last executing test programs: 3m19.109356675s ago: executing program 1 (id=3889): r0 = creat(0x0, 0x0) close(r0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) r1 = timerfd_create(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 3m19.087942666s ago: executing program 1 (id=3893): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000004540)=ANY=[@ANYBLOB="00008906011000000000bbbbbbbbbbbb88a8400081", @ANYBLOB], 0x42) 3m18.974286861s ago: executing program 1 (id=3901): socket$packet(0x11, 0x3, 0x300) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x28040041, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) sendmsg$inet(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)="17", 0x1}], 0x1}, 0x8c0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x193a, 0x4) recvmmsg(r0, &(0x7f0000002c80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=""/8, 0x8}, 0x4}], 0x1, 0x40000000, 0x0) 3m18.110194169s ago: executing program 1 (id=3944): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) unshare(0x2c060000) bpf$MAP_CREATE(0x0, 0x0, 0x48) lseek(0xffffffffffffffff, 0xfffd, 0x0) 3m18.043563801s ago: executing program 1 (id=3947): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000140)={0x53, 0xfffffffffffffffc, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000380), 0x0, 0x1, 0x10000, 0x1, 0x0}) 3m17.957262426s ago: executing program 1 (id=3952): socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) getpgrp(0xffffffffffffffff) capget(0x0, &(0x7f0000000180)={0x4, 0x9, 0x2, 0x2843, 0x5, 0x80000000}) socket$igmp6(0xa, 0x3, 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7f, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x0, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 3m17.957028756s ago: executing program 32 (id=3952): socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) getpgrp(0xffffffffffffffff) capget(0x0, &(0x7f0000000180)={0x4, 0x9, 0x2, 0x2843, 0x5, 0x80000000}) socket$igmp6(0xa, 0x3, 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7f, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x0, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 3m17.652471148s ago: executing program 3 (id=3971): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x101042, 0x15) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x60000, 0x3) getdents64(r0, &(0x7f0000001f80)=""/4096, 0x1000) 3m17.652099769s ago: executing program 3 (id=3972): r0 = openat$binfmt_register(0xffffff9c, &(0x7f0000000280), 0x1, 0x0) write$binfmt_register(r0, &(0x7f00000002c0)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x2, 0x3a, '\xe5y7l', 0x3a, '^\\x\\', 0x3a, './file1'}, 0x2f) signalfd4(0xffffffffffffffff, &(0x7f0000000100)={[0x6]}, 0x8, 0x80800) syz_open_dev$vcsu(&(0x7f0000000000), 0x8, 0x400) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="2400000021002101000000000000dc000a"], 0x24}, 0x1, 0x0, 0x0, 0x840}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3m17.601772881s ago: executing program 3 (id=3973): futex(&(0x7f000000cffc), 0x5, 0xffffffff, 0x0, &(0x7f0000000000)=0x8, 0x4dffffe) 3m17.542396773s ago: executing program 3 (id=3974): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) unshare(0x2c060000) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') lseek(r0, 0xfffd, 0x0) 3m17.541796483s ago: executing program 3 (id=3975): mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffcffffff, 0x20031, 0xffffffffffffffff, 0xbe9f5000) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x2, 0x805, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @rand_addr=0x64010102}]}, &(0x7f00000007c0)=0x10) add_key$user(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, 0x0, 0x0) 3m17.259326635s ago: executing program 3 (id=3986): timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000400)={[0xfffffffffffffff5]}, 0x8, 0x80000) ppoll(&(0x7f0000000200)=[{r0, 0x80cb}, {r0, 0x8500}], 0x2, 0x0, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) 3m17.247907826s ago: executing program 33 (id=3986): timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000400)={[0xfffffffffffffff5]}, 0x8, 0x80000) ppoll(&(0x7f0000000200)=[{r0, 0x80cb}, {r0, 0x8500}], 0x2, 0x0, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) 3m16.973031948s ago: executing program 0 (id=3992): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r1) socket$inet_tcp(0x2, 0x1, 0x0) mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x4898, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 3m16.93904057s ago: executing program 0 (id=3993): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x19, &(0x7f0000000140)=0xa80, 0x4) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000001c0), 0x12) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r2, 0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) 3m16.905786471s ago: executing program 0 (id=3995): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_buf(r0, 0x1, 0xf, 0x0, &(0x7f0000004740)) 3m16.874584432s ago: executing program 0 (id=3997): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') lseek(r0, 0xfffd, 0x0) 3m16.824331185s ago: executing program 0 (id=3998): socket$inet_sctp(0x2, 0x5, 0x84) syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r2, 0xf000, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)='m', 0xfffffdfc}]) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0xc8df, 0xc000, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x300, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xfff1, 0x8}, {0xe, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x20040000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 3m16.614905444s ago: executing program 0 (id=4004): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000), 0x3) setsockopt$inet6_buf(r0, 0x29, 0x2d, 0x0, 0x0) 3m16.587561504s ago: executing program 34 (id=4004): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000), 0x3) setsockopt$inet6_buf(r0, 0x29, 0x2d, 0x0, 0x0) 3m14.918794306s ago: executing program 5 (id=4047): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) bind$packet(r2, &(0x7f0000000300)={0x11, 0x0, r1}, 0x14) bind$packet(r0, &(0x7f0000000300)={0x11, 0x3, r1, 0x1, 0x32, 0x6, @link_local}, 0x14) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') preadv(r3, &(0x7f0000000140)=[{0x0}], 0x1, 0xbc, 0xfffffffb) 3m14.890403978s ago: executing program 5 (id=4048): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) r3 = dup(r1) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000004540)=ANY=[@ANYBLOB="00008906011000000000bbbbbbbbbbbb88a8400081", @ANYBLOB], 0x42) 3m14.84025959s ago: executing program 5 (id=4049): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000900)=[{{&(0x7f0000007b00)={0x2, 0x4e21, @empty}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000180)="e6e0", 0x2}], 0x1}}, {{&(0x7f0000000140)={0x2, 0x4e20, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000007000000890704e00000020011000000000000000000000001000000010000000000"], 0x50}}], 0x2, 0x800) 3m14.83972231s ago: executing program 5 (id=4050): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) unshare(0x2c060000) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') lseek(r0, 0xfffd, 0x0) 3m14.815671982s ago: executing program 5 (id=4051): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=@newlink={0x40, 0x10, 0x439, 0x0, 0x60000, {0x0, 0x0, 0x0, r3, 0x9801}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @loopback}, @IFLA_GRE_LINK={0x8, 0x1, r3}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x840}, 0x8000000) sendto$packet(r0, &(0x7f0000000180)="280320000a0014000000fbf719143baa111f43c851ffab286e16195ecf3d77cc32b6d78839980700", 0x28, 0x840, &(0x7f00000000c0)={0x11, 0x86dd, r3, 0x1, 0x2, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2eaaaac15ca67ef2}}, 0x14) 3m13.299961947s ago: executing program 5 (id=4109): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8d40, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0xfffffffa) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00769a7d8200010000001495595915303d6000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCFLSH(r1, 0x540b, 0x0) ioctl$TCFLSH(r1, 0x540b, 0x0) 3m13.299729567s ago: executing program 35 (id=4109): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8d40, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0xfffffffa) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00769a7d8200010000001495595915303d6000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCFLSH(r1, 0x540b, 0x0) ioctl$TCFLSH(r1, 0x540b, 0x0) 5.019264783s ago: executing program 7 (id=8392): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = open(&(0x7f0000000000)='./file0\x00', 0x10000, 0x40) getdents(r2, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x80, 0x0, 0x0, 0x0, 0x16, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) request_key(&(0x7f0000000180)='user\x00', &(0x7f0000000200)={'syz', 0x3}, &(0x7f0000000280)='\xa9\x1c)\x00', 0xfffffffffffffffd) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x64000600) 4.030094776s ago: executing program 7 (id=8401): r0 = getpid() prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x5, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x80, 0x0, 0x0, 0x0, 0x16, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r3}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r4, 0x29, 0x4e, 0x0, 0x0) 3.067449647s ago: executing program 2 (id=8415): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r3, 0x0, 0x9}, 0x18) prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98<\xc8\x18E/\x8c\x1a\xe3\xbd') r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000340)='kfree\x00', r4}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./control\x00', 0x480, &(0x7f0000000000), 0x1, 0x786, &(0x7f0000000f80)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) chdir(&(0x7f0000000000)='./file0\x00') link(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000008000000000000000000fc8c030aa554cbf0"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 2.904198824s ago: executing program 7 (id=8416): syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x58e, &(0x7f0000000180), 0x1, 0x451, &(0x7f0000000780)="$eJzs289vFFUcAPDvTFug/LAV8Qc/1CoaG3+0tKBy8KLRxIMmJl7wWNtCkIUaWhMhRNEYPBoS78ajiX+BJ70Y9WTiVe+GhBguoqc1szvD/mC3tMu2g+znkwx9b+YN7333zdt9M283gIE1kf2TROyMiN8jYqyebS0wUf9z/dqF+X+uXZhPolp9+6+kVu7vaxfmi6LFeTvyzGQakX6WxP4O9S6fO39qrlJZPJvnp1dOvz+9fO78cydPz51YPLF4Zvbo0SOHZ158Yfb5vsR5b9bWfR8tHdj7+juX35w/dvndn78dKuJvi6NPJlY7+GS12ufqyrWrKZ0Ml9gQ1iUbA1l3jdTG/1gMRaPzxuK1T0ttHLChqrkuhy9WgbtYEmW3AChH8UGf3f8W2+bNPsp39eX6DVAW9/V8qx8ZjjQvM9J2f9tPExFx7OK/X2VbbMxzCACAFt9n859nO83/0nigqdw9+drQeL6Wsjsi7ouIPRFxf0St7IMR8dA6629fJLl5/pNe6SmwNcrmfy/la1ut879i9hfjQ3luVy3+keT4ycriofw1mYyRrVl+ZpU6fnj1ty+6HWue/2VbVn8xF8zbcWV4a+s5C3Mrc7cTc7Orn0TsG+4Uf3JjJSCJiL0Rsa/HOk4+/c2BbsduHf8q+rDOVP064ql6/1+MtvgLyerrk9PborJ4aLq4Km72y6+X3upW/23F3wdZ/2/veP3fiH88aV6vXV5/HZf++LzrPc1UT9d/Y8eW/O+HcysrZ2citiRv1BvdvH+2cW6RL8pn8U8e7Dz+d0fjldgfEdlF/HBEPBIRj+Z991hEPB4RB9viar6//umVJ97rFv+d0P8Lbf0/3lqkrf8biS3RvqdzYujUj9+1/o+N5Nre/47UUpP5nrW8/62lXb1dzQAAAPD/k0bEzkjSqRvp0XRqqv4d/j2xPa0sLa88c3zpgzML9d8IjMdIWjzpGmt6HjqT39YX+dm2/OH8ufGXQ6O1/NT8UmWh7OBhwO24afyntfGf+XOo7NYBG87vtWBwNY3/pMx2AJvP5z8MLuMfBleH8T9aRjuAzdfp8//jEtoBbL628W/ZDwaI+38YXMY/DK7m8e8LADAwlkfj1j+S75TYFr2cJXHXJCK9I5rRn0TS4yhYa2Jn2QGuP1H2OxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEB//BcAAP//pgHvrg==") chdir(&(0x7f00000002c0)='./file0\x00') r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9ba}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0, 0x0, 0xc}, 0x18) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) getdents64(r1, &(0x7f0000000f80)=""/4096, 0x1000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0xb, &(0x7f0000000000)=0x6009, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r0, 0x0, 0xfffffffffffffffe}, 0x18) sendto$inet(r2, 0x0, 0x0, 0x20000000, &(0x7f0000000240)={0x2, 0x4e22, @private=0xa010102}, 0x10) setsockopt$inet_int(r2, 0x0, 0xb, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f00000009c0)=ANY=[], 0xfc, 0x11ff, &(0x7f0000002480)="$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") syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000680)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@noinit_itable}, {@nojournal_checksum}]}, 0x21, 0x4cc, &(0x7f0000000b80)="$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") perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='netfs_failure\x00'}, 0x8) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000380)='./file1\x00', 0x8, &(0x7f0000000300)={[{@noblock_validity}, {@max_batch_time={'max_batch_time', 0x3d, 0x800}}]}, 0xff, 0x54d, &(0x7f0000000f80)="$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") r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x8, 0x3, 0x4e8, 0x0, 0x11, 0x148, 0x340, 0x0, 0x450, 0x2a8, 0x2a8, 0x450, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x81}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x4f, 0x7, "72f6daeff0a9c6294e211d2d88fe6dcff5d0e552201da3b7a1fdb30dcb59"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x548) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={0xffffffffffffffff, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r4 = creat(0x0, 0x0) unshare(0x2040400) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x1000f4) getsockopt$inet_mreqn(r4, 0x0, 0x23, 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0) 2.523052801s ago: executing program 8 (id=8421): bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a38500000070000000"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f0000000780)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', &(0x7f00000000c0)=""/43, 0x2b, 0x0, 0x0, 0x0, 0x801}}, 0x120) 2.364860098s ago: executing program 7 (id=8423): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x8, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x57, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x39f0519dec7ce29b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000180), 0x4e, 0x101240) fadvise64(r0, 0x8000000000000000, 0x9, 0x6) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000240)='kfree\x00', r2}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x52e, &(0x7f0000000640)="$eJzs3cFvI1cZAPBvnDib7GabFDhApZZCi7IVrJ00tI04lCIhOFVClPsSEieK4sRR7LSbqILsX4CEECBxggsXJP4AJLQSF44IqRKcQSoCIdiCBAfoINvjJDjjxFuceNf5/aTZeW/GM9/3vHnjGc/TOIAr69mIeC0i3k/T9IWImMmWF7IpDttT83XvPXh7pTklkaZv/DWJJFvW2VeSzW9km01GxFe/HPGN5HTc+v7B5nK1WtnN6uXG1k65vn9we2Nreb2yXtleXFx4eemVpZeW5gfSzpsR8eoX//i9b//kS6/+4jNv/eHOn299s5nWdLb+ZDse0vhZK9tNL16b7Npg9wMGexQ121PsVKb62+beBeYDAEBvzXP8D0XEJyPihZiJsbNPZwEAAIDHUPr56fh3EpHmm+ixHAAAAHiMFFpjYJNCKRsLMB2FQqnUHsP7kbheqNbqjU+v1fa2V9tjZWejWFjbqFbms7HCs1FMmvWFVvm4/mJXfTEinoyI785MteqllVp1ddhffgAAAMAVcaPr+v8fM+3rfwAAAGDEzA47AQAAAODCuf4HAACA0ef6HwAAAEbaV15/vTmlnd+/Xn1zf2+z9ubt1Up9s7S1t1Jaqe3ulNZrtfXWM/u2zttftVbb+Wxs790tNyr1Rrm+f3Bnq7a33bizEZOX0iAAAADglCc/fv93SUQcfm6qNTVNDDsp4FKMH5WSbJ7T+3//RHv+7iUlBVyKsT5e8+61/OXOE+DxNt69oEdfB0ZPcdgJAEOXnLO+5+CdX2fzTww2HwAAYPDmPpZ///+864GIw8IlpAdcIJ0Yrq6u+//pzLASAS5d6/5/vwN5nCzASCn2NQIQGGX/9/3/c6XpQyUEAAAM3HRrSgql7Ou96SgUSqWIm62fBSgmaxvVynxEPBERv50pXmvWF1pbJn2MEQAAAAAAAAAAAAAAAAAAAAAAAAAAovVU7iRSAAAAYKRFFP6U/LL9LP+5meenu78fmEj+1fpJ4ImIeOuHb3z/7nKjsbvQXP63o+WNH2TLXxzGNxgAAABAt851emv+z2FnAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCoee/B2yudqY+XTw0q7l++EBGzefHHY7I1n4xiRFz/exLjJ7ZLImJsAPEP70XER/PiJ820jkLmxR/Em3BO/JjN3oW8+DcGEB+usvvN489ref2vEM+25vn9bzzif+ofVO/jXxwd/8Z69P+bfcZ46p2flXvGvxfx1Hj+8acTP+kR/7k+43/9awcHvdalP4qY63z+tI54JyMcl8qNrZ1yff/g9sbW8nplvbK9uLjw8tIrSy8tzZfXNqqV7N/cGN95+ufvn9X+67mff0mWTe/2P5+zv7zPpP+8c/fBhzuVw9Pxbz2XE/9XP85ecTp+IYvzqazcXD/XKR+2yyc989PfPHNW+1eP2198mP//W7122u1UR3m63z8dAOAC1PcPNper1cruyBaaV+mPQBoKj2DhWwPdYZqmabNP5ay6HxH97CeJAbe0kJ/PcaHnEWDYRyYAAGDQjk/6h50JAAAAAAAAAAAAAAAAAAAAXF2X8ZS17pjHj0BOBvEIbQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAgfhvAAAA//89e9P5") add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0x0) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0xfffffffffffffccc, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000500)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x45, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) r4 = socket$vsock_stream(0x28, 0x1, 0x0) fgetxattr(r4, &(0x7f0000000000)=ANY=[], 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) r6 = fsopen(&(0x7f00000000c0)='configfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0xa) fchdir(r7) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) fcntl$lock(r8, 0x25, &(0x7f00000000c0)={0x1, 0x0, 0x4004, 0xffffffffffffffff}) fcntl$lock(r8, 0x5, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x200}) epoll_create1(0x0) socket$inet6(0xa, 0x3, 0x3c) 2.362484458s ago: executing program 8 (id=8425): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000060000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800ac0000001a00000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r1 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x13, 0x0, 0x0, 0x7995}, 0x10022, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, 0x0, 0x40) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) socket(0x1d, 0x5, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x18) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020025797a31000000000900010073797a3000000000080005400000001c"], 0xe8}}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{}, &(0x7f0000000340), 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x2000000000000171, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)}, 0x40) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x8084) 2.278599321s ago: executing program 7 (id=8426): r0 = getpid() prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x5, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x80, 0x0, 0x0, 0x0, 0x16, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r4}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r3}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r5, 0x29, 0x4e, 0x0, 0x0) 2.277733281s ago: executing program 8 (id=8427): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r3, 0x0, 0x9}, 0x18) prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98<\xc8\x18E/\x8c\x1a\xe3\xbd') r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2c74664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5431bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de086553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c04f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c80f30505dd4cf2ae2a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265425d513a1294b8439276394945d94a589708e32a1cb30f1fa4b2f08e01dc5e8c6732e6dc59b5c8cb400000000000000592c9b68f09c8f5ddb20b4ae08b4d9df548e5ed6cd47b91a4bea8b6aa52edf64576aef1e43f2958437fdc20fbbd0d4e13d8cce1193b2f9b4f107e25af178d056e1b1e40bd75b013f7484fae0bc447b1ffaf34819fe3ad1a634c94345e26e1e68dec08723a37b05d1594a66a4718a51d4d67fc880c9d640f4eacc509873f1a103c87f69"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000340)='kfree\x00', r4}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./control\x00', 0x480, &(0x7f0000000000), 0x1, 0x786, &(0x7f0000000f80)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) chdir(&(0x7f0000000000)='./file0\x00') link(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000008000000000000000000fc8c030aa554cbf0"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000ac0)={r5, r6}, 0xc) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 2.009300533s ago: executing program 2 (id=8428): r0 = gettid() r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMIWAIT(r1, 0x545c, 0x200000000000000) timer_create(0x0, &(0x7f0000000580)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) ioctl$TIOCMSET(r1, 0x5418, &(0x7f00000002c0)=0x8) r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x4401e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8000000000000000}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$BTRFS_IOC_QUOTA_CTL(r2, 0xc0109428, &(0x7f00000001c0)={0x3, 0x6}) r3 = syz_open_dev$usbfs(0x0, 0x77, 0x141301) ioctl$USBDEVFS_CONTROL(r3, 0xc0105500, &(0x7f00000000c0)={0x80, 0x17, 0x6, 0x3, 0x0, 0x6e9, 0x0}) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00'}) socket$nl_route(0x10, 0x3, 0x0) 1.84042268s ago: executing program 2 (id=8429): r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000440)="5800000014001d2340834b80040d8d560a067ee500ff000000000000000058000b4824ca945f64009400140425010ebc000000000000008000f0fffeffe809005300fff5dd8000001000010008", 0x4d}], 0x1) 1.788404643s ago: executing program 2 (id=8431): r0 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = open(&(0x7f0000000000)='./file0\x00', 0x10000, 0x40) getdents(r3, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) request_key(&(0x7f0000000180)='user\x00', &(0x7f0000000200)={'syz', 0x3}, &(0x7f0000000280)='\xa9\x1c)\x00', 0xfffffffffffffffd) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000001000)={'\x00', 0x9f4, 0x1ff, 0x8, 0x9, 0x3, r0}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4e, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x64000600) 1.309388013s ago: executing program 8 (id=8437): mknod(&(0x7f0000000180)='./file0\x00', 0x1ffa, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) creat(0x0, 0x40) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r1, &(0x7f0000000080), 0x0, 0x2}, 0x20) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x20, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) 1.213468347s ago: executing program 7 (id=8438): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0, 0x0, 0x7}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRESHEX=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08d1ca4eb6b8b4889cdd4e786eb807e04eb88b"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000003c0)='svcsock_new_socket\x00', 0xffffffffffffffff, 0x0, 0x7}, 0x18) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000", @ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@fallback=r2, 0x30, 0x0, 0x6, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000180), &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000cc0)=[0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000014c0)=ANY=[@ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="30000000eb4b1e9991d601000000", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES64=r6], 0x20) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000680)=ANY=[], 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r4, 0xe0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000a80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d00), 0x0, 0x4f, &(0x7f0000000380), 0x0, 0x10, &(0x7f0000000600), &(0x7f0000000740), 0x8, 0xd3, 0x8, 0x8, &(0x7f0000000840)}}, 0x10) bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r5, 0x113, 0x2, &(0x7f00000004c0)=0x0, &(0x7f0000000a40)=0x4) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000500)=ANY=[@ANYRES32=r7, @ANYRES32, @ANYBLOB='!\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r1, @ANYBLOB="2ebbbfddda0202b961350960a9c1d970235ebf41f728d312cee0cd87918c1f263c78f3fabcdee0a07cc09105f3f024059dfa2265986b5da40bff779714e8d0738540802173797e3f790706000000210cd1a84e264326ef8a8ba71c929a3867d4547cdf61074fedc492815d137826eb15bd6ee404cb7c1dde1bfc1ed166a3aac9eee8c1391ff17e2bc61d97255b89341e9c0a178c2240bcdd998ac16ade", @ANYRES64=r6], 0x20) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000d40)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB='3\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="ae58f38ce076f874523023bf53f4901de9545d8aab5e3e3d222b6a4e55b18c7e4160599bc789691ca854a0ab63c52e81ea39d6c95dd0875bd9d4eebc5cf08716209828bfc7dc919b6517cf5835234a70ae25c924d984ab2ed4", @ANYRES64=r6], 0x20) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000d00)=ANY=[@ANYRES32=r9, @ANYRES32=r0, @ANYBLOB="0500000000000000", @ANYRES32=r0, @ANYBLOB="65e1b8a3f573ae8090", @ANYRES32=r0, @ANYBLOB, @ANYRES64=r6], 0x20) openat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x4280, 0x24) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) getpriority(0x1, 0x0) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r11 = ioctl$LOOP_CTL_GET_FREE(r10, 0x4c82) r12 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="f6000000", @ANYRES16=r12, @ANYBLOB="00032cbd7000ffdbdf25010000000c000300520e0000000000000c0004003304000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x6000000}, 0x800) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x8, 0x12, &(0x7f0000000680)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xeca, 0x0, 0x0, 0x0, 0x7ff}, @initr0={0x18, 0x0, 0x0, 0x0, 0x17, 0x0, 0x0, 0x0, 0x10001}, @jmp={0x5, 0x1, 0x7, 0xa, 0x6, 0x4, 0xfffffffffffffffc}, @call={0x85, 0x0, 0x0, 0x3}, @alu={0x4, 0x0, 0xade061553e2c9bdf, 0x6, 0x7, 0x8, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @call={0x85, 0x0, 0x0, 0x4e}, @call={0x85, 0x0, 0x0, 0x62}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}], &(0x7f00000005c0)='GPL\x00', 0x9, 0xb4, &(0x7f0000000ac0)=""/180, 0x41000, 0x8, '\x00', r7, @cgroup_skb=0x1, r5, 0x8, &(0x7f00000009c0)={0x9, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, r5, 0x8, &(0x7f0000000a00)=[r5, r5, r5, r8], &(0x7f0000000b80)=[{0x4, 0x5, 0x9, 0x7}, {0x2, 0x1, 0x0, 0x6}, {0x2, 0x4, 0x6, 0x7}, {0x0, 0x2, 0xe, 0x7}, {0x5, 0x2, 0xc, 0x3}, {0x2, 0x2, 0xf, 0xa}, {0x3, 0x5, 0x3, 0xc}, {0x3, 0x5, 0x1, 0x9}]}, 0x94) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) 894.894672ms ago: executing program 2 (id=8439): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r3, 0x0, 0x9}, 0x18) prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98<\xc8\x18E/\x8c\x1a\xe3\xbd') r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000340)='kfree\x00', r4}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./control\x00', 0x480, &(0x7f0000000000), 0x1, 0x786, &(0x7f0000000f80)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) chdir(&(0x7f0000000000)='./file0\x00') link(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000008000000000000000000fc8c030aa554cbf0"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 794.748806ms ago: executing program 4 (id=8440): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r1, 0x13) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xe, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000140)='kmem_cache_free\x00', r2, 0x0, 0x6}, 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x24, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r3, 0x0, 0xfffffffffffffffd}, 0x18) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x18) lsm_get_self_attr(0x66, &(0x7f0000001280)={0x0, 0x0, 0x3d, 0x1d, ""/29}, &(0x7f00000012c0)=0x3d, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r6, 0x891a, &(0x7f0000000000)={'veth1_virt_wifi\x00', {0x2, 0x4e22, @broadcast}}) r7 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r7, 0x65, 0x1, 0x0, 0xf00) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r8, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) r9 = socket$kcm(0x2, 0x5, 0x0) r10 = syz_io_uring_complete(0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000940)={r8, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0], 0x0, 0xee, &(0x7f00000005c0)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f00000006c0), &(0x7f00000007c0), 0x8, 0x8b, 0x8, 0x8, &(0x7f0000000800)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x13, 0x15, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xe}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x80000000}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x80000001}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6e08, 0x0, 0x0, 0x0, 0x6}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x43}}}, &(0x7f00000000c0)='GPL\x00', 0x6, 0xe6, &(0x7f0000000380)=""/230, 0x41100, 0x54, '\x00', 0x0, @fallback=0x1, r10, 0x8, &(0x7f0000000100)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000000480)={0x5, 0x6, 0x9, 0xb}, 0x10, r11, r2, 0x4, &(0x7f0000000980)=[r0, r0], &(0x7f00000009c0)=[{0x5, 0x2, 0x0, 0xa}, {0x2, 0x5, 0xb, 0x2}, {0x1, 0x4, 0x6, 0x4}, {0x4, 0x3, 0xa, 0xc}], 0x10, 0x9a}, 0x94) sendmsg$inet(r9, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000140)="9f", 0x1}], 0x1}, 0x3e8) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000020000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000340)='kmem_cache_free\x00', r12}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) mkdir(&(0x7f0000000000)='./control\x00', 0x81) 640.704192ms ago: executing program 4 (id=8441): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018030000000000007c0000007c00000002000000000000000000000e0000000000000000000000000600000d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c00000000000000000000000900000000000000000000000900000000"], 0x0, 0x96}, 0x28) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0x0, 0x0, 0x0, 0x4, 0x0, 0x8000000}]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={r3, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001000), 0x8, 0x0, 0x8, 0x0, 0x0}}, 0x10) 435.359431ms ago: executing program 4 (id=8442): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0x6]}, 0x8, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) syz_emit_ethernet(0x4e, &(0x7f0000000380)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dc58c", 0x18, 0x6, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, @local, {[], {{0x4e21, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0xfffd, 0x0, 0x0, {[@window={0x3, 0x3, 0x2}]}}}}}}}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)={0x60, r2, 0x405, 0x70bd27, 0x25dfdbff, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x24, 0x4, 'broadcast\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000431}, 0x4040084) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0xf) r5 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r5, &(0x7f0000000040), 0x10) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x10000}) listen(r5, 0x5) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000240), r6) r7 = socket(0x28, 0x5, 0x0) setrlimit(0x40000000000008, &(0x7f0000000000)) connect$vsock_stream(r7, &(0x7f0000000080), 0x10) sendmsg$nl_route_sched(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=@getchain={0x24, 0x66, 0x8, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xfff1}, {0x0, 0x1}, {0xd, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x4004885}, 0x40004) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), r1) sendmsg$L2TP_CMD_NOOP(r6, &(0x7f0000000540)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x3c, r8, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x9}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @private=0xa010102}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5}]}, 0x3c}}, 0x40000) r9 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r9, 0x89f2, &(0x7f00000001c0)={'ip6_vti0\x00', &(0x7f0000000140)={'syztnl1\x00', 0x0, 0x2d, 0x3, 0xfd, 0xfff, 0x11, @empty, @empty, 0x20, 0x7, 0x40, 0x6}}) setsockopt$sock_linger(r7, 0x1, 0x3c, &(0x7f00000000c0)={0x1, 0x79e}, 0x8) sendmmsg(r7, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) listen(r0, 0x43) syz_emit_ethernet(0x101b, &(0x7f0000000580)={@random="d1f1f8fac714", @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @val={@void, {0x8100, 0x1, 0x0, 0x2}}, {@llc_tr={0x11, {@snap={0x0, 0xaa, "8f38", "0c2ec5", 0x1b09, "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"}}}}}, 0x0) 375.723014ms ago: executing program 4 (id=8443): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) process_vm_writev(0x0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/232, 0xe8}, {&(0x7f0000000180)=""/110, 0x6e}], 0x10000000000002eb, &(0x7f00000003c0), 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0xa1, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) 304.873967ms ago: executing program 6 (id=8444): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001f80)={0x18, 0x52, 0x1, 0x70bd2c, 0x0, {0xb}, [@nested={0x4, 0x1}]}, 0x18}}, 0x0) socket(0x10, 0x3, 0x0) (async) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001f80)={0x18, 0x52, 0x1, 0x70bd2c, 0x0, {0xb}, [@nested={0x4, 0x1}]}, 0x18}}, 0x0) (async) 227.5607ms ago: executing program 6 (id=8445): r0 = syz_io_uring_setup(0x18d6, &(0x7f0000000040)={0x0, 0x3, 0x800, 0xfffffffc, 0xad}, &(0x7f0000000440), &(0x7f0000000500)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x2, 0x0, 0xfe) 186.237612ms ago: executing program 4 (id=8446): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0), 0xc7) 169.779772ms ago: executing program 6 (id=8447): r0 = socket$nl_generic(0x11, 0x3, 0x10) sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c", 0xb}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) 157.984013ms ago: executing program 4 (id=8448): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x2}, {0x6, 0x0, 0x0, 0x2}]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000006c0)={"f03b46f3db63020e65cba48224c3a74d", 0x0, 0x0, {0x5}, {0x81}, 0x1, [0x7, 0x7, 0xfffffffffffffffe, 0x7fff, 0x7, 0xd, 0x3ff, 0x1, 0x81, 0x1, 0x101, 0xfff, 0x1ff, 0x100, 0x367, 0x4]}) socket$kcm(0x10, 0x2, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000fc0)={{}, r0, 0x0, @inherit={0x78, &(0x7f0000000800)={0x1, 0x6, 0xf4, 0x0, {0x1, 0x1, 0x8, 0x2, 0xbbe9}, [0xfff, 0xd, 0x6dd8, 0xfffffffffffffff7, 0xffffffff, 0x5]}}, @devid}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r2, {0x10, 0x4}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 109.539796ms ago: executing program 6 (id=8449): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=@deltclass={0x24, 0x29, 0x2, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}, {0xb, 0xfff3}, {0xffff, 0x9}}}, 0x24}}, 0x74000800) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c000100040000000200", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0xb4}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 109.110016ms ago: executing program 6 (id=8450): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a38500000070000000"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r0, 0x0, 0x2}, 0x18) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r1, &(0x7f0000000780)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', &(0x7f00000000c0)=""/43, 0x2b, 0x0, 0x0, 0x0, 0x801}}, 0x120) 66.207027ms ago: executing program 8 (id=8451): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000880)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000009500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='sys_enter\x00'}, 0x10) tgkill(0x0, 0x0, 0x21) 12.70171ms ago: executing program 8 (id=8452): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000300"/15], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x103, 0x100, 0x551}}) syz_io_uring_setup(0x205a, &(0x7f0000000200)={0x0, 0x9bee, 0x20, 0x3, 0x330}, &(0x7f0000000340), &(0x7f0000000480)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="8fedcb5d07081175f37538e486dd"], 0xfdef) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x10000, &(0x7f0000000640), 0x1, 0x5c5, &(0x7f0000001a00)="$eJzs3VuIXHcdB/Dfmd1Jc9mai63aGpvVUFso3dlsNiERHyzxUmtSK4oPoRCW7HQ3ZHZnzW6gOxVM8UUURPBFBKFiH6yIBvJSKbV9aPFFQakXKhoDKohQtFIQQZ3yn8t22pw0pXs5JOfzgTP7P/9zZv7/2eE755w5twBKazQ9ZBEjEXEhIrZ3R18/w2j3T2v/+dk0ZNFuf/YfWWe+6f3nZ/uz9p+3LT0MR2yOiF1HsthbvbzdxeXW6alGo36mN15bmluoLS637j41NzVTn6nPHzg0eXji4OShybV7r+O/2HrzX2+//9Ljz/37v9/53cEfpf6O9KYNvo+1Mhqjvf9JNXYO1A9nEfetdWMFGep+1HH7QF02XGCHeMva7V0/TJ/fOyNibyf/22Mouh/ei089+K/t8Zt7i+4jsH7affmTX24Pqg4+AbjWVTrrwFllLCK65UplbKy7Dn9TbK00motLdz3UPDs/3V1X3hHVykOnGvXx3rbCjqhmaXxfp/za+MQbxvdHdNaBvzK0pTM+drLZmN7oLzugYyTi4oUvnNy07Q35/9tQN//A9Svl/9fPP/lMKr8yVHRvgI2U8v+DV+Y+FfIPpSP/UF7yD+Ul/1Be8g/lJf9QXvIP5SX/UF7yD+Ul/1Be/fw/cOxYPHDsWLvVO/99vjlz6vTswuGJ8bG5syfHTjbPLIzNNJsznTN25q7+uo1mc2HfRJx9uLZUX1yqLS63Tsw1z84vneic13+innMpAKAAxy9tvm/nnmdfzCLi3Ie2dIZkU2+6rML1rd3OnNIPJWXTH8rLpdqgvGzjA9lVpm++0oTG2vcF2BiVojsAFOaOW+z/g7Ly+z+Ul9//obze7jp+FnFujbsCFMTv/1A+fv+H8hq5wv2/bhy4d9d4RLwjIn4+VL2hf68v4Jryuk39kYiLF7/3+drKfbgVFBQUVgrFfVEBG+O10BfdE6Ao0/vPz/aHjWrz6ZmNagnI89I93YOAUu5bvaE7ZXhl30B1nY4T2nlbevzJHx+7c3YoDdH7HlqHpoAc5x6NiPfkLf+zzr6BHb35dnVni5si4uaIeFdEvHuVbX/rMxGj8Xx9sE7+YeO81fzfEhFpcX1rRLw3InZHxPtW2favLqT8/3bLYJ38Qzl88bmiewAU5ZNPFt0DoCjHHWMApfX9R4ruAVCUp35cdA+Aonz9haJ7AOX27D0RMZ63/6/S2d/fV+1dF/CG3rUAtkTE1ojY1juH8MbeOYLbB/YZXs2JT0eMxm0/Hayz/w82Tv/4v9Zlx/9VVo7/G4qIPato4+kPj3wtr35qd8r/44/0j/9LQ2q/fywgsL5eejTi1tz8ZyvH/GaRchrx/rfZxuiXLj2RV//C/el1q7+UfyhG+7sRH4z8/PelUm1pbqG2uNy6u3Mf75n6/IFDk4cnDk4emqx1LhFS618oJMfRf758V179HyZS/r99QP6hGGn5v/UK+R9c///AKto48s2vHs+rH/lzyv/uZ948/5W/b8o+1xnv35fg4amlpTP7IjZlRy+vn1hFR+E6189IP0Mp/3fuzd/+39V7Tlr+H4mIj6b1hYj4X0T8PyI+FhEfj4hPRMS9b9LmN+6YuZRX/6cnUv4fO235D8VI+Z++yvI//f3PKtrYHD/7cl79R/ak/I/9/i9HHxxOg/wDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAArL3F5dbpqUajfmYdC0W/RwAAAAAAACiLVwMAAP//Oacv4Q==") mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1809000000000000000000000001000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000070000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r2, &(0x7f0000000780)}, 0x20) 11.92906ms ago: executing program 2 (id=8453): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000400)='kfree\x00', r0}, 0x18) socket$xdp(0x2c, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0xb, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000006c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, 0x0, 0x0) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r4, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r5, 0x0, 0x40000000000000}, 0x18) recvfrom$inet(r4, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000400850000008200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x359}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, &(0x7f0000000140)) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r8, 0x421, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0xc35d4f6d52288271}, 0x200048c4) 0s ago: executing program 6 (id=8454): sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000200)="0aa82c73be04a95d", 0x8}], 0x1, 0x0, 0xb8, 0x8081}, 0x4080) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000058000000030a0102000000000000000001000000090003803d2175fbe782c2002c00048008000240172af2e40800014000000003080002401c791e7108000240423930ce08000140000000030900010073797a300000000088000000060a010400000000000000000100000008000b400000000014000480100001800b0001006e756d67656e00000900010073797a30000000004c0004804800018008000100666962003c000280080003400000000c08000140000000020800014000000030080002"], 0x122}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="000000000000000050020c8013000c800ca3488008000000000000000800038064001d80050006000000000014000500714abbd2547de97cbbf6efb226f19bf90d0002003a288e5e5b5b5a40000000006000078014000400293a02149f3b75a67093c28fd6f55a2314000400e48f01e49713f0c2d8"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) kernel console output (not intermixed with test programs): [T26449] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 360.685758][T26481] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 360.698456][T26475] lo speed is unknown, defaulting to 1000 [ 360.702280][T26481] vhci_hcd vhci_hcd.0: Device attached [ 360.708048][T23929] usb 15-1: new full-speed USB device number 6 using vhci_hcd [ 360.722388][T26471] vhci_hcd: connection closed [ 360.722896][T26468] vhci_hcd: connection closed [ 360.727747][T26464] vhci_hcd: connection closed [ 360.732717][T26460] vhci_hcd: connection closed [ 360.748248][T26461] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 360.758897][ T2082] vhci_hcd vhci_hcd.7: stop threads [ 360.764093][ T2082] vhci_hcd vhci_hcd.7: release socket [ 360.769571][ T2082] vhci_hcd vhci_hcd.7: disconnect device [ 360.777006][T26449] EXT4-fs error (device loop6): __ext4_get_inode_loc:4830: comm syz.6.7836: Invalid inode table block 1 in block_group 0 [ 360.790794][T26467] vhci_hcd vhci_hcd.0: pdev(8) rhport(5) sockfd(12) [ 360.797384][T26467] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 360.798830][ T2082] vhci_hcd vhci_hcd.7: stop threads [ 360.805026][T26467] vhci_hcd vhci_hcd.0: Device attached [ 360.815704][ T2082] vhci_hcd vhci_hcd.7: release socket [ 360.821185][ T2082] vhci_hcd vhci_hcd.7: disconnect device [ 360.827046][ T36] vhci_hcd vhci_hcd.8: vhci_device speed not set [ 360.827821][T26449] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 360.850817][ T2082] vhci_hcd vhci_hcd.7: stop threads [ 360.856052][ T2082] vhci_hcd vhci_hcd.7: release socket [ 360.861532][ T2082] vhci_hcd vhci_hcd.7: disconnect device [ 360.872399][T26484] vhci_hcd: connection closed [ 360.872511][T26482] vhci_hcd: connection closed [ 360.877607][T26478] vhci_hcd: connection closed [ 360.877802][T26449] EXT4-fs error (device loop6): ext4_quota_off:7270: inode #3: comm syz.6.7836: mark_inode_dirty error [ 360.882354][T26473] vhci_hcd: connection closed [ 360.886999][ T2082] vhci_hcd vhci_hcd.7: stop threads [ 360.898317][ T36] usb 17-1: new full-speed USB device number 7 using vhci_hcd [ 360.902684][ T2082] vhci_hcd vhci_hcd.7: release socket [ 360.902728][ T2082] vhci_hcd vhci_hcd.7: disconnect device [ 360.926525][ T2082] vhci_hcd vhci_hcd.8: stop threads [ 360.931857][ T2082] vhci_hcd vhci_hcd.8: release socket [ 360.937364][ T2082] vhci_hcd vhci_hcd.8: disconnect device [ 360.957154][T26474] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 360.979574][ T2082] vhci_hcd vhci_hcd.8: stop threads [ 360.984955][ T2082] vhci_hcd vhci_hcd.8: release socket [ 360.990376][ T2082] vhci_hcd vhci_hcd.8: disconnect device [ 361.017355][ T2082] vhci_hcd vhci_hcd.8: stop threads [ 361.022614][ T2082] vhci_hcd vhci_hcd.8: release socket [ 361.028032][ T2082] vhci_hcd vhci_hcd.8: disconnect device [ 361.054028][ T2082] vhci_hcd vhci_hcd.8: stop threads [ 361.059271][ T2082] vhci_hcd vhci_hcd.8: release socket [ 361.064663][ T2082] vhci_hcd vhci_hcd.8: disconnect device [ 361.179657][T26489] lo speed is unknown, defaulting to 1000 [ 361.228513][T26449] netlink: 60 bytes leftover after parsing attributes in process `syz.6.7836'. [ 361.237494][T26449] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7836'. [ 361.296699][T24786] hid-generic 0000:0000:0000.000F: hidraw0: HID v8.01 Device [syz0] on syz0 [ 361.379570][T26497] validate_nla: 1 callbacks suppressed [ 361.379584][T26497] netlink: 'syz.7.7844': attribute type 39 has an invalid length. [ 361.560281][T26512] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7851'. [ 361.575391][T26512] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 362.374353][T26521] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7853'. [ 362.388665][T26521] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 362.681102][T26527] loop4: detected capacity change from 0 to 512 [ 362.701539][T26527] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 362.744327][T26531] 9p: Could not find request transport: fd00000000000000000003 [ 362.758625][T26527] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 362.810972][T20332] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 363.452544][T26546] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7854'. [ 363.461627][T26546] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 363.949796][T26539] lo speed is unknown, defaulting to 1000 [ 364.203179][ T29] kauditd_printk_skb: 104 callbacks suppressed [ 364.203193][ T29] audit: type=1326 audit(364.178:13692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26550 comm="syz.7.7862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1eba13f749 code=0x7ffc0000 [ 364.249512][ T8328] hid-generic 0000:0000:0000.0010: hidraw0: HID v8.01 Device [syz0] on syz0 [ 364.332120][ T29] audit: type=1326 audit(364.208:13693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26550 comm="syz.7.7862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1eba13f749 code=0x7ffc0000 [ 364.355205][ T29] audit: type=1326 audit(364.208:13694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26550 comm="syz.7.7862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1eba13f749 code=0x7ffc0000 [ 364.378186][ T29] audit: type=1326 audit(364.208:13695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26551 comm="syz.4.7864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b6428f749 code=0x7ffc0000 [ 364.401212][ T29] audit: type=1326 audit(364.208:13696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26551 comm="syz.4.7864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9b6428f749 code=0x7ffc0000 [ 364.424081][ T29] audit: type=1326 audit(364.208:13697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26551 comm="syz.4.7864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b6428f749 code=0x7ffc0000 [ 364.447310][ T29] audit: type=1326 audit(364.208:13698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26551 comm="syz.4.7864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b6428f749 code=0x7ffc0000 [ 364.470338][ T29] audit: type=1326 audit(364.208:13699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26551 comm="syz.4.7864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f9b6428f749 code=0x7ffc0000 [ 364.493281][ T29] audit: type=1326 audit(364.208:13700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26551 comm="syz.4.7864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b6428f749 code=0x7ffc0000 [ 364.516233][ T29] audit: type=1326 audit(364.208:13701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26551 comm="syz.4.7864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b6428f749 code=0x7ffc0000 [ 364.518193][T26558] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7866'. [ 364.601969][T26560] lo speed is unknown, defaulting to 1000 [ 364.843320][T26568] 9p: Could not find request transport: fd00000000000000000003 [ 364.893885][T26571] loop4: detected capacity change from 0 to 512 [ 364.923039][T26556] Set syz1 is full, maxelem 65536 reached [ 364.952903][T26571] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 364.986183][T26571] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 365.012701][T20332] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 365.161017][T26581] lo speed is unknown, defaulting to 1000 [ 365.168815][T26586] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7874'. [ 365.187171][T26586] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 365.276741][T26590] netlink: 'syz.7.7875': attribute type 3 has an invalid length. [ 365.564694][T26596] loop6: detected capacity change from 0 to 512 [ 365.605177][T26596] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 365.753631][T23385] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 365.794925][T26604] loop6: detected capacity change from 0 to 512 [ 365.801447][T23929] usb 15-1: enqueue for inactive port 0 [ 365.811375][T23929] usb 15-1: enqueue for inactive port 0 [ 365.832157][T26604] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 365.924541][T23929] vhci_hcd vhci_hcd.7: vhci_device speed not set [ 365.945932][T26604] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 366.024663][T26612] 9p: Could not find request transport: fd00000000000000000003 [ 366.038144][ T36] usb 17-1: enqueue for inactive port 0 [ 366.058209][ T36] usb 17-1: enqueue for inactive port 0 [ 366.091339][T23385] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 366.108326][T26594] netlink: 48 bytes leftover after parsing attributes in process `syz.2.7878'. [ 366.125024][T26594] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 366.144331][T26594] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=26594 comm=syz.2.7878 [ 366.161684][T26594] SELinux: security_context_str_to_sid () failed with errno=-22 [ 366.169581][ T36] vhci_hcd vhci_hcd.8: vhci_device speed not set [ 366.170728][T26617] loop7: detected capacity change from 0 to 1024 [ 366.186407][T26619] loop6: detected capacity change from 0 to 512 [ 366.204809][T26617] EXT4-fs: inline encryption not supported [ 366.210762][T26617] EXT4-fs: Ignoring removed i_version option [ 366.221173][T26619] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 366.246139][T26617] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 366.260762][T26619] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 366.288100][T26617] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #3: block 2: comm syz.7.7886: lblock 2 mapped to illegal pblock 2 (length 1) [ 366.310571][T23385] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 366.324123][T26617] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #3: block 48: comm syz.7.7886: lblock 0 mapped to illegal pblock 48 (length 1) [ 366.343462][T26617] EXT4-fs error (device loop7): ext4_acquire_dquot:6986: comm syz.7.7886: Failed to acquire dquot type 0 [ 366.356215][T26617] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 366.379075][T26617] EXT4-fs error (device loop7): ext4_evict_inode:253: inode #11: comm syz.7.7886: mark_inode_dirty error [ 366.392705][T26617] EXT4-fs warning (device loop7): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 366.402999][T26617] EXT4-fs (loop7): 1 orphan inode deleted [ 366.409263][T26617] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 366.421438][T20835] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:14: lblock 1 mapped to illegal pblock 1 (length 1) [ 366.436627][T20835] EXT4-fs error (device loop7): ext4_release_dquot:7022: comm kworker/u8:14: Failed to release dquot type 0 [ 366.449310][T26617] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 366.458985][T26617] EXT4-fs error (device loop7): __ext4_get_inode_loc:4830: comm syz.7.7886: Invalid inode table block 1 in block_group 0 [ 366.471833][T26617] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 366.496078][T26617] EXT4-fs error (device loop7): ext4_quota_off:7270: inode #3: comm syz.7.7886: mark_inode_dirty error [ 366.516798][T26629] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7888'. [ 366.544862][T26634] loop8: detected capacity change from 0 to 512 [ 366.649961][T26634] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 366.769325][T26639] netlink: 60 bytes leftover after parsing attributes in process `syz.7.7886'. [ 366.778385][T26639] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7886'. [ 367.301371][T26645] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(7) [ 367.307920][T26645] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 367.315488][T26645] vhci_hcd vhci_hcd.0: Device attached [ 367.324144][T26645] vhci_hcd vhci_hcd.0: pdev(7) rhport(1) sockfd(9) [ 367.330673][T26645] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 367.338251][T26645] vhci_hcd vhci_hcd.0: Device attached [ 367.345158][T26645] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 367.353761][T26645] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 367.363231][T26645] vhci_hcd vhci_hcd.0: pdev(7) rhport(4) sockfd(15) [ 367.369864][T26645] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 367.377457][T26645] vhci_hcd vhci_hcd.0: Device attached [ 367.405913][T26654] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 367.413971][T26645] vhci_hcd vhci_hcd.0: pdev(7) rhport(5) sockfd(17) [ 367.421005][T26645] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 367.428645][T26645] vhci_hcd vhci_hcd.0: Device attached [ 367.448211][T26658] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7891'. [ 367.462168][T26658] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 367.476348][T26659] vhci_hcd: connection closed [ 367.476374][T26651] vhci_hcd: connection closed [ 367.481365][T26649] vhci_hcd: connection closed [ 367.489912][T26647] vhci_hcd: connection closed [ 367.498077][ T1085] vhci_hcd vhci_hcd.7: stop threads [ 367.507947][ T1085] vhci_hcd vhci_hcd.7: release socket [ 367.513392][ T1085] vhci_hcd vhci_hcd.7: disconnect device [ 367.546070][ T1085] vhci_hcd vhci_hcd.7: stop threads [ 367.551382][ T1085] vhci_hcd vhci_hcd.7: release socket [ 367.556894][ T1085] vhci_hcd vhci_hcd.7: disconnect device [ 367.562650][T23929] vhci_hcd vhci_hcd.7: vhci_device speed not set [ 367.570174][ T1085] vhci_hcd vhci_hcd.7: stop threads [ 367.575438][ T1085] vhci_hcd vhci_hcd.7: release socket [ 367.580852][ T1085] vhci_hcd vhci_hcd.7: disconnect device [ 367.587498][T26671] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(5) [ 367.594029][T26671] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 367.601537][T26671] vhci_hcd vhci_hcd.0: Device attached [ 367.615034][T26676] vhci_hcd vhci_hcd.0: pdev(8) rhport(1) sockfd(8) [ 367.621616][T26676] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 367.629160][T26676] vhci_hcd vhci_hcd.0: Device attached [ 367.634914][T23929] usb 15-1: new full-speed USB device number 7 using vhci_hcd [ 367.642743][T26648] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 367.660050][T26671] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 367.677368][T26677] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5121 sclass=netlink_route_socket pid=26677 comm=syz.2.7902 [ 367.690787][ T1085] vhci_hcd vhci_hcd.7: stop threads [ 367.696042][ T1085] vhci_hcd vhci_hcd.7: release socket [ 367.701553][ T1085] vhci_hcd vhci_hcd.7: disconnect device [ 367.708925][T26671] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 367.720499][T26671] vhci_hcd vhci_hcd.0: pdev(8) rhport(4) sockfd(10) [ 367.727107][T26671] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 367.734742][T26671] vhci_hcd vhci_hcd.0: Device attached [ 367.743251][T26671] vhci_hcd vhci_hcd.0: pdev(8) rhport(5) sockfd(15) [ 367.749863][T26671] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 367.757487][T26671] vhci_hcd vhci_hcd.0: Device attached [ 367.769522][T26682] vhci_hcd: connection closed [ 367.769671][T21279] vhci_hcd vhci_hcd.8: stop threads [ 367.779585][T21279] vhci_hcd vhci_hcd.8: release socket [ 367.784958][T21279] vhci_hcd vhci_hcd.8: disconnect device [ 367.799134][T26680] vhci_hcd: connection closed [ 367.799438][T26678] vhci_hcd: connection closed [ 367.810800][T26672] vhci_hcd: connection closed [ 367.818031][T21279] vhci_hcd vhci_hcd.8: stop threads [ 367.827960][T21279] vhci_hcd vhci_hcd.8: release socket [ 367.833358][T21279] vhci_hcd vhci_hcd.8: disconnect device [ 367.840265][T21279] vhci_hcd vhci_hcd.8: stop threads [ 367.845538][T21279] vhci_hcd vhci_hcd.8: release socket [ 367.850981][T21279] vhci_hcd vhci_hcd.8: disconnect device [ 367.858065][ T36] vhci_hcd vhci_hcd.8: vhci_device speed not set [ 367.874944][T26668] Set syz1 is full, maxelem 65536 reached [ 367.881159][T21279] vhci_hcd vhci_hcd.8: stop threads [ 367.886378][T21279] vhci_hcd vhci_hcd.8: release socket [ 367.891808][T21279] vhci_hcd vhci_hcd.8: disconnect device [ 367.914099][T26690] vhci_hcd vhci_hcd.3: default hub control req: 8013 v0000 i0000 l31125 [ 367.928345][ T36] usb 17-1: new full-speed USB device number 8 using vhci_hcd [ 367.931491][T26690] can: request_module (can-proto-0) failed. [ 367.935853][ T36] usb 17-1: enqueue for inactive port 0 [ 367.943732][T26690] netlink: 16 bytes leftover after parsing attributes in process `syz.6.7905'. [ 367.956317][ T36] usb 17-1: enqueue for inactive port 0 [ 367.963896][T26690] netlink: 'syz.6.7905': attribute type 10 has an invalid length. [ 367.965397][ T36] usb 17-1: enqueue for inactive port 0 [ 368.026289][T26697] netlink: 'syz.7.7908': attribute type 12 has an invalid length. [ 368.034193][T26697] netlink: 'syz.7.7908': attribute type 29 has an invalid length. [ 368.042367][T26697] netlink: 'syz.7.7908': attribute type 1 has an invalid length. [ 368.050088][T26697] netlink: 252 bytes leftover after parsing attributes in process `syz.7.7908'. [ 368.059219][T26697] bridge0: port 1(bridge_slave_0) entered disabled state [ 368.068290][ T36] vhci_hcd vhci_hcd.8: vhci_device speed not set [ 368.381229][T26707] loop4: detected capacity change from 0 to 512 [ 368.746504][T26707] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 368.907777][T26722] loop6: detected capacity change from 0 to 512 [ 368.915328][T26722] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 368.944092][T26726] vhci_hcd vhci_hcd.3: default hub control req: 8013 v0000 i0000 l31125 [ 368.980356][T26726] can: request_module (can-proto-0) failed. [ 368.986747][T26726] __nla_validate_parse: 1 callbacks suppressed [ 368.986758][T26726] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7918'. [ 369.019757][T26726] netlink: 'syz.4.7918': attribute type 10 has an invalid length. [ 369.059126][T26729] netlink: 592 bytes leftover after parsing attributes in process `syz.6.7919'. [ 369.093482][T26731] netlink: 'syz.2.7920': attribute type 12 has an invalid length. [ 369.101364][T26731] netlink: 'syz.2.7920': attribute type 29 has an invalid length. [ 369.109292][T26731] netlink: 'syz.2.7920': attribute type 1 has an invalid length. [ 369.116998][T26731] netlink: 252 bytes leftover after parsing attributes in process `syz.2.7920'. [ 369.173851][T26720] Set syz1 is full, maxelem 65536 reached [ 369.194805][T26739] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7924'. [ 369.229573][T26745] FAULT_INJECTION: forcing a failure. [ 369.229573][T26745] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 369.242786][T26745] CPU: 1 UID: 0 PID: 26745 Comm: syz.8.7927 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 369.242864][T26745] Tainted: [W]=WARN [ 369.242870][T26745] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 369.242883][T26745] Call Trace: [ 369.242893][T26745] [ 369.242902][T26745] __dump_stack+0x1d/0x30 [ 369.242927][T26745] dump_stack_lvl+0xe8/0x140 [ 369.242948][T26745] dump_stack+0x15/0x1b [ 369.242966][T26745] should_fail_ex+0x265/0x280 [ 369.243038][T26745] should_fail+0xb/0x20 [ 369.243055][T26745] should_fail_usercopy+0x1a/0x20 [ 369.243075][T26745] _copy_from_iter+0xcf/0xe70 [ 369.243100][T26745] ? __alloc_skb+0x3bb/0x4d0 [ 369.243123][T26745] ? __alloc_skb+0x24d/0x4d0 [ 369.243228][T26745] netlink_sendmsg+0x471/0x6b0 [ 369.243307][T26745] ? __pfx_netlink_sendmsg+0x10/0x10 [ 369.243338][T26745] __sock_sendmsg+0x145/0x180 [ 369.243371][T26745] ____sys_sendmsg+0x31e/0x4a0 [ 369.243442][T26745] ___sys_sendmsg+0x17b/0x1d0 [ 369.243482][T26745] __x64_sys_sendmsg+0xd4/0x160 [ 369.243513][T26745] x64_sys_call+0x17ba/0x3000 [ 369.243561][T26745] do_syscall_64+0xd8/0x2a0 [ 369.243588][T26745] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.243633][T26745] RIP: 0033:0x7f03b00ff749 [ 369.243650][T26745] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 369.243669][T26745] RSP: 002b:00007f03aeb67038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 369.243709][T26745] RAX: ffffffffffffffda RBX: 00007f03b0355fa0 RCX: 00007f03b00ff749 [ 369.243721][T26745] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 369.243735][T26745] RBP: 00007f03aeb67090 R08: 0000000000000000 R09: 0000000000000000 [ 369.243748][T26745] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 369.243763][T26745] R13: 00007f03b0356038 R14: 00007f03b0355fa0 R15: 00007fffd8608798 [ 369.243782][T26745] [ 369.442996][T26747] netlink: 'syz.4.7925': attribute type 39 has an invalid length. [ 369.797585][T26757] lo speed is unknown, defaulting to 1000 [ 370.179901][ T29] kauditd_printk_skb: 126 callbacks suppressed [ 370.179986][ T29] audit: type=1326 audit(370.158:13825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26761 comm="syz.4.7931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b6428f749 code=0x7ffc0000 [ 370.234101][T23710] hid_parser_main: 106 callbacks suppressed [ 370.234117][T23710] hid-generic 0000:0000:0000.0011: unknown main item tag 0x7 [ 370.236802][ T29] audit: type=1326 audit(370.188:13826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26761 comm="syz.4.7931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b6428f749 code=0x7ffc0000 [ 370.240162][T23710] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 370.247504][ T29] audit: type=1326 audit(370.188:13827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26761 comm="syz.4.7931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9b6428f749 code=0x7ffc0000 [ 370.271018][T23710] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 370.277805][ T29] audit: type=1326 audit(370.188:13828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26761 comm="syz.4.7931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b6428f749 code=0x7ffc0000 [ 370.277828][ T29] audit: type=1326 audit(370.188:13829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26761 comm="syz.4.7931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b6428f749 code=0x7ffc0000 [ 370.300709][T23710] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 370.308060][ T29] audit: type=1326 audit(370.188:13830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26761 comm="syz.4.7931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f9b6428f749 code=0x7ffc0000 [ 370.330964][T23710] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 370.330986][T23710] hid-generic 0000:0000:0000.0011: unknown main item tag 0x2 [ 370.331006][T23710] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 370.353969][ T29] audit: type=1326 audit(370.188:13831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26761 comm="syz.4.7931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b6428f749 code=0x7ffc0000 [ 370.353992][ T29] audit: type=1326 audit(370.188:13832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26761 comm="syz.4.7931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b6428f749 code=0x7ffc0000 [ 370.354031][ T29] audit: type=1326 audit(370.188:13833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26761 comm="syz.4.7931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f9b6428f749 code=0x7ffc0000 [ 370.361404][T23710] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 370.384226][ T29] audit: type=1326 audit(370.188:13834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26761 comm="syz.4.7931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b6428f749 code=0x7ffc0000 [ 370.391582][T23710] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 370.512923][T23710] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 370.578206][T23710] hid-generic 0000:0000:0000.0011: hidraw0: HID v8.01 Device [syz0] on syz0 [ 370.589333][T26770] vhci_hcd vhci_hcd.3: default hub control req: 8013 v0000 i0000 l31125 [ 370.610788][T26770] can: request_module (can-proto-0) failed. [ 370.617126][T26770] netlink: 16 bytes leftover after parsing attributes in process `syz.8.7933'. [ 370.629164][T26770] netlink: 'syz.8.7933': attribute type 10 has an invalid length. [ 370.650830][T26774] netlink: 252 bytes leftover after parsing attributes in process `syz.6.7935'. [ 370.660028][T26774] bridge0: port 1(bridge_slave_0) entered disabled state [ 370.669424][T26776] netlink: 40 bytes leftover after parsing attributes in process `syz.7.7934'. [ 370.683192][T26779] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7937'. [ 370.702930][T26776] loop7: detected capacity change from 0 to 1024 [ 370.703779][T26781] 9pnet_fd: Insufficient options for proto=fd [ 370.734269][T26783] loop6: detected capacity change from 0 to 1024 [ 370.742688][T26776] EXT4-fs: inline encryption not supported [ 370.748628][T26776] EXT4-fs: Ignoring removed i_version option [ 370.755733][T26783] EXT4-fs: inline encryption not supported [ 370.761676][T26783] EXT4-fs: Ignoring removed i_version option [ 370.778372][T26776] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 370.789185][T26783] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 370.810604][T26776] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #3: block 2: comm syz.7.7934: lblock 2 mapped to illegal pblock 2 (length 1) [ 370.836332][T26783] EXT4-fs error (device loop6): ext4_map_blocks:783: inode #3: block 2: comm syz.6.7939: lblock 2 mapped to illegal pblock 2 (length 1) [ 370.838571][T26776] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #3: block 48: comm syz.7.7934: lblock 0 mapped to illegal pblock 48 (length 1) [ 370.866291][T26783] EXT4-fs error (device loop6): ext4_map_blocks:783: inode #3: block 48: comm syz.6.7939: lblock 0 mapped to illegal pblock 48 (length 1) [ 370.889337][T26783] EXT4-fs error (device loop6): ext4_acquire_dquot:6986: comm syz.6.7939: Failed to acquire dquot type 0 [ 370.898091][T26776] EXT4-fs error (device loop7): ext4_acquire_dquot:6986: comm syz.7.7934: Failed to acquire dquot type 0 [ 370.911971][T26783] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 370.926415][T26776] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 370.938424][T26783] EXT4-fs error (device loop6): ext4_evict_inode:253: inode #11: comm syz.6.7939: mark_inode_dirty error [ 370.951580][T26776] EXT4-fs error (device loop7): ext4_evict_inode:253: inode #11: comm syz.7.7934: mark_inode_dirty error [ 370.964005][T26783] EXT4-fs warning (device loop6): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 371.059233][T26783] EXT4-fs (loop6): 1 orphan inode deleted [ 371.065069][T26776] EXT4-fs warning (device loop7): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 371.075834][T26776] EXT4-fs (loop7): 1 orphan inode deleted [ 371.081694][ T2232] EXT4-fs error (device loop6): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:11: lblock 1 mapped to illegal pblock 1 (length 1) [ 371.106160][ T2232] EXT4-fs error (device loop6): ext4_release_dquot:7022: comm kworker/u8:11: Failed to release dquot type 0 [ 371.125658][T26797] loop8: detected capacity change from 0 to 512 [ 371.133602][ T2232] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:11: lblock 1 mapped to illegal pblock 1 (length 1) [ 371.148726][T26797] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 371.158654][ T2232] EXT4-fs error (device loop7): ext4_release_dquot:7022: comm kworker/u8:11: Failed to release dquot type 0 [ 371.208008][T26776] EXT4-fs error (device loop7): __ext4_get_inode_loc:4830: comm syz.7.7934: Invalid inode table block 1 in block_group 0 [ 371.229488][T26783] EXT4-fs error (device loop6): __ext4_get_inode_loc:4830: comm syz.6.7939: Invalid inode table block 1 in block_group 0 [ 371.288316][T26804] lo speed is unknown, defaulting to 1000 [ 371.317254][T26776] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 371.335583][T26783] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 371.355667][T26776] EXT4-fs error (device loop7): ext4_quota_off:7270: inode #3: comm syz.7.7934: mark_inode_dirty error [ 371.367693][T26783] EXT4-fs error (device loop6): ext4_quota_off:7270: inode #3: comm syz.6.7939: mark_inode_dirty error [ 371.414247][ T9] hid-generic 0000:0000:0000.0012: hidraw0: HID v8.01 Device [syz0] on syz0 [ 371.428502][T26809] can: request_module (can-proto-0) failed. [ 371.435289][T26809] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7948'. [ 371.563461][T26818] netlink: 252 bytes leftover after parsing attributes in process `syz.8.7950'. [ 371.572560][T26818] bridge0: port 1(bridge_slave_0) entered disabled state [ 371.895723][T26832] lo speed is unknown, defaulting to 1000 [ 372.116394][T26840] loop4: detected capacity change from 0 to 512 [ 372.126247][T26840] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 372.139307][T26840] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 372.147394][T26840] EXT4-fs (loop4): failed to initialize system zone (-117) [ 372.155230][T26840] EXT4-fs (loop4): mount failed [ 372.245773][ T9] hid-generic 0000:0000:0000.0013: hidraw0: HID v8.01 Device [syz0] on syz0 [ 372.264366][T26776] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 372.282102][T26776] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=26776 comm=syz.7.7934 [ 372.295701][T26776] SELinux: security_context_str_to_sid () failed with errno=-22 [ 372.352142][T26854] bridge0: port 1(bridge_slave_0) entered disabled state [ 372.546184][T26863] loop8: detected capacity change from 0 to 512 [ 372.553141][T26863] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 372.570034][T26863] EXT4-fs mount: 12 callbacks suppressed [ 372.570044][T26863] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 372.678080][T23929] usb 15-1: enqueue for inactive port 0 [ 372.683679][T23929] usb 15-1: enqueue for inactive port 0 [ 372.696634][T23826] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 372.727959][T26869] loop8: detected capacity change from 0 to 512 [ 372.735247][T26869] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 372.749951][T26869] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 372.762902][T23929] vhci_hcd vhci_hcd.7: vhci_device speed not set [ 372.776863][T23826] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 372.873313][T26877] can: request_module (can-proto-0) failed. [ 373.169334][T26886] FAULT_INJECTION: forcing a failure. [ 373.169334][T26886] name failslab, interval 1, probability 0, space 0, times 0 [ 373.169398][T26886] CPU: 1 UID: 0 PID: 26886 Comm: syz.4.7974 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 373.169428][T26886] Tainted: [W]=WARN [ 373.169436][T26886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 373.169518][T26886] Call Trace: [ 373.169600][T26886] [ 373.169608][T26886] __dump_stack+0x1d/0x30 [ 373.169666][T26886] dump_stack_lvl+0xe8/0x140 [ 373.169687][T26886] dump_stack+0x15/0x1b [ 373.169707][T26886] should_fail_ex+0x265/0x280 [ 373.169787][T26886] should_failslab+0x8c/0xb0 [ 373.169810][T26886] __kmalloc_cache_noprof+0x65/0x4c0 [ 373.169912][T26886] ? kobject_uevent_env+0x1c0/0x570 [ 373.169939][T26886] ? _raw_spin_lock_irq+0x53/0xa0 [ 373.169961][T26886] kobject_uevent_env+0x1c0/0x570 [ 373.169987][T26886] kobject_uevent+0x1d/0x30 [ 373.170022][T26886] device_del+0x710/0x790 [ 373.170077][T26886] device_destroy+0x66/0xa0 [ 373.170098][T26886] vcs_remove_sysfs+0x21/0x60 [ 373.170164][T26886] vc_deallocate+0xfc/0x250 [ 373.170183][T26886] vt_disallocate_all+0x175/0x200 [ 373.170212][T26886] vt_ioctl+0x1592/0x18a0 [ 373.170241][T26886] ? tty_jobctrl_ioctl+0x29e/0x810 [ 373.170311][T26886] tty_ioctl+0x7d8/0xb80 [ 373.170328][T26886] ? __pfx_tty_ioctl+0x10/0x10 [ 373.170344][T26886] __se_sys_ioctl+0xce/0x140 [ 373.170371][T26886] __x64_sys_ioctl+0x43/0x50 [ 373.170396][T26886] x64_sys_call+0x14b0/0x3000 [ 373.170417][T26886] do_syscall_64+0xd8/0x2a0 [ 373.170485][T26886] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.170535][T26886] RIP: 0033:0x7f9b6428f749 [ 373.170550][T26886] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 373.170568][T26886] RSP: 002b:00007f9b62cf7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 373.170587][T26886] RAX: ffffffffffffffda RBX: 00007f9b644e5fa0 RCX: 00007f9b6428f749 [ 373.170600][T26886] RDX: 0000000000000000 RSI: 0000000000005608 RDI: 0000000000000005 [ 373.170614][T26886] RBP: 00007f9b62cf7090 R08: 0000000000000000 R09: 0000000000000000 [ 373.170692][T26886] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 373.170703][T26886] R13: 00007f9b644e6038 R14: 00007f9b644e5fa0 R15: 00007ffdf617e648 [ 373.170745][T26886] [ 373.199794][ T9] hid-generic 0000:0000:0000.0014: hidraw0: HID v8.01 Device [syz0] on syz0 [ 373.459315][T26900] vhci_hcd vhci_hcd.3: default hub control req: 8013 v0000 i0000 l31125 [ 373.541449][T26906] loop6: detected capacity change from 0 to 512 [ 373.548619][T26903] can: request_module (can-proto-0) failed. [ 373.556618][T26900] validate_nla: 12 callbacks suppressed [ 373.556630][T26900] netlink: 'syz.4.7979': attribute type 10 has an invalid length. [ 373.573336][T26906] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 373.640588][T26911] netlink: 'syz.7.7978': attribute type 3 has an invalid length. [ 373.748960][T26913] loop4: detected capacity change from 0 to 1024 [ 373.772074][T26913] EXT4-fs: inline encryption not supported [ 373.777929][T26913] EXT4-fs: Ignoring removed i_version option [ 373.813902][T26913] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 373.828971][T26913] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #3: block 2: comm syz.4.7982: lblock 2 mapped to illegal pblock 2 (length 1) [ 373.847249][T26913] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #3: block 48: comm syz.4.7982: lblock 0 mapped to illegal pblock 48 (length 1) [ 373.862286][T26913] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.7982: Failed to acquire dquot type 0 [ 373.875769][T26913] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 373.886505][T26913] EXT4-fs error (device loop4): ext4_evict_inode:253: inode #11: comm syz.4.7982: mark_inode_dirty error [ 373.898778][T26913] EXT4-fs warning (device loop4): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 373.909386][T26913] EXT4-fs (loop4): 1 orphan inode deleted [ 373.916128][T26913] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 373.928497][ T2232] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:11: lblock 1 mapped to illegal pblock 1 (length 1) [ 373.947389][ T2232] EXT4-fs error (device loop4): ext4_release_dquot:7022: comm kworker/u8:11: Failed to release dquot type 0 [ 373.996215][T26917] __nla_validate_parse: 7 callbacks suppressed [ 373.996228][T26917] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7983'. [ 374.013496][T26913] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 374.024214][T26913] EXT4-fs error (device loop4): __ext4_get_inode_loc:4830: comm syz.4.7982: Invalid inode table block 1 in block_group 0 [ 374.037941][T26913] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 374.050543][T26913] EXT4-fs error (device loop4): ext4_quota_off:7270: inode #3: comm syz.4.7982: mark_inode_dirty error [ 374.081536][T26906] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 374.103718][T23385] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 374.196084][T26913] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7982'. [ 374.205089][T26913] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7982'. [ 374.247667][T26932] netlink: 'syz.6.7985': attribute type 39 has an invalid length. [ 374.258321][T26934] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 374.264837][T26934] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 374.272335][T26934] vhci_hcd vhci_hcd.0: Device attached [ 374.312842][T26934] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(6) [ 374.319419][T26934] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 374.326938][T26934] vhci_hcd vhci_hcd.0: Device attached [ 374.331591][T26940] loop7: detected capacity change from 0 to 512 [ 374.338474][T26934] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 374.346841][T26940] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 374.347175][T26934] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 374.365884][T26934] vhci_hcd vhci_hcd.0: pdev(4) rhport(4) sockfd(12) [ 374.372530][T26934] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 374.380217][T26934] vhci_hcd vhci_hcd.0: Device attached [ 374.387481][T26934] vhci_hcd vhci_hcd.0: pdev(4) rhport(5) sockfd(14) [ 374.388430][T26940] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 374.394077][T26934] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 374.394155][T26934] vhci_hcd vhci_hcd.0: Device attached [ 374.422432][T23205] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 374.425835][T26945] vhci_hcd: connection closed [ 374.433014][ T42] vhci_hcd vhci_hcd.4: stop threads [ 374.438075][T26937] vhci_hcd: connection closed [ 374.443016][ T42] vhci_hcd vhci_hcd.4: release socket [ 374.443207][T26935] vhci_hcd: connection closed [ 374.447709][ T42] vhci_hcd vhci_hcd.4: disconnect device [ 374.453432][T26941] vhci_hcd: connection closed [ 374.463919][ T42] vhci_hcd vhci_hcd.4: stop threads [ 374.474137][ T42] vhci_hcd vhci_hcd.4: release socket [ 374.479546][ T42] vhci_hcd vhci_hcd.4: disconnect device [ 374.486012][ T42] vhci_hcd vhci_hcd.4: stop threads [ 374.491268][ T42] vhci_hcd vhci_hcd.4: release socket [ 374.496650][ T42] vhci_hcd vhci_hcd.4: disconnect device [ 374.502788][ T42] vhci_hcd vhci_hcd.4: stop threads [ 374.503667][T26950] vhci_hcd vhci_hcd.3: default hub control req: 8013 v0000 i0000 l31125 [ 374.508233][ T42] vhci_hcd vhci_hcd.4: release socket [ 374.521958][ T42] vhci_hcd vhci_hcd.4: disconnect device [ 374.533870][T26950] can: request_module (can-proto-0) failed. [ 374.541190][T26950] netlink: 16 bytes leftover after parsing attributes in process `syz.7.7992'. [ 374.551262][T26950] netlink: 'syz.7.7992': attribute type 10 has an invalid length. [ 374.709508][T26968] netlink: 134744 bytes leftover after parsing attributes in process `syz.7.8000'. [ 374.719148][T26968] netlink: zone id is out of range [ 374.724264][T26968] netlink: zone id is out of range [ 374.729531][T26968] netlink: get zone limit has 4 unknown bytes [ 374.834024][T26966] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7999'. [ 374.843096][T26966] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7999'. [ 375.286058][T26982] loop6: detected capacity change from 0 to 512 [ 375.345960][T26982] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 375.368331][ T29] kauditd_printk_skb: 160 callbacks suppressed [ 375.368411][ T29] audit: type=1326 audit(375.258:13986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26983 comm="syz.8.8006" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f03b00ff749 code=0x0 [ 375.412903][T26990] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8006'. [ 375.425434][T26982] EXT4-fs error (device loop6): ext4_xattr_block_get:597: inode #12: comm syz.6.8005: corrupted xattr block 6: invalid header [ 375.449406][T26990] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 375.456822][T26990] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 375.467005][T26982] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=12 [ 375.476586][ T29] audit: type=1400 audit(375.378:13987): avc: denied { create } for pid=26981 comm="syz.6.8005" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 375.495782][ T29] audit: type=1400 audit(375.398:13988): avc: denied { setopt } for pid=26981 comm="syz.6.8005" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 375.517452][T26990] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 375.524888][T26990] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 375.533001][T26982] EXT4-fs error (device loop6): ext4_xattr_block_get:597: inode #12: comm syz.6.8005: corrupted xattr block 6: invalid header [ 375.549793][T26982] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=12 [ 375.567770][T26982] EXT4-fs error (device loop6): ext4_xattr_block_get:597: inode #12: comm syz.6.8005: corrupted xattr block 6: invalid header [ 375.582267][T26982] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=12 [ 375.780529][T26982] EXT4-fs error (device loop6): ext4_xattr_block_get:597: inode #12: comm syz.6.8005: corrupted xattr block 6: invalid header [ 375.794055][T26982] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=12 [ 375.803486][ T29] audit: type=1400 audit(375.778:13989): avc: denied { add_name } for pid=26981 comm="syz.6.8005" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 375.832325][T26982] EXT4-fs error (device loop6): ext4_xattr_block_get:597: inode #12: comm syz.6.8005: corrupted xattr block 6: invalid header [ 375.847593][T26982] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=12 [ 375.857537][T26982] EXT4-fs error (device loop6): ext4_xattr_block_get:597: inode #12: comm syz.6.8005: corrupted xattr block 6: invalid header [ 375.871045][ T29] audit: type=1400 audit(375.828:13990): avc: denied { create } for pid=26981 comm="syz.6.8005" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=sock_file permissive=1 [ 375.920135][T23385] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 375.943121][T26997] loop6: detected capacity change from 0 to 512 [ 375.962040][T26997] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 375.975849][T26997] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 375.998457][T23385] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 376.065339][ T29] audit: type=1326 audit(376.038:13991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27002 comm="syz.6.8011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f471bc3f749 code=0x7ffc0000 [ 376.094271][T23710] hid_parser_main: 123 callbacks suppressed [ 376.094287][T23710] hid-generic 0000:0000:0000.0015: unknown main item tag 0x7 [ 376.107625][T23710] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 376.138679][ T29] audit: type=1326 audit(376.068:13992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27002 comm="syz.6.8011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f471bc3f749 code=0x7ffc0000 [ 376.161747][ T29] audit: type=1326 audit(376.068:13993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27002 comm="syz.6.8011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f471bc3f749 code=0x7ffc0000 [ 376.184611][ T29] audit: type=1326 audit(376.068:13994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27002 comm="syz.6.8011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f471bc3f749 code=0x7ffc0000 [ 376.207629][ T29] audit: type=1326 audit(376.068:13995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27002 comm="syz.6.8011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f471bc3f749 code=0x7ffc0000 [ 376.234352][T23710] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 376.241806][T23710] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 376.249293][T23710] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 376.256719][T23710] hid-generic 0000:0000:0000.0015: unknown main item tag 0x2 [ 376.264332][T23710] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 376.271816][T23710] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 376.279350][T23710] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 376.286747][T23710] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 376.307829][T23710] hid-generic 0000:0000:0000.0015: hidraw0: HID v8.01 Device [syz0] on syz0 [ 376.495505][T27020] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8013'. [ 376.504556][T27020] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8013'. [ 376.732688][T27025] syzkaller0: entered allmulticast mode [ 376.745355][T27025] syzkaller0: entered promiscuous mode [ 376.837517][T27031] vlan2: entered allmulticast mode [ 376.958254][T27023] syzkaller0: left promiscuous mode [ 376.963606][T27023] syzkaller0: left allmulticast mode [ 377.061942][T27027] Set syz1 is full, maxelem 65536 reached [ 377.116190][T27038] loop4: detected capacity change from 0 to 512 [ 377.129660][T27038] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 377.156674][T20332] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 377.236376][T27051] loop6: detected capacity change from 0 to 1024 [ 377.248310][T27051] EXT4-fs: inline encryption not supported [ 377.254147][T27051] EXT4-fs: Ignoring removed i_version option [ 377.271339][T27051] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 377.290044][T27053] loop8: detected capacity change from 0 to 1024 [ 377.298185][T27051] EXT4-fs error (device loop6): ext4_map_blocks:783: inode #3: block 2: comm syz.6.8028: lblock 2 mapped to illegal pblock 2 (length 1) [ 377.312758][T27053] EXT4-fs: Ignoring removed nomblk_io_submit option [ 377.320050][T27051] EXT4-fs error (device loop6): ext4_map_blocks:783: inode #3: block 48: comm syz.6.8028: lblock 0 mapped to illegal pblock 48 (length 1) [ 377.334560][T27051] EXT4-fs error (device loop6): ext4_acquire_dquot:6986: comm syz.6.8028: Failed to acquire dquot type 0 [ 377.346179][T27051] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 377.355733][T27051] EXT4-fs error (device loop6): ext4_evict_inode:253: inode #11: comm syz.6.8028: mark_inode_dirty error [ 377.380324][T27051] EXT4-fs warning (device loop6): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 377.383893][T27053] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 377.390690][T27051] EXT4-fs (loop6): 1 orphan inode deleted [ 377.408388][ T2082] EXT4-fs error (device loop6): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:10: lblock 1 mapped to illegal pblock 1 (length 1) [ 377.410495][T27051] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 377.436170][ T2082] EXT4-fs error (device loop6): ext4_release_dquot:7022: comm kworker/u8:10: Failed to release dquot type 0 [ 377.449292][T27051] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 377.449781][T27053] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 377.458880][T27051] EXT4-fs error (device loop6): __ext4_get_inode_loc:4830: comm syz.6.8028: Invalid inode table block 1 in block_group 0 [ 377.480346][T27051] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 377.489868][T27051] EXT4-fs error (device loop6): ext4_quota_off:7270: inode #3: comm syz.6.8028: mark_inode_dirty error [ 377.546633][T27060] loop8: detected capacity change from 0 to 1024 [ 377.554240][T27060] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 377.567920][T27060] EXT4-fs error (device loop8): ext4_read_block_bitmap_nowait:483: comm syz.8.8031: Invalid block bitmap block 0 in block_group 0 [ 377.583142][T27060] EXT4-fs error (device loop8): ext4_acquire_dquot:6986: comm syz.8.8031: Failed to acquire dquot type 0 [ 377.594655][T27060] EXT4-fs error (device loop8): ext4_free_blocks:6728: comm syz.8.8031: Freeing blocks not in datazone - block = 0, count = 4096 [ 377.608276][T27060] EXT4-fs error (device loop8): ext4_read_inode_bitmap:139: comm syz.8.8031: Invalid inode bitmap blk 0 in block_group 0 [ 377.621086][T27060] EXT4-fs error (device loop8) in ext4_free_inode:361: Corrupt filesystem [ 377.629796][T27060] EXT4-fs (loop8): 1 orphan inode deleted [ 377.630364][T27051] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 377.635883][T27060] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 377.651703][ T2232] EXT4-fs error (device loop8): ext4_release_dquot:7022: comm kworker/u8:11: Failed to release dquot type 0 [ 377.677372][T27051] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=27051 comm=syz.6.8028 [ 377.691266][T27051] SELinux: security_context_str_to_sid () failed with errno=-22 [ 377.710889][T23826] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 377.781300][T27072] loop6: detected capacity change from 0 to 1024 [ 377.800495][T27072] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 377.930519][T23385] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 378.058398][T27093] netlink: 'syz.7.8045': attribute type 10 has an invalid length. [ 378.113795][T27093] EXT4-fs: inline encryption not supported [ 378.119846][T27093] EXT4-fs: Ignoring removed i_version option [ 378.136599][T27080] Set syz1 is full, maxelem 65536 reached [ 378.144521][T27093] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 378.155554][T27094] lo speed is unknown, defaulting to 1000 [ 378.157890][T27093] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #3: block 2: comm syz.7.8045: lblock 2 mapped to illegal pblock 2 (length 1) [ 378.178085][T27093] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #3: block 48: comm syz.7.8045: lblock 0 mapped to illegal pblock 48 (length 1) [ 378.215781][T27093] EXT4-fs error (device loop7): ext4_acquire_dquot:6986: comm syz.7.8045: Failed to acquire dquot type 0 [ 378.238199][T27093] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 378.258044][T27093] EXT4-fs error (device loop7): ext4_evict_inode:253: inode #11: comm syz.7.8045: mark_inode_dirty error [ 378.278212][T27093] EXT4-fs warning (device loop7): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 378.289296][T27106] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 378.298045][T27093] EXT4-fs (loop7): 1 orphan inode deleted [ 378.304205][T27093] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 378.316703][T23945] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:18: lblock 1 mapped to illegal pblock 1 (length 1) [ 378.331062][T23945] EXT4-fs error (device loop7): ext4_release_dquot:7022: comm kworker/u8:18: Failed to release dquot type 0 [ 378.344436][T27093] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 378.354023][T27093] EXT4-fs error (device loop7): __ext4_get_inode_loc:4830: comm syz.7.8045: Invalid inode table block 1 in block_group 0 [ 378.367126][T27093] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 378.368677][T27106] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 378.376904][T27093] EXT4-fs error (device loop7): ext4_quota_off:7270: inode #3: comm syz.7.8045: mark_inode_dirty error [ 378.449278][T20332] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 378.498669][T27116] netlink: 'syz.4.8052': attribute type 12 has an invalid length. [ 378.506548][T27116] netlink: 'syz.4.8052': attribute type 29 has an invalid length. [ 378.514412][T27116] netlink: 'syz.4.8052': attribute type 1 has an invalid length. [ 378.604442][T27093] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 378.621781][T27093] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=27093 comm=syz.7.8045 [ 378.635475][T27093] SELinux: security_context_str_to_sid () failed with errno=-22 [ 378.732247][T23929] hid-generic 0000:0000:0000.0016: hidraw0: HID v8.01 Device [syz0] on syz0 [ 378.813498][T27134] set_capacity_and_notify: 2 callbacks suppressed [ 378.813513][T27134] loop7: detected capacity change from 0 to 512 [ 378.850207][T27134] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 378.879609][T27140] loop6: detected capacity change from 0 to 512 [ 378.887612][T27134] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 378.901852][T27140] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 378.930791][T23385] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 378.946229][T27148] vhci_hcd vhci_hcd.3: default hub control req: 8013 v0000 i0000 l31125 [ 378.960683][T27148] can: request_module (can-proto-0) failed. [ 378.973525][T27148] netlink: 'syz.6.8064': attribute type 10 has an invalid length. [ 378.987239][T23205] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 379.040802][T27160] __nla_validate_parse: 12 callbacks suppressed [ 379.040818][T27160] netlink: 592 bytes leftover after parsing attributes in process `syz.6.8067'. [ 379.074068][T27155] lo speed is unknown, defaulting to 1000 [ 379.114983][T27165] loop7: detected capacity change from 0 to 512 [ 379.131172][T27165] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 379.167693][T27165] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 379.421535][T27173] loop8: detected capacity change from 0 to 2048 [ 379.551356][T27175] lo speed is unknown, defaulting to 1000 [ 379.850854][T23205] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 379.869406][T27173] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 379.921241][T27171] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 380.129490][T23826] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 380.151677][T27185] loop7: detected capacity change from 0 to 512 [ 380.201842][T27185] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 380.240111][T27191] loop8: detected capacity change from 0 to 512 [ 380.250254][T27191] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 380.272709][T27191] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 380.306102][T23205] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 380.318975][T27198] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8078'. [ 380.342404][T27198] can: request_module (can-proto-0) failed. [ 380.360579][T27198] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8078'. [ 380.378497][T27203] netlink: 592 bytes leftover after parsing attributes in process `syz.7.8080'. [ 380.396669][T27198] netlink: 'syz.2.8078': attribute type 10 has an invalid length. [ 380.409300][T23826] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 380.452540][T27206] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8082'. [ 380.807899][T27204] lo speed is unknown, defaulting to 1000 [ 380.875151][T27221] netlink: 'syz.7.8086': attribute type 3 has an invalid length. [ 381.680472][T27223] Set syz1 is full, maxelem 65536 reached [ 381.828283][T27227] loop4: detected capacity change from 0 to 512 [ 382.137052][T27227] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 382.179121][T27230] lo speed is unknown, defaulting to 1000 [ 382.254733][T27238] loop6: detected capacity change from 0 to 2048 [ 382.509327][T27238] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 382.526091][T27238] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 382.658785][T20332] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 382.678679][ T29] kauditd_printk_skb: 89 callbacks suppressed [ 382.678763][ T29] audit: type=1326 audit(382.658:14076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27243 comm="syz.8.8102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03b00ff749 code=0x7ffc0000 [ 382.760722][ T29] audit: type=1326 audit(382.658:14077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27243 comm="syz.8.8102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f03b00ff749 code=0x7ffc0000 [ 382.783770][ T29] audit: type=1326 audit(382.658:14078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27243 comm="syz.8.8102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03b00ff749 code=0x7ffc0000 [ 382.806857][ T29] audit: type=1326 audit(382.658:14079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27243 comm="syz.8.8102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f03b00ff749 code=0x7ffc0000 [ 382.829804][ T29] audit: type=1326 audit(382.658:14080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27243 comm="syz.8.8102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03b00ff749 code=0x7ffc0000 [ 382.852791][ T29] audit: type=1326 audit(382.658:14081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27243 comm="syz.8.8102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03b00ff749 code=0x7ffc0000 [ 382.875745][ T29] audit: type=1326 audit(382.658:14082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27243 comm="syz.8.8102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f03b00ff749 code=0x7ffc0000 [ 382.898613][ T29] audit: type=1326 audit(382.658:14083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27243 comm="syz.8.8102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03b00ff749 code=0x7ffc0000 [ 382.921553][ T29] audit: type=1326 audit(382.658:14084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27243 comm="syz.8.8102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03b00ff749 code=0x7ffc0000 [ 382.944558][ T29] audit: type=1326 audit(382.658:14085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27243 comm="syz.8.8102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f03b00ff749 code=0x7ffc0000 [ 383.007435][T23385] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 383.036914][T27254] netlink: 592 bytes leftover after parsing attributes in process `syz.8.8093'. [ 383.088468][T27260] netlink: 8 bytes leftover after parsing attributes in process `syz.8.8096'. [ 383.108660][T27262] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8097'. [ 383.135363][T27262] vlan2: entered allmulticast mode [ 383.448166][T27280] lo speed is unknown, defaulting to 1000 [ 383.578757][T27292] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8110'. [ 383.610996][T27294] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8111'. [ 383.773668][T27301] lo speed is unknown, defaulting to 1000 [ 384.138240][T27310] netlink: 'syz.6.8118': attribute type 10 has an invalid length. [ 384.146205][T27310] netlink: 40 bytes leftover after parsing attributes in process `syz.6.8118'. [ 384.166527][T27310] loop6: detected capacity change from 0 to 1024 [ 384.174312][T27310] EXT4-fs: inline encryption not supported [ 384.180172][T27310] EXT4-fs: Ignoring removed i_version option [ 384.187459][T27310] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 384.231122][T27310] EXT4-fs error (device loop6): ext4_map_blocks:783: inode #3: block 2: comm syz.6.8118: lblock 2 mapped to illegal pblock 2 (length 1) [ 384.256495][T27310] EXT4-fs error (device loop6): ext4_map_blocks:783: inode #3: block 48: comm syz.6.8118: lblock 0 mapped to illegal pblock 48 (length 1) [ 384.297269][T27317] netlink: 8 bytes leftover after parsing attributes in process `syz.8.8121'. [ 384.306494][T27310] EXT4-fs error (device loop6): ext4_acquire_dquot:6986: comm syz.6.8118: Failed to acquire dquot type 0 [ 384.330080][T27310] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 384.346243][T27310] EXT4-fs error (device loop6): ext4_evict_inode:253: inode #11: comm syz.6.8118: mark_inode_dirty error [ 384.365628][T27310] EXT4-fs warning (device loop6): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 384.380111][T27321] loop8: detected capacity change from 0 to 512 [ 384.387807][T27310] EXT4-fs (loop6): 1 orphan inode deleted [ 384.397048][T27321] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 384.410033][ T12] EXT4-fs error (device loop6): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 384.425007][T27310] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 384.431633][ T12] EXT4-fs error (device loop6): ext4_release_dquot:7022: comm kworker/u8:0: Failed to release dquot type 0 [ 384.450298][T27310] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 384.471140][T23826] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 384.481053][T27310] EXT4-fs error (device loop6): __ext4_get_inode_loc:4830: comm syz.6.8118: Invalid inode table block 1 in block_group 0 [ 384.505651][T27310] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 384.517115][T27310] EXT4-fs error (device loop6): ext4_quota_off:7270: inode #3: comm syz.6.8118: mark_inode_dirty error [ 384.682809][T27334] vlan2: entered allmulticast mode [ 384.997856][T27330] netlink: 48 bytes leftover after parsing attributes in process `syz.6.8118'. [ 385.065885][T27342] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=27342 comm=syz.6.8118 [ 385.094235][T27330] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 385.126024][T27349] SELinux: security_context_str_to_sid () failed with errno=-22 [ 385.186386][T27352] loop8: detected capacity change from 0 to 512 [ 385.282093][T27352] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 385.300896][T27329] Set syz1 is full, maxelem 65536 reached [ 385.350091][T23826] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 385.489252][T27371] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8141'. [ 385.673332][T27397] lo speed is unknown, defaulting to 1000 [ 385.703723][T27399] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8143'. [ 385.784239][T27406] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8153'. [ 385.798879][T27407] netlink: 'syz.2.8151': attribute type 39 has an invalid length. [ 385.823155][T27409] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.872182][T27410] netlink: 64 bytes leftover after parsing attributes in process `syz.6.8154'. [ 385.881873][T27410] netlink: 244 bytes leftover after parsing attributes in process `syz.6.8154'. [ 385.901234][T27409] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.951709][T27409] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.001259][T27409] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.045927][ T982] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.057450][ T982] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.069345][ T2232] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.081253][T23945] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.260314][T27431] netlink: 'syz.8.8165': attribute type 10 has an invalid length. [ 386.268201][T27431] netlink: 40 bytes leftover after parsing attributes in process `syz.8.8165'. [ 386.283022][T27431] loop8: detected capacity change from 0 to 1024 [ 386.290433][T27431] EXT4-fs: inline encryption not supported [ 386.296324][T27431] EXT4-fs: Ignoring removed i_version option [ 386.308672][T27431] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 386.323308][T27431] EXT4-fs error (device loop8): ext4_map_blocks:783: inode #3: block 2: comm syz.8.8165: lblock 2 mapped to illegal pblock 2 (length 1) [ 386.343973][T27431] EXT4-fs error (device loop8): ext4_map_blocks:783: inode #3: block 48: comm syz.8.8165: lblock 0 mapped to illegal pblock 48 (length 1) [ 386.359609][T27431] EXT4-fs error (device loop8): ext4_acquire_dquot:6986: comm syz.8.8165: Failed to acquire dquot type 0 [ 386.388495][T27440] loop4: detected capacity change from 0 to 512 [ 386.401942][T27431] EXT4-fs error (device loop8) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 386.413170][T27440] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 386.419766][T27431] EXT4-fs error (device loop8): ext4_evict_inode:253: inode #11: comm syz.8.8165: mark_inode_dirty error [ 386.429960][T27440] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 386.445578][T27431] EXT4-fs warning (device loop8): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 386.455972][T27431] EXT4-fs (loop8): 1 orphan inode deleted [ 386.462245][T27431] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 386.474737][ T2232] EXT4-fs error (device loop8): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:11: lblock 1 mapped to illegal pblock 1 (length 1) [ 386.489310][ T2232] EXT4-fs error (device loop8): ext4_release_dquot:7022: comm kworker/u8:11: Failed to release dquot type 0 [ 386.502271][T27431] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 386.511777][T27431] EXT4-fs error (device loop8): __ext4_get_inode_loc:4830: comm syz.8.8165: Invalid inode table block 1 in block_group 0 [ 386.525433][T27431] EXT4-fs error (device loop8) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 386.535478][T27431] EXT4-fs error (device loop8): ext4_quota_off:7270: inode #3: comm syz.8.8165: mark_inode_dirty error [ 386.569181][T27444] lo speed is unknown, defaulting to 1000 [ 386.577300][T20332] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 386.870242][T27431] netlink: 48 bytes leftover after parsing attributes in process `syz.8.8165'. [ 386.880921][T27431] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 386.941423][T27431] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=27431 comm=syz.8.8165 [ 387.018823][T27469] lo speed is unknown, defaulting to 1000 [ 387.138217][T27464] SELinux: security_context_str_to_sid () failed with errno=-22 [ 387.254349][T27472] loop7: detected capacity change from 0 to 512 [ 387.271908][T27472] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 387.323430][T23205] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 387.353966][T27479] loop8: detected capacity change from 0 to 512 [ 387.361508][T27479] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 387.382005][T27479] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 387.408915][T23826] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 387.629937][T27510] loop4: detected capacity change from 0 to 512 [ 387.661005][T27510] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 387.681964][T27510] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 387.757554][T27517] netlink: 'syz.8.8191': attribute type 3 has an invalid length. [ 388.237138][T20332] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 388.359486][T23929] hid_parser_main: 63 callbacks suppressed [ 388.359564][T23929] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 388.372861][T23929] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 388.380271][T23929] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 388.387657][T23929] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 388.395072][T23929] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 388.402585][T23929] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 388.410150][T23929] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 388.417536][T23929] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 388.425003][T23929] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 388.432547][T23929] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 388.442092][T23929] hid-generic 0000:0000:0000.0017: hidraw0: HID v8.01 Device [syz0] on syz0 [ 388.491870][ T29] kauditd_printk_skb: 166 callbacks suppressed [ 388.491902][ T29] audit: type=1326 audit(388.468:14246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27549 comm="syz.8.8209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03b00ff749 code=0x7ffc0000 [ 388.551780][ T29] audit: type=1326 audit(388.478:14247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27549 comm="syz.8.8209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7f03b00ff749 code=0x7ffc0000 [ 388.574808][ T29] audit: type=1326 audit(388.478:14248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27549 comm="syz.8.8209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03b00ff749 code=0x7ffc0000 [ 388.597800][ T29] audit: type=1326 audit(388.478:14249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27549 comm="syz.8.8209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f03b0101667 code=0x7ffc0000 [ 388.620852][ T29] audit: type=1326 audit(388.478:14250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27549 comm="syz.8.8209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03b00ff749 code=0x7ffc0000 [ 388.643861][ T29] audit: type=1326 audit(388.478:14251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27549 comm="syz.8.8209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f03b00ff749 code=0x7ffc0000 [ 388.666840][ T29] audit: type=1326 audit(388.478:14252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27549 comm="syz.8.8209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03b00ff749 code=0x7ffc0000 [ 388.689857][ T29] audit: type=1326 audit(388.478:14253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27549 comm="syz.8.8209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f03b00ff749 code=0x7ffc0000 [ 388.712917][ T29] audit: type=1326 audit(388.478:14254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27549 comm="syz.8.8209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03b00ff749 code=0x7ffc0000 [ 388.736009][ T29] audit: type=1326 audit(388.478:14255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27549 comm="syz.8.8209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f03b00ff749 code=0x7ffc0000 [ 388.763969][T27563] FAULT_INJECTION: forcing a failure. [ 388.763969][T27563] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 388.777116][T27563] CPU: 1 UID: 0 PID: 27563 Comm: syz.6.8212 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 388.777146][T27563] Tainted: [W]=WARN [ 388.777153][T27563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 388.777165][T27563] Call Trace: [ 388.777171][T27563] [ 388.777178][T27563] __dump_stack+0x1d/0x30 [ 388.777236][T27563] dump_stack_lvl+0xe8/0x140 [ 388.777257][T27563] dump_stack+0x15/0x1b [ 388.777275][T27563] should_fail_ex+0x265/0x280 [ 388.777296][T27563] should_fail+0xb/0x20 [ 388.777352][T27563] should_fail_usercopy+0x1a/0x20 [ 388.777372][T27563] _copy_from_iter+0xcf/0xe70 [ 388.777442][T27563] ? __alloc_skb+0x3bb/0x4d0 [ 388.777466][T27563] ? __alloc_skb+0x24d/0x4d0 [ 388.777491][T27563] netlink_sendmsg+0x471/0x6b0 [ 388.777548][T27563] ? __pfx_netlink_sendmsg+0x10/0x10 [ 388.777656][T27563] __sock_sendmsg+0x145/0x180 [ 388.777689][T27563] ____sys_sendmsg+0x31e/0x4a0 [ 388.777770][T27563] ___sys_sendmsg+0x17b/0x1d0 [ 388.777810][T27563] __x64_sys_sendmsg+0xd4/0x160 [ 388.777842][T27563] x64_sys_call+0x17ba/0x3000 [ 388.777866][T27563] do_syscall_64+0xd8/0x2a0 [ 388.777975][T27563] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 388.777997][T27563] RIP: 0033:0x7f471bc3f749 [ 388.778012][T27563] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 388.778028][T27563] RSP: 002b:00007f471a6a7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 388.778048][T27563] RAX: ffffffffffffffda RBX: 00007f471be95fa0 RCX: 00007f471bc3f749 [ 388.778117][T27563] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 388.778131][T27563] RBP: 00007f471a6a7090 R08: 0000000000000000 R09: 0000000000000000 [ 388.778145][T27563] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 388.778164][T27563] R13: 00007f471be96038 R14: 00007f471be95fa0 R15: 00007fff68459418 [ 388.778184][T27563] [ 389.015487][T27571] loop4: detected capacity change from 0 to 512 [ 389.028556][T27571] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 389.076946][T27571] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 389.104352][T27579] loop6: detected capacity change from 0 to 512 [ 389.120027][T27579] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 389.134668][T27579] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 389.154219][T23385] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 389.220406][T27584] netlink: 'syz.2.8219': attribute type 3 has an invalid length. [ 389.309082][T20332] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 389.360336][T27588] __nla_validate_parse: 5 callbacks suppressed [ 389.360382][T27588] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8225'. [ 389.927851][T27611] loop8: detected capacity change from 0 to 128 [ 389.940050][T27611] FAT-fs (loop8): Directory bread(block 162) failed [ 389.946797][T27611] FAT-fs (loop8): Directory bread(block 163) failed [ 389.953716][T27611] FAT-fs (loop8): Directory bread(block 164) failed [ 389.961031][T27611] FAT-fs (loop8): Directory bread(block 165) failed [ 389.967896][T27611] FAT-fs (loop8): Directory bread(block 166) failed [ 389.975033][T27611] FAT-fs (loop8): Directory bread(block 167) failed [ 389.981966][T27611] FAT-fs (loop8): Directory bread(block 168) failed [ 389.989075][T27611] FAT-fs (loop8): Directory bread(block 169) failed [ 389.999697][T27611] can0: slcan on ptm0. [ 390.009523][T27611] FAT-fs (loop8): Directory bread(block 162) failed [ 390.016148][T27611] FAT-fs (loop8): Directory bread(block 163) failed [ 390.023358][T27611] syz.8.8233: attempt to access beyond end of device [ 390.023358][T27611] loop8: rw=8388611, sector=226, nr_sectors = 6 limit=128 [ 390.037122][T27611] syz.8.8233: attempt to access beyond end of device [ 390.037122][T27611] loop8: rw=8390659, sector=232, nr_sectors = 2 limit=128 [ 390.104572][T27622] syz.8.8233: attempt to access beyond end of device [ 390.104572][T27622] loop8: rw=8388611, sector=234, nr_sectors = 6 limit=128 [ 390.119223][T27622] syz.8.8233: attempt to access beyond end of device [ 390.119223][T27622] loop8: rw=8390659, sector=240, nr_sectors = 2 limit=128 [ 390.135446][T27611] syz.8.8233: attempt to access beyond end of device [ 390.135446][T27611] loop8: rw=8388611, sector=242, nr_sectors = 6 limit=128 [ 390.149368][T27611] syz.8.8233: attempt to access beyond end of device [ 390.149368][T27611] loop8: rw=8390659, sector=248, nr_sectors = 2 limit=128 [ 390.208081][T27611] can0 (unregistered): slcan off ptm0. [ 390.213699][T27611] Falling back ldisc for ptm0. [ 390.256404][T27633] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8242'. [ 390.348510][T27643] loop6: detected capacity change from 0 to 512 [ 390.355878][T27643] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 390.370529][T27648] tmpfs: Bad value for 'mpol' [ 390.406211][T27648] loop4: detected capacity change from 0 to 4096 [ 390.513381][T27654] lo speed is unknown, defaulting to 1000 [ 390.591727][T27664] loop7: detected capacity change from 0 to 128 [ 390.750712][T27671] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8256'. [ 391.130837][T27680] lo speed is unknown, defaulting to 1000 [ 391.154467][T27685] tipc: New replicast peer: 255.255.255.255 [ 391.160803][T27685] tipc: Enabled bearer , priority 10 [ 391.192657][T27687] loop8: detected capacity change from 0 to 512 [ 391.200394][T27687] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 391.230465][T27693] netlink: 44 bytes leftover after parsing attributes in process `syz.2.8263'. [ 391.306006][T27699] netlink: 592 bytes leftover after parsing attributes in process `syz.8.8266'. [ 391.401746][T27707] loop6: detected capacity change from 0 to 512 [ 391.409756][T27707] EXT4-fs: Ignoring removed nomblk_io_submit option [ 391.417215][T27707] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 391.426699][T27713] FAULT_INJECTION: forcing a failure. [ 391.426699][T27713] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 391.439819][T27713] CPU: 0 UID: 0 PID: 27713 Comm: syz.8.8272 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 391.439849][T27713] Tainted: [W]=WARN [ 391.439856][T27713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 391.439867][T27713] Call Trace: [ 391.439874][T27713] [ 391.439961][T27713] __dump_stack+0x1d/0x30 [ 391.439987][T27713] dump_stack_lvl+0xe8/0x140 [ 391.440014][T27713] dump_stack+0x15/0x1b [ 391.440035][T27713] should_fail_ex+0x265/0x280 [ 391.440055][T27713] should_fail+0xb/0x20 [ 391.440071][T27713] should_fail_usercopy+0x1a/0x20 [ 391.440097][T27713] _copy_from_user+0x1c/0xb0 [ 391.440121][T27713] ___sys_sendmsg+0xc1/0x1d0 [ 391.440283][T27713] __x64_sys_sendmsg+0xd4/0x160 [ 391.440314][T27713] x64_sys_call+0x17ba/0x3000 [ 391.440338][T27713] do_syscall_64+0xd8/0x2a0 [ 391.440440][T27713] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.440462][T27713] RIP: 0033:0x7f03b00ff749 [ 391.440535][T27713] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 391.440554][T27713] RSP: 002b:00007f03aeb67038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 391.440574][T27713] RAX: ffffffffffffffda RBX: 00007f03b0355fa0 RCX: 00007f03b00ff749 [ 391.440586][T27713] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000006 [ 391.440597][T27713] RBP: 00007f03aeb67090 R08: 0000000000000000 R09: 0000000000000000 [ 391.440630][T27713] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 391.440641][T27713] R13: 00007f03b0356038 R14: 00007f03b0355fa0 R15: 00007fffd8608798 [ 391.440663][T27713] [ 391.478957][T27707] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c11c, mo2=0102] [ 391.513564][T27717] netlink: 44 bytes leftover after parsing attributes in process `syz.8.8274'. [ 391.515891][T27707] System zones: 0-2, 18-18, 34-34 [ 391.633757][T27707] EXT4-fs error (device loop6): ext4_quota_enable:7177: inode #4: comm syz.6.8270: iget: immutable or append flags not allowed on symlinks [ 391.670020][T27707] EXT4-fs error (device loop6): ext4_quota_enable:7180: comm syz.6.8270: Bad quota inode: 4, type: 1 [ 391.681421][T27707] EXT4-fs warning (device loop6): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 391.696888][T27707] EXT4-fs (loop6): mount failed [ 391.733528][T27723] loop8: detected capacity change from 0 to 512 [ 391.736582][T27719] lo speed is unknown, defaulting to 1000 [ 391.741208][T27723] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 391.886444][T27746] netlink: 44 bytes leftover after parsing attributes in process `syz.4.8285'. [ 391.922415][T27750] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.971301][T27754] netlink: 64 bytes leftover after parsing attributes in process `syz.4.8287'. [ 391.989667][T27750] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.011255][T27755] lo speed is unknown, defaulting to 1000 [ 392.044689][T27757] netlink: 244 bytes leftover after parsing attributes in process `syz.4.8287'. [ 392.091392][T27750] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.171290][T27750] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.251245][ T42] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.335441][ T42] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.353959][ T42] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.366212][ T12] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.374616][T27760] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8289'. [ 392.456745][T27764] netlink: 'syz.8.8290': attribute type 3 has an invalid length. [ 393.001381][T27785] loop4: detected capacity change from 0 to 512 [ 393.057132][T27799] loop4: detected capacity change from 0 to 1024 [ 393.064004][T27799] EXT4-fs: inline encryption not supported [ 393.069888][T27799] EXT4-fs: Ignoring removed i_version option [ 393.124482][T27799] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 393.145930][T27799] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #3: block 2: comm syz.4.8305: lblock 2 mapped to illegal pblock 2 (length 1) [ 393.167443][T27799] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #3: block 48: comm syz.4.8305: lblock 0 mapped to illegal pblock 48 (length 1) [ 393.198215][T27799] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.8305: Failed to acquire dquot type 0 [ 393.210086][T27799] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 393.220042][T27799] EXT4-fs error (device loop4): ext4_evict_inode:253: inode #11: comm syz.4.8305: mark_inode_dirty error [ 393.232072][T27799] EXT4-fs warning (device loop4): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 393.262077][T27807] loop7: detected capacity change from 0 to 2048 [ 393.274499][T27799] EXT4-fs (loop4): 1 orphan inode deleted [ 393.284476][ T42] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 393.322983][T27807] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 393.343073][ T42] EXT4-fs error (device loop4): ext4_release_dquot:7022: comm kworker/u8:2: Failed to release dquot type 0 [ 393.374543][T27799] EXT4-fs error (device loop4): __ext4_get_inode_loc:4830: comm syz.4.8305: Invalid inode table block 1 in block_group 0 [ 393.410112][T27799] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 393.443796][T27799] EXT4-fs error (device loop4): ext4_quota_off:7270: inode #3: comm syz.4.8305: mark_inode_dirty error [ 393.872735][T27836] netlink: 'syz.6.8318': attribute type 10 has an invalid length. [ 393.930997][T27832] lo speed is unknown, defaulting to 1000 [ 393.937257][T27836] EXT4-fs: inline encryption not supported [ 393.943148][T27836] EXT4-fs: Ignoring removed i_version option [ 393.968946][T27836] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 393.994660][T27836] EXT4-fs error (device loop6): ext4_map_blocks:783: inode #3: block 2: comm syz.6.8318: lblock 2 mapped to illegal pblock 2 (length 1) [ 394.009042][T27836] __quota_error: 1110 callbacks suppressed [ 394.009053][T27836] Quota error (device loop6): qtree_write_dquot: dquota write failed [ 394.028165][T27836] EXT4-fs error (device loop6): ext4_map_blocks:783: inode #3: block 48: comm syz.6.8318: lblock 0 mapped to illegal pblock 48 (length 1) [ 394.047924][T27840] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 394.057900][T27836] Quota error (device loop6): v2_write_file_info: Can't write info structure [ 394.066933][T27836] EXT4-fs error (device loop6): ext4_acquire_dquot:6986: comm syz.6.8318: Failed to acquire dquot type 0 [ 394.082878][T27836] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 394.092501][T27836] EXT4-fs error (device loop6): ext4_evict_inode:253: inode #11: comm syz.6.8318: mark_inode_dirty error [ 394.104581][T27836] EXT4-fs warning (device loop6): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 394.114860][T27836] EXT4-fs (loop6): 1 orphan inode deleted [ 394.128140][T20835] EXT4-fs error (device loop6): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:14: lblock 1 mapped to illegal pblock 1 (length 1) [ 394.142763][T20835] Quota error (device loop6): remove_tree: Can't read quota data block 1 [ 394.151247][T20835] EXT4-fs error (device loop6): ext4_release_dquot:7022: comm kworker/u8:14: Failed to release dquot type 0 [ 394.248820][T27862] EXT4-fs: inline encryption not supported [ 394.254653][T27862] EXT4-fs: Ignoring removed i_version option [ 394.277774][T27862] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 394.290976][T27862] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #3: block 2: comm syz.7.8327: lblock 2 mapped to illegal pblock 2 (length 1) [ 394.306440][T27862] Quota error (device loop7): qtree_write_dquot: dquota write failed [ 394.315552][T27836] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 394.331449][T27862] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #3: block 48: comm syz.7.8327: lblock 0 mapped to illegal pblock 48 (length 1) [ 394.345992][T27836] ext4: Unknown parameter '' [ 394.350810][T27862] Quota error (device loop7): v2_write_file_info: Can't write info structure [ 394.353922][T27836] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=27836 comm=syz.6.8318 [ 394.359700][T27862] EXT4-fs error (device loop7): ext4_acquire_dquot:6986: comm syz.7.8327: Failed to acquire dquot type 0 [ 394.374547][T27836] EXT4-fs error (device loop6): ext4_map_blocks:783: inode #2: block 16: comm syz.6.8318: lblock 0 mapped to illegal pblock 16 (length 1) [ 394.385490][T27862] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 394.427589][T27862] EXT4-fs error (device loop7): ext4_evict_inode:253: inode #11: comm syz.7.8327: mark_inode_dirty error [ 394.440137][T27862] EXT4-fs warning (device loop7): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 394.450661][T27862] EXT4-fs (loop7): 1 orphan inode deleted [ 394.492517][T20835] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:14: lblock 1 mapped to illegal pblock 1 (length 1) [ 394.509016][T20835] Quota error (device loop7): remove_tree: Can't read quota data block 1 [ 394.517518][T20835] EXT4-fs error (device loop7): ext4_release_dquot:7022: comm kworker/u8:14: Failed to release dquot type 0 [ 394.532038][T23385] EXT4-fs error (device loop6): __ext4_get_inode_loc:4830: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 394.532386][T27862] EXT4-fs error (device loop7): __ext4_get_inode_loc:4830: comm syz.7.8327: Invalid inode table block 1 in block_group 0 [ 394.545635][T23385] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 394.565756][T27862] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 394.576774][T27869] lo speed is unknown, defaulting to 1000 [ 394.576923][T27862] EXT4-fs error (device loop7): ext4_quota_off:7270: inode #3: comm syz.7.8327: mark_inode_dirty error [ 394.602576][T23385] EXT4-fs error (device loop6): ext4_quota_off:7270: inode #3: comm syz-executor: mark_inode_dirty error [ 394.734182][T27884] sit0: entered promiscuous mode [ 394.742196][T27884] netlink: 'syz.6.8336': attribute type 1 has an invalid length. [ 394.750067][T27884] __nla_validate_parse: 8 callbacks suppressed [ 394.750079][T27884] netlink: 1 bytes leftover after parsing attributes in process `syz.6.8336'. [ 394.759517][T27862] netlink: 60 bytes leftover after parsing attributes in process `syz.7.8327'. [ 394.774084][T27862] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8327'. [ 394.783052][ T29] audit: type=1326 audit(394.738:15363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27883 comm="syz.6.8336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f471bc3f749 code=0x7ffc0000 [ 394.806051][ T29] audit: type=1326 audit(394.738:15364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27883 comm="syz.6.8336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f471bc3f749 code=0x7ffc0000 [ 394.829048][ T29] audit: type=1326 audit(394.738:15365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27883 comm="syz.6.8336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f471bc3f749 code=0x7ffc0000 [ 394.851827][ T29] audit: type=1326 audit(394.738:15366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27883 comm="syz.6.8336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f471bc3f749 code=0x7ffc0000 [ 394.929987][T27892] set_capacity_and_notify: 3 callbacks suppressed [ 394.930003][T27892] loop7: detected capacity change from 0 to 512 [ 394.952734][T27894] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 394.959318][T27894] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 394.966984][T27894] vhci_hcd vhci_hcd.0: Device attached [ 394.973396][T27894] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(6) [ 394.979908][T27894] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 394.987457][T27894] vhci_hcd vhci_hcd.0: Device attached [ 394.993581][T27894] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 395.002113][T27894] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 395.010898][T27894] vhci_hcd vhci_hcd.0: pdev(4) rhport(4) sockfd(12) [ 395.017476][T27894] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 395.025273][T27894] vhci_hcd vhci_hcd.0: Device attached [ 395.031354][T27894] vhci_hcd vhci_hcd.0: pdev(4) rhport(5) sockfd(14) [ 395.038048][T27894] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 395.045656][T27894] vhci_hcd vhci_hcd.0: Device attached [ 395.053152][T27901] vhci_hcd: connection closed [ 395.053439][T20835] vhci_hcd vhci_hcd.4: stop threads [ 395.057376][T27903] vhci_hcd: connection closed [ 395.058182][T20835] vhci_hcd vhci_hcd.4: release socket [ 395.068055][T27899] vhci_hcd: connection closed [ 395.068158][T27897] vhci_hcd: connection closed [ 395.073461][T20835] vhci_hcd vhci_hcd.4: disconnect device [ 395.093450][T20835] vhci_hcd vhci_hcd.4: stop threads [ 395.098746][T20835] vhci_hcd vhci_hcd.4: release socket [ 395.104130][T20835] vhci_hcd vhci_hcd.4: disconnect device [ 395.110212][T20835] vhci_hcd vhci_hcd.4: stop threads [ 395.115419][T20835] vhci_hcd vhci_hcd.4: release socket [ 395.120861][T20835] vhci_hcd vhci_hcd.4: disconnect device [ 395.127141][T20835] vhci_hcd vhci_hcd.4: stop threads [ 395.132513][T20835] vhci_hcd vhci_hcd.4: release socket [ 395.138091][T20835] vhci_hcd vhci_hcd.4: disconnect device [ 395.147830][T27909] netlink: 'syz.2.8341': attribute type 10 has an invalid length. [ 395.155734][T27909] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8341'. [ 395.248918][T27909] netlink: 48 bytes leftover after parsing attributes in process `syz.2.8341'. [ 395.258619][T27909] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 395.275137][T27909] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=27909 comm=syz.2.8341 [ 395.327238][T27912] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8342'. [ 395.512321][T27920] netlink: 148 bytes leftover after parsing attributes in process `syz.8.8346'. [ 395.583321][T27924] loop6: detected capacity change from 0 to 1024 [ 395.590445][T27924] EXT4-fs: inline encryption not supported [ 395.596591][T27924] EXT4-fs: Ignoring removed i_version option [ 395.603363][T27924] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 395.615670][T27924] EXT4-fs error (device loop6): ext4_map_blocks:783: inode #3: block 2: comm syz.6.8348: lblock 2 mapped to illegal pblock 2 (length 1) [ 395.638991][T27924] EXT4-fs error (device loop6): ext4_map_blocks:783: inode #3: block 48: comm syz.6.8348: lblock 0 mapped to illegal pblock 48 (length 1) [ 395.655390][T27924] EXT4-fs error (device loop6): ext4_acquire_dquot:6986: comm syz.6.8348: Failed to acquire dquot type 0 [ 395.667207][T27924] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 395.676794][T27924] EXT4-fs error (device loop6): ext4_evict_inode:253: inode #11: comm syz.6.8348: mark_inode_dirty error [ 395.690552][T27924] EXT4-fs warning (device loop6): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 395.700932][T27924] EXT4-fs (loop6): 1 orphan inode deleted [ 395.708099][T21279] EXT4-fs error (device loop6): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:15: lblock 1 mapped to illegal pblock 1 (length 1) [ 395.722492][T21279] EXT4-fs error (device loop6): ext4_release_dquot:7022: comm kworker/u8:15: Failed to release dquot type 0 [ 395.735524][T27924] EXT4-fs error (device loop6): __ext4_get_inode_loc:4830: comm syz.6.8348: Invalid inode table block 1 in block_group 0 [ 395.748545][T27924] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 395.758502][T27924] EXT4-fs error (device loop6): ext4_quota_off:7270: inode #3: comm syz.6.8348: mark_inode_dirty error [ 395.853051][T27932] lo speed is unknown, defaulting to 1000 [ 395.914458][T27939] netlink: 'syz.7.8353': attribute type 10 has an invalid length. [ 395.922327][T27939] netlink: 40 bytes leftover after parsing attributes in process `syz.7.8353'. [ 395.965372][T27941] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8354'. [ 395.965838][T27939] loop7: detected capacity change from 0 to 1024 [ 395.985481][T27924] netlink: 60 bytes leftover after parsing attributes in process `syz.6.8348'. [ 395.997060][T27939] EXT4-fs: inline encryption not supported [ 396.003049][T27939] EXT4-fs: Ignoring removed i_version option [ 396.023151][T27939] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 396.053072][T27939] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #3: block 2: comm syz.7.8353: lblock 2 mapped to illegal pblock 2 (length 1) [ 396.087482][T27939] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #3: block 48: comm syz.7.8353: lblock 0 mapped to illegal pblock 48 (length 1) [ 396.140460][T27939] EXT4-fs error (device loop7): ext4_acquire_dquot:6986: comm syz.7.8353: Failed to acquire dquot type 0 [ 396.155554][T27939] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 396.173392][T27939] EXT4-fs error (device loop7): ext4_evict_inode:253: inode #11: comm syz.7.8353: mark_inode_dirty error [ 396.197936][T27939] EXT4-fs warning (device loop7): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 396.209498][T27939] EXT4-fs (loop7): 1 orphan inode deleted [ 396.228144][T21279] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:15: lblock 1 mapped to illegal pblock 1 (length 1) [ 396.243962][T21279] EXT4-fs error (device loop7): ext4_release_dquot:7022: comm kworker/u8:15: Failed to release dquot type 0 [ 396.408136][T27939] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 396.439671][T27939] ext4: Unknown parameter '' [ 396.492705][T27939] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=27939 comm=syz.7.8353 [ 396.506267][T27939] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #2: block 16: comm syz.7.8353: lblock 0 mapped to illegal pblock 16 (length 1) [ 396.594554][T23205] EXT4-fs error (device loop7): __ext4_get_inode_loc:4830: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 396.608293][T23205] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 396.617777][T23205] EXT4-fs error (device loop7): ext4_quota_off:7270: inode #3: comm syz-executor: mark_inode_dirty error [ 396.662192][T27964] lo speed is unknown, defaulting to 1000 [ 396.919662][T27975] loop4: detected capacity change from 0 to 2048 [ 396.942221][T27976] loop8: detected capacity change from 0 to 1024 [ 396.949167][T27976] EXT4-fs: inline encryption not supported [ 396.955003][T27976] EXT4-fs: Ignoring removed i_version option [ 397.050193][T27976] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 397.086529][T27981] lo speed is unknown, defaulting to 1000 [ 397.117848][T27976] EXT4-fs error (device loop8): ext4_map_blocks:783: inode #3: block 2: comm syz.8.8368: lblock 2 mapped to illegal pblock 2 (length 1) [ 397.122674][T27987] netlink: 'syz.2.8369': attribute type 39 has an invalid length. [ 397.154051][T27976] EXT4-fs error (device loop8): ext4_map_blocks:783: inode #3: block 48: comm syz.8.8368: lblock 0 mapped to illegal pblock 48 (length 1) [ 397.209274][T27976] EXT4-fs error (device loop8): ext4_acquire_dquot:6986: comm syz.8.8368: Failed to acquire dquot type 0 [ 397.222923][T27976] EXT4-fs error (device loop8) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 397.236826][T27976] EXT4-fs error (device loop8): ext4_evict_inode:253: inode #11: comm syz.8.8368: mark_inode_dirty error [ 397.248773][T27976] EXT4-fs warning (device loop8): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 397.259243][T27976] EXT4-fs (loop8): 1 orphan inode deleted [ 397.266557][ T12] EXT4-fs error (device loop8): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 397.281788][ T12] EXT4-fs error (device loop8): ext4_release_dquot:7022: comm kworker/u8:0: Failed to release dquot type 0 [ 397.352106][T27976] EXT4-fs error (device loop8): __ext4_get_inode_loc:4830: comm syz.8.8368: Invalid inode table block 1 in block_group 0 [ 397.366231][T27992] loop6: detected capacity change from 0 to 512 [ 397.373838][T27976] EXT4-fs error (device loop8) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 397.383459][T27976] EXT4-fs error (device loop8): ext4_quota_off:7270: inode #3: comm syz.8.8368: mark_inode_dirty error [ 397.695552][T27996] FAULT_INJECTION: forcing a failure. [ 397.695552][T27996] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 397.708937][T27996] CPU: 1 UID: 0 PID: 27996 Comm: syz.6.8372 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 397.708970][T27996] Tainted: [W]=WARN [ 397.708977][T27996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 397.708990][T27996] Call Trace: [ 397.708997][T27996] [ 397.709005][T27996] __dump_stack+0x1d/0x30 [ 397.709030][T27996] dump_stack_lvl+0xe8/0x140 [ 397.709124][T27996] dump_stack+0x15/0x1b [ 397.709146][T27996] should_fail_ex+0x265/0x280 [ 397.709186][T27996] should_fail_alloc_page+0xf2/0x100 [ 397.709211][T27996] __alloc_frozen_pages_noprof+0x109/0x360 [ 397.709324][T27996] alloc_pages_mpol+0xb3/0x260 [ 397.709356][T27996] folio_alloc_mpol_noprof+0x39/0x80 [ 397.709383][T27996] __read_swap_cache_async+0xd4/0x2d0 [ 397.709442][T27996] swap_cluster_readahead+0x262/0x3c0 [ 397.709470][T27996] shmem_swapin_folio+0x8b4/0x11e0 [ 397.709498][T27996] ? xas_load+0x413/0x430 [ 397.709570][T27996] ? filemap_get_entry+0x34b/0x390 [ 397.709618][T27996] shmem_get_folio_gfp+0x26c/0xd50 [ 397.709667][T27996] ? __rcu_read_unlock+0x34/0x70 [ 397.709715][T27996] shmem_fault+0xf6/0x250 [ 397.709739][T27996] __do_fault+0xbc/0x200 [ 397.709759][T27996] handle_mm_fault+0xfab/0x2c60 [ 397.709790][T27996] ? _raw_spin_lock+0x52/0xa0 [ 397.709853][T27996] ? __pte_offset_map_lock+0x1d9/0x240 [ 397.709878][T27996] __get_user_pages+0x1024/0x1ed0 [ 397.709915][T27996] __mm_populate+0x243/0x3a0 [ 397.709946][T27996] do_mlock+0x471/0x520 [ 397.709969][T27996] ? mutex_unlock+0x4f/0x90 [ 397.709994][T27996] ? fput+0x8f/0xc0 [ 397.710099][T27996] ? ksys_write+0x192/0x1a0 [ 397.710121][T27996] __x64_sys_mlock+0x36/0x50 [ 397.710143][T27996] x64_sys_call+0x1794/0x3000 [ 397.710230][T27996] do_syscall_64+0xd8/0x2a0 [ 397.710257][T27996] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.710278][T27996] RIP: 0033:0x7f471bc3f749 [ 397.710298][T27996] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 397.710318][T27996] RSP: 002b:00007f471a6a7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 397.710352][T27996] RAX: ffffffffffffffda RBX: 00007f471be95fa0 RCX: 00007f471bc3f749 [ 397.710363][T27996] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 0000200000000000 [ 397.710375][T27996] RBP: 00007f471a6a7090 R08: 0000000000000000 R09: 0000000000000000 [ 397.710386][T27996] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 397.710456][T27996] R13: 00007f471be96038 R14: 00007f471be95fa0 R15: 00007fff68459418 [ 397.710477][T27996] [ 398.093619][T28003] lo speed is unknown, defaulting to 1000 [ 398.320364][T28028] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(7) [ 398.326958][T28028] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 398.334447][T28028] vhci_hcd vhci_hcd.0: Device attached [ 398.348678][T28028] vhci_hcd vhci_hcd.0: pdev(6) rhport(1) sockfd(9) [ 398.355193][T28028] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 398.362785][T28028] vhci_hcd vhci_hcd.0: Device attached [ 398.369598][T28028] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 398.378636][T28028] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 398.387431][T28028] vhci_hcd vhci_hcd.0: pdev(6) rhport(4) sockfd(15) [ 398.394134][T28028] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 398.401760][T28028] vhci_hcd vhci_hcd.0: Device attached [ 398.412587][T28028] vhci_hcd vhci_hcd.0: pdev(6) rhport(5) sockfd(17) [ 398.419192][T28028] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 398.426781][T28028] vhci_hcd vhci_hcd.0: Device attached [ 398.434965][T28042] netlink: 'syz.2.8385': attribute type 39 has an invalid length. [ 398.445859][T28040] vhci_hcd: connection closed [ 398.446021][ T982] vhci_hcd vhci_hcd.6: stop threads [ 398.455918][ T982] vhci_hcd vhci_hcd.6: release socket [ 398.461363][ T982] vhci_hcd vhci_hcd.6: disconnect device [ 398.477191][T28032] lo speed is unknown, defaulting to 1000 [ 398.483623][T28038] vhci_hcd: connection closed [ 398.483693][T28036] vhci_hcd: connection closed [ 398.488570][T28030] vhci_hcd: connection closed [ 398.498191][ T982] vhci_hcd vhci_hcd.6: stop threads [ 398.508197][ T982] vhci_hcd vhci_hcd.6: release socket [ 398.513565][ T982] vhci_hcd vhci_hcd.6: disconnect device [ 398.536329][ T982] vhci_hcd vhci_hcd.6: stop threads [ 398.541602][ T982] vhci_hcd vhci_hcd.6: release socket [ 398.546978][ T982] vhci_hcd vhci_hcd.6: disconnect device [ 398.553044][ T36] vhci_hcd vhci_hcd.6: vhci_device speed not set [ 398.559698][ T982] vhci_hcd vhci_hcd.6: stop threads [ 398.564894][ T982] vhci_hcd vhci_hcd.6: release socket [ 398.570367][ T982] vhci_hcd vhci_hcd.6: disconnect device [ 398.618050][ T36] usb 13-1: new full-speed USB device number 9 using vhci_hcd [ 398.625535][ T36] usb 13-1: enqueue for inactive port 0 [ 398.631305][ T36] usb 13-1: enqueue for inactive port 0 [ 398.636844][ T36] usb 13-1: enqueue for inactive port 0 [ 398.672706][T28045] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(4) [ 398.679210][T28045] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 398.686731][T28045] vhci_hcd vhci_hcd.0: Device attached [ 398.693074][T28045] vhci_hcd vhci_hcd.0: pdev(8) rhport(1) sockfd(6) [ 398.699582][T28045] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 398.707071][T28045] vhci_hcd vhci_hcd.0: Device attached [ 398.712906][T28045] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 398.718017][ T36] vhci_hcd vhci_hcd.6: vhci_device speed not set [ 398.721410][T28045] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 398.737413][T28045] vhci_hcd vhci_hcd.0: pdev(8) rhport(4) sockfd(12) [ 398.744005][T28045] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 398.751604][T28045] vhci_hcd vhci_hcd.0: Device attached [ 398.757899][T28045] vhci_hcd vhci_hcd.0: pdev(8) rhport(5) sockfd(14) [ 398.764474][T28045] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 398.772121][T28045] vhci_hcd vhci_hcd.0: Device attached [ 398.779668][T28052] vhci_hcd: connection closed [ 398.779694][T28050] vhci_hcd: connection closed [ 398.782107][T23945] vhci_hcd vhci_hcd.8: stop threads [ 398.784449][T28048] vhci_hcd: connection closed [ 398.789116][T23945] vhci_hcd vhci_hcd.8: release socket [ 398.795152][T28046] vhci_hcd: connection closed [ 398.798968][T23945] vhci_hcd vhci_hcd.8: disconnect device [ 398.814871][T23945] vhci_hcd vhci_hcd.8: stop threads [ 398.820139][T23945] vhci_hcd vhci_hcd.8: release socket [ 398.825506][T23945] vhci_hcd vhci_hcd.8: disconnect device [ 398.831379][T23945] vhci_hcd vhci_hcd.8: stop threads [ 398.836571][T23945] vhci_hcd vhci_hcd.8: release socket [ 398.841979][T23945] vhci_hcd vhci_hcd.8: disconnect device [ 398.847769][T23945] vhci_hcd vhci_hcd.8: stop threads [ 398.853016][T23945] vhci_hcd vhci_hcd.8: release socket [ 398.858395][T23945] vhci_hcd vhci_hcd.8: disconnect device [ 398.868020][T14813] vhci_hcd vhci_hcd.8: vhci_device speed not set [ 399.052399][T28062] loop4: detected capacity change from 0 to 512 [ 399.059731][T28062] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 399.223432][ T29] kauditd_printk_skb: 46 callbacks suppressed [ 399.223448][ T29] audit: type=1326 audit(399.198:15404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28075 comm="syz.4.8395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b6428f749 code=0x7ffc0000 [ 399.285396][T28079] lo speed is unknown, defaulting to 1000 [ 399.291339][ T29] audit: type=1326 audit(399.228:15405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28075 comm="syz.4.8395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f9b6428f749 code=0x7ffc0000 [ 399.314369][ T29] audit: type=1326 audit(399.228:15406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28075 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b6428f749 code=0x7ffc0000 [ 399.336513][ T29] audit: type=1326 audit(399.228:15407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28075 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b6428f749 code=0x7ffc0000 [ 399.358684][ T29] audit: type=1326 audit(399.228:15408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28075 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9b6428f749 code=0x7ffc0000 [ 399.380772][ T29] audit: type=1326 audit(399.228:15409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28075 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b6428f749 code=0x7ffc0000 [ 399.402877][ T29] audit: type=1326 audit(399.228:15410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28075 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b6428f749 code=0x7ffc0000 [ 399.424968][ T29] audit: type=1326 audit(399.228:15411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28075 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9b6428f749 code=0x7ffc0000 [ 399.447062][ T29] audit: type=1326 audit(399.228:15412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28075 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b6428f749 code=0x7ffc0000 [ 399.469161][ T29] audit: type=1326 audit(399.228:15413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28075 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b6428f749 code=0x7ffc0000 [ 399.595954][T28088] lo speed is unknown, defaulting to 1000 [ 399.648365][T28086] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(7) [ 399.654873][T28086] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 399.662376][T28086] vhci_hcd vhci_hcd.0: Device attached [ 399.669400][T28093] vhci_hcd vhci_hcd.0: pdev(8) rhport(1) sockfd(10) [ 399.675994][T28093] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 399.683508][T28093] vhci_hcd vhci_hcd.0: Device attached [ 399.689702][T28096] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 399.698617][T28086] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 399.712180][T28086] vhci_hcd vhci_hcd.0: pdev(8) rhport(4) sockfd(16) [ 399.718839][T28086] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 399.726556][T28086] vhci_hcd vhci_hcd.0: Device attached [ 399.756289][T28086] vhci_hcd vhci_hcd.0: pdev(8) rhport(5) sockfd(12) [ 399.762890][T28086] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 399.770487][T28086] vhci_hcd vhci_hcd.0: Device attached [ 399.782773][T28097] vhci_hcd: connection closed [ 399.782784][T28099] vhci_hcd: connection closed [ 399.783074][T28094] vhci_hcd: connection closed [ 399.792517][T20835] vhci_hcd vhci_hcd.8: stop threads [ 399.802398][T20835] vhci_hcd vhci_hcd.8: release socket [ 399.807891][T20835] vhci_hcd vhci_hcd.8: disconnect device [ 399.814062][T28091] vhci_hcd: connection closed [ 399.817769][T20835] vhci_hcd vhci_hcd.8: stop threads [ 399.827736][T20835] vhci_hcd vhci_hcd.8: release socket [ 399.833140][T20835] vhci_hcd vhci_hcd.8: disconnect device [ 399.871049][T20835] vhci_hcd vhci_hcd.8: stop threads [ 399.876269][T20835] vhci_hcd vhci_hcd.8: release socket [ 399.881764][T20835] vhci_hcd vhci_hcd.8: disconnect device [ 399.910881][T20835] vhci_hcd vhci_hcd.8: stop threads [ 399.916106][T20835] vhci_hcd vhci_hcd.8: release socket [ 399.921534][T20835] vhci_hcd vhci_hcd.8: disconnect device [ 400.255674][T28120] __nla_validate_parse: 7 callbacks suppressed [ 400.255688][T28120] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8406'. [ 400.311677][T28125] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8408'. [ 400.417594][T28130] loop4: detected capacity change from 0 to 2048 [ 400.464658][T28130] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 400.572544][T28122] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8407'. [ 400.581630][T28122] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8407'. [ 400.861991][T28147] can: request_module (can-proto-0) failed. [ 400.868634][T28147] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8414'. [ 400.878702][T28147] netlink: 'syz.2.8414': attribute type 10 has an invalid length. [ 400.953982][T28150] loop8: detected capacity change from 0 to 2048 [ 400.982685][T28150] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 401.337832][T28157] loop7: detected capacity change from 0 to 512 [ 401.347873][T28157] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 401.363651][T28162] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8418'. [ 401.372660][T28157] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #16: comm syz.7.8416: invalid indirect mapped block 4294967295 (level 0) [ 401.520304][T28157] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #16: comm syz.7.8416: invalid indirect mapped block 4294967295 (level 1) [ 401.534801][T28157] EXT4-fs (loop7): 1 orphan inode deleted [ 401.540625][T28157] EXT4-fs (loop7): 1 truncate cleaned up [ 401.556734][T28170] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8420'. [ 401.609227][ T3389] hid_parser_main: 33 callbacks suppressed [ 401.609245][ T3389] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 401.622606][ T3389] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 401.630075][ T3389] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 401.637444][ T3389] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 401.644855][ T3389] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 401.651693][T28157] xt_hashlimit: max too large, truncated to 1048576 [ 401.652341][ T3389] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 401.666227][ T3389] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 401.673651][ T3389] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 401.681097][ T3389] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 401.682979][T28176] netlink: 16 bytes leftover after parsing attributes in process `syz.6.8422'. [ 401.688536][ T3389] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 401.697492][T28176] netlink: 24 bytes leftover after parsing attributes in process `syz.6.8422'. [ 401.714587][ T3389] hid-generic 0000:0000:0000.0018: hidraw0: HID v8.01 Device [syz0] on syz0 [ 401.737178][T28178] loop7: detected capacity change from 0 to 512 [ 401.749489][T28178] EXT4-fs warning (device loop7): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 401.754518][T28184] vhci_hcd vhci_hcd.3: default hub control req: 8013 v0000 i0000 l31125 [ 401.773700][T28178] EXT4-fs (loop7): mount failed [ 401.785623][T28184] can: request_module (can-proto-0) failed. [ 401.792059][T28184] netlink: 16 bytes leftover after parsing attributes in process `syz.8.8425'. [ 401.802199][T28184] netlink: 'syz.8.8425': attribute type 10 has an invalid length. [ 402.075289][T28192] loop8: detected capacity change from 0 to 2048 [ 402.164149][T28192] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 402.307439][T28201] netlink: 'syz.4.8430': attribute type 2 has an invalid length. [ 402.523176][T28206] lo speed is unknown, defaulting to 1000 [ 402.664431][T28217] loop4: detected capacity change from 0 to 2048 [ 402.911504][T28220] lo speed is unknown, defaulting to 1000 [ 402.917414][T28220] lo speed is unknown, defaulting to 1000 [ 402.924281][T28220] lo speed is unknown, defaulting to 1000 [ 402.934651][T28220] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 402.964921][T28220] lo speed is unknown, defaulting to 1000 [ 402.971829][T28220] lo speed is unknown, defaulting to 1000 [ 402.978775][T28220] lo speed is unknown, defaulting to 1000 [ 402.985626][T28220] lo speed is unknown, defaulting to 1000 [ 402.992457][T28220] lo speed is unknown, defaulting to 1000 [ 402.999392][T28220] lo speed is unknown, defaulting to 1000 [ 403.005829][T28220] lo speed is unknown, defaulting to 1000 [ 403.017719][T28220] lo speed is unknown, defaulting to 1000 [ 403.040458][T28222] lo speed is unknown, defaulting to 1000 [ 403.047290][T28220] lo speed is unknown, defaulting to 1000 [ 403.048511][T23826] EXT4-fs unmount: 41 callbacks suppressed [ 403.048525][T23826] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 403.053398][T28220] lo speed is unknown, defaulting to 1000 [ 403.064328][T28217] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 403.068219][T28220] lo speed is unknown, defaulting to 1000 [ 403.091959][T28220] lo speed is unknown, defaulting to 1000 [ 403.098386][T28208] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 403.099627][T28220] lo speed is unknown, defaulting to 1000 [ 403.121389][T28222] lo speed is unknown, defaulting to 1000 [ 403.127508][T28220] lo speed is unknown, defaulting to 1000 [ 403.133954][T28220] lo speed is unknown, defaulting to 1000 [ 403.153377][T28220] lo speed is unknown, defaulting to 1000 [ 403.165086][T28220] lo speed is unknown, defaulting to 1000 [ 403.183114][T28220] lo speed is unknown, defaulting to 1000 [ 403.191063][T28220] lo speed is unknown, defaulting to 1000 [ 403.201693][T28220] lo speed is unknown, defaulting to 1000 [ 403.207884][T28220] lo speed is unknown, defaulting to 1000 [ 403.217480][T28220] lo speed is unknown, defaulting to 1000 [ 403.223846][T28220] lo speed is unknown, defaulting to 1000 [ 403.230255][T28220] lo speed is unknown, defaulting to 1000 [ 403.236443][T28220] lo speed is unknown, defaulting to 1000 [ 403.242904][T28220] lo speed is unknown, defaulting to 1000 [ 403.249012][T28220] lo speed is unknown, defaulting to 1000 [ 403.255105][T28220] lo speed is unknown, defaulting to 1000 [ 403.261559][T28220] lo speed is unknown, defaulting to 1000 [ 403.267682][T28220] lo speed is unknown, defaulting to 1000 [ 403.274294][T28220] lo speed is unknown, defaulting to 1000 [ 403.280450][T28220] lo speed is unknown, defaulting to 1000 [ 403.291499][T28220] lo speed is unknown, defaulting to 1000 [ 403.297624][T28220] lo speed is unknown, defaulting to 1000 [ 403.316154][T20332] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 403.318410][T28220] lo speed is unknown, defaulting to 1000 [ 403.326482][T28234] netlink: 'syz.8.8437': attribute type 39 has an invalid length. [ 403.331638][T28220] lo speed is unknown, defaulting to 1000 [ 403.344735][T28220] lo speed is unknown, defaulting to 1000 [ 403.350963][T28220] lo speed is unknown, defaulting to 1000 [ 403.357127][T28220] lo speed is unknown, defaulting to 1000 [ 403.363296][T28220] lo speed is unknown, defaulting to 1000 [ 403.373921][T28220] lo speed is unknown, defaulting to 1000 [ 403.380182][T28220] lo speed is unknown, defaulting to 1000 [ 403.386390][T28220] lo speed is unknown, defaulting to 1000 [ 403.392585][T28220] lo speed is unknown, defaulting to 1000 [ 403.398804][T28220] lo speed is unknown, defaulting to 1000 [ 403.404907][T28220] lo speed is unknown, defaulting to 1000 [ 403.411338][T28220] lo speed is unknown, defaulting to 1000 [ 403.417823][T28220] lo speed is unknown, defaulting to 1000 [ 403.775235][T28244] bridge0: port 3(batadv0) entered blocking state [ 403.781813][T28244] bridge0: port 3(batadv0) entered disabled state [ 403.811711][T28244] batadv0: entered allmulticast mode [ 403.831112][T28244] batadv0: entered promiscuous mode [ 403.889665][T28220] lo speed is unknown, defaulting to 1000 [ 403.895766][T28220] lo speed is unknown, defaulting to 1000 [ 403.901917][T28220] lo speed is unknown, defaulting to 1000 [ 403.908014][T28220] lo speed is unknown, defaulting to 1000 [ 403.914079][T28220] lo speed is unknown, defaulting to 1000 [ 403.920319][T28220] lo speed is unknown, defaulting to 1000 [ 403.926376][T28220] lo speed is unknown, defaulting to 1000 [ 403.932687][T28220] lo speed is unknown, defaulting to 1000 [ 403.938835][T28220] lo speed is unknown, defaulting to 1000 [ 403.944909][T28220] lo speed is unknown, defaulting to 1000 [ 403.960457][T28220] lo speed is unknown, defaulting to 1000 [ 403.966709][T28220] lo speed is unknown, defaulting to 1000 [ 403.972824][T28220] lo speed is unknown, defaulting to 1000 [ 403.978987][T28220] lo speed is unknown, defaulting to 1000 [ 403.985105][T28220] lo speed is unknown, defaulting to 1000 [ 403.991375][T28220] lo speed is unknown, defaulting to 1000 [ 403.997621][T28220] lo speed is unknown, defaulting to 1000 [ 404.004107][T28220] lo speed is unknown, defaulting to 1000 [ 404.010210][T28220] lo speed is unknown, defaulting to 1000 [ 404.011445][T24786] hid-generic 0000:0000:0000.0019: hidraw0: HID v8.01 Device [syz0] on syz0 [ 404.016559][T28220] lo speed is unknown, defaulting to 1000 [ 404.032115][T28220] lo speed is unknown, defaulting to 1000 [ 404.038317][T28220] lo speed is unknown, defaulting to 1000 [ 404.044512][T28220] lo speed is unknown, defaulting to 1000 [ 404.050880][T28220] lo speed is unknown, defaulting to 1000 [ 404.067083][T28220] lo speed is unknown, defaulting to 1000 [ 404.075154][T28220] lo speed is unknown, defaulting to 1000 [ 404.088119][T28264] loop8: detected capacity change from 0 to 512 [ 404.099848][T28262] batadv0 (unregistering): left allmulticast mode [ 404.106371][T28262] batadv0 (unregistering): left promiscuous mode [ 404.112821][T28262] bridge0: port 3(batadv0) entered disabled state [ 404.119966][T14699] ================================================================== [ 404.128042][T14699] BUG: KCSAN: data-race in __filemap_add_folio / nr_blockdev_pages [ 404.135929][T14699] [ 404.138239][T14699] read-write to 0xffff888100483db8 of 8 bytes by task 28264 on cpu 1: [ 404.146374][T14699] __filemap_add_folio+0x5b9/0x7d0 [ 404.151472][T14699] filemap_add_folio+0x1d9/0x360 [ 404.156390][T14699] __filemap_get_folio_mpol+0x326/0x650 [ 404.161922][T14699] bdev_getblk+0x174/0x3f0 [ 404.166322][T14699] read_mmp_block+0xa4/0x2b0 [ 404.170895][T14699] ext4_multi_mount_protect+0x112/0x600 [ 404.176422][T14699] ext4_fill_super+0x22cf/0x37a0 [ 404.181341][T14699] get_tree_bdev_flags+0x291/0x300 [ 404.186436][T14699] get_tree_bdev+0x1f/0x30 [ 404.190831][T14699] ext4_get_tree+0x1c/0x30 [ 404.195230][T14699] vfs_get_tree+0x57/0x1d0 [ 404.199625][T14699] do_new_mount+0x24d/0x6a0 [ 404.204116][T14699] path_mount+0x4ab/0xb80 [ 404.208424][T14699] __se_sys_mount+0x28c/0x2e0 [ 404.213081][T14699] __x64_sys_mount+0x67/0x80 [ 404.217655][T14699] x64_sys_call+0x2cca/0x3000 [ 404.222317][T14699] do_syscall_64+0xd8/0x2a0 [ 404.226810][T14699] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 404.232685][T14699] [ 404.234989][T14699] read to 0xffff888100483db8 of 8 bytes by task 14699 on cpu 0: [ 404.242596][T14699] nr_blockdev_pages+0x7e/0xd0 [ 404.247342][T14699] si_meminfo+0x87/0xd0 [ 404.251480][T14699] update_defense_level+0x47/0x5c0 [ 404.256579][T14699] defense_work_handler+0x1f/0x80 [ 404.261588][T14699] process_scheduled_works+0x4ce/0x9d0 [ 404.267029][T14699] worker_thread+0x582/0x770 [ 404.271602][T14699] kthread+0x489/0x510 [ 404.275658][T14699] ret_from_fork+0x149/0x290 [ 404.280236][T14699] ret_from_fork_asm+0x1a/0x30 [ 404.284986][T14699] [ 404.287288][T14699] value changed: 0x0000000000000001 -> 0x0000000000000002 [ 404.294379][T14699] [ 404.296689][T14699] Reported by Kernel Concurrency Sanitizer on: [ 404.302826][T14699] CPU: 0 UID: 0 PID: 14699 Comm: kworker/0:11 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 404.314363][T14699] Tainted: [W]=WARN [ 404.318151][T14699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 404.328189][T14699] Workqueue: events_long defense_work_handler [ 404.334251][T14699] ================================================================== [ 404.343485][T21279] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 404.352702][T21279] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 404.363533][T28220] lo speed is unknown, defaulting to 1000 [ 404.369367][T28269] netlink: 'syz.6.8454': attribute type 12 has an invalid length. [ 404.377171][T28269] netlink: 'syz.6.8454': attribute type 29 has an invalid length. [ 404.385110][T28220] lo speed is unknown, defaulting to 1000 [ 404.391499][T28220] lo speed is unknown, defaulting to 1000 [ 404.398135][T28220] lo speed is unknown, defaulting to 1000 [ 404.404348][T28220] lo speed is unknown, defaulting to 1000 [ 404.410824][T28220] lo speed is unknown, defaulting to 1000 [ 404.417139][T28220] lo speed is unknown, defaulting to 1000 [ 404.423659][T28220] lo speed is unknown, defaulting to 1000 [ 404.429825][T28220] lo speed is unknown, defaulting to 1000 [ 404.436070][T28220] lo speed is unknown, defaulting to 1000 [ 404.442604][T28220] lo speed is unknown, defaulting to 1000 [ 404.449185][T28220] lo speed is unknown, defaulting to 1000 [ 404.455334][T28220] lo speed is unknown, defaulting to 1000 [ 404.464407][T28264] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 404.484831][T28220] lo speed is unknown, defaulting to 1000 [ 404.491275][T28264] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 404.491312][T28220] lo speed is unknown, defaulting to 1000 [ 404.491686][T28220] lo speed is unknown, defaulting to 1000 [ 404.511539][T28220] lo speed is unknown, defaulting to 1000 [ 404.517540][T28220] lo speed is unknown, defaulting to 1000 [ 404.524728][T28220] lo speed is unknown, defaulting to 1000 [ 404.530910][T23826] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 404.530975][T28220] lo speed is unknown, defaulting to 1000 [ 404.546184][T28220] lo speed is unknown, defaulting to 1000 [ 404.552643][T28220] lo speed is unknown, defaulting to 1000 [ 404.559122][T28220] lo speed is unknown, defaulting to 1000 [ 404.565401][T28220] lo speed is unknown, defaulting to 1000 [ 404.571951][T28220] lo speed is unknown, defaulting to 1000 [ 404.578251][T28220] lo speed is unknown, defaulting to 1000 [ 404.584563][T28220] lo speed is unknown, defaulting to 1000 [ 404.596062][T28220] lo speed is unknown, defaulting to 1000 [ 404.605718][T28220] lo speed is unknown, defaulting to 1000 [ 404.612341][T28220] lo speed is unknown, defaulting to 1000 [ 404.618845][T28220] lo speed is unknown, defaulting to 1000 [ 404.625185][T28220] lo speed is unknown, defaulting to 1000 [ 404.632388][T28220] lo speed is unknown, defaulting to 1000 [ 404.638907][T28220] lo speed is unknown, defaulting to 1000 [ 404.647063][T28220] lo speed is unknown, defaulting to 1000 [ 404.653653][T28220] lo speed is unknown, defaulting to 1000 [ 404.660065][T28220] lo speed is unknown, defaulting to 1000 [ 404.666755][T28220] lo speed is unknown, defaulting to 1000 [ 404.673716][T28220] lo speed is unknown, defaulting to 1000 [ 404.681218][T28220] lo speed is unknown, defaulting to 1000 [ 404.688301][T28220] lo speed is unknown, defaulting to 1000 [ 404.694903][T28220] lo speed is unknown, defaulting to 1000 [ 404.708213][T28220] lo speed is unknown, defaulting to 1000 [ 404.714575][T28220] lo speed is unknown, defaulting to 1000 [ 404.721490][T28220] lo speed is unknown, defaulting to 1000 [ 404.727702][T28220] lo speed is unknown, defaulting to 1000 [ 404.734675][T28220] lo speed is unknown, defaulting to 1000 [ 404.740933][T28220] lo speed is unknown, defaulting to 1000 [ 404.747886][T28220] lo speed is unknown, defaulting to 1000 [ 404.792122][T28220] lo speed is unknown, defaulting to 1000 [ 404.799031][T28220] lo speed is unknown, defaulting to 1000 [ 404.805524][T28220] lo speed is unknown, defaulting to 1000 [ 404.815823][T28220] lo speed is unknown, defaulting to 1000 [ 404.822439][T28220] lo speed is unknown, defaulting to 1000 [ 404.829113][T28220] lo speed is unknown, defaulting to 1000 [ 404.835614][T28220] lo speed is unknown, defaulting to 1000 [ 404.842933][T28220] lo speed is unknown, defaulting to 1000 [ 404.849564][T28220] lo speed is unknown, defaulting to 1000 [ 404.856137][T28220] lo speed is unknown, defaulting to 1000 [ 404.863471][T28220] lo speed is unknown, defaulting to 1000 [ 404.869773][T28220] lo speed is unknown, defaulting to 1000 [ 404.876205][T28220] lo speed is unknown, defaulting to 1000 [ 404.883464][T28220] lo speed is unknown, defaulting to 1000 [ 404.889784][T28220] lo speed is unknown, defaulting to 1000 [ 404.896332][T28220] lo speed is unknown, defaulting to 1000 [ 404.903339][T28220] lo speed is unknown, defaulting to 1000 [ 404.909795][T28220] lo speed is unknown, defaulting to 1000 [ 404.916185][T28220] lo speed is unknown, defaulting to 1000 [ 404.926157][T28220] lo speed is unknown, defaulting to 1000 [ 404.932773][T28220] lo speed is unknown, defaulting to 1000 [ 404.939981][T28220] lo speed is unknown, defaulting to 1000 [ 404.946461][T28220] lo speed is unknown, defaulting to 1000 [ 404.953059][T28220] lo speed is unknown, defaulting to 1000 [ 404.984782][T28220] lo speed is unknown, defaulting to 1000 [ 404.990960][T28220] lo speed is unknown, defaulting to 1000 [ 404.996965][T28220] lo speed is unknown, defaulting to 1000 [ 405.003374][T28220] lo speed is unknown, defaulting to 1000 [ 405.009517][T28220] lo speed is unknown, defaulting to 1000 [ 405.015588][T28220] lo speed is unknown, defaulting to 1000 [ 405.022029][T28220] lo speed is unknown, defaulting to 1000 [ 405.028312][T28220] lo speed is unknown, defaulting to 1000 [ 405.034474][T28220] lo speed is unknown, defaulting to 1000 [ 405.042745][T28220] lo speed is unknown, defaulting to 1000 [ 405.049066][T28220] lo speed is unknown, defaulting to 1000 [ 405.055178][T28220] lo speed is unknown, defaulting to 1000 [ 405.061509][T28220] lo speed is unknown, defaulting to 1000 [ 405.067478][T28220] lo speed is unknown, defaulting to 1000 [ 405.073836][T28220] lo speed is unknown, defaulting to 1000 [ 405.084956][T28220] lo speed is unknown, defaulting to 1000 [ 405.091205][T28220] lo speed is unknown, defaulting to 1000 [ 405.097400][T28220] lo speed is unknown, defaulting to 1000 [ 405.104055][T28220] lo speed is unknown, defaulting to 1000 [ 405.110378][T28220] lo speed is unknown, defaulting to 1000 [ 405.116614][T28220] lo speed is unknown, defaulting to 1000 [ 405.123368][T28220] lo speed is unknown, defaulting to 1000 [ 405.129638][T28220] lo speed is unknown, defaulting to 1000 [ 405.135686][T28220] lo speed is unknown, defaulting to 1000 [ 405.141950][T28220] lo speed is unknown, defaulting to 1000 [ 405.148155][T28220] lo speed is unknown, defaulting to 1000 [ 405.154333][T28220] lo speed is unknown, defaulting to 1000 [ 405.162797][T28220] lo speed is unknown, defaulting to 1000 [ 405.168784][T28220] lo speed is unknown, defaulting to 1000 [ 405.174859][T28220] lo speed is unknown, defaulting to 1000 [ 405.181023][T28220] lo speed is unknown, defaulting to 1000 [ 405.187043][T28220] lo speed is unknown, defaulting to 1000 [ 405.193330][T28220] lo speed is unknown, defaulting to 1000 [ 405.199470][T28220] lo speed is unknown, defaulting to 1000 [ 405.205488][T28220] lo speed is unknown, defaulting to 1000 [ 405.211772][T28220] lo speed is unknown, defaulting to 1000 [ 405.217814][T28220] lo speed is unknown, defaulting to 1000 [ 405.224056][T28220] lo speed is unknown, defaulting to 1000 [ 405.230106][T28220] lo speed is unknown, defaulting to 1000 [ 405.236308][T28220] lo speed is unknown, defaulting to 1000 [ 405.242688][T28220] lo speed is unknown, defaulting to 1000 [ 405.248749][T28220] lo speed is unknown, defaulting to 1000 [ 405.254761][T28220] lo speed is unknown, defaulting to 1000 [ 405.261039][T28220] lo speed is unknown, defaulting to 1000 [ 405.267094][T28220] lo speed is unknown, defaulting to 1000 [ 405.275320][T28220] lo speed is unknown, defaulting to 1000 [ 405.281439][T28220] lo speed is unknown, defaulting to 1000 [ 405.287655][T28220] lo speed is unknown, defaulting to 1000 [ 405.294008][T28220] lo speed is unknown, defaulting to 1000 [ 405.300229][T28220] lo speed is unknown, defaulting to 1000 [ 405.306267][T28220] lo speed is unknown, defaulting to 1000 [ 405.312628][T28220] lo speed is unknown, defaulting to 1000 [ 405.318647][T28220] lo speed is unknown, defaulting to 1000 [ 405.324798][T28220] lo speed is unknown, defaulting to 1000 [ 405.331088][T28220] lo speed is unknown, defaulting to 1000 [ 405.337250][T28220] lo speed is unknown, defaulting to 1000 [ 405.343465][T28220] lo speed is unknown, defaulting to 1000 [ 405.349483][T28220] lo speed is unknown, defaulting to 1000 [ 405.355472][T28220] lo speed is unknown, defaulting to 1000 [ 405.361754][T28220] lo speed is unknown, defaulting to 1000 [ 405.367848][T28220] lo speed is unknown, defaulting to 1000 [ 405.374113][T28220] lo speed is unknown, defaulting to 1000 [ 405.382413][T28220] lo speed is unknown, defaulting to 1000 [ 405.388601][T28220] lo speed is unknown, defaulting to 1000 [ 405.394589][T28220] lo speed is unknown, defaulting to 1000 [ 405.402034][T28220] lo speed is unknown, defaulting to 1000 [ 405.408275][T28220] lo speed is unknown, defaulting to 1000 [ 405.414353][T28220] lo speed is unknown, defaulting to 1000 [ 405.420637][T28220] lo speed is unknown, defaulting to 1000 [ 405.426733][T28220] lo speed is unknown, defaulting to 1000 [ 405.432947][T28220] lo speed is unknown, defaulting to 1000 [ 405.439092][T28220] lo speed is unknown, defaulting to 1000 [ 405.445229][T28220] lo speed is unknown, defaulting to 1000 [ 405.451539][T28220] lo speed is unknown, defaulting to 1000 [ 405.457511][T28220] lo speed is unknown, defaulting to 1000 [ 405.463707][T28220] lo speed is unknown, defaulting to 1000 [ 405.469640][T28220] lo speed is unknown, defaulting to 1000 [ 405.475714][T28220] lo speed is unknown, defaulting to 1000 [ 405.482257][T28220] lo speed is unknown, defaulting to 1000 [ 405.488277][T28220] lo speed is unknown, defaulting to 1000 [ 405.494281][T28220] lo speed is unknown, defaulting to 1000 [ 405.503080][T28220] lo speed is unknown, defaulting to 1000 [ 405.509381][T28220] lo speed is unknown, defaulting to 1000 [ 405.518703][T28220] lo speed is unknown, defaulting to 1000 [ 405.524742][T28220] lo speed is unknown, defaulting to 1000 [ 405.531030][T28220] lo speed is unknown, defaulting to 1000 [ 405.537172][T28220] lo speed is unknown, defaulting to 1000 [ 405.543444][T28220] lo speed is unknown, defaulting to 1000 [ 405.549942][T28220] lo speed is unknown, defaulting to 1000 [ 405.556139][T28220] lo speed is unknown, defaulting to 1000 [ 405.562772][T28220] lo speed is unknown, defaulting to 1000 [ 405.568876][T28220] lo speed is unknown, defaulting to 1000 [ 405.574811][T28220] lo speed is unknown, defaulting to 1000 [ 405.581169][T28220] lo speed is unknown, defaulting to 1000 [ 405.587219][T28220] lo speed is unknown, defaulting to 1000 [ 405.593524][T28220] lo speed is unknown, defaulting to 1000 [ 405.599666][T28220] lo speed is unknown, defaulting to 1000 [ 405.605641][T28220] lo speed is unknown, defaulting to 1000 [ 405.613946][T28220] lo speed is unknown, defaulting to 1000 [ 405.620114][T28220] lo speed is unknown, defaulting to 1000 [ 405.626137][T28220] lo speed is unknown, defaulting to 1000 [ 405.632524][T28220] lo speed is unknown, defaulting to 1000 [ 405.640710][T28220] lo speed is unknown, defaulting to 1000 [ 405.646871][T28220] lo speed is unknown, defaulting to 1000 [ 405.653158][T28220] lo speed is unknown, defaulting to 1000 [ 405.659253][T28220] lo speed is unknown, defaulting to 1000 [ 405.665238][T28220] lo speed is unknown, defaulting to 1000 [ 405.671517][T28220] lo speed is unknown, defaulting to 1000 [ 405.677564][T28220] lo speed is unknown, defaulting to 1000 [ 405.683929][T28220] lo speed is unknown, defaulting to 1000 [ 405.690050][T28220] lo speed is unknown, defaulting to 1000 [ 405.696151][T28220] lo speed is unknown, defaulting to 1000 [ 405.702314][T28220] lo speed is unknown, defaulting to 1000 [ 405.708386][T28220] lo speed is unknown, defaulting to 1000 [ 405.714586][T28220] lo speed is unknown, defaulting to 1000 [ 405.723282][T28220] lo speed is unknown, defaulting to 1000 [ 405.729363][T28220] lo speed is unknown, defaulting to 1000 [ 405.735380][T28220] lo speed is unknown, defaulting to 1000 [ 405.741616][T28220] lo speed is unknown, defaulting to 1000 [ 405.747733][T28220] lo speed is unknown, defaulting to 1000 [ 405.753930][T28220] lo speed is unknown, defaulting to 1000