] dump_stack+0x15/0x1b [ 43.989765][ T3600] should_fail_ex+0x265/0x280 [ 43.989788][ T3600] should_fail+0xb/0x20 [ 43.989845][ T3600] should_fail_usercopy+0x1a/0x20 [ 43.989870][ T3600] _copy_to_user+0x20/0xa0 [ 43.989898][ T3600] simple_read_from_buffer+0xb5/0x130 [ 43.989919][ T3600] proc_fail_nth_read+0x10e/0x150 [ 43.989954][ T3600] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 43.990042][ T3600] vfs_read+0x1a8/0x770 [ 43.990070][ T3600] ? send_sig_perf+0x99/0xc0 [ 43.990173][ T3600] ? sysvec_apic_timer_interrupt+0x44/0x80 [ 43.990219][ T3600] ksys_read+0xda/0x1a0 [ 43.990247][ T3600] __x64_sys_read+0x40/0x50 [ 43.990377][ T3600] x64_sys_call+0x27bc/0x2ff0 [ 43.990405][ T3600] do_syscall_64+0xd2/0x200 [ 43.990438][ T3600] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 43.990478][ T3600] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 43.990504][ T3600] RIP: 0033:0x7f99faf9d5fc [ 43.990547][ T3600] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 43.990569][ T3600] RSP: 002b:00007f99f9a07030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 43.990597][ T3600] RAX: ffffffffffffffda RBX: 00007f99fb1c5fa0 RCX: 00007f99faf9d5fc [ 43.990612][ T3600] RDX: 000000000000000f RSI: 00007f99f9a070a0 RDI: 0000000000000004 [ 43.990627][ T3600] RBP: 00007f99f9a07090 R08: 0000000000000000 R09: 0000000000000000 [ 43.990663][ T3600] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 43.990678][ T3600] R13: 00007f99fb1c6038 R14: 00007f99fb1c5fa0 R15: 00007ffc1c1a8ed8 [ 43.990696][ T3600] [ 44.001111][ T3610] 9pnet_fd: Insufficient options for proto=fd [ 44.220351][ T3621] FAULT_INJECTION: forcing a failure. [ 44.220351][ T3621] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 44.233642][ T3621] CPU: 1 UID: 0 PID: 3621 Comm: syz.1.30 Not tainted 6.16.0-syzkaller-12288-g2b38afce25c4 #0 PREEMPT(voluntary) [ 44.233701][ T3621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 44.233716][ T3621] Call Trace: [ 44.233723][ T3621] [ 44.233732][ T3621] __dump_stack+0x1d/0x30 [ 44.233758][ T3621] dump_stack_lvl+0xe8/0x140 [ 44.233782][ T3621] dump_stack+0x15/0x1b [ 44.233848][ T3621] should_fail_ex+0x265/0x280 [ 44.233880][ T3621] should_fail+0xb/0x20 [ 44.233902][ T3621] should_fail_usercopy+0x1a/0x20 [ 44.233930][ T3621] strncpy_from_user+0x25/0x230 [ 44.234105][ T3621] ? __kmalloc_cache_noprof+0x189/0x320 [ 44.234147][ T3621] __se_sys_memfd_create+0x1ff/0x590 [ 44.234177][ T3621] __x64_sys_memfd_create+0x31/0x40 [ 44.234204][ T3621] x64_sys_call+0x2abe/0x2ff0 [ 44.234231][ T3621] do_syscall_64+0xd2/0x200 [ 44.234270][ T3621] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 44.234362][ T3621] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 44.234394][ T3621] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 44.234421][ T3621] RIP: 0033:0x7f99faf9ebe9 [ 44.234490][ T3621] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 44.234511][ T3621] RSP: 002b:00007f99f9a06d68 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 44.234541][ T3621] RAX: ffffffffffffffda RBX: 0000000000001059 RCX: 00007f99faf9ebe9 [ 44.234553][ T3621] RDX: 00007f99f9a06dec RSI: 0000000000000000 RDI: 00007f99fb0227e8 [ 44.234569][ T3621] RBP: 0000200000000000 R08: 00007f99f9a06b07 R09: 0000000000000000 [ 44.234584][ T3621] R10: 000000000000000a R11: 0000000000000202 R12: 0000000000000001 [ 44.234655][ T3621] R13: 00007f99f9a06dec R14: 00007f99f9a06df0 R15: 00007ffc1c1a8ed8 [ 44.234678][ T3621] [ 44.430353][ T3604] loop0: detected capacity change from 0 to 512 [ 44.438601][ T3604] EXT4-fs: Ignoring removed oldalloc option [ 44.470795][ T3604] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 44.532145][ T3615] 9pnet_fd: Insufficient options for proto=fd [ 44.847526][ T3671] netlink: 4 bytes leftover after parsing attributes in process `syz.4.33'. [ 44.868863][ T3671] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 44.876752][ T3671] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 44.886173][ T3659] capability: warning: `syz.2.35' uses 32-bit capabilities (legacy support in use) [ 44.922941][ T3671] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 44.930734][ T3671] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 45.025946][ T3687] loop2: detected capacity change from 0 to 512 [ 45.033308][ T3687] EXT4-fs: Ignoring removed mblk_io_submit option [ 45.040191][ T3687] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 45.054069][ T3687] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 45.078209][ T3687] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 45.095284][ T3687] EXT4-fs (loop2): 1 truncate cleaned up [ 45.103012][ T3687] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.247397][ T3694] netlink: 4 bytes leftover after parsing attributes in process `syz.4.41'. [ 45.343262][ T3702] loop1: detected capacity change from 0 to 1024 [ 45.351879][ T3702] EXT4-fs: Ignoring removed orlov option [ 45.363812][ T3702] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.393119][ T3702] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.658324][ T3726] loop1: detected capacity change from 0 to 1024 [ 45.658747][ T3726] ext4: Unknown parameter 'obj_role' [ 45.676407][ T3735] FAULT_INJECTION: forcing a failure. [ 45.676407][ T3735] name failslab, interval 1, probability 0, space 0, times 0 [ 45.676435][ T3735] CPU: 0 UID: 0 PID: 3735 Comm: syz.4.51 Not tainted 6.16.0-syzkaller-12288-g2b38afce25c4 #0 PREEMPT(voluntary) [ 45.676489][ T3735] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 45.676505][ T3735] Call Trace: [ 45.676512][ T3735] [ 45.676548][ T3735] __dump_stack+0x1d/0x30 [ 45.676568][ T3735] dump_stack_lvl+0xe8/0x140 [ 45.676589][ T3735] dump_stack+0x15/0x1b [ 45.676615][ T3735] should_fail_ex+0x265/0x280 [ 45.676676][ T3735] should_failslab+0x8c/0xb0 [ 45.676717][ T3735] kmem_cache_alloc_lru_noprof+0x55/0x310 [ 45.676745][ T3735] ? shmem_alloc_inode+0x34/0x50 [ 45.676787][ T3735] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 45.676810][ T3735] shmem_alloc_inode+0x34/0x50 [ 45.676830][ T3735] alloc_inode+0x3d/0x170 [ 45.676851][ T3735] new_inode+0x1d/0xe0 [ 45.676875][ T3735] shmem_get_inode+0x244/0x750 [ 45.676974][ T3735] __shmem_file_setup+0x113/0x210 [ 45.677013][ T3735] shmem_file_setup+0x3b/0x50 [ 45.677048][ T3735] __se_sys_memfd_create+0x2c3/0x590 [ 45.677120][ T3735] __x64_sys_memfd_create+0x31/0x40 [ 45.677147][ T3735] x64_sys_call+0x2abe/0x2ff0 [ 45.677302][ T3735] do_syscall_64+0xd2/0x200 [ 45.677365][ T3735] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 45.677390][ T3735] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 45.677415][ T3735] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 45.677514][ T3735] RIP: 0033:0x7fac9f16ebe9 [ 45.677531][ T3735] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 45.677548][ T3735] RSP: 002b:00007fac9dbade18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 45.677682][ T3735] RAX: ffffffffffffffda RBX: 00000000000005d8 RCX: 00007fac9f16ebe9 [ 45.677695][ T3735] RDX: 00007fac9dbadef0 RSI: 0000000000000000 RDI: 00007fac9f1f27e8 [ 45.677706][ T3735] RBP: 0000200000000c00 R08: 00007fac9dbadbb7 R09: 00007fac9dbade40 [ 45.677720][ T3735] R10: 000000000000000a R11: 0000000000000202 R12: 00002000000002c0 [ 45.677735][ T3735] R13: 00007fac9dbadef0 R14: 00007fac9dbadeb0 R15: 0000200000000580 [ 45.677760][ T3735] [ 45.832124][ T3741] loop1: detected capacity change from 0 to 2048 [ 45.921631][ T3741] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.941355][ T3741] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 102 with max blocks 1 with error 28 [ 45.941463][ T3741] EXT4-fs (loop1): This should not happen!! Data will be lost [ 45.941463][ T3741] [ 45.941478][ T3741] EXT4-fs (loop1): Total free blocks count 0 [ 45.941490][ T3741] EXT4-fs (loop1): Free/Dirty block details [ 45.941500][ T3741] EXT4-fs (loop1): free_blocks=0 [ 45.941587][ T3741] EXT4-fs (loop1): dirty_blocks=0 [ 45.941605][ T3741] EXT4-fs (loop1): Block reservation details [ 45.941615][ T3741] EXT4-fs (loop1): i_reserved_data_blocks=0 [ 45.978450][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.990747][ T29] kauditd_printk_skb: 583 callbacks suppressed [ 45.990806][ T29] audit: type=1326 audit(1754840626.156:682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3767 comm="syz.1.60" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99faf9ebe9 code=0x7ffc0000 [ 45.991803][ T29] audit: type=1326 audit(1754840626.166:683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3767 comm="syz.1.60" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f99faf9ebe9 code=0x7ffc0000 [ 45.992053][ T29] audit: type=1326 audit(1754840626.166:684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3767 comm="syz.1.60" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99faf9ebe9 code=0x7ffc0000 [ 45.993300][ T29] audit: type=1326 audit(1754840626.166:685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3767 comm="syz.1.60" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f99faf9ebe9 code=0x7ffc0000 [ 45.993424][ T29] audit: type=1326 audit(1754840626.166:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3767 comm="syz.1.60" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99faf9ebe9 code=0x7ffc0000 [ 45.994154][ T29] audit: type=1326 audit(1754840626.166:687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3767 comm="syz.1.60" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99faf9ebe9 code=0x7ffc0000 [ 45.994355][ T29] audit: type=1326 audit(1754840626.166:688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3767 comm="syz.1.60" exe="/root/syz-executor" sig=0 arch=c000003e syscall=220 compat=0 ip=0x7f99faf9ebe9 code=0x7ffc0000 [ 45.995599][ T29] audit: type=1326 audit(1754840626.166:689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3767 comm="syz.1.60" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99faf9ebe9 code=0x7ffc0000 [ 45.995903][ T29] audit: type=1326 audit(1754840626.166:690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3767 comm="syz.1.60" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f99faf9ebe9 code=0x7ffc0000 [ 45.996100][ T29] audit: type=1326 audit(1754840626.166:691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3767 comm="syz.1.60" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f99faf9ec23 code=0x7ffc0000 [ 46.006494][ T3768] loop1: detected capacity change from 0 to 512 [ 46.008508][ T3768] ======================================================= [ 46.008508][ T3768] WARNING: The mand mount option has been deprecated and [ 46.008508][ T3768] and is ignored by this kernel. Remove the mand [ 46.008508][ T3768] option from the mount to silence this warning. [ 46.008508][ T3768] ======================================================= [ 46.014522][ T3768] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.014597][ T3768] ext4 filesystem being mounted at /15/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.069327][ T3768] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 46.599567][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.721998][ T3797] loop0: detected capacity change from 0 to 512 [ 46.723477][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.748866][ T3797] EXT4-fs: Invalid want_extra_isize 15 [ 46.752924][ T3799] process 'syz.2.70' launched '/dev/fd/8' with NULL argv: empty string added [ 46.788343][ T3793] loop3: detected capacity change from 0 to 8192 [ 46.938917][ T3813] netlink: 40 bytes leftover after parsing attributes in process `syz.0.76'. [ 46.949104][ T3813] usb usb8: usbfs: process 3813 (syz.0.76) did not claim interface 0 before use [ 47.062167][ T3835] netlink: 12 bytes leftover after parsing attributes in process `syz.2.86'. [ 47.239993][ T10] IPVS: starting estimator thread 0... [ 47.320206][ T3858] 9pnet_fd: Insufficient options for proto=fd [ 47.323869][ T3859] FAULT_INJECTION: forcing a failure. [ 47.323869][ T3859] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 47.339799][ T3859] CPU: 0 UID: 0 PID: 3859 Comm: syz.3.97 Not tainted 6.16.0-syzkaller-12288-g2b38afce25c4 #0 PREEMPT(voluntary) [ 47.339832][ T3859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 47.339848][ T3859] Call Trace: [ 47.339857][ T3859] [ 47.339922][ T3859] __dump_stack+0x1d/0x30 [ 47.339948][ T3859] dump_stack_lvl+0xe8/0x140 [ 47.339967][ T3859] dump_stack+0x15/0x1b [ 47.339984][ T3859] should_fail_ex+0x265/0x280 [ 47.340011][ T3859] should_fail+0xb/0x20 [ 47.340046][ T3859] should_fail_usercopy+0x1a/0x20 [ 47.340069][ T3859] _copy_to_user+0x20/0xa0 [ 47.340101][ T3859] simple_read_from_buffer+0xb5/0x130 [ 47.340187][ T3859] proc_fail_nth_read+0x10e/0x150 [ 47.340271][ T3859] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 47.340305][ T3859] vfs_read+0x1a8/0x770 [ 47.340326][ T3859] ? __rcu_read_unlock+0x4f/0x70 [ 47.340347][ T3859] ? __fget_files+0x184/0x1c0 [ 47.340378][ T3859] ksys_read+0xda/0x1a0 [ 47.340450][ T3859] __x64_sys_read+0x40/0x50 [ 47.340477][ T3859] x64_sys_call+0x27bc/0x2ff0 [ 47.340505][ T3859] do_syscall_64+0xd2/0x200 [ 47.340577][ T3859] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 47.340608][ T3859] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 47.340638][ T3859] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.340658][ T3859] RIP: 0033:0x7f65d188d5fc [ 47.340678][ T3859] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 47.340703][ T3859] RSP: 002b:00007f65d02ef030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 47.340726][ T3859] RAX: ffffffffffffffda RBX: 00007f65d1ab5fa0 RCX: 00007f65d188d5fc [ 47.340740][ T3859] RDX: 000000000000000f RSI: 00007f65d02ef0a0 RDI: 0000000000000004 [ 47.340751][ T3859] RBP: 00007f65d02ef090 R08: 0000000000000000 R09: 0000000000000000 [ 47.340813][ T3859] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 47.340824][ T3859] R13: 00007f65d1ab6038 R14: 00007f65d1ab5fa0 R15: 00007fff46b05c18 [ 47.340847][ T3859] [ 47.396165][ T3850] IPVS: using max 2352 ests per chain, 117600 per kthread [ 47.594755][ T3873] IPv6: sit1: Disabled Multicast RS [ 47.634495][ T3881] FAULT_INJECTION: forcing a failure. [ 47.634495][ T3881] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 47.648088][ T3881] CPU: 1 UID: 0 PID: 3881 Comm: syz.4.105 Not tainted 6.16.0-syzkaller-12288-g2b38afce25c4 #0 PREEMPT(voluntary) [ 47.648123][ T3881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 47.648171][ T3881] Call Trace: [ 47.648178][ T3881] [ 47.648186][ T3881] __dump_stack+0x1d/0x30 [ 47.648208][ T3881] dump_stack_lvl+0xe8/0x140 [ 47.648232][ T3881] dump_stack+0x15/0x1b [ 47.648262][ T3881] should_fail_ex+0x265/0x280 [ 47.648306][ T3881] should_fail_alloc_page+0xf2/0x100 [ 47.648342][ T3881] __alloc_frozen_pages_noprof+0xff/0x360 [ 47.648449][ T3881] alloc_pages_mpol+0xb3/0x250 [ 47.648506][ T3881] alloc_pages_noprof+0x90/0x130 [ 47.648598][ T3881] __pmd_alloc+0x47/0x470 [ 47.648628][ T3881] handle_mm_fault+0x19d4/0x2c20 [ 47.648651][ T3881] ? __rcu_read_unlock+0x4f/0x70 [ 47.648729][ T3881] do_user_addr_fault+0x3fe/0x1090 [ 47.648779][ T3881] exc_page_fault+0x62/0xa0 [ 47.648808][ T3881] asm_exc_page_fault+0x26/0x30 [ 47.648953][ T3881] RIP: 0010:rep_movs_alternative+0xf/0x90 [ 47.648999][ T3881] Code: c4 10 e9 04 f7 01 00 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 83 f9 40 73 44 83 f9 08 73 25 85 c9 74 0f <8a> 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 cd f6 01 00 66 2e [ 47.649064][ T3881] RSP: 0018:ffffc90000e83e18 EFLAGS: 00050202 [ 47.649080][ T3881] RAX: ffff8881244c9b20 RBX: 0000000000000004 RCX: 0000000000000004 [ 47.649130][ T3881] RDX: 0000000000000001 RSI: 0000200000000000 RDI: ffffc90000e83e54 [ 47.649147][ T3881] RBP: 0000000000000000 R08: 000000000000007b R09: 0000000000000000 [ 47.649162][ T3881] R10: 0001c90000e83e54 R11: 0001c90000e83e57 R12: 0000000000000000 [ 47.649178][ T3881] R13: ffff888106f9a080 R14: ffffc90000e83e54 R15: 0000200000000000 [ 47.649205][ T3881] _copy_from_user+0x6f/0xb0 [ 47.649296][ T3881] do_sock_getsockopt+0xf1/0x240 [ 47.649328][ T3881] __x64_sys_getsockopt+0x11e/0x1a0 [ 47.649373][ T3881] x64_sys_call+0x2bc6/0x2ff0 [ 47.649431][ T3881] do_syscall_64+0xd2/0x200 [ 47.649533][ T3881] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 47.649564][ T3881] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 47.649626][ T3881] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.649655][ T3881] RIP: 0033:0x7fac9f16ebe9 [ 47.649670][ T3881] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 47.649688][ T3881] RSP: 002b:00007fac9dbcf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 47.649811][ T3881] RAX: ffffffffffffffda RBX: 00007fac9f395fa0 RCX: 00007fac9f16ebe9 [ 47.649826][ T3881] RDX: 000000000000002b RSI: 0000000000000001 RDI: 0000000000000003 [ 47.649841][ T3881] RBP: 00007fac9dbcf090 R08: 0000200000000000 R09: 0000000000000000 [ 47.649856][ T3881] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 47.649871][ T3881] R13: 00007fac9f396038 R14: 00007fac9f395fa0 R15: 00007ffcd9250128 [ 47.649896][ T3881] [ 48.036721][ T3897] syz.3.110 uses obsolete (PF_INET,SOCK_PACKET) [ 48.078559][ T3905] RDS: rds_bind could not find a transport for 2001::1, load rds_tcp or rds_rdma? [ 48.097940][ T3906] 9pnet_fd: Insufficient options for proto=fd [ 48.228186][ T3923] loop3: detected capacity change from 0 to 128 [ 48.286059][ T3923] syz.3.120: attempt to access beyond end of device [ 48.286059][ T3923] loop3: rw=2049, sector=129, nr_sectors = 8 limit=128 [ 48.302390][ T3923] syz.3.120: attempt to access beyond end of device [ 48.302390][ T3923] loop3: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 48.315980][ T3923] syz.3.120: attempt to access beyond end of device [ 48.315980][ T3923] loop3: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 48.329752][ T3923] syz.3.120: attempt to access beyond end of device [ 48.329752][ T3923] loop3: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 48.439147][ T3946] loop2: detected capacity change from 0 to 512 [ 48.456885][ T3946] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.484753][ T3946] ext4 filesystem being mounted at /32/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 48.492690][ T3954] tipc: Started in network mode [ 48.500504][ T3954] tipc: Node identity , cluster identity 4711 [ 48.506628][ T3954] tipc: Failed to obtain node identity [ 48.512161][ T3954] tipc: Enabling of bearer rejected, failed to enable media [ 48.543778][ T3946] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #2: comm syz.2.130: corrupted inode contents [ 48.556183][ T3946] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #2: comm syz.2.130: mark_inode_dirty error [ 48.567834][ T3946] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #2: comm syz.2.130: corrupted inode contents [ 48.606454][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.701567][ T3970] loop2: detected capacity change from 0 to 512 [ 48.709742][ T3970] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 48.718965][ T3970] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 48.732142][ T3970] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 48.755594][ T3970] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 48.764014][ T3970] System zones: 0-2, 18-18, 34-35 [ 48.769727][ T3970] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.859282][ T3979] netlink: 12 bytes leftover after parsing attributes in process `syz.0.142'. [ 48.872406][ T3979] netlink: 12 bytes leftover after parsing attributes in process `syz.0.142'. [ 48.883334][ T3970] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.924003][ T3983] loop2: detected capacity change from 0 to 764 [ 48.939281][ T3983] ISOFS: unable to read i-node block [ 48.944780][ T3983] isofs_fill_super: get root inode failed [ 49.017821][ T3983] loop2: detected capacity change from 0 to 512 [ 49.024490][ T3992] loop0: detected capacity change from 0 to 2048 [ 49.035855][ T3983] EXT4-fs: Ignoring removed mblk_io_submit option [ 49.042865][ T3983] ext4: Unknown parameter 'noacl' [ 49.064371][ T3996] loop3: detected capacity change from 0 to 2048 [ 49.080779][ T3559] loop0: p1 < > p2 p3 < p5 p6 > p4 [ 49.086088][ T3559] loop0: partition table partially beyond EOD, truncated [ 49.102364][ T3559] loop0: p1 start 4278190080 is beyond EOD, truncated [ 49.109385][ T3559] loop0: p2 start 16908800 is beyond EOD, truncated [ 49.117032][ T3292] loop3: p1 < > p2 p3 < p5 p6 > p4 [ 49.118563][ T3559] loop0: p5 start 16908800 is beyond EOD, truncated [ 49.122388][ T3292] loop3: partition table partially beyond EOD, truncated [ 49.147792][ T3292] loop3: p1 start 4278190080 is beyond EOD, truncated [ 49.154710][ T3292] loop3: p2 start 16908800 is beyond EOD, truncated [ 49.174554][ T3992] loop0: p1 < > p2 p3 < p5 p6 > p4 [ 49.180143][ T3992] loop0: partition table partially beyond EOD, truncated [ 49.195141][ T3992] loop0: p1 start 4278190080 is beyond EOD, truncated [ 49.202121][ T3992] loop0: p2 start 16908800 is beyond EOD, truncated [ 49.210128][ T3292] loop3: p5 start 16908800 is beyond EOD, truncated [ 49.218684][ T3992] loop0: p5 start 16908800 is beyond EOD, truncated [ 49.231253][ T3996] loop3: p1 < > p2 p3 < p5 p6 > p4 [ 49.236768][ T3996] loop3: partition table partially beyond EOD, truncated [ 49.256773][ T3996] loop3: p1 start 4278190080 is beyond EOD, truncated [ 49.263683][ T3996] loop3: p2 start 16908800 is beyond EOD, truncated [ 49.278372][ T3996] loop3: p5 start 16908800 is beyond EOD, truncated [ 49.323346][ T4005] udevd[4005]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 49.338730][ T4008] udevd[4008]: inotify_add_watch(7, /dev/loop0p6, 10) failed: No such file or directory [ 49.358096][ T4019] 9pnet_fd: Insufficient options for proto=fd [ 49.370828][ T3559] udevd[3559]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 49.416821][ T3292] udevd[3292]: inotify_add_watch(7, /dev/loop0p6, 10) failed: No such file or directory [ 49.428494][ T4008] udevd[4008]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 49.439405][ T4017] udevd[4017]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 49.551139][ T4034] serio: Serial port ptm0 [ 49.567687][ T4037] loop0: detected capacity change from 0 to 512 [ 49.584834][ T4037] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 49.602764][ T4037] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.653284][ T4037] ext4 filesystem being mounted at /37/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.671948][ T4037] FAULT_INJECTION: forcing a failure. [ 49.671948][ T4037] name failslab, interval 1, probability 0, space 0, times 0 [ 49.684912][ T4037] CPU: 0 UID: 0 PID: 4037 Comm: syz.0.162 Not tainted 6.16.0-syzkaller-12288-g2b38afce25c4 #0 PREEMPT(voluntary) [ 49.684941][ T4037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 49.684953][ T4037] Call Trace: [ 49.684959][ T4037] [ 49.684966][ T4037] __dump_stack+0x1d/0x30 [ 49.685014][ T4037] dump_stack_lvl+0xe8/0x140 [ 49.685036][ T4037] dump_stack+0x15/0x1b [ 49.685165][ T4037] should_fail_ex+0x265/0x280 [ 49.685207][ T4037] should_failslab+0x8c/0xb0 [ 49.685228][ T4037] kmem_cache_alloc_lru_noprof+0x55/0x310 [ 49.685325][ T4037] ? shmem_alloc_inode+0x34/0x50 [ 49.685345][ T4037] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 49.685363][ T4037] shmem_alloc_inode+0x34/0x50 [ 49.685380][ T4037] alloc_inode+0x3d/0x170 [ 49.685402][ T4037] new_inode+0x1d/0xe0 [ 49.685422][ T4037] shmem_get_inode+0x244/0x750 [ 49.685442][ T4037] __shmem_file_setup+0x113/0x210 [ 49.685505][ T4037] shmem_file_setup+0x3b/0x50 [ 49.685533][ T4037] __se_sys_memfd_create+0x2c3/0x590 [ 49.685552][ T4037] __x64_sys_memfd_create+0x31/0x40 [ 49.685617][ T4037] x64_sys_call+0x2abe/0x2ff0 [ 49.685635][ T4037] do_syscall_64+0xd2/0x200 [ 49.685734][ T4037] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 49.685829][ T4037] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 49.685850][ T4037] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.685868][ T4037] RIP: 0033:0x7f69749bebe9 [ 49.685943][ T4037] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 49.685959][ T4037] RSP: 002b:00007f6973426e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 49.685975][ T4037] RAX: ffffffffffffffda RBX: 00000000000004fa RCX: 00007f69749bebe9 [ 49.685986][ T4037] RDX: 00007f6973426ef0 RSI: 0000000000000000 RDI: 00007f6974a427e8 [ 49.686003][ T4037] RBP: 00002000000005c0 R08: 00007f6973426bb7 R09: 00007f6973426e40 [ 49.686013][ T4037] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000000 [ 49.686024][ T4037] R13: 00007f6973426ef0 R14: 00007f6973426eb0 R15: 00002000000001c0 [ 49.686041][ T4037] [ 49.911994][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.952744][ T4048] netlink: 32 bytes leftover after parsing attributes in process `syz.3.166'. [ 49.971463][ T4048] gretap1: entered promiscuous mode [ 50.058248][ T4069] FAULT_INJECTION: forcing a failure. [ 50.058248][ T4069] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 50.071674][ T4069] CPU: 1 UID: 0 PID: 4069 Comm: syz.1.174 Not tainted 6.16.0-syzkaller-12288-g2b38afce25c4 #0 PREEMPT(voluntary) [ 50.071708][ T4069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 50.071724][ T4069] Call Trace: [ 50.071732][ T4069] [ 50.071741][ T4069] __dump_stack+0x1d/0x30 [ 50.071764][ T4069] dump_stack_lvl+0xe8/0x140 [ 50.071786][ T4069] dump_stack+0x15/0x1b [ 50.071809][ T4069] should_fail_ex+0x265/0x280 [ 50.071829][ T4069] should_fail+0xb/0x20 [ 50.071924][ T4069] should_fail_usercopy+0x1a/0x20 [ 50.071946][ T4069] _copy_to_user+0x20/0xa0 [ 50.071985][ T4069] simple_read_from_buffer+0xb5/0x130 [ 50.072013][ T4069] proc_fail_nth_read+0x10e/0x150 [ 50.072049][ T4069] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 50.072076][ T4069] vfs_read+0x1a8/0x770 [ 50.072105][ T4069] ? __rcu_read_unlock+0x4f/0x70 [ 50.072125][ T4069] ? __fget_files+0x184/0x1c0 [ 50.072157][ T4069] ksys_read+0xda/0x1a0 [ 50.072197][ T4069] __x64_sys_read+0x40/0x50 [ 50.072252][ T4069] x64_sys_call+0x27bc/0x2ff0 [ 50.072279][ T4069] do_syscall_64+0xd2/0x200 [ 50.072332][ T4069] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 50.072355][ T4069] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 50.072386][ T4069] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.072436][ T4069] RIP: 0033:0x7f99faf9d5fc [ 50.072453][ T4069] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 50.072475][ T4069] RSP: 002b:00007f99f9a07030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 50.072498][ T4069] RAX: ffffffffffffffda RBX: 00007f99fb1c5fa0 RCX: 00007f99faf9d5fc [ 50.072514][ T4069] RDX: 000000000000000f RSI: 00007f99f9a070a0 RDI: 0000000000000006 [ 50.072529][ T4069] RBP: 00007f99f9a07090 R08: 0000000000000000 R09: 0000000000000000 [ 50.072574][ T4069] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 50.072589][ T4069] R13: 00007f99fb1c6038 R14: 00007f99fb1c5fa0 R15: 00007ffc1c1a8ed8 [ 50.072612][ T4069] [ 50.323647][ T4071] 9pnet_fd: Insufficient options for proto=fd [ 50.362876][ T4075] loop1: detected capacity change from 0 to 512 [ 50.375850][ T4073] loop2: detected capacity change from 0 to 512 [ 50.385613][ T4075] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 50.386457][ T4073] EXT4-fs: Ignoring removed i_version option [ 50.414674][ T4073] EXT4-fs (loop2): orphan cleanup on readonly fs [ 50.430983][ T4073] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.175: bg 0: block 131: padding at end of block bitmap is not set [ 50.472866][ T4073] EXT4-fs (loop2): Remounting filesystem read-only [ 50.479758][ T4073] EXT4-fs (loop2): 1 truncate cleaned up [ 50.486273][ T4073] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 50.512637][ T4075] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.526724][ T4079] loop4: detected capacity change from 0 to 512 [ 50.530562][ T4075] ext4 filesystem being mounted at /27/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.540113][ T4079] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 50.558410][ T4079] EXT4-fs (loop4): 1 truncate cleaned up [ 50.564742][ T4079] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.606044][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.684274][ T4098] loop1: detected capacity change from 0 to 1024 [ 50.692977][ T4098] EXT4-fs: Ignoring removed orlov option [ 50.701331][ T4098] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.813248][ T4105] netlink: 28 bytes leftover after parsing attributes in process `syz.0.186'. [ 50.854035][ T4105] pimreg: entered allmulticast mode [ 50.916679][ T4105] pimreg: left allmulticast mode [ 51.030796][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.058384][ T29] kauditd_printk_skb: 491 callbacks suppressed [ 51.058403][ T29] audit: type=1326 audit(1754840631.226:1181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4116 comm="syz.1.188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99faf9ebe9 code=0x7ffc0000 [ 51.088450][ T29] audit: type=1326 audit(1754840631.226:1182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4116 comm="syz.1.188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99faf9ebe9 code=0x7ffc0000 [ 51.112494][ T29] audit: type=1326 audit(1754840631.226:1183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4116 comm="syz.1.188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f99faf9ebe9 code=0x7ffc0000 [ 51.136328][ T29] audit: type=1326 audit(1754840631.226:1184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4116 comm="syz.1.188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99faf9ebe9 code=0x7ffc0000 [ 51.159803][ T29] audit: type=1326 audit(1754840631.226:1185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4116 comm="syz.1.188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99faf9ebe9 code=0x7ffc0000 [ 51.183671][ T29] audit: type=1326 audit(1754840631.226:1186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4116 comm="syz.1.188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f99faf9ebe9 code=0x7ffc0000 [ 51.207529][ T29] audit: type=1326 audit(1754840631.226:1187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4116 comm="syz.1.188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99faf9ebe9 code=0x7ffc0000 [ 51.231196][ T29] audit: type=1326 audit(1754840631.226:1188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4116 comm="syz.1.188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f99faf9ebe9 code=0x7ffc0000 [ 51.254740][ T29] audit: type=1326 audit(1754840631.226:1189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4116 comm="syz.1.188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99faf9ebe9 code=0x7ffc0000 [ 51.278731][ T29] audit: type=1326 audit(1754840631.226:1190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4116 comm="syz.1.188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f99faf9ebe9 code=0x7ffc0000 [ 51.311302][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.331352][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.362473][ T4131] FAULT_INJECTION: forcing a failure. [ 51.362473][ T4131] name failslab, interval 1, probability 0, space 0, times 0 [ 51.375321][ T4131] CPU: 1 UID: 0 PID: 4131 Comm: Not tainted 6.16.0-syzkaller-12288-g2b38afce25c4 #0 PREEMPT(voluntary) [ 51.375351][ T4131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 51.375363][ T4131] Call Trace: [ 51.375370][ T4131] [ 51.375379][ T4131] __dump_stack+0x1d/0x30 [ 51.375477][ T4131] dump_stack_lvl+0xe8/0x140 [ 51.375557][ T4131] dump_stack+0x15/0x1b [ 51.375578][ T4131] should_fail_ex+0x265/0x280 [ 51.375604][ T4131] ? fsnotify_alloc_group+0x5a/0x170 [ 51.375625][ T4131] should_failslab+0x8c/0xb0 [ 51.375652][ T4131] __kmalloc_cache_noprof+0x4c/0x320 [ 51.375779][ T4131] fsnotify_alloc_group+0x5a/0x170 [ 51.375805][ T4131] do_inotify_init+0x59/0x270 [ 51.375836][ T4131] __x64_sys_inotify_init1+0x1e/0x30 [ 51.375866][ T4131] x64_sys_call+0x27e8/0x2ff0 [ 51.375904][ T4131] do_syscall_64+0xd2/0x200 [ 51.375932][ T4131] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 51.375963][ T4131] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 51.376008][ T4131] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.376036][ T4131] RIP: 0033:0x7fac9f16ebe9 [ 51.376055][ T4131] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 51.376077][ T4131] RSP: 002b:00007fac9dbcf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000126 [ 51.376179][ T4131] RAX: ffffffffffffffda RBX: 00007fac9f395fa0 RCX: 00007fac9f16ebe9 [ 51.376195][ T4131] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 51.376210][ T4131] RBP: 00007fac9dbcf090 R08: 0000000000000000 R09: 0000000000000000 [ 51.376225][ T4131] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 51.376241][ T4131] R13: 00007fac9f396038 R14: 00007fac9f395fa0 R15: 00007ffcd9250128 [ 51.376259][ T4131] [ 51.634207][ T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 51.648042][ T10] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 51.710144][ T4153] veth0_vlan: entered allmulticast mode [ 51.742265][ T4153] ªªªªªª: renamed from vlan0 [ 51.753251][ T4153] netlink: 'syz.4.204': attribute type 1 has an invalid length. [ 51.768083][ T4153] netlink: 'syz.4.204': attribute type 1 has an invalid length. [ 51.804295][ T4161] netlink: 96 bytes leftover after parsing attributes in process `syz.4.207'. [ 52.194944][ T4188] netlink: 68 bytes leftover after parsing attributes in process `syz.2.217'. [ 52.249436][ T4194] loop3: detected capacity change from 0 to 128 [ 52.473692][ T4217] FAULT_INJECTION: forcing a failure. [ 52.473692][ T4217] name failslab, interval 1, probability 0, space 0, times 0 [ 52.486838][ T4217] CPU: 0 UID: 0 PID: 4217 Comm: syz.3.226 Not tainted 6.16.0-syzkaller-12288-g2b38afce25c4 #0 PREEMPT(voluntary) [ 52.486875][ T4217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 52.486943][ T4217] Call Trace: [ 52.486949][ T4217] [ 52.487008][ T4217] __dump_stack+0x1d/0x30 [ 52.487033][ T4217] dump_stack_lvl+0xe8/0x140 [ 52.487051][ T4217] dump_stack+0x15/0x1b [ 52.487067][ T4217] should_fail_ex+0x265/0x280 [ 52.487089][ T4217] should_failslab+0x8c/0xb0 [ 52.487116][ T4217] kmem_cache_alloc_noprof+0x50/0x310 [ 52.487146][ T4217] ? getname_flags+0x80/0x3b0 [ 52.487200][ T4217] getname_flags+0x80/0x3b0 [ 52.487235][ T4217] user_path_at+0x28/0x130 [ 52.487334][ T4217] __se_sys_quotactl+0xb6/0x670 [ 52.487364][ T4217] __x64_sys_quotactl+0x55/0x70 [ 52.487388][ T4217] x64_sys_call+0x15d6/0x2ff0 [ 52.487442][ T4217] do_syscall_64+0xd2/0x200 [ 52.487549][ T4217] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 52.487577][ T4217] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 52.487608][ T4217] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.487691][ T4217] RIP: 0033:0x7f65d188ebe9 [ 52.487710][ T4217] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 52.487729][ T4217] RSP: 002b:00007f65d02ef038 EFLAGS: 00000246 ORIG_RAX: 00000000000000b3 [ 52.487747][ T4217] RAX: ffffffffffffffda RBX: 00007f65d1ab5fa0 RCX: 00007f65d188ebe9 [ 52.487763][ T4217] RDX: 0000000000000000 RSI: 0000200000000280 RDI: ffffffff80000201 [ 52.487779][ T4217] RBP: 00007f65d02ef090 R08: 0000000000000000 R09: 0000000000000000 [ 52.487839][ T4217] R10: 00002000000014c0 R11: 0000000000000246 R12: 0000000000000001 [ 52.487854][ T4217] R13: 00007f65d1ab6038 R14: 00007f65d1ab5fa0 R15: 00007fff46b05c18 [ 52.487877][ T4217] [ 52.755059][ T4225] loop3: detected capacity change from 0 to 2048 [ 52.792993][ T4225] EXT4-fs (loop3): failed to initialize system zone (-117) [ 52.821830][ T4225] EXT4-fs (loop3): mount failed [ 52.837222][ T4239] lo speed is unknown, defaulting to 1000 [ 52.850503][ T4239] lo speed is unknown, defaulting to 1000 [ 52.862262][ T4230] siw: device registration error -23 [ 52.867829][ T4239] lo speed is unknown, defaulting to 1000 [ 52.877217][ T4230] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.905673][ T4244] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.907301][ T4239] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 52.914658][ T4244] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.945313][ T4230] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.956525][ T4247] netlink: 8 bytes leftover after parsing attributes in process `syz.3.236'. [ 52.960295][ T4248] loop2: detected capacity change from 0 to 512 [ 52.966900][ T4239] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 53.018289][ T4248] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 53.019427][ T4239] lo speed is unknown, defaulting to 1000 [ 53.051202][ T4253] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2 [ 53.054294][ T4248] ext4 filesystem being mounted at /53/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.074581][ T4239] lo speed is unknown, defaulting to 1000 [ 53.085667][ T4253] netlink: 92 bytes leftover after parsing attributes in process `syz.3.237'. [ 53.096199][ T4248] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #19: comm syz.2.235: corrupted inode contents [ 53.108343][ T4248] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #19: comm syz.2.235: mark_inode_dirty error [ 53.108534][ T4239] lo speed is unknown, defaulting to 1000 [ 53.120290][ T4253] netlink: 24 bytes leftover after parsing attributes in process `syz.3.237'. [ 53.127465][ T4248] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #19: comm syz.2.235: corrupted inode contents [ 53.186154][ T4239] lo speed is unknown, defaulting to 1000 [ 53.196467][ T4248] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2991: inode #19: comm syz.2.235: mark_inode_dirty error [ 53.219005][ T4239] lo speed is unknown, defaulting to 1000 [ 53.240576][ T4248] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2994: inode #19: comm syz.2.235: mark inode dirty (error -117) [ 53.277825][ T4248] EXT4-fs warning (device loop2): ext4_evict_inode:274: xattr delete (err -117) [ 53.342658][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 53.452813][ T4270] 9pnet_fd: Insufficient options for proto=fd [ 53.482727][ T4273] FAULT_INJECTION: forcing a failure. [ 53.482727][ T4273] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 53.496178][ T4273] CPU: 1 UID: 0 PID: 4273 Comm: syz.3.239 Not tainted 6.16.0-syzkaller-12288-g2b38afce25c4 #0 PREEMPT(voluntary) [ 53.496211][ T4273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 53.496227][ T4273] Call Trace: [ 53.496234][ T4273] [ 53.496242][ T4273] __dump_stack+0x1d/0x30 [ 53.496297][ T4273] dump_stack_lvl+0xe8/0x140 [ 53.496322][ T4273] dump_stack+0x15/0x1b [ 53.496348][ T4273] should_fail_ex+0x265/0x280 [ 53.496369][ T4273] should_fail+0xb/0x20 [ 53.496385][ T4273] should_fail_usercopy+0x1a/0x20 [ 53.496408][ T4273] _copy_from_iter+0xcf/0xe40 [ 53.496440][ T4273] ? __build_skb_around+0x1a0/0x200 [ 53.496541][ T4273] ? __alloc_skb+0x223/0x320 [ 53.496584][ T4273] netlink_sendmsg+0x471/0x6b0 [ 53.496613][ T4273] ? __pfx_netlink_sendmsg+0x10/0x10 [ 53.496672][ T4273] __sock_sendmsg+0x145/0x180 [ 53.496713][ T4273] ____sys_sendmsg+0x31e/0x4e0 [ 53.496811][ T4273] ___sys_sendmsg+0x17b/0x1d0 [ 53.496890][ T4273] __x64_sys_sendmsg+0xd4/0x160 [ 53.496921][ T4273] x64_sys_call+0x191e/0x2ff0 [ 53.496942][ T4273] do_syscall_64+0xd2/0x200 [ 53.496969][ T4273] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 53.497099][ T4273] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 53.497128][ T4273] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.497212][ T4273] RIP: 0033:0x7f65d188ebe9 [ 53.497286][ T4273] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 53.497309][ T4273] RSP: 002b:00007f65d02ef038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 53.497332][ T4273] RAX: ffffffffffffffda RBX: 00007f65d1ab5fa0 RCX: 00007f65d188ebe9 [ 53.497348][ T4273] RDX: 000000000000c884 RSI: 0000200000000000 RDI: 0000000000000007 [ 53.497366][ T4273] RBP: 00007f65d02ef090 R08: 0000000000000000 R09: 0000000000000000 [ 53.497377][ T4273] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 53.497389][ T4273] R13: 00007f65d1ab6038 R14: 00007f65d1ab5fa0 R15: 00007fff46b05c18 [ 53.497412][ T4273] [ 53.859707][ T4280] loop4: detected capacity change from 0 to 512 [ 53.889877][ T4284] loop2: detected capacity change from 0 to 2048 [ 53.907912][ T4280] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 53.918126][ T4239] syz.0.233 (4239) used greatest stack depth: 10712 bytes left [ 53.972791][ T4280] EXT4-fs (loop4): can't mount with journal_async_commit, fs mounted w/o journal [ 53.989838][ T4284] EXT4-fs (loop2): failed to initialize system zone (-117) [ 54.009882][ T4284] EXT4-fs (loop2): mount failed [ 54.017718][ T4293] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.028602][ T4295] vlan2: entered allmulticast mode [ 54.047254][ T4293] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.049548][ T4299] loop3: detected capacity change from 0 to 512 [ 54.056947][ T4295] dummy0: entered allmulticast mode [ 54.080160][ T4299] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 54.093895][ T4299] EXT4-fs (loop3): can't mount with journal_async_commit, fs mounted w/o journal [ 54.139349][ T4301] netlink: 100 bytes leftover after parsing attributes in process `syz.0.248'. [ 54.174930][ T4295] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=4295 comm=syz.0.248 [ 54.216856][ T4313] FAULT_INJECTION: forcing a failure. [ 54.216856][ T4313] name failslab, interval 1, probability 0, space 0, times 0 [ 54.229641][ T4313] CPU: 0 UID: 0 PID: 4313 Comm: syz.3.255 Not tainted 6.16.0-syzkaller-12288-g2b38afce25c4 #0 PREEMPT(voluntary) [ 54.229676][ T4313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 54.229766][ T4313] Call Trace: [ 54.229774][ T4313] [ 54.229783][ T4313] __dump_stack+0x1d/0x30 [ 54.229807][ T4313] dump_stack_lvl+0xe8/0x140 [ 54.229825][ T4313] dump_stack+0x15/0x1b [ 54.229841][ T4313] should_fail_ex+0x265/0x280 [ 54.229861][ T4313] should_failslab+0x8c/0xb0 [ 54.229915][ T4313] kmem_cache_alloc_node_noprof+0x57/0x320 [ 54.229969][ T4313] ? __alloc_skb+0x101/0x320 [ 54.230044][ T4313] __alloc_skb+0x101/0x320 [ 54.230119][ T4313] netlink_alloc_large_skb+0xba/0xf0 [ 54.230162][ T4313] netlink_sendmsg+0x3cf/0x6b0 [ 54.230193][ T4313] ? __pfx_netlink_sendmsg+0x10/0x10 [ 54.230219][ T4313] __sock_sendmsg+0x145/0x180 [ 54.230330][ T4313] ____sys_sendmsg+0x31e/0x4e0 [ 54.230354][ T4313] ___sys_sendmsg+0x17b/0x1d0 [ 54.230426][ T4313] __x64_sys_sendmsg+0xd4/0x160 [ 54.230486][ T4313] x64_sys_call+0x191e/0x2ff0 [ 54.230513][ T4313] do_syscall_64+0xd2/0x200 [ 54.230544][ T4313] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 54.230575][ T4313] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 54.230672][ T4313] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.230699][ T4313] RIP: 0033:0x7f65d188ebe9 [ 54.230717][ T4313] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 54.230739][ T4313] RSP: 002b:00007f65d02ef038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 54.230763][ T4313] RAX: ffffffffffffffda RBX: 00007f65d1ab5fa0 RCX: 00007f65d188ebe9 [ 54.230779][ T4313] RDX: 0000000000004000 RSI: 0000200000000240 RDI: 0000000000000004 [ 54.230833][ T4313] RBP: 00007f65d02ef090 R08: 0000000000000000 R09: 0000000000000000 [ 54.230848][ T4313] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 54.230915][ T4313] R13: 00007f65d1ab6038 R14: 00007f65d1ab5fa0 R15: 00007fff46b05c18 [ 54.230976][ T4313] [ 54.458208][ T4316] loop1: detected capacity change from 0 to 764 [ 54.472684][ T4316] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 54.517447][ T4319] netlink: 8 bytes leftover after parsing attributes in process `syz.2.257'. [ 54.584257][ T4333] FAULT_INJECTION: forcing a failure. [ 54.584257][ T4333] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 54.597468][ T4333] CPU: 0 UID: 0 PID: 4333 Comm: syz.1.262 Not tainted 6.16.0-syzkaller-12288-g2b38afce25c4 #0 PREEMPT(voluntary) [ 54.597566][ T4333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 54.597581][ T4333] Call Trace: [ 54.597589][ T4333] [ 54.597598][ T4333] __dump_stack+0x1d/0x30 [ 54.597625][ T4333] dump_stack_lvl+0xe8/0x140 [ 54.597725][ T4333] dump_stack+0x15/0x1b [ 54.597755][ T4333] should_fail_ex+0x265/0x280 [ 54.597782][ T4333] should_fail+0xb/0x20 [ 54.597802][ T4333] should_fail_usercopy+0x1a/0x20 [ 54.597836][ T4333] _copy_from_user+0x1c/0xb0 [ 54.597917][ T4333] ___sys_sendmsg+0xc1/0x1d0 [ 54.597962][ T4333] __x64_sys_sendmsg+0xd4/0x160 [ 54.597992][ T4333] x64_sys_call+0x191e/0x2ff0 [ 54.598016][ T4333] do_syscall_64+0xd2/0x200 [ 54.598047][ T4333] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 54.598088][ T4333] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 54.598119][ T4333] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.598209][ T4333] RIP: 0033:0x7f99faf9ebe9 [ 54.598229][ T4333] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 54.598250][ T4333] RSP: 002b:00007f99f9a07038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 54.598272][ T4333] RAX: ffffffffffffffda RBX: 00007f99fb1c5fa0 RCX: 00007f99faf9ebe9 [ 54.598286][ T4333] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000005 [ 54.598321][ T4333] RBP: 00007f99f9a07090 R08: 0000000000000000 R09: 0000000000000000 [ 54.598335][ T4333] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 54.598349][ T4333] R13: 00007f99fb1c6038 R14: 00007f99fb1c5fa0 R15: 00007ffc1c1a8ed8 [ 54.598439][ T4333] [ 54.799831][ T4330] ipvlan2: entered promiscuous mode [ 54.819600][ T4330] bridge0: port 3(ipvlan2) entered blocking state [ 54.826505][ T4330] bridge0: port 3(ipvlan2) entered disabled state [ 54.840030][ T4330] ipvlan2: entered allmulticast mode [ 54.845639][ T4330] bridge0: entered allmulticast mode [ 54.855036][ T4330] ipvlan2: left allmulticast mode [ 54.860146][ T4330] bridge0: left allmulticast mode [ 54.885837][ T4319] syz.2.257 (4319) used greatest stack depth: 10576 bytes left [ 54.905575][ T4336] netlink: 'syz.4.264': attribute type 3 has an invalid length. [ 55.073053][ T4354] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.092296][ T4354] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.354156][ T4364] loop3: detected capacity change from 0 to 128 [ 55.379110][ T4364] syz.3.274: attempt to access beyond end of device [ 55.379110][ T4364] loop3: rw=2049, sector=138, nr_sectors = 112 limit=128 [ 55.395619][ T4364] syz.3.274: attempt to access beyond end of device [ 55.395619][ T4364] loop3: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 55.409139][ T4364] Buffer I/O error on dev loop3, logical block 69, lost async page write [ 55.533429][ T4367] loop0: detected capacity change from 0 to 512 [ 55.563647][ T4367] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.576476][ T4367] ext4 filesystem being mounted at /53/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.588658][ T4367] netlink: 8984 bytes leftover after parsing attributes in process `syz.0.272'. [ 55.757269][ T4382] can0: slcan on ttyS3. [ 55.820712][ T4382] can0 (unregistered): slcan off ttyS3. [ 55.829716][ T4385] can0: slcan on ttyS3. [ 55.900772][ T4381] can0 (unregistered): slcan off ttyS3. [ 56.045438][ T4410] loop3: detected capacity change from 0 to 1024 [ 56.053069][ T4410] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 56.088023][ T4414] loop2: detected capacity change from 0 to 512 [ 56.100239][ T4410] futex_wake_op: syz.3.282 tries to shift op by -1; fix this program [ 56.213590][ T29] kauditd_printk_skb: 396 callbacks suppressed [ 56.213609][ T29] audit: type=1400 audit(1754840636.386:1583): avc: denied { listen } for pid=4422 comm="syz.1.286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 56.222708][ T4414] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.273159][ T29] audit: type=1400 audit(1754840636.446:1584): avc: denied { accept } for pid=4422 comm="syz.1.286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 56.305863][ T4414] ext4 filesystem being mounted at /64/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.385086][ T4432] lo speed is unknown, defaulting to 1000 [ 56.441908][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.472442][ T4414] FAULT_INJECTION: forcing a failure. [ 56.472442][ T4414] name failslab, interval 1, probability 0, space 0, times 0 [ 56.485286][ T4414] CPU: 1 UID: 0 PID: 4414 Comm: +}[@ Not tainted 6.16.0-syzkaller-12288-g2b38afce25c4 #0 PREEMPT(voluntary) [ 56.485317][ T4414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 56.485355][ T4414] Call Trace: [ 56.485363][ T4414] [ 56.485372][ T4414] __dump_stack+0x1d/0x30 [ 56.485397][ T4414] dump_stack_lvl+0xe8/0x140 [ 56.485417][ T4414] dump_stack+0x15/0x1b [ 56.485438][ T4414] should_fail_ex+0x265/0x280 [ 56.485474][ T4414] should_failslab+0x8c/0xb0 [ 56.485519][ T4414] kmem_cache_alloc_lru_noprof+0x55/0x310 [ 56.485584][ T4414] ? __d_alloc+0x3d/0x340 [ 56.485615][ T4414] __d_alloc+0x3d/0x340 [ 56.485707][ T4414] d_alloc+0x2e/0x100 [ 56.485742][ T4414] lookup_one_qstr_excl+0x99/0x250 [ 56.485783][ T4414] filename_create+0x149/0x230 [ 56.485885][ T4414] do_mkdirat+0x52/0x3f0 [ 56.485913][ T4414] __x64_sys_mkdirat+0x4c/0x60 [ 56.485935][ T4414] x64_sys_call+0x2b7/0x2ff0 [ 56.485973][ T4414] do_syscall_64+0xd2/0x200 [ 56.485998][ T4414] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 56.486029][ T4414] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 56.486067][ T4414] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.486088][ T4414] RIP: 0033:0x7efffd82ebe9 [ 56.486105][ T4414] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 56.486127][ T4414] RSP: 002b:00007efffc28f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 56.486150][ T4414] RAX: ffffffffffffffda RBX: 00007efffda55fa0 RCX: 00007efffd82ebe9 [ 56.486162][ T4414] RDX: 0000000000000000 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 56.486173][ T4414] RBP: 00007efffc28f090 R08: 0000000000000000 R09: 0000000000000000 [ 56.486246][ T4414] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 56.486257][ T4414] R13: 00007efffda56038 R14: 00007efffda55fa0 R15: 00007ffc06038608 [ 56.486277][ T4414] [ 56.721159][ T4434] netlink: 16 bytes leftover after parsing attributes in process `syz.4.287'. [ 56.772143][ T4442] netem: change failed [ 56.812897][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.835035][ T4455] FAULT_INJECTION: forcing a failure. [ 56.835035][ T4455] name failslab, interval 1, probability 0, space 0, times 0 [ 56.848336][ T4455] CPU: 0 UID: 0 PID: 4455 Comm: syz.4.292 Not tainted 6.16.0-syzkaller-12288-g2b38afce25c4 #0 PREEMPT(voluntary) [ 56.848428][ T4455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 56.848443][ T4455] Call Trace: [ 56.848450][ T4455] [ 56.848457][ T4455] __dump_stack+0x1d/0x30 [ 56.848477][ T4455] dump_stack_lvl+0xe8/0x140 [ 56.848496][ T4455] dump_stack+0x15/0x1b [ 56.848516][ T4455] should_fail_ex+0x265/0x280 [ 56.848615][ T4455] should_failslab+0x8c/0xb0 [ 56.848715][ T4455] kmem_cache_alloc_node_noprof+0x57/0x320 [ 56.848749][ T4455] ? __alloc_skb+0x101/0x320 [ 56.848782][ T4455] __alloc_skb+0x101/0x320 [ 56.848821][ T4455] ? audit_log_start+0x365/0x6c0 [ 56.848992][ T4455] audit_log_start+0x380/0x6c0 [ 56.849021][ T4455] ? __se_sys_process_madvise+0x654/0x6a0 [ 56.849107][ T4455] audit_seccomp+0x48/0x100 [ 56.849138][ T4455] ? __seccomp_filter+0x68c/0x10d0 [ 56.849162][ T4455] __seccomp_filter+0x69d/0x10d0 [ 56.849195][ T4455] ? __fget_files+0x184/0x1c0 [ 56.849271][ T4455] __secure_computing+0x82/0x150 [ 56.849306][ T4455] syscall_trace_enter+0xcf/0x1e0 [ 56.849338][ T4455] do_syscall_64+0xac/0x200 [ 56.849373][ T4455] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 56.849396][ T4455] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 56.849450][ T4455] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.849478][ T4455] RIP: 0033:0x7fac9f16d5fc [ 56.849497][ T4455] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 56.849519][ T4455] RSP: 002b:00007fac9dbcf030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 56.849563][ T4455] RAX: ffffffffffffffda RBX: 00007fac9f395fa0 RCX: 00007fac9f16d5fc [ 56.849580][ T4455] RDX: 000000000000000f RSI: 00007fac9dbcf0a0 RDI: 0000000000000003 [ 56.849595][ T4455] RBP: 00007fac9dbcf090 R08: 0000000000000000 R09: 0000000000000000 [ 56.849611][ T4455] R10: 0000000000000009 R11: 0000000000000246 R12: 0000000000000001 [ 56.849626][ T4455] R13: 00007fac9f396038 R14: 00007fac9f395fa0 R15: 00007ffcd9250128 [ 56.849650][ T4455] [ 56.849660][ T4455] audit: audit_lost=6 audit_rate_limit=0 audit_backlog_limit=64 [ 56.850743][ T29] audit: type=1326 audit(1754840637.006:1585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4453 comm="syz.4.292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac9f16ebe9 code=0x7ffc0000 [ 56.861843][ T4455] audit: out of memory in audit_log_start [ 56.872018][ T29] audit: type=1326 audit(1754840637.006:1586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4453 comm="syz.4.292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac9f16ebe9 code=0x7ffc0000 [ 57.121398][ T29] audit: type=1326 audit(1754840637.006:1587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4453 comm="syz.4.292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7fac9f16ebe9 code=0x7ffc0000 [ 57.145742][ T29] audit: type=1326 audit(1754840637.006:1588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4453 comm="syz.4.292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac9f16ebe9 code=0x7ffc0000 [ 57.169526][ T29] audit: type=1326 audit(1754840637.006:1589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4453 comm="syz.4.292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fac9f16ebe9 code=0x7ffc0000 [ 57.193068][ T29] audit: type=1326 audit(1754840637.006:1590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4453 comm="syz.4.292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac9f16ebe9 code=0x7ffc0000 [ 57.258944][ T4460] lo speed is unknown, defaulting to 1000 [ 57.348580][ T4460] siw: device registration error -23 [ 57.381118][ T4461] loop0: detected capacity change from 0 to 512 [ 57.416239][ T4461] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 57.488078][ T4461] EXT4-fs (loop0): 1 truncate cleaned up [ 57.516853][ T4466] loop3: detected capacity change from 0 to 128 [ 57.521575][ T4461] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.592116][ T4452] FAULT_INJECTION: forcing a failure. [ 57.592116][ T4452] name failslab, interval 1, probability 0, space 0, times 0 [ 57.605376][ T4452] CPU: 0 UID: 0 PID: 4452 Comm: syz.0.291 Not tainted 6.16.0-syzkaller-12288-g2b38afce25c4 #0 PREEMPT(voluntary) [ 57.605407][ T4452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 57.605457][ T4452] Call Trace: [ 57.605465][ T4452] [ 57.605475][ T4452] __dump_stack+0x1d/0x30 [ 57.605500][ T4452] dump_stack_lvl+0xe8/0x140 [ 57.605520][ T4452] dump_stack+0x15/0x1b [ 57.605536][ T4452] should_fail_ex+0x265/0x280 [ 57.605563][ T4452] should_failslab+0x8c/0xb0 [ 57.605664][ T4452] kmem_cache_alloc_lru_noprof+0x55/0x310 [ 57.605701][ T4452] ? __d_alloc+0x3d/0x340 [ 57.605733][ T4452] __d_alloc+0x3d/0x340 [ 57.605789][ T4452] ? avc_has_perm_noaudit+0x1b1/0x200 [ 57.605819][ T4452] d_alloc_parallel+0x53/0xc60 [ 57.605853][ T4452] ? selinux_inode_permission+0x62d/0x740 [ 57.605934][ T4452] ? make_vfsuid+0x49/0xa0 [ 57.605964][ T4452] ? lockref_get_not_dead+0x120/0x1c0 [ 57.606017][ T4452] ? __rcu_read_unlock+0x4f/0x70 [ 57.606040][ T4452] __lookup_slow+0x8c/0x250 [ 57.606075][ T4452] lookup_slow+0x3c/0x60 [ 57.606166][ T4452] walk_component+0x1ec/0x220 [ 57.606200][ T4452] path_lookupat+0xfe/0x2a0 [ 57.606236][ T4452] filename_lookup+0x147/0x340 [ 57.606276][ T4452] user_path_at+0x3e/0x130 [ 57.606388][ T4452] user_statfs+0x4d/0x110 [ 57.606419][ T4452] __x64_sys_statfs+0x65/0xf0 [ 57.606476][ T4452] ? __bpf_trace_sys_enter+0x10/0x30 [ 57.606499][ T4452] ? trace_sys_enter+0xd0/0xf0 [ 57.606523][ T4452] ? syscall_trace_enter+0x102/0x1e0 [ 57.606547][ T4452] x64_sys_call+0x2a03/0x2ff0 [ 57.606610][ T4452] do_syscall_64+0xd2/0x200 [ 57.606639][ T4452] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 57.606726][ T4452] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 57.606751][ T4452] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.606773][ T4452] RIP: 0033:0x7f69749bebe9 [ 57.606789][ T4452] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 57.606860][ T4452] RSP: 002b:00007f6973427038 EFLAGS: 00000246 ORIG_RAX: 0000000000000089 [ 57.606879][ T4452] RAX: ffffffffffffffda RBX: 00007f6974be5fa0 RCX: 00007f69749bebe9 [ 57.606892][ T4452] RDX: 0000000000000000 RSI: 0000200000000780 RDI: 00002000000001c0 [ 57.606904][ T4452] RBP: 00007f6973427090 R08: 0000000000000000 R09: 0000000000000000 [ 57.606991][ T4452] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 57.607003][ T4452] R13: 00007f6974be6038 R14: 00007f6974be5fa0 R15: 00007fffe95383b8 [ 57.607022][ T4452] [ 57.929172][ T4473] loop4: detected capacity change from 0 to 512 [ 57.948493][ T4474] FAULT_INJECTION: forcing a failure. [ 57.948493][ T4474] name failslab, interval 1, probability 0, space 0, times 0 [ 57.961459][ T4474] CPU: 1 UID: 0 PID: 4474 Comm: syz.2.298 Not tainted 6.16.0-syzkaller-12288-g2b38afce25c4 #0 PREEMPT(voluntary) [ 57.961493][ T4474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 57.961529][ T4474] Call Trace: [ 57.961536][ T4474] [ 57.961544][ T4474] __dump_stack+0x1d/0x30 [ 57.961571][ T4474] dump_stack_lvl+0xe8/0x140 [ 57.961595][ T4474] dump_stack+0x15/0x1b [ 57.961613][ T4474] should_fail_ex+0x265/0x280 [ 57.961633][ T4474] should_failslab+0x8c/0xb0 [ 57.961663][ T4474] __kmalloc_noprof+0xa5/0x3e0 [ 57.961750][ T4474] ? sctp_auth_set_key+0x18a/0x4f0 [ 57.961803][ T4474] sctp_auth_set_key+0x18a/0x4f0 [ 57.961838][ T4474] sctp_setsockopt_auth_key+0x2d7/0x3e0 [ 57.961865][ T4474] sctp_setsockopt+0x4ba/0xe30 [ 57.961961][ T4474] sock_common_setsockopt+0x69/0x80 [ 57.961991][ T4474] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 57.962022][ T4474] __sys_setsockopt+0x184/0x200 [ 57.962049][ T4474] __x64_sys_setsockopt+0x64/0x80 [ 57.962103][ T4474] x64_sys_call+0x20ec/0x2ff0 [ 57.962124][ T4474] do_syscall_64+0xd2/0x200 [ 57.962150][ T4474] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 57.962185][ T4474] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 57.962270][ T4474] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.962308][ T4474] RIP: 0033:0x7efffd82ebe9 [ 57.962327][ T4474] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 57.962357][ T4474] RSP: 002b:00007efffc28f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 57.962381][ T4474] RAX: ffffffffffffffda RBX: 00007efffda55fa0 RCX: 00007efffd82ebe9 [ 57.962396][ T4474] RDX: 0000000000000017 RSI: 0000000000000084 RDI: 0000000000000003 [ 57.962411][ T4474] RBP: 00007efffc28f090 R08: 0000000000000009 R09: 0000000000000000 [ 57.962426][ T4474] R10: 0000200000000380 R11: 0000000000000246 R12: 0000000000000001 [ 57.962439][ T4474] R13: 00007efffda56038 R14: 00007efffda55fa0 R15: 00007ffc06038608 [ 57.962459][ T4474] [ 58.179753][ T4473] ext4: Unknown parameter 'smackfstransmute' [ 58.252470][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.327359][ T4487] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 58.477338][ T4504] loop3: detected capacity change from 0 to 512 [ 58.498986][ T4504] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.519994][ T4504] ext4 filesystem being mounted at /73/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.532705][ T4504] FAULT_INJECTION: forcing a failure. [ 58.532705][ T4504] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 58.546235][ T4504] CPU: 1 UID: 0 PID: 4504 Comm: +}[@ Not tainted 6.16.0-syzkaller-12288-g2b38afce25c4 #0 PREEMPT(voluntary) [ 58.546299][ T4504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 58.546313][ T4504] Call Trace: [ 58.546320][ T4504] [ 58.546329][ T4504] __dump_stack+0x1d/0x30 [ 58.546354][ T4504] dump_stack_lvl+0xe8/0x140 [ 58.546376][ T4504] dump_stack+0x15/0x1b [ 58.546415][ T4504] should_fail_ex+0x265/0x280 [ 58.546438][ T4504] should_fail+0xb/0x20 [ 58.546457][ T4504] should_fail_usercopy+0x1a/0x20 [ 58.546486][ T4504] _copy_from_user+0x1c/0xb0 [ 58.546535][ T4504] vmemdup_user+0x59/0xd0 [ 58.546581][ T4504] path_setxattrat+0x1b6/0x310 [ 58.546761][ T4504] __x64_sys_setxattr+0x6e/0x90 [ 58.546787][ T4504] x64_sys_call+0xad2/0x2ff0 [ 58.546810][ T4504] do_syscall_64+0xd2/0x200 [ 58.546906][ T4504] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 58.546957][ T4504] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 58.546984][ T4504] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.547070][ T4504] RIP: 0033:0x7f65d188ebe9 [ 58.547087][ T4504] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 58.547106][ T4504] RSP: 002b:00007f65d02ef038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 58.547148][ T4504] RAX: ffffffffffffffda RBX: 00007f65d1ab5fa0 RCX: 00007f65d188ebe9 [ 58.547162][ T4504] RDX: 0000200000000600 RSI: 0000200000002a40 RDI: 0000200000002a00 [ 58.547175][ T4504] RBP: 00007f65d02ef090 R08: 0000000000000000 R09: 0000000000000000 [ 58.547188][ T4504] R10: 0000000000000024 R11: 0000000000000246 R12: 0000000000000001 [ 58.547200][ T4504] R13: 00007f65d1ab6038 R14: 00007f65d1ab5fa0 R15: 00007fff46b05c18 [ 58.547236][ T4504] [ 58.749581][ T4512] netlink: 8 bytes leftover after parsing attributes in process `syz.0.310'. [ 58.759494][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.788914][ T4514] loop2: detected capacity change from 0 to 1024 [ 58.818202][ T4514] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.846691][ T4514] FAULT_INJECTION: forcing a failure. [ 58.846691][ T4514] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 58.860234][ T4514] CPU: 1 UID: 0 PID: 4514 Comm: syz.2.313 Not tainted 6.16.0-syzkaller-12288-g2b38afce25c4 #0 PREEMPT(voluntary) [ 58.860326][ T4514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 58.860340][ T4514] Call Trace: [ 58.860346][ T4514] [ 58.860354][ T4514] __dump_stack+0x1d/0x30 [ 58.860375][ T4514] dump_stack_lvl+0xe8/0x140 [ 58.860459][ T4514] dump_stack+0x15/0x1b [ 58.860477][ T4514] should_fail_ex+0x265/0x280 [ 58.860564][ T4514] should_fail_alloc_page+0xf2/0x100 [ 58.860708][ T4514] __alloc_frozen_pages_noprof+0xff/0x360 [ 58.860750][ T4514] alloc_pages_mpol+0xb3/0x250 [ 58.860835][ T4514] folio_alloc_noprof+0x97/0x150 [ 58.860945][ T4514] filemap_alloc_folio_noprof+0x66/0x210 [ 58.860989][ T4514] __filemap_get_folio+0x28f/0x6b0 [ 58.861105][ T4514] ext4_mb_init_group+0xce/0x3f0 [ 58.861141][ T4514] ext4_mb_scan_group+0x5f4/0xf10 [ 58.861207][ T4514] ext4_mb_regular_allocator+0x70a/0x15e0 [ 58.861247][ T4514] ? __ext4_mark_inode_dirty+0x2fe/0x3f0 [ 58.861283][ T4514] ext4_mb_new_blocks+0x800/0x2080 [ 58.861393][ T4514] ? ext4_ext_search_right+0x30b/0x4f0 [ 58.861423][ T4514] ? ext4_inode_to_goal_block+0x1be/0x1e0 [ 58.861466][ T4514] ext4_ext_map_blocks+0xff5/0x38a0 [ 58.861504][ T4514] ext4_map_blocks+0x5ee/0xd00 [ 58.861538][ T4514] ? ext4_destroy_inline_data_nolock+0x2f4/0x340 [ 58.861579][ T4514] ext4_convert_inline_data_nolock+0x16b/0x570 [ 58.861611][ T4514] ext4_convert_inline_data+0x2bd/0x360 [ 58.861717][ T4514] ext4_fallocate+0x163/0x2f0 [ 58.861807][ T4514] vfs_fallocate+0x3b3/0x400 [ 58.861839][ T4514] __x64_sys_fallocate+0x7a/0xd0 [ 58.861872][ T4514] x64_sys_call+0x2514/0x2ff0 [ 58.861895][ T4514] do_syscall_64+0xd2/0x200 [ 58.861962][ T4514] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 58.861992][ T4514] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 58.862022][ T4514] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.862043][ T4514] RIP: 0033:0x7efffd82ebe9 [ 58.862057][ T4514] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 58.862130][ T4514] RSP: 002b:00007efffc28f038 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 58.862153][ T4514] RAX: ffffffffffffffda RBX: 00007efffda55fa0 RCX: 00007efffd82ebe9 [ 58.862240][ T4514] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 58.862253][ T4514] RBP: 00007efffc28f090 R08: 0000000000000000 R09: 0000000000000000 [ 58.862268][ T4514] R10: 00000000001001f0 R11: 0000000000000246 R12: 0000000000000001 [ 58.862283][ T4514] R13: 00007efffda56038 R14: 00007efffda55fa0 R15: 00007ffc06038608 [ 58.862306][ T4514] [ 59.130055][ T4527] 9pnet_fd: Insufficient options for proto=fd [ 59.137359][ T4531] FAULT_INJECTION: forcing a failure. [ 59.137359][ T4531] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 59.140292][ T4514] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 59.150875][ T4531] CPU: 0 UID: 0 PID: 4531 Comm: syz.3.318 Not tainted 6.16.0-syzkaller-12288-g2b38afce25c4 #0 PREEMPT(voluntary) [ 59.150909][ T4531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 59.150921][ T4531] Call Trace: [ 59.150931][ T4531] [ 59.150984][ T4531] __dump_stack+0x1d/0x30 [ 59.151057][ T4531] dump_stack_lvl+0xe8/0x140 [ 59.151085][ T4531] dump_stack+0x15/0x1b [ 59.151108][ T4531] should_fail_ex+0x265/0x280 [ 59.151137][ T4531] should_fail+0xb/0x20 [ 59.151165][ T4531] should_fail_usercopy+0x1a/0x20 [ 59.151232][ T4531] _copy_to_user+0x20/0xa0 [ 59.151279][ T4531] simple_read_from_buffer+0xb5/0x130 [ 59.151309][ T4531] proc_fail_nth_read+0x10e/0x150 [ 59.151439][ T4531] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 59.151524][ T4531] vfs_read+0x1a8/0x770 [ 59.151552][ T4531] ? __rcu_read_unlock+0x4f/0x70 [ 59.151581][ T4531] ? __fget_files+0x184/0x1c0 [ 59.151618][ T4531] ksys_read+0xda/0x1a0 [ 59.151728][ T4531] __x64_sys_read+0x40/0x50 [ 59.151758][ T4531] x64_sys_call+0x27bc/0x2ff0 [ 59.151787][ T4531] do_syscall_64+0xd2/0x200 [ 59.151830][ T4531] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 59.151876][ T4531] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 59.151910][ T4531] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.151997][ T4531] RIP: 0033:0x7f65d188d5fc [ 59.152026][ T4531] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 59.152051][ T4531] RSP: 002b:00007f65d02ef030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 59.152075][ T4531] RAX: ffffffffffffffda RBX: 00007f65d1ab5fa0 RCX: 00007f65d188d5fc [ 59.152098][ T4531] RDX: 000000000000000f RSI: 00007f65d02ef0a0 RDI: 0000000000000007 [ 59.152115][ T4531] RBP: 00007f65d02ef090 R08: 0000000000000000 R09: 0000000000000000 [ 59.152131][ T4531] R10: 0000000000000021 R11: 0000000000000246 R12: 0000000000000001 [ 59.152147][ T4531] R13: 00007f65d1ab6038 R14: 00007f65d1ab5fa0 R15: 00007fff46b05c18 [ 59.152176][ T4531] [ 59.370869][ T4514] EXT4-fs (loop2): Remounting filesystem read-only [ 59.380466][ T4514] EXT4-fs (loop2): error restoring inline_data for inode -- potential data loss! (inode 15, error -30) [ 59.419954][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.459363][ T4541] loop3: detected capacity change from 0 to 512 [ 59.492785][ T4541] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.520317][ T4541] ext4 filesystem being mounted at /78/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.587540][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.644942][ T4562] loop4: detected capacity change from 0 to 164 [ 59.658954][ T4562] Unable to read rock-ridge attributes [ 59.666223][ T4562] Unable to read rock-ridge attributes [ 59.706621][ T4563] 9pnet_fd: Insufficient options for proto=fd [ 59.722848][ T4565] loop3: detected capacity change from 0 to 4096 [ 59.757235][ T4569] netlink: 8 bytes leftover after parsing attributes in process `syz.4.333'. [ 59.772172][ T4565] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.901158][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.971979][ T4589] netlink: 16 bytes leftover after parsing attributes in process `syz.1.343'. [ 60.041122][ T4594] loop3: detected capacity change from 0 to 2048 [ 60.114602][ T4596] 9pnet_fd: Insufficient options for proto=fd [ 60.141612][ T4592] 9pnet_fd: Insufficient options for proto=fd [ 60.681578][ T4621] loop2: detected capacity change from 0 to 1024 [ 60.724669][ T4621] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 60.779591][ T4621] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 60.809496][ T4621] EXT4-fs (loop2): Remounting filesystem read-only [ 60.822660][ T4635] mmap: syz.0.362 (4635) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 60.842102][ T4621] EXT4-fs (loop2): error restoring inline_data for inode -- potential data loss! (inode 15, error -30) [ 60.843873][ T4639] loop1: detected capacity change from 0 to 164 [ 60.887366][ T4641] loop4: detected capacity change from 0 to 1024 [ 60.887416][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.914679][ T4635] loop0: detected capacity change from 0 to 128 [ 60.922935][ T4635] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 60.949565][ T4635] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 60.968784][ T4641] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 60.995544][ T4641] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 61.011629][ T4641] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 61.024397][ T4641] EXT4-fs (loop4): This should not happen!! Data will be lost [ 61.024397][ T4641] [ 61.034283][ T4641] EXT4-fs (loop4): Total free blocks count 0 [ 61.040480][ T4641] EXT4-fs (loop4): Free/Dirty block details [ 61.046603][ T4641] EXT4-fs (loop4): free_blocks=20480 [ 61.052280][ T4641] EXT4-fs (loop4): dirty_blocks=16 [ 61.057921][ T4641] EXT4-fs (loop4): Block reservation details [ 61.064192][ T4641] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 61.125498][ T51] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 61.182297][ T4662] netlink: 65051 bytes leftover after parsing attributes in process `syz.3.374'. [ 61.192880][ T4668] FAULT_INJECTION: forcing a failure. [ 61.192880][ T4668] name failslab, interval 1, probability 0, space 0, times 0 [ 61.205681][ T4668] CPU: 0 UID: 0 PID: 4668 Comm: syz.1.375 Not tainted 6.16.0-syzkaller-12288-g2b38afce25c4 #0 PREEMPT(voluntary) [ 61.205719][ T4668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 61.205735][ T4668] Call Trace: [ 61.205743][ T4668] [ 61.205753][ T4668] __dump_stack+0x1d/0x30 [ 61.205780][ T4668] dump_stack_lvl+0xe8/0x140 [ 61.205805][ T4668] dump_stack+0x15/0x1b [ 61.205826][ T4668] should_fail_ex+0x265/0x280 [ 61.205847][ T4668] should_failslab+0x8c/0xb0 [ 61.205875][ T4668] kmem_cache_alloc_noprof+0x50/0x310 [ 61.205907][ T4668] ? vm_area_alloc+0x2c/0xb0 [ 61.205944][ T4668] vm_area_alloc+0x2c/0xb0 [ 61.205981][ T4668] mmap_region+0xaa2/0x1630 [ 61.206051][ T4668] do_mmap+0x9b3/0xbe0 [ 61.206092][ T4668] vm_mmap_pgoff+0x17a/0x2e0 [ 61.206125][ T4668] ksys_mmap_pgoff+0xc2/0x310 [ 61.206158][ T4668] ? __x64_sys_mmap+0x49/0x70 [ 61.206189][ T4668] x64_sys_call+0x14a3/0x2ff0 [ 61.206216][ T4668] do_syscall_64+0xd2/0x200 [ 61.206245][ T4668] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 61.206281][ T4668] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 61.206313][ T4668] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.206340][ T4668] RIP: 0033:0x7f99faf9ec23 [ 61.206360][ T4668] Code: f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 41 89 ca 41 f7 c1 ff 0f 00 00 75 14 b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 25 c3 0f 1f 40 00 48 c7 c0 a8 ff ff ff 64 c7 [ 61.206381][ T4668] RSP: 002b:00007f99f9a06e18 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 61.206401][ T4668] RAX: ffffffffffffffda RBX: 0000000000000521 RCX: 00007f99faf9ec23 [ 61.206413][ T4668] RDX: 0000000000000003 RSI: 0000000008400000 RDI: 0000000000000000 [ 61.206424][ T4668] RBP: 0000200000000542 R08: 00000000ffffffff R09: 0000000000000000 [ 61.206436][ T4668] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000004 [ 61.206447][ T4668] R13: 00007f99f9a06ef0 R14: 00007f99f9a06eb0 R15: 0000200000000b00 [ 61.206467][ T4668] [ 61.438026][ T4641] SELinux: Context system_u:object_r:gpg_exec_t:s0 is not valid (left unmapped). [ 61.447774][ T29] kauditd_printk_skb: 269 callbacks suppressed [ 61.447790][ T29] audit: type=1326 audit(1754840641.596:1860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4640 comm="syz.4.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac9f16ebe9 code=0x7ffc0000 [ 61.477566][ T29] audit: type=1326 audit(1754840641.596:1861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4640 comm="syz.4.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac9f16ebe9 code=0x7ffc0000 [ 61.501179][ T29] audit: type=1400 audit(1754840641.626:1862): avc: denied { relabelto } for pid=4640 comm="syz.4.364" name="mem_sleep" dev="sysfs" ino=219 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:gpg_exec_t:s0" [ 61.527878][ T29] audit: type=1400 audit(1754840641.626:1863): avc: denied { associate } for pid=4640 comm="syz.4.364" name="mem_sleep" dev="sysfs" ino=219 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:gpg_exec_t:s0" [ 61.540643][ T4662] loop3: detected capacity change from 0 to 4096 [ 61.575559][ T4673] loop0: detected capacity change from 0 to 2048 [ 61.588723][ T4678] loop1: detected capacity change from 0 to 1024 [ 61.596363][ T4678] EXT4-fs: Ignoring removed bh option [ 61.606083][ T4662] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.627957][ T4670] bridge0: entered promiscuous mode [ 61.633410][ T4670] macsec1: entered promiscuous mode [ 61.639897][ T4670] bridge0: port 3(macsec1) entered blocking state [ 61.646445][ T4670] bridge0: port 3(macsec1) entered disabled state [ 61.657420][ T4678] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.659749][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.680106][ T29] audit: type=1326 audit(1754840641.796:1864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4669 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efffd82ebe9 code=0x7ffc0000 [ 61.685240][ T4662] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #15: comm syz.3.374: corrupted inode contents [ 61.703545][ T29] audit: type=1326 audit(1754840641.796:1865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4669 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7efffd82ebe9 code=0x7ffc0000 [ 61.703605][ T29] audit: type=1326 audit(1754840641.796:1866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4669 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efffd82ebe9 code=0x7ffc0000 [ 61.715651][ T4670] macsec1: entered allmulticast mode [ 61.738903][ T29] audit: type=1326 audit(1754840641.796:1867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4669 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7efffd82ebe9 code=0x7ffc0000 [ 61.762075][ T4670] bridge0: entered allmulticast mode [ 61.765489][ T3294] loop0: p3 < > p4 < > [ 61.767400][ T29] audit: type=1326 audit(1754840641.796:1868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4669 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efffd82ebe9 code=0x7ffc0000 [ 61.767429][ T29] audit: type=1326 audit(1754840641.796:1869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4669 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=332 compat=0 ip=0x7efffd82ebe9 code=0x7ffc0000 [ 61.847104][ T3294] loop0: partition table partially beyond EOD, truncated [ 61.852951][ T4662] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #15: comm syz.3.374: mark_inode_dirty error [ 61.854871][ T4670] macsec1: left allmulticast mode [ 61.870602][ T4670] bridge0: left allmulticast mode [ 61.870764][ T3294] loop0: p3 start 4284289 is beyond EOD, truncated [ 61.879346][ T4662] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #15: comm syz.3.374: corrupted inode contents [ 61.894455][ T4670] bridge0: left promiscuous mode [ 61.895527][ T4662] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #15: comm syz.3.374: mark_inode_dirty error [ 61.930806][ T4673] loop0: p3 < > p4 < > [ 61.935040][ T4673] loop0: partition table partially beyond EOD, truncated [ 61.943572][ T4673] loop0: p3 start 4284289 is beyond EOD, truncated [ 61.943984][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.961126][ T4686] netlink: 'syz.4.379': attribute type 298 has an invalid length. [ 61.969566][ T4662] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #15: comm syz.3.374: corrupted inode contents [ 62.000505][ T4662] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #15: comm syz.3.374: mark_inode_dirty error [ 62.029923][ T4662] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #15: comm syz.3.374: corrupted inode contents [ 62.054122][ T4662] EXT4-fs error (device loop3): ext4_truncate:4666: inode #15: comm syz.3.374: mark_inode_dirty error [ 62.069578][ T4662] EXT4-fs error (device loop3) in ext4_setattr:6071: Corrupt filesystem [ 62.081571][ T4683] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #15: comm syz.3.374: corrupted inode contents [ 62.119605][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.197962][ T4702] loop2: detected capacity change from 0 to 512 [ 62.244090][ T4702] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.290534][ T4702] ext4 filesystem being mounted at /86/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.316649][ T4702] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.349994][ T4702] loop2: detected capacity change from 0 to 1024 [ 62.392377][ T4702] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 62.446578][ T4702] ext4 filesystem being mounted at /86/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.515342][ T4702] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.704783][ T4720] loop1: detected capacity change from 0 to 512 [ 62.758090][ T4720] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 62.787348][ T4720] EXT4-fs (loop1): invalid journal inode [ 62.807575][ T4720] EXT4-fs (loop1): can't get journal size [ 62.870510][ T4736] lo speed is unknown, defaulting to 1000 [ 63.062317][ T4720] EXT4-fs (loop1): 1 truncate cleaned up [ 63.101620][ T4720] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 63.249979][ T4740] netlink: 'syz.4.398': attribute type 1 has an invalid length. [ 63.268891][ T4741] netlink: 'syz.4.398': attribute type 1 has an invalid length. [ 63.298209][ T4741] 8021q: adding VLAN 0 to HW filter on device bond2 [ 63.348070][ T4743] bond2: (slave geneve2): making interface the new active one [ 63.374057][ T4743] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 63.385324][ T4743] syz.4.398 (4743) used greatest stack depth: 10200 bytes left [ 63.543462][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.605421][ T4753] loop4: detected capacity change from 0 to 1024 [ 63.657941][ T4753] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 63.700343][ T4767] loop0: detected capacity change from 0 to 512 [ 63.714120][ T4766] netlink: 104 bytes leftover after parsing attributes in process `syz.2.407'. [ 63.735465][ T4753] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 63.758791][ T4766] ÿ: renamed from bond_slave_0 (while UP) [ 63.803843][ T4753] EXT4-fs (loop4): Remounting filesystem read-only [ 63.812589][ T4767] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.839664][ T4757] netlink: 8 bytes leftover after parsing attributes in process `syz.1.404'. [ 63.856955][ T4753] EXT4-fs (loop4): error restoring inline_data for inode -- potential data loss! (inode 15, error -30) [ 63.869580][ T4767] ext4 filesystem being mounted at /79/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.932258][ T4772] loop1: detected capacity change from 0 to 512 [ 63.965292][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.272493][ T4780] SELinux: Context system_u:object_r:admin_passwd_exec_t:s0 is not valid (left unmapped). [ 64.286167][ T4780] loop4: detected capacity change from 0 to 128 [ 64.325998][ T4780] EXT4-fs: Ignoring removed orlov option [ 64.343248][ T4780] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 64.381397][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.392986][ T4780] ext4 filesystem being mounted at /73/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.441308][ T4780] EXT4-fs error (device loop4): __ext4_find_entry:1626: inode #2: comm syz.4.413: checksumming directory block 0 [ 64.706769][ T4808] FAULT_INJECTION: forcing a failure. [ 64.706769][ T4808] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 64.721329][ T4808] CPU: 0 UID: 0 PID: 4808 Comm: syz.0.420 Not tainted 6.16.0-syzkaller-12288-g2b38afce25c4 #0 PREEMPT(voluntary) [ 64.721362][ T4808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 64.721377][ T4808] Call Trace: [ 64.721386][ T4808] [ 64.721396][ T4808] __dump_stack+0x1d/0x30 [ 64.721454][ T4808] dump_stack_lvl+0xe8/0x140 [ 64.721531][ T4808] dump_stack+0x15/0x1b [ 64.721562][ T4808] should_fail_ex+0x265/0x280 [ 64.721585][ T4808] should_fail+0xb/0x20 [ 64.721604][ T4808] should_fail_usercopy+0x1a/0x20 [ 64.721627][ T4808] _copy_from_user+0x1c/0xb0 [ 64.721662][ T4808] __sys_bpf+0x178/0x7b0 [ 64.721709][ T4808] __x64_sys_bpf+0x41/0x50 [ 64.721735][ T4808] x64_sys_call+0x2aea/0x2ff0 [ 64.721758][ T4808] do_syscall_64+0xd2/0x200 [ 64.721828][ T4808] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 64.721856][ T4808] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.721879][ T4808] RIP: 0033:0x7f69749bebe9 [ 64.721943][ T4808] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 64.721963][ T4808] RSP: 002b:00007f6973427038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 64.721984][ T4808] RAX: ffffffffffffffda RBX: 00007f6974be5fa0 RCX: 00007f69749bebe9 [ 64.722003][ T4808] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 000000000000000a [ 64.722016][ T4808] RBP: 00007f6973427090 R08: 0000000000000000 R09: 0000000000000000 [ 64.722029][ T4808] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 64.722042][ T4808] R13: 00007f6974be6038 R14: 00007f6974be5fa0 R15: 00007fffe95383b8 [ 64.722063][ T4808] [ 65.135624][ T3307] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 65.247825][ T4846] lo speed is unknown, defaulting to 1000 [ 66.075768][ T4942] syzkaller1: entered promiscuous mode [ 66.081392][ T4942] syzkaller1: entered allmulticast mode [ 66.470089][ T4976] syzkaller1: entered promiscuous mode [ 66.475671][ T4976] syzkaller1: entered allmulticast mode [ 66.488889][ T4976] netlink: 'syz.4.431': attribute type 39 has an invalid length. [ 66.537344][ T4978] netlink: 'syz.3.432': attribute type 10 has an invalid length. [ 66.754423][ T5007] loop4: detected capacity change from 0 to 512 [ 66.773802][ T29] kauditd_printk_skb: 36 callbacks suppressed [ 66.773819][ T29] audit: type=1400 audit(1754840646.946:1906): avc: denied { mounton } for pid=5006 comm="syz.4.433" path="/79/bus" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 66.804371][ T5007] /dev/loop4: Can't open blockdev [ 66.847962][ T29] audit: type=1400 audit(1754840647.016:1907): avc: denied { write } for pid=5016 comm="syz.3.434" name="hwrng" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 66.874502][ T5017] netlink: 16 bytes leftover after parsing attributes in process `syz.3.434'. [ 66.920917][ T29] audit: type=1400 audit(1754840647.096:1908): avc: denied { unmount } for pid=3307 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 67.002458][ T29] audit: type=1326 audit(1754840647.176:1909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5040 comm="syz.0.438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69749bebe9 code=0x7ffc0000 [ 67.004787][ T5039] loop3: detected capacity change from 0 to 1024 [ 67.038703][ T5039] EXT4-fs: Ignoring removed orlov option [ 67.054076][ T29] audit: type=1326 audit(1754840647.206:1910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5040 comm="syz.0.438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f69749bebe9 code=0x7ffc0000 [ 67.077459][ T29] audit: type=1326 audit(1754840647.206:1911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5040 comm="syz.0.438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69749bebe9 code=0x7ffc0000 [ 67.101047][ T29] audit: type=1326 audit(1754840647.206:1912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5040 comm="syz.0.438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69749bebe9 code=0x7ffc0000 [ 67.124426][ T29] audit: type=1326 audit(1754840647.206:1913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5040 comm="syz.0.438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f69749bebe9 code=0x7ffc0000 [ 67.148115][ T29] audit: type=1326 audit(1754840647.206:1914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5040 comm="syz.0.438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69749bebe9 code=0x7ffc0000 [ 67.172266][ T29] audit: type=1326 audit(1754840647.206:1915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5040 comm="syz.0.438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69749bebe9 code=0x7ffc0000 [ 67.199713][ T5053] netlink: 'syz.0.439': attribute type 21 has an invalid length. [ 67.207780][ T5053] netlink: 8 bytes leftover after parsing attributes in process `syz.0.439'. [ 67.218776][ T5039] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.240940][ T5053] loop0: detected capacity change from 0 to 128 [ 67.267199][ T5053] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 67.280279][ T5053] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 67.320249][ T12] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 67.403048][ T5072] loop0: detected capacity change from 0 to 2048 [ 67.433012][ T5072] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.466707][ T5072] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 102 with max blocks 1 with error 28 [ 67.479663][ T5072] EXT4-fs (loop0): This should not happen!! Data will be lost [ 67.479663][ T5072] [ 67.489604][ T5072] EXT4-fs (loop0): Total free blocks count 0 [ 67.495862][ T5072] EXT4-fs (loop0): Free/Dirty block details [ 67.501899][ T5072] EXT4-fs (loop0): free_blocks=0 [ 67.506861][ T5072] EXT4-fs (loop0): dirty_blocks=0 [ 67.511930][ T5072] EXT4-fs (loop0): Block reservation details [ 67.518368][ T5072] EXT4-fs (loop0): i_reserved_data_blocks=0 [ 67.526219][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.565341][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.604050][ T5081] bond1: entered promiscuous mode [ 67.609149][ T5081] bond1: entered allmulticast mode [ 67.623236][ T5081] 8021q: adding VLAN 0 to HW filter on device bond1 [ 67.654773][ T5081] bond1 (unregistering): Released all slaves [ 67.866951][ T5096] netlink: 'syz.2.443': attribute type 1 has an invalid length. [ 67.874756][ T5096] netlink: 199820 bytes leftover after parsing attributes in process `syz.2.443'. [ 67.983462][ T5097] lo speed is unknown, defaulting to 1000 [ 68.313163][ T5114] netlink: 16 bytes leftover after parsing attributes in process `syz.4.446'. [ 68.471168][ T5126] lo speed is unknown, defaulting to 1000 [ 68.540750][ T5131] vlan2: entered allmulticast mode [ 68.553748][ T5131] dummy0: entered allmulticast mode [ 68.566797][ T5135] netlink: 4 bytes leftover after parsing attributes in process `syz.0.456'. [ 68.688189][ T5145] FAULT_INJECTION: forcing a failure. [ 68.688189][ T5145] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 68.695179][ T5147] loop0: detected capacity change from 0 to 2048 [ 68.701968][ T5145] CPU: 1 UID: 0 PID: 5145 Comm: syz.2.462 Not tainted 6.16.0-syzkaller-12288-g2b38afce25c4 #0 PREEMPT(voluntary) [ 68.702014][ T5145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 68.702033][ T5145] Call Trace: [ 68.702043][ T5145] [ 68.702056][ T5145] __dump_stack+0x1d/0x30 [ 68.702130][ T5145] dump_stack_lvl+0xe8/0x140 [ 68.702159][ T5145] dump_stack+0x15/0x1b [ 68.702181][ T5145] should_fail_ex+0x265/0x280 [ 68.702212][ T5145] should_fail+0xb/0x20 [ 68.702234][ T5145] should_fail_usercopy+0x1a/0x20 [ 68.702322][ T5145] _copy_from_user+0x1c/0xb0 [ 68.702432][ T5145] ___sys_sendmsg+0xc1/0x1d0 [ 68.702484][ T5145] __sys_sendmmsg+0x178/0x300 [ 68.702607][ T5145] __x64_sys_sendmmsg+0x57/0x70 [ 68.702639][ T5145] x64_sys_call+0x1c4a/0x2ff0 [ 68.702686][ T5145] do_syscall_64+0xd2/0x200 [ 68.702723][ T5145] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 68.702757][ T5145] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 68.702792][ T5145] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.702872][ T5145] RIP: 0033:0x7efffd82ebe9 [ 68.702893][ T5145] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 68.702917][ T5145] RSP: 002b:00007efffc28f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 68.702942][ T5145] RAX: ffffffffffffffda RBX: 00007efffda55fa0 RCX: 00007efffd82ebe9 [ 68.703038][ T5145] RDX: 0000000000000001 RSI: 0000200000000500 RDI: 0000000000000005 [ 68.703055][ T5145] RBP: 00007efffc28f090 R08: 0000000000000000 R09: 0000000000000000 [ 68.703072][ T5145] R10: 0000000004044040 R11: 0000000000000246 R12: 0000000000000001 [ 68.703116][ T5145] R13: 00007efffda56038 R14: 00007efffda55fa0 R15: 00007ffc06038608 [ 68.703143][ T5145] [ 68.912573][ T5147] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 102 with max blocks 1 with error 28 [ 68.925252][ T5147] EXT4-fs (loop0): This should not happen!! Data will be lost [ 68.925252][ T5147] [ 68.935841][ T5147] EXT4-fs (loop0): Total free blocks count 0 [ 68.942338][ T5147] EXT4-fs (loop0): Free/Dirty block details [ 68.948262][ T5147] EXT4-fs (loop0): free_blocks=0 [ 68.953461][ T5147] EXT4-fs (loop0): dirty_blocks=0 [ 68.958579][ T5147] EXT4-fs (loop0): Block reservation details [ 68.964705][ T5147] EXT4-fs (loop0): i_reserved_data_blocks=0 [ 69.014255][ T5164] FAULT_INJECTION: forcing a failure. [ 69.014255][ T5164] name failslab, interval 1, probability 0, space 0, times 0 [ 69.027072][ T5155] netlink: 8 bytes leftover after parsing attributes in process `syz.2.465'. [ 69.027093][ T5155] netlink: 8 bytes leftover after parsing attributes in process `syz.2.465'. [ 69.045184][ T5164] CPU: 0 UID: 0 PID: 5164 Comm: syz.0.468 Not tainted 6.16.0-syzkaller-12288-g2b38afce25c4 #0 PREEMPT(voluntary) [ 69.045213][ T5164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 69.045225][ T5164] Call Trace: [ 69.045232][ T5164] [ 69.045240][ T5164] __dump_stack+0x1d/0x30 [ 69.045273][ T5164] dump_stack_lvl+0xe8/0x140 [ 69.045298][ T5164] dump_stack+0x15/0x1b [ 69.045318][ T5164] should_fail_ex+0x265/0x280 [ 69.045346][ T5164] should_failslab+0x8c/0xb0 [ 69.045371][ T5164] __kvmalloc_node_noprof+0x123/0x4e0 [ 69.045416][ T5164] ? copy_regset_to_user+0x7f/0x180 [ 69.045445][ T5164] copy_regset_to_user+0x7f/0x180 [ 69.045472][ T5164] arch_ptrace+0x23f/0x3f0 [ 69.045497][ T5164] __se_sys_ptrace+0xf3/0x2c0 [ 69.045526][ T5164] __x64_sys_ptrace+0x55/0x70 [ 69.045633][ T5164] x64_sys_call+0x286c/0x2ff0 [ 69.045655][ T5164] do_syscall_64+0xd2/0x200 [ 69.045682][ T5164] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 69.045763][ T5164] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 69.045789][ T5164] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.045811][ T5164] RIP: 0033:0x7f69749bebe9 [ 69.045826][ T5164] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 69.045921][ T5164] RSP: 002b:00007f6973427038 EFLAGS: 00000246 ORIG_RAX: 0000000000000065 [ 69.045940][ T5164] RAX: ffffffffffffffda RBX: 00007f6974be5fa0 RCX: 00007f69749bebe9 [ 69.045953][ T5164] RDX: ffffffffffffdcaf RSI: 0000000000000106 RDI: 000000000000000c [ 69.045965][ T5164] RBP: 00007f6973427090 R08: 0000000000000000 R09: 0000000000000000 [ 69.045977][ T5164] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 69.045989][ T5164] R13: 00007f6974be6038 R14: 00007f6974be5fa0 R15: 00007fffe95383b8 [ 69.046009][ T5164] [ 69.303109][ T5170] loop1: detected capacity change from 0 to 512 [ 69.435296][ T5179] loop0: detected capacity change from 0 to 128 [ 69.476687][ T5179] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 69.496515][ T5170] ext4 filesystem being mounted at /81/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 69.515607][ T5170] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #2: comm syz.1.470: corrupted inode contents [ 69.545808][ T5179] FAT-fs (loop0): FAT read failed (blocknr 128) [ 69.572858][ T5170] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #2: comm syz.1.470: mark_inode_dirty error [ 69.641133][ T5170] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #2: comm syz.1.470: corrupted inode contents [ 69.909104][ T5155] Set syz1 is full, maxelem 65536 reached [ 69.942166][ T5201] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2 [ 69.954885][ T5203] wg2: entered promiscuous mode [ 69.959829][ T5203] wg2: entered allmulticast mode [ 69.975561][ T5201] netlink: 92 bytes leftover after parsing attributes in process `syz.1.479'. [ 69.984846][ T5201] netlink: 24 bytes leftover after parsing attributes in process `syz.1.479'. [ 70.042794][ T5203] netlink: 'syz.3.480': attribute type 13 has an invalid length. [ 70.053189][ T5203] loop3: detected capacity change from 0 to 164 [ 70.136239][ T5209] lo speed is unknown, defaulting to 1000 [ 70.196349][ T3450] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 70.205973][ T5214] loop3: detected capacity change from 0 to 2048 [ 70.328134][ T5214] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 102 with max blocks 1 with error 28 [ 70.341397][ T5214] EXT4-fs (loop3): This should not happen!! Data will be lost [ 70.341397][ T5214] [ 70.342011][ T5224] loop1: detected capacity change from 0 to 2048 [ 70.351280][ T5214] EXT4-fs (loop3): Total free blocks count 0 [ 70.363689][ T5214] EXT4-fs (loop3): Free/Dirty block details [ 70.369614][ T5214] EXT4-fs (loop3): free_blocks=0 [ 70.374811][ T5214] EXT4-fs (loop3): dirty_blocks=0 [ 70.379960][ T5214] EXT4-fs (loop3): Block reservation details [ 70.386314][ T5214] EXT4-fs (loop3): i_reserved_data_blocks=0 [ 70.414737][ T5228] loop2: detected capacity change from 0 to 1024 [ 70.436368][ T5223] loop0: detected capacity change from 0 to 128 [ 70.445645][ T5223] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 70.507537][ T5223] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 70.542706][ T5237] loop1: detected capacity change from 0 to 1024 [ 70.556011][ T5237] EXT4-fs: Ignoring removed orlov option [ 70.634467][ T37] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 70.684863][ T5250] loop0: detected capacity change from 0 to 1024 [ 70.692682][ T5250] EXT4-fs: Ignoring removed orlov option [ 70.775884][ T5259] loop3: detected capacity change from 0 to 2048 [ 70.799763][ T5257] loop2: detected capacity change from 0 to 1024 [ 70.806797][ T5257] EXT4-fs: inline encryption not supported [ 70.813060][ T5257] EXT4-fs: Ignoring removed bh option [ 70.978606][ T5278] loop3: detected capacity change from 0 to 1024 [ 71.206757][ T5287] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 71.266966][ T5288] loop1: detected capacity change from 0 to 128 [ 71.274331][ T5288] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 71.297429][ T5288] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 71.472315][ T5273] ================================================================== [ 71.480654][ T5273] BUG: KCSAN: data-race in __writeback_single_inode / xas_set_mark [ 71.488672][ T5273] [ 71.491009][ T5273] write to 0xffff8881191a028c of 4 bytes by task 5257 on cpu 1: [ 71.498654][ T5273] xas_set_mark+0x12b/0x140 [ 71.503190][ T5273] __folio_start_writeback+0x1dd/0x440 [ 71.508677][ T5273] ext4_bio_write_folio+0x5ad/0x9f0 [ 71.513896][ T5273] mpage_process_page_bufs+0x4a1/0x620 [ 71.519367][ T5273] mpage_prepare_extent_to_map+0x786/0xc00 [ 71.525307][ T5273] ext4_do_writepages+0xa05/0x2750 [ 71.530531][ T5273] ext4_writepages+0x176/0x300 [ 71.535399][ T5273] do_writepages+0x1c3/0x310 [ 71.540010][ T5273] file_write_and_wait_range+0x156/0x2c0 [ 71.545766][ T5273] generic_buffers_fsync_noflush+0x45/0x120 [ 71.551764][ T5273] ext4_sync_file+0x1ab/0x690 [ 71.556704][ T5273] vfs_fsync_range+0x10d/0x130 [ 71.561582][ T5273] ext4_buffered_write_iter+0x34f/0x3c0 [ 71.567335][ T5273] ext4_file_write_iter+0x383/0xf00 [ 71.572580][ T5273] iter_file_splice_write+0x666/0x9e0 [ 71.578053][ T5273] direct_splice_actor+0x153/0x2a0 [ 71.583279][ T5273] splice_direct_to_actor+0x30f/0x680 [ 71.588748][ T5273] do_splice_direct+0xda/0x150 [ 71.593606][ T5273] do_sendfile+0x380/0x650 [ 71.598045][ T5273] __x64_sys_sendfile64+0x105/0x150 [ 71.603260][ T5273] x64_sys_call+0x2bb0/0x2ff0 [ 71.607952][ T5273] do_syscall_64+0xd2/0x200 [ 71.612568][ T5273] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.618660][ T5273] [ 71.620999][ T5273] read to 0xffff8881191a028c of 4 bytes by task 5273 on cpu 0: [ 71.628547][ T5273] __writeback_single_inode+0x1f9/0x7c0 [ 71.634379][ T5273] writeback_single_inode+0x167/0x3e0 [ 71.639792][ T5273] sync_inode_metadata+0x5b/0x90 [ 71.644855][ T5273] generic_buffers_fsync_noflush+0xd9/0x120 [ 71.650760][ T5273] ext4_sync_file+0x1ab/0x690 [ 71.655485][ T5273] vfs_fsync_range+0x10d/0x130 [ 71.660401][ T5273] ext4_buffered_write_iter+0x34f/0x3c0 [ 71.666076][ T5273] ext4_file_write_iter+0x383/0xf00 [ 71.671389][ T5273] iter_file_splice_write+0x666/0x9e0 [ 71.676771][ T5273] direct_splice_actor+0x153/0x2a0 [ 71.681987][ T5273] splice_direct_to_actor+0x30f/0x680 [ 71.687498][ T5273] do_splice_direct+0xda/0x150 [ 71.692367][ T5273] do_sendfile+0x380/0x650 [ 71.696931][ T5273] __x64_sys_sendfile64+0x105/0x150 [ 71.702149][ T5273] x64_sys_call+0x2bb0/0x2ff0 [ 71.706853][ T5273] do_syscall_64+0xd2/0x200 [ 71.711502][ T5273] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.717704][ T5273] [ 71.720220][ T5273] value changed: 0x0a000021 -> 0x04000021 [ 71.726236][ T5273] [ 71.728701][ T5273] Reported by Kernel Concurrency Sanitizer on: [ 71.735030][ T5273] CPU: 0 UID: 0 PID: 5273 Comm: syz.2.500 Not tainted 6.16.0-syzkaller-12288-g2b38afce25c4 #0 PREEMPT(voluntary) [ 71.747282][ T5273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 71.757388][ T5273] ================================================================== [ 71.793427][ T29] kauditd_printk_skb: 619 callbacks suppressed [ 71.793440][ T29] audit: type=1326 audit(1754840657.962:2535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5305 comm="syz.1.515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99faf9ebe9 code=0x7ffc0000 [ 71.858649][ T29] audit: type=1326 audit(1754840657.962:2536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5305 comm="syz.1.515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f99faf9ebe9 code=0x7ffc0000 [ 71.882798][ T29] audit: type=1326 audit(1754840657.962:2537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5305 comm="syz.1.515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99faf9ebe9 code=0x7ffc0000 [ 71.906551][ T29] audit: type=1326 audit(1754840657.962:2538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5305 comm="syz.1.515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f99faf9ebe9 code=0x7ffc0000 [ 71.930407][ T29] audit: type=1326 audit(1754840657.962:2539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5305 comm="syz.1.515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99faf9ebe9 code=0x7ffc0000 [ 71.954389][ T29] audit: type=1326 audit(1754840657.962:2540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5305 comm="syz.1.515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f99faf9ebe9 code=0x7ffc0000 [ 71.978184][ T29] audit: type=1326 audit(1754840657.962:2541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5305 comm="syz.1.515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99faf9ebe9 code=0x7ffc0000 [ 72.001950][ T29] audit: type=1326 audit(1754840657.962:2542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5305 comm="syz.1.515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f99faf9ebe9 code=0x7ffc0000 [ 72.025400][ T29] audit: type=1326 audit(1754840657.962:2543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5305 comm="syz.1.515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99faf9ebe9 code=0x7ffc0000 [ 72.049233][ T29] audit: type=1326 audit(1754840657.962:2544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5305 comm="syz.1.515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f99faf9ebe9 code=0x7ffc0000 [ 72.075853][ T5306] loop1: detected capacity change from 0 to 2048