last executing test programs: 5.533498442s ago: executing program 1 (id=9333): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) fstat(r0, &(0x7f0000000140)) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70200001400000bb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000700)='kfree\x00', r3}, 0x18) r4 = perf_event_open(&(0x7f0000000140)={0x2, 0xd2, 0x37, 0x1, 0x0, 0x8, 0x0, 0xa, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x2}, 0x4c58, 0x10000, 0x0, 0x1, 0x8, 0x2000a, 0xb, 0x0, 0x0, 0x0, 0x8000000000000002}, 0x0, 0xffffffdfffffffff, 0xffffffffffffffff, 0x2) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r4) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01032757c38d085641a7260000000c000180080001"], 0x20}, 0x1, 0x0, 0x0, 0x20040005}, 0x8840) 5.472116433s ago: executing program 1 (id=9336): pipe(0x0) r0 = epoll_create(0x4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, 0xffffffffffffffff, &(0x7f00000004c0)={0xe0000012}) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount$9p_fd(0x0, 0x0, &(0x7f0000000480), 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r3, 0x0, 0x5}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000080)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0xe, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) 4.791814824s ago: executing program 0 (id=9344): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000000000000"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1200000002000000040000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000003"], 0x50) syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000850000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) r5 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x8, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x408003, 0xaea}, 0x14105, 0x32, 0xfffffbff, 0x3, 0x1, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f00000001c0)='cpu~-0\t\t\t') bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x2, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB='8\x00\x00\x00\x00\x00', @ANYRESOCT], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x101000, 0x800, 0x2, 0x4}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES16=r3, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20}, 0x94) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd7000fcdbdf214300000008000300", @ANYRES32, @ANYBLOB="0c00990006000000150000000c00580038000000000000000c0058006e00000000000000"], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x4) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x8001}, 0x4) syz_emit_ethernet(0x2e, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c200000ee43f6642531e0800de7a"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x1, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) bind$inet6(0xffffffffffffffff, &(0x7f0000000580)={0xa, 0x4e22, 0xff, @ipv4={'\x00', '\xff\xff', @loopback}, 0xfffffffe}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f00000002c0)=ANY=[@ANYBLOB="050000000000000071117700000000008510000002000000850000005600000095000000000000009500a50500000000eefd02f7e4c7ef6bfd6b7e160d5a59898098d03978903a3ecb0443b5069f63b76ffe38996114079c34e953ab2fc1f800c7ff9cdad0b490700b4586082326cabc459587bf937e83c29ff4e4a47e30f1b31c886030af93d6bfa6aa21216810d61d6e970aa4c96e0f77e00ff165"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) 4.40163382s ago: executing program 0 (id=9349): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r2, &(0x7f0000000080)={0x1d, r1, 0x0, {0x0, 0x0, 0x4}}, 0x18) sendmsg$can_j1939(r2, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) setsockopt$SO_J1939_FILTER(r2, 0x6b, 0x1, &(0x7f0000000280)=[{0x2, 0x2, {0x2, 0x0, 0x2}, {0x1, 0xff, 0x1}, 0x0, 0x101}, {0x0, 0x6, {0x0, 0xf0}, {0x0, 0x1, 0x2}, 0x0, 0x2}], 0x40) close(r2) 3.482698184s ago: executing program 0 (id=9354): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000040)=0x6b93, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, &(0x7f0000000140), 0x4) perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x7, 0x10, 0x95, 0x8, 0x0, 0xc304, 0x1031, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x7ff, 0x2, @perf_config_ext={0x9, 0xb06}, 0x80, 0x2, 0x1c, 0x5, 0x9, 0xd0d, 0x2, 0x0, 0x0, 0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r4 = socket$inet6(0xa, 0x3, 0xff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x40, 0x7ffc1ffb}]}) utimensat(0xffffffffffffff9c, &(0x7f00000003c0)='.\x00', 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000f2e30000000000185673683d666bc58a058f11000014", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) r7 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r8, &(0x7f0000001340)=[{&(0x7f0000000440)=""/166, 0xa6}], 0x1) readv(r8, &(0x7f0000001240)=[{&(0x7f0000000040)=""/73, 0x49}], 0x1) preadv(0xffffffffffffffff, &(0x7f0000001d80)=[{&(0x7f0000000c80)=""/4096, 0x1000}], 0x1, 0xffffffff, 0x2) r9 = dup2(r4, r4) write$tun(r9, 0x0, 0x46) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) 3.10801718s ago: executing program 4 (id=9356): bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="05000000010000000400000004"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_usb_connect$uac1(0x4, 0x71, &(0x7f0000000580)=ANY=[], 0x0) close_range(r1, 0xffffffffffffffff, 0x200000000000000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bf"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff53000000800395032303030"], 0x15) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x70, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[], 0x15) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) socket(0xa, 0x2, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, &(0x7f0000000000)=0x5, 0x4) sendto$packet(0xffffffffffffffff, &(0x7f0000000080)="33031600d1fd140000007ef52f555f2a0c9fe67025c1d97bfbf719143baa4b1f0f858c6632f47042195e", 0xfdef, 0x40008c1, &(0x7f00000000c0)={0x11, 0x86dd, 0x0, 0x1, 0x62}, 0x14) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') preadv(r4, &(0x7f0000000bc0)=[{&(0x7f0000000140)=""/171, 0xab}], 0x1, 0x0, 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX]) utime(&(0x7f0000000100)='./file0\x00', 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000001c0)={r0}, 0xc) 2.596040068s ago: executing program 0 (id=9357): syz_emit_ethernet(0x66, &(0x7f0000000040)=ANY=[@ANYBLOB="aa9baa"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0x1a, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x81, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet_smc(0x2b, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r2}, &(0x7f0000000000), &(0x7f0000000180)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='mm_page_alloc\x00', r3, 0x0, 0xf29}, 0x18) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x4f0, 0x340, 0x25, 0x148, 0x0, 0x60, 0x458, 0x2a8, 0x2a8, 0x458, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x44, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_bond\x00', 'veth0\x00', {0xff}}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@unspec=@cgroup0={{0x28}, {0x4}}, @common=@unspec=@statistic={{0x38}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x8000, 'syz0\x00', {0x481c}}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x550) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x8, 0x0, 0x4, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) writev(r4, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1) 2.456672571s ago: executing program 4 (id=9359): syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f00000002c0)='./file0\x00', 0xc80, &(0x7f0000020100)=ANY=[@ANYBLOB="00631dda01aef2456795dd9b26209f1c0f624854ea3dd5a00bd6df44035f5c3ae796fec6d633a0ffad0569794acfef7da01767fd4175f2cd82df769aa2ee7bfe3640554507d2e660c9f9e222a72e1e3e71145c480657d2864e5e276f028d64701ae31cde0ceaf408fdb05c0f4142da00e900000100000149e6d308cbe315789f4baffe39bbced9b1d421d2e290e9fc563b62225f002ee310e1fa7321000000000000d6231001a4b2d467825f3abb0c167e129cf1fa0e7854103f4bf2d3a0194983bc86cbd3d75ccef3c8ac4516dac102"], 0x1, 0x27c, &(0x7f0000000600)="$eJzs281qE1EYxvGnH9ov20Sr1VbEF93oZmjjFYTSghhQaiN+gDC1Ew2ZJiUTKhGx3bn1LoTi0p0g3kA3XoELd9247EIc6UxskzaiFXRs8/9tzhvOPOGcnDPhLGY2775aKhUCp+DW1N1l6pX6tSWl1a0exboabXdUH1ezNV0dzX26cPve/RvZXG5mzmw2O38tY2YjF98/ff7m0ofa0J23I+/6tJF+uPkl83ljbGN889v8k2JgxcDKlZq5tlCp1NwF37PFYlByzG75nht4ViwHXrWlv+BXlpfr5pYXhweXq14QmFuuW8mrW61itWrd3MdusWyO49jwoPAr+fW5OTeb9Cjwd1WrWXda0sS+nvx6IgMCAACJanP+X+P83yk4/3eC7fP/g8b924rzPwAAAAAAAAAAAAAAAAAAAAAAh8FWGKbCMEz9aI9J0Rs+YePzgKRBSUOSTkgaljQiKSUpLemkpFOSRiWdlnRG0piks5LOSRpv+q6k54r9kln/gSSnjCbc/52N9e9sTS/u9ktLL1fyK/m4jfuzBRXly9OkUvoarWVDXM9ez81MWiSt80urjfzqSr6nNT+l1PaGaZefivPWmu+L9t1OPqPU9gZrl8+0zffryuWmvKOUPj5SRb4Woz25m38xZTZ9M7cnPxFdd9Q5tqPt+jnOz/rj/AH2x57ft1cTvcnOHVJQf1Zyfd+rUlAcheK1/othHP4i6X8m/Au7i570SAAAAAAAAAAAAAAAAAAAB/GnTwiGq3H+dy5Oeo4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOz1PQAA//+5gF2o") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000280)='./bus\x00', 0x810408, 0x0, 0xff, 0x0, &(0x7f00000007c0)) rename(&(0x7f0000000180)='./file0\x00', &(0x7f0000000a00)='./bus/file0\x00') mkdir(&(0x7f0000000100)='./file0\x00', 0x0) renameat2(r0, &(0x7f0000000240)='./bus/file0\x00', r0, &(0x7f00000001c0)='./file0\x00', 0x2) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x1000401, &(0x7f0000000100)={[{@user_xattr}, {@data_err_ignore}, {@noblock_validity}]}, 0x84, 0x49e, &(0x7f0000000bc0)="$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") pivot_root(&(0x7f0000000580)='./cgroup.cpu/cpuset.cpus\x00', 0x0) syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000040)={[{@noquota}]}, 0x1, 0x775, &(0x7f0000001180)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000100)='kfree\x00', r1}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r4 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r4, &(0x7f0000000080)={0x1d, r3, 0x0, {0x0, 0x0, 0x4}}, 0x18) sendmsg$can_j1939(r4, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) setsockopt$SO_J1939_FILTER(r4, 0x6b, 0x1, &(0x7f0000000280)=[{0x2, 0x2, {0x2, 0x0, 0x2}, {0x1, 0xff, 0x1}, 0x0, 0x101}, {0x0, 0x6, {0x0, 0xf0}, {0x0, 0x1, 0x2}, 0x0, 0x2}], 0x40) close(r4) 2.424408861s ago: executing program 2 (id=9360): bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={0xffffffffffffffff, 0x0, &(0x7f0000001700)=""/53}, 0x20) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, &(0x7f00000004c0), 0x0}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) connect$inet6(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x5c399000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00'}, 0x10) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x512, &(0x7f0000000c40)="$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") 2.388781312s ago: executing program 0 (id=9361): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00"], &(0x7f0000000100)='syzkaller\x00', 0x9, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x100000000}, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000cc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000007c0)='\'', 0x1}], 0x1, &(0x7f0000000800)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) recvmsg$unix(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000280)=""/230, 0xe6}], 0x1}, 0x0) 2.213740344s ago: executing program 0 (id=9362): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1600000000000000040000000500000000000000", @ANYRES32=0x1, @ANYBLOB, @ANYBLOB], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000800000000000000000001811", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0), 0x1, 0x4fa, &(0x7f00000005c0)="$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") ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x78, 0x24, 0xd0f, 0x8, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0x8}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x25, 0x2, {{0x200, 0x5, 0x1, 0x0, 0xf407}, 0xfffffffb, 0x0, 0x0, 0x4, 0x7, 0x0, 0x40, 0x9, 0x0, 0x1ff, {0x0, 0x0, 0x0, 0x6}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000041}, 0x0) 2.102756916s ago: executing program 3 (id=9363): perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffff, 0x0, 0x802000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) shutdown(0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="bb", 0x1}], 0x1}, 0x0) recvmsg(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000e40)=""/4096, 0x1000}], 0x1}, 0x0) 1.800701891s ago: executing program 3 (id=9364): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x1d, &(0x7f0000000000), 0x4) getpid() r1 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000840), 0x2, 0x0) write$selinux_user(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='system_u:object_r:auth_cache_t root'], 0x27) r2 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x68, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x0, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="4000000000000000fa0000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xd, &(0x7f0000000780)=ANY=[@ANYRES64=r3, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000180000850000008200020095", @ANYRESDEC=r2, @ANYRESDEC=r0], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x3, 0x0, 0x0, 0x200, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0), 0x6}, 0x110250, 0x20000000000, 0x0, 0x3, 0x5, 0x0, 0x81, 0x0, 0x3, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x9) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000180)='ext4_mballoc_alloc\x00', 0xffffffffffffffff, 0x0, 0x1}, 0xffffff75) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = socket(0x1e, 0x805, 0x0) close(r5) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000900c0000000000000000000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000004000000c5000000060000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r6}, 0x10) r7 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'dh\x00', 0x10, 0x5, 0x11}, 0x2c) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x483, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'none\x00', 0x3a, 0x0, 0x7f}, 0x2c) 1.675444683s ago: executing program 3 (id=9365): r0 = syz_open_dev$loop(&(0x7f0000000080), 0x3, 0x2040) r1 = syz_open_dev$rtc(&(0x7f0000000180), 0x27b, 0x24000) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @multicast2}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffc0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000100)='sched_switch\x00', r5, 0x0, 0x2}, 0x18) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000300)={@in={{0x2, 0x4e22, @multicast2}}, 0x0, 0x0, 0xb, 0x0, "f6a7346a1ca3caf66200f0e70b995efa20d5ddc09c0bc0c88e00bdea5e6998967d569964c8b68dae57dea91c0e3ef03a96483bcaaa5ab222d1993083e8e3619fbbff30da0288a8b78a3f921c40fdc06a"}, 0xd8) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000d8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kmem_cache_free\x00', r6}, 0x10) syz_read_part_table(0x60d, &(0x7f0000002200)="$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") r7 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./file1\x00', 0x105042, 0x1db) writev(r7, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x100000}], 0x1) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000003c0)={{r8, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)='%-5lx \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000580)={r9}, 0x4) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYRESOCT=0x0, @ANYRES32=r8, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000c40)='sys_enter\x00', r10}, 0x10) lstat(0x0, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000400)={@in={{0x2, 0x4e20, @multicast2}}, 0x0, 0x0, 0x0, 0x0, "698e86252c563a2eb894ac1de863c527984bfa5ff139aeeef086eed112e6f0ffba88c7d0888990f99dc2416c1cbccf99d18464a65c3587c97aee9217b992893cebfc606ada5e14e782e63da22a6fe97d"}, 0xd8) close_range(r3, 0xffffffffffffffff, 0x0) 1.558701715s ago: executing program 4 (id=9366): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r1}, &(0x7f00000006c0), &(0x7f0000000700)=r0}, 0x20) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000040)=0x11) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r3, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f0000002cc0)=[{0x0}, {0x0}], 0x2}, 0xa1}], 0x2, 0x0, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r6 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendfile(r6, 0xffffffffffffffff, 0x0, 0x8000000010001) 1.549295715s ago: executing program 3 (id=9367): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) fstat(r0, &(0x7f0000000140)) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70200001400000bb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000700)='kfree\x00', r4}, 0x18) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01032757c38d085641a7260000000c000180080001"], 0x20}, 0x1, 0x0, 0x0, 0x20040005}, 0x8840) 1.488900006s ago: executing program 2 (id=9368): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r1}, &(0x7f00000006c0), &(0x7f0000000700)=r0}, 0x20) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000040)=0x11) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r3, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f0000002cc0)=[{&(0x7f00000017c0)=""/130, 0x82}], 0x1}, 0xa1}], 0x2, 0x0, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r6 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendfile(r6, 0xffffffffffffffff, 0x0, 0x8000000010001) 1.422803067s ago: executing program 3 (id=9369): bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="05000000010000000400000004"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_usb_connect$uac1(0x4, 0x71, &(0x7f0000000580)=ANY=[], 0x0) close_range(r1, 0xffffffffffffffff, 0x200000000000000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bf"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff53000000800395032303030"], 0x15) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x70, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[], 0x15) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) socket(0xa, 0x2, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, &(0x7f0000000000)=0x5, 0x4) sendto$packet(0xffffffffffffffff, &(0x7f0000000080)="33031600d1fd140000007ef52f555f2a0c9fe67025c1d97bfbf719143baa4b1f0f858c6632f47042195e", 0xfdef, 0x40008c1, &(0x7f00000000c0)={0x11, 0x86dd, 0x0, 0x1, 0x62}, 0x14) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') preadv(r4, &(0x7f0000000bc0)=[{&(0x7f0000000140)=""/171, 0xab}], 0x1, 0x0, 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX]) utime(&(0x7f0000000100)='./file0\x00', 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000001c0)={r0}, 0xc) 1.151883081s ago: executing program 1 (id=9337): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) statfs(&(0x7f0000001000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 1.119152522s ago: executing program 1 (id=9370): r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r1 = syz_io_uring_setup(0x44ad, &(0x7f0000000a40)={0x0, 0x4e61, 0x80, 0x3, 0x20f}, &(0x7f0000000280)=0x0, &(0x7f0000000680)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}) io_uring_enter(r1, 0x40f9, 0x217, 0xa5, 0x0, 0x0) close_range(0xffffffffffffffff, r0, 0x0) 798.624897ms ago: executing program 3 (id=9371): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) fstat(r0, &(0x7f0000000140)) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70200001400000bb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000280)={[{@jqfmt_vfsv1}, {}, {@quota}, {@noauto_da_alloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x5}}, {@orlov}]}, 0x0, 0x56f, &(0x7f0000003780)="$eJzs3d9rW1UcAPDvTdPup66DMdQHGezByVy6tv6YIDgfRYcDfZ+hzcpouowmHWsduD24F19kCCIOxD/Adx+H/4B/xUAHQ0bRBxEiN73psjZp2i4z2fL5wG3Pyb23535z7vf2nNyEBDC0jqU/chEvR8Q3ScShlnX5yFYeW9tu9eH1mXRJol7/9M8kkuyx5vZJ9vtAVnkpIn79KuJkbnO71eWV+WK5XFrM6hO1hSsT1eWVU5cWinOludLlqenpM29NT737zts9i/X1839//8ndD898fXz1u5/vH76dxNk4mK1rjeMJ3GitHCv+m5VG4+yGDSd70NggSfp9AOzKSJbno5FeAw7FSJb1wPPvy4ioA0Mqkf8wpJrjgObcvkfz4GfGgw/WJkCN2Mda48+vvTYSextzo/2ryWMzo3S+O96D9tM2fvnjzu10ia1fh9jXpQ6wIzduRsTpfH7z9T/Jrn+7d7rx4vHWNrYxbP9/oJ/upuOfN9qN/3Lr459oM/450CZ3d6N7/ufu96CZjtLx33ttx7/rl67xkaz2QmPMN5pcvFQunY6IFyPiRNS73vo4s3qv3mld6/gvXdL2m2PB7Dju5/c8vs9ssVaMiLFdhvyYBzcjXsm3iz9Z7/+kTf+nz8f5bbZxtHTn1U7rusf/dNV/initbf8/6tZk6/uTE43zYaJ5Vmz2162jv3Vqv9/xp/2/f+v4x5PW+7XVnbfx495/Sp3W7fb8H0s+a5SbSXCtWKstTkaMJR9vfnzq0b7NenP7NP4Tx7e+/rU7/9PJ1+fbjP/WkVsdNx2E/p/dUf/vvHDvoy9+6NT+9vr/zUbpRPZIdv1rLztXtnuAT/r8AQAAAAAAwCDJRcTBSHKF9XIuVyisvb/jSOzPlSvV2smLlaXLs9H4rOx4jOaad7oPtbwfYjJ7P2yzPrWhPh0RhyPi25F9jXphplKe7XfwAAAAAAAAAAAAAAAAAAAAMCAOdPj8f+r3kX4fHfDUNb7YYE+/jwLoh65f+d+Lb3oCBlLX/AeeW/Ifhpf8h+El/2F4yX8YXvIfhpf8h+El/wEAAAAAAAAAAAAAAAAAAAAAAAAAAKCnzp87ly711YfXZ9L67NXlpfnK1VOzpep8YWFppjBTWbxSmKtU5sqlwkxlodvfK1cqVyanYunaRK1UrU1Ul1cuLFSWLtcuXFoozpUulEb/l6gAAAAAAAAAAAAAAAAAAADg2VJdXpkvlsulRYWOhfdjIA7jaQa4Zle75wclCoUOhZtZ9+5srz5elAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgg/8CAAD//4yLMZo=") lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000180), &(0x7f00000001c0)=ANY=[], 0x361, 0x0) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_SET_FORCE_PACK_ID(r4, 0x227b, &(0x7f00000001c0)=0x2001) r5 = fcntl$dupfd(r4, 0x0, r4) readv(r5, &(0x7f0000000000)=[{&(0x7f0000001140)=""/136, 0x88}], 0x1) lsetxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f0000000540)={{}, {0x1, 0x6}, [], {0x4, 0x1}, [{0x8, 0x5}, {0x8, 0x4}], {0x10, 0x2}, {0x20, 0x1}}, 0x34, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16, @ANYBLOB="01032757c38d085641a7260000000c000180080001"], 0x20}, 0x1, 0x0, 0x0, 0x20040005}, 0x8840) 578.80269ms ago: executing program 1 (id=9372): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='kfree\x00', r0}, 0x18) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r2, 0x0, 0x8}, 0x18) syz_usbip_server_init(0x5) 535.016071ms ago: executing program 2 (id=9373): pipe(0x0) r0 = epoll_create(0x4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, 0xffffffffffffffff, &(0x7f00000004c0)={0xe0000012}) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount$9p_fd(0x0, 0x0, &(0x7f0000000480), 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r3, 0x0, 0x5}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085"], &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0xe, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) 519.661981ms ago: executing program 4 (id=9374): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x6, &(0x7f0000000000)=0x9, 0x8, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x2}, 0x18) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x200000005c832, 0xffffffffffffffff, 0x0) 494.012002ms ago: executing program 2 (id=9375): r0 = syz_open_dev$loop(&(0x7f0000000080), 0x3, 0x2040) r1 = syz_open_dev$rtc(&(0x7f0000000180), 0x27b, 0x24000) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @multicast2}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffc0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000100)='sched_switch\x00', r4, 0x0, 0x2}, 0x18) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000300)={@in={{0x2, 0x4e22, @multicast2}}, 0x0, 0x0, 0xb, 0x0, "f6a7346a1ca3caf66200f0e70b995efa20d5ddc09c0bc0c88e00bdea5e6998967d569964c8b68dae57dea91c0e3ef03a96483bcaaa5ab222d1993083e8e3619fbbff30da0288a8b78a3f921c40fdc06a"}, 0xd8) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000d8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kmem_cache_free\x00', r5}, 0x10) syz_read_part_table(0x60d, &(0x7f0000002200)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./file1\x00', 0x105042, 0x1db) writev(r6, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x100000}], 0x1) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000580), 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000c40)='sys_enter\x00'}, 0x10) lstat(0x0, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000400)={@in={{0x2, 0x4e20, @multicast2}}, 0x0, 0x0, 0x0, 0x0, "698e86252c563a2eb894ac1de863c527984bfa5ff139aeeef086eed112e6f0ffba88c7d0888990f99dc2416c1cbccf99d18464a65c3587c97aee9217b992893cebfc606ada5e14e782e63da22a6fe97d"}, 0xd8) 326.573384ms ago: executing program 2 (id=9376): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001", @ANYRES64], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0xbc}, 0x1, 0x0, 0x0, 0x4000851}, 0x40) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000040)={'syztnl1\x00', &(0x7f0000000280)={'syztnl0\x00', 0x0, 0x8000, 0x99cab6e8dc52f8c, 0x8, 0xf, {{0xe, 0x4, 0x2, 0x3e, 0x38, 0x65, 0x0, 0x4, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ssrr={0x89, 0x23, 0xe6, [@loopback, @rand_addr=0x64010102, @multicast2, @empty, @loopback, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1]}]}}}}}) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x3, 0xc, &(0x7f00000001c0)=ANY=[@ANYRES8=r1], 0x0, 0x7, 0x0, 0x0, 0x41100, 0x3a, '\x00', r4, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="0107000000000000000020000000040003"], 0x1c}, 0x1, 0x0, 0x0, 0x8041}, 0x0) 290.672315ms ago: executing program 4 (id=9377): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400000bb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000700)='kfree\x00', r1}, 0x18) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0xd2, 0x37, 0x1, 0x0, 0x8, 0x0, 0xa, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x2}, 0x4c58, 0x10000, 0x0, 0x1, 0x8, 0x2000a, 0xb, 0x0, 0x0, 0x0, 0x8000000000000002}, 0x0, 0xffffffdfffffffff, 0xffffffffffffffff, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r2) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01032757c38d085641a7260000000c000180080001"], 0x20}, 0x1, 0x0, 0x0, 0x20040005}, 0x8840) 260.090235ms ago: executing program 2 (id=9378): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r2, &(0x7f0000000080)={0x1d, r1, 0x0, {0x0, 0x0, 0x4}}, 0x18) sendmsg$can_j1939(r2, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) setsockopt$SO_J1939_FILTER(r2, 0x6b, 0x1, &(0x7f0000000280)=[{0x2, 0x2, {0x2, 0x0, 0x2}, {0x1, 0xff, 0x1}, 0x0, 0x101}, {0x0, 0x6, {0x0, 0xf0}, {0x0, 0x1, 0x2}, 0x0, 0x2}], 0x40) close(r2) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=@newtfilter={0x24, 0x11, 0x101, 0x70bd21, 0x100000, {0x0, 0x0, 0x74, r1, {0xa, 0x8}, {0xe, 0xfff3}, {0x2, 0xffe0}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4010}, 0xc4) 259.532915ms ago: executing program 4 (id=9379): perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffff, 0x0, 0x802000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) shutdown(0xffffffffffffffff, 0x2) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) socket$packet(0x11, 0xa, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="bb", 0x1}], 0x1}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000840)={&(0x7f0000000800)='kfree_skb\x00', r5}, 0x10) recvmsg(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000e40)=""/4096, 0x1000}], 0x1}, 0x0) 0s ago: executing program 1 (id=9380): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1200000002000000040000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000003"], 0x50) syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000850000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) r5 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x8, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x408003, 0xaea}, 0x14105, 0x32, 0xfffffbff, 0x3, 0x1, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f00000001c0)='cpu~-0\t\t\t') bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x2, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB='8\x00\x00\x00\x00\x00', @ANYRESOCT], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x101000, 0x800, 0x2, 0x4}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES16=r3, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20}, 0x94) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd7000fcdbdf214300000008000300", @ANYRES32, @ANYBLOB="0c00990006000000150000000c00580038000000000000000c0058006e00000000000000"], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x4) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x8001}, 0x4) syz_emit_ethernet(0x2e, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c200000ee43f6642531e0800de7a"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x1, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) bind$inet6(0xffffffffffffffff, &(0x7f0000000580)={0xa, 0x4e22, 0xff, @ipv4={'\x00', '\xff\xff', @loopback}, 0xfffffffe}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f00000002c0)=ANY=[@ANYBLOB="050000000000000071117700000000008510000002000000850000005600000095000000000000009500a50500000000eefd02f7e4c7ef6bfd6b7e160d5a59898098d03978903a3ecb0443b5069f63b76ffe38996114079c34e953ab2fc1f800c7ff9cdad0b490700b4586082326cabc459587bf937e83c29ff4e4a47e30f1b31c886030af93d6bfa6aa21216810d61d6e970aa4c96e0f77e00ff165"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) kernel console output (not intermixed with test programs): 4] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1422.579600][T24978] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1422.847213][ T1910] loop1: detected capacity change from 0 to 512 [ 1422.886011][ T1912] SELinux: syz.3.8863 (1912) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 1422.900906][ T1537] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1422.921108][ T1910] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 1422.929378][ T1910] EXT4-fs (loop1): orphan cleanup on readonly fs [ 1422.939691][ T1910] EXT4-fs (loop1): 1 orphan inode deleted [ 1422.946394][ T1337] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 1422.956298][ T1337] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:64: Failed to release dquot type 1 [ 1423.154124][ T1910] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1423.473131][ T1933] loop2: detected capacity change from 0 to 512 [ 1423.513393][T24845] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1423.525586][ T1936] loop0: detected capacity change from 0 to 128 [ 1423.546853][ T1933] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 1423.559143][ T1933] EXT4-fs (loop2): orphan cleanup on readonly fs [ 1423.566951][ T1933] EXT4-fs (loop2): 1 orphan inode deleted [ 1423.590975][ T1337] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 1423.600860][ T1337] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:64: Failed to release dquot type 1 [ 1423.829553][ T1933] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1423.939809][ T1947] loop1: detected capacity change from 0 to 512 [ 1424.047724][ T1947] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 1424.056038][ T1947] EXT4-fs (loop1): orphan cleanup on readonly fs [ 1424.071182][ T1947] EXT4-fs (loop1): 1 orphan inode deleted [ 1424.341996][ T1286] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 1424.351848][ T1286] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:11: Failed to release dquot type 1 [ 1424.404057][ T1952] loop3: detected capacity change from 0 to 1024 [ 1424.411225][ T1952] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1424.442401][ T1952] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1424.473691][ T1947] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1424.505186][ T1956] loop0: detected capacity change from 0 to 512 [ 1424.541782][ T1956] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1424.568138][ T1956] ext4 filesystem being mounted at /513/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1424.610203][ T641] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1424.698952][T24845] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1424.756995][ T1965] loop4: detected capacity change from 0 to 512 [ 1424.784190][ T1967] loop1: detected capacity change from 0 to 2048 [ 1424.801955][ T1965] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1424.819333][ T1967] loop1: p1 < > p4 [ 1424.823642][ T1967] loop1: p4 size 8388608 extends beyond EOD, truncated [ 1424.834262][ T1965] ext4 filesystem being mounted at /65/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1424.898535][ T1972] SELinux: syz.1.8879 (1972) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 1425.043434][ T1537] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1425.176510][T25138] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1425.261863][ T1979] loop2: detected capacity change from 0 to 512 [ 1425.330747][ T1979] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1425.353313][ T1979] ext4 filesystem being mounted at /28/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1425.485040][ T1988] loop1: detected capacity change from 0 to 2048 [ 1425.550529][ T1988] loop1: p1 < > p4 [ 1425.560653][T24978] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1425.589301][ T1988] loop1: p4 size 8388608 extends beyond EOD, truncated [ 1425.615770][ T1994] 9pnet_fd: Insufficient options for proto=fd [ 1425.644321][ T1999] loop0: detected capacity change from 0 to 128 [ 1425.672789][ T1999] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1425.705514][ T1999] ext4 filesystem being mounted at /514/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1425.759686][T24978] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1425.915849][ T641] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1425.974561][ T2009] loop0: detected capacity change from 0 to 512 [ 1425.986205][ T30] audit: type=1326 audit(1753252447.629:6805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2010 comm="syz.1.8892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff5945e9a9 code=0x7ffc0000 [ 1426.009780][ T30] audit: type=1326 audit(1753252447.629:6806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2010 comm="syz.1.8892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7eff5945e9a9 code=0x7ffc0000 [ 1426.033220][ T30] audit: type=1326 audit(1753252447.629:6807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2010 comm="syz.1.8892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff5945e9a9 code=0x7ffc0000 [ 1426.056678][ T30] audit: type=1326 audit(1753252447.629:6808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2010 comm="syz.1.8892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff5945e9a9 code=0x7ffc0000 [ 1426.115285][ T2009] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 1426.123516][ T2009] EXT4-fs (loop0): orphan cleanup on readonly fs [ 1426.146973][ T2009] EXT4-fs (loop0): 1 orphan inode deleted [ 1426.193367][ T1320] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 1426.203273][ T1320] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:43: Failed to release dquot type 1 [ 1426.221707][ T2009] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1426.265777][ T2029] loop3: detected capacity change from 0 to 2048 [ 1426.325217][ T2029] loop3: p1 < > p4 [ 1426.334654][ T2029] loop3: p4 size 8388608 extends beyond EOD, truncated [ 1426.408031][ T1537] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1426.433140][ T2033] loop2: detected capacity change from 0 to 128 [ 1426.443890][ T2033] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1426.456817][ T2033] ext4 filesystem being mounted at /29/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1426.503849][ T1537] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1426.527149][ T2036] loop2: detected capacity change from 0 to 128 [ 1426.535412][ T2036] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1426.547978][ T2036] ext4 filesystem being mounted at /30/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1426.600246][ T1537] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1426.636458][ T2041] loop2: detected capacity change from 0 to 128 [ 1426.645399][ T2041] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1426.659175][ T2041] ext4 filesystem being mounted at /32/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1426.695432][T24978] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1426.722707][ T1537] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1426.784036][ T2052] loop1: detected capacity change from 0 to 128 [ 1426.792363][ T2052] ext4 filesystem being mounted at /523/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1426.881481][ T2060] loop1: detected capacity change from 0 to 128 [ 1426.892733][ T2060] ext4 filesystem being mounted at /524/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1426.963388][ T2065] loop1: detected capacity change from 0 to 128 [ 1426.976070][ T2065] ext4 filesystem being mounted at /525/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1427.019947][ T2068] loop0: detected capacity change from 0 to 128 [ 1427.070917][ T2068] ext4 filesystem being mounted at /519/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1427.298845][ T2078] loop4: detected capacity change from 0 to 512 [ 1427.311330][ T2084] loop1: detected capacity change from 0 to 1024 [ 1427.318211][ T2084] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1427.330986][ T2078] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 1427.339237][ T2078] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1427.348810][ T2078] EXT4-fs (loop4): 1 orphan inode deleted [ 1427.354944][ T1320] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 1427.364918][ T1320] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:43: Failed to release dquot type 1 [ 1427.488850][ T2090] loop0: detected capacity change from 0 to 512 [ 1427.580259][ T2090] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 1427.588484][ T2090] EXT4-fs (loop0): orphan cleanup on readonly fs [ 1427.599320][ T2090] EXT4-fs (loop0): 1 orphan inode deleted [ 1427.810428][ T1286] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 1427.820318][ T1286] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:11: Failed to release dquot type 1 [ 1427.987565][ T2101] loop4: detected capacity change from 0 to 128 [ 1427.997509][ T2101] ext4 filesystem being mounted at /73/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1428.052035][ T2106] SELinux: syz.3.8925 (2106) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 1428.054040][ T2104] loop2: detected capacity change from 0 to 2048 [ 1428.144805][ T2110] loop1: detected capacity change from 0 to 2048 [ 1428.152024][ T2104] loop2: p1 < > p4 [ 1428.161413][ T2104] loop2: p4 size 8388608 extends beyond EOD, truncated [ 1428.188871][ T2117] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1428.197497][ T2117] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1428.208643][ T2117] loop3: detected capacity change from 0 to 128 [ 1428.215500][ T2110] loop1: p1 < > p4 [ 1428.221075][ T2110] loop1: p4 size 8388608 extends beyond EOD, truncated [ 1428.235562][ T2117] netlink: 1204 bytes leftover after parsing attributes in process `syz.3.8930'. [ 1428.261020][ T2121] loop4: detected capacity change from 0 to 1024 [ 1428.273789][ T2117] ------------[ cut here ]------------ [ 1428.279526][ T2117] WARNING: CPU: 0 PID: 2117 at mm/page_alloc.c:4935 __alloc_frozen_pages_noprof+0x218/0x360 [ 1428.281651][ T2121] EXT4-fs: Ignoring removed orlov option [ 1428.289758][ T2117] Modules linked in: [ 1428.299375][ T2117] CPU: 0 UID: 0 PID: 2117 Comm: syz.3.8930 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(voluntary) [ 1428.310209][ T2117] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1428.320328][ T2117] RIP: 0010:__alloc_frozen_pages_noprof+0x218/0x360 [ 1428.326993][ T2117] Code: 83 3d d3 55 50 05 02 72 0e 48 83 b8 e0 fb ff ff 00 0f 84 48 ff ff ff 81 ca 00 01 00 00 e9 3d ff ff ff c6 05 62 4d 4c 05 01 90 <0f> 0b 90 31 c0 eb 84 a9 00 00 08 00 75 52 44 89 f1 81 e1 7f ff ff [ 1428.346682][ T2117] RSP: 0018:ffffc90008003a98 EFLAGS: 00010246 [ 1428.352823][ T2117] RAX: cad4fb285bb34900 RBX: 0000000000000016 RCX: 0000000000000000 [ 1428.360898][ T2117] RDX: 0000000000000000 RSI: 0000000000000016 RDI: 0000000000040dc0 [ 1428.368960][ T2117] RBP: 0000000000000dc0 R08: ffff88811ec53b58 R09: 0000000000000000 [ 1428.377064][ T2117] R10: ffff888116bb3c10 R11: 0001888116bb3c10 R12: ffffc90008003d28 [ 1428.378620][ T2121] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 1428.385104][ T2117] R13: 00000000665f6568 R14: 0000000000040dc0 R15: 0000000000000000 [ 1428.385126][ T2117] FS: 00007f2a59acf6c0(0000) GS:ffff8882aee2e000(0000) knlGS:0000000000000000 [ 1428.412064][ T2117] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1428.418807][ T2117] CR2: 0000200000001000 CR3: 000000010db28000 CR4: 00000000003506f0 [ 1428.426936][ T2117] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1428.435061][ T2117] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 1428.443185][ T2117] Call Trace: [ 1428.446539][ T2117] [ 1428.449595][ T2117] ? copy_from_user_nofault+0xd5/0x120 [ 1428.455157][ T2117] __alloc_pages_noprof+0x9/0x20 [ 1428.460254][ T2117] ___kmalloc_large_node+0x73/0x140 [ 1428.465534][ T2117] __kmalloc_large_node_noprof+0x16/0xa0 [ 1428.471244][ T2117] __kmalloc_noprof+0x2ab/0x3e0 [ 1428.476146][ T2117] ? hashtab_init+0x9b/0xe0 [ 1428.481012][ T2117] hashtab_init+0x9b/0xe0 [ 1428.485382][ T2117] symtab_init+0x2c/0x40 [ 1428.490047][ T2117] policydb_read+0x516/0x1330 [ 1428.494805][ T2117] security_load_policy+0xba/0x890 [ 1428.500102][ T2117] ? rep_movs_alternative+0x4a/0x90 [ 1428.505424][ T2117] sel_write_load+0x1d4/0x380 [ 1428.510162][ T2117] ? __pfx_sel_write_load+0x10/0x10 [ 1428.515431][ T2117] vfs_write+0x269/0x8e0 [ 1428.519782][ T2117] ? __rcu_read_unlock+0x4f/0x70 [ 1428.524788][ T2117] ? __fget_files+0x184/0x1c0 [ 1428.529544][ T2117] ? finish_task_switch+0xad/0x2b0 [ 1428.534753][ T2117] ksys_write+0xda/0x1a0 [ 1428.539188][ T2117] __x64_sys_write+0x40/0x50 [ 1428.543902][ T2117] x64_sys_call+0x2cdd/0x2fb0 [ 1428.548600][ T2117] do_syscall_64+0xd2/0x200 [ 1428.553157][ T2117] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 1428.559366][ T2117] ? clear_bhb_loop+0x40/0x90 [ 1428.564093][ T2117] ? clear_bhb_loop+0x40/0x90 [ 1428.569360][ T2117] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1428.575428][ T2117] RIP: 0033:0x7f2a5b46e9a9 [ 1428.579907][ T2117] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1428.599680][ T2117] RSP: 002b:00007f2a59acf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1428.608180][ T2117] RAX: ffffffffffffffda RBX: 00007f2a5b695fa0 RCX: 00007f2a5b46e9a9 [ 1428.616254][ T2117] RDX: 0000000000002000 RSI: 0000200000000000 RDI: 0000000000000007 [ 1428.624356][ T2117] RBP: 00007f2a5b4f0d69 R08: 0000000000000000 R09: 0000000000000000 [ 1428.632390][ T2117] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1428.640404][ T2117] R13: 0000000000000000 R14: 00007f2a5b695fa0 R15: 00007ffd726c1658 [ 1428.648440][ T2117] [ 1428.651511][ T2117] ---[ end trace 0000000000000000 ]--- [ 1428.657007][ T2117] SELinux: failed to load policy [ 1428.739277][ T2139] loop4: detected capacity change from 0 to 2048 [ 1428.755474][ T2140] loop2: detected capacity change from 0 to 1024 [ 1428.762351][ T2140] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1428.779831][ T2139] loop4: p1 < > p4 [ 1428.784376][ T2139] loop4: p4 size 8388608 extends beyond EOD, truncated [ 1428.844176][ T2146] loop4: detected capacity change from 0 to 512 [ 1428.851392][ T2146] EXT4-fs: Ignoring removed oldalloc option [ 1428.859152][ T2146] EXT4-fs error (device loop4): ext4_xattr_inode_iget:433: comm syz.4.8940: Parent and EA inode have the same ino 15 [ 1428.871788][ T2146] EXT4-fs (loop4): 1 orphan inode deleted [ 1428.990092][ T2149] loop1: detected capacity change from 0 to 128 [ 1429.055981][ T2150] netlink: 44 bytes leftover after parsing attributes in process `syz.1.8941'. [ 1429.254575][ T2163] loop0: detected capacity change from 0 to 1024 [ 1429.274768][ T2163] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1430.107932][ T2185] loop1: detected capacity change from 0 to 512 [ 1430.163511][ T2185] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 1430.171689][ T2185] EXT4-fs (loop1): orphan cleanup on readonly fs [ 1430.179697][ T2185] EXT4-fs (loop1): 1 orphan inode deleted [ 1430.186395][ T1340] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 1430.196210][ T1340] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:65: Failed to release dquot type 1 [ 1430.270283][ T2194] loop3: detected capacity change from 0 to 512 [ 1430.348818][ T2194] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 1430.357254][ T2194] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1430.367439][ T2194] EXT4-fs (loop3): 1 orphan inode deleted [ 1430.450482][ T2200] loop4: detected capacity change from 0 to 512 [ 1430.512857][ T2200] EXT4-fs: Ignoring removed oldalloc option [ 1430.530694][ T2200] EXT4-fs error (device loop4): ext4_xattr_inode_iget:433: comm syz.4.8958: Parent and EA inode have the same ino 15 [ 1430.599792][ T2200] EXT4-fs (loop4): 1 orphan inode deleted [ 1430.687036][ T1340] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 1430.697027][ T1340] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:65: Failed to release dquot type 1 [ 1430.736233][ T2204] loop2: detected capacity change from 0 to 128 [ 1430.832289][ T2205] netlink: 44 bytes leftover after parsing attributes in process `syz.2.8959'. [ 1430.855584][ T2207] loop1: detected capacity change from 0 to 128 [ 1430.863884][ T2207] ext4 filesystem being mounted at /530/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1430.997007][ T2217] SELinux: syz.3.8963 (2217) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 1431.100065][ T2221] loop3: detected capacity change from 0 to 2048 [ 1431.119578][ T2221] loop3: p1 < > p4 [ 1431.124196][ T2221] loop3: p4 size 8388608 extends beyond EOD, truncated [ 1431.340323][ T30] audit: type=1326 audit(1753252452.979:6809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2223 comm="syz.3.8966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a5b46e9a9 code=0x7ffc0000 [ 1431.363862][ T30] audit: type=1326 audit(1753252452.979:6810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2223 comm="syz.3.8966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a5b46e9a9 code=0x7ffc0000 [ 1431.447750][ T2230] loop4: detected capacity change from 0 to 512 [ 1431.470503][ T2230] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 1431.478774][ T2230] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1431.495791][ T2230] EXT4-fs (loop4): 1 orphan inode deleted [ 1431.509481][ T30] audit: type=1326 audit(1753252453.039:6811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2223 comm="syz.3.8966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=280 compat=0 ip=0x7f2a5b46e9a9 code=0x7ffc0000 [ 1431.533015][ T30] audit: type=1326 audit(1753252453.149:6812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2223 comm="syz.3.8966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a5b46e9a9 code=0x7ffc0000 [ 1431.556480][ T30] audit: type=1326 audit(1753252453.149:6813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2223 comm="syz.3.8966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a5b46e9a9 code=0x7ffc0000 [ 1431.682877][ T2234] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=2234 comm=syz.2.8968 [ 1431.695529][ T2234] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=2234 comm=syz.2.8968 [ 1432.115032][ T1337] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 1432.124936][ T1337] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:64: Failed to release dquot type 1 [ 1432.150083][ T2243] loop2: detected capacity change from 0 to 128 [ 1432.160353][ T2241] loop1: detected capacity change from 0 to 2048 [ 1432.199320][ T2241] loop1: p1 < > p4 [ 1432.211202][ T2241] loop1: p4 size 8388608 extends beyond EOD, truncated [ 1432.219327][ T2243] ext4 filesystem being mounted at /50/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1432.575624][ T2261] loop3: detected capacity change from 0 to 512 [ 1432.647942][ T2262] loop4: detected capacity change from 0 to 512 [ 1432.674763][ T2262] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 1432.683027][ T2262] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1432.692474][ T2262] EXT4-fs (loop4): 1 orphan inode deleted [ 1432.721733][ T2261] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 1432.729894][ T2261] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1432.738039][ T2261] EXT4-fs (loop3): 1 orphan inode deleted [ 1432.792649][ T30] audit: type=1326 audit(1753252454.439:6814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2267 comm="syz.2.8980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff56122e9a9 code=0x7ffc0000 [ 1432.909109][ T30] audit: type=1326 audit(1753252454.459:6815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2267 comm="syz.2.8980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff56122e9a9 code=0x7ffc0000 [ 1432.909513][ T1272] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 1432.932734][ T30] audit: type=1326 audit(1753252454.459:6816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2267 comm="syz.2.8980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7ff56122e9a9 code=0x7ffc0000 [ 1432.932768][ T30] audit: type=1326 audit(1753252454.459:6817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2267 comm="syz.2.8980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff56122e9a9 code=0x7ffc0000 [ 1432.942521][ T1272] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:2: Failed to release dquot type 1 [ 1433.000841][ T30] audit: type=1326 audit(1753252454.459:6818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2267 comm="syz.2.8980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff56122e9a9 code=0x7ffc0000 [ 1433.042234][ T1272] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 1433.052218][ T1272] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:2: Failed to release dquot type 1 [ 1433.141910][ T2278] loop0: detected capacity change from 0 to 2048 [ 1433.152146][ T30] audit: type=1326 audit(1753252454.799:6819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2275 comm="syz.2.8984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff56122e9a9 code=0x7ffc0000 [ 1433.175733][ T30] audit: type=1326 audit(1753252454.799:6820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2275 comm="syz.2.8984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff56122e9a9 code=0x7ffc0000 [ 1433.200093][ T30] audit: type=1326 audit(1753252454.799:6821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2275 comm="syz.2.8984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=280 compat=0 ip=0x7ff56122e9a9 code=0x7ffc0000 [ 1433.209516][ T2278] loop0: p1 < > p4 [ 1433.276174][ T2278] loop0: p4 size 8388608 extends beyond EOD, truncated [ 1433.505466][ T2298] loop3: detected capacity change from 0 to 1024 [ 1433.512529][ T2298] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1433.584941][ T2299] loop1: detected capacity change from 0 to 512 [ 1433.683590][ T2299] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 1433.691865][ T2299] EXT4-fs (loop1): orphan cleanup on readonly fs [ 1433.703389][ T2299] EXT4-fs (loop1): 1 orphan inode deleted [ 1433.750714][ T2308] SELinux: syz.0.8996 (2308) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 1433.998799][ T1272] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:2: Failed to release dquot type 1 [ 1434.131228][ T2316] loop0: detected capacity change from 0 to 2048 [ 1434.169742][ T2316] loop0: p1 < > p4 [ 1434.173930][ T2322] loop4: detected capacity change from 0 to 128 [ 1434.196468][ T2316] loop0: p4 size 8388608 extends beyond EOD, truncated [ 1434.219500][ T2322] ext4 filesystem being mounted at /89/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1434.291472][ T2327] loop1: detected capacity change from 0 to 512 [ 1434.298192][ T2327] EXT4-fs: Ignoring removed oldalloc option [ 1434.307322][ T2327] EXT4-fs error (device loop1): ext4_xattr_inode_iget:433: comm syz.1.9003: Parent and EA inode have the same ino 15 [ 1434.312042][ T2329] loop4: detected capacity change from 0 to 2048 [ 1434.328266][ T2327] EXT4-fs (loop1): 1 orphan inode deleted [ 1434.349606][ T2329] loop4: p1 < > p4 [ 1434.354306][ T2329] loop4: p4 size 8388608 extends beyond EOD, truncated [ 1434.417491][ T2336] loop2: detected capacity change from 0 to 2048 [ 1434.430408][ T2345] loop4: detected capacity change from 0 to 512 [ 1434.437174][ T2345] EXT4-fs: Ignoring removed oldalloc option [ 1434.444221][ T2336] loop2: p1 < > p4 [ 1434.448826][ T2336] loop2: p4 size 8388608 extends beyond EOD, truncated [ 1434.457814][ T2345] EXT4-fs error (device loop4): ext4_xattr_inode_iget:433: comm syz.4.9010: Parent and EA inode have the same ino 15 [ 1434.475670][ T2345] EXT4-fs (loop4): 1 orphan inode deleted [ 1434.528390][ T2350] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=2350 comm=syz.2.9013 [ 1434.541012][ T2350] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=2350 comm=syz.2.9013 [ 1434.583070][ T2353] loop2: detected capacity change from 0 to 1024 [ 1434.590480][ T2353] EXT4-fs: Ignoring removed orlov option [ 1434.596734][ T2353] EXT4-fs (loop2): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 1434.649605][ T2357] loop2: detected capacity change from 0 to 2048 [ 1434.696837][ T2358] loop3: detected capacity change from 0 to 512 [ 1434.705475][ T2357] loop2: p1 < > p4 [ 1434.710384][ T2357] loop2: p4 size 8388608 extends beyond EOD, truncated [ 1434.719941][ T2358] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 1434.728036][ T2358] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1434.737121][ T2358] EXT4-fs (loop3): 1 orphan inode deleted [ 1434.743421][ T1337] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:64: Failed to release dquot type 1 [ 1434.790351][ T2362] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9016'. [ 1434.863997][ T2368] loop2: detected capacity change from 0 to 1024 [ 1434.870860][ T2368] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1434.970745][ T2372] loop1: detected capacity change from 0 to 2048 [ 1434.980907][ T2376] loop2: detected capacity change from 0 to 512 [ 1434.991201][ T2376] ext4 filesystem being mounted at /73/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1434.999498][ T2372] loop1: p1 < > p4 [ 1435.005839][ T2372] loop1: p4 size 8388608 extends beyond EOD, truncated [ 1435.094929][ T2384] loop1: detected capacity change from 0 to 1024 [ 1435.102385][ T2384] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1435.115727][ T2384] EXT4-fs error (device loop1): ext4_map_blocks:816: inode #3: block 1: comm syz.1.9025: lblock 1 mapped to illegal pblock 1 (length 1) [ 1435.133908][ T2384] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.9025: Failed to acquire dquot type 0 [ 1435.145710][ T2384] EXT4-fs error (device loop1): ext4_free_blocks:6587: comm syz.1.9025: Freeing blocks not in datazone - block = 0, count = 4096 [ 1435.160118][ T2384] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.9025: Invalid inode bitmap blk 0 in block_group 0 [ 1435.179168][ T2388] loop4: detected capacity change from 0 to 1024 [ 1435.186047][ T2388] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1435.211472][ T2384] EXT4-fs error (device loop1) in ext4_free_inode:361: Corrupt filesystem [ 1435.236822][ T2384] EXT4-fs (loop1): 1 orphan inode deleted [ 1435.556936][ T2396] loop0: detected capacity change from 0 to 512 [ 1435.565877][ T1337] EXT4-fs error (device loop1): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:64: lblock 1 mapped to illegal pblock 1 (length 1) [ 1435.588141][ T2396] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 1435.596307][ T2396] EXT4-fs (loop0): orphan cleanup on readonly fs [ 1435.604916][ T2396] EXT4-fs (loop0): 1 orphan inode deleted [ 1435.630680][ T1337] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:64: Failed to release dquot type 0 [ 1435.645374][ T2400] loop3: detected capacity change from 0 to 512 [ 1436.065288][ T1337] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:64: Failed to release dquot type 1 [ 1436.476780][ T2409] loop0: detected capacity change from 0 to 1024 [ 1436.483706][ T2409] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1436.495836][ T2412] loop2: detected capacity change from 0 to 128 [ 1436.506961][ T2415] loop1: detected capacity change from 0 to 128 [ 1436.520883][ T2415] ext4 filesystem being mounted at /542/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1436.567514][ T2412] ext4 filesystem being mounted at /74/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1436.634504][ T2421] loop4: detected capacity change from 0 to 2048 [ 1436.640437][ T2423] netlink: 32 bytes leftover after parsing attributes in process `syz.0.9036'. [ 1436.683541][ T2427] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=2427 comm=syz.2.9037 [ 1436.696211][ T2427] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=2427 comm=syz.2.9037 [ 1436.717079][ T2421] loop4: p1 < > p4 [ 1436.730660][ T2429] 9pnet_fd: Insufficient options for proto=fd [ 1436.745902][ T2434] loop3: detected capacity change from 0 to 2048 [ 1436.752984][ T2421] loop4: p4 size 8388608 extends beyond EOD, truncated [ 1436.790373][ T2434] loop3: p1 < > p4 [ 1436.794809][ T2434] loop3: p4 size 8388608 extends beyond EOD, truncated [ 1436.840884][ T2450] loop4: detected capacity change from 0 to 128 [ 1436.924683][ T2450] ext4 filesystem being mounted at /97/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1437.070531][ T2459] loop1: detected capacity change from 0 to 512 [ 1437.277930][ T2459] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 1437.286185][ T2459] EXT4-fs (loop1): orphan cleanup on readonly fs [ 1437.295364][ T2459] EXT4-fs (loop1): 1 orphan inode deleted [ 1437.303275][ T1272] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:2: Failed to release dquot type 1 [ 1437.334634][ T2463] loop4: detected capacity change from 0 to 512 [ 1437.351289][ T2463] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 1437.359583][ T2463] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1437.369269][ T2463] EXT4-fs (loop4): 1 orphan inode deleted [ 1437.375979][ T1337] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:64: Failed to release dquot type 1 [ 1437.602585][ T2467] netlink: 'syz.0.9050': attribute type 4 has an invalid length. [ 1437.632979][ T2472] netlink: 32 bytes leftover after parsing attributes in process `syz.3.9051'. [ 1437.725092][ T2481] FAULT_INJECTION: forcing a failure. [ 1437.725092][ T2481] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1437.738321][ T2481] CPU: 1 UID: 0 PID: 2481 Comm: syz.1.9056 Tainted: G W 6.16.0-rc7-syzkaller #0 PREEMPT(voluntary) [ 1437.738372][ T2481] Tainted: [W]=WARN [ 1437.738381][ T2481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1437.738395][ T2481] Call Trace: [ 1437.738404][ T2481] [ 1437.738414][ T2481] __dump_stack+0x1d/0x30 [ 1437.738440][ T2481] dump_stack_lvl+0xe8/0x140 [ 1437.738479][ T2481] dump_stack+0x15/0x1b [ 1437.738494][ T2481] should_fail_ex+0x265/0x280 [ 1437.738590][ T2481] should_fail+0xb/0x20 [ 1437.738624][ T2481] should_fail_usercopy+0x1a/0x20 [ 1437.738655][ T2481] _copy_from_user+0x1c/0xb0 [ 1437.738733][ T2481] ___sys_sendmsg+0xc1/0x1d0 [ 1437.738785][ T2481] __x64_sys_sendmsg+0xd4/0x160 [ 1437.738831][ T2481] x64_sys_call+0x2999/0x2fb0 [ 1437.738855][ T2481] do_syscall_64+0xd2/0x200 [ 1437.738951][ T2481] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 1437.738986][ T2481] ? clear_bhb_loop+0x40/0x90 [ 1437.739007][ T2481] ? clear_bhb_loop+0x40/0x90 [ 1437.739051][ T2481] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1437.739076][ T2481] RIP: 0033:0x7eff5945e9a9 [ 1437.739092][ T2481] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1437.739109][ T2481] RSP: 002b:00007eff57ac7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1437.739127][ T2481] RAX: ffffffffffffffda RBX: 00007eff59685fa0 RCX: 00007eff5945e9a9 [ 1437.739144][ T2481] RDX: 0000000000000040 RSI: 0000200000009b40 RDI: 0000000000000003 [ 1437.739160][ T2481] RBP: 00007eff57ac7090 R08: 0000000000000000 R09: 0000000000000000 [ 1437.739211][ T2481] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1437.739223][ T2481] R13: 0000000000000000 R14: 00007eff59685fa0 R15: 00007ffddd74b558 [ 1437.739242][ T2481] [ 1437.975493][ T2487] loop0: detected capacity change from 0 to 1024 [ 1437.982389][ T2487] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1438.007291][ T2489] loop1: detected capacity change from 0 to 128 [ 1438.033850][ T2492] 9pnet_fd: Insufficient options for proto=fd [ 1438.060155][ T2489] ext4 filesystem being mounted at /548/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1438.139642][ T2501] loop3: detected capacity change from 0 to 128 [ 1438.160881][ T2501] ext4 filesystem being mounted at /572/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1438.537553][ T2504] SELinux: syz.1.9061 (2504) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 1438.670620][ T2511] netlink: 32 bytes leftover after parsing attributes in process `syz.1.9066'. [ 1438.775143][ T30] kauditd_printk_skb: 284 callbacks suppressed [ 1438.775161][ T30] audit: type=1326 audit(1753252460.419:7098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2512 comm="syz.2.9067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff56122e9a9 code=0x7ffc0000 [ 1438.844661][ T30] audit: type=1326 audit(1753252460.459:7099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2512 comm="syz.2.9067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=280 compat=0 ip=0x7ff56122e9a9 code=0x7ffc0000 [ 1438.868365][ T30] audit: type=1326 audit(1753252460.459:7100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2512 comm="syz.2.9067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff56122e9a9 code=0x7ffc0000 [ 1438.891996][ T30] audit: type=1326 audit(1753252460.469:7101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2512 comm="syz.2.9067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff56122e9a9 code=0x7ffc0000 [ 1438.915778][ T30] audit: type=1326 audit(1753252460.469:7102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2512 comm="syz.2.9067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff56122e9a9 code=0x7ffc0000 [ 1438.939494][ T30] audit: type=1326 audit(1753252460.469:7103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2512 comm="syz.2.9067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff56122e9a9 code=0x7ffc0000 [ 1438.963078][ T30] audit: type=1326 audit(1753252460.469:7104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2512 comm="syz.2.9067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff56122e9a9 code=0x7ffc0000 [ 1438.986636][ T30] audit: type=1326 audit(1753252460.469:7105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2512 comm="syz.2.9067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff56122e9a9 code=0x7ffc0000 [ 1439.010164][ T30] audit: type=1326 audit(1753252460.469:7106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2512 comm="syz.2.9067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff56122e9a9 code=0x7ffc0000 [ 1439.033704][ T30] audit: type=1326 audit(1753252460.469:7107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2512 comm="syz.2.9067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff56122e9a9 code=0x7ffc0000 [ 1439.387022][ T2525] loop3: detected capacity change from 0 to 2048 [ 1439.440475][ T2525] loop3: p1 < > p4 [ 1439.444999][ T2525] loop3: p4 size 8388608 extends beyond EOD, truncated [ 1439.473733][ T2536] 9pnet_fd: Insufficient options for proto=fd [ 1439.694438][ T2548] loop0: detected capacity change from 0 to 512 [ 1439.732298][ T2548] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 1439.777643][ T2548] EXT4-fs (loop0): orphan cleanup on readonly fs [ 1439.797803][ T2548] EXT4-fs (loop0): 1 orphan inode deleted [ 1439.804529][ T1337] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:64: Failed to release dquot type 1 [ 1440.033707][ T2557] ªªªªªª: renamed from vlan0 (while UP) [ 1440.039895][ T2557] FAULT_INJECTION: forcing a failure. [ 1440.039895][ T2557] name failslab, interval 1, probability 0, space 0, times 0 [ 1440.052598][ T2557] CPU: 1 UID: 0 PID: 2557 Comm: syz.2.9079 Tainted: G W 6.16.0-rc7-syzkaller #0 PREEMPT(voluntary) [ 1440.052750][ T2557] Tainted: [W]=WARN [ 1440.052758][ T2557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1440.052773][ T2557] Call Trace: [ 1440.052781][ T2557] [ 1440.052789][ T2557] __dump_stack+0x1d/0x30 [ 1440.052811][ T2557] dump_stack_lvl+0xe8/0x140 [ 1440.052889][ T2557] dump_stack+0x15/0x1b [ 1440.052911][ T2557] should_fail_ex+0x265/0x280 [ 1440.052944][ T2557] should_failslab+0x8c/0xb0 [ 1440.052972][ T2557] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 1440.053050][ T2557] ? kstrdup_const+0x3e/0x50 [ 1440.053085][ T2557] ? __schedule+0x6a8/0xb30 [ 1440.053124][ T2557] kstrdup+0x3e/0xd0 [ 1440.053181][ T2557] kstrdup_const+0x3e/0x50 [ 1440.053202][ T2557] kernfs_rename_ns+0x22c/0x410 [ 1440.053230][ T2557] sysfs_rename_link_ns+0xfc/0x120 [ 1440.053261][ T2557] device_rename+0xd2/0x180 [ 1440.053311][ T2557] netif_change_name+0x1eb/0x6b0 [ 1440.053348][ T2557] dev_change_name+0xc0/0x170 [ 1440.053449][ T2557] dev_ifsioc+0x302/0xaa0 [ 1440.053469][ T2557] dev_ioctl+0x4a7/0x960 [ 1440.053492][ T2557] sock_do_ioctl+0x197/0x220 [ 1440.053525][ T2557] sock_ioctl+0x41b/0x610 [ 1440.053597][ T2557] ? __pfx_sock_ioctl+0x10/0x10 [ 1440.053620][ T2557] __se_sys_ioctl+0xcb/0x140 [ 1440.053655][ T2557] __x64_sys_ioctl+0x43/0x50 [ 1440.053758][ T2557] x64_sys_call+0x19a8/0x2fb0 [ 1440.053782][ T2557] do_syscall_64+0xd2/0x200 [ 1440.053801][ T2557] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 1440.053830][ T2557] ? clear_bhb_loop+0x40/0x90 [ 1440.053900][ T2557] ? clear_bhb_loop+0x40/0x90 [ 1440.053929][ T2557] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1440.053955][ T2557] RIP: 0033:0x7ff56122e9a9 [ 1440.053971][ T2557] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1440.054028][ T2557] RSP: 002b:00007ff55f897038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1440.054061][ T2557] RAX: ffffffffffffffda RBX: 00007ff561455fa0 RCX: 00007ff56122e9a9 [ 1440.054077][ T2557] RDX: 0000200000000000 RSI: 0000000000008923 RDI: 0000000000000004 [ 1440.054088][ T2557] RBP: 00007ff55f897090 R08: 0000000000000000 R09: 0000000000000000 [ 1440.054099][ T2557] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1440.054111][ T2557] R13: 0000000000000000 R14: 00007ff561455fa0 R15: 00007ffd5cbea9c8 [ 1440.054132][ T2557] [ 1440.317877][ T2559] loop4: detected capacity change from 0 to 1024 [ 1440.325318][ T2559] EXT4-fs: Ignoring removed orlov option [ 1440.333457][ T2559] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 1440.435466][ T2570] loop4: detected capacity change from 0 to 128 [ 1440.445755][ T2570] ext4 filesystem being mounted at /104/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1440.502154][ T2574] loop2: detected capacity change from 0 to 1024 [ 1440.509325][ T2574] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1441.484585][ T2582] loop4: detected capacity change from 0 to 2048 [ 1441.515047][ T2584] loop3: detected capacity change from 0 to 2048 [ 1441.532086][ T2589] loop0: detected capacity change from 0 to 1024 [ 1441.538894][ T2589] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1441.562557][ T2588] 9pnet_fd: Insufficient options for proto=fd [ 1441.569523][ T2584] loop3: p1 < > p4 [ 1441.573635][ T2582] loop4: p1 < > p4 [ 1441.578244][ T2584] loop3: p4 size 8388608 extends beyond EOD, truncated [ 1441.586691][ T2582] loop4: p4 size 8388608 extends beyond EOD, truncated [ 1441.678299][ T2600] blktrace: Concurrent blktraces are not allowed on sg0 [ 1441.840158][ T2608] loop4: detected capacity change from 0 to 128 [ 1441.849430][ T2608] ext4 filesystem being mounted at /109/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1442.732872][ T2620] loop4: detected capacity change from 0 to 512 [ 1442.739693][ T2620] EXT4-fs: Ignoring removed oldalloc option [ 1442.760236][ T2620] EXT4-fs error (device loop4): ext4_xattr_inode_iget:433: comm syz.4.9097: Parent and EA inode have the same ino 15 [ 1442.777606][ T2620] EXT4-fs (loop4): 1 orphan inode deleted [ 1442.792017][ T2623] loop1: detected capacity change from 0 to 2048 [ 1442.801177][ T2626] loop2: detected capacity change from 0 to 2048 [ 1442.849270][ T2628] loop0: detected capacity change from 0 to 2048 [ 1442.869465][ T2629] loop3: detected capacity change from 0 to 512 [ 1442.909579][ T2628] loop0: p1 < > p4 [ 1442.916374][ T2626] loop2: p1 < > p4 [ 1442.920899][ T2623] loop1: p1 < > p4 [ 1442.926337][ T2629] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 1442.934533][ T2629] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1442.943190][ T2629] EXT4-fs (loop3): 1 orphan inode deleted [ 1442.961167][ T2626] loop2: p4 size 8388608 extends beyond EOD, truncated [ 1442.968862][ T2628] loop0: p4 size 8388608 extends beyond EOD, truncated [ 1442.976180][ T2623] loop1: p4 size 8388608 extends beyond EOD, truncated [ 1443.202816][ T1337] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:64: Failed to release dquot type 1 [ 1443.285948][ T2642] loop0: detected capacity change from 0 to 1024 [ 1443.292839][ T2642] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1443.377367][ T2652] 9pnet_fd: Insufficient options for proto=fd [ 1443.561400][ T2660] 9pnet_fd: Insufficient options for proto=fd [ 1443.782236][ T30] kauditd_printk_skb: 321 callbacks suppressed [ 1443.782256][ T30] audit: type=1326 audit(1753252465.429:7427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2647 comm="syz.1.9109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7eff59455967 code=0x7ffc0000 [ 1443.812046][ T30] audit: type=1326 audit(1753252465.429:7428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2647 comm="syz.1.9109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7eff593fab89 code=0x7ffc0000 [ 1443.835486][ T30] audit: type=1326 audit(1753252465.429:7429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2647 comm="syz.1.9109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff5945e9a9 code=0x7ffc0000 [ 1443.859285][ T30] audit: type=1326 audit(1753252465.439:7430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2647 comm="syz.1.9109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7eff59455967 code=0x7ffc0000 [ 1443.882982][ T30] audit: type=1326 audit(1753252465.439:7431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2647 comm="syz.1.9109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7eff593fab89 code=0x7ffc0000 [ 1443.906454][ T30] audit: type=1326 audit(1753252465.439:7432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2647 comm="syz.1.9109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff5945e9a9 code=0x7ffc0000 [ 1443.930053][ T30] audit: type=1326 audit(1753252465.449:7433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2647 comm="syz.1.9109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7eff59455967 code=0x7ffc0000 [ 1443.953521][ T30] audit: type=1326 audit(1753252465.449:7434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2647 comm="syz.1.9109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7eff593fab89 code=0x7ffc0000 [ 1443.976906][ T30] audit: type=1326 audit(1753252465.449:7435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2647 comm="syz.1.9109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff5945e9a9 code=0x7ffc0000 [ 1444.001382][ T30] audit: type=1326 audit(1753252465.459:7436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2647 comm="syz.1.9109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7eff59455967 code=0x7ffc0000 [ 1444.068523][ T2668] loop0: detected capacity change from 0 to 2048 [ 1444.109972][ T2668] loop0: p1 < > p4 [ 1444.115809][ T2668] loop0: p4 size 8388608 extends beyond EOD, truncated [ 1444.226064][ T2677] loop4: detected capacity change from 0 to 1024 [ 1444.233509][ T2677] EXT4-fs: Ignoring removed orlov option [ 1444.241317][ T2677] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 1444.254108][ T2679] FAULT_INJECTION: forcing a failure. [ 1444.254108][ T2679] name failslab, interval 1, probability 0, space 0, times 0 [ 1444.266980][ T2679] CPU: 1 UID: 0 PID: 2679 Comm: syz.1.9120 Tainted: G W 6.16.0-rc7-syzkaller #0 PREEMPT(voluntary) [ 1444.267016][ T2679] Tainted: [W]=WARN [ 1444.267024][ T2679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1444.267040][ T2679] Call Trace: [ 1444.267049][ T2679] [ 1444.267060][ T2679] __dump_stack+0x1d/0x30 [ 1444.267129][ T2679] dump_stack_lvl+0xe8/0x140 [ 1444.267150][ T2679] dump_stack+0x15/0x1b [ 1444.267166][ T2679] should_fail_ex+0x265/0x280 [ 1444.267204][ T2679] should_failslab+0x8c/0xb0 [ 1444.267232][ T2679] kmem_cache_alloc_node_noprof+0x57/0x320 [ 1444.267327][ T2679] ? __alloc_skb+0x101/0x320 [ 1444.267365][ T2679] __alloc_skb+0x101/0x320 [ 1444.267448][ T2679] ? audit_log_start+0x365/0x6c0 [ 1444.267532][ T2679] audit_log_start+0x380/0x6c0 [ 1444.267576][ T2679] audit_seccomp+0x48/0x100 [ 1444.267609][ T2679] ? __seccomp_filter+0x68c/0x10d0 [ 1444.267632][ T2679] __seccomp_filter+0x69d/0x10d0 [ 1444.267727][ T2679] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1444.267768][ T2679] ? vfs_write+0x75e/0x8e0 [ 1444.267811][ T2679] ? 0xffffffff81000000 [ 1444.267872][ T2679] __secure_computing+0x82/0x150 [ 1444.267894][ T2679] syscall_trace_enter+0xcf/0x1e0 [ 1444.267968][ T2679] do_syscall_64+0xac/0x200 [ 1444.268045][ T2679] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 1444.268070][ T2679] ? clear_bhb_loop+0x40/0x90 [ 1444.268090][ T2679] ? clear_bhb_loop+0x40/0x90 [ 1444.268193][ T2679] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1444.268220][ T2679] RIP: 0033:0x7eff5945e9a9 [ 1444.268239][ T2679] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1444.268295][ T2679] RSP: 002b:00007eff57ac7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1444.268318][ T2679] RAX: ffffffffffffffda RBX: 00007eff59685fa0 RCX: 00007eff5945e9a9 [ 1444.268331][ T2679] RDX: 0000000000000000 RSI: 000000000000010b RDI: 0000000000000000 [ 1444.268385][ T2679] RBP: 00007eff57ac7090 R08: ffffffff81000000 R09: 0000000000000002 [ 1444.268400][ T2679] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1444.268414][ T2679] R13: 0000000000000000 R14: 00007eff59685fa0 R15: 00007ffddd74b558 [ 1444.268433][ T2679] ? 0xffffffff81000000 [ 1444.268467][ T2679] [ 1444.501773][ T2680] loop2: detected capacity change from 0 to 512 [ 1444.640282][ T2680] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 1444.648476][ T2680] EXT4-fs (loop2): orphan cleanup on readonly fs [ 1444.661562][ T2687] loop1: detected capacity change from 0 to 1024 [ 1444.668452][ T2687] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1444.688888][ T2680] EXT4-fs (loop2): 1 orphan inode deleted [ 1444.722689][ T1272] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:2: Failed to release dquot type 1 [ 1444.810808][ T2695] loop0: detected capacity change from 0 to 2048 [ 1444.851355][ T2703] loop1: detected capacity change from 0 to 2048 [ 1444.869404][ T2695] loop0: p1 < > p4 [ 1444.873957][ T2695] loop0: p4 size 8388608 extends beyond EOD, truncated [ 1444.889438][ T2703] loop1: p1 < > p4 [ 1444.894111][ T2703] loop1: p4 size 8388608 extends beyond EOD, truncated [ 1445.011468][ T2705] loop4: detected capacity change from 0 to 512 [ 1445.109661][ T2705] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 1445.117820][ T2705] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1445.140984][ T2705] EXT4-fs (loop4): 1 orphan inode deleted [ 1445.147047][ T1337] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:64: Failed to release dquot type 1 [ 1445.298089][ T2717] loop2: detected capacity change from 0 to 512 [ 1445.318662][ T2717] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 1445.326991][ T2717] EXT4-fs (loop2): orphan cleanup on readonly fs [ 1445.335995][ T2717] EXT4-fs (loop2): 1 orphan inode deleted [ 1445.343261][ T1312] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:37: Failed to release dquot type 1 [ 1445.663530][ T2724] FAULT_INJECTION: forcing a failure. [ 1445.663530][ T2724] name failslab, interval 1, probability 0, space 0, times 0 [ 1445.676324][ T2724] CPU: 0 UID: 0 PID: 2724 Comm: syz.3.9132 Tainted: G W 6.16.0-rc7-syzkaller #0 PREEMPT(voluntary) [ 1445.676365][ T2724] Tainted: [W]=WARN [ 1445.676374][ T2724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1445.676390][ T2724] Call Trace: [ 1445.676400][ T2724] [ 1445.676411][ T2724] __dump_stack+0x1d/0x30 [ 1445.676439][ T2724] dump_stack_lvl+0xe8/0x140 [ 1445.676475][ T2724] dump_stack+0x15/0x1b [ 1445.676496][ T2724] should_fail_ex+0x265/0x280 [ 1445.676535][ T2724] should_failslab+0x8c/0xb0 [ 1445.676562][ T2724] kmem_cache_alloc_node_noprof+0x57/0x320 [ 1445.676598][ T2724] ? __alloc_skb+0x101/0x320 [ 1445.676632][ T2724] __alloc_skb+0x101/0x320 [ 1445.676666][ T2724] netlink_alloc_large_skb+0xba/0xf0 [ 1445.676729][ T2724] netlink_sendmsg+0x3cf/0x6b0 [ 1445.676757][ T2724] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1445.676811][ T2724] __sock_sendmsg+0x145/0x180 [ 1445.676836][ T2724] ____sys_sendmsg+0x31e/0x4e0 [ 1445.676873][ T2724] ___sys_sendmsg+0x17b/0x1d0 [ 1445.676968][ T2724] __x64_sys_sendmsg+0xd4/0x160 [ 1445.677018][ T2724] x64_sys_call+0x2999/0x2fb0 [ 1445.677044][ T2724] do_syscall_64+0xd2/0x200 [ 1445.677067][ T2724] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 1445.677109][ T2724] ? clear_bhb_loop+0x40/0x90 [ 1445.677135][ T2724] ? clear_bhb_loop+0x40/0x90 [ 1445.677173][ T2724] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1445.677227][ T2724] RIP: 0033:0x7f2a5b46e9a9 [ 1445.677313][ T2724] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1445.677334][ T2724] RSP: 002b:00007f2a59acf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1445.677432][ T2724] RAX: ffffffffffffffda RBX: 00007f2a5b695fa0 RCX: 00007f2a5b46e9a9 [ 1445.677449][ T2724] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000004 [ 1445.677464][ T2724] RBP: 00007f2a59acf090 R08: 0000000000000000 R09: 0000000000000000 [ 1445.677479][ T2724] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1445.677492][ T2724] R13: 0000000000000000 R14: 00007f2a5b695fa0 R15: 00007ffd726c1658 [ 1445.677511][ T2724] [ 1445.891223][ T641] EXT4-fs unmount: 108 callbacks suppressed [ 1445.891242][ T641] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1445.937813][ T1537] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1445.982725][ T2732] SELinux: syz.4.9133 (2732) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 1446.063693][ T2735] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9138'. [ 1446.290394][ T2748] loop3: detected capacity change from 0 to 512 [ 1446.532333][ T2755] loop1: detected capacity change from 0 to 512 [ 1446.549893][ T2748] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 1446.558112][ T2748] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1446.569847][ T2748] EXT4-fs (loop3): 1 orphan inode deleted [ 1446.577796][ T2755] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 1446.586163][ T2755] EXT4-fs (loop1): orphan cleanup on readonly fs [ 1446.598454][ T2755] EXT4-fs (loop1): 1 orphan inode deleted [ 1446.638159][ T2744] blktrace: Concurrent blktraces are not allowed on sg0 [ 1446.695329][ T2760] loop0: detected capacity change from 0 to 1024 [ 1446.703862][ T2747] loop2: detected capacity change from 0 to 2048 [ 1446.726807][ T2760] EXT4-fs: Ignoring removed orlov option [ 1446.749860][ T2760] EXT4-fs (loop0): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 1446.769652][ T2747] loop2: p1 < > p4 [ 1446.802176][ T2747] loop2: p4 size 8388608 extends beyond EOD, truncated [ 1446.811128][ T2760] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1446.901759][ T1272] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:2: Failed to release dquot type 1 [ 1446.922536][ T1272] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:2: Failed to release dquot type 1 [ 1446.922923][ T2748] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1446.958774][ T2755] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1446.982185][T24978] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1447.002780][ T2770] loop0: detected capacity change from 0 to 512 [ 1447.010116][ T2770] EXT4-fs (loop0): #blocks per group too big: 466944 [ 1447.170113][T24845] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1447.188069][T25138] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1447.306104][ T2774] netlink: 2048 bytes leftover after parsing attributes in process `syz.1.9147'. [ 1447.315381][ T2774] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9147'. [ 1447.986262][ T2787] netlink: 'syz.0.9151': attribute type 3 has an invalid length. [ 1447.995021][ T2789] SELinux: syz.2.9152 (2789) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 1448.032060][ T2787] loop0: detected capacity change from 0 to 1024 [ 1448.053221][ T2787] ext4: Unknown parameter 'audit' [ 1448.153453][ T2793] loop3: detected capacity change from 0 to 512 [ 1448.171317][ T2794] loop1: detected capacity change from 0 to 2048 [ 1448.183562][ T2794] xt_hashlimit: max too large, truncated to 1048576 [ 1448.197715][ T2793] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1448.211568][ T2793] ext4 filesystem being mounted at /589/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1448.251689][ T2800] loop0: detected capacity change from 0 to 2048 [ 1448.300045][ T2800] loop0: p1 < > p4 [ 1448.305357][ T2800] loop0: p4 size 8388608 extends beyond EOD, truncated [ 1448.475510][ T2814] loop2: detected capacity change from 0 to 1024 [ 1448.485283][ T2814] EXT4-fs: Ignoring removed orlov option [ 1448.493962][ T2814] EXT4-fs (loop2): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 1448.570245][ T2818] loop1: detected capacity change from 0 to 512 [ 1448.661481][ T2818] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 1448.669662][ T2818] EXT4-fs (loop1): orphan cleanup on readonly fs [ 1448.678389][ T2818] EXT4-fs (loop1): 1 orphan inode deleted [ 1448.688887][ T2814] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1449.334905][ T1272] __quota_error: 170 callbacks suppressed [ 1449.334982][ T1272] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 1449.350721][ T1272] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:2: Failed to release dquot type 1 [ 1449.365807][ T2830] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=2830 comm=syz.0.9165 [ 1449.378504][ T2830] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=2830 comm=syz.0.9165 [ 1449.393343][ T2818] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1449.406990][ T1537] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1449.438296][ T2832] loop4: detected capacity change from 0 to 1024 [ 1449.445772][ T2832] EXT4-fs: Ignoring removed orlov option [ 1449.454085][ T2832] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 1449.478201][ T30] audit: type=1400 audit(1753252471.119:7600): avc: denied { create } for pid=2833 comm="syz.2.9163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1449.514970][ T2832] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1449.530438][ T2834] loop2: detected capacity change from 0 to 512 [ 1449.537424][ T2834] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1449.560068][ T2838] loop0: detected capacity change from 0 to 128 [ 1449.566513][ T30] audit: type=1400 audit(1753252471.149:7601): avc: denied { connect } for pid=2833 comm="syz.2.9163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1449.586313][ T30] audit: type=1400 audit(1753252471.149:7602): avc: denied { write } for pid=2833 comm="syz.2.9163" path="socket:[94877]" dev="sockfs" ino=94877 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1449.612444][T24845] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1449.881235][ T2845] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9167'. [ 1449.891373][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1449.897872][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1449.905755][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1449.913623][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1449.921484][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1449.929374][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1449.937209][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1449.945078][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1449.952962][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1449.960874][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1449.968728][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1449.976601][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1449.984485][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1449.992365][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1450.000212][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1450.008058][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1450.015922][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1450.023804][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1450.031654][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1450.039613][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1450.047428][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1450.055313][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1450.063181][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1450.071065][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1450.078923][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1450.086791][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1450.094650][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1450.102518][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1450.110378][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1450.116487][ T2847] FAULT_INJECTION: forcing a failure. [ 1450.116487][ T2847] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1450.118235][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1450.131319][ T2847] CPU: 1 UID: 0 PID: 2847 Comm: syz.1.9169 Tainted: G W 6.16.0-rc7-syzkaller #0 PREEMPT(voluntary) [ 1450.131366][ T2847] Tainted: [W]=WARN [ 1450.131376][ T2847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1450.131388][ T2847] Call Trace: [ 1450.131449][ T2847] [ 1450.131462][ T2847] __dump_stack+0x1d/0x30 [ 1450.131492][ T2847] dump_stack_lvl+0xe8/0x140 [ 1450.131519][ T2847] dump_stack+0x15/0x1b [ 1450.131543][ T2847] should_fail_ex+0x265/0x280 [ 1450.131652][ T2847] should_fail+0xb/0x20 [ 1450.131705][ T2847] should_fail_usercopy+0x1a/0x20 [ 1450.131813][ T2847] strncpy_from_user+0x25/0x230 [ 1450.131860][ T2847] ? kmem_cache_alloc_noprof+0x186/0x310 [ 1450.131897][ T2847] ? getname_flags+0x80/0x3b0 [ 1450.131967][ T2847] getname_flags+0xae/0x3b0 [ 1450.131997][ T2847] do_sys_openat2+0x60/0x110 [ 1450.132073][ T2847] __x64_sys_openat+0xf2/0x120 [ 1450.132110][ T2847] x64_sys_call+0x1af/0x2fb0 [ 1450.132139][ T2847] do_syscall_64+0xd2/0x200 [ 1450.132168][ T2847] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 1450.132264][ T2847] ? clear_bhb_loop+0x40/0x90 [ 1450.132294][ T2847] ? clear_bhb_loop+0x40/0x90 [ 1450.132325][ T2847] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1450.132354][ T2847] RIP: 0033:0x7eff5945e9a9 [ 1450.132375][ T2847] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1450.132419][ T2847] RSP: 002b:00007eff57a85038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1450.132446][ T2847] RAX: ffffffffffffffda RBX: 00007eff59686160 RCX: 00007eff5945e9a9 [ 1450.132464][ T2847] RDX: 0000000000000000 RSI: 0000200000000180 RDI: ffffffffffffff9c [ 1450.132483][ T2847] RBP: 00007eff57a85090 R08: 0000000000000000 R09: 0000000000000000 [ 1450.132509][ T2847] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1450.132527][ T2847] R13: 0000000000000000 R14: 00007eff59686160 R15: 00007ffddd74b558 [ 1450.132553][ T2847] [ 1450.334010][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1450.341880][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1450.349750][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1450.366119][ T641] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1450.415575][ T2851] loop4: detected capacity change from 0 to 2048 [ 1450.446646][ T2853] loop2: detected capacity change from 0 to 1024 [ 1450.453826][ T2853] EXT4-fs: Ignoring removed orlov option [ 1450.460016][ T2853] EXT4-fs (loop2): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 1450.470660][ T2851] loop4: p1 < > p4 [ 1450.475608][ T2851] loop4: p4 size 8388608 extends beyond EOD, truncated [ 1450.485167][ T2853] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1450.518266][ T1537] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1450.583172][ T2859] loop2: detected capacity change from 0 to 2048 [ 1450.631624][ T2859] loop2: p1 < > p4 [ 1450.638945][ T2859] loop2: p4 size 8388608 extends beyond EOD, truncated [ 1450.691505][ T2865] loop2: detected capacity change from 0 to 1024 [ 1450.698199][ T2865] EXT4-fs: Ignoring removed orlov option [ 1450.712537][ T2865] EXT4-fs (loop2): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 1450.727254][ T2867] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=2867 comm=syz.1.9177 [ 1450.740031][ T2867] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=2867 comm=syz.1.9177 [ 1450.785982][ T2865] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1450.890784][ T1537] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1450.913198][ T2876] SELinux: syz.2.9180 (2876) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 1450.970498][ T2880] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=2880 comm=syz.0.9181 [ 1450.983212][ T2880] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=2880 comm=syz.0.9181 [ 1451.030325][ T2882] 9pnet_fd: Insufficient options for proto=fd [ 1451.049752][ T2887] 9pnet_fd: Insufficient options for proto=fd [ 1451.058180][ T2887] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1451.169317][T25138] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1451.189246][ T2891] xt_hashlimit: max too large, truncated to 1048576 [ 1451.231182][ T2893] loop3: detected capacity change from 0 to 2048 [ 1451.269254][ T2893] loop3: p1 < > p4 [ 1451.273801][ T2893] loop3: p4 size 8388608 extends beyond EOD, truncated [ 1451.310588][ T2895] loop3: detected capacity change from 0 to 512 [ 1451.317222][ T2895] EXT4-fs: Ignoring removed oldalloc option [ 1451.325173][ T2895] EXT4-fs error (device loop3): ext4_xattr_inode_iget:433: comm syz.3.9186: Parent and EA inode have the same ino 15 [ 1451.337952][ T2895] EXT4-fs (loop3): 1 orphan inode deleted [ 1451.344291][ T2895] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1451.471601][ T2899] loop4: detected capacity change from 0 to 1024 [ 1451.478507][ T2899] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1451.490273][ T2899] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1451.575823][ T2905] loop1: detected capacity change from 0 to 512 [ 1451.590582][ T2905] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1451.603536][ T2905] ext4 filesystem being mounted at /579/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1451.616678][ T30] audit: type=1326 audit(1753252473.269:7603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2902 comm="syz.0.9188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f910a55e9a9 code=0x7ffc0000 [ 1451.642658][ T30] audit: type=1326 audit(1753252473.269:7604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2902 comm="syz.0.9188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f910a55e9a9 code=0x7ffc0000 [ 1451.644214][ T2908] blktrace: Concurrent blktraces are not allowed on sg0 [ 1451.666282][ T30] audit: type=1326 audit(1753252473.269:7605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2902 comm="syz.0.9188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f910a55e9a9 code=0x7ffc0000 [ 1451.696675][ T30] audit: type=1326 audit(1753252473.289:7606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2902 comm="syz.0.9188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f910a55e9a9 code=0x7ffc0000 [ 1451.720260][ T30] audit: type=1326 audit(1753252473.289:7607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2902 comm="syz.0.9188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f910a55e9a9 code=0x7ffc0000 [ 1451.743835][ T30] audit: type=1326 audit(1753252473.289:7608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2909 comm="syz.0.9188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f910a591265 code=0x7ffc0000 [ 1451.886871][T25138] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1452.617728][ T2923] loop3: detected capacity change from 0 to 512 [ 1452.953648][ T2922] loop2: detected capacity change from 0 to 512 [ 1452.990639][ T2923] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 1452.998753][ T2923] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1453.009078][ T2922] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 1453.017159][ T2922] EXT4-fs (loop2): orphan cleanup on readonly fs [ 1453.024580][ T2922] EXT4-fs (loop2): 1 orphan inode deleted [ 1453.030702][ T1286] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:11: Failed to release dquot type 1 [ 1453.043197][ T2923] EXT4-fs (loop3): 1 orphan inode deleted [ 1453.056824][ T2922] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1453.071143][ T1286] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:11: Failed to release dquot type 1 [ 1453.109301][ T641] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1453.109413][ T2923] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1453.294201][ T1537] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1453.303965][T25138] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1453.370194][ T2938] loop2: detected capacity change from 0 to 2048 [ 1453.399340][ T2938] loop2: p1 < > p4 [ 1453.411453][ T2938] loop2: p4 size 8388608 extends beyond EOD, truncated [ 1453.502117][ T2946] loop2: detected capacity change from 0 to 1024 [ 1453.528787][ T2946] EXT4-fs: Ignoring removed orlov option [ 1453.543422][ T2946] EXT4-fs (loop2): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 1453.602091][ T2946] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1453.651651][ T1537] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1453.685398][ T2953] netlink: 44 bytes leftover after parsing attributes in process `syz.2.9200'. [ 1453.726535][ T2953] netlink: 'syz.2.9200': attribute type 3 has an invalid length. [ 1453.848793][ T2959] new mount options do not match the existing superblock, will be ignored [ 1453.956786][ T2959] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9202'. [ 1453.965818][ T2959] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9202'. [ 1453.985043][ T2959] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9202'. [ 1453.994166][ T2959] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9202'. [ 1454.066117][ T2959] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9202'. [ 1454.075204][ T2959] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9202'. [ 1454.085946][ T2967] blktrace: Concurrent blktraces are not allowed on sg0 [ 1454.188408][ T2974] loop2: detected capacity change from 0 to 1024 [ 1454.195808][ T2974] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1454.275572][ T2987] xt_hashlimit: max too large, truncated to 1048576 [ 1454.311374][ T2974] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1454.341012][ T2986] loop3: detected capacity change from 0 to 2048 [ 1454.355466][ T2995] netlink: 'syz.0.9212': attribute type 3 has an invalid length. [ 1454.369053][ T2986] loop3: p1 < > p4 [ 1454.378836][ T2986] loop3: p4 size 8388608 extends beyond EOD, truncated [ 1454.434523][ T2999] loop3: detected capacity change from 0 to 1024 [ 1454.441366][ T2999] EXT4-fs: Ignoring removed orlov option [ 1454.449236][ T2999] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1454.468434][ T2999] FAULT_INJECTION: forcing a failure. [ 1454.468434][ T2999] name failslab, interval 1, probability 0, space 0, times 0 [ 1454.481167][ T2999] CPU: 1 UID: 0 PID: 2999 Comm: syz.3.9214 Tainted: G W 6.16.0-rc7-syzkaller #0 PREEMPT(voluntary) [ 1454.481252][ T2999] Tainted: [W]=WARN [ 1454.481259][ T2999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1454.481271][ T2999] Call Trace: [ 1454.481278][ T2999] [ 1454.481286][ T2999] __dump_stack+0x1d/0x30 [ 1454.481311][ T2999] dump_stack_lvl+0xe8/0x140 [ 1454.481342][ T2999] dump_stack+0x15/0x1b [ 1454.481439][ T2999] should_fail_ex+0x265/0x280 [ 1454.481474][ T2999] should_failslab+0x8c/0xb0 [ 1454.481495][ T2999] __kmalloc_noprof+0xa5/0x3e0 [ 1454.481599][ T2999] ? iter_file_splice_write+0xfe/0x970 [ 1454.481653][ T2999] iter_file_splice_write+0xfe/0x970 [ 1454.481690][ T2999] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1454.481775][ T2999] direct_splice_actor+0x156/0x2a0 [ 1454.481847][ T2999] ? ext4_release_file+0x141/0x1c0 [ 1454.481877][ T2999] splice_direct_to_actor+0x312/0x680 [ 1454.481978][ T2999] ? __pfx_direct_splice_actor+0x10/0x10 [ 1454.482010][ T2999] do_splice_direct+0xda/0x150 [ 1454.482046][ T2999] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1454.482090][ T2999] do_sendfile+0x380/0x650 [ 1454.482164][ T2999] __x64_sys_sendfile64+0x105/0x150 [ 1454.482186][ T2999] x64_sys_call+0xb39/0x2fb0 [ 1454.482208][ T2999] do_syscall_64+0xd2/0x200 [ 1454.482246][ T2999] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 1454.482273][ T2999] ? clear_bhb_loop+0x40/0x90 [ 1454.482305][ T2999] ? clear_bhb_loop+0x40/0x90 [ 1454.482333][ T2999] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1454.482354][ T2999] RIP: 0033:0x7f2a5b46e9a9 [ 1454.482440][ T2999] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1454.482460][ T2999] RSP: 002b:00007f2a59acf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1454.482484][ T2999] RAX: ffffffffffffffda RBX: 00007f2a5b695fa0 RCX: 00007f2a5b46e9a9 [ 1454.482500][ T2999] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000005 [ 1454.482516][ T2999] RBP: 00007f2a59acf090 R08: 0000000000000000 R09: 0000000000000000 [ 1454.482534][ T2999] R10: 000000007ffff000 R11: 0000000000000246 R12: 0000000000000001 [ 1454.482546][ T2999] R13: 0000000000000000 R14: 00007f2a5b695fa0 R15: 00007ffd726c1658 [ 1454.482565][ T2999] [ 1454.718250][ T3004] loop0: detected capacity change from 0 to 1024 [ 1454.725279][ T3004] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1454.740761][ T3006] loop4: detected capacity change from 0 to 128 [ 1454.761425][T24845] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1454.784965][ T3006] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1454.819692][ T3006] ext4 filesystem being mounted at /131/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1454.860268][ T3004] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1455.074335][ T3011] chnl_net:caif_netlink_parms(): no params data found [ 1455.115506][ T3011] bridge0: port 1(bridge_slave_0) entered blocking state [ 1455.122727][ T3011] bridge0: port 1(bridge_slave_0) entered disabled state [ 1455.132315][ T3011] bridge_slave_0: entered allmulticast mode [ 1455.139033][ T3011] bridge_slave_0: entered promiscuous mode [ 1455.145974][ T3011] bridge0: port 2(bridge_slave_1) entered blocking state [ 1455.153122][ T3011] bridge0: port 2(bridge_slave_1) entered disabled state [ 1455.162273][ T3011] bridge_slave_1: entered allmulticast mode [ 1455.169054][ T3011] bridge_slave_1: entered promiscuous mode [ 1455.189846][ T3011] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1455.204118][ T3011] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1455.227283][ T3011] team0: Port device team_slave_0 added [ 1455.234142][ T3011] team0: Port device team_slave_1 added [ 1455.262085][ T3011] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1455.269139][ T3011] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1455.295192][ T3011] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1455.308792][ T3011] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1455.315779][ T3011] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1455.341807][ T3011] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1455.375035][ T3011] hsr_slave_0: entered promiscuous mode [ 1455.381226][ T3011] hsr_slave_1: entered promiscuous mode [ 1455.387209][ T3011] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1455.396247][ T3011] Cannot create hsr debugfs directory [ 1455.414101][ T1537] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1455.439253][ T641] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1455.452119][T25138] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1455.545719][ T3034] loop1: detected capacity change from 0 to 1024 [ 1455.598888][ T3034] EXT4-fs: Ignoring removed orlov option [ 1455.624857][ T30] kauditd_printk_skb: 485 callbacks suppressed [ 1455.624872][ T30] audit: type=1326 audit(1753252477.269:8092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3036 comm="syz.2.9222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff56122e9a9 code=0x7ffc0000 [ 1455.654886][ T30] audit: type=1326 audit(1753252477.269:8093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3036 comm="syz.2.9222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7ff56122e9a9 code=0x7ffc0000 [ 1455.687728][ T3037] blktrace: Concurrent blktraces are not allowed on sg0 [ 1455.700603][ T3034] EXT4-fs: dax option not supported [ 1455.853601][ T1272] bridge_slave_1: left allmulticast mode [ 1455.859567][ T1272] bridge_slave_1: left promiscuous mode [ 1455.865423][ T1272] bridge0: port 2(bridge_slave_1) entered disabled state [ 1455.883200][ T30] audit: type=1326 audit(1753252477.329:8094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3036 comm="syz.2.9222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff56122e9a9 code=0x7ffc0000 [ 1455.906925][ T30] audit: type=1326 audit(1753252477.329:8095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3036 comm="syz.2.9222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff56122e9a9 code=0x7ffc0000 [ 1455.930593][ T30] audit: type=1326 audit(1753252477.329:8096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3039 comm="syz.2.9222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff561261265 code=0x7ffc0000 [ 1455.954238][ T30] audit: type=1326 audit(1753252477.329:8097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3036 comm="syz.2.9222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff56122e9a9 code=0x7ffc0000 [ 1455.977694][ T30] audit: type=1326 audit(1753252477.359:8098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3036 comm="syz.2.9222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff56122e9a9 code=0x7ffc0000 [ 1456.001188][ T30] audit: type=1326 audit(1753252477.359:8099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3036 comm="syz.2.9222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff56122e9a9 code=0x7ffc0000 [ 1456.024873][ T30] audit: type=1326 audit(1753252477.359:8100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3036 comm="syz.2.9222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff56122e9a9 code=0x7ffc0000 [ 1456.048331][ T30] audit: type=1326 audit(1753252477.359:8101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3036 comm="syz.2.9222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff56122e9a9 code=0x7ffc0000 [ 1456.073190][T24978] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1456.082665][ T1272] bridge_slave_0: left allmulticast mode [ 1456.088344][ T1272] bridge_slave_0: left promiscuous mode [ 1456.094399][ T1272] bridge0: port 1(bridge_slave_0) entered disabled state [ 1456.129807][ T3050] 9pnet_fd: Insufficient options for proto=fd [ 1456.173210][ T3061] loop0: detected capacity change from 0 to 128 [ 1456.191020][ T3061] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1456.261188][ T3061] ext4 filesystem being mounted at /578/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1456.366142][T24978] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1456.389124][ T3066] loop4: detected capacity change from 0 to 2048 [ 1456.399847][ T3066] xt_hashlimit: max too large, truncated to 1048576 [ 1456.438732][ T3072] netlink: 44 bytes leftover after parsing attributes in process `syz.0.9231'. [ 1456.551487][ T1272] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1456.563412][ T1272] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1456.574593][ T1272] bond0 (unregistering): Released all slaves [ 1456.597412][ T3011] bridge0: port 2(bridge_slave_1) entered blocking state [ 1456.604621][ T3011] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1456.612136][ T3011] bridge0: port 1(bridge_slave_0) entered blocking state [ 1456.619288][ T3011] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1456.631133][ T1310] bridge0: port 1(bridge_slave_0) entered disabled state [ 1456.639950][ T1310] bridge0: port 2(bridge_slave_1) entered disabled state [ 1456.677756][ T1272] hsr_slave_0: left promiscuous mode [ 1456.683524][ T1272] hsr_slave_1: left promiscuous mode [ 1456.689725][ T1272] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1456.689802][ T3085] 9pnet_fd: Insufficient options for proto=fd [ 1456.705137][ T1272] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1456.710228][ T3085] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1456.712659][ T1272] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1456.735468][ T1272] veth1_macvtap: left promiscuous mode [ 1456.741193][ T1272] veth0_macvtap: left promiscuous mode [ 1456.747304][ T1272] veth1_vlan: left promiscuous mode [ 1456.754498][ T1272] veth0_vlan: left promiscuous mode [ 1456.977312][ T1272] team0 (unregistering): Port device team_slave_1 removed [ 1457.043620][ T1272] team0 (unregistering): Port device team_slave_0 removed [ 1457.333349][ T3089] loop1: detected capacity change from 0 to 2048 [ 1457.378984][ T3011] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1457.401388][ T3011] 8021q: adding VLAN 0 to HW filter on device team0 [ 1457.411893][ T1310] bridge0: port 1(bridge_slave_0) entered blocking state [ 1457.419038][ T1310] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1457.440783][ T3011] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1457.451245][ T3011] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1457.471354][ T3089] loop1: p1 < > p4 [ 1457.473087][ T3089] loop1: p4 size 8388608 extends beyond EOD, truncated [ 1457.515868][ T1310] bridge0: port 2(bridge_slave_1) entered blocking state [ 1457.523079][ T1310] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1457.644678][ T3107] loop4: detected capacity change from 0 to 128 [ 1457.645073][ T3104] SELinux: syz.1.9241 (3104) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 1457.669099][ T3107] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1457.689103][ T3107] ext4 filesystem being mounted at /136/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1457.753124][ T3011] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1457.860782][ T641] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1457.909809][ T3130] loop4: detected capacity change from 0 to 2048 [ 1457.933108][ T3130] loop4: p1 < > p4 [ 1457.943152][ T3130] loop4: p4 size 8388608 extends beyond EOD, truncated [ 1457.953869][ T3135] loop1: detected capacity change from 0 to 1024 [ 1457.969963][ T3135] EXT4-fs: Ignoring removed orlov option [ 1457.993567][ T3135] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 1458.033147][ T3146] FAULT_INJECTION: forcing a failure. [ 1458.033147][ T3146] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1458.046414][ T3146] CPU: 1 UID: 0 PID: 3146 Comm: syz.0.9251 Tainted: G W 6.16.0-rc7-syzkaller #0 PREEMPT(voluntary) [ 1458.046516][ T3146] Tainted: [W]=WARN [ 1458.046524][ T3146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1458.046539][ T3146] Call Trace: [ 1458.046547][ T3146] [ 1458.046556][ T3146] __dump_stack+0x1d/0x30 [ 1458.046581][ T3146] dump_stack_lvl+0xe8/0x140 [ 1458.046604][ T3146] dump_stack+0x15/0x1b [ 1458.046663][ T3146] should_fail_ex+0x265/0x280 [ 1458.046760][ T3146] should_fail+0xb/0x20 [ 1458.046787][ T3146] should_fail_usercopy+0x1a/0x20 [ 1458.046819][ T3146] _copy_from_user+0x1c/0xb0 [ 1458.046862][ T3146] bpf_test_init+0xdf/0x160 [ 1458.046940][ T3146] bpf_prog_test_run_skb+0x144/0xbd0 [ 1458.046978][ T3146] ? __rcu_read_unlock+0x4f/0x70 [ 1458.047005][ T3146] ? __fget_files+0x184/0x1c0 [ 1458.047027][ T3146] ? __rcu_read_unlock+0x4f/0x70 [ 1458.047120][ T3146] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 1458.047229][ T3146] bpf_prog_test_run+0x22a/0x390 [ 1458.047269][ T3146] __sys_bpf+0x3dc/0x790 [ 1458.047315][ T3146] __x64_sys_bpf+0x41/0x50 [ 1458.047408][ T3146] x64_sys_call+0x2478/0x2fb0 [ 1458.047433][ T3146] do_syscall_64+0xd2/0x200 [ 1458.047455][ T3146] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 1458.047570][ T3146] ? clear_bhb_loop+0x40/0x90 [ 1458.047673][ T3146] ? clear_bhb_loop+0x40/0x90 [ 1458.047695][ T3146] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1458.047740][ T3146] RIP: 0033:0x7f910a55e9a9 [ 1458.047760][ T3146] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1458.047789][ T3146] RSP: 002b:00007f9108bc7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1458.047811][ T3146] RAX: ffffffffffffffda RBX: 00007f910a785fa0 RCX: 00007f910a55e9a9 [ 1458.047827][ T3146] RDX: 000000000000001e RSI: 0000200000000080 RDI: 000000000000000a [ 1458.047852][ T3146] RBP: 00007f9108bc7090 R08: 0000000000000000 R09: 0000000000000000 [ 1458.047928][ T3146] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1458.047939][ T3146] R13: 0000000000000000 R14: 00007f910a785fa0 R15: 00007ffeba29bea8 [ 1458.047956][ T3146] [ 1458.067061][ T3011] veth0_vlan: entered promiscuous mode [ 1458.078875][ T3135] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1458.083614][ T3011] veth1_vlan: entered promiscuous mode [ 1458.288596][T24845] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1458.304126][ T3154] loop0: detected capacity change from 0 to 2048 [ 1458.317537][ T3160] SELinux: syz.4.9257 (3160) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 1458.341604][ T3154] loop0: p1 < > p4 [ 1458.350684][ T3154] loop0: p4 size 8388608 extends beyond EOD, truncated [ 1458.350876][ T3011] veth0_macvtap: entered promiscuous mode [ 1458.394229][ T3011] veth1_macvtap: entered promiscuous mode [ 1458.406936][ T3011] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1458.430529][ T3011] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1458.563648][ T3181] loop0: detected capacity change from 0 to 128 [ 1458.638007][ T3184] loop2: detected capacity change from 0 to 512 [ 1458.693586][ T3187] loop4: detected capacity change from 0 to 512 [ 1458.735526][ T3187] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 1458.743704][ T3187] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1458.753710][ T3187] EXT4-fs (loop4): 1 orphan inode deleted [ 1458.763635][ T3184] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 1458.771946][ T3184] EXT4-fs (loop2): orphan cleanup on readonly fs [ 1458.781946][ T3184] EXT4-fs (loop2): 1 orphan inode deleted [ 1458.815008][ T3193] loop3: detected capacity change from 0 to 512 [ 1458.870848][ T3193] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1458.927704][ T3193] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1458.989217][ T3200] loop0: detected capacity change from 0 to 1024 [ 1458.998263][ T3196] loop1: detected capacity change from 0 to 2048 [ 1459.021326][ T1272] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:2: Failed to release dquot type 1 [ 1459.022744][ T3200] EXT4-fs: Ignoring removed orlov option [ 1459.034837][ T3187] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1459.039138][ T1272] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:2: Failed to release dquot type 1 [ 1459.055190][ T3196] loop1: p1 < > p4 [ 1459.065579][ T3200] EXT4-fs (loop0): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 1459.066774][ T3196] loop1: p4 size 8388608 extends beyond EOD, truncated [ 1459.083596][ T3184] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1459.105080][ T3011] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1459.105901][ T3200] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1459.153455][T24978] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1459.156314][ T3206] loop1: detected capacity change from 0 to 512 [ 1459.181023][ T3206] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1459.194484][ T3206] ext4 filesystem being mounted at /595/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1459.210165][ T3212] xt_hashlimit: max too large, truncated to 1048576 [ 1459.240853][ T3216] loop3: detected capacity change from 0 to 128 [ 1459.301506][ T1537] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1459.373257][ T641] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1459.462054][ T3224] loop4: detected capacity change from 0 to 2048 [ 1459.508989][ T3224] loop4: p1 < > p4 [ 1459.522631][ T3224] loop4: p4 size 8388608 extends beyond EOD, truncated [ 1459.595878][ T3234] loop4: detected capacity change from 0 to 128 [ 1459.610542][ T3234] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1459.638963][ T3234] ext4 filesystem being mounted at /145/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1459.712108][ T641] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1459.798401][ T3238] loop4: detected capacity change from 0 to 2048 [ 1459.814174][ T3240] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=3240 comm=syz.2.9282 [ 1459.818967][ T3238] loop4: p1 < > p4 [ 1459.826824][ T3240] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=3240 comm=syz.2.9282 [ 1459.843881][ T3238] loop4: p4 size 8388608 extends beyond EOD, truncated [ 1459.882230][ T3242] loop2: detected capacity change from 0 to 1024 [ 1459.889872][ T3242] EXT4-fs: Ignoring removed orlov option [ 1459.896775][ T3242] EXT4-fs (loop2): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 1459.933567][ T3242] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1459.951899][ T3246] 9pnet_fd: Insufficient options for proto=fd [ 1459.972006][ T1537] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1460.063784][ T3258] loop0: detected capacity change from 0 to 1024 [ 1460.071688][ T3258] EXT4-fs: Ignoring removed orlov option [ 1460.080259][ T3258] EXT4-fs (loop0): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 1460.111994][ T3258] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1460.155112][T24978] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1460.178911][ T3262] 9pnet_fd: Insufficient options for proto=fd [ 1460.207481][ T3269] loop0: detected capacity change from 0 to 128 [ 1460.215553][ T3269] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1460.228495][ T3269] ext4 filesystem being mounted at /596/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1460.282156][T24978] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1460.306460][ T3272] netlink: 44 bytes leftover after parsing attributes in process `syz.0.9292'. [ 1460.359234][ T3274] xt_hashlimit: max too large, truncated to 1048576 [ 1460.410567][ T3276] loop0: detected capacity change from 0 to 2048 [ 1460.468842][ T3276] loop0: p1 < > p4 [ 1460.473270][ T3276] loop0: p4 size 8388608 extends beyond EOD, truncated [ 1460.576800][ T1286] bridge_slave_1: left allmulticast mode [ 1460.582884][ T1286] bridge_slave_1: left promiscuous mode [ 1460.589079][ T1286] bridge0: port 2(bridge_slave_1) entered disabled state [ 1460.604970][ T1286] bridge_slave_0: left allmulticast mode [ 1460.610974][ T1286] bridge_slave_0: left promiscuous mode [ 1460.616885][ T1286] bridge0: port 1(bridge_slave_0) entered disabled state [ 1460.649108][ T30] kauditd_printk_skb: 495 callbacks suppressed [ 1460.649126][ T30] audit: type=1326 audit(1753252482.300:8595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3280 comm="syz.4.9297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f190870e9a9 code=0x7ffc0000 [ 1460.679418][ T30] audit: type=1326 audit(1753252482.300:8596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3280 comm="syz.4.9297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f190870e9a9 code=0x7ffc0000 [ 1460.730733][ T30] audit: type=1326 audit(1753252482.380:8597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3287 comm="syz.3.9298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe34d99e9a9 code=0x7ffc0000 [ 1460.766336][ T30] audit: type=1326 audit(1753252482.380:8598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3287 comm="syz.3.9298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7fe34d99e9a9 code=0x7ffc0000 [ 1460.789951][ T30] audit: type=1326 audit(1753252482.410:8599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3289 comm="syz.3.9298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe34d9d1265 code=0x7ffc0000 [ 1460.813445][ T30] audit: type=1326 audit(1753252482.410:8600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3287 comm="syz.3.9298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe34d99e9a9 code=0x7ffc0000 [ 1460.836937][ T30] audit: type=1326 audit(1753252482.410:8601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3287 comm="syz.3.9298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe34d99e9a9 code=0x7ffc0000 [ 1460.860566][ T30] audit: type=1326 audit(1753252482.410:8602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3287 comm="syz.3.9298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe34d99e9a9 code=0x7ffc0000 [ 1460.884104][ T30] audit: type=1326 audit(1753252482.410:8603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3287 comm="syz.3.9298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe34d99e9a9 code=0x7ffc0000 [ 1460.907675][ T30] audit: type=1326 audit(1753252482.410:8604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3287 comm="syz.3.9298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe34d99e9a9 code=0x7ffc0000 [ 1461.183333][ T3305] loop3: detected capacity change from 0 to 512 [ 1461.251277][ T3305] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 1461.259423][ T3305] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1461.267851][ T3305] EXT4-fs (loop3): 1 orphan inode deleted [ 1461.312795][ T1286] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1461.324019][ T1286] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1461.335989][ T1286] bond0 (unregistering): Released all slaves [ 1461.429722][ T1286] hsr_slave_0: left promiscuous mode [ 1461.480119][ T1286] hsr_slave_1: left promiscuous mode [ 1461.485978][ T1286] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1461.493588][ T1286] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1461.542954][ T1286] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1461.543496][ T1312] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:37: Failed to release dquot type 1 [ 1461.550520][ T1286] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1461.553620][ T3312] xt_hashlimit: max too large, truncated to 1048576 [ 1461.563161][ T3305] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1461.588541][ T1286] veth1_macvtap: left promiscuous mode [ 1461.595229][ T1286] veth0_macvtap: left promiscuous mode [ 1461.601589][ T1286] veth1_vlan: left promiscuous mode [ 1461.607025][ T1286] veth0_vlan: left promiscuous mode [ 1461.658367][ T3315] 9pnet_fd: Insufficient options for proto=fd [ 1461.692788][ T1286] team0 (unregistering): Port device team_slave_1 removed [ 1461.703386][ T1286] team0 (unregistering): Port device team_slave_0 removed [ 1461.899489][ T3282] chnl_net:caif_netlink_parms(): no params data found [ 1461.938213][ T3340] 9pnet_fd: Insufficient options for proto=fd [ 1461.946132][ T3282] bridge0: port 1(bridge_slave_0) entered blocking state [ 1461.953399][ T3282] bridge0: port 1(bridge_slave_0) entered disabled state [ 1461.962081][ T3282] bridge_slave_0: entered allmulticast mode [ 1461.969196][ T3282] bridge_slave_0: entered promiscuous mode [ 1461.976493][ T3282] bridge0: port 2(bridge_slave_1) entered blocking state [ 1461.983741][ T3282] bridge0: port 2(bridge_slave_1) entered disabled state [ 1461.996286][ T3282] bridge_slave_1: entered allmulticast mode [ 1462.003114][ T3282] bridge_slave_1: entered promiscuous mode [ 1462.023314][ T3282] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1462.034311][ T1286] IPVS: stop unused estimator thread 0... [ 1462.035753][ T3282] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1462.065543][ T3282] team0: Port device team_slave_0 added [ 1462.073897][ T3282] team0: Port device team_slave_1 added [ 1462.092896][ T3282] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1462.100025][ T3282] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1462.126218][ T3282] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1462.138034][ T3282] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1462.145088][ T3282] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1462.171154][ T3282] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1462.197801][ T3348] loop3: detected capacity change from 0 to 512 [ 1462.236423][ T3282] hsr_slave_0: entered promiscuous mode [ 1462.243750][ T3282] hsr_slave_1: entered promiscuous mode [ 1462.250421][ T3352] loop1: detected capacity change from 0 to 128 [ 1462.261121][ T3351] xt_hashlimit: max too large, truncated to 1048576 [ 1462.291704][ T3352] ext4 filesystem being mounted at /596/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1462.312815][ T3348] ext4 filesystem being mounted at /12/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1462.433211][ T3362] loop1: detected capacity change from 0 to 1024 [ 1462.444485][ T3362] EXT4-fs: Ignoring removed orlov option [ 1462.451291][ T3362] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 1462.577284][ T3282] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1462.591531][ T3282] 8021q: adding VLAN 0 to HW filter on device team0 [ 1462.601989][ T1286] bridge0: port 1(bridge_slave_0) entered blocking state [ 1462.609194][ T1286] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1462.666260][ T1310] bridge0: port 2(bridge_slave_1) entered blocking state [ 1462.673490][ T1310] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1462.686498][ T3376] loop2: detected capacity change from 0 to 512 [ 1462.909102][ T3381] 9pnet_fd: Insufficient options for proto=fd [ 1462.955015][ T3376] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 1462.963384][ T3376] EXT4-fs (loop2): orphan cleanup on readonly fs [ 1462.974517][ T3376] EXT4-fs (loop2): 1 orphan inode deleted [ 1462.984052][ T1312] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:37: Failed to release dquot type 1 [ 1463.021960][ T3381] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1463.598054][ T3282] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1463.629999][ T3398] loop1: detected capacity change from 0 to 128 [ 1463.660585][ T3398] ext4 filesystem being mounted at /602/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1464.144565][ T3282] veth0_vlan: entered promiscuous mode [ 1464.176942][ T3282] veth1_vlan: entered promiscuous mode [ 1464.212045][ T3282] veth0_macvtap: entered promiscuous mode [ 1464.301364][ T3282] veth1_macvtap: entered promiscuous mode [ 1464.314088][ T3282] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1464.339581][ T3282] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1464.429376][ T3435] loop0: detected capacity change from 0 to 2048 [ 1464.440765][ T3430] loop2: detected capacity change from 0 to 2048 [ 1464.478644][ T3435] loop0: p1 < > p4 [ 1464.483104][ T3435] loop0: p4 size 8388608 extends beyond EOD, truncated [ 1464.491480][ T3430] loop2: p1 < > p4 [ 1464.501984][ T1312] bridge_slave_1: left allmulticast mode [ 1464.507701][ T1312] bridge_slave_1: left promiscuous mode [ 1464.513498][ T1312] bridge0: port 2(bridge_slave_1) entered disabled state [ 1464.528148][ T3430] loop2: p4 size 8388608 extends beyond EOD, truncated [ 1464.536760][ T1312] bridge_slave_0: left allmulticast mode [ 1464.542556][ T1312] bridge_slave_0: left promiscuous mode [ 1464.548354][ T1312] bridge0: port 1(bridge_slave_0) entered disabled state [ 1464.635326][ T3445] xt_hashlimit: max too large, truncated to 1048576 [ 1464.712420][ T3447] loop4: detected capacity change from 0 to 1024 [ 1464.719269][ T3447] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1464.781756][ T3449] loop2: detected capacity change from 0 to 2048 [ 1464.810988][ T1312] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1464.825555][ T1312] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1464.834141][ C1] vcan0: j1939_tp_rxtimer: 0xffff888119f39a00: rx timeout, send abort [ 1464.844083][ T3449] loop2: p1 < > p4 [ 1464.858284][ T3449] loop2: p4 size 8388608 extends beyond EOD, truncated [ 1464.881602][ T1312] bond0 (unregistering): Released all slaves [ 1464.956260][ T3453] netlink: 44 bytes leftover after parsing attributes in process `syz.0.9342'. [ 1465.058822][ T1312] tipc: Left network mode [ 1465.072749][ T1312] hsr_slave_0: left promiscuous mode [ 1465.095154][ T1312] hsr_slave_1: left promiscuous mode [ 1465.120199][ T1312] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1465.127686][ T1312] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1465.198995][ T1312] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1465.206619][ T1312] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1465.253948][ T3463] netlink: 44 bytes leftover after parsing attributes in process `syz.2.9346'. [ 1465.280912][ T1312] veth1_macvtap: left promiscuous mode [ 1465.296604][ T1312] veth0_macvtap: left promiscuous mode [ 1465.314503][ T1312] veth1_vlan: left promiscuous mode [ 1465.333821][ T1312] veth0_vlan: left promiscuous mode [ 1465.339173][ C1] vcan0: j1939_tp_rxtimer: 0xffff888119f39a00: abort rx timeout. Force session deactivation [ 1465.414629][ T3467] loop2: detected capacity change from 0 to 128 [ 1465.463766][ T3467] ext4 filesystem being mounted at /150/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1466.101435][ T1312] team0 (unregistering): Port device team_slave_1 removed [ 1466.119756][ T1312] team0 (unregistering): Port device team_slave_0 removed [ 1466.130874][ T3476] loop2: detected capacity change from 0 to 1024 [ 1466.143063][ T3476] EXT4-fs: Ignoring removed orlov option [ 1466.157700][ T3476] EXT4-fs (loop2): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 1466.282674][ T3484] loop3: detected capacity change from 0 to 2048 [ 1466.329528][ T3491] loop2: detected capacity change from 0 to 128 [ 1466.349345][ T3484] loop3: p1 < > p4 [ 1466.359970][ T3484] loop3: p4 size 8388608 extends beyond EOD, truncated [ 1466.390795][ T1312] IPVS: stop unused estimator thread 0... [ 1466.405148][ T30] kauditd_printk_skb: 32 callbacks suppressed [ 1466.405166][ T30] audit: type=1326 audit(1753252488.020:8635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3489 comm="syz.0.9354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d51f4e9a9 code=0x7ffc0000 [ 1466.435022][ T30] audit: type=1326 audit(1753252488.020:8636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3489 comm="syz.0.9354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=280 compat=0 ip=0x7f8d51f4e9a9 code=0x7ffc0000 [ 1466.458741][ T30] audit: type=1326 audit(1753252488.020:8637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3489 comm="syz.0.9354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d51f4e9a9 code=0x7ffc0000 [ 1466.482317][ T30] audit: type=1326 audit(1753252488.020:8638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3489 comm="syz.0.9354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8d51f4e9a9 code=0x7ffc0000 [ 1466.505847][ T30] audit: type=1326 audit(1753252488.020:8639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3489 comm="syz.0.9354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d51f4e9a9 code=0x7ffc0000 [ 1466.529449][ T30] audit: type=1326 audit(1753252488.020:8640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3489 comm="syz.0.9354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8d51f4e9a9 code=0x7ffc0000 [ 1466.552988][ T30] audit: type=1326 audit(1753252488.020:8641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3489 comm="syz.0.9354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d51f4e9a9 code=0x7ffc0000 [ 1466.576619][ C1] vcan0: j1939_tp_rxtimer: 0xffff888119e82e00: rx timeout, send abort [ 1466.585111][ T30] audit: type=1326 audit(1753252488.020:8642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3489 comm="syz.0.9354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8d51f4e9a9 code=0x7ffc0000 [ 1466.608698][ T30] audit: type=1326 audit(1753252488.020:8643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3489 comm="syz.0.9354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d51f4e9a9 code=0x7ffc0000 [ 1466.632317][ T30] audit: type=1326 audit(1753252488.020:8644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3489 comm="syz.0.9354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8d51f4e9a9 code=0x7ffc0000 [ 1466.727621][ T3437] chnl_net:caif_netlink_parms(): no params data found [ 1466.757524][ T3499] 9pnet_fd: Insufficient options for proto=fd [ 1466.876419][ T3437] bridge0: port 1(bridge_slave_0) entered blocking state [ 1466.883663][ T3437] bridge0: port 1(bridge_slave_0) entered disabled state [ 1466.893123][ T3437] bridge_slave_0: entered allmulticast mode [ 1466.901086][ T3437] bridge_slave_0: entered promiscuous mode [ 1466.909767][ T3437] bridge0: port 2(bridge_slave_1) entered blocking state [ 1466.916953][ T3437] bridge0: port 2(bridge_slave_1) entered disabled state [ 1466.924532][ T3437] bridge_slave_1: entered allmulticast mode [ 1466.932225][ T3437] bridge_slave_1: entered promiscuous mode [ 1466.952067][ T3437] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1466.962799][ T3437] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1466.983207][ T3437] team0: Port device team_slave_0 added [ 1466.989958][ T3437] team0: Port device team_slave_1 added [ 1467.017752][ T3437] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1467.024874][ T3437] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1467.050864][ T3437] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1467.070849][ T3509] loop3: detected capacity change from 0 to 512 [ 1467.077237][ C1] vcan0: j1939_tp_rxtimer: 0xffff888119e82e00: abort rx timeout. Force session deactivation [ 1467.093919][ T3437] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1467.101052][ T3437] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1467.127200][ T3437] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1467.250076][ T3509] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 1467.258342][ T3509] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1467.282675][ T3509] EXT4-fs (loop3): 1 orphan inode deleted [ 1467.430654][ T3517] loop4: detected capacity change from 0 to 128 [ 1467.453956][ T1286] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:11: Failed to release dquot type 1 [ 1467.495574][ T3437] hsr_slave_0: entered promiscuous mode [ 1467.501746][ T3437] hsr_slave_1: entered promiscuous mode [ 1467.511217][ T3437] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1467.542047][ T3437] Cannot create hsr debugfs directory [ 1467.605925][ C0] vcan0: j1939_tp_rxtimer: 0xffff888119e2a200: rx timeout, send abort [ 1467.622625][ T3522] loop2: detected capacity change from 0 to 512 [ 1467.659114][ T3522] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 1467.667256][ T3522] EXT4-fs (loop2): orphan cleanup on readonly fs [ 1467.674916][ T3522] EXT4-fs (loop2): 1 orphan inode deleted [ 1467.681211][ T1286] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:11: Failed to release dquot type 1 [ 1467.716287][ T3529] loop0: detected capacity change from 0 to 512 [ 1467.759994][ T3529] ext4 filesystem being mounted at /8/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1467.772460][ T3437] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1467.792758][ T3437] 8021q: adding VLAN 0 to HW filter on device team0 [ 1467.816205][ T1272] bridge0: port 1(bridge_slave_0) entered blocking state [ 1467.823438][ T1272] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1467.895091][ T1272] bridge0: port 2(bridge_slave_1) entered blocking state [ 1467.902321][ T1272] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1468.039752][ T3544] SELinux: syz.3.9364 (3544) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 1468.100159][ T3437] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1468.110871][ T23] IPVS: starting estimator thread 0... [ 1468.114232][ C0] vcan0: j1939_tp_rxtimer: 0xffff888119e2a200: abort rx timeout. Force session deactivation [ 1468.185638][ T3553] loop3: detected capacity change from 0 to 2048 [ 1468.217896][ T3548] IPVS: using max 1776 ests per chain, 88800 per kthread [ 1468.228274][ T3553] loop3: p1 < > p4 [ 1468.234092][ T3553] loop3: p4 size 8388608 extends beyond EOD, truncated [ 1468.396750][ T3437] veth0_vlan: entered promiscuous mode [ 1468.427974][ T3437] veth1_vlan: entered promiscuous mode [ 1468.485377][ T3437] veth0_macvtap: entered promiscuous mode [ 1468.487194][ T3572] 9pnet_fd: Insufficient options for proto=fd [ 1468.530896][ T3437] veth1_macvtap: entered promiscuous mode [ 1468.558794][ T3437] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1468.590808][ T3437] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1468.722486][ C1] vcan0: j1939_tp_rxtimer: 0xffff888119036e00: rx timeout, send abort [ 1469.055875][ T3587] loop3: detected capacity change from 0 to 1024 [ 1469.098211][ T3587] EXT4-fs: Ignoring removed orlov option [ 1469.127784][ T3587] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 1469.230778][ C1] vcan0: j1939_tp_rxtimer: 0xffff888119036e00: abort rx timeout. Force session deactivation [ 1469.396422][ T3598] loop2: detected capacity change from 0 to 2048 [ 1469.448551][ T3598] loop2: p1 < > p4 [ 1469.453069][ T3598] loop2: p4 size 8388608 extends beyond EOD, truncated [ 1469.515317][ T3601] netlink: 44 bytes leftover after parsing attributes in process `syz.2.9376'. [ 1469.528853][ T3601] netlink: 'syz.2.9376': attribute type 3 has an invalid length. [ 1469.669093][ T3608] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9378'. [ 1469.679359][ C0] vcan0: j1939_session_tx_dat: 0xffff88811903aa00: queue data error: -100 [ 1469.688009][ C0] vcan0 (unregistering): j1939_xtp_rx_dpo: no connection found [ 1469.695621][ C0] vcan0 (unregistering): j1939_xtp_rx_dpo: no connection found [ 1469.703264][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1469.711133][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1469.719030][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1469.726866][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1469.734759][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1469.742620][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1469.750487][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1469.758337][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1469.766226][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1469.774105][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1469.781980][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1469.789838][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1469.797715][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1469.805566][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1469.813473][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1469.821363][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1469.829260][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1469.837105][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1469.845023][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1469.852899][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1469.860766][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1469.860897][ T2983] ================================================================== [ 1469.868677][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1469.876832][ T2983] BUG: KCSAN: data-race in _prb_read_valid / data_alloc [ 1469.884689][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1469.891561][ T2983] [ 1469.891568][ T2983] write to 0xffffffff8686c818 of 8 bytes by interrupt on cpu 0: [ 1469.891588][ T2983] data_alloc+0x271/0x2b0 [ 1469.899405][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1469.901710][ T2983] prb_reserve+0x808/0xaf0 [ 1469.909370][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1469.913656][ T2983] vprintk_store+0x56d/0x860 [ 1469.921567][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1469.925953][ T2983] vprintk_emit+0x178/0x650 [ 1469.933789][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1469.938337][ T2983] vprintk_default+0x26/0x30 [ 1469.938363][ T2983] vprintk+0x1d/0x30 [ 1469.946144][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1469.950633][ T2983] _printk+0x79/0xa0 [ 1469.950676][ T2983] __netdev_printk+0x321/0x3e0 [ 1469.958498][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1469.963037][ T2983] netdev_info+0x9b/0xd0 [ 1469.966930][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1469.974722][ T2983] j1939_tp_recv+0x5a7/0xa50 [ 1469.974753][ T2983] j1939_can_recv+0x43d/0x530 [ 1469.978678][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1469.983392][ T2983] can_rcv_filter+0x22d/0x4f0 [ 1469.991211][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1469.995422][ T2983] can_receive+0x163/0x1c0 [ 1470.003256][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1470.007809][ T2983] can_rcv+0xed/0x190 [ 1470.007841][ T2983] __netif_receive_skb+0x11d/0x270 [ 1470.012515][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1470.020307][ T2983] process_backlog+0x229/0x420 [ 1470.020339][ T2983] __napi_poll+0x63/0x3a0 [ 1470.025012][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1470.032792][ T2983] net_rx_action+0x391/0x830 [ 1470.032823][ T2983] handle_softirqs+0xb7/0x290 [ 1470.037236][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1470.045029][ T2983] do_softirq+0x5d/0x90 [ 1470.045055][ T2983] __local_bh_enable_ip+0x70/0x80 [ 1470.049063][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1470.054144][ T2983] copy_fpstate_to_sigframe+0x311/0x7d0 [ 1470.061968][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1470.066697][ T2983] get_sigframe+0x34d/0x490 [ 1470.071064][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1470.078817][ T2983] x64_setup_rt_frame+0xa8/0x580 [ 1470.078844][ T2983] arch_do_signal_or_restart+0x27c/0x480 [ 1470.083426][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1470.088094][ T2983] exit_to_user_mode_loop+0x7a/0x100 [ 1470.088126][ T2983] do_syscall_64+0x1d6/0x200 [ 1470.095924][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1470.100060][ T2983] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1470.100091][ T2983] [ 1470.105099][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1470.112892][ T2983] read to 0xffffffff8686c818 of 16 bytes by task 2983 on cpu 1: [ 1470.112915][ T2983] _prb_read_valid+0x1bc/0x920 [ 1470.118477][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1470.126248][ T2983] prb_read_valid+0x3c/0x60 [ 1470.130768][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1470.138542][ T2983] syslog_print+0x23a/0x540 [ 1470.143510][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1470.149124][ T2983] do_syslog+0x52b/0x7e0 [ 1470.156944][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1470.162224][ T2983] __x64_sys_syslog+0x41/0x50 [ 1470.162247][ T2983] x64_sys_call+0x2ea0/0x2fb0 [ 1470.166860][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1470.174630][ T2983] do_syscall_64+0xd2/0x200 [ 1470.174656][ T2983] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1470.180560][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1470.182878][ T2983] [ 1470.182885][ T2983] Reported by Kernel Concurrency Sanitizer on: [ 1470.190715][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1470.198302][ T2983] CPU: 1 UID: 0 PID: 2983 Comm: klogd Tainted: G W 6.16.0-rc7-syzkaller #0 PREEMPT(voluntary) [ 1470.203078][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1470.210904][ T2983] Tainted: [W]=WARN [ 1470.210915][ T2983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1470.210932][ T2983] ================================================================== [ 1470.215437][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1470.349641][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1470.357499][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1470.365379][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1470.373219][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1470.381061][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1470.388961][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1470.396803][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1470.404697][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1470.412574][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1470.420476][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1470.428359][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1470.436216][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1470.444090][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1470.451965][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1470.459812][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1470.467708][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1470.475549][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1470.549997][ T3616] 9pnet_fd: Insufficient options for proto=fd