last executing test programs: 1m31.346829131s ago: executing program 2 (id=3): syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000180)='./file1\x00', 0x100c085, &(0x7f0000000d00)=ANY=[@ANYRES8=0x0, @ANYBLOB="c0da5b74006e9c47add458a1bd748b7ffa5628dc52f84873cbe6a43cfd29e4198255a0610d383b0e46b2b6457282a9f3caef22979e54c145e6a0ce2850a890bdae263cb1af7c4e1fa3628453c70aae32270b0042f1532cf08030eccdca96e2c97aae42cf5d9ec5f0afa4fcc53c8f9289677038d09ae2b1bd2271e0a76e6324df3a2b01a9ed0277d7e8d6f7d463ae62692faa55bdb43dc2bea18eea4a635951fd0a220a835fa24d0700c8f8c2495bbd97d5cd93ed0ec29c45d1d7638b2cae5ed3bec0d2f0415ddff7884bb34ab0cb1598e9c7b92a29005e4090ede480b3412f5c33da5e7c8672bda19fd3d989f8"], 0x4, 0x7f4, &(0x7f0000000e40)="$eJzs3U9oHOfZAPBnFMl2FD5/Id9HPmMcZ2znA5s6ymqVKBU5pJvVSJ5ktSt2V8WmlMTEcjCWk5AQ0pjS1JekLS2lpx7TXEMuubUUWuih7anQHHrpoRDIpSUtLZSWUnDZ2V1r9Wcl/5HlNP39RPadfeeZd953drLPznpnJgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACASKqzpdJkErW8vnQ6Ha4622wsbDG/395P1xRbrDci6fwX+/bFgW7Vgf9dnX1/5+FoHOo+OxT7OsW+uHzP/fc+8T+jI/3lt+jQzToyfNbY4JMk4uudTl08u7Ky/Mpt6Mgu+taPexP7rnuRv1/tPM5n9bzVyBcq81matxrpzPR06ZFTc610Lq9lrTOtdraQVptZpd1opserJ9LJmZmpNJs401iqz89Walm/8vGHy6XSdPr0xGJWabYa9UeenmhVT+W1Wl6fL2LKpdejE/N4Z0d8Jm+n7ayykKbnL6wsT23X1U7Q5JqavWt2nEMP3fvxax/95cJyZ4cc1kjS2zHLk5Pl8uT0YzOPPV4qjZZL5bUVpXXiWkSMRHQibstOy511zyZ1o709ZsOMiKv/vTNv3nCLRnr5P2qRRz2W4nSkkcZI8bj6NxbVmI1mNGKh8/w3Y+vmb8j////IH3+11XoH838/yx9YnX0wivx/uPvs8LD8v6EXO/A3OqzV+vvd3gzWvRpvxOW4GGdjJVZiOV65mTXuWd/qbfwb2dn25iOLeuTRikbksRCVoibt1aQxE9MxHaV4Nk7FXLQijbnIoxZZtOJMtKIdWbFHVaMZWVSiHY1oRhrHoxonIo3JmImZmIo0spiIM9GIpajHfMxGpWjlfFwotvvUun7d/7XnfvTCrz9+pzN9LWhyi4EknQ9znaA/bxG0Id3fQP7vRIz09u5dyUnskn03+Kru0Ds33LqrRf4fvdPdAAAAAG6jpPj2PYmIsXigmJrLa9mX7nS3AAAAgB1U/K75UKcY60w9EEnn+L+0SeSHu943AAAAYGckxTl2SUSMx4Pdqf7pUpt9CQAAAAD8Gyr+/f9wpxiPeLOocPwPAAAAnzHfGHaN/Y/29K6x21rcm/zkT9FsjiVXFk8/lFyqdOIql+7qLtcrvnitxfbcwWR/r5GimB69fE8SEaPV7FDSv/rlP/d2y0+Kx4OrFyAcdq3/ZJsOxNYdKJ7Ft+NIN+bIuW55rj+nu5bxubyWTVQbtScmk96XI+3XXrzwlSiG/836wv4kzl9YWZ54/qWVc0VfrnRauXKpd3n4pL9URPeEii36crW3BeKBzUc8VpyI0VvveHe9pcHx964mO7L1+JPBdb4VR7sxR8e75fja8e/rrHNy4onJqFT2j7Sz0+3Xrg6MvteLydWR7+2PNrmBV+GtONaNOXb8WLfYpBflNb14cWMvyoPb//q2xXX34p0jb57+688bSTa1XS+mbrEXAHfK+eKqP6tZ6O4iC/3jalcnoa3Lu3f3l7yRd7nzq58y+ssP5LrR2JDd05vJ7m/F8W7M8e7nidGDm+SV0ibv6C9fePkXvXf0R9/7/g++fPiXH6zL6zfQi/fiRDemV8R9PxuSYztj/s66rPpuZ4l3h663VSsnr++dGku6Nx+Kyw9fuHT2heUXll8sl6emS4+WSo+VY6z4qNArhvRU5gH4z7bdPXY++Oq10GF34Uke3eao+r5rPymYiOfjpViJc3GyONsgIh7cvNXxgZ8hnNzmqHV84A4vJ7c5tlyNLa+P3XssiSGxUwNb7P++VxR/u00vCADsgqPb5OEk7u3Of/2/ekusi7grSU5uc9y9Npef6N44t390HMNz+aDf98rP3/YtAgCffVnzk2S8/XbSbOaLz07OzExW2qeytNmoPpM289n5LM3r7axZPVWpz2fpYrPRblT7Xx3PZq20tbS42Gi207lGM11stPLTxZ3f096t31vZQqXezqutxVpWaWVptVFvV6rtdDZvVdPFpadqeetU1iwWbi1m1Xwur1baeaOethpLzWo2kaatLBsIzGezejufy7OxNK+ni818odK8EhG1pYUsnc1a1Wa+2G50G+yvK6/PNZoLRbMTG4f/h93e3gDwafDqG5cvnl1ZWX7l5iZ+ez3Bd3qMAMBasjQAAAAAAAAAAAAAAHz6bTxdr1N7QycCjsVNnz746t64lbMPP3sTn3u/+7LsRIO30s7da17TPb2d5c5vnxueeO7JJy+u1iSjg5v3qTcPnPpdFv3RbdHO5v+nbHaq69v7I/b88Lvdmi8MCU5Gd3ikH0bETSx+NdkiZvffiwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgO/8KAAD//wifUTs=") r0 = syz_clone(0x5820180, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = gettid() r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x20, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r4, 0xffffffffffffffff, 0x2d, 0x0, @val=@netfilter={0x2, 0x0, 0x6, 0x1}}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000002c0)={r5, 0x0, 0x0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='sys_enter\x00', r3}, 0x18) kcmp(r0, r1, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x589002, 0x81) getdents64(r6, &(0x7f0000000f80)=""/4096, 0x1000) 1m31.083561393s ago: executing program 2 (id=9): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x5}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e8500000001"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=', @ANYRESHEX]) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000080)=ANY=[]) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sync() r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/consoles\x00', 0x0, 0x0) lseek(r4, 0x164, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="140100002800010004000000fcdbdf250401f2800c00180008ac0f0000000100140001"], 0x114}], 0x1, 0x0, 0x0, 0x20000001}, 0x0) 1m29.90760188s ago: executing program 2 (id=16): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000080000000000000000000850000007d00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='kfree\x00', r0}, 0x10) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee01}}, './file0\x00'}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x33}, 0x94) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r4 = dup(r3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xca}, 0x94) write$P9_RLERRORu(r4, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) creat(&(0x7f00000003c0)='./file0\x00', 0x36) 1m29.742646634s ago: executing program 32 (id=16): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000080000000000000000000850000007d00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='kfree\x00', r0}, 0x10) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee01}}, './file0\x00'}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x33}, 0x94) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r4 = dup(r3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xca}, 0x94) write$P9_RLERRORu(r4, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) creat(&(0x7f00000003c0)='./file0\x00', 0x36) 4.310107572s ago: executing program 3 (id=1174): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=', @ANYRESHEX]) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000080)=ANY=[]) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sync() r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/consoles\x00', 0x0, 0x0) lseek(r2, 0x164, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) sync() 4.09496946s ago: executing program 3 (id=1178): pipe(&(0x7f0000000500)={0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x401) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r0) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x91c, 0x4156, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfffffffffffffff8, 0x1}, 0x12640, 0x0, 0xfffffffe, 0x6, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) gettid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socket$unix(0x1, 0x1, 0x0) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000280), 0xa8000, 0x0) r4 = syz_io_uring_setup(0x497, &(0x7f0000000180)={0x0, 0x79ad, 0x8, 0x8000, 0x2bc}, &(0x7f00000003c0)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000000)=0xffa, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000140)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x2007, @fd=r3, 0x6, 0x0, 0x0, 0x2, 0x1}) io_uring_enter(r4, 0x74d1, 0x4c3, 0x43, 0x0, 0xfffffffffffffd1d) bpf$MAP_CREATE(0x0, 0x0, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) ioctl$int_in(r7, 0x5452, &(0x7f0000000080)=0x8000000ffffffff) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r9}, &(0x7f0000bbdffc)=0x0) timer_settime(r10, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) splice(r7, 0x0, r8, 0x0, 0x7, 0x0) 3.481884131s ago: executing program 1 (id=1187): r0 = inotify_init() ioctl$INOTIFY_IOC_SETNEXTWD(r0, 0x541b, 0x1000000000000) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4000, &(0x7f0000000c00)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@mblk_io_submit}, {@resuid}, {@norecovery}]}, 0x8, 0x445, &(0x7f0000001dc0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) pwrite64(r2, &(0x7f0000000040)="166fa60f6c98d3abb14a5644a6ddabcbee6afa4c99353b8d2642c90e13afef7dba247b13e1036ee02a8e05c7a469d340454d65f7422a92546f0bfa757a6dcf3135f6307bd95d8e4cec5330f72e33365379f6cd54602cda827404f6dc37de8387f2c7a806b86f27b711c6f79a87", 0x6d, 0x6) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@S') syz_emit_ethernet(0x2a, &(0x7f0000001500)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb080045b8001c0066000000019078ac1e00010a010100120090780000000229893a166fd2396ab71d2d610e65255b2415743bca6fff9eab4d53f6badbe3e60bdc60e499f571d18bba56fbe88a9c6af8bb7b03c4d73094cec7e18a43c33b13bb4781530f704da3af3537589bfc5020cde67a17c5f9f8a21f994b3273b53bd5203b7cbe664d501e6a947cba6431e4274eee13a38c36c94845dd79633f18beda36896d0c017cbb62ce050948"], 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00', 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0x1e9, 0x739, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r4, &(0x7f00000009c0)="3bf58d7d45d32cfe1da7c797b82f16713d1cb80b3fa1bda74e3977b40e7af46b4c60b70d7a79ed5d8c", 0x29) sendfile(r4, r1, 0x0, 0x3ffff) 2.417480499s ago: executing program 1 (id=1197): r0 = inotify_init() ioctl$INOTIFY_IOC_SETNEXTWD(r0, 0x541b, 0x1000000000000) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4000, &(0x7f0000000c00)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@mblk_io_submit}, {@resuid}, {@norecovery}]}, 0x8, 0x445, &(0x7f0000001dc0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) fdatasync(r2) pwrite64(r2, &(0x7f0000000040)="166fa60f6c98d3abb14a5644a6ddabcbee6afa4c99353b8d2642c90e13afef7dba247b13e1036ee02a8e05c7a469d340454d65f7422a92546f0bfa757a6dcf3135f6307bd95d8e4cec5330f72e33365379f6cd54602cda827404f6dc37de8387f2c7a806b86f27b711c6f79a87", 0x6d, 0x6) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@S') syz_emit_ethernet(0x2a, &(0x7f0000001500)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb080045b8001c0066000000019078ac1e00010a010100120090780000000229893a166fd2396ab71d2d610e65255b2415743bca6fff9eab4d53f6badbe3e60bdc60e499f571d18bba56fbe88a9c6af8bb7b03c4d73094cec7e18a43c33b13bb4781530f704da3af3537589bfc5020cde67a17c5f9f8a21f994b3273b53bd5203b7cbe664d501e6a947cba6431e4274eee13a38c36c94845dd79633f18beda36896d0c017cbb62ce050948"], 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00', 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0x1e9, 0x739, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r4, &(0x7f00000009c0)="3bf58d7d45d32cfe1da7c797b82f16713d1cb80b3fa1bda74e3977b40e7af46b4c60b70d7a79ed5d8c", 0x29) sendfile(r4, r1, 0x0, 0x3ffff) 2.392562181s ago: executing program 5 (id=1198): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='kfree\x00', r0}, 0x10) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff01800400080039503230"], 0x15) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) 2.323868877s ago: executing program 0 (id=1200): r0 = syz_clone(0x8d002240, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x6) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) r3 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000000)=0x655e, 0x4) r4 = dup2(r3, r3) write$tun(r4, &(0x7f0000000180)=ANY=[@ANYRES64, @ANYRESHEX=r2], 0x46) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r4}, 0x94) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x1c, r6, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x8080) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) ptrace(0x10, r0) ptrace$pokeuser(0x6, r0, 0x358, 0x4000000) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x80000c, 0x11, r8, 0x100000000000) 2.312789538s ago: executing program 5 (id=1201): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0, 0x0, 0x6}, 0x18) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000040)="dc", 0x1}], 0x8) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x7, 0x4, 0x8, 0xd9}, 0x50) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000240)={0x0, @remote, @dev}, &(0x7f0000000280)=0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x60, &(0x7f0000000140)={&(0x7f00000002c0)={0x1c, r5, 0x9c3fa077fa966179, 0x0, 0x700, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x24, r5, 0x400, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) (async, rerun: 64) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000380)={'ip_vti0\x00', &(0x7f0000000300)={'gre0\x00', r3, 0x7800, 0x80, 0x0, 0xffffffff, {{0xa, 0x4, 0x2, 0x9, 0x28, 0x66, 0x0, 0x2, 0x2d, 0x0, @local, @empty, {[@rr={0x7, 0x13, 0x79, [@rand_addr=0x64010102, @private=0xa010101, @multicast1, @loopback]}, @end]}}}}}) (rerun: 64) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r7}, 0x18) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002080)=@newtaction={0xe6c, 0x30, 0x25, 0x0, 0x0, {}, [{0xe58, 0x1, [@m_pedit={0xe54, 0x1, 0x0, 0x0, {{0xa}, {0xe28, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x4}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x0, 0x0, 0x0, 0x0, 0x100}, 0x2}, [{}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, {}, {}, {}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x7}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0x2}, {}, {}, {}, {0xfffffffc}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {0x7}, {}, {}, {0x0, 0x0, 0x80000001}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {0x0, 0x800000}, {0x0, 0x0, 0x0, 0x0, 0xb4d0}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20000}, {0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x4000000}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2, 0xfffffffd}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xffffffff}, {0x0, 0x0, 0x100}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x1}, {}, {0xfffffffd}, {}, {}, {}, {0x8}, {}, {}, {0x0, 0x0, 0x5}, {0x0, 0x2}, {0x400}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x10}, {}, {0x0, 0x1000}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x16e}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x1200000}, {0x0, 0x5}], [{0x2}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe6c}}, 0x0) 2.187041478s ago: executing program 5 (id=1202): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000220000000000000000000000850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f00000002c0)={[{@noauto_da_alloc}, {@jqfmt_vfsold}, {@noquota}, {@norecovery}, {}]}, 0x1, 0x4be, &(0x7f0000000540)="$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") r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x145c7e, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @loopback}, 0xc) r5 = syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00') preadv(r5, &(0x7f0000001b80)=[{&(0x7f00000001c0)=""/96, 0x60}], 0x1, 0x1000000, 0x0) io_setup(0x5ff, &(0x7f0000000400)=0x0) io_submit(r6, 0x1ffffff0, &(0x7f0000001d00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000000)="96", 0xffffff20}, &(0x7f0000000740)={0x0, 0x0, 0x41, 0x3, 0x0, r2, 0x0, 0x0, 0xffffffffffffffff}]) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000017c0)=ANY=[@ANYBLOB="0700000004000000080000000100000000000000", @ANYRES32, @ANYBLOB="000000f01d"], 0x50) r7 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x9, 0x45c4) ioctl$USBDEVFS_GET_SPEED(r7, 0x551f) syz_clone(0x64a47400, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r9, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e21}, 0x6e) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x5, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff9}, 0x94) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000300)='./file1\x00', 0x2008002, &(0x7f0000000400)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1000}}, {@nodiscard}, {@quota}]}, 0x1, 0x56f, &(0x7f00000004c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) 2.128511963s ago: executing program 4 (id=1203): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500"], 0x48) sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x28, 0x0, 0x7, 0x3, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x4894) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = syz_io_uring_setup(0x3edf, &(0x7f00000001c0)={0x0, 0x0, 0x100, 0x10, 0x0, 0x0, 0x0}, &(0x7f0000002000), &(0x7f0000ffd000)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r2, 0x3, 0x0, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x101002) io_submit(0x0, 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) 2.031104121s ago: executing program 0 (id=1204): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500"], 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x28, 0x0, 0x7, 0x3, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x4894) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) r2 = syz_io_uring_setup(0x3edf, &(0x7f00000001c0)={0x0, 0x0, 0x100, 0x10, 0x0, 0x0, 0x0}, &(0x7f0000002000), &(0x7f0000ffd000)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r2, 0x3, 0x0, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) io_submit(0x0, 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000000a40)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x441, 0x20) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r3, 0x8983, &(0x7f0000000100)) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f0000000280)={0x1, &(0x7f0000000140)=[{0x1, 0x2, 0x8, 0x9}]}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r5, 0x0) fallocate(r4, 0x8, 0x4000, 0x4000) io_submit(0x0, 0x1, &(0x7f0000000080)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) 1.533403292s ago: executing program 1 (id=1205): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000b00)={0xa, 0xfdfe, 0x100007, @remote, 0xa}, 0x1c) prctl$PR_SET_NAME(0xf, &(0x7f00000014c0)='w\xde\xa1\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98<\xc8\x18E/\x8c\x1a\xe3\xbd\xde\xad\xf5\x1eM\x11[\xb6\x98\xda\xd2y\xbd\xad\x87P\xd8\xb2\xe5\xd2\xe7\xf6\xa1\xc8\'\x1e\xbc\xf4\xa0\xe6\xcf*(\xfb_\x9fL\xa2\x86\f\xcd\x1b\xd1\xe7\x11\xe8\xe1-\x0f\x1b:\xff\x11~') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r2}, 0x10) connect$pppl2tp(r0, &(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x5, 0x0, {0xa, 0x0, 0xf9d, @private2}}}, 0x32) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1) 1.480760487s ago: executing program 3 (id=1206): r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000040000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r2}, 0x10) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) 1.454924399s ago: executing program 3 (id=1207): pipe2(&(0x7f0000000080), 0x800) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b707000008000000850000006900000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000240), 0x1, 0x4bf, &(0x7f0000000540)="$eJzs3c9vG1kdAPDvTJImm81usrASPwRsWRYKqtZO3N1otaflAkKrlRArThzakLhRFDuOYqc0oYf0f0CiEif4EzggcUDqiTs3uCGkckAqUIEaJA5GM56kaWqnEU08Vfz5SE8zb57t73tt573pt41fACPrckTsRcSliLgREbPF9aQo8VGvZK97/OjO8v6jO8tJdLuf/iPJ27NrceQ9mVeLz5yKiB98N+LHybNx2zu760uNRn2rqFc7zc1qe2f3L2vNpdX6an2jVltcWJz/4Nr7tTMb61vNXz/8ztrHP/zdb7/84A973/pp1q2Zou3oOM5Sb+gTh3Ey4xHx8XkEK8FYMZ5LZXeE/0saEZ+JiLez+79bdm8AgGHodmejO3u0DgBcdGmeA0vSSpELmIk0rVR6Obw3YzpttNqdqzdb2xsrvVzZXEykN9ca9fkiVzgXE0lWX8jPn9Rrx+rXIuKNiPjZ5Ct5vbLcaqyU+eADACPs1WPr/78ne+s/AHDBTZXdAQBg6Kz/ADB6rP8AMHqs/wAweqz/ADB6rP8AMHqs/wAwUr7/ySdZ6e4X33+9cmtne711692Venu90txeriy3tjYrq63Wav6dPc3nfV6j1dpceC+2b1c79Xan2t7Zvd5sbW90ruff6329PjGUUQEAJ3njrft/SiJi78NX8hJH9nKwVsPFlpbdAaA0Y2V3ACjNeNkdAErj7/hAny16nzLwvwjdG/gWUwu85K58Qf4fRpX8P4wu+X8YXfL/MLq63cSe/wAwYuT4gXP4938AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC48GbykqSVYi/wmUjTSiXitYiYi4nk5lqjPh8Rr0fEHycnJrP6QtmdBgBeUPq3pNj/68rsOzPHWy8l/5nMjxHxk198+vPbS53O1kJ2/Z+H1zv3iuu1EwPZahAASnKwTh+s4wceP7qzfFCG2Z+H3+5tLprF3S9Kr2U8xvPjVP7gMP2vpKj3ZM8rY2cQf+9uRHy+3/iTPDcyV+x8ejx+Fvu1ocZPn4qf5m29Y/Zr8dkz6AuMmvvZ/PNRv/svjcv5sf/9P5XPUC/uYP7bf2b+Sw/nv7EB89/l08Z47/ffG9h2N+KL4/3iJ4fxkwHx3zll/D9/6StvD2rr/jLiSvSPfzRWtdPcrLZ3dt9day6t1lfrG7Xa4sLi/AfX3q9V8xx19SBT/ay/f3j19ZPGPz0g/tRzxv/1U47/V/+98aOvnhD/m1/r//v/5gnxszXxG6eMvzT9m4Hbd2fxV/qPv3jP4PFfPWX8B3/dXTnlSwGAIWjv7K4vNRr1LSdDO8me3V6Cbjgp7ST7E3AWn/O5c+xq2TMTcN6e3PRl9wQAAAAAAAAAAAAAABhkGD/wVPYYAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuLj+FwAA//+vctdr") openat(0xffffffffffffff9c, 0x0, 0x101042, 0x15) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0xf000000}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x8) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'wg1\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r5}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 1.44511947s ago: executing program 1 (id=1208): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000220000000000000000000000850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f00000002c0)={[{@noauto_da_alloc}, {@jqfmt_vfsold}, {@noquota}, {@norecovery}, {}]}, 0x1, 0x4be, &(0x7f0000000540)="$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") r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x145c7e, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @loopback}, 0xc) r5 = syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00') preadv(r5, &(0x7f0000001b80)=[{&(0x7f00000001c0)=""/96, 0x60}], 0x1, 0x1000000, 0x0) io_setup(0x5ff, &(0x7f0000000400)=0x0) io_submit(r6, 0x1ffffff0, &(0x7f0000001d00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000000)="96", 0xffffff20}, &(0x7f0000000740)={0x0, 0x0, 0x41, 0x3, 0x0, r2, 0x0, 0x0, 0xffffffffffffffff}]) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000017c0)=ANY=[@ANYBLOB="0700000004000000080000000100000000000000", @ANYRES32, @ANYBLOB="000000f01d"], 0x50) r7 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x9, 0x45c4) ioctl$USBDEVFS_GET_SPEED(r7, 0x551f) syz_clone(0x64a47400, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r9, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e21}, 0x6e) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x5, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff9}, 0x94) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000300)='./file1\x00', 0x2008002, &(0x7f0000000400)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1000}}, {@nodiscard}, {@quota}]}, 0x1, 0x56f, &(0x7f00000004c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) 1.3252336s ago: executing program 3 (id=1209): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500"], 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x28, 0x0, 0x7, 0x3, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x4894) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = syz_io_uring_setup(0x3edf, &(0x7f00000001c0)={0x0, 0x0, 0x100, 0x10, 0x0, 0x0, 0x0}, &(0x7f0000002000), &(0x7f0000ffd000)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r3, 0x3, 0x0, 0x0) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) io_submit(0x0, 0x0, 0x0) preadv(r4, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000000a40)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x441, 0x20) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r4, 0x8983, &(0x7f0000000100)) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f0000000280)={0x1, &(0x7f0000000140)=[{0x1, 0x2, 0x8, 0x9}]}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r6, 0x0) fallocate(r5, 0x8, 0x4000, 0x4000) io_submit(0x0, 0x1, &(0x7f0000000080)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) 1.290496592s ago: executing program 5 (id=1210): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r0}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r1}, 0x10) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) r3 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x40000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0xffffffffffffffde, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000400)='sched_switch\x00', r5}, 0x18) readv(r3, &(0x7f0000000000)=[{0x0}], 0x1) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) io_uring_setup(0x62f2, &(0x7f0000000280)={0x0, 0x2b68, 0x1, 0x3, 0x2d9}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r6}, 0x18) syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), r2) r7 = socket(0x10, 0x803, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x128, 0x2c, 0xd2b, 0x70bd2b, 0x35dfdbfb, {0x0, 0x0, 0x0, r9, {0xf, 0x3}, {}, {0xfff1, 0xfff2}}, [@filter_kind_options=@f_u32={{0x8}, {0xfc, 0x2, [@TCA_U32_SEL={0xe4, 0x5, {0x10, 0x9, 0xe, 0x10da, 0xa760, 0x0, 0x10, 0xfc, [{0xffff8001, 0xf073, 0x4010000, 0x8000}, {0x40, 0x80000001, 0xfffffffe, 0xffffffff}, {0x2, 0x9, 0x2}, {0x2008, 0x80000000, 0x1e0a}, {0xffffffff, 0x9, 0x800, 0x100}, {0x5e3, 0x4, 0x8e, 0x3}, {0x2, 0xffffffff, 0x5, 0x1ad}, {0x1, 0x5, 0x5127, 0x800}, {0x6, 0x1, 0x2, 0x1}, {0x40, 0x40, 0x3, 0x5}, {0x2, 0x8, 0x6, 0x201}, {0x5, 0x406, 0x2, 0xfffffeff}, {0x94b0, 0x81, 0x80000001, 0xfffffffc}]}}, @TCA_U32_INDEV={0x14, 0x8, 'gre0\x00'}]}}]}, 0x128}, 0x1, 0x0, 0x0, 0x48001}, 0x4000) 1.226211108s ago: executing program 4 (id=1211): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, r0, 0x0, 0x7}, 0x18) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = memfd_secret(0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000480)=0x7d) ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000000c0)=0x7e) ftruncate(r1, 0x51a9497) finit_module(r1, 0x0, 0x3) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r5}, 0x10) sendmsg$nl_route_sched(r3, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000001180)=@newtaction={0x88c, 0x30, 0x12f, 0x70bd25, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x2, 0x0, 0x0, 0x7}}}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x247ecded, 0x0, 0x80000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xb, 0x37, 0x4, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0xffffff35, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x5ad, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0xb, 0x0, 0x0, 0x9, 0xfffffffd, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x5, 0x0, 0x0, 0x0, 0x9, 0x5, 0x0, 0x0, 0x3, 0x0, 0x1]}, @TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x0, 0x10000005, 0x0, 0x2, 0xb, 0xfffffffb, 0x0, 0x7, 0xfea7, 0x1, 0xffff8000, 0x90, 0x9fd, 0x2, 0xb8, 0xca3, 0x6, 0x3c, 0x7, 0x1, 0xa89c, 0x400, 0xc, 0x492217a0, 0xff, 0x5, 0x3, 0x1ff, 0xe9, 0x2d, 0xd, 0x3, 0xa, 0x3, 0x1, 0x9, 0x11, 0x188, 0x6, 0x3ff, 0x7, 0xd, 0x3, 0xc0000, 0x8, 0x8, 0xffffff40, 0x100, 0x3, 0x5, 0x7, 0xe0b2, 0x1, 0x8fc, 0xbf0, 0x9, 0x3, 0x9, 0x7ffffffd, 0x6, 0x0, 0x8, 0x800, 0x9, 0x4, 0x100, 0x401, 0x8, 0x3, 0xb5, 0x10001, 0x401, 0x1, 0x7f, 0x0, 0x8, 0x2, 0x7f, 0x0, 0x2, 0x4, 0x0, 0x1000004, 0x8000, 0x0, 0x9, 0x80, 0x7, 0x5, 0x1, 0x0, 0x7, 0xeb22, 0xd, 0x8000, 0xfffffff7, 0x0, 0x4, 0x3ff, 0x3fffff, 0x10, 0x5, 0x3, 0x10000, 0x5, 0x1, 0x0, 0x2, 0x6, 0x5, 0x6, 0xe5a, 0x4, 0x2, 0x81, 0xd44, 0x10, 0x6, 0x7fff, 0x800, 0xfffffff4, 0x10000, 0x5, 0x8, 0xba, 0x2, 0x89, 0x2, 0x6, 0x6, 0x9, 0xffffa3e0, 0x86b9, 0xff, 0x1, 0x2, 0xf, 0x24b9, 0x3a, 0xe01, 0x1, 0x6430, 0xd, 0x8, 0x0, 0x3, 0x7eb6, 0x3, 0x0, 0x200, 0xfffffeff, 0x9, 0xff, 0xa, 0x6, 0x7, 0x100, 0x1, 0x8001, 0x100, 0xffff9c71, 0x8, 0x101, 0x6, 0x2, 0xfffffc00, 0x81, 0x81, 0x200, 0x80000001, 0x1, 0xfffffffd, 0x9, 0x7, 0x4, 0xb, 0x80, 0x0, 0x0, 0x0, 0x5, 0x2, 0x65, 0x4, 0xfffffa0c, 0x3, 0x0, 0x2, 0x4, 0x35bc0, 0x9, 0xfffffffa, 0x7, 0x5, 0x3, 0x0, 0x6, 0x8, 0x28, 0x2, 0x5, 0x10001, 0x2, 0xf, 0xffffffff, 0x1, 0x723, 0x0, 0x9, 0x9, 0x4, 0x6, 0x7, 0x200, 0xfffffbff, 0x7, 0x3, 0x8, 0x5, 0xfffffffb, 0x2, 0x7f, 0x2, 0x80000002, 0x0, 0x9, 0x1ff, 0xfffffffe, 0x928, 0x4, 0xffffffff, 0x5, 0x6042, 0xb85, 0x6, 0x8d8d, 0x55, 0x101, 0x3, 0x64e8, 0x8, 0x82f, 0x772, 0x80a, 0xffe, 0x6, 0x3f7, 0x4, 0x8, 0x8, 0x1, 0x5d, 0x9, 0xd, 0x80]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x3}}}}]}]}, 0x88c}, 0x1, 0x0, 0x0, 0x50}, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) 1.144327465s ago: executing program 0 (id=1212): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) close(r0) 1.027889044s ago: executing program 4 (id=1213): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=', @ANYRESHEX]) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000080)=ANY=[]) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sync() r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/consoles\x00', 0x0, 0x0) lseek(r2, 0x164, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) sync() 834.648321ms ago: executing program 0 (id=1214): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r0, 0x0, 0x5, &(0x7f0000000240)={@local, @remote, 0xfffb, "66c5aff8a7fb3af1f6cec2e742000200", 0xffffffff, 0x1000003, 0x7f, 0x6a}, 0x3c) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000080)=0x300, 0x4) (fail_nth: 1) 580.322992ms ago: executing program 4 (id=1215): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x20004, 0x1000, 0x1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b7040000000000008500"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000005f0005"], 0x20}}, 0x0) 557.712604ms ago: executing program 4 (id=1216): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_setup(0x499, 0x0, &(0x7f0000000100)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, 0x0, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r0, 0x0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='0'], 0x30}}) bpf$MAP_CREATE(0x0, 0x0, 0x50) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00'}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0xbf44, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x24, 0x60000000, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50) perf_event_open(&(0x7f00000001c0)={0x0, 0xffffffffffffff9e, 0x20, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r3}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) gettid() ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000080)) 514.903457ms ago: executing program 0 (id=1217): r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000040000000800"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r2}, 0x10) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) 513.438807ms ago: executing program 1 (id=1218): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000b00)={0xa, 0xfdfe, 0x100007, @remote, 0xa}, 0x1c) prctl$PR_SET_NAME(0xf, &(0x7f00000014c0)='w\xde\xa1\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98<\xc8\x18E/\x8c\x1a\xe3\xbd\xde\xad\xf5\x1eM\x11[\xb6\x98\xda\xd2y\xbd\xad\x87P\xd8\xb2\xe5\xd2\xe7\xf6\xa1\xc8\'\x1e\xbc\xf4\xa0\xe6\xcf*(\xfb_\x9fL\xa2\x86\f\xcd\x1b\xd1\xe7\x11\xe8\xe1-\x0f\x1b:\xff\x11~') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r2}, 0x10) connect$pppl2tp(r0, &(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x5, 0x0, {0xa, 0x0, 0xf9d, @private2}}}, 0x32) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1) 513.043477ms ago: executing program 4 (id=1219): mkdir(&(0x7f00000000c0)='./control\x00', 0x100) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0x18, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) ptrace(0x8, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) sendmsg$ETHTOOL_MSG_PAUSE_GET(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001940)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x4000c00}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000bfa200000000000007020000f8ffffffb703000e08000000b70400007afc00000000000043002d041c3420b714807d9fd821f3b07ee22136186a5c6c5aae67c6f74ae9265e8c055212ede8e0d3d6f2e260de8c5723e4c17fc442643b623b7c88f938837f7b65fc937bc23800"/134], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r6, 0x40505330, &(0x7f00000001c0)={0x800100, 0xfffffffd, 0x22, 0x6, 0x1101, 0x1}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r6, 0x40505330, &(0x7f0000000500)={0x800000, 0x210002, 0xffffffdd, 0x7fffffff, 0x2, 0x69}) 499.251708ms ago: executing program 0 (id=1220): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000220000000000000000000000850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f00000002c0)={[{@noauto_da_alloc}, {@jqfmt_vfsold}, {@noquota}, {@norecovery}, {}]}, 0x1, 0x4be, &(0x7f0000000540)="$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") r3 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r4 = open(&(0x7f0000000780)='./bus\x00', 0x145c7e, 0x0) fallocate(r3, 0x0, 0x0, 0x1000f4) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @loopback}, 0xc) r6 = syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00') preadv(r6, &(0x7f0000001b80)=[{&(0x7f00000001c0)=""/96, 0x60}], 0x1, 0x1000000, 0x0) io_setup(0x5ff, &(0x7f0000000400)=0x0) io_submit(r7, 0x1ffffff0, &(0x7f0000001d00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000000)="96", 0xffffff20}, &(0x7f0000000740)={0x0, 0x0, 0x41, 0x3, 0x0, r3, 0x0, 0x0, 0xffffffffffffffff}]) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000017c0)=ANY=[@ANYBLOB="0700000004000000080000000100000000000000", @ANYRES32, @ANYBLOB="000000f01d"], 0x50) syz_open_dev$usbfs(&(0x7f00000000c0), 0x9, 0x45c4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) syz_clone(0x64a47400, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r9, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e21}, 0x6e) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x5, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff9}, 0x94) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000300)='./file1\x00', 0x2008002, &(0x7f0000000400)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1000}}, {@nodiscard}, {@quota}]}, 0x1, 0x56f, &(0x7f00000004c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) 396.265627ms ago: executing program 1 (id=1221): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500"], 0x48) sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x28, 0x0, 0x7, 0x3, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x4894) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = syz_io_uring_setup(0x3edf, &(0x7f00000001c0)={0x0, 0x0, 0x100, 0x10, 0x0, 0x0, 0x0}, &(0x7f0000002000), &(0x7f0000ffd000)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r2, 0x3, 0x0, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x101002) io_submit(0x0, 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) 361.64464ms ago: executing program 5 (id=1222): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=', @ANYRESHEX]) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000080)=ANY=[]) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sync() r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/consoles\x00', 0x0, 0x0) lseek(r2, 0x164, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) sync() 274.265788ms ago: executing program 3 (id=1223): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500"], 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x28, 0x0, 0x7, 0x3, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x4894) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = syz_io_uring_setup(0x3edf, &(0x7f00000001c0)={0x0, 0x0, 0x100, 0x10, 0x0, 0x0, 0x0}, &(0x7f0000002000), &(0x7f0000ffd000)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r3, 0x3, 0x0, 0x0) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) io_submit(0x0, 0x0, 0x0) preadv(r4, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000000a40)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x441, 0x20) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r4, 0x8983, &(0x7f0000000100)) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f0000000280)={0x1, &(0x7f0000000140)=[{0x1, 0x2, 0x8, 0x9}]}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r6, 0x0) fallocate(r5, 0x8, 0x4000, 0x4000) io_submit(0x0, 0x1, &(0x7f0000000080)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) 0s ago: executing program 5 (id=1224): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000002c0)=[{0x200000000006, 0x4, 0x0, 0x7ffc1ffb}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f00000000c0)=0xc) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000100)={0x28, 0x18, 0x1, 0x0, 0x0, {0x2}, [@typed={0x8, 0x800, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @nested={0xc, 0x8, 0x0, 0x1, [@typed={0x8, 0xc, 0x0, 0x0, @uid=r4}]}]}, 0x28}}, 0x10040080) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000003000), r6) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000003040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r6, &(0x7f0000003140)={0x0, 0x60, &(0x7f0000003100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002bbd7000fbdbdf25020000000a000900aaaaaaaaaa44000008000300", @ANYRES32=r8, @ANYBLOB='\b\x00\v'], 0x30}, 0x1, 0x0, 0x0, 0x20000050}, 0x20040084) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r3, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x38, r7, 0x202, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x31}}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x0) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r9, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0xa, 0x0, 0x0, 0x40f00, 0x60, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000500)='kmem_cache_free\x00', r10}, 0x18) r11 = socket(0x10, 0x3, 0x0) connect$netlink(r11, &(0x7f0000000280)=@proc={0x10, 0x0, 0x1}, 0xc) sendmsg$nl_route_sched(r11, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000001500)=@newtaction={0x18, 0x31, 0x829, 0x0, 0x0, {0x0, 0x0, 0x2}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4010}, 0x0) write$tun(r0, &(0x7f0000000080)={@val={0x8, 0x800}, @val={0x2, 0x80, 0x2, 0x4, 0x5, 0x9}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1b, 0x20, 0x66, 0x0, 0x40, 0x11, 0x0, @empty, @broadcast}, {0x4e1e, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x3, 0x2, 0x100, @void}}}}}, 0x2e) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f0000000e40), 0xfd, 0x531, &(0x7f0000000640)="$eJzs3cFvI1cZAPBvnDib7GabFDhApZZCi7IVrJ00tI04lCIhOFVClPsSEieK4sRR7LSbqILsX4CEECBxggsXJP4AJLQSF44IqRKcQSoCIdiCBAfoINvjJDjjxFuceNf5/aTZeW/GM9/3vHnjGc/TOIAr69mIeC0i3k/T9IWImMmWF7IpDttT83XvPXh7pTklkaZv/DWJJFvW2VeSzW9km01GxFe/HPGN5HTc+v7B5nK1WtnN6uXG1k65vn9we2Nreb2yXtleXFx4eemVpZeW5gfSzpsR8eoX//i9b//kS6/+4jNv/eHOn299s5nWdLb+ZDse0vhZK9tNL16b7Npg9wMGexQ121PsVKb62+beBeYDAEBvzXP8D0XEJyPihZiJsbNPZwEAAIDHUPr56fh3EpHmm+ixHAAAAHiMFFpjYJNCKRsLMB2FQqnUHsP7kbheqNbqjU+v1fa2V9tjZWejWFjbqFbms7HCs1FMmvWFVvm4/mJXfTEinoyI785MteqllVp1ddhffgAAAMAVcaPr+v8fM+3rfwAAAGDEzA47AQAAAODCuf4HAACA0ef6HwAAAEbaV15/vTmlnd+/Xn1zf2+z9ubt1Up9s7S1t1Jaqe3ulNZrtfXWM/u2zttftVbb+Wxs790tNyr1Rrm+f3Bnq7a33bizEZOX0iAAAADglCc/fv93SUQcfm6qNTVNDDsp4FKMH5WSbJ7T+3//RHv+7iUlBVyKsT5e8+61/OXOE+DxNt69oEdfB0ZPcdgJAEOXnLO+5+CdX2fzTww2HwAAYPDmPpZ///+864GIw8IlpAdcIJ0Yrq6u+//pzLASAS5d6/5/vwN5nCzASCn2NQIQGGX/9/3/c6XpQyUEAAAM3HRrSgql7Ou96SgUSqWIm62fBSgmaxvVynxEPBERv50pXmvWF1pbJn2MEQAAAAAAAAAAAAAAAAAAAAAAAAAAovVU7iRSAAAAYKRFFP6U/LL9LP+5meenu78fmEj+1fpJ4ImIeOuHb3z/7nKjsbvQXP63o+WNH2TLXxzGNxgAAABAt851emv+z2FnAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCoee/B2yudqY+XTw0q7l++EBGzefHHY7I1n4xiRFz/exLjJ7ZLImJsAPEP70XER/PiJ820jkLmxR/Em3BO/JjN3oW8+DcGEB+usvvN489ref2vEM+25vn9bzzif+ofVO/jXxwd/8Z69P+bfcZ46p2flXvGvxfx1Hj+8acTP+kR/7k+43/9awcHvdalP4qY63z+tI54JyMcl8qNrZ1yff/g9sbW8nplvbK9uLjw8tIrSy8tzZfXNqqV7N/cGN95+ufvn9X+67mff0mWTe/2P5+zv7zPpP+8c/fBhzuVw9Pxbz2XE/9XP85ecTp+IYvzqazcXD/XKR+2yyc989PfPHNW+1eP2198mP//W7122u1UR3m63z8dAOAC1PcPNper1cruyBaaV+mPQBoKj2DhWwPdYZqmabNP5ay6HxH97CeJAbe0kJ/PcaHnEWDYRyYAAGDQjk/6h50JAAAAAAAAAAAAAAAAAAAAXF2X8ZS17pjHj0BOBvEIbQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAgfhvAAAA//89e9P5") kernel console output (not intermixed with test programs): c000003e syscall=9 compat=0 ip=0x7f497e0eebe9 code=0x7ffc0000 [ 70.611348][ T29] audit: type=1326 audit(1755744352.838:1680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4930 comm="syz.1.381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f497e0eebe9 code=0x7ffc0000 [ 70.635202][ T29] audit: type=1326 audit(1755744352.838:1681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4930 comm="syz.1.381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f497e0eebe9 code=0x7ffc0000 [ 70.637857][ T4914] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 70.658768][ T29] audit: type=1326 audit(1755744352.838:1682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4930 comm="syz.1.381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f497e0eebe9 code=0x7ffc0000 [ 70.668153][ T4914] EXT4-fs error (device loop5): ext4_xattr_block_get:593: inode #15: comm syz.5.377: corrupted xattr block 19: overlapping e_value [ 70.782967][ T3531] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.795028][ T4944] veth7: entered promiscuous mode [ 70.813326][ T4952] veth11: entered promiscuous mode [ 70.873584][ T4950] veth0_vlan: left promiscuous mode [ 70.879964][ T4950] veth0_vlan: entered promiscuous mode [ 70.911250][ T4950] netlink: 'syz.1.389': attribute type 1 has an invalid length. [ 71.017845][ T4978] loop5: detected capacity change from 0 to 1024 [ 71.042055][ T4978] EXT4-fs: Ignoring removed nomblk_io_submit option [ 71.073942][ T4983] loop4: detected capacity change from 0 to 1024 [ 71.081400][ T4983] EXT4-fs: Ignoring removed nobh option [ 71.087696][ T4983] EXT4-fs: Ignoring removed bh option [ 71.092515][ T4978] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.094429][ T4985] loop1: detected capacity change from 0 to 1024 [ 71.127916][ T4985] EXT4-fs: Ignoring removed nomblk_io_submit option [ 71.132235][ T4990] netlink: 'syz.0.408': attribute type 1 has an invalid length. [ 71.142543][ T4990] netlink: 224 bytes leftover after parsing attributes in process `syz.0.408'. [ 71.153338][ T3531] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.164613][ T4983] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.182190][ T4985] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.212988][ T4997] veth5: entered promiscuous mode [ 71.223342][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.274300][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.303612][ T5003] veth15: entered promiscuous mode [ 71.335251][ T5005] veth13: entered promiscuous mode [ 71.360934][ T5012] loop5: detected capacity change from 0 to 1024 [ 71.398642][ T5012] EXT4-fs: Ignoring removed nobh option [ 71.404379][ T5012] EXT4-fs: Ignoring removed bh option [ 71.468779][ T5021] 9pnet: Could not find request transport: 0xffffffffffffffff [ 71.481257][ T5031] loop4: detected capacity change from 0 to 512 [ 71.484127][ T5033] netlink: 'syz.1.425': attribute type 1 has an invalid length. [ 71.495431][ T5033] netlink: 224 bytes leftover after parsing attributes in process `syz.1.425'. [ 71.515488][ T5031] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.422: casefold flag without casefold feature [ 71.518106][ T5012] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.541308][ T5033] loop1: detected capacity change from 0 to 256 [ 71.542285][ T5033] msdos: Unknown parameter 'ÿ0xffffffffffffffffÿÿÿÿ' [ 71.549287][ T5031] EXT4-fs (loop4): Remounting filesystem read-only [ 71.563377][ T5031] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.667860][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.682573][ T5043] veth15: entered promiscuous mode [ 71.696051][ T5045] SELinux: failed to load policy [ 71.903549][ T5065] 9pnet: Could not find request transport: 0xffffffffffffffff [ 72.026276][ T5076] SELinux: failed to load policy [ 72.041516][ T5078] loop1: detected capacity change from 0 to 1024 [ 72.064471][ T5078] EXT4-fs: Ignoring removed nobh option [ 72.070093][ T5078] EXT4-fs: Ignoring removed bh option [ 72.094172][ T5078] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.108201][ T5084] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.445'. [ 72.211091][ T5086] C: renamed from team_slave_0 (while UP) [ 72.219779][ T3531] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.231735][ T5086] netlink: 164 bytes leftover after parsing attributes in process `syz.0.446'. [ 72.244915][ T5086] can0: slcan on ttyS3. [ 72.250043][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.433228][ T5086] can0 (unregistered): slcan off ttyS3. [ 72.453742][ T5098] can0: slcan on ttyS3. [ 72.686539][ T5113] loop5: detected capacity change from 0 to 8192 [ 72.714572][ T5113] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 72.822046][ T5085] can0 (unregistered): slcan off ttyS3. [ 72.837877][ T5115] 9pnet: Could not find request transport: 0xffffffffffffffff [ 73.081056][ T5122] SELinux: failed to load policy [ 73.106089][ T5126] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.456'. [ 73.177676][ T5130] random: crng reseeded on system resumption [ 73.227137][ T5131] loop4: detected capacity change from 0 to 1024 [ 73.244166][ T5131] EXT4-fs: Ignoring removed nobh option [ 73.249870][ T5131] EXT4-fs: Ignoring removed bh option [ 73.256142][ T5135] netlink: '/dev/snd/seq': attribute type 3 has an invalid length. [ 73.368639][ T5144] loop1: detected capacity change from 0 to 512 [ 73.385041][ T5144] EXT4-fs: Ignoring removed mblk_io_submit option [ 73.393787][ T5131] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.525191][ T5144] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 73.583970][ T5144] EXT4-fs (loop1): 1 truncate cleaned up [ 73.590576][ T5144] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.044663][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.153968][ T5159] netlink: 'syz.4.469': attribute type 1 has an invalid length. [ 74.161877][ T5159] netlink: 224 bytes leftover after parsing attributes in process `syz.4.469'. [ 74.217536][ T5162] loop5: detected capacity change from 0 to 1024 [ 74.242868][ T5162] EXT4-fs: Ignoring removed nobh option [ 74.248824][ T5162] EXT4-fs: Ignoring removed bh option [ 74.311852][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.333622][ T5170] veth9: entered promiscuous mode [ 74.373734][ T5162] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.406442][ T5178] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.477'. [ 74.441133][ T5180] SELinux: failed to load policy [ 74.457916][ T5181] loop4: detected capacity change from 0 to 1024 [ 74.464974][ T5181] EXT4-fs: Ignoring removed nobh option [ 74.470591][ T5181] EXT4-fs: Ignoring removed bh option [ 74.494748][ T3531] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.689174][ T5201] loop5: detected capacity change from 0 to 1024 [ 74.696115][ T5201] EXT4-fs: Ignoring removed nomblk_io_submit option [ 74.722811][ T5181] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.742523][ T5201] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.790225][ T3531] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.826634][ T5205] netlink: 4 bytes leftover after parsing attributes in process `syz.0.484'. [ 75.195666][ T5228] __nla_validate_parse: 4 callbacks suppressed [ 75.195687][ T5228] netlink: 4 bytes leftover after parsing attributes in process `syz.3.492'. [ 75.224206][ T5228] netlink: 60 bytes leftover after parsing attributes in process `syz.3.492'. [ 75.233291][ T5228] netlink: 60 bytes leftover after parsing attributes in process `syz.3.492'. [ 75.247588][ T5232] 9pnet: Could not find request transport: 0xffffffffffffffff [ 75.281312][ T5222] loop5: detected capacity change from 0 to 8192 [ 75.289672][ T5222] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 75.300494][ T5237] loop3: detected capacity change from 0 to 1024 [ 75.318556][ T5237] EXT4-fs: Ignoring removed nomblk_io_submit option [ 75.326517][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.333350][ T5237] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.360369][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.402795][ T5242] netlink: 4 bytes leftover after parsing attributes in process `syz.4.497'. [ 75.434198][ T5242] netlink: 60 bytes leftover after parsing attributes in process `syz.4.497'. [ 75.443206][ T5242] netlink: 60 bytes leftover after parsing attributes in process `syz.4.497'. [ 75.529681][ T29] kauditd_printk_skb: 626 callbacks suppressed [ 75.529727][ T29] audit: type=1326 audit(1755744357.908:2308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5257 comm="syz.3.501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f5782ebe9 code=0x7ffc0000 [ 75.577347][ T5261] FAULT_INJECTION: forcing a failure. [ 75.577347][ T5261] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 75.584789][ T29] audit: type=1326 audit(1755744357.908:2309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5257 comm="syz.3.501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f5782ebe9 code=0x7ffc0000 [ 75.590536][ T5261] CPU: 1 UID: 0 PID: 5261 Comm: syz.5.503 Not tainted syzkaller #0 PREEMPT(voluntary) [ 75.590573][ T5261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 75.590605][ T5261] Call Trace: [ 75.590613][ T5261] [ 75.590623][ T5261] __dump_stack+0x1d/0x30 [ 75.590653][ T5261] dump_stack_lvl+0xe8/0x140 [ 75.590709][ T5261] dump_stack+0x15/0x1b [ 75.590731][ T5261] should_fail_ex+0x265/0x280 [ 75.590762][ T5261] should_fail+0xb/0x20 [ 75.590785][ T5261] should_fail_usercopy+0x1a/0x20 [ 75.590843][ T5261] _copy_from_user+0x1c/0xb0 [ 75.590890][ T5261] do_semtimedop+0x14e/0x220 [ 75.590948][ T5261] __x64_sys_semtimedop+0xc8/0xf0 [ 75.591007][ T5261] x64_sys_call+0x23ef/0x2ff0 [ 75.591037][ T5261] do_syscall_64+0xd2/0x200 [ 75.591074][ T5261] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 75.591107][ T5261] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 75.591195][ T5261] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.591224][ T5261] RIP: 0033:0x7f3c515debe9 [ 75.591245][ T5261] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 75.591328][ T5261] RSP: 002b:00007f3c5003f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000dc [ 75.591354][ T5261] RAX: ffffffffffffffda RBX: 00007f3c51805fa0 RCX: 00007f3c515debe9 [ 75.591371][ T5261] RDX: 0000000000000001 RSI: 0000200000000280 RDI: 0000000000000000 [ 75.591383][ T5261] RBP: 00007f3c5003f090 R08: 0000000000000000 R09: 0000000000000000 [ 75.591394][ T5261] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 75.591472][ T5261] R13: 00007f3c51806038 R14: 00007f3c51805fa0 R15: 00007fff27ff8d08 [ 75.591547][ T5261] [ 75.667572][ T5264] loop3: detected capacity change from 0 to 1024 [ 75.668156][ T29] audit: type=1326 audit(1755744357.908:2310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5257 comm="syz.3.501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=447 compat=0 ip=0x7f1f5782ebe9 code=0x7ffc0000 [ 75.708947][ T5264] EXT4-fs: Ignoring removed nomblk_io_submit option [ 75.709879][ T29] audit: type=1326 audit(1755744357.908:2311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5257 comm="syz.3.501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f5782ebe9 code=0x7ffc0000 [ 75.846436][ T29] audit: type=1326 audit(1755744357.908:2312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5257 comm="syz.3.501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f5782ebe9 code=0x7ffc0000 [ 75.877794][ T29] audit: type=1326 audit(1755744358.078:2313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5249 comm="syz.0.499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e57a2ebe9 code=0x7ffc0000 [ 75.901818][ T29] audit: type=1326 audit(1755744358.078:2314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5249 comm="syz.0.499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e57a2ebe9 code=0x7ffc0000 [ 75.903249][ T5264] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.925480][ T29] audit: type=1326 audit(1755744358.258:2315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5266 comm="syz.4.504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57122cebe9 code=0x7ffc0000 [ 75.961500][ T29] audit: type=1326 audit(1755744358.258:2316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5266 comm="syz.4.504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57122cebe9 code=0x7ffc0000 [ 75.985240][ T29] audit: type=1326 audit(1755744358.258:2317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5249 comm="syz.0.499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7f6e57a2ebe9 code=0x7ffc0000 [ 76.067443][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.111518][ T5277] loop1: detected capacity change from 0 to 1024 [ 76.118845][ T5277] EXT4-fs: Ignoring removed nomblk_io_submit option [ 76.134873][ T5275] veth17: entered promiscuous mode [ 76.165060][ T5277] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.180937][ T5280] loop3: detected capacity change from 0 to 8192 [ 76.259353][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.281237][ T5280] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 76.313272][ T5286] veth19: entered promiscuous mode [ 76.367120][ T5288] 9pnet: Could not find request transport: 0xffffffffffffffff [ 76.673144][ T5319] SELinux: failed to load policy [ 76.736077][ T5325] loop4: detected capacity change from 0 to 1024 [ 76.743293][ T5325] EXT4-fs: Ignoring removed nobh option [ 76.749088][ T5325] EXT4-fs: Ignoring removed bh option [ 76.763498][ T5325] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.882747][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.012028][ T5336] veth11: entered promiscuous mode [ 77.267659][ T5345] netlink: 'syz.5.527': attribute type 1 has an invalid length. [ 77.275947][ T5345] netlink: 224 bytes leftover after parsing attributes in process `syz.5.527'. [ 77.297556][ T5352] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.530'. [ 77.680011][ T5378] netlink: 'syz.1.541': attribute type 1 has an invalid length. [ 77.687810][ T5378] netlink: 224 bytes leftover after parsing attributes in process `syz.1.541'. [ 77.727597][ T5374] loop3: detected capacity change from 0 to 1024 [ 77.737359][ T5374] EXT4-fs: Ignoring removed nomblk_io_submit option [ 77.746144][ T5381] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 77.752796][ T5381] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 77.761145][ T5381] vhci_hcd vhci_hcd.0: Device attached [ 77.772137][ T5381] FAULT_INJECTION: forcing a failure. [ 77.772137][ T5381] name failslab, interval 1, probability 0, space 0, times 0 [ 77.785459][ T5381] CPU: 0 UID: 0 PID: 5381 Comm: syz.1.542 Not tainted syzkaller #0 PREEMPT(voluntary) [ 77.785540][ T5381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 77.785552][ T5381] Call Trace: [ 77.785624][ T5381] [ 77.785632][ T5381] __dump_stack+0x1d/0x30 [ 77.785654][ T5381] dump_stack_lvl+0xe8/0x140 [ 77.785673][ T5381] dump_stack+0x15/0x1b [ 77.785694][ T5381] should_fail_ex+0x265/0x280 [ 77.785720][ T5381] should_failslab+0x8c/0xb0 [ 77.785750][ T5381] kmem_cache_alloc_noprof+0x50/0x310 [ 77.785838][ T5381] ? sk_prot_alloc+0x3f/0x190 [ 77.785864][ T5381] sk_prot_alloc+0x3f/0x190 [ 77.785884][ T5381] sk_alloc+0x34/0x360 [ 77.785901][ T5381] unix_create1+0xa5/0x430 [ 77.785919][ T5381] ? inode_init_always_gfp+0x4cd/0x500 [ 77.786007][ T5381] unix_create+0x11f/0x150 [ 77.786032][ T5381] __sock_create+0x2e9/0x5b0 [ 77.786066][ T5381] __sys_socketpair+0x170/0x430 [ 77.786138][ T5381] ? ksys_write+0x192/0x1a0 [ 77.786167][ T5381] __x64_sys_socketpair+0x52/0x60 [ 77.786214][ T5381] x64_sys_call+0x2bf2/0x2ff0 [ 77.786238][ T5381] do_syscall_64+0xd2/0x200 [ 77.786322][ T5381] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 77.786352][ T5381] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 77.786384][ T5381] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.786475][ T5381] RIP: 0033:0x7f497e0f0b3a [ 77.786493][ T5381] Code: 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 49 89 ca b8 35 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 77.786510][ T5381] RSP: 002b:00007f497cb4ef78 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 77.786529][ T5381] RAX: ffffffffffffffda RBX: 00007f497e315f01 RCX: 00007f497e0f0b3a [ 77.786591][ T5381] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 77.786607][ T5381] RBP: 00007f497cb4f090 R08: 0000000000000000 R09: 0000000000000000 [ 77.786619][ T5381] R10: 00007f497cb4ef98 R11: 0000000000000246 R12: 0000000000000005 [ 77.786632][ T5381] R13: 00007f497e316038 R14: 00007f497e315fa0 R15: 00007fff2412cdc8 [ 77.786655][ T5381] [ 77.788721][ T5374] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.938523][ T5382] vhci_hcd: connection closed [ 78.034882][ T60] vhci_hcd: stop threads [ 78.043955][ T60] vhci_hcd: release socket [ 78.048422][ T60] vhci_hcd: disconnect device [ 78.054141][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.190041][ T5395] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.545'. [ 78.216745][ T5397] veth13: entered promiscuous mode [ 78.297995][ T5401] veth15: entered promiscuous mode [ 78.330720][ T5407] random: crng reseeded on system resumption [ 78.365916][ T5409] SELinux: failed to load policy [ 78.415422][ T5412] netlink: '/dev/snd/seq': attribute type 3 has an invalid length. [ 78.530131][ T5419] SELinux: policydb magic number 0xffffffff does not match expected magic number 0xf97cff8c [ 78.558444][ T5419] SELinux: failed to load policy [ 78.608139][ T5422] veth7: entered promiscuous mode [ 78.627955][ T5424] loop4: detected capacity change from 0 to 1024 [ 78.661386][ T5424] EXT4-fs: Ignoring removed nomblk_io_submit option [ 78.786394][ T5424] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.899388][ T5429] loop1: detected capacity change from 0 to 8192 [ 78.914458][ T5429] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 79.063523][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.146630][ T5433] veth11: entered promiscuous mode [ 79.241247][ T5439] loop5: detected capacity change from 0 to 512 [ 79.264681][ T5439] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 79.295783][ T5439] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.383442][ T5439] ext4 filesystem being mounted at /97/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.415767][ T5447] loop1: detected capacity change from 0 to 512 [ 79.443854][ T5447] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.567: casefold flag without casefold feature [ 79.471715][ T5447] EXT4-fs (loop1): Remounting filesystem read-only [ 79.493450][ T5453] loop4: detected capacity change from 0 to 1024 [ 79.500310][ T5453] EXT4-fs: Ignoring removed nobh option [ 79.506171][ T5453] EXT4-fs: Ignoring removed bh option [ 79.563179][ T5447] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.627550][ T5453] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.632807][ T5459] netlink: 'syz.3.571': attribute type 1 has an invalid length. [ 79.692050][ T5455] SELinux: failed to load policy [ 79.725371][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.154204][ T3531] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.205943][ T5503] 9pnet: Could not find request transport: 0xffffffffffffffff [ 80.215461][ T5445] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4183: comm syz.4.568: Allocating blocks 497-513 which overlap fs metadata [ 80.506064][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.519453][ T5530] loop3: detected capacity change from 0 to 1024 [ 80.526959][ T5530] EXT4-fs: Ignoring removed nomblk_io_submit option [ 80.545504][ T5530] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.585704][ T29] kauditd_printk_skb: 272 callbacks suppressed [ 80.585723][ T29] audit: type=1326 audit(1755744362.968:2590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5539 comm="syz.4.590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57122cebe9 code=0x7ffc0000 [ 80.616523][ T29] audit: type=1326 audit(1755744362.968:2591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5539 comm="syz.4.590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57122cebe9 code=0x7ffc0000 [ 80.640703][ T29] audit: type=1326 audit(1755744362.968:2592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5539 comm="syz.4.590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f57122cebe9 code=0x7ffc0000 [ 80.664321][ T29] audit: type=1326 audit(1755744362.968:2593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5539 comm="syz.4.590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57122cebe9 code=0x7ffc0000 [ 80.670607][ T5541] loop4: detected capacity change from 0 to 1024 [ 80.688338][ T29] audit: type=1326 audit(1755744362.968:2594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5539 comm="syz.4.590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f57122cebe9 code=0x7ffc0000 [ 80.701197][ T5541] EXT4-fs: Ignoring removed nobh option [ 80.718675][ T29] audit: type=1326 audit(1755744362.968:2595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5539 comm="syz.4.590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57122cebe9 code=0x7ffc0000 [ 80.724376][ T5541] EXT4-fs: Ignoring removed bh option [ 80.753486][ T29] audit: type=1326 audit(1755744362.968:2596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5539 comm="syz.4.590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f57122cebe9 code=0x7ffc0000 [ 80.777150][ T29] audit: type=1326 audit(1755744362.968:2597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5539 comm="syz.4.590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57122cebe9 code=0x7ffc0000 [ 80.800746][ T29] audit: type=1326 audit(1755744362.968:2598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5539 comm="syz.4.590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f57122cebe9 code=0x7ffc0000 [ 80.824312][ T29] audit: type=1326 audit(1755744362.968:2599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5539 comm="syz.4.590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57122cebe9 code=0x7ffc0000 [ 80.892269][ T5541] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.947629][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.237123][ T5566] loop3: detected capacity change from 0 to 1024 [ 81.270766][ T5566] EXT4-fs: Ignoring removed nobh option [ 81.276559][ T5566] EXT4-fs: Ignoring removed bh option [ 81.293752][ T5566] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.319139][ T5573] __nla_validate_parse: 1 callbacks suppressed [ 81.319159][ T5573] netlink: 65039 bytes leftover after parsing attributes in process `syz.5.595'. [ 81.388274][ T5561] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4183: comm syz.3.593: Allocating blocks 497-513 which overlap fs metadata [ 81.523171][ T5579] EXT4-fs (loop3): pa ffff88810721b8c0: logic 0, phys. 113, len 25 [ 81.531329][ T5579] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5434: group 0, free 23, pa_free 24 [ 81.591050][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.627471][ T5583] SELinux: failed to load policy [ 81.827766][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.895578][ T5607] netlink: 4 bytes leftover after parsing attributes in process `syz.3.604'. [ 81.908197][ T5607] netlink: 60 bytes leftover after parsing attributes in process `syz.3.604'. [ 81.917571][ T5607] netlink: 60 bytes leftover after parsing attributes in process `syz.3.604'. [ 81.938161][ T5607] netlink: 60 bytes leftover after parsing attributes in process `syz.3.604'. [ 81.947774][ T5607] netlink: 60 bytes leftover after parsing attributes in process `syz.3.604'. [ 81.957024][ T5614] 9pnet: Could not find request transport: 0xffffffffffffffff [ 81.967678][ T5620] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 81.993804][ T5620] SELinux: failed to load policy [ 82.074393][ T5633] veth13: entered promiscuous mode [ 82.087804][ T5635] loop1: detected capacity change from 0 to 512 [ 82.109361][ T5635] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 82.155222][ T5635] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.184452][ T5635] ext4 filesystem being mounted at /123/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 82.268641][ T5653] loop3: detected capacity change from 0 to 1024 [ 82.355502][ T5663] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #15: comm syz.1.613: corrupted xattr block 32: bad e_name length [ 82.362149][ T5653] EXT4-fs: Ignoring removed nobh option [ 82.374779][ T5653] EXT4-fs: Ignoring removed bh option [ 82.390060][ T5663] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 82.429343][ T5663] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #15: comm syz.1.613: corrupted xattr block 32: bad e_name length [ 82.473484][ T5663] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 82.487256][ T5653] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.491921][ T5663] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #15: comm syz.1.613: corrupted xattr block 32: bad e_name length [ 82.529903][ T5663] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 82.718966][ T5687] 9pnet: Could not find request transport: 0xffffffffffffffff [ 82.774993][ T5692] netlink: 4 bytes leftover after parsing attributes in process `syz.5.621'. [ 82.781377][ T5681] netlink: 60 bytes leftover after parsing attributes in process `syz.5.621'. [ 82.793252][ T5681] netlink: 60 bytes leftover after parsing attributes in process `syz.5.621'. [ 82.849701][ T5692] loop5: detected capacity change from 0 to 128 [ 82.870406][ T5681] netlink: 60 bytes leftover after parsing attributes in process `syz.5.621'. [ 82.959724][ T5711] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 82.986807][ T5711] SELinux: failed to load policy [ 82.997953][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.082500][ T5713] SELinux: failed to load policy [ 83.126912][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.137203][ T5723] SELinux: policydb magic number 0xffffffff does not match expected magic number 0xf97cff8c [ 83.163715][ T5723] SELinux: failed to load policy [ 83.189165][ T5725] 9pnet: Could not find request transport: 0xffffffffffffffff [ 83.220350][ T5734] loop5: detected capacity change from 0 to 512 [ 83.228076][ T5736] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 83.239122][ T5734] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 83.249060][ T5736] SELinux: failed to load policy [ 83.317991][ T5731] SELinux: failed to load policy [ 83.324750][ T5734] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.349911][ T5734] ext4 filesystem being mounted at /109/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.386757][ T5746] loop1: detected capacity change from 0 to 1024 [ 83.394298][ T5746] EXT4-fs: Ignoring removed nobh option [ 83.400098][ T5746] EXT4-fs: Ignoring removed bh option [ 83.447022][ T5746] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.510272][ T5761] SELinux: failed to load policy [ 83.510553][ T5763] veth21: entered promiscuous mode [ 83.544234][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.572640][ T5765] EXT4-fs error (device loop5): ext4_xattr_block_get:593: inode #15: comm syz.5.636: corrupted xattr block 32: bad e_name length [ 83.624161][ T5775] veth15: entered promiscuous mode [ 83.630052][ T5765] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 83.648273][ T5777] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 83.657119][ T5765] EXT4-fs error (device loop5): ext4_xattr_block_get:593: inode #15: comm syz.5.636: corrupted xattr block 32: bad e_name length [ 83.666774][ T5777] SELinux: failed to load policy [ 83.674029][ T5765] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 83.698203][ T5765] EXT4-fs error (device loop5): ext4_xattr_block_get:593: inode #15: comm syz.5.636: corrupted xattr block 32: bad e_name length [ 83.723841][ T5765] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 83.819036][ T5785] 9pnet: Could not find request transport: 0xffffffffffffffff [ 84.125977][ T3531] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.152797][ T5824] loop5: detected capacity change from 0 to 1024 [ 84.159934][ T5824] EXT4-fs: Ignoring removed nomblk_io_submit option [ 84.174366][ T5824] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.212132][ T3531] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.314685][ T5835] 9pnet: Could not find request transport: 0xffffffffffffffff [ 84.364841][ T5838] loop5: detected capacity change from 0 to 1024 [ 84.373515][ T5838] EXT4-fs: Ignoring removed nobh option [ 84.379278][ T5838] EXT4-fs: Ignoring removed bh option [ 84.397202][ T5838] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.441100][ T5842] loop3: detected capacity change from 0 to 1024 [ 84.449118][ T5842] EXT4-fs: Ignoring removed nobh option [ 84.454953][ T5842] EXT4-fs: Ignoring removed bh option [ 84.474555][ T5842] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.589551][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.779939][ T5851] sel_write_load: 2 callbacks suppressed [ 84.779955][ T5851] SELinux: failed to load policy [ 84.786612][ T5833] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4183: comm syz.5.666: Allocating blocks 497-513 which overlap fs metadata [ 84.936395][ T5859] loop4: detected capacity change from 0 to 1024 [ 84.945148][ T5857] loop3: detected capacity change from 0 to 512 [ 84.953543][ T5859] EXT4-fs: Ignoring removed nomblk_io_submit option [ 84.961314][ T5857] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 84.995928][ T5859] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.020804][ T5833] EXT4-fs (loop5): pa ffff8881072694d0: logic 624, phys. 465, len 3 [ 85.028973][ T5833] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 1 [ 85.058091][ T5857] ext4 filesystem being mounted at /133/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.197414][ T5869] loop4: detected capacity change from 0 to 512 [ 85.224903][ T5869] EXT4-fs: Ignoring removed mblk_io_submit option [ 85.251597][ T5869] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 85.274718][ T5869] EXT4-fs (loop4): 1 truncate cleaned up [ 85.280869][ T5877] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.673: corrupted xattr block 32: bad e_name length [ 85.332066][ T5877] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 85.341269][ T5877] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.673: corrupted xattr block 32: bad e_name length [ 85.497678][ T5877] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 85.646197][ T5885] random: crng reseeded on system resumption [ 85.658983][ T5877] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.673: corrupted xattr block 32: bad e_name length [ 85.739007][ T5877] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 85.749233][ T5886] netlink: '/dev/snd/seq': attribute type 3 has an invalid length. [ 85.936549][ T5888] SELinux: failed to load policy [ 86.484574][ T5907] loop5: detected capacity change from 0 to 8192 [ 86.578732][ T5907] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 86.768323][ T5909] 9pnet: Could not find request transport: 0xffffffffffffffff [ 86.784599][ T5912] veth17: entered promiscuous mode [ 86.827567][ T5917] loop4: detected capacity change from 0 to 512 [ 86.835152][ T5917] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 86.848977][ T5915] veth17: entered promiscuous mode [ 86.857087][ T5917] ext4 filesystem being mounted at /135/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.917605][ T29] kauditd_printk_skb: 410 callbacks suppressed [ 86.917621][ T29] audit: type=1326 audit(1755744369.298:3010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5922 comm="syz.3.696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f5782ebe9 code=0x7ffc0000 [ 86.947945][ T29] audit: type=1326 audit(1755744369.328:3011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5922 comm="syz.3.696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f5782ebe9 code=0x7ffc0000 [ 86.972475][ T29] audit: type=1326 audit(1755744369.328:3012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5922 comm="syz.3.696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1f5782ebe9 code=0x7ffc0000 [ 86.996139][ T29] audit: type=1326 audit(1755744369.328:3013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5922 comm="syz.3.696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f5782ebe9 code=0x7ffc0000 [ 87.020597][ T29] audit: type=1326 audit(1755744369.328:3014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5922 comm="syz.3.696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f5782ebe9 code=0x7ffc0000 [ 87.044449][ T29] audit: type=1326 audit(1755744369.328:3015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5922 comm="syz.3.696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1f5782ebe9 code=0x7ffc0000 [ 87.052298][ T5925] loop3: detected capacity change from 0 to 1024 [ 87.067853][ T29] audit: type=1326 audit(1755744369.338:3016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5922 comm="syz.3.696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f5782ebe9 code=0x7ffc0000 [ 87.078144][ T5925] EXT4-fs: Ignoring removed nobh option [ 87.097897][ T29] audit: type=1326 audit(1755744369.338:3017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5922 comm="syz.3.696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f1f5782ebe9 code=0x7ffc0000 [ 87.103621][ T5925] EXT4-fs: Ignoring removed bh option [ 87.127027][ T29] audit: type=1326 audit(1755744369.338:3018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5922 comm="syz.3.696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f5782ebe9 code=0x7ffc0000 [ 87.156025][ T29] audit: type=1326 audit(1755744369.338:3019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5922 comm="syz.3.696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1f5782ebe9 code=0x7ffc0000 [ 87.406219][ T5928] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.694: corrupted xattr block 32: bad e_name length [ 87.469067][ T5928] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 87.478910][ T5928] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.694: corrupted xattr block 32: bad e_name length [ 87.519345][ T5928] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 87.641795][ T5928] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.694: corrupted xattr block 32: bad e_name length [ 87.668176][ T5928] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 87.699617][ T5959] 9pnet: Could not find request transport: 0xffffffffffffffff [ 87.942031][ T5979] veth9: entered promiscuous mode [ 88.008616][ T5985] loop5: detected capacity change from 0 to 512 [ 88.016316][ T5985] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 88.038384][ T5987] 9pnet: Could not find request transport: 0xffffffffffffffff [ 88.061766][ T5985] ext4 filesystem being mounted at /130/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.280301][ T5985] EXT4-fs error (device loop5): ext4_xattr_block_get:593: inode #15: comm syz.5.721: corrupted xattr block 32: bad e_name length [ 88.294987][ T6010] veth19: entered promiscuous mode [ 88.300509][ T5985] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 88.333175][ T5985] EXT4-fs error (device loop5): ext4_xattr_block_get:593: inode #15: comm syz.5.721: corrupted xattr block 32: bad e_name length [ 88.353889][ T6014] loop1: detected capacity change from 0 to 1024 [ 88.370185][ T5985] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 88.378346][ T6014] EXT4-fs: Ignoring removed nobh option [ 88.385017][ T6014] EXT4-fs: Ignoring removed bh option [ 88.397357][ T5985] EXT4-fs error (device loop5): ext4_xattr_block_get:593: inode #15: comm syz.5.721: corrupted xattr block 32: bad e_name length [ 88.430896][ T5985] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 88.451829][ T6022] __nla_validate_parse: 10 callbacks suppressed [ 88.451848][ T6022] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.734'. [ 88.495031][ T6028] veth23: entered promiscuous mode [ 88.571188][ T6027] SELinux: failed to load policy [ 88.651389][ T6034] 9pnet: Could not find request transport: 0xffffffffffffffff [ 89.061201][ T6047] loop3: detected capacity change from 0 to 1024 [ 89.070595][ T6047] EXT4-fs: Ignoring removed nobh option [ 89.076320][ T6047] EXT4-fs: Ignoring removed bh option [ 89.350128][ T6084] veth17: entered promiscuous mode [ 89.598612][ T6091] 9pnet: Could not find request transport: 0xffffffffffffffff [ 89.914302][ T6120] veth21: entered promiscuous mode [ 90.236237][ T6140] loop5: detected capacity change from 0 to 512 [ 90.249179][ T6133] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 90.251961][ T6140] EXT4-fs: Ignoring removed mblk_io_submit option [ 90.281362][ T6140] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 90.301212][ T6133] SELinux: failed to load policy [ 90.318866][ T6145] 9pnet: Could not find request transport: 0xffffffffffffffff [ 90.328181][ T6140] EXT4-fs (loop5): 1 truncate cleaned up [ 90.536894][ T6155] loop4: detected capacity change from 0 to 1024 [ 90.575437][ T6155] EXT4-fs: Ignoring removed nobh option [ 90.581091][ T6155] EXT4-fs: Ignoring removed bh option [ 90.642885][ T6159] veth25: entered promiscuous mode [ 90.709173][ T6165] veth19: entered promiscuous mode [ 91.004900][ T6188] SELinux: failed to load policy [ 91.044789][ T6191] 9pnet: Could not find request transport: 0xffffffffffffffff [ 91.076833][ T6196] loop1: detected capacity change from 0 to 512 [ 91.111810][ T6196] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 91.117110][ T6201] loop5: detected capacity change from 0 to 512 [ 91.135323][ T6201] EXT4-fs: Ignoring removed mblk_io_submit option [ 91.149526][ T6201] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 91.150605][ T6196] ext4 filesystem being mounted at /153/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.184853][ T6201] EXT4-fs (loop5): 1 truncate cleaned up [ 91.196038][ T6206] FAULT_INJECTION: forcing a failure. [ 91.196038][ T6206] name failslab, interval 1, probability 0, space 0, times 0 [ 91.208825][ T6206] CPU: 1 UID: 0 PID: 6206 Comm: syz.3.783 Not tainted syzkaller #0 PREEMPT(voluntary) [ 91.208858][ T6206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 91.208930][ T6206] Call Trace: [ 91.208937][ T6206] [ 91.208947][ T6206] __dump_stack+0x1d/0x30 [ 91.208973][ T6206] dump_stack_lvl+0xe8/0x140 [ 91.208992][ T6206] dump_stack+0x15/0x1b [ 91.209007][ T6206] should_fail_ex+0x265/0x280 [ 91.209111][ T6206] should_failslab+0x8c/0xb0 [ 91.209162][ T6206] kmem_cache_alloc_node_noprof+0x57/0x320 [ 91.209192][ T6206] ? __alloc_skb+0x101/0x320 [ 91.209235][ T6206] __alloc_skb+0x101/0x320 [ 91.209302][ T6206] netlink_alloc_large_skb+0xba/0xf0 [ 91.209408][ T6206] netlink_sendmsg+0x3cf/0x6b0 [ 91.209492][ T6206] ? __pfx_netlink_sendmsg+0x10/0x10 [ 91.209514][ T6206] __sock_sendmsg+0x142/0x180 [ 91.209545][ T6206] ____sys_sendmsg+0x31e/0x4e0 [ 91.209576][ T6206] ___sys_sendmsg+0x17b/0x1d0 [ 91.209640][ T6206] __x64_sys_sendmsg+0xd4/0x160 [ 91.209671][ T6206] x64_sys_call+0x191e/0x2ff0 [ 91.209698][ T6206] do_syscall_64+0xd2/0x200 [ 91.209730][ T6206] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 91.209809][ T6206] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 91.209833][ T6206] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.209854][ T6206] RIP: 0033:0x7f1f5782ebe9 [ 91.209872][ T6206] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 91.209968][ T6206] RSP: 002b:00007f1f5628f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 91.209987][ T6206] RAX: ffffffffffffffda RBX: 00007f1f57a55fa0 RCX: 00007f1f5782ebe9 [ 91.209998][ T6206] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000004 [ 91.210013][ T6206] RBP: 00007f1f5628f090 R08: 0000000000000000 R09: 0000000000000000 [ 91.210028][ T6206] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 91.210058][ T6206] R13: 00007f1f57a56038 R14: 00007f1f57a55fa0 R15: 00007ffeac2d5408 [ 91.210083][ T6206] [ 91.654241][ T6228] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #15: comm syz.1.781: corrupted xattr block 32: bad e_name length [ 91.697170][ T6228] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 91.748189][ T6228] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #15: comm syz.1.781: corrupted xattr block 32: bad e_name length [ 91.816099][ T6228] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 91.833867][ T6228] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #15: comm syz.1.781: corrupted xattr block 32: bad e_name length [ 91.870081][ T6238] netlink: 'syz.0.789': attribute type 1 has an invalid length. [ 91.874404][ T6228] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 91.878046][ T6238] netlink: 224 bytes leftover after parsing attributes in process `syz.0.789'. [ 91.980958][ T6247] loop4: detected capacity change from 0 to 1024 [ 91.988624][ T6250] random: crng reseeded on system resumption [ 91.995345][ T6251] veth11: entered promiscuous mode [ 91.997366][ T6247] EXT4-fs: Ignoring removed nobh option [ 92.006756][ T6247] EXT4-fs: Ignoring removed bh option [ 92.076904][ T6253] 9pnet: Could not find request transport: 0xffffffffffffffff [ 92.249818][ T6277] loop5: detected capacity change from 0 to 512 [ 92.249853][ T6280] netlink: 'syz.0.805': attribute type 1 has an invalid length. [ 92.249866][ T6280] netlink: 224 bytes leftover after parsing attributes in process `syz.0.805'. [ 92.299819][ T6277] EXT4-fs: Ignoring removed mblk_io_submit option [ 92.308632][ T6277] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 92.456005][ T6286] loop1: detected capacity change from 0 to 8192 [ 92.478745][ T6286] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 92.504013][ T6277] EXT4-fs (loop5): 1 truncate cleaned up [ 92.683867][ T6284] random: crng reseeded on system resumption [ 92.775081][ T6293] loop4: detected capacity change from 0 to 512 [ 92.787448][ T6293] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 92.847183][ T6293] ext4 filesystem being mounted at /156/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 92.974875][ T29] kauditd_printk_skb: 321 callbacks suppressed [ 92.974893][ T29] audit: type=1400 audit(1755744375.358:3341): avc: denied { ioctl } for pid=6308 comm="syz.0.809" path="socket:[13929]" dev="sockfs" ino=13929 ioctlcmd=0x890c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 93.086821][ T6319] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.807: corrupted xattr block 32: bad e_name length [ 93.122018][ T6319] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 93.136074][ T6325] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.813'. [ 93.146522][ T6319] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.807: corrupted xattr block 32: bad e_name length [ 93.179078][ T6319] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 93.188606][ T6319] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.807: corrupted xattr block 32: bad e_name length [ 93.219493][ T6319] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 93.229881][ T6331] 9pnet: Could not find request transport: 0xffffffffffffffff [ 93.324516][ T29] audit: type=1326 audit(1755744375.708:3342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6338 comm="syz.0.817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e57a2ebe9 code=0x7ffc0000 [ 93.370089][ T29] audit: type=1326 audit(1755744375.738:3343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6338 comm="syz.0.817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e57a2ebe9 code=0x7ffc0000 [ 93.394052][ T29] audit: type=1326 audit(1755744375.738:3344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6338 comm="syz.0.817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7f6e57a2ebe9 code=0x7ffc0000 [ 93.417975][ T29] audit: type=1326 audit(1755744375.738:3345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6338 comm="syz.0.817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e57a2ebe9 code=0x7ffc0000 [ 93.441528][ T29] audit: type=1326 audit(1755744375.738:3346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6338 comm="syz.0.817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e57a2ebe9 code=0x7ffc0000 [ 93.578003][ T29] audit: type=1326 audit(1755744375.958:3347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6341 comm="syz.0.818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e57a2ebe9 code=0x7ffc0000 [ 93.601593][ T29] audit: type=1326 audit(1755744375.958:3348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6341 comm="syz.0.818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f6e57a2ebe9 code=0x7ffc0000 [ 93.625017][ T29] audit: type=1326 audit(1755744375.958:3349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6341 comm="syz.0.818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e57a2ebe9 code=0x7ffc0000 [ 93.648656][ T29] audit: type=1326 audit(1755744375.958:3350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6341 comm="syz.0.818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f6e57a2ebe9 code=0x7ffc0000 [ 93.879435][ T6372] loop5: detected capacity change from 0 to 512 [ 93.889425][ T6372] EXT4-fs: Ignoring removed mblk_io_submit option [ 93.903649][ T6372] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 93.916198][ T6374] 9pnet: Could not find request transport: 0xffffffffffffffff [ 93.930829][ T6372] EXT4-fs (loop5): 1 truncate cleaned up [ 94.073288][ T6393] FAULT_INJECTION: forcing a failure. [ 94.073288][ T6393] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 94.086721][ T6393] CPU: 0 UID: 0 PID: 6393 Comm: syz.0.831 Not tainted syzkaller #0 PREEMPT(voluntary) [ 94.086813][ T6393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 94.086862][ T6393] Call Trace: [ 94.086869][ T6393] [ 94.086877][ T6393] __dump_stack+0x1d/0x30 [ 94.086898][ T6393] dump_stack_lvl+0xe8/0x140 [ 94.086919][ T6393] dump_stack+0x15/0x1b [ 94.086993][ T6393] should_fail_ex+0x265/0x280 [ 94.087019][ T6393] should_fail+0xb/0x20 [ 94.087103][ T6393] should_fail_usercopy+0x1a/0x20 [ 94.087130][ T6393] _copy_to_user+0x20/0xa0 [ 94.087163][ T6393] simple_read_from_buffer+0xb5/0x130 [ 94.087222][ T6393] proc_fail_nth_read+0x10e/0x150 [ 94.087255][ T6393] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 94.087285][ T6393] vfs_read+0x1a8/0x770 [ 94.087309][ T6393] ? __rcu_read_unlock+0x4f/0x70 [ 94.087389][ T6393] ? __fget_files+0x184/0x1c0 [ 94.087417][ T6393] ksys_read+0xda/0x1a0 [ 94.087462][ T6393] __x64_sys_read+0x40/0x50 [ 94.087487][ T6393] x64_sys_call+0x27bc/0x2ff0 [ 94.087531][ T6393] do_syscall_64+0xd2/0x200 [ 94.087556][ T6393] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 94.087613][ T6393] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 94.087637][ T6393] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.087657][ T6393] RIP: 0033:0x7f6e57a2d5fc [ 94.087672][ T6393] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 94.087767][ T6393] RSP: 002b:00007f6e56497030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 94.087812][ T6393] RAX: ffffffffffffffda RBX: 00007f6e57c55fa0 RCX: 00007f6e57a2d5fc [ 94.087824][ T6393] RDX: 000000000000000f RSI: 00007f6e564970a0 RDI: 0000000000000003 [ 94.087835][ T6393] RBP: 00007f6e56497090 R08: 0000000000000000 R09: 0000000000000000 [ 94.087856][ T6393] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 94.087871][ T6393] R13: 00007f6e57c56038 R14: 00007f6e57c55fa0 R15: 00007fff640d6858 [ 94.087941][ T6393] [ 94.660309][ T6416] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.840'. [ 94.719301][ T6419] veth13: entered promiscuous mode [ 94.831094][ T6426] 9pnet: Could not find request transport: 0xffffffffffffffff [ 94.945934][ T6433] netlink: 65039 bytes leftover after parsing attributes in process `syz.5.843'. [ 95.207407][ T6445] SELinux: failed to load policy [ 95.472615][ T6463] loop1: detected capacity change from 0 to 1024 [ 95.493548][ T6464] loop3: detected capacity change from 0 to 1024 [ 95.521012][ T6464] EXT4-fs: Ignoring removed nobh option [ 95.526790][ T6464] EXT4-fs: Ignoring removed bh option [ 95.534557][ T6463] EXT4-fs: Ignoring removed nobh option [ 95.540363][ T6463] EXT4-fs: Ignoring removed bh option [ 95.609156][ T6460] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4183: comm syz.3.851: Allocating blocks 497-513 which overlap fs metadata [ 95.652142][ T6468] 9pnet: Could not find request transport: 0xffffffffffffffff [ 95.685592][ T6475] EXT4-fs (loop3): pa ffff888107269770: logic 0, phys. 113, len 25 [ 95.693873][ T6475] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5434: group 0, free 22, pa_free 23 [ 95.894538][ T6481] SELinux: failed to load policy [ 96.329191][ T6494] SELinux: failed to load policy [ 96.589850][ T6510] loop3: detected capacity change from 0 to 8192 [ 98.233954][ T6510] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 98.451781][ T6515] 9pnet: Could not find request transport: 0xffffffffffffffff [ 98.521273][ T6521] netlink: 'syz.3.868': attribute type 1 has an invalid length. [ 98.529303][ T6521] netlink: 224 bytes leftover after parsing attributes in process `syz.3.868'. [ 98.649202][ T29] kauditd_printk_skb: 165 callbacks suppressed [ 98.649220][ T29] audit: type=1326 audit(1755744381.028:3516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6527 comm="syz.0.871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e57a2ebe9 code=0x7ffc0000 [ 98.684844][ T29] audit: type=1326 audit(1755744381.028:3517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6527 comm="syz.0.871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e57a2ebe9 code=0x7ffc0000 [ 98.762804][ T6526] veth23: entered promiscuous mode [ 98.799140][ T29] audit: type=1326 audit(1755744381.178:3518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6546 comm="syz.5.880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c515debe9 code=0x7ffc0000 [ 98.822800][ T29] audit: type=1326 audit(1755744381.178:3519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6546 comm="syz.5.880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c515debe9 code=0x7ffc0000 [ 98.847712][ T6539] SELinux: failed to load policy [ 98.888029][ T6549] loop3: detected capacity change from 0 to 512 [ 98.906264][ T29] audit: type=1400 audit(1755744381.178:3520): avc: denied { append } for pid=6544 comm="syz.0.879" name="001" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 98.929322][ T29] audit: type=1326 audit(1755744381.238:3521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6546 comm="syz.5.880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3c515debe9 code=0x7ffc0000 [ 98.953053][ T29] audit: type=1326 audit(1755744381.238:3522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6546 comm="syz.5.880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c515debe9 code=0x7ffc0000 [ 98.976666][ T29] audit: type=1326 audit(1755744381.238:3523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6546 comm="syz.5.880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c515debe9 code=0x7ffc0000 [ 99.000868][ T29] audit: type=1326 audit(1755744381.238:3524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6546 comm="syz.5.880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3c515debe9 code=0x7ffc0000 [ 99.024563][ T29] audit: type=1326 audit(1755744381.238:3525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6546 comm="syz.5.880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c515debe9 code=0x7ffc0000 [ 99.069337][ T6549] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.876: casefold flag without casefold feature [ 99.083399][ T6549] EXT4-fs (loop3): Remounting filesystem read-only [ 99.216701][ T6558] netlink: 'syz.1.882': attribute type 1 has an invalid length. [ 99.224694][ T6558] netlink: 224 bytes leftover after parsing attributes in process `syz.1.882'. [ 99.244918][ T6560] 9pnet: Could not find request transport: 0xffffffffffffffff [ 99.268957][ T6555] loop5: detected capacity change from 0 to 1024 [ 99.293419][ T6555] EXT4-fs: Ignoring removed nobh option [ 99.299129][ T6555] EXT4-fs: Ignoring removed bh option [ 99.326346][ T6563] random: crng reseeded on system resumption [ 99.420216][ T6570] netlink: 'syz.3.884': attribute type 3 has an invalid length. [ 99.827052][ T6587] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 99.862935][ T6587] SELinux: failed to load policy [ 99.914968][ T6593] loop5: detected capacity change from 0 to 512 [ 100.071639][ T6593] EXT4-fs error (device loop5): ext4_orphan_get:1392: inode #15: comm syz.5.895: casefold flag without casefold feature [ 100.091871][ T6593] EXT4-fs (loop5): Remounting filesystem read-only [ 100.109281][ T6593] EXT4-fs mount: 40 callbacks suppressed [ 100.109298][ T6593] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.306178][ T6600] loop1: detected capacity change from 0 to 8192 [ 100.393035][ T6600] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 100.488148][ T6601] loop4: detected capacity change from 0 to 1024 [ 100.558326][ T6601] EXT4-fs: Ignoring removed nobh option [ 100.564099][ T6601] EXT4-fs: Ignoring removed bh option [ 100.606643][ T6601] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.649285][ T3531] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.653750][ T6605] loop3: detected capacity change from 0 to 512 [ 100.701491][ T6605] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 100.734379][ T6605] EXT4-fs (loop3): orphan cleanup on readonly fs [ 100.763164][ T6605] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.899: corrupted inode contents [ 100.786453][ T6610] loop5: detected capacity change from 0 to 1024 [ 100.862862][ T6605] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #16: comm syz.3.899: mark_inode_dirty error [ 100.885968][ T6610] EXT4-fs: Ignoring removed nobh option [ 100.891673][ T6610] EXT4-fs: Ignoring removed bh option [ 100.891942][ T6605] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.899: corrupted inode contents [ 100.919809][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.930386][ T6605] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #16: comm syz.3.899: mark_inode_dirty error [ 100.963925][ T6605] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.899: corrupted inode contents [ 100.976837][ T6605] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 100.992251][ T6610] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.001801][ T6605] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.899: corrupted inode contents [ 101.023865][ T6605] EXT4-fs error (device loop3): ext4_truncate:4666: inode #16: comm syz.3.899: mark_inode_dirty error [ 101.036384][ T6605] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 101.045907][ T6605] EXT4-fs (loop3): 1 truncate cleaned up [ 101.052397][ T60] EXT4-fs error (device loop3): ext4_release_dquot:6973: comm kworker/u8:4: Failed to release dquot type 1 [ 101.082157][ T6605] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 101.109591][ T6607] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4183: comm syz.5.898: Allocating blocks 497-513 which overlap fs metadata [ 101.133027][ T6605] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.195984][ T6621] EXT4-fs (loop5): pa ffff8881072697e0: logic 0, phys. 113, len 25 [ 101.204334][ T6621] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5434: group 0, free 23, pa_free 24 [ 101.278888][ T6630] loop3: detected capacity change from 0 to 1024 [ 101.290270][ T6629] SELinux: failed to load policy [ 101.304506][ T6630] EXT4-fs: Ignoring removed nobh option [ 101.310147][ T6630] EXT4-fs: Ignoring removed bh option [ 101.345233][ T6630] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.384326][ T6622] loop4: detected capacity change from 0 to 512 [ 101.412733][ T6622] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 101.423498][ T6622] EXT4-fs (loop4): orphan cleanup on readonly fs [ 101.443587][ T6622] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.903: corrupted inode contents [ 101.461612][ T6622] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #16: comm syz.4.903: mark_inode_dirty error [ 101.470737][ T3531] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.473798][ T6622] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.903: corrupted inode contents [ 101.503142][ T6622] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #16: comm syz.4.903: mark_inode_dirty error [ 101.520075][ T6622] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.903: corrupted inode contents [ 101.533637][ T6622] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 101.543664][ T6622] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.903: corrupted inode contents [ 101.554044][ T6640] random: crng reseeded on system resumption [ 101.559160][ T6622] EXT4-fs error (device loop4): ext4_truncate:4666: inode #16: comm syz.4.903: mark_inode_dirty error [ 101.573866][ T6622] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 101.584245][ T6622] EXT4-fs (loop4): 1 truncate cleaned up [ 101.590411][ T12] EXT4-fs error (device loop4): ext4_release_dquot:6973: comm kworker/u8:0: Failed to release dquot type 1 [ 101.604080][ T6622] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 101.617956][ T6622] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.628411][ T6641] netlink: 'syz.5.908': attribute type 3 has an invalid length. [ 101.683893][ T6643] loop4: detected capacity change from 0 to 512 [ 101.690704][ T6643] EXT4-fs: Ignoring removed mblk_io_submit option [ 101.697943][ T6643] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 101.711108][ T6643] EXT4-fs (loop4): 1 truncate cleaned up [ 101.717615][ T6643] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.791947][ T6624] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4183: comm syz.3.905: Allocating blocks 497-513 which overlap fs metadata [ 101.863652][ T6649] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.911'. [ 101.916883][ T6624] EXT4-fs (loop3): pa ffff8881072697e0: logic 560, phys. 433, len 5 [ 101.925206][ T6624] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 1 [ 101.966080][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.346278][ T6655] loop3: detected capacity change from 0 to 8192 [ 102.358203][ T6655] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 102.688666][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.732708][ T6663] loop5: detected capacity change from 0 to 1024 [ 102.739550][ T6663] EXT4-fs: Ignoring removed nobh option [ 102.745221][ T6663] EXT4-fs: Ignoring removed bh option [ 102.797325][ T6663] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.877156][ T6671] 9pnet: Could not find request transport: 0xffffffffffffffff [ 102.935334][ T6675] netlink: 4 bytes leftover after parsing attributes in process `syz.3.920'. [ 102.952226][ T6675] netlink: 60 bytes leftover after parsing attributes in process `syz.3.920'. [ 102.961876][ T6675] netlink: 60 bytes leftover after parsing attributes in process `syz.3.920'. [ 103.021731][ T6675] netlink: 60 bytes leftover after parsing attributes in process `syz.3.920'. [ 103.030695][ T6675] netlink: 60 bytes leftover after parsing attributes in process `syz.3.920'. [ 103.089986][ T6690] netlink: 'syz.3.923': attribute type 1 has an invalid length. [ 103.098212][ T6690] netlink: 224 bytes leftover after parsing attributes in process `syz.3.923'. [ 103.193050][ T6685] loop4: detected capacity change from 0 to 8192 [ 103.201960][ T6685] vfat: Unknown parameter '' [ 103.208693][ T6693] loop3: detected capacity change from 0 to 512 [ 103.295741][ T6693] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 103.324818][ T6694] Invalid ELF header magic: != ELF [ 103.335815][ T6693] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.349093][ T6693] ext4 filesystem being mounted at /183/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.528619][ T6698] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.924: corrupted xattr block 32: bad e_name length [ 103.570514][ T6698] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 103.579746][ T6698] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.924: corrupted xattr block 32: bad e_name length [ 103.619578][ T6698] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 103.663502][ T6698] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.924: corrupted xattr block 32: bad e_name length [ 103.677621][ T6698] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 103.688598][ T29] kauditd_printk_skb: 332 callbacks suppressed [ 103.688677][ T29] audit: type=1326 audit(1755744386.068:3856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6692 comm="syz.3.924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f5782ebe9 code=0x7ffc0000 [ 103.700335][ T3531] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.740607][ T29] audit: type=1326 audit(1755744386.068:3857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6692 comm="syz.3.924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f5782ebe9 code=0x7ffc0000 [ 103.849887][ T6705] 9pnet: Could not find request transport: 0xffffffffffffffff [ 103.934143][ T6714] netlink: 65039 bytes leftover after parsing attributes in process `syz.5.930'. [ 103.935123][ T29] audit: type=1400 audit(1755744386.308:3858): avc: denied { create } for pid=6711 comm="syz.1.928" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 104.012476][ T29] audit: type=1400 audit(1755744386.328:3859): avc: denied { write } for pid=6711 comm="syz.1.928" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 104.037275][ T29] audit: type=1400 audit(1755744386.328:3860): avc: denied { open } for pid=6711 comm="syz.1.928" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 104.062041][ T29] audit: type=1400 audit(1755744386.328:3861): avc: denied { ioctl } for pid=6711 comm="syz.1.928" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 104.137178][ T6728] netlink: 4 bytes leftover after parsing attributes in process `syz.1.932'. [ 104.156728][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.193740][ T6721] netlink: 60 bytes leftover after parsing attributes in process `syz.1.932'. [ 104.252504][ T6736] netlink: 'syz.4.934': attribute type 1 has an invalid length. [ 104.292725][ T6728] loop1: detected capacity change from 0 to 128 [ 104.410652][ T29] audit: type=1400 audit(1755744386.778:3862): avc: denied { read write } for pid=3307 comm="syz-executor" name="loop0" dev="devtmpfs" ino=596 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 104.434333][ T29] audit: type=1400 audit(1755744386.778:3863): avc: denied { open } for pid=3307 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=596 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 104.457810][ T29] audit: type=1400 audit(1755744386.778:3864): avc: denied { ioctl } for pid=3307 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=596 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 104.490032][ T6751] loop0: detected capacity change from 0 to 512 [ 104.513433][ T6751] EXT4-fs: Ignoring removed mblk_io_submit option [ 104.523389][ T6753] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 104.552124][ T6751] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 104.573210][ T6751] EXT4-fs (loop0): 1 truncate cleaned up [ 104.604395][ T6751] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.615910][ T6753] SELinux: failed to load policy [ 104.804880][ T6759] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 104.944902][ T6755] bridge0: entered promiscuous mode [ 104.968118][ T6755] bridge0: port 3(macvlan2) entered blocking state [ 104.975065][ T6755] bridge0: port 3(macvlan2) entered disabled state [ 104.996867][ T6755] macvlan2: entered allmulticast mode [ 105.002411][ T6755] bridge0: entered allmulticast mode [ 105.016501][ T29] audit: type=1326 audit(1755744387.398:3865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6770 comm="syz.4.942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57122cebe9 code=0x7ffc0000 [ 105.041257][ T6755] macvlan2: left allmulticast mode [ 105.046650][ T6755] bridge0: left allmulticast mode [ 105.083578][ T6755] bridge0: left promiscuous mode [ 105.418642][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.040676][ T6794] loop3: detected capacity change from 0 to 1024 [ 106.068066][ T6794] EXT4-fs: Ignoring removed nobh option [ 106.073751][ T6794] EXT4-fs: Ignoring removed bh option [ 106.111021][ T6794] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.229361][ T6805] veth27: entered promiscuous mode [ 106.336840][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.378923][ T6812] loop5: detected capacity change from 0 to 1024 [ 106.389679][ T6811] veth25: entered promiscuous mode [ 106.405911][ T6812] EXT4-fs: Ignoring removed nobh option [ 106.411968][ T6812] EXT4-fs: Ignoring removed bh option [ 106.438861][ T6826] loop0: detected capacity change from 0 to 512 [ 106.448897][ T6826] EXT4-fs: Ignoring removed mblk_io_submit option [ 106.493870][ T6826] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 106.548734][ T6826] EXT4-fs (loop0): 1 truncate cleaned up [ 106.555961][ T6826] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.670644][ T6812] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.780037][ T6845] SELinux: failed to load policy [ 106.921349][ T6854] bond2: entered promiscuous mode [ 106.926582][ T6854] bond2: entered allmulticast mode [ 106.952124][ T6854] 8021q: adding VLAN 0 to HW filter on device bond2 [ 107.046648][ T6854] bond2 (unregistering): Released all slaves [ 107.058146][ T6859] __nla_validate_parse: 7 callbacks suppressed [ 107.058165][ T6859] netlink: 8 bytes leftover after parsing attributes in process `syz.1.969'. [ 107.073342][ T6859] netlink: 32 bytes leftover after parsing attributes in process `syz.1.969'. [ 107.082516][ T6859] netlink: 8 bytes leftover after parsing attributes in process `syz.1.969'. [ 107.091633][ T6859] netlink: 2 bytes leftover after parsing attributes in process `syz.1.969'. [ 107.121081][ T6859] netlink: 32 bytes leftover after parsing attributes in process `syz.1.969'. [ 107.137641][ T3531] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.147496][ T6861] FAULT_INJECTION: forcing a failure. [ 107.147496][ T6861] name failslab, interval 1, probability 0, space 0, times 0 [ 107.160220][ T6861] CPU: 0 UID: 0 PID: 6861 Comm: syz.4.971 Not tainted syzkaller #0 PREEMPT(voluntary) [ 107.160249][ T6861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 107.160262][ T6861] Call Trace: [ 107.160269][ T6861] [ 107.160278][ T6861] __dump_stack+0x1d/0x30 [ 107.160395][ T6861] dump_stack_lvl+0xe8/0x140 [ 107.160458][ T6861] dump_stack+0x15/0x1b [ 107.160475][ T6861] should_fail_ex+0x265/0x280 [ 107.160498][ T6861] should_failslab+0x8c/0xb0 [ 107.160576][ T6861] __kmalloc_noprof+0xa5/0x3e0 [ 107.160649][ T6861] ? rds_rdma_extra_size+0x8e/0x270 [ 107.160787][ T6861] ? kfree+0x27b/0x320 [ 107.160874][ T6861] rds_rdma_extra_size+0x8e/0x270 [ 107.160924][ T6861] ? krealloc_noprof+0x136/0x2d0 [ 107.160959][ T6861] rds_rm_size+0x326/0x490 [ 107.161057][ T6861] rds_sendmsg+0x842/0x14a0 [ 107.161094][ T6861] ? __pfx_rds_sendmsg+0x10/0x10 [ 107.161159][ T6861] __sock_sendmsg+0x142/0x180 [ 107.161255][ T6861] ____sys_sendmsg+0x31e/0x4e0 [ 107.161282][ T6861] ___sys_sendmsg+0x17b/0x1d0 [ 107.161320][ T6861] __x64_sys_sendmsg+0xd4/0x160 [ 107.161405][ T6861] x64_sys_call+0x191e/0x2ff0 [ 107.161440][ T6861] do_syscall_64+0xd2/0x200 [ 107.161548][ T6861] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 107.161577][ T6861] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 107.161714][ T6861] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.161739][ T6861] RIP: 0033:0x7f57122cebe9 [ 107.161817][ T6861] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 107.161836][ T6861] RSP: 002b:00007f5710d2f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 107.161855][ T6861] RAX: ffffffffffffffda RBX: 00007f57124f5fa0 RCX: 00007f57122cebe9 [ 107.161886][ T6861] RDX: 0000000000000000 RSI: 0000200000001600 RDI: 0000000000000006 [ 107.161902][ T6861] RBP: 00007f5710d2f090 R08: 0000000000000000 R09: 0000000000000000 [ 107.161917][ T6861] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 107.161932][ T6861] R13: 00007f57124f6038 R14: 00007f57124f5fa0 R15: 00007ffeacf9b138 [ 107.161955][ T6861] [ 107.426204][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.536540][ T6873] netlink: 65039 bytes leftover after parsing attributes in process `syz.5.972'. [ 107.760330][ T6908] loop0: detected capacity change from 0 to 512 [ 107.795944][ T6908] EXT4-fs: Ignoring removed mblk_io_submit option [ 107.832935][ T6908] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 107.863722][ T6908] EXT4-fs (loop0): 1 truncate cleaned up [ 107.893224][ T6908] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.427199][ T6926] loop1: detected capacity change from 0 to 8192 [ 108.531342][ T6926] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 108.779080][ T6934] loop4: detected capacity change from 0 to 512 [ 108.804555][ T29] kauditd_printk_skb: 199 callbacks suppressed [ 108.804574][ T29] audit: type=1326 audit(1755744391.188:4065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6937 comm="syz.5.989" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3c515debe9 code=0x0 [ 108.843883][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.855740][ T6934] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.916304][ T6934] ext4 filesystem being mounted at /201/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 108.984459][ T29] audit: type=1400 audit(1755744391.368:4066): avc: denied { name_bind } for pid=6937 comm="syz.5.989" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 109.023295][ T6934] netlink: 4 bytes leftover after parsing attributes in process `syz.4.988'. [ 109.043107][ T6960] loop0: detected capacity change from 0 to 512 [ 109.049822][ T6960] EXT4-fs: Ignoring removed mblk_io_submit option [ 109.075946][ T29] audit: type=1400 audit(1755744391.458:4067): avc: denied { write } for pid=6937 comm="syz.5.989" name="001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 109.114440][ T6960] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 109.137274][ T6960] EXT4-fs (loop0): 1 truncate cleaned up [ 109.149322][ T6960] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.165818][ T29] audit: type=1400 audit(1755744391.498:4068): avc: denied { map } for pid=6937 comm="syz.5.989" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 109.245592][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.276472][ T6970] loop1: detected capacity change from 0 to 512 [ 109.319770][ T6970] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 109.367285][ T6970] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.409098][ T6970] ext4 filesystem being mounted at /198/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.668400][ T29] audit: type=1326 audit(1755744392.048:4069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6969 comm="syz.1.993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f497e0eebe9 code=0x7ffc0000 [ 109.692885][ T29] audit: type=1326 audit(1755744392.048:4070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6969 comm="syz.1.993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f497e0eebe9 code=0x7ffc0000 [ 109.754766][ T29] audit: type=1326 audit(1755744392.098:4071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6969 comm="syz.1.993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f497e0eebe9 code=0x7ffc0000 [ 109.778261][ T29] audit: type=1326 audit(1755744392.098:4072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6969 comm="syz.1.993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f497e0eebe9 code=0x7ffc0000 [ 109.802542][ T29] audit: type=1326 audit(1755744392.098:4073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6969 comm="syz.1.993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f497e0eebe9 code=0x7ffc0000 [ 109.827282][ T29] audit: type=1326 audit(1755744392.098:4074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6969 comm="syz.1.993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f497e0eec23 code=0x7ffc0000 [ 109.834760][ T6990] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #15: comm syz.1.993: corrupted xattr block 32: bad e_name length [ 109.955100][ T6990] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 109.959979][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.983247][ T6990] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #15: comm syz.1.993: corrupted xattr block 32: bad e_name length [ 110.031475][ T7002] loop3: detected capacity change from 0 to 512 [ 110.037379][ T7003] netlink: 'syz.0.998': attribute type 1 has an invalid length. [ 110.038839][ T7002] EXT4-fs: Ignoring removed mblk_io_submit option [ 110.045565][ T7003] netlink: 224 bytes leftover after parsing attributes in process `syz.0.998'. [ 110.045635][ T6990] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 110.045675][ T6990] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #15: comm syz.1.993: corrupted xattr block 32: bad e_name length [ 110.087160][ T7002] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 110.098401][ T6990] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 110.110549][ T7002] EXT4-fs (loop3): 1 truncate cleaned up [ 110.119065][ T7002] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.205736][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.299765][ T7008] 9pnet: Could not find request transport: 0xffffffffffffffff [ 110.333033][ T7017] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1003'. [ 110.396181][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.543745][ T7021] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1003'. [ 110.628386][ T7021] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 110.704006][ T7021] 0ªî{X¹¦: entered allmulticast mode [ 110.710555][ T7021] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 110.869560][ T7046] netlink: 'syz.1.1012': attribute type 1 has an invalid length. [ 110.899039][ T7049] loop3: detected capacity change from 0 to 512 [ 110.914629][ T7049] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 111.021635][ T7049] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.036109][ T7049] ext4 filesystem being mounted at /196/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 111.199710][ T7069] loop0: detected capacity change from 0 to 8192 [ 111.246835][ T7069] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 111.500103][ T7075] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.1013: corrupted xattr block 32: bad e_name length [ 111.500421][ T7075] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 111.500459][ T7075] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.1013: corrupted xattr block 32: bad e_name length [ 111.500672][ T7075] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 111.500703][ T7075] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.1013: corrupted xattr block 32: bad e_name length [ 111.500843][ T7075] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 111.871356][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.881011][ T7100] netlink: 'syz.5.1025': attribute type 1 has an invalid length. [ 111.899302][ T7102] loop0: detected capacity change from 0 to 512 [ 111.927252][ T7102] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 111.952537][ T7102] EXT4-fs (loop0): 1 truncate cleaned up [ 111.958880][ T7102] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.048342][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.199036][ T7117] loop1: detected capacity change from 0 to 512 [ 112.316942][ T7118] loop5: detected capacity change from 0 to 8192 [ 112.328984][ T7118] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 112.360952][ T7117] EXT4-fs: Ignoring removed mblk_io_submit option [ 112.419125][ T7117] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 112.521062][ T7117] EXT4-fs (loop1): 1 truncate cleaned up [ 112.605634][ T7117] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.690003][ T7128] __nla_validate_parse: 4 callbacks suppressed [ 112.690024][ T7128] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1034'. [ 112.716801][ T7124] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1034'. [ 112.725973][ T7124] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1034'. [ 112.743407][ T7129] $Hÿ: renamed from bond0 (while UP) [ 112.758081][ T7129] $Hÿ: entered promiscuous mode [ 112.763348][ T7129] bond_slave_0: entered promiscuous mode [ 112.769091][ T7129] bond_slave_1: entered promiscuous mode [ 112.774992][ T7128] loop4: detected capacity change from 0 to 128 [ 112.899435][ T7124] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1034'. [ 112.908534][ T7124] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1034'. [ 112.983002][ T7124] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1034'. [ 112.992133][ T7124] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1034'. [ 113.251224][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.305288][ T7142] veth29: entered promiscuous mode [ 113.415727][ T7150] loop4: detected capacity change from 0 to 1024 [ 113.422954][ T7150] EXT4-fs: Ignoring removed nobh option [ 113.428711][ T7150] EXT4-fs: Ignoring removed bh option [ 113.559910][ T7159] FAULT_INJECTION: forcing a failure. [ 113.559910][ T7159] name failslab, interval 1, probability 0, space 0, times 0 [ 113.572789][ T7159] CPU: 1 UID: 0 PID: 7159 Comm: syz.1.1039 Not tainted syzkaller #0 PREEMPT(voluntary) [ 113.572879][ T7159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 113.572895][ T7159] Call Trace: [ 113.572904][ T7159] [ 113.572913][ T7159] __dump_stack+0x1d/0x30 [ 113.572939][ T7159] dump_stack_lvl+0xe8/0x140 [ 113.572958][ T7159] dump_stack+0x15/0x1b [ 113.572987][ T7159] should_fail_ex+0x265/0x280 [ 113.573040][ T7159] should_failslab+0x8c/0xb0 [ 113.573071][ T7159] kmem_cache_alloc_noprof+0x50/0x310 [ 113.573100][ T7159] ? prepare_creds+0x37/0x4c0 [ 113.573126][ T7159] ? _raw_spin_lock_irqsave+0x3a/0x90 [ 113.573235][ T7159] prepare_creds+0x37/0x4c0 [ 113.573258][ T7159] copy_creds+0x8f/0x3f0 [ 113.573283][ T7159] copy_process+0x658/0x2000 [ 113.573308][ T7159] ? kstrtouint+0x76/0xc0 [ 113.573401][ T7159] ? __rcu_read_unlock+0x4f/0x70 [ 113.573426][ T7159] kernel_clone+0x16c/0x5c0 [ 113.573453][ T7159] ? vfs_write+0x7e8/0x960 [ 113.573478][ T7159] __x64_sys_clone+0xe6/0x120 [ 113.573514][ T7159] x64_sys_call+0x119c/0x2ff0 [ 113.573589][ T7159] do_syscall_64+0xd2/0x200 [ 113.573616][ T7159] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 113.573667][ T7159] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 113.573693][ T7159] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.573715][ T7159] RIP: 0033:0x7f497e0eebe9 [ 113.573730][ T7159] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 113.573749][ T7159] RSP: 002b:00007f497cb0cfe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 113.573802][ T7159] RAX: ffffffffffffffda RBX: 00007f497e316180 RCX: 00007f497e0eebe9 [ 113.573815][ T7159] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000041200000 [ 113.573827][ T7159] RBP: 00007f497cb0d090 R08: 0000000000000000 R09: 0000000000000000 [ 113.573839][ T7159] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 113.573906][ T7159] R13: 00007f497e316218 R14: 00007f497e316180 R15: 00007fff2412cdc8 [ 113.573927][ T7159] [ 113.999096][ T7150] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.703246][ T29] kauditd_printk_skb: 234 callbacks suppressed [ 114.703306][ T29] audit: type=1326 audit(1755744397.088:4309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7149 comm="syz.4.1043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f57122cd550 code=0x7ffc0000 [ 114.861160][ T7176] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1049'. [ 114.874820][ T7177] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1048'. [ 114.882615][ T29] audit: type=1326 audit(1755744397.118:4310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7149 comm="syz.4.1043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7f57122cd937 code=0x7ffc0000 [ 114.907212][ T29] audit: type=1326 audit(1755744397.118:4311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7149 comm="syz.4.1043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f57122cd550 code=0x7ffc0000 [ 114.930825][ T29] audit: type=1326 audit(1755744397.118:4312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7149 comm="syz.4.1043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57122cebe9 code=0x7ffc0000 [ 114.933799][ T7180] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1049'. [ 114.954513][ T29] audit: type=1326 audit(1755744397.118:4313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7149 comm="syz.4.1043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57122cebe9 code=0x7ffc0000 [ 114.987217][ T29] audit: type=1326 audit(1755744397.148:4314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7149 comm="syz.4.1043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f57122cebe9 code=0x7ffc0000 [ 115.011352][ T29] audit: type=1326 audit(1755744397.158:4315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7149 comm="syz.4.1043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57122cebe9 code=0x7ffc0000 [ 115.035203][ T29] audit: type=1326 audit(1755744397.158:4316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7149 comm="syz.4.1043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57122cebe9 code=0x7ffc0000 [ 115.058670][ T29] audit: type=1326 audit(1755744397.168:4317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7149 comm="syz.4.1043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f57122cebe9 code=0x7ffc0000 [ 115.082370][ T29] audit: type=1326 audit(1755744397.168:4318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7149 comm="syz.4.1043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57122cebe9 code=0x7ffc0000 [ 115.107237][ T7176] loop0: detected capacity change from 0 to 128 [ 115.299330][ T7170] loop3: detected capacity change from 0 to 128 [ 115.452804][ T7195] loop5: detected capacity change from 0 to 8192 [ 115.462126][ T7195] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 115.727191][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.945598][ T7209] loop3: detected capacity change from 0 to 512 [ 115.966181][ T7209] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 116.095405][ T7209] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.124254][ T7209] ext4 filesystem being mounted at /201/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 116.875961][ T7235] loop0: detected capacity change from 0 to 512 [ 116.883813][ T7209] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.1058: corrupted xattr block 32: bad e_name length [ 116.895441][ T7235] EXT4-fs: Ignoring removed mblk_io_submit option [ 116.899358][ T7232] 9pnet: Could not find request transport: 0xffffffffffffffff [ 116.914462][ T7235] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 116.914932][ T7209] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 116.941020][ T7209] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.1058: corrupted xattr block 32: bad e_name length [ 116.958635][ T7235] EXT4-fs (loop0): 1 truncate cleaned up [ 116.964921][ T7235] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 116.970067][ T7209] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 116.990168][ T7209] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.1058: corrupted xattr block 32: bad e_name length [ 117.024925][ T7209] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 117.094449][ T7246] 9pnet: Could not find request transport: 0xffffffffffffffff [ 117.156562][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.514075][ T7264] loop3: detected capacity change from 0 to 8192 [ 118.076439][ T7264] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 118.289599][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.292597][ T7271] __nla_validate_parse: 14 callbacks suppressed [ 118.292621][ T7271] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1077'. [ 118.377254][ T7279] loop5: detected capacity change from 0 to 512 [ 118.387796][ T7278] 9pnet: Could not find request transport: 0xffffffffffffffff [ 118.394569][ T7281] loop1: detected capacity change from 0 to 1024 [ 118.403545][ T7279] EXT4-fs: Ignoring removed mblk_io_submit option [ 118.412181][ T7281] EXT4-fs: Ignoring removed nobh option [ 118.417854][ T7281] EXT4-fs: Ignoring removed bh option [ 118.424086][ T7279] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 118.436498][ T7279] EXT4-fs (loop5): 1 truncate cleaned up [ 118.453331][ T7281] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.462426][ T7279] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 118.565843][ T7269] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4183: comm syz.1.1076: Allocating blocks 497-513 which overlap fs metadata [ 118.622045][ T7308] EXT4-fs (loop1): pa ffff88810721bc40: logic 0, phys. 113, len 25 [ 118.630327][ T7308] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5434: group 0, free 23, pa_free 24 [ 118.830852][ T7326] loop3: detected capacity change from 0 to 512 [ 118.843889][ T3531] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.844628][ T7326] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.867275][ T7326] ext4 filesystem being mounted at /205/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 118.881481][ T7326] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1086'. [ 118.904114][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.990788][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.944403][ T7336] loop1: detected capacity change from 0 to 512 [ 119.951056][ T7336] EXT4-fs: Ignoring removed mblk_io_submit option [ 120.015390][ T7338] loop3: detected capacity change from 0 to 8192 [ 120.023462][ T7338] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 120.034038][ T7336] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 120.056953][ T7336] EXT4-fs (loop1): 1 truncate cleaned up [ 120.073452][ T7336] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 120.125351][ T7352] loop5: detected capacity change from 0 to 512 [ 120.150984][ T7352] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 120.162583][ T29] kauditd_printk_skb: 109 callbacks suppressed [ 120.162598][ T29] audit: type=1326 audit(1755744402.548:4428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7358 comm="syz.4.1098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57122cebe9 code=0x7ffc0000 [ 120.200741][ T29] audit: type=1326 audit(1755744402.578:4429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7358 comm="syz.4.1098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f57122cebe9 code=0x7ffc0000 [ 120.224377][ T29] audit: type=1326 audit(1755744402.578:4430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7358 comm="syz.4.1098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57122cebe9 code=0x7ffc0000 [ 120.247854][ T29] audit: type=1326 audit(1755744402.578:4431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7358 comm="syz.4.1098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57122cebe9 code=0x7ffc0000 [ 120.271444][ T29] audit: type=1326 audit(1755744402.578:4432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7358 comm="syz.4.1098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f57122cebe9 code=0x7ffc0000 [ 120.294959][ T29] audit: type=1326 audit(1755744402.578:4433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7358 comm="syz.4.1098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57122cebe9 code=0x7ffc0000 [ 120.318904][ T29] audit: type=1326 audit(1755744402.578:4434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7358 comm="syz.4.1098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f57122cebe9 code=0x7ffc0000 [ 120.342479][ T29] audit: type=1326 audit(1755744402.578:4435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7358 comm="syz.4.1098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57122cebe9 code=0x7ffc0000 [ 120.366185][ T29] audit: type=1326 audit(1755744402.578:4436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7358 comm="syz.4.1098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f57122cebe9 code=0x7ffc0000 [ 120.390334][ T29] audit: type=1326 audit(1755744402.578:4437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7358 comm="syz.4.1098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57122cebe9 code=0x7ffc0000 [ 120.419014][ T7363] loop4: detected capacity change from 0 to 1024 [ 120.426223][ T7363] EXT4-fs: Ignoring removed nobh option [ 120.431918][ T7363] EXT4-fs: Ignoring removed bh option [ 120.439902][ T7352] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.454270][ T7352] ext4 filesystem being mounted at /206/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 120.471716][ T7363] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.519907][ T7378] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1099'. [ 120.532152][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.542904][ T7371] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1099'. [ 120.552130][ T7371] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1099'. [ 120.600521][ T7371] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1099'. [ 120.609584][ T7371] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1099'. [ 120.650101][ T7378] loop3: detected capacity change from 0 to 128 [ 120.746807][ T7371] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1099'. [ 120.756078][ T7371] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1099'. [ 120.813182][ T7394] EXT4-fs error (device loop5): ext4_xattr_block_get:593: inode #15: comm syz.5.1095: corrupted xattr block 32: bad e_name length [ 120.843060][ T7394] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 120.852280][ T7394] EXT4-fs error (device loop5): ext4_xattr_block_get:593: inode #15: comm syz.5.1095: corrupted xattr block 32: bad e_name length [ 120.867205][ T7394] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 120.876365][ T7394] EXT4-fs error (device loop5): ext4_xattr_block_get:593: inode #15: comm syz.5.1095: corrupted xattr block 32: bad e_name length [ 120.891649][ T7394] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 121.350977][ T7406] SELinux: failed to load policy [ 121.420457][ T3531] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.429610][ T7414] loop3: detected capacity change from 0 to 512 [ 121.435363][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.446869][ T7414] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 121.474592][ T7414] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.490336][ T7419] loop0: detected capacity change from 0 to 512 [ 121.498098][ T7419] EXT4-fs: Ignoring removed mblk_io_submit option [ 121.504762][ T7414] ext4 filesystem being mounted at /210/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 121.515824][ T7419] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 121.534192][ T7419] EXT4-fs (loop0): 1 truncate cleaned up [ 121.551020][ T7419] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 121.697809][ T7426] SELinux: failed to load policy [ 121.723147][ T7431] loop1: detected capacity change from 0 to 1024 [ 121.737210][ T7434] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 121.749174][ T7434] SELinux: failed to load policy [ 121.764559][ T7431] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 121.805070][ T7427] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.1109: corrupted xattr block 32: bad e_name length [ 121.832358][ T7431] ext4 filesystem being mounted at /219/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 121.922667][ T7431] syz.1.1115 (7431) used greatest stack depth: 9488 bytes left [ 121.931301][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.965095][ T7427] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 121.981808][ T7427] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.1109: corrupted xattr block 32: bad e_name length [ 122.073390][ T7446] netlink: 'syz.4.1121': attribute type 1 has an invalid length. [ 122.081265][ T7446] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1121'. [ 122.094423][ T7450] veth19: entered promiscuous mode [ 122.113999][ T7427] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 122.215796][ T7427] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.1109: corrupted xattr block 32: bad e_name length [ 122.249667][ T7427] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 122.334270][ T7462] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 122.355001][ T7462] SELinux: failed to load policy [ 122.795997][ T7480] loop4: detected capacity change from 0 to 128 [ 122.919068][ T7480] vfat: Unknown parameter '' [ 123.365327][ T7500] loop5: detected capacity change from 0 to 512 [ 123.385964][ T7502] random: crng reseeded on system resumption [ 123.438272][ T7500] ext4 filesystem being mounted at /216/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 123.479789][ T7506] netlink: '/dev/snd/seq': attribute type 3 has an invalid length. [ 123.912106][ T7522] veth21: entered promiscuous mode [ 124.042684][ T7534] loop3: detected capacity change from 0 to 1024 [ 124.074078][ T7534] EXT4-fs: Ignoring removed nobh option [ 124.079866][ T7534] EXT4-fs: Ignoring removed bh option [ 124.190447][ T7538] loop4: detected capacity change from 0 to 512 [ 124.259217][ T7538] EXT4-fs: Ignoring removed mblk_io_submit option [ 124.280178][ T7538] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 124.434427][ T7538] EXT4-fs (loop4): 1 truncate cleaned up [ 124.566732][ T7544] loop0: detected capacity change from 0 to 1024 [ 124.576050][ T7544] EXT4-fs: Ignoring removed nobh option [ 124.581746][ T7544] EXT4-fs: Ignoring removed bh option [ 124.620263][ T7547] loop3: detected capacity change from 0 to 512 [ 124.698899][ T7547] ext4 filesystem being mounted at /218/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 124.776443][ T7547] __nla_validate_parse: 12 callbacks suppressed [ 124.776463][ T7547] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1153'. [ 124.907800][ T7556] 9pnet: Could not find request transport: 0xffffffffffffffff [ 124.954314][ T7561] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1156'. [ 124.963495][ T7561] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1156'. [ 124.973294][ T7561] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1156'. [ 125.048068][ T7540] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4183: comm syz.0.1151: Allocating blocks 497-513 which overlap fs metadata [ 125.081704][ T7561] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1156'. [ 125.091092][ T7561] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1156'. [ 125.100172][ T7561] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1156'. [ 125.143046][ T7561] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1156'. [ 125.152220][ T7561] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1156'. [ 125.161612][ T7561] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1156'. [ 125.199174][ T7581] loop5: detected capacity change from 0 to 512 [ 125.244873][ T7581] ext4 filesystem being mounted at /224/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 125.280169][ T7540] EXT4-fs (loop0): pa ffff888107269a80: logic 560, phys. 433, len 5 [ 125.288299][ T7540] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 1 [ 125.309712][ T7581] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #2: comm syz.5.1158: corrupted inode contents [ 125.351729][ T29] kauditd_printk_skb: 249 callbacks suppressed [ 125.351749][ T29] audit: type=1326 audit(1755744407.728:4687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7588 comm="syz.4.1162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57122cebe9 code=0x7ffc0000 [ 125.381817][ T29] audit: type=1326 audit(1755744407.728:4688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7588 comm="syz.4.1162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57122cebe9 code=0x7ffc0000 [ 125.405376][ T29] audit: type=1326 audit(1755744407.728:4689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7588 comm="syz.4.1162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f57122cebe9 code=0x7ffc0000 [ 125.428990][ T29] audit: type=1326 audit(1755744407.728:4690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7588 comm="syz.4.1162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57122cebe9 code=0x7ffc0000 [ 125.453270][ T29] audit: type=1326 audit(1755744407.728:4691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7588 comm="syz.4.1162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57122cebe9 code=0x7ffc0000 [ 125.476787][ T29] audit: type=1326 audit(1755744407.728:4692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7588 comm="syz.4.1162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f57122cebe9 code=0x7ffc0000 [ 125.500322][ T29] audit: type=1326 audit(1755744407.728:4693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7588 comm="syz.4.1162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57122cebe9 code=0x7ffc0000 [ 125.511012][ T7581] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #2: comm syz.5.1158: mark_inode_dirty error [ 125.523981][ T29] audit: type=1326 audit(1755744407.728:4694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7588 comm="syz.4.1162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f57122cebe9 code=0x7ffc0000 [ 125.524012][ T29] audit: type=1326 audit(1755744407.728:4695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7588 comm="syz.4.1162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57122cebe9 code=0x7ffc0000 [ 125.539778][ T7581] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #2: comm syz.5.1158: corrupted inode contents [ 125.559324][ T29] audit: type=1326 audit(1755744407.728:4696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7588 comm="syz.4.1162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f57122cebe9 code=0x7ffc0000 [ 125.598880][ T7581] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #2: comm syz.5.1158: mark_inode_dirty error [ 125.859855][ T7599] loop4: detected capacity change from 0 to 1024 [ 125.882832][ T7593] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 125.969016][ T7600] loop3: detected capacity change from 0 to 8192 [ 125.979225][ T7593] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #2: comm syz.5.1158: corrupted inode contents [ 125.998540][ T7600] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 126.015092][ T7593] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #2: comm syz.5.1158: mark_inode_dirty error [ 126.026889][ T7593] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #2: comm syz.5.1158: corrupted inode contents [ 126.044458][ T7601] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #2: comm syz.5.1158: corrupted inode contents [ 126.057890][ T7601] EXT4-fs error (device loop5): ext4_append:88: inode #2: comm syz.5.1158: mark_inode_dirty error [ 126.068990][ T7601] EXT4-fs error (device loop5) in ext4_append:100: Corrupt filesystem [ 126.192800][ T7599] EXT4-fs: Ignoring removed nobh option [ 126.198471][ T7599] EXT4-fs: Ignoring removed bh option [ 126.515360][ T7608] netlink: '/dev/snd/seq': attribute type 3 has an invalid length. [ 126.825285][ T7625] 9pnet: Could not find request transport: 0xffffffffffffffff [ 127.001660][ T7630] 9pnet: Could not find request transport: 0xffffffffffffffff [ 127.101808][ T7636] loop1: detected capacity change from 0 to 1024 [ 127.108835][ T7636] EXT4-fs: Ignoring removed nobh option [ 127.114498][ T7636] EXT4-fs: Ignoring removed bh option [ 127.704059][ T7633] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4183: comm syz.1.1175: Allocating blocks 497-513 which overlap fs metadata [ 127.743496][ T7678] veth23: entered promiscuous mode [ 127.743638][ T7636] EXT4-fs (loop1): pa ffff888107269a80: logic 496, phys. 401, len 7 [ 127.757243][ T7636] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 1 [ 127.865166][ T7685] loop1: detected capacity change from 0 to 512 [ 127.873426][ T7685] EXT4-fs: Ignoring removed mblk_io_submit option [ 127.891706][ T7685] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 127.917402][ T7685] EXT4-fs (loop1): 1 truncate cleaned up [ 128.433602][ T7697] loop4: detected capacity change from 0 to 1024 [ 128.466919][ T7697] EXT4-fs: Ignoring removed nobh option [ 128.472654][ T7697] EXT4-fs: Ignoring removed bh option [ 128.907240][ T7713] loop1: detected capacity change from 0 to 512 [ 128.931898][ T7713] EXT4-fs: Ignoring removed mblk_io_submit option [ 128.953423][ T7717] loop4: detected capacity change from 0 to 512 [ 128.985090][ T7717] EXT4-fs warning (device loop4): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 129.001420][ T7713] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 129.064816][ T7717] EXT4-fs (loop4): mount failed [ 129.074224][ T7726] loop5: detected capacity change from 0 to 512 [ 129.093207][ T7713] EXT4-fs (loop1): 1 truncate cleaned up [ 129.156820][ T7726] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 129.235448][ T7726] ext4 filesystem being mounted at /231/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 129.366394][ T7738] loop0: detected capacity change from 0 to 1024 [ 129.409766][ T7738] EXT4-fs: Ignoring removed nobh option [ 129.415542][ T7738] EXT4-fs: Ignoring removed bh option [ 129.575681][ T7726] EXT4-fs error (device loop5): ext4_xattr_block_get:593: inode #15: comm syz.5.1202: corrupted xattr block 32: bad e_name length [ 129.611510][ T7726] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 129.644547][ T7726] EXT4-fs error (device loop5): ext4_xattr_block_get:593: inode #15: comm syz.5.1202: corrupted xattr block 32: bad e_name length [ 129.680743][ T7726] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 129.737549][ T7726] EXT4-fs error (device loop5): ext4_xattr_block_get:593: inode #15: comm syz.5.1202: corrupted xattr block 32: bad e_name length [ 129.756687][ T7726] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 129.850806][ T7750] loop3: detected capacity change from 0 to 512 [ 129.865606][ T7750] ext4 filesystem being mounted at /230/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 129.880532][ T7752] loop1: detected capacity change from 0 to 512 [ 129.897746][ T7752] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 129.920688][ T7752] ext4 filesystem being mounted at /235/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 129.931899][ T7750] __nla_validate_parse: 1 callbacks suppressed [ 129.931920][ T7750] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1207'. [ 130.076282][ T7766] loop3: detected capacity change from 0 to 1024 [ 130.156642][ T7766] EXT4-fs: Ignoring removed nobh option [ 130.162402][ T7766] EXT4-fs: Ignoring removed bh option [ 130.182453][ T7766] EXT4-fs mount: 30 callbacks suppressed [ 130.182475][ T7766] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.187736][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.241231][ T7762] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #15: comm syz.1.1208: corrupted xattr block 32: bad e_name length [ 130.261047][ T7762] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 130.270374][ T7762] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #15: comm syz.1.1208: corrupted xattr block 32: bad e_name length [ 130.292235][ T7762] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 130.292876][ T7773] 9pnet: Could not find request transport: 0xffffffffffffffff [ 130.301385][ T7762] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #15: comm syz.1.1208: corrupted xattr block 32: bad e_name length [ 130.323617][ T7762] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 130.369769][ T29] kauditd_printk_skb: 413 callbacks suppressed [ 130.369786][ T29] audit: type=1326 audit(1755744412.748:5109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7751 comm="syz.1.1208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f497e0eebe9 code=0x7ffc0000 [ 130.404929][ T29] audit: type=1326 audit(1755744412.788:5110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7751 comm="syz.1.1208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f497e0eebe9 code=0x7ffc0000 [ 130.457982][ T7780] FAULT_INJECTION: forcing a failure. [ 130.457982][ T7780] name failslab, interval 1, probability 0, space 0, times 0 [ 130.470884][ T7780] CPU: 0 UID: 0 PID: 7780 Comm: syz.0.1214 Not tainted syzkaller #0 PREEMPT(voluntary) [ 130.470916][ T7780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 130.470982][ T7780] Call Trace: [ 130.470992][ T7780] [ 130.471002][ T7780] __dump_stack+0x1d/0x30 [ 130.471031][ T7780] dump_stack_lvl+0xe8/0x140 [ 130.471057][ T7780] dump_stack+0x15/0x1b [ 130.471080][ T7780] should_fail_ex+0x265/0x280 [ 130.471127][ T7780] ? ip_ra_control+0xd6/0x2c0 [ 130.471163][ T7780] should_failslab+0x8c/0xb0 [ 130.471194][ T7780] __kmalloc_cache_noprof+0x4c/0x320 [ 130.471276][ T7780] ? __pfx_mrtsock_destruct+0x10/0x10 [ 130.471308][ T7780] ip_ra_control+0xd6/0x2c0 [ 130.471361][ T7780] ? __pfx_mrtsock_destruct+0x10/0x10 [ 130.471393][ T7780] ip_mroute_setsockopt+0x32b/0x960 [ 130.471466][ T7780] do_ip_setsockopt+0xcea/0x2240 [ 130.471556][ T7780] ip_setsockopt+0x58/0x110 [ 130.471617][ T7780] raw_setsockopt+0xbd/0x150 [ 130.471644][ T7780] sock_common_setsockopt+0x69/0x80 [ 130.471692][ T7780] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 130.471732][ T7780] __sys_setsockopt+0x181/0x200 [ 130.471760][ T7780] __x64_sys_setsockopt+0x64/0x80 [ 130.471803][ T7780] x64_sys_call+0x20ec/0x2ff0 [ 130.471833][ T7780] do_syscall_64+0xd2/0x200 [ 130.471869][ T7780] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 130.471900][ T7780] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 130.471937][ T7780] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.471967][ T7780] RIP: 0033:0x7f6e57a2ebe9 [ 130.472030][ T7780] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 130.472054][ T7780] RSP: 002b:00007f6e56497038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 130.472077][ T7780] RAX: ffffffffffffffda RBX: 00007f6e57c55fa0 RCX: 00007f6e57a2ebe9 [ 130.472089][ T7780] RDX: 00000000000000c8 RSI: 0000000000000000 RDI: 0000000000000003 [ 130.472101][ T7780] RBP: 00007f6e56497090 R08: 0000000000000004 R09: 0000000000000000 [ 130.472148][ T7780] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001 [ 130.472163][ T7780] R13: 00007f6e57c56038 R14: 00007f6e57c55fa0 R15: 00007fff640d6858 [ 130.472187][ T7780] [ 130.774144][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.801045][ T7790] loop0: detected capacity change from 0 to 512 [ 130.817822][ T7760] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4183: comm syz.3.1209: Allocating blocks 497-513 which overlap fs metadata [ 130.832555][ T7790] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 130.849112][ T29] audit: type=1326 audit(1755744413.228:5111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7759 comm="syz.3.1209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f5782ebe9 code=0x7ffc0000 [ 130.873285][ T29] audit: type=1326 audit(1755744413.228:5112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7759 comm="syz.3.1209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f5782ebe9 code=0x7ffc0000 [ 130.933331][ T7790] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.977775][ T7790] ext4 filesystem being mounted at /266/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 131.001591][ T7799] 9pnet: Could not find request transport: 0xffffffffffffffff [ 131.028218][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.075325][ T29] audit: type=1326 audit(1755744413.298:5113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7795 comm="syz.1.1221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f497e0eebe9 code=0x7ffc0000 [ 131.099308][ T29] audit: type=1326 audit(1755744413.298:5114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7795 comm="syz.1.1221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f497e0eebe9 code=0x7ffc0000 [ 131.123306][ T29] audit: type=1326 audit(1755744413.298:5115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7795 comm="syz.1.1221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f497e0eebe9 code=0x7ffc0000 [ 131.146787][ T29] audit: type=1326 audit(1755744413.298:5116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7795 comm="syz.1.1221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f497e0eebe9 code=0x7ffc0000 [ 131.170764][ T29] audit: type=1326 audit(1755744413.298:5117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7795 comm="syz.1.1221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f497e0eebe9 code=0x7ffc0000 [ 131.194739][ T29] audit: type=1326 audit(1755744413.298:5118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7795 comm="syz.1.1221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f497e0eebe9 code=0x7ffc0000 [ 131.346219][ T7808] loop3: detected capacity change from 0 to 1024 [ 131.353426][ T7808] EXT4-fs: Ignoring removed nobh option [ 131.359156][ T7808] EXT4-fs: Ignoring removed bh option [ 131.386817][ T7808] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.471644][ T7788] ================================================================== [ 131.479963][ T7788] BUG: KCSAN: data-race in mem_cgroup_flush_stats_ratelimited / tick_do_update_jiffies64 [ 131.488683][ T7812] EXT4-fs error (device loop0): ext4_xattr_block_get:593: inode #15: comm syz.0.1220: corrupted xattr block 32: bad e_name length [ 131.489824][ T7788] [ 131.489831][ T7788] read-write to 0xffffffff868099c0 of 8 bytes by interrupt on cpu 0: [ 131.489855][ T7788] tick_do_update_jiffies64+0x113/0x1c0 [ 131.489884][ T7788] tick_nohz_handler+0x7f/0x2d0 [ 131.489907][ T7788] __hrtimer_run_queues+0x20c/0x5a0 [ 131.530215][ T7788] hrtimer_interrupt+0x21a/0x460 [ 131.535476][ T7788] __sysvec_apic_timer_interrupt+0x5c/0x1d0 [ 131.541637][ T7788] sysvec_apic_timer_interrupt+0x6f/0x80 [ 131.547409][ T7788] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 131.553433][ T7788] iowrite16+0x37/0xa0 [ 131.557692][ T7788] vp_notify+0x2f/0x40 [ 131.561801][ T7788] virtqueue_kick+0x244/0x290 [ 131.566528][ T7788] copy_data+0x14d/0x180 [ 131.571006][ T7788] virtio_read+0xf6/0x150 [ 131.575376][ T7788] rng_dev_read+0x1db/0x740 [ 131.579997][ T7788] vfs_readv+0x3fb/0x690 [ 131.584279][ T7788] __x64_sys_preadv+0xfd/0x1c0 [ 131.589104][ T7788] x64_sys_call+0x282a/0x2ff0 [ 131.593808][ T7788] do_syscall_64+0xd2/0x200 [ 131.598380][ T7788] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.604318][ T7788] [ 131.606667][ T7788] read to 0xffffffff868099c0 of 8 bytes by task 7788 on cpu 1: [ 131.614281][ T7788] mem_cgroup_flush_stats_ratelimited+0x29/0x70 [ 131.620720][ T7788] count_shadow_nodes+0x6a/0x230 [ 131.625710][ T7788] do_shrink_slab+0x63/0x680 [ 131.630324][ T7788] shrink_slab+0x448/0x760 [ 131.634762][ T7788] shrink_node+0x6c3/0x2120 [ 131.639374][ T7788] do_try_to_free_pages+0x3f6/0xcd0 [ 131.644671][ T7788] try_to_free_mem_cgroup_pages+0x1ab/0x410 [ 131.651024][ T7788] try_charge_memcg+0x358/0x9e0 [ 131.655979][ T7788] obj_cgroup_charge_pages+0xa6/0x150 [ 131.661381][ T7788] __memcg_kmem_charge_page+0x9f/0x170 [ 131.667016][ T7788] __alloc_frozen_pages_noprof+0x188/0x360 [ 131.673044][ T7788] alloc_pages_mpol+0xb3/0x250 [ 131.678022][ T7788] alloc_pages_noprof+0x90/0x130 [ 131.683012][ T7788] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 131.688876][ T7788] __kvmalloc_node_noprof+0x30f/0x4e0 [ 131.694459][ T7788] ip_set_alloc+0x1f/0x30 [ 131.698840][ T7788] hash_netiface_create+0x282/0x740 [ 131.704187][ T7788] ip_set_create+0x3cc/0x960 [ 131.708993][ T7788] nfnetlink_rcv_msg+0x4c3/0x590 [ 131.713985][ T7788] netlink_rcv_skb+0x123/0x220 [ 131.718846][ T7788] nfnetlink_rcv+0x16b/0x1690 [ 131.723887][ T7788] netlink_unicast+0x5bd/0x690 [ 131.728681][ T7788] netlink_sendmsg+0x58b/0x6b0 [ 131.733634][ T7788] __sock_sendmsg+0x142/0x180 [ 131.738598][ T7788] ____sys_sendmsg+0x31e/0x4e0 [ 131.743403][ T7788] ___sys_sendmsg+0x17b/0x1d0 [ 131.748095][ T7788] __x64_sys_sendmsg+0xd4/0x160 [ 131.752973][ T7788] x64_sys_call+0x191e/0x2ff0 [ 131.757687][ T7788] do_syscall_64+0xd2/0x200 [ 131.762234][ T7788] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.768193][ T7788] [ 131.770548][ T7788] value changed: 0x00000000ffffbde9 -> 0x00000000ffffbdea [ 131.777785][ T7788] [ 131.780139][ T7788] Reported by Kernel Concurrency Sanitizer on: [ 131.786313][ T7788] CPU: 1 UID: 0 PID: 7788 Comm: syz.4.1219 Not tainted syzkaller #0 PREEMPT(voluntary) [ 131.796158][ T7788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 131.806315][ T7788] ================================================================== [ 131.816275][ T7814] loop5: detected capacity change from 0 to 512 [ 131.831667][ T7812] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 131.846739][ T7812] EXT4-fs error (device loop0): ext4_xattr_block_get:593: inode #15: comm syz.0.1220: corrupted xattr block 32: bad e_name length [ 131.861679][ T7812] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 131.871162][ T7812] EXT4-fs error (device loop0): ext4_xattr_block_get:593: inode #15: comm syz.0.1220: corrupted xattr block 32: bad e_name length [ 131.886893][ T7814] EXT4-fs warning (device loop5): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 131.911813][ T7812] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 131.924303][ T7814] EXT4-fs (loop5): mount failed [ 132.074025][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.166017][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.191933][ T7788] syz.4.1219 (7788) used greatest stack depth: 7448 bytes left