last executing test programs: 2.934044033s ago: executing program 4 (id=1980): getpid() r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)}], 0x1}, 0x48000) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f0000000bc0)={0x18c, r1, 0x0, 0x70bd28, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0x18c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000800) sendmsg$kcm(r3, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000005c0)="96", 0x1}], 0x1}, 0x1) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r5, 0x65, 0x1, &(0x7f0000000140)=[{{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}, {{}, {0x0, 0x0, 0x1, 0x1}}], 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x10) setsockopt$CAN_RAW_FILTER(r5, 0x65, 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0xf) r7 = dup(r2) ioctl$TIOCL_SETSEL(r7, 0x541c, &(0x7f00000007c0)={0x2, {0x2, 0x101, 0x0, 0x101}}) 2.873548138s ago: executing program 4 (id=1981): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000600)=ANY=[@ANYRES32=r0, @ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000080000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095", @ANYRESDEC=r0], &(0x7f0000000000)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00'}, 0x10) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x20c6, 0x80, 0x2, 0x1f9}, &(0x7f0000000480)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r4 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) pwritev(r4, &(0x7f00000013c0)=[{&(0x7f00000001c0)="d9", 0x1}], 0x1, 0x200, 0x8000) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r1, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x183000, 0x23456}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) 2.211717361s ago: executing program 4 (id=1984): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x4}, 0x18) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000000240)=ANY=[@ANYBLOB="240100001600010428bd700000000000fe8000000000000000000000000000bbfc01000000000000000000000000000100", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ff02000000000000000000000000000100000000330000000a0101010000000000000000000000000000000000004e340100000000000000000000000000000004000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000a0000002bbd70000000000000000200000000000000000008000020ffffffdf2c0027cc"], 0x124}}, 0x0) r1 = open(0x0, 0x143c62, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) socket(0x2, 0x80805, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x12, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080), 0x64, 0x52b, &(0x7f0000000f80)="$eJzs3c9rJFkdAPBvdbpjMpPZZNWDLriu7kJm0OlONu5u8LCOIHpaUNf7GJNOCOmkQ7qzOwmLm8E/QBBRwZNevAj+AYIsePG4CAt6VlQU0VkFPejUUt3VmZlMd6cz0/kxyecDlXqvXlV93+tQ1fW6HlUBXFjPRcSNiLibpum1iJjMlxfyKfbaU7be+3feWsymJNL09X8kkeTLOvtK8vnlfLOxiPj6VyK+lTwct7Gzu7ZQq1W38nylub5ZaezsXl9dX1iprlQ35uZmX55/Zf6l+ZmhtPNKRLz6pb/84Ls/+/Krv/rsm3+8+ber386qNZGX39+OIyr2K2w3vXTj4AZbjxjsLMraU+pkxrutMfLQktvHXCcAALrLrvE/HBGfjohrMRkj/S9nAQAAgCdQ+oWJ+F8SkXY32mM5AAAA8AQptMbAFqOcjwWYiEKhXG6P4f1oXCrU6o3mZ5br2xtL7bGyU1EqLK/WqjP5WOGpKCVZfraVvpd/8UB+LiKejojvT4638uXFem3ptH/8AAAAgAvicqvPnxQ6/f9/T7b7/wAAAMA5M3WEdf9zjPUAAAAAjs9R+v8AAADAk0n/HwAAAM61r772WjalnfdfL72xs71Wf+P6UrWxVl7fXiwv1rc2yyv1+krrmX3rh+2vVq9vfi42tm9VmtVGs9LY2b25Xt/eaN5cbb0OHAAAADgFT3/ynd8nEbH3+fHWlBkdbNMBVwPOquJ+KsnnXQ7rPzzVnv/5hCoFnIiRvqWlE6sHcPKKp10B4NT4hgeSQ8p7Dt55N59/arj1AQAAhm/6473v/xf6brnXvxg48xzEcHH1v/8PnGet+/+DjuR1sQDnSskVAFx4g9//P3AR8O6gEdL0yJUCAACGaqI1JYVyfmU/EYVCuRxxpfVagFKyvFqrzkTEUxHxu8nSh7L8bGvL5NA+AwAAAAAAAAAAAAAAAAAAAAAAAADQlqZJpAAAAMC5FlH4a/Lr9rP8pydfmDj4+8Bo8t/JyF8R+uaPX//hrYVmc2s2W/7P/eXNH+XLXzyNXzAAAADgQjjSC/w7/fROPx4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAhun9O28tdqaTjPv3L0bE1IH4SVZSjLGI0YixKEXEpX8lUbxvu0JEjAwh/nj252Pd2p9k1doPeTB+0tn2Me3d7hs/prJPoUf8y0OIDxfZO9n550a3468Qz7Xm3Y+/YsQD+UfV9fyXG8v/jvQ4/q8MGOOZ935R6Rn/dsQzxe7nn078pEf85weM/81v7O72Kkt/EjHd9fsneSBWpbm+WWns7F5fXV9Yqa5UN+bmZl+ef2X+pfmZyvJqrZr/7Rrje5/45d1+7b/UI/7UIe1/YcD2//+9W3c+0k6WusW/+nyX+L/5ab7Gw/Hz77707TydlU930nvt9P2e/flvn+3X/qUe7T/s/391wPZf+9p3/jTgqgDACWjs7K4t1GrVrWEnCse25yMmsl76GajGWftYJKpbjbeHusM0TdPsmHqM/SRxFj6WVuK0z0wAAMCw3bvoP+2aAAAAAAAAAAAAAAAAAAAAwMV1Eo8TOxhzbz+VDOMR2gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQ/FBAAAA///ROdsN") r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0700000004000000080000000001000002400200", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/12], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r6}, 0x18) sendmsg$rds(r5, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}], 0x1}}], 0x48}, 0x0) fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) r7 = syz_io_uring_setup(0x568e, &(0x7f0000000100)={0x0, 0x3594, 0x10, 0x1003, 0x21e}, &(0x7f0000000240)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x10, 0x0, 0x0, 0x0, &(0x7f00000005c0), 0x1, 0x8}) io_uring_enter(r7, 0x6efc, 0x3900, 0xb, 0x0, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xb, 0xf, 0x200cc, 0x6, 0x5}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)='T', &(0x7f0000000240), 0x4af, r10}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000700)={0x0, &(0x7f0000000540)=""/245, &(0x7f00000000c0), 0x0, 0x2, r10}, 0x38) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r7, 0x18, &(0x7f00000000c0)={0x1, 0xffffffffffffffff, 0x11, {0x5, 0x1}, 0x1}, 0x1) 1.741703849s ago: executing program 2 (id=1992): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x108284, 0x4, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x26}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, 0x0, &(0x7f00000001c0)=r0}, 0x20) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file0\x00', 0x1000000, &(0x7f0000000300)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2cb, &(0x7f0000000cc0)="$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") r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) rename(&(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 1.718093391s ago: executing program 2 (id=1993): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000e80)=ANY=[@ANYBLOB="4285d36ada8429c3f2e7dd2184be616ca5420de4506dc5ef062f4ad02ad80c2e7b0b2abfde2587f878fd092f", @ANYRES16=r0, @ANYBLOB="0100030010651fbe347b2c2b00000c00018081000000f2f6cfbfbb435b41e8d1e6173ff235f71d5f06b432a80dabe431760cda376a6ff9be6906045844d9b8a10829d475e84d40035fa6eda096e1eaf311a78d6188beb9fe26131db4d6", @ANYRES16=r0], 0x20}}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_vs\x00') preadv(r3, &(0x7f0000000380)=[{&(0x7f0000000080)=""/83, 0x53}], 0x1, 0xc9, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='kfree\x00', r2}, 0x18) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r4, 0x29, 0x41, &(0x7f0000000040)=ANY=[], 0x58) r5 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r5, 0x0, 0x4, &(0x7f0000000340)="89", 0x1) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r5, 0x84, 0x7, &(0x7f0000000180), &(0x7f00000001c0)=0x4) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000180)={0x1, 0x1fc, 0x3, 0x8009}, 0x10) write(r7, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000020000000200000800040001000000", 0x24) ptrace(0x10, r6) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x3}, 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) ptrace$getregset(0x4204, r6, 0x201, &(0x7f0000000000)={0x0, 0x300}) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) syz_open_pts(r9, 0x0) io_setup(0x7, &(0x7f0000000000)) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x11, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r10, 0x0, 0x7}, 0x18) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240), r11) sendmsg$NLBL_CIPSOV4_C_ADD(r11, &(0x7f0000000200)={0x0, 0x9000000, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010000000000000000000100000008000100040000002c00048005000300010000000500030080ffffff05000300000000000500030080ffffff0500030080ffffff0800020003"], 0x50}}, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x4a, 0x2, 0x0, 0x0, 0x0, 0x5, 0x80b20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x527, 0x2, @perf_bp={0x0}, 0x814, 0x0, 0xd5, 0x0, 0x0, 0xf83, 0x1ddb}, r6, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) 1.621031029s ago: executing program 0 (id=1994): r0 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x804, &(0x7f0000000040), 0x1, 0x4f9, &(0x7f0000000a40)="$eJzs3c9vI1cdAPDvTNabNE2bLVTih4AupbCg1dqJt42qnsoFhKpKiIoThzQk3iiKHUexU5qwEsn/gEQlTvAncEDigNQTd25w41IOSAVWRQ0SB6MZT36QteM0m8TU/nyk2XlvZjLf99aa97xfb/wCGFu3I2IvIm5GxNsRMVscT4otXu9u2XUfP3q4fPDo4XISnc5b/0jy89mxOPEzmaeLe05FxA++G/Hj5PG4rZ3d9aV6vbZV1CvtxmaltbN7b62xtFpbrW1UqwvzC3Ov3n+ler6OpIMveaHxmw+/s/bGD3//uy9/8Me9b/00a9ZMce5kPy5Tt+uloziZGxHxxlUEG4KJoj83h90QLiR7bD4TES/mz/9sTOSvZk/7pw/0eKwBgE+BTmc2OrMn6wDAqEvzHFiSlotcwEykabnczeE9H9Npvdlq333Q3N5Y6ebKbkUpfbBWr80VucJbUUqy+nxePq5XT9XvR8RzEfHzyafyenm5b54BALhiT5+a//812Z3/AYARNzXogsXraQcAcH0Gzv8AwMgx/wPA+DH/A8D4Mf8DwPgx/wPA+Cnm/4lhtwMAuBbff/PNbOscFN9/vfLOzvZ68517K7XWermxvVxebm5tllebzdV6rbzcbAy6X73Z3Jx/ObbfrbRrrXaltbO72Ghub7QX8+/1XqyVrqVXAMBZnnvh/T8nEbH32lP5FifWcjBXw2g7x7I5wIi6SM7f5wQwGnwLN4wv/8YHBq3l2fe/CL93gWCdn13gh4DLducL8v8wruT/YXzJ5cP4kv+H8dXpJP3W/E+PLgEARoocP3Ctn/8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAiJjJtyQtF2uBz0SalssRz0TErSglD9bqtbmIeDYi/jRZmszq88NuNADwhNK/JcX6X3dmX5o5ffZm8u/JfB8RP/nlW794d6nd3prPjv/z6Hj7veJ4dRjtBwAGOZynD+fxQx8/erh8uF1nez78dndx0SzuQbF1z9yIG/l+KkoRMf1RUtS7svcrE5cQf28lIj7fq/9Jnhu51V35tNRt0bEs9jOXEX//7PgRe/mf0x+l/xM/zdvW3Wd/F5/9BDEHrfUK4+L9bPx5vdfzl8btfD/Vc/HjqVPjwUUdjn8Hj41/6dH4N9Fn/Lt93hgv/+F7fc/tR3zxRq/4yVH8pE/8l84Z/y9f+sqL/c51fhVxJ3rHPxmr0m5sVlo7u/fWGkurtdXaRrW6ML8w9+r9V6qVPEddOcxUP+7vr9199qz+T/eJPzWg/18/s9edycPSr//z9o++ekb8b36t9+v//BnxswnpG2fGP7Y0/du+y3dn8Ve6/d//pK//3XPG/+CvuyvnvBQAuAatnd31pXq9tnWphVJc8g1PFJIrarPCiBey9+NPep/PFSmz/4PuXHVh2CMTcNWOH/phtwQAAAAAAAAAAAAAAOjnyn+dKB12DwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABhl/w0AAP//CA3KAQ==") bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x0, r0}, 0x18) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x8}}, './file0\x00'}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140), 0x4) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000440)={'ip_vti0\x00', 0x0, 0x8000, 0x20, 0x80000001, 0x35, {{0x6, 0x4, 0x3, 0x39, 0x18, 0x67, 0x0, 0x10, 0x29, 0x0, @empty, @remote, {[@ra={0x94, 0x4, 0x1}]}}}}}) mount_setattr(0xffffffffffffffff, &(0x7f0000001d80)='.\x00', 0x8000, &(0x7f0000001dc0)={0x0, 0x0, 0x40000}, 0x20) bpf$OBJ_GET_MAP(0x7, &(0x7f00000005c0)=@generic={&(0x7f0000000580)='./file0\x00'}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000680), 0x2, 0x0) 1.572490682s ago: executing program 0 (id=1995): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYRES32=r1, @ANYRES16=r2, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~'], 0x8c}}, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x80042, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x19) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000040)='~', 0x1}], 0x1) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000080000000d"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000080)='blkio.bfq.io_queued\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'team_slave_1\x00'}) cachestat(0xffffffffffffffff, &(0x7f00000001c0)={0xb0, 0xf5}, 0xffffffffffffffff, 0x0) sched_rr_get_interval(0x0, 0x0) kexec_load(0x3e00, 0x1, &(0x7f00000002c0)=[{0x0, 0x0, 0xff600000, 0x1000000}], 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000200)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@bsdgroups}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@noauto_da_alloc}, {@bsdgroups}, {@oldalloc}, {@errors_continue}]}, 0x2, 0x44b, &(0x7f0000000400)="$eJzs281vFOUfAPDvzLbl9+OtFfEFRK0SY+NLSwsqBy8aTTxgNNEDHuu2EMJCDa2JECLVGLyYGBI9G48m/gXevBj1ZOJV74aEKBfQU83MzsB22S0t3e5W9vNJBp5n5+k+z3efeWaemWc3gL41mv2TRGyPiN8iYrieXV5gtP7f9avnq39fPV9NYmnprT+TvNy1q+erZdHy77YVmbE0Iv0kKSpZbv7suZPTtdrsmSI/sXDqvYn5s+eePXFq+vjs8dnTU4cPHzo4+cLzU891JM4srmt7P5zbt+e1dy69Xj166d2fvs3au73Y3xhHp4xmgf+1lGve90SnK+uxHQ3pZKCHDWFNKhGRdddgPv6HoxI3O284Xv24p40DNlR2bdrSfvfiEnAXS6LXLQB6o7zQZ/e/5dalqcemcOWl+g1QFvf1YqvvGYi0KDPYdH/bSaMRcXTxn6+yLTboOQQAQKPPql8eiWdazf/SuL+h3M5iDWUkIu6JiF0RcW9E7I6I+yLysg9ExINrrL95aejW+U96+Y4CW6Vs/vdisba1fP5Xzv5ipFLkduTxDybHTtRmDxSfyVgMbsnykyvU8f0rv37ebl/j/C/bsvrLuWDRjssDTQ/oZqYXpvNJaQdc+Shi70Cr+JMbKwFJROyJiL1re+udZeLEU9/sa1fo9vGvoAPrTEtfRzxZ7//FaIq/lKy8Pjnxv6jNHpgoj4pb/fzLxTfb1b+u+Dsg6/+ty4//5iIjSeN67fza67j4+6dt72nu9PgfSt7Oz0dlR30wvbBwZjJiKDmSvzhUlM1fn7r5t2W+LJ/FP7a/9fjfFTcreCgisoP44Yh4JCIeLdr+WEQ8HhH7V4j/x5fb79sM/T/T8vx34/hv6v+1Jyonf/iuXf2r6/9DeWqseCU//93Gahu4ns8OAAAA/ivS/DvwSTp+I52m4+P17/Dvjq1pbW5+4eljc++fnql/V34kBtPySddww/PQyWSxeMd6fqp4VlzuP1g8N/6i8v88P16dq830OHbod9vajP/MH5Vetw7YcK3W0aaGetAQoOuax3+6PHvhjW42Bugqv9eG/nWb8Z92qx1A97n+Q/9qNf4vNOWtBcDdyfUf+pfxD/3L+If+ZfxDX1rP7/ol+jkR6aZohsQGJXp9ZgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOiMfwMAAP//d5Lu1w==") socket$nl_generic(0x10, 0x3, 0x10) 1.497691259s ago: executing program 2 (id=1997): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r3 = syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) r5 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, 0x0) perf_event_open(0x0, 0x0, 0x2000000000006, r5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r6}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000840)={0x58, r3, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8, 0x1, r4}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffbfff9}}}]}}]}, 0x58}, 0x1, 0x1000000, 0x0, 0x24004000}, 0x24040840) 1.452872452s ago: executing program 0 (id=1998): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[], 0x0, 0x7ff}, 0x94) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5e8, &(0x7f0000001200)="$eJzs3c9vFdUeAPDv3P6gpbzXQl7ee7iQJsZAorS0gCHGBWwNafBH3Lix0oJIgYbWaNGEkuDGxLgxxsSVC/G/UCJbVrpy4caVISFqWJp4zdzOlP6Y2x+X207T+XySS2fOmeGc4fLtOXPuOXMDqKzB9I9axMGImE4i+pP5xbzOyDIHF4579OdH59NXEvX6a78nkWRp+fFJ9rMvO7knIn78IYkDHavLnZm7cXl8amryerY/PHtlenhm7sbRS1fGL05enLw6+sLoqZMnTp4aOdbSdd0sSDt7+933+z8Ze/Obr/5KRr79ZSyJ0/FyduDS62iXwRhs/Jskq7P6TrW7sJJ0ZP9Plr7FSWeJFWJT8vevKyL+F/3REY/fvP74+JVSKwdsqXoSUQcqKhH/UFF5PyC/t195H1wrpVcCbIeHZxYGAFbHf+fC2GD0NMYG9j5KYumwThIRrY3MLbcvIu7fG7t94d7Y7diicTig2PytiPh/UfwnjfgfiJ4YaMR/bVn8p/2Cc9nPNP3VFstfOVQs/mH7LMR/z5rxH03i/60l8f92i+UPPt58p3dZ/Pe2ekkAAAAAAABQWXfPRMTzRZ//1xbn/0TB/J++iDjdhvIHV+yv/vy/9qANxQAFHp6JeKlw/m8tn/070JFt/asxH6AruXBpavJYRPw7Io5E1550f2SNMo5+euDLZnmD2fy//JWWfz+bC5jV40HnnuXnTIzPjj/pdQMRD29FPFU4/zdZbP+TgvY//X0wvcEyDjx751yzvPXjH9gq9a8jDhe2/4+fWpGs/XyO4UZ/YDjvFaz29Ieffdes/Fbj3yMm4Mml7f/eteN/IFn6vJ6ZzZdxfK6z3iyv1f5/d/J645Ez3VnaB+Ozs9dHIrqTsx1p6rL00c3XGXajPB7yeEnj/8gza4//FfX/eyNifsXfnfyxfE1x7r9/9/3arD76/1CeNP4nNtX+b35j9M7A983K31j7f6LR1h/JUoz/wYIv8jDtXp5eEI6dRVnbXV8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2A1qEbEvktrQ4natNjQU0RcR/4m9talrM7PPXbj23tWJNK/x/f+1/Jt++xf2k/z7/weW7I+u2D8eEfsj4vOO3sb+0PlrUxNlXzwAAAAAAAAAAAAAAAAAAADsEH1N1v+nfusou3bAlussuwJAaQri/6cy6gFsP+0/VJf4h+oS/1Bd4h+qq8X472p3PYDtp/2H6hL/UF3iHwAAAAAAdpX9h+7+nETE/Iu9jVeqO8szvwd2t1rZFQBK4xE/UF2m/kB1uccHknXye5qetN6Za5k+/wQnAwAAAAAAAAAAAEDlHD5o/T9UlfX/UF3W/0N15ev/D5VcD2D7uccHYp2V/IXr/9c9CwAAAAAAAAAAAABop5m5G5fHp6Ymr9t4Y2dUox0b6Tu7kYPr9frNxrEtlbVnB1zpjtrIp8LvlPqs2MjX+m3srNJ+JQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACv8EwAA//8IGSKz") r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800020095"], &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) socketpair(0xf, 0x3, 0x2, &(0x7f00000001c0)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) clock_getres(0xfffffffffffffff1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) ioctl$sock_inet_SIOCGIFADDR(r3, 0x8915, &(0x7f0000000040)={'netpci0\x00', {0x2, 0x0, @remote}}) write(r3, &(0x7f0000004200)='t', 0x1) sendfile(r3, r2, 0x0, 0x3ffff) sendfile(r3, r2, 0x0, 0x7ffff000) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x70, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r4}, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r5) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r6}, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$inet6_udp(0xa, 0x2, 0x0) 1.438047963s ago: executing program 4 (id=1999): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5e8, &(0x7f0000001200)="$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") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socketpair(0xf, 0x3, 0x2, &(0x7f00000001c0)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000040)={'netpci0\x00', {0x2, 0x0, @remote}}) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r1, 0x0, 0x3ffff) sendfile(r2, r1, 0x0, 0x7ffff000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00'}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r3) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4}, 0x10) bpf$MAP_CREATE(0x1400000000000000, &(0x7f0000000100)=ANY=[@ANYBLOB="0f0000000400000004000000040001000000", @ANYRES32, @ANYBLOB="00201d", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000005000000000000000000"], 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$inet6_udp(0xa, 0x2, 0x0) 1.372460509s ago: executing program 3 (id=2001): r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x4}, 0x0, 0x5, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000001c0)='cpu>00\t&&') 1.36243348s ago: executing program 1 (id=2002): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x5, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) 1.316248503s ago: executing program 3 (id=2003): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x1000002, 0x0) r1 = dup(r0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x19) write$P9_RVERSION(r1, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x3c, 0x2) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1bee, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_config_ext={0x4, 0x5}, 0x200, 0x1, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e000000000000000700400009"], 0x50) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x890b, &(0x7f0000000000)) r5 = socket$kcm(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(r5, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0xa, @local}, 0x1b, &(0x7f0000000180)=[{&(0x7f0000000080)="a2", 0xff0e}], 0x4, 0x0, 0x0, 0xa6820000}, 0x1000000) 1.222622141s ago: executing program 1 (id=2004): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x3fffff) 1.198402663s ago: executing program 1 (id=2005): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000000)=0x2) ioctl$PPPIOCSPASS(r2, 0x40107447, &(0x7f0000000100)={0x1, &(0x7f0000000080)=[{0x6, 0xfc}]}) ioctl$PPPIOCSDEBUG(r2, 0x40047440, &(0x7f0000000240)=0x10001) write(r2, &(0x7f0000000280)="4591", 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000040000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000006000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='hrtimer_start\x00', r3}, 0x3d) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='hrtimer_start\x00', r4}, 0x18) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x3}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) open_tree(0xffffffffffffff9c, 0x0, 0x89901) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0100000004000000e27f000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000010000000000000000018110000", @ANYRES32=r5, @ANYRES16=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000008c0)=ANY=[@ANYBLOB="2c0000001d00070f000000000000000007000000", @ANYRES32=r7, @ANYBLOB="00005200060005000100000008000800", @ANYBLOB="eeb5f2"], 0x2c}}, 0x800c840) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', r7, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) getpid() syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r8 = socket$inet(0x2, 0x2, 0x1) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x53, 0x0, 0x1, 0x0, 0x0, 0x200488b4}, 0x4c811) sendmsg$inet(r8, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f00000004c0)="1ed8b7f9d457", 0x6}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x7}, 0x18) 1.151298787s ago: executing program 3 (id=2006): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r0], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') r2 = syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0x114df, 0x0, 0x1, 0x89}, &(0x7f00000003c0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x29c780}) io_uring_enter(r2, 0x3518, 0xaddf, 0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0}, &(0x7f00000002c0), &(0x7f0000000300)=r1}, 0x20) mbind(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4003, &(0x7f0000000c00)=0xc, 0x6, 0x2) socket$nl_route(0x10, 0x3, 0x0) 909.344906ms ago: executing program 2 (id=2007): bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0xffffffffffffffff, 0x10001}, 0xc) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'ip_vti0\x00', &(0x7f0000000040)={'gre0\x00', 0x0, 0x40, 0x7800, 0xffff5034, 0x2, {{0x18, 0x4, 0x3, 0x2, 0x60, 0x67, 0x0, 0xff, 0x2f, 0x0, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x1a}, {[@timestamp_prespec={0x44, 0x1c, 0xf7, 0x3, 0x7, [{@broadcast}, {@private=0xa010100, 0xcc7a}, {@rand_addr=0x64010101, 0x758c}]}, @cipso={0x86, 0x20, 0xffffffffffffffff, [{0x2, 0xc, "9b7dc5dabca6dbebbc7a"}, {0x9, 0xa, "a659d9fa776ce6af"}, {0x0, 0x4, "f6dd"}]}, @lsrr={0x83, 0xb, 0xdf, [@multicast2, @broadcast]}, @ra={0x94, 0x4, 0x1}]}}}}}) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x51c, 0x0, 0x0, 0x0, 0x0, '\x00', r0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r2}, 0x10) kexec_load(0x4, 0x0, 0x0, 0x3e0000) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x40000000015, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="09000000020000006d05"], 0x48) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$SIOCSIFMTU(r4, 0x8922, &(0x7f0000000b40)={'dummy0\x00'}) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000f5dfe4)={0xa, 0x4e22, 0x0, @empty}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) shutdown(r5, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x1e, &(0x7f0000000080)=0x59cc, 0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1200000008000000080000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000db1f9501174000000004a36f025ada1bd00000000000000000a000000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085000000a000000095", @ANYRES64, @ANYRES8=0x0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=r7, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="03000000010000000200000000"], 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={r1, 0xfffffffffffffd66, &(0x7f0000000540)}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="8021000000800400140003006e657464657673696d3000000000"], 0x4c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900030073797a30000000000900010073797a300000000058000000060a010400000000000000000100000008000b40000000000900010073797a3000000000300004802c0001800a00010071756575650000001c000280060002400ffe009b06"], 0xcc}, 0x1, 0x0, 0x0, 0x24000090}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="efec9ce9bc17642c000000000000fbdb008bb790a7df6f67c400002008000b000000000000000000000084e078c90000000000"], 0x2c}}, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x18, 0x1404, 0x1, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x8044) bind$inet(r3, &(0x7f00008a5ff0)={0x2, 0x2, @loopback}, 0x10) syz_open_dev$tty1(0xc, 0x4, 0x2) 847.712221ms ago: executing program 1 (id=2008): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x2, @multicast, 'ip_vti0\x00'}}, 0x1e) connect$pppoe(r0, &(0x7f0000000340)={0x18, 0x0, {0x0, @multicast, 'macvlan0\x00'}}, 0x1e) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x1000002, 0x0) r4 = dup(r3) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000180)=0x19) write$P9_RVERSION(r4, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x3c, 0x2) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1bee, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_config_ext={0x4, 0x5}, 0x200, 0x1, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x890b, &(0x7f0000000000)) r7 = socket$kcm(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(r7, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0xa, @local}, 0x1b, &(0x7f0000000180)=[{&(0x7f0000000080)="a2", 0xff0e}], 0x4, 0x0, 0x0, 0xa6820000}, 0x0) 791.078536ms ago: executing program 2 (id=2009): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x4}, 0x18) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000000240)=ANY=[@ANYBLOB="240100001600010428bd700000000000fe8000000000000000000000000000bbfc01000000000000000000000000000100", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ff02000000000000000000000000000100000000330000000a0101010000000000000000000000000000000000004e340100000000000000000000000000000004000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000a0000002bbd70000000000000000200000000000000000008000020ffffffdf2c0027cc"], 0x124}}, 0x0) r1 = open(0x0, 0x143c62, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) socket(0x2, 0x80805, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x12, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080), 0x64, 0x52b, &(0x7f0000000f80)="$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") r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0700000004000000080000000001000002400200", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/12], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r6}, 0x18) sendmsg$rds(r5, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}], 0x1}}], 0x48}, 0x0) fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) r7 = syz_io_uring_setup(0x568e, &(0x7f0000000100)={0x0, 0x3594, 0x10, 0x1003, 0x21e}, &(0x7f0000000240)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x10, 0x0, 0x0, 0x0, &(0x7f00000005c0), 0x1, 0x8}) io_uring_enter(r7, 0x6efc, 0x3900, 0xb, 0x0, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xb, 0xf, 0x200cc, 0x6, 0x5}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)='T', &(0x7f0000000240), 0x4af, r10}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000700)={0x0, &(0x7f0000000540)=""/245, &(0x7f00000000c0), 0x0, 0x2, r10}, 0x38) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r7, 0x18, &(0x7f00000000c0)={0x1, 0xffffffffffffffff, 0x11, {0x5, 0x1}, 0x1}, 0x1) 694.694813ms ago: executing program 3 (id=2010): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0, 0xffffffffffffffff}, 0x0, &(0x7f0000000040)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='kfree\x00', r2, 0x0, 0x10000001}, 0x18) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_access\x00', 0x0, 0x24, 0x3) 618.60831ms ago: executing program 3 (id=2011): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x3fffff) 617.91097ms ago: executing program 1 (id=2012): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x0) 586.788672ms ago: executing program 3 (id=2013): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfec8d000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103383) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r1, &(0x7f0000000000)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) r2 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x4}, 0x0, 0x5, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0xe7fd}, 0x100002, 0x3, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r5}, &(0x7f0000000380), &(0x7f00000003c0)=r6}, 0x20) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000400)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x98, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000180), &(0x7f00000001c0)=r3}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f00000001c0)='cpu>00\t&&') 570.828604ms ago: executing program 1 (id=2014): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[], 0x0, 0x7ff}, 0x94) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5e8, &(0x7f0000001200)="$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") r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800020095"], &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) socketpair(0xf, 0x3, 0x2, &(0x7f00000001c0)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) clock_getres(0xfffffffffffffff1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) ioctl$sock_inet_SIOCGIFADDR(r3, 0x8915, &(0x7f0000000040)={'netpci0\x00', {0x2, 0x0, @remote}}) write(r3, &(0x7f0000004200)='t', 0x1) sendfile(r3, r2, 0x0, 0x3ffff) sendfile(r3, r2, 0x0, 0x7ffff000) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x70, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r4}, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r5) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r6}, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$inet6_udp(0xa, 0x2, 0x0) 558.795755ms ago: executing program 4 (id=2015): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x5, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) 510.112568ms ago: executing program 0 (id=2016): r0 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x804, &(0x7f0000000040), 0x1, 0x4f9, &(0x7f0000000a40)="$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") bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x0, r0}, 0x18) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x8}}, './file0\x00'}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140), 0x4) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000440)={'ip_vti0\x00', 0x0, 0x8000, 0x20, 0x80000001, 0x35, {{0x6, 0x4, 0x3, 0x39, 0x18, 0x67, 0x0, 0x10, 0x29, 0x0, @empty, @remote, {[@ra={0x94, 0x4, 0x1}]}}}}}) mount_setattr(0xffffffffffffffff, &(0x7f0000001d80)='.\x00', 0x8000, &(0x7f0000001dc0)={0x0, 0x0, 0x40000}, 0x20) bpf$OBJ_GET_MAP(0x7, &(0x7f00000005c0)=@generic={&(0x7f0000000580)='./file0\x00'}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000680), 0x2, 0x0) 428.892985ms ago: executing program 4 (id=2017): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5e8, &(0x7f0000001200)="$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") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socketpair(0xf, 0x3, 0x2, &(0x7f00000001c0)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000040)={'netpci0\x00', {0x2, 0x0, @remote}}) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r1, 0x0, 0x3ffff) sendfile(r2, r1, 0x0, 0x7ffff000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00'}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r3) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4}, 0x10) bpf$MAP_CREATE(0x1400000000000000, &(0x7f0000000100)=ANY=[@ANYBLOB="0f0000000400000004000000040001000000", @ANYRES32, @ANYBLOB="00201d", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000005000000000000000000"], 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$inet6_udp(0xa, 0x2, 0x0) 382.754918ms ago: executing program 0 (id=2018): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000000)=0x2) ioctl$PPPIOCSPASS(r2, 0x40107447, &(0x7f0000000100)={0x1, &(0x7f0000000080)=[{0x6, 0xfc}]}) ioctl$PPPIOCSDEBUG(r2, 0x40047440, &(0x7f0000000240)=0x10001) write(r2, &(0x7f0000000280)="4591", 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000040000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000006000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='hrtimer_start\x00', r3}, 0x3d) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='hrtimer_start\x00', r4}, 0x18) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x3}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) open_tree(0xffffffffffffff9c, 0x0, 0x89901) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0100000004000000e27f000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000010000000000000000018110000", @ANYRES32=r5, @ANYRES16=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000008c0)=ANY=[@ANYBLOB="2c0000001d00070f000000000000000007000000", @ANYRES32=r7, @ANYBLOB="00005200060005000100000008000800", @ANYBLOB="eeb5f2"], 0x2c}}, 0x800c840) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', r7, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) getpid() syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r8 = socket$inet(0x2, 0x2, 0x1) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x53, 0x0, 0x1, 0x0, 0x0, 0x200488b4}, 0x4c811) sendmsg$inet(r8, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f00000004c0)="1ed8b7f9d457", 0x6}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x7}, 0x18) 197.756524ms ago: executing program 2 (id=2019): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095", @ANYRESDEC=r0], &(0x7f0000000000)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00'}, 0x10) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x20c6, 0x80, 0x2, 0x1f9}, &(0x7f0000000480)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r4 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) pwritev(r4, &(0x7f00000013c0)=[{&(0x7f00000001c0)="d9", 0x1}], 0x1, 0x200, 0x8000) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r1, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x183000, 0x23456}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 0 (id=2020): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001240)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xffff}}}, 0x24}}, 0x0) kernel console output (not intermixed with test programs): ce loop4): ext4_xattr_inode_iget:433: comm syz.4.1287: Parent and EA inode have the same ino 15 [ 133.308482][ T7901] EXT4-fs (loop4): 1 orphan inode deleted [ 133.315213][ T7901] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 133.331588][ T7911] rdma_rxe: rxe_newlink: failed to add wg1 [ 133.392221][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.568383][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.721648][ T7914] wg1 speed is unknown, defaulting to 1000 [ 133.786390][ T7920] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1295'. [ 133.797616][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.800483][ T7914] lo speed is unknown, defaulting to 1000 [ 133.859500][ T7926] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1297'. [ 133.978966][ T7928] loop3: detected capacity change from 0 to 128 [ 133.997105][ T7935] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1298'. [ 133.998761][ T7928] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 134.019679][ T7931] loop1: detected capacity change from 0 to 512 [ 134.029944][ T7935] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1298'. [ 134.057533][ T7928] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 134.102248][ T7931] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 134.110658][ T7931] EXT4-fs (loop1): orphan cleanup on readonly fs [ 134.133209][ T7931] EXT4-fs warning (device loop1): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 134.168127][ T7946] loop3: detected capacity change from 0 to 1024 [ 134.180755][ T7931] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 134.192788][ T7946] EXT4-fs: Ignoring removed orlov option [ 134.199293][ T7931] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1294: bg 0: block 40: padding at end of block bitmap is not set [ 134.214686][ T7931] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 134.224780][ T7931] EXT4-fs (loop1): 1 truncate cleaned up [ 134.231637][ T7931] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 134.238040][ T7946] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.249719][ T7923] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=7 sclass=netlink_route_socket pid=7923 comm=syz.1.1294 [ 134.287479][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.570061][ T7960] loop1: detected capacity change from 0 to 128 [ 134.598976][ T7960] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 134.658078][ T7960] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 134.910667][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.011788][ T7978] rdma_rxe: rxe_newlink: failed to add lo [ 135.450786][ T7991] loop3: detected capacity change from 0 to 512 [ 135.467619][ T7991] EXT4-fs (loop3): orphan cleanup on readonly fs [ 135.499440][ T7991] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1314: bg 0: block 248: padding at end of block bitmap is not set [ 135.548780][ T7991] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.1314: Failed to acquire dquot type 1 [ 135.642161][ T7991] EXT4-fs (loop3): 1 truncate cleaned up [ 135.652566][ T7991] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 135.849170][ T8010] loop4: detected capacity change from 0 to 1024 [ 135.866026][ T8010] EXT4-fs: Ignoring removed orlov option [ 135.901492][ T8010] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.061701][ T8023] loop1: detected capacity change from 0 to 512 [ 136.099649][ T8023] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 136.124256][ T8023] EXT4-fs (loop1): orphan cleanup on readonly fs [ 136.159536][ T8023] EXT4-fs warning (device loop1): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 136.206933][ T8023] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 136.219684][ T8023] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1321: bg 0: block 40: padding at end of block bitmap is not set [ 136.248451][ T8023] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 136.295366][ T8023] EXT4-fs (loop1): 1 truncate cleaned up [ 136.309089][ T8023] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 136.341701][ T8020] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=10 sclass=netlink_route_socket pid=8020 comm=syz.1.1321 [ 136.435731][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.619974][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.779480][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.949261][ T8045] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.021971][ T8045] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.119317][ T8050] __nla_validate_parse: 5 callbacks suppressed [ 137.119335][ T8050] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1329'. [ 137.157094][ T8050] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1329'. [ 137.223122][ T8054] loop4: detected capacity change from 0 to 1024 [ 137.232776][ T8054] EXT4-fs: Ignoring removed orlov option [ 137.259495][ T8054] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.349048][ T8052] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1330'. [ 137.658594][ T8063] loop1: detected capacity change from 0 to 512 [ 137.678865][ T8063] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 137.690354][ T8063] EXT4-fs (loop1): orphan cleanup on readonly fs [ 137.710471][ T8063] __quota_error: 89 callbacks suppressed [ 137.710499][ T8063] Quota error (device loop1): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 137.741784][ T8063] EXT4-fs warning (device loop1): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 137.773929][ T8063] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 137.785318][ T8068] rdma_rxe: rxe_newlink: failed to add wg1 [ 137.851393][ T8063] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1333: bg 0: block 40: padding at end of block bitmap is not set [ 137.903266][ T8063] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 137.912950][ T29] audit: type=1326 audit(1755673732.753:3142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8071 comm="syz.2.1335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58974bebe9 code=0x7ffc0000 [ 137.938107][ T29] audit: type=1326 audit(1755673732.763:3143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8073 comm="syz.0.1336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa5eb7ebe9 code=0x7ffc0000 [ 137.961704][ T29] audit: type=1326 audit(1755673732.763:3144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8073 comm="syz.0.1336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=280 compat=0 ip=0x7faa5eb7ebe9 code=0x7ffc0000 [ 137.985230][ T29] audit: type=1326 audit(1755673732.763:3145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8073 comm="syz.0.1336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa5eb7ebe9 code=0x7ffc0000 [ 138.008813][ T29] audit: type=1326 audit(1755673732.783:3146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8071 comm="syz.2.1335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58974bebe9 code=0x7ffc0000 [ 138.039892][ T8063] EXT4-fs (loop1): 1 truncate cleaned up [ 138.047943][ T8063] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 138.097531][ T8061] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=10 sclass=netlink_route_socket pid=8061 comm=syz.1.1333 [ 138.101589][ T29] audit: type=1326 audit(1755673732.803:3147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8071 comm="syz.2.1335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f58974bebe9 code=0x7ffc0000 [ 138.133521][ T29] audit: type=1326 audit(1755673732.803:3148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8071 comm="syz.2.1335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58974bebe9 code=0x7ffc0000 [ 138.157211][ T29] audit: type=1326 audit(1755673732.803:3149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8071 comm="syz.2.1335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58974bebe9 code=0x7ffc0000 [ 138.159905][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.180838][ T29] audit: type=1326 audit(1755673732.803:3150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8071 comm="syz.2.1335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=451 compat=0 ip=0x7f58974bebe9 code=0x7ffc0000 [ 138.301233][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.401207][ T8085] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1341'. [ 138.433839][ T8087] loop1: detected capacity change from 0 to 512 [ 138.454154][ T8091] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 138.464462][ T8091] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 138.474288][ T8085] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1341'. [ 138.488994][ T8087] EXT4-fs error (device loop1): ext4_iget_extra_inode:5104: inode #15: comm syz.1.1340: corrupted in-inode xattr: invalid ea_ino [ 138.505152][ T8087] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.1340: couldn't read orphan inode 15 (err -117) [ 138.527336][ T8094] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=9 sclass=netlink_route_socket pid=8094 comm=syz.2.1342 [ 138.594116][ T8087] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 138.610909][ T8096] loop3: detected capacity change from 0 to 512 [ 138.637654][ T8096] EXT4-fs: Ignoring removed oldalloc option [ 138.662284][ T8096] EXT4-fs error (device loop3): ext4_xattr_inode_iget:433: comm syz.3.1344: Parent and EA inode have the same ino 15 [ 138.675950][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.679891][ T8096] EXT4-fs error (device loop3): ext4_xattr_inode_iget:433: comm syz.3.1344: Parent and EA inode have the same ino 15 [ 138.697689][ T8096] EXT4-fs (loop3): 1 orphan inode deleted [ 138.704079][ T8096] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 138.730156][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.872158][ T8111] loop3: detected capacity change from 0 to 128 [ 138.904536][ T8111] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 138.919817][ T8116] rdma_rxe: rxe_newlink: failed to add wg1 [ 138.960866][ T8111] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 139.133087][ T8124] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1355'. [ 139.145078][ T8124] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1355'. [ 139.311455][ T8131] loop4: detected capacity change from 0 to 512 [ 139.362157][ T8131] EXT4-fs error (device loop4): ext4_iget_extra_inode:5104: inode #15: comm syz.4.1358: corrupted in-inode xattr: invalid ea_ino [ 139.388100][ T8131] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.1358: couldn't read orphan inode 15 (err -117) [ 139.412337][ T8131] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 139.440149][ T8133] loop1: detected capacity change from 0 to 512 [ 139.447791][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.467827][ T8133] EXT4-fs: Ignoring removed oldalloc option [ 139.558133][ T8133] EXT4-fs error (device loop1): ext4_xattr_inode_iget:433: comm syz.1.1359: Parent and EA inode have the same ino 15 [ 139.586648][ T8133] EXT4-fs error (device loop1): ext4_xattr_inode_iget:433: comm syz.1.1359: Parent and EA inode have the same ino 15 [ 139.618383][ T8145] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.645353][ T8133] EXT4-fs (loop1): 1 orphan inode deleted [ 139.651433][ T8145] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 139.666227][ T8133] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 139.740491][ T8154] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1368'. [ 139.746341][ T8149] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1366'. [ 139.761856][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.772845][ T8154] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1368'. [ 139.945102][ T8171] loop4: detected capacity change from 0 to 512 [ 139.955441][ T8171] EXT4-fs error (device loop4): ext4_iget_extra_inode:5104: inode #15: comm syz.4.1374: corrupted in-inode xattr: invalid ea_ino [ 139.978773][ T8171] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.1374: couldn't read orphan inode 15 (err -117) [ 140.074807][ T8166] wg1 speed is unknown, defaulting to 1000 [ 140.097488][ T8171] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 140.130553][ T8178] loop3: detected capacity change from 0 to 1024 [ 140.157372][ T8178] EXT4-fs: Ignoring removed orlov option [ 140.191653][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.225373][ T8178] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.548314][ T8194] loop4: detected capacity change from 0 to 512 [ 140.575751][ T8194] EXT4-fs warning (device loop4): ext4_enable_quotas:7172: Failed to enable quota tracking (type=0, err=-13, ino=3). Please run e2fsck to fix. [ 140.600758][ T8166] lo speed is unknown, defaulting to 1000 [ 140.615675][ T8194] EXT4-fs (loop4): mount failed [ 140.896671][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.065602][ T8214] wg1 speed is unknown, defaulting to 1000 [ 141.089301][ T8225] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.168947][ T8225] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.179946][ T8214] lo speed is unknown, defaulting to 1000 [ 141.306660][ T8225] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.324630][ T8232] loop4: detected capacity change from 0 to 512 [ 141.338348][ T8232] EXT4-fs (loop4): orphan cleanup on readonly fs [ 141.346093][ T8232] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1396: bg 0: block 248: padding at end of block bitmap is not set [ 141.367086][ T8232] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.1396: Failed to acquire dquot type 1 [ 141.389245][ T8232] EXT4-fs (loop4): 1 truncate cleaned up [ 141.389489][ T8225] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.396407][ T8232] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 141.495084][ T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.528968][ T1757] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.556298][ T1757] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.599329][ T1757] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.783779][ T8241] loop3: detected capacity change from 0 to 1024 [ 141.815063][ T8241] EXT4-fs: Ignoring removed orlov option [ 141.836643][ T8241] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.340124][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.376590][ T8258] __nla_validate_parse: 10 callbacks suppressed [ 142.376608][ T8258] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1401'. [ 142.404267][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.506893][ T8258] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1401'. [ 142.523884][ T8261] loop4: detected capacity change from 0 to 1024 [ 142.537048][ T8261] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 142.548020][ T8261] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 142.548745][ T8264] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1412'. [ 142.604694][ T8261] EXT4-fs error (device loop4): ext4_ext_check_inode:523: inode #2: comm syz.4.1402: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 2, max 1(4), depth 0(0) [ 142.611032][ T8264] loop3: detected capacity change from 0 to 512 [ 142.654455][ T8261] EXT4-fs (loop4): no journal found [ 142.660258][ T8264] EXT4-fs (loop3): orphan cleanup on readonly fs [ 142.674001][ T8264] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1412: bg 0: block 248: padding at end of block bitmap is not set [ 142.721075][ T8264] __quota_error: 159 callbacks suppressed [ 142.721121][ T8264] Quota error (device loop3): write_blk: dquota write failed [ 142.734349][ T8264] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 142.744428][ T8264] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.1412: Failed to acquire dquot type 1 [ 142.817164][ T29] audit: type=1326 audit(1755673737.653:3308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8274 comm="syz.2.1407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58974bebe9 code=0x7ffc0000 [ 142.840740][ T29] audit: type=1326 audit(1755673737.653:3309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8274 comm="syz.2.1407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58974bebe9 code=0x7ffc0000 [ 142.864310][ T29] audit: type=1326 audit(1755673737.653:3310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8274 comm="syz.2.1407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f58974bebe9 code=0x7ffc0000 [ 142.887733][ T29] audit: type=1326 audit(1755673737.653:3311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8274 comm="syz.2.1407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58974bebe9 code=0x7ffc0000 [ 142.911294][ T29] audit: type=1326 audit(1755673737.663:3312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8274 comm="syz.2.1407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=451 compat=0 ip=0x7f58974bebe9 code=0x7ffc0000 [ 142.936827][ T29] audit: type=1326 audit(1755673737.663:3313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8274 comm="syz.2.1407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58974bebe9 code=0x7ffc0000 [ 142.960406][ T29] audit: type=1326 audit(1755673737.663:3314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8274 comm="syz.2.1407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=148 compat=0 ip=0x7f58974bebe9 code=0x7ffc0000 [ 142.983844][ T29] audit: type=1326 audit(1755673737.663:3315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8274 comm="syz.2.1407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58974bebe9 code=0x7ffc0000 [ 143.095577][ T8264] EXT4-fs (loop3): 1 truncate cleaned up [ 143.161518][ T8264] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 143.303765][ T8288] loop1: detected capacity change from 0 to 512 [ 143.322439][ T8288] EXT4-fs: Ignoring removed oldalloc option [ 143.365111][ T8288] EXT4-fs error (device loop1): ext4_xattr_inode_iget:433: comm syz.1.1411: Parent and EA inode have the same ino 15 [ 143.421950][ T8293] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1413'. [ 143.463033][ T8288] EXT4-fs error (device loop1): ext4_xattr_inode_iget:433: comm syz.1.1411: Parent and EA inode have the same ino 15 [ 143.476142][ T8297] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1415'. [ 143.489632][ T8293] loop4: detected capacity change from 0 to 512 [ 143.509382][ T8288] EXT4-fs (loop1): 1 orphan inode deleted [ 143.516118][ T8293] EXT4-fs (loop4): orphan cleanup on readonly fs [ 143.529453][ T8297] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1415'. [ 143.539357][ T8293] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1413: bg 0: block 248: padding at end of block bitmap is not set [ 143.564464][ T8288] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 143.607541][ T8293] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.1413: Failed to acquire dquot type 1 [ 143.632870][ T8293] EXT4-fs (loop4): 1 truncate cleaned up [ 143.634455][ T8302] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1416'. [ 143.650691][ T8293] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 143.684462][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.892405][ T8320] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1424'. [ 143.969945][ T8320] loop1: detected capacity change from 0 to 512 [ 144.045034][ T8320] EXT4-fs (loop1): orphan cleanup on readonly fs [ 144.062002][ T8320] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1424: bg 0: block 248: padding at end of block bitmap is not set [ 144.110465][ T8320] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.1424: Failed to acquire dquot type 1 [ 144.141171][ T8320] EXT4-fs (loop1): 1 truncate cleaned up [ 144.163634][ T8320] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 144.182383][ T8332] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1427'. [ 144.217187][ T8332] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1427'. [ 144.561512][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.650309][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.818383][ T8363] loop3: detected capacity change from 0 to 512 [ 144.836473][ T8363] EXT4-fs: Ignoring removed oldalloc option [ 144.907021][ T8363] EXT4-fs error (device loop3): ext4_xattr_inode_iget:433: comm syz.3.1437: Parent and EA inode have the same ino 15 [ 144.975525][ T8363] EXT4-fs error (device loop3): ext4_xattr_inode_iget:433: comm syz.3.1437: Parent and EA inode have the same ino 15 [ 145.001245][ T8363] EXT4-fs (loop3): 1 orphan inode deleted [ 145.009284][ T8363] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 145.132753][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.177701][ T8387] rdma_rxe: rxe_newlink: failed to add wg1 [ 145.185581][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.326152][ T8392] loop3: detected capacity change from 0 to 1024 [ 145.376265][ T8392] EXT4-fs: Ignoring removed orlov option [ 145.429665][ T8392] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.943802][ T8414] loop4: detected capacity change from 0 to 512 [ 146.035640][ T8414] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 146.097819][ T8414] EXT4-fs (loop4): orphan cleanup on readonly fs [ 146.110184][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.123217][ T8414] EXT4-fs warning (device loop4): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 146.210093][ T8425] loop3: detected capacity change from 0 to 512 [ 146.220349][ T8414] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 146.227510][ T8414] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1455: bg 0: block 40: padding at end of block bitmap is not set [ 146.247938][ T8414] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 146.251378][ T8425] EXT4-fs error (device loop3): ext4_iget_extra_inode:5104: inode #15: comm syz.3.1458: corrupted in-inode xattr: invalid ea_ino [ 146.264761][ T8414] EXT4-fs (loop4): 1 truncate cleaned up [ 146.339855][ T8425] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.1458: couldn't read orphan inode 15 (err -117) [ 146.340401][ T8412] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=10 sclass=netlink_route_socket pid=8412 comm=syz.4.1455 [ 146.574176][ T8447] loop4: detected capacity change from 0 to 128 [ 146.584204][ T8443] loop3: detected capacity change from 0 to 512 [ 146.607263][ T8443] EXT4-fs: Ignoring removed oldalloc option [ 146.613974][ T8447] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 146.652471][ T8443] EXT4-fs error (device loop3): ext4_xattr_inode_iget:433: comm syz.3.1465: Parent and EA inode have the same ino 15 [ 146.672881][ T8447] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 146.788566][ T8443] EXT4-fs error (device loop3): ext4_xattr_inode_iget:433: comm syz.3.1465: Parent and EA inode have the same ino 15 [ 146.827678][ T8443] EXT4-fs (loop3): 1 orphan inode deleted [ 146.865861][ T8455] loop4: detected capacity change from 0 to 1024 [ 146.937730][ T8455] EXT4-fs: Ignoring removed orlov option [ 146.963527][ T8461] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 146.985963][ T8461] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 146.993614][ T8463] loop1: detected capacity change from 0 to 512 [ 147.168561][ T8463] EXT4-fs error (device loop1): ext4_iget_extra_inode:5104: inode #15: comm syz.1.1473: corrupted in-inode xattr: invalid ea_ino [ 147.208407][ T8463] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.1473: couldn't read orphan inode 15 (err -117) [ 147.436271][ T8471] __nla_validate_parse: 5 callbacks suppressed [ 147.436290][ T8471] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1475'. [ 147.472010][ T8474] loop1: detected capacity change from 0 to 512 [ 147.524596][ T8471] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1475'. [ 147.557953][ T8474] EXT4-fs warning (device loop1): ext4_enable_quotas:7172: Failed to enable quota tracking (type=0, err=-13, ino=3). Please run e2fsck to fix. [ 147.577792][ T8474] EXT4-fs (loop1): mount failed [ 147.617983][ T8481] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1478'. [ 147.731337][ T29] kauditd_printk_skb: 172 callbacks suppressed [ 147.731355][ T29] audit: type=1326 audit(1755673742.573:3483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8489 comm="syz.3.1483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0777caebe9 code=0x7ffc0000 [ 147.788383][ T29] audit: type=1326 audit(1755673742.583:3484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8489 comm="syz.3.1483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f0777caebe9 code=0x7ffc0000 [ 147.807339][ T8490] loop3: detected capacity change from 0 to 512 [ 147.812089][ T29] audit: type=1326 audit(1755673742.583:3485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8489 comm="syz.3.1483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f0777caec23 code=0x7ffc0000 [ 147.841492][ T29] audit: type=1326 audit(1755673742.583:3486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8489 comm="syz.3.1483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f0777cad69f code=0x7ffc0000 [ 147.864752][ T29] audit: type=1326 audit(1755673742.583:3487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8489 comm="syz.3.1483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f0777caec77 code=0x7ffc0000 [ 147.889681][ T8490] EXT4-fs: Ignoring removed oldalloc option [ 147.951862][ T8490] EXT4-fs error (device loop3): ext4_xattr_inode_iget:433: comm syz.3.1483: Parent and EA inode have the same ino 15 [ 148.014194][ T8490] EXT4-fs error (device loop3): ext4_xattr_inode_iget:433: comm syz.3.1483: Parent and EA inode have the same ino 15 [ 148.026844][ T29] audit: type=1326 audit(1755673742.653:3488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8489 comm="syz.3.1483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0777cad550 code=0x7ffc0000 [ 148.050418][ T29] audit: type=1326 audit(1755673742.653:3489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8489 comm="syz.3.1483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0777cae7eb code=0x7ffc0000 [ 148.069771][ T8493] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1479'. [ 148.073817][ T29] audit: type=1326 audit(1755673742.733:3490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8489 comm="syz.3.1483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f0777cad84a code=0x7ffc0000 [ 148.073860][ T29] audit: type=1326 audit(1755673742.733:3491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8489 comm="syz.3.1483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f0777cad84a code=0x7ffc0000 [ 148.073982][ T29] audit: type=1326 audit(1755673742.733:3492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8489 comm="syz.3.1483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f0777cad457 code=0x7ffc0000 [ 148.177963][ T8490] EXT4-fs (loop3): 1 orphan inode deleted [ 148.268338][ T8511] loop4: detected capacity change from 0 to 1024 [ 148.275447][ T8511] EXT4-fs: Ignoring removed orlov option [ 148.362821][ T8519] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1490'. [ 148.388088][ T8519] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1490'. [ 148.468558][ T8527] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 148.491167][ T8527] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 148.616260][ T8537] loop1: detected capacity change from 0 to 128 [ 148.637693][ T8539] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1495'. [ 148.647593][ T8537] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 148.696489][ T8537] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 148.743287][ T8541] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1496'. [ 148.841992][ T8550] loop3: detected capacity change from 0 to 512 [ 148.867495][ T8550] EXT4-fs: Ignoring removed oldalloc option [ 148.876262][ T8554] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1501'. [ 148.890968][ T8550] EXT4-fs error (device loop3): ext4_xattr_inode_iget:433: comm syz.3.1498: Parent and EA inode have the same ino 15 [ 148.919114][ T8550] EXT4-fs error (device loop3): ext4_xattr_inode_iget:433: comm syz.3.1498: Parent and EA inode have the same ino 15 [ 148.942618][ T8550] EXT4-fs (loop3): 1 orphan inode deleted [ 148.942702][ T8554] loop4: detected capacity change from 0 to 512 [ 148.969124][ T8554] EXT4-fs (loop4): orphan cleanup on readonly fs [ 148.996569][ T8554] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1501: bg 0: block 248: padding at end of block bitmap is not set [ 149.011838][ T8554] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.1501: Failed to acquire dquot type 1 [ 149.025668][ T8554] EXT4-fs (loop4): 1 truncate cleaned up [ 149.324831][ T8579] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.389624][ T8579] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.537820][ T8579] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.600410][ T8579] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.807813][ T8591] netlink: 464 bytes leftover after parsing attributes in process `syz.4.1512'. [ 149.808760][ T4626] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.871809][ T4626] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.891548][ T4626] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.915419][ T4626] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.972040][ T8599] loop1: detected capacity change from 0 to 512 [ 150.006051][ T8599] EXT4-fs (loop1): orphan cleanup on readonly fs [ 150.027851][ T8599] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1515: bg 0: block 248: padding at end of block bitmap is not set [ 150.044280][ T8599] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.1515: Failed to acquire dquot type 1 [ 150.080692][ T8599] EXT4-fs (loop1): 1 truncate cleaned up [ 150.116840][ T8604] loop3: detected capacity change from 0 to 512 [ 150.128773][ T8604] EXT4-fs: Ignoring removed oldalloc option [ 150.185182][ T8604] EXT4-fs error (device loop3): ext4_xattr_inode_iget:433: comm syz.3.1517: Parent and EA inode have the same ino 15 [ 150.395138][ T8604] EXT4-fs error (device loop3): ext4_xattr_inode_iget:433: comm syz.3.1517: Parent and EA inode have the same ino 15 [ 150.437444][ T8604] EXT4-fs (loop3): 1 orphan inode deleted [ 150.649527][ T8624] loop3: detected capacity change from 0 to 1024 [ 150.674160][ T8624] EXT4-fs: Ignoring removed orlov option [ 150.766397][ T8626] loop4: detected capacity change from 0 to 512 [ 150.832875][ T8626] EXT4-fs (loop4): orphan cleanup on readonly fs [ 150.859149][ T8626] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1521: bg 0: block 248: padding at end of block bitmap is not set [ 150.860856][ T8636] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.889953][ T8626] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.1521: Failed to acquire dquot type 1 [ 151.035724][ T8626] EXT4-fs (loop4): 1 truncate cleaned up [ 151.161665][ T8636] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.284104][ T8651] loop1: detected capacity change from 0 to 128 [ 151.299264][ T8636] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.327731][ T8651] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 151.367373][ T8651] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 151.401142][ T8636] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.493543][ T8659] rdma_rxe: rxe_newlink: failed to add wg1 [ 151.498171][ T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.577069][ T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.616309][ T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.661960][ T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.720416][ T8667] loop1: detected capacity change from 0 to 512 [ 151.729065][ T8668] rdma_rxe: rxe_newlink: failed to add wg1 [ 151.759859][ T8667] EXT4-fs (loop1): orphan cleanup on readonly fs [ 151.792385][ T8667] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1532: bg 0: block 248: padding at end of block bitmap is not set [ 151.813299][ T8667] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.1532: Failed to acquire dquot type 1 [ 151.826283][ T8667] EXT4-fs (loop1): 1 truncate cleaned up [ 152.354114][ T8683] loop3: detected capacity change from 0 to 1024 [ 152.403429][ T8683] EXT4-fs: Ignoring removed orlov option [ 152.766485][ T8706] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.822565][ T8706] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.934328][ T8706] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.953034][ T8711] loop3: detected capacity change from 0 to 1024 [ 152.964064][ T8710] __nla_validate_parse: 4 callbacks suppressed [ 152.964082][ T8710] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1542'. [ 152.984296][ T8711] EXT4-fs: Ignoring removed orlov option [ 153.023193][ T8710] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1542'. [ 153.034743][ T8706] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.107569][ T4788] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.116125][ T4788] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.152085][ T4788] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.160461][ T4788] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.200595][ T8718] loop1: detected capacity change from 0 to 128 [ 153.270049][ T8718] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 153.312860][ T8718] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 153.821814][ T8739] loop1: detected capacity change from 0 to 1024 [ 153.832952][ T8741] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1554'. [ 153.850783][ T8741] loop3: detected capacity change from 0 to 512 [ 153.857728][ T8739] EXT4-fs: Ignoring removed orlov option [ 153.905693][ T8741] EXT4-fs (loop3): orphan cleanup on readonly fs [ 153.943005][ T8741] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1554: bg 0: block 248: padding at end of block bitmap is not set [ 153.978295][ T8741] __quota_error: 148 callbacks suppressed [ 153.978309][ T8741] Quota error (device loop3): write_blk: dquota write failed [ 153.991565][ T8741] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 154.001548][ T8741] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.1554: Failed to acquire dquot type 1 [ 154.018905][ T8741] EXT4-fs (loop3): 1 truncate cleaned up [ 154.050510][ T8746] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1555'. [ 154.059878][ T8746] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1555'. [ 154.562018][ T8770] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1561'. [ 155.038482][ T8790] loop1: detected capacity change from 0 to 512 [ 155.046256][ T8791] netlink: 'syz.3.1565': attribute type 11 has an invalid length. [ 155.062739][ T8791] loop3: detected capacity change from 0 to 512 [ 155.069226][ T29] audit: type=1326 audit(1755673749.893:3633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8789 comm="syz.3.1565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0777caebe9 code=0x7ffc0000 [ 155.092763][ T29] audit: type=1326 audit(1755673749.893:3634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8789 comm="syz.3.1565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0777caebe9 code=0x7ffc0000 [ 155.116242][ T29] audit: type=1326 audit(1755673749.903:3635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8789 comm="syz.3.1565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0777caebe9 code=0x7ffc0000 [ 155.139723][ T29] audit: type=1326 audit(1755673749.903:3636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8789 comm="syz.3.1565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0777caebe9 code=0x7ffc0000 [ 155.163164][ T29] audit: type=1326 audit(1755673749.903:3637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8789 comm="syz.3.1565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0777caebe9 code=0x7ffc0000 [ 155.186628][ T29] audit: type=1326 audit(1755673749.903:3638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8789 comm="syz.3.1565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0777caebe9 code=0x7ffc0000 [ 155.210171][ T29] audit: type=1326 audit(1755673749.903:3639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8789 comm="syz.3.1565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0777caebe9 code=0x7ffc0000 [ 155.233781][ T29] audit: type=1326 audit(1755673749.903:3640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8789 comm="syz.3.1565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=36 compat=0 ip=0x7f0777caebe9 code=0x7ffc0000 [ 155.272225][ T8791] EXT4-fs warning (device loop3): ext4_enable_quotas:7172: Failed to enable quota tracking (type=0, err=-13, ino=3). Please run e2fsck to fix. [ 155.289984][ T8790] EXT4-fs warning (device loop1): ext4_enable_quotas:7172: Failed to enable quota tracking (type=0, err=-13, ino=3). Please run e2fsck to fix. [ 155.305534][ T8790] EXT4-fs (loop1): mount failed [ 155.307424][ T8791] EXT4-fs (loop3): mount failed [ 155.358141][ T8797] loop3: detected capacity change from 0 to 128 [ 155.365097][ T8797] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 155.423569][ T8797] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 155.697400][ T8819] syz0: rxe_newlink: already configured on wg1 [ 155.821595][ T8826] loop1: detected capacity change from 0 to 1024 [ 155.864458][ T8826] EXT4-fs: Ignoring removed orlov option [ 155.978193][ T8833] loop3: detected capacity change from 0 to 128 [ 155.985593][ T8833] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 156.003327][ T8833] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 156.165982][ T8841] loop3: detected capacity change from 0 to 512 [ 156.238628][ T8841] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 156.255890][ T8841] EXT4-fs (loop3): orphan cleanup on readonly fs [ 156.271864][ T8841] EXT4-fs warning (device loop3): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 156.326234][ T8841] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 156.354046][ T8847] loop4: detected capacity change from 0 to 512 [ 156.359965][ T8841] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1582: bg 0: block 40: padding at end of block bitmap is not set [ 156.367882][ T8847] EXT4-fs: Ignoring removed oldalloc option [ 156.390253][ T8841] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 156.399875][ T8841] EXT4-fs (loop3): 1 truncate cleaned up [ 156.439020][ T8847] EXT4-fs error (device loop4): ext4_xattr_inode_iget:433: comm syz.4.1584: Parent and EA inode have the same ino 15 [ 156.443123][ T8838] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=10 sclass=netlink_route_socket pid=8838 comm=syz.3.1582 [ 156.511516][ T8847] EXT4-fs error (device loop4): ext4_xattr_inode_iget:433: comm syz.4.1584: Parent and EA inode have the same ino 15 [ 156.574175][ T8847] EXT4-fs (loop4): 1 orphan inode deleted [ 156.714513][ T8865] loop1: detected capacity change from 0 to 128 [ 156.725425][ T8865] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 156.746616][ T8867] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1593'. [ 156.761228][ T8869] FAULT_INJECTION: forcing a failure. [ 156.761228][ T8869] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 156.774553][ T8869] CPU: 0 UID: 0 PID: 8869 Comm: syz.3.1591 Not tainted syzkaller #0 PREEMPT(voluntary) [ 156.774588][ T8869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 156.774604][ T8869] Call Trace: [ 156.774631][ T8869] [ 156.774639][ T8869] __dump_stack+0x1d/0x30 [ 156.774665][ T8869] dump_stack_lvl+0xe8/0x140 [ 156.774690][ T8869] dump_stack+0x15/0x1b [ 156.774710][ T8869] should_fail_ex+0x265/0x280 [ 156.774736][ T8869] should_fail+0xb/0x20 [ 156.774758][ T8869] should_fail_usercopy+0x1a/0x20 [ 156.774820][ T8869] strncpy_from_user+0x25/0x230 [ 156.774932][ T8869] ? __kmalloc_cache_noprof+0x189/0x320 [ 156.774971][ T8869] __se_sys_memfd_create+0x1ff/0x590 [ 156.774999][ T8869] __x64_sys_memfd_create+0x31/0x40 [ 156.775040][ T8869] x64_sys_call+0x2abe/0x2ff0 [ 156.775076][ T8869] do_syscall_64+0xd2/0x200 [ 156.775107][ T8869] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 156.775143][ T8869] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 156.775168][ T8869] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.775270][ T8869] RIP: 0033:0x7f0777caebe9 [ 156.775291][ T8869] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 156.775314][ T8869] RSP: 002b:00007f07766f5e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 156.775338][ T8869] RAX: ffffffffffffffda RBX: 00000000000004e4 RCX: 00007f0777caebe9 [ 156.775353][ T8869] RDX: 00007f07766f5ef0 RSI: 0000000000000000 RDI: 00007f0777d327e8 [ 156.775422][ T8869] RBP: 0000200000000240 R08: 00007f07766f5bb7 R09: 00007f07766f5e40 [ 156.775436][ T8869] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000100 [ 156.775451][ T8869] R13: 00007f07766f5ef0 R14: 00007f07766f5eb0 R15: 0000200000002080 [ 156.775547][ T8869] [ 156.776186][ T8865] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 156.992996][ T8878] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1596'. [ 157.045382][ T8878] loop1: detected capacity change from 0 to 512 [ 157.070653][ T8878] EXT4-fs (loop1): orphan cleanup on readonly fs [ 157.092991][ T8878] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1596: bg 0: block 248: padding at end of block bitmap is not set [ 157.145837][ T8878] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.1596: Failed to acquire dquot type 1 [ 157.203050][ T8878] EXT4-fs (loop1): 1 truncate cleaned up [ 157.213353][ T8891] loop3: detected capacity change from 0 to 512 [ 157.220237][ T8891] EXT4-fs: Ignoring removed oldalloc option [ 157.241448][ T8891] EXT4-fs error (device loop3): ext4_xattr_inode_iget:433: comm syz.3.1599: Parent and EA inode have the same ino 15 [ 157.280669][ T8891] EXT4-fs error (device loop3): ext4_xattr_inode_iget:433: comm syz.3.1599: Parent and EA inode have the same ino 15 [ 157.319709][ T8891] EXT4-fs (loop3): 1 orphan inode deleted [ 157.455013][ T8906] FAULT_INJECTION: forcing a failure. [ 157.455013][ T8906] name failslab, interval 1, probability 0, space 0, times 0 [ 157.467841][ T8906] CPU: 1 UID: 0 PID: 8906 Comm: syz.3.1605 Not tainted syzkaller #0 PREEMPT(voluntary) [ 157.467894][ T8906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 157.467910][ T8906] Call Trace: [ 157.467917][ T8906] [ 157.467923][ T8906] __dump_stack+0x1d/0x30 [ 157.467948][ T8906] dump_stack_lvl+0xe8/0x140 [ 157.467972][ T8906] dump_stack+0x15/0x1b [ 157.468045][ T8906] should_fail_ex+0x265/0x280 [ 157.468152][ T8906] should_failslab+0x8c/0xb0 [ 157.468185][ T8906] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 157.468300][ T8906] ? sidtab_sid2str_get+0xa0/0x130 [ 157.468327][ T8906] kmemdup_noprof+0x2b/0x70 [ 157.468432][ T8906] sidtab_sid2str_get+0xa0/0x130 [ 157.468456][ T8906] security_sid_to_context_core+0x1eb/0x2e0 [ 157.468485][ T8906] security_sid_to_context+0x27/0x40 [ 157.468529][ T8906] selinux_lsmprop_to_secctx+0x67/0xf0 [ 157.468611][ T8906] security_lsmprop_to_secctx+0x43/0x80 [ 157.468647][ T8906] audit_log_task_context+0x77/0x190 [ 157.468692][ T8906] audit_log_task+0xf4/0x250 [ 157.468801][ T8906] audit_seccomp+0x61/0x100 [ 157.468834][ T8906] ? __seccomp_filter+0x68c/0x10d0 [ 157.468919][ T8906] __seccomp_filter+0x69d/0x10d0 [ 157.468948][ T8906] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 157.469088][ T8906] ? vfs_write+0x7e8/0x960 [ 157.469111][ T8906] ? __rcu_read_unlock+0x4f/0x70 [ 157.469132][ T8906] ? __fget_files+0x184/0x1c0 [ 157.469173][ T8906] __secure_computing+0x82/0x150 [ 157.469200][ T8906] syscall_trace_enter+0xcf/0x1e0 [ 157.469232][ T8906] do_syscall_64+0xac/0x200 [ 157.469299][ T8906] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 157.469326][ T8906] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 157.469357][ T8906] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.469384][ T8906] RIP: 0033:0x7f0777caebe9 [ 157.469548][ T8906] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 157.469571][ T8906] RSP: 002b:00007f0776717038 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 157.469595][ T8906] RAX: ffffffffffffffda RBX: 00007f0777ed5fa0 RCX: 00007f0777caebe9 [ 157.469640][ T8906] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffffffffffff [ 157.469654][ T8906] RBP: 00007f0776717090 R08: 0000000000001000 R09: 0000000000000000 [ 157.469670][ T8906] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 157.469685][ T8906] R13: 00007f0777ed6038 R14: 00007f0777ed5fa0 R15: 00007ffe70a961b8 [ 157.469710][ T8906] [ 157.813284][ T8916] loop3: detected capacity change from 0 to 128 [ 157.824794][ T8916] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 157.875121][ T8916] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 157.904985][ T8922] loop4: detected capacity change from 0 to 1024 [ 157.912095][ T8924] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1611'. [ 157.921486][ T8922] EXT4-fs: Ignoring removed orlov option [ 158.090480][ T8931] loop1: detected capacity change from 0 to 512 [ 158.097542][ T8931] EXT4-fs: Ignoring removed oldalloc option [ 158.119846][ T8931] EXT4-fs error (device loop1): ext4_xattr_inode_iget:433: comm syz.1.1612: Parent and EA inode have the same ino 15 [ 158.139013][ T8931] EXT4-fs error (device loop1): ext4_xattr_inode_iget:433: comm syz.1.1612: Parent and EA inode have the same ino 15 [ 158.245642][ T8944] loop3: detected capacity change from 0 to 128 [ 158.265000][ T8944] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 158.326651][ T8944] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 158.355284][ T8931] EXT4-fs (loop1): 1 orphan inode deleted [ 158.478703][ T8952] loop3: detected capacity change from 0 to 1024 [ 158.485843][ T8952] EXT4-fs: Ignoring removed orlov option [ 158.600199][ T8964] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1622'. [ 158.653823][ T8967] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.685667][ T8967] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.708336][ T8971] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1625'. [ 158.731600][ T8971] loop4: detected capacity change from 0 to 512 [ 158.759957][ T8971] EXT4-fs (loop4): orphan cleanup on readonly fs [ 158.768466][ T8971] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1625: bg 0: block 248: padding at end of block bitmap is not set [ 158.845516][ T8971] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.1625: Failed to acquire dquot type 1 [ 158.884586][ T8971] EXT4-fs (loop4): 1 truncate cleaned up [ 158.907903][ T8971] EXT4-fs mount: 51 callbacks suppressed [ 158.907922][ T8971] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 158.959433][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.989030][ T8978] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1627'. [ 159.013062][ T29] kauditd_printk_skb: 99 callbacks suppressed [ 159.013079][ T29] audit: type=1326 audit(1755673753.853:3734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8979 comm="syz.3.1626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0777caebe9 code=0x7ffc0000 [ 159.083591][ T29] audit: type=1326 audit(1755673753.883:3735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8979 comm="syz.3.1626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0777caebe9 code=0x7ffc0000 [ 159.107053][ T29] audit: type=1326 audit(1755673753.883:3736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8979 comm="syz.3.1626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0777caebe9 code=0x7ffc0000 [ 159.130469][ T29] audit: type=1326 audit(1755673753.883:3737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8979 comm="syz.3.1626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0777caebe9 code=0x7ffc0000 [ 159.154044][ T29] audit: type=1326 audit(1755673753.883:3738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8979 comm="syz.3.1626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=451 compat=0 ip=0x7f0777caebe9 code=0x7ffc0000 [ 159.177527][ T29] audit: type=1326 audit(1755673753.883:3739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8979 comm="syz.3.1626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0777caebe9 code=0x7ffc0000 [ 159.201044][ T29] audit: type=1326 audit(1755673753.883:3740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8979 comm="syz.3.1626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0777caebe9 code=0x7ffc0000 [ 159.224551][ T29] audit: type=1326 audit(1755673753.883:3741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8979 comm="syz.3.1626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=148 compat=0 ip=0x7f0777caebe9 code=0x7ffc0000 [ 159.248134][ T29] audit: type=1326 audit(1755673753.883:3742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8979 comm="syz.3.1626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0777caebe9 code=0x7ffc0000 [ 159.271575][ T29] audit: type=1326 audit(1755673753.883:3743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8979 comm="syz.3.1626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0777caebe9 code=0x7ffc0000 [ 159.296268][ T8980] loop3: detected capacity change from 0 to 512 [ 159.321872][ T8980] EXT4-fs: Ignoring removed oldalloc option [ 159.371197][ T8980] EXT4-fs error (device loop3): ext4_xattr_inode_iget:433: comm syz.3.1626: Parent and EA inode have the same ino 15 [ 159.435334][ T8980] EXT4-fs error (device loop3): ext4_xattr_inode_iget:433: comm syz.3.1626: Parent and EA inode have the same ino 15 [ 159.453146][ T8980] EXT4-fs (loop3): 1 orphan inode deleted [ 159.459812][ T8980] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 159.546180][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.556656][ T8998] capability: warning: `syz.0.1633' uses deprecated v2 capabilities in a way that may be insecure [ 159.589209][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.599316][ T9000] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1636'. [ 159.650301][ T9008] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1632'. [ 159.650329][ T9006] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 159.662990][ T9008] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 159.675836][ T9000] loop1: detected capacity change from 0 to 512 [ 159.677651][ T9006] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 159.692375][ T9008] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 159.712267][ T9000] EXT4-fs (loop1): orphan cleanup on readonly fs [ 159.719589][ T9000] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1636: bg 0: block 248: padding at end of block bitmap is not set [ 159.736589][ T9008] bond0: (slave batadv0): Releasing backup interface [ 159.745352][ T9000] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.1636: Failed to acquire dquot type 1 [ 159.822830][ T9000] EXT4-fs (loop1): 1 truncate cleaned up [ 159.912213][ T9000] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 159.962465][ T9023] loop3: detected capacity change from 0 to 128 [ 159.988855][ T9023] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 160.007316][ T9023] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 160.099477][ T9026] loop3: detected capacity change from 0 to 128 [ 160.140772][ T9026] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 160.169857][ T9026] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 160.229141][ T9032] loop3: detected capacity change from 0 to 512 [ 160.256849][ T9034] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1645'. [ 160.258751][ T9036] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1646'. [ 160.279256][ T9032] EXT4-fs warning (device loop3): ext4_enable_quotas:7172: Failed to enable quota tracking (type=0, err=-13, ino=3). Please run e2fsck to fix. [ 160.303656][ T9036] loop4: detected capacity change from 0 to 512 [ 160.349058][ T9036] EXT4-fs (loop4): orphan cleanup on readonly fs [ 160.360437][ T9032] EXT4-fs (loop3): mount failed [ 160.367997][ T9036] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1646: bg 0: block 248: padding at end of block bitmap is not set [ 160.395968][ T9036] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.1646: Failed to acquire dquot type 1 [ 160.444596][ T9036] EXT4-fs (loop4): 1 truncate cleaned up [ 160.456644][ T9036] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 160.499683][ T9044] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 160.537293][ T9044] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 160.697498][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.972520][ T9067] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1650'. [ 160.990369][ T9067] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1650'. [ 161.088598][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.106318][ T9081] loop1: detected capacity change from 0 to 1024 [ 161.117652][ T9081] EXT4-fs: Ignoring removed orlov option [ 161.133837][ T9081] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.242657][ T9087] FAULT_INJECTION: forcing a failure. [ 161.242657][ T9087] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 161.255817][ T9087] CPU: 1 UID: 0 PID: 9087 Comm: syz.3.1660 Not tainted syzkaller #0 PREEMPT(voluntary) [ 161.255849][ T9087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 161.255863][ T9087] Call Trace: [ 161.255882][ T9087] [ 161.255890][ T9087] __dump_stack+0x1d/0x30 [ 161.255917][ T9087] dump_stack_lvl+0xe8/0x140 [ 161.255945][ T9087] dump_stack+0x15/0x1b [ 161.255963][ T9087] should_fail_ex+0x265/0x280 [ 161.255985][ T9087] should_fail+0xb/0x20 [ 161.256004][ T9087] should_fail_usercopy+0x1a/0x20 [ 161.256036][ T9087] _copy_to_user+0x20/0xa0 [ 161.256066][ T9087] simple_read_from_buffer+0xb5/0x130 [ 161.256091][ T9087] proc_fail_nth_read+0x10e/0x150 [ 161.256192][ T9087] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 161.256219][ T9087] vfs_read+0x1a8/0x770 [ 161.256240][ T9087] ? __rcu_read_unlock+0x4f/0x70 [ 161.256264][ T9087] ? __fget_files+0x184/0x1c0 [ 161.256344][ T9087] ksys_read+0xda/0x1a0 [ 161.256402][ T9087] __x64_sys_read+0x40/0x50 [ 161.256473][ T9087] x64_sys_call+0x27bc/0x2ff0 [ 161.256496][ T9087] do_syscall_64+0xd2/0x200 [ 161.256602][ T9087] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 161.256628][ T9087] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 161.256721][ T9087] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.256759][ T9087] RIP: 0033:0x7f0777cad5fc [ 161.256776][ T9087] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 161.256796][ T9087] RSP: 002b:00007f0776717030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 161.256825][ T9087] RAX: ffffffffffffffda RBX: 00007f0777ed5fa0 RCX: 00007f0777cad5fc [ 161.256839][ T9087] RDX: 000000000000000f RSI: 00007f07767170a0 RDI: 0000000000000004 [ 161.256862][ T9087] RBP: 00007f0776717090 R08: 0000000000000000 R09: 0000000000000000 [ 161.256875][ T9087] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 161.256919][ T9087] R13: 00007f0777ed6038 R14: 00007f0777ed5fa0 R15: 00007ffe70a961b8 [ 161.256951][ T9087] [ 161.556625][ T9098] sz1: rxe_newlink: already configured on lo [ 162.030336][ T9109] loop4: detected capacity change from 0 to 512 [ 162.064335][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.087970][ T9112] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1665'. [ 162.109504][ T9109] EXT4-fs: Ignoring removed oldalloc option [ 162.152915][ T9109] EXT4-fs error (device loop4): ext4_xattr_inode_iget:433: comm syz.4.1663: Parent and EA inode have the same ino 15 [ 162.201492][ T9116] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 162.224619][ T9109] EXT4-fs error (device loop4): ext4_xattr_inode_iget:433: comm syz.4.1663: Parent and EA inode have the same ino 15 [ 162.268399][ T9109] EXT4-fs (loop4): 1 orphan inode deleted [ 162.288603][ T9109] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 162.375814][ T9124] loop1: detected capacity change from 0 to 128 [ 162.391134][ T9124] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 162.414133][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.436058][ T9124] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 162.470388][ T9130] smc: removing ib device sz1 [ 163.385719][ T9186] loop4: detected capacity change from 0 to 512 [ 163.396787][ T9186] EXT4-fs (loop4): orphan cleanup on readonly fs [ 163.418487][ T9186] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1684: bg 0: block 248: padding at end of block bitmap is not set [ 163.457432][ T9186] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.1684: Failed to acquire dquot type 1 [ 163.471450][ T9186] EXT4-fs (loop4): 1 truncate cleaned up [ 163.478405][ T9186] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 163.622006][ T9195] __nla_validate_parse: 5 callbacks suppressed [ 163.622024][ T9195] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1687'. [ 163.671782][ T9195] loop1: detected capacity change from 0 to 512 [ 163.687916][ T9195] EXT4-fs (loop1): orphan cleanup on readonly fs [ 163.750625][ T9195] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1687: bg 0: block 248: padding at end of block bitmap is not set [ 163.835152][ T9195] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.1687: Failed to acquire dquot type 1 [ 163.847498][ T9195] EXT4-fs (loop1): 1 truncate cleaned up [ 163.854517][ T9195] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 163.993063][ T9214] FAULT_INJECTION: forcing a failure. [ 163.993063][ T9214] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 164.006229][ T9214] CPU: 1 UID: 0 PID: 9214 Comm: syz.3.1690 Not tainted syzkaller #0 PREEMPT(voluntary) [ 164.006253][ T9214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 164.006267][ T9214] Call Trace: [ 164.006272][ T9214] [ 164.006280][ T9214] __dump_stack+0x1d/0x30 [ 164.006305][ T9214] dump_stack_lvl+0xe8/0x140 [ 164.006383][ T9214] dump_stack+0x15/0x1b [ 164.006402][ T9214] should_fail_ex+0x265/0x280 [ 164.006426][ T9214] should_fail+0xb/0x20 [ 164.006442][ T9214] should_fail_usercopy+0x1a/0x20 [ 164.006486][ T9214] _copy_from_user+0x1c/0xb0 [ 164.006598][ T9214] __io_register_rsrc_update+0x268/0xac0 [ 164.006631][ T9214] ? get_pid_task+0x96/0xd0 [ 164.006663][ T9214] ? should_fail_ex+0xdb/0x280 [ 164.006689][ T9214] io_register_rsrc_update+0x10a/0x120 [ 164.006777][ T9214] __se_sys_io_uring_register+0x6d9/0xeb0 [ 164.006850][ T9214] ? fput+0x8f/0xc0 [ 164.006917][ T9214] ? ksys_write+0x192/0x1a0 [ 164.006941][ T9214] __x64_sys_io_uring_register+0x55/0x70 [ 164.006980][ T9214] x64_sys_call+0x18a3/0x2ff0 [ 164.007075][ T9214] do_syscall_64+0xd2/0x200 [ 164.007179][ T9214] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 164.007210][ T9214] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 164.007241][ T9214] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.007263][ T9214] RIP: 0033:0x7f0777caebe9 [ 164.007295][ T9214] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 164.007313][ T9214] RSP: 002b:00007f07766f6038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 164.007336][ T9214] RAX: ffffffffffffffda RBX: 00007f0777ed6090 RCX: 00007f0777caebe9 [ 164.007352][ T9214] RDX: 0000200000000240 RSI: 0000000000000010 RDI: 0000000000000003 [ 164.007367][ T9214] RBP: 00007f07766f6090 R08: 0000000000000000 R09: 0000000000000000 [ 164.007382][ T9214] R10: 0000000000000020 R11: 0000000000000246 R12: 0000000000000001 [ 164.007420][ T9214] R13: 00007f0777ed6128 R14: 00007f0777ed6090 R15: 00007ffe70a961b8 [ 164.007443][ T9214] [ 164.227430][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.248413][ T29] kauditd_printk_skb: 246 callbacks suppressed [ 164.248427][ T29] audit: type=1326 audit(1755673759.083:3982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9212 comm="syz.2.1691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58974bebe9 code=0x7ffc0000 [ 164.297742][ T29] audit: type=1326 audit(1755673759.093:3983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9212 comm="syz.2.1691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58974bebe9 code=0x7ffc0000 [ 164.405659][ T29] audit: type=1326 audit(1755673759.173:3984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9215 comm="syz.0.1693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa5eb7ebe9 code=0x7ffc0000 [ 164.429334][ T29] audit: type=1326 audit(1755673759.173:3985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9215 comm="syz.0.1693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7faa5eb7ebe9 code=0x7ffc0000 [ 164.452933][ T29] audit: type=1326 audit(1755673759.173:3986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9215 comm="syz.0.1693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa5eb7ebe9 code=0x7ffc0000 [ 164.476485][ T29] audit: type=1326 audit(1755673759.173:3987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9215 comm="syz.0.1693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=451 compat=0 ip=0x7faa5eb7ebe9 code=0x7ffc0000 [ 164.499921][ T29] audit: type=1326 audit(1755673759.173:3988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9215 comm="syz.0.1693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa5eb7ebe9 code=0x7ffc0000 [ 164.523390][ T29] audit: type=1326 audit(1755673759.173:3989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9215 comm="syz.0.1693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=148 compat=0 ip=0x7faa5eb7ebe9 code=0x7ffc0000 [ 164.546885][ T29] audit: type=1326 audit(1755673759.173:3990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9215 comm="syz.0.1693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa5eb7ebe9 code=0x7ffc0000 [ 164.570441][ T29] audit: type=1326 audit(1755673759.173:3991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9215 comm="syz.0.1693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7faa5eb7ebe9 code=0x7ffc0000 [ 164.712804][ T9236] loop4: detected capacity change from 0 to 128 [ 164.752376][ T9236] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 164.752819][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.792581][ T9236] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 164.863514][ T9245] loop1: detected capacity change from 0 to 1024 [ 164.888668][ T9245] EXT4-fs: Ignoring removed orlov option [ 164.897043][ T9245] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.907662][ T9248] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1705'. [ 165.086692][ T9251] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1704'. [ 165.221765][ T9262] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 165.260766][ T9266] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 165.269741][ T9266] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 165.449030][ T9271] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 165.457727][ T9271] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 165.548574][ T9273] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1714'. [ 165.569734][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.583079][ T9273] loop4: detected capacity change from 0 to 512 [ 165.602223][ T9276] loop1: detected capacity change from 0 to 128 [ 165.609620][ T9273] EXT4-fs (loop4): orphan cleanup on readonly fs [ 165.622135][ T9276] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 165.639307][ T9273] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1714: bg 0: block 248: padding at end of block bitmap is not set [ 165.678657][ T9276] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 165.693469][ T9273] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.1714: Failed to acquire dquot type 1 [ 165.738105][ T9273] EXT4-fs (loop4): 1 truncate cleaned up [ 165.757706][ T9273] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 165.809972][ T9281] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1717'. [ 165.826172][ T9283] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1718'. [ 165.860412][ T9283] loop1: detected capacity change from 0 to 512 [ 165.885660][ T9283] EXT4-fs (loop1): orphan cleanup on readonly fs [ 165.919543][ T9283] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1718: bg 0: block 248: padding at end of block bitmap is not set [ 166.026805][ T9283] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.1718: Failed to acquire dquot type 1 [ 166.039694][ T9283] EXT4-fs (loop1): 1 truncate cleaned up [ 166.119299][ T9283] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 166.168965][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.225948][ T9296] loop1: detected capacity change from 0 to 512 [ 166.247808][ T9296] EXT4-fs: Ignoring removed oldalloc option [ 166.280842][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.320935][ T9296] EXT4-fs error (device loop1): ext4_xattr_inode_iget:433: comm syz.1.1721: Parent and EA inode have the same ino 15 [ 166.344217][ T9307] loop4: detected capacity change from 0 to 512 [ 166.361137][ T9296] EXT4-fs error (device loop1): ext4_xattr_inode_iget:433: comm syz.1.1721: Parent and EA inode have the same ino 15 [ 166.393214][ T9296] EXT4-fs (loop1): 1 orphan inode deleted [ 166.399930][ T9307] EXT4-fs warning (device loop4): ext4_enable_quotas:7172: Failed to enable quota tracking (type=0, err=-13, ino=3). Please run e2fsck to fix. [ 166.411723][ T9296] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 166.428190][ T9307] EXT4-fs (loop4): mount failed [ 166.539127][ T9311] netlink: 'syz.0.1726': attribute type 6 has an invalid length. [ 166.556896][ T9316] FAULT_INJECTION: forcing a failure. [ 166.556896][ T9316] name failslab, interval 1, probability 0, space 0, times 0 [ 166.569634][ T9316] CPU: 0 UID: 0 PID: 9316 Comm: syz.2.1729 Not tainted syzkaller #0 PREEMPT(voluntary) [ 166.569666][ T9316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 166.569679][ T9316] Call Trace: [ 166.569685][ T9316] [ 166.569692][ T9316] __dump_stack+0x1d/0x30 [ 166.569717][ T9316] dump_stack_lvl+0xe8/0x140 [ 166.569739][ T9316] dump_stack+0x15/0x1b [ 166.569757][ T9316] should_fail_ex+0x265/0x280 [ 166.569778][ T9316] should_failslab+0x8c/0xb0 [ 166.569804][ T9316] kmem_cache_alloc_noprof+0x50/0x310 [ 166.569835][ T9316] ? vm_area_dup+0x33/0x2c0 [ 166.569865][ T9316] vm_area_dup+0x33/0x2c0 [ 166.569894][ T9316] __split_vma+0xe9/0x650 [ 166.569919][ T9316] ? avc_has_perm+0xf7/0x180 [ 166.569948][ T9316] vms_gather_munmap_vmas+0x17a/0x7b0 [ 166.569975][ T9316] ? mntput_no_expire+0x6f/0x460 [ 166.570013][ T9316] do_vmi_align_munmap+0x1a4/0x3d0 [ 166.570048][ T9316] do_vmi_munmap+0x1db/0x220 [ 166.570074][ T9316] mremap_at+0x110/0x630 [ 166.570104][ T9316] __se_sys_mremap+0x6c5/0xc60 [ 166.570145][ T9316] ? fput+0x8f/0xc0 [ 166.570173][ T9316] ? ksys_write+0x192/0x1a0 [ 166.570194][ T9316] __x64_sys_mremap+0x67/0x80 [ 166.570221][ T9316] x64_sys_call+0x2a24/0x2ff0 [ 166.570246][ T9316] do_syscall_64+0xd2/0x200 [ 166.570277][ T9316] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 166.570306][ T9316] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 166.570330][ T9316] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.570351][ T9316] RIP: 0033:0x7f58974bebe9 [ 166.570365][ T9316] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 166.570386][ T9316] RSP: 002b:00007f5895f1f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 166.570408][ T9316] RAX: ffffffffffffffda RBX: 00007f58976e5fa0 RCX: 00007f58974bebe9 [ 166.570423][ T9316] RDX: 0000000000001900 RSI: 0000000000c00000 RDI: 0000200000400000 [ 166.570437][ T9316] RBP: 00007f5895f1f090 R08: 00002000008b5000 R09: 0000000000000000 [ 166.570452][ T9316] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 166.570465][ T9316] R13: 00007f58976e6038 R14: 00007f58976e5fa0 R15: 00007ffe4582e2a8 [ 166.570484][ T9316] [ 166.797490][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.831912][ T9311] mmap: syz.0.1726 (9311) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 166.902700][ T9322] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 166.921174][ T9322] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 166.944784][ T9327] loop4: detected capacity change from 0 to 512 [ 166.948345][ T9326] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1732'. [ 166.979149][ T9326] loop1: detected capacity change from 0 to 512 [ 166.986835][ T9327] EXT4-fs warning (device loop4): ext4_enable_quotas:7172: Failed to enable quota tracking (type=0, err=-13, ino=3). Please run e2fsck to fix. [ 167.009997][ T9326] EXT4-fs (loop1): orphan cleanup on readonly fs [ 167.016428][ T9327] EXT4-fs (loop4): mount failed [ 167.022159][ T9326] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1732: bg 0: block 248: padding at end of block bitmap is not set [ 167.039099][ T9326] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.1732: Failed to acquire dquot type 1 [ 167.051069][ T9326] EXT4-fs (loop1): 1 truncate cleaned up [ 167.058559][ T9326] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 167.122010][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.155183][ T9343] loop1: detected capacity change from 0 to 128 [ 167.165182][ T9341] loop4: detected capacity change from 0 to 512 [ 167.180852][ T9341] EXT4-fs: Ignoring removed oldalloc option [ 167.187708][ T9343] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 167.202388][ T9343] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 167.210351][ T9341] EXT4-fs error (device loop4): ext4_xattr_inode_iget:433: comm syz.4.1738: Parent and EA inode have the same ino 15 [ 167.258637][ T9341] EXT4-fs error (device loop4): ext4_xattr_inode_iget:433: comm syz.4.1738: Parent and EA inode have the same ino 15 [ 167.272912][ T9341] EXT4-fs (loop4): 1 orphan inode deleted [ 167.279379][ T9341] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 167.334949][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.380821][ T9357] loop1: detected capacity change from 0 to 512 [ 167.430205][ T9357] EXT4-fs error (device loop1): ext4_iget_extra_inode:5104: inode #15: comm syz.1.1743: corrupted in-inode xattr: invalid ea_ino [ 167.506020][ T9357] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.1743: couldn't read orphan inode 15 (err -117) [ 167.543159][ T9357] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 167.598835][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.649293][ T9373] loop4: detected capacity change from 0 to 1024 [ 167.690735][ T9373] EXT4-fs: Ignoring removed orlov option [ 167.725683][ T9378] FAULT_INJECTION: forcing a failure. [ 167.725683][ T9378] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 167.726561][ T9373] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.738866][ T9378] CPU: 0 UID: 0 PID: 9378 Comm: syz.1.1750 Not tainted syzkaller #0 PREEMPT(voluntary) [ 167.738904][ T9378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 167.738922][ T9378] Call Trace: [ 167.738992][ T9378] [ 167.739002][ T9378] __dump_stack+0x1d/0x30 [ 167.739098][ T9378] dump_stack_lvl+0xe8/0x140 [ 167.739125][ T9378] dump_stack+0x15/0x1b [ 167.739149][ T9378] should_fail_ex+0x265/0x280 [ 167.739239][ T9378] should_fail+0xb/0x20 [ 167.739264][ T9378] should_fail_usercopy+0x1a/0x20 [ 167.739314][ T9378] strncpy_from_user+0x25/0x230 [ 167.739361][ T9378] ? __kmalloc_cache_noprof+0x189/0x320 [ 167.739405][ T9378] __se_sys_memfd_create+0x1ff/0x590 [ 167.739500][ T9378] __x64_sys_memfd_create+0x31/0x40 [ 167.739530][ T9378] x64_sys_call+0x2abe/0x2ff0 [ 167.739560][ T9378] do_syscall_64+0xd2/0x200 [ 167.739627][ T9378] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 167.739662][ T9378] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 167.739696][ T9378] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.739754][ T9378] RIP: 0033:0x7f59e9b9ebe9 [ 167.739785][ T9378] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 167.739810][ T9378] RSP: 002b:00007f59e8606d68 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 167.739836][ T9378] RAX: ffffffffffffffda RBX: 0000000000004080 RCX: 00007f59e9b9ebe9 [ 167.739853][ T9378] RDX: 00007f59e8606dec RSI: 0000000000000000 RDI: 00007f59e9c227e8 [ 167.739870][ T9378] RBP: 0000200000000000 R08: 00007f59e8606b07 R09: 0000000000000000 [ 167.740014][ T9378] R10: 000000000000000a R11: 0000000000000202 R12: 0000000000000001 [ 167.740030][ T9378] R13: 00007f59e8606dec R14: 00007f59e8606df0 R15: 00007ffeb1cd93a8 [ 167.740056][ T9378] [ 168.052334][ T9381] loop1: detected capacity change from 0 to 512 [ 168.129094][ T9381] EXT4-fs: Ignoring removed oldalloc option [ 168.164673][ T9381] EXT4-fs error (device loop1): ext4_xattr_inode_iget:433: comm syz.1.1752: Parent and EA inode have the same ino 15 [ 168.179612][ T9381] EXT4-fs error (device loop1): ext4_xattr_inode_iget:433: comm syz.1.1752: Parent and EA inode have the same ino 15 [ 168.277828][ T9381] EXT4-fs (loop1): 1 orphan inode deleted [ 168.284065][ T9381] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 168.352526][ T9388] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1754'. [ 168.426439][ T9392] netlink: 464 bytes leftover after parsing attributes in process `syz.3.1756'. [ 168.519812][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.586037][ T9396] wg1 speed is unknown, defaulting to 1000 [ 168.644855][ T9405] FAULT_INJECTION: forcing a failure. [ 168.644855][ T9405] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 168.658030][ T9405] CPU: 1 UID: 0 PID: 9405 Comm: syz.1.1762 Not tainted syzkaller #0 PREEMPT(voluntary) [ 168.658057][ T9405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 168.658145][ T9405] Call Trace: [ 168.658152][ T9405] [ 168.658161][ T9405] __dump_stack+0x1d/0x30 [ 168.658187][ T9405] dump_stack_lvl+0xe8/0x140 [ 168.658228][ T9405] dump_stack+0x15/0x1b [ 168.658319][ T9405] should_fail_ex+0x265/0x280 [ 168.658346][ T9405] should_fail+0xb/0x20 [ 168.658367][ T9405] should_fail_usercopy+0x1a/0x20 [ 168.658443][ T9405] strncpy_from_user+0x25/0x230 [ 168.658470][ T9405] ? kmem_cache_alloc_noprof+0x186/0x310 [ 168.658535][ T9405] ? getname_flags+0x80/0x3b0 [ 168.658564][ T9405] getname_flags+0xae/0x3b0 [ 168.658707][ T9405] path_setxattrat+0x223/0x310 [ 168.658809][ T9405] __x64_sys_lsetxattr+0x71/0x90 [ 168.658833][ T9405] x64_sys_call+0x2877/0x2ff0 [ 168.658859][ T9405] do_syscall_64+0xd2/0x200 [ 168.658917][ T9405] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 168.658969][ T9405] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 168.658993][ T9405] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.659013][ T9405] RIP: 0033:0x7f59e9b9ebe9 [ 168.659027][ T9405] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 168.659072][ T9405] RSP: 002b:00007f59e8607038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 168.659095][ T9405] RAX: ffffffffffffffda RBX: 00007f59e9dc5fa0 RCX: 00007f59e9b9ebe9 [ 168.659110][ T9405] RDX: 0000200000001440 RSI: 0000200000001400 RDI: 0000000000000000 [ 168.659125][ T9405] RBP: 00007f59e8607090 R08: 0000000000000003 R09: 0000000000000000 [ 168.659139][ T9405] R10: 0000000000000025 R11: 0000000000000246 R12: 0000000000000001 [ 168.659154][ T9405] R13: 00007f59e9dc6038 R14: 00007f59e9dc5fa0 R15: 00007ffeb1cd93a8 [ 168.659196][ T9405] [ 168.659992][ T9407] 9pnet_fd: Insufficient options for proto=fd [ 168.873355][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.968470][ T9422] RDS: rds_bind could not find a transport for fc01::, load rds_tcp or rds_rdma? [ 169.093802][ T9431] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1771'. [ 169.166415][ T9434] loop1: detected capacity change from 0 to 512 [ 169.227584][ T9434] EXT4-fs: Ignoring removed oldalloc option [ 169.256155][ T9434] EXT4-fs error (device loop1): ext4_xattr_inode_iget:433: comm syz.1.1770: Parent and EA inode have the same ino 15 [ 169.302498][ T9439] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 169.321984][ T9434] EXT4-fs error (device loop1): ext4_xattr_inode_iget:433: comm syz.1.1770: Parent and EA inode have the same ino 15 [ 169.388341][ T9434] EXT4-fs (loop1): 1 orphan inode deleted [ 169.508933][ T9439] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1772'. [ 169.528127][ T9434] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 169.550082][ T29] kauditd_printk_skb: 405 callbacks suppressed [ 169.550100][ T29] audit: type=1326 audit(1755673764.393:4391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9428 comm="syz.1.1770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f59e9b9ebe9 code=0x7ffc0000 [ 169.583723][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.597853][ T9445] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1774'. [ 169.607091][ T29] audit: type=1326 audit(1755673764.393:4392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9428 comm="syz.1.1770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59e9b9ebe9 code=0x7ffc0000 [ 169.631294][ T29] audit: type=1326 audit(1755673764.393:4393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9428 comm="syz.1.1770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59e9b9ebe9 code=0x7ffc0000 [ 169.713662][ T9445] loop4: detected capacity change from 0 to 512 [ 169.754211][ T9445] EXT4-fs (loop4): orphan cleanup on readonly fs [ 169.764494][ T9445] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1774: bg 0: block 248: padding at end of block bitmap is not set [ 169.775404][ T9452] FAULT_INJECTION: forcing a failure. [ 169.775404][ T9452] name failslab, interval 1, probability 0, space 0, times 0 [ 169.786437][ T9445] Quota error (device loop4): write_blk: dquota write failed [ 169.791457][ T9452] CPU: 1 UID: 0 PID: 9452 Comm: syz.1.1776 Not tainted syzkaller #0 PREEMPT(voluntary) [ 169.791488][ T9452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 169.791501][ T9452] Call Trace: [ 169.791507][ T9452] [ 169.791515][ T9452] __dump_stack+0x1d/0x30 [ 169.791597][ T9452] dump_stack_lvl+0xe8/0x140 [ 169.791627][ T9452] dump_stack+0x15/0x1b [ 169.791650][ T9452] should_fail_ex+0x265/0x280 [ 169.791684][ T9452] should_failslab+0x8c/0xb0 [ 169.791719][ T9452] __kvmalloc_node_noprof+0x123/0x4e0 [ 169.791764][ T9452] ? bpf_test_run_xdp_live+0xed/0xfe0 [ 169.791794][ T9452] ? obj_cgroup_charge_account+0x122/0x1a0 [ 169.791841][ T9452] bpf_test_run_xdp_live+0xed/0xfe0 [ 169.791908][ T9452] ? avc_has_perm_noaudit+0x1b1/0x200 [ 169.791947][ T9452] ? avc_has_perm+0xf7/0x180 [ 169.792061][ T9452] ? selinux_file_open+0x2df/0x330 [ 169.792162][ T9452] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 169.792263][ T9452] ? should_fail_ex+0xdb/0x280 [ 169.792342][ T9452] ? _copy_from_user+0x89/0xb0 [ 169.792382][ T9452] ? bpf_test_init+0x11a/0x160 [ 169.792429][ T9452] bpf_prog_test_run_xdp+0x4f5/0x910 [ 169.792460][ T9452] ? __rcu_read_unlock+0x4f/0x70 [ 169.792515][ T9452] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 169.792635][ T9452] bpf_prog_test_run+0x227/0x390 [ 169.792756][ T9452] __sys_bpf+0x4b9/0x7b0 [ 169.792805][ T9452] __x64_sys_bpf+0x41/0x50 [ 169.792913][ T9452] x64_sys_call+0x2aea/0x2ff0 [ 169.792944][ T9452] do_syscall_64+0xd2/0x200 [ 169.792981][ T9452] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 169.793017][ T9452] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 169.793094][ T9452] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.793122][ T9452] RIP: 0033:0x7f59e9b9ebe9 [ 169.793144][ T9452] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 169.793168][ T9452] RSP: 002b:00007f59e8607038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 169.793249][ T9452] RAX: ffffffffffffffda RBX: 00007f59e9dc5fa0 RCX: 00007f59e9b9ebe9 [ 169.793319][ T9452] RDX: 0000000000000050 RSI: 0000200000000340 RDI: 000000000000000a [ 169.793336][ T9452] RBP: 00007f59e8607090 R08: 0000000000000000 R09: 0000000000000000 [ 169.793353][ T9452] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 169.793370][ T9452] R13: 00007f59e9dc6038 R14: 00007f59e9dc5fa0 R15: 00007ffeb1cd93a8 [ 169.793398][ T9452] [ 169.951421][ T29] audit: type=1326 audit(1755673764.803:4394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9456 comm="syz.1.1779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59e9b9ebe9 code=0x7ffc0000 [ 169.956340][ T9445] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 169.974284][ T29] audit: type=1326 audit(1755673764.813:4395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9456 comm="syz.1.1779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=460 compat=0 ip=0x7f59e9b9ebe9 code=0x7ffc0000 [ 169.986279][ T9445] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.1774: Failed to acquire dquot type 1 [ 169.994752][ T29] audit: type=1326 audit(1755673764.813:4396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9456 comm="syz.1.1779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59e9b9ebe9 code=0x7ffc0000 [ 170.039745][ T9445] EXT4-fs (loop4): 1 truncate cleaned up [ 170.061336][ T29] audit: type=1326 audit(1755673764.813:4397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9456 comm="syz.1.1779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=51 compat=0 ip=0x7f59e9b9ebe9 code=0x7ffc0000 [ 170.098547][ T9445] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 170.106096][ T29] audit: type=1326 audit(1755673764.813:4398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9456 comm="syz.1.1779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59e9b9ebe9 code=0x7ffc0000 [ 170.696327][ T9486] loop1: detected capacity change from 0 to 4096 [ 170.769745][ T9486] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.817503][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.861667][ T9503] wg1 speed is unknown, defaulting to 1000 [ 171.124906][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.403163][ T9533] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1807'. [ 171.437835][ T9535] loop1: detected capacity change from 0 to 128 [ 171.452654][ T9535] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 171.497880][ T9535] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 171.550667][ T9540] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.699626][ T9540] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.710657][ T9545] loop1: detected capacity change from 0 to 1024 [ 171.718032][ T9545] EXT4-fs: Ignoring removed orlov option [ 171.733800][ T9547] FAULT_INJECTION: forcing a failure. [ 171.733800][ T9547] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 171.746975][ T9547] CPU: 1 UID: 0 PID: 9547 Comm: syz.4.1814 Not tainted syzkaller #0 PREEMPT(voluntary) [ 171.747007][ T9547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 171.747115][ T9547] Call Trace: [ 171.747121][ T9547] [ 171.747127][ T9547] __dump_stack+0x1d/0x30 [ 171.747160][ T9547] dump_stack_lvl+0xe8/0x140 [ 171.747180][ T9547] dump_stack+0x15/0x1b [ 171.747200][ T9547] should_fail_ex+0x265/0x280 [ 171.747225][ T9547] should_fail+0xb/0x20 [ 171.747241][ T9547] should_fail_usercopy+0x1a/0x20 [ 171.747343][ T9547] _copy_from_user+0x1c/0xb0 [ 171.747374][ T9547] ucma_set_option+0x54/0x7f0 [ 171.747406][ T9547] ? _parse_integer+0x27/0x40 [ 171.747449][ T9547] ? kstrtoull+0x111/0x140 [ 171.747468][ T9547] ? kstrtouint+0x76/0xc0 [ 171.747485][ T9547] ? kstrtouint_from_user+0x9f/0xf0 [ 171.747566][ T9547] ? should_fail_ex+0xdb/0x280 [ 171.747593][ T9547] ucma_write+0x1b0/0x250 [ 171.747616][ T9547] ? __pfx_ucma_write+0x10/0x10 [ 171.747635][ T9547] vfs_write+0x269/0x960 [ 171.747693][ T9547] ? __rcu_read_unlock+0x4f/0x70 [ 171.747737][ T9547] ? __fget_files+0x184/0x1c0 [ 171.747814][ T9547] ksys_write+0xda/0x1a0 [ 171.747836][ T9547] __x64_sys_write+0x40/0x50 [ 171.747857][ T9547] x64_sys_call+0x27fe/0x2ff0 [ 171.747884][ T9547] do_syscall_64+0xd2/0x200 [ 171.747986][ T9547] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 171.748066][ T9547] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 171.748089][ T9547] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.748226][ T9547] RIP: 0033:0x7f2107bbebe9 [ 171.748265][ T9547] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 171.748282][ T9547] RSP: 002b:00007f210661f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 171.748301][ T9547] RAX: ffffffffffffffda RBX: 00007f2107de5fa0 RCX: 00007f2107bbebe9 [ 171.748312][ T9547] RDX: 0000000000000020 RSI: 0000200000000540 RDI: 0000000000000006 [ 171.748327][ T9547] RBP: 00007f210661f090 R08: 0000000000000000 R09: 0000000000000000 [ 171.748342][ T9547] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 171.748357][ T9547] R13: 00007f2107de6038 R14: 00007f2107de5fa0 R15: 00007ffeff0fff48 [ 171.748382][ T9547] [ 171.999628][ T9545] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 172.022940][ T9551] loop4: detected capacity change from 0 to 128 [ 172.038311][ T9551] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 172.055732][ T9553] FAULT_INJECTION: forcing a failure. [ 172.055732][ T9553] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 172.068928][ T9553] CPU: 0 UID: 0 PID: 9553 Comm: syz.3.1816 Not tainted syzkaller #0 PREEMPT(voluntary) [ 172.068987][ T9553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 172.069004][ T9553] Call Trace: [ 172.069011][ T9553] [ 172.069020][ T9553] __dump_stack+0x1d/0x30 [ 172.069045][ T9553] dump_stack_lvl+0xe8/0x140 [ 172.069067][ T9553] dump_stack+0x15/0x1b [ 172.069083][ T9553] should_fail_ex+0x265/0x280 [ 172.069140][ T9553] should_fail+0xb/0x20 [ 172.069162][ T9553] should_fail_usercopy+0x1a/0x20 [ 172.069187][ T9553] _copy_to_user+0x20/0xa0 [ 172.069218][ T9553] simple_read_from_buffer+0xb5/0x130 [ 172.069247][ T9553] proc_fail_nth_read+0x10e/0x150 [ 172.069350][ T9553] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 172.069383][ T9553] vfs_read+0x1a8/0x770 [ 172.069407][ T9553] ? __rcu_read_unlock+0x4f/0x70 [ 172.069434][ T9553] ? __fget_files+0x184/0x1c0 [ 172.069526][ T9553] ksys_read+0xda/0x1a0 [ 172.069553][ T9553] __x64_sys_read+0x40/0x50 [ 172.069580][ T9553] x64_sys_call+0x27bc/0x2ff0 [ 172.069606][ T9553] do_syscall_64+0xd2/0x200 [ 172.069664][ T9553] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 172.069695][ T9553] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 172.069726][ T9553] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.069753][ T9553] RIP: 0033:0x7f0777cad5fc [ 172.069772][ T9553] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 172.069853][ T9553] RSP: 002b:00007f0776717030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 172.069877][ T9553] RAX: ffffffffffffffda RBX: 00007f0777ed5fa0 RCX: 00007f0777cad5fc [ 172.069893][ T9553] RDX: 000000000000000f RSI: 00007f07767170a0 RDI: 0000000000000006 [ 172.069910][ T9553] RBP: 00007f0776717090 R08: 0000000000000000 R09: 0000000000000000 [ 172.069925][ T9553] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 172.070007][ T9553] R13: 00007f0777ed6038 R14: 00007f0777ed5fa0 R15: 00007ffe70a961b8 [ 172.070033][ T9553] [ 172.072762][ T9551] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 172.291696][ T9540] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.303684][ T9557] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1817'. [ 172.339489][ T9540] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.426108][ T3456] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.438537][ T3456] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.474972][ T3456] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.493621][ T3456] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.609470][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.713191][ T9586] loop4: detected capacity change from 0 to 1024 [ 172.724777][ T9586] EXT4-fs: Ignoring removed orlov option [ 172.733186][ T9588] FAULT_INJECTION: forcing a failure. [ 172.733186][ T9588] name failslab, interval 1, probability 0, space 0, times 0 [ 172.745868][ T9588] CPU: 0 UID: 0 PID: 9588 Comm: syz.1.1825 Not tainted syzkaller #0 PREEMPT(voluntary) [ 172.745895][ T9588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 172.745916][ T9588] Call Trace: [ 172.745922][ T9588] [ 172.745928][ T9588] __dump_stack+0x1d/0x30 [ 172.745956][ T9588] dump_stack_lvl+0xe8/0x140 [ 172.745981][ T9588] dump_stack+0x15/0x1b [ 172.746003][ T9588] should_fail_ex+0x265/0x280 [ 172.746105][ T9588] should_failslab+0x8c/0xb0 [ 172.746137][ T9588] kmem_cache_alloc_node_noprof+0x57/0x320 [ 172.746207][ T9588] ? __alloc_skb+0x101/0x320 [ 172.746247][ T9588] __alloc_skb+0x101/0x320 [ 172.746302][ T9588] netlink_alloc_large_skb+0xba/0xf0 [ 172.746344][ T9588] netlink_sendmsg+0x3cf/0x6b0 [ 172.746431][ T9588] ? __pfx_netlink_sendmsg+0x10/0x10 [ 172.746453][ T9588] __sock_sendmsg+0x142/0x180 [ 172.746483][ T9588] ____sys_sendmsg+0x31e/0x4e0 [ 172.746514][ T9588] ___sys_sendmsg+0x17b/0x1d0 [ 172.746568][ T9588] __x64_sys_sendmsg+0xd4/0x160 [ 172.746598][ T9588] x64_sys_call+0x191e/0x2ff0 [ 172.746623][ T9588] do_syscall_64+0xd2/0x200 [ 172.746690][ T9588] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 172.746721][ T9588] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 172.746753][ T9588] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.746779][ T9588] RIP: 0033:0x7f59e9b9ebe9 [ 172.746794][ T9588] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 172.746844][ T9588] RSP: 002b:00007f59e8607038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 172.746869][ T9588] RAX: ffffffffffffffda RBX: 00007f59e9dc5fa0 RCX: 00007f59e9b9ebe9 [ 172.746885][ T9588] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000003 [ 172.746968][ T9588] RBP: 00007f59e8607090 R08: 0000000000000000 R09: 0000000000000000 [ 172.746983][ T9588] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 172.746997][ T9588] R13: 00007f59e9dc6038 R14: 00007f59e9dc5fa0 R15: 00007ffeb1cd93a8 [ 172.747021][ T9588] [ 172.957355][ T9586] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 173.057697][ T9604] FAULT_INJECTION: forcing a failure. [ 173.057697][ T9604] name failslab, interval 1, probability 0, space 0, times 0 [ 173.070399][ T9604] CPU: 1 UID: 0 PID: 9604 Comm: syz.2.1834 Not tainted syzkaller #0 PREEMPT(voluntary) [ 173.070470][ T9604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 173.070486][ T9604] Call Trace: [ 173.070494][ T9604] [ 173.070503][ T9604] __dump_stack+0x1d/0x30 [ 173.070588][ T9604] dump_stack_lvl+0xe8/0x140 [ 173.070613][ T9604] dump_stack+0x15/0x1b [ 173.070633][ T9604] should_fail_ex+0x265/0x280 [ 173.070659][ T9604] should_failslab+0x8c/0xb0 [ 173.070757][ T9604] kmem_cache_alloc_node_noprof+0x57/0x320 [ 173.070795][ T9604] ? __alloc_skb+0x101/0x320 [ 173.070900][ T9604] __alloc_skb+0x101/0x320 [ 173.070932][ T9604] netlink_alloc_large_skb+0xba/0xf0 [ 173.071031][ T9604] netlink_sendmsg+0x3cf/0x6b0 [ 173.071122][ T9604] ? __pfx_netlink_sendmsg+0x10/0x10 [ 173.071145][ T9604] __sock_sendmsg+0x142/0x180 [ 173.071252][ T9604] ____sys_sendmsg+0x31e/0x4e0 [ 173.071279][ T9604] ___sys_sendmsg+0x17b/0x1d0 [ 173.071322][ T9604] __x64_sys_sendmsg+0xd4/0x160 [ 173.071371][ T9604] x64_sys_call+0x191e/0x2ff0 [ 173.071404][ T9604] do_syscall_64+0xd2/0x200 [ 173.071431][ T9604] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 173.071490][ T9604] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 173.071517][ T9604] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.071538][ T9604] RIP: 0033:0x7f58974bebe9 [ 173.071555][ T9604] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 173.071611][ T9604] RSP: 002b:00007f5895f1f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 173.071635][ T9604] RAX: ffffffffffffffda RBX: 00007f58976e5fa0 RCX: 00007f58974bebe9 [ 173.071651][ T9604] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 173.071666][ T9604] RBP: 00007f5895f1f090 R08: 0000000000000000 R09: 0000000000000000 [ 173.071677][ T9604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 173.071763][ T9604] R13: 00007f58976e6038 R14: 00007f58976e5fa0 R15: 00007ffe4582e2a8 [ 173.071823][ T9604] [ 173.287408][ T9605] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1833'. [ 173.333034][ T9611] loop1: detected capacity change from 0 to 128 [ 173.345184][ T9611] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 173.359166][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.368967][ T9611] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 173.470493][ T9620] program syz.1.1841 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 173.615623][ T9635] loop1: detected capacity change from 0 to 512 [ 173.646028][ T9635] EXT4-fs: Ignoring removed oldalloc option [ 173.681382][ T9635] EXT4-fs error (device loop1): ext4_xattr_inode_iget:433: comm syz.1.1846: Parent and EA inode have the same ino 15 [ 173.748250][ T9635] EXT4-fs error (device loop1): ext4_xattr_inode_iget:433: comm syz.1.1846: Parent and EA inode have the same ino 15 [ 173.793651][ T9635] EXT4-fs (loop1): 1 orphan inode deleted [ 173.805565][ T9635] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 173.862623][ T9655] 9pnet_virtio: no channels available for device 127.0.0.1 [ 173.915550][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.990735][ T9660] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1858'. [ 174.282179][ T9686] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.304298][ T9688] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1870'. [ 174.328762][ T9691] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1872'. [ 174.388861][ T9686] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.531585][ T9686] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.552967][ T9717] loop4: detected capacity change from 0 to 764 [ 174.582176][ T9719] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1881'. [ 174.608536][ T9717] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 174.800258][ T9686] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.915252][ T4788] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.007595][ T4788] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.030580][ T29] kauditd_printk_skb: 225 callbacks suppressed [ 175.030597][ T29] audit: type=1326 audit(1755673769.873:4624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9730 comm="syz.4.1885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2107bbebe9 code=0x7ffc0000 [ 175.055615][ T4788] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.091269][ T29] audit: type=1326 audit(1755673769.873:4625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9730 comm="syz.4.1885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2107bbebe9 code=0x7ffc0000 [ 175.108922][ T4788] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.114844][ T29] audit: type=1326 audit(1755673769.873:4626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9730 comm="syz.4.1885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2107bbebe9 code=0x7ffc0000 [ 175.145306][ T9742] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1886'. [ 175.146496][ T29] audit: type=1326 audit(1755673769.873:4627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9730 comm="syz.4.1885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2107bbebe9 code=0x7ffc0000 [ 175.178673][ T29] audit: type=1326 audit(1755673769.873:4628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9730 comm="syz.4.1885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2107bbebe9 code=0x7ffc0000 [ 175.202100][ T29] audit: type=1326 audit(1755673769.873:4629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9730 comm="syz.4.1885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2107bbebe9 code=0x7ffc0000 [ 175.225683][ T29] audit: type=1326 audit(1755673769.873:4630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9730 comm="syz.4.1885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=86 compat=0 ip=0x7f2107bbebe9 code=0x7ffc0000 [ 175.249062][ T29] audit: type=1326 audit(1755673769.873:4631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9730 comm="syz.4.1885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2107bbebe9 code=0x7ffc0000 [ 175.259387][ T9747] FAULT_INJECTION: forcing a failure. [ 175.259387][ T9747] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 175.285548][ T9747] CPU: 0 UID: 0 PID: 9747 Comm: syz.4.1887 Not tainted syzkaller #0 PREEMPT(voluntary) [ 175.285575][ T9747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 175.285588][ T9747] Call Trace: [ 175.285595][ T9747] [ 175.285604][ T9747] __dump_stack+0x1d/0x30 [ 175.285642][ T9747] dump_stack_lvl+0xe8/0x140 [ 175.285667][ T9747] dump_stack+0x15/0x1b [ 175.285688][ T9747] should_fail_ex+0x265/0x280 [ 175.285713][ T9747] should_fail+0xb/0x20 [ 175.285730][ T9747] should_fail_usercopy+0x1a/0x20 [ 175.285750][ T9747] strncpy_from_user+0x25/0x230 [ 175.285809][ T9747] ? __kmalloc_cache_noprof+0x189/0x320 [ 175.285899][ T9747] __se_sys_memfd_create+0x1ff/0x590 [ 175.285925][ T9747] __x64_sys_memfd_create+0x31/0x40 [ 175.285956][ T9747] x64_sys_call+0x2abe/0x2ff0 [ 175.285983][ T9747] do_syscall_64+0xd2/0x200 [ 175.286016][ T9747] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 175.286040][ T9747] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 175.286066][ T9747] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.286130][ T9747] RIP: 0033:0x7f2107bbebe9 [ 175.286147][ T9747] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 175.286165][ T9747] RSP: 002b:00007f210661ee18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 175.286183][ T9747] RAX: ffffffffffffffda RBX: 00000000000007f4 RCX: 00007f2107bbebe9 [ 175.286197][ T9747] RDX: 00007f210661eef0 RSI: 0000000000000000 RDI: 00007f2107c427e8 [ 175.286213][ T9747] RBP: 0000200000000e40 R08: 00007f210661ebb7 R09: 00007f210661ee40 [ 175.286248][ T9747] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000180 [ 175.286264][ T9747] R13: 00007f210661eef0 R14: 00007f210661eeb0 R15: 0000200000000d00 [ 175.286288][ T9747] [ 175.537098][ T9753] loop4: detected capacity change from 0 to 764 [ 175.566629][ T9753] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 175.619105][ T9753] syzkaller0: entered promiscuous mode [ 175.624692][ T9753] syzkaller0: entered allmulticast mode [ 175.638715][ T9757] loop1: detected capacity change from 0 to 512 [ 175.647602][ T9757] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.1893: iget: bad i_size value: 38620345925642 [ 175.690981][ T9757] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.1893: couldn't read orphan inode 15 (err -117) [ 175.713549][ T9757] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 175.777986][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.827877][ T29] audit: type=1326 audit(1755673770.673:4632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9766 comm="syz.2.1898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58974bebe9 code=0x7ffc0000 [ 175.883157][ T9772] loop4: detected capacity change from 0 to 1024 [ 175.887089][ T29] audit: type=1326 audit(1755673770.693:4633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9766 comm="syz.2.1898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58974bebe9 code=0x7ffc0000 [ 175.908524][ T9772] EXT4-fs: Ignoring removed orlov option [ 175.963171][ T9772] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 176.049234][ T9789] netlink: 464 bytes leftover after parsing attributes in process `syz.0.1903'. [ 176.392896][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.488156][ T9823] netlink: 464 bytes leftover after parsing attributes in process `syz.4.1915'. [ 176.841324][ T9843] loop4: detected capacity change from 0 to 1024 [ 176.848671][ T9843] EXT4-fs: Ignoring removed orlov option [ 176.863467][ T9843] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 177.054155][ T9849] syzkaller1: tun_chr_ioctl cmd 2147767506 [ 177.274159][ T9859] FAULT_INJECTION: forcing a failure. [ 177.274159][ T9859] name failslab, interval 1, probability 0, space 0, times 0 [ 177.287039][ T9859] CPU: 1 UID: 0 PID: 9859 Comm: syz.1.1927 Not tainted syzkaller #0 PREEMPT(voluntary) [ 177.287152][ T9859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 177.287176][ T9859] Call Trace: [ 177.287183][ T9859] [ 177.287262][ T9859] __dump_stack+0x1d/0x30 [ 177.287283][ T9859] dump_stack_lvl+0xe8/0x140 [ 177.287300][ T9859] dump_stack+0x15/0x1b [ 177.287347][ T9859] should_fail_ex+0x265/0x280 [ 177.287372][ T9859] should_failslab+0x8c/0xb0 [ 177.287403][ T9859] kmem_cache_alloc_node_noprof+0x57/0x320 [ 177.287507][ T9859] ? __alloc_skb+0x101/0x320 [ 177.287548][ T9859] __alloc_skb+0x101/0x320 [ 177.287584][ T9859] netlink_alloc_large_skb+0xba/0xf0 [ 177.287695][ T9859] netlink_sendmsg+0x3cf/0x6b0 [ 177.287722][ T9859] ? __pfx_netlink_sendmsg+0x10/0x10 [ 177.287749][ T9859] __sock_sendmsg+0x142/0x180 [ 177.287784][ T9859] ____sys_sendmsg+0x31e/0x4e0 [ 177.287875][ T9859] ___sys_sendmsg+0x17b/0x1d0 [ 177.287917][ T9859] __x64_sys_sendmsg+0xd4/0x160 [ 177.287968][ T9859] x64_sys_call+0x191e/0x2ff0 [ 177.287993][ T9859] do_syscall_64+0xd2/0x200 [ 177.288024][ T9859] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 177.288052][ T9859] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 177.288103][ T9859] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.288194][ T9859] RIP: 0033:0x7f59e9b9ebe9 [ 177.288208][ T9859] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 177.288227][ T9859] RSP: 002b:00007f59e8607038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 177.288249][ T9859] RAX: ffffffffffffffda RBX: 00007f59e9dc5fa0 RCX: 00007f59e9b9ebe9 [ 177.288263][ T9859] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000005 [ 177.288289][ T9859] RBP: 00007f59e8607090 R08: 0000000000000000 R09: 0000000000000000 [ 177.288327][ T9859] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 177.288340][ T9859] R13: 00007f59e9dc6038 R14: 00007f59e9dc5fa0 R15: 00007ffeb1cd93a8 [ 177.288361][ T9859] [ 177.596050][ T9864] netlink: 464 bytes leftover after parsing attributes in process `syz.0.1929'. [ 177.744171][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.822184][ T9885] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1934'. [ 177.836044][ T9885] loop4: detected capacity change from 0 to 512 [ 177.856260][ T9885] EXT4-fs (loop4): orphan cleanup on readonly fs [ 177.864778][ T9885] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1934: bg 0: block 248: padding at end of block bitmap is not set [ 177.880884][ T9885] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.1934: Failed to acquire dquot type 1 [ 177.898467][ T9885] EXT4-fs (loop4): 1 truncate cleaned up [ 177.905454][ T9885] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 177.929273][ T9889] netlink: 196 bytes leftover after parsing attributes in process `syz.0.1938'. [ 178.010950][ T9895] netlink: 464 bytes leftover after parsing attributes in process `syz.3.1941'. [ 178.161821][ T9904] loop1: detected capacity change from 0 to 1024 [ 178.207477][ T9904] EXT4-fs: Ignoring removed orlov option [ 178.233870][ T9904] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 178.390915][ T9910] 9pnet_fd: Insufficient options for proto=fd [ 178.855119][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.101837][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.292073][ T9947] loop4: detected capacity change from 0 to 512 [ 179.302613][ T9947] EXT4-fs: Ignoring removed oldalloc option [ 179.333006][ T9947] EXT4-fs error (device loop4): ext4_xattr_inode_iget:433: comm syz.4.1958: Parent and EA inode have the same ino 15 [ 179.381768][ T9947] EXT4-fs error (device loop4): ext4_xattr_inode_iget:433: comm syz.4.1958: Parent and EA inode have the same ino 15 [ 179.425080][ T9954] __nla_validate_parse: 2 callbacks suppressed [ 179.425094][ T9954] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1961'. [ 179.447151][ T9947] EXT4-fs (loop4): 1 orphan inode deleted [ 179.479717][ T9947] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 179.550726][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.618408][ T9965] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1965'. [ 179.730168][ T9978] FAULT_INJECTION: forcing a failure. [ 179.730168][ T9978] name failslab, interval 1, probability 0, space 0, times 0 [ 179.742933][ T9978] CPU: 0 UID: 0 PID: 9978 Comm: syz.4.1969 Not tainted syzkaller #0 PREEMPT(voluntary) [ 179.742989][ T9978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 179.743004][ T9978] Call Trace: [ 179.743010][ T9978] [ 179.743017][ T9978] __dump_stack+0x1d/0x30 [ 179.743039][ T9978] dump_stack_lvl+0xe8/0x140 [ 179.743152][ T9978] dump_stack+0x15/0x1b [ 179.743175][ T9978] should_fail_ex+0x265/0x280 [ 179.743202][ T9978] should_failslab+0x8c/0xb0 [ 179.743234][ T9978] kmem_cache_alloc_node_noprof+0x57/0x320 [ 179.743298][ T9978] ? __alloc_skb+0x101/0x320 [ 179.743342][ T9978] __alloc_skb+0x101/0x320 [ 179.743403][ T9978] netlink_alloc_large_skb+0xba/0xf0 [ 179.743447][ T9978] netlink_sendmsg+0x3cf/0x6b0 [ 179.743477][ T9978] ? __pfx_netlink_sendmsg+0x10/0x10 [ 179.743498][ T9978] __sock_sendmsg+0x142/0x180 [ 179.743668][ T9978] ____sys_sendmsg+0x31e/0x4e0 [ 179.743736][ T9978] ___sys_sendmsg+0x17b/0x1d0 [ 179.743848][ T9978] __x64_sys_sendmsg+0xd4/0x160 [ 179.743882][ T9978] x64_sys_call+0x191e/0x2ff0 [ 179.743906][ T9978] do_syscall_64+0xd2/0x200 [ 179.743932][ T9978] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 179.743955][ T9978] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 179.743988][ T9978] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.744088][ T9978] RIP: 0033:0x7f2107bbebe9 [ 179.744104][ T9978] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 179.744123][ T9978] RSP: 002b:00007f210661f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 179.744180][ T9978] RAX: ffffffffffffffda RBX: 00007f2107de5fa0 RCX: 00007f2107bbebe9 [ 179.744196][ T9978] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 179.744284][ T9978] RBP: 00007f210661f090 R08: 0000000000000000 R09: 0000000000000000 [ 179.744300][ T9978] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 179.744316][ T9978] R13: 00007f2107de6038 R14: 00007f2107de5fa0 R15: 00007ffeff0fff48 [ 179.744342][ T9978] [ 180.065106][ T29] kauditd_printk_skb: 123 callbacks suppressed [ 180.065172][ T29] audit: type=1326 audit(1755673774.903:4755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9990 comm="syz.3.1975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0777caebe9 code=0x7ffc0000 [ 180.094890][ T29] audit: type=1326 audit(1755673774.903:4756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9990 comm="syz.3.1975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0777caebe9 code=0x7ffc0000 [ 180.121290][ T29] audit: type=1326 audit(1755673774.963:4757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9990 comm="syz.3.1975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0777caebe9 code=0x7ffc0000 [ 180.144796][ T29] audit: type=1326 audit(1755673774.963:4758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9990 comm="syz.3.1975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0777caebe9 code=0x7ffc0000 [ 180.168328][ T29] audit: type=1326 audit(1755673774.963:4759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9990 comm="syz.3.1975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0777caebe9 code=0x7ffc0000 [ 180.283622][ T9997] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1977'. [ 180.967134][ T29] audit: type=1326 audit(1755673775.793:4760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10015 comm="syz.1.1983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59e9b9ebe9 code=0x7ffc0000 [ 180.991172][ T29] audit: type=1326 audit(1755673775.803:4761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10015 comm="syz.1.1983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7f59e9b9ebe9 code=0x7ffc0000 [ 181.014860][ T29] audit: type=1326 audit(1755673775.803:4762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10015 comm="syz.1.1983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59e9b9ebe9 code=0x7ffc0000 [ 181.038605][ T29] audit: type=1326 audit(1755673775.803:4763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10015 comm="syz.1.1983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f59e9b9ebe9 code=0x7ffc0000 [ 181.062270][ T29] audit: type=1326 audit(1755673775.803:4764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10015 comm="syz.1.1983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59e9b9ebe9 code=0x7ffc0000 [ 181.153230][T10019] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1984'. [ 181.191440][T10019] loop4: detected capacity change from 0 to 512 [ 181.240283][T10019] EXT4-fs (loop4): orphan cleanup on readonly fs [ 181.264889][T10019] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1984: bg 0: block 248: padding at end of block bitmap is not set [ 181.304815][T10019] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.1984: Failed to acquire dquot type 1 [ 181.370579][T10019] EXT4-fs (loop4): 1 truncate cleaned up [ 181.395004][T10019] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 181.862423][T10056] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.891759][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.945059][T10056] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.990195][T10066] loop4: detected capacity change from 0 to 1024 [ 182.004516][T10066] EXT4-fs: Ignoring removed orlov option [ 182.019586][T10056] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.057547][T10066] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 182.149976][T10056] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.314145][ T4788] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.340202][ T4788] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.365801][ T4788] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.410736][ T4788] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.468987][T10086] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2007'. [ 182.555694][T10090] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2009'. [ 182.770609][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.811735][T10104] loop1: detected capacity change from 0 to 1024 [ 182.835622][T10104] EXT4-fs: Ignoring removed orlov option [ 182.854173][T10104] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 182.966102][T10112] loop4: detected capacity change from 0 to 1024 [ 183.004425][T10112] EXT4-fs: Ignoring removed orlov option [ 183.336742][T10119] ================================================================== [ 183.344895][T10119] BUG: KCSAN: data-race in generic_buffers_fsync_noflush / writeback_single_inode [ 183.354144][T10119] [ 183.356573][T10119] write to 0xffff88811a505300 of 4 bytes by task 10112 on cpu 1: [ 183.364315][T10119] writeback_single_inode+0x14a/0x3e0 [ 183.369729][T10119] sync_inode_metadata+0x5b/0x90 [ 183.374694][T10119] generic_buffers_fsync_noflush+0xd9/0x120 [ 183.380619][T10119] ext4_sync_file+0x1ab/0x690 [ 183.385340][T10119] vfs_fsync_range+0x10d/0x130 [ 183.390132][T10119] ext4_buffered_write_iter+0x34f/0x3c0 [ 183.395717][T10119] ext4_file_write_iter+0x383/0xf00 [ 183.400967][T10119] iter_file_splice_write+0x663/0xa60 [ 183.406365][T10119] direct_splice_actor+0x153/0x2a0 [ 183.411501][T10119] splice_direct_to_actor+0x30f/0x680 [ 183.416901][T10119] do_splice_direct+0xda/0x150 [ 183.421690][T10119] do_sendfile+0x380/0x650 [ 183.426148][T10119] __x64_sys_sendfile64+0x105/0x150 [ 183.431383][T10119] x64_sys_call+0x2bb0/0x2ff0 [ 183.436081][T10119] do_syscall_64+0xd2/0x200 [ 183.440615][T10119] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.446531][T10119] [ 183.448881][T10119] read to 0xffff88811a505300 of 4 bytes by task 10119 on cpu 0: [ 183.456535][T10119] generic_buffers_fsync_noflush+0x80/0x120 [ 183.462463][T10119] ext4_sync_file+0x1ab/0x690 [ 183.467257][T10119] vfs_fsync_range+0x10d/0x130 [ 183.472046][T10119] ext4_buffered_write_iter+0x34f/0x3c0 [ 183.477722][T10119] ext4_file_write_iter+0x383/0xf00 [ 183.482969][T10119] iter_file_splice_write+0x663/0xa60 [ 183.488470][T10119] direct_splice_actor+0x153/0x2a0 [ 183.493608][T10119] splice_direct_to_actor+0x30f/0x680 [ 183.498999][T10119] do_splice_direct+0xda/0x150 [ 183.503792][T10119] do_sendfile+0x380/0x650 [ 183.508238][T10119] __x64_sys_sendfile64+0x105/0x150 [ 183.513463][T10119] x64_sys_call+0x2bb0/0x2ff0 [ 183.518257][T10119] do_syscall_64+0xd2/0x200 [ 183.522806][T10119] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.528732][T10119] [ 183.531076][T10119] value changed: 0x00000038 -> 0x00000002 [ 183.536818][T10119] [ 183.539161][T10119] Reported by Kernel Concurrency Sanitizer on: [ 183.545348][T10119] CPU: 0 UID: 0 PID: 10119 Comm: syz.4.2017 Not tainted syzkaller #0 PREEMPT(voluntary) [ 183.555173][T10119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 183.565264][T10119] ==================================================================