last executing test programs: 5.741752687s ago: executing program 0 (id=819): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0100000004000000e27f000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000010000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r1}, 0x18) r2 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write$binfmt_register(r2, &(0x7f0000000440)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x0, 0x3a, 'usrjquota=', 0x3a, '', 0x3a, './file2', 0x3a, [0x46]}, 0x32) 5.672158892s ago: executing program 0 (id=821): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r0}, 0x18) r1 = socket$inet6_udp(0xa, 0x2, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='mm_page_free\x00', r2, 0x0, 0xfffffffff7fffffc}, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_open_procfs(0x0, 0x0) connect$inet6(r1, &(0x7f0000000b00)={0xa, 0xfdfe, 0x100007, @remote, 0xa}, 0x1c) bpf$PROG_LOAD(0x5, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="05000000040000"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000840), 0x81, r3}, 0x38) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000280)={'\x00', 0x7e, 0x1000, 0x5c8, 0x80000003, 0x6}) ioctl$BLKTRACETEARDOWN(r4, 0x1276, 0x0) 5.010923066s ago: executing program 0 (id=835): ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)={0x1, 'syz_tun\x00'}) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r0, 0x4002f516, &(0x7f0000000080)={0xa, 0x4}) r1 = socket$kcm(0x29, 0x5, 0x0) recvmsg(r1, &(0x7f0000001600)={&(0x7f00000000c0)=@l2, 0x80, &(0x7f00000014c0)=[{&(0x7f0000000140)=""/200, 0xc8}, {&(0x7f0000000240)=""/109, 0x6d}, {&(0x7f00000002c0)=""/220, 0xdc}, {&(0x7f00000003c0)=""/193, 0xc1}, {&(0x7f00000004c0)=""/4096, 0x1000}, {0x0}], 0x6, &(0x7f0000001540)=""/176, 0xb0}, 0x2001) socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x3f, &(0x7f0000001640)=0x5, 0x4) ioctl$F2FS_IOC_DEFRAGMENT(r0, 0xc010f508, &(0x7f0000001680)={0x81, 0x80000000}) getpid() r2 = syz_open_dev$vcsu(&(0x7f00000016c0), 0x6, 0x20000) pipe(&(0x7f0000001700)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername(r2, &(0x7f0000001740)=@sco={0x1f, @fixed}, &(0x7f00000017c0)=0x80) socket$inet6_sctp(0xa, 0x1, 0x84) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000001a40)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001a00)={&(0x7f0000001840)={0x1a0, 0x1403, 0x200, 0x70bd28, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'geneve0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'wlan0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'pim6reg\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth1\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'macvtap0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'syz_tun\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'pimreg0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'wg2\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'vlan0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_to_bridge\x00'}}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x8000}, 0x44880) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000001a80)={0x0, 0x6}, &(0x7f0000001ac0)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000001b00)={r7, @in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x11}}}, 0x7, 0x226}, &(0x7f0000001bc0)=0x90) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000001c00)={@in={{0x2, 0x4e22, @local}}, 0x0, 0x0, 0x32, 0x0, "4eee541f5fcbd7f6f0738589179a9428729a91c211aad3722c0042119d9cc4bd3bb382de62807f99016ad2ebac724f76d00d805fd1183e9f825650547740f64d7126bef62591411280e57de0a6e10b8f"}, 0xd8) clock_gettime(0x0, &(0x7f0000001d00)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000001d40)={0x0, 0x0}) sendmsg$can_bcm(r2, &(0x7f0000001e40)={0x0, 0x0, &(0x7f0000001e00)={&(0x7f0000001d80)={0x2, 0x132, 0x6, {r8, r9/1000+10000}, {r10, r11/1000+60000}, {0x0, 0x0, 0x0, 0x1}, 0x1, @can={{0x3, 0x1}, 0x5, 0x0, 0x0, 0x0, "2bc6fed298ee6b83"}}, 0x48}, 0x1, 0x0, 0x0, 0x4004}, 0x40000) read(r2, &(0x7f0000001e80)=""/4096, 0x1000) bpf$MAP_CREATE(0x0, &(0x7f0000002e80)=@bloom_filter={0x1e, 0x40, 0x7, 0x800, 0x24401, r2, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0xa, 0x4, 0xf}, 0x50) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r6, 0x8983, &(0x7f0000002f00)) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002f80), r2) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000002fc0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r3, &(0x7f0000003080)={&(0x7f0000002f40)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000003040)={&(0x7f0000003000)={0x1c, r12, 0x800, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r13}, @void}}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x804}, 0x1) r14 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r14, 0x84, 0x72, &(0x7f00000030c0)={r7, 0x6, 0x20}, &(0x7f0000003100)=0xc) 4.125172487s ago: executing program 0 (id=848): r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000080)=0x14) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000200)=0xf4240) close(r0) 4.107667919s ago: executing program 0 (id=849): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x13, &(0x7f0000000480)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x1f, 0x15, &(0x7f00000003c0)=ANY=[@ANYBLOB="0000004000000000b7080000020000207b8af8ff00000000bf"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, 0x0, &(0x7f0000000040)) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000100)={0x4, &(0x7f00000001c0)=[{0xffff, 0x2, 0x5, 0x6}, {0xf141, 0x3, 0x9, 0x9}, {0x40, 0x4, 0xf, 0x4}, {0xff47, 0x6, 0x5, 0x5}]}, 0x10) r5 = io_uring_setup(0x77bb, &(0x7f0000001400)={0x0, 0xab40, 0x2, 0xf7fffffe, 0x209}) io_uring_enter(r5, 0x800000, 0x2, 0xf, &(0x7f0000000000)={[0x2000000]}, 0x18) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) r6 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x30046, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r7}, 0x10) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f00000002c0)=0x1) capset(&(0x7f0000000c00)={0x20080522}, &(0x7f0000000280)={0x0, 0x3, 0x7, 0x0, 0x10040, 0x8f}) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000100)=0x2) close(r6) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000440)={0x100000011, @multicast2, 0x0, 0x0, 'sh\x00', 0x26, 0x8, 0x62}, 0x2c) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f00000010c0)={0x0, 0x6}, 0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000040)={0x0, 0x3, 0x675d}, 0x8) 3.695682812s ago: executing program 0 (id=854): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r2 = syz_open_dev$usbfs(&(0x7f0000000000), 0xc, 0x80) ioctl$USBDEVFS_REAPURB(r2, 0x4008550c, &(0x7f0000000080)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f0000008500000023"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kfree\x00', r3}, 0x18) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00'}) r5 = shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ff8000/0x3000)=nil) r6 = shmat(r5, &(0x7f0000ffd000/0x2000)=nil, 0x4000) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x2, 0x1) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0xfffffffffffffffd, 0x1) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01ff400000009175ad00070000020900010073797a310000000014000000020a010000000000000000000000000420000000080a01020000000000000000070000000900010073797a31"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x4) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x18) r9 = gettid() ppoll(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) tkill(r9, 0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) prctl$PR_SET_THP_DISABLE(0x29, 0x0) r10 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0xf}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYRESDEC=r6], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe2$9p(&(0x7f00000002c0), 0x80) 2.442576093s ago: executing program 2 (id=879): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0100000004000000e27f000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000010000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = openat$binfmt_register(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$binfmt_register(r2, &(0x7f0000000440)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x0, 0x3a, 'usrjquota=', 0x3a, '', 0x3a, './file2', 0x3a, [0x46]}, 0x32) 2.365943469s ago: executing program 2 (id=880): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x100003c}, 0x18) statx(0xffffffffffffffff, &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x7100, 0x7ff, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$inet_sctp(0x2, 0x5, 0x84) close(r2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r4 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000180), 0x20800, 0x0) sendfile(r3, r4, 0x0, 0x9) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB], 0xe8}, 0x1, 0x0, 0x0, 0x10}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[], 0x1c}}, 0x4048000) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, 0x0, &(0x7f0000000240)) sendmsg$inet_sctp(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="2000008b06f0ccdb85594a9907f9f07b4b9d00000000000c000000020000000a0004c149ed1b6a1c9b", @ANYRES32], 0x20, 0x2400e044}, 0x0) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000001040)={0x0, 0xfff9}, 0x8) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x0, 0x0}, 0x10) creat(&(0x7f0000000080)='./file0\x00', 0x248) socket(0xa, 0x80805, 0x0) 1.760140308s ago: executing program 1 (id=889): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000001000080000000000000000095000000000000001841fa90322f780a192493f4c8f6bd082fb422361615cfb121affa05db8af87b"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r0}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000086"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='ext4_allocate_blocks\x00', r4, 0x0, 0x9}, 0x18) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00'}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x8000, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe}, 0x48) unlink(0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r2}, 0x10) r6 = io_uring_setup(0x792b, &(0x7f0000000600)={0x0, 0x2002, 0x400, 0x0, 0x4b1}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001580)={0x0, 0xffffffffffffff3c, &(0x7f0000000300)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911040000000000000003c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62458c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f00000025c0)="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", 0xcb3}, {&(0x7f00000006c0)="97b13f5cf9f584c87e0e637d2ff483a311bb412cb3b03c3d9e97e435f2fceb58ff0402ed7b96244b43386c222917662028d7a01206a1990722ccef1d8f39f7c8ae242e58359217b1c6161ea741445cf16b0c48eb18a6c72174dfb7cd1bd0f409dad5a432bed4afb470da3656dd30d70769e229dc91037321d618e1eff4a176ea46d5cd4d5da97f80356e46d9e8166bf2d97210b631654ece218a2a204a1786ab5a60a881a7a294cd2f92438350e6e3ec4439ebe06133ff65b1e32b809ba0482783b563ec8e5778285da5211e5821135433053a7921319c544d5e797f"}, {&(0x7f00000007c0)="75c37714a0bada8343bceb64ccb6d95a2a37b020e0bf1f6a1de4584223a2f285aaca30a9554cd5cdc1659cb9fec462cc5c2220a7cd891ec3bad99fe3c06e15a109ec0fdb6aeeee5ef8e4bfc28e17984a3860b907d549492d47a447782b7357ea72f4b2c26512a6a33c0247b730a6182ea5a99aee25fcee07f9cb0a80595cd5f744fa6898fdffda5b34b19474b8e853467329e4aea36cfd0e00735d37beb0f895c5688259a8935194eefd3a96d55707133a08f03e14da563160a545396b93341f41c161c93687e28a"}, {&(0x7f0000000b00)="1b080b7a30aec939ce8e26e0cbbe37fc064ceef965fd5e3b6739c966492dbdf71c04423d8a403e56dfd224e4e55918a5e31e683fec5cc9460882a0d1628d02d51a8da997073f856e2cd00586c6e8c89c71cf8be6121b0b3a85d597a1afb0cc311f30cc26183c8e594ce5ff62661c9e32cbc9dd9a72985e9857f3bddb52382b6c27ca85d5774cf17b92e2d2097f12a8687e70f90d46381a47706a9124a2cf61b84f26aae22fd4da84ae35b93f7be9fdfdfbf33c59f5c657e9f7e81b81b786082f88af4de07808ff3c954bae"}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r8, &(0x7f0000001140)={0x0, 0x2, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1}, 0x40000100) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x400000) io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000a88000/0x2000)=nil, 0x3) 1.622688089s ago: executing program 3 (id=894): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f00000001c0)=@ccm_128={{0x304}, "0300", "95670cff05e29ee8dcfc54e13b2dd711", "fdffb26f", "a2deb79f8c96bff4"}, 0x28) ioctl$int_in(r4, 0x5421, 0x0) writev(r4, &(0x7f0000000080)=[{&(0x7f00000002c0)}], 0x1) kexec_load(0x4, 0xa, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="04", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110600", @ANYRES32=r5, @ANYRESDEC=r1], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x2d) ioctl$AUTOFS_IOC_FAIL(r0, 0x4c80, 0xffffffffffffffb6) unshare(0x40000000) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 1.537612186s ago: executing program 2 (id=896): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000002001000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x1e, &(0x7f00000001c0)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r2, 0x0, 0x2, 0x0, 0x0, 0x0) 1.437453364s ago: executing program 1 (id=897): r0 = socket(0x10, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000340)={0xa, 0x3, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000085000000230000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000d00)='kfree\x00', r2}, 0x18) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "a6341a1a379332f5", "1fd33c81cf7995313c09de00fd6ded74", "62266bd8", "1e00040000000100"}, 0x28) write$binfmt_script(r1, &(0x7f0000000500)={'#! ', './file0'}, 0xb) close_range(r0, r1, 0x0) 1.415784756s ago: executing program 1 (id=898): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000900)=@NCI_OP_CORE_INIT_RSP={0x0, 0x0, 0x2, 0x1, 0x0, {{0xfd, 0xfffffffd, 0xb2, "4bdf03a471f5f569f3f8bd77df465999c34b2494c8f043a5343e7f231cf38b50b8032b018c7d80f65685037415f6005643309a13522402525e678a9229fc10f75ff0bf0a65d16f6498cc9b553cf77959f04091a31b16500bbc0bce234285ec883a11c0e44b9790c2e6af137eb25a6b2802c3e173c184550b7167a49996394c9cac19082cdb3d57bb3d51a5b0717c5627cfc54ad39f97cc12eb7c38acf28adb4a4ad505ae39eb9ef7f7d99129500000000000"}}}, 0xc6) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES8=r2, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) unshare(0xa000200) semget$private(0x0, 0x4000, 0x0) semtimedop(0x0, &(0x7f0000000000)=[{0x2, 0x40, 0x1800}], 0x1, 0x0) unshare(0x20060400) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000a00)=ANY=[@ANYBLOB="40020000004d304489c9d66c2438471a25aeb7d3c95ad7af54610010dbc8e2b60eb757db90ba5cb2dc0c37760b64c24e8a2373c0ac3cbb96f518bdae9a45c76a522edc2dec34174c4c7865c5d912a29edb35e3c90a9948c31c27f1e28d3345be1d609d6f7c1b2327235c57d63bc0be113b3c02c3ad354ee6e1793c24dcdfc06fd1ea8a803ebb589940ab4500"/153], 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000280)=[@mss={0x2, 0x80000000}], 0x1) 1.331101493s ago: executing program 3 (id=899): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000008"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) getsockname$packet(0xffffffffffffffff, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000440)=0x14) 1.290538926s ago: executing program 3 (id=901): unshare(0x42000000) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a2809302060000ff41fd01020400000a00120002002800000019002d007fffffff0022de1330d54400009b84136ef75afb83de066a5900e1baac968300000000f2ff00000100", 0x53}], 0x1, 0x0, 0x0, 0x7a000000}, 0x4000884) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@link_local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @private=0x800001c, @local}, {0x0, 0x17c1, 0x8}}}}}, 0x0) close(r2) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) 1.137833708s ago: executing program 3 (id=902): readv(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000510700140000000000000001b7080000000000007b8af8ff00000000b7080000fcffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000004c0)='kmem_cache_free\x00', r4}, 0x18) r5 = socket$inet6(0xa, 0x2, 0x0) getsockopt$llc_int(r2, 0x10c, 0x2, &(0x7f0000000000), &(0x7f0000000240)=0x4) bind$inet6(r5, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/mem_sleep', 0x101a02, 0x0) sendfile(r2, r2, &(0x7f0000000080)=0x2, 0x7f03) unshare(0x40020480) 668.602116ms ago: executing program 2 (id=907): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f00000001c0)=@ccm_128={{0x304}, "0300", "95670cff05e29ee8dcfc54e13b2dd711", "fdffb26f", "a2deb79f8c96bff4"}, 0x28) ioctl$int_in(r4, 0x5421, 0x0) writev(r4, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) kexec_load(0x4, 0xa, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r5, &(0x7f00000000c0)="04", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110600", @ANYRES32=r6, @ANYRESDEC=r1], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x2d) ioctl$AUTOFS_IOC_FAIL(r0, 0x4c80, 0xffffffffffffffb6) unshare(0x40000000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x80, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_EXPRESSIONS={0x44, 0x12, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x8}]}}}, {0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xe41f}]}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x120}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc8}}, 0x20050800) 594.526662ms ago: executing program 4 (id=908): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000001000080000000000000000095000000000000001841fa90322f780a192493f4c8f6bd082fb422361615cfb121affa05db8af87b"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r0}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000086"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='ext4_allocate_blocks\x00', r4, 0x0, 0x9}, 0x18) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00'}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x8000, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe}, 0x48) unlink(0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r2}, 0x10) r6 = io_uring_setup(0x792b, &(0x7f0000000600)={0x0, 0x2002, 0x400, 0x0, 0x4b1}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001580)={0x0, 0xffffffffffffff3c, &(0x7f0000000300)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911040000000000000003c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62458c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f00000025c0)="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", 0xcb3}, {&(0x7f00000006c0)="97b13f5cf9f584c87e0e637d2ff483a311bb412cb3b03c3d9e97e435f2fceb58ff0402ed7b96244b43386c222917662028d7a01206a1990722ccef1d8f39f7c8ae242e58359217b1c6161ea741445cf16b0c48eb18a6c72174dfb7cd1bd0f409dad5a432bed4afb470da3656dd30d70769e229dc91037321d618e1eff4a176ea46d5cd4d5da97f80356e46d9e8166bf2d97210b631654ece218a2a204a1786ab5a60a881a7a294cd2f92438350e6e3ec4439ebe06133ff65b1e32b809ba0482783b563ec8e5778285da5211e5821135433053a7921319c544d5e797f"}, {&(0x7f00000007c0)="75c37714a0bada8343bceb64ccb6d95a2a37b020e0bf1f6a1de4584223a2f285aaca30a9554cd5cdc1659cb9fec462cc5c2220a7cd891ec3bad99fe3c06e15a109ec0fdb6aeeee5ef8e4bfc28e17984a3860b907d549492d47a447782b7357ea72f4b2c26512a6a33c0247b730a6182ea5a99aee25fcee07f9cb0a80595cd5f744fa6898fdffda5b34b19474b8e853467329e4aea36cfd0e00735d37beb0f895c5688259a8935194eefd3a96d55707133a08f03e14da563160a545396b93341f41c161c93687e28a"}, {&(0x7f0000000b00)="1b080b7a30aec939ce8e26e0cbbe37fc064ceef965fd5e3b6739c966492dbdf71c04423d8a403e56dfd224e4e55918a5e31e683fec5cc9460882a0d1628d02d51a8da997073f856e2cd00586c6e8c89c71cf8be6121b0b3a85d597a1afb0cc311f30cc26183c8e594ce5ff62661c9e32cbc9dd9a72985e9857f3bddb52382b6c27ca85d5774cf17b92e2d2097f12a8687e70f90d46381a47706a9124a2cf61b84f26aae22fd4da84ae35b93f7be9fdfdfbf33c59f5c657e9f7e81b81b786082f88af4de07808ff3c954bae"}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r8, &(0x7f0000001140)={0x0, 0x2, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1}, 0x40000100) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x400000) io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000a88000/0x2000)=nil, 0x3) 517.812479ms ago: executing program 1 (id=909): r0 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000100)={r0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x18) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000500)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000580)="02042700ea0e0000000000001eafbcf706e105000000000000001104ee1606d4b8bf4a828bda305775c43824cee8440000", 0x31}, {&(0x7f0000000300)="126873159fca3fa38fb198e9a6b363ceb3e6d803ab766b7a38e451d14e0b3457474fe6a51671e4124fcea96a873b10996816e100ed8a93b0a9053db57d60973369f58551c3091cb88d3b", 0x4a}, {&(0x7f0000000080)="088d85d1f4f8220aee8de7932b326f8a3164ae439862807a1589836c736d2341f7", 0x21}, {&(0x7f00000001c0)="df4603a1330000f300de130ea8", 0xd}, {&(0x7f00000005c0)="b72abab9439ca41f5cf14d6435575ba774ee5f5c23ff2f5176f5773d08a15668ec280cfe4ea416cf769dbf978a8191bbe006e0da50029176c0f24e3ff4d3e895a2afbf52cef2fe1ca31edd842b126ec4be67e6e3624b9ddf806fc146c645ec1d37fe7e3b025c156d5d520104b53f7fb2af436201cfd5dca170edea5a190e4786bfaac544b60f514d7ef420526c467f14790dcfa5ab915d7dbcdf2765bbcad014c991f8b829c79f53586de79f0b987ad796f9de4a6e53136a07a39ab1f5a2ce30aded70a9b72d1beff7e8b6405fd6331e5635ee71e809be2d58f412dcd7b2e856d692dbfed19045ff13244acce351b6e450395568063569c71ea80a04f83fbe6ad1d0862fb97f816576c4844da65d751ee1fdc522ae1158670de297cdb2117bc0adc1486e016a6bcc922a162fce6a9ecc8c42b0c44c566004eda037864e5f339bbb0998cdaf2b8e49ae003659bc033668f7c8e550197ed95c420461254ba1883dbd9403672d579cee85c37f103ee9a350a768286017158784baeb063c8c684b91b022b0db2238b679092a1f6909f0cd9228500e088f5cc7bac4c0dc56e80fedac93554aec79715ce02e8bf3fcbd70382f619bfe3dcf06890d8542022ee58bdfb075d319c9fc8474cadc8de5c3dd3f682d3f68324d0af7a727064053ad84c94643eef190783c616467628f84620044c084b80e3e57bfcdf293c9c36b4474a52398b35e49e2ad4a4ac090bffc5cd27d3c69b4ae5f841d5b0766ccd36d25eb58d8f01621a05744b79ede39019ab9d7a1946353d8f3b7f833ce1a102a8c97a9e3f32138ffafd305448f2518ccdb7eef594a890eaeaff3f876f742fec22669a97085ed93b18228ecbe9e354e8f69967ca749fd2b1cf026665ca912e3fc0188b294519078b46676052de4fe22798290bd1e232c9791fc01ddb4ae776b5769143df2867042e8a3ddfa8e786bd8a244076956d4ab137939ad381650dd4fefd2b942a98d6f2edfd7019ae473e7608647b86d643e8ff3d7d4e89ed826e4b8c6e8fed224c528d805ade85c5b45261b2692c0f403dec050bd973b0999df214689f4402dd1598a16b0c7671e5e204a00b06376ddee7cb99292a8b835c0b451642b71f2ffa1aeea56255817b2384bfe4f8213ccfc1f762f250592896102e5f6d34cdd726bc0f86af52fd7c4483d32e23e5af770e960c7445b8e67b6086f0cadcd22d0d4bdadc31b5a94dd687379dc6e078210ccc71f8e67eb58d330394425ab17e55d1ca8f868f6bf738af291d2293c3dfa2ccff25061ded22878b3cc6532d19e5a00d1f0f1b9de35305fac2c6cfd5d77a2b02618735b7d392738bd5cd3eabb7039c790a9f193913f16e06605d405d6a0cf0011a2e5f935d8563fef1722692dd266c3d320b9f5eeb2a4b2f72155522f0ed72ff1efa0b6ee78e70d3d45241609e7f87d7bcfe1af71159baa11ad667a0ead3986b2b06500ba2615ee966ea86ca68d02de4802bd9ef18dac5ba53ca98b90df49ef4e3268ceee538973620e5a60513ea330989642626420b67dceebc569478657aedeb62c45b079348796923ad1fba5a99e6b150cf97ba2a570150053309c6dca7fa352fa1678c9b919fbc47ae0a84175a7fc25a00fa5888cb017e8d8225fadb29e34bd3c5bbccfb22a83255fec3967c991d5b3e6719ade82fb7ef85c8a4b9e7ad8ef2a3a7bc78de424572224affb1f9e0c5a969e61ee2ebb4f247bfa09384bdad04438f2efbfae303d47c3afe7e8d3a157b2a6f37572ea3ecc441dfb208ba755f781f144e58d80aea590abcfccbe8678ec6de47511f9d61cc408cbbe90eeab2cffe6d1a48dc3eb4e48e228fd43cafd7ff2c85c3ed52e99fe16887be28fcd2cd4ba4cac414c92c96294fa7d628e4356c748c173f790a7f30071d0bd53817c78d163249c7402b222b8f28668cae7afd17b97dbaf10b75b61409ca6f5b285d1ab09207c5a91c68b0d4b5da6d6b5a495c8debd7f4400e56d9e22d1cc330f782f2b5441a31b9ccf35aa1a151219cdcff5ab8b240af5b5a751eca67773c057412a935e3a7a367b2bcd28463904ee040a586d6f4f969cee56d55b6b4d97d1fe93b67e2f6bd47925054c4702ec8969a1a6211ea8f6783ca0e8ae333922ce19eceb24e2ff714a0208d2489a62f299aa50cdbfe5a826e872ab231bbddf5bd2fca92d4460379e05e13ff34a200fd921dcb67a002873bda8d86536cddaccb54eb72dd4e399fe9195ad5574ad85d9ed2eaae4106234f0a8db05a230ff377b59b54fd0919d1b86b938622ae6098f003db7f4d45d6874f54c33064ce6184dccc99fece2d994e9572d4840b0cbdd704fd70b4f625912d48a512339f883533768f09a4f614583dfb72defe713ee38f61184df279461b7d35becd8e67d01f0ec27e901d88215554d5a69db373a662085733d09ad9153e7d432c94f872ff7cd72995b3a581ea17722ed13a191b366208f75661112b1a7d42c252c907488ca8dd8f819d4618b0053d4bcddb3b5975cb8615ebc472e052552ee74d5253174a2b0cb96e1eaf6349b6c39be975123ee72b0ffe1367df7aba54de26c9135a3422d21067034551be5efc5daf8b8f59bc725e4fd171378fd9f16a785f1b0378823c85eec521e0b2aca70b7b72b719a20eb2fb0addc0b05851c8e181607f49dad7323bc255309097584c2099574db1ed7940fd16796aef19d30acd714dc1f898716df64db87d852eddf2f86e78fd7fd64868b4cb6cc626efcdea49c4a2779a0e777bbe23968e14233a810d9883680894de93023a8deae51ccbf32e6d1e53618ebee95c761221a33bc3263fff0f5ae23e14dba0418cf3f31effcb36956e06c57a17620044260419a208ae1d2296ec9472d44be74a8ed0a33a23181acdef8c7d2695ce9485ed8d17d9f6f30b9b128ee0ba15c42cbf6059bcfef008c09db8855343f79c3ce1c4d79077c8a62237d4e400a5aa88e7424f2f99df6c2070d6ed071f4968376581e20e52d64e9c4f8a6f73bb33f5b6b62c1deecc85bf789565fde14e4454306ed8f09af08afb360ee4fb40dd5dca0be43ccff75e5c0ef85ea7c521cb4840d61e99e1ce4661e721446d5a571cddffbc3643ec9b58237fd416376906bdca09485c2c80f82b23e8e7bbf22035fdbcacd804ae3771fd616901184ced46987d533017eef717e9b34a5531c3efe2d77c9b6cb0617382d69951545378a4118e71c64a1f16d096a8f933580922083d0536b90ae1715c63f682e8241b42e1646b0c52e34aa9c91efe2b6b787ce0747d4ff0dd07d6ebc9ce27e0ef35705eb7b78763a9829b464523ff3ed9078aff6ee29e6e7a59a5243825e8bb9235f8e49a9dfb5932536666c3dc75b29e515dbca4c84268cf23cd7b6da6814328a3cb26d7b1d6c28e20b36f9a2c9e2fcf663c314f72f37d2b8f405cfc686a6b35400435be0eab01709c2c4b3005491cbb0b560e33547b77ba9f25f01b194e20534199a3786ddfaf0a75aafb65cd4df4da7b5f98fe72a8bc7d045339fd41508cecca791c717a10d4fed8aa69eec80955bd899a6f8aaf3411be40568149e631ccbe17c68f85e87b58da81ba78def8b1a48c49b2dc7613f7d6ea8b158bed077666d37d1caba9a23b7cb2772e780f70872113e5bcaebaf9f9499f651dc894be3bba1e99d58b33d60c0eda397df91d7cf9fb072f247fa9a9f59c4f59c4284a3832ff0a1f9ce8f6346cb5c08a9dcb2851c7f169af688fc13f00cf9519ade547671698caaa3f4d4921fee83753b9ab0875707836343eddb5b87bec86aae023c9571b8e389ff3f4c692b6fb19686105249ce033116777d919ceb4559a67ee6b6ad9d4b53d2be24315429de3bf201107fe7dff9cbc92dbf9173391d555b0a1b8ea3252fd7d7fd15d8a3cc70cecdbdd43c4edcc4bb2fbbf646d5ec7dad0d3156a513d14184e0c316f8155e774f7dcea485f904828edf28510d692b66b1500c5a704371c2188a2812bd323de012f36a79674082b5f5e9f7f4ce1a75ed854b71555e9fcd1f0322c22a9e543674c79a74404e08e61860f505dc56e1b52977b9a9af18be4064b5f6aa7c891382bbbe65e70a4cee33176570341a525fb6b25c0b20bfa3f2ee4a01584f259f43c3b63a2dfc376f435827211379ab3ca8912cbe01e4f837920666fbda682f6954d1c156f21e12547b885f485c38f62e765013144be8ca92b1d4872790a5c02671517f6a8f0ceb247e08c64268ad8970b57bb6d077c9b8ebe7fb1183087c9a3baee06100609204be588621253b9b120c08db9f28c2d38c9bc3f59018bb7216d73186048770d1e556faa49df23a40a64b40cdda2041dccf5619db09b7a7795fd7eb631c0e0bffc3b64422bf6acd84b7fae8bd05b057260a4d7c4851829c7bbf0b6f27c5db0ff10f42df3528f79dc9bbd591965259cd0389deb124b1fadc5dfd3ade9742d29261379ea3d98929512371dec991f0636fbda5dac355a04e363beeb4751781d9cef3a0b6ac6500895d223ad43ed75cac8b0a868253fffa10bf6c2de99c687fd056e075cf0632b6d8ed2263ca08ad95b6f335a3b6d8ab7801422ac8597441ac1bbe289b50af31eb221d19a2d3177d4ad1056d616295e89471e65d811b8fa4fe2c0c12793f43ef7e75c7f657f6c26ca9cbae63ce99301069ab257ae77c38778d35afd326d569c626a68f3904b2c376dfaa05568892f346f86fb05e71fb751e09cd22525cb63512a7d2e4670bd31109b87818278e66dc73fa9667e35c5bc6588cd36d2b62592a4103803d93c194f8edd5d20c6597231321b909bbb3c1d13408e5cf27728883e333b391222e6b6665454892dfedd17a1066f1145163e1a31ba9a3e3cee925e55d794b89462a0a092a639ccd4a24514083cb68224c87c18f0bb39ff721cc598e686b5fef169bc30f9ec6df397905f8340f6ae7ad826aac774cc46bfb9dfe8192e9ef10e8355d7c2810269eb73c7ecb8d3ffa33437142b8e596cdb778cd3cdda5bbbd09a8ea919929adbc63ff1004490c45a9ea59def65fabc884c39beac1b74a218f59c5e31ba85dcc4b8bd81d7a66d8aaf0edb64b505f760442e16fb7f07a069aba88601c3ace27762cef8196da3d44b14796b04e7fa3bab37209190a1de6e6ecfd99353279ef643766814fa7fac7254eba59bff3546bf21afc7445a4f1bc92c7b013f34962ff029e0f2926acf6c8a25fecea5b0b810656c981535492a2a4159dcfd0bf98085dc9612159fa0ad837a22eaffce80405367931ef3eacbf5a663175acc306eb075c52265d", 0xe8b}, {&(0x7f0000001480)="c071d5aa4739301a7eae6d", 0xb}], 0x6}, 0x40000) syz_open_dev$usbfs(&(0x7f00000000c0), 0x800000001fe, 0x82) r5 = socket$kcm(0x2d, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a48500000004000000850000000f00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000380)='percpu_alloc_percpu\x00', r6}, 0x10) syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0xfffffffd, 0x10100}, &(0x7f0000000000), &(0x7f0000000100)) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f0000000340)={r5}) bind$xdp(r7, &(0x7f00000005c0)={0x2d, 0x0, 0x0, 0xc}, 0x10) bind$xdp(r1, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0xc}, 0x10) r8 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000050b6850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r9, 0x0, 0x80}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00'}, 0x10) inotify_init1(0x80000) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000340)={{0x1, 0xee00, 0x0, 0x0, 0xffffffffffffffff, 0xaa, 0x2}, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdd16}) write$selinux_attr(r8, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) rt_sigaction(0xe, 0x0, 0x0, 0x8, &(0x7f0000000200)) 441.451275ms ago: executing program 2 (id=910): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f00000001c0)=@ccm_128={{0x304}, "0300", "95670cff05e29ee8dcfc54e13b2dd711", "fdffb26f", "a2deb79f8c96bff4"}, 0x28) ioctl$int_in(r4, 0x5421, 0x0) writev(r4, &(0x7f0000000080)=[{&(0x7f00000002c0)}], 0x1) kexec_load(0x4, 0xa, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="04", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110600", @ANYRES32=r5, @ANYRESDEC=r1], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x2d) ioctl$AUTOFS_IOC_FAIL(r0, 0x4c80, 0xffffffffffffffb6) unshare(0x40000000) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 363.276301ms ago: executing program 1 (id=911): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000008"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) getsockname$packet(0xffffffffffffffff, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000440)=0x14) 319.947914ms ago: executing program 1 (id=912): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001040)={'sit0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x0, 0xa000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0x0, 0x4, 0x0, @empty, @rand_addr=0x3}}}}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f00000012c0)=ANY=[@ANYBLOB="18000000010000800000000000cbcd290000009500000001000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syslog(0x2, &(0x7f0000000200)=""/4096, 0x1000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) socketpair(0xf, 0x3, 0x2, &(0x7f00000001c0)) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) ioctl$sock_inet_SIOCGIFADDR(r6, 0x8915, &(0x7f0000000040)={'netpci0\x00', {0x2, 0x0, @remote}}) write(r6, &(0x7f0000004200)='t', 0x1) sendfile(r6, r5, 0x0, 0x3ffff) sendfile(r6, r5, 0x0, 0x7ffff000) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r8}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r9, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x2000) 185.996285ms ago: executing program 2 (id=913): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000900)=@NCI_OP_CORE_INIT_RSP={0x0, 0x0, 0x2, 0x1, 0x0, {{0xfd, 0xfffffffd, 0xb2, "4bdf03a471f5f569f3f8bd77df465999c34b2494c8f043a5343e7f231cf38b50b8032b018c7d80f65685037415f6005643309a13522402525e678a9229fc10f75ff0bf0a65d16f6498cc9b553cf77959f04091a31b16500bbc0bce234285ec883a11c0e44b9790c2e6af137eb25a6b2802c3e173c184550b7167a49996394c9cac19082cdb3d57bb3d51a5b0717c5627cfc54ad39f97cc12eb7c38acf28adb4a4ad505ae39eb9ef7f7d99129500000000000"}}}, 0xc6) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES8=r2, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) unshare(0xa000200) semget$private(0x0, 0x4000, 0x0) semtimedop(0x0, &(0x7f0000000000)=[{0x2, 0x40, 0x1800}], 0x1, 0x0) unshare(0x20060400) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fa347ae3", @ANYRES16=r3, @ANYBLOB="010023010000340200000600000008000100", @ANYRES32=r1, @ANYBLOB="08000300ffffffff"], 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000a00)=ANY=[@ANYBLOB="40020000004d304489c9d66c2438471a25aeb7d3c95ad7af54610010dbc8e2b60eb757db90ba5cb2dc0c37760b64c24e8a2373c0ac3cbb96f518bdae9a45c76a522edc2dec34174c4c7865c5d912a29edb35e3c90a9948c31c27f1e28d3345be1d609d6f7c1b2327235c57d63bc0be113b3c02c3ad354ee6e1793c24dcdfc06fd1ea8a803ebb589940ab4500"/153], 0x5) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) 177.057026ms ago: executing program 4 (id=914): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[], 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000840), 0x81}, 0x38) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0}, 0x18) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 139.558269ms ago: executing program 4 (id=915): unshare(0x42000000) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a2809302060000ff41fd01020400000a00120002002800000019002d007fffffff0022de1330d54400009b84136ef75afb83de066a5900e1baac968300000000f2ff0000010000", 0x54}], 0x1, 0x0, 0x0, 0x7a000000}, 0x4000884) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@link_local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @private=0x800001c, @local}, {0x0, 0x17c1, 0x8}}}}}, 0x0) close(r2) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) 137.522069ms ago: executing program 3 (id=916): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0100000004000000e27f000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000010000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write$binfmt_register(r2, 0x0, 0x0) 41.876507ms ago: executing program 3 (id=917): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="0100cd7881a9"], 0x14}, 0x1, 0x0, 0x0, 0x24004851}, 0x0) 36.658597ms ago: executing program 4 (id=918): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r2, 0x0, 0x5c4, 0x404c844, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @local}, 0x1c) 18.071459ms ago: executing program 4 (id=919): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r1}, 0x18) mq_open(&(0x7f0000000280)='kfree\x00', 0x40, 0x28, &(0x7f00000002c0)={0x7d, 0xeb1f, 0x8, 0x7}) 0s ago: executing program 4 (id=920): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001040)={'sit0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x0, 0xa000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0x0, 0x4, 0x0, @empty, @rand_addr=0x3}}}}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f00000012c0)=ANY=[@ANYBLOB="18000000010000800000000000cbcd290000009500000001000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syslog(0x2, &(0x7f0000000200)=""/4096, 0x1000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) socketpair(0xf, 0x3, 0x2, &(0x7f00000001c0)) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r6, &(0x7f0000004200)='t', 0x1) sendfile(r6, r5, 0x0, 0x3ffff) sendfile(r6, r5, 0x0, 0x7ffff000) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r7}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r8}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) kernel console output (not intermixed with test programs): 42.497063][ T3552] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.510028][ T3552] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.541150][ C1] hrtimer: interrupt took 37432 ns [ 42.591715][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.627334][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.636813][ T3560] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #19: comm syz.1.20: corrupted inode contents [ 42.650570][ T3560] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #19: comm syz.1.20: mark_inode_dirty error [ 42.666862][ T3585] loop3: detected capacity change from 0 to 128 [ 42.673726][ T3560] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #19: comm syz.1.20: corrupted inode contents [ 42.718066][ T3585] syz.3.25: attempt to access beyond end of device [ 42.718066][ T3585] loop3: rw=0, sector=2072, nr_sectors = 1 limit=128 [ 42.734027][ T3560] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2991: inode #19: comm syz.1.20: mark_inode_dirty error [ 42.753070][ T3560] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2994: inode #19: comm syz.1.20: mark inode dirty (error -117) [ 42.769092][ T3560] EXT4-fs warning (device loop1): ext4_evict_inode:274: xattr delete (err -117) [ 42.810859][ T3590] loop3: detected capacity change from 0 to 512 [ 42.841484][ T3590] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.860200][ T3590] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.884269][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.932720][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.110774][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.274099][ T3607] loop2: detected capacity change from 0 to 512 [ 43.330869][ T3607] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.343736][ T3607] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.375764][ T3613] netlink: 1144 bytes leftover after parsing attributes in process `syz.1.34'. [ 43.402034][ T3613] netlink: 8 bytes leftover after parsing attributes in process `syz.1.34'. [ 43.413729][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.579190][ T3601] loop0: detected capacity change from 0 to 512 [ 43.678956][ T3601] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.707867][ T3601] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.744360][ T29] kauditd_printk_skb: 211 callbacks suppressed [ 43.744380][ T29] audit: type=1400 audit(1754646972.546:302): avc: denied { write } for pid=3615 comm="syz.2.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 43.811416][ T29] audit: type=1326 audit(1754646972.606:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3615 comm="syz.2.35" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f137ca6ebe9 code=0x7ffc0000 [ 43.834812][ T29] audit: type=1326 audit(1754646972.606:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3615 comm="syz.2.35" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f137ca6ebe9 code=0x7ffc0000 [ 43.857991][ T29] audit: type=1326 audit(1754646972.606:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3625 comm="syz.2.35" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f137caa14a5 code=0x7ffc0000 [ 43.999500][ T29] audit: type=1326 audit(1754646972.806:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3625 comm="syz.2.35" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f137ca6ebe9 code=0x7ffc0000 [ 44.081222][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.160340][ T29] audit: type=1326 audit(1754646972.966:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3630 comm="syz.0.37" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbda2e6ebe9 code=0x7ffc0000 [ 44.163134][ T3631] loop0: detected capacity change from 0 to 128 [ 44.213467][ T29] audit: type=1326 audit(1754646972.966:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3630 comm="syz.0.37" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbda2e6ebe9 code=0x7ffc0000 [ 44.237024][ T29] audit: type=1326 audit(1754646972.966:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3630 comm="syz.0.37" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbda2e6ebe9 code=0x7ffc0000 [ 44.260314][ T29] audit: type=1326 audit(1754646972.966:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3630 comm="syz.0.37" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbda2e6ebe9 code=0x7ffc0000 [ 44.283480][ T29] audit: type=1326 audit(1754646972.966:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3630 comm="syz.0.37" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fbda2e6ebe9 code=0x7ffc0000 [ 44.296161][ T3631] syz.0.37: attempt to access beyond end of device [ 44.296161][ T3631] loop0: rw=0, sector=2072, nr_sectors = 1 limit=128 [ 44.338153][ T3633] loop1: detected capacity change from 0 to 512 [ 44.393955][ T3633] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.410576][ T3635] futex_wake_op: syz.2.39 tries to shift op by -1; fix this program [ 44.427844][ T3633] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.583879][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.625462][ T3646] bond0: entered promiscuous mode [ 44.630595][ T3646] bond_slave_0: entered promiscuous mode [ 44.636482][ T3646] bond_slave_1: entered promiscuous mode [ 44.661265][ T3646] batadv0: entered promiscuous mode [ 44.668822][ T3646] hsr1: entered allmulticast mode [ 44.673900][ T3646] bond0: entered allmulticast mode [ 44.679064][ T3646] bond_slave_0: entered allmulticast mode [ 44.684811][ T3646] bond_slave_1: entered allmulticast mode [ 44.691196][ T3646] batadv0: entered allmulticast mode [ 44.709179][ T3646] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 44.736300][ T3646] bond0: left promiscuous mode [ 44.741214][ T3646] bond_slave_0: left promiscuous mode [ 44.746813][ T3646] bond_slave_1: left promiscuous mode [ 44.775789][ T3650] loop0: detected capacity change from 0 to 512 [ 44.882443][ T3650] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.945954][ T3656] FAULT_INJECTION: forcing a failure. [ 44.945954][ T3656] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 44.959454][ T3656] CPU: 1 UID: 0 PID: 3656 Comm: syz.3.43 Not tainted 6.16.0-syzkaller-12016-gbec077162bd0 #0 PREEMPT(voluntary) [ 44.959489][ T3656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 44.959559][ T3656] Call Trace: [ 44.959565][ T3656] [ 44.959572][ T3656] __dump_stack+0x1d/0x30 [ 44.959596][ T3656] dump_stack_lvl+0xe8/0x140 [ 44.959618][ T3656] dump_stack+0x15/0x1b [ 44.959708][ T3656] should_fail_ex+0x265/0x280 [ 44.959751][ T3656] should_fail+0xb/0x20 [ 44.959824][ T3656] should_fail_usercopy+0x1a/0x20 [ 44.959856][ T3656] copy_fpstate_to_sigframe+0x628/0x7d0 [ 44.959891][ T3656] ? copy_fpstate_to_sigframe+0xe6/0x7d0 [ 44.959995][ T3656] ? __tsan_read8+0x12/0x190 [ 44.960045][ T3656] get_sigframe+0x34d/0x490 [ 44.960064][ T3656] ? get_signal+0xdc8/0xf70 [ 44.960099][ T3656] x64_setup_rt_frame+0xa8/0x580 [ 44.960125][ T3656] arch_do_signal_or_restart+0x27c/0x480 [ 44.960171][ T3656] exit_to_user_mode_loop+0x7a/0x100 [ 44.960197][ T3656] do_syscall_64+0x1d6/0x200 [ 44.960302][ T3656] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 44.960408][ T3656] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 44.960504][ T3656] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 44.960533][ T3656] RIP: 0033:0x7fa1755eebe9 [ 44.960551][ T3656] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 44.960570][ T3656] RSP: 002b:00007fa174036038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 44.960596][ T3656] RAX: 0000000000000000 RBX: 00007fa175816090 RCX: 00007fa1755eebe9 [ 44.960612][ T3656] RDX: 0000200000001140 RSI: 000000004058534c RDI: 000000000000000b [ 44.960681][ T3656] RBP: 00007fa174036090 R08: 0000000000000000 R09: 0000000000000000 [ 44.960696][ T3656] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 44.960709][ T3656] R13: 00007fa175816128 R14: 00007fa175816090 R15: 00007ffd92c355c8 [ 44.960734][ T3656] [ 45.170890][ T3650] ext4 filesystem being mounted at /7/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.335669][ T3650] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.42: bg 0: block 328: padding at end of block bitmap is not set [ 45.343191][ T3646] batadv0: left promiscuous mode [ 45.470416][ T3660] futex_wake_op: syz.4.45 tries to shift op by -1; fix this program [ 45.512437][ T3665] loop1: detected capacity change from 0 to 512 [ 45.533916][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.560275][ T3665] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.573390][ T3665] ext4 filesystem being mounted at /9/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.659724][ T3665] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.47: bg 0: block 328: padding at end of block bitmap is not set [ 45.715222][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.794731][ T3675] netlink: 4 bytes leftover after parsing attributes in process `syz.1.50'. [ 46.359558][ T3688] binfmt_misc: register: failed to install interpreter file ./file2 [ 46.623608][ T3697] loop4: detected capacity change from 0 to 512 [ 46.682479][ T3697] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.696776][ T3690] loop3: detected capacity change from 0 to 512 [ 46.735319][ T3697] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.769404][ T3690] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.807879][ T3690] ext4 filesystem being mounted at /14/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.818832][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.013475][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.114285][ T3720] loop0: detected capacity change from 0 to 512 [ 47.130700][ T3720] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.168610][ T3720] ext4 filesystem being mounted at /9/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.219482][ T3720] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.60: bg 0: block 328: padding at end of block bitmap is not set [ 47.271798][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.750074][ T3757] netlink: 'syz.2.67': attribute type 4 has an invalid length. [ 47.791938][ T3709] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 47.908173][ T3763] loop2: detected capacity change from 0 to 512 [ 47.916962][ T3765] netlink: 1144 bytes leftover after parsing attributes in process `syz.4.71'. [ 47.942467][ T3768] loop0: detected capacity change from 0 to 512 [ 47.950886][ T3763] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.985138][ T3763] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.997254][ T3768] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.023614][ T3765] netlink: 8 bytes leftover after parsing attributes in process `syz.4.71'. [ 48.044921][ T3768] ext4 filesystem being mounted at /12/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.087981][ T3768] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.72: bg 0: block 328: padding at end of block bitmap is not set [ 48.156644][ T3779] futex_wake_op: syz.4.74 tries to shift op by -1; fix this program [ 48.242167][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.269571][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.486166][ T3791] loop2: detected capacity change from 0 to 128 [ 48.505688][ T3791] syz.2.79: attempt to access beyond end of device [ 48.505688][ T3791] loop2: rw=0, sector=2072, nr_sectors = 1 limit=128 [ 48.809857][ T3806] loop2: detected capacity change from 0 to 512 [ 48.844007][ T3792] loop0: detected capacity change from 0 to 512 [ 48.877913][ T3792] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.892176][ T3792] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.902921][ T29] kauditd_printk_skb: 239 callbacks suppressed [ 48.902933][ T29] audit: type=1400 audit(1754646977.716:551): avc: denied { mounton } for pid=3805 comm="syz.2.82" path="/16/file0" dev="tmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 49.042608][ T3806] EXT4-fs error (device loop2): ext4_iget_extra_inode:5104: inode #15: comm syz.2.82: corrupted in-inode xattr: invalid ea_ino [ 49.071308][ T3806] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.82: couldn't read orphan inode 15 (err -117) [ 49.094059][ T3806] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.112863][ T3806] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.153847][ T3806] capability: warning: `syz.2.82' uses deprecated v2 capabilities in a way that may be insecure [ 49.165788][ T3820] loop4: detected capacity change from 0 to 512 [ 49.169508][ T29] audit: type=1326 audit(1754646977.976:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3821 comm="syz.3.86" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1755eebe9 code=0x7ffc0000 [ 49.198122][ T29] audit: type=1326 audit(1754646977.996:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3821 comm="syz.3.86" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa1755eebe9 code=0x7ffc0000 [ 49.221465][ T29] audit: type=1326 audit(1754646978.006:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3821 comm="syz.3.86" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1755eebe9 code=0x7ffc0000 [ 49.224985][ T3820] EXT4-fs error (device loop4): ext4_iget_extra_inode:5104: inode #15: comm syz.4.85: corrupted in-inode xattr: invalid ea_ino [ 49.244705][ T29] audit: type=1326 audit(1754646978.006:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3821 comm="syz.3.86" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1755eebe9 code=0x7ffc0000 [ 49.244734][ T29] audit: type=1326 audit(1754646978.006:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3821 comm="syz.3.86" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa1755eebe9 code=0x7ffc0000 [ 49.304456][ T29] audit: type=1326 audit(1754646978.006:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3821 comm="syz.3.86" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1755eebe9 code=0x7ffc0000 [ 49.304573][ T29] audit: type=1326 audit(1754646978.006:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3821 comm="syz.3.86" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1755eebe9 code=0x7ffc0000 [ 49.304599][ T29] audit: type=1326 audit(1754646978.006:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3821 comm="syz.3.86" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fa1755eebe9 code=0x7ffc0000 [ 49.304624][ T29] audit: type=1326 audit(1754646978.006:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3821 comm="syz.3.86" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1755eebe9 code=0x7ffc0000 [ 49.305542][ T3820] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.85: couldn't read orphan inode 15 (err -117) [ 49.306492][ T3820] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.307172][ T3820] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.420988][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.462328][ T3799] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 49.512330][ T3835] FAULT_INJECTION: forcing a failure. [ 49.512330][ T3835] name failslab, interval 1, probability 0, space 0, times 0 [ 49.525044][ T3835] CPU: 1 UID: 0 PID: 3835 Comm: syz.1.91 Not tainted 6.16.0-syzkaller-12016-gbec077162bd0 #0 PREEMPT(voluntary) [ 49.525072][ T3835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 49.525086][ T3835] Call Trace: [ 49.525128][ T3835] [ 49.525138][ T3835] __dump_stack+0x1d/0x30 [ 49.525164][ T3835] dump_stack_lvl+0xe8/0x140 [ 49.525189][ T3835] dump_stack+0x15/0x1b [ 49.525206][ T3835] should_fail_ex+0x265/0x280 [ 49.525243][ T3835] ? __se_sys_mount+0xef/0x2e0 [ 49.525345][ T3835] should_failslab+0x8c/0xb0 [ 49.525402][ T3835] __kmalloc_cache_noprof+0x4c/0x320 [ 49.525432][ T3835] ? memdup_user+0x99/0xd0 [ 49.525458][ T3835] __se_sys_mount+0xef/0x2e0 [ 49.525559][ T3835] ? fput+0x8f/0xc0 [ 49.525593][ T3835] ? ksys_write+0x192/0x1a0 [ 49.525636][ T3835] __x64_sys_mount+0x67/0x80 [ 49.525689][ T3835] x64_sys_call+0x2b4d/0x2ff0 [ 49.525710][ T3835] do_syscall_64+0xd2/0x200 [ 49.525733][ T3835] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 49.525784][ T3835] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 49.525806][ T3835] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.525827][ T3835] RIP: 0033:0x7f003ff9ebe9 [ 49.525841][ T3835] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 49.525942][ T3835] RSP: 002b:00007f003e9ff038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 49.525964][ T3827] loop2: detected capacity change from 0 to 256 [ 49.525967][ T3835] RAX: ffffffffffffffda RBX: 00007f00401c5fa0 RCX: 00007f003ff9ebe9 [ 49.525983][ T3835] RDX: 00002000000002c0 RSI: 0000200000000080 RDI: 0000000000000000 [ 49.525999][ T3835] RBP: 00007f003e9ff090 R08: 0000200000000240 R09: 0000000000000000 [ 49.526072][ T3835] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 49.526095][ T3835] R13: 00007f00401c6038 R14: 00007f00401c5fa0 R15: 00007ffe2c0771a8 [ 49.526132][ T3835] [ 49.861353][ T3827] binfmt_misc: register: failed to install interpreter file ./file0 [ 49.932256][ T3845] netlink: 1144 bytes leftover after parsing attributes in process `syz.0.95'. [ 49.951449][ T3845] netlink: 8 bytes leftover after parsing attributes in process `syz.0.95'. [ 50.050982][ T3857] loop1: detected capacity change from 0 to 512 [ 50.062748][ T3857] EXT4-fs error (device loop1): ext4_iget_extra_inode:5104: inode #15: comm syz.1.98: corrupted in-inode xattr: invalid ea_ino [ 50.099938][ T3857] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.98: couldn't read orphan inode 15 (err -117) [ 50.129479][ T3857] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.144141][ T3857] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.417885][ T3849] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 50.464180][ T3890] netlink: 'syz.4.107': attribute type 4 has an invalid length. [ 50.498452][ T3890] netlink: 20 bytes leftover after parsing attributes in process `syz.4.107'. [ 50.577135][ T3894] netlink: 1144 bytes leftover after parsing attributes in process `syz.1.108'. [ 50.627753][ T3894] netlink: 8 bytes leftover after parsing attributes in process `syz.1.108'. [ 50.750544][ T3914] loop1: detected capacity change from 0 to 512 [ 50.771887][ T3914] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.785203][ T3914] ext4 filesystem being mounted at /31/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.841073][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.500536][ T3902] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 51.741011][ T3955] netlink: 1144 bytes leftover after parsing attributes in process `syz.3.126'. [ 51.780505][ T3961] futex_wake_op: syz.0.127 tries to shift op by -1; fix this program [ 51.790252][ T3955] netlink: 8 bytes leftover after parsing attributes in process `syz.3.126'. [ 51.961122][ T3967] binfmt_misc: register: failed to install interpreter file ./file2 [ 52.830362][ T4005] netlink: 1144 bytes leftover after parsing attributes in process `syz.3.139'. [ 52.871224][ T4005] netlink: 8 bytes leftover after parsing attributes in process `syz.3.139'. [ 52.898721][ T4009] loop2: detected capacity change from 0 to 128 [ 52.969877][ T4009] syz.2.141: attempt to access beyond end of device [ 52.969877][ T4009] loop2: rw=0, sector=2072, nr_sectors = 1 limit=128 [ 53.051538][ T4013] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 53.109589][ T4013] bridge_slave_0: left allmulticast mode [ 53.115291][ T4013] bridge_slave_0: left promiscuous mode [ 53.121191][ T4013] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.141922][ T4022] capability: warning: `syz.0.142' uses 32-bit capabilities (legacy support in use) [ 53.152632][ T4013] bridge_slave_1: left allmulticast mode [ 53.158456][ T4013] bridge_slave_1: left promiscuous mode [ 53.164132][ T4013] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.189890][ T4013] bond0: (slave bond_slave_0): Releasing backup interface [ 53.211174][ T4013] bond0: (slave bond_slave_1): Releasing backup interface [ 53.225866][ T4013] team0: Port device team_slave_0 removed [ 53.243702][ T4013] team0: Port device team_slave_1 removed [ 53.251508][ T4013] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 53.258957][ T4013] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 53.267590][ T4030] netlink: 'syz.3.147': attribute type 4 has an invalid length. [ 53.300122][ T4013] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 53.307580][ T4013] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 53.324832][ T4035] netlink: 20 bytes leftover after parsing attributes in process `syz.3.147'. [ 53.494647][ T4041] binfmt_misc: register: failed to install interpreter file ./file2 [ 53.563389][ T4046] loop2: detected capacity change from 0 to 512 [ 53.589085][ T4046] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.607705][ T4046] ext4 filesystem being mounted at /26/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.624172][ T4046] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.152: bg 0: block 328: padding at end of block bitmap is not set [ 53.650947][ T4055] loop3: detected capacity change from 0 to 128 [ 53.659802][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.696468][ T4055] syz.3.155: attempt to access beyond end of device [ 53.696468][ T4055] loop3: rw=0, sector=2072, nr_sectors = 1 limit=128 [ 53.841261][ T4066] netlink: 'syz.4.159': attribute type 4 has an invalid length. [ 53.893858][ T4056] loop0: detected capacity change from 0 to 512 [ 53.960827][ T4066] netlink: 20 bytes leftover after parsing attributes in process `syz.4.159'. [ 53.990694][ T4056] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.078726][ T4056] ext4 filesystem being mounted at /25/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.103188][ T4080] binfmt_misc: register: failed to install interpreter file ./file2 [ 54.169019][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.211403][ T4089] loop3: detected capacity change from 0 to 512 [ 54.253242][ T4091] loop0: detected capacity change from 0 to 1024 [ 54.269554][ T4091] EXT4-fs: Ignoring removed orlov option [ 54.276510][ T4089] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.300142][ T4091] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.322550][ T4089] ext4 filesystem being mounted at /37/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.350083][ T4089] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.166: bg 0: block 328: padding at end of block bitmap is not set [ 54.417972][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.787936][ T29] kauditd_printk_skb: 409 callbacks suppressed [ 54.787951][ T29] audit: type=1326 audit(1754646983.586:970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4111 comm="syz.3.168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1755eebe9 code=0x7ffc0000 [ 54.817530][ T29] audit: type=1326 audit(1754646983.586:971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4111 comm="syz.3.168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1755eebe9 code=0x7ffc0000 [ 54.844381][ T4112] loop3: detected capacity change from 0 to 128 [ 54.855656][ T4112] syz.3.168: attempt to access beyond end of device [ 54.855656][ T4112] loop3: rw=0, sector=2072, nr_sectors = 1 limit=128 [ 54.889657][ T29] audit: type=1326 audit(1754646983.596:972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4111 comm="syz.3.168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa1755eebe9 code=0x7ffc0000 [ 54.913069][ T29] audit: type=1326 audit(1754646983.596:973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4111 comm="syz.3.168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1755eebe9 code=0x7ffc0000 [ 54.936422][ T29] audit: type=1326 audit(1754646983.596:974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4111 comm="syz.3.168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1755eebe9 code=0x7ffc0000 [ 54.959923][ T29] audit: type=1326 audit(1754646983.656:975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4111 comm="syz.3.168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fa1755eebe9 code=0x7ffc0000 [ 54.983113][ T29] audit: type=1326 audit(1754646983.656:976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4111 comm="syz.3.168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1755eebe9 code=0x7ffc0000 [ 54.993727][ T4083] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 55.006500][ T29] audit: type=1326 audit(1754646983.656:977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4111 comm="syz.3.168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fa1755eebe9 code=0x7ffc0000 [ 55.038585][ T29] audit: type=1326 audit(1754646983.656:978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4111 comm="syz.3.168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fa1755eec23 code=0x7ffc0000 [ 55.061653][ T29] audit: type=1326 audit(1754646983.656:979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4111 comm="syz.3.168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fa1755ed69f code=0x7ffc0000 [ 55.090804][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.337978][ T4134] loop3: detected capacity change from 0 to 512 [ 55.369993][ T4134] EXT4-fs error (device loop3): ext4_iget_extra_inode:5104: inode #15: comm syz.3.177: corrupted in-inode xattr: invalid ea_ino [ 55.390029][ T4137] binfmt_misc: register: failed to install interpreter file ./file2 [ 55.395702][ T4134] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.177: couldn't read orphan inode 15 (err -117) [ 55.416003][ T4139] loop2: detected capacity change from 0 to 128 [ 55.430659][ T4134] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.463382][ T4134] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.464500][ T4139] syz.2.179: attempt to access beyond end of device [ 55.464500][ T4139] loop2: rw=0, sector=2072, nr_sectors = 1 limit=128 [ 55.594869][ T4127] loop4: detected capacity change from 0 to 32768 [ 55.712074][ T4127] loop4: p1 p3 < > [ 55.793973][ T4155] loop0: detected capacity change from 0 to 512 [ 55.809476][ T4153] loop3: detected capacity change from 0 to 1024 [ 55.822249][ T4153] EXT4-fs: Ignoring removed orlov option [ 55.845993][ T4153] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.861694][ T4155] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.887930][ T4155] ext4 filesystem being mounted at /29/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.002317][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.435302][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.521472][ T4186] loop0: detected capacity change from 0 to 512 [ 56.529537][ T4186] EXT4-fs error (device loop0): ext4_iget_extra_inode:5104: inode #15: comm syz.0.193: corrupted in-inode xattr: invalid ea_ino [ 56.575912][ T4186] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.193: couldn't read orphan inode 15 (err -117) [ 56.604963][ T4193] loop4: detected capacity change from 0 to 1024 [ 56.613567][ T4193] EXT4-fs: Ignoring removed orlov option [ 56.621812][ T4186] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.635793][ T4186] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.663655][ T4193] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.768401][ T4202] ieee802154 phy0 wpan0: encryption failed: -22 [ 57.033924][ T4219] loop0: detected capacity change from 0 to 512 [ 57.041184][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.074176][ T4219] ext4 filesystem being mounted at /35/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.091546][ T4219] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.204: bg 0: block 328: padding at end of block bitmap is not set [ 57.145267][ T4227] loop4: detected capacity change from 0 to 512 [ 57.171913][ T4227] ext4 filesystem being mounted at /38/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.417726][ T4240] loop2: detected capacity change from 0 to 1024 [ 57.426222][ T4240] EXT4-fs: Ignoring removed orlov option [ 57.536818][ T4245] binfmt_misc: register: failed to install interpreter file ./file2 [ 57.634843][ T4253] loop3: detected capacity change from 0 to 128 [ 57.646052][ T4253] syz.3.215: attempt to access beyond end of device [ 57.646052][ T4253] loop3: rw=0, sector=2072, nr_sectors = 1 limit=128 [ 57.752312][ T4260] loop3: detected capacity change from 0 to 512 [ 57.791421][ T4260] ext4 filesystem being mounted at /48/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.142871][ T4279] ieee802154 phy0 wpan0: encryption failed: -22 [ 58.199469][ T4284] loop3: detected capacity change from 0 to 256 [ 58.211489][ T4284] binfmt_misc: register: failed to install interpreter file ./file0 [ 58.251761][ T4290] loop1: detected capacity change from 0 to 1024 [ 58.258519][ T4290] EXT4-fs: Ignoring removed orlov option [ 58.896679][ T4299] loop2: detected capacity change from 0 to 512 [ 58.921098][ T4299] ext4 filesystem being mounted at /43/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.993905][ T4305] loop2: detected capacity change from 0 to 512 [ 58.995210][ T4307] loop0: detected capacity change from 0 to 256 [ 59.009710][ T4305] ext4 filesystem being mounted at /44/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.010774][ T4307] binfmt_misc: register: failed to install interpreter file ./file0 [ 59.033510][ T4305] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.233: bg 0: block 328: padding at end of block bitmap is not set [ 60.249057][ T4354] loop1: detected capacity change from 0 to 512 [ 60.265412][ T4353] loop2: detected capacity change from 0 to 512 [ 60.274644][ T4354] ext4 filesystem being mounted at /60/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 60.286764][ T4353] EXT4-fs error (device loop2): ext4_iget_extra_inode:5104: inode #15: comm syz.2.250: corrupted in-inode xattr: invalid ea_ino [ 60.302170][ T4353] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.250: couldn't read orphan inode 15 (err -117) [ 60.309238][ T4354] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.249: bg 0: block 328: padding at end of block bitmap is not set [ 60.334481][ T4363] Zero length message leads to an empty skb [ 60.354485][ T4365] futex_wake_op: syz.1.253 tries to shift op by -1; fix this program [ 60.398417][ T4368] netlink: 56 bytes leftover after parsing attributes in process `syz.3.252'. [ 60.411997][ T29] kauditd_printk_skb: 617 callbacks suppressed [ 60.412011][ T29] audit: type=1400 audit(1754646989.216:1597): avc: denied { read } for pid=4355 comm="syz.3.252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 60.450634][ T4372] netlink: 'syz.0.256': attribute type 4 has an invalid length. [ 60.619175][ T4377] binfmt_misc: register: failed to install interpreter file ./file2 [ 60.640693][ T4379] loop0: detected capacity change from 0 to 512 [ 60.674284][ T4379] ext4 filesystem being mounted at /45/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.213430][ T4395] loop2: detected capacity change from 0 to 1024 [ 61.241489][ T4395] EXT4-fs: Ignoring removed orlov option [ 61.610513][ T4404] binfmt_misc: register: failed to install interpreter file ./file2 [ 61.734692][ T4411] loop0: detected capacity change from 0 to 1024 [ 61.751461][ T4411] EXT4-fs: Ignoring removed orlov option [ 61.758393][ T4416] binfmt_misc: register: failed to install interpreter file ./file2 [ 61.965979][ T4431] futex_wake_op: syz.1.274 tries to shift op by -1; fix this program [ 62.238542][ T29] audit: type=1326 audit(1754646991.046:1598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4437 comm="syz.2.276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f137ca6ebe9 code=0x7ffc0000 [ 62.266853][ T29] audit: type=1326 audit(1754646991.066:1599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4437 comm="syz.2.276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=12 compat=0 ip=0x7f137ca6ebe9 code=0x7ffc0000 [ 62.290191][ T29] audit: type=1326 audit(1754646991.066:1600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4437 comm="syz.2.276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f137ca6ebe9 code=0x7ffc0000 [ 62.313836][ T29] audit: type=1326 audit(1754646991.066:1601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4437 comm="syz.2.276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f137ca6ebe9 code=0x7ffc0000 [ 62.337161][ T29] audit: type=1326 audit(1754646991.066:1602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4437 comm="syz.2.276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f137ca6ebe9 code=0x7ffc0000 [ 62.360726][ T29] audit: type=1326 audit(1754646991.066:1603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4437 comm="syz.2.276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f137ca6ebe9 code=0x7ffc0000 [ 62.384134][ T29] audit: type=1326 audit(1754646991.066:1604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4437 comm="syz.2.276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f137ca6ebe9 code=0x7ffc0000 [ 62.407628][ T29] audit: type=1326 audit(1754646991.066:1605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4437 comm="syz.2.276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f137ca6ebe9 code=0x7ffc0000 [ 62.431056][ T29] audit: type=1326 audit(1754646991.066:1606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4437 comm="syz.2.276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f137ca6ebe9 code=0x7ffc0000 [ 62.947466][ T4461] loop0: detected capacity change from 0 to 1024 [ 62.954284][ T4461] EXT4-fs: Ignoring removed orlov option [ 62.980983][ T4456] loop4: detected capacity change from 0 to 1024 [ 62.996844][ T4456] EXT4-fs: Ignoring removed orlov option [ 63.445019][ T4478] binfmt_misc: register: failed to install interpreter file ./file2 [ 63.477901][ T4476] loop2: detected capacity change from 0 to 1024 [ 63.484556][ T4476] EXT4-fs: Ignoring removed orlov option [ 63.512414][ T4485] loop1: detected capacity change from 0 to 512 [ 63.575356][ T4485] EXT4-fs error (device loop1): ext4_iget_extra_inode:5104: inode #15: comm syz.1.290: corrupted in-inode xattr: invalid ea_ino [ 63.609446][ T4485] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.290: couldn't read orphan inode 15 (err -117) [ 63.797488][ T4505] loop1: detected capacity change from 0 to 128 [ 63.834304][ T4505] syz.1.295: attempt to access beyond end of device [ 63.834304][ T4505] loop1: rw=0, sector=2072, nr_sectors = 1 limit=128 [ 64.029090][ T4507] lo speed is unknown, defaulting to 1000 [ 64.051638][ T4507] lo speed is unknown, defaulting to 1000 [ 64.067013][ T4507] lo speed is unknown, defaulting to 1000 [ 64.077422][ T4507] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 64.109087][ T4507] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 64.133920][ T4507] lo speed is unknown, defaulting to 1000 [ 64.141380][ T4507] lo speed is unknown, defaulting to 1000 [ 64.150690][ T4507] lo speed is unknown, defaulting to 1000 [ 64.156723][ T4524] binfmt_misc: register: failed to install interpreter file ./file2 [ 64.157070][ T4507] lo speed is unknown, defaulting to 1000 [ 64.174301][ T4507] lo speed is unknown, defaulting to 1000 [ 64.242724][ T4531] loop1: detected capacity change from 0 to 512 [ 64.276177][ T4521] netlink: 56 bytes leftover after parsing attributes in process `syz.2.300'. [ 64.317892][ T4480] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 64.397066][ T4531] ext4 filesystem being mounted at /69/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.426301][ T4531] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.304: bg 0: block 328: padding at end of block bitmap is not set [ 64.485005][ T4539] loop3: detected capacity change from 0 to 512 [ 64.513520][ T4540] lo speed is unknown, defaulting to 1000 [ 64.638437][ T4539] EXT4-fs error (device loop3): ext4_iget_extra_inode:5104: inode #15: comm syz.3.305: corrupted in-inode xattr: invalid ea_ino [ 64.654700][ T4539] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.305: couldn't read orphan inode 15 (err -117) [ 64.932974][ T4551] loop3: detected capacity change from 0 to 128 [ 64.968155][ T4551] syz.3.307: attempt to access beyond end of device [ 64.968155][ T4551] loop3: rw=0, sector=2072, nr_sectors = 1 limit=128 [ 65.015059][ T4562] binfmt_misc: register: failed to install interpreter file ./file2 [ 65.059808][ T4567] loop3: detected capacity change from 0 to 1024 [ 65.066485][ T4567] EXT4-fs: Ignoring removed orlov option [ 65.209305][ T4592] ieee802154 phy0 wpan0: encryption failed: -22 [ 65.715839][ T4545] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 65.750581][ T4602] netlink: 'syz.4.321': attribute type 4 has an invalid length. [ 65.760294][ T4602] netlink: 20 bytes leftover after parsing attributes in process `syz.4.321'. [ 65.951889][ T4613] loop2: detected capacity change from 0 to 512 [ 65.977394][ T29] kauditd_printk_skb: 280 callbacks suppressed [ 65.977408][ T29] audit: type=1326 audit(1754646994.776:1887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4615 comm="syz.1.327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f003ff9ebe9 code=0x7ffc0000 [ 66.023272][ T29] audit: type=1326 audit(1754646994.816:1888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4615 comm="syz.1.327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f003ff9ebe9 code=0x7ffc0000 [ 66.046684][ T29] audit: type=1326 audit(1754646994.816:1889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4615 comm="syz.1.327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f003ff9ebe9 code=0x7ffc0000 [ 66.070067][ T29] audit: type=1326 audit(1754646994.816:1890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4615 comm="syz.1.327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f003ff9ebe9 code=0x7ffc0000 [ 66.085234][ T4613] ext4 filesystem being mounted at /68/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.093464][ T29] audit: type=1326 audit(1754646994.816:1891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4615 comm="syz.1.327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f003ff9ebe9 code=0x7ffc0000 [ 66.127204][ T29] audit: type=1326 audit(1754646994.816:1892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4615 comm="syz.1.327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f003ff9ebe9 code=0x7ffc0000 [ 66.150766][ T29] audit: type=1326 audit(1754646994.816:1893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4615 comm="syz.1.327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f003ff9ebe9 code=0x7ffc0000 [ 66.174148][ T29] audit: type=1326 audit(1754646994.816:1894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4615 comm="syz.1.327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f003ff9ebe9 code=0x7ffc0000 [ 66.197701][ T29] audit: type=1326 audit(1754646994.816:1895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4615 comm="syz.1.327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f003ff9ebe9 code=0x7ffc0000 [ 66.221309][ T29] audit: type=1326 audit(1754646994.816:1896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4615 comm="syz.1.327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f003ff9ebe9 code=0x7ffc0000 [ 66.271155][ T4610] lo speed is unknown, defaulting to 1000 [ 66.369140][ T4632] loop3: detected capacity change from 0 to 256 [ 66.369332][ T4633] netlink: 'syz.2.332': attribute type 4 has an invalid length. [ 66.387131][ T4632] binfmt_misc: register: failed to install interpreter file ./file0 [ 66.459557][ T4639] loop1: detected capacity change from 0 to 1024 [ 66.471967][ T4639] EXT4-fs: Ignoring removed orlov option [ 66.537593][ T4644] siw: device registration error -23 [ 66.574457][ T4646] block device autoloading is deprecated and will be removed. [ 66.612437][ T4649] ieee802154 phy0 wpan0: encryption failed: -22 [ 66.756412][ T4659] futex_wake_op: syz.4.341 tries to shift op by -1; fix this program [ 66.995492][ T4661] lo speed is unknown, defaulting to 1000 [ 67.380481][ T4668] loop0: detected capacity change from 0 to 512 [ 67.430107][ T4668] ext4 filesystem being mounted at /64/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.466974][ T4668] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.344: bg 0: block 328: padding at end of block bitmap is not set [ 67.812624][ T4694] loop4: detected capacity change from 0 to 512 [ 67.822555][ T4694] EXT4-fs error (device loop4): ext4_iget_extra_inode:5104: inode #15: comm syz.4.350: corrupted in-inode xattr: invalid ea_ino [ 67.837322][ T4694] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.350: couldn't read orphan inode 15 (err -117) [ 67.897717][ T4699] lo speed is unknown, defaulting to 1000 [ 68.077198][ T4710] loop0: detected capacity change from 0 to 512 [ 68.110128][ T4710] ext4 filesystem being mounted at /66/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 68.269136][ T4716] loop0: detected capacity change from 0 to 1024 [ 68.275703][ T4716] EXT4-fs: Ignoring removed orlov option [ 68.299201][ T4673] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 68.335383][ T4706] loop4: detected capacity change from 0 to 512 [ 68.447253][ T4706] ext4 filesystem being mounted at /62/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 68.510321][ T4727] loop1: detected capacity change from 0 to 256 [ 68.520445][ T4727] binfmt_misc: register: failed to install interpreter file ./file0 [ 68.570497][ T4730] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 68.584165][ T4730] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2306 sclass=netlink_route_socket pid=4730 comm=syz.3.357 [ 68.710390][ T4747] loop2: detected capacity change from 0 to 1024 [ 68.717170][ T4747] EXT4-fs: Ignoring removed orlov option [ 69.096003][ T4767] FAULT_INJECTION: forcing a failure. [ 69.096003][ T4767] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 69.109202][ T4767] CPU: 1 UID: 0 PID: 4767 Comm: syz.0.366 Not tainted 6.16.0-syzkaller-12016-gbec077162bd0 #0 PREEMPT(voluntary) [ 69.109228][ T4767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 69.109239][ T4767] Call Trace: [ 69.109244][ T4767] [ 69.109257][ T4767] __dump_stack+0x1d/0x30 [ 69.109276][ T4767] dump_stack_lvl+0xe8/0x140 [ 69.109326][ T4767] dump_stack+0x15/0x1b [ 69.109340][ T4767] should_fail_ex+0x265/0x280 [ 69.109370][ T4767] should_fail+0xb/0x20 [ 69.109475][ T4767] should_fail_usercopy+0x1a/0x20 [ 69.109493][ T4767] _copy_from_user+0x1c/0xb0 [ 69.109597][ T4767] ___sys_sendmsg+0xc1/0x1d0 [ 69.109717][ T4767] __x64_sys_sendmsg+0xd4/0x160 [ 69.109752][ T4767] x64_sys_call+0x191e/0x2ff0 [ 69.109771][ T4767] do_syscall_64+0xd2/0x200 [ 69.109849][ T4767] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 69.109871][ T4767] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 69.109971][ T4767] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.109993][ T4767] RIP: 0033:0x7fbda2e6ebe9 [ 69.110006][ T4767] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 69.110021][ T4767] RSP: 002b:00007fbda18cf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 69.110038][ T4767] RAX: ffffffffffffffda RBX: 00007fbda3095fa0 RCX: 00007fbda2e6ebe9 [ 69.110049][ T4767] RDX: 0000000004008040 RSI: 0000200000000280 RDI: 0000000000000003 [ 69.110080][ T4767] RBP: 00007fbda18cf090 R08: 0000000000000000 R09: 0000000000000000 [ 69.110091][ T4767] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 69.110101][ T4767] R13: 00007fbda3096038 R14: 00007fbda3095fa0 R15: 00007fff3c703c48 [ 69.110119][ T4767] [ 69.360007][ T4763] loop2: detected capacity change from 0 to 512 [ 69.373315][ T4763] ext4 filesystem being mounted at /80/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.450947][ T4734] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 69.494664][ T4785] loop0: detected capacity change from 0 to 1024 [ 69.513519][ T4785] EXT4-fs: Ignoring removed orlov option [ 69.541597][ T4791] loop3: detected capacity change from 0 to 1024 [ 69.549601][ T4791] EXT4-fs: Ignoring removed orlov option [ 69.560883][ T4789] loop4: detected capacity change from 0 to 512 [ 69.616406][ T4789] ext4 filesystem being mounted at /64/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.728496][ T4802] lo speed is unknown, defaulting to 1000 [ 69.803301][ T4803] loop1: detected capacity change from 0 to 1024 [ 69.836153][ T4803] EXT4-fs: Ignoring removed orlov option [ 69.857114][ T3302] EXT4-fs unmount: 59 callbacks suppressed [ 69.857129][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.048756][ T4803] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.249677][ T4809] lo speed is unknown, defaulting to 1000 [ 70.411136][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.424819][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.525908][ T4819] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.567489][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.816199][ T4834] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2306 sclass=netlink_route_socket pid=4834 comm=syz.3.386 [ 70.827681][ T4822] loop1: detected capacity change from 0 to 512 [ 70.839943][ T4822] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.854070][ T4822] ext4 filesystem being mounted at /82/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.889910][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.983523][ T4846] loop4: detected capacity change from 0 to 1024 [ 70.990353][ T4849] loop3: detected capacity change from 0 to 1024 [ 70.990532][ T29] kauditd_printk_skb: 228 callbacks suppressed [ 70.990550][ T29] audit: type=1326 audit(1754646999.786:2125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4828 comm="syz.2.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f137ca6ebe9 code=0x7ffc0000 [ 70.997004][ T4849] EXT4-fs: Ignoring removed orlov option [ 71.002884][ T29] audit: type=1326 audit(1754646999.786:2126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4828 comm="syz.2.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f137ca6ebe9 code=0x7ffc0000 [ 71.023405][ T4846] EXT4-fs: Ignoring removed orlov option [ 71.051461][ T29] audit: type=1326 audit(1754646999.846:2127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4828 comm="syz.2.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f137ca6ebe9 code=0x7ffc0000 [ 71.084640][ T29] audit: type=1326 audit(1754646999.866:2128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4828 comm="syz.2.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f137ca6ebe9 code=0x7ffc0000 [ 71.098566][ T4846] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.108367][ T29] audit: type=1326 audit(1754646999.866:2129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4828 comm="syz.2.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f137ca6ebe9 code=0x7ffc0000 [ 71.144211][ T29] audit: type=1326 audit(1754646999.866:2130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4828 comm="syz.2.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f137ca6ebe9 code=0x7ffc0000 [ 71.167908][ T29] audit: type=1326 audit(1754646999.866:2131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4828 comm="syz.2.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f137ca6ebe9 code=0x7ffc0000 [ 71.174745][ T4849] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.191257][ T29] audit: type=1326 audit(1754646999.866:2132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4828 comm="syz.2.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f137ca6ebe9 code=0x7ffc0000 [ 71.227185][ T29] audit: type=1326 audit(1754646999.866:2133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4828 comm="syz.2.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f137ca6ebe9 code=0x7ffc0000 [ 71.250646][ T29] audit: type=1326 audit(1754646999.866:2134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4828 comm="syz.2.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f137ca6ebe9 code=0x7ffc0000 [ 71.289019][ T4853] lo speed is unknown, defaulting to 1000 [ 71.426970][ T4863] loop0: detected capacity change from 0 to 1024 [ 71.434344][ T4863] EXT4-fs: Ignoring removed orlov option [ 71.581675][ T4863] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.596341][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.617139][ T4865] lo speed is unknown, defaulting to 1000 [ 71.694694][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.710201][ T4875] loop2: detected capacity change from 0 to 512 [ 71.733844][ T4875] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.756699][ T4875] ext4 filesystem being mounted at /89/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 71.772649][ T4875] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.397: bg 0: block 328: padding at end of block bitmap is not set [ 71.882316][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.909771][ T4886] lo speed is unknown, defaulting to 1000 [ 71.930264][ T4892] loop3: detected capacity change from 0 to 512 [ 72.000777][ T4892] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.015737][ T4898] loop1: detected capacity change from 0 to 256 [ 72.025568][ T4898] binfmt_misc: register: failed to install interpreter file ./file0 [ 72.034744][ T4892] ext4 filesystem being mounted at /78/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 72.124886][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.153153][ T4902] netlink: 'syz.3.403': attribute type 4 has an invalid length. [ 72.262244][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.427530][ T4916] lo speed is unknown, defaulting to 1000 [ 72.492725][ T4870] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 72.548831][ T4924] loop4: detected capacity change from 0 to 512 [ 72.568465][ T4924] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.589562][ T4924] ext4 filesystem being mounted at /68/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 72.611422][ T4924] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.411: bg 0: block 328: padding at end of block bitmap is not set [ 72.647007][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.790778][ T4947] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2306 sclass=netlink_route_socket pid=4947 comm=syz.4.417 [ 72.835962][ T4951] tmpfs: Bad value for 'mpol' [ 72.979905][ T4953] lo speed is unknown, defaulting to 1000 [ 72.993809][ T4958] loop3: detected capacity change from 0 to 1024 [ 73.025021][ T4958] EXT4-fs: Ignoring removed orlov option [ 73.086043][ T4958] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.117470][ T4969] lo speed is unknown, defaulting to 1000 [ 73.222156][ T4988] loop2: detected capacity change from 0 to 512 [ 73.265754][ T4988] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.281285][ T4988] ext4 filesystem being mounted at /96/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.330886][ T4996] loop0: detected capacity change from 0 to 128 [ 73.347491][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.368548][ T4996] syz.0.429: attempt to access beyond end of device [ 73.368548][ T4996] loop0: rw=0, sector=2072, nr_sectors = 1 limit=128 [ 73.397800][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.457356][ T5016] loop0: detected capacity change from 0 to 256 [ 73.466728][ T5016] binfmt_misc: register: failed to install interpreter file ./file0 [ 73.664383][ T5018] loop2: detected capacity change from 0 to 512 [ 73.689863][ T5018] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.702640][ T5018] ext4 filesystem being mounted at /98/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.727019][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.789101][ T5026] loop2: detected capacity change from 0 to 512 [ 73.797333][ T5026] EXT4-fs error (device loop2): ext4_iget_extra_inode:5104: inode #15: comm syz.2.438: corrupted in-inode xattr: invalid ea_ino [ 73.810832][ T5026] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.438: couldn't read orphan inode 15 (err -117) [ 73.823380][ T5026] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.836155][ T5026] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.872864][ T4963] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 73.906959][ T5030] netlink: 'syz.4.439': attribute type 4 has an invalid length. [ 73.964295][ T5039] loop4: detected capacity change from 0 to 1024 [ 73.975141][ T5039] EXT4-fs: Ignoring removed orlov option [ 73.986836][ T5039] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.106825][ T5053] netlink: 8 bytes leftover after parsing attributes in process `syz.3.447'. [ 74.207179][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.266635][ T5064] loop4: detected capacity change from 0 to 512 [ 74.275293][ T5064] EXT4-fs error (device loop4): ext4_iget_extra_inode:5104: inode #15: comm syz.4.450: corrupted in-inode xattr: invalid ea_ino [ 74.289861][ T5064] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.450: couldn't read orphan inode 15 (err -117) [ 74.303112][ T5064] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.316039][ T5064] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.448759][ T5073] loop1: detected capacity change from 0 to 512 [ 74.471335][ T5073] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.483983][ T5073] ext4 filesystem being mounted at /91/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.514078][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.533506][ T5081] netlink: 'syz.0.454': attribute type 4 has an invalid length. [ 75.070918][ T5102] loop1: detected capacity change from 0 to 1024 [ 75.078633][ T5102] EXT4-fs: Ignoring removed orlov option [ 75.080382][ T5058] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 75.106301][ T5102] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.130751][ T5108] futex_wake_op: syz.2.462 tries to shift op by -1; fix this program [ 75.192910][ T5106] loop0: detected capacity change from 0 to 512 [ 75.222045][ T5113] loop3: detected capacity change from 0 to 512 [ 75.245719][ T5106] EXT4-fs error (device loop0): ext4_iget_extra_inode:5104: inode #15: comm syz.0.461: corrupted in-inode xattr: invalid ea_ino [ 75.259576][ T5106] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.461: couldn't read orphan inode 15 (err -117) [ 75.272105][ T5106] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.285243][ T5106] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.332272][ T5113] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.420026][ T5126] lo speed is unknown, defaulting to 1000 [ 75.458123][ T5113] ext4 filesystem being mounted at /98/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 75.477658][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.504705][ T5113] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.464: bg 0: block 328: padding at end of block bitmap is not set [ 75.586086][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.820520][ T5139] lo speed is unknown, defaulting to 1000 [ 75.913470][ T5148] loop3: detected capacity change from 0 to 512 [ 75.955646][ T5150] siw: device registration error -23 [ 75.966954][ T5148] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.007216][ T5148] ext4 filesystem being mounted at /102/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.165445][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.199412][ T29] kauditd_printk_skb: 225 callbacks suppressed [ 76.199430][ T29] audit: type=1326 audit(1754647005.006:2360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5159 comm="syz.3.477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1755eebe9 code=0x7ffc0000 [ 76.229074][ T29] audit: type=1326 audit(1754647005.006:2361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5159 comm="syz.3.477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1755eebe9 code=0x7ffc0000 [ 76.319434][ T5161] lo speed is unknown, defaulting to 1000 [ 76.486230][ T5164] loop1: detected capacity change from 0 to 512 [ 76.566466][ T5164] EXT4-fs error (device loop1): ext4_iget_extra_inode:5104: inode #15: comm syz.1.478: corrupted in-inode xattr: invalid ea_ino [ 76.645305][ T29] audit: type=1326 audit(1754647005.026:2362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5159 comm="syz.3.477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa1755eebe9 code=0x7ffc0000 [ 76.668700][ T29] audit: type=1326 audit(1754647005.026:2363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5159 comm="syz.3.477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1755eebe9 code=0x7ffc0000 [ 76.692125][ T29] audit: type=1326 audit(1754647005.026:2364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5159 comm="syz.3.477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1755eebe9 code=0x7ffc0000 [ 76.715469][ T29] audit: type=1326 audit(1754647005.026:2365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5159 comm="syz.3.477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa1755eebe9 code=0x7ffc0000 [ 76.738759][ T29] audit: type=1326 audit(1754647005.026:2366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5159 comm="syz.3.477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1755eebe9 code=0x7ffc0000 [ 76.762312][ T29] audit: type=1326 audit(1754647005.026:2367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5159 comm="syz.3.477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1755eebe9 code=0x7ffc0000 [ 76.785791][ T29] audit: type=1326 audit(1754647005.026:2368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5159 comm="syz.3.477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fa1755eebe9 code=0x7ffc0000 [ 76.809133][ T29] audit: type=1326 audit(1754647005.026:2369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5159 comm="syz.3.477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1755eebe9 code=0x7ffc0000 [ 76.849155][ T5164] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.478: couldn't read orphan inode 15 (err -117) [ 76.861834][ T5164] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.896360][ T5164] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.003476][ T5178] netlink: 8 bytes leftover after parsing attributes in process `syz.2.484'. [ 77.027008][ T5182] netlink: 'syz.0.486': attribute type 4 has an invalid length. [ 77.040962][ T5182] netlink: 20 bytes leftover after parsing attributes in process `syz.0.486'. [ 77.132063][ T5200] loop1: detected capacity change from 0 to 512 [ 77.150744][ T5200] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.165471][ T5200] ext4 filesystem being mounted at /98/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 77.181454][ T5200] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.493: bg 0: block 328: padding at end of block bitmap is not set [ 77.212121][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.353012][ T5194] loop0: detected capacity change from 0 to 512 [ 77.370905][ T5194] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.385345][ T5194] ext4 filesystem being mounted at /94/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 77.418824][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.456666][ T5222] loop3: detected capacity change from 0 to 512 [ 77.482316][ T5222] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.499369][ T5222] ext4 filesystem being mounted at /108/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 77.499680][ T5227] futex_wake_op: syz.0.495 tries to shift op by -1; fix this program [ 77.560824][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.622597][ T5232] loop3: detected capacity change from 0 to 512 [ 77.630702][ T5232] EXT4-fs error (device loop3): ext4_iget_extra_inode:5104: inode #15: comm syz.3.497: corrupted in-inode xattr: invalid ea_ino [ 77.644239][ T5232] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.497: couldn't read orphan inode 15 (err -117) [ 77.656732][ T5232] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.669636][ T5232] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.744773][ T5237] loop3: detected capacity change from 0 to 128 [ 77.754654][ T5235] lo speed is unknown, defaulting to 1000 [ 77.771147][ T5237] syz.3.498: attempt to access beyond end of device [ 77.771147][ T5237] loop3: rw=0, sector=2072, nr_sectors = 1 limit=128 [ 77.820322][ T5239] netlink: 'syz.3.499': attribute type 4 has an invalid length. [ 77.833070][ T5239] netlink: 20 bytes leftover after parsing attributes in process `syz.3.499'. [ 77.915373][ T5190] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 78.072977][ T5251] binfmt_misc: register: failed to install interpreter file ./file2 [ 78.145158][ T5258] loop1: detected capacity change from 0 to 512 [ 78.206625][ T5258] EXT4-fs error (device loop1): ext4_iget_extra_inode:5104: inode #15: comm syz.1.508: corrupted in-inode xattr: invalid ea_ino [ 78.287334][ T5258] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.508: couldn't read orphan inode 15 (err -117) [ 78.335846][ T5271] loop2: detected capacity change from 0 to 128 [ 78.355942][ T5258] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.428372][ T5271] syz.2.510: attempt to access beyond end of device [ 78.428372][ T5271] loop2: rw=0, sector=2072, nr_sectors = 1 limit=128 [ 78.448868][ T5258] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.520230][ T5254] loop3: detected capacity change from 0 to 512 [ 78.560730][ T5279] netlink: 20 bytes leftover after parsing attributes in process `syz.4.512'. [ 78.611839][ T5254] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.627852][ T5254] ext4 filesystem being mounted at /114/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 78.675987][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.840088][ T5315] FAULT_INJECTION: forcing a failure. [ 78.840088][ T5315] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 78.853351][ T5315] CPU: 0 UID: 0 PID: 5315 Comm: syz.1.515 Not tainted 6.16.0-syzkaller-12016-gbec077162bd0 #0 PREEMPT(voluntary) [ 78.853398][ T5315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 78.853415][ T5315] Call Trace: [ 78.853423][ T5315] [ 78.853432][ T5315] __dump_stack+0x1d/0x30 [ 78.853466][ T5315] dump_stack_lvl+0xe8/0x140 [ 78.853506][ T5315] dump_stack+0x15/0x1b [ 78.853526][ T5315] should_fail_ex+0x265/0x280 [ 78.853571][ T5315] should_fail+0xb/0x20 [ 78.853634][ T5315] should_fail_usercopy+0x1a/0x20 [ 78.853654][ T5315] _copy_from_user+0x1c/0xb0 [ 78.853683][ T5315] ___sys_sendmsg+0xc1/0x1d0 [ 78.853782][ T5315] __x64_sys_sendmsg+0xd4/0x160 [ 78.853832][ T5315] x64_sys_call+0x191e/0x2ff0 [ 78.853859][ T5315] do_syscall_64+0xd2/0x200 [ 78.853956][ T5315] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 78.853987][ T5315] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 78.854073][ T5315] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.854094][ T5315] RIP: 0033:0x7f003ff9ebe9 [ 78.854109][ T5315] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 78.854148][ T5315] RSP: 002b:00007f003e9bd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 78.854172][ T5315] RAX: ffffffffffffffda RBX: 00007f00401c6180 RCX: 00007f003ff9ebe9 [ 78.854185][ T5315] RDX: 0000000020000080 RSI: 0000200000005780 RDI: 0000000000000008 [ 78.854198][ T5315] RBP: 00007f003e9bd090 R08: 0000000000000000 R09: 0000000000000000 [ 78.854210][ T5315] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 78.854221][ T5315] R13: 00007f00401c6218 R14: 00007f00401c6180 R15: 00007ffe2c0771a8 [ 78.854269][ T5315] [ 79.325772][ T5318] loop3: detected capacity change from 0 to 512 [ 79.334016][ T5318] EXT4-fs error (device loop3): ext4_iget_extra_inode:5104: inode #15: comm syz.3.523: corrupted in-inode xattr: invalid ea_ino [ 79.347479][ T5274] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 79.356521][ T5318] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.523: couldn't read orphan inode 15 (err -117) [ 79.373574][ T5318] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.386477][ T5318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.401372][ T5321] ieee802154 phy0 wpan0: encryption failed: -22 [ 79.641670][ T5338] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 79.664639][ T5340] netlink: 60 bytes leftover after parsing attributes in process `syz.4.531'. [ 79.674056][ T5340] netlink: 60 bytes leftover after parsing attributes in process `syz.4.531'. [ 79.720709][ T5338] netlink: 8 bytes leftover after parsing attributes in process `syz.4.531'. [ 79.749945][ T5351] lo speed is unknown, defaulting to 1000 [ 79.986933][ T5357] loop4: detected capacity change from 0 to 1024 [ 79.997155][ T5357] EXT4-fs: Ignoring removed orlov option [ 80.028965][ T5357] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.098992][ T5362] loop3: detected capacity change from 0 to 512 [ 80.107518][ T5362] EXT4-fs error (device loop3): ext4_iget_extra_inode:5104: inode #15: comm syz.3.536: corrupted in-inode xattr: invalid ea_ino [ 80.121362][ T5362] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.536: couldn't read orphan inode 15 (err -117) [ 80.134146][ T5362] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.146979][ T5362] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.324202][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.503264][ T5347] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 80.578455][ T5404] ieee802154 phy0 wpan0: encryption failed: -22 [ 80.705806][ T5406] lo speed is unknown, defaulting to 1000 [ 80.801192][ T5419] loop3: detected capacity change from 0 to 512 [ 80.808695][ T5417] loop1: detected capacity change from 0 to 1024 [ 80.815938][ T5417] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 80.828289][ T5419] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.828698][ T5417] EXT4-fs error (device loop1): ext4_map_blocks:814: inode #3: block 1: comm syz.1.553: lblock 1 mapped to illegal pblock 1 (length 1) [ 80.841820][ T5419] ext4 filesystem being mounted at /134/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.857084][ T5417] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.553: Failed to acquire dquot type 0 [ 80.878165][ T5417] EXT4-fs error (device loop1): ext4_free_blocks:6696: comm syz.1.553: Freeing blocks not in datazone - block = 0, count = 4096 [ 80.910628][ T5424] lo speed is unknown, defaulting to 1000 [ 80.992267][ T5419] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.556: bg 0: block 328: padding at end of block bitmap is not set [ 81.018716][ T5417] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.553: Invalid inode bitmap blk 0 in block_group 0 [ 81.039320][ T5417] EXT4-fs error (device loop1) in ext4_free_inode:361: Corrupt filesystem [ 81.067187][ T5417] EXT4-fs (loop1): 1 orphan inode deleted [ 81.075795][ T5417] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.230598][ T5426] FAULT_INJECTION: forcing a failure. [ 81.230598][ T5426] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 81.243937][ T5426] CPU: 1 UID: 0 PID: 5426 Comm: syz.2.558 Not tainted 6.16.0-syzkaller-12016-gbec077162bd0 #0 PREEMPT(voluntary) [ 81.244002][ T5426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 81.244015][ T5426] Call Trace: [ 81.244021][ T5426] [ 81.244028][ T5426] __dump_stack+0x1d/0x30 [ 81.244054][ T5426] dump_stack_lvl+0xe8/0x140 [ 81.244080][ T5426] dump_stack+0x15/0x1b [ 81.244103][ T5426] should_fail_ex+0x265/0x280 [ 81.244156][ T5426] should_fail+0xb/0x20 [ 81.244252][ T5426] should_fail_usercopy+0x1a/0x20 [ 81.244278][ T5426] _copy_from_user+0x1c/0xb0 [ 81.244312][ T5426] ___sys_sendmsg+0xc1/0x1d0 [ 81.244377][ T5426] __x64_sys_sendmsg+0xd4/0x160 [ 81.244415][ T5426] x64_sys_call+0x191e/0x2ff0 [ 81.244448][ T5426] do_syscall_64+0xd2/0x200 [ 81.244473][ T5426] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 81.244523][ T5426] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 81.244553][ T5426] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.244582][ T5426] RIP: 0033:0x7f137ca6ebe9 [ 81.244597][ T5426] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 81.244618][ T5426] RSP: 002b:00007f137b4d7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 81.244707][ T5426] RAX: ffffffffffffffda RBX: 00007f137cc95fa0 RCX: 00007f137ca6ebe9 [ 81.244723][ T5426] RDX: 0000000020008000 RSI: 0000200000003380 RDI: 0000000000000003 [ 81.244739][ T5426] RBP: 00007f137b4d7090 R08: 0000000000000000 R09: 0000000000000000 [ 81.244751][ T5426] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 81.244763][ T5426] R13: 00007f137cc96038 R14: 00007f137cc95fa0 R15: 00007ffe52f08488 [ 81.244862][ T5426] [ 81.435523][ T1868] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 81.454678][ T1868] __quota_error: 193 callbacks suppressed [ 81.454694][ T1868] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 81.469111][ T1868] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:6: Failed to release dquot type 0 [ 81.486420][ T29] audit: type=1326 audit(1754647010.296:2561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5431 comm="syz.2.562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f137ca6ebe9 code=0x7ffc0000 [ 81.489501][ T5429] loop0: detected capacity change from 0 to 1024 [ 81.518448][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.530629][ T5429] EXT4-fs: Ignoring removed orlov option [ 81.540706][ T29] audit: type=1326 audit(1754647010.346:2562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5431 comm="syz.2.562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f137ca6ebe9 code=0x7ffc0000 [ 81.564149][ T29] audit: type=1326 audit(1754647010.346:2563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5431 comm="syz.2.562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f137ca6ebe9 code=0x7ffc0000 [ 81.587562][ T29] audit: type=1326 audit(1754647010.346:2564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5431 comm="syz.2.562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f137ca6ebe9 code=0x7ffc0000 [ 81.610876][ T29] audit: type=1326 audit(1754647010.346:2565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5431 comm="syz.2.562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f137ca6ebe9 code=0x7ffc0000 [ 81.634110][ T29] audit: type=1326 audit(1754647010.346:2566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5431 comm="syz.2.562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f137ca6ebe9 code=0x7ffc0000 [ 81.657633][ T29] audit: type=1326 audit(1754647010.346:2567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5431 comm="syz.2.562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f137ca6ebe9 code=0x7ffc0000 [ 81.681028][ T29] audit: type=1326 audit(1754647010.346:2568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5431 comm="syz.2.562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f137ca6ebe9 code=0x7ffc0000 [ 81.704292][ T29] audit: type=1326 audit(1754647010.346:2569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5431 comm="syz.2.562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f137ca6ebe9 code=0x7ffc0000 [ 81.835014][ T5446] netlink: 8 bytes leftover after parsing attributes in process `syz.3.557'. [ 81.875988][ T5446] bond1: entered promiscuous mode [ 81.881098][ T5446] bond1: entered allmulticast mode [ 81.897716][ T5446] 8021q: adding VLAN 0 to HW filter on device bond1 [ 81.971647][ T5454] loop4: detected capacity change from 0 to 1024 [ 81.978523][ T5454] EXT4-fs: Ignoring removed orlov option [ 82.052363][ T5452] lo speed is unknown, defaulting to 1000 [ 82.312944][ T5481] ieee802154 phy0 wpan0: encryption failed: -22 [ 82.926500][ T5459] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 83.013972][ T5503] loop2: detected capacity change from 0 to 1024 [ 83.020735][ T5503] EXT4-fs: Ignoring removed orlov option [ 83.028206][ T5507] futex_wake_op: syz.4.576 tries to shift op by -1; fix this program [ 83.374885][ T5524] lo speed is unknown, defaulting to 1000 [ 83.482787][ T5521] lo speed is unknown, defaulting to 1000 [ 83.614834][ T5537] loop0: detected capacity change from 0 to 128 [ 83.628122][ T5537] syz.0.584: attempt to access beyond end of device [ 83.628122][ T5537] loop0: rw=0, sector=2072, nr_sectors = 1 limit=128 [ 84.007580][ T5561] loop3: detected capacity change from 0 to 1024 [ 84.031963][ T5561] EXT4-fs: Ignoring removed orlov option [ 84.178279][ T5568] loop1: detected capacity change from 0 to 256 [ 84.189896][ T5568] binfmt_misc: register: failed to install interpreter file ./file0 [ 84.341374][ T5572] lo speed is unknown, defaulting to 1000 [ 84.885590][ T5611] block device autoloading is deprecated and will be removed. [ 85.048348][ T5622] lo speed is unknown, defaulting to 1000 [ 85.126567][ T5629] loop3: detected capacity change from 0 to 512 [ 85.134986][ T5629] EXT4-fs error (device loop3): ext4_iget_extra_inode:5104: inode #15: comm syz.3.611: corrupted in-inode xattr: invalid ea_ino [ 85.148838][ T5629] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.611: couldn't read orphan inode 15 (err -117) [ 85.306505][ T5586] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 85.409118][ T5641] lo speed is unknown, defaulting to 1000 [ 85.784058][ T5674] loop1: detected capacity change from 0 to 512 [ 85.794017][ T5674] EXT4-fs error (device loop1): ext4_iget_extra_inode:5104: inode #15: comm syz.1.623: corrupted in-inode xattr: invalid ea_ino [ 85.812030][ T5674] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.623: couldn't read orphan inode 15 (err -117) [ 86.064972][ T5687] loop3: detected capacity change from 0 to 1024 [ 86.072479][ T5687] EXT4-fs: Ignoring removed orlov option [ 86.137461][ T5648] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 86.239063][ T5697] loop1: detected capacity change from 0 to 128 [ 86.255409][ T5697] syz.1.630: attempt to access beyond end of device [ 86.255409][ T5697] loop1: rw=0, sector=2072, nr_sectors = 1 limit=128 [ 86.354438][ T5700] lo speed is unknown, defaulting to 1000 [ 86.563730][ T5702] binfmt_misc: register: failed to install interpreter file ./file2 [ 86.843741][ T5719] loop0: detected capacity change from 0 to 1024 [ 86.851336][ T5719] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 86.863723][ T5719] EXT4-fs error (device loop0): ext4_map_blocks:814: inode #3: block 1: comm syz.0.638: lblock 1 mapped to illegal pblock 1 (length 1) [ 86.877906][ T5719] __quota_error: 229 callbacks suppressed [ 86.877925][ T5719] Quota error (device loop0): write_blk: dquota write failed [ 86.891152][ T5719] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 86.902245][ T5719] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.638: Failed to acquire dquot type 0 [ 86.914128][ T5719] EXT4-fs error (device loop0): ext4_free_blocks:6696: comm syz.0.638: Freeing blocks not in datazone - block = 0, count = 4096 [ 86.929718][ T5719] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm syz.0.638: Invalid inode bitmap blk 0 in block_group 0 [ 86.974960][ T12] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 86.992180][ T5719] EXT4-fs error (device loop0) in ext4_free_inode:361: Corrupt filesystem [ 87.016513][ T5719] EXT4-fs (loop0): 1 orphan inode deleted [ 87.022483][ T12] Quota error (device loop0): remove_tree: Can't read quota data block 1 [ 87.030981][ T12] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:0: Failed to release dquot type 0 [ 87.333056][ T5737] lo speed is unknown, defaulting to 1000 [ 87.562463][ T5747] lo speed is unknown, defaulting to 1000 [ 87.666812][ T5712] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 87.825793][ T5750] loop3: detected capacity change from 0 to 1024 [ 87.832989][ T5750] EXT4-fs: Ignoring removed orlov option [ 87.929860][ T5752] binfmt_misc: register: failed to install interpreter file ./file2 [ 87.949845][ T5755] FAULT_INJECTION: forcing a failure. [ 87.949845][ T5755] name failslab, interval 1, probability 0, space 0, times 0 [ 87.962685][ T5755] CPU: 1 UID: 0 PID: 5755 Comm: syz.1.647 Not tainted 6.16.0-syzkaller-12016-gbec077162bd0 #0 PREEMPT(voluntary) [ 87.962723][ T5755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 87.962740][ T5755] Call Trace: [ 87.962749][ T5755] [ 87.962758][ T5755] __dump_stack+0x1d/0x30 [ 87.962883][ T5755] dump_stack_lvl+0xe8/0x140 [ 87.962969][ T5755] dump_stack+0x15/0x1b [ 87.962992][ T5755] should_fail_ex+0x265/0x280 [ 87.963109][ T5755] ? __se_sys_mount+0xef/0x2e0 [ 87.963138][ T5755] should_failslab+0x8c/0xb0 [ 87.963163][ T5755] __kmalloc_cache_noprof+0x4c/0x320 [ 87.963332][ T5755] ? memdup_user+0x99/0xd0 [ 87.963369][ T5755] __se_sys_mount+0xef/0x2e0 [ 87.963399][ T5755] ? fput+0x8f/0xc0 [ 87.963489][ T5755] ? ksys_write+0x192/0x1a0 [ 87.963519][ T5755] __x64_sys_mount+0x67/0x80 [ 87.963550][ T5755] x64_sys_call+0x2b4d/0x2ff0 [ 87.963581][ T5755] do_syscall_64+0xd2/0x200 [ 87.963613][ T5755] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 87.963722][ T5755] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 87.963825][ T5755] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.963846][ T5755] RIP: 0033:0x7f003ff9ebe9 [ 87.963861][ T5755] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 87.963883][ T5755] RSP: 002b:00007f003e9ff038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 87.963908][ T5755] RAX: ffffffffffffffda RBX: 00007f00401c5fa0 RCX: 00007f003ff9ebe9 [ 87.963929][ T5755] RDX: 00002000000002c0 RSI: 0000200000000080 RDI: 0000000000000000 [ 87.964012][ T5755] RBP: 00007f003e9ff090 R08: 0000200000000240 R09: 0000000000000000 [ 87.964024][ T5755] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 87.964041][ T5755] R13: 00007f00401c6038 R14: 00007f00401c5fa0 R15: 00007ffe2c0771a8 [ 87.964063][ T5755] [ 88.226310][ T5759] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 88.244619][ T5762] ieee802154 phy0 wpan0: encryption failed: -22 [ 88.272862][ T5767] loop0: detected capacity change from 0 to 1024 [ 88.275725][ T5769] ieee802154 phy0 wpan0: encryption failed: -22 [ 88.279588][ T5767] EXT4-fs: Ignoring removed orlov option [ 88.301043][ T5771] loop3: detected capacity change from 0 to 1024 [ 88.307976][ T5771] EXT4-fs: Ignoring removed orlov option [ 89.044477][ T5804] lo speed is unknown, defaulting to 1000 [ 89.238429][ T29] audit: type=1400 audit(1754647018.016:2799): avc: granted { setsecparam } for pid=5805 comm="syz.2.662" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 89.323260][ T5808] tipc: Started in network mode [ 89.328244][ T5808] tipc: Node identity 82e22214bbd7, cluster identity 4711 [ 89.335418][ T5808] tipc: Enabled bearer , priority 0 [ 89.387421][ T5808] syzkaller0: entered promiscuous mode [ 89.392965][ T5808] syzkaller0: entered allmulticast mode [ 89.402568][ T5812] loop4: detected capacity change from 0 to 512 [ 89.424641][ T5808] tipc: Resetting bearer [ 89.431724][ T5812] ext4 filesystem being mounted at /117/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.455055][ T5808] tipc: Resetting bearer [ 89.463315][ T5812] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.666: bg 0: block 328: padding at end of block bitmap is not set [ 89.464021][ T5808] tipc: Disabling bearer [ 89.545617][ T5825] loop1: detected capacity change from 0 to 1024 [ 89.553457][ T5825] EXT4-fs: Ignoring removed orlov option [ 89.769958][ T5839] loop0: detected capacity change from 0 to 1024 [ 89.778109][ T5839] EXT4-fs: Ignoring removed orlov option [ 89.856791][ T5847] binfmt_misc: register: failed to install interpreter file ./file2 [ 90.083504][ T29] audit: type=1400 audit(1754647018.886:2800): avc: denied { nlmsg_write } for pid=5858 comm="syz.0.677" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 90.120520][ T5861] loop0: detected capacity change from 0 to 256 [ 90.129200][ T5861] binfmt_misc: register: failed to install interpreter file ./file0 [ 90.349338][ T5871] loop2: detected capacity change from 0 to 512 [ 90.360687][ T5871] ext4 filesystem being mounted at /145/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.374381][ T5870] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.679: bg 0: block 328: padding at end of block bitmap is not set [ 90.425271][ T5869] lo speed is unknown, defaulting to 1000 [ 90.457933][ T5877] siw: device registration error -23 [ 90.458449][ T5878] lo speed is unknown, defaulting to 1000 [ 90.581655][ T29] audit: type=1326 audit(1754647019.386:2801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5889 comm="syz.2.687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f137ca6ebe9 code=0x7ffc0000 [ 90.609889][ T5891] loop2: detected capacity change from 0 to 128 [ 90.622806][ T29] audit: type=1326 audit(1754647019.416:2802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5889 comm="syz.2.687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f137ca6ebe9 code=0x7ffc0000 [ 90.626719][ T5891] /dev/loop2: Can't open blockdev [ 90.646526][ T29] audit: type=1326 audit(1754647019.416:2803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5889 comm="syz.2.687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f137ca6ebe9 code=0x7ffc0000 [ 90.674845][ T29] audit: type=1326 audit(1754647019.416:2804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5889 comm="syz.2.687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f137ca6ebe9 code=0x7ffc0000 [ 90.698230][ T29] audit: type=1326 audit(1754647019.416:2805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5889 comm="syz.2.687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f137ca6ebe9 code=0x7ffc0000 [ 90.782598][ T5897] loop2: detected capacity change from 0 to 1024 [ 90.794182][ T5897] EXT4-fs: Ignoring removed orlov option [ 90.823491][ T5898] loop1: detected capacity change from 0 to 512 [ 90.867878][ T5898] EXT4-fs error (device loop1): ext4_iget_extra_inode:5104: inode #15: comm syz.1.688: corrupted in-inode xattr: invalid ea_ino [ 90.890367][ T5907] loop4: detected capacity change from 0 to 512 [ 90.963910][ T5898] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.688: couldn't read orphan inode 15 (err -117) [ 91.058098][ T5907] ext4 filesystem being mounted at /125/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.072887][ T5907] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.692: bg 0: block 328: padding at end of block bitmap is not set [ 91.246652][ T5928] loop4: detected capacity change from 0 to 1024 [ 91.255145][ T5928] EXT4-fs: Ignoring removed orlov option [ 91.273800][ T5917] lo speed is unknown, defaulting to 1000 [ 91.275854][ T5931] loop0: detected capacity change from 0 to 128 [ 91.289033][ T5931] syz.0.700: attempt to access beyond end of device [ 91.289033][ T5931] loop0: rw=0, sector=2072, nr_sectors = 1 limit=128 [ 91.380563][ T5941] loop0: detected capacity change from 0 to 1024 [ 91.387210][ T5941] EXT4-fs: Ignoring removed orlov option [ 91.603722][ T5947] lo speed is unknown, defaulting to 1000 [ 91.730333][ T5953] loop2: detected capacity change from 0 to 512 [ 91.780972][ T5953] ext4 filesystem being mounted at /151/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.805813][ T5953] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.706: bg 0: block 328: padding at end of block bitmap is not set [ 91.937212][ T5970] ieee802154 phy0 wpan0: encryption failed: -22 [ 92.177857][ T5976] lo speed is unknown, defaulting to 1000 [ 92.223067][ T5980] loop4: detected capacity change from 0 to 512 [ 92.234729][ T5982] loop3: detected capacity change from 0 to 1024 [ 92.250633][ T5980] EXT4-fs error (device loop4): ext4_iget_extra_inode:5104: inode #15: comm syz.4.714: corrupted in-inode xattr: invalid ea_ino [ 92.259362][ T5982] EXT4-fs: Ignoring removed mblk_io_submit option [ 92.278155][ T5980] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.714: couldn't read orphan inode 15 (err -117) [ 92.315224][ T29] kauditd_printk_skb: 60 callbacks suppressed [ 92.315241][ T29] audit: type=1400 audit(1754647021.116:2866): avc: denied { name_connect } for pid=5981 comm="syz.3.715" dest=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 92.397050][ T5994] loop0: detected capacity change from 0 to 512 [ 92.423091][ T5994] ext4 filesystem being mounted at /134/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 92.436488][ T5994] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.719: bg 0: block 328: padding at end of block bitmap is not set [ 92.460700][ T6003] loop3: detected capacity change from 0 to 1024 [ 92.467702][ T6003] EXT4-fs: Ignoring removed orlov option [ 92.492680][ T29] audit: type=1326 audit(1754647021.296:2867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6008 comm="syz.4.724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b6e77ebe9 code=0x7ffc0000 [ 92.519887][ T29] audit: type=1326 audit(1754647021.326:2868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6008 comm="syz.4.724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0b6e77ebe9 code=0x7ffc0000 [ 92.543469][ T29] audit: type=1326 audit(1754647021.346:2869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6008 comm="syz.4.724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b6e77ebe9 code=0x7ffc0000 [ 92.566961][ T29] audit: type=1326 audit(1754647021.346:2870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6008 comm="syz.4.724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b6e77ebe9 code=0x7ffc0000 [ 92.590355][ T29] audit: type=1326 audit(1754647021.346:2871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6008 comm="syz.4.724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f0b6e77ebe9 code=0x7ffc0000 [ 92.613733][ T29] audit: type=1326 audit(1754647021.346:2872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6008 comm="syz.4.724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b6e77ebe9 code=0x7ffc0000 [ 92.616298][ T6009] loop4: detected capacity change from 0 to 128 [ 92.637105][ T29] audit: type=1326 audit(1754647021.346:2873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6008 comm="syz.4.724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f0b6e77ebe9 code=0x7ffc0000 [ 92.637170][ T29] audit: type=1326 audit(1754647021.346:2874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6008 comm="syz.4.724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f0b6e77ec23 code=0x7ffc0000 [ 92.650974][ T6009] syz.4.724: attempt to access beyond end of device [ 92.650974][ T6009] loop4: rw=0, sector=2072, nr_sectors = 1 limit=128 [ 92.667336][ T29] audit: type=1326 audit(1754647021.346:2875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6008 comm="syz.4.724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f0b6e77d69f code=0x7ffc0000 [ 92.855193][ T6022] FAULT_INJECTION: forcing a failure. [ 92.855193][ T6022] name failslab, interval 1, probability 0, space 0, times 0 [ 92.867904][ T6022] CPU: 1 UID: 0 PID: 6022 Comm: syz.4.729 Not tainted 6.16.0-syzkaller-12016-gbec077162bd0 #0 PREEMPT(voluntary) [ 92.867937][ T6022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 92.867950][ T6022] Call Trace: [ 92.867967][ T6022] [ 92.867976][ T6022] __dump_stack+0x1d/0x30 [ 92.868049][ T6022] dump_stack_lvl+0xe8/0x140 [ 92.868072][ T6022] dump_stack+0x15/0x1b [ 92.868090][ T6022] should_fail_ex+0x265/0x280 [ 92.868122][ T6022] ? __se_sys_memfd_create+0x1cc/0x590 [ 92.868198][ T6022] should_failslab+0x8c/0xb0 [ 92.868222][ T6022] __kmalloc_cache_noprof+0x4c/0x320 [ 92.868278][ T6022] ? fput+0x8f/0xc0 [ 92.868388][ T6022] __se_sys_memfd_create+0x1cc/0x590 [ 92.868412][ T6022] __x64_sys_memfd_create+0x31/0x40 [ 92.868432][ T6022] x64_sys_call+0x2abe/0x2ff0 [ 92.868488][ T6022] do_syscall_64+0xd2/0x200 [ 92.868517][ T6022] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 92.868547][ T6022] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 92.868607][ T6022] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.868630][ T6022] RIP: 0033:0x7f0b6e77ebe9 [ 92.868644][ T6022] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 92.868670][ T6022] RSP: 002b:00007f0b6d1dee18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 92.868688][ T6022] RAX: ffffffffffffffda RBX: 000000000000050a RCX: 00007f0b6e77ebe9 [ 92.868703][ T6022] RDX: 00007f0b6d1deef0 RSI: 0000000000000000 RDI: 00007f0b6e8027e8 [ 92.868718][ T6022] RBP: 0000200000000200 R08: 00007f0b6d1debb7 R09: 00007f0b6d1dee40 [ 92.868733][ T6022] R10: 000000000000000a R11: 0000000000000202 R12: 00002000000001c0 [ 92.868766][ T6022] R13: 00007f0b6d1deef0 R14: 00007f0b6d1deeb0 R15: 0000200000000780 [ 92.868787][ T6022] [ 93.118231][ T6036] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6036 comm=syz.4.732 [ 93.157081][ T6033] loop1: detected capacity change from 0 to 1024 [ 93.167297][ T6033] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 93.179306][ T6033] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 93.190173][ T6033] EXT4-fs error (device loop1): ext4_get_journal_inode:5796: inode #32: comm syz.1.731: iget: special inode unallocated [ 93.204366][ T6033] EXT4-fs (loop1): Remounting filesystem read-only [ 93.210961][ T6033] EXT4-fs (loop1): no journal found [ 93.216262][ T6033] EXT4-fs (loop1): can't get journal size [ 93.228017][ T6033] EXT4-fs (loop1): failed to initialize system zone (-117) [ 93.246305][ T6033] EXT4-fs (loop1): mount failed [ 93.248925][ T6048] loop4: detected capacity change from 0 to 512 [ 93.281707][ T6048] ext4 filesystem being mounted at /137/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.282907][ T6048] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.736: bg 0: block 328: padding at end of block bitmap is not set [ 93.289206][ T6051] loop2: detected capacity change from 0 to 128 [ 93.292906][ T6051] syz.2.737: attempt to access beyond end of device [ 93.292906][ T6051] loop2: rw=0, sector=2072, nr_sectors = 1 limit=128 [ 93.343235][ T6055] loop1: detected capacity change from 0 to 512 [ 93.343395][ T6055] ======================================================= [ 93.343395][ T6055] WARNING: The mand mount option has been deprecated and [ 93.343395][ T6055] and is ignored by this kernel. Remove the mand [ 93.343395][ T6055] option from the mount to silence this warning. [ 93.343395][ T6055] ======================================================= [ 93.372963][ T6058] lo speed is unknown, defaulting to 1000 [ 93.420333][ T6055] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 93.435151][ T6055] EXT4-fs (loop1): orphan cleanup on readonly fs [ 93.435644][ T6055] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.731: bg 0: block 248: padding at end of block bitmap is not set [ 93.435817][ T6055] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.731: Failed to acquire dquot type 1 [ 93.436252][ T6055] EXT4-fs (loop1): 1 truncate cleaned up [ 93.529689][ T6072] ieee802154 phy0 wpan0: encryption failed: -22 [ 93.613615][ T6074] loop0: detected capacity change from 0 to 1024 [ 93.634146][ T6055] syz.1.731 (6055) used greatest stack depth: 9280 bytes left [ 93.713724][ T6084] lo speed is unknown, defaulting to 1000 [ 93.975350][ T6087] loop3: detected capacity change from 0 to 1024 [ 93.986505][ T6087] EXT4-fs: Ignoring removed orlov option [ 94.124220][ T6093] loop0: detected capacity change from 0 to 1024 [ 94.138067][ T6093] EXT4-fs: Ignoring removed orlov option [ 94.243702][ T6098] loop1: detected capacity change from 0 to 512 [ 94.331176][ T6098] ext4 filesystem being mounted at /143/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.351280][ T6098] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.750: bg 0: block 328: padding at end of block bitmap is not set [ 94.371577][ T6102] loop4: detected capacity change from 0 to 128 [ 94.414964][ T6104] loop2: detected capacity change from 0 to 256 [ 94.424466][ T6104] binfmt_misc: register: failed to install interpreter file ./file0 [ 94.429638][ T6102] syz.4.751: attempt to access beyond end of device [ 94.429638][ T6102] loop4: rw=0, sector=2072, nr_sectors = 1 limit=128 [ 94.582732][ T6115] futex_wake_op: syz.0.755 tries to shift op by -1; fix this program [ 94.604931][ T6107] lo speed is unknown, defaulting to 1000 [ 94.909490][ T6125] lo speed is unknown, defaulting to 1000 [ 94.950788][ T6124] lo speed is unknown, defaulting to 1000 [ 95.080758][ T6130] lo speed is unknown, defaulting to 1000 [ 95.239997][ T6138] loop3: detected capacity change from 0 to 512 [ 95.271734][ T6138] ext4 filesystem being mounted at /174/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.306695][ T6138] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.763: bg 0: block 328: padding at end of block bitmap is not set [ 95.442258][ T6147] loop4: detected capacity change from 0 to 512 [ 95.489775][ T6147] EXT4-fs error (device loop4): ext4_iget_extra_inode:5104: inode #15: comm syz.4.765: corrupted in-inode xattr: invalid ea_ino [ 95.510551][ T6151] binfmt_misc: register: failed to install interpreter file ./file2 [ 95.519482][ T6147] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.765: couldn't read orphan inode 15 (err -117) [ 95.701999][ T6169] lo speed is unknown, defaulting to 1000 [ 95.753928][ T6153] loop3: detected capacity change from 0 to 512 [ 95.793480][ T6153] ext4 filesystem being mounted at /176/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.851816][ T6184] loop0: detected capacity change from 0 to 128 [ 95.860686][ T6184] syz.0.777: attempt to access beyond end of device [ 95.860686][ T6184] loop0: rw=0, sector=2072, nr_sectors = 1 limit=128 [ 95.990790][ T6186] lo speed is unknown, defaulting to 1000 [ 96.007704][ T6195] loop3: detected capacity change from 0 to 512 [ 96.028631][ T6195] EXT4-fs error (device loop3): ext4_iget_extra_inode:5104: inode #15: comm syz.3.781: corrupted in-inode xattr: invalid ea_ino [ 96.045543][ T6200] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 96.045560][ T6195] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.781: couldn't read orphan inode 15 (err -117) [ 96.052264][ T6200] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 96.072164][ T6200] vhci_hcd vhci_hcd.0: Device attached [ 96.150161][ T6209] lo speed is unknown, defaulting to 1000 [ 96.232540][ T6215] futex_wake_op: syz.1.788 tries to shift op by -1; fix this program [ 96.330644][ T6219] loop4: detected capacity change from 0 to 128 [ 96.337894][ T1035] usb 2-1: SetAddress Request (2) to port 0 [ 96.377237][ T1035] usb 2-1: new SuperSpeed USB device number 2 using vhci_hcd [ 96.399224][ T6219] syz.4.789: attempt to access beyond end of device [ 96.399224][ T6219] loop4: rw=0, sector=2072, nr_sectors = 1 limit=128 [ 96.518135][ T6224] lo speed is unknown, defaulting to 1000 [ 96.552207][ T6225] loop2: detected capacity change from 0 to 512 [ 96.644359][ T6225] ext4 filesystem being mounted at /164/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.666761][ T6238] loop3: detected capacity change from 0 to 512 [ 96.717683][ T6245] loop0: detected capacity change from 0 to 512 [ 96.831473][ T6201] vhci_hcd: connection reset by peer [ 96.837081][ T37] vhci_hcd: stop threads [ 96.841369][ T37] vhci_hcd: release socket [ 96.845859][ T37] vhci_hcd: disconnect device [ 96.854730][ T6238] EXT4-fs error (device loop3): ext4_iget_extra_inode:5104: inode #15: comm syz.3.794: corrupted in-inode xattr: invalid ea_ino [ 96.869766][ T6238] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.794: couldn't read orphan inode 15 (err -117) [ 96.926506][ T6243] lo speed is unknown, defaulting to 1000 [ 96.954410][ T6245] ext4 filesystem being mounted at /144/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.983054][ T6245] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.797: bg 0: block 328: padding at end of block bitmap is not set [ 97.176842][ T6260] lo speed is unknown, defaulting to 1000 [ 97.217391][ T6255] lo speed is unknown, defaulting to 1000 [ 97.312588][ T6268] loop4: detected capacity change from 0 to 512 [ 97.320687][ T6268] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 97.333775][ T6268] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 97.351798][ T6268] EXT4-fs error (device loop4): ext4_orphan_get:1418: comm syz.4.803: bad orphan inode 16 [ 97.498778][ T6268] ext4_test_bit(bit=15, block=4) = 0 [ 97.504110][ T6268] EXT4-fs (loop4): 1 orphan inode deleted [ 97.675093][ T6281] loop1: detected capacity change from 0 to 128 [ 97.996575][ T6281] syz.1.806: attempt to access beyond end of device [ 97.996575][ T6281] loop1: rw=0, sector=2072, nr_sectors = 1 limit=128 [ 98.091519][ T29] kauditd_printk_skb: 30 callbacks suppressed [ 98.091537][ T29] audit: type=1326 audit(1754647026.886:2904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6285 comm="syz.1.808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f003ff9ebe9 code=0x7ffc0000 [ 98.121159][ T29] audit: type=1326 audit(1754647026.886:2905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6285 comm="syz.1.808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f003ff9ebe9 code=0x7ffc0000 [ 98.144622][ T29] audit: type=1326 audit(1754647026.896:2906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6285 comm="syz.1.808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f003ff9ebe9 code=0x7ffc0000 [ 98.168083][ T29] audit: type=1326 audit(1754647026.896:2907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6285 comm="syz.1.808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f003ff9ebe9 code=0x7ffc0000 [ 98.191471][ T29] audit: type=1326 audit(1754647026.896:2908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6285 comm="syz.1.808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f003ff9ebe9 code=0x7ffc0000 [ 98.214864][ T29] audit: type=1326 audit(1754647026.896:2909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6285 comm="syz.1.808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f003ff9ebe9 code=0x7ffc0000 [ 98.238515][ T29] audit: type=1326 audit(1754647026.896:2910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6285 comm="syz.1.808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f003ff9ebe9 code=0x7ffc0000 [ 98.268798][ T29] audit: type=1400 audit(1754647026.926:2911): avc: denied { read } for pid=6283 comm="syz.2.807" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 98.287840][ T29] audit: type=1326 audit(1754647027.016:2912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6285 comm="syz.1.808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f003ff9ebe9 code=0x7ffc0000 [ 98.311210][ T29] audit: type=1326 audit(1754647027.016:2913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6285 comm="syz.1.808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f003ff9ebe9 code=0x7ffc0000 [ 98.373342][ T6286] lo speed is unknown, defaulting to 1000 [ 98.383358][ T6289] lo speed is unknown, defaulting to 1000 [ 98.427211][ T6297] loop3: detected capacity change from 0 to 512 [ 98.461035][ T6297] ext4 filesystem being mounted at /184/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.496283][ T6297] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.810: bg 0: block 328: padding at end of block bitmap is not set [ 98.545113][ T6291] loop0: detected capacity change from 0 to 512 [ 98.560392][ T6291] ext4 filesystem being mounted at /147/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.632558][ T6303] lo speed is unknown, defaulting to 1000 [ 98.670690][ T6313] process 'syz.4.815' launched './file0' with NULL argv: empty string added [ 98.835939][ T6316] lo speed is unknown, defaulting to 1000 [ 98.935890][ T6327] netlink: 16 bytes leftover after parsing attributes in process `syz.4.818'. [ 98.945498][ T6330] binfmt_misc: register: failed to install interpreter file ./file2 [ 98.968690][ T6327] netlink: 'BM¸6': attribute type 1 has an invalid length. [ 98.975938][ T6327] netlink: 154788 bytes leftover after parsing attributes in process `BM¸6'. [ 98.992115][ T6332] loop1: detected capacity change from 0 to 256 [ 99.005207][ T6332] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 99.115403][ T6340] loop1: detected capacity change from 0 to 512 [ 99.160680][ T6340] ext4 filesystem being mounted at /157/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.180147][ T6340] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.823: bg 0: block 328: padding at end of block bitmap is not set [ 99.243884][ T6354] loop1: detected capacity change from 0 to 128 [ 99.279808][ T6354] syz.1.828: attempt to access beyond end of device [ 99.279808][ T6354] loop1: rw=0, sector=2072, nr_sectors = 1 limit=128 [ 99.298310][ T6342] loop4: detected capacity change from 0 to 512 [ 99.326050][ T6359] netlink: 4 bytes leftover after parsing attributes in process `syz.1.830'. [ 99.335771][ T6359] veth1_macvtap: left promiscuous mode [ 99.357072][ T6342] ext4 filesystem being mounted at /158/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.403791][ T6366] loop1: detected capacity change from 0 to 512 [ 99.466859][ T6368] lo speed is unknown, defaulting to 1000 [ 99.512685][ T6373] futex_wake_op: syz.4.833 tries to shift op by -1; fix this program [ 99.555087][ T6375] lo speed is unknown, defaulting to 1000 [ 99.667442][ T6377] loop3: detected capacity change from 0 to 1024 [ 99.674202][ T6377] EXT4-fs: Ignoring removed orlov option [ 99.782126][ T6388] lo speed is unknown, defaulting to 1000 [ 99.813440][ T6392] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8 sclass=netlink_route_socket pid=6392 comm=+}[@ [ 100.051302][ T3308] EXT4-fs unmount: 88 callbacks suppressed [ 100.051318][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.112035][ T6398] loop3: detected capacity change from 0 to 512 [ 100.131545][ T6398] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.178008][ T6398] ext4 filesystem being mounted at /194/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.207625][ T6398] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.839: bg 0: block 328: padding at end of block bitmap is not set [ 100.266550][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.390940][ T6419] lo speed is unknown, defaulting to 1000 [ 100.547870][ T6430] loop2: detected capacity change from 0 to 1024 [ 100.554697][ T6430] EXT4-fs: Ignoring removed orlov option [ 100.588827][ T6434] loop0: detected capacity change from 0 to 512 [ 100.609446][ T6430] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.634390][ T6434] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 100.675326][ T6434] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 100.701031][ T6434] EXT4-fs (loop0): 1 truncate cleaned up [ 100.707253][ T6434] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.809076][ T6450] loop4: detected capacity change from 0 to 512 [ 100.834351][ T6450] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.848792][ T6448] Falling back ldisc for ttyS3. [ 100.869494][ T6450] ext4 filesystem being mounted at /161/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.919846][ T6450] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.852: bg 0: block 328: padding at end of block bitmap is not set [ 100.951132][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.978217][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.042802][ T6460] netlink: 40 bytes leftover after parsing attributes in process `syz.4.855'. [ 101.054025][ T6460] netlink: 20 bytes leftover after parsing attributes in process `syz.4.855'. [ 101.150987][ T6472] loop3: detected capacity change from 0 to 512 [ 101.171773][ T6472] EXT4-fs error (device loop3): ext4_iget_extra_inode:5104: inode #15: comm syz.3.860: corrupted in-inode xattr: invalid ea_ino [ 101.185321][ T6472] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.860: couldn't read orphan inode 15 (err -117) [ 101.200658][ T6472] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.215568][ T6472] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.301231][ T6482] loop3: detected capacity change from 0 to 1024 [ 101.308770][ T6482] EXT4-fs: Ignoring removed orlov option [ 101.316507][ T6482] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.351287][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.407870][ T1035] usb 2-1: device descriptor read/8, error -110 [ 101.527791][ T1035] usb 2-1: new SuperSpeed USB device number 2 using vhci_hcd [ 101.540524][ T6499] siw: device registration error -23 [ 101.547960][ T1035] usb 2-1: enqueue for inactive port 0 [ 101.564806][ T1035] usb 2-1: enqueue for inactive port 0 [ 101.578898][ T1035] usb 2-1: enqueue for inactive port 0 [ 101.624049][ T3377] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x4 [ 101.631805][ T3377] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x2 [ 101.649773][ T3377] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x3 [ 101.658015][ T2956] IPVS: starting estimator thread 0... [ 101.658310][ T3377] hid-generic 0000:3000000:0000.0001: hidraw0: HID v0.00 Device [sy] on syz0 [ 101.676799][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.767824][ T6504] IPVS: using max 2256 ests per chain, 112800 per kthread [ 101.786902][ T6516] loop3: detected capacity change from 0 to 512 [ 101.801196][ T6516] EXT4-fs error (device loop3): ext4_iget_extra_inode:5104: inode #15: comm syz.3.873: corrupted in-inode xattr: invalid ea_ino [ 101.814759][ T6519] loop4: detected capacity change from 0 to 1024 [ 101.814910][ T6516] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.873: couldn't read orphan inode 15 (err -117) [ 101.824871][ T6519] EXT4-fs: Ignoring removed orlov option [ 101.835363][ T6516] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.851730][ T6519] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.852694][ T6516] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.269477][ T6542] ieee802154 phy0 wpan0: encryption failed: -22 [ 102.533275][ T6551] lo speed is unknown, defaulting to 1000 [ 102.627999][ T1035] usb usb2-port1: attempt power cycle [ 102.645174][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.666910][ T6557] loop4: detected capacity change from 0 to 512 [ 102.679685][ T6557] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.693112][ T6557] ext4 filesystem being mounted at /174/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.708700][ T6557] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.884: bg 0: block 328: padding at end of block bitmap is not set [ 102.738665][ T6554] loop3: detected capacity change from 0 to 512 [ 102.745847][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.762781][ T6554] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.776756][ T6554] ext4 filesystem being mounted at /210/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.792205][ T6564] loop4: detected capacity change from 0 to 512 [ 102.801069][ T6564] EXT4-fs error (device loop4): ext4_iget_extra_inode:5104: inode #15: comm syz.4.885: corrupted in-inode xattr: invalid ea_ino [ 102.814741][ T6564] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.885: couldn't read orphan inode 15 (err -117) [ 102.815166][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.829413][ T6564] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.848567][ T6564] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.857990][ T6529] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 102.945556][ T6575] loop3: detected capacity change from 0 to 1024 [ 102.952463][ T6575] EXT4-fs: Ignoring removed orlov option [ 102.966070][ T6575] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.996025][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.013873][ T6582] loop3: detected capacity change from 0 to 256 [ 103.021499][ T6582] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 103.226992][ T6586] lo speed is unknown, defaulting to 1000 [ 103.346512][ T29] kauditd_printk_skb: 127 callbacks suppressed [ 103.346531][ T29] audit: type=1326 audit(1754647032.146:3041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6603 comm="syz.3.899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1755eebe9 code=0x7ffc0000 [ 103.378150][ T29] audit: type=1326 audit(1754647032.146:3042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6603 comm="syz.3.899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa1755eebe9 code=0x7ffc0000 [ 103.397027][ T6609] lo speed is unknown, defaulting to 1000 [ 103.401530][ T29] audit: type=1326 audit(1754647032.146:3043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6603 comm="syz.3.899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1755eebe9 code=0x7ffc0000 [ 103.430866][ T29] audit: type=1326 audit(1754647032.146:3044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6603 comm="syz.3.899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1755eebe9 code=0x7ffc0000 [ 103.454919][ T29] audit: type=1326 audit(1754647032.146:3045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6603 comm="syz.3.899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa1755eebe9 code=0x7ffc0000 [ 103.478296][ T29] audit: type=1326 audit(1754647032.146:3046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6603 comm="syz.3.899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1755eebe9 code=0x7ffc0000 [ 103.501644][ T29] audit: type=1326 audit(1754647032.146:3047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6603 comm="syz.3.899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa1755eebe9 code=0x7ffc0000 [ 103.525032][ T29] audit: type=1326 audit(1754647032.146:3048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6603 comm="syz.3.899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1755eebe9 code=0x7ffc0000 [ 103.548479][ T29] audit: type=1326 audit(1754647032.146:3049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6603 comm="syz.3.899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa1755eebe9 code=0x7ffc0000 [ 103.571865][ T29] audit: type=1326 audit(1754647032.146:3050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6603 comm="syz.3.899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1755eebe9 code=0x7ffc0000 [ 103.649837][ T6623] loop4: detected capacity change from 0 to 1024 [ 103.656599][ T6623] EXT4-fs: Ignoring removed orlov option [ 103.693764][ T6623] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.723711][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.787038][ T6628] lo speed is unknown, defaulting to 1000 [ 104.094324][ T6598] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 104.153776][ T6634] lo speed is unknown, defaulting to 1000 [ 104.372603][ T6650] loop1: detected capacity change from 0 to 1024 [ 104.385689][ T6650] EXT4-fs: Ignoring removed orlov option [ 104.402886][ T6651] lo speed is unknown, defaulting to 1000 [ 104.411466][ T6650] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.523979][ T6661] lo speed is unknown, defaulting to 1000 [ 104.548310][ T1035] usb usb2-port1: unable to enumerate USB device [ 104.686837][ T6677] loop4: detected capacity change from 0 to 1024 [ 104.693774][ T6677] EXT4-fs: Ignoring removed orlov option [ 104.702685][ T6677] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.837434][ T6677] ================================================================== [ 104.845551][ T6677] BUG: KCSAN: data-race in filemap_read / filemap_read [ 104.852429][ T6677] [ 104.854763][ T6677] read to 0xffff88811ffeae28 of 8 bytes by task 6681 on cpu 0: [ 104.862414][ T6677] filemap_read+0x6f/0xa00 [ 104.866849][ T6677] generic_file_read_iter+0x79/0x330 [ 104.872192][ T6677] ext4_file_read_iter+0x1cc/0x290 [ 104.877348][ T6677] copy_splice_read+0x3c1/0x5f0 [ 104.882250][ T6677] splice_direct_to_actor+0x290/0x680 [ 104.887822][ T6677] do_splice_direct+0xda/0x150 [ 104.892589][ T6677] do_sendfile+0x380/0x650 [ 104.897032][ T6677] __x64_sys_sendfile64+0x105/0x150 [ 104.902241][ T6677] x64_sys_call+0x2bb0/0x2ff0 [ 104.906945][ T6677] do_syscall_64+0xd2/0x200 [ 104.911559][ T6677] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.917481][ T6677] [ 104.919822][ T6677] write to 0xffff88811ffeae28 of 8 bytes by task 6677 on cpu 1: [ 104.927454][ T6677] filemap_read+0x974/0xa00 [ 104.931975][ T6677] generic_file_read_iter+0x79/0x330 [ 104.937267][ T6677] ext4_file_read_iter+0x1cc/0x290 [ 104.942392][ T6677] copy_splice_read+0x3c1/0x5f0 [ 104.947256][ T6677] splice_direct_to_actor+0x290/0x680 [ 104.952631][ T6677] do_splice_direct+0xda/0x150 [ 104.957416][ T6677] do_sendfile+0x380/0x650 [ 104.961863][ T6677] __x64_sys_sendfile64+0x105/0x150 [ 104.967103][ T6677] x64_sys_call+0x2bb0/0x2ff0 [ 104.971792][ T6677] do_syscall_64+0xd2/0x200 [ 104.976390][ T6677] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.982313][ T6677] [ 104.984632][ T6677] value changed: 0x000000000000026a -> 0x000000000000026b [ 104.991750][ T6677] [ 104.994077][ T6677] Reported by Kernel Concurrency Sanitizer on: [ 105.000230][ T6677] CPU: 1 UID: 0 PID: 6677 Comm: syz.4.920 Not tainted 6.16.0-syzkaller-12016-gbec077162bd0 #0 PREEMPT(voluntary) [ 105.012223][ T6677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 105.022277][ T6677] ================================================================== [ 105.092773][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.199594][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.449567][ T1035] usb usb2-port1: attempt power cycle [ 108.299016][ T1035] usb usb2-port1: unable to enumerate USB device