last executing test programs: 1m57.018288096s ago: executing program 2 (id=365): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) recvfrom(r0, &(0x7f0000004000)=""/4112, 0xfffffffffffffedc, 0x2080, 0x0, 0x0) 1m56.981383189s ago: executing program 2 (id=366): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="0b036c00e0ff64000200475400f6a13bb10000000800894f4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000001c0)={0x5, 0x0}, 0x8) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200)=r3, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0x20000000000000e8, &(0x7f0000000080)=ANY=[@ANYRES64=r1], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xe, '\x00', 0x0, @fallback=0xb, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r5}, 0x10) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) ioctl$TIOCEXCL(r6, 0x540c) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) 1m56.899819116s ago: executing program 2 (id=368): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xd, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r4 = dup(r3) write$P9_RLERRORu(r4, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) open(&(0x7f0000000300)='./file0\x00', 0x145142, 0x102) 1m56.405417976s ago: executing program 2 (id=372): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c00"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x18, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000006c0)='kfree\x00', r1}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200008, &(0x7f0000000380)={[{@nolazytime}, {@auto_da_alloc}, {@sysvgroups}, {@norecovery}, {@jqfmt_vfsv0}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@user_xattr}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") r2 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x52, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffea4, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r4}, 0x10) getegid() r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$ARCH_SET_GS(0x1e, r5, 0x0, 0x1001) timer_create(0x1, &(0x7f0000000180)={0x0, 0x3b, 0x4, @tid=r5}, &(0x7f0000000200)) ftruncate(r2, 0x2007ffc) sendfile(r2, r2, 0x0, 0x800000009) 1m56.267337237s ago: executing program 2 (id=374): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000008000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0xc2f00, 0x4d, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x18) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x4011, &(0x7f00000005c0)={[{@nobh}, {@norecovery}, {@nobh}]}, 0x7, 0x66d, &(0x7f00000011c0)="$eJzs3c1rHG8dAPDvTHaTNPnp5ldE7cUGRFrQJk3aShHBFq+l1JebF2OTltq0KU1EUwsmUC+KePEgePJg/S9swasHrx68eBApBJEerFSzMpvd7Ft2s0l2d9Lk84Fp5pnZmeeZ3X73mXn2eWYCOLWms3/SiHMR8SSJKDWsK0R15fTO697+6/ndbEqiXP7WP5N4/pNko3FfSfXvZHXj/5Ui+XMacXakPd/V9WcPF5aXl55W07Nrj57Mrq4/u/Tg0cL9pftLj+e/PH/92tVr1+cuH+n4ylXZ/K0X3/9h6We3v/O737xP5n7/19tJ3Ijtatmy42rdduxIOWfv2XQt/3f1pWnl3+tH3Pdx8e9S5aNuequSQn7l4WDuVeO8GBGfiVKMRP3DK8VPv5Fr4YCBKif1OhI4bZL947/Yvmh8MIUBhqh2HlC7tt/rOrhdOuCzEmAYtm7uNADsxH4xImrxX9hpG4zxStvAxNskGpt1kog4WsvcjiyPP/3x9otsig7tcMBgbGzWmm5b6/+kEptTMV5JTbxNs/h/VdsubZiy74Vvtu641Fv+0y1p8Q/Ds7EZEZ+t1v+jsV/872qN/+8dMn/xDwAAAAAAAP3z+mZEfGmv/n/pbv+f0Zb+P0l1jN+NPuQ/3TI2sPn3vyzn9E1DtkAfbd2M+Gpb/9//NvYOnhqp/s7/iUp/gGJ678Hy0uWI+GREXIziWJaea95tUwfhS784++tO+Tf2/8umLP9aX8Dqrt4UWgbiLi6sLfTn6OF029qMeFfp/3u+uqS5/09W/ydt/X9//vUswJ/0mMfZL7y807Tg7/Wvh/3jHxiU8m8jLuw5/qd+up10vz/HbOV8YLZ2VtDucz/+5R865S/+IT9Z/T/RPf7Hksb79awebP/ZFfyV9UK50/rDnv+PJt8eqe0/86OFtbWncxGjya325fPN2xcPdghwYtTioRYvWfxf/HyX9r8kqZ//N8ThmYjY6DHPT29P/m030dKKp/6H/GTxv9i9/p9qrv8POjMe8y+nXnWqdu/0VP9frdTpF6tLtP9Bo/b7cfQaoLkUFwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+cGlEfBRJOrM7n6YzMxGTEfGpmEiXV1bXvnhv5QePF7N1zc//L+2kk9rz/6ca0vMt6SsR8XFE/GrkTCU9c3dleTHvgwcAAAAAAAAAAAAAAAAAAIBjYrIy5r881jr+P/OPkbxLBwxcofpXvMPpUzj0luWxvhYEGLrDxz/woes9/osDLQcwfJ3j/937csVQiwMM0W78fzffcgDDd8jrfz8XwAmg/Q9Oqx7b9MYHXQ4gDz3X/1uDLQcAAAAAANAXH59//ZckIja+cqYyZUar63T2h5MtzbsAQG726cM7OqxyAMNXWMm7BEBeXOMDye7cf/Yc7L9H7//tnfsCJAMtFwAAAAAAAAAAAABQd+Fc8/j/Qm/j/z8aVvmAwUkjujzCW99+OMm6jP/fK/g98gtOkM6P/uil7k96O0Pw6CA4loz/B+r1+Oae6ztX4UmX9gMAAAAAAAAAAAAAoK/Gnz1cWF5eerq6ns/MWEQcdvOv7fea2tPN8zzA1pmNhaFmGhsRA89re7/X1D6Ig+25eIT/G8d5JonsU+n2btRuwdGHTIuH3DyfryMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKDd/wMAAP//0VIyIg==") r2 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x50, 0x10, 0x503, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21111, 0x42400}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ES={0x0, 0xa, 0x3}, @IFLA_MACSEC_WINDOW={0x8, 0x5, 0x9}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}, 0x1, 0x0, 0x0, 0x48890}, 0x0) 1m55.415838376s ago: executing program 2 (id=383): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ff"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x10, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018117d0a", @ANYRES32=r0], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x3}, 0x18) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='mm_page_free\x00', r2}, 0x18) kexec_load(0x0, 0x1, &(0x7f0000000140)=[{0x0, 0x3e00, 0x116094000, 0x41000000}], 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000100)=ANY=[@ANYRES32=r7, @ANYRES32=r6, @ANYBLOB='\x00'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r7}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20) sendmsg$inet(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x4020400) recvfrom(r4, &(0x7f0000004000)=""/4112, 0xfffffffffffffedc, 0x2080, 0x0, 0x0) 1m55.390459388s ago: executing program 32 (id=383): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ff"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x10, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018117d0a", @ANYRES32=r0], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x3}, 0x18) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='mm_page_free\x00', r2}, 0x18) kexec_load(0x0, 0x1, &(0x7f0000000140)=[{0x0, 0x3e00, 0x116094000, 0x41000000}], 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000100)=ANY=[@ANYRES32=r7, @ANYRES32=r6, @ANYBLOB='\x00'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r7}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20) sendmsg$inet(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x4020400) recvfrom(r4, &(0x7f0000004000)=""/4112, 0xfffffffffffffedc, 0x2080, 0x0, 0x0) 2.766253605s ago: executing program 1 (id=2048): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r2, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001440)={0x3, 0xc, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000340)=ANY=[]) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r4, @ANYBLOB="00001000252155b21c0012000c000100626f6e64"], 0x3c}}, 0x40000) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r5}, 0x10) linkat(0xffffffffffffff9c, 0x0, 0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c000000100003050000003efcffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r4, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) r6 = socket(0x11, 0x2, 0x0) setsockopt(r6, 0x107, 0x1, &(0x7f00000001c0)="110000000200060000071a806d8be255", 0x10) setsockopt(r6, 0x107, 0x2, &(0x7f00000001c0)="110000000100060000071a80010061cc", 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x3, 0x4) sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x59) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x4, 0x0, {0x0, 0x0, 0x0, r9}}, 0x24}}, 0x0) r10 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000380), 0x40000, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r10, 0x80489439, &(0x7f00000003c0)) 2.283454155s ago: executing program 3 (id=2054): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r2, 0x0, 0x0}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001440)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000340)=ANY=[]) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r4, @ANYBLOB="00001000252155b21c0012000c000100626f6e64"], 0x3c}}, 0x40000) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r5}, 0x10) linkat(0xffffffffffffff9c, 0x0, 0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c000000100003050000003efcffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r4, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) r6 = socket(0x11, 0x2, 0x0) setsockopt(r6, 0x107, 0x1, &(0x7f00000001c0)="110000000200060000071a806d8be255", 0x10) setsockopt(r6, 0x107, 0x2, &(0x7f00000001c0)="110000000100060000071a80010061cc", 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x3, 0x4) sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x59) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x4, 0x0, {0x0, 0x0, 0x0, r9}}, 0x24}}, 0x0) r10 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000380), 0x40000, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r10, 0x80489439, &(0x7f00000003c0)) 2.166023084s ago: executing program 1 (id=2056): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getpid() set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x55}, 0x4000) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001812", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000a00)={0x5c, 0x2, 0x6, 0x201, 0x0, 0x0, {0x6, 0x0, 0x2}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffffffc}]}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x5c}}, 0x8000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value=0x2000000}, 0x90) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) msgctl$MSG_INFO(0x0, 0xc, 0x0) 2.042309244s ago: executing program 1 (id=2059): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x7, 0x0, 0x0) 1.874487768s ago: executing program 1 (id=2060): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r3 = epoll_create(0x3) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00000006c0)={0xf6c447fee59251f4}) close_range(r1, r2, 0x0) 1.813204493s ago: executing program 1 (id=2063): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x2) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000100)={0x1, &(0x7f0000000080)=[{0x6, 0xfc}]}) write(r0, &(0x7f0000000280)="4591", 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x3, &(0x7f0000000000)=0x1, 0x4) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000080)=0x40, 0x4) futex_waitv(&(0x7f00000012c0)=[{0x9, &(0x7f0000000240)=0x6, 0x2}, {0x6a, &(0x7f0000000280)=0x7, 0x2}, {0x4e, &(0x7f00000004c0)=0x5b, 0x3ee4ed01c3c8a85c}, {0x6, &(0x7f0000000500)=0x3, 0x2}, {0x4, &(0x7f0000000540), 0x2}, {0x4, &(0x7f0000000580)=0xffffffffffffff7f, 0x2}, {0x6, &(0x7f00000005c0)=0x4af93240, 0x2}, {0x3, &(0x7f0000000600)=0x3, 0x2}, {0x5, &(0x7f0000000640)=0x8, 0x82}, {0x7, &(0x7f0000000680)=0x17e, 0x2}, {0x81, 0x0, 0x82}, {0xffffffffffffffff, 0x0, 0x2}, {0xfffffffffffffff7, 0x0, 0x2}, {0x5b1, &(0x7f00000008c0)=0x1, 0x2}, {0x1e, &(0x7f0000000940)=0x9, 0x80}, {0x100000000, 0x0, 0x82}, {0x101, 0x0, 0x82}, {0x40, 0x0, 0x82}, {0x1f4c800000, 0x0, 0x82}, {0xffff, 0x0, 0x2}, {0x9fb, 0x0, 0x2}, {0xffffffffffffffff, 0x0, 0x82}, {0x100, 0x0, 0x2}, {0x4, 0x0, 0x82}], 0x18, 0x0, &(0x7f0000001800)={0x77359400}, 0x0) r2 = dup(r1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r2) 1.799060314s ago: executing program 0 (id=2064): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000f1ffff000000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000e}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x101}, 0x18) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_print_times', 0x149a82, 0x0) writev(r1, &(0x7f0000001a00)=[{0x0}], 0x1) 1.671560454s ago: executing program 0 (id=2067): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'lblcr\x00', 0x10, 0x8, 0x11}, 0x2c) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x483, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'none\x00', 0x3a, 0x0, 0x7f}, 0x2c) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r1}, &(0x7f0000000380), &(0x7f00000003c0)=r2}, 0x20) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x80) sendmsg$NFT_BATCH(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x204800b}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a30"], 0x84}, 0x1, 0x0, 0x0, 0x24040089}, 0x20008000) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) rmdir(&(0x7f00000001c0)='./cgroup/../file0\x00') 1.657654855s ago: executing program 0 (id=2068): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001600)={&(0x7f0000000f00)='kfree\x00', r2, 0x0, 0x77}, 0x18) syz_read_part_table(0x105e, &(0x7f0000000000)="$eJzsz71NA0EYBNC55eCO4FohoQMqICGhGbohoA96ISG3LFuftSf/dGA7eC9YjTSzWm24rZZtVT3Wb6WGJE/9+Gp5yZw8p62jt3FO5k1V1ZQh+e/33ntT0/64SS/aX6Y1f74Ou6rLM8vDKX2Py3n/8XO9jwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA/ToEAAD//zfUF2I=") statx(0xffffffffffffff9c, &(0x7f00000011c0)='./file0\x00', 0x1000, 0x4, &(0x7f0000001200)) r3 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0xffffffffffffffff, r4) setregid(r4, 0xffffffffffffffff) newfstatat(0xffffffffffffff9c, &(0x7f0000001300)='./file0\x00', &(0x7f0000001340), 0x1000) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000013c0), &(0x7f0000001400)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(r5, 0x0) r6 = creat(&(0x7f00000000c0)='./file0\x00', 0x9c) stat(&(0x7f0000000cc0)='./file0\x00', &(0x7f0000001c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a30000000000800410073697700140033006c6f"], 0xffaf}, 0x1, 0x0, 0x0, 0x854}, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r6, 0x4c09, 0x3) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r6, 0x40089413, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000f80)=ANY=[@ANYRESDEC, @ANYRESHEX=r1, @ANYRES16=r6, @ANYRES64=r6, @ANYRESOCT, @ANYRES16, @ANYBLOB="0ffe05", @ANYRES8, @ANYBLOB="e8fa88e70da1b9c76cfaf3d80659ae68eb29563234049e665da79cebc620be16778776225013943b37faa22e2cf1c8182f9f145839b2c310bbb276b81cf5e8f79bbcdaca26dc11e2aac8f915fd6f248216e714865dc635d6f0f3b375b0dbba056bdf18a7f200de6a9e995dca5fa8beda1ef93e1a9b241640634e6a6687d44c4cb189bcdfa08b86714d70495d799a713d0b284c17e515c6f31fb7427d327feaf324", @ANYBLOB="8e992400028447ab6903d457b10100c104a0b14ac8f07d96cff44ef48944010165fbcfdd", @ANYBLOB="02000200", @ANYRES32=0xee00, @ANYRES8=r9, @ANYBLOB="7de0de6148d7d44c4d01eeff92df69b773e9c6727f8fbda7576c2a151378b664926695450adc68e745", @ANYRESDEC=r7, @ANYRESOCT, @ANYBLOB='\b', @ANYRES32=r8, @ANYBLOB="08000300", @ANYRES32=0xee00, @ANYBLOB="080004", @ANYRES16=r8], 0x94, 0x1) 1.621876138s ago: executing program 3 (id=2070): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="2e00000038000511d25a80698c63940d0124fc602f6e35400c000200001ec00037153e370a00018025581d00d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x39c}, 0x0) 1.591557911s ago: executing program 4 (id=2071): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x7, 0x0, 0x0) 1.581208062s ago: executing program 1 (id=2072): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) add_key(&(0x7f0000000080)='dns_resolver\x00', 0x0, &(0x7f0000000040), 0x0, 0xfffffffffffffffe) bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB], 0x48) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000300)={0x7, 0x7b, 0x2}, 0x7) r1 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x800700, &(0x7f0000000680)={[{@minixdf}, {@stripe={'stripe', 0x3d, 0x3}}, {@norecovery}, {@noinit_itable}, {@max_batch_time={'max_batch_time', 0x3d, 0x6}}, {@minixdf}, {@usrjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@errors_continue}, {@dioread_lock}, {@noblock_validity}, {@noquota}]}, 0x3, 0x465, &(0x7f0000000f00)="$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") chdir(&(0x7f0000000400)='./file0\x00') r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x10) r7 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x18) write$binfmt_register(r7, &(0x7f0000000180)={0x3a, 'syz0', 0x3a, 'M', 0x3a, 0x9, 0x3a, '//[,{\x87&', 0x3a, '', 0x3a, './file0', 0x3a, [0x46]}, 0x2f) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', r1, &(0x7f0000000540)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)=ANY=[@ANYBLOB="80010000170001000000000000000000fc0000000000000000000000000000000000000000000000fe8000000000000000000000000000bbfc0000000000000000000000000000002001000000000000000000000000000100"/104, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff010000000000000000000000000000000000000000000000ffff0000000000000a00000000000000b926865082dfd35cfcb82bc8fbbabb4e3b2ff17788e9da814ac5f03a2324a74c1e0f98887f00000000000000c761ad04ed53aaaa9fa3d4e33cebdb30938f700216a8036820e9", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008001f000200000044000500fc020000000000000000000000000000000000003c00000000000000e000000200000000000000000000000000000000000000000000000000000000000000000c0015000000000037000000"], 0x180}}, 0x0) r8 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r8, 0x29, 0x2e, &(0x7f0000000380)={0x2, {{0xa, 0x4e20, 0x1, @mcast1, 0x1000}}, {{0xa, 0x4e22, 0x7, @empty, 0x3ff}}}, 0x108) 1.572753822s ago: executing program 4 (id=2073): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r0, 0x40047211, &(0x7f0000000000)=0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r1}, 0x18) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80a, &(0x7f0000000940)={[{@barrier_val}, {@resuid}, {@block_validity}, {@errors_remount}]}, 0x1, 0x79b, &(0x7f0000000180)="$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") mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) bpf$MAP_LOOKUP_ELEM(0x2, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001440)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59}, 0x94) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000a00)='cdg\x00', 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r4}, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket(0x40000000015, 0x5, 0x0) connect$inet(r6, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r6, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(r6, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) 1.360087599s ago: executing program 3 (id=2074): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r2 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x2042, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1600000000000000040000000100000000000000", @ANYRES32=0x1, @ANYRESHEX=r1, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000d20b6fe0cbf9f6f9fc5f41630779891c111cb943545ea733c3d0a4818b2b81253181b39fd8028b27b83c794347b87e521464d2b3d6c6f590814c51f23f85a72e8e1d9dfd2b054981e98ed08fb0996ee8328956afcda7ea64b9ac0345c6ce6640946a5e24a0fa73f68593e8851392b1397601eb398220b075f2032aadefde6480cb11a500"/170], 0x48) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, r3, {0x1}}, './file0\x00'}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x3, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYRESDEC=r2], 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='mm_page_alloc\x00', r5}, 0x10) r6 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x0, 0x0, @local, @local, 0x7, 0x7, 0x202, 0x8}}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000800400000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000950000000000000000"], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000980)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000080000000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000000340)='/,O#,)\x02\x00', 0xfffffffffffffffd) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/keys\x00', 0x0, 0x0) preadv(r9, &(0x7f0000000240)=[{&(0x7f0000000580)=""/4096, 0x1000}], 0x1, 0x7fff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r8}, 0x10) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000240)={'syztnl1\x00', 0x0}) socket(0x11, 0x0, 0x18) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) pipe(&(0x7f0000000200)) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000000c0)={'gretap0\x00', 0x0}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2000008, &(0x7f0000000080), 0x0, 0x52e, &(0x7f0000000f00)="$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") r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$fou(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="01002dbd7000000000000100000008000600e0000001050004000100000008000b0027"], 0x2c}, 0x1, 0x0, 0x0, 0x20048091}, 0x0) sendmsg$FOU_CMD_DEL(r4, &(0x7f00000005c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000580)={&(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES16=r13, @ANYBLOB="100829bd7000fbdbdf250200000008000b00", @ANYRES32=r11, @ANYBLOB="1400070000000000000000000000000000000000050002000200000014000700fc02000000000000000000000000000014000900fe88000000000000000000000000010114000700fc02000000000000000000000000000008000b00", @ANYRES32=r11, @ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x8004}, 0xa89af53e6dcca82) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x80) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x200000, &(0x7f00000002c0)=ANY=[@ANYBLOB=',version=9p2000,context=']) 1.212468782s ago: executing program 4 (id=2075): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x80) sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x204800b}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a30"], 0x84}, 0x1, 0x0, 0x0, 0x24040089}, 0x20008000) 1.192750533s ago: executing program 0 (id=2076): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xd, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r4 = dup(r3) write$P9_RLERRORu(r4, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfd', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) open(&(0x7f0000000300)='./file0\x00', 0x145142, 0x102) 1.136268308s ago: executing program 5 (id=2077): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000f1ffff000000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000e}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x101}, 0x18) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_print_times', 0x149a82, 0x0) writev(r1, &(0x7f0000001a00)=[{&(0x7f0000000080)}], 0x1) 1.135947268s ago: executing program 4 (id=2078): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[], 0x0}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESDEC=r1]) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x18, &(0x7f00000001c0)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000003, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r4 = io_uring_setup(0x2754, &(0x7f0000000080)={0x0, 0xdf0a, 0x100, 0x2, 0x26d}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 1.065624513s ago: executing program 3 (id=2079): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'lblcr\x00', 0x10, 0x8, 0x11}, 0x2c) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x483, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'none\x00', 0x3a, 0x0, 0x7f}, 0x2c) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r1}, &(0x7f0000000380), &(0x7f00000003c0)=r2}, 0x20) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x80) sendmsg$NFT_BATCH(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x204800b}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a30"], 0x84}, 0x1, 0x0, 0x0, 0x24040089}, 0x20008000) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) rmdir(&(0x7f00000001c0)='./cgroup/../file0\x00') 1.019666597s ago: executing program 5 (id=2080): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000280)='sched_switch\x00', r0, 0x0, 0x3}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="5000000010004b040000966ce0b200007a000000", @ANYRES32=0x0, @ANYBLOB="00000000181002001c0012800b00010067656e65766500000c00028008000200ac1414341400030067656e65766530"], 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x80) 1.019085517s ago: executing program 4 (id=2081): inotify_init() r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x7, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x4, 0x7fe3, 0x1, 0x50010, 0xffffffffffffffff, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000008000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f00000001c0)=ANY=[@ANYRES32=r0, @ANYRES64=r1], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x66, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="190000000400000004000000"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x5c399000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r6) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x24, r7, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}, [@NL80211_ATTR_DURATION={0x8}]}, 0x24}}, 0x4000054) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x1000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bind$netlink(0xffffffffffffffff, &(0x7f0000000480)={0x10, 0x0, 0x0, 0xf0ffffff}, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4000000) 1.013906018s ago: executing program 3 (id=2082): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x19, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x23, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x104020, 0x7, 0x2, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r3 = socket(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0xe64, 0x3, @empty, 0x2}, 0x1c) connect$unix(r3, &(0x7f0000000100)=@abs={0x0, 0x0, 0x4e23}, 0x6e) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYRES16=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x800}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r6, &(0x7f00000006c0), &(0x7f0000000000), 0x2}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) 922.706425ms ago: executing program 0 (id=2083): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x7, 0x0, 0x0) 913.437856ms ago: executing program 5 (id=2084): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getpid() set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x55}, 0x4000) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181200", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000a00)={0x5c, 0x2, 0x6, 0x201, 0x0, 0x0, {0x6, 0x0, 0x2}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffffffc}]}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x5c}}, 0x8000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value=0x2000000}, 0x90) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) msgctl$MSG_INFO(0x0, 0xc, 0x0) 831.071383ms ago: executing program 5 (id=2085): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x2) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000100)={0x1, &(0x7f0000000080)=[{0x6, 0xfc}]}) write(r0, &(0x7f0000000280)="4591", 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x3, &(0x7f0000000000)=0x1, 0x4) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000080)=0x40, 0x4) futex_waitv(&(0x7f00000012c0)=[{0x9, &(0x7f0000000240)=0x6, 0x2}, {0x6a, &(0x7f0000000280)=0x7, 0x2}, {0x4e, &(0x7f00000004c0)=0x5b, 0x3ee4ed01c3c8a85c}, {0x6, &(0x7f0000000500)=0x3, 0x2}, {0x4, &(0x7f0000000540), 0x2}, {0x4, &(0x7f0000000580)=0xffffffffffffff7f, 0x2}, {0x6, &(0x7f00000005c0)=0x4af93240, 0x2}, {0x3, &(0x7f0000000600)=0x3, 0x2}, {0x5, &(0x7f0000000640)=0x8, 0x82}, {0x7, &(0x7f0000000680)=0x17e, 0x2}, {0x81, 0x0, 0x82}, {0xffffffffffffffff, 0x0, 0x2}, {0xfffffffffffffff7, 0x0, 0x2}, {0x5b1, &(0x7f00000008c0)=0x1, 0x2}, {0x1e, 0x0, 0x80}, {0xa, 0x0, 0x2}, {0x100000000, 0x0, 0x82}, {0x101, 0x0, 0x82}, {0x40, 0x0, 0x82}, {0x1f4c800000, 0x0, 0x82}, {0xffff, 0x0, 0x2}, {0x9fb, 0x0, 0x2}, {0xffffffffffffffff, 0x0, 0x82}, {0x100, 0x0, 0x2}, {0x4, 0x0, 0x82}], 0x19, 0x0, &(0x7f0000001800)={0x77359400}, 0x0) r2 = dup(r1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r2) 151.128698ms ago: executing program 0 (id=2086): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r0, 0x40047211, &(0x7f0000000000)=0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r1}, 0x18) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80a, &(0x7f0000000940)={[{@barrier_val}, {@resuid}, {@block_validity}, {@errors_remount}]}, 0x1, 0x79b, &(0x7f0000000180)="$eJzs3c1rXFUbAPDnTpImTfu+zQsv2LppVloonbQ1tgqCERciWCjo2jZMpiFmkimZSWlCFhYRBBG0uBB049qPunMruvZvcCMiLVXTYsWFjNz5SKb5mHw0k2mb3w9ucs6dc+ecZ+7cc8/MPcwNYM8aTP9kIo5ExIdJxKH6+iQieqqp7oiRWrl7iwu5dEmiUnn996Ra5u7iQi6atkkdqGcOR8T370Ycz6yutzQ3PzlaKORn6vmh8tTlodLc/ImJqdHx/Hh++syp4eHTZ589e2bnYv3zx/mDtz565emvR/5+54kbH/yQxEgcrD/WHMdOGYzB+mvSk76E93l5pyvrsKTTDWBb0kOzq3aUx5E4FF3VFADwOEvP/xUAYI9JnP8BYI9pfA9wd3Eh11g6+43E7rr9UkT01eJvXN+sPdJdv2bXV70O2n83ie76FdHYwetdgxHx2bdvfpku0abrkABreftaRFwcGFzd/yer5ixs1clNlBlckdf/we75Lh3/PLfW+C+zNP6JpfHPst41jt3tGIzY15xfffxnbq654Ys7UHl9/PdCbW5bGmjT+G9p0tpAVz33nzRzNCImCvm0b/tvRByLnt5LE4X8qRZ1HLvzz531Hmse//1x/a0v0vrT/8slMje7e+/fZmy0PPogMTe7fS3iye7luX33VvX/fdWx7sr9n6473+qJjy4nX33+vU/XK5bGn8bbWFbH316VzyOeirXjb0hazk8cSnf/ydrftev45udP+terv3n/p0taf+OzwG5I939/6/gHkub5mqWdrX/j+Nd+/+9L3qimG53H1dFyeeZUxL7ktdXrTy9v28g3yqfx1yJdGX+m5fs//SR4cZMxdt/67avtx7+kLVMs0/jHtrT/t564cW+ya/vxp/t/uJo6Vl+zmf5vsw18kNcOAAAAAAAAAAAAAAAAAAAAAAAAADYrExEHI8lkl9KZTDZbu4f3/6M/UyiWyscvFWenx6J6r+yB6Mk0furyUC2fNH7/dKApf3pF/pmI+F9EfNy7v5rP5oqFsU4HDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB1B9a5/3/q195Otw4AaJu+DUvcyd+XrVQqlTa2BwBov43P/wDA46bF+X//brYDANg9Pv8DwN7j/A8Ae4/zPwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAG12/ty5dKn8tbiQS/NjV+ZmJ4tXTozlS5PZqdlcNlecuZwdLxbHC/lsrji10fMVisXLwzE9e3WonC+Vh0pz8xemirPT5QsTU6Pj+Qv5nl2JCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC2pjQ3PzlaKORnHovE+xHxEDSjHYkkHopmdCTxy4mfDrcqc32Dt/HIQxHFI5bodM8EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8Gj4NwAA//8PbSWm") mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) bpf$MAP_LOOKUP_ELEM(0x2, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001440)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59}, 0x94) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000a00)='cdg\x00', 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r4}, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket(0x40000000015, 0x5, 0x0) connect$inet(r6, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r6, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(r6, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) 150.292368ms ago: executing program 5 (id=2087): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESDEC=r1]) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x18, &(0x7f00000001c0)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000003, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r4 = io_uring_setup(0x2754, &(0x7f0000000080)={0x0, 0xdf0a, 0x100, 0x2, 0x26d}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 149.615148ms ago: executing program 3 (id=2088): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c30000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r0, 0x40047211, &(0x7f0000000000)=0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r1}, 0x18) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80a, &(0x7f0000000940)={[{@barrier_val}, {@resuid}, {@block_validity}, {@errors_remount}]}, 0x1, 0x79b, &(0x7f0000000180)="$eJzs3c1rXFUbAPDnTpImTfu+zQsv2LppVloonbQ1tgqCERciWCjo2jZMpiFmkimZSWlCFhYRBBG0uBB049qPunMruvZvcCMiLVXTYsWFjNz5SKb5mHw0k2mb3w9ucs6dc+ecZ+7cc8/MPcwNYM8aTP9kIo5ExIdJxKH6+iQieqqp7oiRWrl7iwu5dEmiUnn996Ra5u7iQi6atkkdqGcOR8T370Ycz6yutzQ3PzlaKORn6vmh8tTlodLc/ImJqdHx/Hh++syp4eHTZ589e2bnYv3zx/mDtz565emvR/5+54kbH/yQxEgcrD/WHMdOGYzB+mvSk76E93l5pyvrsKTTDWBb0kOzq3aUx5E4FF3VFADwOEvP/xUAYI9JnP8BYI9pfA9wd3Eh11g6+43E7rr9UkT01eJvXN+sPdJdv2bXV70O2n83ie76FdHYwetdgxHx2bdvfpku0abrkABreftaRFwcGFzd/yer5ixs1clNlBlckdf/we75Lh3/PLfW+C+zNP6JpfHPst41jt3tGIzY15xfffxnbq654Ys7UHl9/PdCbW5bGmjT+G9p0tpAVz33nzRzNCImCvm0b/tvRByLnt5LE4X8qRZ1HLvzz531Hmse//1x/a0v0vrT/8slMje7e+/fZmy0PPogMTe7fS3iye7luX33VvX/fdWx7sr9n6473+qJjy4nX33+vU/XK5bGn8bbWFbH316VzyOeirXjb0hazk8cSnf/ydrftev45udP+terv3n/p0taf+OzwG5I939/6/gHkub5mqWdrX/j+Nd+/+9L3qimG53H1dFyeeZUxL7ktdXrTy9v28g3yqfx1yJdGX+m5fs//SR4cZMxdt/67avtx7+kLVMs0/jHtrT/t564cW+ya/vxp/t/uJo6Vl+zmf5vsw18kNcOAAAAAAAAAAAAAAAAAAAAAAAAADYrExEHI8lkl9KZTDZbu4f3/6M/UyiWyscvFWenx6J6r+yB6Mk0furyUC2fNH7/dKApf3pF/pmI+F9EfNy7v5rP5oqFsU4HDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB1B9a5/3/q195Otw4AaJu+DUvcyd+XrVQqlTa2BwBov43P/wDA46bF+X//brYDANg9Pv8DwN7j/A8Ae4/zPwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAG12/ty5dKn8tbiQS/NjV+ZmJ4tXTozlS5PZqdlcNlecuZwdLxbHC/lsrji10fMVisXLwzE9e3WonC+Vh0pz8xemirPT5QsTU6Pj+Qv5nl2JCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC2pjQ3PzlaKORnHovE+xHxEDSjHYkkHopmdCTxy4mfDrcqc32Dt/HIQxHFI5bodM8EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8Gj4NwAA//8PbSWm") mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={0xffffffffffffffff, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001440)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59}, 0x94) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000a00)='cdg\x00', 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket(0x40000000015, 0x5, 0x0) connect$inet(r5, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r5, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(r5, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) 678.61µs ago: executing program 5 (id=2089): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r2 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x2042, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1600000000000000040000000100000000000000", @ANYRES32=0x1, @ANYRESHEX=r1, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000d20b6fe0cbf9f6f9fc5f41630779891c111cb943545ea733c3d0a4818b2b81253181b39fd8028b27b83c794347b87e521464d2b3d6c6f590814c51f23f85a72e8e1d9dfd2b054981e98ed08fb0996ee8328956afcda7ea64b9ac0345c6ce6640946a5e24a0fa73f68593e8851392b1397601eb398220b075f2032aadefde6480cb11a500"/170], 0x48) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, r3, {0x1}}, './file0\x00'}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x3, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYRESDEC=r2], 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='mm_page_alloc\x00', r5}, 0x10) r6 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x0, 0x0, @local, @local, 0x7, 0x7, 0x202, 0x8}}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000800400000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000950000000000000000"], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000980)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000080000000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000000340)='/,O#,)\x02\x00', 0xfffffffffffffffd) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/keys\x00', 0x0, 0x0) preadv(r9, &(0x7f0000000240)=[{&(0x7f0000000580)=""/4096, 0x1000}], 0x1, 0x7fff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r8}, 0x10) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000240)={'syztnl1\x00', 0x0}) socket(0x11, 0x0, 0x18) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) pipe(&(0x7f0000000200)) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000000c0)={'gretap0\x00', 0x0}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2000008, &(0x7f0000000080), 0x0, 0x52e, &(0x7f0000000f00)="$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") r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$fou(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="01002dbd7000000000000100000008000600e0000001050004000100000008000b0027"], 0x2c}, 0x1, 0x0, 0x0, 0x20048091}, 0x0) sendmsg$FOU_CMD_DEL(r4, &(0x7f00000005c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000580)={&(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES16=r13, @ANYBLOB="100829bd7000fbdbdf250200000008000b00", @ANYRES32=r11, @ANYBLOB="1400070000000000000000000000000000000000050002000200000014000700fc02000000000000000000000000000014000900fe88000000000000000000000000010114000700fc02000000000000000000000000000008000b00", @ANYRES32=r11, @ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x8004}, 0xa89af53e6dcca82) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x80) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x200000, &(0x7f00000002c0)=ANY=[@ANYBLOB=',version=9p2000,context=']) 0s ago: executing program 4 (id=2090): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r1}, 0x20) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x1000c40, &(0x7f00000002c0), 0x45, 0x526, &(0x7f0000000c40)="$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") umount2(0x0, 0x2) kernel console output (not intermixed with test programs): 0000000. [ 145.893628][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.988625][ T7868] bond8 (unregistering): Released all slaves [ 146.010935][ T7880] netlink: 112 bytes leftover after parsing attributes in process `syz.0.1372'. [ 146.026077][ T7876] dummy0: entered allmulticast mode [ 146.038862][ T7880] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1372'. [ 146.054731][ T7876] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1369'. [ 146.077198][ T7867] dummy0: left allmulticast mode [ 146.129100][ T7892] netlink: 392 bytes leftover after parsing attributes in process `syz.4.1377'. [ 146.156964][ T7896] loop5: detected capacity change from 0 to 512 [ 146.210094][ T7898] loop3: detected capacity change from 0 to 1024 [ 146.226727][ T7896] EXT4-fs error (device loop5): ext4_acquire_dquot:6937: comm syz.5.1375: Failed to acquire dquot type 1 [ 146.251998][ T7902] loop4: detected capacity change from 0 to 2048 [ 146.284968][ T7902] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 146.297287][ T7896] EXT4-fs (loop5): 1 truncate cleaned up [ 146.298024][ T7902] EXT4-fs error (device loop4): ext4_find_extent:939: inode #2: comm syz.4.1380: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 146.303438][ T7896] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.334270][ T7902] EXT4-fs (loop4): Remounting filesystem read-only [ 146.353662][ T7898] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.364302][ T7896] ext4 filesystem being mounted at /164/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 146.384834][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.410163][ T7898] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1379'. [ 146.443796][ T7898] 8021q: adding VLAN 0 to HW filter on device bond8 [ 146.498311][ T7898] bond8 (unregistering): Released all slaves [ 146.509892][ T7887] SELinux: security_context_str_to_sid () failed with errno=-22 [ 146.581848][ T4818] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.735137][ T7922] bond14 (unregistering): Released all slaves [ 146.760789][ T7932] loop5: detected capacity change from 0 to 2048 [ 146.805017][ T7937] openvswitch: netlink: Message has 6 unknown bytes. [ 146.840753][ T7918] loop4: detected capacity change from 0 to 32768 [ 146.943431][ T7943] loop4: detected capacity change from 0 to 512 [ 146.952303][ T7941] loop5: detected capacity change from 0 to 2048 [ 146.977702][ T7941] EXT4-fs error (device loop5): ext4_find_extent:939: inode #2: comm syz.5.1394: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 147.008043][ T7951] loop1: detected capacity change from 0 to 164 [ 147.032466][ T7943] ext4 filesystem being mounted at /276/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 147.044637][ T7941] EXT4-fs (loop5): Remounting filesystem read-only [ 147.149546][ T7958] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=7958 comm=syz.5.1399 [ 147.372348][ T7969] serio: Serial port ptm0 [ 147.547542][ T7989] loop3: detected capacity change from 0 to 512 [ 147.556056][ T7986] loop1: detected capacity change from 0 to 1024 [ 147.608988][ T7989] ext4 filesystem being mounted at /295/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 147.671066][ T7996] loop1: detected capacity change from 0 to 512 [ 147.763659][ T7996] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a84ec018, mo2=0002] [ 147.809783][ T7977] loop5: detected capacity change from 0 to 32768 [ 147.850102][ T7996] System zones: 0-2, 18-18, 34-35 [ 147.904977][ T8007] loop3: detected capacity change from 0 to 512 [ 147.923209][ T8005] FAULT_INJECTION: forcing a failure. [ 147.923209][ T8005] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 147.936528][ T8005] CPU: 0 UID: 0 PID: 8005 Comm: +}[@ Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 147.936563][ T8005] Tainted: [W]=WARN [ 147.936625][ T8005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 147.936646][ T8005] Call Trace: [ 147.936652][ T8005] [ 147.936661][ T8005] __dump_stack+0x1d/0x30 [ 147.936696][ T8005] dump_stack_lvl+0xe8/0x140 [ 147.936721][ T8005] dump_stack+0x15/0x1b [ 147.936742][ T8005] should_fail_ex+0x265/0x280 [ 147.936820][ T8005] should_fail+0xb/0x20 [ 147.936842][ T8005] should_fail_usercopy+0x1a/0x20 [ 147.936952][ T8005] _copy_from_iter+0xd2/0xe80 [ 147.936978][ T8005] ? __build_skb_around+0x1a0/0x200 [ 147.937021][ T8005] ? __alloc_skb+0x223/0x320 [ 147.937109][ T8005] netlink_sendmsg+0x471/0x6b0 [ 147.937140][ T8005] ? __pfx_netlink_sendmsg+0x10/0x10 [ 147.937164][ T8005] __sock_sendmsg+0x145/0x180 [ 147.937192][ T8005] ____sys_sendmsg+0x31e/0x4e0 [ 147.937219][ T8005] ___sys_sendmsg+0x17b/0x1d0 [ 147.937342][ T8005] __x64_sys_sendmsg+0xd4/0x160 [ 147.937472][ T8005] x64_sys_call+0x191e/0x2ff0 [ 147.937494][ T8005] do_syscall_64+0xd2/0x200 [ 147.937533][ T8005] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 147.937565][ T8005] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 147.937599][ T8005] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.937643][ T8005] RIP: 0033:0x7f5595c9ebe9 [ 147.937659][ T8005] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 147.937677][ T8005] RSP: 002b:00007f5594707038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 147.937710][ T8005] RAX: ffffffffffffffda RBX: 00007f5595ec5fa0 RCX: 00007f5595c9ebe9 [ 147.937727][ T8005] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000006 [ 147.937874][ T8005] RBP: 00007f5594707090 R08: 0000000000000000 R09: 0000000000000000 [ 147.937886][ T8005] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 147.937897][ T8005] R13: 00007f5595ec6038 R14: 00007f5595ec5fa0 R15: 00007ffe11c880b8 [ 147.937916][ T8005] [ 147.942187][ T7996] ext4 filesystem being mounted at /265/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 148.169045][ T8007] ext4 filesystem being mounted at /297/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 148.192971][ T8007] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #2: comm syz.3.1418: corrupted inode contents [ 148.283551][ T8007] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #2: comm syz.3.1418: mark_inode_dirty error [ 148.314784][ T8007] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #2: comm syz.3.1418: corrupted inode contents [ 148.342289][ T8027] wg2: entered promiscuous mode [ 148.347268][ T8027] wg2: entered allmulticast mode [ 148.368582][ T8007] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #2: comm syz.3.1418: corrupted inode contents [ 148.394795][ T8007] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #2: comm syz.3.1418: mark_inode_dirty error [ 148.413070][ T8007] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #2: comm syz.3.1418: corrupted inode contents [ 148.437300][ T8007] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #2: comm syz.3.1418: mark_inode_dirty error [ 148.449321][ T8007] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #2: comm syz.3.1418: corrupted inode contents [ 148.463275][ T8007] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #2: comm syz.3.1418: mark_inode_dirty error [ 148.593874][ T8048] loop1: detected capacity change from 0 to 1024 [ 148.615152][ T8045] loop4: detected capacity change from 0 to 2048 [ 148.625465][ T8048] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 148.636623][ T8048] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 148.648809][ T8048] JBD2: no valid journal superblock found [ 148.654647][ T8048] EXT4-fs (loop1): Could not load journal inode [ 148.664095][ T8045] EXT4-fs error (device loop4): ext4_find_extent:939: inode #2: comm syz.4.1430: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 148.719296][ T8045] EXT4-fs (loop4): Remounting filesystem read-only [ 148.787468][ T8054] loop5: detected capacity change from 0 to 8192 [ 148.802683][ T8064] loop4: detected capacity change from 0 to 2048 [ 148.827882][ T8066] loop1: detected capacity change from 0 to 512 [ 148.837945][ T3519] loop5: p1 p2 p4 [ 148.842474][ T3519] loop5: p1 size 65536 extends beyond EOD, truncated [ 148.860607][ T3519] loop5: p2 start 861536256 is beyond EOD, truncated [ 148.867422][ T3519] loop5: p4 size 65536 extends beyond EOD, truncated [ 148.878016][ T8064] EXT4-fs error (device loop4): ext4_find_extent:939: inode #2: comm syz.4.1435: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 148.896831][ T8071] siw: device registration error -23 [ 148.903824][ T8066] ext4 filesystem being mounted at /272/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 148.914549][ T8064] EXT4-fs (loop4): Remounting filesystem read-only [ 148.922894][ T8054] loop5: p1 p2 p4 [ 148.927939][ T8054] loop5: p1 size 65536 extends beyond EOD, truncated [ 148.955305][ T8054] loop5: p2 start 861536256 is beyond EOD, truncated [ 148.955970][ T8066] FAULT_INJECTION: forcing a failure. [ 148.955970][ T8066] name failslab, interval 1, probability 0, space 0, times 0 [ 148.962129][ T8054] loop5: p4 size 65536 extends beyond EOD, truncated [ 148.974903][ T8066] CPU: 0 UID: 0 PID: 8066 Comm: syz.1.1436 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 148.974951][ T8066] Tainted: [W]=WARN [ 148.974960][ T8066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 148.974978][ T8066] Call Trace: [ 148.974987][ T8066] [ 148.974996][ T8066] __dump_stack+0x1d/0x30 [ 148.975079][ T8066] dump_stack_lvl+0xe8/0x140 [ 148.975106][ T8066] dump_stack+0x15/0x1b [ 148.975130][ T8066] should_fail_ex+0x265/0x280 [ 148.975160][ T8066] should_failslab+0x8c/0xb0 [ 148.975194][ T8066] __kmalloc_noprof+0xa5/0x3e0 [ 148.975312][ T8066] ? ext4_find_extent+0x16b/0x7a0 [ 148.975376][ T8066] ext4_find_extent+0x16b/0x7a0 [ 148.975421][ T8066] ext4_move_extents+0x381/0x710 [ 148.975458][ T8066] ext4_ioctl+0x1c07/0x2080 [ 148.975492][ T8066] ? file_ioctl+0x146/0x530 [ 148.975517][ T8066] ? ioctl_has_perm+0x257/0x2a0 [ 148.975623][ T8066] ? do_vfs_ioctl+0x7ca/0xe10 [ 148.975649][ T8066] ? selinux_file_ioctl+0x308/0x3a0 [ 148.975677][ T8066] ? __fget_files+0x184/0x1c0 [ 148.975713][ T8066] ? __pfx_ext4_ioctl+0x10/0x10 [ 148.975767][ T8066] __se_sys_ioctl+0xce/0x140 [ 148.975793][ T8066] __x64_sys_ioctl+0x43/0x50 [ 148.975837][ T8066] x64_sys_call+0x1816/0x2ff0 [ 148.975975][ T8066] do_syscall_64+0xd2/0x200 [ 148.976034][ T8066] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 148.976066][ T8066] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 148.976183][ T8066] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.976227][ T8066] RIP: 0033:0x7f75212bebe9 [ 148.976249][ T8066] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 148.976352][ T8066] RSP: 002b:00007f751fd27038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 148.976379][ T8066] RAX: ffffffffffffffda RBX: 00007f75214e5fa0 RCX: 00007f75212bebe9 [ 148.976398][ T8066] RDX: 0000200000000040 RSI: 00000000c028660f RDI: 0000000000000005 [ 148.976416][ T8066] RBP: 00007f751fd27090 R08: 0000000000000000 R09: 0000000000000000 [ 148.976433][ T8066] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 148.976448][ T8066] R13: 00007f75214e6038 R14: 00007f75214e5fa0 R15: 00007fff424c8848 [ 148.976475][ T8066] [ 149.340820][ T3519] udevd[3519]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 149.365993][ T4848] udevd[4848]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 149.393472][ T8088] loop4: detected capacity change from 0 to 128 [ 149.405027][ T8088] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 149.412947][ T8088] FAT-fs (loop4): Filesystem has been set read-only [ 149.421289][ T8088] syz.4.1443: attempt to access beyond end of device [ 149.421289][ T8088] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 149.442168][ T3519] udevd[3519]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 149.453837][ T4848] udevd[4848]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 149.475565][ T8097] loop1: detected capacity change from 0 to 164 [ 149.631404][ T8102] loop5: detected capacity change from 0 to 512 [ 149.656091][ T8102] EXT4-fs error (device loop5): ext4_acquire_dquot:6937: comm syz.5.1448: Failed to acquire dquot type 1 [ 149.680083][ T8102] EXT4-fs (loop5): 1 truncate cleaned up [ 149.694662][ T8102] ext4 filesystem being mounted at /178/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 149.710162][ T8115] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=8115 comm=syz.0.1452 [ 149.756983][ T8117] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=8117 comm=syz.0.1463 [ 149.779252][ T8120] SELinux: security_context_str_to_sid () failed with errno=-22 [ 149.790502][ T8119] SELinux: policydb table sizes (830110067,0) do not match mine (8,7) [ 149.805869][ T8119] SELinux: failed to load policy [ 149.862594][ T8124] loop4: detected capacity change from 0 to 512 [ 149.896991][ T8124] ext4 filesystem being mounted at /289/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 150.013291][ T29] kauditd_printk_skb: 333 callbacks suppressed [ 150.019684][ T29] audit: type=1326 audit(1756065929.019:3660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8123 comm="syz.4.1455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93fc86ebe9 code=0x7ffc0000 [ 150.043299][ T29] audit: type=1326 audit(1756065929.019:3661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8123 comm="syz.4.1455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93fc86ebe9 code=0x7ffc0000 [ 150.069209][ T29] audit: type=1326 audit(1756065929.079:3662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8123 comm="syz.4.1455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f93fc86ebe9 code=0x7ffc0000 [ 150.092981][ T29] audit: type=1326 audit(1756065929.079:3663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8123 comm="syz.4.1455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93fc86ebe9 code=0x7ffc0000 [ 150.116620][ T29] audit: type=1326 audit(1756065929.079:3664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8123 comm="syz.4.1455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93fc86ebe9 code=0x7ffc0000 [ 150.140471][ T29] audit: type=1326 audit(1756065929.079:3665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8123 comm="syz.4.1455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f93fc86ebe9 code=0x7ffc0000 [ 150.164477][ T29] audit: type=1326 audit(1756065929.079:3666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8123 comm="syz.4.1455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93fc86ebe9 code=0x7ffc0000 [ 150.188031][ T29] audit: type=1326 audit(1756065929.079:3667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8123 comm="syz.4.1455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93fc86ebe9 code=0x7ffc0000 [ 150.211576][ T29] audit: type=1326 audit(1756065929.079:3668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8123 comm="syz.4.1455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f93fc86ebe9 code=0x7ffc0000 [ 150.216870][ T7767] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 248: padding at end of block bitmap is not set [ 150.235246][ T29] audit: type=1326 audit(1756065929.079:3669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8123 comm="syz.4.1455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93fc86ebe9 code=0x7ffc0000 [ 150.373941][ T8141] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=8141 comm=syz.5.1460 [ 150.427839][ T8150] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=8150 comm=syz.5.1466 [ 150.454631][ T8145] hub 9-0:1.0: USB hub found [ 150.469713][ T8145] hub 9-0:1.0: 8 ports detected [ 150.510008][ T8159] __nla_validate_parse: 11 callbacks suppressed [ 150.510039][ T8159] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1471'. [ 150.538836][ T8161] loop1: detected capacity change from 0 to 512 [ 150.571703][ T8158] loop3: detected capacity change from 0 to 2048 [ 150.571825][ T8164] loop5: detected capacity change from 0 to 256 [ 150.598639][ T8158] EXT4-fs error (device loop3): ext4_find_extent:939: inode #2: comm syz.3.1469: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 150.602561][ T8161] ext4 filesystem being mounted at /276/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 150.659793][ T8164] FAT-fs (loop5): Directory bread(block 1285) failed [ 150.668827][ T8158] EXT4-fs (loop3): Remounting filesystem read-only [ 150.685685][ T8164] FAT-fs (loop5): Directory bread(block 1285) failed [ 150.692446][ T8164] FAT-fs (loop5): Directory bread(block 1285) failed [ 150.710817][ T8164] FAT-fs (loop5): Directory bread(block 1285) failed [ 150.767486][ T8173] loop5: detected capacity change from 0 to 512 [ 150.783400][ T8174] loop3: detected capacity change from 0 to 1024 [ 150.817011][ T8173] ext4 filesystem being mounted at /184/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 150.850174][ T8173] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #2: comm syz.5.1475: corrupted inode contents [ 150.869254][ T8173] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #2: comm syz.5.1475: mark_inode_dirty error [ 150.880910][ T8162] loop4: detected capacity change from 0 to 32768 [ 150.883261][ T8174] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1473'. [ 150.891276][ T8173] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #2: comm syz.5.1475: corrupted inode contents [ 150.911070][ T8174] 8021q: adding VLAN 0 to HW filter on device bond8 [ 150.912862][ T8173] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #2: comm syz.5.1475: corrupted inode contents [ 150.930886][ T8173] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #2: comm syz.5.1475: mark_inode_dirty error [ 150.935715][ T8174] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1473'. [ 150.943387][ T8173] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #2: comm syz.5.1475: corrupted inode contents [ 150.973396][ T8173] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #2: comm syz.5.1475: mark_inode_dirty error [ 150.989346][ T8173] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #2: comm syz.5.1475: corrupted inode contents [ 151.003343][ T8174] bond8 (unregistering): Released all slaves [ 151.007654][ T8173] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #2: comm syz.5.1475: mark_inode_dirty error [ 151.158572][ T8199] loop1: detected capacity change from 0 to 128 [ 151.201523][ T8202] loop3: detected capacity change from 0 to 512 [ 151.210181][ T8199] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 151.218184][ T8199] FAT-fs (loop1): Filesystem has been set read-only [ 151.258765][ T8199] syz.1.1485: attempt to access beyond end of device [ 151.258765][ T8199] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 151.273603][ T8202] ext4 filesystem being mounted at /306/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 151.375361][ T8192] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1482'. [ 151.388654][ T8217] loop3: detected capacity change from 0 to 512 [ 151.432563][ T8222] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1494'. [ 151.498901][ T8217] ext4 filesystem being mounted at /307/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 151.526622][ T8217] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #2: comm syz.3.1491: corrupted inode contents [ 151.544842][ T8229] netlink: 'syz.5.1496': attribute type 1 has an invalid length. [ 151.573214][ T8229] 8021q: adding VLAN 0 to HW filter on device bond6 [ 151.585160][ T8217] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #2: comm syz.3.1491: mark_inode_dirty error [ 151.597871][ T8217] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #2: comm syz.3.1491: corrupted inode contents [ 151.671837][ T8217] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #2: comm syz.3.1491: corrupted inode contents [ 151.713516][ T8217] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #2: comm syz.3.1491: mark_inode_dirty error [ 151.738186][ T8217] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #2: comm syz.3.1491: corrupted inode contents [ 151.765349][ T8217] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #2: comm syz.3.1491: mark_inode_dirty error [ 151.796544][ T8217] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #2: comm syz.3.1491: corrupted inode contents [ 151.832001][ T8217] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #2: comm syz.3.1491: mark_inode_dirty error [ 151.935111][ T8241] loop5: detected capacity change from 0 to 128 [ 151.948906][ T8241] ext4 filesystem being mounted at /188/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 152.046242][ T8246] loop3: detected capacity change from 0 to 256 [ 152.067963][ T8246] FAT-fs (loop3): Directory bread(block 1285) failed [ 152.136493][ T8246] FAT-fs (loop3): Directory bread(block 1285) failed [ 152.150288][ T8246] FAT-fs (loop3): Directory bread(block 1285) failed [ 152.162263][ T8246] FAT-fs (loop3): Directory bread(block 1285) failed [ 152.259925][ T8251] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1504'. [ 152.304747][ T8252] loop3: detected capacity change from 0 to 2048 [ 152.336253][ T8252] EXT4-fs error (device loop3): ext4_find_extent:939: inode #2: comm syz.3.1505: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 152.374543][ T8252] EXT4-fs (loop3): Remounting filesystem read-only [ 152.385446][ T8260] loop4: detected capacity change from 0 to 256 [ 152.419717][ T8260] FAT-fs (loop4): Directory bread(block 1285) failed [ 152.461588][ T8260] FAT-fs (loop4): Directory bread(block 1285) failed [ 152.500089][ T8266] loop3: detected capacity change from 0 to 164 [ 152.501655][ T8260] FAT-fs (loop4): Directory bread(block 1285) failed [ 152.528334][ T8265] netlink: 'syz.5.1509': attribute type 1 has an invalid length. [ 152.536676][ T8260] FAT-fs (loop4): Directory bread(block 1285) failed [ 152.551723][ T8265] 8021q: adding VLAN 0 to HW filter on device bond7 [ 152.602083][ T8269] loop1: detected capacity change from 0 to 512 [ 152.708079][ T8269] ext4 filesystem being mounted at /288/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 152.752188][ T8277] loop4: detected capacity change from 0 to 1024 [ 152.763700][ T8281] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1515'. [ 152.772867][ T8281] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1515'. [ 152.820148][ T8277] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 152.871893][ T8277] EXT4-fs error (device loop4): ext4_map_blocks:814: inode #3: block 1: comm syz.4.1513: lblock 1 mapped to illegal pblock 1 (length 1) [ 152.904811][ T8289] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1517'. [ 152.972020][ T8277] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.1513: Failed to acquire dquot type 0 [ 153.029678][ T8300] loop3: detected capacity change from 0 to 512 [ 153.043903][ T8277] EXT4-fs error (device loop4): ext4_free_blocks:6696: comm syz.4.1513: Freeing blocks not in datazone - block = 0, count = 4096 [ 153.064086][ T8289] dummy0: entered allmulticast mode [ 153.085585][ T8300] msdos: Bad value for 'uid' [ 153.090248][ T8300] msdos: Bad value for 'uid' [ 153.096796][ T8297] vhci_hcd: invalid port number 224 [ 153.107618][ T8289] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1517'. [ 153.120642][ T8277] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.1513: Invalid inode bitmap blk 0 in block_group 0 [ 153.143731][ T8277] EXT4-fs error (device loop4) in ext4_free_inode:361: Corrupt filesystem [ 153.145546][ T3793] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:10: lblock 1 mapped to illegal pblock 1 (length 1) [ 153.152521][ T8277] EXT4-fs (loop4): 1 orphan inode deleted [ 153.173174][ T8286] dummy0: left allmulticast mode [ 153.180840][ T3793] EXT4-fs error (device loop4): ext4_release_dquot:6973: comm kworker/u8:10: Failed to release dquot type 0 [ 153.232137][ T31] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 153.251830][ T8306] loop5: detected capacity change from 0 to 1024 [ 153.258281][ T31] EXT4-fs error (device loop4): ext4_release_dquot:6973: comm kworker/u8:1: Failed to release dquot type 0 [ 153.296201][ T8306] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 153.307199][ T8306] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 153.320478][ T8306] JBD2: no valid journal superblock found [ 153.326562][ T8306] EXT4-fs (loop5): Could not load journal inode [ 153.361862][ T8317] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=8317 comm=syz.4.1529 [ 153.462318][ T8322] loop1: detected capacity change from 0 to 8192 [ 153.505731][ T3518] loop1: p1 p2 p4 [ 153.509861][ T3518] loop1: p1 size 65536 extends beyond EOD, truncated [ 153.517717][ T8329] loop4: detected capacity change from 0 to 512 [ 153.536480][ T3518] loop1: p2 start 861536256 is beyond EOD, truncated [ 153.539746][ T8329] msdos: Bad value for 'uid' [ 153.543239][ T3518] loop1: p4 size 65536 extends beyond EOD, truncated [ 153.547910][ T8329] msdos: Bad value for 'uid' [ 153.598705][ T8322] loop1: p1 p2 p4 [ 153.602628][ T8322] loop1: p1 size 65536 extends beyond EOD, truncated [ 153.626274][ T8322] loop1: p2 start 861536256 is beyond EOD, truncated [ 153.632718][ T8333] loop5: detected capacity change from 0 to 1024 [ 153.633072][ T8322] loop1: p4 size 65536 extends beyond EOD, truncated [ 153.655697][ T8336] siw: device registration error -23 [ 153.698902][ T8333] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 153.721856][ T8320] loop3: detected capacity change from 0 to 128 [ 153.764621][ T8320] ext4 filesystem being mounted at /315/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 153.787197][ T8333] EXT4-fs error (device loop5): ext4_map_blocks:814: inode #3: block 1: comm syz.5.1536: lblock 1 mapped to illegal pblock 1 (length 1) [ 153.834800][ T3519] udevd[3519]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 153.847869][ T8333] EXT4-fs error (device loop5): ext4_acquire_dquot:6937: comm syz.5.1536: Failed to acquire dquot type 0 [ 153.850197][ T3518] udevd[3518]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 153.870333][ T8333] EXT4-fs error (device loop5): ext4_free_blocks:6696: comm syz.5.1536: Freeing blocks not in datazone - block = 0, count = 4096 [ 153.924753][ T8350] openvswitch: netlink: Message has 6 unknown bytes. [ 153.954323][ T3518] udevd[3518]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 153.966379][ T8335] loop4: detected capacity change from 0 to 32768 [ 153.985899][ T8333] EXT4-fs error (device loop5): ext4_read_inode_bitmap:139: comm syz.5.1536: Invalid inode bitmap blk 0 in block_group 0 [ 153.990814][ T3519] udevd[3519]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 154.008928][ T31] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 154.084223][ T31] EXT4-fs error (device loop5): ext4_release_dquot:6973: comm kworker/u8:1: Failed to release dquot type 0 [ 154.099699][ T8333] EXT4-fs error (device loop5) in ext4_free_inode:361: Corrupt filesystem [ 154.139636][ T8333] EXT4-fs (loop5): 1 orphan inode deleted [ 154.331428][ T8374] loop4: detected capacity change from 0 to 8192 [ 154.344495][ T3417] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 154.385502][ T3417] EXT4-fs error (device loop5): ext4_release_dquot:6973: comm kworker/u8:7: Failed to release dquot type 0 [ 154.389097][ T8377] 8021q: adding VLAN 0 to HW filter on device bond16 [ 154.397786][ T3519] loop4: p1 p2 p4 [ 154.405820][ T8377] bond15: (slave bond16): Enslaving as an active interface with an up link [ 154.410810][ T8379] loop3: detected capacity change from 0 to 2048 [ 154.435913][ T8377] bond15 (unregistering): (slave bond16): Releasing backup interface [ 154.444364][ T3519] loop4: p1 size 65536 extends beyond EOD, truncated [ 154.453708][ T3519] loop4: p2 start 861536256 is beyond EOD, truncated [ 154.460488][ T3519] loop4: p4 size 65536 extends beyond EOD, truncated [ 154.468782][ T8377] bond15 (unregistering): Released all slaves [ 154.478170][ T8374] loop4: p1 p2 p4 [ 154.481988][ T8374] loop4: p1 size 65536 extends beyond EOD, truncated [ 154.489221][ T8359] loop1: detected capacity change from 0 to 32768 [ 154.504555][ T8374] loop4: p2 start 861536256 is beyond EOD, truncated [ 154.511762][ T8374] loop4: p4 size 65536 extends beyond EOD, truncated [ 154.528999][ T8379] EXT4-fs error (device loop3): ext4_find_extent:939: inode #2: comm syz.3.1551: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 154.542515][ T8374] siw: device registration error -23 [ 154.547124][ T8379] EXT4-fs (loop3): Remounting filesystem read-only [ 154.634691][ T8374] Invalid logical block size (3) [ 154.676979][ T8391] loop3: detected capacity change from 0 to 512 [ 154.689514][ T8386] loop5: detected capacity change from 0 to 512 [ 154.709025][ T8391] ext4 filesystem being mounted at /319/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 154.780113][ T8386] EXT4-fs error (device loop5): ext4_acquire_dquot:6937: comm syz.5.1552: Failed to acquire dquot type 1 [ 154.851960][ T3518] udevd[3518]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 154.863455][ T3294] udevd[3294]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 154.894151][ T3518] udevd[3518]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 154.915723][ T4848] udevd[4848]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 154.919978][ T8386] EXT4-fs (loop5): 1 truncate cleaned up [ 154.976318][ T8386] ext4 filesystem being mounted at /201/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 154.983376][ T8407] loop1: detected capacity change from 0 to 164 [ 155.059914][ T8411] loop4: detected capacity change from 0 to 1024 [ 155.070789][ T8386] SELinux: security_context_str_to_sid () failed with errno=-22 [ 155.080055][ T8411] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 155.130796][ T8411] EXT4-fs error (device loop4): ext4_map_blocks:814: inode #3: block 1: comm syz.4.1562: lblock 1 mapped to illegal pblock 1 (length 1) [ 155.172636][ T8411] __quota_error: 151 callbacks suppressed [ 155.172659][ T8411] Quota error (device loop4): write_blk: dquota write failed [ 155.176789][ T8421] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=8421 comm=syz.3.1565 [ 155.178606][ T8411] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 155.231558][ T29] audit: type=1326 audit(1756065934.239:3811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8424 comm="syz.3.1567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6be40ebe9 code=0x7ffc0000 [ 155.285357][ T8411] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.1562: Failed to acquire dquot type 0 [ 155.314272][ T29] audit: type=1326 audit(1756065934.289:3812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8424 comm="syz.3.1567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6be40ebe9 code=0x7ffc0000 [ 155.337850][ T29] audit: type=1326 audit(1756065934.289:3813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8424 comm="syz.3.1567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7ff6be40ebe9 code=0x7ffc0000 [ 155.361365][ T29] audit: type=1326 audit(1756065934.289:3814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8424 comm="syz.3.1567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6be40ebe9 code=0x7ffc0000 [ 155.361852][ T8416] loop1: detected capacity change from 0 to 8192 [ 155.385038][ T29] audit: type=1326 audit(1756065934.299:3815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8424 comm="syz.3.1567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff6be40ebe9 code=0x7ffc0000 [ 155.414936][ T29] audit: type=1326 audit(1756065934.299:3816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8424 comm="syz.3.1567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6be40ebe9 code=0x7ffc0000 [ 155.414998][ T8411] EXT4-fs error (device loop4): ext4_free_blocks:6696: comm syz.4.1562: Freeing blocks not in datazone - block = 0, count = 4096 [ 155.415471][ T8411] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.1562: Invalid inode bitmap blk 0 in block_group 0 [ 155.438633][ T29] audit: type=1326 audit(1756065934.299:3817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8424 comm="syz.3.1567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7ff6be40ebe9 code=0x7ffc0000 [ 155.438702][ T29] audit: type=1326 audit(1756065934.299:3818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8424 comm="syz.3.1567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6be40ebe9 code=0x7ffc0000 [ 155.454570][ T3793] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:10: lblock 1 mapped to illegal pblock 1 (length 1) [ 155.523829][ T8428] siw: device registration error -23 [ 155.537827][ T8416] loop1: p1 p2 p4 [ 155.545650][ T8411] EXT4-fs error (device loop4) in ext4_free_inode:361: Corrupt filesystem [ 155.552337][ T8416] loop1: p1 size 65536 extends beyond EOD, truncated [ 155.554431][ T8411] EXT4-fs (loop4): 1 orphan inode deleted [ 155.569487][ T8416] loop1: p2 start 861536256 is beyond EOD, truncated [ 155.576295][ T8416] loop1: p4 size 65536 extends beyond EOD, truncated [ 155.590234][ T3793] EXT4-fs error (device loop4): ext4_release_dquot:6973: comm kworker/u8:10: Failed to release dquot type 0 [ 155.638605][ T2993] loop1: p1 p2 p4 [ 155.643836][ T2993] loop1: p1 size 65536 extends beyond EOD, truncated [ 155.660048][ T2993] loop1: p2 start 861536256 is beyond EOD, truncated [ 155.666808][ T2993] loop1: p4 size 65536 extends beyond EOD, truncated [ 155.687350][ T3793] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:10: lblock 1 mapped to illegal pblock 1 (length 1) [ 155.717862][ T3793] EXT4-fs error (device loop4): ext4_release_dquot:6973: comm kworker/u8:10: Failed to release dquot type 0 [ 155.735597][ T3519] udevd[3519]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 155.746354][ T3518] udevd[3518]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 155.771065][ T8437] __nla_validate_parse: 12 callbacks suppressed [ 155.771146][ T8437] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1574'. [ 155.799488][ T3519] udevd[3519]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 155.812174][ T4848] udevd[4848]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 155.897514][ T8443] loop5: detected capacity change from 0 to 512 [ 155.906128][ T8443] msdos: Bad value for 'uid' [ 155.910776][ T8443] msdos: Bad value for 'uid' [ 155.945598][ T8437] 8021q: adding VLAN 0 to HW filter on device bond18 [ 155.983061][ T8437] bond17: (slave bond18): Enslaving as an active interface with an up link [ 156.025013][ T8440] dummy0: entered allmulticast mode [ 156.042138][ T8453] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=8453 comm=syz.5.1579 [ 156.067958][ T8457] loop4: detected capacity change from 0 to 512 [ 156.075008][ T8445] loop3: detected capacity change from 0 to 32768 [ 156.086224][ T8457] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.1578: Failed to acquire dquot type 1 [ 156.099764][ T8437] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1574'. [ 156.109498][ T8465] openvswitch: netlink: Message has 6 unknown bytes. [ 156.123536][ T8457] EXT4-fs (loop4): 1 truncate cleaned up [ 156.133506][ T8457] ext4 filesystem being mounted at /309/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 156.147525][ T8457] SELinux: security_context_str_to_sid () failed with errno=-22 [ 156.194687][ T8437] bond17 (unregistering): (slave bond18): Releasing backup interface [ 156.217498][ T8437] bond17 (unregistering): Released all slaves [ 156.251669][ T8476] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1587'. [ 156.282457][ T8478] netlink: 'syz.4.1588': attribute type 1 has an invalid length. [ 156.293387][ T8476] SELinux: policydb table sizes (830110067,0) do not match mine (8,7) [ 156.305912][ T8476] SELinux: failed to load policy [ 156.332555][ T8478] 8021q: adding VLAN 0 to HW filter on device bond13 [ 156.332938][ T8484] 9pnet_fd: Insufficient options for proto=fd [ 156.342287][ T8435] dummy0: left allmulticast mode [ 156.441641][ T8494] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=8494 comm=syz.5.1593 [ 156.483346][ T8499] loop1: detected capacity change from 0 to 1024 [ 156.529222][ T8496] SELinux: security_context_str_to_sid () failed with errno=-22 [ 156.534922][ T8499] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 156.565786][ T8504] loop4: detected capacity change from 0 to 512 [ 156.596627][ T8499] EXT4-fs error (device loop1): ext4_map_blocks:814: inode #3: block 1: comm syz.1.1596: lblock 1 mapped to illegal pblock 1 (length 1) [ 156.624505][ T8504] ext4 filesystem being mounted at /314/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 156.664088][ T8499] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.1596: Failed to acquire dquot type 0 [ 156.679469][ T8499] EXT4-fs error (device loop1): ext4_free_blocks:6696: comm syz.1.1596: Freeing blocks not in datazone - block = 0, count = 4096 [ 156.694933][ T8486] loop3: detected capacity change from 0 to 32768 [ 156.702831][ T8499] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.1596: Invalid inode bitmap blk 0 in block_group 0 [ 156.715788][ T51] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 156.716336][ T51] EXT4-fs error (device loop1): ext4_release_dquot:6973: comm kworker/u8:3: Failed to release dquot type 0 [ 156.732699][ T8499] EXT4-fs error (device loop1) in ext4_free_inode:361: Corrupt filesystem [ 156.751320][ T8499] EXT4-fs (loop1): 1 orphan inode deleted [ 156.805256][ T8524] loop4: detected capacity change from 0 to 128 [ 156.821876][ T8524] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 156.830029][ T8524] FAT-fs (loop4): Filesystem has been set read-only [ 156.843942][ T8524] syz.4.1605: attempt to access beyond end of device [ 156.843942][ T8524] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 156.851059][ T8526] loop5: detected capacity change from 0 to 2048 [ 156.866114][ T37] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 156.881640][ T37] EXT4-fs error (device loop1): ext4_release_dquot:6973: comm kworker/u8:2: Failed to release dquot type 0 [ 156.896675][ T8526] EXT4-fs error (device loop5): ext4_find_extent:939: inode #2: comm syz.5.1606: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 156.921495][ T8526] EXT4-fs (loop5): Remounting filesystem read-only [ 156.976221][ T8533] loop5: detected capacity change from 0 to 164 [ 156.977979][ T8535] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=8535 comm=syz.1.1609 [ 157.166714][ T8542] loop4: detected capacity change from 0 to 2048 [ 157.230815][ T8542] EXT4-fs error (device loop4): ext4_find_extent:939: inode #2: comm syz.4.1612: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 157.317296][ T8542] EXT4-fs (loop4): Remounting filesystem read-only [ 157.331904][ T8561] loop3: detected capacity change from 0 to 1024 [ 157.363385][ T8561] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1618'. [ 157.367714][ T8566] loop5: detected capacity change from 0 to 512 [ 157.398181][ T8566] ext4 filesystem being mounted at /216/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 157.437584][ T8561] 8021q: adding VLAN 0 to HW filter on device bond8 [ 157.440217][ T8572] netlink: 392 bytes leftover after parsing attributes in process `syz.4.1622'. [ 157.455490][ T8566] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #2: comm syz.5.1621: corrupted inode contents [ 157.477741][ T8566] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #2: comm syz.5.1621: mark_inode_dirty error [ 157.478862][ T8573] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1618'. [ 157.521790][ T8573] bond8 (unregistering): Released all slaves [ 157.533638][ T8566] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #2: comm syz.5.1621: corrupted inode contents [ 157.553835][ T8559] loop1: detected capacity change from 0 to 128 [ 157.579346][ T8566] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #2: comm syz.5.1621: corrupted inode contents [ 157.580021][ T8559] ext4 filesystem being mounted at /305/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 157.608132][ T8566] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #2: comm syz.5.1621: mark_inode_dirty error [ 157.640365][ T8580] loop4: detected capacity change from 0 to 512 [ 157.684555][ T8580] EXT4-fs error (device loop4): ext4_iget_extra_inode:5104: inode #15: comm syz.4.1625: corrupted in-inode xattr: invalid ea_ino [ 157.715742][ T8580] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.1625: couldn't read orphan inode 15 (err -117) [ 157.732607][ T8566] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #2: comm syz.5.1621: corrupted inode contents [ 157.766251][ T8566] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #2: comm syz.5.1621: mark_inode_dirty error [ 157.823804][ T8566] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #2: comm syz.5.1621: corrupted inode contents [ 157.824379][ T8589] vhci_hcd: invalid port number 224 [ 157.876783][ T8566] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #2: comm syz.5.1621: mark_inode_dirty error [ 157.937734][ T8592] SELinux: policydb table sizes (830110067,0) do not match mine (8,7) [ 157.946501][ T8592] SELinux: failed to load policy [ 157.983175][ T8595] openvswitch: netlink: Message has 6 unknown bytes. [ 158.002687][ T8597] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=8597 comm=syz.1.1631 [ 158.362538][ T8608] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1625'. [ 158.710629][ T8617] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1639'. [ 158.754279][ T8621] netlink: 392 bytes leftover after parsing attributes in process `syz.0.1637'. [ 158.919191][ T8630] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=8630 comm=syz.1.1642 [ 158.982593][ T8587] Set syz1 is full, maxelem 65536 reached [ 159.027547][ T8634] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1644'. [ 159.165102][ T8646] loop5: detected capacity change from 0 to 512 [ 159.204479][ T8649] loop1: detected capacity change from 0 to 1024 [ 159.227797][ T8646] ext4 filesystem being mounted at /223/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 159.238535][ T8634] loop3: detected capacity change from 0 to 8192 [ 159.245262][ T8649] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 159.258180][ T8649] EXT4-fs error (device loop1): ext4_map_blocks:814: inode #3: block 1: comm syz.1.1651: lblock 1 mapped to illegal pblock 1 (length 1) [ 159.272696][ T8649] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.1651: Failed to acquire dquot type 0 [ 159.289614][ T8649] EXT4-fs error (device loop1): ext4_free_blocks:6696: comm syz.1.1651: Freeing blocks not in datazone - block = 0, count = 4096 [ 159.305152][ T3518] loop3: p1 p2 p4 [ 159.308986][ T3518] loop3: p1 size 65536 extends beyond EOD, truncated [ 159.329115][ T3518] loop3: p2 start 861536256 is beyond EOD, truncated [ 159.335985][ T3518] loop3: p4 size 65536 extends beyond EOD, truncated [ 159.347431][ T8656] siw: device registration error -23 [ 159.355408][ T8649] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.1651: Invalid inode bitmap blk 0 in block_group 0 [ 159.373055][ T8634] loop3: p1 p2 p4 [ 159.378620][ T51] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 159.395161][ T8658] SELinux: policydb table sizes (830110067,0) do not match mine (8,7) [ 159.402972][ T8634] loop3: p1 size 65536 extends beyond EOD, truncated [ 159.416020][ T8658] SELinux: failed to load policy [ 159.417418][ T8649] EXT4-fs error (device loop1) in ext4_free_inode:361: Corrupt filesystem [ 159.429938][ T51] EXT4-fs error (device loop1): ext4_release_dquot:6973: comm kworker/u8:3: Failed to release dquot type 0 [ 159.442400][ T8634] loop3: p2 start 861536256 is beyond EOD, truncated [ 159.449239][ T8634] loop3: p4 size 65536 extends beyond EOD, truncated [ 159.456642][ T8649] EXT4-fs (loop1): 1 orphan inode deleted [ 159.492009][ T3793] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:10: lblock 1 mapped to illegal pblock 1 (length 1) [ 159.512015][ T3793] EXT4-fs error (device loop1): ext4_release_dquot:6973: comm kworker/u8:10: Failed to release dquot type 0 [ 159.688438][ T3518] udevd[3518]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 159.700058][ T3519] udevd[3519]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 159.900094][ T8677] loop3: detected capacity change from 0 to 8192 [ 159.950040][ T8686] siw: device registration error -23 [ 159.976278][ T3519] loop3: p1 p2 p4 [ 159.980362][ T3519] loop3: p1 size 65536 extends beyond EOD, truncated [ 159.993820][ T3519] loop3: p2 start 861536256 is beyond EOD, truncated [ 160.000630][ T3519] loop3: p4 size 65536 extends beyond EOD, truncated [ 160.029041][ T8685] loop1: detected capacity change from 0 to 512 [ 160.046924][ T8685] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.1663: Failed to acquire dquot type 1 [ 160.061887][ T8694] 9pnet_fd: Insufficient options for proto=fd [ 160.069586][ T8685] EXT4-fs (loop1): 1 truncate cleaned up [ 160.069637][ T8677] loop3: p1 p2 p4 [ 160.080423][ T8685] ext4 filesystem being mounted at /322/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 160.094186][ T8685] SELinux: security_context_str_to_sid () failed with errno=-22 [ 160.106495][ T8677] loop3: p1 size 65536 extends beyond EOD, truncated [ 160.144860][ T8677] loop3: p2 start 861536256 is beyond EOD, truncated [ 160.151672][ T8677] loop3: p4 size 65536 extends beyond EOD, truncated [ 160.214244][ T8698] SELinux: policydb table sizes (830110067,0) do not match mine (8,7) [ 160.222907][ T8698] SELinux: failed to load policy [ 160.323457][ T8706] loop3: detected capacity change from 0 to 2048 [ 160.335793][ T8708] loop1: detected capacity change from 0 to 128 [ 160.368871][ T8708] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 160.376815][ T8708] FAT-fs (loop1): Filesystem has been set read-only [ 160.383588][ T8708] syz.1.1672: attempt to access beyond end of device [ 160.383588][ T8708] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 160.399357][ T3519] udevd[3519]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 160.410605][ T4848] udevd[4848]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 160.438697][ T8706] EXT4-fs error (device loop3): ext4_find_extent:939: inode #2: comm syz.3.1669: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 160.471452][ T3519] udevd[3519]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 160.483038][ T3518] udevd[3518]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 160.524392][ T8715] loop5: detected capacity change from 0 to 2048 [ 160.538853][ T8706] EXT4-fs (loop3): Remounting filesystem read-only [ 160.577827][ T8715] EXT4-fs error (device loop5): ext4_find_extent:939: inode #2: comm syz.5.1674: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 160.608279][ T8720] loop1: detected capacity change from 0 to 512 [ 160.622445][ T8715] EXT4-fs (loop5): Remounting filesystem read-only [ 160.631248][ T8720] __quota_error: 137 callbacks suppressed [ 160.631262][ T8720] Quota error (device loop1): find_tree_dqentry: Cycle in quota tree detected: block 3 index 0 [ 160.647578][ T8720] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 160.657115][ T8720] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.1676: Failed to acquire dquot type 1 [ 160.697558][ T8720] EXT4-fs (loop1): 1 truncate cleaned up [ 160.703761][ T8720] ext4 filesystem being mounted at /326/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 160.736864][ T8733] loop5: detected capacity change from 0 to 1024 [ 160.745932][ T8720] SELinux: security_context_str_to_sid () failed with errno=-22 [ 160.761374][ T8733] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 160.795993][ T8736] __nla_validate_parse: 8 callbacks suppressed [ 160.796009][ T8736] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1680'. [ 160.802994][ T8733] EXT4-fs error (device loop5): ext4_map_blocks:814: inode #3: block 1: comm syz.5.1679: lblock 1 mapped to illegal pblock 1 (length 1) [ 160.811340][ T8736] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1680'. [ 160.838124][ T3305] EXT4-fs unmount: 81 callbacks suppressed [ 160.838143][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.855716][ T8733] Quota error (device loop5): write_blk: dquota write failed [ 160.863213][ T8733] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 160.925783][ T8733] EXT4-fs error (device loop5): ext4_acquire_dquot:6937: comm syz.5.1679: Failed to acquire dquot type 0 [ 160.941940][ T8742] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1682'. [ 160.956311][ T8733] EXT4-fs error (device loop5): ext4_free_blocks:6696: comm syz.5.1679: Freeing blocks not in datazone - block = 0, count = 4096 [ 161.006652][ T8742] 8021q: adding VLAN 0 to HW filter on device bond17 [ 161.015022][ T8733] EXT4-fs error (device loop5): ext4_read_inode_bitmap:139: comm syz.5.1679: Invalid inode bitmap blk 0 in block_group 0 [ 161.034287][ T31] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 161.060805][ T8742] bond15: (slave bond17): Enslaving as an active interface with an up link [ 161.073229][ T8747] netlink: 392 bytes leftover after parsing attributes in process `syz.1.1683'. [ 161.083838][ T8733] EXT4-fs error (device loop5) in ext4_free_inode:361: Corrupt filesystem [ 161.094735][ T8745] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1682'. [ 161.095600][ T31] Quota error (device loop5): remove_tree: Can't read quota data block 1 [ 161.112365][ T31] EXT4-fs error (device loop5): ext4_release_dquot:6973: comm kworker/u8:1: Failed to release dquot type 0 [ 161.126397][ T8733] EXT4-fs (loop5): 1 orphan inode deleted [ 161.132627][ T8733] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.147982][ T8745] bond15 (unregistering): (slave bond17): Releasing backup interface [ 161.166354][ T8745] bond15 (unregistering): Released all slaves [ 161.232377][ T4818] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.246627][ T31] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 161.261742][ T8738] loop3: detected capacity change from 0 to 32768 [ 161.271238][ T31] Quota error (device loop5): remove_tree: Can't read quota data block 1 [ 161.279760][ T31] EXT4-fs error (device loop5): ext4_release_dquot:6973: comm kworker/u8:1: Failed to release dquot type 0 [ 161.346246][ T8756] loop1: detected capacity change from 0 to 128 [ 161.380349][ T8756] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 161.388334][ T8756] FAT-fs (loop1): Filesystem has been set read-only [ 161.424099][ T8756] syz.1.1686: attempt to access beyond end of device [ 161.424099][ T8756] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 161.618334][ T8763] loop1: detected capacity change from 0 to 512 [ 161.632938][ T8752] loop5: detected capacity change from 0 to 128 [ 161.663520][ T8752] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 161.675751][ T8774] netlink: 392 bytes leftover after parsing attributes in process `syz.3.1694'. [ 161.701867][ T8763] Quota error (device loop1): find_tree_dqentry: Cycle in quota tree detected: block 3 index 0 [ 161.712386][ T8763] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 161.721910][ T8763] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.1691: Failed to acquire dquot type 1 [ 161.733233][ T8778] loop3: detected capacity change from 0 to 1024 [ 161.741380][ T8752] ext4 filesystem being mounted at /228/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 161.757838][ T8778] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 161.784949][ T8778] EXT4-fs error (device loop3): ext4_map_blocks:814: inode #3: block 1: comm syz.3.1695: lblock 1 mapped to illegal pblock 1 (length 1) [ 161.801049][ T8763] EXT4-fs (loop1): 1 truncate cleaned up [ 161.813377][ T8763] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.855305][ T8763] ext4 filesystem being mounted at /331/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 161.867275][ T8778] Quota error (device loop3): write_blk: dquota write failed [ 161.874811][ T8778] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 161.896515][ T8763] SELinux: security_context_str_to_sid () failed with errno=-22 [ 161.918578][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.934928][ T8778] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.1695: Failed to acquire dquot type 0 [ 161.966474][ T8781] loop1: detected capacity change from 0 to 164 [ 161.980185][ T8778] EXT4-fs error (device loop3): ext4_free_blocks:6696: comm syz.3.1695: Freeing blocks not in datazone - block = 0, count = 4096 [ 161.995140][ T8778] EXT4-fs error (device loop3): ext4_read_inode_bitmap:139: comm syz.3.1695: Invalid inode bitmap blk 0 in block_group 0 [ 161.995790][ T4818] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 162.017324][ T8778] EXT4-fs error (device loop3) in ext4_free_inode:361: Corrupt filesystem [ 162.036406][ T37] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 162.074188][ T37] EXT4-fs error (device loop3): ext4_release_dquot:6973: comm kworker/u8:2: Failed to release dquot type 0 [ 162.091988][ T8778] EXT4-fs (loop3): 1 orphan inode deleted [ 162.105969][ T8778] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.158009][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.171965][ T8787] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1697'. [ 162.181673][ T31] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 162.219916][ T8785] loop1: detected capacity change from 0 to 2048 [ 162.231236][ T31] EXT4-fs error (device loop3): ext4_release_dquot:6973: comm kworker/u8:1: Failed to release dquot type 0 [ 162.256370][ T8785] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 162.295143][ T8785] EXT4-fs error (device loop1): ext4_find_extent:939: inode #2: comm syz.1.1699: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 162.327111][ T8796] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1703'. [ 162.337039][ T8785] EXT4-fs (loop1): Remounting filesystem read-only [ 162.350016][ T8798] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1702'. [ 162.359059][ T8798] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1702'. [ 162.370388][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.423706][ T8798] loop5: detected capacity change from 0 to 8192 [ 162.457074][ T8802] loop3: detected capacity change from 0 to 256 [ 162.479449][ T3519] loop5: p1 p2 p4 [ 162.501449][ T3519] loop5: p1 size 65536 extends beyond EOD, truncated [ 162.512170][ T8802] FAT-fs (loop3): Directory bread(block 1285) failed [ 162.519242][ T3519] loop5: p2 start 861536256 is beyond EOD, truncated [ 162.526124][ T3519] loop5: p4 size 65536 extends beyond EOD, truncated [ 162.619749][ T8798] loop5: p1 p2 p4 [ 162.632782][ T8808] siw: device registration error -23 [ 162.638696][ T8809] FAT-fs (loop3): Directory bread(block 1285) failed [ 162.647241][ T8809] FAT-fs (loop3): Directory bread(block 1285) failed [ 162.658527][ T8798] loop5: p1 size 65536 extends beyond EOD, truncated [ 162.670785][ T8809] FAT-fs (loop3): Directory bread(block 1285) failed [ 162.686896][ T8798] loop5: p2 start 861536256 is beyond EOD, truncated [ 162.693709][ T8798] loop5: p4 size 65536 extends beyond EOD, truncated [ 162.758153][ T8811] loop1: detected capacity change from 0 to 164 [ 162.851399][ T8815] loop3: detected capacity change from 0 to 512 [ 162.899146][ T3519] udevd[3519]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 162.910623][ T3518] udevd[3518]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 162.923609][ T8815] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.950654][ T4848] udevd[4848]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 162.950745][ T3519] udevd[3519]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 163.021680][ T8815] ext4 filesystem being mounted at /347/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 163.085765][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.118769][ T8835] 8021q: adding VLAN 0 to HW filter on device bond9 [ 163.168529][ T8835] bond8: (slave bond9): Enslaving as an active interface with an up link [ 163.200687][ T8843] loop3: detected capacity change from 0 to 2048 [ 163.214650][ T8846] bond8 (unregistering): (slave bond9): Releasing backup interface [ 163.247331][ T8843] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 163.260854][ T8846] bond8 (unregistering): Released all slaves [ 163.269437][ T8843] EXT4-fs error (device loop3): ext4_find_extent:939: inode #2: comm syz.3.1719: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 163.270518][ T8843] EXT4-fs (loop3): Remounting filesystem read-only [ 163.285174][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.327810][ T8842] dummy0: entered allmulticast mode [ 163.394301][ T8854] loop3: detected capacity change from 0 to 8192 [ 163.396345][ T8834] dummy0: left allmulticast mode [ 163.444675][ T3519] loop3: p1 p2 p4 [ 163.448682][ T3519] loop3: p1 size 65536 extends beyond EOD, truncated [ 163.466498][ T3519] loop3: p2 start 861536256 is beyond EOD, truncated [ 163.473313][ T3519] loop3: p4 size 65536 extends beyond EOD, truncated [ 163.494428][ T8860] vhci_hcd: invalid port number 224 [ 163.502747][ T8854] loop3: p1 p2 p4 [ 163.509013][ T8854] loop3: p1 size 65536 extends beyond EOD, truncated [ 163.533490][ T8854] loop3: p2 start 861536256 is beyond EOD, truncated [ 163.540436][ T8854] loop3: p4 size 65536 extends beyond EOD, truncated [ 163.561449][ T8854] siw: device registration error -23 [ 163.600942][ T8854] Invalid logical block size (3) [ 163.671835][ T3518] udevd[3518]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 163.673578][ T3519] udevd[3519]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 163.700034][ T8876] loop3: detected capacity change from 0 to 2048 [ 163.718889][ T8876] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 163.744926][ T8876] EXT4-fs error (device loop3): ext4_find_extent:939: inode #2: comm syz.3.1732: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 163.797154][ T8876] EXT4-fs (loop3): Remounting filesystem read-only [ 163.808230][ T8883] loop5: detected capacity change from 0 to 128 [ 163.866003][ T8883] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 163.874082][ T8883] FAT-fs (loop5): Filesystem has been set read-only [ 163.881249][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.892840][ T8883] syz.5.1735: attempt to access beyond end of device [ 163.892840][ T8883] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 163.942322][ T8888] loop1: detected capacity change from 0 to 1024 [ 163.996995][ T8888] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 164.008022][ T8888] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 164.035907][ T8888] JBD2: no valid journal superblock found [ 164.041736][ T8888] EXT4-fs (loop1): Could not load journal inode [ 164.049135][ T8894] openvswitch: netlink: Message has 6 unknown bytes. [ 164.053530][ T8893] loop5: detected capacity change from 0 to 512 [ 164.071489][ T8892] SELinux: policydb table sizes (830110067,0) do not match mine (8,7) [ 164.086118][ T8892] SELinux: failed to load policy [ 164.155009][ T8893] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.235903][ T8893] ext4 filesystem being mounted at /240/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 164.311727][ T8891] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.352496][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.401819][ T8901] loop1: detected capacity change from 0 to 1024 [ 164.495659][ T8901] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 164.591003][ T8901] EXT4-fs error (device loop1): ext4_map_blocks:814: inode #3: block 1: comm syz.1.1740: lblock 1 mapped to illegal pblock 1 (length 1) [ 164.646123][ T8901] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.1740: Failed to acquire dquot type 0 [ 164.681151][ T8901] EXT4-fs error (device loop1): ext4_free_blocks:6696: comm syz.1.1740: Freeing blocks not in datazone - block = 0, count = 4096 [ 164.716430][ T8901] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.1740: Invalid inode bitmap blk 0 in block_group 0 [ 164.745168][ T8901] EXT4-fs error (device loop1) in ext4_free_inode:361: Corrupt filesystem [ 164.766871][ T8901] EXT4-fs (loop1): 1 orphan inode deleted [ 164.781104][ T8901] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.799195][ T3417] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 164.836924][ T3417] EXT4-fs error (device loop1): ext4_release_dquot:6973: comm kworker/u8:7: Failed to release dquot type 0 [ 164.887667][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.906599][ T3417] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 164.947508][ T3417] EXT4-fs error (device loop1): ext4_release_dquot:6973: comm kworker/u8:7: Failed to release dquot type 0 [ 165.066147][ T8916] loop1: detected capacity change from 0 to 164 [ 165.230642][ T8890] Set syz1 is full, maxelem 65536 reached [ 165.297577][ T8920] netlink: 'syz.5.1748': attribute type 1 has an invalid length. [ 165.360472][ T8922] loop3: detected capacity change from 0 to 2048 [ 165.458747][ T8931] loop1: detected capacity change from 0 to 2048 [ 165.467698][ T8922] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 165.496319][ T8922] EXT4-fs error (device loop3): ext4_find_extent:939: inode #2: comm syz.3.1747: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 165.498669][ T8939] loop5: detected capacity change from 0 to 128 [ 165.555564][ T8933] 8021q: adding VLAN 0 to HW filter on device bond15 [ 165.567894][ T8922] EXT4-fs (loop3): Remounting filesystem read-only [ 165.577701][ T8931] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 165.602824][ T8939] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 165.610826][ T8939] FAT-fs (loop5): Filesystem has been set read-only [ 165.624888][ T8933] bond14: (slave bond15): Enslaving as an active interface with an up link [ 165.656382][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.672581][ T8940] dummy0: entered allmulticast mode [ 165.679256][ T8939] syz.5.1754: attempt to access beyond end of device [ 165.679256][ T8939] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 165.693505][ T8931] EXT4-fs error (device loop1): ext4_find_extent:939: inode #2: comm syz.1.1750: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 165.711470][ T29] kauditd_printk_skb: 80 callbacks suppressed [ 165.711483][ T29] audit: type=1326 audit(1756065944.719:4016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8926 comm="syz.0.1751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5595c9ebe9 code=0x7ffc0000 [ 165.752302][ T8933] bond14 (unregistering): (slave bond15): Releasing backup interface [ 165.757596][ T8931] EXT4-fs (loop1): Remounting filesystem read-only [ 165.769062][ T8933] bond14 (unregistering): Released all slaves [ 165.778106][ T29] audit: type=1326 audit(1756065944.759:4017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8926 comm="syz.0.1751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5595c9ebe9 code=0x7ffc0000 [ 165.801755][ T29] audit: type=1326 audit(1756065944.769:4018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8926 comm="syz.0.1751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f5595c9ebe9 code=0x7ffc0000 [ 165.825190][ T29] audit: type=1326 audit(1756065944.769:4019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8926 comm="syz.0.1751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5595c9ebe9 code=0x7ffc0000 [ 165.848651][ T29] audit: type=1326 audit(1756065944.769:4020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8926 comm="syz.0.1751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5595c9ebe9 code=0x7ffc0000 [ 165.872246][ T29] audit: type=1326 audit(1756065944.769:4021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8926 comm="syz.0.1751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f5595c9ebe9 code=0x7ffc0000 [ 165.919818][ T8949] loop3: detected capacity change from 0 to 2048 [ 165.939321][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.949827][ T8950] binfmt_misc: register: failed to install interpreter file ./file0 [ 165.958348][ T8950] __nla_validate_parse: 9 callbacks suppressed [ 165.958366][ T8950] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1751'. [ 166.006484][ T8932] dummy0: left allmulticast mode [ 166.024133][ T8949] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 166.050280][ T8949] EXT4-fs error (device loop3): ext4_find_extent:939: inode #2: comm syz.3.1756: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 166.119718][ T8949] EXT4-fs (loop3): Remounting filesystem read-only [ 166.129819][ T8958] 9pnet_fd: Insufficient options for proto=fd [ 166.145097][ T8961] loop1: detected capacity change from 0 to 256 [ 166.168611][ T8961] FAT-fs (loop1): Directory bread(block 1285) failed [ 166.202764][ T8961] FAT-fs (loop1): Directory bread(block 1285) failed [ 166.213283][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.266480][ T8961] FAT-fs (loop1): Directory bread(block 1285) failed [ 166.288612][ T8961] FAT-fs (loop1): Directory bread(block 1285) failed [ 166.315585][ T8971] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1765'. [ 166.334261][ T8973] netlink: 'syz.4.1766': attribute type 1 has an invalid length. [ 166.360502][ T8973] 8021q: adding VLAN 0 to HW filter on device bond14 [ 166.371827][ T8971] SELinux: policydb table sizes (830110067,0) do not match mine (8,7) [ 166.402697][ T8971] SELinux: failed to load policy [ 166.449852][ T29] audit: type=1326 audit(1756065945.449:4022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8979 comm="syz.3.1769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6be40ebe9 code=0x7ffc0000 [ 166.507435][ T8983] loop1: detected capacity change from 0 to 2048 [ 166.556607][ T8983] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 166.572847][ T29] audit: type=1326 audit(1756065945.489:4023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8979 comm="syz.3.1769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7ff6be40ebe9 code=0x7ffc0000 [ 166.596918][ T29] audit: type=1326 audit(1756065945.489:4024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8979 comm="syz.3.1769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6be40ebe9 code=0x7ffc0000 [ 166.598149][ T8992] 9pnet_fd: Insufficient options for proto=fd [ 166.621035][ T29] audit: type=1326 audit(1756065945.489:4025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8979 comm="syz.3.1769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff6be40ebe9 code=0x7ffc0000 [ 166.652150][ T8983] EXT4-fs error (device loop1): ext4_find_extent:939: inode #2: comm syz.1.1768: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 166.700342][ T8983] EXT4-fs (loop1): Remounting filesystem read-only [ 166.779894][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.827588][ T9004] netlink: 'syz.3.1778': attribute type 1 has an invalid length. [ 166.846255][ T9009] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1780'. [ 166.878176][ T9004] 8021q: adding VLAN 0 to HW filter on device bond8 [ 166.988948][ T9019] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1782'. [ 166.997942][ T9019] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1782'. [ 167.046283][ T9009] loop4: detected capacity change from 0 to 8192 [ 167.105179][ T3519] loop4: p1 p2 p4 [ 167.117528][ T3519] loop4: p1 size 65536 extends beyond EOD, truncated [ 167.126774][ T9019] loop1: detected capacity change from 0 to 8192 [ 167.135253][ T3519] loop4: p2 start 861536256 is beyond EOD, truncated [ 167.142093][ T3519] loop4: p4 size 65536 extends beyond EOD, truncated [ 167.161945][ T9025] siw: device registration error -23 [ 167.173205][ T9009] loop4: p1 p2 p4 [ 167.181685][ T9009] loop4: p1 size 65536 extends beyond EOD, truncated [ 167.189541][ T3518] loop1: p1 p2 p4 [ 167.193525][ T3518] loop1: p1 size 65536 extends beyond EOD, truncated [ 167.200582][ T9009] loop4: p2 start 861536256 is beyond EOD, truncated [ 167.207438][ T9009] loop4: p4 size 65536 extends beyond EOD, truncated [ 167.214488][ T3518] loop1: p2 start 861536256 is beyond EOD, truncated [ 167.221204][ T3518] loop1: p4 size 65536 extends beyond EOD, truncated [ 167.251525][ T9019] loop1: p1 p2 p4 [ 167.259770][ T9019] loop1: p1 size 65536 extends beyond EOD, truncated [ 167.274822][ T4848] udevd[4848]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 167.294539][ T9015] loop5: detected capacity change from 0 to 32768 [ 167.295761][ T3519] udevd[3519]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 167.314782][ T9019] loop1: p2 start 861536256 is beyond EOD, truncated [ 167.319584][ T9028] siw: device registration error -23 [ 167.321531][ T9019] loop1: p4 size 65536 extends beyond EOD, truncated [ 167.378693][ T4848] udevd[4848]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 167.390666][ T3519] udevd[3519]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 167.433570][ T9034] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1788'. [ 167.513877][ T3519] udevd[3519]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 167.525507][ T3518] udevd[3518]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 167.557932][ T3518] udevd[3518]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 167.575625][ T3519] udevd[3519]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 167.755252][ T9037] SELinux: policydb table sizes (830110067,0) do not match mine (8,7) [ 167.783136][ T9042] loop5: detected capacity change from 0 to 512 [ 167.819930][ T9037] SELinux: failed to load policy [ 167.829594][ T9042] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.906285][ T9042] ext4 filesystem being mounted at /254/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 168.053916][ T9042] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.422032][ T9056] 9pnet_fd: Insufficient options for proto=fd [ 168.659019][ T9059] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1795'. [ 168.713959][ T9059] 8021q: adding VLAN 0 to HW filter on device bond8 [ 168.721383][ T9066] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1795'. [ 168.818198][ T9066] bond8 (unregistering): Released all slaves [ 169.127818][ T9070] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1798'. [ 169.137171][ T9070] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1798'. [ 169.300945][ T9070] loop3: detected capacity change from 0 to 8192 [ 169.467830][ T9077] siw: device registration error -23 [ 169.571494][ T9034] Set syz1 is full, maxelem 65536 reached [ 169.596727][ T9070] loop3: p1 p2 p4 [ 169.611172][ T9070] loop3: p1 size 65536 extends beyond EOD, truncated [ 169.631471][ T9070] loop3: p2 start 861536256 is beyond EOD, truncated [ 169.638363][ T9070] loop3: p4 size 65536 extends beyond EOD, truncated [ 169.654323][ T9079] loop1: detected capacity change from 0 to 164 [ 169.818202][ T9076] loop4: detected capacity change from 0 to 32768 [ 170.094597][ T9095] SELinux: policydb table sizes (830110067,0) do not match mine (8,7) [ 170.136895][ T9095] SELinux: failed to load policy [ 170.414241][ T9102] SELinux: policydb table sizes (830110067,0) do not match mine (8,7) [ 170.422944][ T9102] SELinux: failed to load policy [ 170.487234][ T9104] loop3: detected capacity change from 0 to 512 [ 170.515665][ T9104] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.529904][ T9104] ext4 filesystem being mounted at /370/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 170.577821][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.669261][ T9115] loop1: detected capacity change from 0 to 1024 [ 170.700638][ T9115] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 170.711660][ T9115] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 170.753541][ T9115] JBD2: no valid journal superblock found [ 170.759449][ T9115] EXT4-fs (loop1): Could not load journal inode [ 170.770231][ T9121] loop4: detected capacity change from 0 to 1024 [ 170.812808][ T9121] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.847428][ T9131] 9pnet_fd: Insufficient options for proto=fd [ 170.860073][ T9125] loop5: detected capacity change from 0 to 2048 [ 170.900489][ T9121] 8021q: adding VLAN 0 to HW filter on device bond16 [ 170.912218][ T9125] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 170.949358][ T9121] bond16 (unregistering): Released all slaves [ 170.956496][ T9125] EXT4-fs error (device loop5): ext4_find_extent:939: inode #2: comm syz.5.1816: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 170.997010][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 170.997030][ T29] audit: type=1326 audit(1756065949.989:4034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9136 comm="syz.3.1820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6be40ebe9 code=0x7ffc0000 [ 171.026975][ T29] audit: type=1326 audit(1756065949.989:4035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9136 comm="syz.3.1820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6be40ebe9 code=0x7ffc0000 [ 171.050554][ T29] audit: type=1326 audit(1756065949.989:4036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9136 comm="syz.3.1820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=281 compat=0 ip=0x7ff6be40ebe9 code=0x7ffc0000 [ 171.074343][ T29] audit: type=1326 audit(1756065949.989:4037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9136 comm="syz.3.1820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6be40ebe9 code=0x7ffc0000 [ 171.116630][ T9125] EXT4-fs (loop5): Remounting filesystem read-only [ 171.194510][ T9145] __nla_validate_parse: 3 callbacks suppressed [ 171.194536][ T9145] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1823'. [ 171.214537][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.243200][ T9141] loop1: detected capacity change from 0 to 8192 [ 171.255104][ T4818] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.274326][ T9145] 8021q: adding VLAN 0 to HW filter on device bond14 [ 171.282794][ T9145] bond13: (slave bond14): Enslaving as an active interface with an up link [ 171.293731][ T9145] dummy0: entered allmulticast mode [ 171.295578][ T3519] loop1: p1 p2 p4 [ 171.299777][ T9145] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1823'. [ 171.302916][ T3519] loop1: p1 size 65536 extends beyond EOD, truncated [ 171.329521][ T9145] bond13 (unregistering): (slave bond14): Releasing backup interface [ 171.344201][ T3519] loop1: p2 start 861536256 is beyond EOD, truncated [ 171.350973][ T3519] loop1: p4 size 65536 extends beyond EOD, truncated [ 171.360029][ T9145] bond13 (unregistering): Released all slaves [ 171.363795][ T9139] siw: device registration error -23 [ 171.395901][ T9155] loop4: detected capacity change from 0 to 512 [ 171.397434][ T9144] dummy0: left allmulticast mode [ 171.414340][ T9141] loop1: p1 p2 p4 [ 171.424639][ T9141] loop1: p1 size 65536 extends beyond EOD, truncated [ 171.437738][ T9155] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.454645][ T9141] loop1: p2 start 861536256 is beyond EOD, truncated [ 171.461413][ T9141] loop1: p4 size 65536 extends beyond EOD, truncated [ 171.507022][ T9160] 9pnet_fd: Insufficient options for proto=fd [ 171.541211][ T9155] ext4 filesystem being mounted at /344/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 171.590389][ T9162] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1828'. [ 171.631836][ T9155] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #2: comm syz.4.1826: corrupted inode contents [ 171.701121][ T9155] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #2: comm syz.4.1826: mark_inode_dirty error [ 171.729666][ T3518] udevd[3518]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 171.741291][ T3519] udevd[3519]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 171.769140][ T9163] SELinux: policydb table sizes (830110067,0) do not match mine (8,7) [ 171.777833][ T9163] SELinux: failed to load policy [ 171.789335][ T9155] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #2: comm syz.4.1826: corrupted inode contents [ 171.802668][ T9169] 9pnet_fd: Insufficient options for proto=fd [ 171.842863][ T9167] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #2: comm syz.4.1826: corrupted inode contents [ 171.861637][ T9167] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #2: comm syz.4.1826: mark_inode_dirty error [ 171.891493][ T9167] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #2: comm syz.4.1826: corrupted inode contents [ 171.894306][ T29] audit: type=1326 audit(1756065950.869:4038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9154 comm="syz.4.1826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93fc86ebe9 code=0x7ffc0000 [ 171.926878][ T29] audit: type=1326 audit(1756065950.869:4039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9154 comm="syz.4.1826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93fc86ebe9 code=0x7ffc0000 [ 171.950372][ T29] audit: type=1326 audit(1756065950.869:4040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9154 comm="syz.4.1826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f93fc86ebe9 code=0x7ffc0000 [ 171.961932][ T9167] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #2: comm syz.4.1826: mark_inode_dirty error [ 171.974249][ T29] audit: type=1326 audit(1756065950.869:4041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9154 comm="syz.4.1826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93fc86ebe9 code=0x7ffc0000 [ 172.008816][ T29] audit: type=1326 audit(1756065950.869:4042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9154 comm="syz.4.1826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93fc86ebe9 code=0x7ffc0000 [ 172.010843][ T9167] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #2: comm syz.4.1826: corrupted inode contents [ 172.032382][ T29] audit: type=1326 audit(1756065950.869:4043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9154 comm="syz.4.1826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f93fc86ebe9 code=0x7ffc0000 [ 172.140429][ T9167] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #2: comm syz.4.1826: mark_inode_dirty error [ 172.469507][ T9187] loop3: detected capacity change from 0 to 164 [ 172.495517][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.674560][ T9192] netlink: 'syz.4.1837': attribute type 1 has an invalid length. [ 173.003721][ T9162] Set syz1 is full, maxelem 65536 reached [ 173.034765][ T9192] 8021q: adding VLAN 0 to HW filter on device bond16 [ 173.150059][ T9202] 9pnet_fd: Insufficient options for proto=fd [ 173.268389][ T9207] loop4: detected capacity change from 0 to 1024 [ 173.308399][ T9212] siw: device registration error -23 [ 173.354086][ T9207] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 173.365098][ T9207] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 173.401640][ T9209] loop1: detected capacity change from 0 to 8192 [ 173.404122][ T9207] JBD2: no valid journal superblock found [ 173.413902][ T9207] EXT4-fs (loop4): Could not load journal inode [ 173.479507][ T9214] loop3: detected capacity change from 0 to 512 [ 173.486192][ T9209] loop1: p1 p2 p4 [ 173.496595][ T9209] loop1: p1 size 65536 extends beyond EOD, truncated [ 173.527890][ T9214] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.1848: Failed to acquire dquot type 1 [ 173.550284][ T9209] loop1: p2 start 861536256 is beyond EOD, truncated [ 173.555457][ T9221] siw: device registration error -23 [ 173.557080][ T9209] loop1: p4 size 65536 extends beyond EOD, truncated [ 173.575486][ T9204] loop5: detected capacity change from 0 to 32768 [ 173.620815][ T9214] EXT4-fs (loop3): 1 truncate cleaned up [ 173.683704][ T9214] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 173.702650][ T9214] ext4 filesystem being mounted at /387/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 173.746419][ T9214] SELinux: security_context_str_to_sid () failed with errno=-22 [ 173.754796][ T3518] udevd[3518]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 173.765473][ T3519] udevd[3519]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 173.797670][ T9231] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1852'. [ 173.810576][ T9231] SELinux: policydb table sizes (830110067,0) do not match mine (8,7) [ 173.830228][ T9231] SELinux: failed to load policy [ 173.857469][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.873323][ T9233] netlink: 'syz.1.1853': attribute type 1 has an invalid length. [ 173.898238][ T9233] 8021q: adding VLAN 0 to HW filter on device bond17 [ 173.962237][ T9238] 9pnet_fd: Insufficient options for proto=fd [ 173.989297][ T9240] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1854'. [ 174.014805][ T9247] 9pnet_fd: Insufficient options for proto=fd [ 174.069614][ T9240] 8021q: adding VLAN 0 to HW filter on device bond15 [ 174.082742][ T9240] bond13: (slave bond15): Enslaving as an active interface with an up link [ 174.107810][ T9244] netlink: 'syz.4.1859': attribute type 1 has an invalid length. [ 174.115797][ T9240] dummy0: entered allmulticast mode [ 174.124986][ T9240] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1854'. [ 174.134208][ T9249] loop1: detected capacity change from 0 to 8192 [ 174.141147][ T9240] bond13 (unregistering): (slave bond15): Releasing backup interface [ 174.153072][ T9240] bond13 (unregistering): Released all slaves [ 174.203734][ T9249] loop1: p1 p2 p4 [ 174.208375][ T9249] loop1: p1 size 65536 extends beyond EOD, truncated [ 174.221314][ T9239] dummy0: left allmulticast mode [ 174.237838][ T9249] loop1: p2 start 861536256 is beyond EOD, truncated [ 174.244827][ T9249] loop1: p4 size 65536 extends beyond EOD, truncated [ 174.257956][ T9259] loop4: detected capacity change from 0 to 512 [ 174.292068][ T9249] siw: device registration error -23 [ 174.292044][ T9259] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.1864: Failed to acquire dquot type 1 [ 174.336258][ T2993] loop1: p1 p2 p4 [ 174.346025][ T2993] loop1: p1 size 65536 extends beyond EOD, truncated [ 174.355241][ T2993] loop1: p2 start 861536256 is beyond EOD, truncated [ 174.355289][ T9268] loop3: detected capacity change from 0 to 512 [ 174.362020][ T2993] loop1: p4 size 65536 extends beyond EOD, truncated [ 174.398150][ T9273] 9pnet_fd: Insufficient options for proto=fd [ 174.404824][ T9259] EXT4-fs (loop4): 1 truncate cleaned up [ 174.411117][ T9259] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 174.424317][ T9271] netlink: 'syz.5.1868': attribute type 1 has an invalid length. [ 174.474246][ T9259] ext4 filesystem being mounted at /353/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 174.506462][ T3518] udevd[3518]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 174.529069][ T9268] EXT4-fs error (device loop3): ext4_iget_extra_inode:5104: inode #15: comm syz.3.1866: corrupted in-inode xattr: invalid ea_ino [ 174.548587][ T9271] 8021q: adding VLAN 0 to HW filter on device bond8 [ 174.575159][ T9268] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.1866: couldn't read orphan inode 15 (err -117) [ 174.589960][ T9259] SELinux: security_context_str_to_sid () failed with errno=-22 [ 174.604797][ T3518] udevd[3518]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 174.609796][ T9268] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 174.646788][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.718959][ T9291] loop5: detected capacity change from 0 to 2048 [ 174.746671][ T9291] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 174.766105][ T9291] EXT4-fs error (device loop5): ext4_find_extent:939: inode #2: comm syz.5.1874: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 174.805956][ T9291] EXT4-fs (loop5): Remounting filesystem read-only [ 174.847127][ T4818] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.869678][ T9299] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1875'. [ 174.878699][ T9299] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1875'. [ 174.905959][ T9302] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1877'. [ 174.983822][ T9302] 8021q: adding VLAN 0 to HW filter on device bond20 [ 175.035923][ T9302] bond19: (slave bond20): Enslaving as an active interface with an up link [ 175.056453][ T9312] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1866'. [ 175.114150][ T9311] dummy0: entered allmulticast mode [ 175.125514][ T9302] bond19 (unregistering): (slave bond20): Releasing backup interface [ 175.135524][ T9302] bond19 (unregistering): Released all slaves [ 175.248020][ T9301] dummy0: left allmulticast mode [ 175.392496][ T9300] loop4: detected capacity change from 0 to 32768 [ 175.403575][ T9320] loop1: detected capacity change from 0 to 512 [ 175.410601][ T9329] 9pnet_fd: Insufficient options for proto=fd [ 175.422056][ T9330] loop5: detected capacity change from 0 to 128 [ 175.442217][ T9320] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.1882: Failed to acquire dquot type 1 [ 175.497593][ T9320] EXT4-fs (loop1): 1 truncate cleaned up [ 175.514216][ T9320] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 175.586472][ T9336] loop5: detected capacity change from 0 to 1024 [ 175.593662][ T9336] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 175.604255][ T9320] ext4 filesystem being mounted at /371/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 175.619167][ T9336] EXT4-fs error (device loop5): ext4_map_blocks:814: inode #3: block 1: comm syz.5.1889: lblock 1 mapped to illegal pblock 1 (length 1) [ 175.645790][ T9320] SELinux: security_context_str_to_sid () failed with errno=-22 [ 175.699925][ T9336] EXT4-fs error (device loop5): ext4_acquire_dquot:6937: comm syz.5.1889: Failed to acquire dquot type 0 [ 175.738776][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.756658][ T9336] EXT4-fs error (device loop5): ext4_free_blocks:6696: comm syz.5.1889: Freeing blocks not in datazone - block = 0, count = 4096 [ 175.815432][ T9336] EXT4-fs error (device loop5): ext4_read_inode_bitmap:139: comm syz.5.1889: Invalid inode bitmap blk 0 in block_group 0 [ 175.838823][ T177] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 175.849045][ T9342] loop1: detected capacity change from 0 to 8192 [ 175.859563][ T9345] loop4: detected capacity change from 0 to 1024 [ 175.876079][ T177] EXT4-fs error (device loop5): ext4_release_dquot:6973: comm kworker/u8:4: Failed to release dquot type 0 [ 175.904235][ T3519] loop1: p1 p2 p4 [ 175.908076][ T3519] loop1: p1 size 65536 extends beyond EOD, truncated [ 175.926139][ T9336] EXT4-fs error (device loop5) in ext4_free_inode:361: Corrupt filesystem [ 175.936786][ T9345] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 175.951428][ T3519] loop1: p2 start 861536256 is beyond EOD, truncated [ 175.958186][ T3519] loop1: p4 size 65536 extends beyond EOD, truncated [ 175.982139][ T9336] EXT4-fs (loop5): 1 orphan inode deleted [ 175.997274][ T9336] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 176.014532][ T9342] loop1: p1 p2 p4 [ 176.018406][ T9342] loop1: p1 size 65536 extends beyond EOD, truncated [ 176.042029][ T9342] loop1: p2 start 861536256 is beyond EOD, truncated [ 176.049151][ T9342] loop1: p4 size 65536 extends beyond EOD, truncated [ 176.069948][ T9345] 8021q: adding VLAN 0 to HW filter on device bond17 [ 176.097670][ T9342] siw: device registration error -23 [ 176.120717][ T4818] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.134867][ T37] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 176.159825][ T3518] udevd[3518]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 176.181097][ T3518] udevd[3518]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 176.183183][ T9345] bond17 (unregistering): Released all slaves [ 176.204616][ T37] __quota_error: 91 callbacks suppressed [ 176.204635][ T37] Quota error (device loop5): remove_tree: Can't read quota data block 1 [ 176.218869][ T37] EXT4-fs error (device loop5): ext4_release_dquot:6973: comm kworker/u8:2: Failed to release dquot type 0 [ 176.329979][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.434756][ T9375] __nla_validate_parse: 4 callbacks suppressed [ 176.434775][ T9375] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1904'. [ 176.460287][ T9368] loop4: detected capacity change from 0 to 512 [ 176.472335][ T9377] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1905'. [ 176.544154][ T9368] Quota error (device loop4): find_tree_dqentry: Cycle in quota tree detected: block 3 index 0 [ 176.555203][ T9368] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 176.564660][ T9368] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.1901: Failed to acquire dquot type 1 [ 176.667734][ T9386] SELinux: policydb table sizes (830110067,0) do not match mine (8,7) [ 176.676652][ T9368] EXT4-fs (loop4): 1 truncate cleaned up [ 176.682835][ T9368] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 176.921493][ T9368] ext4 filesystem being mounted at /356/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 177.067749][ T9392] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1907'. [ 177.137990][ T9368] SELinux: security_context_str_to_sid () failed with errno=-22 [ 177.159213][ T9386] SELinux: failed to load policy [ 177.312999][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.550396][ T9392] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1907'. [ 177.580407][ T9393] 8021q: adding VLAN 0 to HW filter on device bond18 [ 177.600791][ T9393] bond15: (slave bond18): Enslaving as an active interface with an up link [ 177.660630][ T9392] bond15 (unregistering): (slave bond18): Releasing backup interface [ 177.724719][ T9392] bond15 (unregistering): Released all slaves [ 177.751959][ T9402] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1908'. [ 177.941838][ T9407] loop4: detected capacity change from 0 to 8192 [ 178.020337][ T3519] loop4: p1 p2 p4 [ 178.024204][ T3519] loop4: p1 size 65536 extends beyond EOD, truncated [ 178.033043][ T3519] loop4: p2 start 861536256 is beyond EOD, truncated [ 178.039805][ T3519] loop4: p4 size 65536 extends beyond EOD, truncated [ 178.050233][ T9407] loop4: p1 p2 p4 [ 178.054145][ T9407] loop4: p1 size 65536 extends beyond EOD, truncated [ 178.061960][ T9407] loop4: p2 start 861536256 is beyond EOD, truncated [ 178.068944][ T9407] loop4: p4 size 65536 extends beyond EOD, truncated [ 178.130740][ T9402] siw: device registration error -23 [ 178.139551][ T9415] loop5: detected capacity change from 0 to 128 [ 178.323834][ T9377] Set syz1 is full, maxelem 65536 reached [ 178.365619][ T9402] Invalid logical block size (3) [ 178.478556][ T9432] loop1: detected capacity change from 0 to 256 [ 178.490524][ T9431] loop5: detected capacity change from 0 to 1024 [ 178.505718][ T3519] udevd[3519]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 178.506090][ T3518] udevd[3518]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 178.544482][ T9431] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 178.551791][ T29] audit: type=1326 audit(1756065957.559:4126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9437 comm="syz.4.1923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93fc86ebe9 code=0x7ffc0000 [ 178.555459][ T9431] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 178.589414][ T9431] JBD2: no valid journal superblock found [ 178.595349][ T9431] EXT4-fs (loop5): Could not load journal inode [ 178.610493][ T3294] udevd[3294]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 178.622705][ T3519] udevd[3519]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 178.629334][ T9432] FAT-fs (loop1): Directory bread(block 1285) failed [ 178.662844][ T9436] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1924'. [ 178.682938][ T29] audit: type=1326 audit(1756065957.609:4127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9437 comm="syz.4.1923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93fc86ebe9 code=0x7ffc0000 [ 178.706589][ T29] audit: type=1326 audit(1756065957.609:4128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9437 comm="syz.4.1923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f93fc86ebe9 code=0x7ffc0000 [ 178.726964][ T9436] 8021q: adding VLAN 0 to HW filter on device bond15 [ 178.730132][ T29] audit: type=1326 audit(1756065957.609:4129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9437 comm="syz.4.1923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93fc86ebe9 code=0x7ffc0000 [ 178.760305][ T29] audit: type=1326 audit(1756065957.609:4130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9437 comm="syz.4.1923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93fc86ebe9 code=0x7ffc0000 [ 178.766823][ T9436] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1924'. [ 178.784083][ T29] audit: type=1326 audit(1756065957.649:4131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9437 comm="syz.4.1923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f93fc86ebe9 code=0x7ffc0000 [ 178.816420][ T29] audit: type=1326 audit(1756065957.649:4132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9437 comm="syz.4.1923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93fc86ebe9 code=0x7ffc0000 [ 178.856044][ T9442] loop4: detected capacity change from 0 to 128 [ 178.985510][ T9446] FAT-fs (loop1): Directory bread(block 1285) failed [ 178.992492][ T9446] FAT-fs (loop1): Directory bread(block 1285) failed [ 179.009375][ T9446] FAT-fs (loop1): Directory bread(block 1285) failed [ 179.365887][ T9436] bond15 (unregistering): Released all slaves [ 179.459999][ T9452] loop5: detected capacity change from 0 to 2048 [ 179.487584][ T9455] loop1: detected capacity change from 0 to 128 [ 179.509220][ T9452] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 179.523417][ T9455] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 179.531379][ T9455] FAT-fs (loop1): Filesystem has been set read-only [ 179.578514][ T9455] syz.1.1929: attempt to access beyond end of device [ 179.578514][ T9455] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 179.601019][ T9452] EXT4-fs error (device loop5): ext4_find_extent:939: inode #2: comm syz.5.1927: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 179.620970][ T9452] EXT4-fs (loop5): Remounting filesystem read-only [ 179.662445][ T4818] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.729027][ T9465] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1931'. [ 179.752841][ T9465] SELinux: policydb table sizes (830110067,0) do not match mine (8,7) [ 179.758087][ T9468] loop1: detected capacity change from 0 to 512 [ 179.762901][ T9465] SELinux: failed to load policy [ 179.831328][ T9468] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 179.848576][ T9472] loop5: detected capacity change from 0 to 1024 [ 179.850055][ T9468] ext4 filesystem being mounted at /381/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 179.900418][ T9468] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.948910][ T9472] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 179.973387][ T9479] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1937'. [ 180.005477][ T9472] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1934'. [ 180.050438][ T9479] loop1: detected capacity change from 0 to 8192 [ 180.072700][ T9472] 8021q: adding VLAN 0 to HW filter on device bond10 [ 180.088758][ T9479] loop1: p1 p2 p4 [ 180.095415][ T9479] loop1: p1 size 65536 extends beyond EOD, truncated [ 180.120120][ T9472] bond10 (unregistering): Released all slaves [ 180.128998][ T9479] loop1: p2 start 861536256 is beyond EOD, truncated [ 180.135888][ T9479] loop1: p4 size 65536 extends beyond EOD, truncated [ 180.206938][ T9479] siw: device registration error -23 [ 180.216289][ T9486] SELinux: policydb table sizes (830110067,0) do not match mine (8,7) [ 180.225343][ T9486] SELinux: failed to load policy [ 180.256092][ T4818] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.371633][ T9488] 8021q: adding VLAN 0 to HW filter on device bond19 [ 180.379952][ T9488] bond15: (slave bond19): Enslaving as an active interface with an up link [ 180.396563][ T9498] loop4: detected capacity change from 0 to 164 [ 180.415595][ T9488] bond15 (unregistering): (slave bond19): Releasing backup interface [ 180.426871][ T9488] bond15 (unregistering): Released all slaves [ 180.451840][ T9494] 8021q: adding VLAN 0 to HW filter on device bond11 [ 180.460323][ T9494] bond10: (slave bond11): Enslaving as an active interface with an up link [ 180.553717][ T9494] dummy0: entered allmulticast mode [ 180.570970][ T9494] bond10 (unregistering): (slave bond11): Releasing backup interface [ 180.589236][ T9494] bond10 (unregistering): Released all slaves [ 180.638971][ T9509] 8021q: adding VLAN 0 to HW filter on device bond21 [ 180.655491][ T9509] bond19: (slave bond21): Enslaving as an active interface with an up link [ 180.664271][ T9492] dummy0: left allmulticast mode [ 180.687471][ T9509] dummy0: entered allmulticast mode [ 180.723601][ T9509] bond19 (unregistering): (slave bond21): Releasing backup interface [ 180.964873][ T9509] bond19 (unregistering): Released all slaves [ 181.026096][ T9523] loop5: detected capacity change from 0 to 1024 [ 181.036394][ T9508] dummy0: left allmulticast mode [ 181.081943][ T9523] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 181.100327][ T9529] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 181.108527][ T9529] SELinux: failed to load policy [ 181.159234][ T9532] loop1: detected capacity change from 0 to 256 [ 181.189548][ T9532] FAT-fs (loop1): Directory bread(block 1285) failed [ 181.216499][ T9523] 8021q: adding VLAN 0 to HW filter on device bond10 [ 181.246542][ T9523] bond10 (unregistering): Released all slaves [ 181.270683][ T9532] FAT-fs (loop1): Directory bread(block 1285) failed [ 181.278318][ T9532] FAT-fs (loop1): Directory bread(block 1285) failed [ 181.290496][ T9532] FAT-fs (loop1): Directory bread(block 1285) failed [ 181.326690][ T4818] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.433720][ T9543] 8021q: adding VLAN 0 to HW filter on device bond18 [ 181.442333][ T9543] bond17: (slave bond18): Enslaving as an active interface with an up link [ 181.453048][ T9543] dummy0: entered allmulticast mode [ 181.459005][ T9543] __nla_validate_parse: 12 callbacks suppressed [ 181.459020][ T9543] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1959'. [ 181.501252][ T9554] loop1: detected capacity change from 0 to 164 [ 181.508156][ T9543] bond17 (unregistering): (slave bond18): Releasing backup interface [ 181.526189][ T9543] bond17 (unregistering): Released all slaves [ 181.538821][ T29] kauditd_printk_skb: 23 callbacks suppressed [ 181.538837][ T29] audit: type=1326 audit(1756065960.549:4156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9556 comm="syz.0.1964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5595c9ebe9 code=0x7ffc0000 [ 181.568646][ T29] audit: type=1326 audit(1756065960.549:4157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9556 comm="syz.0.1964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5595c9ebe9 code=0x7ffc0000 [ 181.619662][ T29] audit: type=1326 audit(1756065960.549:4158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9556 comm="syz.0.1964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f5595c9ebe9 code=0x7ffc0000 [ 181.643285][ T29] audit: type=1326 audit(1756065960.549:4159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9556 comm="syz.0.1964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5595c9ebe9 code=0x7ffc0000 [ 181.644881][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.666994][ T29] audit: type=1326 audit(1756065960.549:4160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9556 comm="syz.0.1964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f5595c9ebe9 code=0x7ffc0000 [ 181.699341][ T29] audit: type=1326 audit(1756065960.549:4161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9556 comm="syz.0.1964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5595c9ebe9 code=0x7ffc0000 [ 181.723012][ T29] audit: type=1326 audit(1756065960.549:4162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9556 comm="syz.0.1964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f5595c9ebe9 code=0x7ffc0000 [ 181.746649][ T29] audit: type=1326 audit(1756065960.549:4163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9556 comm="syz.0.1964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5595c9ebe9 code=0x7ffc0000 [ 181.770122][ T29] audit: type=1326 audit(1756065960.549:4164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9556 comm="syz.0.1964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f5595c9ebe9 code=0x7ffc0000 [ 181.793605][ T29] audit: type=1326 audit(1756065960.549:4165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9556 comm="syz.0.1964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5595c9ebe9 code=0x7ffc0000 [ 181.853146][ T9540] dummy0: left allmulticast mode [ 181.923609][ T9581] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1974'. [ 181.925891][ T9580] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1975'. [ 182.020997][ T9588] loop1: detected capacity change from 0 to 2048 [ 182.032228][ T9580] loop4: detected capacity change from 0 to 8192 [ 182.118729][ T9588] EXT4-fs error (device loop1): ext4_find_extent:939: inode #2: comm syz.1.1978: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 182.166019][ T9580] loop4: p1 p2 p4 [ 182.173499][ T9588] EXT4-fs (loop1): Remounting filesystem read-only [ 182.182355][ T9580] loop4: p1 size 65536 extends beyond EOD, truncated [ 182.200003][ T9597] SELinux: policydb table sizes (830110067,0) do not match mine (8,7) [ 182.216311][ T9580] loop4: p2 start 861536256 is beyond EOD, truncated [ 182.223548][ T9580] loop4: p4 size 65536 extends beyond EOD, truncated [ 182.241025][ T9597] SELinux: failed to load policy [ 182.298797][ T9602] openvswitch: netlink: Message has 6 unknown bytes. [ 182.310889][ T9603] siw: device registration error -23 [ 182.409535][ T2993] loop4: p1 p2 p4 [ 182.421329][ T2993] loop4: p1 size 65536 extends beyond EOD, truncated [ 182.437412][ T2993] loop4: p2 start 861536256 is beyond EOD, truncated [ 182.446004][ T2993] loop4: p4 size 65536 extends beyond EOD, truncated [ 182.468134][ T9609] 9pnet_fd: Insufficient options for proto=fd [ 182.546785][ T3518] udevd[3518]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 182.558033][ T3519] udevd[3519]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 182.591203][ T3518] udevd[3518]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 182.603787][ T9611] loop4: detected capacity change from 0 to 1024 [ 182.633580][ T9592] loop5: detected capacity change from 0 to 32768 [ 182.649173][ T3519] udevd[3519]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 182.845974][ T9616] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1986'. [ 182.861556][ T9616] dummy0: entered allmulticast mode [ 182.867543][ T9616] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1986'. [ 182.881446][ T9615] dummy0: left allmulticast mode [ 182.897346][ T9622] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1982'. [ 182.960586][ T9624] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1982'. [ 183.032969][ T9622] 8021q: adding VLAN 0 to HW filter on device bond17 [ 183.086215][ T9624] bond17 (unregistering): Released all slaves [ 183.315013][ T9581] Set syz1 is full, maxelem 65536 reached [ 183.334902][ T9635] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1992'. [ 183.354508][ T9635] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 183.364218][ T9635] SELinux: failed to load policy [ 183.383102][ T9637] loop3: detected capacity change from 0 to 164 [ 183.423543][ T9640] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1995'. [ 183.460372][ T9640] 8021q: adding VLAN 0 to HW filter on device bond22 [ 183.470978][ T9640] bond19: (slave bond22): Enslaving as an active interface with an up link [ 183.509858][ T9651] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1998'. [ 183.517106][ T9649] dummy0: entered allmulticast mode [ 183.557426][ T9640] bond19 (unregistering): (slave bond22): Releasing backup interface [ 183.577220][ T9640] bond19 (unregistering): Released all slaves [ 183.648029][ T9639] dummy0: left allmulticast mode [ 183.690087][ T9656] loop4: detected capacity change from 0 to 8192 [ 183.719151][ T9652] loop5: detected capacity change from 0 to 32768 [ 183.736257][ T9656] loop4: p1 p2 p4 [ 183.740382][ T9656] loop4: p1 size 65536 extends beyond EOD, truncated [ 183.747377][ T9663] loop1: detected capacity change from 0 to 2048 [ 183.760151][ T9656] loop4: p2 start 861536256 is beyond EOD, truncated [ 183.767162][ T9656] loop4: p4 size 65536 extends beyond EOD, truncated [ 183.777559][ T9667] openvswitch: netlink: Message has 6 unknown bytes. [ 183.786618][ T9663] EXT4-fs error (device loop1): ext4_find_extent:939: inode #2: comm syz.1.2001: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 183.811689][ T9663] EXT4-fs (loop1): Remounting filesystem read-only [ 183.854173][ T9651] Invalid logical block size (3) [ 183.911492][ T3518] udevd[3518]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 183.922772][ T3519] udevd[3519]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 183.950644][ T9678] loop3: detected capacity change from 0 to 1024 [ 184.047006][ T9678] 8021q: adding VLAN 0 to HW filter on device bond13 [ 184.062328][ T9678] bond13 (unregistering): Released all slaves [ 184.371984][ T9689] 9pnet_fd: Insufficient options for proto=fd [ 184.709051][ T9698] openvswitch: netlink: Message has 6 unknown bytes. [ 185.072095][ T9702] loop5: detected capacity change from 0 to 2048 [ 185.231990][ T9711] loop4: detected capacity change from 0 to 1024 [ 185.274117][ T9711] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 185.325672][ T9702] EXT4-fs error (device loop5): ext4_find_extent:939: inode #2: comm syz.5.2016: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 185.344396][ T9702] EXT4-fs (loop5): Remounting filesystem read-only [ 185.366356][ T9723] SELinux: policydb table sizes (830110067,0) do not match mine (8,7) [ 185.379147][ T9723] SELinux: failed to load policy [ 185.387142][ T9711] EXT4-fs error (device loop4): ext4_map_blocks:814: inode #3: block 1: comm syz.4.2020: lblock 1 mapped to illegal pblock 1 (length 1) [ 185.402646][ T9711] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.2020: Failed to acquire dquot type 0 [ 185.424135][ T9711] EXT4-fs error (device loop4): ext4_free_blocks:6696: comm syz.4.2020: Freeing blocks not in datazone - block = 0, count = 4096 [ 185.472229][ T9711] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.2020: Invalid inode bitmap blk 0 in block_group 0 [ 185.490386][ T3793] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:10: lblock 1 mapped to illegal pblock 1 (length 1) [ 185.516476][ T3793] EXT4-fs error (device loop4): ext4_release_dquot:6973: comm kworker/u8:10: Failed to release dquot type 0 [ 185.528570][ T9711] EXT4-fs error (device loop4) in ext4_free_inode:361: Corrupt filesystem [ 185.538693][ T9711] EXT4-fs (loop4): 1 orphan inode deleted [ 185.562379][ T9730] loop5: detected capacity change from 0 to 2048 [ 185.616792][ T3793] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:10: lblock 1 mapped to illegal pblock 1 (length 1) [ 185.653441][ T9745] 9pnet: Could not find request transport: fd0x0000000000000007 [ 185.670929][ T3793] EXT4-fs error (device loop4): ext4_release_dquot:6973: comm kworker/u8:10: Failed to release dquot type 0 [ 185.698016][ T9747] loop3: detected capacity change from 0 to 2048 [ 185.723872][ T9747] EXT4-fs error (device loop3): ext4_find_extent:939: inode #2: comm syz.3.2035: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 185.758617][ T9747] EXT4-fs (loop3): Remounting filesystem read-only [ 185.905902][ T9764] SELinux: policydb table sizes (830110067,0) do not match mine (8,7) [ 185.955870][ T9771] loop4: detected capacity change from 0 to 512 [ 185.978640][ T9764] SELinux: failed to load policy [ 186.002117][ T9771] ext4 filesystem being mounted at /383/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 186.145706][ T9779] loop4: detected capacity change from 0 to 2048 [ 186.390080][ T9781] loop3: detected capacity change from 0 to 8192 [ 186.453714][ T9791] 8021q: adding VLAN 0 to HW filter on device bond23 [ 186.465091][ T9796] siw: device registration error -23 [ 186.471299][ T9791] bond19: (slave bond23): Enslaving as an active interface with an up link [ 186.505336][ T3519] loop3: p1 p2 p4 [ 186.511785][ T9797] dummy0: entered allmulticast mode [ 186.523292][ T3519] loop3: p1 size 65536 extends beyond EOD, truncated [ 186.552745][ T9797] __nla_validate_parse: 6 callbacks suppressed [ 186.552763][ T9797] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2048'. [ 186.578868][ T3519] loop3: p2 start 861536256 is beyond EOD, truncated [ 186.585704][ T3519] loop3: p4 size 65536 extends beyond EOD, truncated [ 186.609026][ T9800] 9pnet: Could not find request transport: fd0x0000000000000007 [ 186.657665][ T9781] loop3: p1 p2 p4 [ 186.667790][ T9751] Set syz1 is full, maxelem 65536 reached [ 186.674135][ T9781] loop3: p1 size 65536 extends beyond EOD, truncated [ 186.681961][ T9781] loop3: p2 start 861536256 is beyond EOD, truncated [ 186.688864][ T9781] loop3: p4 size 65536 extends beyond EOD, truncated [ 186.696139][ T9797] bond19 (unregistering): (slave bond23): Releasing backup interface [ 186.751424][ T9797] bond19 (unregistering): Released all slaves [ 186.795679][ T9804] loop4: detected capacity change from 0 to 2048 [ 186.820377][ T3518] udevd[3518]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 186.831801][ T3519] udevd[3519]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 186.848573][ T9790] dummy0: left allmulticast mode [ 186.856827][ T9808] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2054'. [ 186.875643][ T9804] EXT4-fs error (device loop4): ext4_find_extent:939: inode #2: comm syz.4.2051: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 186.897738][ T3519] udevd[3519]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 186.909022][ T3518] udevd[3518]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 186.920164][ T9811] netlink: 'syz.5.2055': attribute type 1 has an invalid length. [ 186.939697][ T9804] EXT4-fs (loop4): Remounting filesystem read-only [ 187.001484][ T9808] 8021q: adding VLAN 0 to HW filter on device bond16 [ 187.039767][ T9808] bond13: (slave bond16): Enslaving as an active interface with an up link [ 187.076034][ T9811] 8021q: adding VLAN 0 to HW filter on device bond10 [ 187.083037][ T9823] loop4: detected capacity change from 0 to 2048 [ 187.098168][ T9824] dummy0: entered allmulticast mode [ 187.108963][ T29] kauditd_printk_skb: 80 callbacks suppressed [ 187.109043][ T29] audit: type=1326 audit(1756065966.119:4242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9827 comm="syz.1.2059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75212bebe9 code=0x7ffc0000 [ 187.164342][ T29] audit: type=1326 audit(1756065966.159:4243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9827 comm="syz.1.2059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=281 compat=0 ip=0x7f75212bebe9 code=0x7ffc0000 [ 187.175148][ T9808] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2054'. [ 187.187854][ T29] audit: type=1326 audit(1756065966.159:4244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9827 comm="syz.1.2059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75212bebe9 code=0x7ffc0000 [ 187.251049][ T9808] bond13 (unregistering): (slave bond16): Releasing backup interface [ 187.308962][ T9837] 9pnet: Could not find request transport: fd0x0000000000000007 [ 187.313002][ T9808] bond13 (unregistering): Released all slaves [ 187.421516][ T9807] dummy0: left allmulticast mode [ 187.444679][ T9847] netlink: 'syz.4.2065': attribute type 1 has an invalid length. [ 187.471440][ T9847] 8021q: adding VLAN 0 to HW filter on device bond17 [ 187.515847][ T9857] openvswitch: netlink: Message has 6 unknown bytes. [ 187.528940][ T29] audit: type=1326 audit(1756065966.519:4245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9858 comm="syz.4.2071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93fc86ebe9 code=0x7ffc0000 [ 187.552481][ T29] audit: type=1326 audit(1756065966.519:4246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9858 comm="syz.4.2071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93fc86ebe9 code=0x7ffc0000 [ 187.576254][ T29] audit: type=1326 audit(1756065966.519:4247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9858 comm="syz.4.2071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=281 compat=0 ip=0x7f93fc86ebe9 code=0x7ffc0000 [ 187.591463][ T9862] loop4: detected capacity change from 0 to 2048 [ 187.599798][ T29] audit: type=1326 audit(1756065966.519:4248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9858 comm="syz.4.2071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93fc86ebe9 code=0x7ffc0000 [ 187.633811][ T9855] loop5: detected capacity change from 0 to 2048 [ 187.651474][ T9866] loop1: detected capacity change from 0 to 512 [ 187.661770][ T29] audit: type=1326 audit(1756065966.659:4249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9865 comm="syz.1.2072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75212bebe9 code=0x7ffc0000 [ 187.685489][ T29] audit: type=1326 audit(1756065966.659:4250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9865 comm="syz.1.2072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75212bebe9 code=0x7ffc0000 [ 187.709042][ T29] audit: type=1326 audit(1756065966.659:4251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9865 comm="syz.1.2072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f75212bebe9 code=0x7ffc0000 [ 187.763026][ T9866] EXT4-fs error (device loop1): ext4_iget_extra_inode:5104: inode #15: comm syz.1.2072: corrupted in-inode xattr: invalid ea_ino [ 187.778355][ T9861] EXT4-fs error (device loop4): ext4_find_extent:939: inode #2: comm syz.4.2073: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 187.821591][ T9855] EXT4-fs error (device loop5): ext4_find_extent:939: inode #2: comm syz.5.2069: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 187.838698][ T9861] EXT4-fs (loop4): Remounting filesystem read-only [ 187.849249][ T9870] loop3: detected capacity change from 0 to 512 [ 187.857403][ T9866] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.2072: couldn't read orphan inode 15 (err -117) [ 187.893586][ T9855] EXT4-fs (loop5): Remounting filesystem read-only [ 187.922980][ T9870] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.2074: Failed to acquire dquot type 1 [ 187.961706][ T9870] EXT4-fs (loop3): 1 truncate cleaned up [ 187.970860][ T9870] ext4 filesystem being mounted at /411/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 187.983323][ T9882] 9pnet_fd: Insufficient options for proto=fd [ 188.023442][ T9880] 9pnet_fd: Insufficient options for proto=fd [ 188.444929][ T9903] netlink: 88 bytes leftover after parsing attributes in process `syz.1.2072'. [ 189.021709][ T9908] 9pnet_fd: Insufficient options for proto=fd [ 189.050553][ T9910] loop3: detected capacity change from 0 to 2048 [ 189.106812][ T4848] ================================================================== [ 189.115060][ T4848] BUG: KCSAN: data-race in fill_mg_cmtime / shmem_unlink [ 189.122166][ T4848] [ 189.124534][ T4848] write to 0xffff888103596c8c of 4 bytes by task 3518 on cpu 1: [ 189.132281][ T4848] shmem_unlink+0x13c/0x170 [ 189.136819][ T4848] shmem_rename2+0x1a1/0x290 [ 189.141451][ T4848] vfs_rename+0x7f3/0xa40 [ 189.145799][ T4848] do_renameat2+0x557/0xa10 [ 189.150399][ T4848] __x64_sys_rename+0x58/0x70 [ 189.155087][ T4848] x64_sys_call+0x1f9/0x2ff0 [ 189.159691][ T4848] do_syscall_64+0xd2/0x200 [ 189.164299][ T4848] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.170218][ T4848] [ 189.172544][ T4848] read to 0xffff888103596c8c of 4 bytes by task 4848 on cpu 0: [ 189.180246][ T4848] fill_mg_cmtime+0x5b/0x260 [ 189.184858][ T4848] generic_fillattr+0x24a/0x340 [ 189.189726][ T4848] shmem_getattr+0x181/0x200 [ 189.194326][ T4848] vfs_getattr_nosec+0x143/0x1e0 [ 189.199279][ T4848] vfs_statx+0x113/0x390 [ 189.203540][ T4848] vfs_fstatat+0x115/0x170 [ 189.208125][ T4848] __se_sys_newfstatat+0x55/0x260 [ 189.213170][ T4848] __x64_sys_newfstatat+0x55/0x70 [ 189.218213][ T4848] x64_sys_call+0x135a/0x2ff0 [ 189.222901][ T4848] do_syscall_64+0xd2/0x200 [ 189.227438][ T4848] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.233347][ T4848] [ 189.235674][ T4848] value changed: 0x0718daac -> 0x07795d51 [ 189.241395][ T4848] [ 189.243723][ T4848] Reported by Kernel Concurrency Sanitizer on: [ 189.249888][ T4848] CPU: 0 UID: 0 PID: 4848 Comm: udevd Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 189.260748][ T4848] Tainted: [W]=WARN [ 189.264568][ T4848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 189.274646][ T4848] ================================================================== [ 189.310225][ T9913] loop4: detected capacity change from 0 to 512 [ 189.326615][ T9910] EXT4-fs error (device loop3): ext4_find_extent:939: inode #2: comm syz.3.2088: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 189.348802][ T9914] loop5: detected capacity change from 0 to 512 [ 189.362356][ T9910] EXT4-fs (loop3): Remounting filesystem read-only [ 189.400269][ T9913] ext4 filesystem being mounted at /395/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 189.413055][ T9914] EXT4-fs error (device loop5): ext4_acquire_dquot:6937: comm syz.5.2089: Failed to acquire dquot type 1 [ 189.440326][ T9914] EXT4-fs (loop5): 1 truncate cleaned up [ 189.450921][ T9914] ext4 filesystem being mounted at /315/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 191.038702][ T3305] EXT4-fs unmount: 37 callbacks suppressed [ 191.038757][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.