last executing test programs: 5.513199839s ago: executing program 1 (id=110): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)}) r0 = gettid() read$ptp(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(r2, &(0x7f0000000000)='map_files\x00') mq_notify(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x35, 0x0, @thr={&(0x7f0000001200)="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", &(0x7f0000002600)="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"}}) timer_settime(r1, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') dup(0xffffffffffffffff) chmod(&(0x7f0000000000)='./file0\x00', 0x60) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x53) modify_ldt$write(0x1, &(0x7f0000000040)={0x806, 0x100000}, 0x10) 5.113353288s ago: executing program 1 (id=114): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)}) r0 = gettid() r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) read$ptp(r1, 0x0, 0x0) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r0}, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(r2, &(0x7f0000000000)='map_files\x00') mq_notify(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x35, 0x0, @thr={&(0x7f0000001200)="a0805dcdcd391a1e0932e821ac3f5e9a994a653ec20be0b3ee9e182f8b4f715597aff7765063d7ffffffffffffffff51ab98d07a417b2cc7521714c0511cda3960585fabff36308c145220b6375ba8f0c83a910947ca53801b80197ea567df00e334383e3efd413fd34d219972f5c7167d05d49a8d2b31546727b8921015236c567b882f1bbce1eef2ac0244776ff9d1891d652aa91917a449590559b052761d0aea498b5db8e5be56ecc118b0abc92e52af30af55c1ab7ebe80e58b21a63d7fa33d0869343381dd74c0b7ab41e0253060568ac41ccdee2f69293fa3eba9cfbc768dcf99ee29d87aeb555cf6ee16428c1e049ecc79f1b9478b095a81488845143743dbc38f69d9598b7995e8ad3246e829af799c773e32bab304d2708c6c430c75af9dee15eb95e352b3eb89eb5588463ca7ffa7cff7d713779fb571df4666587e806c19554f390500216ffc493a67bdd2b5d20ae75973cc5b9e494979e9c413b17088e035", &(0x7f0000002600)="b828d3f4e7585aa8f936c7722540dcde48f06225f3b385bd1f04747009e5f544b093850e9d88d97e99a4e449f9ab0c8ead0f8ca3ae5ba196bc3bd82a2bc4d4274c2b2f6343cf9e9d1ea0b0ed5c9ee62aa2410ca4cdc1c8d4918ae6384d3c3105f8f4025a236e61382a5664638a5393c5f29541c382171b3de48cd19a11d26cc81144a491b1391d653e3499712d30c08dd2cd019e21d078a6f346e7a780d902183417b3e8036d60fd944d4e21a9682593c87f87c0900c7e990a993cc99afbefd7eb051a0709e6d02e9403c15469613a2e36ae6b5853928ad1d2271a6d70dd4ac1fe6849ea294583e4fdbc6d8963757a38bedca39b765531e6eee67116b9505fcc9dd205d1ba2063ab7710b145b37640fb7875dff7a4ba49ebb5fd50d7f7a64d3e5508184e3977f569e4de590a45bc31dc8e14269e0692899c04693406e3451f3bfe63abe3a9dec091c749eb3282b5d24ccab54fc49e4d5ece445202636171b69fc0b5c43502e49bdea5010605c942b15ff8cacbfbd0fa5d6a150dd87ebf5c4a6145b25ff8b4a72d1b4daed7c7b8aa17ba7ade826ae478cd0d0d5c7d178e451c875b191ae06ccfdd2092f3d40b81646ea1401024d0adc679ece45e763721db173d0a8b63d08161d13e67433aecceae2d33f2f44f1e65849b12f5ace7577c6714ea9c848b1a2f4ecf025bbd950e9529a24d1ec280dab86c574ed1cc36e304b3ef8493e632f75312847a85abbd6afed204f6bfab2d1df7f8c6325badd80a097b4b9b5703a3add281b1887d2b5054975547bd965221d1fb3d7e6c843b9a241cfcf936a78392b42fda840d720e4d7a52bcdcd76b9b5520a0b6f7aa41bc47d19f3bf91e79044239089d01c99033fb5fe0783ba01a92f9d3b22132200aa395bca2194056d5555142e5"}}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') dup(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x500, &(0x7f0000000380)={[{@errors_remount}, {@discard}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5e}}, {@noauto_da_alloc}, {@bsdgroups}, {@jqfmt_vfsv1}, {@abort}, {@data_err_ignore}]}, 0x1, 0x476, &(0x7f0000000540)="$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") chmod(&(0x7f0000000000)='./file0\x00', 0x60) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x53) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600"], 0x48) modify_ldt$write(0x1, &(0x7f0000000040)={0x806, 0x100000}, 0x10) 4.189956709s ago: executing program 1 (id=121): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) creat(&(0x7f00000021c0)='./cgroup.net/devices.allow\x00', 0xc1) io_setup(0x206, &(0x7f0000000200)=0x0) io_submit(r0, 0x0, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x8050) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x4e20, 0xffff7ffc, @loopback, 0x7}, 0x1c) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000340)=@ccm_128={{0x303}, "2b0a98cd38e4858b", "6974ed32e0516fc5d681563729540a5b", "af996a00", "328773e03db7fa47"}, 0x28) write$binfmt_script(r2, &(0x7f00000002c0)={'#! ', './file0'}, 0xb) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f00000004c0)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000140)=0x40) writev(r2, &(0x7f0000000240)=[{&(0x7f0000000380)="aa", 0x1}], 0x1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$packet(r1, 0x0, 0x0, 0x40008c1, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.988303439s ago: executing program 3 (id=122): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) syz_read_part_table(0x106b, &(0x7f0000002280)="$eJzsz7FJxkAcxuH3ckm8YOcCrmFpEbCxVNzFRgVHcALBxspaN3ALV8gCEQNxBP2K5+nux8vBP/yrqWsnb8nZY31KS3Kf5GZIUscxSfkdfnxe/jyG56UdpdSc91te319u91FN+ovlKsN6V77Wbmtlntr+xXycpHs4rXuo169/eCoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHKzvAAAA//8EGhD+") 3.632750754s ago: executing program 4 (id=125): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r0, &(0x7f0000000280)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={&(0x7f0000000780)={0x228, r1, 0x100, 0x70bd27, 0x25dfdbfe, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x8}, {0x6, 0x16, 0x6}, {0x5}, {0x6, 0x11, 0x1b}, {0x8, 0xb, 0x9}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x6}, {0x6, 0x16, 0x7ff}, {0x5}, {0x6, 0x11, 0x401}, {0x8, 0xb, 0x80000000}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8}, {0x6, 0x16, 0x6}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x7f71}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x81}, {0x6, 0x16, 0xc}, {0x5}, {0x6, 0x11, 0x8}, {0x8, 0xb, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x3}, {0x6, 0x16, 0x3}, {0x5}, {0x6, 0x11, 0x8}, {0x8, 0xb, 0x7fff}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x1}, {0x6, 0x16, 0x7}, {0x5}, {0x6, 0x11, 0x2}, {0x8, 0xb, 0x7}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xff}, {0x6, 0x16, 0x85}, {0x5}, {0x6, 0x11, 0xb}, {0x8, 0xb, 0x8}}]}, 0x228}, 0x1, 0x0, 0x0, 0x41}, 0x24000000) r2 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r3 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x42718, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x6}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0xc, 0x0, 0x7ffc0002}]}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x0) fadvise64(r5, 0x7f, 0x1000000, 0x2) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180200002343ffff0000000000000000850000004100000095"], &(0x7f00000000c0)='GPL\x00'}, 0x4e) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001580)={r7, r8, 0x25, 0x2, @val=@netkit}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[], 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c0000001300010000000002000000000000730b", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4, @ANYBLOB="1400350064756d6d7930"], 0x3c}}, 0x0) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='nodots,allow_utime=000000000034,usefree,check=strict,dots,\x00'/70], 0x1, 0x1f8, &(0x7f0000000580)="$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") syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') openat$binfmt(0xffffffffffffff9c, r2, 0x42, 0x1ff) 3.551800642s ago: executing program 3 (id=126): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$BTRFS_IOC_QGROUP_LIMIT(r1, 0x8030942b, &(0x7f0000000600)={0x756, {0x20, 0xc743, 0x7, 0x3ff, 0x3}}) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, &(0x7f0000000640)=0x16, 0x4) syz_open_dev$usbfs(&(0x7f0000000680), 0xfcba, 0xc00) r2 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f00000006c0), 0x1, 0x0) write$selinux_validatetrans(r2, &(0x7f0000000700)={'system_u:object_r:scanner_device_t:s0', 0x20, 'system_u:object_r:audit_spool_t:s0', 0x20, 0x3, 0x20, 'unconfined_u:system_r:insmod_t:s0-s0:c0.c1023\x00'}, 0x8c) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000007c0)={0x0, 0x1}, &(0x7f0000000800)=0x8) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000840)={r3, 0x1}, &(0x7f0000000880)=0x8) fcntl$setpipe(r1, 0x407, 0xa5) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f00000008c0)) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000900)={r3, 0x9, 0x2, 0x80000000}, 0x10) r5 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), r0) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r5, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x38, r6, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x38}}, 0x0) r7 = getpgrp(0x0) r8 = getpgrp(0x0) r9 = gettid() ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000c00)={'\x00', 0x7, 0x71, 0x58, 0x5b3, 0x200, 0x0}) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000c80)={'\x00', 0x40, 0x1, 0x2e, 0x100000001, 0x1, 0xffffffffffffffff}) syz_clone3(&(0x7f0000000d40)={0x4020080, &(0x7f0000000ac0), &(0x7f0000000b00), &(0x7f0000000b40), {0x2c}, &(0x7f0000000b80)=""/39, 0x27, &(0x7f0000000bc0)=""/24, &(0x7f0000000d00)=[0xffffffffffffffff, r7, r8, r9, r10, r11], 0x6, {r4}}, 0x58) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000dc0)={r3, 0x1}, 0x8) r12 = syz_init_net_socket$llc(0x1a, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r12, 0x8982, &(0x7f0000000e00)) r13 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r13, 0x11b, 0x4, &(0x7f0000000e80)={&(0x7f0000000e40)=""/24, 0x230000, 0x1800, 0xee, 0x1}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000ec0)) 3.434793833s ago: executing program 3 (id=127): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0, 0x0, 0x7}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b40500000000fd8f711075000000000072050200000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) gettid() timer_create(0x0, 0x0, &(0x7f0000000300)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008000000182300", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000007800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x18, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) symlink(&(0x7f00000003c0)='./file0/file0/..\x00', &(0x7f0000000240)='./file1\x00') 3.145155822s ago: executing program 4 (id=128): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000080)={[{@bsdgroups}]}, 0xfc, 0x574, &(0x7f0000001980)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0xf, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r0, &(0x7f0000000000), 0xfffffd26) 2.622254383s ago: executing program 0 (id=131): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)}) r0 = gettid() r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) read$ptp(r1, 0x0, 0x0) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r0}, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(r2, &(0x7f0000000000)='map_files\x00') mq_notify(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x35, 0x0, @thr={&(0x7f0000001200)="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", &(0x7f0000002600)="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"}}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') dup(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x500, &(0x7f0000000380)={[{@errors_remount}, {@discard}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5e}}, {@noauto_da_alloc}, {@bsdgroups}, {@jqfmt_vfsv1}, {@abort}, {@data_err_ignore}]}, 0x1, 0x476, &(0x7f0000000540)="$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") chmod(&(0x7f0000000000)='./file0\x00', 0x60) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x53) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600"], 0x48) modify_ldt$write(0x1, &(0x7f0000000040)={0x806, 0x100000}, 0x10) 1.901396994s ago: executing program 3 (id=132): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000000000f6000000006debff00850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) openat$ptp0(0xffffffffffffff9c, 0x0, 0x88000, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="1900000004"], 0x48) r2 = syz_open_dev$vcsa(&(0x7f0000000000), 0xf69, 0x4040) ioctl$TUNSETOFFLOAD(r2, 0x541b, 0xf0ff1f00000002) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r1}, &(0x7f0000000000), &(0x7f00000005c0)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) mincore(&(0x7f0000ff5000/0x4000)=nil, 0x4000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000818"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$vsock_stream(0x28, 0x1, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="09000000070000000000010003"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00'}, 0x18) listen(r3, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) writev(r5, &(0x7f0000000080)=[{&(0x7f00000001c0)='?', 0x1}], 0x1) r6 = accept4$unix(r3, 0x0, 0x0, 0x0) recvmsg(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000480)=""/68, 0x44}], 0x1}, 0x4c2103a0) r7 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x32) write(r7, &(0x7f00000001c0)="49bda8f11851b8436bebb25ac5f8202ffbcc3d0b6c01", 0x16) sendfile(r7, r0, 0x0, 0x3ffff) sendfile(r7, r0, 0x0, 0x7ffffffffffffffd) epoll_create(0x80f04) socket$nl_route(0x10, 0x3, 0x0) 1.859486718s ago: executing program 4 (id=133): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x50) prlimit64(0x0, 0xe, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20040040) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00'}, 0x10) sendmsg$NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x14, &(0x7f0000000580)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000660800000400010118000000000000000000000000000000950000000000000018260000", @ANYRES32=r0, @ANYBLOB="0000000040000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a0000fdffffff85000000060000fe24009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000510700140000000000000001b7080000000000007b8af8ff00000000b7080000fcffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) syz_clone(0xa1000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x1a00404, &(0x7f0000000080)={[{@grpquota}, {@nomblk_io_submit}]}, 0x1, 0xbac, &(0x7f00000017c0)="$eJzs3M1rXOUaAPDnnEy+c5v0crn3tggGpCqK07QpFbpqXYsKunDZmExKyPTDJIIJXaR1ry5EXBSkf4Lg3m5cCS7qQutfUMQiRTdtFyNnPtKxk5nGdGaOSX8/eHPe97wn8zxPTmfOe2BOA3hqTWc/0ohDEXE2iZis708jYqjaG4nYrB13/+7l+awlUam8/VsSSUTcu3t5vvFaSX07Xh+MRMTN15L490etcVfXN5bnyuXSSn18dO38paOr6xuvLJ2fO1c6V7pwYvbVE7MnZ2e7WOvtS+998cwPbzx/9frHM29+fuC7JE7HRH2uuY5umY7prb9Js0JEzHU7WE4G6vU015kUckwIAICO0qY13H9jMgbi4eJtMr79MdfkAAAAgK6oDERUAAAAgH0ucf8PAAAA+1zjewD37l6eb7R8v5HQX3fORMRUrf7G8821mUJsVrcjMRgRY78n0fxYa1L7tSc2nUX6+vtS1qJHzyF3snklIv6/3flPqvVPVZ/ibq0/jYiZLsSffmS8l+o/3YX4edcPwNPpxpnahaz1+pdurX9im+tfYZtr127kff1rrP/ut6z/HtY/0Gb999YOYxx+8NLNdnPN6793P/l5IYufbZ+oqL/hzpWIw4Xt6k+26k/a1H92hzHG529fazeX1Z/V22j9rr9yPeJIdTXXWn9D0un/Jzq6uFQuzdR+bvP66yc7x28+/1nL4jfuBfohO/9jsbvzf2mHMab+9+uhdnOPrz/9ZSh5p9obqu/5cG5tbeVYxFDyeuv+451zaRzTeI2s/hef6/z+367+7DNhs/53yP71XKlvs/HVR2KOHzn+1e7r762s/oVdnv9Pdxjjy2+uvd9uLu/6AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANgb0oiYiCQtbvXTtFiMGI+I/8RYWr64uvby4sUPLixkcxFTMZguLpVLMxExWRsn2fhYtf9wfPyR8WxEHIyIzyZHq+Pi/MXyQt7FAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsGU8IiYiSYsRkUbEH5NpWizmnRUAAADQdVN5JwAAAAD0nPt/AAAA2P9a7v8LfxmN9DMXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9qWDz964lUTE5qnRassM1ecGc80M6LV0Z4eN9ToPoP8G8k4AyE2hqV+pVCo5pgL0mXt8IHnM/EjbmeGu5wIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAP9cLh27cSiJi89RotWWG6nODuWYG9FqadwJAbgY6TSaP3QHsYYW8EwBy4x4fqK3sH1RqWudH2v7m8BNHBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGDvmKi2JC1GRFrtp2mxGPGviJiKwWRxqVyaiYgDEfHT5OBwNj6Wd9IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB03er6xvJcuVxa0dHR6WJnNPoWa7T+Zm5zzHD7qQ6dnD+YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADIxer6xvJcuVxaWc07EwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACBvq+sby3Plcmmlh528awQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID9/BgAA///GyAmy") bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x1c9441, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x6, &(0x7f0000000000)=0x9, 0x8, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r4 = creat(&(0x7f0000000140)='./bus\x00', 0xc) write$cgroup_int(r4, &(0x7f0000000540), 0xfffffdd8) getrandom(&(0x7f0000000380)=""/125, 0x7d, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000001240), 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1b0000000000000000000000ff03000000000000", @ANYRES32=r3, @ANYBLOB="00000000000000000000b280ba27d068664832b8", @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="040000000300"/28], 0x50) 1.670006366s ago: executing program 1 (id=134): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)}) r0 = gettid() r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) read$ptp(r1, 0x0, 0x0) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(r3, &(0x7f0000000000)='map_files\x00') mq_notify(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x35, 0x0, @thr={0x0, &(0x7f0000002600)="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"}}) timer_settime(r2, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') dup(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x500, &(0x7f0000000380)={[{@errors_remount}, {@discard}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5e}}, {@noauto_da_alloc}, {@bsdgroups}, {@jqfmt_vfsv1}, {@abort}, {@data_err_ignore}]}, 0x1, 0x476, &(0x7f0000000540)="$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") chmod(&(0x7f0000000000)='./file0\x00', 0x60) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x53) memfd_create(&(0x7f0000000ac0)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0, &(0x7f0000000300)=0x0) r4 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r4, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x0, @loopback}], 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r1, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x183000, 0x23456}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x7}, 0x18) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x1}}, 0x20) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000009c0), 0x0, 0x5}, 0x38) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x4bfa, &(0x7f0000000240)={0x19, 0x3d24, 0x1575, 0x0, 0x0, 0xfffe}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r5, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYBLOB="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", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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") r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r5, &(0x7f00000008c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="dc0000000d0a01020000000000000000000000090800044000000002a0000380900000807c000280250001000ce155480c60d5febb3cd17ae7608b1da163dccc3281c4e06fcec889e182b862720000004f00010084a18c712ab1c0df17902e0f9f86ccc20aba1eb4166b262469201a9affac1b38c7e3f13ada132afd8374ecfc279545ecd241cd483e2b86c46d85ddf45b2070c3f06c68f17ff0cfcac8ff4800100007800c0001006e6f747261636b000c000080080003400000000208000440000000030900010073797a30000000000900020073797a3200000000"], 0xdc}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="8000000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000024000280140001800800010000000000080002007f0000010c00028005000100000000000800074000000000080003400000100e140005"], 0x80}}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000a00)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000009c0)={0xffffffffffffffff}, 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r5, &(0x7f0000000a40)={0xb, 0x10, 0xfa00, {&(0x7f0000000900), r7, 0xffffff8e}}, 0x18) 220.524979ms ago: executing program 2 (id=149): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) r3 = perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x4}, 0x40dd, 0x0, 0x4, 0x9, 0xa, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f00000003c0)='cpu~=0||!') r4 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendmmsg$inet6(r4, &(0x7f0000000900)=[{{&(0x7f00000003c0)={0xa, 0x4e22, 0x1ff, @private0, 0x401}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000980)='s', 0x1}], 0x1}}], 0x1, 0x40) shutdown(r4, 0x1) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000000240)=[@in6={0xa, 0x4e24, 0x99, @mcast2, 0xad2}, @in6={0xa, 0x4e20, 0xe81, @local, 0x100009}, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e23, 0xfffff000, @private1={0xfc, 0x1, '\x00', 0x1}, 0x5}], 0x64) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r5}, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r6}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xd, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$inet6(0xa, 0x80002, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2a8, 0x0, 0x940c, 0x3002, 0x0, 0x2c0, 0x328, 0x3d8, 0x3d8, 0x328, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0, 0x4001}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x1, 0xbe, {0x565159d7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x60) ptrace(0x10, r7) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x60, r11, 0x1, 0x70bd28, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @private=0xa010101}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x0, @loopback, 0x5}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x60}}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000400)={@multicast, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "001200", 0x18, 0x0, 0x0, @private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {[@routing={0x5e, 0x2, 0x2, 0x0, 0x0, [@mcast1]}]}}}}}, 0x0) 178.949723ms ago: executing program 0 (id=150): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000002d80)={0x0, 0x0, &(0x7f0000002d40)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000020301020000000000000000000000000900020000000047020000000800034000000000080001"], 0x30}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x12, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0xfffffea4, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r0, &(0x7f0000000180)="bd2191d2a65d02aa13ede03e90c413776c91b17e28c4b6f14b4825c10be1dec1b7c8c6b62904111283293c0b1a24f90e21ae3310096b217d61245bdbce1cfd6d285faee9406e08b873174a11687497f73cc6c65a2f6a2353e67246b79ddfcf4b889edbe39ce7cc891fcb98c6a08448bb1548e66c866a39ec0cde341e4284d88d5a48d17f5ca60a6fba720b7047bb468f875fb481fcebb57368b313453c7278b5b9c8b2c613365ecf46ddc54318aae2d317e8ee60b349da10f9391fdeb1c5b201a7a2efe92149313ca2d986220183dec23d71f07498748f8ef148d04b4015258d022c05709f547882cf1cc1ea68b4546fd6eb2442251f6dcd", &(0x7f0000000280)=@tcp=r0, 0x2}, 0x20) bpf$MAP_CREATE(0x0, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000100), 0x2, 0x4fd, &(0x7f0000000b00)="$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") fchownat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xee01, 0xee01, 0x1000) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)={0x0, @remote, @initdev}, &(0x7f0000000080)=0xc) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r2}, 0x10) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) open_tree(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x8100) umount2(&(0x7f0000000040)='.\x00', 0x2) 46.431436ms ago: executing program 2 (id=151): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000000000f6000000006debff00850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) openat$ptp0(0xffffffffffffff9c, 0x0, 0x88000, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="1900000004"], 0x48) r2 = syz_open_dev$vcsa(&(0x7f0000000000), 0xf69, 0x4040) ioctl$TUNSETOFFLOAD(r2, 0x541b, 0xf0ff1f00000002) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r1}, &(0x7f0000000000), &(0x7f00000005c0)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) mincore(&(0x7f0000ff5000/0x4000)=nil, 0x4000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000818"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$vsock_stream(0x28, 0x1, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="09000000070000000000010003"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00'}, 0x18) listen(r3, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) writev(r5, &(0x7f0000000080)=[{&(0x7f00000001c0)='?', 0x1}], 0x1) r6 = accept4$unix(r3, 0x0, 0x0, 0x0) recvmsg(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000480)=""/68, 0x44}], 0x1}, 0x4c2103a0) r7 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x32) write(r7, &(0x7f00000001c0)="49bda8f11851b8436bebb25ac5f8202ffbcc3d0b6c01", 0x16) sendfile(r7, r0, 0x0, 0x3ffff) sendfile(r7, r0, 0x0, 0x7ffffffffffffffd) epoll_create(0x80f04) socket$nl_route(0x10, 0x3, 0x0) 18.930329ms ago: executing program 1 (id=152): r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r1}, 0x18) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0x1, 0x120d, &(0x7f0000001280)="$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") r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x2, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = memfd_secret(0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={r4, r3, 0x2e, 0x4608, @void}, 0x10) ioctl$BTRFS_IOC_SYNC(r3, 0x9408, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r7, 0x0, r9, 0x0, 0x8000f28, 0x0) splice(r8, 0x0, r7, 0x0, 0x7f, 0xe) write(r6, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x4012831, 0xffffffffffffffff, 0x0) r10 = syz_open_procfs(0x0, &(0x7f0000000580)='smaps_rollup\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) lseek(r10, 0x2004, 0x0) socket(0x40000000015, 0x5, 0x0) 0s ago: executing program 4 (id=153): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x50) prlimit64(0x0, 0xe, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20040040) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) sendmsg$NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="180800001bc80a000000000000000001851000000200000018000000", @ANYRES32, @ANYBLOB="0000000000000000660800000400010118000000000000000000000000000000950000000000000018260000", @ANYRES32=r0, @ANYBLOB="0000000040000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a0000fdffffff85000000060000fe24009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) syz_clone(0xa1000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x1a00404, &(0x7f0000000080)={[{@grpquota}, {@nomblk_io_submit}]}, 0x1, 0xbac, &(0x7f00000017c0)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x1c9441, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x6, &(0x7f0000000000)=0x9, 0x8, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r5 = creat(&(0x7f0000000140)='./bus\x00', 0xc) write$cgroup_int(r5, &(0x7f0000000540), 0xfffffdd8) getrandom(&(0x7f0000000380)=""/125, 0x7d, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f0000001240), 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1b0000000000000000000000ff03000000000000", @ANYRES32=r4, @ANYBLOB="00000000000000000000b280ba27d068664832b8", @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="040000000300"/28], 0x50) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.195' (ED25519) to the list of known hosts. [ 21.895480][ T29] audit: type=1400 audit(1761260562.114:62): avc: denied { mounton } for pid=3298 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 21.918405][ T29] audit: type=1400 audit(1761260562.134:63): avc: denied { mount } for pid=3298 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.919262][ T3298] cgroup: Unknown subsys name 'net' [ 21.945997][ T29] audit: type=1400 audit(1761260562.164:64): avc: denied { unmount } for pid=3298 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.039941][ T3298] cgroup: Unknown subsys name 'cpuset' [ 22.046056][ T3298] cgroup: Unknown subsys name 'rlimit' [ 22.214876][ T29] audit: type=1400 audit(1761260562.434:65): avc: denied { setattr } for pid=3298 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 22.239163][ T29] audit: type=1400 audit(1761260562.434:66): avc: denied { create } for pid=3298 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 22.259684][ T29] audit: type=1400 audit(1761260562.434:67): avc: denied { write } for pid=3298 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 22.280113][ T29] audit: type=1400 audit(1761260562.434:68): avc: denied { read } for pid=3298 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 22.300356][ T29] audit: type=1400 audit(1761260562.444:69): avc: denied { mounton } for pid=3298 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 22.306613][ T3303] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 22.325168][ T29] audit: type=1400 audit(1761260562.444:70): avc: denied { mount } for pid=3298 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 22.356917][ T29] audit: type=1400 audit(1761260562.554:71): avc: denied { relabelto } for pid=3303 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.396899][ T3298] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 23.554347][ T3316] chnl_net:caif_netlink_parms(): no params data found [ 23.564966][ T3313] chnl_net:caif_netlink_parms(): no params data found [ 23.580064][ T3312] chnl_net:caif_netlink_parms(): no params data found [ 23.615961][ T3321] chnl_net:caif_netlink_parms(): no params data found [ 23.676572][ T3313] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.683691][ T3313] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.690857][ T3313] bridge_slave_0: entered allmulticast mode [ 23.697119][ T3313] bridge_slave_0: entered promiscuous mode [ 23.715970][ T3313] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.723126][ T3313] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.730224][ T3313] bridge_slave_1: entered allmulticast mode [ 23.736480][ T3313] bridge_slave_1: entered promiscuous mode [ 23.746483][ T3316] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.753610][ T3316] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.760811][ T3316] bridge_slave_0: entered allmulticast mode [ 23.767010][ T3316] bridge_slave_0: entered promiscuous mode [ 23.787820][ T3316] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.794879][ T3316] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.802201][ T3316] bridge_slave_1: entered allmulticast mode [ 23.808574][ T3316] bridge_slave_1: entered promiscuous mode [ 23.829920][ T3312] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.836966][ T3312] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.844081][ T3312] bridge_slave_0: entered allmulticast mode [ 23.850361][ T3312] bridge_slave_0: entered promiscuous mode [ 23.856799][ T3312] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.863885][ T3312] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.871155][ T3312] bridge_slave_1: entered allmulticast mode [ 23.877550][ T3312] bridge_slave_1: entered promiscuous mode [ 23.890996][ T3321] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.898048][ T3321] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.905298][ T3321] bridge_slave_0: entered allmulticast mode [ 23.911703][ T3321] bridge_slave_0: entered promiscuous mode [ 23.919135][ T3313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 23.928192][ T3321] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.935254][ T3321] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.942361][ T3321] bridge_slave_1: entered allmulticast mode [ 23.948806][ T3321] bridge_slave_1: entered promiscuous mode [ 23.966810][ T3318] chnl_net:caif_netlink_parms(): no params data found [ 23.975895][ T3313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 23.990296][ T3312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 24.004802][ T3316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 24.021585][ T3312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 24.031512][ T3321] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 24.041379][ T3316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 24.067462][ T3321] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 24.086096][ T3313] team0: Port device team_slave_0 added [ 24.102488][ T3316] team0: Port device team_slave_0 added [ 24.108902][ T3313] team0: Port device team_slave_1 added [ 24.115167][ T3312] team0: Port device team_slave_0 added [ 24.121725][ T3312] team0: Port device team_slave_1 added [ 24.132221][ T3321] team0: Port device team_slave_0 added [ 24.138517][ T3321] team0: Port device team_slave_1 added [ 24.146938][ T3316] team0: Port device team_slave_1 added [ 24.184643][ T3321] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 24.191690][ T3321] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 24.217606][ T3321] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 24.236955][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 24.243955][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 24.269905][ T3313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 24.280945][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 24.287887][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 24.313954][ T3312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 24.324823][ T3321] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 24.331805][ T3321] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 24.357804][ T3321] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 24.376344][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 24.383319][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 24.409204][ T3316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 24.420210][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 24.427141][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 24.453125][ T3313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 24.463963][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 24.470980][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 24.496957][ T3312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 24.517162][ T3318] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.524418][ T3318] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.531584][ T3318] bridge_slave_0: entered allmulticast mode [ 24.537938][ T3318] bridge_slave_0: entered promiscuous mode [ 24.544418][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 24.551518][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 24.577454][ T3316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 24.605774][ T3318] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.612828][ T3318] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.620111][ T3318] bridge_slave_1: entered allmulticast mode [ 24.626426][ T3318] bridge_slave_1: entered promiscuous mode [ 24.647493][ T3321] hsr_slave_0: entered promiscuous mode [ 24.653714][ T3321] hsr_slave_1: entered promiscuous mode [ 24.674445][ T3312] hsr_slave_0: entered promiscuous mode [ 24.681807][ T3312] hsr_slave_1: entered promiscuous mode [ 24.687453][ T3312] debugfs: 'hsr0' already exists in 'hsr' [ 24.693183][ T3312] Cannot create hsr debugfs directory [ 24.709118][ T3313] hsr_slave_0: entered promiscuous mode [ 24.714921][ T3313] hsr_slave_1: entered promiscuous mode [ 24.720762][ T3313] debugfs: 'hsr0' already exists in 'hsr' [ 24.726467][ T3313] Cannot create hsr debugfs directory [ 24.733670][ T3318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 24.744956][ T3316] hsr_slave_0: entered promiscuous mode [ 24.751114][ T3316] hsr_slave_1: entered promiscuous mode [ 24.756793][ T3316] debugfs: 'hsr0' already exists in 'hsr' [ 24.762524][ T3316] Cannot create hsr debugfs directory [ 24.792410][ T3318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 24.848471][ T3318] team0: Port device team_slave_0 added [ 24.857075][ T3318] team0: Port device team_slave_1 added [ 24.899420][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 24.906366][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 24.932268][ T3318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 24.945233][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 24.952225][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 24.978163][ T3318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 25.052935][ T3318] hsr_slave_0: entered promiscuous mode [ 25.058974][ T3318] hsr_slave_1: entered promiscuous mode [ 25.064804][ T3318] debugfs: 'hsr0' already exists in 'hsr' [ 25.070527][ T3318] Cannot create hsr debugfs directory [ 25.090482][ T3313] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 25.106874][ T3313] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 25.117720][ T3313] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 25.128351][ T3313] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 25.159371][ T3321] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 25.190964][ T3321] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 25.199686][ T3321] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 25.210587][ T3321] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 25.226495][ T3312] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 25.241596][ T3312] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 25.252319][ T3312] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 25.271433][ T3312] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 25.284630][ T3316] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 25.295978][ T3313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 25.311722][ T3316] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 25.321204][ T3316] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 25.329896][ T3316] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 25.365893][ T3313] 8021q: adding VLAN 0 to HW filter on device team0 [ 25.378204][ T3318] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 25.387208][ T3318] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 25.400669][ T2298] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.407698][ T2298] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.415514][ T3318] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 25.424137][ T3318] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 25.446933][ T2298] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.454108][ T2298] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.481075][ T3321] 8021q: adding VLAN 0 to HW filter on device bond0 [ 25.504017][ T3321] 8021q: adding VLAN 0 to HW filter on device team0 [ 25.524137][ T3312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 25.532272][ T2298] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.539399][ T2298] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.547932][ T2298] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.554986][ T2298] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.578399][ T3312] 8021q: adding VLAN 0 to HW filter on device team0 [ 25.593338][ T3316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 25.610431][ T3318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 25.620690][ T3316] 8021q: adding VLAN 0 to HW filter on device team0 [ 25.631453][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.638492][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.647403][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.654542][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.669702][ T2298] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.676727][ T2298] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.685261][ T2298] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.692344][ T2298] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.704898][ T3318] 8021q: adding VLAN 0 to HW filter on device team0 [ 25.729266][ T3313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 25.747304][ T2406] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.754403][ T2406] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.788611][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.795793][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.818679][ T3321] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 25.838603][ T3312] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 25.873943][ T3316] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 25.941428][ T3312] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 25.977164][ T3321] veth0_vlan: entered promiscuous mode [ 25.993135][ T3321] veth1_vlan: entered promiscuous mode [ 26.007776][ T3318] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 26.033712][ T3321] veth0_macvtap: entered promiscuous mode [ 26.043452][ T3321] veth1_macvtap: entered promiscuous mode [ 26.051085][ T3313] veth0_vlan: entered promiscuous mode [ 26.068919][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 26.082513][ T3316] veth0_vlan: entered promiscuous mode [ 26.090705][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 26.100932][ T3316] veth1_vlan: entered promiscuous mode [ 26.114169][ T2406] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.125100][ T3313] veth1_vlan: entered promiscuous mode [ 26.134136][ T2406] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.146336][ T42] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.169764][ T42] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.182402][ T3316] veth0_macvtap: entered promiscuous mode [ 26.188934][ T3312] veth0_vlan: entered promiscuous mode [ 26.200456][ T3316] veth1_macvtap: entered promiscuous mode [ 26.212075][ T3313] veth0_macvtap: entered promiscuous mode [ 26.219752][ T3313] veth1_macvtap: entered promiscuous mode [ 26.219920][ T3321] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 26.227860][ T3312] veth1_vlan: entered promiscuous mode [ 26.253532][ T3318] veth0_vlan: entered promiscuous mode [ 26.261520][ T3318] veth1_vlan: entered promiscuous mode [ 26.274911][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 26.294741][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 26.306131][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 26.317670][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 26.328782][ T3318] veth0_macvtap: entered promiscuous mode [ 26.337468][ T2406] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.355623][ T2406] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.367100][ T3312] veth0_macvtap: entered promiscuous mode [ 26.374420][ T3312] veth1_macvtap: entered promiscuous mode [ 26.383669][ T3318] veth1_macvtap: entered promiscuous mode [ 26.392946][ T2406] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.408442][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 26.420948][ T2406] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.445230][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 26.455507][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 26.462833][ T2406] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.479638][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 26.494361][ T2406] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.537596][ T2406] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.570984][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.608627][ T3483] loop0: detected capacity change from 0 to 8192 [ 26.613275][ T3492] loop2: detected capacity change from 0 to 512 [ 26.644390][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.653991][ T3483] ======================================================= [ 26.653991][ T3483] WARNING: The mand mount option has been deprecated and [ 26.653991][ T3483] and is ignored by this kernel. Remove the mand [ 26.653991][ T3483] option from the mount to silence this warning. [ 26.653991][ T3483] ======================================================= [ 26.654626][ T3492] EXT4-fs: Ignoring removed bh option [ 26.695275][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.709863][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.718680][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.747713][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.772225][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.783709][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.800220][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.819545][ T3492] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 26.886545][ T3492] EXT4-fs (loop2): 1 truncate cleaned up [ 26.888372][ T3499] loop1: detected capacity change from 0 to 128 [ 26.923012][ T3492] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 26.979236][ T29] kauditd_printk_skb: 42 callbacks suppressed [ 26.979249][ T29] audit: type=1400 audit(1761260567.194:114): avc: denied { create } for pid=3498 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 27.133320][ T29] audit: type=1400 audit(1761260567.204:115): avc: denied { bind } for pid=3498 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 27.152435][ T29] audit: type=1400 audit(1761260567.204:116): avc: denied { listen } for pid=3498 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 27.171690][ T29] audit: type=1400 audit(1761260567.204:117): avc: denied { write } for pid=3498 comm="syz.1.2" path="socket:[4957]" dev="sockfs" ino=4957 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 27.194700][ T29] audit: type=1400 audit(1761260567.204:118): avc: denied { accept } for pid=3498 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 27.213927][ T29] audit: type=1400 audit(1761260567.204:119): avc: denied { mount } for pid=3489 comm="syz.2.3" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 27.235312][ T29] audit: type=1400 audit(1761260567.274:120): avc: denied { unmount } for pid=3321 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 27.261908][ T3509] loop4: detected capacity change from 0 to 4096 [ 27.292158][ T29] audit: type=1400 audit(1761260567.514:121): avc: denied { unmount } for pid=3316 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 27.296035][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 27.345223][ T3509] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 27.372435][ T29] audit: type=1400 audit(1761260567.584:122): avc: denied { add_name } for pid=3508 comm="syz.4.8" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 27.392938][ T29] audit: type=1400 audit(1761260567.584:123): avc: denied { create } for pid=3508 comm="syz.4.8" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 27.423217][ T3515] loop3: detected capacity change from 0 to 512 [ 27.432812][ T3515] EXT4-fs: Ignoring removed bh option [ 27.445241][ T3515] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 27.468909][ T3515] EXT4-fs (loop3): 1 truncate cleaned up [ 27.476896][ T3518] loop2: detected capacity change from 0 to 512 [ 27.484213][ T3515] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 27.497147][ T3518] EXT4-fs: Ignoring removed nobh option [ 27.523650][ T3518] EXT4-fs (loop2): can't mount with data=, fs mounted w/o journal [ 27.571359][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 27.573682][ T3518] netlink: 'syz.2.9': attribute type 3 has an invalid length. [ 27.614868][ T3518] loop2: detected capacity change from 0 to 512 [ 27.636579][ T3518] EXT4-fs: Ignoring removed mblk_io_submit option [ 27.658955][ T3518] EXT4-fs: Ignoring removed nomblk_io_submit option [ 27.686020][ T3518] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 27.694500][ T3518] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 27.743099][ T3518] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4193: comm syz.2.9: Allocating blocks 41-42 which overlap fs metadata [ 27.769066][ C1] hrtimer: interrupt took 17731 ns [ 27.776501][ T3518] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4193: comm syz.2.9: Allocating blocks 41-42 which overlap fs metadata [ 27.812695][ T3518] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.9: Failed to acquire dquot type 1 [ 27.830048][ T3529] loop1: detected capacity change from 0 to 128 [ 27.847290][ T3518] EXT4-fs error (device loop2): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 27.883426][ T3518] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #12: comm syz.2.9: corrupted inode contents [ 27.906792][ T3527] loop3: detected capacity change from 0 to 8192 [ 27.913318][ T3518] EXT4-fs error (device loop2): ext4_dirty_inode:6517: inode #12: comm syz.2.9: mark_inode_dirty error [ 27.935645][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 27.955047][ T3518] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #12: comm syz.2.9: corrupted inode contents [ 27.960677][ T3507] loop0: detected capacity change from 0 to 128 [ 27.982096][ T3518] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #12: comm syz.2.9: mark_inode_dirty error [ 27.987638][ T3493] loop3: p1 p2[DM] p3 p4 [ 27.998093][ T3518] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #12: comm syz.2.9: corrupted inode contents [ 28.009887][ T3493] loop3: p1 size 196608 extends beyond EOD, truncated [ 28.022407][ T3493] loop3: p2 start 4292936063 is beyond EOD, truncated [ 28.029255][ T3493] loop3: p3 size 189005824 extends beyond EOD, truncated [ 28.034966][ T3518] EXT4-fs error (device loop2) in ext4_orphan_del:301: Corrupt filesystem [ 28.055014][ T3518] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #12: comm syz.2.9: corrupted inode contents [ 28.067479][ T3493] loop3: p4 size 50331648 extends beyond EOD, truncated [ 28.083216][ T3518] EXT4-fs error (device loop2): ext4_truncate:4637: inode #12: comm syz.2.9: mark_inode_dirty error [ 28.098049][ T3527] loop3: p1 p2[DM] p3 p4 [ 28.115829][ T3518] EXT4-fs error (device loop2) in ext4_process_orphan:343: Corrupt filesystem [ 28.144003][ T3518] EXT4-fs (loop2): 1 truncate cleaned up [ 28.151254][ T3527] loop3: p1 size 196608 extends beyond EOD, truncated [ 28.160750][ T3527] loop3: p2 start 4292936063 is beyond EOD, truncated [ 28.167533][ T3527] loop3: p3 size 189005824 extends beyond EOD, truncated [ 28.175709][ T3518] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 28.193708][ T3527] loop3: p4 size 50331648 extends beyond EOD, truncated [ 28.211656][ T3518] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.9: Failed to acquire dquot type 1 [ 28.270870][ T3517] delete_channel: no stack [ 28.279525][ T3518] syz.2.9 (3518) used greatest stack depth: 9952 bytes left [ 28.305256][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 28.306222][ T3495] udevd[3495]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 28.326249][ T3493] udevd[3493]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 28.352639][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 28.387756][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 28.390295][ T3552] 9pnet_fd: p9_fd_create_unix (3552): problem connecting socket: ./file0: -2 [ 28.398925][ T3493] udevd[3493]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 28.417108][ T3495] udevd[3495]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 28.447636][ T3555] loop3: detected capacity change from 0 to 512 [ 28.480225][ T3555] EXT4-fs: Ignoring removed mblk_io_submit option [ 28.487558][ T3552] netlink: 'syz.0.18': attribute type 4 has an invalid length. [ 28.500925][ T3554] loop2: detected capacity change from 0 to 4096 [ 28.512502][ T3555] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 28.518628][ T3533] syz.1.12: attempt to access beyond end of device [ 28.518628][ T3533] loop1: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 28.521334][ T3555] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 28.534587][ T3533] Buffer I/O error on dev loop1, logical block 128, lost async page write [ 28.551728][ T3552] bridge1: entered promiscuous mode [ 28.563573][ T3552] netlink: 'syz.0.18': attribute type 4 has an invalid length. [ 28.596738][ T3554] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 28.632063][ T3530] syz.1.12: attempt to access beyond end of device [ 28.632063][ T3530] loop1: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 28.645356][ T3530] Buffer I/O error on dev loop1, logical block 128, lost async page write [ 28.673939][ T3547] loop4: detected capacity change from 0 to 4096 [ 28.689441][ T3547] EXT4-fs: Ignoring removed nomblk_io_submit option [ 28.703865][ T3555] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4193: comm syz.3.16: Allocating blocks 41-42 which overlap fs metadata [ 28.727809][ T3555] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4193: comm syz.3.16: Allocating blocks 41-42 which overlap fs metadata [ 28.761319][ T3547] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 28.799384][ T3555] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.16: Failed to acquire dquot type 1 [ 28.824638][ T3555] EXT4-fs error (device loop3): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 28.874066][ T3555] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #12: comm syz.3.16: corrupted inode contents [ 28.940356][ T3555] EXT4-fs error (device loop3): ext4_dirty_inode:6517: inode #12: comm syz.3.16: mark_inode_dirty error [ 28.962821][ T3555] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #12: comm syz.3.16: corrupted inode contents [ 28.985928][ T3555] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #12: comm syz.3.16: mark_inode_dirty error [ 29.005503][ T3560] loop0: detected capacity change from 0 to 4096 [ 29.047217][ T3555] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #12: comm syz.3.16: corrupted inode contents [ 29.053607][ T3560] EXT4-fs: Ignoring removed nomblk_io_submit option [ 29.067521][ T3572] netlink: 'syz.1.22': attribute type 3 has an invalid length. [ 29.068781][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 29.086754][ T3560] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 29.107407][ T3555] EXT4-fs error (device loop3) in ext4_orphan_del:301: Corrupt filesystem [ 29.121018][ T3555] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #12: comm syz.3.16: corrupted inode contents [ 29.142862][ T3555] EXT4-fs error (device loop3): ext4_truncate:4637: inode #12: comm syz.3.16: mark_inode_dirty error [ 29.143763][ T3577] loop1: detected capacity change from 0 to 256 [ 29.160682][ T3555] EXT4-fs error (device loop3) in ext4_process_orphan:343: Corrupt filesystem [ 29.189377][ T3555] EXT4-fs (loop3): 1 truncate cleaned up [ 29.211794][ T3555] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 29.259912][ T3579] netlink: 12 bytes leftover after parsing attributes in process `syz.2.23'. [ 29.260519][ T3577] syz.1.24: attempt to access beyond end of device [ 29.260519][ T3577] loop1: rw=2049, sector=256, nr_sectors = 100 limit=256 [ 29.319863][ T3579] syz.2.23: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 29.328132][ T3577] netlink: 64 bytes leftover after parsing attributes in process `syz.1.24'. [ 29.334350][ T3579] CPU: 1 UID: 0 PID: 3579 Comm: syz.2.23 Not tainted syzkaller #0 PREEMPT(voluntary) [ 29.334438][ T3579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 29.334502][ T3579] Call Trace: [ 29.334508][ T3579] [ 29.334516][ T3579] __dump_stack+0x1d/0x30 [ 29.334541][ T3579] dump_stack_lvl+0xe8/0x140 [ 29.334561][ T3579] dump_stack+0x15/0x1b [ 29.334578][ T3579] warn_alloc+0x12b/0x1a0 [ 29.334672][ T3579] ? __rcu_read_unlock+0x4f/0x70 [ 29.334748][ T3579] __vmalloc_node_range_noprof+0x9d/0xed0 [ 29.334779][ T3579] ? probe_sched_wakeup+0x85/0xa0 [ 29.334806][ T3579] ? ttwu_do_activate+0x1d0/0x210 [ 29.334856][ T3579] ? __rcu_read_unlock+0x4f/0x70 [ 29.334879][ T3579] ? avc_has_perm_noaudit+0x1b1/0x200 [ 29.334898][ T3579] ? should_fail_ex+0x30/0x280 [ 29.334955][ T3579] ? xskq_create+0x36/0xe0 [ 29.335019][ T3579] vmalloc_user_noprof+0x7d/0xb0 [ 29.335053][ T3579] ? xskq_create+0x80/0xe0 [ 29.335071][ T3579] xskq_create+0x80/0xe0 [ 29.335090][ T3579] xsk_init_queue+0x95/0xf0 [ 29.335172][ T3579] xsk_setsockopt+0x3f5/0x640 [ 29.335190][ T3579] ? __pfx_xsk_setsockopt+0x10/0x10 [ 29.335279][ T3579] __sys_setsockopt+0x184/0x200 [ 29.335309][ T3579] __x64_sys_setsockopt+0x64/0x80 [ 29.335337][ T3579] x64_sys_call+0x20ec/0x3000 [ 29.335357][ T3579] do_syscall_64+0xd2/0x200 [ 29.335371][ T3579] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 29.335417][ T3579] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 29.335445][ T3579] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 29.335499][ T3579] RIP: 0033:0x7f31a56fefc9 [ 29.335514][ T3579] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 29.335530][ T3579] RSP: 002b:00007f31a415f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 29.335548][ T3579] RAX: ffffffffffffffda RBX: 00007f31a5955fa0 RCX: 00007f31a56fefc9 [ 29.335561][ T3579] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000007 [ 29.335572][ T3579] RBP: 00007f31a5781f91 R08: 0000000000000004 R09: 0000000000000000 [ 29.335584][ T3579] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 29.335628][ T3579] R13: 00007f31a5956038 R14: 00007f31a5955fa0 R15: 00007ffcac47cbb8 [ 29.335646][ T3579] [ 29.335656][ T3579] Mem-Info: [ 29.570364][ T3579] active_anon:11807 inactive_anon:116 isolated_anon:0 [ 29.570364][ T3579] active_file:8498 inactive_file:2821 isolated_file:0 [ 29.570364][ T3579] unevictable:0 dirty:2036 writeback:10 [ 29.570364][ T3579] slab_reclaimable:3111 slab_unreclaimable:13572 [ 29.570364][ T3579] mapped:33993 shmem:5194 pagetables:1114 [ 29.570364][ T3579] sec_pagetables:0 bounce:0 [ 29.570364][ T3579] kernel_misc_reclaimable:0 [ 29.570364][ T3579] free:1899981 free_pcp:5440 free_cma:0 [ 29.615700][ T3579] Node 0 active_anon:47808kB inactive_anon:464kB active_file:33992kB inactive_file:11516kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:136552kB dirty:8376kB writeback:40kB shmem:21356kB kernel_stack:3552kB pagetables:4456kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 29.615754][ T3579] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 29.615822][ T3579] lowmem_reserve[]: 0 2881 7859 7859 [ 29.616008][ T3579] Node 0 DMA32 free:2946744kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2950272kB mlocked:0kB bounce:0kB free_pcp:3528kB local_pcp:0kB free_cma:0kB [ 29.616067][ T3579] lowmem_reserve[]: 0 0 4978 4978 [ 29.616121][ T3579] Node 0 Normal free:4637820kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:47808kB inactive_anon:464kB active_file:33992kB inactive_file:11516kB unevictable:0kB writepending:8532kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:17388kB local_pcp:6296kB free_cma:0kB [ 29.616237][ T3579] lowmem_reserve[]: 0 0 0 0 [ 29.616258][ T3579] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 29.752747][ T3579] Node 0 DMA32: 2*4kB (M) 2*8kB (M) 6*16kB (M) 2*32kB (M) 4*64kB (M) 2*128kB (M) 2*256kB (M) 3*512kB (M) 3*1024kB (M) 2*2048kB (M) 717*4096kB (M) = 2946744kB [ 29.781320][ T3579] Node 0 Normal: 2*4kB (UE) 4*8kB (UE) 0*16kB 1*32kB (E) 2*64kB (ME) 5*128kB (UME) 5*256kB (UME) 3*512kB (UE) 3*1024kB (UM) 3*2048kB (UME) 1129*4096kB (UM) = 4637256kB [ 29.798564][ T3579] Node 0 hugepages_total=4 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 29.808046][ T3579] 17219 total pagecache pages [ 29.812731][ T3579] 0 pages in swap cache [ 29.816867][ T3579] Free swap = 124996kB [ 29.821076][ T3579] Total swap = 124996kB [ 29.825275][ T3579] 2097051 pages RAM [ 29.829080][ T3579] 0 pages HighMem/MovableOnly [ 29.833743][ T3579] 81083 pages reserved [ 29.870441][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 29.935120][ T3593] loop2: detected capacity change from 0 to 256 [ 29.968412][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.005801][ T3593] syz.2.28: attempt to access beyond end of device [ 30.005801][ T3593] loop2: rw=2049, sector=256, nr_sectors = 100 limit=256 [ 30.008526][ T3599] loop4: detected capacity change from 0 to 256 [ 30.029306][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.038452][ T3594] loop1: detected capacity change from 0 to 512 [ 30.055098][ T3593] netlink: 64 bytes leftover after parsing attributes in process `syz.2.28'. [ 30.073602][ T3594] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.27: error while reading EA inode 32 err=-116 [ 30.089967][ T3601] loop3: detected capacity change from 0 to 512 [ 30.105124][ T3599] syz.4.29: attempt to access beyond end of device [ 30.105124][ T3599] loop4: rw=2049, sector=256, nr_sectors = 100 limit=256 [ 30.129517][ T3594] EXT4-fs (loop1): Remounting filesystem read-only [ 30.130878][ T3599] netlink: 64 bytes leftover after parsing attributes in process `syz.4.29'. [ 30.140149][ T3594] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 30.147914][ T3607] loop0: detected capacity change from 0 to 512 [ 30.157723][ T3594] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 30.174267][ T3594] EXT4-fs (loop1): 1 orphan inode deleted [ 30.174758][ T3594] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 30.184815][ T3601] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.25: error while reading EA inode 32 err=-116 [ 30.185012][ T3601] EXT4-fs (loop3): Remounting filesystem read-only [ 30.185057][ T3601] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 30.185155][ T3601] EXT4-fs (loop3): 1 orphan inode deleted [ 30.185594][ T3601] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 30.255518][ T3607] EXT4-fs: Ignoring removed mblk_io_submit option [ 30.289692][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.299681][ T3607] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 30.308370][ T3607] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 30.322550][ T3607] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4193: comm syz.0.30: Allocating blocks 41-42 which overlap fs metadata [ 30.395033][ T3616] loop4: detected capacity change from 0 to 8192 [ 30.417049][ T3607] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4193: comm syz.0.30: Allocating blocks 41-42 which overlap fs metadata [ 30.487783][ T3607] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.30: Failed to acquire dquot type 1 [ 30.509532][ T3607] EXT4-fs error (device loop0): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 31.319112][ T3618] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 31.429277][ T3607] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #12: comm syz.0.30: corrupted inode contents [ 31.459462][ T3607] EXT4-fs error (device loop0): ext4_dirty_inode:6517: inode #12: comm syz.0.30: mark_inode_dirty error [ 31.498571][ T3607] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #12: comm syz.0.30: corrupted inode contents [ 31.520407][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.547108][ T3607] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #12: comm syz.0.30: mark_inode_dirty error [ 31.574315][ T3626] netlink: 7 bytes leftover after parsing attributes in process `syz.4.36'. [ 31.592508][ T3607] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #12: comm syz.0.30: corrupted inode contents [ 31.614699][ T3626] netlink: 7 bytes leftover after parsing attributes in process `syz.4.36'. [ 31.625776][ T3607] EXT4-fs error (device loop0) in ext4_orphan_del:301: Corrupt filesystem [ 31.634360][ T3628] netlink: 'syz.3.35': attribute type 4 has an invalid length. [ 31.662123][ T3607] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #12: comm syz.0.30: corrupted inode contents [ 31.683970][ T3628] bridge1: entered promiscuous mode [ 31.698770][ T3623] loop2: detected capacity change from 0 to 128 [ 31.707530][ T3607] EXT4-fs error (device loop0): ext4_truncate:4637: inode #12: comm syz.0.30: mark_inode_dirty error [ 31.720908][ T3607] EXT4-fs error (device loop0) in ext4_process_orphan:343: Corrupt filesystem [ 31.739952][ T3628] netlink: 'syz.3.35': attribute type 4 has an invalid length. [ 31.755055][ T3607] EXT4-fs (loop0): 1 truncate cleaned up [ 31.761565][ T3607] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 31.992661][ T3649] loop1: detected capacity change from 0 to 256 [ 32.009080][ T29] kauditd_printk_skb: 151 callbacks suppressed [ 32.009093][ T29] audit: type=1400 audit(1761260572.224:261): avc: denied { name_bind } for pid=3639 comm="syz.4.40" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 32.027579][ T3649] syz.1.43: attempt to access beyond end of device [ 32.027579][ T3649] loop1: rw=2049, sector=256, nr_sectors = 100 limit=256 [ 32.065161][ T3653] bridge0: entered promiscuous mode [ 32.090041][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.091387][ T3653] macvtap1: entered allmulticast mode [ 32.104469][ T3653] bridge0: entered allmulticast mode [ 32.107904][ T3634] loop3: detected capacity change from 0 to 4096 [ 32.120765][ T3649] netlink: 64 bytes leftover after parsing attributes in process `syz.1.43'. [ 32.148308][ T3634] EXT4-fs: Ignoring removed nomblk_io_submit option [ 32.164528][ T3653] bridge0: port 3(macvtap1) entered blocking state [ 32.171152][ T3653] bridge0: port 3(macvtap1) entered disabled state [ 32.248995][ T3653] bridge0: left allmulticast mode [ 32.254288][ T3653] bridge0: left promiscuous mode [ 32.513567][ T3664] 8021q: adding VLAN 0 to HW filter on device bond1 [ 32.534076][ T3634] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.732567][ T3667] loop1: detected capacity change from 0 to 4096 [ 32.785412][ T3667] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.884402][ T3673] loop4: detected capacity change from 0 to 128 [ 33.027235][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.220386][ T3654] loop2: detected capacity change from 0 to 128 [ 33.220679][ T3686] loop3: detected capacity change from 0 to 128 [ 33.330224][ T3677] loop0: detected capacity change from 0 to 512 [ 33.366259][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.412473][ T3677] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.48: error while reading EA inode 32 err=-116 [ 33.439509][ T3677] EXT4-fs (loop0): Remounting filesystem read-only [ 34.309530][ T3692] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 34.424801][ T3677] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 34.444043][ T3677] EXT4-fs (loop0): 1 orphan inode deleted [ 34.450280][ T3677] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.511929][ T3701] loop1: detected capacity change from 0 to 128 [ 34.576782][ T3679] syz.4.47: attempt to access beyond end of device [ 34.576782][ T3679] loop4: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 34.590039][ T3679] Buffer I/O error on dev loop4, logical block 128, lost async page write [ 34.630370][ T3704] 9pnet_virtio: no channels available for device ./file0 [ 34.642120][ T3676] syz.4.47: attempt to access beyond end of device [ 34.642120][ T3676] loop4: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 34.655349][ T3676] Buffer I/O error on dev loop4, logical block 128, lost async page write [ 34.675611][ T3704] netlink: 'syz.3.55': attribute type 4 has an invalid length. [ 34.692737][ T3704] bridge2: entered promiscuous mode [ 34.711144][ T3704] netlink: 'syz.3.55': attribute type 4 has an invalid length. [ 34.760943][ T29] audit: type=1400 audit(1761260574.984:262): avc: denied { append } for pid=3708 comm="syz.3.57" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 34.791765][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.876469][ T3710] loop4: detected capacity change from 0 to 512 [ 34.876530][ T3717] loop2: detected capacity change from 0 to 512 [ 34.893071][ T3717] EXT4-fs: Ignoring removed bh option [ 34.898888][ T3717] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 34.932690][ T3717] EXT4-fs (loop2): 1 truncate cleaned up [ 34.938642][ T3710] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.56: error while reading EA inode 32 err=-116 [ 34.957691][ T3717] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.970263][ T3710] EXT4-fs (loop4): Remounting filesystem read-only [ 34.976822][ T3710] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 34.991121][ T3710] EXT4-fs (loop4): 1 orphan inode deleted [ 34.999291][ T3710] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.017892][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.036879][ T3722] netlink: 7 bytes leftover after parsing attributes in process `syz.0.58'. [ 35.063910][ T3722] netlink: 7 bytes leftover after parsing attributes in process `syz.0.58'. [ 35.174339][ T29] audit: type=1400 audit(1761260575.394:263): avc: denied { write } for pid=3729 comm="syz.2.61" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 35.191452][ T3701] syz.1.53: attempt to access beyond end of device [ 35.191452][ T3701] loop1: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 35.210703][ T3701] Buffer I/O error on dev loop1, logical block 128, lost async page write [ 35.229428][ T3714] loop3: detected capacity change from 0 to 4096 [ 35.238465][ T3714] EXT4-fs: Ignoring removed nomblk_io_submit option [ 35.300780][ T3714] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.332080][ T3701] syz.1.53: attempt to access beyond end of device [ 35.332080][ T3701] loop1: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 35.345365][ T3701] Buffer I/O error on dev loop1, logical block 128, lost async page write [ 35.445073][ T3737] netlink: 12 bytes leftover after parsing attributes in process `syz.1.63'. [ 35.601523][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.650662][ T3745] loop1: detected capacity change from 0 to 128 [ 35.661741][ T29] audit: type=1400 audit(1761260575.884:264): avc: denied { bind } for pid=3746 comm="syz.4.66" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 35.669675][ T3745] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 35.717084][ T29] audit: type=1400 audit(1761260575.934:265): avc: denied { setopt } for pid=3746 comm="syz.4.66" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 35.738654][ T3745] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 35.750066][ T3747] loop4: detected capacity change from 0 to 128 [ 35.773719][ T3739] loop0: detected capacity change from 0 to 128 [ 35.793826][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.807460][ T29] audit: type=1400 audit(1761260576.024:266): avc: denied { create } for pid=3746 comm="syz.4.66" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 35.862207][ T2298] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 35.888801][ T3751] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.894211][ T3753] loop4: detected capacity change from 0 to 512 [ 35.896147][ T3751] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.914876][ T3753] EXT4-fs: Ignoring removed bh option [ 35.943943][ T3753] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 35.945289][ T3751] bridge0: entered allmulticast mode [ 35.964791][ T3754] bridge_slave_1: left allmulticast mode [ 35.970537][ T3754] bridge_slave_1: left promiscuous mode [ 35.976296][ T3754] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.987549][ T3753] EXT4-fs (loop4): 1 truncate cleaned up [ 35.994846][ T3754] bridge_slave_0: left allmulticast mode [ 36.000570][ T3754] bridge_slave_0: left promiscuous mode [ 36.006209][ T3754] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.019510][ T3753] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.038372][ T3761] loop3: detected capacity change from 0 to 128 [ 36.097953][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.185888][ T3766] loop2: detected capacity change from 0 to 8192 [ 36.236915][ T3493] loop2: p1 p2[DM] p3 p4 [ 36.250692][ T3493] loop2: p1 size 196608 extends beyond EOD, truncated [ 36.258970][ T3493] loop2: p2 start 4292936063 is beyond EOD, truncated [ 36.265807][ T3493] loop2: p3 size 189005824 extends beyond EOD, truncated [ 36.298451][ T3493] loop2: p4 size 50331648 extends beyond EOD, truncated [ 36.316835][ T3766] loop2: p1 p2[DM] p3 p4 [ 36.334042][ T3766] loop2: p1 size 196608 extends beyond EOD, truncated [ 36.345122][ T3766] loop2: p2 start 4292936063 is beyond EOD, truncated [ 36.352035][ T3766] loop2: p3 size 189005824 extends beyond EOD, truncated [ 36.365258][ T3766] loop2: p4 size 50331648 extends beyond EOD, truncated [ 36.378987][ T3778] loop1: detected capacity change from 0 to 512 [ 36.413286][ T3778] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.77: error while reading EA inode 32 err=-116 [ 36.434976][ T3495] udevd[3495]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 36.446467][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 36.453635][ T3798] loop2: detected capacity change from 0 to 512 [ 36.462519][ T3778] EXT4-fs (loop1): Remounting filesystem read-only [ 36.469582][ T3778] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 36.479415][ T3493] udevd[3493]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 36.479915][ T3798] EXT4-fs: Ignoring removed bh option [ 36.489538][ T3778] EXT4-fs (loop1): 1 orphan inode deleted [ 36.503612][ T3798] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 36.513647][ T3798] EXT4-fs (loop2): 1 truncate cleaned up [ 36.523168][ T3798] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.526309][ T3778] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.559830][ T3493] udevd[3493]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 36.559834][ T3495] udevd[3495]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 36.584186][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 36.615795][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.625521][ T29] audit: type=1400 audit(1761260576.834:267): avc: denied { cpu } for pid=3804 comm="syz.4.85" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 36.676253][ T3807] netlink: 44 bytes leftover after parsing attributes in process `syz.2.86'. [ 36.678955][ T29] audit: type=1400 audit(1761260576.884:268): avc: denied { write } for pid=3802 comm="syz.0.84" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 36.704192][ T29] audit: type=1400 audit(1761260576.894:269): avc: denied { shutdown } for pid=3802 comm="syz.0.84" lport=57079 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 36.724725][ T29] audit: type=1326 audit(1761260576.894:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3802 comm="syz.0.84" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ccefdefc9 code=0x7ffc0000 [ 36.806680][ T3803] Zero length message leads to an empty skb [ 37.063681][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.086217][ T3824] loop3: detected capacity change from 0 to 8192 [ 37.159413][ T3495] loop3: p1 p2[DM] p3 p4 [ 37.174684][ T3495] loop3: p1 size 196608 extends beyond EOD, truncated [ 37.194831][ T3495] loop3: p2 start 4292936063 is beyond EOD, truncated [ 37.201650][ T3495] loop3: p3 size 189005824 extends beyond EOD, truncated [ 37.244650][ T3831] loop1: detected capacity change from 0 to 8192 [ 37.251526][ T3495] loop3: p4 size 50331648 extends beyond EOD, truncated [ 37.267621][ T3824] loop3: p1 p2[DM] p3 p4 [ 37.276485][ T3824] loop3: p1 size 196608 extends beyond EOD, truncated [ 37.290948][ T3824] loop3: p2 start 4292936063 is beyond EOD, truncated [ 37.297743][ T3824] loop3: p3 size 189005824 extends beyond EOD, truncated [ 37.305824][ T3831] loop1: p1 p2[DM] p3 p4 [ 37.312576][ T3831] loop1: p1 size 196608 extends beyond EOD, truncated [ 37.330062][ T3831] loop1: p2 start 4292936063 is beyond EOD, truncated [ 37.336881][ T3831] loop1: p3 size 189005824 extends beyond EOD, truncated [ 37.350142][ T3824] loop3: p4 size 50331648 extends beyond EOD, truncated [ 37.390664][ T3833] netlink: 'syz.3.94': attribute type 3 has an invalid length. [ 37.404395][ T3831] loop1: p4 size 50331648 extends beyond EOD, truncated [ 37.479549][ T3299] udevd[3299]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 37.479881][ T3495] udevd[3495]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 37.491866][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 37.527701][ T29] kauditd_printk_skb: 47 callbacks suppressed [ 37.527714][ T29] audit: type=1326 audit(1761260577.744:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3839 comm="syz.3.96" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e70e1efc9 code=0x7ffc0000 [ 37.601263][ T3847] loop0: detected capacity change from 0 to 128 [ 37.603187][ T3495] udevd[3495]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 37.617633][ T29] audit: type=1326 audit(1761260577.784:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3839 comm="syz.3.96" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e70e1efc9 code=0x7ffc0000 [ 37.640844][ T29] audit: type=1326 audit(1761260577.784:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3839 comm="syz.3.96" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e70e1efc9 code=0x7ffc0000 [ 37.664065][ T29] audit: type=1326 audit(1761260577.784:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3839 comm="syz.3.96" exe="/root/syz-executor" sig=0 arch=c000003e syscall=66 compat=0 ip=0x7f4e70e1efc9 code=0x7ffc0000 [ 37.687107][ T29] audit: type=1326 audit(1761260577.784:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3839 comm="syz.3.96" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e70e1efc9 code=0x7ffc0000 [ 37.710359][ T29] audit: type=1326 audit(1761260577.784:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3839 comm="syz.3.96" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e70e1efc9 code=0x7ffc0000 [ 37.733747][ T29] audit: type=1326 audit(1761260577.784:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3839 comm="syz.3.96" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e70e1efc9 code=0x7ffc0000 [ 37.756870][ T29] audit: type=1326 audit(1761260577.784:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3839 comm="syz.3.96" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e70e1efc9 code=0x7ffc0000 [ 37.780056][ T29] audit: type=1326 audit(1761260577.784:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3839 comm="syz.3.96" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4e70e1efc9 code=0x7ffc0000 [ 37.803220][ T29] audit: type=1326 audit(1761260577.784:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3839 comm="syz.3.96" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e70e1efc9 code=0x7ffc0000 [ 37.960813][ T3851] syz.0.98: attempt to access beyond end of device [ 37.960813][ T3851] loop0: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 37.974143][ T3851] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 37.995678][ T3850] loop1: detected capacity change from 0 to 512 [ 37.996774][ T3851] syz.0.98: attempt to access beyond end of device [ 37.996774][ T3851] loop0: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 38.015267][ T3851] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 38.025899][ T3850] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.97: error while reading EA inode 32 err=-116 [ 38.114831][ T3850] EXT4-fs (loop1): Remounting filesystem read-only [ 38.121682][ T3850] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 38.140194][ T3850] EXT4-fs (loop1): 1 orphan inode deleted [ 38.146896][ T3850] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.295590][ T3870] loop4: detected capacity change from 0 to 256 [ 38.388000][ T3870] syz.4.100: attempt to access beyond end of device [ 38.388000][ T3870] loop4: rw=2049, sector=256, nr_sectors = 100 limit=256 [ 38.498225][ T3871] netlink: 64 bytes leftover after parsing attributes in process `syz.4.100'. [ 38.600327][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.635617][ T3867] 8021q: adding VLAN 0 to HW filter on device bond1 [ 39.559645][ T3890] 8021q: adding VLAN 0 to HW filter on device bond1 [ 40.088410][ T3900] loop2: detected capacity change from 0 to 4096 [ 40.147676][ T3900] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.205486][ T3908] loop3: detected capacity change from 0 to 512 [ 40.261297][ T3908] EXT4-fs: Ignoring removed nobh option [ 40.315787][ T3908] EXT4-fs (loop3): can't mount with data=, fs mounted w/o journal [ 40.369991][ T3908] loop3: detected capacity change from 0 to 512 [ 40.403829][ T3908] EXT4-fs: Ignoring removed mblk_io_submit option [ 40.433623][ T3908] EXT4-fs: Ignoring removed nomblk_io_submit option [ 40.454007][ T3908] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 40.462520][ T3908] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 40.463912][ T3917] loop1: detected capacity change from 0 to 512 [ 40.513778][ T3917] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.114: error while reading EA inode 32 err=-116 [ 40.533545][ T3908] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4193: comm syz.3.112: Allocating blocks 41-42 which overlap fs metadata [ 40.556044][ T3904] loop4: detected capacity change from 0 to 4096 [ 40.567716][ T3908] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4193: comm syz.3.112: Allocating blocks 41-42 which overlap fs metadata [ 40.581534][ T3917] EXT4-fs (loop1): Remounting filesystem read-only [ 40.589222][ T3908] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.112: Failed to acquire dquot type 1 [ 40.591696][ T3904] EXT4-fs: Ignoring removed nomblk_io_submit option [ 40.613681][ T3908] EXT4-fs error (device loop3): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 40.624086][ T3917] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 40.649011][ T3908] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #12: comm syz.3.112: corrupted inode contents [ 40.671228][ T3917] EXT4-fs (loop1): 1 orphan inode deleted [ 40.677406][ T3917] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.702156][ T3908] EXT4-fs error (device loop3): ext4_dirty_inode:6517: inode #12: comm syz.3.112: mark_inode_dirty error [ 40.714150][ T3904] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.755972][ T3908] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #12: comm syz.3.112: corrupted inode contents [ 40.773139][ T3908] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #12: comm syz.3.112: mark_inode_dirty error [ 40.785213][ T3908] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #12: comm syz.3.112: corrupted inode contents [ 40.797476][ T3908] EXT4-fs error (device loop3) in ext4_orphan_del:301: Corrupt filesystem [ 40.817390][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.866043][ T3908] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #12: comm syz.3.112: corrupted inode contents [ 40.927277][ T3908] EXT4-fs error (device loop3): ext4_truncate:4637: inode #12: comm syz.3.112: mark_inode_dirty error [ 40.982250][ T3908] EXT4-fs error (device loop3) in ext4_process_orphan:343: Corrupt filesystem [ 41.009176][ T3908] EXT4-fs (loop3): 1 truncate cleaned up [ 41.029477][ T3908] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.066957][ T3908] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.112: Failed to acquire dquot type 1 [ 41.149964][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.214918][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.228933][ T3939] netlink: 7 bytes leftover after parsing attributes in process `syz.3.119'. [ 41.255745][ T3941] netlink: 28 bytes leftover after parsing attributes in process `syz.2.120'. [ 41.278374][ T3939] netlink: 7 bytes leftover after parsing attributes in process `syz.3.119'. [ 41.347088][ T3941] loop2: detected capacity change from 0 to 512 [ 41.395182][ T3941] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 41.419380][ T3941] EXT4-fs (loop2): orphan cleanup on readonly fs [ 41.431384][ T3941] EXT4-fs warning (device loop2): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 41.469146][ T3941] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 41.473424][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.485685][ T3941] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.120: bg 0: block 40: padding at end of block bitmap is not set [ 41.519551][ T3941] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 41.539533][ T3941] EXT4-fs (loop2): 1 truncate cleaned up [ 41.545582][ T3941] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 41.577731][ T3958] loop4: detected capacity change from 0 to 512 [ 41.582989][ T3954] loop3: detected capacity change from 0 to 8192 [ 41.614258][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.625845][ T3958] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.123: error while reading EA inode 32 err=-116 [ 41.627957][ T3932] loop0: detected capacity change from 0 to 4096 [ 41.646301][ T3932] EXT4-fs: Ignoring removed nomblk_io_submit option [ 41.658278][ T3958] EXT4-fs (loop4): Remounting filesystem read-only [ 41.666045][ T3958] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 41.666872][ T3495] loop3: p1 p2[DM] p3 p4 [ 41.676300][ T3958] EXT4-fs (loop4): 1 orphan inode deleted [ 41.689627][ T3958] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.702989][ T3932] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.719168][ T3495] loop3: p1 size 196608 extends beyond EOD, truncated [ 41.726503][ T3495] loop3: p2 start 4292936063 is beyond EOD, truncated [ 41.733324][ T3495] loop3: p3 size 189005824 extends beyond EOD, truncated [ 41.741049][ T3495] loop3: p4 size 50331648 extends beyond EOD, truncated [ 41.751210][ T3954] loop3: p1 p2[DM] p3 p4 [ 41.755740][ T3954] loop3: p1 size 196608 extends beyond EOD, truncated [ 41.764960][ T3954] loop3: p2 start 4292936063 is beyond EOD, truncated [ 41.771755][ T3954] loop3: p3 size 189005824 extends beyond EOD, truncated [ 41.781705][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.782350][ T3954] loop3: p4 size 50331648 extends beyond EOD, truncated [ 41.910945][ T3967] Illegal XDP return value 4294967274 on prog (id 89) dev syz_tun, expect packet loss! [ 41.950058][ T3495] udevd[3495]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 41.953594][ T3493] udevd[3493]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 41.980421][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 42.000847][ T3967] batman_adv: batadv0: Adding interface: dummy0 [ 42.007194][ T3967] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 42.047894][ T3974] loop4: detected capacity change from 0 to 128 [ 42.072782][ T3493] udevd[3493]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 42.072882][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 42.096420][ T3495] udevd[3495]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 42.173703][ T3967] batman_adv: batadv0: Interface activated: dummy0 [ 42.252697][ T3978] loop4: detected capacity change from 0 to 1024 [ 42.322096][ T3978] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.437580][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.521924][ T3986] FAULT_INJECTION: forcing a failure. [ 42.521924][ T3986] name failslab, interval 1, probability 0, space 0, times 0 [ 42.534633][ T3986] CPU: 0 UID: 0 PID: 3986 Comm: syz.2.129 Not tainted syzkaller #0 PREEMPT(voluntary) [ 42.534660][ T3986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 42.534672][ T3986] Call Trace: [ 42.534679][ T3986] [ 42.534688][ T3986] __dump_stack+0x1d/0x30 [ 42.534711][ T3986] dump_stack_lvl+0xe8/0x140 [ 42.534732][ T3986] dump_stack+0x15/0x1b [ 42.534748][ T3986] should_fail_ex+0x265/0x280 [ 42.534814][ T3986] should_failslab+0x8c/0xb0 [ 42.534846][ T3986] __kmalloc_cache_node_noprof+0x54/0x4a0 [ 42.534896][ T3986] ? __get_vm_area_node+0x106/0x1d0 [ 42.534922][ T3986] __get_vm_area_node+0x106/0x1d0 [ 42.534950][ T3986] __vmalloc_node_range_noprof+0x28c/0xed0 [ 42.534975][ T3986] ? bpf_prog_alloc_no_stats+0x47/0x3b0 [ 42.535033][ T3986] ? __rcu_read_unlock+0x4f/0x70 [ 42.535058][ T3986] ? cred_has_capability+0x210/0x280 [ 42.535156][ T3986] ? bpf_prog_alloc_no_stats+0x47/0x3b0 [ 42.535180][ T3986] __vmalloc_noprof+0x83/0xc0 [ 42.535203][ T3986] ? bpf_prog_alloc_no_stats+0x47/0x3b0 [ 42.535239][ T3986] bpf_prog_alloc_no_stats+0x47/0x3b0 [ 42.535282][ T3986] ? bpf_prog_alloc+0x2a/0x150 [ 42.535318][ T3986] bpf_prog_alloc+0x3c/0x150 [ 42.535346][ T3986] bpf_prog_load+0x506/0x1100 [ 42.535373][ T3986] ? security_bpf+0x2b/0x90 [ 42.535412][ T3986] __sys_bpf+0x469/0x7c0 [ 42.535501][ T3986] __x64_sys_bpf+0x41/0x50 [ 42.535527][ T3986] x64_sys_call+0x2aee/0x3000 [ 42.535549][ T3986] do_syscall_64+0xd2/0x200 [ 42.535576][ T3986] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 42.535665][ T3986] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 42.535690][ T3986] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 42.535707][ T3986] RIP: 0033:0x7f31a56fefc9 [ 42.535775][ T3986] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 42.535801][ T3986] RSP: 002b:00007f31a4114038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 42.535819][ T3986] RAX: ffffffffffffffda RBX: 00007f31a5956180 RCX: 00007f31a56fefc9 [ 42.535837][ T3986] RDX: 0000000000000094 RSI: 0000200000000b00 RDI: 0000000000000005 [ 42.535849][ T3986] RBP: 00007f31a4114090 R08: 0000000000000000 R09: 0000000000000000 [ 42.535859][ T3986] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 42.535870][ T3986] R13: 00007f31a5956218 R14: 00007f31a5956180 R15: 00007ffcac47cbb8 [ 42.535885][ T3986] [ 42.535892][ T3986] warn_alloc: 1 callbacks suppressed [ 42.535965][ T3986] syz.2.129: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null) [ 42.589131][ T29] kauditd_printk_skb: 399 callbacks suppressed [ 42.589185][ T29] audit: type=1400 audit(1761260582.764:720): avc: denied { create } for pid=3984 comm="syz.0.130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 42.589941][ T3986] ,cpuset= [ 42.595090][ T29] audit: type=1400 audit(1761260582.774:721): avc: denied { write } for pid=3984 comm="syz.0.130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 42.600099][ T3986] /,mems_allowed=0 [ 42.600121][ T3986] CPU: 0 UID: 0 PID: 3986 Comm: syz.2.129 Not tainted syzkaller #0 PREEMPT(voluntary) [ 42.600178][ T3986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 42.600215][ T3986] Call Trace: [ 42.600221][ T3986] [ 42.600229][ T3986] __dump_stack+0x1d/0x30 [ 42.600250][ T3986] dump_stack_lvl+0xe8/0x140 [ 42.600305][ T3986] dump_stack+0x15/0x1b [ 42.600396][ T3986] warn_alloc+0x12b/0x1a0 [ 42.600423][ T3986] __vmalloc_node_range_noprof+0x2b1/0xed0 [ 42.600468][ T3986] ? __rcu_read_unlock+0x4f/0x70 [ 42.600494][ T3986] ? cred_has_capability+0x210/0x280 [ 42.600593][ T3986] ? bpf_prog_alloc_no_stats+0x47/0x3b0 [ 42.600623][ T3986] __vmalloc_noprof+0x83/0xc0 [ 42.600649][ T3986] ? bpf_prog_alloc_no_stats+0x47/0x3b0 [ 42.600738][ T3986] bpf_prog_alloc_no_stats+0x47/0x3b0 [ 42.600858][ T3986] ? bpf_prog_alloc+0x2a/0x150 [ 42.600885][ T3986] bpf_prog_alloc+0x3c/0x150 [ 42.600913][ T3986] bpf_prog_load+0x506/0x1100 [ 42.601017][ T3986] ? security_bpf+0x2b/0x90 [ 42.601040][ T3986] __sys_bpf+0x469/0x7c0 [ 42.601063][ T3986] __x64_sys_bpf+0x41/0x50 [ 42.601141][ T3986] x64_sys_call+0x2aee/0x3000 [ 42.601162][ T3986] do_syscall_64+0xd2/0x200 [ 42.601179][ T3986] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 42.601204][ T3986] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 42.601307][ T3986] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 42.601326][ T3986] RIP: 0033:0x7f31a56fefc9 [ 42.601340][ T3986] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 42.601356][ T3986] RSP: 002b:00007f31a4114038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 42.601373][ T3986] RAX: ffffffffffffffda RBX: 00007f31a5956180 RCX: 00007f31a56fefc9 [ 42.601450][ T3986] RDX: 0000000000000094 RSI: 0000200000000b00 RDI: 0000000000000005 [ 42.601462][ T3986] RBP: 00007f31a4114090 R08: 0000000000000000 R09: 0000000000000000 [ 42.601473][ T3986] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 42.601484][ T3986] R13: 00007f31a5956218 R14: 00007f31a5956180 R15: 00007ffcac47cbb8 [ 42.601573][ T3986] [ 42.601579][ T3986] Mem-Info: [ 42.791173][ T29] audit: type=1326 audit(1761260582.994:722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3972 comm="syz.3.127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e70e1efc9 code=0x7ffc0000 [ 42.791517][ T29] audit: type=1326 audit(1761260583.014:723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3972 comm="syz.3.127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e70e1efc9 code=0x7ffc0000 [ 42.797518][ T3986] active_anon:15071 inactive_anon:0 isolated_anon:0 [ 42.797518][ T3986] active_file:24806 inactive_file:3460 isolated_file:0 [ 42.797518][ T3986] unevictable:515 dirty:2960 writeback:0 [ 42.797518][ T3986] slab_reclaimable:3297 slab_unreclaimable:13993 [ 42.797518][ T3986] mapped:35102 shmem:6043 pagetables:1084 [ 42.797518][ T3986] sec_pagetables:0 bounce:0 [ 42.797518][ T3986] kernel_misc_reclaimable:0 [ 42.797518][ T3986] free:1877144 free_pcp:7162 free_cma:0 [ 42.919620][ T29] audit: type=1326 audit(1761260583.014:724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3972 comm="syz.3.127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e70e1efc9 code=0x7ffc0000 [ 42.923195][ T3986] Node 0 active_anon:61792kB inactive_anon:0kB active_file:99224kB inactive_file:15232kB unevictable:2060kB isolated(anon):0kB isolated(file):0kB mapped:140524kB dirty:13232kB writeback:0kB shmem:24172kB kernel_stack:3504kB pagetables:4568kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 42.927885][ T29] audit: type=1326 audit(1761260583.044:725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3972 comm="syz.3.127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4e70e1efc9 code=0x7ffc0000 [ 42.932451][ T3986] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 42.932518][ T3986] lowmem_reserve[]: 0 2881 [ 42.937174][ T29] audit: type=1326 audit(1761260583.044:726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3972 comm="syz.3.127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e70e1efc9 code=0x7ffc0000 [ 42.941662][ T3986] 7859 7859 [ 42.945965][ T29] audit: type=1326 audit(1761260583.044:727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3972 comm="syz.3.127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e70e1efc9 code=0x7ffc0000 [ 42.946009][ T29] audit: type=1326 audit(1761260583.044:728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3972 comm="syz.3.127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e70e1efc9 code=0x7ffc0000 [ 42.946028][ T29] audit: type=1326 audit(1761260583.044:729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3972 comm="syz.3.127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e70e1efc9 code=0x7ffc0000 [ 43.037585][ T3992] loop0: detected capacity change from 0 to 512 [ 43.041733][ T3986] [ 43.041741][ T3986] Node 0 DMA32 free:2946744kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2950272kB mlocked:0kB bounce:0kB free_pcp:3528kB local_pcp:3528kB free_cma:0kB [ 43.391291][ T3986] lowmem_reserve[]: 0 0 4978 4978 [ 43.396332][ T3986] Node 0 Normal free:4538700kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:68984kB inactive_anon:0kB active_file:99688kB inactive_file:15580kB unevictable:2060kB writepending:13928kB zspages:0kB present:5242880kB managed:5098240kB mlocked:2060kB bounce:0kB free_pcp:21908kB local_pcp:17444kB free_cma:0kB [ 43.430041][ T3986] lowmem_reserve[]: 0 0 0 0 [ 43.434638][ T3986] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 43.447407][ T3986] Node 0 DMA32: 2*4kB (M) 2*8kB (M) 6*16kB (M) 2*32kB (M) 4*64kB (M) 2*128kB (M) 2*256kB (M) 3*512kB (M) 3*1024kB (M) 2*2048kB (M) 717*4096kB (M) = 2946744kB [ 43.463658][ T3986] Node 0 Normal: 4*4kB (UE) 120*8kB (UE) 39*16kB (U) 213*32kB (UME) 229*64kB (UM) 189*128kB (UM) 166*256kB (UME) 63*512kB (UM) 31*1024kB (UM) 9*2048kB (UME) 1066*4096kB (UM) = 4538528kB [ 43.482237][ T3986] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 43.491534][ T3986] 34976 total pagecache pages [ 43.496191][ T3986] 0 pages in swap cache [ 43.500348][ T3986] Free swap = 124996kB [ 43.504530][ T3986] Total swap = 124996kB [ 43.508668][ T3986] 2097051 pages RAM [ 43.512573][ T3986] 0 pages HighMem/MovableOnly [ 43.517370][ T3986] 81083 pages reserved [ 43.523043][ T3995] loop3: detected capacity change from 0 to 128 [ 43.538707][ T3992] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.131: error while reading EA inode 32 err=-116 [ 43.553505][ T2406] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 43.568612][ T3992] EXT4-fs (loop0): Remounting filesystem read-only [ 43.575652][ T3992] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 43.609441][ T2406] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 43.621909][ T2406] EXT4-fs (loop4): This should not happen!! Data will be lost [ 43.621909][ T2406] [ 43.631577][ T2406] EXT4-fs (loop4): Total free blocks count 0 [ 43.637546][ T2406] EXT4-fs (loop4): Free/Dirty block details [ 43.643550][ T2406] EXT4-fs (loop4): free_blocks=68451041280 [ 43.649396][ T2406] EXT4-fs (loop4): dirty_blocks=6672 [ 43.654757][ T2406] EXT4-fs (loop4): Block reservation details [ 43.660765][ T2406] EXT4-fs (loop4): i_reserved_data_blocks=417 [ 43.666860][ T3992] EXT4-fs (loop0): 1 orphan inode deleted [ 43.674050][ T2406] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28 [ 43.687182][ T3992] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.820443][ T4005] loop2: detected capacity change from 0 to 512 [ 43.847300][ T4005] EXT4-fs: Ignoring removed bh option [ 43.863138][ T4005] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 43.875846][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.904100][ T4005] EXT4-fs (loop2): 1 truncate cleaned up [ 43.912614][ T4002] loop1: detected capacity change from 0 to 512 [ 43.924076][ T4005] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.944292][ T4002] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.134: error while reading EA inode 32 err=-116 [ 43.973689][ T4001] loop4: detected capacity change from 0 to 4096 [ 43.977033][ T4002] EXT4-fs (loop1): Remounting filesystem read-only [ 43.986705][ T4001] EXT4-fs: Ignoring removed nomblk_io_submit option [ 43.994322][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.995172][ T4002] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 44.006701][ T4010] loop0: detected capacity change from 0 to 8192 [ 44.013595][ T4002] EXT4-fs (loop1): 1 orphan inode deleted [ 44.038927][ T4002] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.051774][ T4001] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.073697][ T4010] loop0: p1 p2[DM] p3 p4 [ 44.078415][ T4010] loop0: p1 size 196608 extends beyond EOD, truncated [ 44.097911][ T3996] syz.3.132: attempt to access beyond end of device [ 44.097911][ T3996] loop3: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 44.111329][ T3996] Buffer I/O error on dev loop3, logical block 128, lost async page write [ 44.130426][ T4010] loop0: p2 start 4292936063 is beyond EOD, truncated [ 44.137274][ T4010] loop0: p3 size 189005824 extends beyond EOD, truncated [ 44.163487][ T4010] loop0: p4 size 50331648 extends beyond EOD, truncated [ 44.170913][ T3995] syz.3.132: attempt to access beyond end of device [ 44.170913][ T3995] loop3: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 44.184288][ T3995] Buffer I/O error on dev loop3, logical block 128, lost async page write [ 44.216846][ T4018] loop2: detected capacity change from 0 to 512 [ 44.230407][ T3995] syz.3.132: attempt to access beyond end of device [ 44.230407][ T3995] loop3: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 44.243880][ T3995] Buffer I/O error on dev loop3, logical block 128, lost async page write [ 44.286634][ T4018] EXT4-fs error (device loop2): ext4_orphan_get:1418: comm syz.2.139: bad orphan inode 11862016 [ 44.301934][ T4018] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 44.307666][ T3495] udevd[3495]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 44.323910][ T4018] ext4 filesystem being mounted at /29/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.335963][ T3493] udevd[3493]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 44.347797][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 44.395509][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 44.491888][ T4027] loop3: detected capacity change from 0 to 4096 [ 44.541124][ T4027] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.649725][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.691194][ T4036] loop1: detected capacity change from 0 to 128 [ 44.807364][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.873737][ T4040] loop4: detected capacity change from 0 to 256 [ 44.919434][ T4040] syz.4.145: attempt to access beyond end of device [ 44.919434][ T4040] loop4: rw=2049, sector=256, nr_sectors = 100 limit=256 [ 44.948786][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.972153][ T4042] netlink: 64 bytes leftover after parsing attributes in process `syz.4.145'. [ 45.003709][ T4030] loop2: detected capacity change from 0 to 128 [ 45.057940][ T4045] loop0: detected capacity change from 0 to 512 [ 45.080759][ T4045] EXT4-fs: Ignoring removed bh option [ 45.104548][ T4045] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 45.126923][ T4045] EXT4-fs (loop0): 1 truncate cleaned up [ 45.137459][ T4045] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.145429][ T4036] syz.1.144: attempt to access beyond end of device [ 45.145429][ T4036] loop1: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 45.162770][ T4036] Buffer I/O error on dev loop1, logical block 128, lost async page write [ 45.194584][ T4050] loop4: detected capacity change from 0 to 128 [ 45.207577][ T4037] syz.1.144: attempt to access beyond end of device [ 45.207577][ T4037] loop1: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 45.220939][ T4037] Buffer I/O error on dev loop1, logical block 128, lost async page write [ 45.234887][ T4046] loop3: detected capacity change from 0 to 8192 [ 45.243857][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.274362][ T4055] loop0: detected capacity change from 0 to 512 [ 45.281930][ T3493] loop3: p1 p2[DM] p3 p4 [ 45.286354][ T3493] loop3: p1 size 196608 extends beyond EOD, truncated [ 45.297308][ T4055] EXT4-fs error (device loop0): ext4_orphan_get:1418: comm syz.0.150: bad orphan inode 11862016 [ 45.329715][ T4055] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 45.333725][ T3493] loop3: p2 start 4292936063 is beyond EOD, truncated [ 45.349106][ T3493] loop3: p3 size 189005824 extends beyond EOD, truncated [ 45.376960][ T3493] loop3: p4 size 50331648 extends beyond EOD, truncated [ 45.384151][ T4055] ext4 filesystem being mounted at /26/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.395312][ T4062] loop2: detected capacity change from 0 to 128 [ 45.429859][ T4046] loop3: p1 p2[DM] p3 p4 [ 45.434246][ T4046] loop3: p1 size 196608 extends beyond EOD, truncated [ 45.473190][ T4046] loop3: p2 start 4292936063 is beyond EOD, truncated [ 45.479998][ T4046] loop3: p3 size 189005824 extends beyond EOD, truncated [ 45.498806][ T4054] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 45.510482][ T4046] loop3: p4 size 50331648 extends beyond EOD, truncated [ 45.518190][ T4067] ================================================================== [ 45.526278][ T4067] BUG: KCSAN: data-race in xas_find_marked / xas_set_mark [ 45.533389][ T4067] [ 45.535700][ T4067] write to 0xffff88811a873814 of 4 bytes by task 4062 on cpu 0: [ 45.543312][ T4067] xas_set_mark+0x12b/0x140 [ 45.547812][ T4067] tag_pages_for_writeback+0xc2/0x290 [ 45.553176][ T4067] writeback_iter+0x340/0x820 [ 45.557840][ T4067] mpage_writepages+0x87/0x1250 [ 45.562682][ T4067] fat_writepages+0x24/0x30 [ 45.567172][ T4067] do_writepages+0x1c6/0x310 [ 45.571749][ T4067] file_write_and_wait_range+0x156/0x2c0 [ 45.577369][ T4067] __generic_file_fsync+0x46/0x140 [ 45.582467][ T4067] fat_file_fsync+0x49/0x100 [ 45.587043][ T4067] vfs_fsync_range+0x10d/0x130 [ 45.591793][ T4067] generic_file_write_iter+0x1b8/0x2f0 [ 45.597236][ T4067] iter_file_splice_write+0x666/0xa60 [ 45.602598][ T4067] direct_splice_actor+0x156/0x2a0 [ 45.607693][ T4067] splice_direct_to_actor+0x312/0x680 [ 45.613050][ T4067] do_splice_direct+0xda/0x150 [ 45.617796][ T4067] do_sendfile+0x380/0x650 [ 45.622204][ T4067] __x64_sys_sendfile64+0x105/0x150 [ 45.627393][ T4067] x64_sys_call+0x2bb4/0x3000 [ 45.632057][ T4067] do_syscall_64+0xd2/0x200 [ 45.636542][ T4067] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 45.642429][ T4067] [ 45.644739][ T4067] read to 0xffff88811a873814 of 4 bytes by task 4067 on cpu 1: [ 45.652263][ T4067] xas_find_marked+0x5dc/0x620 [ 45.657014][ T4067] find_get_entry+0x5d/0x380 [ 45.661606][ T4067] filemap_get_folios_tag+0x92/0x210 [ 45.666884][ T4067] filemap_fdatawait_range+0x88/0x1d0 [ 45.672250][ T4067] __writeback_single_inode+0xdb/0x7c0 [ 45.677701][ T4067] writeback_single_inode+0x16d/0x3f0 [ 45.683063][ T4067] sync_inode_metadata+0x5b/0x90 [ 45.687989][ T4067] __generic_file_fsync+0xf8/0x140 [ 45.693087][ T4067] fat_file_fsync+0x49/0x100 [ 45.697665][ T4067] vfs_fsync_range+0x10d/0x130 [ 45.702420][ T4067] generic_file_write_iter+0x1b8/0x2f0 [ 45.707864][ T4067] iter_file_splice_write+0x666/0xa60 [ 45.713217][ T4067] direct_splice_actor+0x156/0x2a0 [ 45.718312][ T4067] splice_direct_to_actor+0x312/0x680 [ 45.723671][ T4067] do_splice_direct+0xda/0x150 [ 45.728416][ T4067] do_sendfile+0x380/0x650 [ 45.732823][ T4067] __x64_sys_sendfile64+0x105/0x150 [ 45.738011][ T4067] x64_sys_call+0x2bb4/0x3000 [ 45.742670][ T4067] do_syscall_64+0xd2/0x200 [ 45.747152][ T4067] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 45.753027][ T4067] [ 45.755330][ T4067] value changed: 0x02000021 -> 0x04000021 [ 45.761022][ T4067] [ 45.763322][ T4067] Reported by Kernel Concurrency Sanitizer on: [ 45.769448][ T4067] CPU: 1 UID: 0 PID: 4067 Comm: syz.2.151 Not tainted syzkaller #0 PREEMPT(voluntary) [ 45.779060][ T4067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 45.789092][ T4067] ================================================================== [ 45.801679][ T4064] loop1: detected capacity change from 0 to 8192 [ 45.873297][ T4066] loop4: detected capacity change from 0 to 4096 [ 45.884502][ T4066] EXT4-fs: Ignoring removed nomblk_io_submit option [ 45.899028][ T4066] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.912408][ T3493] udevd[3493]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 46.057218][ T4067] syz.2.151: attempt to access beyond end of device [ 46.057218][ T4067] loop2: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 46.070587][ T4067] Buffer I/O error on dev loop2, logical block 128, lost async page write [ 46.102351][ T4067] syz.2.151: attempt to access beyond end of device [ 46.102351][ T4067] loop2: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 46.115690][ T4067] Buffer I/O error on dev loop2, logical block 128, lost async page write [ 46.293274][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.