last executing test programs: 6.610722459s ago: executing program 0 (id=4314): socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0xa}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x200, 0x3}, 0x102802, 0x3, 0x0, 0x0, 0xfff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x60}}, 0x0) setresgid(0x0, 0x0, 0x0) sync() sync() sync() getpgrp(0x0) sendmsg$AUDIT_SET(0xffffffffffffffff, 0x0, 0x20040090) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x94f08dca903d518d}, 0xc0) bpf$ENABLE_STATS(0x20, &(0x7f00000000c0), 0x4) r2 = socket$kcm(0xa, 0x2, 0x88) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x4156, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xfffffffffffffffc, 0x1}, 0x105e39, 0x0, 0xfffffffe, 0x6, 0x5, 0x2, 0x101, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xc, 0xffffffffffffffff, 0x2) r3 = socket$kcm(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e000000000000000700400008"], 0x50) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x890b, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000001340)={0x2, 0x6, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000001580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x41}, @multicast2}}}], 0x20}, 0x8000) sendmsg$inet(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x0) syz_clone3(&(0x7f00000004c0)={0xe12d480, &(0x7f0000000480), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 6.267626788s ago: executing program 3 (id=4317): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xa, &(0x7f0000000000)=ANY=[@ANYRES32=0x1, @ANYBLOB='\x00\x00\x00\x00\t\x00', @ANYBLOB="0800000000000000186a0000"], &(0x7f0000000140)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000002340)={0x3, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000023c0), 0x10, 0x4e3}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x5, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa1000000000000"], 0x0, 0xd, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x9f0, 0x85}, 0x1, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x477057e76ad645d4) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) r2 = socket(0x2b, 0x8080b, 0x404) setsockopt$sock_int(r2, 0x1, 0x5, &(0x7f0000000180)=0x5, 0xfff2) fsopen(&(0x7f0000000100)='configfs\x00', 0x0) clock_adjtime(0x0, &(0x7f00000003c0)={0x7, 0x9, 0x37fffd, 0x6794, 0x7fffffff, 0xffffffffffbffff7, 0x9, 0x0, 0x1, 0x6, 0x20000007, 0x4, 0xfffffffffffff04f, 0x3, 0x200000080000000, 0xfffffffffffffff8, 0xfffffffffffffffe, 0x200000005, 0x1, 0x100, 0x6, 0x2, 0x5, 0x7, 0x34, 0x800}) clock_adjtime(0x0, &(0x7f0000000900)={0x6, 0x20000000e, 0xf, 0x0, 0xf, 0x8000000000000000, 0xe, 0x2, 0x9, 0x4, 0x5, 0x8000000000000000, 0xc, 0x4, 0x7, 0x9, 0x8, 0x3, 0x8, 0x80000000, 0xffffffffffbffffa, 0x5, 0x7, 0x7, 0x3, 0x6}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="24000000390007010000000000000000027c0000040000000c0001800600060008"], 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 6.266612189s ago: executing program 3 (id=4318): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xa, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x10000}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @map_val={0x18, 0x2, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}, @map_fd={0x18, 0x3, 0x1, 0x0, 0x1}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x5}]}, &(0x7f0000000140)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000002340)={0x3, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002380)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f00000023c0), 0x10, 0x4e3}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x5, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xd, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) fsopen(&(0x7f0000000140)='configfs\x00', 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20da, 0x0, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$BTRFS_IOC_SUBVOL_SYNC_WAIT(r1, 0x40109441, &(0x7f0000000200)={0x1, 0x0, 0xfffffffd}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaa95aa86dd608a37f200142c00fe80"], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x9f0, 0x85}, 0x1}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) clock_settime(0x0, &(0x7f0000000240)={0x77359400}) 5.48793656s ago: executing program 2 (id=4320): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x10) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0xc002a0, 0x0) unshare(0x28000600) openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000004c0)='./file3\x00', 0x4002, &(0x7f0000001140)={[{@discard}, {@debug}, {@resgid}, {@stripe={'stripe', 0x3d, 0x1}}]}, 0x1, 0xbd2, &(0x7f0000000540)="$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") writev(0xffffffffffffffff, &(0x7f0000001200), 0x0) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x399}) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x7, @local}, 0x1c) 5.47064054s ago: executing program 0 (id=4321): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000001340)={0x0, "4939e463a51eda03ded09af47dafb52b"}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r2, 0xc400941d, &(0x7f0000002340)={r4, 0x480000000000, 0xa1}) ioctl$TIOCMIWAIT(r3, 0x545c, 0x0) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x48) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x14, 0x11, 0x0, 0x1, @quota={{0xa}, @val={0x4}}}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x98}}, 0x20008844) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) sendmsg$inet(0xffffffffffffffff, 0x0, 0x40000) socketpair(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) r7 = perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x4, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x6, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000001080)='syzkaller\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x40082406, &(0x7f0000000540)='(pu&00\t(|') bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) 5.438161571s ago: executing program 3 (id=4322): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0xb003, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) rt_sigsuspend(0x0, 0x0) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000880)="d80000001e0081054e81f78206000000000000000a0014260360cf9808000f00245bde1625fcb8b20800094014000000035c0461c1d67f6f94007134cf6efb8000d74748420a963aa007a290457f01898102e807ad522a4807f13af8030ab316277ce07bbace8017cbec4c2ee5a7cef4090000001fb791433a5ee4ce1b14d6d930dfe1d9d322fe7c9f8716a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad909d5e1ca9781ed0bffece0b42a9eca0200e6d5d40dd6e4edef3d93452a92954b43370e9703", 0xd8}], 0x1}, 0x40800) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000380)={'pimreg\x00'}) socket$nl_generic(0x10, 0x3, 0x10) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x2, @perf_config_ext={0x6, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x5, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) unshare(0x40020000) r4 = syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x842) ioctl$EVIOCGBITSND(r4, 0x40044591, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f0000000100)={0x0, 0x7, 0x0, 0x0, 0x0, 0xc}, &(0x7f0000000040)={0x1f, 0x0, 0x80000005, 0x0, 0xfffffffffffffff8, 0x6, 0x8}, 0x0, 0x0, 0x0) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x30000, 0x1000, 0x2, 0x1}, 0x20) r6 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r6, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r6, 0xda90) ioctl$int_in(r6, 0x5452, &(0x7f0000000380)=0x2003) accept4(r6, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000380)=@delqdisc={0x434, 0x25, 0x100, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x2, 0xf}, {0xa, 0x7}, {0x0, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x3, 0xfffffff8, 0x4, 0x40, 0x2, 0x2, 0x5, 0x7fff, 0x4, 0x1, 0x6, 0x1c8, 0x9, 0x0, 0x5, 0x0, 0x8, 0x9, 0x9, 0x9, 0xf5, 0x200, 0x1, 0x5, 0x6, 0xfff, 0x9, 0x1, 0x80, 0x10000, 0x0, 0x9, 0xff, 0x4, 0x2, 0x9, 0xe6c1, 0x6, 0x65, 0x6, 0x5, 0x71, 0x1f146d7e, 0x80000001, 0x89, 0xe9, 0x80000001, 0x2, 0xff, 0x8, 0xffff8d82, 0x400, 0x0, 0x2, 0xffff, 0x10001, 0x13ff, 0x80, 0x800005, 0xa000000, 0x0, 0x5, 0x8, 0x3, 0x0, 0x401, 0x5, 0x8, 0x4ad1, 0x1, 0x25ae, 0x1, 0xffd, 0x6, 0xe, 0xffffffff, 0x7, 0x5, 0x3ff, 0xfff, 0x4, 0xf, 0x0, 0x4, 0x626cfd3b, 0x0, 0x60df8662, 0x2, 0x5, 0x4, 0xc6, 0x8, 0x7, 0xfffffffa, 0x9, 0x4, 0x1, 0x3, 0x0, 0x7, 0x2, 0xffff8000, 0xe15, 0x8, 0x7, 0xc, 0xfdc1, 0x7ff, 0x5, 0xfffffff0, 0x4, 0x7fff, 0x40, 0x1, 0x1f1f, 0x3, 0x665195e5, 0x5, 0x7, 0x5, 0x8, 0x7, 0x4, 0x800, 0x101, 0x400, 0x2, 0x6, 0xd, 0x9, 0x7, 0xc5, 0x99, 0x4, 0x2e9, 0x4, 0x3, 0x401, 0xfffffffe, 0x7, 0x80000000, 0x8, 0x0, 0x4, 0x37, 0x4, 0x31, 0x2, 0x2, 0x3, 0x6, 0x1, 0x690c, 0x0, 0x9, 0x2, 0xe, 0xb, 0x8, 0x5597, 0x3, 0x4, 0x7fff, 0x62, 0xf6, 0x5, 0x0, 0x7fffffff, 0xa, 0x9, 0x2, 0x100, 0x6, 0x101, 0x5, 0x2, 0x3, 0x4, 0xfc8d, 0x8, 0x3ff, 0x3, 0xaeb3, 0x3, 0x5, 0x9, 0xff, 0xd, 0x1, 0x7, 0x20000, 0x4, 0x2, 0x9f85, 0x65, 0x85, 0x0, 0x2, 0x2, 0x6, 0x7, 0xd92, 0x40, 0xfff, 0xe1, 0x8, 0x426, 0x5, 0x9, 0x1, 0x1000, 0x9, 0x36ae765f, 0x401, 0x9, 0x200000, 0x3, 0x4, 0x5, 0x0, 0x89, 0x5, 0x80000000, 0x4007, 0x1, 0x41632842, 0x7, 0x14, 0x2, 0x8001, 0x5, 0x100, 0x8, 0x9, 0xfe64, 0xd, 0x1c2, 0x2, 0x6, 0x2, 0x80000001, 0xa, 0x6, 0xfffffffc, 0x5, 0x3, 0x7f, 0x8001, 0x5, 0x3, 0x6, 0x8001, 0x10001, 0x5, 0xb, 0x7]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40000}, 0x8010) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'sit0\x00'}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x40000207, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xfff, 0x3}, 0x0, 0xffff, 0xf379, 0x5, 0x1, 0x20005, 0xa, 0x0, 0x0, 0x0, 0x20800006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8000, &(0x7f0000000200)=0x5d7c, 0x2, 0x4) setsockopt$XDP_TX_RING(r5, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) 5.226812177s ago: executing program 4 (id=4325): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = syz_clone(0x320e2000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r1, 0x0) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x1, 0x8001, 0x6}, 0x10) sendto$inet6(r0, 0x0, 0x0, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x4810, &(0x7f00000001c0)={[{@journal_dev={'journal_dev', 0x3d, 0x8}}, {@grpquota}, {@nomblk_io_submit}, {@data_err_ignore}, {@errors_remount}, {@noblock_validity}, {@noauto_da_alloc}]}, 0x0, 0x4ec, &(0x7f0000000c40)="$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") setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x2, @loopback, 0xfffffffd}}, 0x0, 0x0, 0x300, 0x0, 0x54, 0x6}, 0x9c) 5.13241611s ago: executing program 2 (id=4326): prctl$PR_GET_ENDIAN(0x13, &(0x7f0000000100)) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100), 0x1, 0x500, &(0x7f0000000500)="$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") prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000300)={0x1, 0x0, 0x0, 'queue1\x00'}) r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r4, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r4, 0x5, &(0x7f0000000040)='cgroup2\x00', 0x0, 0xffffffffffffffff) write$sndseq(r3, 0x0, 0x0) socket$kcm(0x1e, 0x5, 0x0) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0xeda2442f576052ae) r5 = socket$l2tp6(0xa, 0x2, 0x73) capset(&(0x7f0000000280)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) sendmsg$inet6(r5, &(0x7f0000000100)={&(0x7f0000000000)={0xa, 0x4e20, 0x80000, @local, 0xfffffffe}, 0x1c, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='h\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x006\x00'], 0x238}, 0x40440f0) rmdir(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000140)={[{@barrier}, {@min_batch_time={'min_batch_time', 0x3d, 0x5}}, {@noquota}, {@lazytime}, {@nombcache}, {@nodioread_nolock}]}, 0x1, 0x59c, &(0x7f0000001840)="$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") perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x9, 0x3}, 0x0, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x15, 0x6, &(0x7f0000000a00)=ANY=[@ANYBLOB="05000000000000006911160000000000851000000200000085000000a000000000009500a50500000000ced2f99e716997830cedc6f56cff608ce8b555e805c8143d76d7172b69b537e7f7f0c94d255127db23fa0fe86dcd75868b7852e028b5e47ea284e943ecbc37191f1a1743e34b7f8ff3a74292a900895d766e220701ca93b449eb4c6f1a891ab59d30000000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0xcb, &(0x7f0000000200)=""/203, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x6}, 0x94) 5.014387883s ago: executing program 1 (id=4327): r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) (async) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) (async) ioperm(0x2, 0x7ff, 0x5c0c) (async, rerun: 64) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (rerun: 64) r2 = socket(0x2, 0x80805, 0x0) (async) r3 = socket$inet_sctp(0x2, 0x1, 0x84) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) (async, rerun: 32) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) (rerun: 32) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r2, 0x84, 0x79, &(0x7f0000000000)={r4, 0x6, 0x2}, 0x8) (async) close(r0) r5 = open(&(0x7f0000000300)='./file0\x00', 0x400, 0x0) fcntl$setlease(r5, 0x400, 0x1) (async) creat(&(0x7f00000002c0)='./file0\x00', 0x0) (async) fcntl$setstatus(r2, 0x4, 0x2400) (async) r6 = epoll_create1(0x80000) ioctl$FICLONERANGE(r6, 0x4020940d, &(0x7f0000000f00)={{}, 0x9, 0x3, 0x4}) (async) io_setup(0x101, &(0x7f0000000080)) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r8 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r7) (async) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x401c2, 0x0) ftruncate(r9, 0x8800000) (async, rerun: 64) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) recvmmsg(r11, &(0x7f00000034c0)=[{{0x0, 0x2b, &(0x7f0000000180)=[{&(0x7f0000001f40)=""/4097, 0x973}, {&(0x7f00000003c0)=""/128, 0x80}], 0x2}}], 0x0, 0x0, 0x0) sendfile(r10, r9, 0x0, 0x578410eb) 4.916275916s ago: executing program 4 (id=4328): r0 = socket(0x2b, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x11, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x12, r0, 0x74cca000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) ptrace(0x10, 0x0) ptrace$pokeuser(0x6, 0x0, 0x388, 0x6) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x4000001, 0x0) poll(0x0, 0x0, 0x9) syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), r0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40d9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x204, 0x0, 0x43a1bd76, 0x6, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000f80)=[{&(0x7f00000001c0)="92", 0x1}], 0x1}, 0x5) recvmsg(r6, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x6020) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) connect$inet6(r0, 0x0, 0x0) timer_create(0x3, 0x0, &(0x7f0000000300)) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r8, &(0x7f0000000400)={&(0x7f0000000200), 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x44, 0x2, 0x7, 0x401, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x10001}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x7}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x808}]}, 0x6b}, 0x1, 0x0, 0x0, 0x1}, 0x20040010) 4.916137086s ago: executing program 1 (id=4329): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$nci(r0, 0x0, 0x14) (fail_nth: 2) 4.870307487s ago: executing program 4 (id=4330): prctl$PR_GET_ENDIAN(0x13, &(0x7f0000000100)) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100), 0x1, 0x500, &(0x7f0000000500)="$eJzs3U9sI1cZAPBvJn/sTdMmhR4AFbqUwoJWayfeNqp6oZwqhCoheuSwDYkTRbHjKHZKE/aQPXJHohInOHHmgMQBqSfuSBzgxqUckAqsQA0SByOP7V3njzfWbmzvxr+fNJo38+L53tvRvGd91s4LYGJdj4ijiJiNiPcjYqFzPuls8XZ7a/3dZ/fvrh3fv7uWRLP53j+TrL51Lno+0/Jc55r5iPjBOxE/Sk4F/VNE/eBwe7VSKe91ThUb1d1i/eDw1lZ1dbO8Wd4plVaWV5bevP1G6dL6+kr1N59ei4jf/+7Ln/zx6Fs/aTVrvlPX24/L1O76zIM4LdMR8b1hBBuDqU5/Zh/nw4/1IS5TGhGfi4hXs+d/Iaayu3nSydv07RG2DgAYhmZzIZoLvccAwFWXZjmwJC10cgHzkaaFQjuH91LMpZVavXFzo7a/s97OlS3GTLqxVSkvdXKFizGTbGxNl5ezcve4Ui6dOr4dES9GxM9y17Ljwlqtsj7OLz4AMMGeOzX//yfXnv8BgCsu/7CYG2c7AIDRyY+7AQDAyJn/AWDymP8BYPKY/wFg8pj/AWDymP8BYKJ8/913W1vzuPP+6/UPDva3ax/cWi/XtwvV/bXCWm1vt7BZq21m7+ypXnS9Sq22u/x67H9YbJTrjWL94PBOtba/07iTvdf7TnlmJL0CAB7lxVc+/ksSEUdvXcu26Hnf/4Vz9cvDbh0wTOm4GwCMzdS4GwCMzdnVvoBJIR8P9CzRe6/ndP5M4bSPBrp8at1QePrc+OIT5P+BZ5r8P0yux8v/+y4PV4H8P0yuZjOx5j8ATBg5fiC5oL739/+lZs/BYL//AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJU0n21JWuisBT4faVooRDwfEYsxk2xsVcpLEfFCRPw5N5NrHS9HhHWDAOBZlv496az/dWPhtfnTtbO5/+ayfUT8+Bfv/fzD1UZjbzliNvnXg/ONjzrnS+NoPwBwke483Z3Huz67f3etu42yPZ9+p724aCvucWdr10zHdLbPZ7mGuX8nneO21veVqUuIf3QvIr5wXv+TLDey2Fn59HT8VuznRxo/PRE/zera+9a/xecvoS0waT5ujT9vn/f8pXE925///OezEerJdce/4zPjX/pg/JvqM/5dHzTG63/47pmTzYV23b2IL01HHHcv3jP+dOMnfeK/NmD8v778lVf71TV/GXEjzut/ciJWsVHdLdYPDm9tVVc3y5vlnVJpZXll6c3bb5SKWY662M1Un/WPt26+0C9+q/9zfeLnL+j/1wfs/6/+9/4Pv/qI+N/82vn3/6VHxG/Nid8YMP7q3G/z/epa8df79P+i+39zwPif/O1wfcA/BQBGoH5wuL1aqZT3hl1Ihx8iKyQRRyPoTruQ+/VP3xlVrCEW4ulohsLTVBj3yAQM28OHftwtAQAAAAAAAAAAAAAA+hnFfycadx8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4uv4fAAD//5iA1Hs=") prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0x1d144, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, r3, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000300)={0x1, 0x0, 0x0, 'queue1\x00'}) r5 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r5, 0x6, 0x0, 0x0, 0x0) socket$kcm(0x1e, 0x5, 0x0) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0xeda2442f576052ae) r6 = socket$l2tp6(0xa, 0x2, 0x73) capset(&(0x7f0000000280)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) sendmsg$inet6(r6, &(0x7f0000000100)={&(0x7f0000000000)={0xa, 0x4e20, 0x80000, @local, 0xfffffffe}, 0x1c, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='h\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x006\x00'], 0x238}, 0x40440f0) rmdir(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000140)={[{@barrier}, {@min_batch_time={'min_batch_time', 0x3d, 0x5}}, {@noquota}, {@lazytime}, {@nombcache}, {@nodioread_nolock}]}, 0x1, 0x59c, &(0x7f0000001840)="$eJzs3U9oHGUbAPBnZrNN/+T70g++Dz6lh6JChdJN0j9aPbVXsVDoQfCiYbMNJZtsySbahIDpvYg9iEov9aYHj4oHD+LFo1cvimeh2KDQ9KArm51N03S3bmI2W7O/H0z2fWdm93nfmX3e7AwzTAB962j9TxrxVERcTCKGNywbiGzh0cZ6qytLxfsrS8UkarVLvySRRMS9laVic/0kez0UEcsR8f+I+CYfcTxd/8h9zUJ1YXFqvFwuzWb1kbnpqyPVhcUTV6bHJ0uTpZlTL7505uzpM2MnxzY2935tYy2/tb7e+PHmuze+e+X2zU8/O7JcfH88iXMxlC3b2I+d1Ngm+Ti3af7pbgTroaTXDWBbclme11PpfzEcuSzrW6ltHBwGd6V5QBfVBiNq6zYUgT6QSHroU83fAfXj3+a0m78/7pxvHIDU466uLBXfiWb8gca5idi/dmxy8NfkoSOT+vHm4d1sKHvS8vWIGB0YePT7n2Tfv+0b3YkG0lVfn2/sqEf3f7o+/kSL8Weoee70b2qOf6vZ+LfaIn6uzfh3scMYv7/+00dt418fjKdbxk/W4yct4qcR8WaH8W+99uXZdstqH0cci9bxm5LHnx8euXylXBpt/G0Z46tjR15u3/+Ig23iN87Z7l9ryMb+78valHbY/y++/fyZ5cfEf/7Zx+//Vtv/QES812H8/9z75NV2y+5cT+7WfwVsdf8nkY/bHcZ/4dzRH7Kis4YAAAAAAAAAALCD0rVr2ZK0sF5O00KhcQ/vf+NgWq5U545frszPTDSueTsc+bR5pdVwo57U62PZ9bjN+slN9VO5LGDuwFq9UKyUJ3rcdwAAAAAAAAAAAAAAAAAAAHhSHNp0//9vubX7/zc/rhrYq9o/8hvY6+Q/9K+H8z/pWTuA3ef/P/StmvyH/iX/oX/Jf+hf8h/6l/yH/iX/oX/JfwAAAAAAAAAAAAAAAAAAAAAAAAAA6IqLFy7Up9r9laVivT4xsDA/VXnrxESpOlWYni8WipXZq4XJSmWyXCoUK9N/9XlJpXJ1NGbmr43MlapzI9WFxTemK/MzzWeKlvJd7xEAAAAAAAAAAAAAAAAAAAD88wytTUlaiMg36mlaKET8KyIOJ5FcvlIujUbEvyPi+1x+sF4f63WjAQAAAAAAAAAAAAAAAAAAYI+pLixOjZfLpdnuFQayUF0M0XlhYCsrR8Tyzjaj/olbflc+24A93nR7o5B7Mr6HT36hh4MSAAAAAAAAAAAAAAAAAAD0qQc3/Xb6jj+62yAAAAAAAAAAAAAAAAAAAADoS+nPSUTUp2PDzw1tXrovWc2tvUbE27cufXBtfG5udqw+/+76/LkPs/kne9F+oFPNPE0jop7HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwAPVhcWp8XK5NLvNwmAH6/S6jwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADb8WcAAAD//y4WzlE=") perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x9, 0x3}, 0x0, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x15, 0x6, &(0x7f0000000a00)=ANY=[@ANYBLOB="05000000000000006911160000000000851000000200000085000000a000000000009500a50500000000ced2f99e716997830cedc6f56cff608ce8b555e805c8143d76d7172b69b537e7f7f0c94d255127db23fa0fe86dcd75868b7852e028b5e47ea284e943ecbc37191f1a1743e34b7f8ff3a74292a900895d766e220701ca93b449eb4c6f1a891ab59d30000000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0xcb, &(0x7f0000000200)=""/203, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x6}, 0x94) 4.856486407s ago: executing program 1 (id=4331): ioprio_set$uid(0x3, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x3, 0x1000000000}, 0x1006a1, 0x5, 0x10ffe, 0x0, 0x2, 0x80000011, 0x6, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0x42, 0x3, 0x0, 0x0, 0x0, 0x5, 0x400, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x401, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xa) r3 = syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = semget$private(0x0, 0x6, 0x0) semtimedop(r4, &(0x7f00000003c0)=[{0x2, 0x4, 0x1800}], 0x1, 0x0) semop(r4, &(0x7f00000000c0)=[{0x4, 0x0, 0x800}, {0x2}], 0x2) socket$phonet_pipe(0x23, 0x5, 0x2) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x48) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) openat(r3, &(0x7f0000000240)='./file0\x00', 0x0, 0x31) 3.786645057s ago: executing program 0 (id=4332): ioprio_set$uid(0x3, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x3, 0x1000000000}, 0x1006a1, 0x5, 0x10ffe, 0x0, 0x2, 0x80000011, 0x6, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0x42, 0x3, 0x0, 0x0, 0x0, 0x5, 0x400, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x401, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xa) syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semget$private(0x0, 0x6, 0x0) 2.451593073s ago: executing program 3 (id=4333): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xa, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x10000}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @map_val={0x18, 0x2, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}, @map_fd={0x18, 0x3, 0x1, 0x0, 0x1}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x5}]}, &(0x7f0000000140)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000002340)={0x3, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002380)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f00000023c0), 0x10, 0x4e3}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x5, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xd, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) fsopen(&(0x7f0000000140)='configfs\x00', 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20da, 0x0, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$BTRFS_IOC_SUBVOL_SYNC_WAIT(r1, 0x40109441, &(0x7f0000000200)={0x1, 0x0, 0xfffffffd}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a50000000060a010400000000000000000a0000010900010073797a310000000024000480200001800700010063740000140002800800014000000001080002400000000a0900020073797a320000000014000000110001"], 0x78}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaa95aa86dd608a37f200142c00fe80"], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x9f0, 0x85}, 0x1}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) clock_settime(0x0, &(0x7f0000000240)={0x77359400}) 2.425264404s ago: executing program 1 (id=4334): mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x3000009, 0x46031, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x200) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000580)=ANY=[@ANYBLOB="58010000100013070000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="02000000"], 0x158}}, 0x2000000) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x800000000000005, 0x4}, 0x4, 0x0, 0xe723, 0x4, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xfcd5}, 0xffffffffffffffff, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r1 = getpid() memfd_create(0x0, 0x2) process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610408000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) ioctl$SIOCSIFHWADDR(r2, 0x401c5820, &(0x7f0000000080)={'\x00', @link_local}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xd9, 0x5, &(0x7f0000000000)=0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) ustat(0x801, &(0x7f00000011c0)) 2.19428692s ago: executing program 4 (id=4335): prctl$PR_GET_ENDIAN(0x13, &(0x7f0000000100)) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100), 0x1, 0x500, &(0x7f0000000500)="$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") prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0x1d144, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, r3, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000300)={0x1, 0x0, 0x0, 'queue1\x00'}) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) write$sndseq(r4, 0x0, 0x0) socket$kcm(0x1e, 0x5, 0x0) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0xeda2442f576052ae) r5 = socket$l2tp6(0xa, 0x2, 0x73) capset(&(0x7f0000000280)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) sendmsg$inet6(r5, &(0x7f0000000100)={&(0x7f0000000000)={0xa, 0x4e20, 0x80000, @local, 0xfffffffe}, 0x1c, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='h\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x006\x00'], 0x238}, 0x40440f0) rmdir(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000140)={[{@barrier}, {@min_batch_time={'min_batch_time', 0x3d, 0x5}}, {@noquota}, {@lazytime}, {@nombcache}, {@nodioread_nolock}]}, 0x1, 0x59c, &(0x7f0000001840)="$eJzs3U9oHGUbAPBnZrNN/+T70g++Dz6lh6JChdJN0j9aPbVXsVDoQfCiYbMNJZtsySbahIDpvYg9iEov9aYHj4oHD+LFo1cvimeh2KDQ9KArm51N03S3bmI2W7O/H0z2fWdm93nfmX3e7AwzTAB962j9TxrxVERcTCKGNywbiGzh0cZ6qytLxfsrS8UkarVLvySRRMS9laVic/0kez0UEcsR8f+I+CYfcTxd/8h9zUJ1YXFqvFwuzWb1kbnpqyPVhcUTV6bHJ0uTpZlTL7505uzpM2MnxzY2935tYy2/tb7e+PHmuze+e+X2zU8/O7JcfH88iXMxlC3b2I+d1Ngm+Ti3af7pbgTroaTXDWBbclme11PpfzEcuSzrW6ltHBwGd6V5QBfVBiNq6zYUgT6QSHroU83fAfXj3+a0m78/7pxvHIDU466uLBXfiWb8gca5idi/dmxy8NfkoSOT+vHm4d1sKHvS8vWIGB0YePT7n2Tfv+0b3YkG0lVfn2/sqEf3f7o+/kSL8Weoee70b2qOf6vZ+LfaIn6uzfh3scMYv7/+00dt418fjKdbxk/W4yct4qcR8WaH8W+99uXZdstqH0cci9bxm5LHnx8euXylXBpt/G0Z46tjR15u3/+Ig23iN87Z7l9ryMb+78valHbY/y++/fyZ5cfEf/7Zx+//Vtv/QES812H8/9z75NV2y+5cT+7WfwVsdf8nkY/bHcZ/4dzRH7Kis4YAAAAAAAAAALCD0rVr2ZK0sF5O00KhcQ/vf+NgWq5U545frszPTDSueTsc+bR5pdVwo57U62PZ9bjN+slN9VO5LGDuwFq9UKyUJ3rcdwAAAAAAAAAAAAAAAAAAAHhSHNp0//9vubX7/zc/rhrYq9o/8hvY6+Q/9K+H8z/pWTuA3ef/P/StmvyH/iX/oX/Jf+hf8h/6l/yH/iX/oX/JfwAAAAAAAAAAAAAAAAAAAAAAAAAA6IqLFy7Up9r9laVivT4xsDA/VXnrxESpOlWYni8WipXZq4XJSmWyXCoUK9N/9XlJpXJ1NGbmr43MlapzI9WFxTemK/MzzWeKlvJd7xEAAAAAAAAAAAAAAAAAAAD88wytTUlaiMg36mlaKET8KyIOJ5FcvlIujUbEvyPi+1x+sF4f63WjAQAAAAAAAAAAAAAAAAAAYI+pLixOjZfLpdnuFQayUF0M0XlhYCsrR8Tyzjaj/olbflc+24A93nR7o5B7Mr6HT36hh4MSAAAAAAAAAAAAAAAAAAD0qQc3/Xb6jj+62yAAAAAAAAAAAAAAAAAAAADoS+nPSUTUp2PDzw1tXrovWc2tvUbE27cufXBtfG5udqw+/+76/LkPs/kne9F+oFPNPE0jop7HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwAPVhcWp8XK5NLvNwmAH6/S6jwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADb8WcAAAD//y4WzlE=") perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x9, 0x3}, 0x0, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x15, 0x6, &(0x7f0000000a00)=ANY=[@ANYBLOB="05000000000000006911160000000000851000000200000085000000a000000000009500a50500000000ced2f99e716997830cedc6f56cff608ce8b555e805c8143d76d7172b69b537e7f7f0c94d255127db23fa0fe86dcd75868b7852e028b5e47ea284e943ecbc37191f1a1743e34b7f8ff3a74292a900895d766e220701ca93b449eb4c6f1a891ab59d30000000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0xcb, &(0x7f0000000200)=""/203, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x6}, 0x94) 2.064781714s ago: executing program 2 (id=4336): r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$usbfs(0x0, 0x20000007d, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$MON_IOCG_STATS(r2, 0xc0109207, &(0x7f0000000180)) 1.47282822s ago: executing program 0 (id=4337): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xa, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x10000}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @map_val={0x18, 0x2, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}, @map_fd={0x18, 0x3, 0x1, 0x0, 0x1}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x5}]}, &(0x7f0000000140)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000002340)={0x3, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002380)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f00000023c0), 0x10, 0x4e3}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x5, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xd, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x9f0, 0x85}, 0x1, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x477057e76ad645d4) r1 = socket(0x2b, 0x8080b, 0x404) setsockopt$sock_int(r1, 0x1, 0x5, &(0x7f0000000180)=0x5, 0xfff2) fsopen(&(0x7f0000000100)='configfs\x00', 0x0) clock_settime(0x0, &(0x7f0000000240)={0x77359400}) clock_adjtime(0x0, &(0x7f00000003c0)={0x7, 0x9, 0x37fffd, 0x6794, 0x7fffffff, 0xffffffffffbffff7, 0x9, 0x0, 0x1, 0x6, 0x20000007, 0x4, 0xfffffffffffff04f, 0x3, 0x200000080000000, 0xfffffffffffffff8, 0xfffffffffffffffe, 0x200000005, 0x1, 0x100, 0x6, 0x2, 0x5, 0x7, 0x34, 0x800}) getdents(0xffffffffffffffff, &(0x7f0000000080)=""/59, 0x3b) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) close(0x3) syz_mount_image$iso9660(&(0x7f0000000cc0), &(0x7f0000000c80)='./file0\x00', 0x1014485, &(0x7f0000000940)=ANY=[], 0xfe, 0x850, &(0x7f00000000c0)="$eJzs3U9sHFf9APDvuHbiOGp+1e/3U4miNJ0kRUpEcNeb1sXqoWzXY2dae9faXaNEqGqj1ilRnLZqVZVGiJBLC4g/4gS3Uo5VLz0BQgKJA3BCogcuHCpV6gVUEEgIhBBGO7ubrGOvnaSOLcrns/K+2Tdv3nzf7Hjezu7O2wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIqlOl0oTSczltcXT6WDV6UZ9foP5vfp+tirZYL0RSfsvRkdjfydr//9fm313++5IHOw8Ohij7WQ0Lu29+66H/294qLf8BgHdqsODZ430P0givtIO6sLZ5eWlF29DINvo6z/pToze8CJ/X2nfz2a1vFnP5yuzWZo36+nU5GTp/lMzzXQmn8uaZ5qtbD6tNrJKq95Ij1WPpxNTUyfTbPxMfbE2O12Zy3qZD326XCpNpo+NL2SVRrNeu/+x8Wb1VD43l9dmizLl0ivRLvNQe0d8PG+lrawyn6bnzi8vnVwb3OpmtAtNrMrZvWrHOXjfXR+8/P5fzi+1d8j1W5tc3THLExPl8sTkg1MPPlQqDZdL5dUZpevE1RIxFBGl0vBt2WnZWXvXyRvu7jG9x9/rPY5Y+Z+PetiGLTE02p2YizxqsRinI400hor74vatPZHGSFRjOhpRj/l23m9Hrs3v3rp6/f8n7//jrzdab3//3+vl91+d1zneHolDnYxDg/r/NVFswW14UK21tzvR9Oe9FK/GpbgQZ2M5lmMpXrx+qV3XL7HO7UbK3OpttDe1u5MObW39s5FFLfJoRhJ5zEelyEmLnHqkMRWTMRmleDJOxUw0I42ZyGMusmjGmWhGK7Jij6pGI7KoRCvq0Yg0jkU1jkcaEzEVU3Ey0shiPM5EPRajFrMxHZWilnMrHZevi+vuLz/142d/88Eb7ek4F+eLJ2dig4Yk7Rdze9+L+PMGhdZ09zfR/7dLDHV38O3tnLi9Rm/yWd2KwzZsiZXi/H94p8MAAAAAbqOkePc9iYiRuKeYmsnnss/3Zo/sbHQAAADAVii+aXewnRSn+vdE0j7/L61T8t2I3dseHgAAALAFkuIauyQixuLezlTvcqn13gQAAAAA/gMVn/8faidjEZeLDOf/AAAA8DHz1UFj7L+/qxhjdyyaC7uTn/4pGo2R5MrC6fuSi5V2ucrFOzrLdZPPXa2xNXMg2detpEgmhy/tTSJiuJodTHqjX/6zey3Bh8X9gWsDEA4a6z/ZJIDYOIDiUXwjDnfKHH6mkz7Tm9NZy9hMPpeNV+tzD08k3TdHWi8/d/6LUTT/a7X5fUmcO7+8NP7088tFDRevtO+vXOwOEJ/0loru2AkbxLLSu5rinvVbPFJciNFd71hnvaX+9ndHkx3auP1J/zpfiyOdMkfGOunY6vaPttc5Mf7wRFQq+4Za2enWyyt9re9GMVFEUbR8d6+1yU08C6/F0U6Zo8eOdpJ1oiiviuK5tVGUr0Vx5Qa3xQ1H8cbhy6f/+ot6kp3cLIqTHzEKgJ1yrhj151ovtKfohf7RGVX9Bz/szOvvd/f0lryZo9y5a68yesv39XXDsaZ3T2+ld38tjnXKHOu8nhg+sE6/UlrniP7C+Rd+2T2iP/DWd7//xKFfvXNdv34TUbwVxztlukn8788H9LHtNn/zul71zfYSbw5cb3OunLySxEhy+GrWxbPPLj279Fy5fHKy9ECp9GA5RoqXCt1kvUjXbFQA/tts9hs773zpatFBv8KTPLDJWXUy3PtKwXg8Hc/HcjwTJ4qrDSLi3vVrHev7GsKJTc5ax/p+4eXEJueW18qWry+7+2gSA8qe7Ntin/hOkfztNj0hALANjmzSDydxV2fYn1fu7C5xtcRK8ebvHUlyov+8+wsRcWBQn9vuy493fji3d3Ycg/vyfr/vpp/Zjo0CAB9zWePDZKz1etJo5AtPTkxNTVRap7K0Ua8+njby6dkszWutrFE9VanNZulCo96qV3sfWk5nzbS5uLBQb7TSmXojXag389PFL7+n3Z9+b2bzlVorL9ZTaWZptV5rVaqtdDpvVtOFxUfn8uaprFEs3FzIqvlMXq208notbdYXG9VsPE2bWdZXMJ/Oaq18Js9G0ryWLjTy+UrjSkTMLc5n6XTWrDbyhVa9U2FvXXltZl9jvqh2PNZ8oPCHHdjkALDjXnr10oWzy8tLL97axO9upPBOtxEAWO1Geuk13/QDAAAAAAAAAAAAAAC21drL9dq5N3Uh4Ejc8uWDL+2O9sSeW128PfFEpyG9cYU/0uWMayeGt7rCjSc+9fbWtWJtPSO9nDs3u+5zz6rndFd3227TRrjwr62r8KlHHrlw6UpEFDnJcP/mffTy/lPvZdFr3Qb1rP+fst6lrq/vi9j1o293cj47oHAyvMVb7N1uA3v/1YMKD63OWUk2+MfflsMPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANyUfwcAAP//FeZCKg==") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4008054}}, {{&(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x400400c0}}], 0x2, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000040), 0x7, 0x43) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) ioctl$LOOP_SET_DIRECT_IO(r3, 0x4c08, 0x591) socket(0x400000000010, 0x3, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) 1.44781144s ago: executing program 2 (id=4338): r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$MON_IOCG_STATS(r2, 0xc0109207, &(0x7f0000000180)) 1.44663274s ago: executing program 3 (id=4339): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REQ_SET_REG(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000100)={0x24, r1, 0x1, 0x70bd28, 0x25dfdc01, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x20008004) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$HIDIOCSUSAGES(0xffffffffffffffff, 0x501c4814, &(0x7f0000000dc0)={{0x1, 0x3, 0x9, 0x800, 0x5, 0x5}, 0x8d, [0x7, 0x93b, 0x6, 0x1, 0x1, 0xb8a, 0x2f, 0x100, 0x5, 0x7, 0x7, 0x5, 0x41d4, 0x83, 0x3, 0xffffffff, 0x9, 0x1000, 0x77e4, 0xffff0c56, 0x3, 0x1, 0x0, 0x40, 0x9, 0x200, 0x69, 0x2, 0x0, 0x6, 0x3, 0x7, 0x8, 0x8, 0xa522, 0x100, 0xfffffff8, 0x80000001, 0x0, 0x40, 0x1, 0x6, 0x1, 0x7fffffff, 0x5eb9, 0x5, 0x9c05, 0x800000c, 0x401, 0x4, 0x75, 0x817, 0xb, 0x3, 0xda90, 0x7, 0xf, 0xbc4b, 0x106, 0xfd, 0x81, 0x6, 0x101, 0x39, 0xffffff7f, 0x6, 0x5, 0x5, 0x77, 0xfffffffd, 0x0, 0x9, 0x73f, 0x5, 0x8, 0x4, 0x3, 0xffffffff, 0x5, 0x26be23d3, 0x7, 0x2, 0x9, 0x8, 0xdd2, 0xfffffffb, 0x3, 0x4, 0x2, 0xfff, 0x80000001, 0x9, 0x4, 0x0, 0x3, 0x2, 0x2, 0x5, 0x6, 0x1, 0x80000001, 0x7, 0x0, 0x40, 0x5, 0x101, 0x8, 0x9, 0x334c230c, 0x6, 0x4, 0xfffffff9, 0x8, 0x3, 0xffff0000, 0x7, 0x2, 0xffffffff, 0x4, 0x3, 0x4, 0x4, 0x3f, 0x81, 0x3, 0x400, 0x4, 0x984, 0x1, 0x6, 0x7, 0x6, 0x1ff, 0x2a3, 0x6d, 0x1, 0x10000, 0x5, 0x80000000, 0x1d01e, 0x1, 0x3, 0xfffffffb, 0x8, 0x63, 0x400, 0x5, 0x401, 0x4, 0xfff, 0x0, 0x9, 0x3, 0x8, 0xfffffff9, 0x2, 0x80000000, 0x3, 0xc, 0x1, 0xad, 0x100, 0x144, 0x2, 0xfffffffc, 0x2, 0x5, 0x0, 0x5, 0x9, 0x1, 0x4, 0x1000, 0x974, 0x5, 0x2, 0x8, 0x5, 0x88, 0x1000, 0x0, 0x1, 0x2, 0x5, 0x9, 0x0, 0x57a, 0x0, 0x0, 0x6, 0x9, 0x5c, 0x6, 0x9, 0xd22, 0x2, 0x7, 0x10, 0x8, 0xffffffff, 0x2149, 0xf, 0x26a02622, 0x7fff, 0x8, 0x8, 0x7ff, 0x5, 0x8, 0x81, 0x8, 0xff, 0x5, 0xfffffffa, 0x2, 0x2, 0xffff, 0xf, 0x5, 0x7, 0x5, 0x100, 0x1e06, 0xf, 0xdf2, 0x0, 0xbb, 0xfff, 0x400, 0x2, 0x80000000, 0x7, 0x8, 0xf9b, 0x8, 0x7ff, 0x7, 0x3ff, 0x630a, 0x5, 0xcff, 0x9, 0xb7, 0x1, 0xff, 0x4, 0x5, 0x10, 0x1, 0x92a, 0x3, 0x5, 0xd, 0x5, 0x101, 0x6, 0x7fff, 0x800, 0x3, 0x4, 0x0, 0x7f, 0x200, 0x20, 0x7, 0x1000000, 0x0, 0x7f, 0x53, 0x8, 0x8, 0x5, 0x2, 0xf, 0xd81c, 0x840, 0x1, 0x9, 0x2, 0x81, 0x9, 0x3, 0x5, 0x1000, 0x8, 0x47, 0x94, 0x7, 0x8, 0x8001, 0x56f71053, 0x1, 0x867, 0x3ff, 0x40, 0x6, 0x3, 0xfff, 0x5, 0x197, 0x9, 0x6, 0x5, 0x6, 0x7, 0x0, 0x84, 0x3, 0x1ff, 0x400, 0x3, 0xd42, 0x9, 0x5, 0x1ff, 0x4, 0x9, 0xbec, 0x5, 0x7, 0x3, 0x5, 0x64000000, 0x2, 0x1e, 0x3a, 0x6, 0x5, 0x18000, 0x2, 0xffff, 0x9, 0x6, 0x9, 0x0, 0xe4f, 0x67c, 0x27b7, 0xe, 0x9, 0x9, 0x5, 0xd, 0x5, 0x7f, 0x76, 0x9, 0xc4fe, 0x9, 0x3, 0x4, 0x8, 0x87, 0x1, 0x4, 0x6, 0x40, 0x9, 0x8, 0x1, 0x6, 0x8, 0xc75e, 0x4, 0x6, 0x1b, 0xfd3, 0x2, 0x3, 0x9, 0x10, 0x4, 0x5d2f, 0x5, 0x1b, 0x3ff, 0x5, 0x8, 0x6, 0xc000000, 0x5c, 0x9, 0x541b, 0xce, 0x6, 0x4, 0x69f, 0x3, 0x5, 0x7, 0x4, 0x200, 0x7, 0x8, 0x2323, 0xfffffff7, 0xffff, 0x7ff, 0x4, 0xd, 0xffffff42, 0x89, 0x80000001, 0x3ff, 0x3, 0x554, 0xde, 0x0, 0x400, 0x3, 0x9, 0x800, 0x7cb3aca3, 0x6, 0x6, 0x4, 0xf8000000, 0x1, 0xfffffff9, 0x9, 0xffffffff, 0x0, 0x7, 0x10000, 0x4, 0x3, 0x8001, 0x8, 0xbb, 0x2, 0xf548, 0x3, 0x36c, 0xffffffff, 0x10, 0x676, 0xe67, 0x88, 0x808, 0x560, 0x6db5, 0xa7b, 0x2, 0x4, 0x9, 0x3, 0x4, 0xffffffff, 0x6, 0xed2, 0x24bdaad2, 0x9, 0x4, 0x3, 0x1, 0xd599, 0x2, 0x6c51, 0x2, 0x0, 0x0, 0x2, 0xfce6, 0xf, 0xcd0, 0x4, 0xf, 0x0, 0x9, 0x5, 0x200, 0x6, 0x5, 0x2, 0x7, 0x17, 0xc36, 0x0, 0x8fbb, 0x3, 0x5, 0x0, 0x8, 0x8, 0x1, 0x8, 0x1000001, 0x45d8, 0x9, 0x0, 0x60000, 0x7, 0x2, 0xfffffff1, 0x3, 0x2, 0xfffffd67, 0x2, 0x4, 0x5, 0x3, 0x800, 0x10, 0xa, 0xb12c, 0x5ce, 0x1, 0xfffffffd, 0xf9c8, 0x0, 0x80f4, 0x10000, 0x3, 0x8, 0x2, 0x7, 0x5, 0x8, 0x401, 0x7, 0x10, 0x0, 0x6b, 0x100, 0x8, 0x2, 0x2, 0x5273, 0xe45f, 0x10, 0x0, 0x8, 0x4, 0x7, 0x7, 0x6, 0x4, 0x8e8b, 0x5, 0x3, 0x7, 0x3, 0xe535, 0x80, 0x5, 0x6, 0x0, 0x3, 0xff, 0x7fffffff, 0x5, 0x1, 0xa, 0x4, 0x1, 0x31, 0x0, 0xee1, 0x10001, 0x3, 0xfffffffc, 0x4, 0x1, 0x6f9, 0x7, 0xb26c, 0xb, 0x0, 0xfffffff3, 0x4000008, 0x8, 0x1ff, 0x6, 0xfd, 0x3, 0x3d, 0x6, 0x80000001, 0x5, 0x7, 0x1, 0xffffffff, 0x6, 0x3d29, 0x4, 0x7, 0x8, 0xb04, 0x3, 0xea6, 0x9, 0x101, 0x4, 0x1400, 0xfffffeff, 0x7, 0x2, 0x4, 0x8, 0x7, 0xe, 0x2, 0xc, 0x2, 0x2, 0x64c1, 0x80000000, 0x200, 0x2, 0xfffffffd, 0x1, 0x91, 0x8001, 0x401, 0x781d, 0x80, 0xfffff5b0, 0x8, 0x3, 0x8, 0xfff, 0xcd800000, 0x9, 0x6, 0x0, 0x5b5, 0x7, 0x3, 0x2, 0x5, 0x10001, 0xc, 0x9e9, 0x53, 0xfffffdd5, 0xc, 0xc00, 0x40, 0x401, 0xf2a6, 0x7, 0x3, 0x2, 0x7, 0x3800000, 0x0, 0x3ff, 0x3, 0x7fffffff, 0x4, 0x0, 0x1, 0xf, 0x7, 0xa84d, 0x3, 0xaf, 0xaf72, 0x5f, 0x1, 0xe, 0x6, 0x9, 0x5, 0x7, 0x3, 0x5, 0x3, 0x40, 0x1000, 0x75f1, 0x4, 0x3, 0x1, 0xfffffffd, 0x4, 0x8, 0x10, 0x80, 0x2, 0x6, 0x0, 0xe, 0xc, 0x3, 0x2, 0xd, 0x8, 0xfffff3f2, 0x6, 0x8, 0x3, 0x6, 0x5, 0x3, 0x101, 0x8, 0xbd, 0xa, 0x8, 0xffffed34, 0x8000, 0x2, 0x0, 0x7, 0x55f4727b, 0xd, 0x3b, 0x5, 0x8, 0xffffffff, 0x4, 0x81, 0x6, 0xb, 0x2, 0xa53, 0xff, 0x0, 0x2, 0x5, 0x3233, 0xff, 0x6, 0x2, 0x9, 0x1, 0x0, 0x3ff, 0x5, 0x8, 0x40, 0x0, 0x40, 0x88, 0x5, 0x80, 0x4, 0xd0000000, 0x8, 0x4, 0x5, 0x5, 0x7, 0x0, 0x0, 0x76b, 0xbb, 0x2, 0x5, 0x7fff, 0x9, 0xa, 0x5, 0x80, 0x4, 0x8, 0x8, 0x1f, 0x1, 0x3, 0x4, 0xd126, 0x7, 0x5, 0x0, 0x0, 0x8, 0x4, 0x1, 0x5, 0xfffffffa, 0x8, 0x270b, 0x5, 0x7fff, 0x4, 0x5, 0x6, 0x3, 0x4, 0x13f, 0x0, 0xc906, 0x6, 0x100, 0x4, 0x3, 0x3, 0x7f, 0x2b, 0x4, 0x3, 0x3, 0x8001, 0x46f, 0x19f1, 0x6, 0x20, 0x2, 0x2, 0x6, 0x5, 0x5, 0x401, 0x5, 0x6, 0x5, 0x7, 0xb, 0x200, 0x6, 0x9, 0x7, 0x3, 0x1, 0x7f, 0x9, 0xc3b, 0xfdf5, 0x0, 0x3, 0x0, 0xf, 0x1, 0x800, 0x4f35, 0x1, 0x18, 0x5, 0x0, 0x6, 0xaa5, 0x800, 0xf, 0x7, 0x800, 0xc, 0xfffffffb, 0xff, 0x5, 0x1000, 0x8, 0x81, 0x6, 0x2, 0x9, 0x8, 0x5, 0x8, 0x8, 0x100, 0x5, 0x10, 0x3, 0x7, 0x82, 0x4, 0x40, 0xabde, 0x1, 0xb, 0x8, 0x5, 0x8, 0x7f, 0x100, 0x8, 0x9, 0x6, 0x80000001, 0x2, 0x8, 0x2, 0x7fff, 0x3, 0x6, 0x4, 0x5, 0x3, 0x0, 0x1, 0x8, 0x59, 0x1, 0x0, 0x48, 0xaa19, 0xc, 0x400, 0x1, 0x401, 0x8, 0xc11, 0x4, 0x0, 0x7, 0x2, 0x7f, 0x0, 0x1, 0xc0000, 0x7, 0x4, 0xef47, 0x3, 0x1, 0x0, 0x2, 0x1, 0x0, 0xe14f, 0x5, 0x7, 0x8, 0x7fffffff, 0x7f, 0xffffffff, 0xffffff88, 0x400, 0x4, 0x10, 0x5, 0x9, 0x5, 0x0, 0xff, 0x0, 0x8, 0x3, 0x5, 0xfffffffc, 0x9, 0x11, 0x9, 0xfffffffe, 0x40, 0x3, 0x7, 0x0, 0x1, 0x2, 0x6, 0x81, 0x4, 0x401, 0x6, 0x5, 0x3, 0x0, 0xd, 0x6, 0xc, 0x2, 0x1, 0xfffffe5c, 0x40, 0x0, 0x9, 0x24, 0x1ff, 0x4, 0xe92, 0x5, 0x6e3, 0x4, 0xff, 0x0, 0xdf, 0x5, 0x7, 0x100, 0x3ac9, 0x10001, 0xae27, 0x80, 0x5, 0x7, 0x7fff, 0x0, 0xb, 0x4, 0x1, 0x1, 0x0, 0x9, 0x331d, 0x5, 0xb6, 0x7, 0x4, 0x4, 0x9, 0x6cf3, 0x8, 0x7, 0xf, 0x80, 0x9, 0xffff, 0x8000, 0x1, 0x2, 0x2, 0xdc0, 0x0, 0x100, 0x9, 0x1, 0xfffffff8, 0x800, 0x3, 0x0, 0x9, 0x644d, 0x93, 0xb0, 0x2, 0x3ff, 0x800, 0xfffffff7, 0x2, 0x0, 0xff]}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="010000000500000009000000840000004401", @ANYBLOB], 0x48) r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x481, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000180)='.\x00', &(0x7f0000000040), 0x8000, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYRESHEX=r6]) mkdirat(r7, &(0x7f0000000300)='./file0\x00', 0xd0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, r3, {0x1}}, './file0\x00'}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@fallback=r4, 0x30, 0x0, 0x6, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r10, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f00000002c0)={0x6, 0x0}, 0x8) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000280)={@ifindex=r11, r8, 0x31, 0x20, 0xffffffffffffffff, @void, @void, @void, @value=r12, r9}, 0x20) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, &(0x7f0000000840)=""/121, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r5}, 0x38) 1.436496131s ago: executing program 1 (id=4340): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket(0x2b, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x11, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) ptrace(0x10, 0x0) ptrace$pokeuser(0x6, 0x0, 0x388, 0x6) socket$kcm(0x29, 0x2, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000003c0), 0x0, 0x4000001, 0x0) poll(0x0, 0x0, 0x9) syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), r0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) connect$inet6(r0, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r4, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x44, 0x2, 0x7, 0x401, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x10001}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x7}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x800}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x20040010) setrlimit(0xf, 0x0) socket$kcm(0x2, 0x3, 0x84) close(0x3) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() 1.288677395s ago: executing program 2 (id=4341): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = add_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, 0xfffffffffffffffe, &(0x7f0000000040)=@chain={'key_or_keyring:', r1}) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r2, 0x6, 0x3, 0xffffffffffffffff, &(0x7f0000000040)=0x1) write$nci(r0, 0x0, 0x14) 519.890586ms ago: executing program 4 (id=4342): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e20, 0x8, @loopback, 0xcd8}]}, &(0x7f0000000100)=0x10) 389.7248ms ago: executing program 2 (id=4343): bpf$MAP_CREATE(0x300000000000018, &(0x7f0000000100)=@base={0x18, 0x4, 0x41, 0x1, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4002, 0x5}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000340)="25b096f681cd731c3f3a9badc4e3cf5edeae1f3b5082d7ab3a97c053df68744e7c7e24d0b59997bab4bccff8363b275de3510b0ebe4275d8d2f153395668e3d608e358fc2294263c03f8dc4f8bf194e4fde4600a2dec2f483a914e2fde0cbc344a2b9fc18dd198966045a6d4d4eb8571e8bb69e6724e37fcbaa6e4c64050b47256b9bb17f5c0aa5101e015ecdcb62fec46fc0205512535", 0xfed7}, {&(0x7f0000000280)="d3a88bea5916e313729a3989393caca70c74cd74e62e524bdd37be131ad827f911027e70ccf679d8e7c0cd3333095f83d6d473db345ded2ac8acaa87503de74c82431758e8e11e3ecb7bce02d6cd65f4eb88cc49ceb9e39f7117eb0f62323dc9b80dea447b0c96a383f14281bb87b09de0a6153ceeaae2b50a2b0f0f41810f379f9c3a1f3938461829d716a4bda86ab11b41f754bc15d71b", 0xfed0}], 0x12}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r6) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) r8 = socket(0x2b, 0x1, 0x1) connect$inet6(r8, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) r9 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x40000) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0xa340}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACSEC_SCB={0x5}, @IFLA_MACSEC_ES={0x5}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24008000}, 0x0) 356.21123ms ago: executing program 3 (id=4344): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x5084, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x8, 0x1}, 0x1000, 0x2, 0xffffff7e, 0x8, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x6, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x11e210, 0x10004, 0x20da, 0x6, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='ns\x00') exit(0x5) fchdir(r3) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000180)='tmpfs\x00', 0x2200cd0, 0x0) ptrace(0x10, 0x0) ptrace$getregset(0x4204, 0x0, 0x2, &(0x7f00000003c0)={0x0}) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r4 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32=r5, @ANYBLOB], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r5, {}, {}, {0x8, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x8881}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000000020000000000000000180000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'/28], 0x50) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) open(&(0x7f0000000140)='.\x00', 0x0, 0x112) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f00000001c0)='./file0\x00', 0x800082, &(0x7f0000000680)=ANY=[@ANYBLOB="756d61736b3d30303030303030303030303030303030303030333737372c616c6c6f775f7574696d653d30303030303030332c000000000083ec4c0d6e84de0249d09f31ef580c3d00000000"], 0x1, 0x1b1, &(0x7f0000000240)="$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") syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') 349.660871ms ago: executing program 0 (id=4345): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$nci(r0, 0x0, 0x14) 167.408356ms ago: executing program 1 (id=4346): prctl$PR_GET_ENDIAN(0x13, &(0x7f0000000100)) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100), 0x1, 0x500, &(0x7f0000000500)="$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") prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000300)={0x1, 0x0, 0x0, 'queue1\x00'}) r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r4, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r4, 0x5, &(0x7f0000000040)='cgroup2\x00', 0x0, 0xffffffffffffffff) write$sndseq(r3, 0x0, 0x0) socket$kcm(0x1e, 0x5, 0x0) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0xeda2442f576052ae) r5 = socket$l2tp6(0xa, 0x2, 0x73) capset(&(0x7f0000000280)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) sendmsg$inet6(r5, &(0x7f0000000100)={&(0x7f0000000000)={0xa, 0x4e20, 0x80000, @local, 0xfffffffe}, 0x1c, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='h\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x006\x00'], 0x238}, 0x40440f0) rmdir(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000140)={[{@barrier}, {@min_batch_time={'min_batch_time', 0x3d, 0x5}}, {@noquota}, {@lazytime}, {@nombcache}, {@nodioread_nolock}]}, 0x1, 0x59c, &(0x7f0000001840)="$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") perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x9, 0x3}, 0x0, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x15, 0x6, &(0x7f0000000a00)=ANY=[@ANYBLOB="05000000000000006911160000000000851000000200000085000000a000000000009500a50500000000ced2f99e716997830cedc6f56cff608ce8b555e805c8143d76d7172b69b537e7f7f0c94d255127db23fa0fe86dcd75868b7852e028b5e47ea284e943ecbc37191f1a1743e34b7f8ff3a74292a900895d766e220701ca93b449eb4c6f1a891ab59d30000000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0xcb, &(0x7f0000000200)=""/203, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x6}, 0x94) 68.357719ms ago: executing program 4 (id=4347): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="d8000000210081044e81f782db44b9040200000000806c0100001500100014000000001209000d2000000401a80018000e400e4006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee062e1c547cbc7225e6756cfb39b0590b4800089e408e8d8ef52b49816277cf4090000001fb791643a5ee4ce1b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db701000000eafad95667e006dcdf969b3ef35ce3bb9ad809d561cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d939acd92637429397f632838", 0xd8}], 0x1}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r2, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) ioctl$sock_netdev_private(r1, 0x8914, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@file={0x0, './mnt\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0xa420, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) r7 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r7, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newtaction={0xc4, 0x30, 0x1, 0x4000000, 0x0, {0x0, 0x0, 0x6a00}, [{0xb0, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0x10000000, 0x0, 0x4}, 0x3, r9}}]}, {0x4, 0xa}, {0xc}, {0xffac, 0x8, {0x0, 0x2}}}}, @m_mpls={0x5c, 0x2, 0x0, 0x0, {{0x9}, {0x30}, {0x4}, {0xc}, {0xc}}}]}]}, 0xc4}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x5, 0xe1045, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_config_ext={0x800000, 0x3fff8000}, 0x844, 0x32, 0x43a1bd76, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r10 = getpgid(0x0) r11 = syz_pidfd_open(r10, 0x0) r12 = pidfd_getfd(r11, r11, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) name_to_handle_at(r12, &(0x7f0000000140)='./file7/file0\x00', &(0x7f0000000200)=ANY=[], 0x0, 0x1000) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) 0s ago: executing program 0 (id=4348): accept(0xffffffffffffffff, &(0x7f00000001c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, &(0x7f0000000300)=0x80) sendmsg$tipc(r0, &(0x7f0000000900)={&(0x7f0000000100)=@nameseq={0x1e, 0x1, 0x2, {0x0, 0x1, 0x1}}, 0x10, &(0x7f0000000800)=[{0x0}], 0x1, &(0x7f0000000840)="8148127eb1396a27552067c92bedbd8247a18b64db022f7905a20e8f0f9eaab5db614ebf1693ad84bfd51cef806504fb5406280f9a6430bf98df56027703273f8e35de6a57", 0x45, 0x844}, 0x20000000) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='projid_map\x00') preadv(r1, 0x0, 0x0, 0x21, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x0, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000440)='./file1\x00', 0x210000, &(0x7f0000000480)={[{@nobarrier}, {@nolazytime}, {@jqfmt_vfsv0}, {@noauto_da_alloc}]}, 0xfc, 0x58f, &(0x7f0000002d00)="$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") sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) kernel console output (not intermixed with test programs): ince last fsck: 1 [ 696.223141][ C0] EXT4-fs (loop2): initial error at time 2000000003: ext4_validate_block_bitmap:441 [ 696.223364][ C0] EXT4-fs (loop2): last error at time 2000000003: ext4_validate_block_bitmap:441 [ 696.250595][T17381] loop2: lost filesystem error report for type 5 error -117 [ 696.253696][T17381] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #13: comm syz.2.3874: attempt to clear invalid blocks 1024 len 1 [ 696.276225][T17381] fserror_report: 1 callbacks suppressed [ 696.276401][T17381] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 696.287403][T17381] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.3874: invalid indirect mapped block 1819239214 (level 0) [ 696.312387][T17381] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 696.316006][T17381] EXT4-fs (loop2): 1 truncate cleaned up [ 696.339445][T17381] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 696.385556][ T2340] EXT4-fs error (device loop0): ext4_release_dquot:7070: comm kworker/u8:7: Failed to release dquot type 0 [ 696.472385][ T28] audit: type=1326 audit(2000000002.940:1590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17377 comm="syz.1.3876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fe8c0b0cb42 code=0x7ffc0000 [ 696.494861][T13178] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 696.496410][ T28] audit: type=1326 audit(2000000002.940:1591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17377 comm="syz.1.3876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fe8c0b0cbd7 code=0x7ffc0000 [ 696.535745][T13178] EXT4-fs error (device loop0): __ext4_get_inode_loc:4885: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 696.553089][ T28] audit: type=1326 audit(2000000002.940:1592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17377 comm="syz.1.3876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fe8c0ac9ad1 code=0x7ffc0000 [ 696.585840][T13178] loop0: lost filesystem error report for type 5 error -117 [ 696.587489][T13178] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 696.629848][ T28] audit: type=1326 audit(2000000002.940:1593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17377 comm="syz.1.3876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7fe8c0b0dbc9 code=0x7ffc0000 [ 696.656720][T13178] loop0: lost filesystem error report for type 5 error -117 [ 696.656898][T13178] EXT4-fs error (device loop0): ext4_quota_off:7318: inode #3: comm syz-executor: mark_inode_dirty error [ 696.679308][ T28] audit: type=1326 audit(2000000002.940:1594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17377 comm="syz.1.3876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fe8c0ac9b3b code=0x7ffc0000 [ 696.702848][ T28] audit: type=1326 audit(2000000002.940:1595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17377 comm="syz.1.3876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8c0b0cdd9 code=0x7ffc0000 [ 696.726540][ T28] audit: type=1326 audit(2000000002.940:1597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17377 comm="syz.1.3876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8c0b0cdd9 code=0x7ffc0000 [ 696.750150][ T28] audit: type=1326 audit(2000000002.940:1596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17377 comm="syz.1.3876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7fe8c0ac922c code=0x7ffc0000 [ 696.874896][T13178] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 697.429763][T17389] loop1: detected capacity change from 0 to 512 [ 697.452002][T17389] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 697.477642][T17389] EXT4-fs error (device loop1): ext4_init_orphan_info:618: comm syz.1.3879: orphan file block 0: bad magic [ 697.489740][T17389] loop1: lost filesystem error report for type 5 error -117 [ 697.490173][T17389] EXT4-fs (loop1): Remounting filesystem read-only [ 697.497490][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 697.497503][ C1] EXT4-fs (loop1): initial error at time 2000000004: ext4_init_orphan_info:618 [ 697.497535][ C1] EXT4-fs (loop1): last error at time 2000000004: ext4_init_orphan_info:618 [ 697.532285][T17389] EXT4-fs (loop1): mount failed [ 697.640975][T13781] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 697.689797][T17394] openvswitch: netlink: Missing key (keys=40, expected=80) [ 697.759134][T17405] loop0: detected capacity change from 0 to 512 [ 697.812262][T17405] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 697.824902][T17405] ext4 filesystem being mounted at /194/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 698.878204][T13178] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 699.000407][T17425] loop4: detected capacity change from 0 to 4096 [ 699.024047][T17425] EXT4-fs: Ignoring removed bh option [ 699.030094][T17425] ext4: Unknown parameter 'fsuuid' [ 699.082159][T17429] loop2: detected capacity change from 0 to 512 [ 699.108229][T17429] EXT4-fs: Ignoring removed nomblk_io_submit option [ 699.132312][T17429] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8857e02c, mo2=0002] [ 699.165628][T17429] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.3891: invalid indirect mapped block 2683928664 (level 1) [ 699.211444][T17429] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 699.212450][T17436] loop0: detected capacity change from 0 to 4096 [ 699.213749][T17429] EXT4-fs (loop2): Remounting filesystem read-only [ 699.221724][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 699.221756][ C0] EXT4-fs (loop2): initial error at time 2000000006: ext4_free_branches:1023: inode 11 [ 699.221787][ C0] EXT4-fs (loop2): last error at time 2000000006: ext4_free_branches:1023: inode 11 [ 699.266532][T17429] EXT4-fs (loop2): 1 truncate cleaned up [ 699.291351][T17429] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 699.292157][T17436] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=e842c018, mo2=0002] [ 699.336232][T17441] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 699.344920][T17441] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 699.361522][T13781] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 699.385393][T17436] System zones: 0-5 [ 699.395901][T17436] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 699.447797][T17443] loop3: detected capacity change from 0 to 1024 [ 699.455151][T17427] loop1: detected capacity change from 0 to 4096 [ 699.483228][T17427] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=e842c018, mo2=0002] [ 699.494519][T17427] System zones: 0-5 [ 699.510069][T17443] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 699.515761][T17427] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 699.544017][T13178] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 699.561675][T17443] IPVS: persistence engine module ip_vs_pe_€ not found [ 699.582502][T17450] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3893'. [ 699.621728][T14577] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 699.687347][T17459] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3897'. [ 699.739035][T17450] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3893'. [ 699.834093][T14235] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 699.836082][T17464] loop2: detected capacity change from 0 to 512 [ 699.987900][T17465] loop3: detected capacity change from 0 to 512 [ 700.089285][T17465] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 700.154688][T17465] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.3898: bg 0: block 288: padding at end of block bitmap is not set [ 700.170109][T17465] loop3: lost filesystem error report for type 5 error -117 [ 700.171516][T17465] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 700.179469][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 700.179506][ C1] EXT4-fs (loop3): initial error at time 2000000007: ext4_validate_block_bitmap:441 [ 700.179647][ C1] EXT4-fs (loop3): last error at time 2000000007: ext4_validate_block_bitmap:441 [ 700.216816][T17465] loop3: lost filesystem error report for type 5 error -117 [ 700.222540][T17465] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #13: comm syz.3.3898: attempt to clear invalid blocks 1024 len 1 [ 700.244162][T17465] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 700.246296][T17465] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.3898: invalid indirect mapped block 1819239214 (level 0) [ 700.271284][T17465] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 700.273907][T17465] EXT4-fs (loop3): 1 truncate cleaned up [ 700.298041][T17465] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 700.337310][T17464] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 700.400913][T17470] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3901'. [ 700.414114][T17464] ext4 filesystem being mounted at /163/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 701.570414][T14577] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 701.739648][T13781] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 701.756383][T17459] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3897'. [ 701.773557][T17459] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3897'. [ 701.787060][T17459] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3897'. [ 701.799156][T17459] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3897'. [ 701.809704][T17459] netlink: 'syz.0.3897': attribute type 6 has an invalid length. [ 701.904606][T17479] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3901'. [ 701.914229][T17479] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3901'. [ 702.082969][T17494] loop1: detected capacity change from 0 to 1024 [ 702.108794][T17494] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 702.170638][T17494] IPVS: persistence engine module ip_vs_pe_€ not found [ 702.202309][T14235] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 702.271233][T17506] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 702.306416][T17506] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 702.324387][T17482] loop2: detected capacity change from 0 to 4096 [ 702.458335][T17507] loop0: detected capacity change from 0 to 4096 [ 702.486459][T17507] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=e842c018, mo2=0002] [ 702.760437][T17507] System zones: 0-5 [ 702.975827][T17514] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 703.028740][T17507] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 703.113807][T17482] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=e842c018, mo2=0002] [ 703.295484][T17482] System zones: 0-5 [ 703.329202][T17482] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 704.136954][T17522] set_capacity_and_notify: 1 callbacks suppressed [ 704.136990][T17522] loop4: detected capacity change from 0 to 4096 [ 704.167426][T14235] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 704.274655][T17522] EXT4-fs: Ignoring removed bh option [ 704.372067][T17522] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 704.388929][T13781] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 704.400466][T13178] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 704.556340][T17528] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 704.645435][T17528] __nla_validate_parse: 3 callbacks suppressed [ 704.645456][T17528] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3915'. [ 704.674464][T13462] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 704.686801][T17528] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3915'. [ 704.797762][T17546] loop2: detected capacity change from 0 to 2048 [ 704.878816][T17546] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 704.978367][T17528] loop1: detected capacity change from 0 to 256 [ 705.168459][T17557] loop4: detected capacity change from 0 to 1024 [ 705.208768][T17557] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 705.419121][T17557] IPVS: persistence engine module ip_vs_pe_€ not found [ 705.553428][T13462] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 705.588986][T17564] loop4: detected capacity change from 0 to 512 [ 705.604439][T17564] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 705.622684][T17564] EXT4-fs error (device loop4): ext4_init_orphan_info:618: comm syz.4.3923: orphan file block 0: bad magic [ 705.634408][T17564] loop4: lost filesystem error report for type 5 error -117 [ 705.634624][T17564] EXT4-fs (loop4): Remounting filesystem read-only [ 705.648531][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 705.648561][ C1] EXT4-fs (loop4): initial error at time 2000000003: ext4_init_orphan_info:618 [ 705.648588][ C1] EXT4-fs (loop4): last error at time 2000000003: ext4_init_orphan_info:618 [ 705.744539][T17568] loop3: detected capacity change from 0 to 512 [ 705.751589][T17564] EXT4-fs (loop4): mount failed [ 705.843620][T17568] EXT4-fs (loop3): 1 orphan inode deleted [ 705.854452][ T37] __quota_error: 57 callbacks suppressed [ 705.854468][ T37] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 705.883617][ T37] EXT4-fs error (device loop3): ext4_release_dquot:7070: comm kworker/u8:2: Failed to release dquot type 1 [ 705.903590][T17568] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 705.916817][ T37] loop3: lost filesystem error report for type 5 error -117 [ 705.943132][T17568] ext4 filesystem being mounted at /149/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 706.003087][T17567] Cannot find del_set index 29 as target [ 706.016553][T17567] netlink: 'syz.3.3922': attribute type 10 has an invalid length. [ 706.368026][T13781] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 706.457829][T17576] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 706.484192][T17574] loop0: detected capacity change from 0 to 4096 [ 706.490912][T17576] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 706.499506][T17574] EXT4-fs: Ignoring removed bh option [ 706.515526][T17574] ext4: Unknown parameter 'fsuuid' [ 706.799684][T17587] loop0: detected capacity change from 0 to 4096 [ 706.821685][T17587] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=e842c018, mo2=0002] [ 706.835848][T17587] System zones: 0-5 [ 706.841255][T17587] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 706.923776][T13178] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 707.245900][T17598] loop0: detected capacity change from 0 to 512 [ 707.266515][T17598] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 707.343205][T17601] loop2: detected capacity change from 0 to 512 [ 707.361852][T17598] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.3929: bg 0: block 288: padding at end of block bitmap is not set [ 707.377607][T17598] loop0: lost filesystem error report for type 5 error -117 [ 707.394295][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 707.408101][ C1] EXT4-fs (loop0): initial error at time 2000000005: ext4_validate_block_bitmap:441 [ 707.417522][ C1] EXT4-fs (loop0): last error at time 2000000005: ext4_validate_block_bitmap:441 [ 707.472463][T17598] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 707.481850][T17598] loop0: lost filesystem error report for type 5 error -117 [ 707.487034][T17598] EXT4-fs error (device loop0): ext4_clear_blocks:876: inode #13: comm syz.0.3929: attempt to clear invalid blocks 1024 len 1 [ 707.509510][T17598] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 707.516166][T17598] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.3929: invalid indirect mapped block 1819239214 (level 0) [ 707.541354][T17598] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 707.545635][T17598] EXT4-fs (loop0): 1 truncate cleaned up [ 707.642422][T17601] ext4 filesystem being mounted at /167/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 708.413356][T17597] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=e842c018, mo2=0002] [ 708.444522][T17597] System zones: 0-5 [ 709.122263][T17609] EXT4-fs: Ignoring removed bh option [ 709.140963][T17609] ext4: Unknown parameter 'fsuuid' [ 709.208255][T17615] syzkaller0: entered promiscuous mode [ 709.266182][T17617] set_capacity_and_notify: 2 callbacks suppressed [ 709.266197][T17617] loop4: detected capacity change from 0 to 4096 [ 709.279442][T17617] EXT4-fs: Ignoring removed bh option [ 709.284963][T17617] ext4: Unknown parameter 'fsuuid' [ 709.489874][T17621] loop2: detected capacity change from 0 to 2048 [ 709.774827][T17627] loop3: detected capacity change from 0 to 512 [ 709.806291][T17627] EXT4-fs: Ignoring removed nomblk_io_submit option [ 709.867655][T17627] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8857e02c, mo2=0002] [ 709.913787][T17627] EXT4-fs error (device loop3): ext4_get_branch:178: inode #11: block 33261: comm syz.3.3939: invalid block [ 709.942893][T17627] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 709.943288][T17627] EXT4-fs (loop3): Remounting filesystem read-only [ 709.952868][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 709.952904][ C1] EXT4-fs (loop3): initial error at time 2000000000: ext4_get_branch:178: inode 11: block 33261 [ 709.952930][ C1] EXT4-fs (loop3): last error at time 2000000000: ext4_get_branch:178: inode 11: block 33261 [ 710.159317][T17627] EXT4-fs (loop3): 1 truncate cleaned up [ 710.401228][T17637] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 710.644429][T17637] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 711.128659][T17647] loop3: detected capacity change from 0 to 512 [ 711.173986][T17649] loop4: detected capacity change from 0 to 2048 [ 711.415401][T17647] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 711.574791][T17647] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.3944: bg 0: block 288: padding at end of block bitmap is not set [ 711.590661][T17647] loop3: lost filesystem error report for type 5 error -117 [ 711.592742][T17647] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 711.600885][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 711.600985][ C1] EXT4-fs (loop3): initial error at time 2000000001: ext4_validate_block_bitmap:441 [ 711.601193][ C1] EXT4-fs (loop3): last error at time 2000000001: ext4_validate_block_bitmap:441 [ 711.637602][T17647] loop3: lost filesystem error report for type 5 error -117 [ 711.639881][T17647] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #13: comm syz.3.3944: attempt to clear invalid blocks 1024 len 1 [ 711.661812][T17647] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 711.663407][T17647] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.3944: invalid indirect mapped block 1819239214 (level 0) [ 711.687661][T17647] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 711.691164][T17647] EXT4-fs (loop3): 1 truncate cleaned up [ 711.820421][T17657] loop1: detected capacity change from 0 to 512 [ 711.872756][T17657] ext4 filesystem being mounted at /164/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 712.937970][T17659] loop2: detected capacity change from 0 to 512 [ 713.005384][T14577] EXT4-fs unmount: 15 callbacks suppressed [ 713.005400][T14577] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 713.063324][T17659] EXT4-fs (loop2): 1 orphan inode deleted [ 713.074208][ T49] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 713.092684][ T28] audit: type=1326 audit(2000000003.200:1655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17666 comm="syz.4.3948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9aaf59cdd9 code=0x7ffc0000 [ 713.110416][ T49] EXT4-fs error (device loop2): ext4_release_dquot:7070: comm kworker/u8:3: Failed to release dquot type 1 [ 713.119872][ T28] audit: type=1326 audit(2000000003.200:1656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17666 comm="syz.4.3948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9aaf59cdd9 code=0x7ffc0000 [ 713.169854][ T49] loop2: lost filesystem error report for type 5 error -117 [ 713.174906][T14235] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 713.189321][T17659] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 713.190577][ T28] audit: type=1326 audit(2000000003.200:1657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17666 comm="syz.4.3948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9aaf59cdd9 code=0x7ffc0000 [ 713.233112][ T28] audit: type=1326 audit(2000000003.200:1658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17666 comm="syz.4.3948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9aaf59cdd9 code=0x7ffc0000 [ 713.256832][ T28] audit: type=1326 audit(2000000003.200:1659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17666 comm="syz.4.3948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9aaf59cdd9 code=0x7ffc0000 [ 713.280442][ T28] audit: type=1326 audit(2000000003.250:1660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17666 comm="syz.4.3948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9aaf59cdd9 code=0x7ffc0000 [ 713.303995][ T28] audit: type=1326 audit(2000000003.250:1661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17666 comm="syz.4.3948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f9aaf59cb42 code=0x7ffc0000 [ 713.316948][T17659] ext4 filesystem being mounted at /169/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 713.327445][ T28] audit: type=1326 audit(2000000003.260:1662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17666 comm="syz.4.3948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f9aaf59cbd7 code=0x7ffc0000 [ 713.327487][ T28] audit: type=1326 audit(2000000003.260:1663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17666 comm="syz.4.3948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f9aaf559ad1 code=0x7ffc0000 [ 713.461178][T17659] Cannot find del_set index 29 as target [ 713.496475][T17677] loop1: detected capacity change from 0 to 512 [ 713.508168][T17677] EXT4-fs: Ignoring removed nomblk_io_submit option [ 713.521201][T17659] netlink: 'syz.2.3945': attribute type 10 has an invalid length. [ 713.529484][T12622] IPVS: starting estimator thread 0... [ 713.545667][T17677] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8857e02c, mo2=0002] [ 713.553950][T17677] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.3950: invalid indirect mapped block 2683928664 (level 1) [ 713.577292][T17659] team0: Device veth0_macvtap is up. Set it down before adding it as a team port [ 713.589481][T17677] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 713.591060][T17677] EXT4-fs (loop1): Remounting filesystem read-only [ 713.600228][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 713.600262][ C1] EXT4-fs (loop1): initial error at time 2000000000: ext4_free_branches:1023: inode 11 [ 713.600299][ C1] EXT4-fs (loop1): last error at time 2000000000: ext4_free_branches:1023: inode 11 [ 713.603653][T17685] loop3: detected capacity change from 0 to 4096 [ 713.615486][T17688] loop0: detected capacity change from 0 to 4096 [ 713.626232][T17685] EXT4-fs: Ignoring removed bh option [ 713.645058][T17687] IPVS: using max 2352 ests per chain, 117600 per kthread [ 713.651805][T17685] ext4: Unknown parameter 'fsuuid' [ 713.664521][T17677] EXT4-fs (loop1): 1 truncate cleaned up [ 713.670698][T17677] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 713.697402][T17688] EXT4-fs: Ignoring removed bh option [ 713.706231][T14235] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 713.743561][T17688] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 713.862938][T13178] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 713.921807][T17697] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 713.939182][T17697] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c841e018, mo2=0000] [ 713.949812][T17698] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3957'. [ 713.973450][T17697] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #3: block 2: comm syz.3.3958: lblock 2 mapped to illegal pblock 2 (length 1) [ 713.987626][T17697] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 713.989983][T17697] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #3: block 48: comm syz.3.3958: lblock 0 mapped to illegal pblock 48 (length 1) [ 713.999104][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 713.999123][ C1] EXT4-fs (loop3): initial error at time 2000000000: ext4_map_blocks:791: inode 3: block 2 [ 713.999161][ C1] EXT4-fs (loop3): last error at time 2000000000: ext4_map_blocks:791: inode 3: block 2 [ 714.039477][T17697] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 714.041968][T17697] EXT4-fs error (device loop3): ext4_acquire_dquot:7034: comm syz.3.3958: Failed to acquire dquot type 0 [ 714.064131][T17697] loop3: lost filesystem error report for type 5 error -117 [ 714.076731][T17697] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 714.086218][T17697] loop3: lost filesystem error report for type 5 error -117 [ 714.086332][T17697] EXT4-fs error (device loop3): ext4_evict_inode:267: inode #11: comm syz.3.3958: mark_inode_dirty error [ 714.109623][T17697] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 714.109774][T17697] EXT4-fs warning (device loop3): ext4_evict_inode:270: couldn't mark inode dirty (err -117) [ 714.113708][T17707] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3957'. [ 714.119904][T17697] EXT4-fs (loop3): 1 orphan inode deleted [ 714.148573][ T49] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 714.180591][ T49] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 714.183074][T17697] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 714.214095][ T49] EXT4-fs error (device loop3): ext4_release_dquot:7070: comm kworker/u8:3: Failed to release dquot type 0 [ 714.226570][ T49] loop3: lost filesystem error report for type 5 error -117 [ 714.236665][T17706] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 714.336916][T17715] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 714.345468][T17706] ext4 filesystem being mounted at /168/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 714.356804][T17715] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 715.059612][T17718] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #3: block 1: comm syz.3.3958: lblock 1 mapped to illegal pblock 1 (length 1) [ 715.374453][T17718] EXT4-fs error (device loop3): ext4_acquire_dquot:7034: comm syz.3.3958: Failed to acquire dquot type 0 [ 715.717509][T14577] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 715.727043][T14577] EXT4-fs error (device loop3): __ext4_get_inode_loc:4885: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 715.740008][T14577] loop3: lost filesystem error report for type 5 error -117 [ 715.740160][T14577] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 715.757723][T14235] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 715.767693][T14577] loop3: lost filesystem error report for type 5 error -117 [ 715.767811][T14577] EXT4-fs error (device loop3): ext4_quota_off:7318: inode #3: comm syz-executor: mark_inode_dirty error [ 715.787539][T14577] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 715.852515][T17731] set_capacity_and_notify: 2 callbacks suppressed [ 715.852583][T17731] loop1: detected capacity change from 0 to 4096 [ 715.876135][T17731] EXT4-fs: Ignoring removed bh option [ 715.888488][T17731] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 715.961207][T17733] loop3: detected capacity change from 0 to 512 [ 715.972136][T17733] EXT4-fs: Ignoring removed nomblk_io_submit option [ 715.981310][T17733] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8857e02c, mo2=0002] [ 716.000757][T17733] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.3966: invalid indirect mapped block 2683928664 (level 1) [ 716.015045][T17733] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 716.015204][T17733] EXT4-fs (loop3): Remounting filesystem read-only [ 716.024350][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 716.024380][ C0] EXT4-fs (loop3): initial error at time 2000000002: ext4_free_branches:1023: inode 11 [ 716.024412][ C0] EXT4-fs (loop3): last error at time 2000000002: ext4_free_branches:1023: inode 11 [ 716.057032][T17733] EXT4-fs (loop3): 1 truncate cleaned up [ 716.063237][T17733] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 716.086161][T14235] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 716.095514][T17740] loop0: detected capacity change from 0 to 4096 [ 716.105736][T14577] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 716.116191][T17740] EXT4-fs: Ignoring removed bh option [ 716.121663][T17740] ext4: Unknown parameter 'fsuuid' [ 716.682690][T17763] loop1: detected capacity change from 0 to 2048 [ 717.269918][T17763] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 717.598029][T17770] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3978'. [ 717.750347][T17772] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3978'. [ 717.797145][T17774] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 717.904369][T17774] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3979'. [ 717.931197][T17774] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3979'. [ 717.975888][T17774] loop0: detected capacity change from 0 to 256 [ 718.051376][T17782] loop4: detected capacity change from 0 to 764 [ 718.207029][T14235] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 718.258149][ T28] kauditd_printk_skb: 356 callbacks suppressed [ 718.258161][ T28] audit: type=1326 audit(2000000000.320:2015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17786 comm="syz.1.3982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8c0b0cdd9 code=0x7ffc0000 [ 718.294258][ T28] audit: type=1326 audit(2000000000.360:2016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17786 comm="syz.1.3982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8c0b0cdd9 code=0x7ffc0000 [ 718.440577][ T28] audit: type=1326 audit(2000000000.360:2017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17786 comm="syz.1.3982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8c0b0cdd9 code=0x7ffc0000 [ 718.464282][ T28] audit: type=1326 audit(2000000000.360:2018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17786 comm="syz.1.3982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8c0b0cdd9 code=0x7ffc0000 [ 718.489514][ T28] audit: type=1326 audit(2000000000.390:2019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17786 comm="syz.1.3982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8c0b0cdd9 code=0x7ffc0000 [ 718.518807][ T28] audit: type=1326 audit(2000000000.390:2020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17786 comm="syz.1.3982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8c0b0cdd9 code=0x7ffc0000 [ 718.586529][T17794] loop4: detected capacity change from 0 to 4096 [ 718.674917][T17798] loop1: detected capacity change from 0 to 2048 [ 718.717228][T17798] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 718.759122][T17794] EXT4-fs: Ignoring removed bh option [ 718.835725][T17794] ext4: Unknown parameter 'fsuuid' [ 719.380677][T17806] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 719.420158][T17806] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 719.493271][ T28] audit: type=1326 audit(2000000000.390:2021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17786 comm="syz.1.3982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8c0b0cdd9 code=0x7ffc0000 [ 719.516888][ T28] audit: type=1326 audit(2000000000.390:2022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17786 comm="syz.1.3982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fe8c0b0cdd9 code=0x7ffc0000 [ 719.575679][ T28] audit: type=1326 audit(2000000000.390:2023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17786 comm="syz.1.3982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fe8c0b0cdd9 code=0x7ffc0000 [ 720.073686][T17818] loop3: detected capacity change from 0 to 512 [ 720.087749][T17818] EXT4-fs: Ignoring removed nomblk_io_submit option [ 720.127247][T17818] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8857e02c, mo2=0002] [ 720.150018][T17818] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.3991: invalid indirect mapped block 2683928664 (level 1) [ 720.175869][T14235] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 720.181310][T17818] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 720.186550][T17818] EXT4-fs (loop3): Remounting filesystem read-only [ 720.195689][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 720.195703][ C1] EXT4-fs (loop3): initial error at time 2000000002: ext4_free_branches:1023: inode 11 [ 720.195755][ C1] EXT4-fs (loop3): last error at time 2000000002: ext4_free_branches:1023: inode 11 [ 720.227959][T17818] EXT4-fs (loop3): 1 truncate cleaned up [ 720.234031][T17818] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 720.265152][T14577] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 720.290633][ T28] audit: type=1326 audit(2000000002.350:2024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17823 comm="syz.1.3994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8c0b0cdd9 code=0x7ffc0000 [ 720.382042][T13781] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 720.582119][T17841] openvswitch: netlink: Missing key (keys=40, expected=80) [ 720.713819][T17847] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4001'. [ 720.765146][T17847] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4001'. [ 720.918105][T17851] loop3: detected capacity change from 0 to 2048 [ 720.976819][T17851] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 721.012441][T17849] loop0: detected capacity change from 0 to 764 [ 721.304537][T17859] loop1: detected capacity change from 0 to 512 [ 721.331036][T17859] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 721.371483][T17859] ext4 filesystem being mounted at /179/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 721.710446][T17865] loop2: detected capacity change from 0 to 4096 [ 721.738861][T17865] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=e842c018, mo2=0002] [ 721.747227][T17865] System zones: 0-5 [ 721.751874][T17865] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 721.791478][T13781] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 722.190914][T14235] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 722.471241][T14577] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 722.477423][T17873] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4009'. [ 722.583242][T17878] openvswitch: netlink: Missing key (keys=40, expected=80) [ 722.759905][T17879] loop1: detected capacity change from 0 to 512 [ 722.825495][T17886] loop3: detected capacity change from 0 to 764 [ 722.904792][T17884] loop0: detected capacity change from 0 to 4096 [ 723.011102][T17884] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=e842c018, mo2=0002] [ 723.064858][T17884] System zones: 0-5 [ 723.119562][T17884] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 723.237544][T17879] EXT4-fs (loop1): 1 orphan inode deleted [ 723.248039][ T2340] EXT4-fs error (device loop1): ext4_release_dquot:7070: comm kworker/u8:7: Failed to release dquot type 1 [ 723.283160][ T2340] loop1: lost filesystem error report for type 5 error -117 [ 723.364942][T17879] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 723.488287][T17879] ext4 filesystem being mounted at /180/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 723.560422][T13178] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 723.580614][T17879] Cannot find del_set index 29 as target [ 723.724828][T17879] netlink: 'syz.1.4007': attribute type 10 has an invalid length. [ 724.157923][T17909] loop2: detected capacity change from 0 to 2048 [ 724.186810][T17909] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 724.910736][T17921] loop0: detected capacity change from 0 to 2048 [ 724.952016][T17923] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 724.980774][T17923] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 725.102310][T17921] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 725.301436][T13781] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 725.366302][T17928] syzkaller0: entered promiscuous mode [ 725.371846][T17928] syzkaller0: entered allmulticast mode [ 725.445996][T17930] loop3: detected capacity change from 0 to 764 [ 725.481204][T13178] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 725.584658][T17933] TCP: request_sock_subflow_v6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 725.616079][T17935] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 725.633946][T17935] ext4 filesystem being mounted at /225/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 726.310872][T17957] openvswitch: netlink: Missing key (keys=40, expected=80) [ 726.344179][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 726.344196][ T28] audit: type=1400 audit(2000000000.900:2033): avc: denied { setopt } for pid=17958 comm="syz.2.4031" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 726.405934][T14235] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 726.417517][T17959] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 726.499450][T13178] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 726.555997][T17959] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 726.590925][T17965] set_capacity_and_notify: 2 callbacks suppressed [ 726.590954][T17965] loop3: detected capacity change from 0 to 4096 [ 726.612561][T17965] EXT4-fs: Ignoring removed bh option [ 726.620694][T17966] loop1: detected capacity change from 0 to 4096 [ 726.621018][T17965] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 726.676283][T17966] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=e842c018, mo2=0002] [ 726.692778][T17966] System zones: 0-5 [ 726.698193][T17966] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 726.741677][T17968] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 726.795728][T17968] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4033'. [ 726.812023][T14577] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 726.825945][T17959] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 726.852784][T17972] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4033'. [ 726.869591][T14235] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 726.888760][T17968] loop0: detected capacity change from 0 to 256 [ 726.956688][T17978] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 727.030155][T17959] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 727.413672][T17982] loop3: detected capacity change from 0 to 2048 [ 727.457108][T17982] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 727.493178][T17986] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4036'. [ 727.578663][T17986] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4036'. [ 727.646165][T17979] loop1: detected capacity change from 0 to 256 [ 727.861402][ T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 727.877089][ T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 727.891019][ T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 727.908708][ T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 728.014701][T17993] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4038'. [ 728.094316][T17993] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4038'. [ 728.381742][T18003] openvswitch: netlink: Missing key (keys=40, expected=80) [ 728.530928][T18002] loop2: detected capacity change from 0 to 2048 [ 728.567656][T18002] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 728.683863][T14577] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 728.763554][T18012] loop3: detected capacity change from 0 to 512 [ 728.790021][T18010] loop4: detected capacity change from 0 to 512 [ 728.812304][T18012] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 728.873797][T18012] ext4 filesystem being mounted at /181/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 728.883495][T18010] EXT4-fs (loop4): 1 orphan inode deleted [ 728.896177][ T68] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 728.906085][ T68] EXT4-fs error (device loop4): ext4_release_dquot:7070: comm kworker/u8:4: Failed to release dquot type 1 [ 728.917757][ T68] loop4: lost filesystem error report for type 5 error -117 [ 728.940611][T18010] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 729.008514][T13781] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 729.058839][T18010] ext4 filesystem being mounted at /226/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 729.246595][T18019] loop2: detected capacity change from 0 to 4096 [ 729.281088][T18019] EXT4-fs: Ignoring removed bh option [ 729.317063][T18010] Cannot find del_set index 29 as target [ 729.327183][T18019] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 729.362927][T18010] netlink: 'syz.4.4042': attribute type 10 has an invalid length. [ 729.503494][T13781] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 729.560678][T18024] loop2: detected capacity change from 0 to 512 [ 729.577500][T18024] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 729.597732][T18024] ext4 filesystem being mounted at /185/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 729.789946][T14577] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 729.857363][T18033] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 729.866464][T18033] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 730.022664][T18039] FAULT_INJECTION: forcing a failure. [ 730.022664][T18039] name failslab, interval 1, probability 0, space 0, times 0 [ 730.037500][T18039] CPU: 1 UID: 0 PID: 18039 Comm: syz.1.4050 Tainted: G W syzkaller #0 PREEMPT(full) [ 730.037536][T18039] Tainted: [W]=WARN [ 730.037570][T18039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 730.037583][T18039] Call Trace: [ 730.037589][T18039] [ 730.037595][T18039] __dump_stack+0x1d/0x30 [ 730.037656][T18039] dump_stack_lvl+0x95/0xd0 [ 730.037678][T18039] dump_stack+0x15/0x1b [ 730.037763][T18039] should_fail_ex+0x263/0x280 [ 730.037786][T18039] ? ip_vs_add_dest+0x893/0xd90 [ 730.037882][T18039] should_failslab+0x8c/0xb0 [ 730.037917][T18039] __kmalloc_cache_noprof+0x5f/0x400 [ 730.037949][T18039] ip_vs_add_dest+0x893/0xd90 [ 730.037994][T18039] ? selinux_capable+0x31/0x40 [ 730.038027][T18039] ? should_fail_ex+0xd9/0x280 [ 730.038117][T18039] ? __ip_vs_svc_fwm_find+0x260/0x290 [ 730.038213][T18039] do_ip_vs_set_ctl+0xa09/0xae0 [ 730.038246][T18039] ? do_ip_setsockopt+0x1af1/0x2290 [ 730.038325][T18039] nf_setsockopt+0x199/0x1b0 [ 730.038405][T18039] ip_setsockopt+0x102/0x110 [ 730.038427][T18039] sctp_setsockopt+0x126/0xea0 [ 730.038459][T18039] sock_common_setsockopt+0x69/0x80 [ 730.038523][T18039] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 730.038550][T18039] __sys_setsockopt+0x184/0x200 [ 730.038597][T18039] __x64_sys_setsockopt+0x64/0x80 [ 730.038637][T18039] x64_sys_call+0x2327/0x3020 [ 730.038732][T18039] do_syscall_64+0x12c/0x3b0 [ 730.038754][T18039] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 730.038779][T18039] RIP: 0033:0x7fe8c0b0cdd9 [ 730.038841][T18039] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 730.038858][T18039] RSP: 002b:00007fe8bf567028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 730.038876][T18039] RAX: ffffffffffffffda RBX: 00007fe8c0d85fa0 RCX: 00007fe8c0b0cdd9 [ 730.038890][T18039] RDX: 0000000000000487 RSI: 0000000000000000 RDI: 0000000000000006 [ 730.038904][T18039] RBP: 00007fe8bf567090 R08: 0000000000000044 R09: 0000000000000000 [ 730.038918][T18039] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 730.038999][T18039] R13: 00007fe8c0d86038 R14: 00007fe8c0d85fa0 R15: 00007ffeea7db698 [ 730.039019][T18039] [ 730.312712][T18043] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4052'. [ 730.342626][T18043] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4052'. [ 730.453062][T13781] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 730.854832][T18053] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 730.907465][T18052] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=e842c018, mo2=0002] [ 730.932462][T18052] System zones: 0-5 [ 730.945251][T18052] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 731.002038][T13178] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 731.241205][T13462] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 731.679432][T18063] set_capacity_and_notify: 2 callbacks suppressed [ 731.679462][T18063] loop1: detected capacity change from 0 to 512 [ 731.715374][T18061] loop0: detected capacity change from 0 to 4096 [ 731.736740][T18061] EXT4-fs: Ignoring removed bh option [ 731.746654][T18063] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 731.796096][T18061] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 731.818611][T18063] ext4 filesystem being mounted at /188/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 731.831047][T18067] netlink: 68 bytes leftover after parsing attributes in process `syz.4.4057'. [ 731.976521][T13781] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 731.977685][T18072] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4057'. [ 732.000529][T18059] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 732.214100][T18059] loop4: detected capacity change from 0 to 256 [ 732.466505][T13178] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 732.706812][T18078] loop2: detected capacity change from 0 to 2048 [ 732.749371][T18078] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 732.771258][T14235] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 732.811259][T18087] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4062'. [ 732.811314][T18083] loop0: detected capacity change from 0 to 4096 [ 732.833247][T18083] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=e842c018, mo2=0002] [ 732.841920][T18083] System zones: 0-5 [ 732.927247][T18083] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 732.949261][T18090] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4063'. [ 733.005822][T18091] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4063'. [ 733.116201][T18094] loop0: detected capacity change from 0 to 4096 [ 733.133030][T18094] EXT4-fs: Ignoring removed bh option [ 733.142218][T18094] ext4: Unknown parameter 'fsuuid' [ 733.167796][T18096] loop3: detected capacity change from 0 to 764 [ 733.267818][T18092] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4062'. [ 733.290764][T18100] loop3: detected capacity change from 0 to 1024 [ 733.298662][T18092] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4062'. [ 733.322926][T18092] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4062'. [ 733.352177][T18092] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4062'. [ 733.368097][T18092] netlink: 'syz.1.4062': attribute type 6 has an invalid length. [ 733.381400][T18100] IPVS: persistence engine module ip_vs_pe_€ not found [ 733.485284][T18110] loop3: detected capacity change from 0 to 4096 [ 733.500019][T18110] EXT4-fs: Ignoring removed bh option [ 733.821823][T18108] loop0: detected capacity change from 0 to 4096 [ 733.966077][T18108] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=e842c018, mo2=0002] [ 734.025801][T18108] System zones: 0-5 [ 734.243883][T18122] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 734.252975][T18122] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 734.873722][T18137] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4075'. [ 734.984207][T18130] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 735.931052][T18150] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=e842c018, mo2=0002] [ 735.949144][T18150] System zones: 0-5 [ 736.097405][T18154] IPVS: persistence engine module ip_vs_pe_€ not found [ 737.630834][T18163] set_capacity_and_notify: 3 callbacks suppressed [ 737.630926][T18163] loop4: detected capacity change from 0 to 4096 [ 738.102607][T18163] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=e842c018, mo2=0002] [ 738.119233][T18163] System zones: 0-5 [ 738.948738][T18201] loop1: detected capacity change from 0 to 1024 [ 739.058675][T18201] IPVS: persistence engine module ip_vs_pe_€ not found [ 739.279400][T18210] loop3: detected capacity change from 0 to 4096 [ 739.771251][T18212] loop0: detected capacity change from 0 to 2048 [ 740.048816][T18210] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=e842c018, mo2=0002] [ 740.071773][T18210] System zones: 0-5 [ 740.733346][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 741.743983][T18243] loop1: detected capacity change from 0 to 764 [ 741.865350][T18250] openvswitch: netlink: Missing key (keys=40, expected=80) [ 741.926912][T18254] 8021q: adding VLAN 0 to HW filter on device bond1 [ 742.211013][T18254] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 742.303418][ T12] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 742.589293][ T2340] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 742.615505][T18270] loop3: detected capacity change from 0 to 764 [ 742.996816][T18263] loop0: detected capacity change from 0 to 4096 [ 743.046396][T18263] EXT4-fs error (device loop0): ext4_ext_check_inode:521: inode #4: comm syz.0.4110: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 743.146494][T18263] loop0: lost file I/O error report for ino 4 type 5 pos 0x0 len 0x0 error -117 [ 743.146728][T18263] EXT4-fs error (device loop0): ext4_quota_enable:7228: comm syz.0.4110: Bad quota inode: 4, type: 1 [ 743.155835][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 743.155851][ C0] EXT4-fs (loop0): initial error at time 2000000000: ext4_ext_check_inode:521: inode 4 [ 743.155877][ C0] EXT4-fs (loop0): last error at time 2000000000: ext4_ext_check_inode:521: inode 4 [ 743.192295][T18263] loop0: lost filesystem error report for type 5 error -117 [ 743.198006][T18263] EXT4-fs warning (device loop0): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 743.221220][T18263] EXT4-fs (loop0): mount failed [ 743.246463][ T28] audit: type=1400 audit(2000000000.640:2034): avc: denied { ioctl } for pid=18262 comm="syz.0.4110" path="socket:[55748]" dev="sockfs" ino=55748 ioctlcmd=0x89e8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 743.386266][T18280] loop2: detected capacity change from 0 to 512 [ 743.766172][T18283] loop1: detected capacity change from 0 to 2048 [ 743.825639][T18283] EXT4-fs mount: 20 callbacks suppressed [ 743.825712][T18283] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 744.030252][T18280] EXT4-fs (loop2): 1 orphan inode deleted [ 744.132154][T18280] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 744.198752][T18280] ext4 filesystem being mounted at /194/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 744.316234][ T12] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 744.334796][ T12] EXT4-fs error (device loop2): ext4_release_dquot:7070: comm kworker/u8:0: Failed to release dquot type 1 [ 744.361157][T18280] Cannot find del_set index 29 as target [ 745.042060][T14235] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 745.069960][T18280] netlink: 'syz.2.4111': attribute type 10 has an invalid length. [ 745.159682][T18280] team0: Device veth0_macvtap is up. Set it down before adding it as a team port [ 745.311926][T18296] loop4: detected capacity change from 0 to 4096 [ 745.332680][T18296] EXT4-fs: Ignoring removed bh option [ 745.350503][T18296] ext4: Unknown parameter 'fsuuid' [ 745.415412][T18303] loop3: detected capacity change from 0 to 4096 [ 745.565571][T18303] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=e842c018, mo2=0002] [ 745.586573][T18303] System zones: 0-5 [ 745.607530][T18303] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 745.935380][T18311] loop0: detected capacity change from 0 to 2048 [ 746.011515][T18311] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 746.595419][T18306] loop1: detected capacity change from 0 to 4096 [ 747.156648][T18306] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=e842c018, mo2=0002] [ 747.580199][T18306] System zones: 0-5 [ 747.780402][T18321] loop4: detected capacity change from 0 to 2048 [ 748.405579][T13178] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 748.415425][T14577] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 748.426288][T18321] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 748.472884][T18306] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 748.545255][T14235] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 748.641204][T13462] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 748.703437][T18330] loop1: detected capacity change from 0 to 512 [ 748.804585][T18330] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 748.819062][T18330] ext4 filesystem being mounted at /203/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 749.558160][T18343] loop4: detected capacity change from 0 to 512 [ 749.564896][T18343] EXT4-fs: Ignoring removed nomblk_io_submit option [ 749.636466][T14235] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 749.653322][T18343] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8857e02c, mo2=0002] [ 749.698689][T18343] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.4130: invalid indirect mapped block 2683928664 (level 1) [ 749.727676][T18343] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 749.728693][T18343] EXT4-fs (loop4): Remounting filesystem read-only [ 749.737945][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 749.737967][ C1] EXT4-fs (loop4): initial error at time 2000000007: ext4_free_branches:1023: inode 11 [ 749.738000][ C1] EXT4-fs (loop4): last error at time 2000000007: ext4_free_branches:1023: inode 11 [ 749.770615][T18343] EXT4-fs (loop4): 1 truncate cleaned up [ 749.777133][T18343] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 749.811378][T13462] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 749.943003][T18352] loop0: detected capacity change from 0 to 4096 [ 750.016030][T18352] EXT4-fs: Ignoring removed bh option [ 750.063671][T18352] ext4: Unknown parameter 'fsuuid' [ 750.320237][T18363] __nla_validate_parse: 1 callbacks suppressed [ 750.320275][T18363] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4135'. [ 750.345201][T18363] SET target dimension over the limit! [ 750.352548][ T28] audit: type=1400 audit(2000000007.740:2035): avc: denied { write } for pid=18362 comm="syz.4.4135" name="ptype" dev="proc" ino=4026533263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 750.403576][T18365] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4136'. [ 750.433047][T18367] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 750.453284][T18367] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 750.495860][T18371] loop0: detected capacity change from 0 to 4096 [ 750.514924][T18371] EXT4-fs: Ignoring removed bh option [ 750.527605][T18371] ext4: Unknown parameter 'fsuuid' [ 750.789201][T18385] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4145'. [ 750.894501][T18390] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4145'. [ 750.947798][T18392] loop1: detected capacity change from 0 to 4096 [ 750.957779][T18392] EXT4-fs: Ignoring removed bh option [ 750.982584][T18392] ext4: Unknown parameter 'fsuuid' [ 750.988773][T18388] loop0: detected capacity change from 0 to 2048 [ 751.017585][T18388] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 751.045137][T13178] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 751.480350][T13781] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 751.720144][T18413] loop3: detected capacity change from 0 to 764 [ 752.140964][T18421] loop3: detected capacity change from 0 to 512 [ 752.285655][T18421] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 752.298193][T18421] ext4 filesystem being mounted at /206/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 752.317392][T18421] bond1: entered allmulticast mode [ 752.355191][ T28] audit: type=1400 audit(2000000000.640:2036): avc: denied { remove_name } for pid=18416 comm="syz.3.4155" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 752.433136][ T28] audit: type=1400 audit(2000000000.640:2037): avc: denied { rename } for pid=18416 comm="syz.3.4155" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 752.468733][T18426] loop1: detected capacity change from 0 to 764 [ 752.655964][T18428] loop2: detected capacity change from 0 to 4096 [ 752.688893][T18428] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=e842c018, mo2=0002] [ 752.697523][T18428] System zones: 0-5 [ 752.705164][T18428] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 752.920286][T13781] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 752.987348][T18441] openvswitch: netlink: Missing key (keys=40, expected=80) [ 753.010998][T18443] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4164'. [ 753.190078][T18443] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4164'. [ 753.199347][T18443] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4164'. [ 753.208551][T18443] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4164'. [ 753.217868][T18443] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4164'. [ 753.227005][T18443] netlink: 'syz.1.4164': attribute type 6 has an invalid length. [ 753.489856][T14577] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 753.816282][T18462] loop4: detected capacity change from 0 to 512 [ 753.882510][T18462] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 753.915479][T18462] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.4165: bg 0: block 288: padding at end of block bitmap is not set [ 753.930634][T18462] loop4: lost filesystem error report for type 5 error -117 [ 753.936852][T18462] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 753.945103][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 753.945209][ C1] EXT4-fs (loop4): initial error at time 2000000001: ext4_validate_block_bitmap:441 [ 753.945899][ C1] EXT4-fs (loop4): last error at time 2000000001: ext4_validate_block_bitmap:441 [ 753.981957][T18462] loop4: lost filesystem error report for type 5 error -117 [ 753.998873][T18462] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #13: comm syz.4.4165: attempt to clear invalid blocks 1024 len 1 [ 754.021733][T18462] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 754.050868][T18462] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.4165: invalid indirect mapped block 1819239214 (level 0) [ 754.076506][T18462] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 754.087877][T18462] EXT4-fs (loop4): 1 truncate cleaned up [ 754.122039][T18462] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 754.169323][T18461] loop2: detected capacity change from 0 to 512 [ 754.613412][T18461] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 755.357145][T18461] ext4 filesystem being mounted at /198/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 755.474867][T18471] FAULT_INJECTION: forcing a failure. [ 755.474867][T18471] name failslab, interval 1, probability 0, space 0, times 0 [ 755.492173][T18471] CPU: 1 UID: 0 PID: 18471 Comm: syz.1.4170 Tainted: G W syzkaller #0 PREEMPT(full) [ 755.492202][T18471] Tainted: [W]=WARN [ 755.492207][T18471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 755.492299][T18471] Call Trace: [ 755.492305][T18471] [ 755.492313][T18471] __dump_stack+0x1d/0x30 [ 755.492399][T18471] dump_stack_lvl+0x95/0xd0 [ 755.492436][T18471] dump_stack+0x15/0x1b [ 755.492457][T18471] should_fail_ex+0x263/0x280 [ 755.492488][T18471] should_failslab+0x8c/0xb0 [ 755.492566][T18471] kmem_cache_alloc_node_noprof+0x6d/0x450 [ 755.492720][T18471] ? __alloc_skb+0x2d6/0x690 [ 755.492750][T18471] __alloc_skb+0x2d6/0x690 [ 755.492781][T18471] ? __alloc_skb+0x200/0x690 [ 755.492857][T18471] netlink_alloc_large_skb+0xbf/0xf0 [ 755.492882][T18471] netlink_sendmsg+0x40c/0x6f0 [ 755.492915][T18471] ? __pfx_netlink_sendmsg+0x10/0x10 [ 755.492939][T18471] ____sys_sendmsg+0x563/0x5b0 [ 755.493127][T18471] ___sys_sendmsg+0x195/0x1e0 [ 755.493156][T18471] __x64_sys_sendmsg+0xd4/0x160 [ 755.493198][T18471] x64_sys_call+0x194c/0x3020 [ 755.493220][T18471] do_syscall_64+0x12c/0x3b0 [ 755.493240][T18471] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 755.493258][T18471] RIP: 0033:0x7fe8c0b0cdd9 [ 755.493291][T18471] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 755.493313][T18471] RSP: 002b:00007fe8bf567028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 755.493458][T18471] RAX: ffffffffffffffda RBX: 00007fe8c0d85fa0 RCX: 00007fe8c0b0cdd9 [ 755.493474][T18471] RDX: 000000002000c004 RSI: 0000200000000000 RDI: 0000000000000003 [ 755.493486][T18471] RBP: 00007fe8bf567090 R08: 0000000000000000 R09: 0000000000000000 [ 755.493571][T18471] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 755.493581][T18471] R13: 00007fe8c0d86038 R14: 00007fe8c0d85fa0 R15: 00007ffeea7db698 [ 755.493680][T18471] [ 755.756771][T13462] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 756.690048][T18483] FAULT_INJECTION: forcing a failure. [ 756.690048][T18483] name failslab, interval 1, probability 0, space 0, times 0 [ 756.836461][T18478] loop1: detected capacity change from 0 to 512 [ 756.969273][T18478] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 757.022954][T18478] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.4171: bg 0: block 288: padding at end of block bitmap is not set [ 757.030564][T18483] CPU: 0 UID: 0 PID: 18483 Comm: syz.4.4172 Tainted: G W syzkaller #0 PREEMPT(full) [ 757.030693][T18483] Tainted: [W]=WARN [ 757.030712][T18483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 757.030759][T18483] Call Trace: [ 757.030777][T18483] [ 757.030796][T18483] __dump_stack+0x1d/0x30 [ 757.030868][T18483] dump_stack_lvl+0x95/0xd0 [ 757.030925][T18483] dump_stack+0x15/0x1b [ 757.030993][T18483] should_fail_ex+0x263/0x280 [ 757.031069][T18483] ? __pfx_sock_alloc_inode+0x10/0x10 [ 757.031151][T18483] should_failslab+0x8c/0xb0 [ 757.031265][T18483] kmem_cache_alloc_lru_noprof+0x6c/0x400 [ 757.031355][T18483] ? sock_alloc_inode+0x36/0xf0 [ 757.031428][T18483] ? selinux_socket_create+0xfd/0x180 [ 757.031553][T18483] ? __pfx_sock_alloc_inode+0x10/0x10 [ 757.031692][T18483] sock_alloc_inode+0x36/0xf0 [ 757.031778][T18483] alloc_inode+0x40/0x170 [ 757.031859][T18483] __sock_create+0x120/0x580 [ 757.032002][T18483] __sys_socket+0xaf/0x180 [ 757.032085][T18483] __x64_sys_socket+0x3f/0x50 [ 757.032196][T18483] x64_sys_call+0x11fc/0x3020 [ 757.032262][T18483] do_syscall_64+0x12c/0x3b0 [ 757.032390][T18483] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 757.032481][T18483] RIP: 0033:0x7f9aaf59e647 [ 757.032528][T18483] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 757.032576][T18483] RSP: 002b:00007f9aadff5f98 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 757.032640][T18483] RAX: ffffffffffffffda RBX: 00007f9aaf815fa0 RCX: 00007f9aaf59e647 [ 757.032677][T18483] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 757.032715][T18483] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 757.032822][T18483] R10: 0000000000000000 R11: 0000000000000286 R12: 0000000000000001 [ 757.032859][T18483] R13: 00007f9aaf816038 R14: 00007f9aaf815fa0 R15: 00007fffce89bad8 [ 757.032914][T18483] [ 757.302764][T18478] loop1: lost filesystem error report for type 5 error -117 [ 757.312607][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 757.326372][ C1] EXT4-fs (loop1): initial error at time 2000000001: ext4_validate_block_bitmap:441 [ 757.335762][ C1] EXT4-fs (loop1): last error at time 2000000001: ext4_validate_block_bitmap:441 [ 757.345017][T18483] socket: no more sockets [ 757.355267][T18478] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 757.367039][T18478] loop1: lost filesystem error report for type 5 error -117 [ 757.371488][T18478] EXT4-fs error (device loop1): ext4_clear_blocks:876: inode #13: comm syz.1.4171: attempt to clear invalid blocks 1024 len 1 [ 757.394008][T18478] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 757.396268][T18478] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.4171: invalid indirect mapped block 1819239214 (level 0) [ 757.420047][T18478] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 757.424711][T18478] EXT4-fs (loop1): 1 truncate cleaned up [ 757.447333][T18478] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 757.614179][T18492] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 757.627153][T18490] openvswitch: netlink: Missing key (keys=40, expected=80) [ 757.635237][T18492] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 757.794915][T18494] loop4: detected capacity change from 0 to 764 [ 758.489152][T14235] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 758.605044][T13781] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 758.614307][T18501] loop0: detected capacity change from 0 to 4096 [ 758.627686][T18501] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=e842c018, mo2=0002] [ 758.637559][T18501] System zones: 0-5 [ 758.642304][T18501] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 758.647125][T18503] bond1: entered allmulticast mode [ 758.694646][T18503] 8021q: adding VLAN 0 to HW filter on device bond1 [ 758.717623][T13178] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 758.773078][T18509] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 758.794470][T18516] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4181'. [ 758.857178][ T28] audit: type=1400 audit(2000000001.080:2038): avc: denied { create } for pid=18514 comm="syz.1.4182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 758.940292][T18518] loop2: detected capacity change from 0 to 512 [ 758.976452][T18518] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 759.156090][T18518] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.4180: bg 0: block 288: padding at end of block bitmap is not set [ 759.172098][T18518] loop2: lost filesystem error report for type 5 error -117 [ 759.173388][T18518] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 759.190859][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 759.190889][ C1] EXT4-fs (loop2): initial error at time 2000000001: ext4_validate_block_bitmap:441 [ 759.190974][ C1] EXT4-fs (loop2): last error at time 2000000001: ext4_validate_block_bitmap:441 [ 759.218163][T18518] loop2: lost filesystem error report for type 5 error -117 [ 759.224567][T18518] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #13: comm syz.2.4180: attempt to clear invalid blocks 1024 len 1 [ 759.246577][T18518] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 759.248786][T18518] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.4180: invalid indirect mapped block 1819239214 (level 0) [ 759.273952][T18518] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 759.277421][T18518] EXT4-fs (loop2): 1 truncate cleaned up [ 759.299337][T18518] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 759.803549][T18529] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4181'. [ 759.837957][T18529] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4181'. [ 759.870985][T18529] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4181'. [ 759.917622][T18529] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4181'. [ 759.938409][T18529] netlink: 'syz.0.4181': attribute type 6 has an invalid length. [ 760.493745][T13781] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 760.910756][T18541] loop0: detected capacity change from 0 to 512 [ 760.931043][T18541] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 761.036228][T18541] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.4188: bg 0: block 288: padding at end of block bitmap is not set [ 761.051514][T18541] loop0: lost filesystem error report for type 5 error -117 [ 761.059442][T18541] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 761.067046][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 761.067070][ C1] EXT4-fs (loop0): initial error at time 2000000003: ext4_validate_block_bitmap:441 [ 761.067513][ C1] EXT4-fs (loop0): last error at time 2000000003: ext4_validate_block_bitmap:441 [ 761.104130][T18541] loop0: lost filesystem error report for type 5 error -117 [ 761.112990][T18541] EXT4-fs error (device loop0): ext4_clear_blocks:876: inode #13: comm syz.0.4188: attempt to clear invalid blocks 1024 len 1 [ 761.134536][T18541] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 761.138413][T18541] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.4188: invalid indirect mapped block 1819239214 (level 0) [ 761.163337][T18541] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 761.175766][T18541] EXT4-fs (loop0): 1 truncate cleaned up [ 761.203873][T18541] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 762.993480][T18554] loop4: detected capacity change from 0 to 2048 [ 763.068210][T13178] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 763.129426][T18554] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 763.420818][T18564] loop3: detected capacity change from 0 to 764 [ 763.563115][T18566] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4196'. [ 763.599329][T18566] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4196'. [ 763.782156][T18546] loop2: detected capacity change from 0 to 4096 [ 763.907287][T18546] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=e842c018, mo2=0002] [ 763.955107][T18546] System zones: 0-5 [ 763.995381][T18546] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 764.215084][T13462] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 764.230980][T13781] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 764.289676][ T28] audit: type=1326 audit(2000000000.540:2039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18583 comm="syz.4.4202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9aaf59cdd9 code=0x7ffc0000 [ 764.411707][ T28] audit: type=1326 audit(2000000000.540:2040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18583 comm="syz.4.4202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9aaf59cdd9 code=0x7ffc0000 [ 764.447470][ T28] audit: type=1326 audit(2000000000.540:2041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18583 comm="syz.4.4202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9aaf59cdd9 code=0x7ffc0000 [ 764.535662][ T28] audit: type=1326 audit(2000000000.550:2042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18583 comm="syz.4.4202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9aaf59cdd9 code=0x7ffc0000 [ 764.863853][T18591] loop2: detected capacity change from 0 to 2048 [ 765.006196][T18591] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 765.276531][ T28] audit: type=1326 audit(2000000000.550:2043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18583 comm="syz.4.4202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9aaf59cdd9 code=0x7ffc0000 [ 765.305223][T18570] loop3: detected capacity change from 0 to 4096 [ 765.347593][T18575] loop1: detected capacity change from 0 to 4096 [ 765.402818][ T28] audit: type=1326 audit(2000000000.550:2044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18583 comm="syz.4.4202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9aaf59cdd9 code=0x7ffc0000 [ 765.431149][T18570] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=e842c018, mo2=0002] [ 765.471400][T18575] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=e842c018, mo2=0002] [ 765.480651][T18570] System zones: 0-5 [ 765.517704][T18575] System zones: 0-5 [ 765.536597][T18570] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 765.568768][ T28] audit: type=1326 audit(2000000000.550:2045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18583 comm="syz.4.4202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9aaf59cdd9 code=0x7ffc0000 [ 765.595754][T18575] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 765.616235][T18582] loop0: detected capacity change from 0 to 4096 [ 765.683530][T18582] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=e842c018, mo2=0002] [ 765.693703][ T28] audit: type=1326 audit(2000000000.550:2046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18583 comm="syz.4.4202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f9aaf59cdd9 code=0x7ffc0000 [ 765.739322][T18582] System zones: 0-5 [ 765.778942][T18582] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 765.811627][ T28] audit: type=1326 audit(2000000000.550:2047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18583 comm="syz.4.4202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9aaf59cdd9 code=0x7ffc0000 [ 765.884717][T14577] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 765.910863][T14235] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 765.925907][ T28] audit: type=1326 audit(2000000000.560:2048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18583 comm="syz.4.4202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f9aaf59cdd9 code=0x7ffc0000 [ 766.072148][T18608] loop3: detected capacity change from 0 to 764 [ 766.102702][T13178] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 766.113305][T18606] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4207'. [ 766.242407][T13781] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 766.401455][T18620] loop0: detected capacity change from 0 to 4096 [ 766.421743][T18620] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=e842c018, mo2=0002] [ 766.434661][T18620] System zones: 0-5 [ 766.439872][T18619] loop2: detected capacity change from 0 to 764 [ 766.442852][T18620] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 766.553410][T18629] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 766.580889][T18629] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 766.691753][T13178] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 766.890270][T18633] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4217'. [ 767.110439][T18645] FAULT_INJECTION: forcing a failure. [ 767.110439][T18645] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 767.137208][T18641] loop1: detected capacity change from 0 to 764 [ 767.202212][T18645] CPU: 1 UID: 0 PID: 18645 Comm: syz.4.4219 Tainted: G W syzkaller #0 PREEMPT(full) [ 767.202308][T18645] Tainted: [W]=WARN [ 767.202316][T18645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 767.202331][T18645] Call Trace: [ 767.202338][T18645] [ 767.202347][T18645] __dump_stack+0x1d/0x30 [ 767.202374][T18645] dump_stack_lvl+0x95/0xd0 [ 767.202398][T18645] dump_stack+0x15/0x1b [ 767.202470][T18645] should_fail_ex+0x263/0x280 [ 767.202511][T18645] should_fail+0xb/0x20 [ 767.202538][T18645] should_fail_usercopy+0x1a/0x20 [ 767.202570][T18645] _copy_from_user+0x1c/0xb0 [ 767.202609][T18645] do_ip6t_set_ctl+0x3b2/0x8f0 [ 767.202653][T18645] nf_setsockopt+0x199/0x1b0 [ 767.202691][T18645] ipv6_setsockopt+0x11a/0x130 [ 767.202786][T18645] tcp_setsockopt+0x98/0xb0 [ 767.202812][T18645] sock_common_setsockopt+0x69/0x80 [ 767.202844][T18645] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 767.202877][T18645] __sys_setsockopt+0x184/0x200 [ 767.202903][T18645] __x64_sys_setsockopt+0x64/0x80 [ 767.202926][T18645] x64_sys_call+0x2327/0x3020 [ 767.202994][T18645] do_syscall_64+0x12c/0x3b0 [ 767.203067][T18645] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 767.203113][T18645] RIP: 0033:0x7f9aaf59cdd9 [ 767.203130][T18645] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 767.203151][T18645] RSP: 002b:00007f9aadff7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 767.203178][T18645] RAX: ffffffffffffffda RBX: 00007f9aaf815fa0 RCX: 00007f9aaf59cdd9 [ 767.203251][T18645] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000004 [ 767.203265][T18645] RBP: 00007f9aadff7090 R08: 0000000000000378 R09: 0000000000000000 [ 767.203280][T18645] R10: 0000200000000380 R11: 0000000000000246 R12: 0000000000000001 [ 767.203294][T18645] R13: 00007f9aaf816038 R14: 00007f9aaf815fa0 R15: 00007fffce89bad8 [ 767.203316][T18645] [ 767.412119][T18649] loop1: detected capacity change from 0 to 764 [ 767.480453][T18652] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4222'. [ 768.205067][T18659] loop2: detected capacity change from 0 to 2048 [ 769.520813][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 769.520835][ T28] audit: type=1326 audit(2000000001.970:2062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18662 comm="syz.0.4225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7eb1fcdd9 code=0x7ffc0000 [ 770.231414][T18660] set_capacity_and_notify: 1 callbacks suppressed [ 770.231524][T18660] loop4: detected capacity change from 0 to 2048 [ 770.393847][T18659] EXT4-fs warning (device loop2): ext4_multi_mount_protect:394: Unable to create kmmpd thread for loop2. [ 770.453828][T18660] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 770.552430][T18672] openvswitch: netlink: Missing key (keys=40, expected=80) [ 770.555670][ T28] audit: type=1326 audit(2000000002.000:2063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18662 comm="syz.0.4225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7eb1fcdd9 code=0x7ffc0000 [ 770.838587][T18670] loop0: detected capacity change from 0 to 4096 [ 770.870163][T18678] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4230'. [ 771.114588][T13462] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 771.151450][T18670] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=e842c018, mo2=0002] [ 771.166123][T18686] loop1: detected capacity change from 0 to 764 [ 771.294136][T18670] System zones: 0-5 [ 771.364592][T18670] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 771.474493][T18689] loop1: detected capacity change from 0 to 1024 [ 771.533461][ T28] audit: type=1326 audit(2000000002.000:2064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18662 comm="syz.0.4225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7eb1fcdd9 code=0x7ffc0000 [ 771.552957][T18689] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 771.570547][ T28] audit: type=1326 audit(2000000002.010:2065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18662 comm="syz.0.4225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7eb1fcdd9 code=0x7ffc0000 [ 771.594371][ T28] audit: type=1326 audit(2000000002.010:2066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18662 comm="syz.0.4225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7eb1fcdd9 code=0x7ffc0000 [ 771.618219][ T28] audit: type=1326 audit(2000000002.010:2067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18662 comm="syz.0.4225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7eb1fcdd9 code=0x7ffc0000 [ 771.641946][ T28] audit: type=1326 audit(2000000002.010:2068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18662 comm="syz.0.4225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7eb1fcdd9 code=0x7ffc0000 [ 771.665737][ T28] audit: type=1326 audit(2000000002.010:2069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18662 comm="syz.0.4225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fe7eb1fcdd9 code=0x7ffc0000 [ 771.689469][ T28] audit: type=1326 audit(2000000002.010:2070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18662 comm="syz.0.4225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7eb1fcdd9 code=0x7ffc0000 [ 771.723547][T18689] IPVS: persistence engine module ip_vs_pe_€ not found [ 771.761017][T13178] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 771.773683][ T28] audit: type=1326 audit(2000000002.010:2071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18662 comm="syz.0.4225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7eb1fcdd9 code=0x7ffc0000 [ 771.808476][T14235] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 771.828696][T18696] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4234'. [ 772.030187][T18683] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4230'. [ 772.044702][T18683] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4230'. [ 772.054594][T18683] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4230'. [ 772.065109][T18683] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4230'. [ 772.074970][T18683] netlink: 'syz.3.4230': attribute type 6 has an invalid length. [ 772.176162][T18713] loop1: detected capacity change from 0 to 512 [ 772.203680][T18713] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 772.259772][T18713] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.4236: bg 0: block 288: padding at end of block bitmap is not set [ 772.277124][T18713] loop1: lost filesystem error report for type 5 error -117 [ 772.278881][T18713] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 772.287010][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 772.287279][ C1] EXT4-fs (loop1): initial error at time 2000000001: ext4_validate_block_bitmap:441 [ 772.287333][ C1] EXT4-fs (loop1): last error at time 2000000001: ext4_validate_block_bitmap:441 [ 772.326452][T18713] loop1: lost filesystem error report for type 5 error -117 [ 772.334638][T18713] EXT4-fs error (device loop1): ext4_clear_blocks:876: inode #13: comm syz.1.4236: attempt to clear invalid blocks 1024 len 1 [ 772.357850][T18713] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 772.361884][T18713] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.4236: invalid indirect mapped block 1819239214 (level 0) [ 772.386977][T18713] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 772.391189][T18713] EXT4-fs (loop1): 1 truncate cleaned up [ 772.412360][T18713] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 772.665806][T18717] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 772.678344][T18717] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 773.876348][T14235] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 774.193796][T18725] openvswitch: netlink: Missing key (keys=40, expected=80) [ 774.234672][T18726] loop0: detected capacity change from 0 to 2048 [ 774.294775][T18726] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 774.469626][T18732] loop1: detected capacity change from 0 to 512 [ 774.514825][T18732] EXT4-fs: Ignoring removed nomblk_io_submit option [ 774.592688][T18732] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8857e02c, mo2=0002] [ 774.622863][T18732] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.4241: invalid indirect mapped block 2683928664 (level 1) [ 774.658556][T18735] loop3: detected capacity change from 0 to 4096 [ 774.675165][T18732] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 774.675373][T18732] EXT4-fs (loop1): Remounting filesystem read-only [ 774.684654][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 774.684670][ C0] EXT4-fs (loop1): initial error at time 2000000003: ext4_free_branches:1023: inode 11 [ 774.684710][ C0] EXT4-fs (loop1): last error at time 2000000003: ext4_free_branches:1023: inode 11 [ 774.718191][T18735] EXT4-fs: Ignoring removed bh option [ 774.755989][T18735] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 774.785161][T18732] EXT4-fs (loop1): 1 truncate cleaned up [ 774.791336][T18732] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 774.816751][T14235] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 774.838728][T14577] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 776.001405][T18759] loop3: detected capacity change from 0 to 2048 [ 776.222635][T13178] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 776.556372][T18759] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 777.021862][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 777.021879][ T28] audit: type=1326 audit(2000000002.050:2075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18766 comm="syz.0.4249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7eb1fcdd9 code=0x7ffc0000 [ 777.084418][T18770] openvswitch: netlink: Missing key (keys=40, expected=80) [ 777.191997][ T28] audit: type=1326 audit(2000000002.050:2076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18766 comm="syz.0.4249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7eb1fcdd9 code=0x7ffc0000 [ 777.235422][T18786] FAULT_INJECTION: forcing a failure. [ 777.235422][T18786] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 777.265947][T18785] loop1: detected capacity change from 0 to 512 [ 777.282256][T18786] CPU: 0 UID: 0 PID: 18786 Comm: syz.0.4253 Tainted: G W syzkaller #0 PREEMPT(full) [ 777.282302][T18786] Tainted: [W]=WARN [ 777.282311][T18786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 777.282325][T18786] Call Trace: [ 777.282331][T18786] [ 777.282340][T18786] __dump_stack+0x1d/0x30 [ 777.282366][T18786] dump_stack_lvl+0x95/0xd0 [ 777.282383][T18786] dump_stack+0x15/0x1b [ 777.282449][T18786] should_fail_ex+0x263/0x280 [ 777.282477][T18786] should_fail+0xb/0x20 [ 777.282506][T18786] should_fail_usercopy+0x1a/0x20 [ 777.282560][T18786] strncpy_from_user+0x27/0x250 [ 777.282634][T18786] ? __kmalloc_cache_noprof+0x18a/0x400 [ 777.282669][T18786] __se_sys_memfd_create+0x20f/0x3b0 [ 777.282697][T18786] __x64_sys_memfd_create+0x31/0x40 [ 777.282736][T18786] x64_sys_call+0x1f22/0x3020 [ 777.282787][T18786] do_syscall_64+0x12c/0x3b0 [ 777.282811][T18786] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 777.282835][T18786] RIP: 0033:0x7fe7eb1fcdd9 [ 777.282853][T18786] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 777.282942][T18786] RSP: 002b:00007fe7e9c35d58 EFLAGS: 00000206 ORIG_RAX: 000000000000013f [ 777.282964][T18786] RAX: ffffffffffffffda RBX: 00000000000005df RCX: 00007fe7eb1fcdd9 [ 777.283054][T18786] RDX: 00007fe7e9c35ddc RSI: 0000000000000000 RDI: 00007fe7eb292f49 [ 777.283069][T18786] RBP: 0000200000000000 R08: 00000000ffffffff R09: 0000000000000000 [ 777.283083][T18786] R10: 0000000000000001 R11: 0000000000000206 R12: 0000000000000001 [ 777.283093][T18786] R13: 00007fe7e9c35ddc R14: 00007fe7e9c35de0 R15: 00007ffc2f009358 [ 777.283150][T18786] [ 777.285645][T18785] EXT4-fs: Ignoring removed nomblk_io_submit option [ 777.488127][ T28] audit: type=1326 audit(2000000002.050:2077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18766 comm="syz.0.4249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7eb1fcdd9 code=0x7ffc0000 [ 777.536981][T18788] loop2: detected capacity change from 0 to 4096 [ 777.556961][ T28] audit: type=1326 audit(2000000002.050:2078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18766 comm="syz.0.4249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7eb1fcdd9 code=0x7ffc0000 [ 777.648015][ T28] audit: type=1326 audit(2000000002.100:2079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18766 comm="syz.0.4249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7eb1fcdd9 code=0x7ffc0000 [ 777.722433][T18788] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=e842c018, mo2=0002] [ 777.731960][ T28] audit: type=1326 audit(2000000002.100:2080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18766 comm="syz.0.4249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fe7eb1fcb42 code=0x7ffc0000 [ 777.732664][T18788] System zones: 0-5 [ 777.768454][T18788] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 777.783312][T14577] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 777.785497][T18785] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8857e02c, mo2=0002] [ 777.793902][ T28] audit: type=1326 audit(2000000002.100:2081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18766 comm="syz.0.4249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fe7eb1fcbd7 code=0x7ffc0000 [ 777.824624][T18785] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.4255: invalid indirect mapped block 2683928664 (level 1) [ 777.824860][ T28] audit: type=1326 audit(2000000002.100:2082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18766 comm="syz.0.4249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fe7eb1b9ad1 code=0x7ffc0000 [ 777.839788][T18792] loop0: detected capacity change from 0 to 4096 [ 777.869321][T18785] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 777.871941][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 777.882205][ T28] audit: type=1326 audit(2000000002.100:2083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18766 comm="syz.0.4249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7fe7eb1fdbc9 code=0x7ffc0000 [ 777.888460][ C0] EXT4-fs (loop1): initial error at time 2000000002: ext4_free_branches:1023: inode 11 [ 777.922720][ C0] EXT4-fs (loop1): last error at time 2000000002: ext4_free_branches:1023: inode 11 [ 777.935223][T18785] EXT4-fs (loop1): Remounting filesystem read-only [ 777.937489][T18792] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=e842c018, mo2=0002] [ 777.960743][T18785] EXT4-fs (loop1): 1 truncate cleaned up [ 777.968538][ T28] audit: type=1326 audit(2000000002.100:2084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18766 comm="syz.0.4249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fe7eb1b9b3b code=0x7ffc0000 [ 778.000331][T18785] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 778.023843][T13781] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 778.033017][T18792] System zones: 0-5 [ 778.053770][T18792] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 778.069875][T14235] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 778.163133][T13178] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 778.429405][T18808] loop1: detected capacity change from 0 to 4096 [ 778.637223][T18808] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=e842c018, mo2=0002] [ 778.682814][T18808] System zones: 0-5 [ 778.730821][T18808] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 778.751150][T18821] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4262'. [ 778.843929][T18825] ref_ctr_offset mismatch. inode: 0x5e4 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x1000000 [ 778.908055][T18824] loop3: detected capacity change from 0 to 2048 [ 778.926579][T14235] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 779.004231][T18824] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 779.285434][T18835] loop4: detected capacity change from 0 to 4096 [ 779.304880][T18835] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 779.368989][T18842] loop1: detected capacity change from 0 to 512 [ 779.377201][T18842] EXT4-fs: Ignoring removed nomblk_io_submit option [ 779.389123][T18842] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8857e02c, mo2=0002] [ 779.407723][T18842] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.4269: invalid indirect mapped block 2683928664 (level 1) [ 779.421940][T18842] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 779.422112][T18842] EXT4-fs (loop1): Remounting filesystem read-only [ 779.438023][T18842] EXT4-fs (loop1): 1 truncate cleaned up [ 779.441943][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 779.445340][T18842] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 779.450117][ C1] EXT4-fs (loop1): initial error at time 2000000004: ext4_free_branches:1023: inode 11 [ 779.450146][ C1] EXT4-fs (loop1): last error at time 2000000004: ext4_free_branches:1023: inode 11 [ 779.488774][T14235] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 779.746726][T18851] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4272'. [ 779.913218][T13462] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 780.239979][T18865] loop2: detected capacity change from 0 to 512 [ 780.262472][T18863] loop4: detected capacity change from 0 to 4096 [ 780.270978][T18863] EXT4-fs: Ignoring removed bh option [ 780.282752][T18863] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 780.298853][T18861] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4272'. [ 780.315503][T18861] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4272'. [ 780.332251][T18861] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4272'. [ 780.361045][T18861] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4272'. [ 780.375857][T18861] netlink: 'syz.0.4272': attribute type 6 has an invalid length. [ 780.402221][T13462] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 780.437654][T18871] EXT4-fs: Ignoring removed nomblk_io_submit option [ 780.466207][T18871] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8857e02c, mo2=0002] [ 780.486939][T18871] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.4280: invalid indirect mapped block 2683928664 (level 1) [ 780.502695][T18871] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 780.502820][T18871] EXT4-fs (loop2): Remounting filesystem read-only [ 780.512048][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 780.512079][ C0] EXT4-fs (loop2): initial error at time 2000000000: ext4_free_branches:1023: inode 11 [ 780.512108][ C0] EXT4-fs (loop2): last error at time 2000000000: ext4_free_branches:1023: inode 11 [ 780.568296][T18877] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4279'. [ 780.649021][T18871] EXT4-fs (loop2): 1 truncate cleaned up [ 780.660052][T18871] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 780.723514][T18881] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 780.741957][T18881] ext4 filesystem being mounted at /276/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 780.756125][T13781] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 781.236537][T18903] set_capacity_and_notify: 2 callbacks suppressed [ 781.236555][T18903] loop4: detected capacity change from 0 to 512 [ 781.275200][T18903] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 781.287822][T18903] ext4 filesystem being mounted at /272/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 781.663408][T18908] loop1: detected capacity change from 0 to 4096 [ 781.700662][T18908] EXT4-fs: Ignoring removed bh option [ 781.793296][T18908] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 781.968276][T14235] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 782.025422][T18914] loop1: detected capacity change from 0 to 512 [ 782.048747][T18914] EXT4-fs (loop1): 1 truncate cleaned up [ 782.129756][T13462] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 782.150131][T18914] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 782.186978][T18914] FAULT_INJECTION: forcing a failure. [ 782.186978][T18914] name failslab, interval 1, probability 0, space 0, times 0 [ 782.215394][T18914] CPU: 0 UID: 0 PID: 18914 Comm: syz.1.4291 Tainted: G W syzkaller #0 PREEMPT(full) [ 782.215477][T18914] Tainted: [W]=WARN [ 782.215484][T18914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 782.215562][T18914] Call Trace: [ 782.215569][T18914] [ 782.215576][T18914] __dump_stack+0x1d/0x30 [ 782.215599][T18914] dump_stack_lvl+0x95/0xd0 [ 782.215667][T18914] dump_stack+0x15/0x1b [ 782.215684][T18914] should_fail_ex+0x263/0x280 [ 782.215725][T18914] should_failslab+0x8c/0xb0 [ 782.215754][T18914] __kmalloc_noprof+0xb8/0x4d0 [ 782.215870][T18914] ? ext4_htree_store_dirent+0x52/0x2e0 [ 782.215895][T18914] ext4_htree_store_dirent+0x52/0x2e0 [ 782.215918][T18914] htree_dirblock_to_tree+0x49f/0x620 [ 782.215946][T18914] ext4_htree_fill_tree+0x458/0xa60 [ 782.215971][T18914] ? sysvec_apic_timer_interrupt+0x44/0x80 [ 782.216074][T18914] ? inode_query_iversion+0xb9/0x110 [ 782.216099][T18914] ext4_readdir+0x1915/0x1f80 [ 782.216120][T18914] ? __tsan_read4+0xd7/0x190 [ 782.216152][T18914] ? avc_policy_seqno+0x15/0x30 [ 782.216177][T18914] ? selinux_file_permission+0x1e1/0x320 [ 782.216207][T18914] iterate_dir+0x114/0x330 [ 782.216235][T18914] __se_sys_getdents64+0xd2/0x230 [ 782.216279][T18914] ? __pfx_filldir64+0x10/0x10 [ 782.216309][T18914] __x64_sys_getdents64+0x43/0x50 [ 782.216336][T18914] x64_sys_call+0x2408/0x3020 [ 782.216406][T18914] do_syscall_64+0x12c/0x3b0 [ 782.216489][T18914] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 782.216509][T18914] RIP: 0033:0x7fe8c0b0cdd9 [ 782.216524][T18914] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 782.216540][T18914] RSP: 002b:00007fe8bf567028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 782.216571][T18914] RAX: ffffffffffffffda RBX: 00007fe8c0d85fa0 RCX: 00007fe8c0b0cdd9 [ 782.216609][T18914] RDX: 00000000000000e0 RSI: 0000200000000fc0 RDI: 0000000000000008 [ 782.216630][T18914] RBP: 00007fe8bf567090 R08: 0000000000000000 R09: 0000000000000000 [ 782.216641][T18914] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 782.216651][T18914] R13: 00007fe8c0d86038 R14: 00007fe8c0d85fa0 R15: 00007ffeea7db698 [ 782.216667][T18914] [ 782.222486][T18921] loop4: detected capacity change from 0 to 512 [ 782.437310][T18924] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4296'. [ 782.461363][T13178] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 782.471265][T14235] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 782.486831][T18921] EXT4-fs: Ignoring removed nomblk_io_submit option [ 782.517102][T18926] FAULT_INJECTION: forcing a failure. [ 782.517102][T18926] name failslab, interval 1, probability 0, space 0, times 0 [ 782.534440][T18921] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8857e02c, mo2=0002] [ 782.545139][T18921] EXT4-fs error (device loop4): ext4_get_branch:178: inode #11: block 33261: comm syz.4.4293: invalid block [ 782.561411][T14577] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 782.569434][T18926] CPU: 0 UID: 0 PID: 18926 Comm: syz.0.4294 Tainted: G W syzkaller #0 PREEMPT(full) [ 782.569599][T18926] Tainted: [W]=WARN [ 782.569618][T18926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 782.569648][T18926] Call Trace: [ 782.569672][T18926] [ 782.569694][T18926] __dump_stack+0x1d/0x30 [ 782.569763][T18926] dump_stack_lvl+0x95/0xd0 [ 782.569904][T18926] dump_stack+0x15/0x1b [ 782.569960][T18926] should_fail_ex+0x263/0x280 [ 782.570124][T18926] should_failslab+0x8c/0xb0 [ 782.570206][T18926] kmem_cache_alloc_node_noprof+0x6d/0x450 [ 782.570342][T18926] ? __alloc_skb+0x2d6/0x690 [ 782.570433][T18926] __alloc_skb+0x2d6/0x690 [ 782.570553][T18926] ? __alloc_skb+0x200/0x690 [ 782.570677][T18926] netlink_alloc_large_skb+0xbf/0xf0 [ 782.570747][T18926] netlink_sendmsg+0x40c/0x6f0 [ 782.570822][T18926] ? __pfx_netlink_sendmsg+0x10/0x10 [ 782.570934][T18926] ____sys_sendmsg+0x563/0x5b0 [ 782.571005][T18926] ___sys_sendmsg+0x195/0x1e0 [ 782.571164][T18926] __x64_sys_sendmsg+0xd4/0x160 [ 782.571237][T18926] x64_sys_call+0x194c/0x3020 [ 782.571382][T18926] do_syscall_64+0x12c/0x3b0 [ 782.571488][T18926] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 782.571562][T18926] RIP: 0033:0x7fe7eb1fcdd9 [ 782.571607][T18926] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 782.571642][T18926] RSP: 002b:00007fe7e9c57028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 782.571698][T18926] RAX: ffffffffffffffda RBX: 00007fe7eb475fa0 RCX: 00007fe7eb1fcdd9 [ 782.571735][T18926] RDX: 0000000004008054 RSI: 0000200000000200 RDI: 0000000000000005 [ 782.571854][T18926] RBP: 00007fe7e9c57090 R08: 0000000000000000 R09: 0000000000000000 [ 782.571938][T18926] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 782.571962][T18926] R13: 00007fe7eb476038 R14: 00007fe7eb475fa0 R15: 00007ffc2f009358 [ 782.572037][T18926] [ 782.573155][T18921] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 782.766703][T18921] EXT4-fs (loop4): Remounting filesystem read-only [ 782.776271][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 782.776288][ C0] EXT4-fs (loop4): initial error at time 2000000000: ext4_get_branch:178: inode 11: block 33261 [ 782.776329][ C0] EXT4-fs (loop4): last error at time 2000000000: ext4_get_branch:178: inode 11: block 33261 [ 782.820562][T18943] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4299'. [ 782.830028][T18921] EXT4-fs (loop4): 1 truncate cleaned up [ 782.839661][T18921] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 782.889287][T13462] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 782.962112][ T28] kauditd_printk_skb: 99 callbacks suppressed [ 782.962167][ T28] audit: type=1400 audit(2000000000.010:2184): avc: denied { create } for pid=18948 comm="syz.1.4301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 783.018350][T18953] loop3: detected capacity change from 0 to 4096 [ 783.025086][T18953] EXT4-fs: Ignoring removed bh option [ 783.037421][T18953] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 783.056679][T18954] loop0: detected capacity change from 0 to 4096 [ 783.117532][T18957] loop1: detected capacity change from 0 to 512 [ 783.137544][T14577] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 783.173142][T18957] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 783.190574][T18957] ext4 filesystem being mounted at /258/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 783.199184][T18951] loop4: detected capacity change from 0 to 764 [ 783.209292][T18954] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=e842c018, mo2=0002] [ 783.244819][T18954] System zones: 0-5 [ 783.249305][T18964] loop3: detected capacity change from 0 to 512 [ 783.364875][T18954] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 783.435254][T18964] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 783.505635][T18964] ext4 filesystem being mounted at /227/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 784.305460][T13178] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 784.473305][T14577] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 784.593517][ T28] audit: type=1400 audit(2000000001.630:2185): avc: denied { write } for pid=18975 comm="syz.4.4308" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 784.618930][T18985] FAULT_INJECTION: forcing a failure. [ 784.618930][T18985] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 784.697066][T18985] CPU: 0 UID: 0 PID: 18985 Comm: syz.0.4307 Tainted: G W syzkaller #0 PREEMPT(full) [ 784.697112][T18985] Tainted: [W]=WARN [ 784.697120][T18985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 784.697134][T18985] Call Trace: [ 784.697141][T18985] [ 784.697224][T18985] __dump_stack+0x1d/0x30 [ 784.697245][T18985] dump_stack_lvl+0x95/0xd0 [ 784.697265][T18985] dump_stack+0x15/0x1b [ 784.697285][T18985] should_fail_ex+0x263/0x280 [ 784.697358][T18985] should_fail+0xb/0x20 [ 784.697379][T18985] should_fail_usercopy+0x1a/0x20 [ 784.697412][T18985] _copy_from_user+0x1c/0xb0 [ 784.697514][T18985] do_sock_getsockopt+0x122/0x570 [ 784.697541][T18985] __x64_sys_getsockopt+0x11d/0x1a0 [ 784.697564][T18985] x64_sys_call+0x2dcf/0x3020 [ 784.697586][T18985] do_syscall_64+0x12c/0x3b0 [ 784.697662][T18985] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 784.697687][T18985] RIP: 0033:0x7fe7eb1fcdd9 [ 784.697710][T18985] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 784.697729][T18985] RSP: 002b:00007fe7e9c57028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 784.697798][T18985] RAX: ffffffffffffffda RBX: 00007fe7eb475fa0 RCX: 00007fe7eb1fcdd9 [ 784.697813][T18985] RDX: 0000000000000009 RSI: 0000000000000084 RDI: 0000000000000003 [ 784.697826][T18985] RBP: 00007fe7e9c57090 R08: 0000200000000180 R09: 0000000000000000 [ 784.697840][T18985] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000001 [ 784.697888][T18985] R13: 00007fe7eb476038 R14: 00007fe7eb475fa0 R15: 00007ffc2f009358 [ 784.697911][T18985] [ 785.088963][T18986] loop2: detected capacity change from 0 to 4096 [ 785.098873][T18989] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4311'. [ 785.387260][T18992] EXT4-fs: Ignoring removed nomblk_io_submit option [ 785.532422][T18992] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8857e02c, mo2=0002] [ 785.540763][T18986] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=e842c018, mo2=0002] [ 785.549856][T18992] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.4312: invalid indirect mapped block 2683928664 (level 1) [ 785.574916][T18992] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 785.575061][T18986] System zones: [ 785.584231][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 785.584257][ C1] EXT4-fs (loop0): initial error at time 2000000002: ext4_free_branches:1023: inode 11 [ 785.584294][ C1] EXT4-fs (loop0): last error at time 2000000002: ext4_free_branches:1023: inode 11 [ 785.705611][T18992] EXT4-fs (loop0): Remounting filesystem read-only [ 785.712247][T18986] 0-5 [ 785.720282][T18986] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 785.737891][T18992] EXT4-fs (loop0): 1 truncate cleaned up [ 785.751563][T18992] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 785.853264][T13178] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 785.866360][T13781] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 786.085376][T14235] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 786.177445][T18998] openvswitch: netlink: Missing key (keys=40, expected=80) [ 786.277128][T19003] set_capacity_and_notify: 1 callbacks suppressed [ 786.277146][T19003] loop4: detected capacity change from 0 to 512 [ 786.319495][T19003] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 786.354716][T19003] ext4 filesystem being mounted at /276/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 786.361154][T19012] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4316'. [ 786.394459][T19009] loop2: detected capacity change from 0 to 4096 [ 786.402471][T19009] EXT4-fs: Ignoring removed bh option [ 786.432869][T19009] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 786.975356][T13781] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 787.109766][ T28] audit: type=1400 audit(2000000000.830:2186): avc: denied { read } for pid=19030 comm="syz.3.4322" name="event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 787.140835][ T28] audit: type=1400 audit(2000000000.860:2187): avc: denied { name_connect } for pid=19030 comm="syz.3.4322" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 787.224272][T19036] loop2: detected capacity change from 0 to 4096 [ 787.236966][T13462] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 787.238987][T19036] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=e842c018, mo2=0002] [ 787.254288][T19036] System zones: 0-5 [ 787.270290][T19036] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 787.321480][T19046] loop4: detected capacity change from 0 to 512 [ 787.330600][T19046] EXT4-fs: Ignoring removed nomblk_io_submit option [ 787.343299][T13781] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 787.355503][T19046] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8857e02c, mo2=0002] [ 787.364080][T19046] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.4325: invalid indirect mapped block 2683928664 (level 1) [ 787.378224][T19046] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 787.381654][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 787.389552][T19046] EXT4-fs (loop4): Remounting filesystem read-only [ 787.390815][ C1] EXT4-fs (loop4): initial error at time 2000000001: ext4_free_branches:1023: inode 11 [ 787.413467][ C1] EXT4-fs (loop4): last error at time 2000000001: ext4_free_branches:1023: inode 11 [ 787.418909][T19046] EXT4-fs (loop4): 1 truncate cleaned up [ 787.436293][T19050] loop2: detected capacity change from 0 to 512 [ 787.447788][T19046] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 787.473908][T19050] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 787.488501][T19050] ext4 filesystem being mounted at /228/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 787.502182][T13462] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 787.524932][ T28] audit: type=1400 audit(2000000001.250:2188): avc: denied { map } for pid=19058 comm="syz.4.4328" path="socket:[57890]" dev="sockfs" ino=57890 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 787.552199][ T28] audit: type=1400 audit(2000000001.250:2189): avc: denied { read accept } for pid=19058 comm="syz.4.4328" path="socket:[57890]" dev="sockfs" ino=57890 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 787.606717][T19066] loop4: detected capacity change from 0 to 512 [ 787.634105][T19066] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 787.650346][T19066] ext4 filesystem being mounted at /279/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 790.272932][T13462] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 790.321210][T19089] loop4: detected capacity change from 0 to 512 [ 790.348989][T19089] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 790.381865][T19089] ext4 filesystem being mounted at /280/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 790.611174][T13781] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 791.884995][T19116] 9p: Bad value for 'rfdno' [ 791.906751][ T28] audit: type=1400 audit(2000000000.620:2190): avc: denied { append } for pid=19103 comm="syz.3.4339" name="ptp0" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 791.952768][T19100] loop0: detected capacity change from 0 to 764 [ 791.968436][T13462] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 792.044018][ T28] audit: type=1400 audit(2000000000.860:2191): avc: denied { write } for pid=19105 comm="syz.1.4340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 792.380423][T19135] loop1: detected capacity change from 0 to 512 [ 792.395450][T19123] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 792.419900][T19135] ================================================================== [ 792.428062][T19135] BUG: KCSAN: data-race in rwsem_down_write_slowpath / rwsem_down_write_slowpath [ 792.437208][T19135] [ 792.439548][T19135] write to 0xffffc90001ce7828 of 1 bytes by task 19129 on cpu 1: [ 792.447281][T19135] rwsem_down_write_slowpath+0x3dd/0xac0 [ 792.452936][T19135] down_write+0xab/0xc0 [ 792.457119][T19135] kernfs_add_one+0x5a/0x280 [ 792.461766][T19135] __kernfs_create_file+0x145/0x180 [ 792.467014][T19135] sysfs_add_file_mode_ns+0x132/0x1b0 [ 792.472398][T19135] internal_create_group+0x441/0x9e0 [ 792.477697][T19135] sysfs_create_groups+0x3f/0xf0 [ 792.482658][T19135] netdev_queue_update_kobjects+0x1dd/0x4c0 [ 792.488583][T19135] netdev_register_kobject+0x1b7/0x230 [ 792.494085][T19135] register_netdevice+0xaaf/0x1160 [ 792.499204][T19135] macsec_newlink+0x335/0x7c0 [ 792.503891][T19135] rtnl_newlink_create+0x1e4/0x650 [ 792.509036][T19135] rtnl_newlink+0x1185/0x1400 [ 792.513735][T19135] rtnetlink_rcv_msg+0x64b/0x720 [ 792.518686][T19135] netlink_rcv_skb+0x123/0x220 [ 792.523469][T19135] rtnetlink_rcv+0x1c/0x30 [ 792.527892][T19135] netlink_unicast+0x5a8/0x680 [ 792.532681][T19135] netlink_sendmsg+0x5c8/0x6f0 [ 792.537488][T19135] ____sys_sendmsg+0x563/0x5b0 [ 792.542267][T19135] ___sys_sendmsg+0x195/0x1e0 [ 792.546981][T19135] __x64_sys_sendmsg+0xd4/0x160 [ 792.551839][T19135] x64_sys_call+0x194c/0x3020 [ 792.556534][T19135] do_syscall_64+0x12c/0x3b0 [ 792.561148][T19135] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 792.567077][T19135] [ 792.569417][T19135] read to 0xffffc90001ce7828 of 1 bytes by task 19135 on cpu 0: [ 792.577053][T19135] rwsem_down_write_slowpath+0x44f/0xac0 [ 792.582701][T19135] down_write+0xab/0xc0 [ 792.586861][T19135] kernfs_add_one+0x5a/0x280 [ 792.591471][T19135] __kernfs_create_file+0x145/0x180 [ 792.596700][T19135] sysfs_add_file_mode_ns+0x132/0x1b0 [ 792.602093][T19135] internal_create_group+0x441/0x9e0 [ 792.607400][T19135] sysfs_create_groups+0x3f/0xf0 [ 792.612379][T19135] kobject_add_internal+0x4a7/0x780 [ 792.617636][T19135] kobject_init_and_add+0x14a/0x1f0 [ 792.622859][T19135] ext4_register_sysfs+0xa5/0x270 [ 792.627905][T19135] ext4_fill_super+0x36f0/0x37c0 [ 792.632895][T19135] get_tree_bdev_flags+0x291/0x300 [ 792.638028][T19135] get_tree_bdev+0x1f/0x30 [ 792.642457][T19135] ext4_get_tree+0x1c/0x30 [ 792.646885][T19135] vfs_get_tree+0x57/0x1d0 [ 792.651320][T19135] do_new_mount+0x288/0x8d0 [ 792.655841][T19135] path_mount+0x4d0/0xbc0 [ 792.660184][T19135] __se_sys_mount+0x28c/0x2e0 [ 792.664887][T19135] __x64_sys_mount+0x67/0x80 [ 792.669497][T19135] x64_sys_call+0x2d61/0x3020 [ 792.674192][T19135] do_syscall_64+0x12c/0x3b0 [ 792.678797][T19135] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 792.684708][T19135] [ 792.687035][T19135] value changed: 0x00 -> 0x01 [ 792.691709][T19135] [ 792.694035][T19135] Reported by Kernel Concurrency Sanitizer on: [ 792.700200][T19135] CPU: 0 UID: 0 PID: 19135 Comm: syz.1.4346 Tainted: G W syzkaller #0 PREEMPT(full) [ 792.711156][T19135] Tainted: [W]=WARN [ 792.714963][T19135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 792.725031][T19135] ================================================================== [ 792.743317][T19141] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4347'. [ 792.763694][T19143] loop0: detected capacity change from 0 to 1024 [ 792.772776][T19135] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 792.804770][T19132] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4344'. [ 792.821917][T19135] ext4 filesystem being mounted at /267/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 792.834532][T19123] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4344'. [ 792.876627][T19123] loop3: detected capacity change from 0 to 256 [ 793.039455][T19148] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4347'. [ 793.048754][T19148] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4347'. [ 793.059401][T19148] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4347'. [ 793.070394][T19148] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4347'. [ 793.080148][T19148] netlink: 'syz.4.4347': attribute type 6 has an invalid length.