last executing test programs: 2.248096235s ago: executing program 3 (id=10858): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x18) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$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") bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0xb0}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x5, 0x8}], {0x95, 0x0, 0x9}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005f04", 0x8) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x8100, 0x0) ioctl$TIOCSRS485(r1, 0x542f, 0x0) r2 = perf_event_open(&(0x7f00000007c0)={0x3, 0x80, 0x4e, 0x1, 0x0, 0x1, 0x0, 0xe, 0x2040e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x2, @perf_bp={&(0x7f0000000340), 0x2}, 0x0, 0x30, 0x0, 0x7, 0x18bb, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[], 0x48) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000"], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r3, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r4 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x1000f4) getsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000480)={@remote, @broadcast}, &(0x7f00000004c0)=0xc) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='cpu>00||!') renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) creat(0x0, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x0, 0x6, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 2.143719053s ago: executing program 0 (id=10863): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000100)='kfree\x00', r1}, 0x18) mount$9p_unix(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040), 0x0, &(0x7f0000000180)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340)={0xffffffff}, 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mq_open(0x0, 0x800, 0x40, 0x0) 1.708241187s ago: executing program 4 (id=10866): bpf$PROG_LOAD(0x5, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x141842, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095", @ANYBLOB], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$packet(0x11, 0x3, 0x300) unshare(0x8000000) semget$private(0x0, 0x1, 0xb4) semctl$GETALL(0x0, 0x0, 0xd, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="58bcdf970b", @ANYRES32=0x0, @ANYBLOB="01000000000000001c00128009000100626f6e64000000000c0002800500160004000000"], 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f00000004c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0004}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) lremovexattr(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)=@known='system.posix_acl_access\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) r7 = socket$inet(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r7, 0x100000000000000, 0x80, &(0x7f0000000200)=@broute={'broute\x00', 0x4011, 0x3, 0x90, [0x200000001380, 0x0, 0x0, 0x0, 0x2000000013b0], 0x2, 0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000200"/144]}, 0x108) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000080)=0xf3e, 0x62) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) 1.600147655s ago: executing program 4 (id=10869): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x0, 0x5, &(0x7f00000000c0)=ANY=[@ANYRESDEC], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x800, 0x0, 0x0, {{@in=@broadcast, @in6=@loopback, 0x0, 0x8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x4, 0x0, 0xfffffbffffffffff, 0x0, 0x80000000}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}, 0x0, 0xfffffffe, 0x0, 0x0, 0x3, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x2, 0x4, 0x3, 0x1}]}]}, 0xfc}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000240)={'lo\x00', 0x400}) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000080)={0x0, 0x0}) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000480)={0x2, 0x3, 0x0, 0x3, 0x11, 0x0, 0x70bd25, 0x25dfdbfc, [@sadb_key={0x3, 0x9, 0x80, 0x0, "1cdc0dca1d9f68846960e56de42944af"}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x4e23, 0x7, @mcast1, 0x80000001}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0xc, 0x80000000}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e23, 0xff, @local, 0x1ff}}]}, 0x88}, 0x1, 0x7}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r6, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@rdma_args={0x48, 0x114, 0xa1, {{}, {0x0}, 0x0}}], 0x48}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r5}, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r7}, &(0x7f0000000500), &(0x7f00000002c0)}, 0x20) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32=r7, @ANYRES32, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r7}, &(0x7f00000006c0), &(0x7f0000000700)}, 0x20) signalfd(r3, &(0x7f0000000100)={[0xf1d9]}, 0x8) syz_open_procfs(0x0, &(0x7f00000007c0)='schedstat\x00') r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000800)='udp_fail_queue_rcv_skb\x00', r9, 0x0, 0x3}, 0x18) r10 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0) writev(r10, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x118}}, 0x0) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000280)={'geneve1\x00', 0x200}) 1.504336393s ago: executing program 1 (id=10870): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x5, @perf_config_ext={0x2, 0x2}, 0x10cf28, 0x6, 0x0, 0x9, 0x8, 0x40, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = memfd_create(&(0x7f0000000540)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xe4\x034|k\xab/\x14\xa7)t\xc7YE\xe2\xc8\x95HX\xa9\xff\x00\x00\x81p\xf3%Se\xe5\xd8U\xe3<\xf1\xb3\x9eG\xd9,U\xb1\x92o\xabs\xab\xee\x9cml9]*\xe8\xf1\x03\x00\x00\x00\x00\x00\x00\x00\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x04\x00\x00\x00\x00\x00\x00\x00\xbf3S\xef}\xfd\x16\xbc\xa5^\xff\xf5\x95\xd2q/\xc6\xca\x97\x9d?\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec=\x9e\xc3\x04\x00\x00\x00l5\xf3\xbe\" 6\r>\xea\x8dz\xcf6\x99\x91\xear8p\xaaR\xd5\xa6\xab#N>\x9a\xdf\xea\x009\xfbB\xc1\xd0_\xc0\'Z\xeb\xd8\xaf\xf0\'J\xe2\xff\xe5x*;(p\xf7p\xce\xbbm/\x1ex\xf8\x88^\xbaU\xb9\xa6\xab\x8d\a\xa6\"\xd9\x13\t\xe2\rh\x8dsx\xaa!\x19\xdc\xdc\xcf\x0f\x9a\xa2o>\xb9\xfc\x01\fW\xee\xffh\xbd\xb2\xb4z\xeb\x84\x13\x13u\x8f\xe2\\Z\xef\x81\xe1c\xc5\xe6\x00\x00\x009\xcc\xd458\xd6(@\xab\xa9\x00'/322, 0x0) write$bt_hci(r1, &(0x7f00000000c0)=ANY=[@ANYRESOCT=r0], 0x2b) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_MESH(r2, 0x0, 0x80) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000d40000000b"], 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) utimes(&(0x7f0000000000)='./file1\x00', 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020047b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000020000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000006c0)='kfree\x00', r6}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) signalfd4(r1, &(0x7f0000000200)={[0x2]}, 0x8, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES64=0x0, @ANYRES8=r7], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$selinux_access(r8, &(0x7f0000000500)=ANY=[@ANYBLOB="73797374656d5f753a6f626a65199e167916c0bf90e763745f723a7570477077645f657865635f742073797374656d5f753a73797374656d5f723afaffffffffffffff3a73302030"], 0x56) 1.455357537s ago: executing program 1 (id=10871): syz_mount_image$vfat(&(0x7f0000001800), &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc888, &(0x7f0000002340)=ANY=[@ANYRES16=0x0, @ANYRES32=0x0], 0x4, 0x273, &(0x7f0000000680)="$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") seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) add_key$fscrypt_v1(0x0, &(0x7f0000000440)={'fscrypt:', @desc1}, &(0x7f0000000380)={0x0, "3ff4057cbe5924464c439b8f826f00a0b3ab198e40a55462c05d329ad8430d9611dc0ff693dd1367edfa74cf2a6da5f4d68b3cfb2979dc95ee34f9c3da5707ae", 0x34}, 0x48, 0xffffffffffffffff) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000001, 0x6031, 0xffffffffffffffff, 0x4000) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) munlock(&(0x7f00002a4000/0x2000)=nil, 0x2000) munlock(&(0x7f0000daf000/0x1000)=nil, 0x1000) munlockall() timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = eventfd2(0x0, 0x0) read$eventfd(r2, &(0x7f0000000040), 0x8) fsopen(&(0x7f0000000040)='btrfs\x00', 0x1) accept4$unix(0xffffffffffffffff, &(0x7f0000000080)=@abs, &(0x7f0000000100)=0x6e, 0x80400) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000580), 0x121081, 0x0) bind$802154_raw(r3, &(0x7f00000005c0)={0x24, @short={0x2, 0x0, 0xaaa0}}, 0x14) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x60, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff9ce}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r4}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x18082, &(0x7f0000000900)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB="dde0ee976e584e28d993d3fc8b1c27b30bdb9b9ddefcd9736c2dd10b502b076a7c71104f9d06cdfb4f554cc1f3b6892081946424697ab56587ef85e68f83bf96f926d1a46d5a7a3a1ff954bf619da741d4d2781a8fc72e4106fcc948f03e6de2ad6cd8b614adb3bac27c6f34d7a290313379d0737477a882d0a24bf0cc76c291c8a1b19b4e855978750b91f9365aaf943e5b333b6bf689bbaf08cf48c78bda3ff2647b04147499839e06baf211e1dec6929bd6e859f6809396bbde5c751c88066bfb94", @ANYRESHEX, @ANYBLOB=',seclabel,\x00']) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) 1.331455706s ago: executing program 4 (id=10873): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x8}, 0x18) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x0, &(0x7f0000000100)}) close_range(r2, 0xffffffffffffffff, 0x0) 1.292932609s ago: executing program 4 (id=10874): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xd, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000220000000000000000000000850000006d00000018110000", @ANYRES8=r0, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0xfffffffffffffffc}, 0x18) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendto$inet6(r2, &(0x7f00000005c0)="f5", 0x1, 0x20000880, &(0x7f0000000240)={0xa, 0x4e20, 0xfffffffc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r0, &(0x7f00000001c0)="e53ec36bb9007a5b3f3fc2b607afd9b7048540ed5459b37305df271d17cd47a0dcde0595b88d85c8b813e6396808d0e1cfcd678c27662db9f6f079b930a83cd2daad12caa843a9bb424aae0fd42bb550024abe37d4a8f64d37", &(0x7f0000000400)=""/219}, 0x20) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000000)={@mcast2}, 0x14) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @rand_addr=' \x01\x00', 0xfffffffd}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x0, 0x4}, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff27}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3, 0x0, 0x3}, 0x18) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x390, 0x0, 0x43, 0xa0, 0x1d0, 0x98, 0x2f8, 0x178, 0x178, 0x2f8, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0x1b0, 0x1d0, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@helper={{0x48}, {0x0, 'ftp-20000\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xe8, 0x128, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0xb}]}}, @common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "f1c098b60204ed02d82cf440fef5497b80c29d381d41116000"}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3f0) 1.291940589s ago: executing program 2 (id=10875): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xd, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000220000000000000000000000850000006d00000018110000", @ANYRES8=r0, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0xfffffffffffffffc}, 0x18) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendto$inet6(r2, &(0x7f00000005c0)="f5", 0x1, 0x20000880, &(0x7f0000000240)={0xa, 0x4e20, 0xfffffffc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r0, &(0x7f00000001c0)="e53ec36bb9007a5b3f3fc2b607afd9b7048540ed5459b37305df271d17cd47a0dcde0595b88d85c8b813e6396808d0e1cfcd678c27662db9f6f079b930a83cd2daad12caa843a9bb424aae0fd42bb550024abe37d4a8f64d37", &(0x7f0000000400)=""/219}, 0x20) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000000)={@mcast2}, 0x14) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @rand_addr=' \x01\x00', 0xfffffffd}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x0, 0x4}, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff27}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3, 0x0, 0x3}, 0x18) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x390, 0x0, 0x43, 0xa0, 0x1d0, 0x98, 0x2f8, 0x178, 0x178, 0x2f8, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0x1b0, 0x1d0, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@helper={{0x48}, {0x0, 'ftp-20000\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xe8, 0x128, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0xb}]}}, @common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "f1c098b60204ed02d82cf440fef5497b80c29d381d41116000"}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3f0) 1.226956615s ago: executing program 2 (id=10876): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xd, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000220000000000000000000000850000006d00000018110000", @ANYRES8=r0, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0xfffffffffffffffc}, 0x18) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendto$inet6(r2, &(0x7f00000005c0)="f5", 0x1, 0x20000880, &(0x7f0000000240)={0xa, 0x4e20, 0xfffffffc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r0, &(0x7f00000001c0)="e53ec36bb9007a5b3f3fc2b607afd9b7048540ed5459b37305df271d17cd47a0dcde0595b88d85c8b813e6396808d0e1cfcd678c27662db9f6f079b930a83cd2daad12caa843a9bb424aae0fd42bb550024abe37d4a8f64d37", &(0x7f0000000400)=""/219}, 0x20) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000000)={@mcast2}, 0x14) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @rand_addr=' \x01\x00', 0xfffffffd}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x0, 0x4}, 0x8) prctl$PR_SET_NAME(0xf, &(0x7f00000002c0)='+}[@\x00G5\v\x89n\xb2\x0e\xb7\xb4\x9a\xb3\xb9\xe1\xff@`\x87\xefy\xb7\xe0\xe6c\x91\x81ND\t3\xc4\xca\xf0\xd0Zp\xadbdY\xdcz\xc6lo\xd0\xc7\'CT') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0x3}, 0x18) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x390, 0x0, 0x43, 0xa0, 0x1d0, 0x98, 0x2f8, 0x178, 0x178, 0x2f8, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0x1b0, 0x1d0, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@helper={{0x48}, {0x0, 'ftp-20000\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xe8, 0x128, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0xb}]}}, @common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "f1c098b60204ed02d82cf440fef5497b80c29d381d41116000"}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3f0) 1.221828855s ago: executing program 4 (id=10877): capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffffd}) r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x5c, 0x5c, 0x8, [@decl_tag={0x3, 0x0, 0x0, 0x11, 0x5, 0xffffffffffffffff}, @type_tag={0xa, 0x0, 0x0, 0x12, 0x4}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{0x3, 0x5}, {0xf, 0x4}, {0x3, 0x2}, {0xd, 0x4}, {0x2, 0x3}]}, @ptr={0x1, 0x0, 0x0, 0x2, 0x1}]}, {0x0, [0x61, 0x2e, 0x2e, 0x5f, 0x0, 0x30]}}, &(0x7f00000007c0)=""/216, 0x7c, 0xd8}, 0x28) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000640)={0x7fff}, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c40)={0x6, 0x2a, &(0x7f0000000a00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe67}, {}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @ringbuf_query, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000680)='syzkaller\x00', 0x3, 0xfc, &(0x7f00000008c0)=""/252, 0x41000, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000bc0)={0x5, 0x4, 0x2, 0x6}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000c00)=[0x1, 0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0x1], 0x0, 0x10, 0x1}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000d00)={0x1b, 0x0, 0x0, 0x8, 0x0, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x2}, 0x50) openat$vcsa(0xffffffffffffff9c, 0x0, 0x54000, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000000)=0x800, 0x4) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x6, 0x8012, r0, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = msgget$private(0x0, 0x0) msgsnd(r4, &(0x7f0000000240)=ANY=[@ANYRES16], 0x2000, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) msgrcv(r4, &(0x7f0000001080)={0x0, ""/1}, 0x2000, 0x2, 0x3000) msgctl$IPC_SET(r4, 0x1, 0x0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000006c0), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000010140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100100000000000000002000000"], 0x58}}, 0x0) 1.192066677s ago: executing program 0 (id=10878): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x18) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) writev(r2, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1) 1.191164048s ago: executing program 2 (id=10879): close(0x3) r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x40, 0x9, 0x7ffc1fff}]}) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x6000, 0x1) close(r1) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x38, &(0x7f00000001c0)=[@in6={0xa, 0x4e20, 0xfffffffb, @private1={0xfc, 0x1, '\x00', 0x1}, 0x322f}, @in6={0xa, 0x4e22, 0x7, @remote, 0x3}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in={{0x2, 0x4e24, @remote}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000"], 0x30}], 0x1, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000001640)={r2}, &(0x7f0000001740)=0x8) unshare(0x22020400) r3 = syz_open_dev$loop(&(0x7f0000000680), 0x9, 0x103480) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) r4 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) fchdir(r5) open(&(0x7f00000000c0)='.\x00', 0x0, 0x100) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) mkdir(&(0x7f0000000000)='./file0\x00', 0xc0) getdents64(r6, &(0x7f0000000f80)=""/4096, 0x1000) ioctl$LOOP_SET_DIRECT_IO(r3, 0x4c08, 0x6e) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="070000000400000008020000d900000000000000", @ANYRES32, @ANYBLOB="008000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000032f22df78754083fa4daa2c400000200"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1f, 0x8, &(0x7f0000000740)=ANY=[@ANYRES64=r5, @ANYRES32=r7], 0x0, 0x8000000, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r8}, 0x18) socket$kcm(0x10, 0x2, 0x0) r9 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r9}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000380)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) 1.188617098s ago: executing program 3 (id=10880): r0 = shmat(0x0, &(0x7f0000f62000/0x1000)=nil, 0x7000) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYRESDEC=r0], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000280)=ANY=[@ANYRESDEC], 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffffad}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r1}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$sg(&(0x7f0000000080), 0xffff0000, 0x40) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newtaction={0x6c, 0x30, 0x871a15abc695f91d, 0x0, 0x80000, {}, [{0x58, 0x1, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xcc1}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x3468802, 0x40, 0x1, 0x3, 0x7ffffffc}, 0x3}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) symlink(0x0, &(0x7f0000000240)='./file0\x00') sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, 0x0) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0xfffffffffffffd57, 0x40440d0, 0x0, 0x0) syz_clone(0x60100100, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 1.15538834s ago: executing program 0 (id=10881): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x11, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) syz_usb_connect$uac1(0x4, 0x71, &(0x7f00000002c0)=ANY=[@ANYBLOB="12011001000000406b1d010140000102030109025f0003010f4021f40a24010600f702010209040100000102000009040101010102000009050109ff0304f70907250101103500090402f700010200000904020101010200000905820900040209f807250101000300"], 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 1.129477432s ago: executing program 2 (id=10882): r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r5}, 0x18) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x0, 0x6, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x1, 0xb, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_redirect(r3, &(0x7f0000000280), 0x0, 0x0, 0x1) r6 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r6, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) r7 = socket$unix(0x1, 0x1, 0x0) bind$unix(r7, &(0x7f0000000180)=@file={0x1}, 0x6e) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}, 0x1c) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x60, 0x10, 0x20, 0x0, 0x25dfdbff, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x24, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_ARPTABLES={0x5, 0x26, 0x1}, @IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x1}}, @IFLA_BR_MCAST_QUERIER_INTVL={0xc, 0x20, 0x2}]}}}, @IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0xa}]}]}, 0x60}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400df7f08000a00", @ANYRES32], 0x3c}}, 0x0) 1.010708802s ago: executing program 4 (id=10883): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x5, 0x248}, 0x0) r0 = getpid() sched_setaffinity(r0, 0x0, &(0x7f0000000280)=0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) ptrace$poke(0xd7c16c1c2ef5e447, r0, &(0x7f0000000180), 0xfffffffffffffff9) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000a00)={0xf, {"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", 0xfffffffffffffd6a}}, 0x1006) getsockopt$bt_hci(r1, 0x84, 0x81, &(0x7f0000001280)=""/4107, &(0x7f00000000c0)=0x100b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) quotactl$Q_SETQUOTA(0xffffffff80000800, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x3, &(0x7f0000000000)=ANY=[@ANYRESDEC=r5], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffffd}) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f0000000440)={0x0, 0x2, 0xaf}, 0x8) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000002c0)=0x11) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000100)=0x2) socket$can_bcm(0x1d, 0x2, 0x2) socket$can_bcm(0x1d, 0x2, 0x2) dup3(r6, r1, 0x80000) open(&(0x7f0000000140)='./file1\x00', 0x109cc2, 0x5c) 557.651217ms ago: executing program 2 (id=10884): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x0, 0x5, &(0x7f00000000c0)=ANY=[@ANYRESDEC], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x800, 0x0, 0x0, {{@in=@broadcast, @in6=@loopback, 0x0, 0x8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x4, 0x0, 0xfffffbffffffffff, 0x0, 0x80000000}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}, 0x0, 0xfffffffe, 0x0, 0x0, 0x3, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x2, 0x4, 0x3, 0x1}]}]}, 0xfc}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000240)={'lo\x00', 0x400}) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000080)={0x0, 0x0}) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000480)={0x2, 0x3, 0x0, 0x3, 0x11, 0x0, 0x70bd25, 0x25dfdbfc, [@sadb_key={0x3, 0x9, 0x80, 0x0, "1cdc0dca1d9f68846960e56de42944af"}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x4e23, 0x7, @mcast1, 0x80000001}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0xc, 0x80000000}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e23, 0xff, @local, 0x1ff}}]}, 0x88}, 0x1, 0x7}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r6, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@rdma_args={0x48, 0x114, 0xa1, {{}, {0x0}, 0x0}}], 0x48}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r5}, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r7}, &(0x7f0000000500), &(0x7f00000002c0)}, 0x20) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32=r7, @ANYRES32, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r7}, &(0x7f00000006c0), &(0x7f0000000700)}, 0x20) signalfd(r3, &(0x7f0000000100)={[0xf1d9]}, 0x8) syz_open_procfs(0x0, &(0x7f00000007c0)='schedstat\x00') r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000800)='udp_fail_queue_rcv_skb\x00', r9, 0x0, 0x3}, 0x18) r10 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0) writev(r10, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021940000000c0a01030000000000000000070000000900020073797a31000000000900010073797a3000000000680003806400dec6080003400000000258000b80200001800a00010071756f7461000000100002800c0001400000000000000000340001800a0001006c696d69740000002400028008000440000000010c00024000000000000000000c0001400000000000000003"], 0x118}}, 0x0) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000280)={'geneve1\x00', 0x200}) 471.612573ms ago: executing program 1 (id=10885): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1b, 0x0, 0x0, 0x10, 0x2}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x42, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = syz_open_dev$mouse(&(0x7f0000000000), 0x7b15, 0x400001) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x200006}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000091}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x7fffe, {0x0, 0x0, 0x0, r8, {}, {0xb, 0xb}, {0xe, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x80, 0x808, 0x5, 0x1, 0xc}, 0xb, 0x0, 0x800005, 0x5, 0x40, 0x2, 0x9, 0xd, 0x2, 0x1, {0x8000, 0x10000003, 0x1000, 0x101, 0xfffffffe, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x4008810}, 0x8000) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'erspan0\x00', &(0x7f00000000c0)={'sit0\x00', 0x0, 0x8, 0x700, 0x1bc0cad2, 0x5, {{0xc, 0x4, 0x2, 0x6, 0x30, 0x67, 0x0, 0xa4, 0x29, 0x0, @empty, @remote, {[@generic={0x82, 0xb, "e948d521d3a23e74c9"}, @generic={0x86, 0xf, "c9f50a69b6ff5aec9fde82f00e"}]}}}}}) sendmsg$ETHTOOL_MSG_FEATURES_GET(r4, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xa0}, 0xc, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r5, @ANYBLOB="000229bd7000fcdbdf250b000000300001800800030003000000140002007465616d5f736c6176655f310000000008000100", @ANYRES32=r8, @ANYBLOB="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", @ANYRES32=r9, @ANYBLOB="0c00018008000100", @ANYRES32=0x0, @ANYBLOB="040001803c0001801400020076657468305f746f5f626f6e640000000800030000000000140002007663616e3000000000000000000000000800030003000000"], 0x90}, 0x1, 0x0, 0x0, 0x1}, 0x40000) sendmmsg$inet(r3, &(0x7f0000001080)=[{{&(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000780)=[{&(0x7f0000000200)="c5fc0b4b7a471c1e42ae295281b0c398cc08e4ec6a41e58d1f29d3ed604b8265b797e9c47506b3333f81ac237b3a8e74773714238bfcd945d9fbc3cd8fa48139b7023e91f0e68c8c43508485e3eb3e8fd58258e8a11f67cb69e2cf467ce13c6c614e437b16fb7e477d0a73a44b98a40afd6980363112e4b902d54adcf1468b3e642e1cf045c748ed510212386904f2b7e7fd68fe51b741c34223f1afa921326e", 0xa0}, {&(0x7f00000002c0)="eca356924669c0651df06a38b07f7abb2c9c8ae875de68f8eddd7ba0b9b86e24a6323413577dd1f754b401ee2d14bf7fe64e243d35a8bc197f7fd6f34a73096ec51192bf71e60f", 0x47}, {&(0x7f0000000380)="6fd0b154f21e0458137222e018b6fbad46ced54a0aaae19dbb6e3cb3ccc2f8c0727d6269420968dcd4beabe9094bbe62322e36d72a00821d21b1df06c8103d5bb17936", 0x43}, {&(0x7f00000004c0)="2d46eda753c16f0f3784ec885f6227a8fe8fe08145b673055b5cbff4be0a108f3edb4f9b0b4138b5389ba4281550d0ac6726df148ea8840969c92c5ab9154c7cd56b55912235bd5755d23b703bada7c7c04741a147ba793510260d2eea367b15c8eeec81e8804b7bb863123b16f5cbe0035d8af072bc0b0a", 0x78}, {&(0x7f0000000540)="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", 0xfc}, {&(0x7f0000000640)="a1a111994db48223c5555a558c51869acb694b2f0fff352654f5cce38e9d84457540684970b6138e4d27f0b4de578b93d47824363f17208c887cc6586d36b5a219b3a61f1eaa93ab407cddc42e9d1175e3a9b205ac376af4ef5b3aeebf4e65575653f8e715cd14551cc896810c844cd649e930564107642223f78799328bc4dd3458817fdab9cb6d205bc5f12146ca62565942bee4c43f5db3bf23464a25e0f52c1acb02", 0xa4}, {&(0x7f0000000180)="1d65a249a243a59c02d3196e66e5904a2904ab0068dcac75d57acdc9fcc47e38de44a357e70529ed691795131f1fb8da385aeb74fcc9b8cc1b2f830d", 0x3c}, {&(0x7f0000001100)="57e083724940b31a65bf18c1120f1bc05a343f673dee47d9a384a96651f67cb3e8544b86b9fdee3c6c03ccb7", 0x2c}, {&(0x7f0000000700)="b4da623754fdde5ef61bb2f4847e97ace56b8ab7762b893ae470bfb6b0ee0f1131fd542f94e269eaee7e98c1beae9f4b08060d0e70fc11d42699c7de30a8720021081e9cb3", 0x45}], 0x9, &(0x7f0000001140)=ANY=[@ANYBLOB="70000000000000000000000007000000890bde7f000001ac141423443c8921e00000010000036b7f000001000007b77f00000100000007640101010000007fffffffff800000000a0101020000000d00000000000000d60101891785e0000001e000000164010102ac1e0101ac14141c14000000000000000000000007fff2000100000000000000"], 0x88}}, {{0x0, 0x0, &(0x7f0000000f80)=[{&(0x7f0000000b00)="33cce63678b8f1a1423b289d790d625efa7aac1e32918bfc39cc0b134deaac2875918d1a994f1435923f62dbb1d31fd7480cfff32f6e1ea9e374fcc1bc8956c980db81f1a3abd60de4632167528639e0c2283f24882525cb40c0d6279e5d5de6cf6b0d7950c8ac684406d67da89fc18a1388190d6a0d74d16f9e23b0da64ee1fdcaad760afafa326dfa7ab23ad51b78085d3a901e233cb3b69efc9f5268244cd73f608c63a5581f777aaf4853459fe620e0fab05d1abb295dc2a81b42edd2083aa33af3b67a6eca1febb884b6f5291d06f5dd1c0bb9b73cc7243742cd7557afa01e685c64f6bebdbae6d", 0xea}, {&(0x7f0000000c00)="ef7712af69cfdaa21f8e99d766808a398f1c21576b00c2655e7497b5aa1277d7fcf5c4e1bb6519c23c9625f9c3ba0356447a83babf6bce65fcf4e1567c8bf0d78d4860e798d8d83f794441505d4260adedf0857a92af4398cc70f2c252dae25207b35b7580435e9e198051daad60e6e68a647e841a10454d758f3d6154dff6df7996b8d24467d6321de4dbeb52d49fa9007f44fd5dc8cc27d0cd8d9282ad3e7135982d8719981f3a53344d8d309e27d695a602063fd1973e4f3797f35bd10faa00e47c2271d4", 0xc6}, {&(0x7f00000009c0)="08757cf642a06aa0e4b6d83998e6e9416b6946cb3a92e52c3150188c9c992ae53eae5fac5bd35375609f406c6ea6e7546351fd1bb5744edf7316ad3bcf54ad7b794ba024a31244d408bada259cf647c2bb50d01bdf49", 0x56}, {&(0x7f0000000840)="5f1cb47c1b1c32e40be9c101447c1ff08c", 0x11}, {&(0x7f0000000d00)="4be975fc337b08f07cd210c983445272c4445c02b0cb160a1073f9e1774201ec920f82fdb2dac4cabc27b27dc6043072c0e2e699eaadf8220200000000000400", 0x40}, {&(0x7f0000000d40)="bac38c034ad9f348e85ff8313842d6d972c80a6d672de18ca10b4a605f01254752761b4d2d8573c9d8c851fd51f83b4679b1018f446ac8c8fe1908080b3cca116119b0af98f0ae1076682b466459bd641b7758c9826f6d08e7b4e72feb243068be4c7b5273eb3f2b2af73ef24702f45e13db07697c15f7d34b0efaefed4c49ce0c1e560bcf08240bf5e573ea6e51da", 0x8f}, {&(0x7f0000000e00)="40c711dbf792ade70cb5010aa92e72f1f594a9d86c423616c9862a6da2fa58987b52cf0d273df3bc93ccefe3c209d3e2c7710d70970eef5fe90ff3fbe65c416e76f034c8d14d0acb6aca19c2302f38b11db982d100ea0c90e112db8fb29e1cd5195b4f044b44d4d53105f3d81f567e4e94c070f96eabb7d2a28d7479f9adb5b4864707a11d6ecba21e63ff9e3fcbbbc944955e3eba29ed89a422389f7b6a89a2d45dadda73644f535a0040e9c5ac383c04db7297717b2374994c67a9554b623cc711957e7a128efa833b8bb2", 0xcc}], 0x7, &(0x7f0000001000)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @remote, @empty}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x42ce}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x47}}], 0x68}}], 0x2, 0x4004001) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000000000000001000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00', r11}, 0x18) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00', r12}, 0x18) syz_io_uring_setup(0x1113, &(0x7f0000000280)={0x0, 0xb44a, 0x0, 0x0, 0x21e}, &(0x7f0000000000), &(0x7f0000000040)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000940)='f2fs_fallocate\x00', r10}, 0x18) r13 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r13, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="6c0100001000130726bd70000000000000000000000000000000ffffe0000002ac1414130000000000000000000000004e22000100000003020000003a000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="00f70700c399ccd9782a79a48ed5c0d806ef3df1bf13e4ba14f48e0d5f3c435b7e1c0838905fe17ad4fae8015e15aa51363d9f1f97e6c3d8bd997f7122d9d8649338d279e381b1564f7f9a3e6405c501034679e3e00ca53b436072104e1d13550c7061e6cfd5ab7d6bd9bef451691b10223772211f9ec2e772087deaa031dc72e836ff39611b96c6c240542e7716e99b61ece213d76bddf78f678dea0568c7fef029fdf739b6d9c104ef"], 0x16c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="140100002900010000000000fcdbdf2503"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) r14 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCADDRT(r14, 0x890b, &(0x7f0000000080)={0x0, @nl=@kern={0x10, 0x0, 0x0, 0x8}, @phonet={0x23, 0x4, 0x32, 0x31}, @ethernet={0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}}, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000040)='wg1\x00', 0x1, 0x4, 0x81}) 437.892576ms ago: executing program 0 (id=10886): close(0x3) r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x40, 0x9, 0x7ffc1fff}]}) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x6000, 0x1) close(r1) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x38, &(0x7f00000001c0)=[@in6={0xa, 0x4e20, 0xfffffffb, @private1={0xfc, 0x1, '\x00', 0x1}, 0x322f}, @in6={0xa, 0x4e22, 0x7, @remote, 0x3}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in={{0x2, 0x4e24, @remote}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000001640)={r2}, &(0x7f0000001740)=0x8) unshare(0x22020400) r3 = syz_open_dev$loop(&(0x7f0000000680), 0x9, 0x103480) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) r4 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) fchdir(r5) open(&(0x7f00000000c0)='.\x00', 0x0, 0x100) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) mkdir(0x0, 0xc0) getdents64(r6, &(0x7f0000000f80)=""/4096, 0x1000) ioctl$LOOP_SET_DIRECT_IO(r3, 0x4c08, 0x6e) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="070000000400000008020000d900000000000000", @ANYRES32, @ANYBLOB="008000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000032f22df78754083fa4daa2c400000200"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1f, 0x8, &(0x7f0000000740)=ANY=[@ANYRES64=r5, @ANYRES32=r7], 0x0, 0x8000000, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r8}, 0x18) socket$kcm(0x10, 0x2, 0x0) r9 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r9}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000380)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) 377.28698ms ago: executing program 0 (id=10887): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001cc0)=ANY=[@ANYBLOB="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", @ANYRESOCT], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98,\xc8\x18E/\x8c\x1a\xe3\xbd') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x11e) renameat2(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x5, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$BTRFS_IOC_SYNC(0xffffffffffffffff, 0x9408, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, 0x0, 0x108) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r3 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, 0x0) mount$bind(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$tmpfs(0x0, &(0x7f0000000400)='./file0/../file0\x00', &(0x7f00000003c0), 0x200044, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x39, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x8, &(0x7f0000000640)=ANY=[@ANYRES16=r1, @ANYRES8=r2], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r4, 0x0, 0x4}, 0x18) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r5, &(0x7f0000000540)={0xa, 0x400, 0x10001, @private2={0xfc, 0x2, '\x00', 0x1}, 0x200000}, 0x1c) sendto$inet6(r5, &(0x7f00000001c0)='N', 0x1, 0x80, &(0x7f0000000280)={0xa, 0x4e24, 0x0, @private2}, 0x1c) shutdown(r5, 0x1) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7c, &(0x7f00000000c0), &(0x7f0000000180)=0x8) socket$inet6(0xa, 0x3, 0x3c) 320.224655ms ago: executing program 2 (id=10888): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000100)='kfree\x00', r1}, 0x18) mount$9p_unix(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040), 0x0, &(0x7f0000000180)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340)={0xffffffff}, 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mq_open(0x0, 0x800, 0x40, 0x0) 299.110497ms ago: executing program 0 (id=10889): syz_open_dev$usbfs(&(0x7f00000000c0), 0x205, 0x2) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r1 = epoll_create1(0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r3, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@ip_retopts={{0x10, 0x110, 0x2}}], 0x10}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) syz_io_uring_setup(0x4e0, &(0x7f00000000c0)={0x0, 0xf5ea, 0x800, 0x8000, 0x400252}, &(0x7f0000000640), 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r5) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000018c0)={'team0\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r6, 0x1, 0x14, &(0x7f0000000140)={0x0, 0xea60}, 0x10) getsockopt$sock_timeval(r6, 0x1, 0x42, 0x0, &(0x7f00000000c0)) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0xc18c04, &(0x7f00000003c0), 0x1, 0x775, &(0x7f0000001180)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x2}, 0x94) openat$thread_pidfd(0xffffffffffffff9c, 0x0, 0x220000, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0xffffffffffffff2c, 0x13) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r7 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x42, 0x61) r8 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r8, &(0x7f0000004200)='t', 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendfile(r8, r7, 0x0, 0x3ffff) sendfile(r8, r7, 0x0, 0x7ffff000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) 297.117227ms ago: executing program 1 (id=10890): openat$ppp(0xffffffffffffff9c, 0x0, 0x842, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000b40)=@newtaction={0x2cc, 0x30, 0x1, 0x70bd2b, 0x25dfdbde, {}, [{0x2b8, 0x1, [@m_bpf={0x288, 0x1, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x1}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3, 0xef, 0x6, 0x8000, 0x2}}, @TCA_ACT_BPF_OPS={0xc, 0x4, [{0x16, 0xf2, 0x3, 0x7}]}]}, {0x234, 0x6, "9c54bdcbb9b43fa233aabccf1ec89c06eb84445d3be5cf817561606698135405668c1d1075ea8bf2a3527230f8819fe0af221d09a91eaaf76b29a6ce141957ce38711a5802f48de797b52db1a482396e5e414c5ccacd2d88923946ad9bf7a4d75eeb041517a85fc32a9b93ef3f3b74cac2ac314bcd9a8168e93c8edd039661e62e56a401369ee933e3abf42f0414596445368239b2336b3a5e95d9310d860e2d0300c677f15400c05ae9ded2538223f83a3c6aeddfe4bcb45126f78aa9b10dc2ed56a16de267f3dc28f640d6c56e0c92f3c1df5a3012520bc8a57f1f55abbfa9e5aa74387f2f99491fff8167516f008187ae6ad9951bed11cf346196da8de470054a3935c1252d9b68d9aea16ac327a476f2da32b137b1895cc6ab89794a85ad2bc459e13ab46d3570994a0c7276e9000de9cd422f277a723d862216c5ffcc951923dbcc443eb54a3409b39d54d7810767d8495431b67783f55a799b09f52b03bf848efb179d5b4b4608499fbf0c96bef39f6f1f497f4290717ff9f2361663122b594982c8f7df5eaace4b95cade4ba5f55d27094eb09361aba4ac578ca5fd2e1124d3425f57ac388c820d62f346b01eee2e32978e6681f479a067614f74b2a03848339dd1497c782ec375cfab6b6380042794c8793ef4d3833d6a9a00d5af28a9bb3992726420cd85142927f1b27b1bb79b10e4d4d88d76565856394fac7b0cde6fb0b35f926ee85b800ea9094b393da53a5815cc10628934af0fc0254f226b6d180b8f11c40a7ed5022e108f042497"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_bpf={0x2c, 0x2, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x2cc}, 0x1, 0x0, 0x0, 0xc044}, 0x4000814) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="18000032c7a7c100000000014f089f60b719a700", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200000000000085000000860000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x18) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000040000000000000000000300000a20000000000a05000000000000000000070000000900010073797a300000000044000000090a010400000000000000000700ffff08000a40000000030900020073797a31000000000900010073797a3000000000080005400000002106000d40931000005c0000000c0a01020000000000000000070000000900020073797a31000000000900010073797a3000000000300003802c0000800400018024000b80100001800c000100636f756e7465720010000180090001006c617374"], 0xe8}, 0x1, 0x0, 0x0, 0x10}, 0x0) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) socket$l2tp6(0xa, 0x2, 0x73) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="1709a70000008000000101000000080009003f00000014001f00000000000000000000000000000000011400200000000000000000000000ffffffffffff0500070000000000060002000100000008000a0004000000"], 0x5c}}, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x85, &(0x7f0000000540)={0x0, 0x88, "0200000000000000703fcd09bdf0b493d4323725cdcff2eae49f89843a5318d5ba093aa761132b5e2e8c4eb4eb76aa3f3069d1d5a64a2c75a2d59986feff48dc51b23de50b4c052630642b3348c700b558041310b18d364b87808f6ec3b597fae6ac116b5b25b716a73e48c8c8f8ec21e15e7a5d6743243dfde88d2786c355a2c222145b4ddeb213"}, &(0x7f0000000500)=0x90) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000300)={0x0, 0x8, 0x0, 0x10001, 0x8001, 0x6}, &(0x7f0000000340)=0x14) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r7, 0x0, 0xfffffffffffff001}, 0x18) mount(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x5, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x21081e, &(0x7f00000002c0), 0x1, 0x4f2, &(0x7f0000000600)="$eJzs3c9PXFsdAPDvDL8GHn3wnm/xNOqrtVpN0wGmLWm60LoyxjQxdqlJizAlhBmGMEMt2AX9H0xs4kqX/gGuu3LvxujOTV2Y+INoShMXY+6dC53CTKEPyhDm80lu7z3nwv2eA3PP6XyHmRNA3/o0IrYiYjgiHkTERFafy7a409ouRsTL7SfzO9tP5nPRbN77Vy49n9RF2/ckPsiuWYiIH38/4me5g3HrG5vLc5VKeS0rTzWqq1P1jc1rS9W5xfJieaVUmp2Znb51/WbpxPr6WXU4O/rKiz9uffsXSbPGs5r2fpykkfTfob04ieRn+cP3EawHBiJiMHv8ZC70sj28m3xEfBwRl9L7fyIG0t8mAHCeNZsT0ZxoLwMA510+zYHl8sUsFzAe+Xyx2MrhfRJj+Uqt3rj6sLa+stDKlU3GUP7hUqU8neUKJ2Mol5Rn0uPX5dK+8vWI+CgifjkympaL87XKQi//4wMAfeyDffP/f0da8z8AcM4Vet0AAODUmf8BoP+Y/wGg/5j/AaD/mP8BoP+Y/wGg/5j/AaCv/Oju3WRr7mSff73waGN9ufbo2kK5vlysrs8X52trq8XFWm0x/cye6mHXq9RqqzM3Yv3x5HdW642p+sbm/WptfaVxP/1c7/vloVPpFQDwNh999vwvuYjYuj2abtG2loO5Gs63fK8bAPTMQK8bAPSM1b6gfx3jOb70AJwTHZbofUMhIkb3Vzabzeb7axLwnl35ovw/9Ku2/L+/AoY+I/8P/atr/v/Ak33gvGk2c0dd8z+O+oUAwNkmxw90ef3/42z/u+zFgZ8u7P+KZ/srvKMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/rG7/m8xW7ljPPL5YjHiQkRMxlDu4VKlPB0RH0bEn0eGRpLyTI/bDAAcV/7vuWz9rysTl8f3nx3OvRpJ9xHx81/f+9XjuUZj7U9J/b/36hvPsvpSL9oPABxmd55O921P5F9uP5nf3U6zPf/4XkQUWvF3todjZy/+YAym+0IMRcTYf3JZuSXXlrs4jq2nEfFpp/7nYjzNgbRWPt0fP4l94VTj59+In0/PtfbJz+ILJ9AW6DfPk/HnTqf7Lx8X033n+7+QjlDHl41/yaXmd9Ix8HX83fFvoMv4d/GoMW784Qeto9GD555GfGkwYjf2Ttv4sxs/1yX+5YOX6+ivX/7qpW7nmr+JuBKd47fHmmpUV6fqG5vXlqpzi+XF8kqpNDszO33r+s3SVJqjnuo+G/zz9tUPu51L+j/WJX7hkP5/42jdj9/+78FPvvaW+N/6eqf4+fjkLfGTOfGbR4w/N/b7QrdzSfyFLv0/7Pd/9YjxX/xt88Cy4QBA79Q3NpfnKpXymgMHZ/8geciegWZ0PPjuacUajnf6rmbzc8XqNmKcRNYNOAv2bvqIeNXrxgAAAAAAAAAAAAAAAB2dxjuWet1HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAzq//BwAA//8wANJz") r8 = socket$inet6_udplite(0xa, 0x2, 0x88) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\vl'], 0x48) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wg0\x00', 0x0}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x18, 0x7ffc1fff}]}) r10 = getpgrp(0x0) r11 = syz_pidfd_open(r10, 0x0) process_madvise(r11, 0x0, 0x0, 0x4, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f00000000c0)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x18, r9}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000200)={'bond0\x00'}) 214.830374ms ago: executing program 1 (id=10891): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000840)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x97a3}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003280)=ANY=[@ANYBLOB="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"], 0xb98}}, 0x2400c004) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r2, 0x400, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={0xffffffffffffffff}, 0x4) bpf$TOKEN_CREATE(0x24, &(0x7f00000002c0)={0x0, r4}, 0x8) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000040)={0x2, 0x4e22, @broadcast}, 0x10) setsockopt$sock_int(r6, 0x1, 0x800000000f, &(0x7f0000000080)=0xa, 0x4) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4) bind$inet6(r7, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) listen(r6, 0x0) setsockopt$sock_int(r7, 0x1, 0x2, &(0x7f00000000c0)=0xc, 0x4) listen(r7, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x18) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000280)={0x5, &(0x7f0000000240)=[{0x399, 0x2, 0x6, 0x4}, {0x1000, 0x1, 0x0, 0x3}, {0x9, 0x6, 0x31, 0xbad2}, {0x1000, 0x6, 0xbd, 0x8}, {0x3, 0x6, 0x7f, 0x5}]}, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0003402e60000000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x60044084) socket$inet6(0xa, 0x3, 0x5) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) syz_mount_image$ext4(&(0x7f00000004c0)='ext2\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000c80)={[{@test_dummy_encryption_v1}, {@grpquota}], [{@subj_user={'subj_user', 0x3d, '^.'}}, {@appraise}, {@hash}, {@uid_lt}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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") mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x2000, 0x56cbca6fd6c540cf, &(0x7f00009df000/0x2000)=nil) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) 205.398154ms ago: executing program 3 (id=10892): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x18) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) writev(r2, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1) 110.175651ms ago: executing program 3 (id=10893): close(0x3) r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x40, 0x9, 0x7ffc1fff}]}) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x6000, 0x1) shutdown(r1, 0x0) close(r1) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x38, &(0x7f00000001c0)=[@in6={0xa, 0x4e20, 0xfffffffb, @private1={0xfc, 0x1, '\x00', 0x1}, 0x322f}, @in6={0xa, 0x4e22, 0x7, @remote, 0x3}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in={{0x2, 0x4e24, @remote}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000001640)={r2}, &(0x7f0000001740)=0x8) unshare(0x22020400) r3 = syz_open_dev$loop(&(0x7f0000000680), 0x9, 0x103480) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) r4 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) fchdir(r5) open(&(0x7f00000000c0)='.\x00', 0x0, 0x100) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) mkdir(&(0x7f0000000000)='./file0\x00', 0xc0) getdents64(r6, &(0x7f0000000f80)=""/4096, 0x1000) ioctl$LOOP_SET_DIRECT_IO(r3, 0x4c08, 0x6e) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="070000000400000008020000d9000000000000", @ANYRES32, @ANYBLOB="008000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000032f22df78754083fa4daa2c400000200"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1f, 0x8, &(0x7f0000000740)=ANY=[@ANYRES64=r5, @ANYRES32=r7], 0x0, 0x8000000, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r8}, 0x18) socket$kcm(0x10, 0x2, 0x0) r9 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r9}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000380)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) 61.717995ms ago: executing program 3 (id=10894): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x61, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000280)='kfree\x00', r2, 0x0, 0xbc3}, 0x18) sendmsg$NFT_BATCH(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x24048011}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) 1.0126ms ago: executing program 3 (id=10895): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x18) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$eJzs3E+LHEUYB+B315iNG/ePGqMJiIVe9NJk9+BFL4tsQDKgJFkhEYSO26vDtDPD9LAwIkZPXv0cIojgTRBvetmL30DwthePEcSWndEko5PDSEiH5Xku80LVb6jqphuq6erD1774sLNXZXv5MBYXFmKxH5FupUixGP/4NF5+9cefnrty7fqlrVZr+3JKF7eubrySUlp9/vt3Pv7qhR+Gp9/+dvW7pThYf/fwt81fD84enDv88+oH7Sq1q9TtDVOebvR6w/xGWaTddtXJUnqrLPKqSO1uVQym2vfKXr8/Snl3d2W5PyiqKuXdUeoUozTspeFglPL383Y3ZVmWVpaD+Z24Xe18eauu64i6fjRORl3X9WOxHKfj8ViJ1ViL9Xginoyn4kw8HWfjmXg2vvnl69FRAgAAAAAAAAAAAAAAAAAAALh/5t3/f27cq+lRAwAAAAAAAAAAAAAAAAAAwPFy5dr1S1ut1vbllE5FlJ/v7+zvTH4n7Vt70Y4yirgQa/FHjHf/T0zqi2+0ti+ksfX4rLz5d/7m/s4j0/mN8ecEZuY3Jvk0nV+K5bvzm7EWZ2bnN2fmT8VLL96Vz2Itfn4velHGbhxl7+Q/2Ujp9Tdb/8qfH/cDAACA4yBLt81cv2fZvdon+TmeD0ytr4+y5080OnUiohp91MnLshgoHvriZLPD+L2u6+YPQkPFva+UpYj43/+8EBEPxwT/UzR9Z+JBuHPSmx4JAAAAAAAAAAAA83gQrxM2PUcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+YgeOBQAAAACE+Vun0bEBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHwVAAD//+pd0x0=") bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0xb0}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x5, 0x8}], {0x95, 0x0, 0x9}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005f04", 0x8) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x8100, 0x0) ioctl$TIOCSRS485(r3, 0x542f, 0x0) r4 = perf_event_open(&(0x7f00000007c0)={0x3, 0x80, 0x4e, 0x1, 0x0, 0x1, 0x0, 0xe, 0x2040e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x2, @perf_bp={&(0x7f0000000340), 0x2}, 0x0, 0x30, 0x0, 0x7, 0x18bb, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[], 0x48) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000"], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r5, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r6 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x1000f4) getsockopt$inet_mreqn(r6, 0x0, 0x23, &(0x7f0000000480)={@remote, @broadcast}, &(0x7f00000004c0)=0xc) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f0000000000)='cpu>00||!') renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = creat(0x0, 0x0) write$binfmt_aout(r7, &(0x7f00000000c0)=ANY=[], 0x20) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$PIO_FONTRESET(r3, 0x4b6d, 0x0) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x0, 0x6, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x548}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x18) msgget(0x3, 0x693) 0s ago: executing program 1 (id=10905): close(0x3) r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x40, 0x9, 0x7ffc1fff}]}) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x6000, 0x1) shutdown(r1, 0x0) close(r1) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x38, &(0x7f00000001c0)=[@in6={0xa, 0x4e20, 0xfffffffb, @private1={0xfc, 0x1, '\x00', 0x1}, 0x322f}, @in6={0xa, 0x4e22, 0x7, @remote, 0x3}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in={{0x2, 0x4e24, @remote}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000001640)={r2}, &(0x7f0000001740)=0x8) unshare(0x22020400) r3 = syz_open_dev$loop(&(0x7f0000000680), 0x9, 0x103480) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) r4 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) fchdir(r5) open(&(0x7f00000000c0)='.\x00', 0x0, 0x100) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) mkdir(&(0x7f0000000000)='./file0\x00', 0xc0) getdents64(r6, &(0x7f0000000f80)=""/4096, 0x1000) ioctl$LOOP_SET_DIRECT_IO(r3, 0x4c08, 0x6e) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="070000000400000008020000d9000000000000", @ANYRES32, @ANYBLOB="008000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000032f22df78754083fa4daa2c400000200"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1f, 0x8, &(0x7f0000000740)=ANY=[@ANYRES64=r5, @ANYRES32=r7], 0x0, 0x8000000, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r8}, 0x18) socket$kcm(0x10, 0x2, 0x0) r9 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r9}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000380)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) kernel console output (not intermixed with test programs): ter parsing attributes in process `syz.3.10134'. [ 571.164948][ T646] loop2: detected capacity change from 0 to 512 [ 571.196968][ T654] netlink: 168 bytes leftover after parsing attributes in process `syz.0.10141'. [ 571.234117][ T646] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 571.242873][ T646] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 571.260605][ T646] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4215: comm syz.2.10137: Allocating blocks 41-42 which overlap fs metadata [ 571.277382][ T646] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4215: comm syz.2.10137: Allocating blocks 41-42 which overlap fs metadata [ 571.291519][ T646] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.10137: Failed to acquire dquot type 1 [ 571.304293][ T646] EXT4-fs error (device loop2): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 571.319101][ T646] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #12: comm syz.2.10137: corrupted inode contents [ 571.319155][ T662] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 571.331463][ T646] EXT4-fs error (device loop2): ext4_dirty_inode:6502: inode #12: comm syz.2.10137: mark_inode_dirty error [ 571.350516][ T646] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #12: comm syz.2.10137: corrupted inode contents [ 571.363402][ T646] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #12: comm syz.2.10137: mark_inode_dirty error [ 571.375085][ T646] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #12: comm syz.2.10137: corrupted inode contents [ 571.387295][ T646] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 571.399716][ T646] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #12: comm syz.2.10137: corrupted inode contents [ 571.418710][ T668] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10146'. [ 571.422614][ T646] EXT4-fs error (device loop2): ext4_truncate:4635: inode #12: comm syz.2.10137: mark_inode_dirty error [ 571.428176][ T668] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10146'. [ 571.448097][ T646] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 571.457586][ T646] EXT4-fs (loop2): 1 truncate cleaned up [ 571.482636][ T646] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 571.506411][ T678] loop1: detected capacity change from 0 to 512 [ 571.513529][ T678] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 571.522265][ T678] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 571.536752][ T678] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4215: comm syz.1.10151: Allocating blocks 41-42 which overlap fs metadata [ 571.551096][ T678] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.10151: Failed to acquire dquot type 1 [ 571.564279][ T678] EXT4-fs error (device loop1): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 571.579110][ T678] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #12: comm syz.1.10151: corrupted inode contents [ 571.592297][ T678] EXT4-fs error (device loop1): ext4_dirty_inode:6502: inode #12: comm syz.1.10151: mark_inode_dirty error [ 571.604792][ T678] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #12: comm syz.1.10151: corrupted inode contents [ 571.617390][ T678] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #12: comm syz.1.10151: mark_inode_dirty error [ 571.630522][ T678] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #12: comm syz.1.10151: corrupted inode contents [ 571.642874][ T678] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 571.651649][ T678] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #12: comm syz.1.10151: corrupted inode contents [ 571.663760][ T678] EXT4-fs error (device loop1): ext4_truncate:4635: inode #12: comm syz.1.10151: mark_inode_dirty error [ 571.675306][ T678] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 571.684771][ T678] EXT4-fs (loop1): 1 truncate cleaned up [ 571.699625][ T678] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 571.741077][ T694] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 571.758427][ T694] loop2: detected capacity change from 0 to 2048 [ 571.779445][ T694] EXT4-fs (loop2): failed to initialize system zone (-117) [ 571.791958][ T694] EXT4-fs (loop2): mount failed [ 571.874972][ T708] lo speed is unknown, defaulting to 1000 [ 571.976621][ T723] loop3: detected capacity change from 0 to 512 [ 571.983729][ T723] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 571.992713][ T723] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 572.001555][ T724] FAULT_INJECTION: forcing a failure. [ 572.001555][ T724] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 572.014830][ T724] CPU: 1 UID: 0 PID: 724 Comm: syz.1.10167 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 572.014864][ T724] Tainted: [W]=WARN [ 572.014870][ T724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 572.014943][ T724] Call Trace: [ 572.014951][ T724] [ 572.014958][ T724] __dump_stack+0x1d/0x30 [ 572.014984][ T724] dump_stack_lvl+0xe8/0x140 [ 572.015007][ T724] dump_stack+0x15/0x1b [ 572.015027][ T724] should_fail_ex+0x265/0x280 [ 572.015095][ T724] should_fail+0xb/0x20 [ 572.015116][ T724] should_fail_usercopy+0x1a/0x20 [ 572.015198][ T724] _copy_from_iter+0xcf/0xe70 [ 572.015227][ T724] ? __alloc_skb+0x3bb/0x4d0 [ 572.015320][ T724] ? __alloc_skb+0x24d/0x4d0 [ 572.015356][ T724] netlink_sendmsg+0x471/0x6b0 [ 572.015388][ T724] ? __pfx_netlink_sendmsg+0x10/0x10 [ 572.015416][ T724] __sock_sendmsg+0x145/0x180 [ 572.015472][ T724] ____sys_sendmsg+0x31e/0x4a0 [ 572.015501][ T724] ___sys_sendmsg+0x17b/0x1d0 [ 572.015572][ T724] __x64_sys_sendmsg+0xd4/0x160 [ 572.015604][ T724] x64_sys_call+0x17ba/0x3000 [ 572.015626][ T724] do_syscall_64+0xd8/0x2a0 [ 572.015708][ T724] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 572.015793][ T724] RIP: 0033:0x7f161c80f749 [ 572.015809][ T724] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 572.015827][ T724] RSP: 002b:00007f161b26f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 572.015847][ T724] RAX: ffffffffffffffda RBX: 00007f161ca65fa0 RCX: 00007f161c80f749 [ 572.015859][ T724] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 572.015947][ T724] RBP: 00007f161b26f090 R08: 0000000000000000 R09: 0000000000000000 [ 572.015958][ T724] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 572.015968][ T724] R13: 00007f161ca66038 R14: 00007f161ca65fa0 R15: 00007ffcf345f538 [ 572.015994][ T724] [ 572.218122][ T723] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4215: comm syz.3.10168: Allocating blocks 41-42 which overlap fs metadata [ 572.234435][ T728] loop4: detected capacity change from 0 to 512 [ 572.241665][ T723] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4215: comm syz.3.10168: Allocating blocks 41-42 which overlap fs metadata [ 572.243164][ T728] EXT4-fs: inline encryption not supported [ 572.255808][ T723] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.10168: Failed to acquire dquot type 1 [ 572.273148][ T723] EXT4-fs error (device loop3): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 572.299720][ T728] EXT4-fs: Ignoring removed nobh option [ 572.306911][ T728] EXT4-fs: Ignoring removed nobh option [ 572.313359][ T728] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 572.323680][ T723] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #12: comm syz.3.10168: corrupted inode contents [ 572.336082][ T728] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c029, mo2=0002] [ 572.344328][ T29] kauditd_printk_skb: 2426 callbacks suppressed [ 572.344422][ T29] audit: type=1400 audit(1765612650.017:113510): avc: denied { create } for pid=740 comm="syz.0.10175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 572.348282][ T728] System zones: [ 572.350726][ T29] audit: type=1400 audit(1765612650.017:113511): avc: denied { write } for pid=740 comm="syz.0.10175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 572.371032][ T728] 1-12 [ 572.374531][ T29] audit: type=1400 audit(1765612650.017:113512): avc: denied { nlmsg_write } for pid=740 comm="syz.0.10175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 572.394744][ T728] [ 572.395182][ T723] EXT4-fs error (device loop3): ext4_dirty_inode:6502: inode #12: comm syz.3.10168: mark_inode_dirty error [ 572.429121][ T744] loop1: detected capacity change from 0 to 512 [ 572.439704][ T29] audit: type=1400 audit(1765612650.017:113513): avc: denied { read } for pid=734 comm="syz.2.10173" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 572.462991][ T29] audit: type=1400 audit(1765612650.091:113514): avc: denied { setopt } for pid=742 comm="syz.1.10176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 572.463140][ T723] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #12: comm syz.3.10168: corrupted inode contents [ 572.482769][ T29] audit: type=1400 audit(1765612650.091:113515): avc: denied { bind } for pid=742 comm="syz.1.10176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 572.482795][ T29] audit: type=1400 audit(1765612650.091:113516): avc: denied { name_bind } for pid=742 comm="syz.1.10176" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 572.482817][ T29] audit: type=1400 audit(1765612650.091:113517): avc: denied { node_bind } for pid=742 comm="syz.1.10176" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 572.482911][ T29] audit: type=1400 audit(1765612650.091:113518): avc: denied { create } for pid=740 comm="syz.0.10175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 572.536149][ T29] audit: type=1400 audit(1765612650.091:113519): avc: denied { write } for pid=740 comm="syz.0.10175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 572.558235][ T723] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #12: comm syz.3.10168: mark_inode_dirty error [ 572.608710][ T744] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 572.609086][ T728] EXT4-fs (loop4): 1 truncate cleaned up [ 572.617534][ T744] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 572.630768][ T723] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #12: comm syz.3.10168: corrupted inode contents [ 572.645317][ T723] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 572.652980][ T728] EXT4-fs error (device loop4): ext4_xattr_block_list:766: inode #15: comm syz.4.10170: corrupted xattr block 33: invalid header [ 572.655500][ T723] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #12: comm syz.3.10168: corrupted inode contents [ 572.669254][ T744] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4215: comm syz.1.10176: Allocating blocks 41-42 which overlap fs metadata [ 572.681391][ T723] EXT4-fs error (device loop3): ext4_truncate:4635: inode #12: comm syz.3.10168: mark_inode_dirty error [ 572.704067][ T744] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4215: comm syz.1.10176: Allocating blocks 41-42 which overlap fs metadata [ 572.704126][ T728] EXT4-fs (loop4): Remounting filesystem read-only [ 572.726757][ T744] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.10176: Failed to acquire dquot type 1 [ 572.727190][ T723] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 572.747319][ T723] EXT4-fs (loop3): 1 truncate cleaned up [ 572.760369][ T744] EXT4-fs error (device loop1): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 572.775215][ T744] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #12: comm syz.1.10176: corrupted inode contents [ 572.775784][ T723] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 572.796426][ T744] EXT4-fs error (device loop1): ext4_dirty_inode:6502: inode #12: comm syz.1.10176: mark_inode_dirty error [ 572.819078][ T744] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #12: comm syz.1.10176: corrupted inode contents [ 572.837010][ T744] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #12: comm syz.1.10176: mark_inode_dirty error [ 572.848748][ T744] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #12: comm syz.1.10176: corrupted inode contents [ 572.875023][ T744] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 572.889338][ T744] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #12: comm syz.1.10176: corrupted inode contents [ 572.901904][ T744] EXT4-fs error (device loop1): ext4_truncate:4635: inode #12: comm syz.1.10176: mark_inode_dirty error [ 572.917871][ T744] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 572.971972][ T744] EXT4-fs (loop1): 1 truncate cleaned up [ 572.988873][ T744] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 573.007516][ T768] FAULT_INJECTION: forcing a failure. [ 573.007516][ T768] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 573.020640][ T768] CPU: 1 UID: 0 PID: 768 Comm: syz.4.10186 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 573.020672][ T768] Tainted: [W]=WARN [ 573.020677][ T768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 573.020684][ T768] Call Trace: [ 573.020689][ T768] [ 573.020696][ T768] __dump_stack+0x1d/0x30 [ 573.020712][ T768] dump_stack_lvl+0xe8/0x140 [ 573.020725][ T768] dump_stack+0x15/0x1b [ 573.020775][ T768] should_fail_ex+0x265/0x280 [ 573.020866][ T768] should_fail+0xb/0x20 [ 573.020877][ T768] should_fail_usercopy+0x1a/0x20 [ 573.020951][ T768] _copy_to_user+0x20/0xa0 [ 573.021083][ T768] simple_read_from_buffer+0xb5/0x130 [ 573.021096][ T768] proc_fail_nth_read+0x10e/0x150 [ 573.021226][ T768] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 573.021242][ T768] vfs_read+0x1a8/0x770 [ 573.021253][ T768] ? __rcu_read_unlock+0x4f/0x70 [ 573.021270][ T768] ? __fget_files+0x184/0x1c0 [ 573.021317][ T768] ? mutex_lock+0x58/0x90 [ 573.021343][ T768] ksys_read+0xda/0x1a0 [ 573.021361][ T768] __x64_sys_read+0x40/0x50 [ 573.021377][ T768] x64_sys_call+0x2889/0x3000 [ 573.021413][ T768] do_syscall_64+0xd8/0x2a0 [ 573.021444][ T768] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 573.021500][ T768] RIP: 0033:0x7fe70f70e15c [ 573.021516][ T768] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 573.021549][ T768] RSP: 002b:00007fe70e16f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 573.021573][ T768] RAX: ffffffffffffffda RBX: 00007fe70f965fa0 RCX: 00007fe70f70e15c [ 573.021584][ T768] RDX: 000000000000000f RSI: 00007fe70e16f0a0 RDI: 0000000000000005 [ 573.021595][ T768] RBP: 00007fe70e16f090 R08: 0000000000000000 R09: 0000000000000000 [ 573.021606][ T768] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000001 [ 573.021697][ T768] R13: 00007fe70f966038 R14: 00007fe70f965fa0 R15: 00007ffca104f618 [ 573.021714][ T768] [ 573.235854][ T771] loop3: detected capacity change from 0 to 512 [ 573.243187][ T771] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 573.251948][ T771] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 573.303511][ T771] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4215: comm syz.3.10188: Allocating blocks 41-42 which overlap fs metadata [ 573.321193][ T771] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4215: comm syz.3.10188: Allocating blocks 41-42 which overlap fs metadata [ 573.335850][ T771] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.10188: Failed to acquire dquot type 1 [ 573.353630][ T771] EXT4-fs error (device loop3): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 573.368929][ T771] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #12: comm syz.3.10188: corrupted inode contents [ 573.385913][ T771] EXT4-fs error (device loop3): ext4_dirty_inode:6502: inode #12: comm syz.3.10188: mark_inode_dirty error [ 573.427946][ T771] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #12: comm syz.3.10188: corrupted inode contents [ 573.449180][ T771] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #12: comm syz.3.10188: mark_inode_dirty error [ 573.484774][ T771] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #12: comm syz.3.10188: corrupted inode contents [ 573.512944][ T771] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 573.521962][ T771] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #12: comm syz.3.10188: corrupted inode contents [ 573.528485][ T785] netlink: 68 bytes leftover after parsing attributes in process `syz.1.10187'. [ 573.535412][ T771] EXT4-fs error (device loop3): ext4_truncate:4635: inode #12: comm syz.3.10188: mark_inode_dirty error [ 573.549551][ T802] loop2: detected capacity change from 0 to 512 [ 573.555333][ T805] SELinux: policydb string length 14155784 does not match expected length 8 [ 573.569436][ T802] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 573.576489][ T805] SELinux: failed to load policy [ 573.578298][ T802] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 573.583245][ T771] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 573.601630][ T771] EXT4-fs (loop3): 1 truncate cleaned up [ 573.607731][ T771] EXT4-fs mount: 76 callbacks suppressed [ 573.607745][ T771] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 573.633716][ T771] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 573.658881][ T802] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4215: comm syz.2.10198: Allocating blocks 41-42 which overlap fs metadata [ 573.673121][ T802] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4215: comm syz.2.10198: Allocating blocks 41-42 which overlap fs metadata [ 573.673280][T30959] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 573.696664][ T802] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.10198: Failed to acquire dquot type 1 [ 573.716478][ T802] EXT4-fs error (device loop2): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 573.745986][ T820] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 573.760152][ T802] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #12: comm syz.2.10198: corrupted inode contents [ 573.781562][ T820] loop3: detected capacity change from 0 to 2048 [ 573.788187][ T802] EXT4-fs error (device loop2): ext4_dirty_inode:6502: inode #12: comm syz.2.10198: mark_inode_dirty error [ 573.800469][ T802] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #12: comm syz.2.10198: corrupted inode contents [ 573.812972][ T802] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #12: comm syz.2.10198: mark_inode_dirty error [ 573.841947][ T820] EXT4-fs (loop3): failed to initialize system zone (-117) [ 573.850052][ T820] EXT4-fs (loop3): mount failed [ 573.855479][ T802] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #12: comm syz.2.10198: corrupted inode contents [ 573.882589][ T825] lo speed is unknown, defaulting to 1000 [ 573.918156][ T802] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 573.938633][ T802] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #12: comm syz.2.10198: corrupted inode contents [ 573.966757][ T802] EXT4-fs error (device loop2): ext4_truncate:4635: inode #12: comm syz.2.10198: mark_inode_dirty error [ 573.989193][ T802] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 573.999246][ T802] EXT4-fs (loop2): 1 truncate cleaned up [ 574.007576][ T802] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 574.043665][ T802] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 574.087398][ T850] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 574.096505][ T850] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 574.114837][T27724] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 574.126693][ T850] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4215: comm syz.4.10215: Allocating blocks 41-42 which overlap fs metadata [ 574.145257][ T850] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.10215: Failed to acquire dquot type 1 [ 574.156989][ T850] EXT4-fs error (device loop4): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 574.171919][ T850] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #12: comm syz.4.10215: corrupted inode contents [ 574.184719][ T850] EXT4-fs error (device loop4): ext4_dirty_inode:6502: inode #12: comm syz.4.10215: mark_inode_dirty error [ 574.197075][ T850] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #12: comm syz.4.10215: corrupted inode contents [ 574.212384][ T850] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #12: comm syz.4.10215: mark_inode_dirty error [ 574.226967][ T850] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #12: comm syz.4.10215: corrupted inode contents [ 574.241888][ T850] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 574.264001][ T850] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #12: comm syz.4.10215: corrupted inode contents [ 574.280621][ T850] EXT4-fs error (device loop4): ext4_truncate:4635: inode #12: comm syz.4.10215: mark_inode_dirty error [ 574.299334][ T850] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 574.308669][ T850] EXT4-fs (loop4): 1 truncate cleaned up [ 574.315180][ T850] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 574.342754][ T850] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 574.427124][T30641] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 574.520412][ T880] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 574.551522][ T893] lo speed is unknown, defaulting to 1000 [ 574.624700][T30959] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 574.925188][ T925] can0: slcan on ttyS3. [ 574.944950][ T927] EXT4-fs: inline encryption not supported [ 574.951137][ T927] EXT4-fs: Ignoring removed nobh option [ 574.971170][ T927] EXT4-fs: Ignoring removed nobh option [ 575.005601][ T927] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 575.051239][ T925] can0 (unregistered): slcan off ttyS3. [ 575.094103][ T927] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c029, mo2=0002] [ 575.130200][ T925] can0: slcan on ttyS3. [ 575.154329][ T927] System zones: 1-12 [ 575.167756][ T927] EXT4-fs (loop1): 1 truncate cleaned up [ 575.189822][ T927] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 575.228005][ T948] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 575.244781][ T948] EXT4-fs (loop3): 1 truncate cleaned up [ 575.251297][ T948] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 575.278255][T30959] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 575.315383][ T927] EXT4-fs error (device loop1): ext4_xattr_block_list:766: inode #15: comm syz.1.10244: corrupted xattr block 33: invalid header [ 575.332560][ T927] EXT4-fs (loop1): Remounting filesystem read-only [ 575.354760][T29730] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 575.546992][ T970] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 575.609305][T29730] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 575.619152][ T887] can0 (unregistered): slcan off ttyS3. [ 575.754367][ T983] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 575.794005][ T983] EXT4-fs (loop4): failed to initialize system zone (-117) [ 575.801593][ T983] EXT4-fs (loop4): mount failed [ 575.857149][ T996] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 575.865927][ T996] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 575.900032][ T996] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4215: comm syz.2.10269: Allocating blocks 41-42 which overlap fs metadata [ 575.916388][ T996] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.10269: Failed to acquire dquot type 1 [ 575.940802][ T996] EXT4-fs error (device loop2): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 575.960465][ T996] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #12: comm syz.2.10269: corrupted inode contents [ 575.973218][ T996] EXT4-fs error (device loop2): ext4_dirty_inode:6502: inode #12: comm syz.2.10269: mark_inode_dirty error [ 575.985249][ T996] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #12: comm syz.2.10269: corrupted inode contents [ 575.997716][ T996] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #12: comm syz.2.10269: mark_inode_dirty error [ 576.009783][ T996] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #12: comm syz.2.10269: corrupted inode contents [ 576.022248][ T996] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 576.022637][ T1004] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 576.043414][ T996] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #12: comm syz.2.10269: corrupted inode contents [ 576.064609][ T996] EXT4-fs error (device loop2): ext4_truncate:4635: inode #12: comm syz.2.10269: mark_inode_dirty error [ 576.076049][ T996] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 576.076541][T30641] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 576.094842][ T996] EXT4-fs (loop2): 1 truncate cleaned up [ 576.105197][ T996] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 576.121321][ T996] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 576.152744][T27724] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 576.312226][ T1008] netlink: 68 bytes leftover after parsing attributes in process `syz.4.10272'. [ 576.401676][ T1024] set_capacity_and_notify: 9 callbacks suppressed [ 576.401691][ T1024] loop4: detected capacity change from 0 to 8192 [ 576.492308][ T1030] lo speed is unknown, defaulting to 1000 [ 576.586817][ T1033] loop3: detected capacity change from 0 to 512 [ 576.605461][ T1033] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 576.623440][ T1033] EXT4-fs (loop3): 1 truncate cleaned up [ 576.633162][ T1033] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 576.690538][ T1039] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10283'. [ 576.732942][T30959] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 576.891091][ T1054] loop3: detected capacity change from 0 to 507 [ 576.916262][ T1054] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 1, start 00000101) [ 577.032281][ T1062] loop3: detected capacity change from 0 to 512 [ 577.069934][ T1062] ext4: Unknown parameter 'obj_role' [ 577.147958][ T1055] netlink: 68 bytes leftover after parsing attributes in process `syz.1.10288'. [ 577.169557][ T1064] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 577.252909][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x1 [ 577.260509][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 577.267982][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 577.275647][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 577.283079][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 577.290739][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 577.298250][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 577.305720][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x2 [ 577.313587][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 577.321106][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 577.331529][ T23] hid-generic 0000:0000:0000.0001: hidraw0: HID v8.00 Device [syz0] on syz0 [ 577.420192][ T1075] loop4: detected capacity change from 0 to 512 [ 577.449970][ T1075] EXT4-fs: inline encryption not supported [ 577.455972][ T1075] EXT4-fs: Ignoring removed nobh option [ 577.462548][ T1075] EXT4-fs: Ignoring removed nobh option [ 577.468638][ T1075] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 577.481649][ T1075] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c029, mo2=0002] [ 577.490137][ T1075] System zones: 1-12 [ 577.500959][ T1075] EXT4-fs (loop4): 1 truncate cleaned up [ 577.510043][ T1075] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 577.543174][ T1075] EXT4-fs error (device loop4): ext4_xattr_block_list:766: inode #15: comm syz.4.10296: corrupted xattr block 33: invalid header [ 577.557673][ T1075] EXT4-fs (loop4): Remounting filesystem read-only [ 577.579475][T30641] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 577.614937][ T1087] loop4: detected capacity change from 0 to 1024 [ 577.621252][ T1089] loop1: detected capacity change from 0 to 1024 [ 577.637165][ T1087] xt_connbytes: Forcing CT accounting to be enabled [ 577.644039][ T1087] set match dimension is over the limit! [ 577.652409][ T1089] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 577.693460][ T29] kauditd_printk_skb: 1235 callbacks suppressed [ 577.693526][ T29] audit: type=1400 audit(1765612655.021:114737): avc: denied { mount } for pid=1088 comm="syz.1.10301" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 577.754617][ T29] audit: type=1326 audit(1765612655.021:114738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1088 comm="syz.1.10301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f161c80f749 code=0x7ffc0000 [ 577.778402][ T29] audit: type=1326 audit(1765612655.021:114739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1088 comm="syz.1.10301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f161c80f749 code=0x7ffc0000 [ 577.802207][ T29] audit: type=1326 audit(1765612655.021:114740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1088 comm="syz.1.10301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f161c80f749 code=0x7ffc0000 [ 577.825954][ T29] audit: type=1326 audit(1765612655.021:114741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1088 comm="syz.1.10301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f161c80f749 code=0x7ffc0000 [ 577.849634][ T29] audit: type=1326 audit(1765612655.021:114742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1088 comm="syz.1.10301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f161c80f749 code=0x7ffc0000 [ 577.873306][ T29] audit: type=1400 audit(1765612655.021:114743): avc: denied { map_create } for pid=1088 comm="syz.1.10301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 577.892839][ T29] audit: type=1400 audit(1765612655.021:114744): avc: denied { bpf } for pid=1088 comm="syz.1.10301" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 577.913730][ T29] audit: type=1326 audit(1765612655.021:114745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1088 comm="syz.1.10301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f161c80f749 code=0x7ffc0000 [ 577.937536][ T29] audit: type=1400 audit(1765612655.021:114746): avc: denied { map_read map_write } for pid=1088 comm="syz.1.10301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 577.985624][T29730] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 578.003923][ T1095] netlink: 68 bytes leftover after parsing attributes in process `syz.0.10302'. [ 578.055447][ T1108] loop4: detected capacity change from 0 to 512 [ 578.062591][ T1108] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 578.071453][ T1108] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 578.109932][ T1108] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4215: comm syz.4.10308: Allocating blocks 41-42 which overlap fs metadata [ 578.133228][ T1108] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4215: comm syz.4.10308: Allocating blocks 41-42 which overlap fs metadata [ 578.151265][ T1108] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.10308: Failed to acquire dquot type 1 [ 578.179541][ T1122] loop3: detected capacity change from 0 to 512 [ 578.186755][ T1122] EXT4-fs: inline encryption not supported [ 578.192887][ T1122] EXT4-fs: Ignoring removed nobh option [ 578.199614][ T1108] EXT4-fs error (device loop4): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 578.214692][ T1122] EXT4-fs: Ignoring removed nobh option [ 578.227082][ T1122] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 578.237570][ T1108] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #12: comm syz.4.10308: corrupted inode contents [ 578.251087][ T1122] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c029, mo2=0002] [ 578.259078][ T1122] System zones: 1-12 [ 578.264476][ T1122] EXT4-fs (loop3): 1 truncate cleaned up [ 578.270993][ T1122] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 578.289461][ T1125] siw: device registration error -23 [ 578.295849][ T1108] EXT4-fs error (device loop4): ext4_dirty_inode:6502: inode #12: comm syz.4.10308: mark_inode_dirty error [ 578.312833][ T1108] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #12: comm syz.4.10308: corrupted inode contents [ 578.346592][ T1122] EXT4-fs error (device loop3): ext4_xattr_block_list:766: inode #15: comm syz.3.10311: corrupted xattr block 33: invalid header [ 578.398981][ T1108] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #12: comm syz.4.10308: mark_inode_dirty error [ 578.425936][ T1122] EXT4-fs (loop3): Remounting filesystem read-only [ 578.444856][ T1108] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #12: comm syz.4.10308: corrupted inode contents [ 578.524910][ T1108] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 578.539298][T30959] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 578.550986][ T1108] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #12: comm syz.4.10308: corrupted inode contents [ 578.563576][ T1108] EXT4-fs error (device loop4): ext4_truncate:4635: inode #12: comm syz.4.10308: mark_inode_dirty error [ 578.575491][ T1108] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 578.585398][ T1108] EXT4-fs (loop4): 1 truncate cleaned up [ 578.591652][ T1108] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 578.608130][ T1108] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 578.625243][T30641] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 578.643789][ T1137] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10316'. [ 578.754130][ T1147] tmpfs: Bad value for 'mpol' [ 578.793885][ T1151] loop4: detected capacity change from 0 to 512 [ 578.800830][ T1151] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 578.984429][ T1154] vfat: Unknown parameter 'ÿÿÿÿ18446744073709551615' [ 579.024838][ T1151] EXT4-fs (loop4): 1 truncate cleaned up [ 579.032044][ T1151] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 579.052302][ T1154] EXT4-fs (loop2): too many log groups per flexible block group [ 579.065269][ T1154] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 579.074769][ T1154] EXT4-fs (loop2): mount failed [ 579.107487][T30641] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 579.214194][ T1159] EXT4-fs: EXT4-fs: inode_readahead_blks must be 0 or a power of 2 smaller than 2^31 [ 579.257263][ T1163] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.10325: error while reading EA inode 32 err=-116 [ 579.279049][ T1163] EXT4-fs (loop0): Remounting filesystem read-only [ 579.285708][ T1163] EXT4-fs warning (device loop0): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 579.286058][ T1167] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 579.295901][ T1163] EXT4-fs (loop0): 1 orphan inode deleted [ 579.304513][ T1167] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 579.319790][ T1163] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 579.330151][ T1167] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4215: comm syz.2.10326: Allocating blocks 41-42 which overlap fs metadata [ 579.346005][ T1167] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4215: comm syz.2.10326: Allocating blocks 41-42 which overlap fs metadata [ 579.360179][ T1167] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.10326: Failed to acquire dquot type 1 [ 579.371994][ T1167] EXT4-fs error (device loop2): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 579.386917][ T1167] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #12: comm syz.2.10326: corrupted inode contents [ 579.399296][ T1167] EXT4-fs error (device loop2): ext4_dirty_inode:6502: inode #12: comm syz.2.10326: mark_inode_dirty error [ 579.411519][ T1167] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #12: comm syz.2.10326: corrupted inode contents [ 579.423763][ T1167] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #12: comm syz.2.10326: mark_inode_dirty error [ 579.435462][ T1167] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #12: comm syz.2.10326: corrupted inode contents [ 579.435804][ T1173] lo speed is unknown, defaulting to 1000 [ 579.447935][ T1167] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 579.462106][ T1167] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #12: comm syz.2.10326: corrupted inode contents [ 579.507364][ T1167] EXT4-fs error (device loop2): ext4_truncate:4635: inode #12: comm syz.2.10326: mark_inode_dirty error [ 579.519525][ T1167] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 579.531649][ T1176] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10328'. [ 579.541227][ T1167] EXT4-fs (loop2): 1 truncate cleaned up [ 579.574440][ T1167] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 579.597398][ T1167] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 579.658523][T27724] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 579.716152][ T1178] netlink: 68 bytes leftover after parsing attributes in process `syz.4.10329'. [ 579.920186][ T1212] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 579.969896][ T1215] can0: slcan on ttyS3. [ 580.013205][ T1215] can0 (unregistered): slcan off ttyS3. [ 580.033989][T30959] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 580.050091][ T1215] can0: slcan on ttyS3. [ 580.066861][ T1219] lo speed is unknown, defaulting to 1000 [ 580.189526][T30156] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 580.291724][ T1225] EXT4-fs: EXT4-fs: inode_readahead_blks must be 0 or a power of 2 smaller than 2^31 [ 580.553067][ T1226] netlink: 68 bytes leftover after parsing attributes in process `syz.3.10344'. [ 580.627644][ T1234] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 580.636409][ T1234] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 580.665608][ T1236] xt_connbytes: Forcing CT accounting to be enabled [ 580.678162][ T1236] set match dimension is over the limit! [ 580.709321][ T1234] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4215: comm syz.0.10347: Allocating blocks 41-42 which overlap fs metadata [ 580.724139][ T1234] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4215: comm syz.0.10347: Allocating blocks 41-42 which overlap fs metadata [ 580.745401][ T1234] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.10347: Failed to acquire dquot type 1 [ 580.758035][ T1234] EXT4-fs error (device loop0): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 580.775231][ T1234] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #12: comm syz.0.10347: corrupted inode contents [ 580.793568][ T1234] EXT4-fs error (device loop0): ext4_dirty_inode:6502: inode #12: comm syz.0.10347: mark_inode_dirty error [ 580.840962][ T1234] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #12: comm syz.0.10347: corrupted inode contents [ 580.855099][ T1234] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #12: comm syz.0.10347: mark_inode_dirty error [ 580.867088][ T1234] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #12: comm syz.0.10347: corrupted inode contents [ 580.879279][ T1209] can0 (unregistered): slcan off ttyS3. [ 580.885608][ T1234] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 580.894559][ T1234] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #12: comm syz.0.10347: corrupted inode contents [ 580.906798][ T1234] EXT4-fs error (device loop0): ext4_truncate:4635: inode #12: comm syz.0.10347: mark_inode_dirty error [ 580.918325][ T1234] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 580.921917][ T3519] usb usb4-port1: attempt power cycle [ 580.927588][ T1234] EXT4-fs (loop0): 1 truncate cleaned up [ 580.938891][ T1246] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 580.940251][ T1234] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 580.976417][ T1246] EXT4-fs (loop3): 1 truncate cleaned up [ 580.982631][ T1246] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 581.013209][ T1234] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 581.037598][T30156] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 581.084311][T30959] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 581.107186][ T1255] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 581.125773][ T1255] EXT4-fs (loop3): 1 truncate cleaned up [ 581.142792][ T1255] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 581.158263][ T1253] x_tables: ip_tables: dccp match: only valid for protocol 33 [ 581.237812][T30959] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 581.265136][ T1271] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 581.285316][ T1271] EXT4-fs (loop3): 1 truncate cleaned up [ 581.295435][ T1271] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 581.348551][ T1280] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 581.394741][ T1280] EXT4-fs (loop0): failed to initialize system zone (-117) [ 581.402210][ T1280] EXT4-fs (loop0): mount failed [ 581.434719][T30959] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 581.601574][ T1305] infiniband syz1: set down [ 581.606195][ T1305] infiniband syz1: added veth0_to_bond [ 581.618134][ T1305] RDS/IB: syz1: added [ 581.622179][ T1305] smc: adding ib device syz1 with port count 1 [ 581.628990][ T1305] smc: ib device syz1 port 1 has no pnetid [ 581.682789][ T1306] FAT-fs (loop0): error, corrupted directory (invalid entries) [ 581.690436][ T1306] FAT-fs (loop0): Filesystem has been set read-only [ 581.872632][ T1319] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 582.003341][ T1322] siw: device registration error -23 [ 582.052812][ T1319] set_capacity_and_notify: 16 callbacks suppressed [ 582.052830][ T1319] loop0: detected capacity change from 0 to 2048 [ 582.081666][ T1324] loop3: detected capacity change from 0 to 512 [ 582.089871][ T1324] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 582.152497][ T1319] EXT4-fs (loop0): failed to initialize system zone (-117) [ 582.162268][ T1324] EXT4-fs (loop3): 1 truncate cleaned up [ 582.170289][ T1319] EXT4-fs (loop0): mount failed [ 582.186063][ T1324] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 582.276986][T30959] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 582.365914][ T1334] syz1: rxe_newlink: already configured on veth0_to_bond [ 582.466868][ T1350] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10386'. [ 582.771243][ T1379] loop2: detected capacity change from 0 to 512 [ 582.783105][ T1379] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 582.791824][ T1379] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 582.813649][ T1377] lo speed is unknown, defaulting to 1000 [ 582.845742][ T1379] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4215: comm syz.2.10399: Allocating blocks 41-42 which overlap fs metadata [ 582.910641][ T3519] usb usb4-port1: unable to enumerate USB device [ 582.965264][ T1379] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.10399: Failed to acquire dquot type 1 [ 582.996187][ T1379] EXT4-fs error (device loop2): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 583.018349][ T1379] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #12: comm syz.2.10399: corrupted inode contents [ 583.055430][ T29] kauditd_printk_skb: 1400 callbacks suppressed [ 583.055443][ T29] audit: type=1400 audit(1765612660.035:116132): avc: denied { allowed } for pid=1390 comm="syz.3.10401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 583.081491][ T1379] EXT4-fs error (device loop2): ext4_dirty_inode:6502: inode #12: comm syz.2.10399: mark_inode_dirty error [ 583.098504][ T1357] loop4: detected capacity change from 0 to 2048 [ 583.101357][ T29] audit: type=1400 audit(1765612660.072:116133): avc: denied { create } for pid=1390 comm="syz.3.10401" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 583.115135][ T1379] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #12: comm syz.2.10399: corrupted inode contents [ 583.132450][ T1357] EXT4-fs: EXT4-fs: inode_readahead_blks must be 0 or a power of 2 smaller than 2^31 [ 583.150202][ T29] audit: type=1400 audit(1765612660.119:116134): avc: denied { setopt } for pid=1395 comm="syz.0.10403" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 583.150311][ T29] audit: type=1400 audit(1765612660.119:116135): avc: denied { write } for pid=1395 comm="syz.0.10403" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 583.150336][ T29] audit: type=1400 audit(1765612660.119:116136): avc: denied { connect } for pid=1395 comm="syz.0.10403" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 583.150360][ T29] audit: type=1400 audit(1765612660.119:116137): avc: denied { name_connect } for pid=1395 comm="syz.0.10403" dest=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 583.180199][ T1379] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #12: comm syz.2.10399: mark_inode_dirty error [ 583.248780][ T1379] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #12: comm syz.2.10399: corrupted inode contents [ 583.260924][ T29] audit: type=1400 audit(1765612660.213:116138): avc: denied { ioctl } for pid=1397 comm="syz.0.10404" path="socket:[114222]" dev="sockfs" ino=114222 ioctlcmd=0x6616 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 583.286256][ T29] audit: type=1400 audit(1765612660.213:116139): avc: denied { setopt } for pid=1397 comm="syz.0.10404" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 583.307101][ T1379] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 583.307321][ T29] audit: type=1326 audit(1765612660.231:116140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1399 comm="syz.3.10405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8a3a5f749 code=0x7ffc0000 [ 583.316229][ T1379] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #12: comm syz.2.10399: corrupted inode contents [ 583.339337][ T29] audit: type=1326 audit(1765612660.231:116141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1399 comm="syz.3.10405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8a3a5f749 code=0x7ffc0000 [ 583.386027][ T1379] EXT4-fs error (device loop2): ext4_truncate:4635: inode #12: comm syz.2.10399: mark_inode_dirty error [ 583.397861][ T1379] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 583.408161][ T1379] EXT4-fs (loop2): 1 truncate cleaned up [ 583.414584][ T1379] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 583.487764][ T1379] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 583.513746][T27724] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 583.546766][ T1418] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=55024 sclass=netlink_route_socket pid=1418 comm=syz.2.10411 [ 583.559657][ T1418] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1418 comm=syz.2.10411 [ 583.674837][ T1422] siw: device registration error -23 [ 583.699726][ T1420] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10412'. [ 583.825183][ T1413] netlink: 68 bytes leftover after parsing attributes in process `syz.0.10409'. [ 583.857643][ T1427] FAULT_INJECTION: forcing a failure. [ 583.857643][ T1427] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 583.870951][ T1427] CPU: 0 UID: 0 PID: 1427 Comm: syz.4.10414 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 583.870980][ T1427] Tainted: [W]=WARN [ 583.870986][ T1427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 583.871023][ T1427] Call Trace: [ 583.871030][ T1427] [ 583.871038][ T1427] __dump_stack+0x1d/0x30 [ 583.871059][ T1427] dump_stack_lvl+0xe8/0x140 [ 583.871079][ T1427] dump_stack+0x15/0x1b [ 583.871100][ T1427] should_fail_ex+0x265/0x280 [ 583.871130][ T1427] should_fail+0xb/0x20 [ 583.871150][ T1427] should_fail_usercopy+0x1a/0x20 [ 583.871211][ T1427] _copy_from_user+0x1c/0xb0 [ 583.871234][ T1427] __sys_bpf+0x183/0x7c0 [ 583.871257][ T1427] __x64_sys_bpf+0x41/0x50 [ 583.871275][ T1427] x64_sys_call+0x28e1/0x3000 [ 583.871352][ T1427] do_syscall_64+0xd8/0x2a0 [ 583.871450][ T1427] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 583.871470][ T1427] RIP: 0033:0x7fe70f70f749 [ 583.871483][ T1427] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 583.871500][ T1427] RSP: 002b:00007fe70e16f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 583.871568][ T1427] RAX: ffffffffffffffda RBX: 00007fe70f965fa0 RCX: 00007fe70f70f749 [ 583.871658][ T1427] RDX: 0000000000000010 RSI: 0000200000000340 RDI: 000000000000000f [ 583.871672][ T1427] RBP: 00007fe70e16f090 R08: 0000000000000000 R09: 0000000000000000 [ 583.871686][ T1427] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 583.871758][ T1427] R13: 00007fe70f966038 R14: 00007fe70f965fa0 R15: 00007ffca104f618 [ 583.871778][ T1427] [ 584.039022][ T1425] loop2: detected capacity change from 0 to 8192 [ 584.200499][ T1434] lo speed is unknown, defaulting to 1000 [ 584.222165][ T1443] loop0: detected capacity change from 0 to 1024 [ 584.234616][ T1443] xt_connbytes: Forcing CT accounting to be enabled [ 584.241457][ T1443] set match dimension is over the limit! [ 584.298265][ T1448] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10422'. [ 584.347481][ T1446] loop0: detected capacity change from 0 to 8192 [ 584.368062][ T1452] loop3: detected capacity change from 0 to 512 [ 584.385845][ T1452] EXT4-fs: inline encryption not supported [ 584.391892][ T1452] EXT4-fs: Ignoring removed nobh option [ 584.414794][ T1452] EXT4-fs: Ignoring removed nobh option [ 584.439352][ T1452] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 584.491101][ T1455] lo speed is unknown, defaulting to 1000 [ 584.497596][ T1452] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c029, mo2=0002] [ 584.506921][ T1452] System zones: 1-12 [ 584.527971][ T1452] EXT4-fs (loop3): 1 truncate cleaned up [ 584.537926][ T1452] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 584.587890][ T1452] EXT4-fs error (device loop3): ext4_xattr_block_list:766: inode #15: comm syz.3.10424: corrupted xattr block 33: invalid header [ 584.601648][ T1452] EXT4-fs (loop3): Remounting filesystem read-only [ 584.654547][T30959] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 584.760622][ T1459] netlink: 68 bytes leftover after parsing attributes in process `syz.1.10426'. [ 584.864230][ T1475] loop1: detected capacity change from 0 to 512 [ 584.871494][ T1475] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 584.880335][ T1475] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 584.900845][ T1475] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4215: comm syz.1.10431: Allocating blocks 41-42 which overlap fs metadata [ 584.914963][ T1475] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4215: comm syz.1.10431: Allocating blocks 41-42 which overlap fs metadata [ 584.929113][ T1475] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.10431: Failed to acquire dquot type 1 [ 584.940838][ T1475] EXT4-fs error (device loop1): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 584.955966][ T1475] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #12: comm syz.1.10431: corrupted inode contents [ 584.968332][ T1475] EXT4-fs error (device loop1): ext4_dirty_inode:6502: inode #12: comm syz.1.10431: mark_inode_dirty error [ 584.991816][ T1475] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #12: comm syz.1.10431: corrupted inode contents [ 585.004273][ T1475] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #12: comm syz.1.10431: mark_inode_dirty error [ 585.032715][ T1475] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #12: comm syz.1.10431: corrupted inode contents [ 585.045653][ T1475] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 585.054434][ T1475] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #12: comm syz.1.10431: corrupted inode contents [ 585.083557][ T1475] EXT4-fs error (device loop1): ext4_truncate:4635: inode #12: comm syz.1.10431: mark_inode_dirty error [ 585.112586][ T1475] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 585.121876][ T1475] EXT4-fs (loop1): 1 truncate cleaned up [ 585.128223][ T1475] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 585.150561][ T1475] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 585.170481][T29730] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 585.210133][ T1483] loop1: detected capacity change from 0 to 1024 [ 585.222751][ T1483] xt_connbytes: Forcing CT accounting to be enabled [ 585.229646][ T1483] set match dimension is over the limit! [ 585.278268][ T1492] EXT4-fs: inline encryption not supported [ 585.287262][ T1494] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10435'. [ 585.295142][ T1492] EXT4-fs: Ignoring removed nobh option [ 585.303137][ T1492] EXT4-fs: Ignoring removed nobh option [ 585.318749][ T1492] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 585.331105][ T1492] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c029, mo2=0002] [ 585.340805][ T1492] System zones: 1-12 [ 585.349194][ T1492] EXT4-fs (loop1): 1 truncate cleaned up [ 585.357387][ T1492] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 585.379366][ T1492] EXT4-fs error (device loop1): ext4_xattr_block_list:766: inode #15: comm syz.1.10438: corrupted xattr block 33: invalid header [ 585.393306][ T1492] EXT4-fs (loop1): Remounting filesystem read-only [ 585.417027][T29730] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 585.637878][ T1521] lo speed is unknown, defaulting to 1000 [ 585.647807][ T1527] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 585.656530][ T1527] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 585.700551][ T1523] xt_connbytes: Forcing CT accounting to be enabled [ 585.708880][ T1533] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10452'. [ 585.721977][ T1523] set match dimension is over the limit! [ 585.742714][ T1527] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4215: comm syz.1.10450: Allocating blocks 41-42 which overlap fs metadata [ 585.774551][ T1527] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.10450: Failed to acquire dquot type 1 [ 585.797004][ T1527] EXT4-fs error (device loop1): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 585.822159][ T1527] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #12: comm syz.1.10450: corrupted inode contents [ 585.886847][ T1527] EXT4-fs error (device loop1): ext4_dirty_inode:6502: inode #12: comm syz.1.10450: mark_inode_dirty error [ 585.935798][ T1527] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #12: comm syz.1.10450: corrupted inode contents [ 585.947948][ T1527] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #12: comm syz.1.10450: mark_inode_dirty error [ 585.960131][ T1527] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #12: comm syz.1.10450: corrupted inode contents [ 585.979451][ T1527] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 585.988714][ T1527] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #12: comm syz.1.10450: corrupted inode contents [ 586.000945][ T1527] EXT4-fs error (device loop1): ext4_truncate:4635: inode #12: comm syz.1.10450: mark_inode_dirty error [ 586.032197][ T1527] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 586.047619][ T1527] EXT4-fs (loop1): 1 truncate cleaned up [ 586.089934][ T1554] lo speed is unknown, defaulting to 1000 [ 586.262076][ T1554] lo speed is unknown, defaulting to 1000 [ 586.267881][ T1554] lo speed is unknown, defaulting to 1000 [ 586.273902][ T1554] lo speed is unknown, defaulting to 1000 [ 586.281688][ T1554] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 586.295598][ T1554] lo speed is unknown, defaulting to 1000 [ 586.302409][ T1554] lo speed is unknown, defaulting to 1000 [ 586.308760][ T1554] lo speed is unknown, defaulting to 1000 [ 586.315368][ T1554] lo speed is unknown, defaulting to 1000 [ 586.322023][ T1554] lo speed is unknown, defaulting to 1000 [ 586.328143][ T1554] lo speed is unknown, defaulting to 1000 [ 586.334463][ T1554] lo speed is unknown, defaulting to 1000 [ 586.340794][ T1554] lo speed is unknown, defaulting to 1000 [ 586.453270][ T1527] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 586.571594][ T1557] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 586.636678][ T1527] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 586.736956][ T1557] EXT4-fs (loop0): 1 truncate cleaned up [ 586.743165][ T1557] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 586.805140][T29730] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 586.841795][ T1574] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10465'. [ 586.851704][T30156] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 586.996622][ T1590] EXT4-fs: inline encryption not supported [ 587.007117][ T1590] EXT4-fs: Ignoring removed nobh option [ 587.013045][ T1590] EXT4-fs: Ignoring removed nobh option [ 587.039400][ T1590] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 587.051093][ T1590] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c029, mo2=0002] [ 587.060467][ T1590] System zones: 1-12 [ 587.065944][ T1590] EXT4-fs (loop1): 1 truncate cleaned up [ 587.074510][ T1590] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 587.119532][ T1594] siw: device registration error -23 [ 587.173805][ T1597] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 587.182637][ T1597] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 587.193837][ T1596] lo speed is unknown, defaulting to 1000 [ 587.202936][ T1590] EXT4-fs error (device loop1): ext4_xattr_block_list:766: inode #15: comm syz.1.10470: corrupted xattr block 33: invalid header [ 587.246166][ T1590] EXT4-fs (loop1): Remounting filesystem read-only [ 587.267644][ T1597] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4215: comm syz.0.10471: Allocating blocks 41-42 which overlap fs metadata [ 587.350219][ T1597] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4215: comm syz.0.10471: Allocating blocks 41-42 which overlap fs metadata [ 587.372046][T29730] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 587.378528][ T1596] lo speed is unknown, defaulting to 1000 [ 587.393885][ T1597] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.10471: Failed to acquire dquot type 1 [ 587.416868][ T1597] EXT4-fs error (device loop0): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 587.436693][ T1597] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #12: comm syz.0.10471: corrupted inode contents [ 587.449059][ T1597] EXT4-fs error (device loop0): ext4_dirty_inode:6502: inode #12: comm syz.0.10471: mark_inode_dirty error [ 587.464571][ T1597] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #12: comm syz.0.10471: corrupted inode contents [ 587.464907][ T1604] set_capacity_and_notify: 9 callbacks suppressed [ 587.464920][ T1604] loop1: detected capacity change from 0 to 512 [ 587.485120][ T1597] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #12: comm syz.0.10471: mark_inode_dirty error [ 587.506557][ T1604] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 587.515304][ T1604] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 587.517096][ T1597] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #12: comm syz.0.10471: corrupted inode contents [ 587.536582][ T1597] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 587.545461][ T1597] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #12: comm syz.0.10471: corrupted inode contents [ 587.557623][ T1597] EXT4-fs error (device loop0): ext4_truncate:4635: inode #12: comm syz.0.10471: mark_inode_dirty error [ 587.569086][ T1597] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 587.578400][ T1597] EXT4-fs (loop0): 1 truncate cleaned up [ 587.584719][ T1597] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 587.585137][ T1604] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4215: comm syz.1.10472: Allocating blocks 41-42 which overlap fs metadata [ 587.612288][ T1597] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 587.612450][ T1604] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4215: comm syz.1.10472: Allocating blocks 41-42 which overlap fs metadata [ 587.634739][ T1604] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.10472: Failed to acquire dquot type 1 [ 587.646320][ T1604] EXT4-fs error (device loop1): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 587.660980][ T1604] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #12: comm syz.1.10472: corrupted inode contents [ 587.661299][T30156] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 587.682079][ T1604] EXT4-fs error (device loop1): ext4_dirty_inode:6502: inode #12: comm syz.1.10472: mark_inode_dirty error [ 587.693866][ T1604] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #12: comm syz.1.10472: corrupted inode contents [ 587.706546][ T1604] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #12: comm syz.1.10472: mark_inode_dirty error [ 587.729082][ T1608] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 587.736069][ T1604] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #12: comm syz.1.10472: corrupted inode contents [ 587.806939][ T1604] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 587.815650][ T1604] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #12: comm syz.1.10472: corrupted inode contents [ 587.828244][ T1604] EXT4-fs error (device loop1): ext4_truncate:4635: inode #12: comm syz.1.10472: mark_inode_dirty error [ 587.839629][ T1604] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 587.842836][ T1608] loop0: detected capacity change from 0 to 2048 [ 587.855325][ T1604] EXT4-fs (loop1): 1 truncate cleaned up [ 587.861582][ T1604] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 587.877520][ T1608] EXT4-fs (loop0): failed to initialize system zone (-117) [ 587.885178][ T1608] EXT4-fs (loop0): mount failed [ 587.903916][ T1604] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 587.975142][ T1623] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10478'. [ 587.975146][T29730] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 588.055566][ T1629] loop0: detected capacity change from 0 to 512 [ 588.074610][ T1629] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 588.083322][ T1629] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 588.182943][ T1629] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4215: comm syz.0.10482: Allocating blocks 41-42 which overlap fs metadata [ 588.198281][ T1629] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4215: comm syz.0.10482: Allocating blocks 41-42 which overlap fs metadata [ 588.212826][ T1629] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.10482: Failed to acquire dquot type 1 [ 588.224447][ T1629] EXT4-fs error (device loop0): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 588.239317][ T1629] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #12: comm syz.0.10482: corrupted inode contents [ 588.252549][ T1629] EXT4-fs error (device loop0): ext4_dirty_inode:6502: inode #12: comm syz.0.10482: mark_inode_dirty error [ 588.264563][ T1629] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #12: comm syz.0.10482: corrupted inode contents [ 588.277239][ T1629] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #12: comm syz.0.10482: mark_inode_dirty error [ 588.289137][ T1629] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #12: comm syz.0.10482: corrupted inode contents [ 588.302709][ T1629] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 588.311613][ T1629] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #12: comm syz.0.10482: corrupted inode contents [ 588.323907][ T1629] EXT4-fs error (device loop0): ext4_truncate:4635: inode #12: comm syz.0.10482: mark_inode_dirty error [ 588.335491][ T1629] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 588.413447][ T1629] EXT4-fs (loop0): 1 truncate cleaned up [ 588.424607][ T1656] loop1: detected capacity change from 0 to 8192 [ 588.436076][ T1629] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 588.444653][ T29] kauditd_printk_skb: 1111 callbacks suppressed [ 588.444666][ T29] audit: type=1326 audit(1765612665.067:117234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1638 comm="syz.3.10483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8a3a5f749 code=0x7ffc0000 [ 588.474576][ T29] audit: type=1326 audit(1765612665.067:117235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1638 comm="syz.3.10483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8a3a5f749 code=0x7ffc0000 [ 588.584299][ T1660] loop3: detected capacity change from 0 to 512 [ 588.612609][ T1660] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 588.625525][ T29] audit: type=1326 audit(1765612665.245:117236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1663 comm="syz.0.10491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd92e7bf749 code=0x7ffc0000 [ 588.639256][ T1660] EXT4-fs (loop3): 1 truncate cleaned up [ 588.671339][ T29] audit: type=1326 audit(1765612665.245:117237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1663 comm="syz.0.10491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd92e7bf749 code=0x7ffc0000 [ 588.695065][ T29] audit: type=1326 audit(1765612665.245:117238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1663 comm="syz.0.10491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7fd92e7bf749 code=0x7ffc0000 [ 588.718738][ T29] audit: type=1326 audit(1765612665.245:117239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1663 comm="syz.0.10491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd92e7bf749 code=0x7ffc0000 [ 588.742438][ T29] audit: type=1326 audit(1765612665.245:117240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1663 comm="syz.0.10491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fd92e7bf749 code=0x7ffc0000 [ 588.766020][ T29] audit: type=1326 audit(1765612665.245:117241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1663 comm="syz.0.10491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd92e7bf749 code=0x7ffc0000 [ 588.789744][ T29] audit: type=1326 audit(1765612665.245:117242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1663 comm="syz.0.10491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fd92e7bf749 code=0x7ffc0000 [ 588.813303][ T29] audit: type=1326 audit(1765612665.245:117243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1663 comm="syz.0.10491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd92e7bf749 code=0x7ffc0000 [ 588.952419][ T1677] loop0: detected capacity change from 0 to 512 [ 588.959256][ T1677] EXT4-fs: inline encryption not supported [ 588.965906][ T1677] EXT4-fs: Ignoring removed nobh option [ 588.977429][ T1677] EXT4-fs: Ignoring removed nobh option [ 588.990180][ T1677] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 589.015242][ T1677] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c029, mo2=0002] [ 589.027675][ T1677] System zones: 1-12 [ 589.036625][ T1677] EXT4-fs (loop0): 1 truncate cleaned up [ 589.074235][ T1677] EXT4-fs error (device loop0): ext4_xattr_block_list:766: inode #15: comm syz.0.10497: corrupted xattr block 33: invalid header [ 589.088013][ T1677] EXT4-fs (loop0): Remounting filesystem read-only [ 589.145652][ T1685] loop2: detected capacity change from 0 to 512 [ 589.154602][ T1685] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 589.163328][ T1685] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 589.201499][ T1685] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4215: comm syz.2.10500: Allocating blocks 41-42 which overlap fs metadata [ 589.229558][ T1685] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.10500: Failed to acquire dquot type 1 [ 589.241409][ T1685] EXT4-fs error (device loop2): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 589.281486][ T1698] loop0: detected capacity change from 0 to 512 [ 589.288457][ T1698] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 589.293300][ T1685] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #12: comm syz.2.10500: corrupted inode contents [ 589.310550][ T1685] EXT4-fs error (device loop2): ext4_dirty_inode:6502: inode #12: comm syz.2.10500: mark_inode_dirty error [ 589.332235][ T1685] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #12: comm syz.2.10500: corrupted inode contents [ 589.344484][ T1685] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #12: comm syz.2.10500: mark_inode_dirty error [ 589.356173][ T1685] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #12: comm syz.2.10500: corrupted inode contents [ 589.356316][ T1685] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 589.378341][ T1698] EXT4-fs (loop0): 1 truncate cleaned up [ 589.385273][ T1685] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #12: comm syz.2.10500: corrupted inode contents [ 589.412945][ T1685] EXT4-fs error (device loop2): ext4_truncate:4635: inode #12: comm syz.2.10500: mark_inode_dirty error [ 589.434097][ T1704] netlink: 'syz.4.10507': attribute type 3 has an invalid length. [ 589.444442][ T1685] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 589.454201][ T1685] EXT4-fs (loop2): 1 truncate cleaned up [ 589.512872][ T1685] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 589.584443][ T1719] loop3: detected capacity change from 0 to 8192 [ 589.691022][ T1726] netlink: 552 bytes leftover after parsing attributes in process `syz.4.10516'. [ 589.700763][ T1726] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10516'. [ 589.749021][ T1734] lo speed is unknown, defaulting to 1000 [ 589.836151][ T1734] lo speed is unknown, defaulting to 1000 [ 589.881303][ T1742] loop2: detected capacity change from 0 to 8192 [ 589.901637][ T1756] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 589.910644][ T1756] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 589.932329][ T1758] netlink: 36 bytes leftover after parsing attributes in process `syz.4.10527'. [ 590.040107][ T1756] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4215: comm syz.0.10525: Allocating blocks 41-42 which overlap fs metadata [ 590.108636][ T1756] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.10525: Failed to acquire dquot type 1 [ 590.116587][ T1772] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 590.128674][ T1772] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 590.144656][ T1756] EXT4-fs error (device loop0): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 590.160656][ T1778] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10533'. [ 590.181225][ T1778] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10533'. [ 590.190348][ T1756] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #12: comm syz.0.10525: corrupted inode contents [ 590.203304][ T1772] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4215: comm syz.1.10531: Allocating blocks 41-42 which overlap fs metadata [ 590.217997][ T1772] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4215: comm syz.1.10531: Allocating blocks 41-42 which overlap fs metadata [ 590.231833][ T1756] EXT4-fs error (device loop0): ext4_dirty_inode:6502: inode #12: comm syz.0.10525: mark_inode_dirty error [ 590.244312][ T1772] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.10531: Failed to acquire dquot type 1 [ 590.254880][ T1756] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #12: comm syz.0.10525: corrupted inode contents [ 590.268021][ T1772] EXT4-fs error (device loop1): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 590.319797][ T1756] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #12: comm syz.0.10525: mark_inode_dirty error [ 590.346589][ T1772] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #12: comm syz.1.10531: corrupted inode contents [ 590.378165][ T1756] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #12: comm syz.0.10525: corrupted inode contents [ 590.394031][ T1772] EXT4-fs error (device loop1): ext4_dirty_inode:6502: inode #12: comm syz.1.10531: mark_inode_dirty error [ 590.408890][ T1756] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 590.429444][ T1756] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #12: comm syz.0.10525: corrupted inode contents [ 590.445551][ T1772] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #12: comm syz.1.10531: corrupted inode contents [ 590.473224][ T1772] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #12: comm syz.1.10531: mark_inode_dirty error [ 590.492607][ T1756] EXT4-fs error (device loop0): ext4_truncate:4635: inode #12: comm syz.0.10525: mark_inode_dirty error [ 590.520160][ T1772] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #12: comm syz.1.10531: corrupted inode contents [ 590.532899][ T1756] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 590.541091][ T1772] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 590.551835][ T1772] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #12: comm syz.1.10531: corrupted inode contents [ 590.564242][ T1772] EXT4-fs error (device loop1): ext4_truncate:4635: inode #12: comm syz.1.10531: mark_inode_dirty error [ 590.579169][ T1756] EXT4-fs (loop0): 1 truncate cleaned up [ 590.590699][ T1772] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 590.600322][ T1756] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 590.608961][ T1772] EXT4-fs (loop1): 1 truncate cleaned up [ 590.639142][ T1772] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 590.672271][ T1795] netlink: 36 bytes leftover after parsing attributes in process `syz.0.10540'. [ 590.835296][ T1819] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 590.844170][ T1819] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 590.918157][ T1819] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4215: comm syz.1.10551: Allocating blocks 41-42 which overlap fs metadata [ 590.945448][ T1825] lo speed is unknown, defaulting to 1000 [ 590.946977][ T1824] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 590.951503][ T8394] Bluetooth: hci0: Frame reassembly failed (-84) [ 591.093801][ T1819] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.10551: Failed to acquire dquot type 1 [ 591.141712][ T1824] team0 (unregistering): Port device team_slave_0 removed [ 591.153694][ T1824] team0 (unregistering): Port device team_slave_1 removed [ 591.240743][ T1819] EXT4-fs error (device loop1): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 591.336501][ T1819] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #12: comm syz.1.10551: corrupted inode contents [ 591.360703][ T1819] EXT4-fs error (device loop1): ext4_dirty_inode:6502: inode #12: comm syz.1.10551: mark_inode_dirty error [ 591.372463][ T1819] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #12: comm syz.1.10551: corrupted inode contents [ 591.385186][ T1819] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #12: comm syz.1.10551: mark_inode_dirty error [ 591.396908][ T1819] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #12: comm syz.1.10551: corrupted inode contents [ 591.398616][ T1825] lo speed is unknown, defaulting to 1000 [ 591.414762][ T1819] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 591.453207][ T1836] set match dimension is over the limit! [ 591.473133][ T1828] siw: device registration error -23 [ 591.484367][ T1819] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #12: comm syz.1.10551: corrupted inode contents [ 591.507932][ T1819] EXT4-fs error (device loop1): ext4_truncate:4635: inode #12: comm syz.1.10551: mark_inode_dirty error [ 591.548377][ T1819] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 591.562748][ T1819] EXT4-fs (loop1): 1 truncate cleaned up [ 591.574603][ T1819] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 591.668052][ T1845] ext4 filesystem being mounted at /260/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 591.755017][ T1850] EXT4-fs (loop4): shut down requested (0) [ 591.908886][ T1869] lo speed is unknown, defaulting to 1000 [ 592.039157][ T1869] lo speed is unknown, defaulting to 1000 [ 592.059605][ T1884] siw: device registration error -23 [ 592.079812][ T1888] EXT4-fs: inline encryption not supported [ 592.093467][ T1888] EXT4-fs: Ignoring removed nobh option [ 592.099841][ T1886] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10573'. [ 592.111029][ T1888] EXT4-fs: Ignoring removed nobh option [ 592.124475][ T1888] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 592.154585][ T1886] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10573'. [ 592.166316][ T1888] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c029, mo2=0002] [ 592.181312][ T1888] System zones: 1-12 [ 592.186179][ T1888] EXT4-fs (loop1): 1 truncate cleaned up [ 592.217268][ T1888] EXT4-fs error (device loop1): ext4_xattr_block_list:766: inode #15: comm syz.1.10574: corrupted xattr block 33: invalid header [ 592.231017][ T1888] EXT4-fs (loop1): Remounting filesystem read-only [ 592.279975][ T1897] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 592.339640][ T1905] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 592.351494][ T1897] EXT4-fs (loop3): too many log groups per flexible block group [ 592.407145][ T1897] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 592.420626][ T1897] EXT4-fs (loop3): mount failed [ 592.761257][ T1920] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 592.770025][ T1920] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 592.812014][ T1920] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4215: comm syz.0.10585: Allocating blocks 41-42 which overlap fs metadata [ 592.812913][ T1922] set match dimension is over the limit! [ 592.832323][ T1920] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.10585: Failed to acquire dquot type 1 [ 592.851204][ T1920] EXT4-fs error (device loop0): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 592.870054][ T1920] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #12: comm syz.0.10585: corrupted inode contents [ 592.912488][ T1920] EXT4-fs error (device loop0): ext4_dirty_inode:6502: inode #12: comm syz.0.10585: mark_inode_dirty error [ 592.927712][ T1920] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #12: comm syz.0.10585: corrupted inode contents [ 592.940040][ T1920] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #12: comm syz.0.10585: mark_inode_dirty error [ 592.952443][ T1920] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #12: comm syz.0.10585: corrupted inode contents [ 592.964624][ T1920] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 592.973409][ T1920] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #12: comm syz.0.10585: corrupted inode contents [ 592.985709][ T1920] EXT4-fs error (device loop0): ext4_truncate:4635: inode #12: comm syz.0.10585: mark_inode_dirty error [ 592.997145][ T1920] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 593.007721][ T1920] EXT4-fs (loop0): 1 truncate cleaned up [ 593.028146][ T1920] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 593.141852][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 593.155448][ T1941] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 593.170828][ T1941] set_capacity_and_notify: 11 callbacks suppressed [ 593.170845][ T1941] loop0: detected capacity change from 0 to 2048 [ 593.195230][ T1945] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 593.213145][ T1945] loop2: detected capacity change from 0 to 2048 [ 593.229089][ T1941] EXT4-fs (loop0): failed to initialize system zone (-117) [ 593.236507][ T1941] EXT4-fs (loop0): mount failed [ 593.236902][ T1945] EXT4-fs (loop2): failed to initialize system zone (-117) [ 593.248744][ T1945] EXT4-fs (loop2): mount failed [ 593.338443][ T1957] loop1: detected capacity change from 0 to 512 [ 593.351622][ T1957] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 593.360669][ T1957] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 593.405917][ T1957] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4215: comm syz.1.10599: Allocating blocks 41-42 which overlap fs metadata [ 593.406744][ T1975] 9p: Bad value for 'wfdno' [ 593.424451][ T1957] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4215: comm syz.1.10599: Allocating blocks 41-42 which overlap fs metadata [ 593.439001][ T1957] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.10599: Failed to acquire dquot type 1 [ 593.450559][ T1957] EXT4-fs error (device loop1): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 593.465238][ T1957] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #12: comm syz.1.10599: corrupted inode contents [ 593.477428][ T1957] EXT4-fs error (device loop1): ext4_dirty_inode:6502: inode #12: comm syz.1.10599: mark_inode_dirty error [ 593.480281][ T1977] loop2: detected capacity change from 0 to 512 [ 593.489148][ T1957] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #12: comm syz.1.10599: corrupted inode contents [ 593.507481][ T1977] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 593.516220][ T1977] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 593.525941][ T1957] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #12: comm syz.1.10599: mark_inode_dirty error [ 593.540606][ T1957] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #12: comm syz.1.10599: corrupted inode contents [ 593.552928][ T1957] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 593.563505][ T1957] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #12: comm syz.1.10599: corrupted inode contents [ 593.576112][ T1957] EXT4-fs error (device loop1): ext4_truncate:4635: inode #12: comm syz.1.10599: mark_inode_dirty error [ 593.588033][ T1957] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 593.593522][ T1977] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4215: comm syz.2.10605: Allocating blocks 41-42 which overlap fs metadata [ 593.597606][ T1957] EXT4-fs (loop1): 1 truncate cleaned up [ 593.620159][ T1977] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.10605: Failed to acquire dquot type 1 [ 593.631917][ T1977] EXT4-fs error (device loop2): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 593.632589][ T1957] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 593.662532][ T1977] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #12: comm syz.2.10605: corrupted inode contents [ 593.675615][ T1977] EXT4-fs error (device loop2): ext4_dirty_inode:6502: inode #12: comm syz.2.10605: mark_inode_dirty error [ 593.689918][ T1977] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #12: comm syz.2.10605: corrupted inode contents [ 593.702302][ T1977] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #12: comm syz.2.10605: mark_inode_dirty error [ 593.714066][ T1977] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #12: comm syz.2.10605: corrupted inode contents [ 593.728953][ T1977] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 593.752820][ T1977] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #12: comm syz.2.10605: corrupted inode contents [ 593.765016][ T1977] EXT4-fs error (device loop2): ext4_truncate:4635: inode #12: comm syz.2.10605: mark_inode_dirty error [ 593.766215][ T1990] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 593.776966][ T1977] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 593.792284][ T1977] EXT4-fs (loop2): 1 truncate cleaned up [ 593.798233][ T29] kauditd_printk_skb: 2278 callbacks suppressed [ 593.798247][ T29] audit: type=1400 audit(1765612670.072:119499): avc: denied { create } for pid=1987 comm="syz.4.10611" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 593.824438][ T29] audit: type=1400 audit(1765612670.072:119500): avc: denied { bind } for pid=1987 comm="syz.4.10611" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 593.824860][ T1990] loop1: detected capacity change from 0 to 2048 [ 593.843946][ T29] audit: type=1400 audit(1765612670.072:119501): avc: denied { write } for pid=1987 comm="syz.4.10611" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 593.871114][ T1977] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 593.871930][ T29] audit: type=1400 audit(1765612670.156:119502): avc: denied { write } for pid=1987 comm="syz.4.10611" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 593.900520][ T29] audit: type=1400 audit(1765612670.165:119503): avc: denied { mounton } for pid=1989 comm="syz.1.10612" path="/300/file0" dev="tmpfs" ino=1637 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 593.924497][ T29] audit: type=1400 audit(1765612670.184:119504): avc: denied { attach_queue } for pid=1987 comm="syz.4.10611" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 593.954438][ T1990] EXT4-fs (loop1): failed to initialize system zone (-117) [ 593.962569][ T29] audit: type=1400 audit(1765612670.231:119505): avc: denied { unmount } for pid=27724 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 593.982560][ T1990] EXT4-fs (loop1): mount failed [ 594.016099][ T29] audit: type=1400 audit(1765612670.231:119506): avc: denied { read write } for pid=30156 comm="syz-executor" name="loop0" dev="devtmpfs" ino=4276 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 594.039787][ T29] audit: type=1400 audit(1765612670.231:119507): avc: denied { open } for pid=30156 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=4276 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 594.063521][ T29] audit: type=1400 audit(1765612670.231:119508): avc: denied { ioctl } for pid=30156 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=4276 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 594.212466][ T2021] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 594.227850][ T2021] loop1: detected capacity change from 0 to 2048 [ 594.255144][ T2021] EXT4-fs (loop1): failed to initialize system zone (-117) [ 594.264398][ T2021] EXT4-fs (loop1): mount failed [ 594.279124][ T2025] loop3: detected capacity change from 0 to 8192 [ 594.311131][ T2034] FAULT_INJECTION: forcing a failure. [ 594.311131][ T2034] name failslab, interval 1, probability 0, space 0, times 0 [ 594.323878][ T2034] CPU: 0 UID: 0 PID: 2034 Comm: syz.4.10630 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 594.323907][ T2034] Tainted: [W]=WARN [ 594.323913][ T2034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 594.323925][ T2034] Call Trace: [ 594.323969][ T2034] [ 594.323978][ T2034] __dump_stack+0x1d/0x30 [ 594.324003][ T2034] dump_stack_lvl+0xe8/0x140 [ 594.324026][ T2034] dump_stack+0x15/0x1b [ 594.324043][ T2034] should_fail_ex+0x265/0x280 [ 594.324121][ T2034] should_failslab+0x8c/0xb0 [ 594.324145][ T2034] kmem_cache_alloc_noprof+0x69/0x4b0 [ 594.324168][ T2034] ? audit_log_start+0x342/0x720 [ 594.324223][ T2034] audit_log_start+0x342/0x720 [ 594.324242][ T2034] ? kstrtouint+0x76/0xc0 [ 594.324259][ T2034] audit_seccomp+0x48/0x100 [ 594.324290][ T2034] ? __seccomp_filter+0x832/0x1260 [ 594.324338][ T2034] __seccomp_filter+0x843/0x1260 [ 594.324369][ T2034] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 594.324442][ T2034] ? vfs_write+0x7e8/0x960 [ 594.324462][ T2034] ? __rcu_read_unlock+0x4f/0x70 [ 594.324483][ T2034] ? __fget_files+0x184/0x1c0 [ 594.324580][ T2034] __secure_computing+0x82/0x150 [ 594.324667][ T2034] syscall_trace_enter+0xcf/0x1e0 [ 594.324692][ T2034] do_syscall_64+0xb2/0x2a0 [ 594.324725][ T2034] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 594.324747][ T2034] RIP: 0033:0x7fe70f70f749 [ 594.324761][ T2034] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 594.324781][ T2034] RSP: 002b:00007fe70e16f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000088 [ 594.324800][ T2034] RAX: ffffffffffffffda RBX: 00007fe70f965fa0 RCX: 00007fe70f70f749 [ 594.324814][ T2034] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000801 [ 594.324827][ T2034] RBP: 00007fe70e16f090 R08: 0000000000000000 R09: 0000000000000000 [ 594.324839][ T2034] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 594.324851][ T2034] R13: 00007fe70f966038 R14: 00007fe70f965fa0 R15: 00007ffca104f618 [ 594.324870][ T2034] [ 594.488097][ T2039] lo speed is unknown, defaulting to 1000 [ 594.662357][ T2039] lo speed is unknown, defaulting to 1000 [ 594.716476][ T2061] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 594.749782][ T2061] loop2: detected capacity change from 0 to 2048 [ 594.777684][ T2061] EXT4-fs (loop2): failed to initialize system zone (-117) [ 594.785327][ T2061] EXT4-fs (loop2): mount failed [ 594.968410][ T2082] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10648'. [ 594.978699][ T2082] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10648'. [ 595.042418][ T2083] lo speed is unknown, defaulting to 1000 [ 595.093558][ T2083] lo speed is unknown, defaulting to 1000 [ 595.580428][ T2090] lo speed is unknown, defaulting to 1000 [ 595.614110][ T2090] lo speed is unknown, defaulting to 1000 [ 595.683801][ T2090] siw: device registration error -23 [ 596.078374][ T2104] loop2: detected capacity change from 0 to 1024 [ 596.149427][ T2115] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10660'. [ 596.166706][ T2115] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10660'. [ 596.271404][ T2126] can0: slcan on ttyS3. [ 596.325431][ T2132] netlink: 60 bytes leftover after parsing attributes in process `syz.4.10667'. [ 596.341001][ T2132] : renamed from vlan0 [ 596.347279][ T2132] netlink: 60 bytes leftover after parsing attributes in process `syz.4.10667'. [ 596.388875][ T2136] loop4: detected capacity change from 0 to 2048 [ 596.415334][ T2136] Alternate GPT is invalid, using primary GPT. [ 596.421746][ T2136] loop4: p2 p3 p7 [ 596.455417][ T2126] can0 (unregistered): slcan off ttyS3. [ 596.473837][ T2126] can0: slcan on ttyS3. [ 596.689412][ T2148] netlink: 68 bytes leftover after parsing attributes in process `syz.4.10673'. [ 597.022201][ T2160] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10677'. [ 597.178507][ T2123] can0 (unregistered): slcan off ttyS3. [ 597.476448][ T2180] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 597.829305][ T2183] netlink: 68 bytes leftover after parsing attributes in process `syz.1.10686'. [ 597.845886][ T2196] siw: device registration error -23 [ 598.009537][ T2198] EXT4-fs: inline encryption not supported [ 598.059057][ T2198] EXT4-fs: Ignoring removed nobh option [ 598.107317][ T2198] EXT4-fs: Ignoring removed nobh option [ 598.148082][ T2198] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 598.183521][ T2198] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c029, mo2=0002] [ 598.218698][ T2198] System zones: 1-12 [ 598.261410][ T2198] EXT4-fs (loop2): 1 truncate cleaned up [ 598.295452][ T2198] EXT4-fs error (device loop2): ext4_xattr_block_list:766: inode #15: comm syz.2.10691: corrupted xattr block 33: invalid header [ 598.340919][ T2198] EXT4-fs (loop2): Remounting filesystem read-only [ 598.829425][ T2228] netlink: 68 bytes leftover after parsing attributes in process `syz.2.10702'. [ 598.942025][ T2257] lo speed is unknown, defaulting to 1000 [ 598.981907][ T2257] lo speed is unknown, defaulting to 1000 [ 599.175004][ T29] kauditd_printk_skb: 1623 callbacks suppressed [ 599.175018][ T29] audit: type=1400 audit(1765612675.113:121130): avc: denied { create } for pid=2276 comm="syz.2.10722" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 599.218016][ T29] audit: type=1400 audit(1765612675.113:121131): avc: denied { bind } for pid=2276 comm="syz.2.10722" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 599.237715][ T29] audit: type=1400 audit(1765612675.113:121132): avc: denied { ioctl } for pid=2276 comm="syz.2.10722" path="socket:[118428]" dev="sockfs" ino=118428 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 599.263049][ T29] audit: type=1400 audit(1765612675.132:121133): avc: denied { create } for pid=2276 comm="syz.2.10722" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 599.282789][ T29] audit: type=1400 audit(1765612675.132:121134): avc: denied { connect } for pid=2276 comm="syz.2.10722" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 599.302720][ T29] audit: type=1400 audit(1765612675.132:121135): avc: denied { ioctl } for pid=2276 comm="syz.2.10722" path="socket:[118431]" dev="sockfs" ino=118431 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 599.328018][ T29] audit: type=1400 audit(1765612675.132:121136): avc: denied { bind } for pid=2276 comm="syz.2.10722" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 599.347652][ T29] audit: type=1400 audit(1765612675.142:121137): avc: denied { setopt } for pid=2276 comm="syz.2.10722" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 599.367392][ T29] audit: type=1400 audit(1765612675.142:121138): avc: denied { write } for pid=2276 comm="syz.2.10722" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 599.389763][ T29] audit: type=1400 audit(1765612675.272:121139): avc: denied { ioctl } for pid=2281 comm="syz.2.10723" path="socket:[118442]" dev="sockfs" ino=118442 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 599.459535][ T2290] set_capacity_and_notify: 2 callbacks suppressed [ 599.459551][ T2290] loop0: detected capacity change from 0 to 1024 [ 599.487085][ T2290] set match dimension is over the limit! [ 599.503817][ T2293] loop3: detected capacity change from 0 to 1024 [ 599.513945][ T2293] set match dimension is over the limit! [ 599.813030][ T2321] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 599.828699][ T2321] loop0: detected capacity change from 0 to 2048 [ 599.855844][ T2321] EXT4-fs (loop0): failed to initialize system zone (-117) [ 599.863116][ T2321] EXT4-fs (loop0): mount failed [ 599.910767][ T2331] loop0: detected capacity change from 0 to 512 [ 599.919292][ T2331] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 599.928004][ T2331] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 599.963593][ T2331] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4215: comm syz.0.10741: Allocating blocks 41-42 which overlap fs metadata [ 599.977915][ T2331] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4215: comm syz.0.10741: Allocating blocks 41-42 which overlap fs metadata [ 599.992129][ T2331] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.10741: Failed to acquire dquot type 1 [ 600.003665][ T2331] EXT4-fs error (device loop0): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 600.018325][ T2331] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #12: comm syz.0.10741: corrupted inode contents [ 600.030637][ T2331] EXT4-fs error (device loop0): ext4_dirty_inode:6502: inode #12: comm syz.0.10741: mark_inode_dirty error [ 600.045983][ T2331] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #12: comm syz.0.10741: corrupted inode contents [ 600.058502][ T2331] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #12: comm syz.0.10741: mark_inode_dirty error [ 600.058731][ T2331] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #12: comm syz.0.10741: corrupted inode contents [ 600.058873][ T2331] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 600.058949][ T2331] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #12: comm syz.0.10741: corrupted inode contents [ 600.103076][ T2331] EXT4-fs error (device loop0): ext4_truncate:4635: inode #12: comm syz.0.10741: mark_inode_dirty error [ 600.114382][ T2331] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 600.123583][ T2331] EXT4-fs (loop0): 1 truncate cleaned up [ 600.150707][ T2331] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 600.335628][ T2360] tipc: Failed to remove unknown binding: 66,1,1/0:4155166434/4155166436 [ 600.353183][ T2360] tipc: Failed to remove unknown binding: 66,1,1/0:4155166434/4155166436 [ 600.361796][ T2360] tipc: Failed to remove unknown binding: 66,1,1/0:4155166434/4155166436 [ 600.400174][ T2362] loop0: detected capacity change from 0 to 8192 [ 600.458524][ T2368] set match dimension is over the limit! [ 600.491552][ T2369] lo speed is unknown, defaulting to 1000 [ 600.540097][ T2369] lo speed is unknown, defaulting to 1000 [ 600.736018][ T2395] loop3: detected capacity change from 0 to 512 [ 600.743308][ T2395] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 600.752117][ T2395] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 600.786633][ T2395] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4215: comm syz.3.10766: Allocating blocks 41-42 which overlap fs metadata [ 600.800892][ T2395] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4215: comm syz.3.10766: Allocating blocks 41-42 which overlap fs metadata [ 600.815230][ T2395] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.10766: Failed to acquire dquot type 1 [ 600.826940][ T2395] EXT4-fs error (device loop3): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 600.841862][ T2395] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #12: comm syz.3.10766: corrupted inode contents [ 600.855977][ T2395] EXT4-fs error (device loop3): ext4_dirty_inode:6502: inode #12: comm syz.3.10766: mark_inode_dirty error [ 600.867766][ T2395] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #12: comm syz.3.10766: corrupted inode contents [ 600.879970][ T2395] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #12: comm syz.3.10766: mark_inode_dirty error [ 600.916256][ T2395] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #12: comm syz.3.10766: corrupted inode contents [ 600.928519][ T2395] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 600.937327][ T2395] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #12: comm syz.3.10766: corrupted inode contents [ 600.949473][ T2395] EXT4-fs error (device loop3): ext4_truncate:4635: inode #12: comm syz.3.10766: mark_inode_dirty error [ 600.971550][ T2395] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 600.980922][ T2395] EXT4-fs (loop3): 1 truncate cleaned up [ 600.993309][ T2395] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 601.185299][ T2427] loop4: detected capacity change from 0 to 512 [ 601.192802][ T2427] EXT4-fs (loop4): inodes count not valid: 24 vs 32 [ 601.277157][ T2435] loop3: detected capacity change from 0 to 512 [ 601.292843][ T2435] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 601.301700][ T2435] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 601.322746][ T2435] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4215: comm syz.3.10781: Allocating blocks 41-42 which overlap fs metadata [ 601.336997][ T2435] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4215: comm syz.3.10781: Allocating blocks 41-42 which overlap fs metadata [ 601.338216][ T2439] loop0: detected capacity change from 0 to 8192 [ 601.351144][ T2435] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.10781: Failed to acquire dquot type 1 [ 601.369143][ T2435] EXT4-fs error (device loop3): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 601.384300][ T2435] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #12: comm syz.3.10781: corrupted inode contents [ 601.398487][ T2435] EXT4-fs error (device loop3): ext4_dirty_inode:6502: inode #12: comm syz.3.10781: mark_inode_dirty error [ 601.410192][ T2435] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #12: comm syz.3.10781: corrupted inode contents [ 601.424234][ T2435] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #12: comm syz.3.10781: mark_inode_dirty error [ 601.436690][ T2435] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #12: comm syz.3.10781: corrupted inode contents [ 601.457963][ T2442] lo speed is unknown, defaulting to 1000 [ 601.479815][ T2435] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 601.489032][ T2435] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #12: comm syz.3.10781: corrupted inode contents [ 601.517447][ T2435] EXT4-fs error (device loop3): ext4_truncate:4635: inode #12: comm syz.3.10781: mark_inode_dirty error [ 601.538720][ T2435] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 601.550417][ T2442] lo speed is unknown, defaulting to 1000 [ 601.563231][ T2435] EXT4-fs (loop3): 1 truncate cleaned up [ 601.586167][ T2435] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 601.662136][ T2455] __nla_validate_parse: 3 callbacks suppressed [ 601.662150][ T2455] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10787'. [ 601.735109][ T2460] loop4: detected capacity change from 0 to 256 [ 601.761238][ T2460] FAT-fs (loop4): error, clusters badly computed (0 != 128) [ 601.768650][ T2460] FAT-fs (loop4): Filesystem has been set read-only [ 601.779828][ T2460] netlink: 'syz.4.10790': attribute type 1 has an invalid length. [ 601.787683][ T2460] netlink: 244 bytes leftover after parsing attributes in process `syz.4.10790'. [ 601.797683][ T2460] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 601.806459][ T2460] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 602.010176][ T2485] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10800'. [ 602.053029][ T2494] EXT4-fs: inline encryption not supported [ 602.061043][ T2494] EXT4-fs: Ignoring removed nobh option [ 602.070493][ T2494] EXT4-fs: Ignoring removed nobh option [ 602.076965][ T2494] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 602.094923][ T2494] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c029, mo2=0002] [ 602.101512][ T2497] 9p: Bad value for 'wfdno' [ 602.103157][ T2494] System zones: 1-12 [ 602.117211][ T2499] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 602.126079][ T2499] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 602.139518][ T2494] EXT4-fs (loop1): 1 truncate cleaned up [ 602.155022][ T2503] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 602.163751][ T2503] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 602.172874][ T2494] EXT4-fs error (device loop1): ext4_xattr_block_list:766: inode #15: comm syz.1.10803: corrupted xattr block 33: invalid header [ 602.188000][ T2494] EXT4-fs (loop1): Remounting filesystem read-only [ 602.196982][ T2499] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4215: comm syz.3.10806: Allocating blocks 41-42 which overlap fs metadata [ 602.215667][ T2503] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4215: comm syz.4.10808: Allocating blocks 41-42 which overlap fs metadata [ 602.223195][ T2499] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.10806: Failed to acquire dquot type 1 [ 602.232567][ T2503] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4215: comm syz.4.10808: Allocating blocks 41-42 which overlap fs metadata [ 602.249650][ T2499] EXT4-fs error (device loop3): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 602.259093][ T2503] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.10808: Failed to acquire dquot type 1 [ 602.269398][ T2499] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #12: comm syz.3.10806: corrupted inode contents [ 602.292798][ T2499] EXT4-fs error (device loop3): ext4_dirty_inode:6502: inode #12: comm syz.3.10806: mark_inode_dirty error [ 602.293133][ T2503] EXT4-fs error (device loop4): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 602.319002][ T2503] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #12: comm syz.4.10808: corrupted inode contents [ 602.331277][ T2499] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #12: comm syz.3.10806: corrupted inode contents [ 602.343427][ T2499] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #12: comm syz.3.10806: mark_inode_dirty error [ 602.354966][ T2499] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #12: comm syz.3.10806: corrupted inode contents [ 602.367259][ T2499] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 602.376044][ T2503] EXT4-fs error (device loop4): ext4_dirty_inode:6502: inode #12: comm syz.4.10808: mark_inode_dirty error [ 602.388189][ T2499] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #12: comm syz.3.10806: corrupted inode contents [ 602.403048][ T2503] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #12: comm syz.4.10808: corrupted inode contents [ 602.418203][ T2499] EXT4-fs error (device loop3): ext4_truncate:4635: inode #12: comm syz.3.10806: mark_inode_dirty error [ 602.430295][ T2503] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #12: comm syz.4.10808: mark_inode_dirty error [ 602.442571][ T2503] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #12: comm syz.4.10808: corrupted inode contents [ 602.451034][ T2499] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 602.455247][ T2515] EXT4-fs (loop1): too many log groups per flexible block group [ 602.464214][ T2499] EXT4-fs (loop3): 1 truncate cleaned up [ 602.471680][ T2515] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 602.483963][ T2503] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 602.493490][ T2515] EXT4-fs (loop1): mount failed [ 602.498813][ T2503] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #12: comm syz.4.10808: corrupted inode contents [ 602.511780][ T2503] EXT4-fs error (device loop4): ext4_truncate:4635: inode #12: comm syz.4.10808: mark_inode_dirty error [ 602.523345][ T2499] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 602.566718][ T2503] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 602.576190][ T2527] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10815'. [ 602.631369][ T2503] EXT4-fs (loop4): 1 truncate cleaned up [ 602.682144][ T2503] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 602.747400][ T2537] can0: slcan on ttyS3. [ 602.814199][ T2542] lo speed is unknown, defaulting to 1000 [ 602.822209][ T2537] can0 (unregistered): slcan off ttyS3. [ 602.828269][ T2546] lo speed is unknown, defaulting to 1000 [ 602.838966][ T2537] can0: slcan on ttyS3. [ 602.873701][ T2542] lo speed is unknown, defaulting to 1000 [ 602.915895][ T2548] netlink: 68 bytes leftover after parsing attributes in process `syz.1.10823'. [ 602.927465][ T2546] lo speed is unknown, defaulting to 1000 [ 603.001255][ T2556] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10824'. [ 603.247449][ T2561] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 603.256257][ T2561] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 603.283130][ T2561] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4215: comm syz.2.10826: Allocating blocks 41-42 which overlap fs metadata [ 603.302125][ T2561] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4215: comm syz.2.10826: Allocating blocks 41-42 which overlap fs metadata [ 603.316111][ T2561] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.10826: Failed to acquire dquot type 1 [ 603.383879][ T2561] EXT4-fs error (device loop2): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 603.403091][ T2570] set match dimension is over the limit! [ 603.441092][ T2561] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #12: comm syz.2.10826: corrupted inode contents [ 603.468638][ T2522] can0 (unregistered): slcan off ttyS3. [ 603.486798][ T2561] EXT4-fs error (device loop2): ext4_dirty_inode:6502: inode #12: comm syz.2.10826: mark_inode_dirty error [ 603.530782][ T2561] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #12: comm syz.2.10826: corrupted inode contents [ 603.587375][ T2561] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #12: comm syz.2.10826: mark_inode_dirty error [ 603.599994][ T2561] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #12: comm syz.2.10826: corrupted inode contents [ 603.614852][ T2561] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 603.682157][ T2561] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #12: comm syz.2.10826: corrupted inode contents [ 603.714247][ T2561] EXT4-fs error (device loop2): ext4_truncate:4635: inode #12: comm syz.2.10826: mark_inode_dirty error [ 603.749747][ T2561] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 603.790400][ T2561] EXT4-fs (loop2): 1 truncate cleaned up [ 603.815123][ T2583] lo speed is unknown, defaulting to 1000 [ 603.846435][ T2561] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 603.875029][ T2583] lo speed is unknown, defaulting to 1000 [ 604.008657][ T2581] netlink: 68 bytes leftover after parsing attributes in process `syz.0.10834'. [ 604.164242][ T2597] random: crng reseeded on system resumption [ 604.258603][ T2604] lo speed is unknown, defaulting to 1000 [ 604.334017][ T2604] lo speed is unknown, defaulting to 1000 [ 604.413209][ T2618] set match dimension is over the limit! [ 604.430397][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 604.465971][ T2621] netlink: 36 bytes leftover after parsing attributes in process `syz.3.10848'. [ 604.475135][ T2621] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10848'. [ 604.484260][ T2621] netlink: 36 bytes leftover after parsing attributes in process `syz.3.10848'. [ 604.616982][ T29] kauditd_printk_skb: 1149 callbacks suppressed [ 604.616998][ T29] audit: type=1400 audit(1765612680.200:122266): avc: denied { create } for pid=2624 comm="syz.3.10849" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 604.687046][ T29] audit: type=1400 audit(1765612680.238:122267): avc: denied { unmount } for pid=29730 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 604.707379][ T29] audit: type=1400 audit(1765612680.247:122268): avc: denied { write } for pid=2624 comm="syz.3.10849" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 604.727912][ T29] audit: type=1400 audit(1765612680.247:122269): avc: denied { nlmsg_write } for pid=2624 comm="syz.3.10849" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 604.748794][ T29] audit: type=1400 audit(1765612680.266:122270): avc: denied { create } for pid=2624 comm="syz.3.10849" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 604.827488][ T29] audit: type=1400 audit(1765612680.275:122271): avc: denied { bind } for pid=2624 comm="syz.3.10849" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 604.847450][ T29] audit: type=1400 audit(1765612680.275:122272): avc: denied { write } for pid=2624 comm="syz.3.10849" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 604.867058][ T29] audit: type=1400 audit(1765612680.387:122273): avc: denied { write } for pid=2624 comm="syz.3.10849" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 604.887982][ T29] audit: type=1400 audit(1765612680.387:122274): avc: denied { attach_queue } for pid=2624 comm="syz.3.10849" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 604.908196][ T29] audit: type=1400 audit(1765612680.387:122275): avc: denied { prog_load } for pid=2631 comm="syz.1.10851" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 605.027590][ T2636] set_capacity_and_notify: 7 callbacks suppressed [ 605.027609][ T2636] loop2: detected capacity change from 0 to 8192 [ 605.112933][ T2645] loop3: detected capacity change from 0 to 8192 [ 605.153319][ T2657] loop1: detected capacity change from 0 to 512 [ 605.179045][ T2657] EXT4-fs: inline encryption not supported [ 605.183032][ T2660] lo speed is unknown, defaulting to 1000 [ 605.190933][ T2657] EXT4-fs: Ignoring removed nobh option [ 605.197516][ T2657] EXT4-fs: Ignoring removed nobh option [ 605.206508][ T2657] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 605.219892][ T2657] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c029, mo2=0002] [ 605.228618][ T2657] System zones: 1-12 [ 605.234426][ T2657] EXT4-fs (loop1): 1 truncate cleaned up [ 605.266839][ T2660] lo speed is unknown, defaulting to 1000 [ 605.302661][ T2657] EXT4-fs error (device loop1): ext4_xattr_block_list:766: inode #15: comm syz.1.10864: corrupted xattr block 33: invalid header [ 605.362809][ T2657] EXT4-fs (loop1): Remounting filesystem read-only [ 605.621920][ T2677] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=144 sclass=netlink_route_socket pid=2677 comm=syz.1.10868 [ 605.650501][ T2678] netlink: 'syz.1.10868': attribute type 10 has an invalid length. [ 605.677304][ T2678] veth1_vlan: left promiscuous mode [ 605.683661][ T2678] batman_adv: batadv0: Adding interface: veth1_vlan [ 605.690367][ T2678] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 605.716224][ T2678] batman_adv: batadv0: Interface activated: veth1_vlan [ 605.815094][ T2687] loop1: detected capacity change from 0 to 128 [ 605.982693][ T2694] set match dimension is over the limit! [ 606.003684][ T2696] set match dimension is over the limit! [ 606.047300][ T2700] set match dimension is over the limit! [ 606.131495][ T2688] 9p: Bad value for 'rfdno' [ 606.369874][ T2716] lo speed is unknown, defaulting to 1000 [ 606.424033][ T2716] lo speed is unknown, defaulting to 1000 [ 606.629475][ T2719] can0: slcan on ttyS3. [ 606.740022][ T2719] can0 (unregistered): slcan off ttyS3. [ 606.758417][ T2719] can0: slcan on ttyS3. [ 606.976892][ T2744] loop1: detected capacity change from 0 to 512 [ 607.053560][ T2746] netlink: 'syz.1.10891': attribute type 4 has an invalid length. [ 607.061690][ T2746] __nla_validate_parse: 7 callbacks suppressed [ 607.061703][ T2746] netlink: 152 bytes leftover after parsing attributes in process `syz.1.10891'. [ 607.083266][ T2746] .`: renamed from bond0 [ 607.097305][ T2748] loop0: detected capacity change from 0 to 2048 [ 607.116235][ T2748] EXT4-fs mount: 46 callbacks suppressed [ 607.116252][ T2748] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 607.140441][ T2746] loop1: detected capacity change from 0 to 512 [ 607.159336][ T2746] EXT4-fs: test_dummy_encryption option not supported [ 607.226080][ T2758] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10894'. [ 607.235462][ T2714] can0 (unregistered): slcan off ttyS3. [ 607.271611][ T2760] ================================================================== [ 607.279728][ T2760] BUG: KCSAN: data-race in xas_find_marked / xas_set_mark [ 607.286864][ T2760] [ 607.289177][ T2760] write to 0xffff88811b81142c of 4 bytes by task 2748 on cpu 1: [ 607.296808][ T2760] xas_set_mark+0x12b/0x140 [ 607.301403][ T2760] __folio_start_writeback+0x155/0x340 [ 607.306878][ T2760] ext4_bio_write_folio+0x5ad/0x9f0 [ 607.312099][ T2760] mpage_process_page_bufs+0x4a1/0x620 [ 607.317562][ T2760] mpage_prepare_extent_to_map+0x7a3/0xc20 [ 607.323380][ T2760] ext4_do_writepages+0x9f6/0x27e0 [ 607.328515][ T2760] ext4_writepages+0x179/0x300 [ 607.333308][ T2760] do_writepages+0x1c6/0x310 [ 607.337999][ T2760] file_write_and_wait_range+0x156/0x2c0 [ 607.343635][ T2760] generic_buffers_fsync_noflush+0x45/0x130 [ 607.349662][ T2760] ext4_sync_file+0x1ab/0x690 [ 607.354346][ T2760] vfs_fsync_range+0x10d/0x130 [ 607.359257][ T2760] ext4_buffered_write_iter+0x34f/0x3c0 [ 607.364799][ T2760] ext4_file_write_iter+0x387/0xf60 [ 607.370027][ T2760] iter_file_splice_write+0x66b/0xa20 [ 607.375409][ T2760] direct_splice_actor+0x156/0x2a0 [ 607.380527][ T2760] splice_direct_to_actor+0x312/0x680 [ 607.385912][ T2760] do_splice_direct+0xda/0x150 [ 607.390677][ T2760] do_sendfile+0x380/0x650 [ 607.395106][ T2760] __x64_sys_sendfile64+0x105/0x150 [ 607.400312][ T2760] x64_sys_call+0x2db1/0x3000 [ 607.405012][ T2760] do_syscall_64+0xd8/0x2a0 [ 607.409526][ T2760] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 607.415421][ T2760] [ 607.417737][ T2760] read to 0xffff88811b81142c of 4 bytes by task 2760 on cpu 0: [ 607.425268][ T2760] xas_find_marked+0x5dc/0x620 [ 607.430034][ T2760] find_get_entry+0x5d/0x380 [ 607.434624][ T2760] filemap_get_folios_tag+0x92/0x210 [ 607.439939][ T2760] mpage_prepare_extent_to_map+0x308/0xc20 [ 607.445734][ T2760] ext4_do_writepages+0x6fe/0x27e0 [ 607.450847][ T2760] ext4_writepages+0x179/0x300 [ 607.455599][ T2760] do_writepages+0x1c6/0x310 [ 607.460221][ T2760] file_write_and_wait_range+0x156/0x2c0 [ 607.465932][ T2760] generic_buffers_fsync_noflush+0x45/0x130 [ 607.471819][ T2760] ext4_sync_file+0x1ab/0x690 [ 607.476487][ T2760] vfs_fsync_range+0x10d/0x130 [ 607.481592][ T2760] ext4_buffered_write_iter+0x34f/0x3c0 [ 607.487124][ T2760] ext4_file_write_iter+0x387/0xf60 [ 607.492324][ T2760] iter_file_splice_write+0x66b/0xa20 [ 607.497709][ T2760] direct_splice_actor+0x156/0x2a0 [ 607.502894][ T2760] splice_direct_to_actor+0x312/0x680 [ 607.508278][ T2760] do_splice_direct+0xda/0x150 [ 607.513030][ T2760] do_sendfile+0x380/0x650 [ 607.517452][ T2760] __x64_sys_sendfile64+0x105/0x150 [ 607.522647][ T2760] x64_sys_call+0x2db1/0x3000 [ 607.527320][ T2760] do_syscall_64+0xd8/0x2a0 [ 607.531821][ T2760] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 607.537704][ T2760] [ 607.540023][ T2760] value changed: 0x0a000021 -> 0x00000021 [ 607.545812][ T2760] [ 607.548119][ T2760] Reported by Kernel Concurrency Sanitizer on: [ 607.554256][ T2760] CPU: 0 UID: 0 PID: 2760 Comm: syz.0.10889 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 607.565615][ T2760] Tainted: [W]=WARN [ 607.569399][ T2760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 607.579440][ T2760] ================================================================== [ 607.669784][ T2765] loop3: detected capacity change from 0 to 8192 [ 607.757648][ T2766] lo speed is unknown, defaulting to 1000 [ 607.840100][ T2766] lo speed is unknown, defaulting to 1000 [ 607.981065][T30156] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.