last executing test programs: 1m7.072225726s ago: executing program 0 (id=210): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000001300)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x28}, 0x6}, 0x1c) (async, rerun: 32) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x100, @empty, 0x3}, 0x1c) (async, rerun: 32) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7d1}, 0x1c) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) (async, rerun: 64) listen(r0, 0x89) (rerun: 64) 1m7.0056489s ago: executing program 0 (id=211): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22, 0x0, @mcast2, 0x3}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac7102d000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 1m7.00546513s ago: executing program 0 (id=212): syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = socket(0x840000000002, 0x3, 0xff) close(r0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='gre0\x00', 0x10) sendmmsg$inet(r0, &(0x7f0000000240), 0x0, 0x4004040) getsockopt$WPAN_WANTLQI(r0, 0x0, 0x3, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b000000000000000000000000800000000000002dd9fe01000000000000009286f65d092ceb9545e455fb992daec76b0b9e49b88caae985161cba1e54436029d9de2c117c22da72a36c501b1a7e38c092dbb759c4be29fad9072b573d56d3fe385f", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x7, &(0x7f0000000080)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffeb1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000480)='jbd2_handle_stats\x00', r1, 0x0, 0x9}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x118}}, 0x80) openat$nvram(0xffffffffffffff9c, 0x0, 0x88002, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518f6ff00", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = syz_open_dev$sg(&(0x7f0000000440), 0x0, 0x8040) ioctl$SCSI_IOCTL_SEND_COMMAND(r5, 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="200000d10100"]) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) inotify_init() creat(0x0, 0xd931d3864d39dcca) io_uring_enter(0xffffffffffffffff, 0x72aa, 0x9cdb, 0xb4, 0x0, 0xfe67) socket(0x10, 0x3, 0x6) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, 0x0, 0x20000000) ioctl$BTRFS_IOC_DEFRAG(r6, 0x50009402, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x13, r2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0xffffffffffffff20) 1m6.946546974s ago: executing program 0 (id=214): r0 = fsopen(&(0x7f0000000180)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x3, 0x0, 0x7ffc1ffb}]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$packet(0x11, 0x2, 0x300) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000280)='kfree\x00', r3}, 0x18) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000100)=@req3={0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x861}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r4}, &(0x7f00000008c0), &(0x7f0000000880)=r5}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r4}, &(0x7f0000000000), &(0x7f0000000200)='%-5lx \x00'}, 0x20) syz_clone(0x40800280, &(0x7f00000002c0)="f389d1ce98857068b8d89633966907c07bae6b0c2703af601d8d9371f99f57992ba1f9478ee7df989e27438aa47c4c41da48bd6b3f6c2f221b77e197c2a652774a96255a1856c17c89fc70513cd57d5494bad29c8f3699c4a7720552482bfb6c04ab6f77602dcae48cc6fc9bcaaf63b0676cc76dbe5c2b62df3c92727a6cc6095fc9445a4cf03ca5", 0x88, &(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000500)="3566572f54ed76cd2425ad304a23dd45f126772facb882c596c7e53aa2f348601bd740cee07d5d84d4632f426211da33c8e821fb7cf33f4ae180d5a9c4a41e9f262f2ad38b1c96b0dd64a0b2d906c0") io_setup(0x6, &(0x7f0000000680)) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000001ec0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000700)='GPL\x00', 0x4, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x25, &(0x7f0000000080)=0x454e, 0x4) bind$inet(r7, &(0x7f0000000580)={0x2, 0x0, @local}, 0x10) connect$inet(r7, &(0x7f0000000480)={0x2, 0x4e24, @multicast1}, 0x10) sendmmsg(r7, &(0x7f0000007fc0), 0x800001d, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x521900, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000e00)={[{@delalloc}, {@nodelalloc}, {@init_itable_val={'init_itable', 0x3d, 0x3}}, {@inlinecrypt}, {@data_err_ignore}, {@nodiscard}, {@data_err_ignore}, {@grpquota}, {@i_version}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x557, &(0x7f0000000fc0)="$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") connect$caif(0xffffffffffffffff, &(0x7f0000000400), 0x18) openat(0xffffffffffffff9c, &(0x7f0000000740)='./file1\x00', 0x183042, 0x15) 1m5.78738871s ago: executing program 0 (id=227): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)='a', 0xdd02}], 0xc, &(0x7f0000000000)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0xc}}], 0x30}], 0x1, 0x0) 1m5.317266961s ago: executing program 0 (id=235): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file1\x00', 0x14004, &(0x7f00000005c0)=ANY=[@ANYRES32=0x0], 0x4, 0x70f, &(0x7f0000000600)="$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") 1m5.293864353s ago: executing program 32 (id=235): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file1\x00', 0x14004, &(0x7f00000005c0)=ANY=[@ANYRES32=0x0], 0x4, 0x70f, &(0x7f0000000600)="$eJzs3V2P21gZB/D/STJJJoWqAlStqm7ndMpKUzGkTmabKipIGOckY0jiyPbAjIS0KnQGjZop0BaJ5qadG16k5Qtwtzdc8CFW4oKr/RZwBdIKhIR2BUJGPraTTOJkJm063aX/32g3jv34+PHL+lnP2McgIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiCKthGBWBtt3d2ZWzWQ3X6SRfBKamR62t4GY0cHPeMlfC5QIi/AfFIt6KRr/1lVHI5fBf67gafbuKYvhRxODC5Ut3v5zLJPPPSfhFYNEGHz8dPLjX7+8/OkNsFgs3f36KU8khc4bZWqpre47dMVtK2p4j67WacWu76cmm3VbenuerjrRclfEdV25YN2WlXt+Sqrzn7HRbDbOtkpF3vl41jJr8TiHa0QDKnrVtt9t2t6VjwslhzB35/g+iAGV2pDw47O9vjeXzLG0bh0GVlOQz48FhUPW01a0a1WqlUq1Warfrt+8YRm5qhBESxhCmIpZ+0NLrlImP1wVmWd7Jm+glZazGf4w/C6CNIrrYwS5k6o+FBlw46MyYHkvq/zu31Nzljtf/pMqvjCZfga7/16Jv12bV/xm5SOiCljpFzBi/2M+KzkjiMZ5igAe4hz762MejJbQtIddeuoW8EW/JpeQz86cFhS5seHBgowMTLXwRMh4jUUcNNRh4D9towoNEEzbaUPCwBw8+VHhE5cNMFUz4cOBCYgMWbkKigjrq2IKEQhl7cLCDLlpowMQnQRAc4FBv9604n+cpa40kqDJjJQrIJcfdPqpz1nZW/f/hs2juuP4brP9vqug4KEQfH82LIfoMCOLr/wWtvZpsiIiIiIiIiOhVEPq370L/Vf5tAAGadlsZJ2IKry07IiIiIiIiIloGgaCAqxDRXfl4G2L6+p+IiIiIiIiIPt+EfsZOACjpm/rF6HGps/wSIHsOKRIRERERERHRS9JP/l/LA4G+y38NYqHrfyIiIiIiIiL6HPj1WB/7uWzcx26Q/Fk/A2DtLwXx4d8LcFfEcW/3q+LIDKeYR3HM1B0AfvOKuBh31Ks/8gD0N0tdFfHSJPCv5LcPoY8P0vv6fx5EhBDuRAL57HgDMxIQ4ZJrufgb3sf1aJbrcT/z9wcZ6ClRj8Klpt1WZctp363ANC9mfLXr//zh4S8Ad7ieB4f9/fKPftK/r3M5DkcdH4WNPjuRTiZ9Y4xyeaL7W9DPXKT1bryKZrLI33Q7JaGXayTrn4V5lBlf0LwdUFsForX8JdajfbYeRLGlwbDHfQGs6c4fKmW9y06svbsiRllUJtc8bUfMWPOizuJGFHNj40b0kWyTsJ2MKH4tC1TLk/sgTHQsi+p4FqdvC/GPie0/PwuIYrgttsIs/hg2NLEtvv9hNPNWbzfpHuMsWUwdBUREr8vBqArpTsyn+thPykNyUjt73UEOiM9yM6r7aClBXD+S6v7kd0FUobJALv7bRPpSkrqC8Iy+IXQ7+ahD99yVlDO6Uf40CALzYhHjZ/T/BkGyQsYC1e04CILJM/ofRu9AitOeyuLfQRDcrehK8tuJqvpBOMMHM5frtatZFFHAk6Of4pNk8v6P9x9Wq1s1413DuF3Fiv5fhfgjC9YeIiKacvo7dnREZk6EeBfXozau3//bO9HQeMXLfSm+pUC7BfRxH5vJKwTW0lst4QDf/Gd0G8JmdNUKrJeiz9JAXr50N7yqHcYeipx+w8vmzKs6XSyjWH17Q3UYm7x3aPIKcBS79Yr3AhER0flan1GHgRP1Hyfrf/FE/d/ERhSxcSX1urs0dkvhZnJ1PLykH1w4To2tnJ78t5a8MYiIiN4Qyv1YlPxfCde1e+9V6vWK6W8r6TrWd6VrN1pK2l1fuda22W0p2XMd37Gctuy5KNirypPeTq/nuL5sOq7sOZ69q9/8LuNXv3uqY3Z92/J6bWV6SlpO1zctXzZsz5K9nW+3bW9buXpmr6csu2lbpm87Xek5O66lylJ6So0F2g3V9e2mHQ52Zc+1O6a7J7/ntHc6SjaUZ7l2z3eiBpNl2d2m43Z0s2UEC7/okIiI6P/R46eDB/f6/f1HkwOr4aV5NOYYM2KmB/IpDbKPICIios+YUbleYKbiK0yIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIimnP5I34IDK2kPCwLDMT+7GI/Bc4weMZxqR+Bl8/nU/ZPu2O9FZs8MxwgAZ5greSRi8OCjOcGrwzHJ5h+POV4kQ1wCXnj7/PULwAU9BtGY3BIPgOnnR5d+jKUNfOMg2qKzYvTE1EmF4b7ILfc/h1VEAw9/Px0jwi0fBEEwv53CyW2YP/vxnAPwKD9nF6yecvyc95mIiM7b/wIAAP//CfgukA==") 2.057499203s ago: executing program 2 (id=1115): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={0x0, r0}, 0x18) openat$random(0xffffffffffffff9c, 0x0, 0x101202, 0x0) syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0xfdbd, 0x10000}, &(0x7f0000000000), &(0x7f0000000180)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413ec50000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='netlink_extack\x00', r4}, 0x18) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x7fffffff}, 0x10) sendmsg$kcm(r5, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e0000004a008102e00f80ecdb4cb9020a", 0x4a}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) 1.895567124s ago: executing program 4 (id=1118): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0xffffffffffffffe1) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xb, 0xf, 0x200cc, 0x6, 0x5}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)='T', &(0x7f0000000240), 0x4af, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000700)={0x0, &(0x7f0000000540)=""/245, &(0x7f00000000c0), &(0x7f0000000680), 0x2, r0}, 0x38) 1.830096608s ago: executing program 4 (id=1119): r0 = socket$kcm(0x10, 0x2, 0x0) mlockall(0x7) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000040000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000004c0)='kmem_cache_free\x00', r1}, 0x18) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) syz_read_part_table(0x1054, &(0x7f0000001340)="$eJzsz72twjAYBdCbKC9WpnihZgimyAJMEtGzCLOwDrWR+ZGyAILinML2d+Ury+G71szbsZbknDHJX5I+U9uP13l/S/e8MfQpeQ+vUoYkh00y5hFlrfVU6vjfKu2t7Pqlnaa2dFkun/8gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPy+ewAAAP//RmEMSw==") bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0xb, 0x100005, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r6, 0xffffffffffffffff, 0x0, 0x2}, 0x48) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000700)={&(0x7f0000000640), 0xc, &(0x7f00000006c0)={&(0x7f00000009c0)={0x170, r4, 0x800, 0x70bd25, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKMODES_OURS={0xc0, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x62, 0x5, "caf64b6688bc2a5fdc6d04cb279b94108589147ccfbabf7f3a9743ec5516c0956ba5ea4e92d505c1283b29fb3f7971ba6137c8785ea76a0ec5762eeaae975fbb85bc8043fbc5adb4f750203cc8f64b591394bc4afe6bb41ee19fa9a59fc6"}, @ETHTOOL_A_BITSET_MASK={0x56, 0x5, "aa81fa4fdd372bfb9c2ce6eb9a6f8c5e09ffe45947983c7414b79f190040de3699b1af56825f8fbcf2a2fb6b60e0c844703575632ff78c2381d777e2ca9dd96bd65acc9ac72e592f31efae54bcd9956c8a04"}]}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x3}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x2}, @ETHTOOL_A_LINKMODES_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @ETHTOOL_A_LINKMODES_OURS={0x38, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x2f, 0x4, "0f45eacd0df44988e76e30dbb6b6672a2855b831c0a0d112ab423ff14c163ed4c72e15a7779bb0a23c9132"}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x4}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0xa3}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x80}]}, 0x170}, 0x1, 0x0, 0x0, 0x4010}, 0x10) r7 = socket$netlink(0x10, 0x3, 0x15) sendmsg$IPSET_CMD_GET_BYNAME(r7, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x48, 0xe, 0x6, 0x301, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x48000}, 0x11) ioctl$TIOCSSOFTCAR(r3, 0x5453, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r9, 0x84, 0x1, 0x0, &(0x7f0000000000)=0x54) syz_read_part_table(0x5eb, &(0x7f0000000f00)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r10}, 0x10) clock_nanosleep(0x9, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x0) r11 = socket(0x10, 0x803, 0x0) recvmmsg(r11, &(0x7f0000000340)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000780)=""/220, 0xdc}, {&(0x7f0000001a40)=""/217, 0xd9}, {&(0x7f0000001b40)=""/4096, 0x1000}, {&(0x7f0000000280)=""/172, 0xac}, {&(0x7f0000002c40)=""/146, 0x92}, {&(0x7f0000002d00)=""/128, 0x80}, {&(0x7f0000000000)=""/260, 0x104}, {&(0x7f0000000880)=""/88, 0x58}], 0x8}, 0xe}, {{0x0, 0x0, 0x0}, 0xa}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0xffffffff}, {{0x0, 0x0, 0x0}, 0xfffffffe}, {{0x0, 0x0, 0x0}, 0x8}], 0x6, 0x100, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r8, 0xc028660f, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x81, 0x1, 0xde, 0x7506}) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008108040f80ecdb4cb92e0a480e000f000000e8bd6efb250314000e000300240248ff050005001200", 0x2e}], 0x1}, 0x0) 1.394393167s ago: executing program 1 (id=1132): fsopen(&(0x7f0000000400)='autofs\x00', 0x0) r0 = syz_socket_connect_nvme_tcp() r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r6, 0x0, 0xf3a, 0x0) write(r3, &(0x7f0000000240)="94", 0x1) vmsplice(r6, &(0x7f0000000380)=[{&(0x7f0000013580)="0dd2e7c8926dc6acd0ae6c178054e95986faff9544de5fc4c30adf404da41181a77466ac5075905ea5f50134fdd517a957fe2ee59b61f9fe8d7aabe595ea23de2723e437af0423a56686a4c2d957be1a0ab922fbbd3cb1d8c6ab0d58440a327c8eb05d445b4ac5f20abe449e4084f8b996268d0564f67980d3ed3479e0edfe5cec7b4f89bface391c9c4c58ad123b91c33173c72326d1df18804a9ea20f9ece48f784d8ca2318e3d2b316666b5dfb7295c4915989d5bcb120e8fedaa97b93a137c256ce4", 0x20013644}, {&(0x7f0000013680)="c578381bf5113dad8319d9ea5294285ae9a90384ce23866477bef9de4399237d8b3522c9c194e71edaf3332a2f169682f9d8fa271683d4d441b710409e506333e0c3b64e52e8720734b6787f4a84f5bebb046649c6c697d978affd349031b2cd874c7a8961a586a9f2d62f945e7a5bf2f5f7a31684c0503704881d2578a2a98ac3ef4e4a4b0dcdb70db735d5c1652eed3848b2dd4131bb0eb7cfadfaf5", 0x9d}], 0x2, 0x0) tee(r2, r6, 0x8f5, 0x0) write(r4, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x8}}, './file0\x00'}) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000006e6a00850000000600000018110000", @ANYRES32=r1, @ANYRES8=r1], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r8, 0x0, 0x200000000000006}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1/file3\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) r10 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r10, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) sendmmsg$inet6(r10, &(0x7f0000001840), 0x3b, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MLD_VERSION={0x5, 0x2c, 0x9}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) utimensat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r9, 0x8008f513, &(0x7f0000000200)) perf_event_open(&(0x7f0000000040)={0x2, 0xca, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) 1.305548593s ago: executing program 4 (id=1136): open(&(0x7f0000000000)='./bus\x00', 0x1050c1, 0x170) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x5, 0xfffffffc, 0xb95b5ec032cc8e84, 0x0, 0xe6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00'}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000180)={[{@nolazytime}, {@lazytime}, {@journal_path={'journal_path', 0x3d, './bus'}}, {@nojournal_checksum}, {@dax_never}, {@nodiscard}], [{@obj_user={'obj_user', 0x3d, 'nodiscard'}}, {@fsuuid={'fsuuid', 0x3d, {[0x31, 0x32, 0x34, 0x33, 0x33, 0x39, 0x37, 0x62], 0x2d, [0x66, 0x30, 0x65, 0x1], 0x2d, [0x65, 0x33, 0x38, 0x65], 0x2d, [0x33, 0x34, 0x35, 0x35], 0x2d, [0x61, 0x32, 0x64, 0x64, 0x66, 0x64, 0x36, 0x39]}}}, {@fowner_eq}, {@func={'func', 0x3d, 'FILE_MMAP'}}]}, 0x0, 0x479, &(0x7f0000001300)="$eJzs3MtvG8UfAPDvOo82fcW/qj+gDyAIEKVA0qSl9MAFBBIHkJDgUI4hSatSt0FNkEhVQUCoHFElTlwQRyT+Ak5wQcAJCQ4c4I4qVaiXFk5Gm91NHdfOw3Xstv58pHVmdtee+Xpn7NmdeAPoWSPpQxKxIyL+iIjhLLtyh5Hsz41rF6f+uXZxKolq9Y2/k/508/VrF6eKXYvnbS8y/RGlT5LY36DcuYULZyYrlZnzeX5s/uy7Y3MLF545fXby1MypmXMTx48fPTL+3LGJZ9sSZxrX9X0fzB7Y+8pbl1+bOnH57Z++SYr46+K4xW8tFTmy2sbHq9WWXvQONJg+7KxZkbUM7gZ9WTeNgaX+Pxx9cfPgDcfLH3e1csCmqlar1fuab16sAvewJLpdA6A7ii/69Py3WDo09LgjXH0hOwFK476RL9mW/ijl+wzUnd+200hEnFj898t0ibWuQwAAtMF36fjn6Ubjv1LUXhfalc+hlCPifxGxOyKORcSeiPh/xNK+90fEAxssv36S5NbxT+lKS4GtUzr+ez6f21o5/itGf1Huy3M7l+IfSE6erswczt+TgzGwJc2Pr1LG9y/9+lmzbbXjv3RJyy/Ggnk9rvRvWfmc6cn5yduJudbVjyL29TeKP1meCUgiYm9E7GuxjNOHvj7QbNva8a+iDfNM1a8insiO/2LUxV9IsvnJcpP5ybGtUZk5PFa0ihiqefnF9ND9/Mul15uVf1vxt0F6/Lc1bP/L8ZeT2vnauY28+hdPpo+X/vy06TlNq+1/MHlzxbr3J+fnz49HDCavZpWuXT9Rt9/Ezf3T+A8+2rj/746b78T+iEgb8YMR8VBEPJzX/ZHfd635Lvz44mPvtB7/5krjn17/8a8ORxQNYWEw8sTymsaJvjM/fLui0HLj+Hc1Pf5Hl1IH8zXr+fxbT7022poBAADgblWKiB2RlEaX06XS6Gj2P/x7YlupMjs3/9TJ2ffOTWe/ESjHQKm40jVccz10PD+tL/ITdfkj+XXjz/uGlvKjU7OV6W4HDz1ue5P+n/qrr9u1Azad32tB79L/oXfp/9C7sv5fe7a/tWt1ATqrwff/UDfqAXReo/H/h+t54o721wXorLr+b9oPeojrf9C7Wun/PjPg3tC/2i2bBztaFaBz5oZi7R/J32uJrRu4QcDdlyjuXLMZRQykreVQRCxciFLXI5XYxES3P5kAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADa478AAAD//9OC4M8=") 1.265269226s ago: executing program 4 (id=1137): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r3, &(0x7f00000001c0)={0x27, 0x0, 0x0, 0x2, 0x0, 0x9, "c46e9fd1a84b7fefa0bf2cca6beb9363a680b652a86bcf56a1b9f4e6b54cc6beca5462202c484c10ca5386103a5ccbe47b7b9aa6d8d701a3ba6a6c0ce8b978", 0x1}, 0x60) r4 = dup(r3) getsockopt$inet_buf(r4, 0x118, 0x1, 0x0, &(0x7f0000000000)) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x275a, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x1c, 0x8, &(0x7f00000009c0)=ANY=[@ANYRES64=r2], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, @fallback=0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6, 0x0, 0x200000000005}, 0x18) prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98,\xc8\x18E/\x8c\x1a\xe3\xbd') write$binfmt_script(r5, &(0x7f0000000040), 0x18a3c85) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7, 0x0, 0x2}, 0x18) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000140)=ANY=[@ANYBLOB="911089000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) syz_create_resource$binfmt(&(0x7f0000000340)='./file1\x00') bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000900)=@bpf_ext={0x1c, 0x1b, &(0x7f0000000d40)=ANY=[@ANYRESHEX=r5, @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000210000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000820000001843000006000000000000000000000095000000000000004c1601000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000760b00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000042253d870000000000"], 0x0, 0xfff, 0x1000, &(0x7f00000021c0)=""/4096, 0x41100, 0x10, '\x00', 0x0, 0x0, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x5, 0x1000000d, 0x7, 0x40}, 0x10, 0xfdb5, r9, 0x9, &(0x7f00000005c0)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000840)=[{0x5, 0x4, 0xe}, {0x2, 0x3, 0xd, 0x8}, {0x2, 0x2, 0xe, 0x1}, {0x0, 0x3, 0xc, 0x1}, {0x3, 0x1, 0xb, 0xa}, {0x3, 0x4, 0x6, 0x1}, {0x1, 0x1, 0x6, 0xb}, {0x4, 0x3, 0xd}, {0x1, 0x1, 0x10, 0xa}], 0x10, 0x800}, 0x94) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0xfd, 0x0, 0xff, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0x8, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) close(0x3) memfd_create(&(0x7f0000000680)='v\xa6\xf5lj6,r\xaf\xe8\x10/\xecg\xed\xe3h\x80\xb8!y6w\xda\xdd\xb9\nR\xe8@\x99\xb9\x8a\x0fZ\t\x90\x8bp\x10\x84\x86t\x8a\xba\xc6\xfb\xd2\f\xef&\xad\xa8M\xe8\b\xb0#\xac)\x81\x1e\x8a\f\x11D\x90\xf5\xbb\x1c\xac\xc7\xad\xdc\\\x11\x95\xf8\xe6\xa7\xc3\xbc\x18+\x92\x92N\a\xa7\x7fN\x9bL\xf8\xebQs\x02\xf9\xadi\x8f\x0f\xff\x02n\x9d\x85\xea\x1a*\x1bC\xd8\x1c\xe8\x9bYSp\xa5\xfd\ny\xdfS\xdbU\xf8l\xb5b\x83\x00\x00\x00\x00\xfc\x83\x18\xe46\x8a\x029\x19\x8fjC\xce\xa7S\x81\xd5\xda\x84\xdf\xe3A_\x05XCk\x1d\x1cC\x97r\x93\xd6t\x81b\xc7x\xab\xa2\xf0\av\x88\x01\x92\xeaF\xa9!\xfc\x1c\xbf7q\xcf\xed&\x96\xa6\x1c_\xff\xb4\x00X\x1b\xf2w\xc1\x00\x00\x00\x00\xe0T\x1f\xbc\x85\xd1Z\xa9\x01Z\xc2\xb0\f\x9a\x16\xa5?\xf74\x88\xeez@)&\xb5\a\xc1\v\xe7\xdf\x80\xe4\x9c\xf5f\x94jC\xb1\xcfh\xc5g\x02\xc6 U\xe5\xcea\x88\xee\x0f\xf57*\xb3\xe8iWTav\xff\xd9\xb0C\x1e\xbe\x97\xc8$-\x8d)\xe8\\\x8e;I\xde\x8a\x8e\x0fq\x06\xee\xb9\xc1\xf1)\xa0\xd9T\xec\x8b\x85I\x87OZ\xd8\"4\x87\xb1\xed?:\x84S\xb9\xbf\xab#\xd0N\x8f\x1ey7\x9286p\x10uZ\xf0', 0x0) r10 = open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x10) fcntl$setsig(r10, 0xa, 0x13) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 1.169625502s ago: executing program 2 (id=1142): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000000400000008000000"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000240)='kfree\x00', r1, 0x0, 0x20}, 0x18) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x2}, &(0x7f0000001fee)='R\x10rust\xe3cusg\x91\xdeeH\xe5+\xf0', 0xffffffffffffffff) 1.131425124s ago: executing program 1 (id=1143): sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x3c, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x9}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4010800}, 0x4000804) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) r0 = io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.130908674s ago: executing program 2 (id=1144): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x7, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000fdffffff18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007700000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0xffff}, 0x18) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) 1.065716489s ago: executing program 1 (id=1146): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r2, 0x1, 0x8, 0x0, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = accept(r0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) recvfrom(r2, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) 1.061805339s ago: executing program 2 (id=1147): r0 = syz_io_uring_setup(0x237, &(0x7f0000000280)={0x0, 0x275, 0x400, 0x0, 0x2cf}, &(0x7f0000000040)=0x0, &(0x7f0000000600)=0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x1a, &(0x7f0000000380)=ANY=[@ANYBLOB="180000008b08000000000000060075ea18110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000086000000bf09000000000000550901000000000095000000000000004d0a060000000000180000000200000000000000100000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000010000008500000006000000bf91000000000000b702000003000000850000002a000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0xa, 0x1001, &(0x7f0000001cc0)=""/4097, 0x41100, 0x2f}, 0x94) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @empty}}, 0x5, 0x12, 0x0, 0x3}, 0x9c) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB='3'], 0x118) r5 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IP_VS_SO_SET_ZERO(r5, 0x0, 0x48f, &(0x7f0000000080)={0x84, @local, 0x4e23, 0x3, 'sed\x00', 0x28, 0x423a, 0x5f}, 0x2c) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x38, 0x0, @fd=r0, 0x100000001, 0x0, 0x0, 0x2, 0x1}) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000040)=0xfe) open(&(0x7f0000000300)='./file0\x00', 0x200, 0x20) ioctl$PPPIOCSACTIVE(r6, 0x40047459, &(0x7f0000009280)={0xfffffffffffffff7, 0x0}) readv(r6, &(0x7f0000000700)=[{&(0x7f0000000740)=""/71, 0x47}], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) write$ppp(r6, &(0x7f0000003700)="aaf5", 0x2) io_uring_enter(r0, 0x47ba, 0x0, 0x0, 0x0, 0x0) 951.537887ms ago: executing program 2 (id=1149): r0 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) mmap(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x1, 0x20132, r0, 0x391e1000) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) r3 = signalfd(0xffffffffffffffff, &(0x7f0000000140)={[0x3]}, 0x8) read$msr(r3, &(0x7f0000001bc0)=""/4080, 0xff0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000080)={0xc, 0x7, 0x9, 0x65, 0xff, 0x2, 0x8, 0x4, 0xff, 0x29, 0x9, 0x7, 0x6}, 0xe) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x9c93, 0x0, 0x1, 0x0, &(0x7f00000000c0)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000000), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001d40)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) unshare(0x2a020400) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) vmsplice(r5, &(0x7f00000000c0)=[{&(0x7f0000000200)='=', 0x1}], 0x1, 0x0) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="180000000d1421092abd7000440000fb070001"], 0x18}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000100)={&(0x7f0000000000)=""/5, 0x204000, 0x1000}, 0x20) r7 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_flowlabel\x00') r8 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r8, 0x29, 0xd0, 0x0, &(0x7f0000000200)) pread64(r7, &(0x7f0000001480)=""/4122, 0x101a, 0x99) 920.337419ms ago: executing program 4 (id=1151): bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000280)={'gre0\x00', &(0x7f0000000100)={'syztnl0\x00', 0x0, 0x2810, 0x3a00, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x7, 0x2f, 0x0, @empty, @multicast1}}}}) 849.041723ms ago: executing program 4 (id=1153): fsopen(0x0, 0x0) r0 = syz_socket_connect_nvme_tcp() r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r6, 0x0, 0xf3a, 0x0) write(r3, &(0x7f0000000240)="94", 0x1) vmsplice(r6, &(0x7f0000000380)=[{&(0x7f0000013580)="0dd2e7c8926dc6acd0ae6c178054e95986faff9544de5fc4c30adf404da41181a77466ac5075905ea5f50134fdd517a957fe2ee59b61f9fe8d7aabe595ea23de2723e437af0423a56686a4c2d957be1a0ab922fbbd3cb1d8c6ab0d58440a327c8eb05d445b4ac5f20abe449e4084f8b996268d0564f67980d3ed3479e0edfe5cec7b4f89bface391c9c4c58ad123b91c33173c72326d1df18804a9ea20f9ece48f784d8ca2318e3d2b316666b5dfb7295c4915989d5bcb120e8fedaa97b93a137c256ce4", 0x20013644}, {&(0x7f0000013680)="c578381bf5113dad8319d9ea5294285ae9a90384ce23866477bef9de4399237d8b3522c9c194e71edaf3332a2f169682f9d8fa271683d4d441b710409e506333e0c3b64e52e8720734b6787f4a84f5bebb046649c6c697d978affd349031b2cd874c7a8961a586a9f2d62f945e7a5bf2f5f7a31684c0503704881d2578a2a98ac3ef4e4a4b0dcdb70db735d5c1652eed3848b2dd4131bb0eb7cfadfaf5", 0x9d}], 0x2, 0x0) tee(r2, r6, 0x8f5, 0x0) write$binfmt_script(r6, 0x0, 0xd9) write(r4, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x8}}, './file0\x00'}) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000006e6a00850000000600000018110000", @ANYRES32=r1, @ANYRES8=r1], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r8, 0x0, 0x200000000000006}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1/file3\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) r10 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r10, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) setsockopt$inet6_opts(r10, 0x29, 0x37, &(0x7f0000000000)=ANY=[@ANYBLOB="00020401"], 0x18) sendmmsg$inet6(r10, &(0x7f0000001840), 0x3b, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MLD_VERSION={0x5, 0x2c, 0x9}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) utimensat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r9, 0x8008f513, &(0x7f0000000200)) perf_event_open(&(0x7f0000000040)={0x2, 0xca, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) 562.772242ms ago: executing program 3 (id=1164): open(&(0x7f0000000000)='./bus\x00', 0x1050c1, 0x170) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000180)={[{@nolazytime}, {@lazytime}, {@journal_path={'journal_path', 0x3d, './bus'}}, {@nojournal_checksum}, {@dax_never}, {@nodiscard}], [{@obj_user={'obj_user', 0x3d, 'nodiscard'}}, {@fsuuid={'fsuuid', 0x3d, {[0x31, 0x32, 0x34, 0x33, 0x33, 0x39, 0x37, 0x62], 0x2d, [0x66, 0x30, 0x65, 0x1], 0x2d, [0x65, 0x33, 0x38, 0x65], 0x2d, [0x33, 0x34, 0x35, 0x35], 0x2d, [0x61, 0x32, 0x64, 0x64, 0x66, 0x64, 0x36, 0x39]}}}, {@fowner_eq}, {@func={'func', 0x3d, 'FILE_MMAP'}}]}, 0x0, 0x479, &(0x7f0000001300)="$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") 518.187095ms ago: executing program 3 (id=1166): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x200000000000002f, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) syz_mount_image$iso9660(&(0x7f0000000300), &(0x7f0000000080)='./file1\x00', 0x1808004, &(0x7f0000000180)=ANY=[@ANYRES16=0x0, @ANYRES32], 0x7, 0x7e2, &(0x7f0000001740)="$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") 472.452198ms ago: executing program 3 (id=1168): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000240)='kfree\x00', r0, 0x0, 0x20}, 0x18) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x2}, &(0x7f0000001fee)='R\x10rust\xe3cusg\x91\xdeeH\xe5+\xf0', 0xffffffffffffffff) 459.215009ms ago: executing program 5 (id=1169): bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) keyctl$read(0xb, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000300), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) (fail_nth: 2) 427.145161ms ago: executing program 3 (id=1170): r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/rt_acct\x00') r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000300), &(0x7f00000001c0)=r1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r3}, 0x10) r4 = socket(0x18, 0x5, 0x0) connect$pppoe(r4, &(0x7f0000000100)={0x18, 0x0, {0x2, @multicast, 'vcan0\x00'}}, 0x1e) sendfile(r4, r0, 0x0, 0x8) 255.484513ms ago: executing program 3 (id=1171): fsopen(&(0x7f0000000400)='autofs\x00', 0x0) r0 = syz_socket_connect_nvme_tcp() r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r6, 0x0, 0xf3a, 0x0) write(r3, &(0x7f0000000240)="94", 0x1) vmsplice(r6, &(0x7f0000000380)=[{&(0x7f0000013580)="0dd2e7c8926dc6acd0ae6c178054e95986faff9544de5fc4c30adf404da41181a77466ac5075905ea5f50134fdd517a957fe2ee59b61f9fe8d7aabe595ea23de2723e437af0423a56686a4c2d957be1a0ab922fbbd3cb1d8c6ab0d58440a327c8eb05d445b4ac5f20abe449e4084f8b996268d0564f67980d3ed3479e0edfe5cec7b4f89bface391c9c4c58ad123b91c33173c72326d1df18804a9ea20f9ece48f784d8ca2318e3d2b316666b5dfb7295c4915989d5bcb120e8fedaa97b93a137c256ce4", 0x20013644}, {&(0x7f0000013680)="c578381bf5113dad8319d9ea5294285ae9a90384ce23866477bef9de4399237d8b3522c9c194e71edaf3332a2f169682f9d8fa271683d4d441b710409e506333e0c3b64e52e8720734b6787f4a84f5bebb046649c6c697d978affd349031b2cd874c7a8961a586a9f2d62f945e7a5bf2f5f7a31684c0503704881d2578a2a98ac3ef4e4a4b0dcdb70db735d5c1652eed3848b2dd4131bb0eb7cfadfaf5", 0x9d}], 0x2, 0x0) tee(r2, r6, 0x8f5, 0x0) write(r4, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x8}}, './file0\x00'}) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000006e6a00850000000600000018110000", @ANYRES32=r1, @ANYRES8=r1], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r8, 0x0, 0x200000000000006}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1/file3\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000000)=ANY=[@ANYBLOB="00020401"], 0x18) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001840), 0x3b, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MLD_VERSION={0x5, 0x2c, 0x9}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) utimensat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r9, 0x8008f513, &(0x7f0000000200)) perf_event_open(&(0x7f0000000040)={0x2, 0xca, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) 231.635944ms ago: executing program 5 (id=1172): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0xffff}, 0x18) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) 231.214444ms ago: executing program 5 (id=1173): bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000f00)={0x11, 0x7, &(0x7f00000002c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x0) 204.898296ms ago: executing program 1 (id=1174): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r0}, 0x10) prctl$PR_SET_TIMERSLACK(0x1d, 0xffffffffffffffe1) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xb, 0xf, 0x200cc, 0x6, 0x5}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000700)={0x0, &(0x7f0000000540)=""/245, &(0x7f00000000c0), &(0x7f0000000680), 0x2, r1}, 0x38) 204.651496ms ago: executing program 5 (id=1175): open(&(0x7f0000000000)='./bus\x00', 0x1050c1, 0x170) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, 0x0, 0x0, 0x1000, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x5, 0xfffffffc, 0xb95b5ec032cc8e84, 0x0, 0xe6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000180)={[{@nolazytime}, {@lazytime}, {@journal_path={'journal_path', 0x3d, './bus'}}, {@nojournal_checksum}, {@dax_never}, {@nodiscard}], [{@obj_user={'obj_user', 0x3d, 'nodiscard'}}, {@fsuuid={'fsuuid', 0x3d, {[0x31, 0x32, 0x34, 0x33, 0x33, 0x39, 0x37, 0x62], 0x2d, [0x66, 0x30, 0x65, 0x1], 0x2d, [0x65, 0x33, 0x38, 0x65], 0x2d, [0x33, 0x34, 0x35, 0x35], 0x2d, [0x61, 0x32, 0x64, 0x64, 0x66, 0x64, 0x36, 0x39]}}}, {@fowner_eq}, {@func={'func', 0x3d, 'FILE_MMAP'}}]}, 0x0, 0x479, &(0x7f0000001300)="$eJzs3MtvG8UfAPDvOo82fcW/qj+gDyAIEKVA0qSl9MAFBBIHkJDgUI4hSatSt0FNkEhVQUCoHFElTlwQRyT+Ak5wQcAJCQ4c4I4qVaiXFk5Gm91NHdfOw3Xstv58pHVmdtee+Xpn7NmdeAPoWSPpQxKxIyL+iIjhLLtyh5Hsz41rF6f+uXZxKolq9Y2/k/508/VrF6eKXYvnbS8y/RGlT5LY36DcuYULZyYrlZnzeX5s/uy7Y3MLF545fXby1MypmXMTx48fPTL+3LGJZ9sSZxrX9X0fzB7Y+8pbl1+bOnH57Z++SYr46+K4xW8tFTmy2sbHq9WWXvQONJg+7KxZkbUM7gZ9WTeNgaX+Pxx9cfPgDcfLH3e1csCmqlar1fuab16sAvewJLpdA6A7ii/69Py3WDo09LgjXH0hOwFK476RL9mW/ijl+wzUnd+200hEnFj898t0ibWuQwAAtMF36fjn6Ubjv1LUXhfalc+hlCPifxGxOyKORcSeiPh/xNK+90fEAxssv36S5NbxT+lKS4GtUzr+ez6f21o5/itGf1Huy3M7l+IfSE6erswczt+TgzGwJc2Pr1LG9y/9+lmzbbXjv3RJyy/Ggnk9rvRvWfmc6cn5yduJudbVjyL29TeKP1meCUgiYm9E7GuxjNOHvj7QbNva8a+iDfNM1a8insiO/2LUxV9IsvnJcpP5ybGtUZk5PFa0ihiqefnF9ND9/Mul15uVf1vxt0F6/Lc1bP/L8ZeT2vnauY28+hdPpo+X/vy06TlNq+1/MHlzxbr3J+fnz49HDCavZpWuXT9Rt9/Ezf3T+A8+2rj/746b78T+iEgb8YMR8VBEPJzX/ZHfd635Lvz44mPvtB7/5krjn17/8a8ORxQNYWEw8sTymsaJvjM/fLui0HLj+Hc1Pf5Hl1IH8zXr+fxbT7022poBAADgblWKiB2RlEaX06XS6Gj2P/x7YlupMjs3/9TJ2ffOTWe/ESjHQKm40jVccz10PD+tL/ITdfkj+XXjz/uGlvKjU7OV6W4HDz1ue5P+n/qrr9u1Azad32tB79L/oXfp/9C7sv5fe7a/tWt1ATqrwff/UDfqAXReo/H/h+t54o721wXorLr+b9oPeojrf9C7Wun/PjPg3tC/2i2bBztaFaBz5oZi7R/J32uJrRu4QcDdlyjuXLMZRQykreVQRCxciFLXI5XYxES3P5kAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADa478AAAD//9OC4M8=") 159.985469ms ago: executing program 1 (id=1176): keyctl$join(0x1, 0x0) keyctl$set_reqkey_keyring(0xe, 0x3) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000f80), 0xffffffffffffffff) (async) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b7b6496af6eae70b0b44c82c55d493057b86d56d76e4c1172186e842c6c7ab909a6a15078eea63475f3f9116066070402f7e18484f78db532feaaf068358e6f50b7f8ed2d1e7f324f004bce68899094408c172539b847926e4e48436cf38de900d678332938205b50de50e20dea09db03c3d16d99dfa49a79209ae70adf084f4e4f883874e7197e1d7db6d8adf33537ce3d1acfbfdff80a3784ad59d8667715de34216c2c39a84ed5cb67a24ac2c7aede3ddcb9af1969fd0ca5f56d600570c98366406db7af687de072ce3ad7e1d72a9654763a8bc6751b09738907f28b10fa01bb0fa0d31d9049f61262b73f80ab05683e4993ed21abf9b", @ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x40080}, 0x10) (async) socket$inet(0x2, 0x3, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x1, 0x28}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x18) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000140)=0x2) (async) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) (async) mmap$perf(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x810, r3, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, 0x0, 0x0}, 0x94) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) (async) membarrier(0x40, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2008042, &(0x7f00000000c0), 0x1, 0x571, &(0x7f0000000780)="$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") (async) open(&(0x7f0000000080)='./bus\x00', 0x147842, 0x49) mknod$loop(0x0, 0x2000, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x39, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r5}, 0x10) (async) fchmod(0xffffffffffffffff, 0xc0) (async) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x4) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket(0x10, 0x3, 0x0) 159.047199ms ago: executing program 5 (id=1177): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r0, &(0x7f0000000200)={0xa, 0xffff, 0x3, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x1e) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000fc0)={0x3, 0x3, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5}}, &(0x7f0000000200)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x72, '\x00', 0x0, @sched_cls=0x2f, r1, 0x8, &(0x7f0000000e40)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000e80)={0x2, 0x7, 0x0, 0xd}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x78}, 0x94) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$netlink(0x10, 0x3, 0x8000000004) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000180), 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000280), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x200801f, &(0x7f00000000c0), 0x2, 0x4ee, &(0x7f0000000880)="$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") write$P9_RWALK(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x9) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)=0x91, 0x12) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r6, 0x0, 0x7fffffffffffffff}, 0x18) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x303}, "2d432d74c04f228a", "d71d9a2903558545115509c5c34caab9", "6fed40bf", "5e33931677e0f2d7"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_128={{0x303}, "ba28597967d1b54c", "9712b0d86846b5ecc522bc6f13a6e30c", "ea0292da", "9e87dc79f4c04982"}, 0x28) sendto$inet6(r0, &(0x7f0000000280)='S', 0x1, 0x8000, 0x0, 0x0) close(r0) 90.729353ms ago: executing program 1 (id=1178): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r0, &(0x7f0000000200)={0xa, 0xffff, 0x3, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x1e) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000fc0)={0x3, 0x3, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5}}, &(0x7f0000000200)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x72, '\x00', 0x0, @sched_cls=0x2f, r1, 0x8, &(0x7f0000000e40)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000e80)={0x2, 0x7, 0x0, 0xd}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x78}, 0x94) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$netlink(0x10, 0x3, 0x8000000004) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000180), 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000280), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x200801f, &(0x7f00000000c0), 0x2, 0x4ee, &(0x7f0000000880)="$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") write$P9_RWALK(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x9) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)=0x91, 0x12) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r6, 0x0, 0x7fffffffffffffff}, 0x18) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x303}, "2d432d74c04f228a", "d71d9a2903558545115509c5c34caab9", "6fed40bf", "5e33931677e0f2d7"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_128={{0x303}, "ba28597967d1b54c", "9712b0d86846b5ecc522bc6f13a6e30c", "ea0292da", "9e87dc79f4c04982"}, 0x28) sendto$inet6(r0, &(0x7f0000000280)='S', 0x1, 0x8000, 0x0, 0x0) close(r0) 72.338475ms ago: executing program 2 (id=1179): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x200000000000002f, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) syz_mount_image$iso9660(&(0x7f0000000300), &(0x7f0000000080)='./file1\x00', 0x1808004, &(0x7f0000000180)=ANY=[@ANYRES16=0x0, @ANYRES32], 0x7, 0x7e2, &(0x7f0000001740)="$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") 54.340166ms ago: executing program 3 (id=1180): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000240)='kfree\x00', r0, 0x0, 0x20}, 0x18) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x2}, &(0x7f0000001fee)='R\x10rust\xe3cusg\x91\xdeeH\xe5+\xf0', 0xffffffffffffffff) 0s ago: executing program 5 (id=1181): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r0}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000000c0)='balance_dirty_pages\x00', r3, 0x0, 0xff}, 0x18) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000080)={r3, r1}, 0xc) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = creat(&(0x7f0000000100)='./file0\x00', 0x7a) write$binfmt_elf32(r5, &(0x7f0000000040)=ANY=[], 0x69) close(r5) r6 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') r7 = openat$binfmt(0xffffffffffffff9c, r6, 0x42, 0x1ff) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r8, 0x402, 0x21) write$binfmt_elf64(r7, &(0x7f0000000000)={{0x7f, 0x45, 0x4c, 0x46, 0x7, 0xdc, 0x1, 0x3, 0xfffffffffffffff9, 0x3, 0x3e, 0x1001, 0x101, 0x40, 0x2001df, 0x0, 0x3b, 0x38, 0x5f, 0x27, 0x5, 0xff}}, 0x40) close(r7) execveat$binfmt(0xffffffffffffff9c, r6, 0x0, 0x0, 0x0) execve(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) shutdown(r4, 0x0) r9 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000c00)=@deltclass={0x34, 0x29, 0x10, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x4, 0x6}, {0xfff3, 0xfff1}, {0xd, 0xfff2}}, [@tclass_kind_options=@c_fq_codel={0xd}]}, 0x34}, 0x1, 0x2b1e}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r9, 0x84, 0x22, &(0x7f0000000240)={0xffff, 0x1, 0x1, 0x1, r10}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000000)={r10, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e21, @multicast2}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000100)={r12}, 0x10) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) kernel console output (not intermixed with test programs): process `syz.5.379'. [ 79.971236][ T5367] netlink: 348 bytes leftover after parsing attributes in process `syz.5.379'. [ 79.980195][ T5367] netlink: 4 bytes leftover after parsing attributes in process `syz.5.379'. [ 79.989091][ T5367] netlink: 348 bytes leftover after parsing attributes in process `syz.5.379'. [ 80.011652][ T29] audit: type=1400 audit(1759917074.799:2192): avc: denied { relabelto } for pid=5354 comm="syz.5.379" name="memfd:" dev="hugetlbfs" ino=11363 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:hwdata_t:s0" [ 80.038521][ T29] audit: type=1400 audit(1759917074.799:2193): avc: denied { associate } for pid=5354 comm="syz.5.379" name="memfd:" dev="hugetlbfs" ino=11363 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:hwdata_t:s0" [ 80.066482][ T29] audit: type=1400 audit(1759917074.799:2194): avc: denied { compute_member } for pid=5354 comm="syz.5.379" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 80.086795][ T5374] netlink: 224 bytes leftover after parsing attributes in process `syz.3.382'. [ 80.095844][ T5374] netlink: 16 bytes leftover after parsing attributes in process `syz.3.382'. [ 80.120736][ T5367] netlink: 4 bytes leftover after parsing attributes in process `syz.5.379'. [ 80.141630][ T5374] program syz.3.382 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 80.166069][ T12] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 80.172044][ T29] audit: type=1400 audit(1759917074.969:2195): avc: denied { create } for pid=5371 comm="syz.1.383" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 80.212457][ T5374] netlink: 'syz.3.382': attribute type 10 has an invalid length. [ 80.219622][ T12] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 131075 with max blocks 64 with error 28 [ 80.234098][ T12] EXT4-fs (loop5): This should not happen!! Data will be lost [ 80.234098][ T12] [ 80.244416][ T12] EXT4-fs (loop5): Total free blocks count 0 [ 80.251017][ T12] EXT4-fs (loop5): Free/Dirty block details [ 80.257536][ T12] EXT4-fs (loop5): free_blocks=4293918720 [ 80.263831][ T12] EXT4-fs (loop5): dirty_blocks=80 [ 80.269535][ T12] EXT4-fs (loop5): Block reservation details [ 80.276203][ T12] EXT4-fs (loop5): i_reserved_data_blocks=5 [ 80.286910][ T4803] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 80.320946][ T12] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 80.334631][ T12] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 80.379102][ T29] audit: type=1400 audit(1759917075.209:2196): avc: denied { name_bind } for pid=5377 comm="syz.5.384" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 80.394663][ T12] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 80.410943][ T29] audit: type=1400 audit(1759917075.209:2197): avc: denied { node_bind } for pid=5377 comm="syz.5.384" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 80.431693][ T29] audit: type=1400 audit(1759917075.209:2198): avc: denied { mounton } for pid=5377 comm="syz.5.384" path="/23/file0" dev="tmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 80.442666][ T12] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 80.464389][ T5381] loop3: detected capacity change from 0 to 1024 [ 80.471963][ T5381] EXT4-fs: Ignoring removed orlov option [ 80.494366][ T5381] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 80.512229][ T5381] ext4 filesystem being mounted at /78/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.553308][ T5381] EXT4-fs error (device loop3): ext4_map_blocks:814: inode #15: comm syz.3.385: lblock 0 mapped to illegal pblock 0 (length 6) [ 80.568993][ T29] audit: type=1400 audit(1759917075.389:2199): avc: denied { ioctl } for pid=5379 comm="syz.3.385" path="/78/file0/file1" dev="loop3" ino=15 ioctlcmd=0x5828 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 80.604108][ T5381] EXT4-fs error (device loop3): ext4_map_blocks:814: inode #15: block 3: comm syz.3.385: lblock 3 mapped to illegal pblock 3 (length 1) [ 80.618620][ T5381] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117 [ 80.622055][ T5331] syz.2.372 (5331) used greatest stack depth: 6360 bytes left [ 80.631072][ T5381] EXT4-fs (loop3): This should not happen!! Data will be lost [ 80.631072][ T5381] [ 80.672950][ T29] audit: type=1400 audit(1759917075.509:2200): avc: denied { map } for pid=5379 comm="syz.3.385" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=11145 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 80.714134][ T5399] syz.4.387 uses obsolete (PF_INET,SOCK_PACKET) [ 80.897203][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 81.167689][ T5404] loop3: detected capacity change from 0 to 8192 [ 81.230784][ T5404] loop3: p1 p2 p3 p4[EZD] [ 81.235486][ T5404] loop3: p1 size 16128 extends beyond EOD, truncated [ 81.314618][ T5404] loop3: p3 start 458783 is beyond EOD, truncated [ 81.321185][ T5404] loop3: p4 size 65536 extends beyond EOD, truncated [ 81.507826][ T5417] loop1: detected capacity change from 0 to 1024 [ 81.522662][ T5417] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 81.541969][ T5417] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 81.568347][ T5417] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 81.582493][ T5417] EXT4-fs (loop1): orphan cleanup on readonly fs [ 81.589640][ T5417] EXT4-fs error (device loop1): ext4_free_blocks:6706: comm syz.1.393: Freeing blocks not in datazone - block = 0, count = 4096 [ 81.611890][ T5417] EXT4-fs (loop1): Remounting filesystem read-only [ 81.640573][ T5417] EXT4-fs (loop1): 1 orphan inode deleted [ 81.646839][ T5417] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 81.727951][ T5431] netlink: 'syz.3.399': attribute type 13 has an invalid length. [ 81.751099][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.880888][ T5455] loop1: detected capacity change from 0 to 128 [ 81.892449][ T5458] xt_CT: No such helper "netbios-ns" [ 81.898235][ T5455] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 81.905900][ T5455] FAT-fs (loop1): Filesystem has been set read-only [ 81.921724][ T5455] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 81.994046][ T5462] syzkaller0: entered promiscuous mode [ 81.999580][ T5462] syzkaller0: entered allmulticast mode [ 82.026379][ T5464] loop2: detected capacity change from 0 to 8192 [ 82.069792][ T5464] loop2: p1 p2 p3 p4[EZD] [ 82.076271][ T5464] loop2: p1 size 16128 extends beyond EOD, truncated [ 82.085365][ T5471] loop5: detected capacity change from 0 to 512 [ 82.098263][ T5464] loop2: p3 start 458783 is beyond EOD, truncated [ 82.104844][ T5464] loop2: p4 size 65536 extends beyond EOD, truncated [ 82.114356][ T5471] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 82.123459][ T5471] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 82.157186][ T5479] loop1: detected capacity change from 0 to 1024 [ 82.165911][ T5479] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 82.175929][ T5479] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 82.187201][ T5471] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended [ 82.196978][ T5479] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 82.218652][ T5471] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 82.226795][ T5471] System zones: 0-2, 18-18, 34-35 [ 82.232431][ T5471] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.244881][ T5479] EXT4-fs (loop1): orphan cleanup on readonly fs [ 82.252373][ T5479] EXT4-fs error (device loop1): ext4_free_blocks:6706: comm syz.1.414: Freeing blocks not in datazone - block = 0, count = 4096 [ 82.267534][ T5479] EXT4-fs (loop1): Remounting filesystem read-only [ 82.274486][ T5479] EXT4-fs (loop1): 1 orphan inode deleted [ 82.280918][ T5479] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 82.299084][ T4803] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.339969][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.349736][ T5495] loop5: detected capacity change from 0 to 512 [ 82.381894][ T5497] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.394825][ T5495] EXT4-fs (loop5): too many log groups per flexible block group [ 82.403307][ T5497] bond0 (unregistering): Released all slaves [ 82.409834][ T5501] netlink: 'syz.2.419': attribute type 3 has an invalid length. [ 82.412669][ T5495] EXT4-fs (loop5): failed to initialize mballoc (-12) [ 82.424890][ T5495] EXT4-fs (loop5): mount failed [ 82.506217][ T5509] loop4: detected capacity change from 0 to 512 [ 82.516670][ T5511] syzkaller0: entered promiscuous mode [ 82.522236][ T5511] syzkaller0: entered allmulticast mode [ 82.539909][ T5509] msdos: Unknown parameter '@' [ 82.665820][ T5522] loop5: detected capacity change from 0 to 128 [ 82.726384][ T5527] loop5: detected capacity change from 0 to 1024 [ 82.743537][ T5527] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 82.760853][ T5527] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 82.775740][ T5525] loop4: detected capacity change from 0 to 8192 [ 82.783003][ T5527] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 82.791183][ T5527] EXT4-fs (loop5): orphan cleanup on readonly fs [ 82.797824][ T5527] EXT4-fs error (device loop5): ext4_free_blocks:6706: comm syz.5.431: Freeing blocks not in datazone - block = 0, count = 4096 [ 82.812648][ T5527] EXT4-fs (loop5): Remounting filesystem read-only [ 82.819360][ T5527] EXT4-fs (loop5): 1 orphan inode deleted [ 82.825650][ T5525] loop4: p1 p2 p3 p4[EZD] [ 82.830303][ T5525] loop4: p1 size 16128 extends beyond EOD, truncated [ 82.838059][ T5527] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 82.850788][ T5525] loop4: p3 start 458783 is beyond EOD, truncated [ 82.857277][ T5525] loop4: p4 size 65536 extends beyond EOD, truncated [ 82.904788][ T4803] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.006848][ T5545] netlink: 'syz.1.435': attribute type 30 has an invalid length. [ 83.115522][ T5561] sock: sock_set_timeout: `syz.5.442' (pid 5561) tries to set negative timeout [ 83.147146][ T5567] loop4: detected capacity change from 0 to 128 [ 83.154604][ T5567] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 83.158708][ T5569] loop5: detected capacity change from 0 to 128 [ 83.176998][ T5569] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 83.189265][ T5569] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 83.206747][ T5566] loop3: detected capacity change from 0 to 1024 [ 83.214162][ T5566] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 83.223428][ T5566] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 83.223700][ T5567] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 83.244049][ T5566] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 83.252240][ T5566] EXT4-fs (loop3): orphan cleanup on readonly fs [ 83.259045][ T5566] EXT4-fs error (device loop3): ext4_free_blocks:6706: comm syz.3.445: Freeing blocks not in datazone - block = 0, count = 4096 [ 83.273726][ T5566] EXT4-fs (loop3): Remounting filesystem read-only [ 83.280583][ T5566] EXT4-fs (loop3): 1 orphan inode deleted [ 83.286804][ T5566] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 83.308448][ T5575] loop5: detected capacity change from 0 to 1024 [ 83.315447][ T5575] EXT4-fs: Ignoring removed orlov option [ 83.376635][ T5575] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 83.390387][ T5575] ext4 filesystem being mounted at /38/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.402028][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.424906][ T4803] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 83.550586][ T5592] 9p: Unknown access argument ¿: -22 [ 83.601367][ T5602] loop4: detected capacity change from 0 to 512 [ 83.609777][ T5602] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 83.628908][ T5588] loop5: detected capacity change from 0 to 8192 [ 83.641603][ T5602] loop4: detected capacity change from 0 to 1024 [ 83.651455][ T5606] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.658476][ T5602] EXT4-fs: Ignoring removed orlov option [ 83.665968][ T5606] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.676912][ T5602] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 83.700816][ T5588] loop5: p1 p2 p3 p4[EZD] [ 83.705544][ T5588] loop5: p1 size 16128 extends beyond EOD, truncated [ 83.709972][ T5610] loop3: detected capacity change from 0 to 128 [ 83.719528][ T5610] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 83.732446][ T5610] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 83.741885][ T5588] loop5: p3 start 458783 is beyond EOD, truncated [ 83.748346][ T5588] loop5: p4 size 65536 extends beyond EOD, truncated [ 83.756928][ T5602] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e018, mo2=0000] [ 83.775625][ T5602] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 2: comm syz.4.456: lblock 2 mapped to illegal pblock 2 (length 1) [ 83.792891][ T5602] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 48: comm syz.4.456: lblock 0 mapped to illegal pblock 48 (length 1) [ 83.814982][ T5602] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.456: Failed to acquire dquot type 0 [ 83.830439][ T5602] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6305: Corrupt filesystem [ 83.847571][ T5617] loop1: detected capacity change from 0 to 1024 [ 83.854877][ T5602] EXT4-fs error (device loop4): ext4_evict_inode:254: inode #11: comm syz.4.456: mark_inode_dirty error [ 83.867628][ T5617] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 83.876757][ T5617] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 83.887587][ T5602] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 83.898040][ T5602] EXT4-fs (loop4): 1 orphan inode deleted [ 83.898416][ T5617] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 83.912178][ T5617] EXT4-fs (loop1): orphan cleanup on readonly fs [ 83.912827][ T31] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 83.918795][ T5617] EXT4-fs error (device loop1): ext4_free_blocks:6706: comm syz.1.461: Freeing blocks not in datazone - block = 0, count = 4096 [ 83.942700][ T5602] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.946435][ T5617] EXT4-fs (loop1): Remounting filesystem read-only [ 83.965168][ T5617] EXT4-fs (loop1): 1 orphan inode deleted [ 83.971357][ T5617] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 83.986900][ T31] EXT4-fs error (device loop4): ext4_release_dquot:6981: comm kworker/u8:1: Failed to release dquot type 0 [ 84.004256][ T5602] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.024040][ T5602] EXT4-fs error (device loop4): __ext4_get_inode_loc:4832: comm syz.4.456: Invalid inode table block 1 in block_group 0 [ 84.043858][ T5588] $Hÿ: renamed from bond0 (while UP) [ 84.048299][ T5602] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6305: Corrupt filesystem [ 84.058996][ T5602] EXT4-fs error (device loop4): ext4_quota_off:7229: inode #3: comm syz.4.456: mark_inode_dirty error [ 84.071700][ T5588] $Hÿ: entered promiscuous mode [ 84.076787][ T5588] bond_slave_0: entered promiscuous mode [ 84.082681][ T5588] bond_slave_1: entered promiscuous mode [ 84.090890][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.138566][ T5634] loop1: detected capacity change from 0 to 764 [ 84.354576][ T5654] loop5: detected capacity change from 0 to 512 [ 84.361318][ T5652] loop2: detected capacity change from 0 to 512 [ 84.381612][ T5652] EXT4-fs (loop2): can't mount with data=, fs mounted w/o journal [ 84.389949][ T5654] ext4: Unknown parameter 'audit' [ 84.473634][ T5602] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 84.473634][ T5602] program syz.4.456 not setting count and/or reply_len properly [ 85.190432][ T29] kauditd_printk_skb: 335 callbacks suppressed [ 85.190450][ T29] audit: type=1400 audit(1759917079.639:2533): avc: denied { setopt } for pid=5660 comm="syz.5.474" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 85.217385][ T29] audit: type=1326 audit(1759917079.889:2534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5660 comm="syz.5.474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60427eeec9 code=0x7ffc0000 [ 85.240764][ T29] audit: type=1326 audit(1759917079.889:2535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5660 comm="syz.5.474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60427eeec9 code=0x7ffc0000 [ 85.264180][ T29] audit: type=1326 audit(1759917079.889:2536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5660 comm="syz.5.474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7f60427eeec9 code=0x7ffc0000 [ 85.287603][ T29] audit: type=1326 audit(1759917079.889:2537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5660 comm="syz.5.474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60427eeec9 code=0x7ffc0000 [ 85.311304][ T29] audit: type=1326 audit(1759917079.889:2538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5660 comm="syz.5.474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60427eeec9 code=0x7ffc0000 [ 85.334706][ T29] audit: type=1326 audit(1759917079.889:2539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5660 comm="syz.5.474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f60427eeec9 code=0x7ffc0000 [ 85.357899][ T29] audit: type=1326 audit(1759917079.979:2540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5660 comm="syz.5.474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60427eeec9 code=0x7ffc0000 [ 85.381344][ T29] audit: type=1326 audit(1759917079.979:2541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5660 comm="syz.5.474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60427eeec9 code=0x7ffc0000 [ 85.609910][ T29] audit: type=1400 audit(1759917080.429:2542): avc: denied { read } for pid=5668 comm="syz.5.475" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 85.652762][ T5671] loop1: detected capacity change from 0 to 512 [ 85.659309][ T5671] ext4: Unknown parameter 'audit' [ 85.666210][ T5671] FAULT_INJECTION: forcing a failure. [ 85.666210][ T5671] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 85.679399][ T5671] CPU: 0 UID: 0 PID: 5671 Comm: syz.1.476 Not tainted syzkaller #0 PREEMPT(voluntary) [ 85.679433][ T5671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 85.679453][ T5671] Call Trace: [ 85.679461][ T5671] [ 85.679469][ T5671] __dump_stack+0x1d/0x30 [ 85.679521][ T5671] dump_stack_lvl+0xe8/0x140 [ 85.679627][ T5671] dump_stack+0x15/0x1b [ 85.679649][ T5671] should_fail_ex+0x265/0x280 [ 85.679693][ T5671] should_fail+0xb/0x20 [ 85.679764][ T5671] should_fail_usercopy+0x1a/0x20 [ 85.679784][ T5671] _copy_from_user+0x1c/0xb0 [ 85.679816][ T5671] memdup_user+0x5e/0xd0 [ 85.679847][ T5671] __se_sys_kexec_load+0x109/0x160 [ 85.679953][ T5671] __x64_sys_kexec_load+0x55/0x70 [ 85.679975][ T5671] x64_sys_call+0x289c/0x3000 [ 85.680000][ T5671] do_syscall_64+0xd2/0x200 [ 85.680095][ T5671] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 85.680182][ T5671] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 85.680276][ T5671] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.680305][ T5671] RIP: 0033:0x7f8d4f21eec9 [ 85.680357][ T5671] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 85.680374][ T5671] RSP: 002b:00007f8d4dc7f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f6 [ 85.680400][ T5671] RAX: ffffffffffffffda RBX: 00007f8d4f475fa0 RCX: 00007f8d4f21eec9 [ 85.680412][ T5671] RDX: 0000200000000140 RSI: 0000000000000001 RDI: 0000000000000000 [ 85.680424][ T5671] RBP: 00007f8d4dc7f090 R08: 0000000000000000 R09: 0000000000000000 [ 85.680435][ T5671] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 85.680446][ T5671] R13: 00007f8d4f476038 R14: 00007f8d4f475fa0 R15: 00007ffeaab8f028 [ 85.680463][ T5671] [ 85.853662][ T5675] loop5: detected capacity change from 0 to 512 [ 85.970941][ T5686] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.980984][ T5686] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.017563][ T5693] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.152145][ T5693] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.207880][ T5693] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.245296][ T5696] Illegal XDP return value 4294967274 on prog (id 395) dev N/A, expect packet loss! [ 86.261837][ T5693] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.384818][ T31] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.398840][ T31] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.407240][ T31] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.422471][ T31] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.595337][ T5701] loop5: detected capacity change from 0 to 2048 [ 86.647397][ T5713] loop3: detected capacity change from 0 to 512 [ 86.673796][ T5713] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 86.685645][ T5701] loop5: unable to read partition table [ 86.691417][ T5701] loop5: partition table beyond EOD, truncated [ 86.697651][ T5701] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 86.713327][ T5701] tmpfs: Unknown parameter 'syzkaller' [ 86.847176][ T5718] loop1: detected capacity change from 0 to 1024 [ 86.854972][ T5718] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 86.864667][ T5718] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 86.875211][ T5720] loop5: detected capacity change from 0 to 1024 [ 86.875660][ T5718] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 86.882908][ T5720] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 86.890032][ T5718] EXT4-fs (loop1): orphan cleanup on readonly fs [ 86.902261][ T5720] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.492: bg 0: block 10: padding at end of block bitmap is not set [ 86.907110][ T5718] EXT4-fs error (device loop1): ext4_free_blocks:6706: comm syz.1.491: Freeing blocks not in datazone - block = 0, count = 4096 [ 86.921216][ T5720] EXT4-fs error (device loop5): ext4_acquire_dquot:6945: comm syz.5.492: Failed to acquire dquot type 0 [ 86.934822][ T5718] EXT4-fs (loop1): Remounting filesystem read-only [ 86.945486][ T5720] EXT4-fs error (device loop5): ext4_acquire_dquot:6945: comm syz.5.492: Failed to acquire dquot type 0 [ 86.963236][ T5718] EXT4-fs (loop1): 1 orphan inode deleted [ 86.964102][ T5720] EXT4-fs error (device loop5): ext4_free_blocks:6706: comm syz.5.492: Freeing blocks not in datazone - block = 0, count = 4096 [ 86.969584][ T5718] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 86.995456][ T5720] EXT4-fs error (device loop5): ext4_acquire_dquot:6945: comm syz.5.492: Failed to acquire dquot type 0 [ 87.006789][ T5720] EXT4-fs (loop5): 1 orphan inode deleted [ 87.019706][ T5720] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.041872][ T5727] capability: warning: `syz.3.493' uses 32-bit capabilities (legacy support in use) [ 87.055430][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.134257][ T4803] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.155141][ T5734] __nla_validate_parse: 16 callbacks suppressed [ 87.155159][ T5734] netlink: 224 bytes leftover after parsing attributes in process `syz.5.495'. [ 87.170620][ T5734] netlink: 16 bytes leftover after parsing attributes in process `syz.5.495'. [ 87.184076][ T5734] program syz.5.495 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 87.195552][ T5734] netlink: 'syz.5.495': attribute type 10 has an invalid length. [ 87.320205][ T5746] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.328779][ T5746] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.511886][ T5754] netlink: 224 bytes leftover after parsing attributes in process `syz.1.501'. [ 87.520945][ T5754] netlink: 16 bytes leftover after parsing attributes in process `syz.1.501'. [ 87.534103][ T5754] netlink: 'syz.1.501': attribute type 10 has an invalid length. [ 87.653091][ T5759] netlink: 224 bytes leftover after parsing attributes in process `syz.1.503'. [ 87.662165][ T5759] netlink: 16 bytes leftover after parsing attributes in process `syz.1.503'. [ 87.710845][ T5759] program syz.1.503 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 87.743769][ T5759] netlink: 'syz.1.503': attribute type 10 has an invalid length. [ 87.884330][ T5767] loop5: detected capacity change from 0 to 2048 [ 88.013052][ T5767] loop5: unable to read partition table [ 88.018947][ T5767] loop5: partition table beyond EOD, truncated [ 88.025160][ T5767] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 88.113717][ T5757] tmpfs: Unknown parameter 'syzkaller' [ 90.216387][ T5788] loop2: detected capacity change from 0 to 764 [ 90.223858][ T5785] loop3: detected capacity change from 0 to 2048 [ 90.263069][ T5785] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 90.297159][ T29] kauditd_printk_skb: 98 callbacks suppressed [ 90.297177][ T29] audit: type=1400 audit(1759917085.129:2632): avc: denied { lock } for pid=5784 comm="syz.3.510" path="/101/file1/file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 90.330542][ T5794] netlink: 224 bytes leftover after parsing attributes in process `syz.1.513'. [ 90.339527][ T5794] netlink: 16 bytes leftover after parsing attributes in process `syz.1.513'. [ 90.364309][ T29] audit: type=1400 audit(1759917085.199:2633): avc: denied { remove_name } for pid=5784 comm="syz.3.510" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 90.389002][ T5794] program syz.1.513 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 90.397235][ T29] audit: type=1400 audit(1759917085.199:2634): avc: denied { unlink } for pid=5784 comm="syz.3.510" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 90.420711][ T29] audit: type=1400 audit(1759917085.219:2635): avc: denied { ioctl } for pid=5784 comm="syz.3.510" path="socket:[12928]" dev="sockfs" ino=12928 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 90.451175][ T29] audit: type=1326 audit(1759917085.239:2636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5786 comm="syz.4.511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd04549eec9 code=0x7ffc0000 [ 90.473995][ T5794] netlink: 'syz.1.513': attribute type 10 has an invalid length. [ 90.474784][ T29] audit: type=1326 audit(1759917085.239:2637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5786 comm="syz.4.511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=280 compat=0 ip=0x7fd04549eec9 code=0x7ffc0000 [ 90.505776][ T29] audit: type=1326 audit(1759917085.239:2638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5786 comm="syz.4.511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd04549eec9 code=0x7ffc0000 [ 90.529316][ T29] audit: type=1326 audit(1759917085.239:2639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5786 comm="syz.4.511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd04549eec9 code=0x7ffc0000 [ 90.552692][ T29] audit: type=1326 audit(1759917085.239:2640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5786 comm="syz.4.511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd04549eec9 code=0x7ffc0000 [ 90.576312][ T29] audit: type=1326 audit(1759917085.239:2641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5786 comm="syz.4.511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fd04549eec9 code=0x7ffc0000 [ 90.646798][ T5813] futex_wake_op: syz.5.519 tries to shift op by 36; fix this program [ 90.673702][ T5813] netlink: 44 bytes leftover after parsing attributes in process `+}[@'. [ 90.696745][ T5817] loop4: detected capacity change from 0 to 1024 [ 90.698023][ T5813] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 90.712664][ T5817] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 90.745482][ T5813] netlink: '+}[@': attribute type 1 has an invalid length. [ 90.753128][ T5817] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 90.768587][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.783200][ T5821] loop1: detected capacity change from 0 to 2048 [ 90.784582][ T5813] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.807610][ T5817] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 90.834010][ T5817] EXT4-fs (loop4): orphan cleanup on readonly fs [ 90.857381][ T5817] EXT4-fs error (device loop4): ext4_free_blocks:6706: comm syz.4.522: Freeing blocks not in datazone - block = 0, count = 4096 [ 90.908170][ T5817] EXT4-fs (loop4): Remounting filesystem read-only [ 90.922072][ T5821] loop1: p2 p3 p7 [ 90.927473][ T5817] EXT4-fs (loop4): 1 orphan inode deleted [ 90.940573][ T5817] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 90.970279][ T5821] netlink: 'syz.1.523': attribute type 10 has an invalid length. [ 90.980481][ T5821] dummy0: entered promiscuous mode [ 90.986281][ T5821] bridge0: port 3(dummy0) entered blocking state [ 90.992812][ T5821] bridge0: port 3(dummy0) entered disabled state [ 91.013008][ T5821] dummy0: entered allmulticast mode [ 91.031529][ T5821] bridge0: port 3(dummy0) entered blocking state [ 91.037994][ T5821] bridge0: port 3(dummy0) entered forwarding state [ 91.097873][ T3326] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.114484][ T5845] loop5: detected capacity change from 0 to 512 [ 91.153089][ T5845] EXT4-fs error (device loop5): ext4_xattr_inode_iget:446: comm syz.5.529: error while reading EA inode 32 err=-116 [ 91.154230][ T5842] loop2: detected capacity change from 0 to 2048 [ 91.170770][ T5845] EXT4-fs (loop5): Remounting filesystem read-only [ 91.188772][ T5845] EXT4-fs warning (device loop5): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 91.199125][ T5845] EXT4-fs (loop5): 1 orphan inode deleted [ 91.209669][ T5845] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 91.247368][ T5853] loop4: detected capacity change from 0 to 128 [ 91.386585][ T4803] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.455898][ T5868] SELinux: Context : is not valid (left unmapped). [ 91.480744][ T384] bio_check_eod: 101 callbacks suppressed [ 91.480759][ T384] kworker/u8:5: attempt to access beyond end of device [ 91.480759][ T384] loop4: rw=1, sector=145, nr_sectors = 8 limit=128 [ 91.508760][ T5828] tmpfs: Unknown parameter 'syzkaller' [ 91.531448][ T384] kworker/u8:5: attempt to access beyond end of device [ 91.531448][ T384] loop4: rw=1, sector=161, nr_sectors = 8 limit=128 [ 91.550590][ T384] kworker/u8:5: attempt to access beyond end of device [ 91.550590][ T384] loop4: rw=1, sector=177, nr_sectors = 8 limit=128 [ 91.565488][ T384] kworker/u8:5: attempt to access beyond end of device [ 91.565488][ T384] loop4: rw=1, sector=193, nr_sectors = 8 limit=128 [ 91.580132][ T384] kworker/u8:5: attempt to access beyond end of device [ 91.580132][ T384] loop4: rw=1, sector=209, nr_sectors = 8 limit=128 [ 91.598822][ T5842] loop2: unable to read partition table [ 91.604640][ T5842] loop2: partition table beyond EOD, truncated [ 91.610895][ T5842] loop_reread_partitions: partition scan of loop2 () failed (rc=-5) [ 91.622140][ T384] kworker/u8:5: attempt to access beyond end of device [ 91.622140][ T384] loop4: rw=1, sector=225, nr_sectors = 8 limit=128 [ 91.637908][ T384] kworker/u8:5: attempt to access beyond end of device [ 91.637908][ T384] loop4: rw=1, sector=241, nr_sectors = 8 limit=128 [ 91.659275][ T5880] loop5: detected capacity change from 0 to 764 [ 91.680357][ T384] kworker/u8:5: attempt to access beyond end of device [ 91.680357][ T384] loop4: rw=1, sector=257, nr_sectors = 8 limit=128 [ 91.720274][ T384] kworker/u8:5: attempt to access beyond end of device [ 91.720274][ T384] loop4: rw=1, sector=273, nr_sectors = 8 limit=128 [ 91.743959][ T384] kworker/u8:5: attempt to access beyond end of device [ 91.743959][ T384] loop4: rw=1, sector=289, nr_sectors = 8 limit=128 [ 92.267666][ T5919] __nla_validate_parse: 4 callbacks suppressed [ 92.267685][ T5919] netlink: 40 bytes leftover after parsing attributes in process `syz.4.552'. [ 92.282803][ T5919] netlink: 19 bytes leftover after parsing attributes in process `syz.4.552'. [ 92.291677][ T5919] netlink: 19 bytes leftover after parsing attributes in process `syz.4.552'. [ 92.313213][ T5919] 9pnet_fd: p9_fd_create_tcp (5919): problem connecting socket to 127.0.0.1 [ 92.323219][ T5919] 9pnet_fd: p9_fd_create_tcp (5919): problem connecting socket to 127.0.0.1 [ 92.333226][ T5919] 9pnet_fd: p9_fd_create_tcp (5919): problem connecting socket to 127.0.0.1 [ 92.343164][ T5919] 9pnet_fd: p9_fd_create_tcp (5919): problem connecting socket to 127.0.0.1 [ 92.352857][ T5919] 9pnet_fd: p9_fd_create_tcp (5919): problem connecting socket to 127.0.0.1 [ 92.362110][ T12] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 92.368332][ T5919] 9pnet_fd: p9_fd_create_tcp (5919): problem connecting socket to 127.0.0.1 [ 92.378833][ T12] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 92.380577][ T5919] 9pnet_fd: p9_fd_create_tcp (5919): problem connecting socket to 127.0.0.1 [ 92.396890][ T5919] 9pnet_fd: p9_fd_create_tcp (5919): problem connecting socket to 127.0.0.1 [ 92.406519][ T5919] 9pnet_fd: p9_fd_create_tcp (5919): problem connecting socket to 127.0.0.1 [ 92.416177][ T5919] 9pnet_fd: p9_fd_create_tcp (5919): problem connecting socket to 127.0.0.1 [ 92.425634][ T5919] 9pnet_fd: p9_fd_create_tcp (5919): problem connecting socket to 127.0.0.1 [ 92.436514][ T12] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 92.444968][ T12] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 92.454095][ T5919] 9pnet_fd: p9_fd_create_tcp (5919): problem connecting socket to 127.0.0.1 [ 92.463753][ T5919] 9pnet_fd: p9_fd_create_tcp (5919): problem connecting socket to 127.0.0.1 [ 92.473949][ T5919] 9pnet_fd: p9_fd_create_tcp (5919): problem connecting socket to 127.0.0.1 [ 93.434009][ T5922] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 93.487976][ T5922] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 93.584807][ T5935] netlink: 224 bytes leftover after parsing attributes in process `syz.2.558'. [ 93.593864][ T5935] netlink: 16 bytes leftover after parsing attributes in process `syz.2.558'. [ 93.641373][ T5935] netlink: 'syz.2.558': attribute type 10 has an invalid length. [ 93.790956][ T5952] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 93.809556][ T5952] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 93.830871][ T5950] netlink: 24 bytes leftover after parsing attributes in process `syz.2.563'. [ 93.868866][ T5952] IPv6: sit1: Disabled Multicast RS [ 93.874959][ T5952] sit1: entered allmulticast mode [ 93.907036][ T5950] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.958284][ T5959] loop5: detected capacity change from 0 to 128 [ 93.965983][ T5950] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.980781][ T5959] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 94.011039][ T5959] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 94.051757][ T5950] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.120366][ T31] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 94.148998][ T5968] netlink: 224 bytes leftover after parsing attributes in process `syz.5.568'. [ 94.158120][ T5968] netlink: 16 bytes leftover after parsing attributes in process `syz.5.568'. [ 94.170026][ T5970] netlink: 32 bytes leftover after parsing attributes in process `syz.1.570'. [ 94.180644][ T5950] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.192511][ T5968] netlink: 'syz.5.568': attribute type 10 has an invalid length. [ 94.247647][ T31] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.276966][ T31] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.300602][ T31] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.309776][ T31] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.345943][ T5976] netlink: 224 bytes leftover after parsing attributes in process `syz.1.573'. [ 94.371372][ T5976] netlink: 'syz.1.573': attribute type 10 has an invalid length. [ 94.451777][ T5981] loop2: detected capacity change from 0 to 8192 [ 94.461214][ T5985] loop3: detected capacity change from 0 to 128 [ 94.468044][ T5985] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 94.488410][ T5978] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 94.490146][ T5985] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 94.614714][ T5981] loop2: p1 p2 p3 p4[EZD] [ 94.620323][ T5981] loop2: p1 size 16128 extends beyond EOD, truncated [ 94.630412][ T5981] loop2: p3 start 458783 is beyond EOD, truncated [ 94.637045][ T5981] loop2: p4 size 65536 extends beyond EOD, truncated [ 94.713243][ T6002] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.722084][ T6002] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.772160][ T6008] netlink: 'syz.5.584': attribute type 10 has an invalid length. [ 94.806636][ T6012] loop1: detected capacity change from 0 to 1024 [ 94.813852][ T6012] EXT4-fs: Ignoring removed bh option [ 94.819395][ T6012] EXT4-fs: inline encryption not supported [ 94.825816][ T6012] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 94.836813][ T6012] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0100] [ 94.845897][ T6012] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 2: comm syz.1.586: lblock 2 mapped to illegal pblock 2 (length 1) [ 94.860314][ T6012] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 48: comm syz.1.586: lblock 0 mapped to illegal pblock 48 (length 1) [ 94.875524][ T6012] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.586: Failed to acquire dquot type 0 [ 94.886976][ T6012] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6305: Corrupt filesystem [ 94.891138][ T6017] loop5: detected capacity change from 0 to 128 [ 94.902820][ T6012] EXT4-fs error (device loop1): ext4_evict_inode:254: inode #11: comm syz.1.586: mark_inode_dirty error [ 94.914528][ T6017] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 94.926785][ T6012] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 94.929853][ T6017] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 94.937327][ T6012] EXT4-fs (loop1): 1 orphan inode deleted [ 94.952762][ T6012] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.956586][ T31] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 94.986409][ T31] EXT4-fs error (device loop1): ext4_release_dquot:6981: comm kworker/u8:1: Failed to release dquot type 0 [ 95.027556][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.037566][ T3313] EXT4-fs error (device loop1): __ext4_get_inode_loc:4832: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 95.051390][ T3313] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6305: Corrupt filesystem [ 95.061147][ T3313] EXT4-fs error (device loop1): ext4_quota_off:7229: inode #3: comm syz-executor: mark_inode_dirty error [ 95.084333][ T6022] loop1: detected capacity change from 0 to 128 [ 95.099310][ T6022] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 95.112273][ T6022] ext4 filesystem being mounted at /134/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 95.131888][ T6025] loop2: detected capacity change from 0 to 1024 [ 95.139061][ T6025] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 95.139429][ T3313] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 95.148278][ T6025] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 95.168077][ T6025] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 95.179443][ T6025] EXT4-fs (loop2): orphan cleanup on readonly fs [ 95.186069][ T6030] loop5: detected capacity change from 0 to 512 [ 95.186276][ T6025] EXT4-fs error (device loop2): ext4_free_blocks:6706: comm syz.2.591: Freeing blocks not in datazone - block = 0, count = 4096 [ 95.193125][ T6030] EXT4-fs: dax option not supported [ 95.206909][ T6025] EXT4-fs (loop2): Remounting filesystem read-only [ 95.217596][ T6025] EXT4-fs (loop2): 1 orphan inode deleted [ 95.223804][ T6025] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 95.263567][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.326411][ T6044] loop2: detected capacity change from 0 to 1024 [ 95.337201][ T6044] EXT4-fs: Ignoring removed orlov option [ 95.343039][ T6044] EXT4-fs: Ignoring removed mblk_io_submit option [ 95.349559][ T6044] EXT4-fs: inline encryption not supported [ 95.370614][ T6044] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.401332][ T6045] loop3: detected capacity change from 0 to 8192 [ 95.414206][ T29] kauditd_printk_skb: 908 callbacks suppressed [ 95.414224][ T29] audit: type=1400 audit(1759917090.239:3547): avc: denied { ioctl } for pid=6046 comm="syz.4.599" path="socket:[14452]" dev="sockfs" ino=14452 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 95.445164][ T29] audit: type=1400 audit(1759917090.249:3548): avc: denied { setattr } for pid=6043 comm="syz.2.598" name="file0" dev="loop2" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 95.467619][ T29] audit: type=1400 audit(1759917090.249:3549): avc: denied { create } for pid=6046 comm="syz.4.599" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 95.488807][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.498628][ T6045] loop3: p1 p2 p3 p4[EZD] [ 95.503288][ T6045] loop3: p1 size 16128 extends beyond EOD, truncated [ 95.511104][ T6045] loop3: p3 start 458783 is beyond EOD, truncated [ 95.517756][ T6045] loop3: p4 size 65536 extends beyond EOD, truncated [ 95.537773][ T6060] netlink: 'syz.1.601': attribute type 1 has an invalid length. [ 95.566161][ T6060] 8021q: adding VLAN 0 to HW filter on device bond1 [ 95.581862][ T29] audit: type=1326 audit(1759917090.419:3550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6064 comm="syz.4.603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd04549eec9 code=0x7ffc0000 [ 95.605518][ T29] audit: type=1326 audit(1759917090.419:3551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6064 comm="syz.4.603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd04549eec9 code=0x7ffc0000 [ 95.629228][ T29] audit: type=1326 audit(1759917090.419:3552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6064 comm="syz.4.603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fd04549eec9 code=0x7ffc0000 [ 95.652599][ T29] audit: type=1326 audit(1759917090.419:3553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6064 comm="syz.4.603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd04549eec9 code=0x7ffc0000 [ 95.676087][ T29] audit: type=1326 audit(1759917090.419:3554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6064 comm="syz.4.603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fd04549eec9 code=0x7ffc0000 [ 95.700160][ T29] audit: type=1326 audit(1759917090.419:3555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6064 comm="syz.4.603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd04549eec9 code=0x7ffc0000 [ 95.706148][ T6073] netlink: 'syz.4.604': attribute type 4 has an invalid length. [ 95.775364][ T6079] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 95.788933][ T6079] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.809441][ T29] audit: type=1326 audit(1759917090.639:3556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6082 comm="syz.2.608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ee943eec9 code=0x7ffc0000 [ 95.878857][ T6085] loop4: detected capacity change from 0 to 512 [ 95.891657][ T6085] EXT4-fs warning (device loop4): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 95.906740][ T6085] EXT4-fs (loop4): mount failed [ 95.972521][ T6099] loop2: detected capacity change from 0 to 1024 [ 95.979976][ T6099] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 95.989285][ T6099] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 96.019887][ T6099] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 96.028206][ T6099] EXT4-fs (loop2): orphan cleanup on readonly fs [ 96.035033][ T6099] EXT4-fs error (device loop2): ext4_free_blocks:6706: comm syz.2.614: Freeing blocks not in datazone - block = 0, count = 4096 [ 96.049011][ T6099] EXT4-fs (loop2): Remounting filesystem read-only [ 96.055694][ T6099] EXT4-fs (loop2): 1 orphan inode deleted [ 96.062098][ T6099] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 96.156974][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.197150][ T6111] macvlan2: entered promiscuous mode [ 96.202718][ T6111] syz_tun: entered promiscuous mode [ 96.209961][ T6111] team0: Port device macvlan2 added [ 96.612319][ T6127] loop1: detected capacity change from 0 to 512 [ 96.621117][ T6127] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 96.631004][ T6127] EXT4-fs (loop1): orphan cleanup on readonly fs [ 96.638039][ T6127] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.623: Failed to acquire dquot type 1 [ 96.677146][ T6127] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.623: bg 0: block 40: padding at end of block bitmap is not set [ 96.730928][ T6132] netlink: 'syz.3.624': attribute type 10 has an invalid length. [ 96.739280][ T6127] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 96.750773][ T6127] EXT4-fs (loop1): 1 truncate cleaned up [ 96.757639][ T6127] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 96.976247][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.802187][ T6148] loop2: detected capacity change from 0 to 1024 [ 97.983406][ T6151] loop5: detected capacity change from 0 to 2048 [ 97.993272][ T6148] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 98.030333][ T6148] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 98.051034][ T6151] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.072934][ T6157] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.090733][ T6148] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 98.099177][ T6157] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.117496][ T6148] EXT4-fs (loop2): orphan cleanup on readonly fs [ 98.138849][ T6148] EXT4-fs error (device loop2): ext4_free_blocks:6706: comm syz.2.629: Freeing blocks not in datazone - block = 0, count = 4096 [ 98.190517][ T6148] EXT4-fs (loop2): Remounting filesystem read-only [ 98.207399][ T6148] EXT4-fs (loop2): 1 orphan inode deleted [ 98.218013][ T6148] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 98.297882][ T4803] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.309169][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.365295][ T6172] loop5: detected capacity change from 0 to 764 [ 98.478004][ T6181] loop5: detected capacity change from 0 to 128 [ 98.499175][ T6181] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 98.553131][ T6181] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 98.711331][ T6186] loop2: detected capacity change from 0 to 1024 [ 98.741958][ T6186] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 98.779472][ T6186] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 98.826482][ T6186] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 98.858559][ T6186] EXT4-fs (loop2): orphan cleanup on readonly fs [ 98.888913][ T6186] EXT4-fs error (device loop2): ext4_free_blocks:6706: comm syz.2.641: Freeing blocks not in datazone - block = 0, count = 4096 [ 98.937219][ T6186] EXT4-fs (loop2): Remounting filesystem read-only [ 98.965952][ T6186] EXT4-fs (loop2): 1 orphan inode deleted [ 98.988159][ T6186] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 99.034613][ T6191] loop1: detected capacity change from 0 to 8192 [ 99.085322][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.130603][ T6191] loop1: p1 p2 p3 p4[EZD] [ 99.135177][ T6191] loop1: p1 size 16128 extends beyond EOD, truncated [ 99.173556][ T6191] loop1: p3 start 458783 is beyond EOD, truncated [ 99.180133][ T6191] loop1: p4 size 65536 extends beyond EOD, truncated [ 99.566423][ T6225] __nla_validate_parse: 14 callbacks suppressed [ 99.566439][ T6225] netlink: 224 bytes leftover after parsing attributes in process `syz.1.654'. [ 99.581746][ T6225] netlink: 16 bytes leftover after parsing attributes in process `syz.1.654'. [ 99.594938][ T6225] netlink: 'syz.1.654': attribute type 10 has an invalid length. [ 99.614716][ T6224] loop3: detected capacity change from 0 to 764 [ 99.768974][ T6236] loop1: detected capacity change from 0 to 512 [ 99.777108][ T6236] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 99.785314][ T6236] EXT4-fs (loop1): orphan cleanup on readonly fs [ 99.792374][ T6236] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.660: Failed to acquire dquot type 1 [ 99.981758][ T6236] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.660: bg 0: block 40: padding at end of block bitmap is not set [ 100.033509][ T6236] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 100.065791][ T6236] EXT4-fs (loop1): 1 truncate cleaned up [ 100.292623][ T6252] loop2: detected capacity change from 0 to 128 [ 100.331009][ T6236] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 101.121161][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.210692][ T6258] loop5: detected capacity change from 0 to 128 [ 101.227776][ T6258] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 101.256412][ T6261] loop3: detected capacity change from 0 to 764 [ 101.270371][ T6258] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 101.408396][ T6260] loop2: detected capacity change from 0 to 8192 [ 101.445975][ T6272] loop1: detected capacity change from 0 to 2048 [ 101.471908][ T6272] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.484610][ T6260] loop2: p1 p2 p3 p4[EZD] [ 101.489074][ T6260] loop2: p1 size 16128 extends beyond EOD, truncated [ 101.510592][ T6260] loop2: p3 start 458783 is beyond EOD, truncated [ 101.517073][ T6260] loop2: p4 size 65536 extends beyond EOD, truncated [ 101.612467][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.920884][ T6293] loop1: detected capacity change from 0 to 512 [ 101.941656][ T6293] EXT4-fs: dax option not supported [ 101.991096][ T6269] loop3: detected capacity change from 0 to 2048 [ 102.048600][ T6301] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.058044][ T6301] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.182920][ T6269] loop3: unable to read partition table [ 102.188830][ T6269] loop3: partition table beyond EOD, truncated [ 102.195044][ T6269] loop_reread_partitions: partition scan of loop3 () failed (rc=-5) [ 102.241572][ T6269] tmpfs: Unknown parameter 'syzkaller' [ 102.655693][ T29] kauditd_printk_skb: 190 callbacks suppressed [ 102.655711][ T29] audit: type=1326 audit(1759917097.489:3742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6322 comm="syz.3.686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27de99eec9 code=0x7ffc0000 [ 102.709970][ T29] audit: type=1326 audit(1759917097.489:3743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6322 comm="syz.3.686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27de99eec9 code=0x7ffc0000 [ 102.733983][ T29] audit: type=1326 audit(1759917097.489:3744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6322 comm="syz.3.686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f27de99eec9 code=0x7ffc0000 [ 102.757971][ T29] audit: type=1326 audit(1759917097.489:3745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6322 comm="syz.3.686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27de99eec9 code=0x7ffc0000 [ 102.781340][ T29] audit: type=1326 audit(1759917097.489:3746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6322 comm="syz.3.686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f27de99eec9 code=0x7ffc0000 [ 102.804872][ T29] audit: type=1326 audit(1759917097.489:3747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6322 comm="syz.3.686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27de99eec9 code=0x7ffc0000 [ 102.850484][ T6318] loop2: detected capacity change from 0 to 8192 [ 102.908709][ T6318] loop2: p1 p2 p3 p4[EZD] [ 102.913314][ T6318] loop2: p1 size 16128 extends beyond EOD, truncated [ 102.926443][ T6318] loop2: p3 start 458783 is beyond EOD, truncated [ 102.933100][ T6318] loop2: p4 size 65536 extends beyond EOD, truncated [ 103.086207][ T6350] netlink: 8 bytes leftover after parsing attributes in process `syz.1.695'. [ 103.292136][ T6362] loop3: detected capacity change from 0 to 8192 [ 103.352025][ T6362] loop3: p1 p2 p3 p4[EZD] [ 103.375579][ T6362] loop3: p1 size 16128 extends beyond EOD, truncated [ 103.391960][ T6362] loop3: p3 start 458783 is beyond EOD, truncated [ 103.398465][ T6362] loop3: p4 size 65536 extends beyond EOD, truncated [ 103.635664][ T6387] loop4: detected capacity change from 0 to 512 [ 103.643611][ T6387] ext4: Unknown parameter 'nouser_xattr' [ 103.671240][ T6382] loop2: detected capacity change from 0 to 8192 [ 103.719033][ T6382] loop2: p1 p2 p3 p4[EZD] [ 103.723617][ T6382] loop2: p1 size 16128 extends beyond EOD, truncated [ 103.740300][ T6382] loop2: p3 start 458783 is beyond EOD, truncated [ 103.746757][ T6382] loop2: p4 size 65536 extends beyond EOD, truncated [ 103.875602][ T6400] netlink: 224 bytes leftover after parsing attributes in process `syz.2.711'. [ 103.884748][ T6400] netlink: 16 bytes leftover after parsing attributes in process `syz.2.711'. [ 103.921557][ T6404] netlink: 224 bytes leftover after parsing attributes in process `syz.1.713'. [ 103.930347][ T29] audit: type=1326 audit(1759917098.749:3748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6406 comm="syz.3.714" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f27de99eec9 code=0x0 [ 103.930767][ T6404] netlink: 16 bytes leftover after parsing attributes in process `syz.1.713'. [ 103.977896][ T6404] netlink: 'syz.1.713': attribute type 10 has an invalid length. [ 103.992386][ T6410] loop3: detected capacity change from 0 to 512 [ 103.999106][ T6410] EXT4-fs: dax option not supported [ 104.101451][ T6416] netlink: 40 bytes leftover after parsing attributes in process `syz.4.715'. [ 104.110538][ T6416] netlink: 19 bytes leftover after parsing attributes in process `syz.4.715'. [ 104.119405][ T6416] netlink: 19 bytes leftover after parsing attributes in process `syz.4.715'. [ 104.148819][ T6420] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.157472][ T6420] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.226885][ T29] audit: type=1326 audit(1759917099.059:3749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6422 comm="syz.1.720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d4f21eec9 code=0x7ffc0000 [ 104.250343][ T29] audit: type=1326 audit(1759917099.059:3750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6422 comm="syz.1.720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d4f21eec9 code=0x7ffc0000 [ 104.274285][ T29] audit: type=1326 audit(1759917099.059:3751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6422 comm="syz.1.720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=280 compat=0 ip=0x7f8d4f21eec9 code=0x7ffc0000 [ 104.921160][ T6443] netlink: 224 bytes leftover after parsing attributes in process `syz.3.726'. [ 104.930191][ T6443] netlink: 16 bytes leftover after parsing attributes in process `syz.3.726'. [ 105.380935][ T6462] netlink: 40 bytes leftover after parsing attributes in process `syz.5.733'. [ 105.389868][ T6462] netlink: 19 bytes leftover after parsing attributes in process `syz.5.733'. [ 105.398817][ T6462] netlink: 19 bytes leftover after parsing attributes in process `syz.5.733'. [ 105.600150][ T6467] loop3: detected capacity change from 0 to 512 [ 105.641159][ T6467] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 105.680602][ T6467] EXT4-fs (loop3): orphan cleanup on readonly fs [ 105.690832][ T6467] EXT4-fs error (device loop3): ext4_do_update_inode:5624: inode #16: comm syz.3.735: corrupted inode contents [ 105.840614][ T6467] EXT4-fs (loop3): Remounting filesystem read-only [ 105.857464][ T6467] EXT4-fs (loop3): 1 truncate cleaned up [ 105.873479][ T12] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 105.884164][ T12] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 105.932137][ T12] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started [ 105.945124][ T6476] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.953929][ T6476] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.981414][ T6467] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 106.022050][ T6467] netlink: 8 bytes leftover after parsing attributes in process `syz.3.735'. [ 106.030917][ T6467] netlink: 4 bytes leftover after parsing attributes in process `syz.3.735'. [ 106.062603][ T6479] loop5: detected capacity change from 0 to 1024 [ 106.070843][ T6479] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 106.083630][ T12] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 106.092087][ T6479] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 106.102720][ T12] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 106.111230][ T12] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 106.119866][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.120267][ T12] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 106.129268][ T6481] loop2: detected capacity change from 0 to 764 [ 106.137764][ T6479] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 106.152272][ T6479] EXT4-fs (loop5): orphan cleanup on readonly fs [ 106.192153][ T6479] EXT4-fs error (device loop5): ext4_free_blocks:6706: comm syz.5.739: Freeing blocks not in datazone - block = 0, count = 4096 [ 106.252092][ T6479] EXT4-fs (loop5): Remounting filesystem read-only [ 106.258931][ T6479] EXT4-fs (loop5): 1 orphan inode deleted [ 106.265300][ T6479] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 106.301864][ T6471] loop1: detected capacity change from 0 to 2048 [ 106.311855][ T4803] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.331713][ T6498] netlink: 224 bytes leftover after parsing attributes in process `syz.5.745'. [ 106.340778][ T6498] netlink: 16 bytes leftover after parsing attributes in process `syz.5.745'. [ 106.405023][ T6471] loop1: unable to read partition table [ 106.410769][ T6471] loop1: partition table beyond EOD, truncated [ 106.416959][ T6471] loop_reread_partitions: partition scan of loop1 () failed (rc=-5) [ 106.472429][ T6471] tmpfs: Unknown parameter 'syzkaller' [ 107.325969][ T6505] loop3: detected capacity change from 0 to 512 [ 107.388613][ T6510] loop4: detected capacity change from 0 to 2048 [ 107.491190][ T6505] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 107.499513][ T6505] EXT4-fs (loop3): orphan cleanup on readonly fs [ 107.507215][ T6505] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.749: Failed to acquire dquot type 1 [ 107.507727][ T6510] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.523451][ T6525] loop2: detected capacity change from 0 to 512 [ 107.537812][ T6525] EXT4-fs: dax option not supported [ 107.548861][ T6505] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.749: bg 0: block 40: padding at end of block bitmap is not set [ 107.571104][ T6505] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 107.580383][ T6505] EXT4-fs (loop3): 1 truncate cleaned up [ 107.586652][ T6505] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 107.617931][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.639892][ T3326] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.700686][ T6534] netlink: 224 bytes leftover after parsing attributes in process `syz.3.757'. [ 107.755148][ T6538] netlink: 'syz.5.758': attribute type 10 has an invalid length. [ 108.360312][ T29] kauditd_printk_skb: 50 callbacks suppressed [ 108.360329][ T29] audit: type=1326 audit(1759917103.169:3794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6535 comm="syz.4.759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd04549eec9 code=0x7ffc0000 [ 108.389888][ T29] audit: type=1326 audit(1759917103.169:3795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6535 comm="syz.4.759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd04549eec9 code=0x7ffc0000 [ 108.413297][ T29] audit: type=1326 audit(1759917103.169:3796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6535 comm="syz.4.759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7fd04549eec9 code=0x7ffc0000 [ 108.436636][ T29] audit: type=1326 audit(1759917103.169:3797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6535 comm="syz.4.759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd04549eec9 code=0x7ffc0000 [ 108.460004][ T29] audit: type=1326 audit(1759917103.169:3798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6535 comm="syz.4.759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd04549eec9 code=0x7ffc0000 [ 108.484262][ T6541] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.495827][ T6541] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.649377][ T6553] loop1: detected capacity change from 0 to 512 [ 108.692989][ T6553] EXT4-fs: dax option not supported [ 108.799416][ T6559] loop4: detected capacity change from 0 to 2048 [ 108.852325][ T6559] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.898483][ T29] audit: type=1326 audit(1759917103.719:3799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6557 comm="syz.4.767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd04549eec9 code=0x7ffc0000 [ 108.921915][ T29] audit: type=1326 audit(1759917103.719:3800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6557 comm="syz.4.767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=270 compat=0 ip=0x7fd04549eec9 code=0x7ffc0000 [ 108.945473][ T29] audit: type=1326 audit(1759917103.719:3801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6557 comm="syz.4.767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd04549eec9 code=0x7ffc0000 [ 108.974190][ T3326] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.028477][ T6568] loop4: detected capacity change from 0 to 1024 [ 109.088911][ T6573] netlink: 'syz.3.771': attribute type 10 has an invalid length. [ 109.179257][ T6568] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 109.191636][ T6568] ext4 filesystem being mounted at /131/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.206000][ T6547] loop5: detected capacity change from 0 to 2048 [ 109.270969][ T29] audit: type=1400 audit(1759917104.109:3802): avc: denied { rename } for pid=6567 comm="syz.4.769" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 109.311481][ T6584] EXT4-fs error (device loop4): ext4_map_blocks:814: inode #15: comm syz.4.769: lblock 0 mapped to illegal pblock 0 (length 6) [ 109.410358][ T6575] tmpfs: Unknown parameter 'syzkaller' [ 109.416333][ T6584] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 109.428787][ T6584] EXT4-fs (loop4): This should not happen!! Data will be lost [ 109.428787][ T6584] [ 109.428802][ T6591] loop1: detected capacity change from 0 to 8192 [ 109.900032][ T29] audit: type=1326 audit(1759917104.629:3803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6585 comm="syz.3.775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27de99eec9 code=0x7ffc0000 [ 109.964114][ T6591] loop1: p1 p2 p3 p4[EZD] [ 109.979861][ T6591] loop1: p1 size 16128 extends beyond EOD, truncated [ 110.123559][ T6591] loop1: p3 start 458783 is beyond EOD, truncated [ 110.130159][ T6591] loop1: p4 size 65536 extends beyond EOD, truncated [ 110.620656][ T6609] loop3: detected capacity change from 0 to 512 [ 110.696060][ T6609] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 110.746526][ T6609] EXT4-fs (loop3): orphan cleanup on readonly fs [ 110.760783][ T6609] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.779: Failed to acquire dquot type 1 [ 110.774378][ T6609] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.779: bg 0: block 40: padding at end of block bitmap is not set [ 110.790512][ T6609] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 110.801493][ T6609] EXT4-fs (loop3): 1 truncate cleaned up [ 110.821302][ T6609] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 110.884724][ T52] EXT4-fs error (device loop4): ext4_map_blocks:814: inode #15: block 8: comm kworker/u8:3: lblock 8 mapped to illegal pblock 8 (length 8) [ 110.902515][ T52] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 110.914970][ T52] EXT4-fs (loop4): This should not happen!! Data will be lost [ 110.914970][ T52] [ 110.921570][ T6615] __nla_validate_parse: 7 callbacks suppressed [ 110.921591][ T6615] netlink: 40 bytes leftover after parsing attributes in process `syz.5.782'. [ 110.936476][ T52] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, [ 110.939820][ T6615] netlink: 19 bytes leftover after parsing attributes in process `syz.5.782'. [ 110.939820][ T52] block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 110.940041][ T52] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 2060 with max blocks 2048 with error 28 [ 110.948171][ T6615] netlink: 19 bytes leftover after parsing attributes in process `syz.5.782'. [ 110.957071][ T52] EXT4-fs (loop4): This should not happen!! Data will be lost [ 110.957071][ T52] [ 110.957090][ T52] EXT4-fs (loop4): Total free blocks count 0 [ 110.957103][ T52] EXT4-fs (loop4): Free/Dirty block details [ 110.957115][ T52] EXT4-fs (loop4): free_blocks=4293918720 [ 110.979025][ T6613] loop2: detected capacity change from 0 to 764 [ 111.023263][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.049662][ T6620] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.058185][ T6618] loop3: detected capacity change from 0 to 764 [ 111.058325][ T6620] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.078891][ T6622] loop2: detected capacity change from 0 to 764 [ 111.172634][ T6630] loop1: detected capacity change from 0 to 128 [ 111.235160][ T6642] loop3: detected capacity change from 0 to 512 [ 111.242238][ T6642] EXT4-fs: dax option not supported [ 111.313349][ T6649] loop1: detected capacity change from 0 to 512 [ 111.340535][ T6649] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 111.348811][ T6649] EXT4-fs (loop1): orphan cleanup on readonly fs [ 111.355604][ T6649] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.793: Failed to acquire dquot type 1 [ 111.367428][ T6649] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.793: bg 0: block 40: padding at end of block bitmap is not set [ 111.381985][ T6649] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 111.391233][ T6649] EXT4-fs (loop1): 1 truncate cleaned up [ 111.402025][ T6649] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 111.425887][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.660999][ T6658] loop4: detected capacity change from 0 to 1024 [ 111.679889][ T6658] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 111.709893][ T6658] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 111.760887][ T6658] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 111.769652][ T6658] EXT4-fs (loop4): orphan cleanup on readonly fs [ 111.776695][ T6658] EXT4-fs error (device loop4): ext4_free_blocks:6706: comm syz.4.795: Freeing blocks not in datazone - block = 0, count = 4096 [ 111.790717][ T6658] EXT4-fs (loop4): Remounting filesystem read-only [ 111.797358][ T6658] EXT4-fs (loop4): 1 orphan inode deleted [ 111.804570][ T6658] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 111.942156][ T3326] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.057261][ T6665] loop4: detected capacity change from 0 to 8192 [ 112.109000][ T6676] netlink: 224 bytes leftover after parsing attributes in process `syz.2.802'. [ 112.118087][ T6676] netlink: 16 bytes leftover after parsing attributes in process `syz.2.802'. [ 112.170967][ T6665] loop4: p1 p2 p3 p4[EZD] [ 112.175456][ T6665] loop4: p1 size 16128 extends beyond EOD, truncated [ 112.187079][ T6679] netlink: 40 bytes leftover after parsing attributes in process `syz.5.803'. [ 112.196208][ T6679] netlink: 19 bytes leftover after parsing attributes in process `syz.5.803'. [ 112.201132][ T6665] loop4: p3 start 458783 is beyond EOD, truncated [ 112.205260][ T6679] netlink: 19 bytes leftover after parsing attributes in process `syz.5.803'. [ 112.211531][ T6665] loop4: p4 size 65536 extends beyond EOD, truncated [ 112.230016][ T6676] netlink: 'syz.2.802': attribute type 10 has an invalid length. [ 112.333946][ T6689] loop2: detected capacity change from 0 to 1024 [ 112.357131][ T6687] loop3: detected capacity change from 0 to 512 [ 112.366901][ T6689] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 112.386394][ T6687] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 112.394279][ T6689] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 112.418301][ T6687] EXT4-fs (loop3): orphan cleanup on readonly fs [ 112.430326][ T6687] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.805: Failed to acquire dquot type 1 [ 112.430659][ T6689] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 112.449662][ T6689] EXT4-fs (loop2): orphan cleanup on readonly fs [ 112.456362][ T6689] EXT4-fs error (device loop2): ext4_free_blocks:6706: comm syz.2.807: Freeing blocks not in datazone - block = 0, count = 4096 [ 112.469999][ T6689] EXT4-fs (loop2): Remounting filesystem read-only [ 112.476585][ T6687] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.805: bg 0: block 40: padding at end of block bitmap is not set [ 112.484065][ T6689] EXT4-fs (loop2): 1 orphan inode deleted [ 112.518436][ T6689] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 112.527457][ T6687] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 112.540569][ T6687] EXT4-fs (loop3): 1 truncate cleaned up [ 112.546882][ T6687] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 112.577560][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.635387][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.666834][ T6663] loop1: detected capacity change from 0 to 2048 [ 112.699828][ T6709] loop4: detected capacity change from 0 to 512 [ 112.699817][ T6707] loop5: detected capacity change from 0 to 512 [ 112.706519][ T6709] EXT4-fs: dax option not supported [ 112.741459][ T6707] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 112.759832][ T6707] EXT4-fs (loop5): orphan cleanup on readonly fs [ 112.768032][ T6707] EXT4-fs error (device loop5): ext4_do_update_inode:5624: inode #16: comm syz.5.813: corrupted inode contents [ 112.860773][ T6707] EXT4-fs (loop5): Remounting filesystem read-only [ 112.867471][ T6707] EXT4-fs (loop5): 1 truncate cleaned up [ 112.873523][ T52] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 112.884091][ T52] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 112.894764][ T52] EXT4-fs (loop5): Quota write (off=8, len=24) cancelled because transaction is not started [ 112.905526][ T6707] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 112.922422][ T6694] tmpfs: Unknown parameter 'syzkaller' [ 113.535222][ T29] kauditd_printk_skb: 91 callbacks suppressed [ 113.535243][ T29] audit: type=1326 audit(1759917108.259:3883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6715 comm="syz.2.815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ee943eec9 code=0x7ffc0000 [ 113.564980][ T29] audit: type=1326 audit(1759917108.259:3884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6715 comm="syz.2.815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ee943eec9 code=0x7ffc0000 [ 113.588571][ T29] audit: type=1326 audit(1759917108.259:3885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6715 comm="syz.2.815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f5ee943eec9 code=0x7ffc0000 [ 113.611784][ T29] audit: type=1326 audit(1759917108.359:3886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6715 comm="syz.2.815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ee943eec9 code=0x7ffc0000 [ 113.635202][ T29] audit: type=1326 audit(1759917108.359:3887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6715 comm="syz.2.815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ee943eec9 code=0x7ffc0000 [ 113.772098][ T6663] loop1: unable to read partition table [ 113.798225][ T6663] loop1: partition table beyond EOD, truncated [ 113.804499][ T6663] loop_reread_partitions: partition scan of loop1 () failed (rc=-5) [ 113.816596][ T6726] loop4: detected capacity change from 0 to 512 [ 113.835764][ T4803] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.851772][ T29] audit: type=1326 audit(1759917108.619:3888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6703 comm="syz.3.809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27de99eec9 code=0x7ffc0000 [ 113.875355][ T29] audit: type=1326 audit(1759917108.669:3889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6703 comm="syz.3.809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=280 compat=0 ip=0x7f27de99eec9 code=0x7ffc0000 [ 113.898793][ T29] audit: type=1326 audit(1759917108.669:3890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6703 comm="syz.3.809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27de99eec9 code=0x7ffc0000 [ 113.922172][ T29] audit: type=1326 audit(1759917108.669:3891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6703 comm="syz.3.809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27de99eec9 code=0x7ffc0000 [ 113.945579][ T29] audit: type=1326 audit(1759917108.669:3892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6703 comm="syz.3.809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f27de99eec9 code=0x7ffc0000 [ 114.000593][ T6726] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 114.008642][ T6726] EXT4-fs (loop4): orphan cleanup on readonly fs [ 114.051629][ T6726] EXT4-fs error (device loop4): ext4_do_update_inode:5624: inode #16: comm syz.4.817: corrupted inode contents [ 114.079559][ T6726] EXT4-fs (loop4): Remounting filesystem read-only [ 114.111370][ T6726] EXT4-fs (loop4): 1 truncate cleaned up [ 114.118330][ T12] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 114.128959][ T12] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 114.183167][ T6740] loop3: detected capacity change from 0 to 512 [ 114.189776][ T6740] EXT4-fs: dax option not supported [ 114.197280][ T6739] loop2: detected capacity change from 0 to 1024 [ 114.210254][ T12] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 114.217635][ T6744] loop5: detected capacity change from 0 to 764 [ 114.231017][ T6739] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 114.240378][ T6726] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 114.252966][ T6739] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 114.271542][ T6739] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 114.280124][ T6739] EXT4-fs (loop2): orphan cleanup on readonly fs [ 114.296926][ T6739] EXT4-fs error (device loop2): ext4_free_blocks:6706: comm syz.2.822: Freeing blocks not in datazone - block = 0, count = 4096 [ 114.311224][ T3326] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.384165][ T6750] loop5: detected capacity change from 0 to 2048 [ 114.406003][ T6739] EXT4-fs (loop2): Remounting filesystem read-only [ 114.420036][ T6760] loop3: detected capacity change from 0 to 128 [ 114.426859][ T6739] EXT4-fs (loop2): 1 orphan inode deleted [ 114.436413][ T6750] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.454780][ T6739] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 114.478467][ T4803] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.554221][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.569473][ T6772] loop1: detected capacity change from 0 to 764 [ 114.636794][ T6784] loop5: detected capacity change from 0 to 512 [ 114.643995][ T6784] EXT4-fs: dax option not supported [ 114.797806][ T6786] loop1: detected capacity change from 0 to 8192 [ 114.830108][ T6804] loop3: detected capacity change from 0 to 1024 [ 114.843435][ T6800] loop4: detected capacity change from 0 to 8192 [ 114.853733][ T6804] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 114.860578][ T6786] loop1: p1 p2 p3 p4[EZD] [ 114.865482][ T6804] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 114.867290][ T6807] loop5: detected capacity change from 0 to 128 [ 114.883569][ T6786] loop1: p1 size 16128 extends beyond EOD, truncated [ 114.892176][ T6786] loop1: p3 start 458783 is beyond EOD, truncated [ 114.898666][ T6786] loop1: p4 size 65536 extends beyond EOD, truncated [ 114.905674][ T6804] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 114.948965][ T6804] EXT4-fs (loop3): orphan cleanup on readonly fs [ 114.963701][ T6804] EXT4-fs error (device loop3): ext4_free_blocks:6706: comm syz.3.848: Freeing blocks not in datazone - block = 0, count = 4096 [ 114.991055][ T6815] loop4: detected capacity change from 0 to 164 [ 115.000893][ T6815] netlink: 12 bytes leftover after parsing attributes in process `syz.4.850'. [ 115.010019][ T6814] loop5: detected capacity change from 0 to 764 [ 115.017200][ T6804] EXT4-fs (loop3): Remounting filesystem read-only [ 115.030595][ T6804] EXT4-fs (loop3): 1 orphan inode deleted [ 115.045386][ T6804] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 115.090675][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.134577][ T6824] loop5: detected capacity change from 0 to 512 [ 115.149556][ T6824] EXT4-fs: dax option not supported [ 115.185889][ T6839] loop4: detected capacity change from 0 to 128 [ 115.236376][ T6845] loop5: detected capacity change from 0 to 764 [ 115.296873][ T6848] loop5: detected capacity change from 0 to 1024 [ 115.304438][ T6848] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 115.322682][ T6848] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 115.342165][ T6848] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 115.357928][ T6848] EXT4-fs (loop5): orphan cleanup on readonly fs [ 115.370262][ T6848] EXT4-fs error (device loop5): ext4_free_blocks:6706: comm syz.5.866: Freeing blocks not in datazone - block = 0, count = 4096 [ 115.395724][ T6848] EXT4-fs (loop5): Remounting filesystem read-only [ 115.402523][ T6848] EXT4-fs (loop5): 1 orphan inode deleted [ 115.408817][ T6848] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 115.448366][ T4803] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.520860][ T6859] FAULT_INJECTION: forcing a failure. [ 115.520860][ T6859] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 115.534046][ T6859] CPU: 0 UID: 0 PID: 6859 Comm: syz.5.868 Not tainted syzkaller #0 PREEMPT(voluntary) [ 115.534073][ T6859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 115.534089][ T6859] Call Trace: [ 115.534126][ T6859] [ 115.534136][ T6859] __dump_stack+0x1d/0x30 [ 115.534157][ T6859] dump_stack_lvl+0xe8/0x140 [ 115.534246][ T6859] dump_stack+0x15/0x1b [ 115.534339][ T6859] should_fail_ex+0x265/0x280 [ 115.534381][ T6859] should_fail+0xb/0x20 [ 115.534419][ T6859] should_fail_usercopy+0x1a/0x20 [ 115.534487][ T6859] strncpy_from_user+0x25/0x230 [ 115.534515][ T6859] ? kmem_cache_alloc_noprof+0x242/0x480 [ 115.534548][ T6859] ? getname_flags+0x80/0x3b0 [ 115.534586][ T6859] getname_flags+0xae/0x3b0 [ 115.534652][ T6859] __x64_sys_execve+0x42/0x70 [ 115.534678][ T6859] x64_sys_call+0x271a/0x3000 [ 115.534706][ T6859] do_syscall_64+0xd2/0x200 [ 115.534743][ T6859] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 115.534785][ T6859] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 115.534829][ T6859] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.534889][ T6859] RIP: 0033:0x7f60427eeec9 [ 115.534904][ T6859] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 115.534922][ T6859] RSP: 002b:00007f604124f038 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 115.534942][ T6859] RAX: ffffffffffffffda RBX: 00007f6042a45fa0 RCX: 00007f60427eeec9 [ 115.534983][ T6859] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000180 [ 115.534994][ T6859] RBP: 00007f604124f090 R08: 0000000000000000 R09: 0000000000000000 [ 115.535027][ T6859] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 115.535043][ T6859] R13: 00007f6042a46038 R14: 00007f6042a45fa0 R15: 00007ffdcffbe798 [ 115.535103][ T6859] [ 115.764180][ T6868] loop3: detected capacity change from 0 to 1024 [ 115.783709][ T6868] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 115.796087][ T6868] ext4 filesystem being mounted at /183/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.820906][ T6879] loop1: detected capacity change from 0 to 764 [ 115.838077][ T6882] loop5: detected capacity change from 0 to 1024 [ 115.845076][ T6882] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 115.855159][ T6882] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 115.866287][ T6885] EXT4-fs error (device loop3): ext4_map_blocks:814: inode #15: comm syz.3.872: lblock 0 mapped to illegal pblock 0 (length 6) [ 115.879845][ T6885] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 115.892194][ T6885] EXT4-fs (loop3): This should not happen!! Data will be lost [ 115.892194][ T6885] [ 115.905616][ T6882] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 115.920058][ T6885] netlink: 56 bytes leftover after parsing attributes in process `syz.3.872'. [ 115.925263][ T6882] EXT4-fs (loop5): orphan cleanup on readonly fs [ 115.937987][ T6882] EXT4-fs error (device loop5): ext4_free_blocks:6706: comm syz.5.878: Freeing blocks not in datazone - block = 0, count = 4096 [ 115.951638][ T6882] EXT4-fs (loop5): Remounting filesystem read-only [ 115.958179][ T6882] EXT4-fs (loop5): 1 orphan inode deleted [ 115.975449][ T6882] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 116.061498][ T6891] loop2: detected capacity change from 0 to 8192 [ 116.068544][ T4803] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.100896][ T6891] loop2: p1 p2 p3 p4[EZD] [ 116.105466][ T6891] loop2: p1 size 16128 extends beyond EOD, truncated [ 116.113692][ T6891] loop2: p3 start 458783 is beyond EOD, truncated [ 116.120394][ T6891] loop2: p4 size 65536 extends beyond EOD, truncated [ 116.231746][ T6907] __nla_validate_parse: 1 callbacks suppressed [ 116.231767][ T6907] netlink: 28 bytes leftover after parsing attributes in process `syz.4.884'. [ 116.246962][ T6907] netlink: 28 bytes leftover after parsing attributes in process `syz.4.884'. [ 116.342698][ T6913] loop5: detected capacity change from 0 to 764 [ 116.409223][ T6920] loop2: detected capacity change from 0 to 1024 [ 116.467990][ T6920] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 116.503407][ T6920] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 116.537485][ T6920] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 116.558236][ T6920] EXT4-fs (loop2): orphan cleanup on readonly fs [ 116.564874][ T6920] EXT4-fs error (device loop2): ext4_free_blocks:6706: comm syz.2.892: Freeing blocks not in datazone - block = 0, count = 4096 [ 116.580379][ T6920] EXT4-fs (loop2): Remounting filesystem read-only [ 116.586936][ T6920] EXT4-fs (loop2): 1 orphan inode deleted [ 116.593205][ T6920] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 116.619580][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.686161][ T6938] netlink: 'syz.2.898': attribute type 10 has an invalid length. [ 116.753408][ T52] EXT4-fs error (device loop3): ext4_map_blocks:814: inode #15: block 8: comm kworker/u8:3: lblock 8 mapped to illegal pblock 8 (length 8) [ 116.790912][ T6944] loop5: detected capacity change from 0 to 512 [ 116.797843][ T6944] EXT4-fs: dax option not supported [ 116.823011][ T52] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 116.835366][ T52] EXT4-fs (loop3): This should not happen!! Data will be lost [ 116.835366][ T52] [ 116.876447][ T52] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 116.900431][ T52] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 2060 with max blocks 2048 with error 28 [ 116.913212][ T52] EXT4-fs (loop3): This should not happen!! Data will be lost [ 116.913212][ T52] [ 116.922925][ T52] EXT4-fs (loop3): Total free blocks count 0 [ 116.928931][ T52] EXT4-fs (loop3): Free/Dirty block details [ 116.934954][ T52] EXT4-fs (loop3): free_blocks=4293918720 [ 117.088037][ T6969] loop2: detected capacity change from 0 to 512 [ 117.133936][ T6969] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.170342][ T6969] ext4 filesystem being mounted at /181/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 117.218395][ T6984] loop3: detected capacity change from 0 to 764 [ 117.241050][ T6980] netlink: 'syz.5.914': attribute type 10 has an invalid length. [ 117.265886][ T6985] lo speed is unknown, defaulting to 1000 [ 117.271854][ T6985] lo speed is unknown, defaulting to 1000 [ 117.277832][ T6985] lo speed is unknown, defaulting to 1000 [ 117.284034][ T6985] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 117.291611][ T6985] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 117.301991][ T6985] lo speed is unknown, defaulting to 1000 [ 117.308049][ T6985] lo speed is unknown, defaulting to 1000 [ 117.314230][ T6985] lo speed is unknown, defaulting to 1000 [ 117.320441][ T6985] lo speed is unknown, defaulting to 1000 [ 117.326536][ T6985] lo speed is unknown, defaulting to 1000 [ 117.335620][ T6969] netlink: 16 bytes leftover after parsing attributes in process `syz.2.912'. [ 117.363429][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.473820][ T6998] loop3: detected capacity change from 0 to 512 [ 117.508474][ T6998] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 117.544238][ T6998] EXT4-fs (loop3): orphan cleanup on readonly fs [ 117.573724][ T6998] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.921: Failed to acquire dquot type 1 [ 117.603398][ T6998] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.921: bg 0: block 40: padding at end of block bitmap is not set [ 117.696006][ T6998] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 117.705714][ T6998] EXT4-fs (loop3): 1 truncate cleaned up [ 117.715442][ T6998] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 117.729969][ T7001] loop2: detected capacity change from 0 to 8192 [ 117.762858][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.813601][ T7001] loop2: p1 p2 p3 p4[EZD] [ 117.828294][ T7001] loop2: p1 size 16128 extends beyond EOD, truncated [ 117.861769][ T7001] loop2: p3 start 458783 is beyond EOD, truncated [ 117.868373][ T7001] loop2: p4 size 65536 extends beyond EOD, truncated [ 117.945076][ T7019] loop5: detected capacity change from 0 to 512 [ 117.960532][ T7019] EXT4-fs: dax option not supported [ 117.968149][ T7021] loop3: detected capacity change from 0 to 512 [ 117.981467][ T7021] EXT4-fs: dax option not supported [ 118.091192][ T7027] loop5: detected capacity change from 0 to 128 [ 118.123327][ T7029] loop4: detected capacity change from 0 to 764 [ 118.200969][ T7037] netlink: 'syz.2.933': attribute type 1 has an invalid length. [ 118.217653][ T7035] loop5: detected capacity change from 0 to 512 [ 118.226505][ T7035] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 118.256797][ T7035] EXT4-fs (loop5): orphan cleanup on readonly fs [ 118.293093][ T7035] EXT4-fs error (device loop5): ext4_acquire_dquot:6945: comm syz.5.935: Failed to acquire dquot type 1 [ 118.426543][ T7035] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.935: bg 0: block 40: padding at end of block bitmap is not set [ 118.458789][ T7035] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 118.467578][ T7048] loop1: detected capacity change from 0 to 1024 [ 118.535105][ T7049] lo speed is unknown, defaulting to 1000 [ 118.807816][ T7048] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 118.822063][ T7048] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 118.838617][ T7035] EXT4-fs (loop5): 1 truncate cleaned up [ 118.869197][ T7048] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 118.904648][ T7048] EXT4-fs (loop1): orphan cleanup on readonly fs [ 118.916763][ T29] kauditd_printk_skb: 168 callbacks suppressed [ 118.916823][ T29] audit: type=1326 audit(1759917113.749:4051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7054 comm="syz.3.942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27de99eec9 code=0x7ffc0000 [ 118.950095][ T7035] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 119.000158][ T7048] EXT4-fs error (device loop1): ext4_free_blocks:6706: comm syz.1.940: Freeing blocks not in datazone - block = 0, count = 4096 [ 119.029288][ T29] audit: type=1326 audit(1759917113.809:4052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7054 comm="syz.3.942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=459 compat=0 ip=0x7f27de99eec9 code=0x7ffc0000 [ 119.052779][ T29] audit: type=1326 audit(1759917113.809:4053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7054 comm="syz.3.942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27de99eec9 code=0x7ffc0000 [ 119.076167][ T29] audit: type=1326 audit(1759917113.809:4054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7054 comm="syz.3.942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27de99eec9 code=0x7ffc0000 [ 119.177441][ T7061] loop2: detected capacity change from 0 to 764 [ 119.192478][ T7063] loop4: detected capacity change from 0 to 128 [ 119.288603][ T7048] EXT4-fs (loop1): Remounting filesystem read-only [ 119.334665][ T7048] EXT4-fs (loop1): 1 orphan inode deleted [ 119.380719][ T7048] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 119.420851][ T4803] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.496529][ T7065] loop3: detected capacity change from 0 to 8192 [ 119.511220][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.572361][ T7065] loop3: p1 p2 p3 p4[EZD] [ 119.576855][ T7065] loop3: p1 size 16128 extends beyond EOD, truncated [ 119.587713][ T7065] loop3: p3 start 458783 is beyond EOD, truncated [ 119.594195][ T7065] loop3: p4 size 65536 extends beyond EOD, truncated [ 119.603562][ T7083] netlink: 'syz.2.954': attribute type 1 has an invalid length. [ 119.610710][ T29] audit: type=1326 audit(1759917114.439:4055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7080 comm="syz.1.953" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8d4f21eec9 code=0x0 [ 119.663301][ T7088] loop1: detected capacity change from 0 to 512 [ 119.700458][ T7088] EXT4-fs: dax option not supported [ 119.776257][ T7085] netlink: 28 bytes leftover after parsing attributes in process `syz.5.951'. [ 119.785285][ T7085] netlink: 28 bytes leftover after parsing attributes in process `syz.5.951'. [ 120.029092][ T7079] loop4: detected capacity change from 0 to 2048 [ 120.111640][ T7079] loop4: unable to read partition table [ 120.117612][ T7079] loop4: partition table beyond EOD, truncated [ 120.123920][ T7079] loop_reread_partitions: partition scan of loop4 () failed (rc=-5) [ 120.139324][ T7079] tmpfs: Unknown parameter 'syzkaller' [ 120.212683][ T7098] lo speed is unknown, defaulting to 1000 [ 120.220589][ T29] audit: type=1400 audit(1759917115.039:4056): avc: denied { execute } for pid=7093 comm="syz.3.957" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=17344 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 120.432325][ T7100] loop2: detected capacity change from 0 to 764 [ 120.506554][ T7106] loop2: detected capacity change from 0 to 512 [ 120.516277][ T7106] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 120.524830][ T7106] EXT4-fs (loop2): orphan cleanup on readonly fs [ 120.532161][ T7106] Quota error (device loop2): dq_insert_tree: Quota tree root isn't allocated! [ 120.541307][ T7106] Quota error (device loop2): qtree_write_dquot: Error -5 occurred while creating quota [ 120.551111][ T7106] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.961: Failed to acquire dquot type 1 [ 120.563377][ T7106] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.961: bg 0: block 40: padding at end of block bitmap is not set [ 120.579079][ T7106] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 120.588334][ T7106] EXT4-fs (loop2): 1 truncate cleaned up [ 120.641182][ T7106] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 120.670778][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.817509][ T7112] loop4: detected capacity change from 0 to 1024 [ 120.911175][ T7112] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 120.920390][ T7112] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 121.092890][ T7113] lo speed is unknown, defaulting to 1000 [ 121.307751][ T29] audit: type=1326 audit(1759917115.799:4057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7108 comm="syz.1.962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d4f21eec9 code=0x7ffc0000 [ 121.331253][ T29] audit: type=1326 audit(1759917115.799:4058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7108 comm="syz.1.962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d4f21eec9 code=0x7ffc0000 [ 121.389672][ T7112] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 121.427328][ T7112] EXT4-fs (loop4): orphan cleanup on readonly fs [ 121.456157][ T7112] EXT4-fs error (device loop4): ext4_free_blocks:6706: comm syz.4.964: Freeing blocks not in datazone - block = 0, count = 4096 [ 121.519474][ T7112] EXT4-fs (loop4): Remounting filesystem read-only [ 121.620271][ T7112] EXT4-fs (loop4): 1 orphan inode deleted [ 121.646799][ T7112] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 121.718724][ T7122] loop3: detected capacity change from 0 to 8192 [ 121.764246][ T3326] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.813525][ T7138] netlink: 'syz.5.970': attribute type 1 has an invalid length. [ 121.846802][ T7122] loop3: p1 p2 p3 p4[EZD] [ 121.875649][ T7122] loop3: p1 size 16128 extends beyond EOD, truncated [ 121.914354][ T7122] loop3: p3 start 458783 is beyond EOD, truncated [ 121.920849][ T7122] loop3: p4 size 65536 extends beyond EOD, truncated [ 121.987502][ T7148] loop4: detected capacity change from 0 to 128 [ 122.085506][ T7127] loop2: detected capacity change from 0 to 2048 [ 122.121651][ T7163] loop3: detected capacity change from 0 to 512 [ 122.128323][ T7163] EXT4-fs: dax option not supported [ 122.217446][ T7127] loop2: unable to read partition table [ 122.223360][ T7127] loop2: partition table beyond EOD, truncated [ 122.229724][ T7127] loop_reread_partitions: partition scan of loop2 () failed (rc=-5) [ 122.271941][ T7127] tmpfs: Unknown parameter 'syzkaller' [ 122.308379][ T7173] lo speed is unknown, defaulting to 1000 [ 122.810916][ T7180] loop5: detected capacity change from 0 to 512 [ 122.836452][ T7180] EXT4-fs: dax option not supported [ 122.989727][ T7189] loop4: detected capacity change from 0 to 512 [ 123.016784][ T7189] EXT4-fs: dax option not supported [ 123.075328][ T7182] loop1: detected capacity change from 0 to 8192 [ 123.144379][ T7182] loop1: p1 p2 p3 p4[EZD] [ 123.148858][ T7182] loop1: p1 size 16128 extends beyond EOD, truncated [ 123.212056][ T7182] loop1: p3 start 458783 is beyond EOD, truncated [ 123.218653][ T7182] loop1: p4 size 65536 extends beyond EOD, truncated [ 123.385140][ T7191] lo speed is unknown, defaulting to 1000 [ 123.678271][ T7240] loop1: detected capacity change from 0 to 512 [ 123.733875][ T7241] lo speed is unknown, defaulting to 1000 [ 124.103191][ T29] kauditd_printk_skb: 87 callbacks suppressed [ 124.103221][ T29] audit: type=1326 audit(1759917118.839:4146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7226 comm="syz.5.1002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60427eeec9 code=0x7ffc0000 [ 124.132817][ T29] audit: type=1326 audit(1759917118.839:4147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7226 comm="syz.5.1002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60427eeec9 code=0x7ffc0000 [ 124.156273][ T29] audit: type=1326 audit(1759917118.839:4148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7226 comm="syz.5.1002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7f60427eeec9 code=0x7ffc0000 [ 124.179733][ T29] audit: type=1326 audit(1759917118.839:4149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7226 comm="syz.5.1002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60427eeec9 code=0x7ffc0000 [ 124.203163][ T29] audit: type=1326 audit(1759917118.839:4150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7226 comm="syz.5.1002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60427eeec9 code=0x7ffc0000 [ 124.226677][ T29] audit: type=1326 audit(1759917118.839:4151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7226 comm="syz.5.1002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f60427eeec9 code=0x7ffc0000 [ 124.250147][ T29] audit: type=1326 audit(1759917118.929:4152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7226 comm="syz.5.1002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60427eeec9 code=0x7ffc0000 [ 124.273669][ T29] audit: type=1326 audit(1759917118.929:4153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7226 comm="syz.5.1002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60427eeec9 code=0x7ffc0000 [ 124.390964][ T7238] netlink: 'syz.2.1007': attribute type 10 has an invalid length. [ 124.500244][ T7240] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 124.508336][ T7240] EXT4-fs (loop1): orphan cleanup on readonly fs [ 124.533937][ T7231] loop3: detected capacity change from 0 to 8192 [ 124.550302][ T7240] Quota error (device loop1): dq_insert_tree: Quota tree root isn't allocated! [ 124.559298][ T7240] Quota error (device loop1): qtree_write_dquot: Error -5 occurred while creating quota [ 124.569084][ T7240] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.1008: Failed to acquire dquot type 1 [ 124.633889][ T7240] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1008: bg 0: block 40: padding at end of block bitmap is not set [ 124.650124][ T7240] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 124.659571][ T7231] loop3: p1 p2 p3 p4[EZD] [ 124.664270][ T7231] loop3: p1 size 16128 extends beyond EOD, truncated [ 124.672086][ T7231] loop3: p3 start 458783 is beyond EOD, truncated [ 124.678548][ T7231] loop3: p4 size 65536 extends beyond EOD, truncated [ 124.708188][ T7240] EXT4-fs (loop1): 1 truncate cleaned up [ 124.714332][ T7240] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 124.761750][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.770994][ T7257] loop4: detected capacity change from 0 to 512 [ 124.798268][ T7257] EXT4-fs: dax option not supported [ 124.941302][ T7273] loop5: detected capacity change from 0 to 512 [ 124.948077][ T7273] EXT4-fs: dax option not supported [ 125.000612][ T7274] lo speed is unknown, defaulting to 1000 [ 125.272560][ T7278] loop1: detected capacity change from 0 to 128 [ 125.469598][ T7296] loop4: detected capacity change from 0 to 512 [ 125.485572][ T7296] EXT4-fs: dax option not supported [ 125.540999][ T7294] loop1: detected capacity change from 0 to 8192 [ 125.569502][ T7300] loop4: detected capacity change from 0 to 512 [ 125.576342][ T7300] EXT4-fs: dax option not supported [ 125.600719][ T7294] loop1: p1 p2 p3 p4[EZD] [ 125.605403][ T7294] loop1: p1 size 16128 extends beyond EOD, truncated [ 125.645858][ T7294] loop1: p3 start 458783 is beyond EOD, truncated [ 125.652552][ T7294] loop1: p4 size 65536 extends beyond EOD, truncated [ 125.721451][ T7308] loop2: detected capacity change from 0 to 512 [ 125.743586][ T7308] EXT4-fs: dax option not supported [ 126.025702][ T7327] SELinux: security_context_str_to_sid () failed with errno=-22 [ 126.057842][ T7338] loop1: detected capacity change from 0 to 512 [ 126.066097][ T7338] EXT4-fs: dax option not supported [ 126.123678][ T7340] loop4: detected capacity change from 0 to 4096 [ 126.130603][ T7340] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 126.212415][ T7347] lo speed is unknown, defaulting to 1000 [ 126.756601][ T7345] loop1: detected capacity change from 0 to 764 [ 126.843286][ T7353] loop1: detected capacity change from 0 to 512 [ 126.899553][ T7353] EXT4-fs: dax option not supported [ 127.195984][ T7361] loop1: detected capacity change from 0 to 8192 [ 127.244656][ T7372] loop4: detected capacity change from 0 to 512 [ 127.253756][ T7372] EXT4-fs: dax option not supported [ 127.260527][ T7361] loop1: p1 p2 p3 p4[EZD] [ 127.265184][ T7361] loop1: p1 size 16128 extends beyond EOD, truncated [ 127.309280][ T7361] loop1: p3 start 458783 is beyond EOD, truncated [ 127.315857][ T7361] loop1: p4 size 65536 extends beyond EOD, truncated [ 127.361829][ T7376] lo speed is unknown, defaulting to 1000 [ 127.540067][ T7393] loop4: detected capacity change from 0 to 512 [ 127.549241][ T7395] loop5: detected capacity change from 0 to 512 [ 127.555990][ T7395] journal_path: Non-blockdev passed as './bus' [ 127.562331][ T7395] EXT4-fs: error: could not find journal device path [ 127.570435][ T7393] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 127.592963][ T7393] EXT4-fs (loop4): 1 truncate cleaned up [ 127.598970][ T7393] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 127.673788][ T3326] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.725884][ T7418] netlink: 'syz.5.1068': attribute type 1 has an invalid length. [ 127.992578][ T7436] loop1: detected capacity change from 0 to 8192 [ 128.030437][ T7436] loop1: p1 p2 p3 p4[EZD] [ 128.035637][ T7436] loop1: p1 size 16128 extends beyond EOD, truncated [ 128.044141][ T7436] loop1: p3 start 458783 is beyond EOD, truncated [ 128.050659][ T7436] loop1: p4 size 65536 extends beyond EOD, truncated [ 128.450394][ T7456] lo speed is unknown, defaulting to 1000 [ 128.493358][ T7458] loop4: detected capacity change from 0 to 512 [ 128.500083][ T7458] EXT4-fs: dax option not supported [ 128.587573][ T7452] loop1: detected capacity change from 0 to 8192 [ 128.640557][ T7452] loop1: p1 p2 p3 p4[EZD] [ 128.645134][ T7452] loop1: p1 size 16128 extends beyond EOD, truncated [ 128.686241][ T7452] loop1: p3 start 458783 is beyond EOD, truncated [ 128.692852][ T7452] loop1: p4 size 65536 extends beyond EOD, truncated [ 128.948187][ T7488] lo speed is unknown, defaulting to 1000 [ 129.296908][ T7491] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1093'. [ 129.305972][ T7491] netlink: 19 bytes leftover after parsing attributes in process `syz.2.1093'. [ 129.314987][ T7491] netlink: 19 bytes leftover after parsing attributes in process `syz.2.1093'. [ 129.399670][ T384] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 129.411712][ T7496] 9pnet_fd: p9_fd_create_tcp (7496): problem connecting socket to 127.0.0.1 [ 129.424742][ T384] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 129.542038][ T7499] netlink: 'syz.1.1095': attribute type 1 has an invalid length. [ 129.588560][ T384] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 129.598193][ T7503] loop5: detected capacity change from 0 to 164 [ 129.619134][ T384] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 129.647289][ T29] kauditd_printk_skb: 309 callbacks suppressed [ 129.647453][ T29] audit: type=1400 audit(1759917124.479:4463): avc: denied { mounton } for pid=7500 comm="syz.5.1097" path="/167/file0/file0" dev="loop5" ino=1856 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=dir permissive=1 [ 129.976419][ T29] audit: type=1326 audit(1759917124.809:4464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7505 comm="syz.5.1098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60427eeec9 code=0x7ffc0000 [ 130.050116][ T29] audit: type=1326 audit(1759917124.839:4465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7505 comm="syz.5.1098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f60427eeec9 code=0x7ffc0000 [ 130.073600][ T29] audit: type=1326 audit(1759917124.839:4466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7505 comm="syz.5.1098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60427eeec9 code=0x7ffc0000 [ 130.097048][ T29] audit: type=1326 audit(1759917124.839:4467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7505 comm="syz.5.1098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60427eeec9 code=0x7ffc0000 [ 130.120499][ T29] audit: type=1326 audit(1759917124.839:4468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7505 comm="syz.5.1098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f60427f0de7 code=0x7ffc0000 [ 130.143953][ T29] audit: type=1326 audit(1759917124.839:4469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7505 comm="syz.5.1098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f60427f0d5c code=0x7ffc0000 [ 130.167313][ T29] audit: type=1326 audit(1759917124.859:4470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7505 comm="syz.5.1098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f60427f0c94 code=0x7ffc0000 [ 130.190666][ T29] audit: type=1326 audit(1759917124.859:4471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7505 comm="syz.5.1098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f60427edb2a code=0x7ffc0000 [ 130.214043][ T29] audit: type=1326 audit(1759917124.859:4472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7505 comm="syz.5.1098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60427eeec9 code=0x7ffc0000 [ 130.293078][ T7518] loop5: detected capacity change from 0 to 512 [ 130.299784][ T7518] EXT4-fs: dax option not supported [ 130.347546][ T7527] loop1: detected capacity change from 0 to 512 [ 130.355895][ T7527] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 130.364087][ T7527] EXT4-fs (loop1): orphan cleanup on readonly fs [ 130.373793][ T7531] loop4: detected capacity change from 0 to 512 [ 130.380611][ T7531] EXT4-fs: dax option not supported [ 130.465280][ T7527] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.1106: Failed to acquire dquot type 1 [ 130.477482][ T7527] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1106: bg 0: block 40: padding at end of block bitmap is not set [ 130.493485][ T7527] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 130.506715][ T7527] EXT4-fs (loop1): 1 truncate cleaned up [ 130.513033][ T7527] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 130.547330][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.599189][ T7535] lo speed is unknown, defaulting to 1000 [ 131.262330][ T7555] loop5: detected capacity change from 0 to 512 [ 131.283126][ T7555] journal_path: Non-blockdev passed as './bus' [ 131.289366][ T7555] EXT4-fs: error: could not find journal device path [ 131.459568][ T7558] loop4: detected capacity change from 0 to 8192 [ 131.513303][ T7558] loop4: p1 p2 p3 p4[EZD] [ 131.517837][ T7558] loop4: p1 size 16128 extends beyond EOD, truncated [ 131.549435][ T7558] loop4: p3 start 458783 is beyond EOD, truncated [ 131.556038][ T7558] loop4: p4 size 65536 extends beyond EOD, truncated [ 131.833369][ T7601] loop4: detected capacity change from 0 to 512 [ 131.839949][ T7601] journal_path: Non-blockdev passed as './bus' [ 131.846186][ T7601] EXT4-fs: error: could not find journal device path [ 131.911994][ T7611] netlink: 'syz.3.1140': attribute type 4 has an invalid length. [ 131.923453][ T7611] netlink: 'syz.3.1140': attribute type 4 has an invalid length. [ 131.998474][ T7612] loop4: detected capacity change from 0 to 128 [ 132.035447][ T7612] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 132.124150][ T7635] loop3: detected capacity change from 0 to 512 [ 132.130870][ T7635] journal_path: Non-blockdev passed as './bus' [ 132.137074][ T7635] EXT4-fs: error: could not find journal device path [ 132.146277][ T7612] ext4 filesystem being mounted at /205/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 132.199570][ T7640] netlink: 'syz.2.1149': attribute type 1 has an invalid length. [ 132.210465][ T3326] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 132.238587][ T7642] loop3: detected capacity change from 0 to 1024 [ 132.335675][ T7649] loop3: detected capacity change from 0 to 764 [ 132.506605][ T7666] loop3: detected capacity change from 0 to 512 [ 132.513383][ T7666] journal_path: Non-blockdev passed as './bus' [ 132.519764][ T7666] EXT4-fs: error: could not find journal device path [ 132.576103][ T7673] loop3: detected capacity change from 0 to 512 [ 132.582673][ T7673] journal_path: Non-blockdev passed as './bus' [ 132.588874][ T7673] EXT4-fs: error: could not find journal device path [ 132.622186][ T7677] loop3: detected capacity change from 0 to 764 [ 132.637072][ T7679] loop5: detected capacity change from 0 to 512 [ 132.644050][ T7679] journal_path: Non-blockdev passed as './bus' [ 132.650341][ T7679] EXT4-fs: error: could not find journal device path [ 132.676455][ T7684] FAULT_INJECTION: forcing a failure. [ 132.676455][ T7684] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 132.689759][ T7684] CPU: 1 UID: 0 PID: 7684 Comm: syz.5.1169 Not tainted syzkaller #0 PREEMPT(voluntary) [ 132.689795][ T7684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 132.689821][ T7684] Call Trace: [ 132.689830][ T7684] [ 132.689839][ T7684] __dump_stack+0x1d/0x30 [ 132.689881][ T7684] dump_stack_lvl+0xe8/0x140 [ 132.689952][ T7684] dump_stack+0x15/0x1b [ 132.689972][ T7684] should_fail_ex+0x265/0x280 [ 132.690054][ T7684] should_fail+0xb/0x20 [ 132.690111][ T7684] should_fail_usercopy+0x1a/0x20 [ 132.690134][ T7684] _copy_from_user+0x1c/0xb0 [ 132.690162][ T7684] __sys_sendto+0x19e/0x330 [ 132.690208][ T7684] __x64_sys_sendto+0x76/0x90 [ 132.690241][ T7684] x64_sys_call+0x2d14/0x3000 [ 132.690267][ T7684] do_syscall_64+0xd2/0x200 [ 132.690343][ T7684] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 132.690376][ T7684] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 132.690593][ T7684] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.690613][ T7684] RIP: 0033:0x7f60427f0d5c [ 132.690633][ T7684] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 132.690649][ T7684] RSP: 002b:00007f604124dec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 132.690666][ T7684] RAX: ffffffffffffffda RBX: 00007f604124dfc0 RCX: 00007f60427f0d5c [ 132.690736][ T7684] RDX: 0000000000000020 RSI: 00007f604124e010 RDI: 0000000000000003 [ 132.690747][ T7684] RBP: 0000000000000000 R08: 00007f604124df14 R09: 000000000000000c [ 132.690758][ T7684] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 132.690768][ T7684] R13: 00007f604124df68 R14: 00007f604124e010 R15: 0000000000000000 [ 132.690786][ T7684] [ 132.933098][ T7694] loop5: detected capacity change from 0 to 512 [ 132.939925][ T7694] journal_path: Non-blockdev passed as './bus' [ 132.946195][ T7694] EXT4-fs: error: could not find journal device path [ 132.964046][ T7699] loop1: detected capacity change from 0 to 512 [ 132.979703][ T7704] loop5: detected capacity change from 0 to 512 [ 132.988199][ T7704] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 133.000386][ T7704] EXT4-fs (loop5): orphan cleanup on readonly fs [ 133.005032][ T7708] loop1: detected capacity change from 0 to 512 [ 133.013153][ T7704] EXT4-fs error (device loop5): ext4_acquire_dquot:6945: comm syz.5.1177: Failed to acquire dquot type 1 [ 133.013648][ T7704] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1177: bg 0: block 40: padding at end of block bitmap is not set [ 133.039188][ T7704] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 133.049053][ T7704] EXT4-fs (loop5): 1 truncate cleaned up [ 133.066426][ T7712] loop2: detected capacity change from 0 to 764 [ 133.073318][ T7704] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 133.073447][ T7704] ================================================================== [ 133.073478][ T7704] BUG: KCSAN: data-race in data_push_tail / vsnprintf [ 133.073510][ T7704] [ 133.073517][ T7704] write to 0xffffffff88e336c8 of 46 bytes by task 7712 on cpu 0: [ 133.073535][ T7704] vsnprintf+0x2ce/0x890 [ 133.073563][ T7704] vscnprintf+0x41/0x90 [ 133.073591][ T7704] printk_sprint+0x30/0x2d0 [ 133.073620][ T7704] vprintk_store+0x599/0x860 [ 133.073641][ T7704] vprintk_emit+0x10d/0x580 [ 133.073662][ T7704] vprintk_default+0x26/0x30 [ 133.073684][ T7704] vprintk+0x1d/0x30 [ 133.073712][ T7704] _printk+0x79/0xa0 [ 133.073740][ T7704] isofs_fill_super+0x1253/0x1270 [ 133.073760][ T7704] get_tree_bdev_flags+0x291/0x300 [ 133.073784][ T7704] get_tree_bdev+0x1f/0x30 [ 133.073807][ T7704] isofs_get_tree+0x1c/0x30 [ 133.073827][ T7704] vfs_get_tree+0x54/0x1d0 [ 133.073850][ T7704] do_new_mount+0x24d/0x660 [ 133.073873][ T7704] path_mount+0x4a5/0xb70 [ 133.073892][ T7704] __se_sys_mount+0x28c/0x2e0 [ 133.073914][ T7704] __x64_sys_mount+0x67/0x80 [ 133.073936][ T7704] x64_sys_call+0x2b51/0x3000 [ 133.073958][ T7704] do_syscall_64+0xd2/0x200 [ 133.073980][ T7704] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.074002][ T7704] [ 133.074009][ T7704] read to 0xffffffff88e336e0 of 8 bytes by task 7704 on cpu 1: [ 133.074026][ T7704] data_push_tail+0xfd/0x420 [ 133.074045][ T7704] data_alloc+0xfb/0x2e0 [ 133.074076][ T7704] prb_reserve+0x807/0xaf0 [ 133.074093][ T7704] vprintk_store+0x56d/0x860 [ 133.074113][ T7704] vprintk_emit+0x10d/0x580 [ 133.074134][ T7704] vprintk_default+0x26/0x30 [ 133.074155][ T7704] vprintk+0x1d/0x30 [ 133.074182][ T7704] _printk+0x79/0xa0 [ 133.074210][ T7704] __ext4_msg+0x18f/0x1a0 [ 133.074228][ T7704] ext4_fill_super+0x2fcb/0x3810 [ 133.074247][ T7704] get_tree_bdev_flags+0x291/0x300 [ 133.074271][ T7704] get_tree_bdev+0x1f/0x30 [ 133.074292][ T7704] ext4_get_tree+0x1c/0x30 [ 133.074325][ T7704] vfs_get_tree+0x54/0x1d0 [ 133.074347][ T7704] do_new_mount+0x24d/0x660 [ 133.074367][ T7704] path_mount+0x4a5/0xb70 [ 133.074387][ T7704] __se_sys_mount+0x28c/0x2e0 [ 133.074408][ T7704] __x64_sys_mount+0x67/0x80 [ 133.074430][ T7704] x64_sys_call+0x2b51/0x3000 [ 133.074452][ T7704] do_syscall_64+0xd2/0x200 [ 133.074474][ T7704] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.074496][ T7704] [ 133.074501][ T7704] value changed: 0x00000000ffffe3ab -> 0x4a2074666f736f72 [ 133.074514][ T7704] [ 133.074519][ T7704] Reported by Kernel Concurrency Sanitizer on: [ 133.074531][ T7704] CPU: 1 UID: 0 PID: 7704 Comm: syz.5.1177 Not tainted syzkaller #0 PREEMPT(voluntary) [ 133.074557][ T7704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 133.074571][ T7704] ================================================================== [ 133.091362][ T7708] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 133.363658][ T7708] EXT4-fs (loop1): orphan cleanup on readonly fs [ 133.363901][ T4803] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.383095][ T7708] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.1178: Failed to acquire dquot type 1 [ 133.394994][ T7708] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1178: bg 0: block 40: padding at end of block bitmap is not set [ 133.409621][ T7708] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 133.419162][ T7708] EXT4-fs (loop1): 1 truncate cleaned up [ 133.425307][ T7708] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 133.457364][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.