last executing test programs: 3.160907744s ago: executing program 0 (id=1783): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000800)={{0x2, 0x4e23, @remote}, {0x1, @local}, 0x2c, {0x2, 0x4e22, @empty}, 'lo\x00'}) r1 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0xf, 0x0, @fd_index=0xa, 0x0, 0x0, 0x2, 0x2, 0x1, {0x0, 0x0, r0}}) io_uring_enter(0xffffffffffffffff, 0x44fd, 0x3, 0x1, 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x0, &(0x7f0000000240)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) mq_timedreceive(r4, &(0x7f0000004600)=""/102381, 0xfffffceb, 0x0, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'syz_tun\x00'}) r6 = gettid() timer_create(0x2, &(0x7f000049efa0)={0x0, 0xb, 0x4, @tid=r6}, &(0x7f0000044000)=0x0) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) timer_settime(0x0, 0xffffffffffffffff, 0x0, 0x0) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000b40)={0x0, 0x18, 0xfa00, {0x2000000000, &(0x7f0000000b00), 0x111, 0x9}}, 0x20) writev(r8, &(0x7f0000000000)=[{&(0x7f0000000080), 0x62}, {&(0x7f0000000100)="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", 0x682c}, {&(0x7f0000001480)="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", 0x1001}], 0x3) timer_settime(r7, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f6, &(0x7f0000000100)={'syztnl0\x00', 0x0}) 2.734741798s ago: executing program 2 (id=1788): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0x2, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="00000000000057b6b7080000000000007b8af8ff00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = socket$inet(0x2, 0x2, 0x0) close(r1) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r2, 0x0, 0x200000000000a, &(0x7f0000000000)="ea00005c00000000", 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) epoll_create1(0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000600)='kfree\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000004008500000082000000950000000000000087caf61e29c956d43dcd3b247e6fe2205e805f32b614b2ce99c7a38aa5bafe31aeccd02288eefe59ff3f959b2fffd649555261fb88eb78efe61a3500aef6625969dc9297765c34632969d9a72f2dc4eafc09127ab6e5111fd85ee1a641ae45f86e2388f13812a5622eed2a"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) r6 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCL_BLANKSCREEN(r6, 0x4b67, &(0x7f0000000180)) 2.46762658s ago: executing program 3 (id=1790): epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000400028008000a00bc00"], 0x40}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x8, &(0x7f0000000740)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000019300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$getownex(r2, 0x10, &(0x7f0000000300)) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'gretap0\x00'}) r3 = gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=0x0) timer_settime(r4, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x40200, 0x0) preadv2(r5, &(0x7f0000000180)=[{&(0x7f0000000000)=""/167, 0xa7}], 0x1, 0x0, 0x4, 0x1) 2.397150846s ago: executing program 2 (id=1791): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000140), 0x0}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd27, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x93, 0xfc}, [{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0xfffffffc}, {0x1, 0x0, 0x0, 0x4000000, 0x7, 0x80000}, {0x8, 0x5, 0x0, 0xfffffffc, 0xfff}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x0, 0xc3}, {0x0, 0x5, 0x0, 0x0, 0x0, 0x4000000}, {0x5}, {}, {0x0, 0x10}, {0x0, 0x4, 0x0, 0x8000000}, {0x0, 0xffffffff, 0x0, 0x0, 0xfffffffd}, {0x2, 0x0, 0x400000, 0x0, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x20}, {0xfffffffd}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x2000}, {}, {0x0, 0x7, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x5, 0xfffffffd}, {0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xffffffff}, {0x1ff}, {}, {}, {0xffffffff, 0x0, 0x0, 0x2, 0x3}, {}, {0x20, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x9, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x1, 0x3}, {0x80}, {0x0, 0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x8000008}, {0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, {}, {0x0, 0x15, 0x0, 0x48510}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xd, 0xffffffff}, {}, {}, {0x0, 0xfffefffd, 0x4}, {0x0, 0x0, 0x0, 0x1}, {}, {0x5}, {}, {0x0, 0x0, 0x0, 0x3ff, 0x40000000}, {}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x400000}, {0x4, 0x0, 0x200}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, {0x5}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfb4}, {}, {0x0, 0x101, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x4, 0x9}, {0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x2, 0x0, 0x0, 0x0, 0x400000}, {}, {}, {}, {0x800000, 0x0, 0x0, 0x0, 0x0, 0x56}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffefffff}, {}, {0x0, 0x0, 0x6, 0x0, 0x4}, {}, {}, {0x0, 0xfffffffd, 0xfffffff9}, {0x6}, {0x7f}, {}, {}, {0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe}, {0x0, 0x0, 0x7}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x2, 0x0, 0x20000000, 0x800}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x292}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, {0x0, 0x5, 0x0, 0x0, 0x1}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x80}, {0x10000000, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x2e9c, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {0xfffffffe, 0x0, 0x0, 0x0, 0x8000, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {0x6}, {0x0, 0x8000}, {0x0, 0x0, 0x10000, 0x0, 0xfffffffc}, {0x0, 0x80000000, 0x0, 0x7dff800}], [{}, {}, {}, {}, {}, {0x3}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {0x5}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x1}, {}, {}, {}, {0x0, 0x1}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x1}, {}, {}, {}, {}, {}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {0x5}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x1}, {}, {0x5}, {}, {0x3}, {}, {}, {}, {}, {}, {0x2, 0x1}, {}, {}, {}, {0x3}, {0x0, 0x1}, {}, {}, {}, {0x2}, {}, {0x0, 0x1}, {0x4}, {0x3}, {}, {}, {0x0, 0x1}, {0x2}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) 2.395939325s ago: executing program 2 (id=1792): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00"/13], 0x48) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000280)='tlb_flush\x00', r3}, 0x10) syz_clone(0x8d002240, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$rds(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{0x46, 0x8}, &(0x7f0000000440)=0x4aa5, &(0x7f0000000480), 0xfffffffffffffffd, 0x80, 0x6, 0x8, 0x74, 0x9}}], 0x58, 0x14}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000380), 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f00000003c0)={[{0x2d, 'cpuset'}, {0x2d, 'devices'}, {0x2b, 'rdma'}]}, 0x17) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180200000020702500000000002020207b1af8ff00000000bfa100000000000007010000dbffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xb}]}) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a2809302060000ff41fd01020400000a00120002002800000019002d007fffffff0022de1330d54400009b84136ef75afb83de066a5900e1baac968300000000f2ff000001000000", 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x0) 2.252328767s ago: executing program 0 (id=1797): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0xe, 0xd, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000004851000000100000095000000000000001800000020646c2500000000002020207b1af8ff00000000bda100000000000007010000f8ffffffb702000008000000b703000000000000850000003400000095"], &(0x7f00000006c0)='GPL\x00'}, 0x94) 2.148375946s ago: executing program 0 (id=1800): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000050b6850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x70, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000380)={0x0, 0x9}, 0x8) 2.111731039s ago: executing program 4 (id=1801): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000680)={[{@nolazytime}, {@lazytime}, {@journal_path={'journal_path', 0x3d, './bus'}}, {@bsdgroups}, {@lazytime}, {@noload}]}, 0x3, 0x45c, &(0x7f0000002400)="$eJzs3MtvG8UfAPDv+pG+m/yq/oA+gCBAlAJJk5bSAxcQSBxAQoJDOYYkrUrdBjVBIlUFBaFyRJU4cUEckfgLOMEFASckLhzgjipVqJcWTkYb76a2a+dVP0j9+UjrzuyuO/P1ztizM7EDGFij6UMSsTMifo+I4Vq28YTR2j+3blya/vvGpekkqtU3/kpK6eGbNy5N56fmz9uRZ0oRhU+SONCi3PnFi2enKpXZC1l+fOHcu+PzixefOXNu6vTs6dnzkydOHDs68dzxyWc7Emca1839H8wd3PfKW1dfmz559e2fvkny+Jvi6JDRlQ4+Xq12uLj+2lWXrrUMNoNirZtGean/D0cxbl+84Xj5475WDuiqarVava/94ctV4B6WRL9rAPRH/kGf3v/mW4+GHv8J11+o3QClcd/KttqRUhSyc8pN97edNBoRJy//82W6RXfmIQAAGnyXjn+ebjX+K0T9vNDubA1lJCL+FxF7IuJ4ROyNiP9HLJ17f0Q8sM7ymxdJ7hz/FK5tKLA1Ssd/z2drW43jv3z0FyPFLLdrKf5ycupMZfZI9pocivKWND+xQhnfv/TrZ+2O1Y//0i0tPx8LZvW4VtrS+JyZqYWpu4m53vWPIvaXWsWfLK8EJBGxLyL2b7CMM4e/Ptju2Orxr6AD60zVryKeqF3/y9EUfy5ZeX1yfGtUZo+M563iTj//cuX1duXfVfwdkF7/7S3b/3L8I0n9eu38ev73L55MH6/88Wnbe5qNtv+h5M2Gfe9PLSxcmIgYSl6tVbp+/2TTeZO3z0/jP/Ro6/6/J26/EgciIm3ED0bEQxHxcFb3R37bveqr8OOLj72z8fi7K41/Zu3XvzockTeExaHIEst7WieKZ3/4tqHQkdbx7257/Y8tpQ5le9by/reWeq23NQMAAMBmVYiInZEUxpbThcLYWO1v+PfG9kJlbn7hqVNz752fqX1HYCTKhXyma7huPnQiu63P85NN+aPZvPHnxW1L+bHpucpMv4OHAbejTf9P/Vnsd+2ArvN9LRhc+j8MLv0fBted/X9rX+oB9F6Lz/9t/agH0Hutxv8fruWJOztfF6C3mvq/ZT8YIOb/YHBtpP97z4B7Q2mln2we6mlVgN6Z3xarf0leYjMl8l+u6UYR5bS1HI6IxYtR6HukEl1M9PudCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoDP+DQAA//+CSeFs") 1.963997521s ago: executing program 4 (id=1802): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r0, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, &(0x7f0000000480)=[{&(0x7f0000000180)="f7", 0x101d0}], 0x1}, 0x0) 1.929845104s ago: executing program 4 (id=1803): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000140), &(0x7f0000000040)='%pI4 \x00'}, 0x2a) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd27, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x93, 0xfc}, [{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0xfffffffc}, {0x1, 0x0, 0x0, 0x4000000, 0x7, 0x80000}, {0x8, 0x5, 0x0, 0xfffffffc, 0xfff}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x0, 0xc3}, {0x0, 0x5, 0x0, 0x0, 0x0, 0x4000000}, {0x5}, {}, {0x0, 0x10}, {0x0, 0x4, 0x0, 0x8000000}, {0x0, 0xffffffff, 0x0, 0x0, 0xfffffffd}, {0x2, 0x0, 0x400000, 0x0, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x20}, {0xfffffffd}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x2000}, {}, {0x0, 0x7, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x5, 0xfffffffd}, {0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xffffffff}, {0x1ff}, {}, {}, {0xffffffff, 0x0, 0x0, 0x2, 0x3}, {}, {0x20, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x9, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x1, 0x3}, {0x80}, {0x0, 0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x8000008}, {0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, {}, {0x0, 0x15, 0x0, 0x48510}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xd, 0xffffffff}, {}, {}, {0x0, 0xfffefffd, 0x4}, {0x0, 0x0, 0x0, 0x1}, {}, {0x5}, {}, {0x0, 0x0, 0x0, 0x3ff, 0x40000000}, {}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x400000}, {0x4, 0x0, 0x200}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, {0x5}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfb4}, {}, {0x0, 0x101, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x4, 0x9}, {0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x2, 0x0, 0x0, 0x0, 0x400000}, {}, {}, {}, {0x800000, 0x0, 0x0, 0x0, 0x0, 0x56}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffefffff}, {}, {0x0, 0x0, 0x6, 0x0, 0x4}, {}, {}, {0x0, 0xfffffffd, 0xfffffff9}, {0x6}, {0x7f}, {}, {}, {0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe}, {0x0, 0x0, 0x7}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x2, 0x0, 0x20000000, 0x800}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x292}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, {0x0, 0x5, 0x0, 0x0, 0x1}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x80}, {0x10000000, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x2e9c, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {0xfffffffe, 0x0, 0x0, 0x0, 0x8000, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {0x6}, {0x0, 0x8000}, {0x0, 0x0, 0x10000, 0x0, 0xfffffffc}, {0x0, 0x80000000, 0x0, 0x7dff800}], [{}, {}, {}, {}, {}, {0x3}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {0x5}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x1}, {}, {}, {}, {0x0, 0x1}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x1}, {}, {}, {}, {}, {}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {0x5}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x1}, {}, {0x5}, {}, {0x3}, {}, {}, {}, {}, {}, {0x2, 0x1}, {}, {}, {}, {0x3}, {0x0, 0x1}, {}, {}, {}, {0x2}, {}, {0x0, 0x1}, {0x4}, {0x3}, {}, {}, {0x0, 0x1}, {0x2}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) 1.885465467s ago: executing program 4 (id=1804): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000020000000"], 0x0, 0x3f, 0x0, 0x0, 0x0, 0xa}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) syz_read_part_table(0x5d4, &(0x7f0000000000)="$eJzs279rW1cUB/AjxcI0GbJkyuRkaKFkScgYQZMgKQkJCDVeQgsJJIQ0mhQIKFRgSIZEQ0I0GI9ejEGLf0yWRXEXGxs8G9PBYPBgKC32UvBiFdu3S4fiYplS+Hzgcbj3fu877/wBL/hfy8bvvV4vExG9wcONb/6e6P3D7eF2oXh3qHyz8jAiEz9ExK9DX/10cJL56/bRW+NyWm+k9cT42e6H3Tu59i/f/vHl48VmNp2PlLIxEhHnJjvDfRuSUzOVXzr/9l2t9LGef7Feamy9X1t9ML1TqHTuN1sz93K3n6bccqoDqb6KeryJl/EkqlGNZ1HrU/+x9ubV/Yul9tzzG3vF7qeFaylXjogzJ5z1OP1fX/r8qNW4dWX2wuj1+vxKZfuwaS+qg6fQHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAvpvKL51/+65W+ljPv1gvNbber60+mN4pVDr3m62Ze7nbT1NuOdWBVF9FPd7Ey3gS1cjEs6j1qf9Ye/Pq/sVSe+75jb1i99PCtZQrn3DO4/Z/fenzo1bj1pXZC6PX6/Mrle0zR7nq4Cl9AAAAAAAAAAAAAAAAAAAAAEREoXh3qHyz8jAiE9/FQHz924/Zg/1e+t89E/H9zxFxOeU30v7E+Nnuh907ufbB4vFi84t0PpKec5Od4f9gHP6lPwMAAP//+g2V7g==") 1.789388655s ago: executing program 4 (id=1805): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x100000, 0x0, 0x0, 0x41000, 0x14, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x109}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1f, 0x3, &(0x7f00000001c0)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_smc(0x2b, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x20010, r2, 0x80000) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x2, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r3, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="20000000110001010200"/20, @ANYRES32=r6], 0x20}}, 0x0) 1.618008109s ago: executing program 3 (id=1806): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000600)='kfree\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f00000002c0)=ANY=[@ANYRESOCT, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCL_BLANKSCREEN(r1, 0x4b67, &(0x7f0000000180)) 1.60142985s ago: executing program 3 (id=1807): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000800)={{0x2, 0x4e23, @remote}, {0x1, @local}, 0x2c, {0x2, 0x4e22, @empty}, 'lo\x00'}) signalfd(0xffffffffffffffff, &(0x7f0000000140)={[0x157]}, 0x8) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0xf, 0x0, @fd_index=0xa, 0x0, 0x0, 0x2, 0x2, 0x1, {0x0, 0x0, r0}}) io_uring_enter(0xffffffffffffffff, 0x44fd, 0x3, 0x1, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x0, &(0x7f0000000240)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) mq_timedreceive(r3, &(0x7f0000004600)=""/102381, 0xfffffceb, 0x0, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'syz_tun\x00'}) r5 = gettid() timer_create(0x2, &(0x7f000049efa0)={0x0, 0xb, 0x4, @tid=r5}, &(0x7f0000044000)=0x0) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) timer_settime(0x0, 0xffffffffffffffff, 0x0, 0x0) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000b40)={0x0, 0x18, 0xfa00, {0x2000000000, &(0x7f0000000b00), 0x111, 0x9}}, 0x20) writev(r7, &(0x7f0000000000)=[{&(0x7f0000000080), 0x62}, {&(0x7f0000000100)="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", 0x682c}, {&(0x7f0000001480)="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", 0x1001}], 0x3) timer_settime(r6, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f6, &(0x7f0000000100)={'syztnl0\x00', 0x0}) 1.501845248s ago: executing program 2 (id=1808): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000800)={{0x2, 0x4e23, @remote}, {0x1, @local}, 0x2c, {0x2, 0x4e22, @empty}, 'lo\x00'}) signalfd(0xffffffffffffffff, &(0x7f0000000140)={[0x157]}, 0x8) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0xf, 0x0, @fd_index=0xa, 0x0, 0x0, 0x2, 0x2, 0x1, {0x0, 0x0, r0}}) io_uring_enter(0xffffffffffffffff, 0x44fd, 0x3, 0x1, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x0, &(0x7f0000000240)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) mq_timedreceive(r3, &(0x7f0000004600)=""/102381, 0xfffffceb, 0x0, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'syz_tun\x00'}) r5 = gettid() timer_create(0x2, &(0x7f000049efa0)={0x0, 0xb, 0x4, @tid=r5}, &(0x7f0000044000)=0x0) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) timer_settime(0x0, 0xffffffffffffffff, 0x0, 0x0) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000b40)={0x0, 0x18, 0xfa00, {0x2000000000, &(0x7f0000000b00), 0x111, 0x9}}, 0x20) writev(r7, &(0x7f0000000000)=[{&(0x7f0000000080), 0x62}, {&(0x7f0000000100)="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", 0x682c}, {&(0x7f0000001480)="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", 0x1001}], 0x3) timer_settime(r6, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f6, &(0x7f0000000100)={'syztnl0\x00', 0x0}) 1.249267099s ago: executing program 0 (id=1811): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 1.248968229s ago: executing program 0 (id=1812): socket$netlink(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$packet(0x11, 0x2, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000003043e498eadf27be679db5b6e7110b516b6af1abb579a4a133641958ef90533d8da3e2ee1ab9ad28842ecf19b468debaea963acbc2eeb9b910326137105157b29f292a468be081f5cbbcac399e74d4c4fd66d50fb672bac3e0be390c67df44a1da19079fcb4dbf3f88dc48479d0de079b67a69d4313798078c50"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000280)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0xb}, 0x1c) listen(r2, 0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x2, @local}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendto$inet6(r6, &(0x7f0000001300)="92", 0x1, 0x10, &(0x7f0000000240)={0xa, 0x4e1c, 0xfffffffc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r6, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x0, 0x4}, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r8}, 0x10) r9 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000b00)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) r10 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/devices\x00', 0x0, 0x0) preadv(r10, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4094, 0xffe}], 0x1, 0xf0, 0xd215) accept4$unix(r2, &(0x7f0000000080)=@abs, &(0x7f0000000000)=0x6e, 0x80800) close_range(r2, 0xffffffffffffffff, 0x0) 1.187923074s ago: executing program 1 (id=1814): syslog(0xa, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRESOCT=0x0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x80000000000000}, 0x18) socket$nl_route(0x10, 0x3, 0x0) ioctl$INCFS_IOC_CREATE_FILE(0xffffffffffffffff, 0xc058671e, &(0x7f00000000c0)={{'\x00', 0x3}, {0x19}, 0x123, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000019340)='net/dev\x00') r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00"/12], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={r2, 0x58, &(0x7f0000000140)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000540)={r3, 0xfffffff8}, 0xc) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) pread64(r1, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a) r4 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000180)=@keyring={'key_or_keyring:', 0x0, 0x2}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioperm(0x9, 0x9, 0x7) ioperm(0x2, 0x3, 0x100) mknodat$loop(0xffffffffffffff9c, &(0x7f0000019200)='./file0/file0\x00', 0x1000, 0x1) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)=0x0) timer_settime(r6, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) ioperm(0x7fd, 0xfffffffffffffb2e, 0x6) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x200000000000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000190c0)='rxrpc_rtt_tx\x00', 0xffffffffffffffff, 0x0, 0xffffffff7ffffffd}, 0x18) r7 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_BINARY(r7, 0x2, &(0x7f0000000540)='\x00', &(0x7f0000001c80)='n', 0x1) fsconfig$FSCONFIG_SET_FD(r7, 0x5, &(0x7f0000000280)='\x00H\xeb', 0x0, r7) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, 0x0, &(0x7f0000001140)='\xf1\x95\xb3>-\x8c\xd4\r\x01\xfa\xe2{eED\x0e\xaaPV\x11\xff\xb6j\xd4~6\x82^\x9b b', 0x0) close(r7) sendmsg$nl_generic(r1, &(0x7f0000019180)={&(0x7f0000019080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000019140)={&(0x7f0000019240)=ANY=[@ANYBLOB="200000003800200025bd7400ffdbdf25080000000c004b00630c0000000000008c8317735127b1d8ebdd02097562ff31ba122e35bbe271039d3a6082c9af3f5379e66cb235b450abae48188349fddfd9c9d5f15336c0f4c3a025920ce4b2d379f66a4e136272ef8e270a888d2769aeeade035357057bb0f25af6a3dabaebe3665e7c480a2e40482390e1d658d50f7fd250ff78e7591bff02b7b660d2780e1bc02afd2aced9fff23641305328ae35781cf9bfecd383cc27fe2785d0a7e6f528e2b9b49bd5f69b69db"], 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x24000021) 1.125078589s ago: executing program 1 (id=1815): syslog(0xa, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRESOCT=0x0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x80000000000000}, 0x18) socket$nl_route(0x10, 0x3, 0x0) ioctl$INCFS_IOC_CREATE_FILE(0xffffffffffffffff, 0xc058671e, &(0x7f00000000c0)={{'\x00', 0x3}, {0x19}, 0x123, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000019340)='net/dev\x00') r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00"/12], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={r2, 0x58, &(0x7f0000000140)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000540)={r3, 0xfffffff8}, 0xc) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) pread64(r1, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a) r4 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000180)=@keyring={'key_or_keyring:', 0x0, 0x2}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioperm(0x9, 0x9, 0x7) ioperm(0x2, 0x3, 0x100) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)=0x0) timer_settime(r6, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) ioperm(0x7fd, 0xfffffffffffffb2e, 0x6) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x200000000000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffd}, 0x18) r7 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_BINARY(r7, 0x2, &(0x7f0000000540)='\x00', &(0x7f0000001c80)='n', 0x1) fsconfig$FSCONFIG_SET_FD(r7, 0x5, &(0x7f0000000280)='\x00H\xeb', 0x0, r7) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, 0x0, &(0x7f0000001140)='\xf1\x95\xb3>-\x8c\xd4\r\x01\xfa\xe2{eED\x0e\xaaPV\x11\xff\xb6j\xd4~6\x82^\x9b b', 0x0) close(r7) 742.47125ms ago: executing program 3 (id=1816): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40000100, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x800, 0xfffffffc, 0x7, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x20000000000002b8, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x0, 0x8000, 0x0, 0x0, 0x41000}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000280)='kfree\x00', r2}, 0x18) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x2, 0x9}}, 0x20) 721.574132ms ago: executing program 3 (id=1817): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000600)='kfree\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f00000002c0)=ANY=[@ANYRESOCT, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCL_BLANKSCREEN(r1, 0x4b67, &(0x7f0000000180)) 705.535793ms ago: executing program 3 (id=1818): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00"/13], 0x48) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000280)='tlb_flush\x00', r3}, 0x10) syz_clone(0x8d002240, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$rds(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{0x46, 0x8}, &(0x7f0000000440)=0x4aa5, &(0x7f0000000480), 0xfffffffffffffffd, 0x80, 0x6, 0x8, 0x74, 0x9}}], 0x58, 0x14}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000380), 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f00000003c0)={[{0x2d, 'cpuset'}, {0x2d, 'devices'}, {0x2b, 'rdma'}]}, 0x17) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180200000020702500000000002020207b1af8ff00000000bfa100000000000007010000dbffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xb}]}) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a2809302060000ff41fd01020400000a00120002002800000019002d007fffffff0022de1330d54400009b84136ef75afb83de066a5900e1baac968300000000f2ff000001000000", 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x0) 596.104082ms ago: executing program 4 (id=1819): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='fdinfo/4\x00') pread64(r0, &(0x7f0000002140)=""/17, 0x11, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c00)=@framed={{}, [@printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r6 = socket$xdp(0x2c, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000007c0)='>', 0x1}], 0x1, &(0x7f0000000640)=ANY=[@ANYRES64, @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYRES16=r6, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="92564ef1063a66026d292717ca6fc07b031263df98738c12811b728e7f043552ef28e163fa9f284b1e50d59ff459b6fd7856b32d9a557c2a6d8e3fdeba0ca6cb1d0505509052fce63191d3121aefe94e4d9c2463f00f5675cfaefa38e2530e3213cd060df7ce756eec80e6aeaaafddda614963c9a55211e1a8e4e8f5fbc74255ee91d5d094a9f92c39e5d50221b230ca7f8fc7762d68a86520d4a941", @ANYRES32, @ANYRESHEX=r5, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000402000000", @ANYRES32, @ANYRES32=0xee01, @ANYRESOCT=r2, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="e5ffff6e18"], 0xa0}, 0x4004881) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', 0xffffffffffffffff, 0x0, 0x3}, 0x18) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/devices\x00', 0x0, 0x0) 591.415072ms ago: executing program 2 (id=1820): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0x2, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="00000000000057b6b7080000000000007b8af8ff00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = socket$inet(0x2, 0x2, 0x0) close(r1) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r2, 0x0, 0x200000000000a, &(0x7f0000000000)="ea00005c00000000", 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) epoll_create1(0x0) r3 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000004008500000082000000950000000000000087caf61e29c956d43dcd3b247e6fe2205e805f32b614b2ce99c7a38aa5bafe31aeccd02288eefe59ff3f959b2fffd649555261fb88eb78efe61a3500aef6625969dc9297765c34632969d9a72f2dc4eafc09127ab6e5111fd85ee1a641ae45f86e2388f13812a5622eed2a"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) r5 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCL_BLANKSCREEN(r5, 0x4b67, &(0x7f0000000180)) 531.859047ms ago: executing program 2 (id=1821): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000050b6850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x70, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000380)={0x0, 0x9}, 0x8) 311.628335ms ago: executing program 0 (id=1822): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) r2 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00'}, 0x10) sendfile(r1, r0, 0x0, 0x3ffff) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000380)='kfree\x00', r3}, 0x18) sendfile(r1, r0, 0x0, 0x7ffff000) 278.173658ms ago: executing program 1 (id=1823): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000100000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x6c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='kfree\x00', r1}, 0x10) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000540)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000054850000000400000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r2, @ANYRESDEC=r2], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$rxrpc(0x21, 0x2, 0xa) r4 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0x0) r5 = socket(0x10, 0x803, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x5}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x134, 0x2c, 0xd2b, 0x70bd2b, 0x35dfdbfb, {0x0, 0x0, 0x0, r7, {0xf}, {}, {0x8, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x108, 0x2, [@TCA_U32_SEL={0x34, 0x5, {0x1, 0x1, 0x3, 0x1, 0x4, 0x102, 0x6, 0x7ffffffa, [{0x200, 0x500, 0x3, 0x6}, {0x0, 0x53, 0xa9, 0x1}]}}, @TCA_U32_LINK={0x8}, @TCA_U32_INDEV={0x14, 0x8, 'vxcan1\x00'}, @TCA_U32_SEL={0xb4, 0x5, {0x10, 0x9, 0x6, 0x10da, 0xa760, 0x0, 0x10, 0x100, [{0x1000, 0xe, 0xfffff000, 0x9f6}, {0xdeb2, 0x3, 0x6, 0x3}, {0x1, 0xfffffffb, 0x100, 0x3ff}, {0x200, 0x3ff, 0x3, 0x4}, {0x9, 0x7, 0x40, 0x80}, {0x3, 0xde5, 0x1, 0xbd}, {0x3, 0x80, 0x1, 0x6}, {0x7, 0xe22, 0x9, 0x5cf4}, {0x3ff, 0xb, 0x3, 0xa6d}, {0x6, 0x0, 0x2, 0x1}]}}]}}]}, 0x134}}, 0x24040084) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x3e, &(0x7f0000000240)=ANY=[@ANYBLOB="0380c2000000ffffffffffff080045000030000000000001385e51fa0001ac0c14aa0b009078000100004529000400688001021d01ffac141439e0000002"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[], 0xd0}, 0x1, 0x0, 0x0, 0x60000800}, 0x4000024) bind$rxrpc(r3, &(0x7f00000004c0)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e24, @broadcast}}, 0x24) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x52}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000002000000ff0f0000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000140)='kmem_cache_free\x00', r9, 0x0, 0x80000000}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x11, 0x0, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fffffff}, 0x94) r10 = openat$autofs(0xffffffffffffff9c, 0x0, 0x40, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r10, 0xc018937e, 0x0) 82.694014ms ago: executing program 1 (id=1824): creat(&(0x7f00000000c0)='./file0\x00', 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r1}, 0x10) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r4 = dup(r3) write$P9_RLERRORu(r4, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) 18.335219ms ago: executing program 1 (id=1825): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r0, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, &(0x7f0000000480)=[{&(0x7f0000000180)="f7", 0x101d0}], 0x1}, 0x0) 0s ago: executing program 1 (id=1826): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ppoll(&(0x7f00000000c0)=[{r1, 0x2292}, {r1, 0x8}], 0x2, 0x0, 0x0, 0x0) fcntl$setpipe(r0, 0x407, 0x8001a0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@deltfilter={0x24, 0x2d, 0x200, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {0x4, 0xe}, {0x4, 0x9}}}, 0x24}}, 0x14000000) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'macvtap0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0xb4}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) timer_create(0x4, 0x0, &(0x7f0000000380)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000001c000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r5 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r5) kernel console output (not intermixed with test programs): rnal device path [ 96.910391][ T6489] loop4: detected capacity change from 0 to 512 [ 96.917191][ T6489] EXT4-fs: Ignoring removed oldalloc option [ 96.925021][ T6489] EXT4-fs error (device loop4): ext4_xattr_inode_iget:433: comm syz.4.985: Parent and EA inode have the same ino 15 [ 96.938862][ T6489] EXT4-fs (loop4): Remounting filesystem read-only [ 96.946135][ T6489] EXT4-fs warning (device loop4): ext4_evict_inode:274: xattr delete (err -30) [ 96.955281][ T6489] EXT4-fs (loop4): 1 orphan inode deleted [ 96.961569][ T6489] EXT4-fs mount: 18 callbacks suppressed [ 96.961580][ T6489] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 96.983227][ T6489] netlink: 56 bytes leftover after parsing attributes in process `syz.4.985'. [ 96.992741][ T6489] netlink: 1 bytes leftover after parsing attributes in process `syz.4.985'. [ 97.015286][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.107824][ T6498] loop3: detected capacity change from 0 to 512 [ 97.115074][ T6498] EXT4-fs: Ignoring removed oldalloc option [ 97.123259][ T6498] EXT4-fs error (device loop3): ext4_xattr_inode_iget:433: comm syz.3.989: Parent and EA inode have the same ino 15 [ 97.136317][ T6498] EXT4-fs (loop3): Remounting filesystem read-only [ 97.143194][ T6498] EXT4-fs warning (device loop3): ext4_evict_inode:274: xattr delete (err -30) [ 97.152899][ T6498] EXT4-fs (loop3): 1 orphan inode deleted [ 97.159289][ T6498] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.212578][ T6492] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 97.223364][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.273703][ T6506] wireguard3: entered promiscuous mode [ 97.279580][ T6506] wireguard3: entered allmulticast mode [ 97.369803][ T6510] netlink: 4 bytes leftover after parsing attributes in process `syz.4.991'. [ 97.382882][ T6510] netlink: 'syz.4.991': attribute type 1 has an invalid length. [ 97.390826][ T6510] netlink: 224 bytes leftover after parsing attributes in process `syz.4.991'. [ 97.407796][ T6518] wireguard3: entered promiscuous mode [ 97.413419][ T6518] wireguard3: entered allmulticast mode [ 97.437339][ T6521] loop1: detected capacity change from 0 to 764 [ 97.450344][ T6523] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.461016][ T6523] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.479000][ T6523] lo speed is unknown, defaulting to 1000 [ 97.503128][ T6525] wireguard0: entered promiscuous mode [ 97.508887][ T6525] wireguard0: entered allmulticast mode [ 97.674139][ T6537] atomic_op ffff888109437128 conn xmit_atomic 0000000000000000 [ 97.682307][ T6539] loop1: detected capacity change from 0 to 512 [ 97.689656][ T6539] EXT4-fs: Ignoring removed oldalloc option [ 97.698870][ T6539] EXT4-fs error (device loop1): ext4_xattr_inode_iget:433: comm syz.1.1001: Parent and EA inode have the same ino 15 [ 97.711707][ T6539] EXT4-fs (loop1): Remounting filesystem read-only [ 97.718410][ T6539] EXT4-fs warning (device loop1): ext4_evict_inode:274: xattr delete (err -30) [ 97.727837][ T6539] EXT4-fs (loop1): 1 orphan inode deleted [ 97.734265][ T6539] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.754424][ T6539] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1001'. [ 97.763440][ T6539] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1001'. [ 97.782179][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.825874][ T6547] wireguard0: entered promiscuous mode [ 97.831448][ T6547] wireguard0: entered allmulticast mode [ 98.080559][ T6553] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1005'. [ 98.090302][ T6553] netlink: 'syz.2.1005': attribute type 1 has an invalid length. [ 98.098067][ T6553] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1005'. [ 98.318759][ T6562] loop0: detected capacity change from 0 to 764 [ 98.343332][ T29] kauditd_printk_skb: 450 callbacks suppressed [ 98.343347][ T29] audit: type=1326 audit(1755899778.409:5339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6563 comm="syz.0.1007" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbe9786ebe9 code=0x0 [ 98.386426][ T29] audit: type=1326 audit(1755899778.459:5340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6565 comm="syz.3.1008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd0c7debe9 code=0x7ffc0000 [ 98.391779][ T6566] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1008'. [ 98.419373][ T6567] loop0: detected capacity change from 0 to 512 [ 98.426035][ T29] audit: type=1326 audit(1755899778.459:5341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6565 comm="syz.3.1008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd0c7debe9 code=0x7ffc0000 [ 98.449877][ T29] audit: type=1326 audit(1755899778.459:5342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6565 comm="syz.3.1008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdd0c7debe9 code=0x7ffc0000 [ 98.450421][ T6566] loop3: detected capacity change from 0 to 512 [ 98.473391][ T29] audit: type=1326 audit(1755899778.459:5343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6565 comm="syz.3.1008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd0c7debe9 code=0x7ffc0000 [ 98.480091][ T6567] journal_path: Non-blockdev passed as './bus' [ 98.503421][ T29] audit: type=1326 audit(1755899778.459:5344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6565 comm="syz.3.1008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd0c7debe9 code=0x7ffc0000 [ 98.503449][ T29] audit: type=1326 audit(1755899778.459:5345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6565 comm="syz.3.1008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdd0c7debe9 code=0x7ffc0000 [ 98.503471][ T29] audit: type=1326 audit(1755899778.459:5346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6565 comm="syz.3.1008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd0c7debe9 code=0x7ffc0000 [ 98.509632][ T6567] EXT4-fs: error: could not find journal device path [ 98.533225][ T29] audit: type=1326 audit(1755899778.459:5347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6565 comm="syz.3.1008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdd0c7debe9 code=0x7ffc0000 [ 98.610521][ T29] audit: type=1326 audit(1755899778.459:5348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6565 comm="syz.3.1008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd0c7debe9 code=0x7ffc0000 [ 98.666270][ T6566] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.683061][ T6566] ext4 filesystem being mounted at /213/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.696762][ T6566] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #4: comm syz.3.1008: corrupted inode contents [ 98.711630][ T6566] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #4: comm syz.3.1008: mark_inode_dirty error [ 98.723406][ T6566] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #4: comm syz.3.1008: corrupted inode contents [ 98.735674][ T6566] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #4: comm syz.3.1008: mark_inode_dirty error [ 98.747284][ T6566] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.1008: Failed to acquire dquot type 1 [ 98.747784][ T6579] loop1: detected capacity change from 0 to 512 [ 98.760435][ T6566] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #4: comm syz.3.1008: corrupted inode contents [ 98.765557][ T6579] EXT4-fs: Ignoring removed oldalloc option [ 98.783711][ T6566] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #4: comm syz.3.1008: mark_inode_dirty error [ 98.785196][ T6579] EXT4-fs error (device loop1): ext4_xattr_inode_iget:433: comm syz.1.1013: Parent and EA inode have the same ino 15 [ 98.807856][ T6579] EXT4-fs (loop1): Remounting filesystem read-only [ 98.814585][ T6579] EXT4-fs warning (device loop1): ext4_evict_inode:274: xattr delete (err -30) [ 98.824216][ T6566] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #4: comm syz.3.1008: corrupted inode contents [ 98.825722][ T6579] EXT4-fs (loop1): 1 orphan inode deleted [ 98.842579][ T6579] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.858222][ T6566] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #4: comm syz.3.1008: mark_inode_dirty error [ 98.860449][ T6579] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1013'. [ 98.879444][ T6566] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.1008: Failed to acquire dquot type 1 [ 98.907413][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.933562][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.016746][ T6601] wireguard0: entered promiscuous mode [ 99.022334][ T6601] wireguard0: entered allmulticast mode [ 99.128100][ T6618] loop4: detected capacity change from 0 to 512 [ 99.161537][ T6618] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.197938][ T6618] ext4 filesystem being mounted at /207/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.271290][ T6618] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #4: comm syz.4.1027: corrupted inode contents [ 99.293040][ T6618] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #4: comm syz.4.1027: mark_inode_dirty error [ 99.306265][ T6618] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #4: comm syz.4.1027: corrupted inode contents [ 99.319562][ T6618] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #4: comm syz.4.1027: mark_inode_dirty error [ 99.332357][ T6618] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.1027: Failed to acquire dquot type 1 [ 99.333181][ T6616] netlink: 'syz.2.1026': attribute type 1 has an invalid length. [ 99.352506][ T6635] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #4: comm syz.4.1027: corrupted inode contents [ 99.368388][ T6635] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #4: comm syz.4.1027: mark_inode_dirty error [ 99.380709][ T6635] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #4: comm syz.4.1027: corrupted inode contents [ 99.397081][ T6635] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #4: comm syz.4.1027: mark_inode_dirty error [ 99.409214][ T6635] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.1027: Failed to acquire dquot type 1 [ 99.446930][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.459868][ T6642] 9pnet_fd: Insufficient options for proto=fd [ 99.573348][ T6648] ALSA: seq fatal error: cannot create timer (-19) [ 99.594338][ T6644] serio: Serial port ptm0 [ 99.712557][ T6661] loop0: detected capacity change from 0 to 512 [ 99.719502][ T6661] journal_path: Non-blockdev passed as './bus' [ 99.725877][ T6661] EXT4-fs: error: could not find journal device path [ 99.881660][ T6665] loop1: detected capacity change from 0 to 512 [ 99.914647][ T6665] EXT4-fs error (device loop1): ext4_init_orphan_info:585: comm syz.1.1040: inode #0: comm syz.1.1040: iget: illegal inode # [ 99.927896][ T6665] EXT4-fs (loop1): get orphan inode failed [ 99.933828][ T6665] EXT4-fs (loop1): mount failed [ 99.946646][ T6665] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.955379][ T6665] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.025499][ T6674] 9pnet_fd: Insufficient options for proto=fd [ 100.039900][ T10] IPVS: starting estimator thread 0... [ 100.049307][ T6676] loop2: detected capacity change from 0 to 512 [ 100.075430][ T6676] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.088507][ T6676] ext4 filesystem being mounted at /198/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.101162][ T6676] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #4: comm syz.2.1042: corrupted inode contents [ 100.111028][ T6685] ALSA: seq fatal error: cannot create timer (-19) [ 100.114873][ T6676] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #4: comm syz.2.1042: mark_inode_dirty error [ 100.131510][ T6676] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #4: comm syz.2.1042: corrupted inode contents [ 100.144303][ T6676] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #4: comm syz.2.1042: mark_inode_dirty error [ 100.156136][ T6676] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.1042: Failed to acquire dquot type 1 [ 100.164995][ T6677] IPVS: using max 2688 ests per chain, 134400 per kthread [ 100.168684][ T6691] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #4: comm syz.2.1042: corrupted inode contents [ 100.187155][ T6691] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #4: comm syz.2.1042: mark_inode_dirty error [ 100.198946][ T6691] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #4: comm syz.2.1042: corrupted inode contents [ 100.211406][ T6691] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #4: comm syz.2.1042: mark_inode_dirty error [ 100.225519][ T6691] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.1042: Failed to acquire dquot type 1 [ 100.246519][ T6695] wireguard3: entered promiscuous mode [ 100.252043][ T6695] wireguard3: entered allmulticast mode [ 100.258446][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.283289][ T6698] loop2: detected capacity change from 0 to 512 [ 100.296240][ T6698] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.309433][ T6698] ext4 filesystem being mounted at /199/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.323393][ T6698] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #4: comm syz.2.1050: corrupted inode contents [ 100.335534][ T6698] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #4: comm syz.2.1050: mark_inode_dirty error [ 100.347403][ T6698] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #4: comm syz.2.1050: corrupted inode contents [ 100.359755][ T6698] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #4: comm syz.2.1050: mark_inode_dirty error [ 100.371309][ T6698] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.1050: Failed to acquire dquot type 1 [ 100.386453][ T6698] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #4: comm syz.2.1050: corrupted inode contents [ 100.398360][ T6698] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #4: comm syz.2.1050: mark_inode_dirty error [ 100.410134][ T6698] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #4: comm syz.2.1050: corrupted inode contents [ 100.422120][ T6698] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #4: comm syz.2.1050: mark_inode_dirty error [ 100.433874][ T6698] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.1050: Failed to acquire dquot type 1 [ 100.457668][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.476544][ T6710] loop4: detected capacity change from 0 to 764 [ 100.518288][ T6721] 9pnet_fd: Insufficient options for proto=fd [ 100.566910][ T6723] ALSA: seq fatal error: cannot create timer (-19) [ 100.586562][ T6733] loop0: detected capacity change from 0 to 512 [ 100.606550][ T6733] EXT4-fs: Ignoring removed oldalloc option [ 100.616129][ T6733] EXT4-fs error (device loop0): ext4_xattr_inode_iget:433: comm syz.0.1061: Parent and EA inode have the same ino 15 [ 100.663387][ T6742] loop4: detected capacity change from 0 to 512 [ 100.675680][ T6733] EXT4-fs (loop0): Remounting filesystem read-only [ 100.682466][ T6733] EXT4-fs warning (device loop0): ext4_evict_inode:274: xattr delete (err -30) [ 100.692415][ T6742] EXT4-fs: Ignoring removed oldalloc option [ 100.699342][ T6733] EXT4-fs (loop0): 1 orphan inode deleted [ 100.706038][ T6742] EXT4-fs error (device loop4): ext4_xattr_inode_iget:433: comm syz.4.1065: Parent and EA inode have the same ino 15 [ 100.718605][ T6742] EXT4-fs (loop4): Remounting filesystem read-only [ 100.726231][ T6733] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.726553][ T6742] EXT4-fs warning (device loop4): ext4_evict_inode:274: xattr delete (err -30) [ 100.747794][ T6742] EXT4-fs (loop4): 1 orphan inode deleted [ 100.750254][ T6735] serio: Serial port ptm0 [ 100.754167][ T6742] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.780489][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.790056][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.819042][ T6752] loop0: detected capacity change from 0 to 1024 [ 100.825836][ T6752] EXT4-fs: Ignoring removed orlov option [ 100.836454][ T6752] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.857574][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.874374][ T6761] 9pnet_fd: Insufficient options for proto=fd [ 100.883809][ T6759] loop4: detected capacity change from 0 to 512 [ 100.891025][ T6759] journal_path: Non-blockdev passed as './bus' [ 100.897340][ T6759] EXT4-fs: error: could not find journal device path [ 101.312403][ T6777] serio: Serial port ptm1 [ 101.519304][ T6785] netlink: 'syz.2.1079': attribute type 9 has an invalid length. [ 101.562818][ T6787] FAULT_INJECTION: forcing a failure. [ 101.562818][ T6787] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 101.576234][ T6787] CPU: 1 UID: 0 PID: 6787 Comm: syz.1.1080 Not tainted syzkaller #0 PREEMPT(voluntary) [ 101.576303][ T6787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 101.576387][ T6787] Call Trace: [ 101.576394][ T6787] [ 101.576402][ T6787] __dump_stack+0x1d/0x30 [ 101.576422][ T6787] dump_stack_lvl+0xe8/0x140 [ 101.576441][ T6787] dump_stack+0x15/0x1b [ 101.576457][ T6787] should_fail_ex+0x265/0x280 [ 101.576477][ T6787] should_fail+0xb/0x20 [ 101.576534][ T6787] should_fail_usercopy+0x1a/0x20 [ 101.576554][ T6787] _copy_to_user+0x20/0xa0 [ 101.576578][ T6787] simple_read_from_buffer+0xb5/0x130 [ 101.576596][ T6787] proc_fail_nth_read+0x10e/0x150 [ 101.576692][ T6787] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 101.576736][ T6787] vfs_read+0x1a5/0x770 [ 101.576757][ T6787] ? __rcu_read_unlock+0x4f/0x70 [ 101.576844][ T6787] ? __fget_files+0x184/0x1c0 [ 101.576928][ T6787] ? __sys_setsockopt+0x18e/0x200 [ 101.577033][ T6787] ksys_read+0xda/0x1a0 [ 101.577057][ T6787] __x64_sys_read+0x40/0x50 [ 101.577077][ T6787] x64_sys_call+0x27bc/0x2ff0 [ 101.577098][ T6787] do_syscall_64+0xd2/0x200 [ 101.577212][ T6787] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 101.577234][ T6787] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.577252][ T6787] RIP: 0033:0x7f3d251ed5fc [ 101.577267][ T6787] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 101.577390][ T6787] RSP: 002b:00007f3d23c57030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 101.577409][ T6787] RAX: ffffffffffffffda RBX: 00007f3d25415fa0 RCX: 00007f3d251ed5fc [ 101.577471][ T6787] RDX: 000000000000000f RSI: 00007f3d23c570a0 RDI: 0000000000000005 [ 101.577484][ T6787] RBP: 00007f3d23c57090 R08: 0000000000000000 R09: 0000000000000000 [ 101.577496][ T6787] R10: 0000200000003d40 R11: 0000000000000246 R12: 0000000000000001 [ 101.577508][ T6787] R13: 00007f3d25416038 R14: 00007f3d25415fa0 R15: 00007ffc12f968a8 [ 101.577592][ T6787] [ 101.581777][ T6789] wireguard0: entered promiscuous mode [ 101.787911][ T6789] wireguard0: entered allmulticast mode [ 101.832845][ T6803] siw: device registration error -23 [ 101.864050][ T6809] loop4: detected capacity change from 0 to 512 [ 101.870852][ T6809] EXT4-fs: Ignoring removed oldalloc option [ 101.879276][ T6809] EXT4-fs error (device loop4): ext4_xattr_inode_iget:433: comm syz.4.1090: Parent and EA inode have the same ino 15 [ 101.892111][ T6809] EXT4-fs (loop4): Remounting filesystem read-only [ 101.899049][ T6809] EXT4-fs warning (device loop4): ext4_evict_inode:274: xattr delete (err -30) [ 101.908296][ T6809] EXT4-fs (loop4): 1 orphan inode deleted [ 101.914601][ T6809] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.937459][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.951321][ T6815] FAULT_INJECTION: forcing a failure. [ 101.951321][ T6815] name failslab, interval 1, probability 0, space 0, times 0 [ 101.964158][ T6815] CPU: 1 UID: 0 PID: 6815 Comm: syz.2.1092 Not tainted syzkaller #0 PREEMPT(voluntary) [ 101.964185][ T6815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 101.964268][ T6815] Call Trace: [ 101.964275][ T6815] [ 101.964283][ T6815] __dump_stack+0x1d/0x30 [ 101.964305][ T6815] dump_stack_lvl+0xe8/0x140 [ 101.964321][ T6815] dump_stack+0x15/0x1b [ 101.964335][ T6815] should_fail_ex+0x265/0x280 [ 101.964355][ T6815] ? p9_fid_create+0x32/0x210 [ 101.964427][ T6815] should_failslab+0x8c/0xb0 [ 101.964449][ T6815] __kmalloc_cache_noprof+0x4c/0x320 [ 101.964546][ T6815] p9_fid_create+0x32/0x210 [ 101.964567][ T6815] p9_client_walk+0x74/0x4c0 [ 101.964674][ T6815] v9fs_file_open+0x159/0x560 [ 101.964696][ T6815] do_dentry_open+0x649/0xa20 [ 101.964726][ T6815] ? __pfx_v9fs_file_open+0x10/0x10 [ 101.964748][ T6815] vfs_open+0x37/0x1e0 [ 101.964817][ T6815] path_openat+0x1c5e/0x2170 [ 101.964845][ T6815] ? _parse_integer_limit+0x170/0x190 [ 101.964867][ T6815] ? _parse_integer+0x27/0x40 [ 101.964898][ T6815] do_filp_open+0x109/0x230 [ 101.964921][ T6815] do_sys_openat2+0xa6/0x110 [ 101.964947][ T6815] __x64_sys_creat+0x65/0x90 [ 101.965039][ T6815] x64_sys_call+0x2d94/0x2ff0 [ 101.965062][ T6815] do_syscall_64+0xd2/0x200 [ 101.965154][ T6815] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 101.965243][ T6815] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 101.965269][ T6815] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.965292][ T6815] RIP: 0033:0x7f99d135ebe9 [ 101.965308][ T6815] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 101.965322][ T6815] RSP: 002b:00007f99cfdbf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 101.965389][ T6815] RAX: ffffffffffffffda RBX: 00007f99d1585fa0 RCX: 00007f99d135ebe9 [ 101.965402][ T6815] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000002c0 [ 101.965414][ T6815] RBP: 00007f99cfdbf090 R08: 0000000000000000 R09: 0000000000000000 [ 101.965424][ T6815] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 101.965447][ T6815] R13: 00007f99d1586038 R14: 00007f99d1585fa0 R15: 00007ffefc651568 [ 101.965464][ T6815] [ 102.198380][ T6811] atomic_op ffff888118e57128 conn xmit_atomic 0000000000000000 [ 102.212582][ T6818] __nla_validate_parse: 13 callbacks suppressed [ 102.212598][ T6818] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 102.477048][ T6835] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1099'. [ 102.486163][ T6835] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1099'. [ 102.495399][ T6835] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1099'. [ 102.510747][ T6835] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1099'. [ 102.519847][ T6835] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1099'. [ 102.528898][ T6835] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1099'. [ 102.550182][ T6835] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1099'. [ 102.559246][ T6835] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1099'. [ 102.568246][ T6835] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1099'. [ 102.637712][ T6846] loop4: detected capacity change from 0 to 512 [ 102.644630][ T6846] EXT4-fs: Ignoring removed oldalloc option [ 102.652716][ T6846] EXT4-fs error (device loop4): ext4_xattr_inode_iget:433: comm syz.4.1103: Parent and EA inode have the same ino 15 [ 102.665470][ T6846] EXT4-fs (loop4): Remounting filesystem read-only [ 102.672101][ T6846] EXT4-fs warning (device loop4): ext4_evict_inode:274: xattr delete (err -30) [ 102.681442][ T6846] EXT4-fs (loop4): 1 orphan inode deleted [ 102.687645][ T6846] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.716740][ T6852] FAULT_INJECTION: forcing a failure. [ 102.716740][ T6852] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 102.717047][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.730028][ T6852] CPU: 0 UID: 0 PID: 6852 Comm: syz.1.1105 Not tainted syzkaller #0 PREEMPT(voluntary) [ 102.730054][ T6852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 102.730065][ T6852] Call Trace: [ 102.730073][ T6852] [ 102.730080][ T6852] __dump_stack+0x1d/0x30 [ 102.730102][ T6852] dump_stack_lvl+0xe8/0x140 [ 102.730164][ T6852] dump_stack+0x15/0x1b [ 102.730180][ T6852] should_fail_ex+0x265/0x280 [ 102.730199][ T6852] should_fail+0xb/0x20 [ 102.730214][ T6852] should_fail_usercopy+0x1a/0x20 [ 102.730236][ T6852] _copy_from_user+0x1c/0xb0 [ 102.730336][ T6852] ___sys_sendmsg+0xc1/0x1d0 [ 102.730434][ T6852] __x64_sys_sendmsg+0xd4/0x160 [ 102.730458][ T6852] x64_sys_call+0x191e/0x2ff0 [ 102.730513][ T6852] do_syscall_64+0xd2/0x200 [ 102.730539][ T6852] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 102.730644][ T6852] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 102.730669][ T6852] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.730703][ T6852] RIP: 0033:0x7f3d251eebe9 [ 102.730719][ T6852] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 102.730825][ T6852] RSP: 002b:00007f3d23c57038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 102.730848][ T6852] RAX: ffffffffffffffda RBX: 00007f3d25415fa0 RCX: 00007f3d251eebe9 [ 102.730861][ T6852] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 102.730874][ T6852] RBP: 00007f3d23c57090 R08: 0000000000000000 R09: 0000000000000000 [ 102.730886][ T6852] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 102.730899][ T6852] R13: 00007f3d25416038 R14: 00007f3d25415fa0 R15: 00007ffc12f968a8 [ 102.730945][ T6852] [ 102.787191][ T6855] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 103.099726][ T6868] hub 6-0:1.0: USB hub found [ 103.104615][ T6868] hub 6-0:1.0: 8 ports detected [ 103.228595][ T6878] loop4: detected capacity change from 0 to 764 [ 103.261091][ T6884] loop4: detected capacity change from 0 to 512 [ 103.268375][ T6884] EXT4-fs: Ignoring removed oldalloc option [ 103.276247][ T6884] EXT4-fs error (device loop4): ext4_xattr_inode_iget:433: comm syz.4.1117: Parent and EA inode have the same ino 15 [ 103.289060][ T6884] EXT4-fs (loop4): Remounting filesystem read-only [ 103.295738][ T6884] EXT4-fs warning (device loop4): ext4_evict_inode:274: xattr delete (err -30) [ 103.304931][ T6884] EXT4-fs (loop4): 1 orphan inode deleted [ 103.310879][ T6884] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.340302][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.349487][ T6889] wireguard3: entered promiscuous mode [ 103.355187][ T6889] wireguard3: entered allmulticast mode [ 103.410763][ T6896] siw: device registration error -23 [ 103.709668][ T6911] hub 6-0:1.0: USB hub found [ 103.714454][ T6911] hub 6-0:1.0: 8 ports detected [ 103.798779][ T6919] loop0: detected capacity change from 0 to 764 [ 103.908106][ T29] kauditd_printk_skb: 493 callbacks suppressed [ 103.908122][ T29] audit: type=1326 audit(1755899783.979:5822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6924 comm="syz.0.1135" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbe9786ebe9 code=0x0 [ 103.962114][ T6937] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 103.985526][ T6941] FAULT_INJECTION: forcing a failure. [ 103.985526][ T6941] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 103.998791][ T6941] CPU: 1 UID: 0 PID: 6941 Comm: syz.1.1141 Not tainted syzkaller #0 PREEMPT(voluntary) [ 103.998820][ T6941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 103.998830][ T6941] Call Trace: [ 103.998834][ T6941] [ 103.998839][ T6941] __dump_stack+0x1d/0x30 [ 103.998853][ T6941] dump_stack_lvl+0xe8/0x140 [ 103.998875][ T6941] dump_stack+0x15/0x1b [ 103.998885][ T6941] should_fail_ex+0x265/0x280 [ 103.998897][ T6941] should_fail+0xb/0x20 [ 103.998906][ T6941] should_fail_usercopy+0x1a/0x20 [ 103.998991][ T6941] _copy_from_user+0x1c/0xb0 [ 103.999013][ T6941] ___sys_sendmsg+0xc1/0x1d0 [ 103.999033][ T6941] __x64_sys_sendmsg+0xd4/0x160 [ 103.999047][ T6941] x64_sys_call+0x191e/0x2ff0 [ 103.999127][ T6941] do_syscall_64+0xd2/0x200 [ 103.999143][ T6941] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 103.999156][ T6941] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 103.999171][ T6941] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.999194][ T6941] RIP: 0033:0x7f3d251eebe9 [ 103.999209][ T6941] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 103.999222][ T6941] RSP: 002b:00007f3d23c57038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 103.999233][ T6941] RAX: ffffffffffffffda RBX: 00007f3d25415fa0 RCX: 00007f3d251eebe9 [ 103.999242][ T6941] RDX: 0000000000040040 RSI: 00002000000000c0 RDI: 0000000000000006 [ 103.999254][ T6941] RBP: 00007f3d23c57090 R08: 0000000000000000 R09: 0000000000000000 [ 103.999313][ T6941] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 103.999320][ T6941] R13: 00007f3d25416038 R14: 00007f3d25415fa0 R15: 00007ffc12f968a8 [ 103.999331][ T6941] [ 104.210325][ T29] audit: type=1326 audit(1755899784.279:5823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6944 comm="syz.1.1143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d251eebe9 code=0x7ffc0000 [ 104.243007][ T29] audit: type=1326 audit(1755899784.279:5824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6944 comm="syz.1.1143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d251eebe9 code=0x7ffc0000 [ 104.266634][ T29] audit: type=1326 audit(1755899784.279:5825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6944 comm="syz.1.1143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3d251eebe9 code=0x7ffc0000 [ 104.290576][ T29] audit: type=1326 audit(1755899784.279:5826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6944 comm="syz.1.1143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d251eebe9 code=0x7ffc0000 [ 104.514440][ T6976] ALSA: seq fatal error: cannot create timer (-19) [ 104.745113][ T29] audit: type=1326 audit(1755899784.809:5827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6990 comm="syz.1.1160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d251eebe9 code=0x7ffc0000 [ 104.768770][ T29] audit: type=1326 audit(1755899784.809:5828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6990 comm="syz.1.1160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d251eebe9 code=0x7ffc0000 [ 104.802866][ T6993] lo speed is unknown, defaulting to 1000 [ 104.916559][ T29] audit: type=1326 audit(1755899784.859:5829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6990 comm="syz.1.1160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f3d251eebe9 code=0x7ffc0000 [ 104.940118][ T29] audit: type=1326 audit(1755899784.859:5830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6990 comm="syz.1.1160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d251eebe9 code=0x7ffc0000 [ 104.964279][ T29] audit: type=1326 audit(1755899784.859:5831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6990 comm="syz.1.1160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d251eebe9 code=0x7ffc0000 [ 105.051270][ T7007] loop1: detected capacity change from 0 to 1024 [ 105.059046][ T7007] EXT4-fs (loop1): VFS: Can't find ext4 filesystem [ 105.117446][ T7011] ALSA: seq fatal error: cannot create timer (-19) [ 105.209014][ T7028] loop1: detected capacity change from 0 to 512 [ 105.216353][ T7028] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 105.226743][ T7028] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843e02c, mo2=0002] [ 105.234849][ T7028] System zones: 1-12 [ 105.238995][ T7028] EXT4-fs (loop1): orphan cleanup on readonly fs [ 105.246298][ T7028] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1174: bg 0: block 361: padding at end of block bitmap is not set [ 105.261184][ T7028] EXT4-fs (loop1): Remounting filesystem read-only [ 105.267840][ T7028] EXT4-fs (loop1): 1 truncate cleaned up [ 105.274021][ T7028] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 105.383374][ T7032] siw: device registration error -23 [ 105.409041][ T7034] loop3: detected capacity change from 0 to 512 [ 105.419307][ T7034] EXT4-fs error (device loop3): ext4_orphan_get:1418: comm syz.3.1176: bad orphan inode 17 [ 105.429974][ T7034] ext4_test_bit(bit=16, block=4) = 1 [ 105.435340][ T7034] is_bad_inode(inode)=0 [ 105.439501][ T7034] NEXT_ORPHAN(inode)=0 [ 105.443730][ T7034] max_ino=32 [ 105.446955][ T7034] i_nlink=1 [ 105.451832][ T7034] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.480595][ T7034] lo speed is unknown, defaulting to 1000 [ 105.525635][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 105.612955][ T7046] ALSA: seq fatal error: cannot create timer (-19) [ 105.613428][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.642118][ T7052] wireguard3: entered promiscuous mode [ 105.647807][ T7052] wireguard3: entered allmulticast mode [ 105.881866][ T7076] loop0: detected capacity change from 0 to 764 [ 106.124835][ T7088] FAULT_INJECTION: forcing a failure. [ 106.124835][ T7088] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 106.138458][ T7088] CPU: 0 UID: 0 PID: 7088 Comm: syz.2.1194 Not tainted syzkaller #0 PREEMPT(voluntary) [ 106.138487][ T7088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 106.138556][ T7088] Call Trace: [ 106.138562][ T7088] [ 106.138571][ T7088] __dump_stack+0x1d/0x30 [ 106.138593][ T7088] dump_stack_lvl+0xe8/0x140 [ 106.138614][ T7088] dump_stack+0x15/0x1b [ 106.138631][ T7088] should_fail_ex+0x265/0x280 [ 106.138707][ T7088] should_fail+0xb/0x20 [ 106.138724][ T7088] should_fail_usercopy+0x1a/0x20 [ 106.138806][ T7088] _copy_from_user+0x1c/0xb0 [ 106.138878][ T7088] ip_set_mcast_msfilter+0x11c/0x2a0 [ 106.138977][ T7088] do_ip_setsockopt+0x16ca/0x2240 [ 106.139008][ T7088] ip_setsockopt+0x58/0x110 [ 106.139032][ T7088] udp_setsockopt+0x99/0xb0 [ 106.139135][ T7088] sock_common_setsockopt+0x69/0x80 [ 106.139161][ T7088] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 106.139188][ T7088] __sys_setsockopt+0x184/0x200 [ 106.139218][ T7088] __x64_sys_setsockopt+0x64/0x80 [ 106.139242][ T7088] x64_sys_call+0x20ec/0x2ff0 [ 106.139291][ T7088] do_syscall_64+0xd2/0x200 [ 106.139354][ T7088] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 106.139374][ T7088] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 106.139404][ T7088] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.139463][ T7088] RIP: 0033:0x7f99d135ebe9 [ 106.139479][ T7088] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 106.139502][ T7088] RSP: 002b:00007f99cfdbf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 106.139519][ T7088] RAX: ffffffffffffffda RBX: 00007f99d1585fa0 RCX: 00007f99d135ebe9 [ 106.139530][ T7088] RDX: 0000000000000030 RSI: 0000000000000000 RDI: 0000000000000005 [ 106.139555][ T7088] RBP: 00007f99cfdbf090 R08: 0000000000000310 R09: 0000000000000000 [ 106.139652][ T7088] R10: 0000200000000940 R11: 0000000000000246 R12: 0000000000000001 [ 106.139666][ T7088] R13: 00007f99d1586038 R14: 00007f99d1585fa0 R15: 00007ffefc651568 [ 106.139697][ T7088] [ 106.414925][ T7101] wireguard0: entered promiscuous mode [ 106.420449][ T7101] wireguard0: entered allmulticast mode [ 106.433619][ T7104] loop4: detected capacity change from 0 to 2048 [ 106.436493][ T7107] FAULT_INJECTION: forcing a failure. [ 106.436493][ T7107] name failslab, interval 1, probability 0, space 0, times 0 [ 106.452639][ T7107] CPU: 0 UID: 0 PID: 7107 Comm: syz.3.1202 Not tainted syzkaller #0 PREEMPT(voluntary) [ 106.452666][ T7107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 106.452677][ T7107] Call Trace: [ 106.452684][ T7107] [ 106.452692][ T7107] __dump_stack+0x1d/0x30 [ 106.452712][ T7107] dump_stack_lvl+0xe8/0x140 [ 106.452785][ T7107] dump_stack+0x15/0x1b [ 106.452825][ T7107] should_fail_ex+0x265/0x280 [ 106.452837][ T7107] ? __tcf_chain_get+0x91/0x280 [ 106.452854][ T7107] should_failslab+0x8c/0xb0 [ 106.452868][ T7107] __kmalloc_cache_noprof+0x4c/0x320 [ 106.452906][ T7107] __tcf_chain_get+0x91/0x280 [ 106.452997][ T7107] ? __tcf_block_find+0x11a/0x1a0 [ 106.453010][ T7107] tc_new_tfilter+0x5ac/0x10a0 [ 106.453070][ T7107] ? __rcu_read_unlock+0x4f/0x70 [ 106.453082][ T7107] ? avc_has_perm_noaudit+0x1b1/0x200 [ 106.453102][ T7107] ? ns_capable+0x7d/0xb0 [ 106.453121][ T7107] ? __pfx_tc_new_tfilter+0x10/0x10 [ 106.453132][ T7107] rtnetlink_rcv_msg+0x5fb/0x6d0 [ 106.453150][ T7107] netlink_rcv_skb+0x123/0x220 [ 106.453288][ T7107] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 106.453306][ T7107] rtnetlink_rcv+0x1c/0x30 [ 106.453319][ T7107] netlink_unicast+0x5bd/0x690 [ 106.453369][ T7107] netlink_sendmsg+0x58b/0x6b0 [ 106.453382][ T7107] ? __pfx_netlink_sendmsg+0x10/0x10 [ 106.453431][ T7107] __sock_sendmsg+0x145/0x180 [ 106.453446][ T7107] ____sys_sendmsg+0x31e/0x4e0 [ 106.453460][ T7107] ___sys_sendmsg+0x17b/0x1d0 [ 106.453500][ T7107] __x64_sys_sendmsg+0xd4/0x160 [ 106.453514][ T7107] x64_sys_call+0x191e/0x2ff0 [ 106.453537][ T7107] do_syscall_64+0xd2/0x200 [ 106.453552][ T7107] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 106.453566][ T7107] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 106.453629][ T7107] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.453643][ T7107] RIP: 0033:0x7fdd0c7debe9 [ 106.453653][ T7107] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 106.453663][ T7107] RSP: 002b:00007fdd0b247038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 106.453730][ T7107] RAX: ffffffffffffffda RBX: 00007fdd0ca05fa0 RCX: 00007fdd0c7debe9 [ 106.453737][ T7107] RDX: 0000000020004804 RSI: 0000200000006040 RDI: 0000000000000004 [ 106.453744][ T7107] RBP: 00007fdd0b247090 R08: 0000000000000000 R09: 0000000000000000 [ 106.453751][ T7107] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 106.453758][ T7107] R13: 00007fdd0ca06038 R14: 00007fdd0ca05fa0 R15: 00007ffc2cf8ebc8 [ 106.453768][ T7107] [ 106.729192][ T7109] loop2: detected capacity change from 0 to 512 [ 106.749013][ T7109] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.761710][ T7109] ext4 filesystem being mounted at /221/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.807049][ T7119] loop3: detected capacity change from 0 to 764 [ 106.818171][ T7109] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #4: comm syz.2.1203: corrupted inode contents [ 106.850498][ T7109] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #4: comm syz.2.1203: mark_inode_dirty error [ 106.867970][ T7109] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #4: comm syz.2.1203: corrupted inode contents [ 106.880297][ T7109] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #4: comm syz.2.1203: mark_inode_dirty error [ 106.891994][ T7109] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.1203: Failed to acquire dquot type 1 [ 106.904010][ T7121] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #4: comm syz.2.1203: corrupted inode contents [ 106.916076][ T7121] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #4: comm syz.2.1203: mark_inode_dirty error [ 106.947157][ T7121] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #4: comm syz.2.1203: corrupted inode contents [ 106.961837][ T7121] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #4: comm syz.2.1203: mark_inode_dirty error [ 106.973714][ T7121] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.1203: Failed to acquire dquot type 1 [ 107.004524][ T7130] lo speed is unknown, defaulting to 1000 [ 107.177105][ T7134] wireguard0: entered promiscuous mode [ 107.182693][ T7134] wireguard0: entered allmulticast mode [ 107.324008][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.347516][ T7141] loop3: detected capacity change from 0 to 2048 [ 107.357953][ T7143] __nla_validate_parse: 16 callbacks suppressed [ 107.357970][ T7143] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 107.457590][ T7151] loop3: detected capacity change from 0 to 256 [ 107.464757][ T7151] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 107.499709][ T7153] wireguard3: entered promiscuous mode [ 107.505330][ T7153] wireguard3: entered allmulticast mode [ 107.655536][ T7156] loop4: detected capacity change from 0 to 764 [ 107.727463][ T7170] loop3: detected capacity change from 0 to 2048 [ 107.735943][ T7172] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1228'. [ 107.748797][ T7173] loop4: detected capacity change from 0 to 512 [ 107.755780][ T7173] journal_path: Non-blockdev passed as './bus' [ 107.761971][ T7173] EXT4-fs: error: could not find journal device path [ 107.852460][ T7181] lo speed is unknown, defaulting to 1000 [ 108.032132][ T7187] lo speed is unknown, defaulting to 1000 [ 108.519177][ T7195] serio: Serial port ptm0 [ 108.640481][ T7203] loop1: detected capacity change from 0 to 764 [ 108.713353][ T7211] loop3: detected capacity change from 0 to 1024 [ 108.713722][ T7209] loop1: detected capacity change from 0 to 2048 [ 108.724556][ T7211] EXT4-fs: Ignoring removed orlov option [ 108.733645][ T7211] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.750089][ T7211] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1241'. [ 108.816919][ T7218] loop1: detected capacity change from 0 to 512 [ 108.825279][ T7218] EXT4-fs error (device loop1): ext4_orphan_get:1418: comm syz.1.1244: bad orphan inode 17 [ 108.835807][ T7218] ext4_test_bit(bit=16, block=4) = 1 [ 108.841111][ T7218] is_bad_inode(inode)=0 [ 108.845381][ T7218] NEXT_ORPHAN(inode)=0 [ 108.849607][ T7218] max_ino=32 [ 108.853099][ T7218] i_nlink=1 [ 108.856732][ T7218] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.884140][ T7218] lo speed is unknown, defaulting to 1000 [ 108.922487][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.941334][ T29] kauditd_printk_skb: 381 callbacks suppressed [ 108.941346][ T29] audit: type=1326 audit(1755899789.009:6208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7222 comm="syz.3.1245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd0c7debe9 code=0x7ffc0000 [ 108.978626][ T29] audit: type=1326 audit(1755899789.039:6209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7217 comm="syz.1.1244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d251eebe9 code=0x7ffc0000 [ 108.981795][ T7223] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1245'. [ 109.002591][ T29] audit: type=1326 audit(1755899789.039:6210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7217 comm="syz.1.1244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d251eebe9 code=0x7ffc0000 [ 109.034982][ T29] audit: type=1326 audit(1755899789.049:6211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7222 comm="syz.3.1245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd0c7debe9 code=0x7ffc0000 [ 109.035457][ T7223] loop3: detected capacity change from 0 to 512 [ 109.058681][ T29] audit: type=1326 audit(1755899789.049:6212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7222 comm="syz.3.1245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdd0c7debe9 code=0x7ffc0000 [ 109.088470][ T29] audit: type=1326 audit(1755899789.049:6213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7222 comm="syz.3.1245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd0c7debe9 code=0x7ffc0000 [ 109.112158][ T29] audit: type=1326 audit(1755899789.049:6214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7222 comm="syz.3.1245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd0c7debe9 code=0x7ffc0000 [ 109.136035][ T29] audit: type=1326 audit(1755899789.049:6215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7222 comm="syz.3.1245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdd0c7debe9 code=0x7ffc0000 [ 109.159892][ T29] audit: type=1326 audit(1755899789.049:6216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7222 comm="syz.3.1245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd0c7debe9 code=0x7ffc0000 [ 109.183483][ T29] audit: type=1326 audit(1755899789.049:6217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7222 comm="syz.3.1245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd0c7debe9 code=0x7ffc0000 [ 109.208246][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.219222][ T7223] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.232636][ T7223] ext4 filesystem being mounted at /260/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.247478][ T7223] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #4: comm syz.3.1245: corrupted inode contents [ 109.262472][ T7223] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #4: comm syz.3.1245: mark_inode_dirty error [ 109.276516][ T7223] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #4: comm syz.3.1245: corrupted inode contents [ 109.290660][ T7223] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #4: comm syz.3.1245: mark_inode_dirty error [ 109.321576][ T7223] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.1245: Failed to acquire dquot type 1 [ 109.358667][ T7235] loop1: detected capacity change from 0 to 512 [ 109.368252][ T7235] journal_path: Non-blockdev passed as './bus' [ 109.374567][ T7235] EXT4-fs: error: could not find journal device path [ 109.375570][ T7237] lo speed is unknown, defaulting to 1000 [ 109.505241][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.540758][ T7253] loop3: detected capacity change from 0 to 2048 [ 109.623938][ T7256] lo speed is unknown, defaulting to 1000 [ 110.058138][ T7261] serio: Serial port ptm0 [ 110.173261][ T7273] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1261'. [ 110.397799][ T7284] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 110.417125][ T7288] loop0: detected capacity change from 0 to 2048 [ 110.470980][ T7293] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1267'. [ 110.480372][ T7293] bond0: Unable to set down delay as MII monitoring is disabled [ 110.557516][ T7303] loop0: detected capacity change from 0 to 1024 [ 110.564531][ T7303] EXT4-fs: Ignoring removed orlov option [ 110.583589][ T7304] lo speed is unknown, defaulting to 1000 [ 110.590671][ T7303] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.617617][ T7303] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1272'. [ 110.817193][ T7313] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1273'. [ 110.887996][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.919705][ T7321] wireguard0: entered promiscuous mode [ 110.925322][ T7321] wireguard0: entered allmulticast mode [ 111.429022][ T7337] atomic_op ffff888118e45928 conn xmit_atomic 0000000000000000 [ 111.502151][ T7351] loop1: detected capacity change from 0 to 2048 [ 111.540371][ T7356] loop4: detected capacity change from 0 to 1024 [ 111.547508][ T7356] EXT4-fs: Ignoring removed orlov option [ 111.555163][ T7356] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.584760][ T7356] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1291'. [ 111.600473][ T7360] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1292'. [ 111.609862][ T1034] IPVS: starting estimator thread 0... [ 111.619402][ T7360] loop1: detected capacity change from 0 to 512 [ 111.637190][ T7360] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.637312][ T7363] 9pnet_fd: Insufficient options for proto=fd [ 111.650240][ T7360] ext4 filesystem being mounted at /291/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 111.680656][ T7360] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #4: comm syz.1.1292: corrupted inode contents [ 111.693723][ T7360] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #4: comm syz.1.1292: mark_inode_dirty error [ 111.709047][ T7361] IPVS: using max 2880 ests per chain, 144000 per kthread [ 111.718633][ T7360] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #4: comm syz.1.1292: corrupted inode contents [ 111.780340][ T7360] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #4: comm syz.1.1292: mark_inode_dirty error [ 111.827053][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.837306][ T7360] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.1292: Failed to acquire dquot type 1 [ 111.855475][ T7372] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #4: comm syz.1.1292: corrupted inode contents [ 111.867515][ T7372] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #4: comm syz.1.1292: mark_inode_dirty error [ 111.879679][ T7372] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #4: comm syz.1.1292: corrupted inode contents [ 111.892520][ T7372] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #4: comm syz.1.1292: mark_inode_dirty error [ 111.904484][ T7372] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.1292: Failed to acquire dquot type 1 [ 111.923238][ T7375] loop0: detected capacity change from 0 to 512 [ 111.930463][ T7375] journal_path: Non-blockdev passed as './bus' [ 111.936811][ T7375] EXT4-fs: error: could not find journal device path [ 112.052027][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.316754][ T7399] lo speed is unknown, defaulting to 1000 [ 112.599229][ T7401] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1304'. [ 112.632005][ T7408] loop2: detected capacity change from 0 to 512 [ 112.643031][ T7408] EXT4-fs: Ignoring removed oldalloc option [ 112.645630][ T7391] netlink: 'syz.4.1304': attribute type 1 has an invalid length. [ 112.652060][ T7408] EXT4-fs error (device loop2): ext4_xattr_inode_iget:433: comm syz.2.1307: Parent and EA inode have the same ino 15 [ 112.657100][ T7391] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1304'. [ 112.670471][ T7408] EXT4-fs (loop2): Remounting filesystem read-only [ 112.695347][ T7408] EXT4-fs warning (device loop2): ext4_evict_inode:274: xattr delete (err -30) [ 112.708244][ T7408] EXT4-fs (loop2): 1 orphan inode deleted [ 112.725563][ T7414] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1308'. [ 112.735754][ T7408] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.770033][ T7414] loop0: detected capacity change from 0 to 512 [ 112.815491][ T7408] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1307'. [ 112.824635][ T7408] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1307'. [ 112.840036][ T7414] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.858877][ T7414] ext4 filesystem being mounted at /243/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 112.905514][ T7419] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 112.914465][ T7410] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 112.922076][ T7414] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #4: comm syz.0.1308: corrupted inode contents [ 112.936118][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.958194][ T7414] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #4: comm syz.0.1308: mark_inode_dirty error [ 112.970278][ T7414] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #4: comm syz.0.1308: corrupted inode contents [ 112.982466][ T7414] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #4: comm syz.0.1308: mark_inode_dirty error [ 112.995263][ T7414] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.1308: Failed to acquire dquot type 1 [ 113.142788][ T7441] loop4: detected capacity change from 0 to 2048 [ 113.328895][ T7458] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 113.362205][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.373857][ T7449] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1319'. [ 113.396923][ T7446] netlink: 'syz.1.1319': attribute type 1 has an invalid length. [ 113.404838][ T7446] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1319'. [ 113.539993][ T7481] wireguard0: entered promiscuous mode [ 113.546032][ T7481] wireguard0: entered allmulticast mode [ 113.576063][ T7485] loop1: detected capacity change from 0 to 512 [ 113.584403][ T7485] EXT4-fs error (device loop1): ext4_orphan_get:1418: comm syz.1.1327: bad orphan inode 17 [ 113.594766][ T7485] ext4_test_bit(bit=16, block=4) = 1 [ 113.600086][ T7485] is_bad_inode(inode)=0 [ 113.604268][ T7485] NEXT_ORPHAN(inode)=0 [ 113.608515][ T7485] max_ino=32 [ 113.611705][ T7485] i_nlink=1 [ 113.615236][ T7485] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.640772][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.646681][ T7488] loop2: detected capacity change from 0 to 1024 [ 113.657497][ T7488] EXT4-fs: Ignoring removed orlov option [ 113.665607][ T7488] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.688323][ T7488] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1331'. [ 113.751744][ T7493] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1333'. [ 113.968116][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.069137][ T7503] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 114.290706][ T7521] netlink: 'syz.0.1339': attribute type 1 has an invalid length. [ 114.391443][ T7538] siw: device registration error -23 [ 114.694480][ T7547] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 114.798503][ T29] kauditd_printk_skb: 374 callbacks suppressed [ 114.798517][ T29] audit: type=1326 audit(1755899794.869:6583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7558 comm="syz.0.1354" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbe9786ebe9 code=0x0 [ 115.199351][ T7574] wireguard3: entered promiscuous mode [ 115.204988][ T7574] wireguard3: entered allmulticast mode [ 115.315960][ T7578] netlink: 'syz.4.1359': attribute type 1 has an invalid length. [ 115.448243][ T7591] loop4: detected capacity change from 0 to 1024 [ 115.455408][ T7591] EXT4-fs: Ignoring removed orlov option [ 115.463469][ T7591] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.705702][ T7610] siw: device registration error -23 [ 115.790168][ T29] audit: type=1326 audit(1755899795.859:6584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7611 comm="syz.1.1369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d251eebe9 code=0x7ffc0000 [ 115.814408][ T29] audit: type=1326 audit(1755899795.859:6585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7611 comm="syz.1.1369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d251eebe9 code=0x7ffc0000 [ 115.837996][ T29] audit: type=1326 audit(1755899795.859:6586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7611 comm="syz.1.1369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f3d251eebe9 code=0x7ffc0000 [ 115.861596][ T29] audit: type=1326 audit(1755899795.859:6587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7611 comm="syz.1.1369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d251eebe9 code=0x7ffc0000 [ 115.885285][ T29] audit: type=1326 audit(1755899795.859:6588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7611 comm="syz.1.1369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d251eebe9 code=0x7ffc0000 [ 115.909082][ T29] audit: type=1326 audit(1755899795.859:6589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7611 comm="syz.1.1369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3d251eebe9 code=0x7ffc0000 [ 115.933432][ T29] audit: type=1326 audit(1755899795.859:6590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7611 comm="syz.1.1369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d251eebe9 code=0x7ffc0000 [ 115.957009][ T29] audit: type=1326 audit(1755899795.859:6591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7611 comm="syz.1.1369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d251eebe9 code=0x7ffc0000 [ 115.982261][ T29] audit: type=1326 audit(1755899795.929:6592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7611 comm="syz.1.1369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3d251eebe9 code=0x7ffc0000 [ 116.007944][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.080636][ T7621] wireguard0: entered promiscuous mode [ 116.086221][ T7621] wireguard0: entered allmulticast mode [ 116.155325][ T7624] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 116.789153][ T7637] loop4: detected capacity change from 0 to 512 [ 116.805750][ T7637] EXT4-fs error (device loop4): ext4_orphan_get:1418: comm syz.4.1379: bad orphan inode 17 [ 116.826075][ T7637] ext4_test_bit(bit=16, block=4) = 1 [ 116.831460][ T7637] is_bad_inode(inode)=0 [ 116.835758][ T7637] NEXT_ORPHAN(inode)=0 [ 116.839839][ T7637] max_ino=32 [ 116.843115][ T7637] i_nlink=1 [ 116.873499][ T7637] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 116.924411][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.991857][ T7642] loop4: detected capacity change from 0 to 512 [ 117.016768][ T7642] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.029694][ T7642] ext4 filesystem being mounted at /278/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 117.045864][ T7642] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #4: comm syz.4.1381: corrupted inode contents [ 117.058986][ T7642] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #4: comm syz.4.1381: mark_inode_dirty error [ 117.093515][ T7642] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #4: comm syz.4.1381: corrupted inode contents [ 117.115376][ T7648] loop1: detected capacity change from 0 to 764 [ 117.123564][ T7644] atomic_op ffff8881244cdd28 conn xmit_atomic 0000000000000000 [ 117.161225][ T7642] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #4: comm syz.4.1381: mark_inode_dirty error [ 117.196087][ T7655] loop1: detected capacity change from 0 to 512 [ 117.211390][ T7642] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.1381: Failed to acquire dquot type 1 [ 117.235136][ T7655] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.250479][ T7651] ALSA: seq fatal error: cannot create timer (-19) [ 117.274944][ T7655] ext4 filesystem being mounted at /308/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 117.302136][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.313104][ T7655] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #4: comm syz.1.1385: corrupted inode contents [ 117.396225][ T7655] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #4: comm syz.1.1385: mark_inode_dirty error [ 117.414861][ T7655] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #4: comm syz.1.1385: corrupted inode contents [ 117.427093][ T7655] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #4: comm syz.1.1385: mark_inode_dirty error [ 117.438748][ T7655] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.1385: Failed to acquire dquot type 1 [ 117.450694][ T7668] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #4: comm syz.1.1385: corrupted inode contents [ 117.462707][ T7668] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #4: comm syz.1.1385: mark_inode_dirty error [ 117.480496][ T7668] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #4: comm syz.1.1385: corrupted inode contents [ 117.492793][ T7668] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #4: comm syz.1.1385: mark_inode_dirty error [ 117.505725][ T7668] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.1385: Failed to acquire dquot type 1 [ 117.542439][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.558873][ T7676] loop4: detected capacity change from 0 to 512 [ 117.577480][ T7676] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.593426][ T7676] ext4 filesystem being mounted at /281/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 117.609660][ T7676] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #4: comm syz.4.1390: corrupted inode contents [ 117.636727][ T7676] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #4: comm syz.4.1390: mark_inode_dirty error [ 117.661718][ T7676] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #4: comm syz.4.1390: corrupted inode contents [ 117.688616][ T7676] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #4: comm syz.4.1390: mark_inode_dirty error [ 117.700472][ T7676] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.1390: Failed to acquire dquot type 1 [ 117.757500][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.911445][ T7709] wireguard0: entered promiscuous mode [ 117.917103][ T7709] wireguard0: entered allmulticast mode [ 118.026260][ T7711] lo speed is unknown, defaulting to 1000 [ 118.492177][ T7725] netlink: 'syz.0.1410': attribute type 1 has an invalid length. [ 118.500292][ T7725] __nla_validate_parse: 8 callbacks suppressed [ 118.500302][ T7725] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1410'. [ 118.722852][ T7742] wireguard3: entered promiscuous mode [ 118.728447][ T7742] wireguard3: entered allmulticast mode [ 118.861299][ T7750] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 119.301037][ T7755] loop2: detected capacity change from 0 to 512 [ 119.308359][ T7755] journal_path: Non-blockdev passed as './bus' [ 119.314830][ T7755] EXT4-fs: error: could not find journal device path [ 119.506332][ T7757] loop4: detected capacity change from 0 to 1024 [ 119.513633][ T7757] EXT4-fs: Ignoring removed orlov option [ 119.526965][ T7757] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1418'. [ 119.584643][ T7760] loop3: detected capacity change from 0 to 512 [ 119.601373][ T7760] EXT4-fs error (device loop3): ext4_orphan_get:1418: comm syz.3.1419: bad orphan inode 17 [ 119.624979][ T7760] ext4_test_bit(bit=16, block=4) = 1 [ 119.630617][ T7760] is_bad_inode(inode)=0 [ 119.634827][ T7760] NEXT_ORPHAN(inode)=0 [ 119.639130][ T7760] max_ino=32 [ 119.642334][ T7760] i_nlink=1 [ 119.943783][ T7769] netlink: 'syz.1.1421': attribute type 1 has an invalid length. [ 119.951582][ T7769] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1421'. [ 119.995935][ T29] kauditd_printk_skb: 408 callbacks suppressed [ 119.995950][ T29] audit: type=1326 audit(1755899800.069:6992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7779 comm="syz.4.1425" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fac8c27ebe9 code=0x0 [ 120.047229][ T7787] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 120.145926][ T29] audit: type=1326 audit(1755899800.219:6993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7790 comm="syz.2.1429" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f99d135ebe9 code=0x0 [ 120.386619][ T7796] lo speed is unknown, defaulting to 1000 [ 120.596436][ T7802] loop0: detected capacity change from 0 to 2048 [ 120.684516][ T29] audit: type=1326 audit(1755899800.749:6994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7803 comm="syz.0.1432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe9786ebe9 code=0x7ffc0000 [ 120.709232][ T29] audit: type=1326 audit(1755899800.749:6995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7803 comm="syz.0.1432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe9786ebe9 code=0x7ffc0000 [ 120.732970][ T29] audit: type=1326 audit(1755899800.759:6996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7803 comm="syz.0.1432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbe9786ebe9 code=0x7ffc0000 [ 120.756773][ T29] audit: type=1326 audit(1755899800.759:6997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7803 comm="syz.0.1432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe9786ebe9 code=0x7ffc0000 [ 120.780377][ T29] audit: type=1326 audit(1755899800.759:6998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7803 comm="syz.0.1432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fbe9786ebe9 code=0x7ffc0000 [ 120.803856][ T29] audit: type=1326 audit(1755899800.759:6999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7803 comm="syz.0.1432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe9786ebe9 code=0x7ffc0000 [ 120.827536][ T29] audit: type=1326 audit(1755899800.759:7000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7803 comm="syz.0.1432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbe9786ebe9 code=0x7ffc0000 [ 120.835566][ T7805] loop0: detected capacity change from 0 to 512 [ 120.850973][ T29] audit: type=1326 audit(1755899800.759:7001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7803 comm="syz.0.1432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe9786ebe9 code=0x7ffc0000 [ 120.882219][ T7805] EXT4-fs error (device loop0): ext4_orphan_get:1418: comm syz.0.1432: bad orphan inode 17 [ 120.922524][ T7805] ext4_test_bit(bit=16, block=4) = 1 [ 120.928171][ T7805] is_bad_inode(inode)=0 [ 120.932404][ T7805] NEXT_ORPHAN(inode)=0 [ 120.936525][ T7805] max_ino=32 [ 120.939751][ T7805] i_nlink=1 [ 120.972231][ T7811] loop3: detected capacity change from 0 to 1024 [ 120.999595][ T7813] wireguard1: entered promiscuous mode [ 121.005206][ T7813] wireguard1: entered allmulticast mode [ 121.025040][ T7811] EXT4-fs: Ignoring removed orlov option [ 121.054390][ T7811] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1434'. [ 121.236005][ T7827] wireguard0: entered promiscuous mode [ 121.241595][ T7827] wireguard0: entered allmulticast mode [ 121.285316][ T7821] serio: Serial port ptm0 [ 121.358566][ T7841] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 121.473381][ T7844] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 121.955900][ T7846] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1446'. [ 121.972591][ T7846] loop4: detected capacity change from 0 to 512 [ 121.988474][ T7846] ext4 filesystem being mounted at /296/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 122.016041][ T7846] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #4: comm syz.4.1446: corrupted inode contents [ 122.028805][ T7846] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #4: comm syz.4.1446: mark_inode_dirty error [ 122.041512][ T7846] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #4: comm syz.4.1446: corrupted inode contents [ 122.055616][ T7846] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #4: comm syz.4.1446: mark_inode_dirty error [ 122.069714][ T7846] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.1446: Failed to acquire dquot type 1 [ 122.086476][ T7846] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #4: comm syz.4.1446: corrupted inode contents [ 122.100784][ T7846] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #4: comm syz.4.1446: mark_inode_dirty error [ 122.113980][ T7846] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #4: comm syz.4.1446: corrupted inode contents [ 122.126438][ T7846] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #4: comm syz.4.1446: mark_inode_dirty error [ 122.138173][ T7846] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.1446: Failed to acquire dquot type 1 [ 122.326507][ T7874] lo speed is unknown, defaulting to 1000 [ 122.336806][ T7870] ALSA: seq fatal error: cannot create timer (-19) [ 122.380610][ T7868] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1451'. [ 122.409056][ T7887] wireguard3: entered promiscuous mode [ 122.414554][ T7887] wireguard3: entered allmulticast mode [ 122.446641][ T7863] netlink: 'syz.4.1451': attribute type 1 has an invalid length. [ 122.454617][ T7863] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1451'. [ 122.543273][ T7890] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 122.600387][ T7904] loop3: detected capacity change from 0 to 1024 [ 122.612864][ T7904] EXT4-fs: Ignoring removed orlov option [ 122.624319][ T7904] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1462'. [ 122.680599][ T7911] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1464'. [ 122.740258][ T7915] loop4: detected capacity change from 0 to 2048 [ 122.828505][ T7925] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1470'. [ 122.845122][ T7925] loop3: detected capacity change from 0 to 512 [ 122.867014][ T7925] ext4 filesystem being mounted at /300/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 122.881612][ T7925] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #4: comm syz.3.1470: corrupted inode contents [ 122.895692][ T7925] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #4: comm syz.3.1470: mark_inode_dirty error [ 122.910784][ T7937] loop4: detected capacity change from 0 to 512 [ 122.929224][ T7939] wireguard0: entered promiscuous mode [ 122.929471][ T7925] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #4: comm syz.3.1470: corrupted inode contents [ 122.934890][ T7939] wireguard0: entered allmulticast mode [ 122.953588][ T7937] EXT4-fs error (device loop4): ext4_orphan_get:1418: comm syz.4.1475: bad orphan inode 17 [ 122.965252][ T7925] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #4: comm syz.3.1470: mark_inode_dirty error [ 122.976775][ T7937] ext4_test_bit(bit=16, block=4) = 1 [ 122.982159][ T7937] is_bad_inode(inode)=0 [ 122.984222][ T7925] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.1470: Failed to acquire dquot type 1 [ 122.986405][ T7937] NEXT_ORPHAN(inode)=0 [ 122.986416][ T7937] max_ino=32 [ 122.986423][ T7937] i_nlink=1 [ 123.009677][ T7944] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #4: comm syz.3.1470: corrupted inode contents [ 123.023857][ T7944] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #4: comm syz.3.1470: mark_inode_dirty error [ 123.052771][ T7944] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #4: comm syz.3.1470: corrupted inode contents [ 123.055355][ T7930] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 123.065499][ T7944] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #4: comm syz.3.1470: mark_inode_dirty error [ 123.113178][ T7944] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.1470: Failed to acquire dquot type 1 [ 123.144053][ T7952] wireguard1: entered promiscuous mode [ 123.149598][ T7952] wireguard1: entered allmulticast mode [ 123.155453][ T7956] loop1: detected capacity change from 0 to 2048 [ 123.188322][ T7962] loop0: detected capacity change from 0 to 1024 [ 123.195902][ T7962] EXT4-fs: Ignoring removed orlov option [ 123.309652][ T7978] ALSA: seq fatal error: cannot create timer (-19) [ 123.327177][ T7984] lo speed is unknown, defaulting to 1000 [ 123.385539][ T7987] loop4: detected capacity change from 0 to 2048 [ 123.418629][ T7991] loop0: detected capacity change from 0 to 1024 [ 123.425431][ T7991] EXT4-fs: Ignoring removed orlov option [ 123.549151][ T8006] wireguard2: entered promiscuous mode [ 123.554773][ T8006] wireguard2: entered allmulticast mode [ 123.646354][ T8010] __nla_validate_parse: 2 callbacks suppressed [ 123.646369][ T8010] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1499'. [ 123.975683][ T8021] loop2: detected capacity change from 0 to 1024 [ 123.982446][ T8021] EXT4-fs: Ignoring removed orlov option [ 123.996096][ T8021] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1503'. [ 124.115918][ T8024] loop3: detected capacity change from 0 to 2048 [ 124.223505][ T8036] loop1: detected capacity change from 0 to 1024 [ 124.232798][ T8036] EXT4-fs: Ignoring removed orlov option [ 124.256106][ T8038] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1511'. [ 124.270903][ T8036] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1510'. [ 124.311150][ T8045] loop3: detected capacity change from 0 to 1024 [ 124.318124][ T8045] EXT4-fs: Ignoring removed orlov option [ 124.335060][ T8045] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1513'. [ 124.411228][ T8052] loop2: detected capacity change from 0 to 512 [ 124.419672][ T8052] journal_path: Non-blockdev passed as './bus' [ 124.425953][ T8052] EXT4-fs: error: could not find journal device path [ 124.564922][ T8051] serio: Serial port ptm0 [ 124.726357][ T8061] loop1: detected capacity change from 0 to 512 [ 124.735133][ T8061] EXT4-fs error (device loop1): ext4_orphan_get:1418: comm syz.1.1518: bad orphan inode 17 [ 124.746218][ T8061] ext4_test_bit(bit=16, block=4) = 1 [ 124.751539][ T8061] is_bad_inode(inode)=0 [ 124.755924][ T8061] NEXT_ORPHAN(inode)=0 [ 124.760031][ T8061] max_ino=32 [ 124.763239][ T8061] i_nlink=1 [ 124.795525][ T8065] wireguard0: entered promiscuous mode [ 124.801053][ T8065] wireguard0: entered allmulticast mode [ 124.822054][ T8070] siw: device registration error -23 [ 124.859692][ T8073] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1522'. [ 124.886031][ T8077] wireguard3: entered promiscuous mode [ 124.891541][ T8077] wireguard3: entered allmulticast mode [ 124.931312][ T8082] loop1: detected capacity change from 0 to 2048 [ 125.025176][ T8083] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1524'. [ 125.036808][ T8083] netlink: 'syz.3.1524': attribute type 1 has an invalid length. [ 125.044853][ T8083] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1524'. [ 125.131694][ T8093] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1527'. [ 125.140823][ T8093] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1527'. [ 125.181285][ T29] kauditd_printk_skb: 467 callbacks suppressed [ 125.181300][ T29] audit: type=1326 audit(1755899805.249:7459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8097 comm="syz.3.1529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd0c7debe9 code=0x7ffc0000 [ 125.220495][ T8098] loop3: detected capacity change from 0 to 512 [ 125.228179][ T29] audit: type=1326 audit(1755899805.249:7460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8097 comm="syz.3.1529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd0c7debe9 code=0x7ffc0000 [ 125.233843][ T8100] loop2: detected capacity change from 0 to 1024 [ 125.251847][ T29] audit: type=1326 audit(1755899805.259:7461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8097 comm="syz.3.1529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdd0c7debe9 code=0x7ffc0000 [ 125.251880][ T29] audit: type=1326 audit(1755899805.259:7462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8097 comm="syz.3.1529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd0c7debe9 code=0x7ffc0000 [ 125.251916][ T29] audit: type=1326 audit(1755899805.259:7463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8097 comm="syz.3.1529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fdd0c7debe9 code=0x7ffc0000 [ 125.259595][ T8100] EXT4-fs: Ignoring removed orlov option [ 125.282160][ T29] audit: type=1326 audit(1755899805.259:7464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8097 comm="syz.3.1529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd0c7debe9 code=0x7ffc0000 [ 125.311185][ T8098] EXT4-fs error (device loop3): ext4_orphan_get:1418: comm syz.3.1529: bad orphan inode 17 [ 125.329988][ T29] audit: type=1326 audit(1755899805.259:7465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8097 comm="syz.3.1529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdd0c7debe9 code=0x7ffc0000 [ 125.330021][ T29] audit: type=1326 audit(1755899805.259:7466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8097 comm="syz.3.1529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd0c7debe9 code=0x7ffc0000 [ 125.336303][ T8098] ext4_test_bit(bit=16, block=4) = 1 [ 125.359534][ T29] audit: type=1326 audit(1755899805.259:7467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8097 comm="syz.3.1529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fdd0c7debe9 code=0x7ffc0000 [ 125.369977][ T8098] is_bad_inode(inode)=0 [ 125.393444][ T29] audit: type=1326 audit(1755899805.259:7468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8097 comm="syz.3.1529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd0c7debe9 code=0x7ffc0000 [ 125.473955][ T8098] NEXT_ORPHAN(inode)=0 [ 125.478329][ T8098] max_ino=32 [ 125.481609][ T8098] i_nlink=1 [ 125.718053][ T8109] serio: Serial port ptm0 [ 125.745613][ T8115] ALSA: seq fatal error: cannot create timer (-19) [ 125.790061][ T8123] loop2: detected capacity change from 0 to 2048 [ 126.481790][ T8146] loop0: detected capacity change from 0 to 1024 [ 126.489310][ T8146] EXT4-fs: Ignoring removed orlov option [ 126.561835][ T8151] ALSA: seq fatal error: cannot create timer (-19) [ 126.693507][ T8162] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 126.729388][ T8164] loop3: detected capacity change from 0 to 512 [ 126.739802][ T8164] EXT4-fs error (device loop3): ext4_orphan_get:1418: comm syz.3.1550: bad orphan inode 17 [ 126.751571][ T8164] ext4_test_bit(bit=16, block=4) = 1 [ 126.756941][ T8164] is_bad_inode(inode)=0 [ 126.761112][ T8164] NEXT_ORPHAN(inode)=0 [ 126.765381][ T8164] max_ino=32 [ 126.768576][ T8164] i_nlink=1 [ 126.873599][ T8183] loop2: detected capacity change from 0 to 1024 [ 126.880498][ T8183] EXT4-fs: Ignoring removed orlov option [ 126.966765][ T8177] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 126.998884][ T8194] loop1: detected capacity change from 0 to 1024 [ 127.005722][ T8194] EXT4-fs: Ignoring removed orlov option [ 127.016183][ T8194] EXT4-fs mount: 37 callbacks suppressed [ 127.016198][ T8194] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.064456][ T8196] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 127.276613][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.428432][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.570634][ T8210] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 128.024461][ T8227] ALSA: seq fatal error: cannot create timer (-19) [ 128.093637][ T8237] FAULT_INJECTION: forcing a failure. [ 128.093637][ T8237] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 128.106883][ T8237] CPU: 1 UID: 0 PID: 8237 Comm: syz.3.1572 Not tainted syzkaller #0 PREEMPT(voluntary) [ 128.107024][ T8237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 128.107036][ T8237] Call Trace: [ 128.107043][ T8237] [ 128.107052][ T8237] __dump_stack+0x1d/0x30 [ 128.107069][ T8237] dump_stack_lvl+0xe8/0x140 [ 128.107085][ T8237] dump_stack+0x15/0x1b [ 128.107220][ T8237] should_fail_ex+0x265/0x280 [ 128.107239][ T8237] should_fail+0xb/0x20 [ 128.107257][ T8237] should_fail_usercopy+0x1a/0x20 [ 128.107404][ T8237] strncpy_from_user+0x25/0x230 [ 128.107430][ T8237] ? kmem_cache_alloc_noprof+0x186/0x310 [ 128.107457][ T8237] ? getname_flags+0x80/0x3b0 [ 128.107523][ T8237] getname_flags+0xae/0x3b0 [ 128.107547][ T8237] do_sys_openat2+0x60/0x110 [ 128.107575][ T8237] __x64_sys_openat+0xf2/0x120 [ 128.107680][ T8237] x64_sys_call+0x2e9c/0x2ff0 [ 128.107698][ T8237] do_syscall_64+0xd2/0x200 [ 128.107726][ T8237] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 128.107786][ T8237] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 128.107871][ T8237] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.107893][ T8237] RIP: 0033:0x7fdd0c7debe9 [ 128.107908][ T8237] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 128.107923][ T8237] RSP: 002b:00007fdd0b247038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 128.107939][ T8237] RAX: ffffffffffffffda RBX: 00007fdd0ca05fa0 RCX: 00007fdd0c7debe9 [ 128.107950][ T8237] RDX: 0000000000000000 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 128.107995][ T8237] RBP: 00007fdd0b247090 R08: 0000000000000000 R09: 0000000000000000 [ 128.108009][ T8237] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 128.108020][ T8237] R13: 00007fdd0ca06038 R14: 00007fdd0ca05fa0 R15: 00007ffc2cf8ebc8 [ 128.108036][ T8237] [ 128.301467][ T8241] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 128.338457][ T8243] loop4: detected capacity change from 0 to 512 [ 128.377281][ T8243] journal_path: Non-blockdev passed as './bus' [ 128.383615][ T8243] EXT4-fs: error: could not find journal device path [ 128.423789][ T8248] loop4: detected capacity change from 0 to 2048 [ 128.470328][ T8260] loop2: detected capacity change from 0 to 1024 [ 128.477511][ T8260] EXT4-fs: Ignoring removed orlov option [ 128.486522][ T8260] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.507273][ T8263] loop4: detected capacity change from 0 to 512 [ 128.522443][ T8263] EXT4-fs error (device loop4): ext4_orphan_get:1418: comm syz.4.1582: bad orphan inode 17 [ 128.532768][ T8263] ext4_test_bit(bit=16, block=4) = 1 [ 128.538121][ T8263] is_bad_inode(inode)=0 [ 128.542365][ T8263] NEXT_ORPHAN(inode)=0 [ 128.546565][ T8263] max_ino=32 [ 128.549762][ T8263] i_nlink=1 [ 128.553604][ T8263] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 128.578922][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.658344][ T8276] loop4: detected capacity change from 0 to 512 [ 128.672675][ T8276] EXT4-fs error (device loop4): ext4_orphan_get:1418: comm syz.4.1583: bad orphan inode 17 [ 128.683117][ T8276] ext4_test_bit(bit=16, block=4) = 1 [ 128.688553][ T8276] is_bad_inode(inode)=0 [ 128.692884][ T8276] NEXT_ORPHAN(inode)=0 [ 128.697275][ T8276] max_ino=32 [ 128.700559][ T8276] i_nlink=1 [ 128.705426][ T8276] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 128.742229][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.752800][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.797953][ T8286] __nla_validate_parse: 11 callbacks suppressed [ 128.797964][ T8286] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1589'. [ 128.873587][ T8294] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 128.878075][ T8293] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1592'. [ 128.949356][ T8300] loop0: detected capacity change from 0 to 512 [ 128.958542][ T8300] EXT4-fs error (device loop0): ext4_orphan_get:1418: comm syz.0.1594: bad orphan inode 17 [ 128.969394][ T8300] ext4_test_bit(bit=16, block=4) = 1 [ 128.974792][ T8300] is_bad_inode(inode)=0 [ 128.979015][ T8300] NEXT_ORPHAN(inode)=0 [ 128.983169][ T8300] max_ino=32 [ 128.986411][ T8300] i_nlink=1 [ 128.990589][ T8300] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 129.029570][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.050312][ T8306] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1595'. [ 129.054869][ T8298] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 129.239011][ T8310] serio: Serial port ptm0 [ 129.253488][ T8314] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1597'. [ 129.264454][ T8314] netlink: 'syz.0.1597': attribute type 1 has an invalid length. [ 129.272744][ T8314] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1597'. [ 129.333244][ T8325] loop1: detected capacity change from 0 to 1024 [ 129.346399][ T8325] EXT4-fs: Ignoring removed orlov option [ 129.354835][ T8325] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.378502][ T8325] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1599'. [ 129.568976][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.618503][ T8337] lo speed is unknown, defaulting to 1000 [ 129.715789][ T8336] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 129.752870][ T8347] loop1: detected capacity change from 0 to 512 [ 129.763535][ T8347] EXT4-fs error (device loop1): ext4_orphan_get:1418: comm syz.1.1605: bad orphan inode 17 [ 129.774301][ T8347] ext4_test_bit(bit=16, block=4) = 1 [ 129.779771][ T8347] is_bad_inode(inode)=0 [ 129.784023][ T8347] NEXT_ORPHAN(inode)=0 [ 129.788557][ T8347] max_ino=32 [ 129.791946][ T8347] i_nlink=1 [ 129.794367][ T8350] loop4: detected capacity change from 0 to 1024 [ 129.797172][ T8347] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 129.802337][ T8350] EXT4-fs: Ignoring removed orlov option [ 129.822705][ T8350] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.836183][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.857314][ T8350] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1606'. [ 129.861625][ T8353] loop1: detected capacity change from 0 to 2048 [ 130.135041][ T8369] loop3: detected capacity change from 0 to 1024 [ 130.141980][ T8369] EXT4-fs: Ignoring removed orlov option [ 130.162773][ T8369] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.181596][ T8369] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1614'. [ 130.192880][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.283026][ T8374] lo speed is unknown, defaulting to 1000 [ 130.514156][ T29] kauditd_printk_skb: 559 callbacks suppressed [ 130.514223][ T29] audit: type=1326 audit(1755899810.579:8028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8371 comm="syz.4.1615" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fac8c27ebe9 code=0x0 [ 130.567769][ T8377] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 130.754371][ T29] audit: type=1326 audit(1755899810.819:8029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8380 comm="syz.0.1617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe9786ebe9 code=0x7ffc0000 [ 130.778458][ T29] audit: type=1326 audit(1755899810.819:8030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8380 comm="syz.0.1617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe9786ebe9 code=0x7ffc0000 [ 130.802479][ T29] audit: type=1326 audit(1755899810.819:8031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8380 comm="syz.0.1617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbe9786ebe9 code=0x7ffc0000 [ 130.826285][ T29] audit: type=1326 audit(1755899810.819:8032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8380 comm="syz.0.1617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe9786ebe9 code=0x7ffc0000 [ 130.826807][ T8381] loop0: detected capacity change from 0 to 512 [ 130.850638][ T29] audit: type=1326 audit(1755899810.819:8033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8380 comm="syz.0.1617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fbe9786ebe9 code=0x7ffc0000 [ 130.880761][ T29] audit: type=1326 audit(1755899810.819:8034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8380 comm="syz.0.1617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe9786ebe9 code=0x7ffc0000 [ 130.894878][ T8381] EXT4-fs error (device loop0): ext4_orphan_get:1418: comm syz.0.1617: bad orphan inode 17 [ 130.905343][ T29] audit: type=1326 audit(1755899810.819:8035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8380 comm="syz.0.1617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbe9786ebe9 code=0x7ffc0000 [ 130.905376][ T29] audit: type=1326 audit(1755899810.819:8036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8380 comm="syz.0.1617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe9786ebe9 code=0x7ffc0000 [ 130.916026][ T8381] ext4_test_bit(bit=16, block=4) = 1 [ 130.939329][ T29] audit: type=1326 audit(1755899810.819:8037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8380 comm="syz.0.1617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fbe9786ebe9 code=0x7ffc0000 [ 130.963261][ T8381] is_bad_inode(inode)=0 [ 130.963273][ T8381] NEXT_ORPHAN(inode)=0 [ 131.000542][ T8381] max_ino=32 [ 131.003731][ T8381] i_nlink=1 [ 131.027306][ T8381] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 131.065346][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.091638][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.115403][ T8392] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1621'. [ 131.219581][ T8405] ALSA: seq fatal error: cannot create timer (-19) [ 131.221328][ T8413] FAULT_INJECTION: forcing a failure. [ 131.221328][ T8413] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 131.239440][ T8413] CPU: 0 UID: 0 PID: 8413 Comm: syz.0.1628 Not tainted syzkaller #0 PREEMPT(voluntary) [ 131.239542][ T8413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 131.239553][ T8413] Call Trace: [ 131.239560][ T8413] [ 131.239566][ T8413] __dump_stack+0x1d/0x30 [ 131.239585][ T8413] dump_stack_lvl+0xe8/0x140 [ 131.239653][ T8413] dump_stack+0x15/0x1b [ 131.239667][ T8413] should_fail_ex+0x265/0x280 [ 131.239686][ T8413] should_fail+0xb/0x20 [ 131.239701][ T8413] should_fail_usercopy+0x1a/0x20 [ 131.239754][ T8413] _copy_from_user+0x1c/0xb0 [ 131.239782][ T8413] ___sys_sendmsg+0xc1/0x1d0 [ 131.239810][ T8413] __x64_sys_sendmsg+0xd4/0x160 [ 131.239892][ T8413] x64_sys_call+0x191e/0x2ff0 [ 131.239911][ T8413] do_syscall_64+0xd2/0x200 [ 131.239933][ T8413] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 131.239981][ T8413] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 131.240048][ T8413] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.240152][ T8413] RIP: 0033:0x7fbe9786ebe9 [ 131.240165][ T8413] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 131.240179][ T8413] RSP: 002b:00007fbe962d7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 131.240201][ T8413] RAX: ffffffffffffffda RBX: 00007fbe97a95fa0 RCX: 00007fbe9786ebe9 [ 131.240211][ T8413] RDX: 0000000000040040 RSI: 00002000000000c0 RDI: 0000000000000003 [ 131.240238][ T8413] RBP: 00007fbe962d7090 R08: 0000000000000000 R09: 0000000000000000 [ 131.240248][ T8413] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 131.240258][ T8413] R13: 00007fbe97a96038 R14: 00007fbe97a95fa0 R15: 00007ffc56055c08 [ 131.240273][ T8413] [ 131.436811][ T8415] wireguard2: entered promiscuous mode [ 131.442619][ T8415] wireguard2: entered allmulticast mode [ 131.501419][ T8426] ALSA: seq fatal error: cannot create timer (-19) [ 131.597469][ T8433] loop3: detected capacity change from 0 to 512 [ 131.623988][ T8433] EXT4-fs error (device loop3): ext4_orphan_get:1418: comm syz.3.1634: bad orphan inode 17 [ 131.634635][ T8433] ext4_test_bit(bit=16, block=4) = 1 [ 131.640101][ T8433] is_bad_inode(inode)=0 [ 131.644453][ T8433] NEXT_ORPHAN(inode)=0 [ 131.648611][ T8433] max_ino=32 [ 131.651897][ T8433] i_nlink=1 [ 131.655503][ T8433] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 131.690769][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.854584][ T8446] FAULT_INJECTION: forcing a failure. [ 131.854584][ T8446] name failslab, interval 1, probability 0, space 0, times 0 [ 131.867390][ T8446] CPU: 0 UID: 0 PID: 8446 Comm: syz.3.1638 Not tainted syzkaller #0 PREEMPT(voluntary) [ 131.867485][ T8446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 131.867496][ T8446] Call Trace: [ 131.867545][ T8446] [ 131.867552][ T8446] __dump_stack+0x1d/0x30 [ 131.867572][ T8446] dump_stack_lvl+0xe8/0x140 [ 131.867590][ T8446] dump_stack+0x15/0x1b [ 131.867605][ T8446] should_fail_ex+0x265/0x280 [ 131.867625][ T8446] should_failslab+0x8c/0xb0 [ 131.867694][ T8446] kmem_cache_alloc_node_noprof+0x57/0x320 [ 131.867722][ T8446] ? __alloc_skb+0x101/0x320 [ 131.867788][ T8446] __alloc_skb+0x101/0x320 [ 131.867892][ T8446] netlink_alloc_large_skb+0xba/0xf0 [ 131.867921][ T8446] netlink_sendmsg+0x3cf/0x6b0 [ 131.867943][ T8446] ? __pfx_netlink_sendmsg+0x10/0x10 [ 131.867963][ T8446] __sock_sendmsg+0x145/0x180 [ 131.868045][ T8446] ____sys_sendmsg+0x31e/0x4e0 [ 131.868068][ T8446] ___sys_sendmsg+0x17b/0x1d0 [ 131.868099][ T8446] __x64_sys_sendmsg+0xd4/0x160 [ 131.868122][ T8446] x64_sys_call+0x191e/0x2ff0 [ 131.868142][ T8446] do_syscall_64+0xd2/0x200 [ 131.868177][ T8446] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 131.868234][ T8446] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 131.868257][ T8446] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.868286][ T8446] RIP: 0033:0x7fdd0c7debe9 [ 131.868301][ T8446] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 131.868317][ T8446] RSP: 002b:00007fdd0b226038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 131.868351][ T8446] RAX: ffffffffffffffda RBX: 00007fdd0ca06090 RCX: 00007fdd0c7debe9 [ 131.868362][ T8446] RDX: 0000000000000000 RSI: 0000200000006280 RDI: 000000000000000b [ 131.868443][ T8446] RBP: 00007fdd0b226090 R08: 0000000000000000 R09: 0000000000000000 [ 131.868454][ T8446] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 131.868464][ T8446] R13: 00007fdd0ca06128 R14: 00007fdd0ca06090 R15: 00007ffc2cf8ebc8 [ 131.868480][ T8446] [ 131.895663][ T8446] netlink: 'syz.3.1638': attribute type 4 has an invalid length. [ 132.285897][ T8453] loop2: detected capacity change from 0 to 512 [ 132.299864][ T8453] journal_path: Non-blockdev passed as './bus' [ 132.306290][ T8453] EXT4-fs: error: could not find journal device path [ 132.399338][ T8462] ALSA: seq fatal error: cannot create timer (-19) [ 132.428452][ T8468] loop0: detected capacity change from 0 to 2048 [ 132.520770][ T8478] atomic_op ffff888105bc4928 conn xmit_atomic 0000000000000000 [ 132.665592][ T8485] wireguard0: entered promiscuous mode [ 132.671121][ T8485] wireguard0: entered allmulticast mode [ 132.697869][ T8480] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 132.761562][ T8491] loop3: detected capacity change from 0 to 2048 [ 132.797117][ T8496] loop4: detected capacity change from 0 to 512 [ 132.804057][ T8496] journal_path: Non-blockdev passed as './bus' [ 132.810905][ T8496] EXT4-fs: error: could not find journal device path [ 132.814915][ T8498] pim6reg: entered allmulticast mode [ 132.828929][ T8498] pim6reg: left allmulticast mode [ 132.882382][ T8502] ALSA: seq fatal error: cannot create timer (-19) [ 132.890657][ T8507] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1656'. [ 132.926936][ T8509] loop0: detected capacity change from 0 to 2048 [ 132.987739][ T8517] loop3: detected capacity change from 0 to 1024 [ 132.995660][ T8517] EXT4-fs: Ignoring removed orlov option [ 133.008891][ T8517] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.106906][ T8534] loop0: detected capacity change from 0 to 512 [ 133.113751][ T8534] journal_path: Non-blockdev passed as './bus' [ 133.120357][ T8534] EXT4-fs: error: could not find journal device path [ 133.146645][ T8536] netem: change failed [ 133.232624][ T8540] ALSA: seq fatal error: cannot create timer (-19) [ 133.276146][ T8527] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 133.375925][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.459566][ T8575] FAULT_INJECTION: forcing a failure. [ 133.459566][ T8575] name failslab, interval 1, probability 0, space 0, times 0 [ 133.466438][ T8564] netlink: 'syz.4.1677': attribute type 1 has an invalid length. [ 133.472345][ T8575] CPU: 0 UID: 0 PID: 8575 Comm: syz.2.1682 Not tainted syzkaller #0 PREEMPT(voluntary) [ 133.472394][ T8575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 133.472405][ T8575] Call Trace: [ 133.472410][ T8575] [ 133.472418][ T8575] __dump_stack+0x1d/0x30 [ 133.472439][ T8575] dump_stack_lvl+0xe8/0x140 [ 133.472459][ T8575] dump_stack+0x15/0x1b [ 133.472476][ T8575] should_fail_ex+0x265/0x280 [ 133.472561][ T8575] should_failslab+0x8c/0xb0 [ 133.472584][ T8575] kmem_cache_alloc_noprof+0x50/0x310 [ 133.472666][ T8575] ? audit_log_start+0x365/0x6c0 [ 133.472696][ T8575] audit_log_start+0x365/0x6c0 [ 133.472726][ T8575] audit_seccomp+0x48/0x100 [ 133.472793][ T8575] ? __seccomp_filter+0x68c/0x10d0 [ 133.472814][ T8575] __seccomp_filter+0x69d/0x10d0 [ 133.472837][ T8575] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 133.472879][ T8575] ? vfs_write+0x7e8/0x960 [ 133.472905][ T8575] __secure_computing+0x82/0x150 [ 133.472926][ T8575] syscall_trace_enter+0xcf/0x1e0 [ 133.472995][ T8575] do_syscall_64+0xac/0x200 [ 133.473066][ T8575] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 133.473089][ T8575] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 133.473113][ T8575] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.473154][ T8575] RIP: 0033:0x7f99d135ebe9 [ 133.473170][ T8575] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 133.473187][ T8575] RSP: 002b:00007f99cfdbf038 EFLAGS: 00000246 ORIG_RAX: 000000000000005b [ 133.473248][ T8575] RAX: ffffffffffffffda RBX: 00007f99d1585fa0 RCX: 00007f99d135ebe9 [ 133.473261][ T8575] RDX: 0000000000000000 RSI: 0000000000000020 RDI: ffffffffffffffff [ 133.473273][ T8575] RBP: 00007f99cfdbf090 R08: 0000000000000000 R09: 0000000000000000 [ 133.473286][ T8575] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 133.473367][ T8575] R13: 00007f99d1586038 R14: 00007f99d1585fa0 R15: 00007ffefc651568 [ 133.473385][ T8575] [ 133.581871][ T8578] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 133.686760][ T8580] FAULT_INJECTION: forcing a failure. [ 133.686760][ T8580] name failslab, interval 1, probability 0, space 0, times 0 [ 133.699424][ T8580] CPU: 0 UID: 0 PID: 8580 Comm: syz.2.1684 Not tainted syzkaller #0 PREEMPT(voluntary) [ 133.699449][ T8580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 133.699460][ T8580] Call Trace: [ 133.699466][ T8580] [ 133.699474][ T8580] __dump_stack+0x1d/0x30 [ 133.699492][ T8580] dump_stack_lvl+0xe8/0x140 [ 133.699570][ T8580] dump_stack+0x15/0x1b [ 133.699612][ T8580] should_fail_ex+0x265/0x280 [ 133.699687][ T8580] should_failslab+0x8c/0xb0 [ 133.699747][ T8580] kmem_cache_alloc_node_noprof+0x57/0x320 [ 133.699776][ T8580] ? __alloc_skb+0x101/0x320 [ 133.699856][ T8580] __alloc_skb+0x101/0x320 [ 133.699882][ T8580] ? audit_log_start+0x365/0x6c0 [ 133.699921][ T8580] audit_log_start+0x380/0x6c0 [ 133.699966][ T8580] audit_seccomp+0x48/0x100 [ 133.700068][ T8580] ? __seccomp_filter+0x68c/0x10d0 [ 133.700091][ T8580] __seccomp_filter+0x69d/0x10d0 [ 133.700113][ T8580] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 133.700140][ T8580] ? vfs_write+0x7e8/0x960 [ 133.700161][ T8580] ? __rcu_read_unlock+0x4f/0x70 [ 133.700242][ T8580] ? __fget_files+0x184/0x1c0 [ 133.700265][ T8580] __secure_computing+0x82/0x150 [ 133.700298][ T8580] syscall_trace_enter+0xcf/0x1e0 [ 133.700323][ T8580] do_syscall_64+0xac/0x200 [ 133.700350][ T8580] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 133.700436][ T8580] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 133.700533][ T8580] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.700551][ T8580] RIP: 0033:0x7f99d135ebe9 [ 133.700602][ T8580] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 133.700621][ T8580] RSP: 002b:00007f99cfdbf038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a0 [ 133.700637][ T8580] RAX: ffffffffffffffda RBX: 00007f99d1585fa0 RCX: 00007f99d135ebe9 [ 133.700647][ T8580] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0040000000000008 [ 133.700658][ T8580] RBP: 00007f99cfdbf090 R08: 0000000000000000 R09: 0000000000000000 [ 133.700669][ T8580] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 133.700679][ T8580] R13: 00007f99d1586038 R14: 00007f99d1585fa0 R15: 00007ffefc651568 [ 133.700694][ T8580] [ 133.991308][ T8599] __nla_validate_parse: 8 callbacks suppressed [ 133.991334][ T8599] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1689'. [ 134.110178][ T8596] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 134.143514][ T8610] siw: device registration error -23 [ 134.154846][ T8612] wireguard0: entered promiscuous mode [ 134.161223][ T8612] wireguard0: entered allmulticast mode [ 134.242219][ T8603] serio: Serial port ptm0 [ 134.292066][ T8619] loop0: detected capacity change from 0 to 512 [ 134.321741][ T8619] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.335004][ T8619] ext4 filesystem being mounted at /320/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 134.368122][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.385397][ T8627] FAULT_INJECTION: forcing a failure. [ 134.385397][ T8627] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 134.399048][ T8627] CPU: 0 UID: 0 PID: 8627 Comm: syz.0.1697 Not tainted syzkaller #0 PREEMPT(voluntary) [ 134.399096][ T8627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 134.399109][ T8627] Call Trace: [ 134.399114][ T8627] [ 134.399122][ T8627] __dump_stack+0x1d/0x30 [ 134.399192][ T8627] dump_stack_lvl+0xe8/0x140 [ 134.399212][ T8627] dump_stack+0x15/0x1b [ 134.399230][ T8627] should_fail_ex+0x265/0x280 [ 134.399355][ T8627] should_fail+0xb/0x20 [ 134.399374][ T8627] should_fail_usercopy+0x1a/0x20 [ 134.399403][ T8627] _copy_from_user+0x1c/0xb0 [ 134.399482][ T8627] copy_clone_args_from_user+0x38d/0x490 [ 134.399520][ T8627] __se_sys_clone3+0x6f/0x200 [ 134.399608][ T8627] __x64_sys_clone3+0x31/0x40 [ 134.399630][ T8627] x64_sys_call+0x1fc9/0x2ff0 [ 134.399650][ T8627] do_syscall_64+0xd2/0x200 [ 134.399677][ T8627] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 134.399702][ T8627] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 134.399789][ T8627] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.399812][ T8627] RIP: 0033:0x7fbe9786ebe9 [ 134.399828][ T8627] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 134.399844][ T8627] RSP: 002b:00007fbe962d6f08 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 134.399864][ T8627] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007fbe9786ebe9 [ 134.399932][ T8627] RDX: 00007fbe962d6f20 RSI: 0000000000000058 RDI: 00007fbe962d6f20 [ 134.399985][ T8627] RBP: 00007fbe962d7090 R08: 0000000000000000 R09: 0000000000000058 [ 134.399996][ T8627] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 134.400006][ T8627] R13: 00007fbe97a96038 R14: 00007fbe97a95fa0 R15: 00007ffc56055c08 [ 134.400022][ T8627] [ 134.436597][ T8621] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 134.640196][ T8640] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1702'. [ 134.782919][ T8644] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 134.851920][ T8658] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1708'. [ 135.026785][ T8680] FAULT_INJECTION: forcing a failure. [ 135.026785][ T8680] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 135.040115][ T8680] CPU: 0 UID: 0 PID: 8680 Comm: syz.3.1714 Not tainted syzkaller #0 PREEMPT(voluntary) [ 135.040141][ T8680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 135.040150][ T8680] Call Trace: [ 135.040157][ T8680] [ 135.040164][ T8680] __dump_stack+0x1d/0x30 [ 135.040258][ T8680] dump_stack_lvl+0xe8/0x140 [ 135.040273][ T8680] dump_stack+0x15/0x1b [ 135.040302][ T8680] should_fail_ex+0x265/0x280 [ 135.040356][ T8680] should_fail+0xb/0x20 [ 135.040446][ T8680] should_fail_usercopy+0x1a/0x20 [ 135.040481][ T8680] _copy_from_iter+0xd2/0xe80 [ 135.040502][ T8680] ? __build_skb_around+0x1a0/0x200 [ 135.040600][ T8680] skb_copy_datagram_from_iter+0xb1/0x490 [ 135.040622][ T8680] tun_get_user+0xafa/0x2680 [ 135.040696][ T8680] ? ref_tracker_alloc+0x1f2/0x2f0 [ 135.040716][ T8680] tun_chr_write_iter+0x15e/0x210 [ 135.040739][ T8680] do_iter_readv_writev+0x499/0x540 [ 135.040797][ T8680] vfs_writev+0x2df/0x8b0 [ 135.040826][ T8680] do_writev+0xe7/0x210 [ 135.040847][ T8680] __x64_sys_writev+0x45/0x50 [ 135.040866][ T8680] x64_sys_call+0x1e9a/0x2ff0 [ 135.040924][ T8680] do_syscall_64+0xd2/0x200 [ 135.040976][ T8680] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 135.040995][ T8680] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 135.041015][ T8680] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.041056][ T8680] RIP: 0033:0x7fdd0c7debe9 [ 135.041128][ T8680] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 135.041143][ T8680] RSP: 002b:00007fdd0b247038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 135.041160][ T8680] RAX: ffffffffffffffda RBX: 00007fdd0ca05fa0 RCX: 00007fdd0c7debe9 [ 135.041170][ T8680] RDX: 0000000000000001 RSI: 0000200000000100 RDI: 0000000000000003 [ 135.041180][ T8680] RBP: 00007fdd0b247090 R08: 0000000000000000 R09: 0000000000000000 [ 135.041190][ T8680] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 135.041255][ T8680] R13: 00007fdd0ca06038 R14: 00007fdd0ca05fa0 R15: 00007ffc2cf8ebc8 [ 135.041270][ T8680] [ 135.288068][ T8671] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 135.442200][ T8700] loop1: detected capacity change from 0 to 1024 [ 135.458622][ T8700] EXT4-fs: Ignoring removed orlov option [ 135.465317][ T8692] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 135.502052][ T8700] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.503863][ T8704] siw: device registration error -23 [ 135.530508][ T8700] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1721'. [ 135.747454][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.772991][ T8709] wireguard0: entered promiscuous mode [ 135.778570][ T8709] wireguard0: entered allmulticast mode [ 136.082595][ T29] kauditd_printk_skb: 426 callbacks suppressed [ 136.082610][ T29] audit: type=1326 audit(1755899816.149:8460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8712 comm="syz.4.1724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac8c27ebe9 code=0x7ffc0000 [ 136.125103][ T8713] loop4: detected capacity change from 0 to 512 [ 136.132765][ T29] audit: type=1326 audit(1755899816.179:8461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8712 comm="syz.4.1724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fac8c27ebe9 code=0x7ffc0000 [ 136.156660][ T29] audit: type=1326 audit(1755899816.179:8462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8712 comm="syz.4.1724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac8c27ebe9 code=0x7ffc0000 [ 136.180153][ T29] audit: type=1326 audit(1755899816.179:8463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8712 comm="syz.4.1724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fac8c27ebe9 code=0x7ffc0000 [ 136.203684][ T29] audit: type=1326 audit(1755899816.189:8464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8712 comm="syz.4.1724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac8c27ebe9 code=0x7ffc0000 [ 136.227792][ T29] audit: type=1326 audit(1755899816.189:8465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8712 comm="syz.4.1724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fac8c27ebe9 code=0x7ffc0000 [ 136.251267][ T29] audit: type=1326 audit(1755899816.189:8466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8712 comm="syz.4.1724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac8c27ebe9 code=0x7ffc0000 [ 136.275068][ T29] audit: type=1326 audit(1755899816.189:8467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8712 comm="syz.4.1724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fac8c27ebe9 code=0x7ffc0000 [ 136.298951][ T29] audit: type=1326 audit(1755899816.189:8468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8712 comm="syz.4.1724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac8c27ebe9 code=0x7ffc0000 [ 136.305656][ T8713] EXT4-fs error (device loop4): ext4_orphan_get:1418: comm syz.4.1724: bad orphan inode 17 [ 136.322689][ T29] audit: type=1326 audit(1755899816.189:8469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8712 comm="syz.4.1724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fac8c27ebe9 code=0x7ffc0000 [ 136.364855][ T8713] ext4_test_bit(bit=16, block=4) = 1 [ 136.370302][ T8713] is_bad_inode(inode)=0 [ 136.374456][ T8713] NEXT_ORPHAN(inode)=0 [ 136.378674][ T8713] max_ino=32 [ 136.381877][ T8713] i_nlink=1 [ 136.398055][ T8713] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 136.504208][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.530575][ T8718] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 136.566296][ T8725] loop4: detected capacity change from 0 to 1024 [ 136.588139][ T8725] EXT4-fs: Ignoring removed orlov option [ 136.621567][ T8725] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.648749][ T8725] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1728'. [ 136.694529][ T8737] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1731'. [ 136.868590][ T8736] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 136.933305][ T8748] siw: device registration error -23 [ 136.992733][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.013822][ T8751] loop4: detected capacity change from 0 to 1024 [ 137.020609][ T8751] EXT4-fs: Ignoring removed orlov option [ 137.029003][ T8751] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.049829][ T8751] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1736'. [ 137.322131][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.355859][ T8759] loop4: detected capacity change from 0 to 1024 [ 137.362553][ T8759] EXT4-fs: Ignoring removed orlov option [ 137.389898][ T8759] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.676256][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.771366][ T8769] wireguard0: entered promiscuous mode [ 137.776947][ T8769] wireguard0: entered allmulticast mode [ 137.849658][ T8771] tbf_change: 1 callbacks suppressed [ 137.849674][ T8771] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 137.914290][ T8777] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1742'. [ 138.125846][ T8780] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1743'. [ 138.146837][ T8780] netlink: 'syz.4.1743': attribute type 1 has an invalid length. [ 138.154981][ T8780] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1743'. [ 138.262003][ T8790] ALSA: seq fatal error: cannot create timer (-19) [ 138.333816][ T8796] loop3: detected capacity change from 0 to 512 [ 138.359311][ T8796] EXT4-fs error (device loop3): ext4_orphan_get:1418: comm syz.3.1747: bad orphan inode 17 [ 138.384651][ T8796] ext4_test_bit(bit=16, block=4) = 1 [ 138.390087][ T8796] is_bad_inode(inode)=0 [ 138.394334][ T8796] NEXT_ORPHAN(inode)=0 [ 138.398426][ T8796] max_ino=32 [ 138.401652][ T8796] i_nlink=1 [ 138.406514][ T8796] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 138.435963][ T8801] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=8801 comm=syz.0.1748 [ 138.473357][ T8803] loop4: detected capacity change from 0 to 2048 [ 138.499752][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.574455][ T8815] atomic_op ffff8881026de928 conn xmit_atomic 0000000000000000 [ 138.586956][ T8819] loop3: detected capacity change from 0 to 1024 [ 138.593812][ T8819] EXT4-fs: Ignoring removed orlov option [ 138.683030][ T8822] lo speed is unknown, defaulting to 1000 [ 138.860509][ T8821] loop1: detected capacity change from 0 to 2048 [ 138.937978][ T8819] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.008241][ T8819] __nla_validate_parse: 1 callbacks suppressed [ 139.008256][ T8819] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1753'. [ 139.212527][ T8831] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1757'. [ 139.223097][ T8831] netlink: 'syz.1.1757': attribute type 1 has an invalid length. [ 139.231002][ T8831] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1757'. [ 139.417040][ T8846] loop0: detected capacity change from 0 to 2048 [ 139.517797][ T8848] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1762'. [ 139.545704][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.701201][ T8871] atomic_op ffff888118e47128 conn xmit_atomic 0000000000000000 [ 139.701658][ T8863] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1768'. [ 139.781065][ T8875] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=8875 comm=syz.3.1770 [ 139.804275][ T8874] loop1: detected capacity change from 0 to 1024 [ 139.814459][ T8874] EXT4-fs: Ignoring removed orlov option [ 139.827683][ T8874] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.854759][ T8874] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1772'. [ 140.061671][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.138636][ T8885] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 140.212751][ T8886] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1774'. [ 140.224028][ T8886] netlink: 'syz.1.1774': attribute type 1 has an invalid length. [ 140.231882][ T8886] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1774'. [ 140.699278][ T8909] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1782'. [ 140.838331][ T8916] lo speed is unknown, defaulting to 1000 [ 141.016918][ T8922] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1785'. [ 141.087108][ T29] kauditd_printk_skb: 347 callbacks suppressed [ 141.087121][ T29] audit: type=1326 audit(1755899821.159:8817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8925 comm="syz.2.1788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f99d135ebe9 code=0x7ffc0000 [ 141.118064][ T29] audit: type=1326 audit(1755899821.189:8818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8925 comm="syz.2.1788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99d135ebe9 code=0x7ffc0000 [ 141.142305][ T29] audit: type=1326 audit(1755899821.189:8819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8925 comm="syz.2.1788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99d135ebe9 code=0x7ffc0000 [ 141.165978][ T29] audit: type=1326 audit(1755899821.189:8820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8925 comm="syz.2.1788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f99d135ebe9 code=0x7ffc0000 [ 141.189950][ T29] audit: type=1326 audit(1755899821.189:8821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8925 comm="syz.2.1788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99d135ebe9 code=0x7ffc0000 [ 141.213769][ T29] audit: type=1326 audit(1755899821.189:8822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8925 comm="syz.2.1788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99d135ebe9 code=0x7ffc0000 [ 141.237719][ T29] audit: type=1326 audit(1755899821.189:8823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8925 comm="syz.2.1788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f99d135ebe9 code=0x7ffc0000 [ 141.262176][ T29] audit: type=1326 audit(1755899821.189:8824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8925 comm="syz.2.1788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99d135ebe9 code=0x7ffc0000 [ 141.286028][ T29] audit: type=1326 audit(1755899821.189:8825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8925 comm="syz.2.1788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f99d135ebe9 code=0x7ffc0000 [ 141.310155][ T29] audit: type=1326 audit(1755899821.189:8826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8925 comm="syz.2.1788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99d135ebe9 code=0x7ffc0000 [ 141.348201][ T8934] wireguard4: entered promiscuous mode [ 141.353807][ T8934] wireguard4: entered allmulticast mode [ 141.422018][ T8940] atomic_op ffff888118e56928 conn xmit_atomic 0000000000000000 [ 141.443643][ T8943] loop1: detected capacity change from 0 to 2048 [ 141.795974][ T8961] loop4: detected capacity change from 0 to 512 [ 141.803260][ T8961] journal_path: Non-blockdev passed as './bus' [ 141.809753][ T8961] EXT4-fs: error: could not find journal device path [ 141.955091][ T8969] loop4: detected capacity change from 0 to 2048 [ 142.297464][ T8979] lo speed is unknown, defaulting to 1000 [ 142.374629][ T8983] lo speed is unknown, defaulting to 1000 [ 142.585375][ T8998] loop1: detected capacity change from 0 to 512 [ 142.593792][ T8998] journal_path: Non-blockdev passed as './bus' [ 142.600088][ T8998] EXT4-fs: error: could not find journal device path [ 143.114108][ T9012] atomic_op ffff888118e57128 conn xmit_atomic 0000000000000000 [ 143.551981][ T9025] loop0: detected capacity change from 0 to 1024 [ 143.561392][ T9027] 9pnet_fd: Insufficient options for proto=fd [ 143.572444][ T9025] EXT4-fs: Ignoring removed orlov option [ 143.690274][ T9025] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.838437][ T9025] ================================================================== [ 143.846637][ T9025] BUG: KCSAN: data-race in filemap_read / filemap_read [ 143.853684][ T9025] [ 143.856008][ T9025] write to 0xffff888103f320a8 of 8 bytes by task 9037 on cpu 1: [ 143.863638][ T9025] filemap_read+0x974/0xa00 [ 143.868191][ T9025] generic_file_read_iter+0x79/0x330 [ 143.873518][ T9025] ext4_file_read_iter+0x1cc/0x290 [ 143.878740][ T9025] copy_splice_read+0x43f/0x660 [ 143.883701][ T9025] splice_direct_to_actor+0x290/0x680 [ 143.889268][ T9025] do_splice_direct+0xda/0x150 [ 143.894385][ T9025] do_sendfile+0x380/0x650 [ 143.898963][ T9025] __x64_sys_sendfile64+0x105/0x150 [ 143.904179][ T9025] x64_sys_call+0x2bb0/0x2ff0 [ 143.908863][ T9025] do_syscall_64+0xd2/0x200 [ 143.913368][ T9025] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.919424][ T9025] [ 143.921935][ T9025] read to 0xffff888103f320a8 of 8 bytes by task 9025 on cpu 0: [ 143.929491][ T9025] filemap_read+0x6f/0xa00 [ 143.934109][ T9025] generic_file_read_iter+0x79/0x330 [ 143.939634][ T9025] ext4_file_read_iter+0x1cc/0x290 [ 143.944775][ T9025] copy_splice_read+0x43f/0x660 [ 143.949828][ T9025] splice_direct_to_actor+0x290/0x680 [ 143.955216][ T9025] do_splice_direct+0xda/0x150 [ 143.960043][ T9025] do_sendfile+0x380/0x650 [ 143.964641][ T9025] __x64_sys_sendfile64+0x105/0x150 [ 143.969965][ T9025] x64_sys_call+0x2bb0/0x2ff0 [ 143.974664][ T9025] do_syscall_64+0xd2/0x200 [ 143.979442][ T9025] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.985415][ T9025] [ 143.987725][ T9025] value changed: 0x00000000000001d7 -> 0x00000000000001d8 [ 143.995275][ T9025] [ 143.997612][ T9025] Reported by Kernel Concurrency Sanitizer on: [ 144.003818][ T9025] CPU: 0 UID: 0 PID: 9025 Comm: syz.0.1822 Not tainted syzkaller #0 PREEMPT(voluntary) [ 144.013742][ T9025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 144.023885][ T9025] ================================================================== [ 144.111326][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.