last executing test programs: 5m17.221285085s ago: executing program 32 (id=399): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014", @ANYRESHEX=0x0, @ANYRESDEC, @ANYRES64, @ANYRES32=r0, @ANYRES32=r0, @ANYRES8=r0, @ANYRES64=r1, @ANYRES64=r1, @ANYRES32=r1, @ANYRES64=0x0], 0x48) r2 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x8f, &(0x7f00000002c0)=""/143}, 0x80) setuid(0xee00) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) flistxattr(0xffffffffffffffff, 0x0, 0x0) 5m13.241788978s ago: executing program 33 (id=450): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000100000000000000040000850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 5m12.917342273s ago: executing program 34 (id=459): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f00000002c0)='./file0\x00', 0xc80, &(0x7f0000020100)=ANY=[@ANYBLOB="00631dda01aef2456795dd9b26209f1c0f624854ea3dd5a00bd6df44035f5c3ae796fec6d633a0ffad0569794acfef7da01767fd4175f2cd82df769aa2ee7bfe3640554507d2e660c9f9e222a72e1e3e71145c480657d2864e5e276f028d64701ae31cde0ceaf408fdb05c0f4142da00e900000100000149e6d308cbe315789f4baffe39bbced9b1d421d2e290e9fc563b62225f002ee310e1fa7321000000000000d6231001a4b2d467825f3abb0c167e129cf1fa0e7854103f4bf2d3a0194983bc86cbd3d75ccef3c8ac4516dac102"], 0x1, 0x27c, &(0x7f0000000600)="$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") r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) r2 = syz_clone(0x2000000, 0x0, 0x60, 0x0, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ptrace(0x10, r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000140)=0x2) io_submit(0x0, 0x1, &(0x7f0000000300)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0, 0x0, 0x10000, 0x0, 0x2}]) 4m59.531037676s ago: executing program 6 (id=723): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x12) sendmsg$inet(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x0) 4m59.432279658s ago: executing program 6 (id=725): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000180), 0x1, 0x553, &(0x7f0000001080)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x2302, 0x0) syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$inet(r1, &(0x7f0000000780)={&(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000540)=[{&(0x7f00000000c0)="a5", 0x1}], 0x1}, 0x4) setsockopt$sock_attach_bpf(r1, 0x29, 0x6, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0x2, 0x1000000000000002, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x0, 0x7, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$inet(r2, &(0x7f0000007940)={&(0x7f00000001c0)={0x2, 0x4e22, @dev}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp_prespec={0x44, 0xc, 0x5, 0x3, 0xe, [{@broadcast}]}]}}}], 0x20}, 0x0) 4m59.365435398s ago: executing program 0 (id=727): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) 4m59.351571928s ago: executing program 0 (id=728): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000800), 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r1, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f0000000380)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0x19, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000008000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) r5 = syz_open_dev$usbfs(&(0x7f00000001c0), 0x800000001fe, 0x2) r6 = dup(r5) ioctl$USBDEVFS_CONTROL(r6, 0xc0185500, &(0x7f0000000040)={0x23, 0x3, 0x18, 0x2, 0x0, 0x0, 0x0}) 4m59.337265299s ago: executing program 6 (id=729): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000800), 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r1, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f0000000380)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0x19, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000008000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = syz_open_dev$usbfs(&(0x7f00000001c0), 0x800000001fe, 0x2) r5 = dup(r4) ioctl$USBDEVFS_CONTROL(r5, 0xc0185500, &(0x7f0000000040)={0x23, 0x3, 0x18, 0x2, 0x0, 0x0, 0x0}) 4m59.29783148s ago: executing program 0 (id=731): openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000018010000646c6c250000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xfe, 0x0, 0x7ffc0002}]}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x4, 0x600, 0x8000) mknod$loop(0x0, 0x100000000000600d, 0x0) syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1018e58, &(0x7f0000000400)={[{@user_xattr}]}, 0xff, 0x5fd, &(0x7f0000000600)="$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") bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000500)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffff11}, 0x94) r0 = msgget$private(0x0, 0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f0000258f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x0, 0x0, 0x2, 0xfffffffffffffffd, 0x0, 0x400000000000}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={0x0, 0xffffffffffffffff, 0x0, 0x68d}, 0x18) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000040)={0x53, 0x0, 0x0, 0x0, @buffer={0x17, 0x0, 0x0}, &(0x7f0000000380), 0x0, 0x0, 0x0, 0x0, 0x0}) msgsnd(r0, &(0x7f00000003c0)=ANY=[], 0x0, 0x0) msgrcv(r0, 0x0, 0x0, 0x3, 0x0) msgctl$IPC_INFO(r0, 0x3, &(0x7f00000002c0)=""/14) bind$inet6(0xffffffffffffffff, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) 4m59.26019489s ago: executing program 6 (id=733): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f00000002c0)='./file0\x00', 0xc80, &(0x7f0000020100)=ANY=[@ANYBLOB="00631dda01aef2456795dd9b26209f1c0f624854ea3dd5a00bd6df44035f5c3ae796fec6d633a0ffad0569794acfef7da01767fd4175f2cd82df769aa2ee7bfe3640554507d2e660c9f9e222a72e1e3e71145c480657d2864e5e276f028d64701ae31cde0ceaf408fdb05c0f4142da00e900000100000149e6d308cbe315789f4baffe39bbced9b1d421d2e290e9fc563b62225f002ee310e1fa7321000000000000d6231001a4b2d467825f3abb0c167e129cf1fa0e7854103f4bf2d3a0194983bc86cbd3d75ccef3c8ac4516dac102"], 0x1, 0x27c, &(0x7f0000000600)="$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") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x810408, 0x0, 0x0, 0x0, &(0x7f00000007c0)) rename(&(0x7f0000000440)='./mnt\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x18) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0, r0}, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000200)={&(0x7f0000000040)=@abs={0x1, 0x2e, 0x4e22}, 0x6e, 0x0}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) r2 = syz_clone(0x2000000, 0x0, 0x60, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) ptrace(0x10, r2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000100)=ANY=[], 0x1dc}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB='2'], 0x118) syz_open_dev$evdev(0x0, 0x0, 0x822b01) 4m59.173928031s ago: executing program 6 (id=734): capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0xd, 0x0, 0x81, 0xfffffffb}) 4m58.931308195s ago: executing program 6 (id=744): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x70, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x200000001300, 0x200000001330], 0x0, 0x0, &(0x7f0000001300)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff000000000000000000000000000000000000000000000000000000f0ffffff00000000000000000000000000ffffffff0000000000000000000000002000000000000000000000000000000000000000000000000000000000000000fcffffff00000000"]}, 0x108) 4m58.897481246s ago: executing program 35 (id=744): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x70, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x200000001300, 0x200000001330], 0x0, 0x0, &(0x7f0000001300)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff000000000000000000000000000000000000000000000000000000f0ffffff00000000000000000000000000ffffffff0000000000000000000000002000000000000000000000000000000000000000000000000000000000000000fcffffff00000000"]}, 0x108) 4m58.391761854s ago: executing program 0 (id=759): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f00000002c0)='./file0\x00', 0xc80, &(0x7f0000020100)=ANY=[@ANYBLOB="00631dda01aef2456795dd9b26209f1c0f624854ea3dd5a00bd6df44035f5c3ae796fec6d633a0ffad0569794acfef7da01767fd4175f2cd82df769aa2ee7bfe3640554507d2e660c9f9e222a72e1e3e71145c480657d2864e5e276f028d64701ae31cde0ceaf408fdb05c0f4142da00e900000100000149e6d308cbe315789f4baffe39bbced9b1d421d2e290e9fc563b62225f002ee310e1fa7321000000000000d6231001a4b2d467825f3abb0c167e129cf1fa0e7854103f4bf2d3a0194983bc86cbd3d75ccef3c8ac4516dac102"], 0x1, 0x27c, &(0x7f0000000600)="$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") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x810408, 0x0, 0x0, 0x0, &(0x7f00000007c0)) rename(&(0x7f0000000440)='./mnt\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x18) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0, r0}, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000200)={&(0x7f0000000040)=@abs={0x1, 0x2e, 0x4e22}, 0x6e, 0x0}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) r2 = syz_clone(0x2000000, 0x0, 0x60, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) ptrace(0x10, r2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000100)=ANY=[], 0x1dc}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB='2'], 0x118) syz_open_dev$evdev(0x0, 0x0, 0x822b01) 4m58.326981955s ago: executing program 0 (id=760): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40000100, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x800, 0xfffffffc, 0x7, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x20000000000002b8, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x8000, 0x0, 0x0, 0x41000}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x21, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r3}, 0x9) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffe, r0, 0x1) 4m58.191137927s ago: executing program 0 (id=761): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40000100, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x800, 0xfffffffc, 0x7, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x20000000000002b8, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x8000, 0x0, 0x0, 0x41000}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x21, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r3}, 0x9) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffe, r0, 0x1) 4m58.186131097s ago: executing program 36 (id=761): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40000100, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x800, 0xfffffffc, 0x7, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x20000000000002b8, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x8000, 0x0, 0x0, 0x41000}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x21, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r3}, 0x9) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffe, r0, 0x1) 4m20.331660209s ago: executing program 3 (id=1665): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000007000000020000000400000005"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r2, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000770000000e000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e8500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r7}, 0x10) kexec_load(0x0, 0x1, &(0x7f0000000140)=[{0x0, 0x3e00, 0x116094000, 0x41000000}], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00', r4}, 0x10) acct(0x0) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r9], 0x0}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r11}, 0x10) socket$packet(0x11, 0xa, 0x300) r12 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r12, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688ca4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2c40de67a000007020000f8ffffffb703000008000000b70400760000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x41, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r13}, 0x10) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0x1d, &(0x7f0000000d80)=ANY=[@ANYBLOB="1802000066f9bfff00cbcf81f4ffffffb7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa10000000000000701002d4694c7ffbfa40000040000f0ffffffb70100000800000018230000", @ANYRESHEX=r6, @ANYRES64=r10, @ANYRES32=r1, @ANYBLOB="0000009570b10ded63581f", @ANYRES64=r8, @ANYRESDEC=r0], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x90}, 0x94) syz_genetlink_get_family_id$wireguard(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'tunl0\x00', 0x0, 0x8000, 0x8000, 0x384, 0x1, {{0x7, 0x4, 0x3, 0x3, 0x1c, 0x66, 0x0, 0x8, 0x2f, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@end, @ra={0x94, 0x4}]}}}}}) 4m20.007402934s ago: executing program 3 (id=1676): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xf43b000) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000002540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x66, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x76200}], 0x1, 0x7c00, 0x0, 0x3) 4m19.766419748s ago: executing program 3 (id=1687): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0x17, &(0x7f0000000040)=0x5, 0x3) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x8000000, 0x0, 0x85, "00000000000000000000ffff00"}) r2 = syz_open_pts(r0, 0x0) ioctl$TIOCMBIC(r2, 0x5417, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000080000000000000010000009400000007ad4160850000000f000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000000c0)='netlink_extack\x00', r3}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a00000000", @ANYRES32], 0x38}}, 0x10) r5 = socket(0x10, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x400, 0x0) close(r7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) socket$packet(0x11, 0x3, 0x300) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) writev(r6, &(0x7f0000000040)=[{&(0x7f0000000100)="89e7ee2c78dad9b4b473fec988ca", 0xe}], 0x1) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1b00000000000000000000000700000000000000", @ANYRES32=0x1, @ANYBLOB="61000000000000001700"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000200"/28], 0x50) getsockname$packet(0xffffffffffffffff, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r11 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) pwritev2(r11, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0x5405, 0xd3, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r11, 0xc020662a, &(0x7f00000006c0)={0xffffffff, 0x800000000400, 0x4, 0x100, 0x1, 0x0, [{0x5, 0x0, 0x3, '\x00', 0x2}]}) sendmsg$nl_route(r5, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@ipv6_newnexthop={0x38, 0x68, 0x1, 0x0, 0x0, {0x2, 0x0, 0x1, 0x0, 0x4}, [@NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @LWTUNNEL_IP6_TC={0x5, 0x5, 0x7}}, @NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @MPLS_IPTUNNEL_DST={0x8, 0x1, [{0x8001, 0x0, 0x1}]}}, @NHA_OIF={0x8, 0x5, r10}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x0) 4m19.567545391s ago: executing program 3 (id=1695): r0 = syz_io_uring_setup(0x49f, &(0x7f0000000400)={0x0, 0xe7a8, 0x3400, 0x7ffe, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) r3 = eventfd2(0xff, 0x80001) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000300)=r3, 0x1) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x4, 0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1, 0x1}) io_uring_enter(r0, 0x627, 0x4c1, 0x43, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x800040, &(0x7f0000000340), 0x1, 0x573, &(0x7f0000000ec0)="$eJzs3T1sG+UbAPDnzvG/X/mTIoEEqEMFSEWq6iT9gMLUrohKlTogsUDkuFEVJ47iBJooQ7pXiA4IUJeywcAIYmBALIysLCBmpIpGIDUdwMhfaZo4wSl1XHK/n3T2vfee/bzvnZ/XvtOdHEBmHa0/pBHPRsTFJGJoXd1AtCqPNtdbXVkq3ltZKiZRq136LYkkIu6uLBXb6yet50MRsRwRz0TEd/mI4+nmuNWFxcmxcrk02yoPz03NDFcXFk9cmRqbKE2Upk+98uqZs6fPjJ4cXf+ye7X1pfzO+nr95xvvX//h9Vs3Pv/iyHLxw7EkzsVgq259Px6l5jbJx7kNy0/3IlgfJf1uAA8l18rzeio9HUORa2V9J7WhXW0a0GO1fRE1IKMS+Q8Z1f4dUD/+bU+7+fvj9vnmAUg97mpratYMNM9NxP7GscnB35MHjkzqx5uHd7Oh7EnL1yJiZGBg8+c/aX3+Ht7Io2ggPfXt+eaO2rz/07XxJzqMP4Ptc6f/Unv8W900/t2Pn9ti/LvYZYw/3/rlky3jX4t4rmP8ZC1+0iF+GhHvdBn/5ptfn92qrvZpxLHoHL8t2f788PDlK+XSSPOxY4xvjh15bbv+H9wifvOc7f7G10yn7T/TZf+/+v7L55e3if/SC9vv/07b/0BEfNBl/CfvfvbGVnW3ryV36r8Cdrr/68tudRn/5XNHf+pyVQAAAAAAAAAAYAfSxrVsSVpYm0/TQqF5D+9TcTAtV6pzxy9X5qfHm9e8HY582r7SaqhZTurl0db1uO3yyQ3lU7lWwNyBRrlQrJTH+9x3AAAAAAAAAAAAAAAAAAAAeFwc2nD//x+5xv3/G/+uGtirtv7Lb2Cvk/+QXQ/mf9K3dgC7z/c/ZFZN/kN2yX/ILvkP2SX/IbvkP2SX/Ifskv8AAAAAAAAAAAAAAAAAAAAAAAAAANATFy9cqE+1eytLxXp5fGBhfrLy7onxUnWyMDVfLBQrszOFiUplolwqFCtT//R+SaUyMxLT81eH50rVueHqwuLbU5X56fZ/ipbyPe8RAAAAAAAAAAAAAAAAAAAA/PcMNqYkLURE2phP00Ih4v8RcTjyyeUr5dJIRDwRET/m8vvq5dF+NxoAAAAAAAAAAAAAAAAAAAD2mOrC4uRYuVyazcjMwE5WjojlR9uM+jvu+FX51r56XLahmSzM9HlgAgAAAAAAAAAAAAAAAACADLp/02+3r/irtw0CAAAAAAAAAAAAAAAAAACATEp/TSKiPh0benFwY+3/ktVc4zki3rt56aOrY3Nzs6P15XfWls993Fp+sh/tB7rVztN2HgMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD3VRcWJ8fK5dJsD2f63UcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAh/F3AAAA///pCdd8") mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) umount2(0x0, 0x0) 4m19.421700404s ago: executing program 3 (id=1699): r0 = syz_io_uring_setup(0x49f, &(0x7f0000000400)={0x0, 0xe7a8, 0x3400, 0x7ffe, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) r3 = eventfd2(0xff, 0x80001) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000300)=r3, 0x1) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x4, 0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1, 0x1}) io_uring_enter(r0, 0x627, 0x4c1, 0x43, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001340)={&(0x7f0000000340)='kfree\x00', r4, 0x0, 0x6}, 0x18) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8937, &(0x7f0000000680)='lo:\x96o8\x14d\xa1\xe3\xd7\\b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xbaUn\x04\'%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\r\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc50xffffffffffffffff}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) epoll_create(0x8) close_range(r0, r1, 0x0) 2m21.712013056s ago: executing program 7 (id=3761): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r0}, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000770000000e000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e8500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r3}, 0x10) kexec_load(0x0, 0x1, &(0x7f0000000140)=[{0x0, 0x3e00, 0x116094000, 0x41000000}], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) acct(0x0) socket$inet6(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4], 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r5}, 0x10) socket$packet(0x11, 0xa, 0x300) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688ca4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2m21.50256748s ago: executing program 7 (id=3763): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r0}, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000007000000020000000400000005"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r1}, &(0x7f0000000b00), 0x0}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000770000000e000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) socket$packet(0x11, 0xa, 0x300) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688ca4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2m21.309168052s ago: executing program 7 (id=3766): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x800040, &(0x7f0000000340), 0x1, 0x573, &(0x7f0000000ec0)="$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") mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1c0) umount2(0x0, 0x0) 2m21.179896725s ago: executing program 7 (id=3769): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x0, 0x0}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fcae68da850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000400000000dfffff1918120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x691, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x8c0}, 0x0) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}]}, 0x40}}, 0xc800) 2m19.944091524s ago: executing program 7 (id=3789): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800"/15], &(0x7f0000000400)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688ca4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2m19.921717625s ago: executing program 38 (id=3789): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800"/15], &(0x7f0000000400)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688ca4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1m34.545131526s ago: executing program 8 (id=4600): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={0x0}, 0x18) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) unshare(0x6a040000) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) r1 = socket$key(0xf, 0x3, 0x2) r2 = perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00'}, 0x10) sendmsg$key(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="02120000020000002054655752f3f64b6147e362757a7a5ca5e64cf3d012173cd0630ff48c86588767b980897f6fbb1ee04a6db966c5"], 0x10}}, 0x0) 1m34.31551182s ago: executing program 8 (id=4603): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000077"], &(0x7f0000000400)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688ca4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1m34.223854891s ago: executing program 8 (id=4606): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x20081e, &(0x7f0000000100), 0x1, 0x502, &(0x7f0000000a00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x107042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x187842, 0x3) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000180), 0x1, 0x553, &(0x7f0000001080)="$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") r2 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x7abff, 0x0, 0x3) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000080)={0x3920e, r0, 0x2, 0x0, 0x2}) 1m33.649975581s ago: executing program 8 (id=4610): r0 = syz_io_uring_setup(0x49f, &(0x7f0000000400)={0x0, 0xe7a8, 0x3400, 0x7ffe, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) r3 = eventfd2(0xff, 0x80001) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000300)=r3, 0x1) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x4, 0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1, 0x1}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8937, &(0x7f0000000680)='lo:\x96o8\x14d\xa1\xe3\xd7\\b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xbaUn\x04\'%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\r\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc50x0, &(0x7f0000000040)=0x0) r3 = eventfd2(0xff, 0x80001) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000300)=r3, 0x1) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x4, 0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1, 0x1}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8937, &(0x7f0000000680)='lo:\x96o8\x14d\xa1\xe3\xd7\\b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xbaUn\x04\'%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\r\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc50x0, &(0x7f0000000880)) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000008c0)={{{@in=@rand_addr=0x64010101, @in=@loopback, 0x4e24, 0x8, 0x4e24, 0x7fff, 0xa, 0x0, 0x0, 0x0, 0x0, r5}, {0x6, 0x5, 0x3, 0x3916e244, 0xb8bf, 0x6, 0x5, 0x2}, {0x1000, 0xfff, 0x5}, 0x80000001, 0x6e6bba, 0x0, 0x1, 0x4, 0x3}, {{@in=@private=0xa010102, 0x4d6, 0x6c}, 0xa, @in=@empty, 0xfff, 0x1, 0x3, 0x3, 0x84eb, 0x1}}, 0xe8) r6 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r6, 0x0, 0x61, &(0x7f0000000040)={'filter\x00', 0x4}, 0x68) 1m32.570586928s ago: executing program 39 (id=4624): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={0x0}, 0x18) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) unshare(0x6a040000) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) r1 = socket$key(0xf, 0x3, 0x2) r2 = perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r4}, 0x10) sendmsg$key(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="02120000020000002054655752f3f64b6147e362757a7a5ca5e64cf3d012173cd0630ff48c86588767b980897f6fbb1ee04a6db966c5"], 0x10}}, 0x0) getresuid(&(0x7f0000000340), &(0x7f0000000380)=0x0, &(0x7f0000000880)) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000008c0)={{{@in=@rand_addr=0x64010101, @in=@loopback, 0x4e24, 0x8, 0x4e24, 0x7fff, 0xa, 0x0, 0x0, 0x0, 0x0, r5}, {0x6, 0x5, 0x3, 0x3916e244, 0xb8bf, 0x6, 0x5, 0x2}, {0x1000, 0xfff, 0x5}, 0x80000001, 0x6e6bba, 0x0, 0x1, 0x4, 0x3}, {{@in=@private=0xa010102, 0x4d6, 0x6c}, 0xa, @in=@empty, 0xfff, 0x1, 0x3, 0x3, 0x84eb, 0x1}}, 0xe8) r6 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r6, 0x0, 0x61, &(0x7f0000000040)={'filter\x00', 0x4}, 0x68) 2.704780877s ago: executing program 2 (id=6408): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000440)={0x0, 0x1328000, 0x800}, 0x20) syz_clone(0x0, 0x0, 0x24, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000019200)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100ffffffff00000000030000004c0001800d0001007564703a73797a3200000000380004002000010002004e22ac1414aa0000000000000000140002000a004e23000000001b8000000000000000000000000000aa4de29266"], 0x91}}, 0x0) 2.630370668s ago: executing program 2 (id=6410): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0}, 0x0, &(0x7f0000000300)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e8500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) kexec_load(0x0, 0x1, &(0x7f0000000140)=[{0x0, 0x3e00, 0x116094000, 0x41000000}], 0x0) acct(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB], 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2], 0x0}, 0x94) socket$packet(0x11, 0xa, 0x300) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688ca4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2.119890657s ago: executing program 2 (id=6416): r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xd4, 0x1, 0x0, 0x0, 0x0, 0xf, 0x9211, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={0x0, 0xa}, 0x0, 0x4, 0x0, 0x8, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x8088e3ad132bc192, 0x4002011, r1, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f00000003c0)={0x1, 0x7ff, 0x10, 0x100, 0x1b, "049cd9b19fe9d705"}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r3, 0x0, 0xb, &(0x7f00000000c0)=0x3, 0x4) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x68, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000001440)=ANY=[@ANYBLOB="0017"], 0xc0) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 1.832236921s ago: executing program 5 (id=6418): r0 = syz_io_uring_setup(0x49f, &(0x7f0000000400)={0x0, 0xe7a8, 0x3400, 0x7ffe, 0x40024e}, &(0x7f0000000340), 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) 1.644388874s ago: executing program 5 (id=6423): r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff0000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xb, &(0x7f00000000c0)=0x3, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r2}, 0x10) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 1.572534415s ago: executing program 2 (id=6426): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r1}, 0x10) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r2, 0x0, 0x5c4, 0x404c844, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @local}, 0x1c) 1.552004886s ago: executing program 5 (id=6427): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce8100033300fe08000000000200875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) 1.484876896s ago: executing program 2 (id=6428): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xb, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r1}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0700000004000000080000000100000000000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x18) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021bc0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000900003808c000080080003400000000280000b807c000180090001006c617374000000006c000280080001400000000508000140000000090c0002"], 0x140}}, 0x50854) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x13, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000040000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41002, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000180)='sys_enter\x00', r8}, 0x10) sigaltstack(0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="640000000202010100000000000000000000000948000180060003400003000006000340000200000c000280050001000600000006000340000300000c000280050001001100000014000180080001000a01010008000200ffffffff0800044000000000f5369a840991625002c02434133b5ee3bc7f8c8accd16974ebe16dc3f8c5cd8ebc73d497a2f8806c67d4"], 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0200000004000000050000000df0b45176000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00'}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x3, &(0x7f0000000100)=[{0x15}, {0x15, 0x0, 0x0, 0x3}, {0x6, 0x0, 0x0, 0x7ffffdbe}]}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 1.484083876s ago: executing program 5 (id=6430): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00"/11], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r1}, 0x10) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) listen(r4, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r5], 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x2, &(0x7f0000000200)=0x0) io_submit(r9, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x80000000}]) io_getevents(r9, 0x2, 0x2, &(0x7f0000001340)=[{}, {}], 0x0) r10 = eventfd2(0x4, 0x801) r11 = eventfd2(0x1, 0x1) r12 = eventfd(0xe) r13 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000600), 0x20000, 0x0) r14 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) r15 = eventfd2(0x2, 0x80800) r16 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000a00), 0x40200, 0x0) io_submit(r9, 0x9, &(0x7f0000001d00)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x3, 0x7d, r6, &(0x7f0000000280)="fad929fa1b6f7e8fbf920eb7638c3ebcdada83d16f2da43073bfc694f058a02d9f9d5b111caa700d3654c502cdf666c0015083fcdf995d1888a0bbc7201a8432e86d8effcd13351e571d19c2ea837d1551dce86488ff038e193506bc4fbb857b2789c12e6a256ad407b90fbda90c7de7d1f70a16940c60fc20dab88c317a43de3670ff2ed5962532e753842c06815de199c1a97446af353793da56e3f97373", 0x9f, 0x9, 0x0, 0x1, r10}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x9, r2, &(0x7f0000000380)="d628c4b0e3ff9b9ffce57783b6d6a05e88765c802b72afabf697ec70bf83e949258d9d0be6af192883874b89eaa3356bad250a0c954893ff317f4028623b99436480201e3a48229abe93dcba2cfcf022041fb4cf23a2766b5b576c89bb599b42d131baeaad1615a79d2a06c5a59a4ad7e9", 0x71, 0x6}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x6, 0x4, r4, &(0x7f00000004c0)="059cd81980185530668b17a676ebb1904d097ed5437e7e2ea013caebc9bc6d5587b1f49bcd83b58ef127e1443eb8752d1d3b331004ca33f1b6f48a", 0x3b, 0x4, 0x0, 0x2, r11}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x3, 0xff, r4, &(0x7f0000000580)="83b9cdc9d1e73a225ce4c2191cea069eae420c2678970fbea4436404cc6ece36bd2ab172f49288115bd72c50c9e0e891344cbe005ae6ce5631811e44", 0x3c, 0x26c2, 0x0, 0x3, r12}, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x6, 0x4, r13, &(0x7f0000000680)="1fbbaa4f035e62008ca506ec11a589c1170e0b27a27c0bd6d754884e98d48ede4b99d499c74458b2f404eac55d0abc8b663d7fa1e9ed361e729f8f9bd81121003f8fbf3b4ced72f5eb508095284f3f6ae4fa7f9647a16d1b7d92c90105eb12e235b60f3b54d0283aa25a4430dc3c74acd5adce075faecbd45d8af18ec1196fda9c41ce41820837842d725abd031abcf1786f3d52f18062ef3dc9ffbdd0488ecc159e49f087fc90dccecfedddbef4dcd63f5aaf6742aa05bd791d0adc78d5977faec6af9acd1e7af9273ac939", 0xcc, 0xa0}, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x7, 0x3, r14, &(0x7f0000000900)="42b18d939bed442bfa4c282dd382949dbc92b83142c31c1331a957e5473f319b8c490636f8522cf61e3bd255163f8a68cade46701ab9086eb70fd600e6586875817155a316080a792c2e5e01d198d60e72a990b9b570c055c3be3716e72dea4111930c40c23a9c01601d7459875e900123a099a9afbb200023a59eff6cf115d72ceaa952f78aaabcf4e3ea97873e1c11de840f52dbb992a28b0539970a9755f377a30407e3014ce4e55efaa9ed9c5b8d259066ba70bbb6b15b602b1a666e9b0470c102bc76ac", 0xc6, 0x60000000000, 0x0, 0x0, r15}, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x7, 0x6, r0, &(0x7f0000000840)="972b5623238f45d64f13bdd91150525dc4b2f0f323812623ffa002279df10dbc14", 0x21, 0xa18a, 0x0, 0x1}, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x3, 0xa, r2, &(0x7f0000000b00)="db233300b7d17d32f300fe670f3517632c74aebb71e5822b30ab57eafe82e4aa43bba32e482b9683fd8fdef3c1373049a4121fb147af4b418b22348364ae000d0df977ed31fe54f58f02f037d305b95a30dfdfad3dbce8b5787f49271729270a48fcf6aee17691a3c38c45c85745e343656d8f548878299b244f43f42983e4fdfb400ef98472c0a1c43d96e229a2c26c2daa645d00a6896237fd6a30b7005e8783c3da59712c7ad2e726540b6088bf4120048155980d359db528d2ce7aa300ea816c7ed0861d3d1f0e95c2cac180a993bb32f1f37c239543f094196bffbaa06eb7ad6c41", 0xe4, 0x0, 0x0, 0x3, r16}, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x7, 0x4, r7, &(0x7f0000000d00)="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", 0x1000, 0x7f}]) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, r2, {0x7}}, './file0\x00'}) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r17, 0x89f2, &(0x7f0000000200)={'gre0\x00', &(0x7f0000000180)={'gre0\x00', r18, 0x7800, 0x8000, 0x80000001, 0x8, {{0xf, 0x4, 0x2, 0x4, 0x3c, 0x65, 0x0, 0xc6, 0x2f, 0x0, @loopback, @remote, {[@end, @noop, @lsrr={0x83, 0x17, 0xb9, [@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @remote, @broadcast, @multicast2]}, @lsrr={0x83, 0xf, 0xf1, [@empty, @dev={0xac, 0x14, 0x14, 0x1a}, @local]}]}}}}}) connect$unix(r3, &(0x7f0000fce000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r19 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(0x0, r19) 1.350534729s ago: executing program 1 (id=6435): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0}, 0x0, &(0x7f0000000300)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e8500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) kexec_load(0x0, 0x1, &(0x7f0000000140)=[{0x0, 0x3e00, 0x116094000, 0x41000000}], 0x0) acct(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2], 0x0}, 0x94) socket$packet(0x11, 0xa, 0x300) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688ca4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.28647161s ago: executing program 9 (id=6436): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000004000000e27f00000100000000010000", @ANYRES32, @ANYBLOB="00050000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0100"/28], 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000004c0)={r1, 0x0, 0x0}, 0x20) 1.184149701s ago: executing program 9 (id=6438): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r1}, 0x10) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r2, 0x0, 0x5c4, 0x404c844, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @local}, 0x1c) 1.118951832s ago: executing program 1 (id=6439): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000a9000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x20081e, &(0x7f0000000100), 0x1, 0x502, &(0x7f0000000a00)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x107042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x187842, 0x3) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000010018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000180), 0x1, 0x553, &(0x7f0000001080)="$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") r5 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) pwritev2(r5, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x7abff, 0x0, 0x3) r6 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) fallocate(r6, 0x0, 0x0, 0x8000c62) r7 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffff000000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000e}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kfree\x00', r8, 0x0, 0x101}, 0x18) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002fc0)=@newtaction={0x14, 0x30, 0x25}, 0x14}}, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r7, 0x40305829, &(0x7f00000000c0)={0x17c04, r7, 0x8, 0xfff, 0x7fffffffc}) r10 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xf, 0x5, 0x8000, 0x2, 0x90c8, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4}, 0x50) pwritev2(r10, &(0x7f00000001c0)=[{&(0x7f0000000080)}], 0x1, 0xe7b, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x81ecd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x1, 0x9}, 0x0, 0xffffffffffffffff, 0x40000000, 0x7, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x4, 0xffffffffffffffff, 0x0) r11 = syz_io_uring_setup(0x1f89, &(0x7f0000000080)={0x0, 0xe33a, 0x11789, 0x1, 0x216d}, &(0x7f0000000340), &(0x7f0000000280)) io_uring_enter(r11, 0x58, 0xfe60, 0x5, 0x0, 0xfffffe58) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="190000000400000008000000ffffff7f00000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='>\x00\x00\x00\x00\x00\x00 \x00'/19], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) open(&(0x7f0000000740)='./bus\x00', 0x143c62, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000080)={0x3920e, r1, 0x2, 0x0, 0x2}) 1.085317103s ago: executing program 9 (id=6440): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce8100033300fe08000000000200875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) 1.009371654s ago: executing program 1 (id=6441): r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3549, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x70, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x40, 0x2, [@TCA_BASIC_EMATCHES={0x3c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{}, {0x0, 0x0, 0x1}}}, @TCF_EM_META={0x1c, 0x2, 0x0, 0x0, {{0x0, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc}, @TCA_EM_META_LVALUE={0x4}]}}]}]}]}}]}, 0x70}}, 0x0) 1.008862864s ago: executing program 9 (id=6442): r0 = syz_io_uring_setup(0x49f, &(0x7f0000000400)={0x0, 0xe7a8, 0x3400, 0x7ffe, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) r3 = eventfd2(0xff, 0x80001) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000300)=r3, 0x1) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x4, 0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1, 0x1}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8937, &(0x7f0000000680)='lo:\x96o8\x14d\xa1\xe3\xd7\\b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xbaUn\x04\'%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\r\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc50x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3549, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x70, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x40, 0x2, [@TCA_BASIC_EMATCHES={0x3c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{}, {0x0, 0x0, 0x1}}}, @TCF_EM_META={0x1c, 0x2, 0x0, 0x0, {{0x0, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc}, @TCA_EM_META_LVALUE={0x4}]}}]}]}]}}]}, 0x70}}, 0x0) kernel console output (not intermixed with test programs): 7fffffff) [ 339.874659][T19116] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 339.904531][T22804] __nla_validate_parse: 32 callbacks suppressed [ 339.904546][T22804] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5718'. [ 339.922990][T22804] netlink: 260 bytes leftover after parsing attributes in process `syz.5.5718'. [ 339.932137][T22804] netlink: 260 bytes leftover after parsing attributes in process `syz.5.5718'. [ 339.965263][T19664] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 339.989133][T22809] ALSA: seq fatal error: cannot create timer (-19) [ 340.019818][T22815] loop4: detected capacity change from 0 to 2048 [ 340.028323][T22815] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 340.055047][T22815] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5720'. [ 340.064597][T22815] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5720'. [ 340.097878][T22822] loop2: detected capacity change from 0 to 512 [ 340.111035][T22823] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=22823 comm=syz.5.5722 [ 340.140400][T19664] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 340.168472][T22822] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 340.181341][T22822] ext4 filesystem being mounted at /212/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 340.332734][T19116] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 340.350544][T22855] FAULT_INJECTION: forcing a failure. [ 340.350544][T22855] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 340.363763][T22855] CPU: 1 UID: 0 PID: 22855 Comm: syz.4.5736 Not tainted 6.16.0-rc3-syzkaller-00044-g7595b66ae9de #0 PREEMPT(voluntary) [ 340.363789][T22855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 340.363800][T22855] Call Trace: [ 340.363808][T22855] [ 340.363816][T22855] __dump_stack+0x1d/0x30 [ 340.363872][T22855] dump_stack_lvl+0xe8/0x140 [ 340.363892][T22855] dump_stack+0x15/0x1b [ 340.363909][T22855] should_fail_ex+0x265/0x280 [ 340.363968][T22855] should_fail+0xb/0x20 [ 340.363995][T22855] should_fail_usercopy+0x1a/0x20 [ 340.364103][T22855] _copy_from_iter+0xcf/0xe40 [ 340.364139][T22855] ? alloc_pages_mpol+0x201/0x250 [ 340.364173][T22855] copy_page_from_iter+0x178/0x2a0 [ 340.364207][T22855] tun_get_user+0x5f0/0x2500 [ 340.364344][T22855] ? ref_tracker_alloc+0x1f2/0x2f0 [ 340.364379][T22855] tun_chr_write_iter+0x15e/0x210 [ 340.364406][T22855] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 340.364432][T22855] vfs_write+0x49d/0x8e0 [ 340.364485][T22855] ksys_write+0xda/0x1a0 [ 340.364517][T22855] __x64_sys_write+0x40/0x50 [ 340.364534][T22855] x64_sys_call+0x2cdd/0x2fb0 [ 340.364621][T22855] do_syscall_64+0xd2/0x200 [ 340.364642][T22855] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 340.364747][T22855] ? clear_bhb_loop+0x40/0x90 [ 340.364829][T22855] ? clear_bhb_loop+0x40/0x90 [ 340.364852][T22855] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.364871][T22855] RIP: 0033:0x7f8890fed3df [ 340.364885][T22855] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 340.364900][T22855] RSP: 002b:00007f888f657000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 340.364972][T22855] RAX: ffffffffffffffda RBX: 00007f8891215fa0 RCX: 00007f8890fed3df [ 340.364986][T22855] RDX: 000000000000004a RSI: 0000200000000000 RDI: 00000000000000c8 [ 340.364998][T22855] RBP: 00007f888f657090 R08: 0000000000000000 R09: 0000000000000000 [ 340.365011][T22855] R10: 000000000000004a R11: 0000000000000293 R12: 0000000000000001 [ 340.365098][T22855] R13: 0000000000000000 R14: 00007f8891215fa0 R15: 00007ffdeffb3e78 [ 340.365113][T22855] [ 340.624930][T22861] loop2: detected capacity change from 0 to 2048 [ 340.626656][T22863] loop4: detected capacity change from 0 to 1024 [ 340.643288][T22863] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 340.658821][T22863] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 340.674291][T22863] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e01c, mo2=0000] [ 340.688504][T22861] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 340.706980][T22863] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #3: block 2: comm syz.4.5739: lblock 2 mapped to illegal pblock 2 (length 1) [ 340.726486][T22863] __quota_error: 207 callbacks suppressed [ 340.726501][T22863] Quota error (device loop4): qtree_write_dquot: dquota write failed [ 340.740773][T22863] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #3: block 48: comm syz.4.5739: lblock 0 mapped to illegal pblock 48 (length 1) [ 340.741465][T22873] loop5: detected capacity change from 0 to 512 [ 340.755142][ T29] audit: type=1400 audit(1750822569.923:14943): avc: denied { read write } for pid=22872 comm="syz.5.5741" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 340.779137][T22863] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 340.785361][ T29] audit: type=1400 audit(1750822569.923:14944): avc: denied { open } for pid=22872 comm="syz.5.5741" path="/dev/loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 340.794141][T22863] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.5739: Failed to acquire dquot type 0 [ 340.818276][ T29] audit: type=1400 audit(1750822569.923:14945): avc: denied { ioctl } for pid=22872 comm="syz.5.5741" path="/dev/loop5" dev="devtmpfs" ino=105 ioctlcmd=0x4c00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 340.818524][ T29] audit: type=1400 audit(1750822569.943:14946): avc: denied { prog_load } for pid=22859 comm="syz.2.5735" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 340.874384][ T29] audit: type=1400 audit(1750822569.943:14947): avc: denied { bpf } for pid=22859 comm="syz.2.5735" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 340.895176][ T29] audit: type=1400 audit(1750822569.943:14948): avc: denied { perfmon } for pid=22859 comm="syz.2.5735" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 340.916235][ T29] audit: type=1400 audit(1750822569.943:14949): avc: denied { add_name } for pid=22859 comm="syz.2.5735" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 340.937027][ T29] audit: type=1400 audit(1750822569.943:14950): avc: denied { create } for pid=22859 comm="syz.2.5735" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 340.957703][T22863] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 340.967830][T22863] EXT4-fs error (device loop4): ext4_evict_inode:254: inode #11: comm syz.4.5739: mark_inode_dirty error [ 340.979905][T22873] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 340.992482][T22863] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 340.992710][T22873] ext4 filesystem being mounted at /473/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 341.006047][T22863] EXT4-fs (loop4): 1 orphan inode deleted [ 341.019470][ T1656] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 341.034216][ T1656] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:6: Failed to release dquot type 0 [ 341.046341][T22863] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 341.046576][T19116] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 341.124419][T22882] loop9: detected capacity change from 0 to 512 [ 341.141531][T22883] netlink: 200 bytes leftover after parsing attributes in process `syz.1.5743'. [ 341.152254][T14941] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 341.166437][T22882] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 341.172653][T22889] loop2: detected capacity change from 0 to 512 [ 341.190439][T19664] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 341.209703][T19664] EXT4-fs error (device loop4): __ext4_get_inode_loc:4792: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 341.223295][T22882] ext4 filesystem being mounted at /354/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 341.253881][T19664] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 341.272088][T22891] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5747'. [ 341.281167][T22891] tipc: Invalid UDP bearer configuration [ 341.281183][T22891] tipc: Enabling of bearer rejected, failed to enable media [ 341.286151][T22889] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 341.303282][T19664] EXT4-fs error (device loop4): ext4_quota_off:7217: inode #3: comm syz-executor: mark_inode_dirty error [ 341.337884][T22889] ext4 filesystem being mounted at /215/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 341.435829][T22902] loop4: detected capacity change from 0 to 512 [ 341.458057][T22900] loop5: detected capacity change from 0 to 1024 [ 341.477968][T22902] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 341.498716][T22902] ext4 filesystem being mounted at /217/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 341.511121][T22900] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 341.554258][T22900] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 341.580234][T16952] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 341.629400][T22900] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e01c, mo2=0000] [ 341.700044][T22914] loop9: detected capacity change from 0 to 2048 [ 341.740226][T19664] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 341.751989][T22900] EXT4-fs error (device loop5): ext4_map_blocks:780: inode #3: block 2: comm syz.5.5750: lblock 2 mapped to illegal pblock 2 (length 1) [ 341.777196][T22914] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 341.791557][T19116] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 341.889124][T22900] EXT4-fs error (device loop5): ext4_map_blocks:780: inode #3: block 48: comm syz.5.5750: lblock 0 mapped to illegal pblock 48 (length 1) [ 341.982138][T22900] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.5750: Failed to acquire dquot type 0 [ 342.034906][T22900] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 342.072607][T22900] EXT4-fs error (device loop5): ext4_evict_inode:254: inode #11: comm syz.5.5750: mark_inode_dirty error [ 342.132463][T22931] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5758'. [ 342.141593][T22931] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5758'. [ 342.150608][T22900] EXT4-fs warning (device loop5): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 342.191811][T22931] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5758'. [ 342.219494][T16952] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 342.229388][T22900] EXT4-fs (loop5): 1 orphan inode deleted [ 342.230626][ T4167] EXT4-fs error (device loop5): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:14: lblock 1 mapped to illegal pblock 1 (length 1) [ 342.249682][T22900] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 342.254696][ T4167] EXT4-fs error (device loop5): ext4_release_dquot:6969: comm kworker/u8:14: Failed to release dquot type 0 [ 342.287821][T22933] loop2: detected capacity change from 0 to 512 [ 342.337560][T22933] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 342.344687][T22941] tipc: Enabling of bearer rejected, already enabled [ 342.368570][T22933] ext4 filesystem being mounted at /219/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 342.443529][T22947] loop4: detected capacity change from 0 to 1024 [ 342.480034][T22947] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 342.517379][T22947] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 342.532360][T22900] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 342.545680][T22947] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e01c, mo2=0000] [ 342.581593][T22947] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #3: block 2: comm syz.4.5764: lblock 2 mapped to illegal pblock 2 (length 1) [ 342.612901][T22900] EXT4-fs error (device loop5): __ext4_get_inode_loc:4792: comm syz.5.5750: Invalid inode table block 1 in block_group 0 [ 342.627136][T22947] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #3: block 48: comm syz.4.5764: lblock 0 mapped to illegal pblock 48 (length 1) [ 342.642869][T22947] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.5764: Failed to acquire dquot type 0 [ 342.656516][T22947] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 342.666607][T22947] EXT4-fs error (device loop4): ext4_evict_inode:254: inode #11: comm syz.4.5764: mark_inode_dirty error [ 342.678168][T22947] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 342.688635][T22947] EXT4-fs (loop4): 1 orphan inode deleted [ 342.694857][T22947] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 342.707052][ T4167] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:14: lblock 1 mapped to illegal pblock 1 (length 1) [ 342.721773][T22900] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 342.723863][ T4167] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:14: Failed to release dquot type 0 [ 342.766483][T19116] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 342.793336][T19664] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 342.802691][T19664] EXT4-fs error (device loop4): __ext4_get_inode_loc:4792: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 342.838164][T22900] EXT4-fs error (device loop5): ext4_quota_off:7217: inode #3: comm syz.5.5750: mark_inode_dirty error [ 342.849175][T19664] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 342.863730][T19664] EXT4-fs error (device loop4): ext4_quota_off:7217: inode #3: comm syz-executor: mark_inode_dirty error [ 343.084921][T22974] loop4: detected capacity change from 0 to 2048 [ 343.173791][T22981] tipc: Invalid UDP bearer configuration [ 343.173806][T22981] tipc: Enabling of bearer rejected, failed to enable media [ 343.191785][T22974] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 343.434961][T22982] loop5: detected capacity change from 0 to 2048 [ 343.454076][T22992] loop2: detected capacity change from 0 to 512 [ 343.497280][T22994] FAULT_INJECTION: forcing a failure. [ 343.497280][T22994] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 343.510556][T22994] CPU: 0 UID: 0 PID: 22994 Comm: syz.1.5782 Not tainted 6.16.0-rc3-syzkaller-00044-g7595b66ae9de #0 PREEMPT(voluntary) [ 343.510584][T22994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 343.510620][T22994] Call Trace: [ 343.510627][T22994] [ 343.510634][T22994] __dump_stack+0x1d/0x30 [ 343.510655][T22994] dump_stack_lvl+0xe8/0x140 [ 343.510674][T22994] dump_stack+0x15/0x1b [ 343.510689][T22994] should_fail_ex+0x265/0x280 [ 343.510726][T22994] should_fail+0xb/0x20 [ 343.510760][T22994] should_fail_usercopy+0x1a/0x20 [ 343.510788][T22994] _copy_from_iter+0xcf/0xe40 [ 343.510818][T22994] ? alloc_pages_mpol+0x201/0x250 [ 343.510871][T22994] copy_page_from_iter+0x178/0x2a0 [ 343.510890][T22994] tun_get_user+0x5f0/0x2500 [ 343.510918][T22994] ? ref_tracker_alloc+0x1f2/0x2f0 [ 343.510987][T22994] tun_chr_write_iter+0x15e/0x210 [ 343.511046][T22994] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 343.511069][T22994] vfs_write+0x49d/0x8e0 [ 343.511103][T22994] ksys_write+0xda/0x1a0 [ 343.511212][T22994] __x64_sys_write+0x40/0x50 [ 343.511230][T22994] x64_sys_call+0x2cdd/0x2fb0 [ 343.511248][T22994] do_syscall_64+0xd2/0x200 [ 343.511292][T22994] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 343.511317][T22994] ? clear_bhb_loop+0x40/0x90 [ 343.511339][T22994] ? clear_bhb_loop+0x40/0x90 [ 343.511361][T22994] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.511392][T22994] RIP: 0033:0x7fb1cfb9d3df [ 343.511406][T22994] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 343.511446][T22994] RSP: 002b:00007fb1ce207000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 343.511464][T22994] RAX: ffffffffffffffda RBX: 00007fb1cfdc5fa0 RCX: 00007fb1cfb9d3df [ 343.511477][T22994] RDX: 0000000000000036 RSI: 00002000000001c0 RDI: 00000000000000c8 [ 343.511490][T22994] RBP: 00007fb1ce207090 R08: 0000000000000000 R09: 0000000000000000 [ 343.511573][T22994] R10: 0000000000000036 R11: 0000000000000293 R12: 0000000000000001 [ 343.511587][T22994] R13: 0000000000000000 R14: 00007fb1cfdc5fa0 R15: 00007ffea3485638 [ 343.511627][T22994] [ 343.787594][ T7160] loop5: p1 < > p4 [ 343.809334][ T7160] loop5: p4 size 8388608 extends beyond EOD, truncated [ 343.889595][T22992] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 343.941082][T22982] loop5: p1 < > p4 [ 343.958802][T22982] loop5: p4 size 8388608 extends beyond EOD, truncated [ 344.002983][T19664] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 344.015336][ T2995] loop5: p1 < > p4 [ 344.019642][ T2995] loop5: p4 size 8388608 extends beyond EOD, truncated [ 344.038931][T22992] ext4 filesystem being mounted at /223/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 344.091149][ T3733] udevd[3733]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 344.104341][ T7160] udevd[7160]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 344.133798][ T3714] udevd[3714]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 344.144861][ T7160] udevd[7160]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 344.167178][T23013] loop4: detected capacity change from 0 to 2048 [ 344.247736][T23013] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 344.272765][T19116] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 344.482368][T23031] loop2: detected capacity change from 0 to 512 [ 344.521283][T23034] loop5: detected capacity change from 0 to 1024 [ 344.542746][T23031] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 344.558393][T23034] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 344.569185][T23031] ext4 filesystem being mounted at /225/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 344.667986][T23034] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 344.700454][T23040] tipc: Invalid UDP bearer configuration [ 344.700472][T23040] tipc: Enabling of bearer rejected, failed to enable media [ 344.726032][T19664] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 344.759590][T23034] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e01c, mo2=0000] [ 344.781193][T23034] EXT4-fs error (device loop5): ext4_map_blocks:780: inode #3: block 2: comm syz.5.5794: lblock 2 mapped to illegal pblock 2 (length 1) [ 344.833507][T23034] EXT4-fs error (device loop5): ext4_map_blocks:780: inode #3: block 48: comm syz.5.5794: lblock 0 mapped to illegal pblock 48 (length 1) [ 344.893303][T23053] loop4: detected capacity change from 0 to 1024 [ 345.009803][T23034] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.5794: Failed to acquire dquot type 0 [ 345.024134][T23053] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 345.038729][T23053] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 345.049367][T23034] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 345.063416][T23053] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e01c, mo2=0000] [ 345.075091][T23034] EXT4-fs error (device loop5): ext4_evict_inode:254: inode #11: comm syz.5.5794: mark_inode_dirty error [ 345.105868][T23053] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #3: block 2: comm syz.4.5804: lblock 2 mapped to illegal pblock 2 (length 1) [ 345.169563][T23053] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #3: block 48: comm syz.4.5804: lblock 0 mapped to illegal pblock 48 (length 1) [ 345.194455][T23034] EXT4-fs warning (device loop5): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 345.223362][T23064] __nla_validate_parse: 14 callbacks suppressed [ 345.223378][T23064] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5810'. [ 345.246464][T23053] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.5804: Failed to acquire dquot type 0 [ 345.258075][T23034] EXT4-fs (loop5): 1 orphan inode deleted [ 345.269338][T23064] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5810'. [ 345.279529][T23034] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 345.279970][ T4167] EXT4-fs error (device loop5): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:14: lblock 1 mapped to illegal pblock 1 (length 1) [ 345.307489][T23053] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 345.321638][T23053] EXT4-fs error (device loop4): ext4_evict_inode:254: inode #11: comm syz.4.5804: mark_inode_dirty error [ 345.333739][T23053] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 345.349599][T23053] EXT4-fs (loop4): 1 orphan inode deleted [ 345.356364][ T4167] EXT4-fs error (device loop5): ext4_release_dquot:6969: comm kworker/u8:14: Failed to release dquot type 0 [ 345.356773][T23053] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 345.383776][ T4167] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:14: lblock 1 mapped to illegal pblock 1 (length 1) [ 345.418751][ T4167] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:14: Failed to release dquot type 0 [ 345.436763][T14941] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 345.437269][T19116] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 345.446239][T14941] EXT4-fs error (device loop5): __ext4_get_inode_loc:4792: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 345.455404][T19664] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 345.495503][T23071] netlink: 96 bytes leftover after parsing attributes in process `syz.1.5813'. [ 345.505313][T19664] EXT4-fs error (device loop4): __ext4_get_inode_loc:4792: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 345.518460][T14941] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 345.528286][T14941] EXT4-fs error (device loop5): ext4_quota_off:7217: inode #3: comm syz-executor: mark_inode_dirty error [ 345.528375][T19664] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 345.550721][T19664] EXT4-fs error (device loop4): ext4_quota_off:7217: inode #3: comm syz-executor: mark_inode_dirty error [ 345.629071][T23077] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5812'. [ 345.638066][T23077] tipc: Invalid UDP bearer configuration [ 345.638091][T23077] tipc: Enabling of bearer rejected, failed to enable media [ 345.659744][T23080] loop2: detected capacity change from 0 to 1024 [ 345.666759][T23080] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 345.681508][T23080] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 345.712240][T23080] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e01c, mo2=0000] [ 345.729779][T23080] EXT4-fs error (device loop2): ext4_map_blocks:780: inode #3: block 2: comm syz.2.5817: lblock 2 mapped to illegal pblock 2 (length 1) [ 345.754225][ T29] kauditd_printk_skb: 334 callbacks suppressed [ 345.754255][ T29] audit: type=1326 audit(1750822574.933:15272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23085 comm="syz.4.5818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8890fee929 code=0x7ffc0000 [ 345.784086][ T29] audit: type=1326 audit(1750822574.933:15273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23085 comm="syz.4.5818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8890fee929 code=0x7ffc0000 [ 345.807757][ T29] audit: type=1326 audit(1750822574.943:15274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23085 comm="syz.4.5818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=443 compat=0 ip=0x7f8890fee929 code=0x7ffc0000 [ 345.811641][T23080] Quota error (device loop2): qtree_write_dquot: dquota write failed [ 345.831358][ T29] audit: type=1326 audit(1750822574.943:15275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23085 comm="syz.4.5818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8890fee929 code=0x7ffc0000 [ 345.831390][ T29] audit: type=1326 audit(1750822574.943:15276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23085 comm="syz.4.5818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f8890fee929 code=0x7ffc0000 [ 345.831414][ T29] audit: type=1326 audit(1750822574.943:15277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23085 comm="syz.4.5818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8890fee929 code=0x7ffc0000 [ 345.831448][ T29] audit: type=1326 audit(1750822574.943:15278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23085 comm="syz.4.5818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f8890fee929 code=0x7ffc0000 [ 345.831473][ T29] audit: type=1326 audit(1750822574.943:15279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23085 comm="syz.4.5818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8890fee929 code=0x7ffc0000 [ 345.831497][ T29] audit: type=1326 audit(1750822574.943:15280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23085 comm="syz.4.5818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8890fee929 code=0x7ffc0000 [ 345.983397][T23080] EXT4-fs error (device loop2): ext4_map_blocks:780: inode #3: block 48: comm syz.2.5817: lblock 0 mapped to illegal pblock 48 (length 1) [ 345.997750][T23080] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.5817: Failed to acquire dquot type 0 [ 346.019376][T23080] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 346.064927][T23080] EXT4-fs error (device loop2): ext4_evict_inode:254: inode #11: comm syz.2.5817: mark_inode_dirty error [ 346.111255][T23080] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 346.157341][T23080] EXT4-fs (loop2): 1 orphan inode deleted [ 346.160214][T23100] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5824'. [ 346.171647][T23080] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 346.184174][ T4167] EXT4-fs error (device loop2): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:14: lblock 1 mapped to illegal pblock 1 (length 1) [ 346.200395][ T4167] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:14: Failed to release dquot type 0 [ 346.240200][T19116] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 346.244452][T23104] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5825'. [ 346.258513][T19116] EXT4-fs error (device loop2): __ext4_get_inode_loc:4792: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 346.283552][T23104] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5825'. [ 346.297112][T23106] loop4: detected capacity change from 0 to 1024 [ 346.303736][T19116] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 346.322632][T23106] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 346.335174][T19116] EXT4-fs error (device loop2): ext4_quota_off:7217: inode #3: comm syz-executor: mark_inode_dirty error [ 346.349051][T23106] ext4 filesystem being mounted at /235/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 346.457131][T23110] netlink: 76 bytes leftover after parsing attributes in process `syz.5.5820'. [ 346.532394][T19664] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 346.718386][T23127] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5835'. [ 346.735108][T23127] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5835'. [ 346.827173][T23131] ALSA: seq fatal error: cannot create timer (-19) [ 347.187689][T23164] loop4: detected capacity change from 0 to 2048 [ 347.337844][T23164] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 347.887420][T19664] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 348.040091][T23181] loop2: detected capacity change from 0 to 2048 [ 348.076359][T23181] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 348.208681][T19116] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 348.269597][T23194] loop2: detected capacity change from 0 to 512 [ 348.319315][T23194] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 348.383897][T23194] ext4 filesystem being mounted at /231/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 348.564370][T19116] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 348.684806][T23207] loop2: detected capacity change from 0 to 512 [ 348.782083][T23207] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 348.810064][T23207] ext4 filesystem being mounted at /232/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 349.533626][T23228] loop4: detected capacity change from 0 to 2048 [ 349.552297][T23228] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 349.654412][T19116] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 349.781763][T23242] loop5: detected capacity change from 0 to 1024 [ 349.800474][T23242] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 349.831851][T23242] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 349.854596][T23248] loop9: detected capacity change from 0 to 512 [ 349.872536][T23242] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e01c, mo2=0000] [ 349.910685][T23248] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 349.929472][T23248] ext4 filesystem being mounted at /378/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 349.977158][T23242] EXT4-fs error (device loop5): ext4_map_blocks:780: inode #3: block 2: comm syz.5.5878: lblock 2 mapped to illegal pblock 2 (length 1) [ 350.029044][T23242] EXT4-fs error (device loop5): ext4_map_blocks:780: inode #3: block 48: comm syz.5.5878: lblock 0 mapped to illegal pblock 48 (length 1) [ 350.051732][T23242] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.5878: Failed to acquire dquot type 0 [ 350.053706][T19664] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 350.072472][T23242] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 350.085943][T23242] EXT4-fs error (device loop5): ext4_evict_inode:254: inode #11: comm syz.5.5878: mark_inode_dirty error [ 350.101090][T23242] EXT4-fs warning (device loop5): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 350.143282][T23242] EXT4-fs (loop5): 1 orphan inode deleted [ 350.150041][T23242] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 350.172526][ T4167] EXT4-fs error (device loop5): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:14: lblock 1 mapped to illegal pblock 1 (length 1) [ 350.198247][ T4167] EXT4-fs error (device loop5): ext4_release_dquot:6969: comm kworker/u8:14: Failed to release dquot type 0 [ 350.246861][T14941] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 350.256514][T14941] EXT4-fs error (device loop5): __ext4_get_inode_loc:4792: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 350.271390][T23272] __nla_validate_parse: 7 callbacks suppressed [ 350.271405][T23272] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5889'. [ 350.280047][T14941] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 350.352478][T14941] EXT4-fs error (device loop5): ext4_quota_off:7217: inode #3: comm syz-executor: mark_inode_dirty error [ 350.366960][T16952] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 350.380679][T23272] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5889'. [ 350.425297][T23272] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5889'. [ 350.538245][T23276] Invalid ELF header magic: != ELF [ 350.578533][T23272] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5889'. [ 350.587800][T23272] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5889'. [ 350.848510][T23285] loop9: detected capacity change from 0 to 512 [ 350.900472][T23285] ext4 filesystem being mounted at /379/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 351.056122][T23293] netlink: 76 bytes leftover after parsing attributes in process `syz.4.5894'. [ 351.089017][ T29] kauditd_printk_skb: 211 callbacks suppressed [ 351.089033][ T29] audit: type=1400 audit(1750822580.203:15487): avc: denied { create } for pid=23289 comm="syz.1.5896" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 351.114895][ T29] audit: type=1400 audit(1750822580.203:15488): avc: denied { write } for pid=23289 comm="syz.1.5896" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 351.134579][ T29] audit: type=1326 audit(1750822580.223:15489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23291 comm="syz.5.5895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f026691e929 code=0x7ffc0000 [ 351.158432][ T29] audit: type=1326 audit(1750822580.223:15490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23291 comm="syz.5.5895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f026691e929 code=0x7ffc0000 [ 351.182024][ T29] audit: type=1326 audit(1750822580.223:15491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23291 comm="syz.5.5895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f026691e929 code=0x7ffc0000 [ 351.205622][ T29] audit: type=1326 audit(1750822580.223:15492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23291 comm="syz.5.5895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f026691e929 code=0x7ffc0000 [ 351.229277][ T29] audit: type=1326 audit(1750822580.223:15493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23291 comm="syz.5.5895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f026691e929 code=0x7ffc0000 [ 351.252885][ T29] audit: type=1326 audit(1750822580.223:15494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23291 comm="syz.5.5895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f026691e929 code=0x7ffc0000 [ 351.276527][ T29] audit: type=1326 audit(1750822580.223:15495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23291 comm="syz.5.5895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f026691e929 code=0x7ffc0000 [ 351.300130][ T29] audit: type=1326 audit(1750822580.223:15496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23291 comm="syz.5.5895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f026691d290 code=0x7ffc0000 [ 351.539803][T23312] FAULT_INJECTION: forcing a failure. [ 351.539803][T23312] name failslab, interval 1, probability 0, space 0, times 0 [ 351.552502][T23312] CPU: 0 UID: 0 PID: 23312 Comm: syz.1.5904 Not tainted 6.16.0-rc3-syzkaller-00044-g7595b66ae9de #0 PREEMPT(voluntary) [ 351.552528][T23312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 351.552539][T23312] Call Trace: [ 351.552545][T23312] [ 351.552553][T23312] __dump_stack+0x1d/0x30 [ 351.552576][T23312] dump_stack_lvl+0xe8/0x140 [ 351.552597][T23312] dump_stack+0x15/0x1b [ 351.552679][T23312] should_fail_ex+0x265/0x280 [ 351.552718][T23312] ? xdp_umem_create+0x3c/0x5c0 [ 351.552826][T23312] should_failslab+0x8c/0xb0 [ 351.552851][T23312] __kmalloc_cache_noprof+0x4c/0x320 [ 351.552881][T23312] xdp_umem_create+0x3c/0x5c0 [ 351.552900][T23312] ? should_fail_ex+0xdb/0x280 [ 351.552929][T23312] xsk_setsockopt+0x4b2/0x510 [ 351.552951][T23312] ? __pfx_xsk_setsockopt+0x10/0x10 [ 351.553042][T23312] __sys_setsockopt+0x181/0x200 [ 351.553070][T23312] __x64_sys_setsockopt+0x64/0x80 [ 351.553099][T23312] x64_sys_call+0x2bd5/0x2fb0 [ 351.553121][T23312] do_syscall_64+0xd2/0x200 [ 351.553220][T23312] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 351.553247][T23312] ? clear_bhb_loop+0x40/0x90 [ 351.553270][T23312] ? clear_bhb_loop+0x40/0x90 [ 351.553311][T23312] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.553329][T23312] RIP: 0033:0x7fb1cfb9e929 [ 351.553343][T23312] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 351.553359][T23312] RSP: 002b:00007fb1ce207038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 351.553391][T23312] RAX: ffffffffffffffda RBX: 00007fb1cfdc5fa0 RCX: 00007fb1cfb9e929 [ 351.553404][T23312] RDX: 0000000000000004 RSI: 000000000000011b RDI: 0000000000000006 [ 351.553418][T23312] RBP: 00007fb1ce207090 R08: 0000000000000020 R09: 0000000000000000 [ 351.553480][T23312] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000001 [ 351.553492][T23312] R13: 0000000000000000 R14: 00007fb1cfdc5fa0 R15: 00007ffea3485638 [ 351.553513][T23312] [ 351.770983][T23313] loop2: detected capacity change from 0 to 512 [ 351.780499][T23315] loop5: detected capacity change from 0 to 512 [ 351.803741][T23313] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 351.826941][T23317] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5906'. [ 351.836346][T23317] tipc: Invalid UDP bearer configuration [ 351.836364][T23317] tipc: Enabling of bearer rejected, failed to enable media [ 351.892558][T23309] ALSA: seq fatal error: cannot create timer (-19) [ 351.900502][T23315] ext4 filesystem being mounted at /494/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 351.959771][T23313] ext4 filesystem being mounted at /239/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 352.081166][T23338] netlink: 9 bytes leftover after parsing attributes in process `syz.9.5909'. [ 352.116915][T23338] gretap0: entered promiscuous mode [ 352.143152][T23348] netlink: 5 bytes leftover after parsing attributes in process `syz.9.5909'. [ 352.165937][T23346] loop5: detected capacity change from 0 to 512 [ 352.190803][T23348] 0ªX¹¦D: renamed from gretap0 [ 352.213635][T23348] 0ªX¹¦D: left promiscuous mode [ 352.218551][T23348] 0ªX¹¦D: entered allmulticast mode [ 352.247807][T23346] ext4 filesystem being mounted at /495/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 352.263892][T23348] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 352.414925][T23328] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5909'. [ 352.494367][T23374] loop5: detected capacity change from 0 to 2048 [ 352.608447][T23390] FAULT_INJECTION: forcing a failure. [ 352.608447][T23390] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 352.621657][T23390] CPU: 0 UID: 0 PID: 23390 Comm: syz.2.5928 Not tainted 6.16.0-rc3-syzkaller-00044-g7595b66ae9de #0 PREEMPT(voluntary) [ 352.621689][T23390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 352.621740][T23390] Call Trace: [ 352.621748][T23390] [ 352.621755][T23390] __dump_stack+0x1d/0x30 [ 352.621775][T23390] dump_stack_lvl+0xe8/0x140 [ 352.621797][T23390] dump_stack+0x15/0x1b [ 352.621813][T23390] should_fail_ex+0x265/0x280 [ 352.621848][T23390] should_fail+0xb/0x20 [ 352.621877][T23390] should_fail_usercopy+0x1a/0x20 [ 352.621959][T23390] _copy_from_user+0x1c/0xb0 [ 352.621982][T23390] ___sys_recvmsg+0xaa/0x370 [ 352.622064][T23390] ? _parse_integer+0x27/0x40 [ 352.622129][T23390] do_recvmmsg+0x1ef/0x540 [ 352.622152][T23390] ? fput+0x8f/0xc0 [ 352.622174][T23390] __x64_sys_recvmmsg+0xe5/0x170 [ 352.622235][T23390] x64_sys_call+0x1c6a/0x2fb0 [ 352.622315][T23390] do_syscall_64+0xd2/0x200 [ 352.622335][T23390] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 352.622362][T23390] ? clear_bhb_loop+0x40/0x90 [ 352.622455][T23390] ? clear_bhb_loop+0x40/0x90 [ 352.622473][T23390] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.622495][T23390] RIP: 0033:0x7f355202e929 [ 352.622511][T23390] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 352.622531][T23390] RSP: 002b:00007f3550697038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 352.622599][T23390] RAX: ffffffffffffffda RBX: 00007f3552255fa0 RCX: 00007f355202e929 [ 352.622611][T23390] RDX: 0000000000000001 RSI: 0000200000001a00 RDI: 0000000000000003 [ 352.622623][T23390] RBP: 00007f3550697090 R08: 0000000000000000 R09: 0000000000000000 [ 352.622634][T23390] R10: 0000000040010080 R11: 0000000000000246 R12: 0000000000000001 [ 352.622647][T23390] R13: 0000000000000000 R14: 00007f3552255fa0 R15: 00007fffd165da48 [ 352.622667][T23390] [ 352.846761][T23395] loop2: detected capacity change from 0 to 512 [ 352.872057][T23395] ext4 filesystem being mounted at /245/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 352.996454][T23403] loop9: detected capacity change from 0 to 512 [ 353.066005][T23406] loop4: detected capacity change from 0 to 2048 [ 353.129856][T23403] ext4 filesystem being mounted at /383/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 353.266823][T23418] loop5: detected capacity change from 0 to 2048 [ 353.950932][T23450] loop4: detected capacity change from 0 to 1024 [ 353.963109][T23450] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 353.977046][T23450] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 353.991280][T23452] loop5: detected capacity change from 0 to 2048 [ 353.994804][T23450] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e01c, mo2=0000] [ 354.056435][T23450] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #3: block 2: comm syz.4.5949: lblock 2 mapped to illegal pblock 2 (length 1) [ 354.102129][T23450] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #3: block 48: comm syz.4.5949: lblock 0 mapped to illegal pblock 48 (length 1) [ 354.154873][T23450] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.5949: Failed to acquire dquot type 0 [ 354.170002][T23450] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 354.185610][T23450] EXT4-fs error (device loop4): ext4_evict_inode:254: inode #11: comm syz.4.5949: mark_inode_dirty error [ 354.197299][T23450] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 354.207775][T23450] EXT4-fs (loop4): 1 orphan inode deleted [ 354.214634][ T4167] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:14: lblock 1 mapped to illegal pblock 1 (length 1) [ 354.239402][ T4167] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:14: Failed to release dquot type 0 [ 354.272272][T23450] EXT4-fs error (device loop4): __ext4_get_inode_loc:4792: comm syz.4.5949: Invalid inode table block 1 in block_group 0 [ 354.288452][T23450] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 354.305248][T23450] EXT4-fs error (device loop4): ext4_quota_off:7217: inode #3: comm syz.4.5949: mark_inode_dirty error [ 354.504592][T23487] loop5: detected capacity change from 0 to 2048 [ 354.656354][T23497] loop2: detected capacity change from 0 to 512 [ 354.695095][T23497] ext4 filesystem being mounted at /255/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 354.711886][T23501] loop4: detected capacity change from 0 to 512 [ 354.741726][T23501] ext4 filesystem being mounted at /265/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 355.095835][T23529] loop5: detected capacity change from 0 to 1024 [ 355.121276][T23529] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 355.135636][T23529] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 355.146620][T23529] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e01c, mo2=0000] [ 355.155601][T23529] EXT4-fs error (device loop5): ext4_map_blocks:780: inode #3: block 2: comm syz.5.5976: lblock 2 mapped to illegal pblock 2 (length 1) [ 355.170939][T23529] EXT4-fs error (device loop5): ext4_map_blocks:780: inode #3: block 48: comm syz.5.5976: lblock 0 mapped to illegal pblock 48 (length 1) [ 355.186284][T23529] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.5976: Failed to acquire dquot type 0 [ 355.200235][T23529] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 355.218826][T23529] EXT4-fs error (device loop5): ext4_evict_inode:254: inode #11: comm syz.5.5976: mark_inode_dirty error [ 355.232529][T23536] loop9: detected capacity change from 0 to 512 [ 355.252231][T23529] EXT4-fs warning (device loop5): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 355.276409][T23529] EXT4-fs (loop5): 1 orphan inode deleted [ 355.289051][ T1656] EXT4-fs error (device loop5): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 355.330392][ T1656] EXT4-fs error (device loop5): ext4_release_dquot:6969: comm kworker/u8:6: Failed to release dquot type 0 [ 355.350636][T14941] EXT4-fs error (device loop5): __ext4_get_inode_loc:4792: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 355.366895][T23536] ext4 filesystem being mounted at /389/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 355.398401][T14941] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 355.411400][T14941] EXT4-fs error (device loop5): ext4_quota_off:7217: inode #3: comm syz-executor: mark_inode_dirty error [ 355.481374][T23544] loop9: detected capacity change from 0 to 512 [ 355.522566][T23549] loop2: detected capacity change from 0 to 1024 [ 355.531219][T23549] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 355.547838][T23549] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 355.562421][T23549] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e01c, mo2=0000] [ 355.581739][T23549] EXT4-fs error (device loop2): ext4_map_blocks:780: inode #3: block 2: comm syz.2.5982: lblock 2 mapped to illegal pblock 2 (length 1) [ 355.623166][T23552] loop5: detected capacity change from 0 to 1024 [ 355.634609][T23544] ext4 filesystem being mounted at /391/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 355.662032][T23549] EXT4-fs error (device loop2): ext4_map_blocks:780: inode #3: block 48: comm syz.2.5982: lblock 0 mapped to illegal pblock 48 (length 1) [ 355.692105][T23549] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.5982: Failed to acquire dquot type 0 [ 355.700099][T23552] ext4 filesystem being mounted at /510/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 355.714297][T23549] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 355.730967][T23549] EXT4-fs error (device loop2): ext4_evict_inode:254: inode #11: comm syz.2.5982: mark_inode_dirty error [ 355.751012][T23549] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 355.781927][T23549] EXT4-fs (loop2): 1 orphan inode deleted [ 355.803206][ T4167] EXT4-fs error (device loop2): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:14: lblock 1 mapped to illegal pblock 1 (length 1) [ 355.818450][ T4167] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:14: Failed to release dquot type 0 [ 355.857910][T23549] EXT4-fs error (device loop2): __ext4_get_inode_loc:4792: comm syz.2.5982: Invalid inode table block 1 in block_group 0 [ 355.872729][T23565] __nla_validate_parse: 12 callbacks suppressed [ 355.872741][T23565] netlink: 96 bytes leftover after parsing attributes in process `syz.5.5986'. [ 355.891270][T23549] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 355.905934][T23570] loop4: detected capacity change from 0 to 1024 [ 355.913053][T23570] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 355.922066][T23570] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 355.942635][T23549] EXT4-fs error (device loop2): ext4_quota_off:7217: inode #3: comm syz.2.5982: mark_inode_dirty error [ 355.957347][T23570] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e01c, mo2=0000] [ 355.959124][T23569] ALSA: seq fatal error: cannot create timer (-19) [ 355.967921][T23570] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #3: block 2: comm syz.4.5989: lblock 2 mapped to illegal pblock 2 (length 1) [ 355.997044][T23570] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #3: block 48: comm syz.4.5989: lblock 0 mapped to illegal pblock 48 (length 1) [ 356.052363][T23577] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5991'. [ 356.066809][T23581] netlink: 108 bytes leftover after parsing attributes in process `syz.2.5993'. [ 356.075962][T23581] netlink: 108 bytes leftover after parsing attributes in process `syz.2.5993'. [ 356.078908][T23570] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.5989: Failed to acquire dquot type 0 [ 356.085032][T23581] netlink: 108 bytes leftover after parsing attributes in process `syz.2.5993'. [ 356.096466][T23577] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5991'. [ 356.115790][T23570] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 356.127187][T23577] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5991'. [ 356.136379][T23570] EXT4-fs error (device loop4): ext4_evict_inode:254: inode #11: comm syz.4.5989: mark_inode_dirty error [ 356.148795][T23570] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 356.167832][T23570] EXT4-fs (loop4): 1 orphan inode deleted [ 356.179068][ T12] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 356.179543][T23577] netlink: 28 bytes leftover after parsing attributes in process `syz.9.5991'. [ 356.197777][ T12] __quota_error: 426 callbacks suppressed [ 356.197793][ T12] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 356.202197][T23577] netlink: 28 bytes leftover after parsing attributes in process `syz.9.5991'. [ 356.207915][ T12] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:0: Failed to release dquot type 0 [ 356.240789][ T29] audit: type=1326 audit(1750822585.423:15912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23584 comm="syz.2.5994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f355202e929 code=0x7ffc0000 [ 356.282419][ T29] audit: type=1326 audit(1750822585.453:15913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23584 comm="syz.2.5994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f355202e929 code=0x7ffc0000 [ 356.306144][ T29] audit: type=1326 audit(1750822585.453:15914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23584 comm="syz.2.5994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f355202e929 code=0x7ffc0000 [ 356.329831][ T29] audit: type=1326 audit(1750822585.453:15915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23584 comm="syz.2.5994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f355202e929 code=0x7ffc0000 [ 356.353732][ T29] audit: type=1326 audit(1750822585.453:15916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23584 comm="syz.2.5994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f355202e929 code=0x7ffc0000 [ 356.356956][T19664] EXT4-fs error (device loop4): __ext4_get_inode_loc:4792: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 356.377320][ T29] audit: type=1326 audit(1750822585.453:15917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23584 comm="syz.2.5994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f355202d290 code=0x7ffc0000 [ 356.394187][T19664] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 356.413717][ T29] audit: type=1326 audit(1750822585.453:15918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23584 comm="syz.2.5994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f3552030157 code=0x7ffc0000 [ 356.427790][T19664] EXT4-fs error (device loop4): ext4_quota_off:7217: inode #3: comm syz-executor: mark_inode_dirty error [ 356.446666][ T29] audit: type=1326 audit(1750822585.453:15919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23584 comm="syz.2.5994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f355202e929 code=0x7ffc0000 [ 356.446721][ T29] audit: type=1326 audit(1750822585.453:15920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23584 comm="syz.2.5994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f3552030157 code=0x7ffc0000 [ 356.507023][T23587] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5995'. [ 356.712875][T23602] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=23602 comm=syz.9.6001 [ 356.734261][T23602] siw: device registration error -23 [ 356.845227][T23612] loop9: detected capacity change from 0 to 1024 [ 356.856762][T23612] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 356.888118][T23612] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 356.899340][T23612] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e01c, mo2=0000] [ 356.909379][T23612] EXT4-fs error (device loop9): ext4_map_blocks:780: inode #3: block 2: comm syz.9.6003: lblock 2 mapped to illegal pblock 2 (length 1) [ 356.923999][T23612] EXT4-fs error (device loop9): ext4_map_blocks:780: inode #3: block 48: comm syz.9.6003: lblock 0 mapped to illegal pblock 48 (length 1) [ 356.938660][T23612] EXT4-fs error (device loop9): ext4_acquire_dquot:6933: comm syz.9.6003: Failed to acquire dquot type 0 [ 356.955573][T23612] EXT4-fs error (device loop9) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 356.965751][T23612] EXT4-fs error (device loop9): ext4_evict_inode:254: inode #11: comm syz.9.6003: mark_inode_dirty error [ 356.977358][T23612] EXT4-fs warning (device loop9): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 356.988555][T23612] EXT4-fs (loop9): 1 orphan inode deleted [ 356.999295][ T4167] EXT4-fs error (device loop9): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:14: lblock 1 mapped to illegal pblock 1 (length 1) [ 357.020806][ T4167] EXT4-fs error (device loop9): ext4_release_dquot:6969: comm kworker/u8:14: Failed to release dquot type 0 [ 357.073911][T23631] ALSA: seq fatal error: cannot create timer (-19) [ 357.082552][T23631] loop4: detected capacity change from 0 to 512 [ 357.090634][T23631] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 357.115572][T23631] ext4 filesystem being mounted at /274/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 357.151540][T23638] loop4: detected capacity change from 0 to 512 [ 357.180433][T23638] ext4 filesystem being mounted at /275/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 357.312377][T23650] loop2: detected capacity change from 0 to 2048 [ 357.383547][T23659] loop2: detected capacity change from 0 to 1024 [ 357.400373][T23659] ext4 filesystem being mounted at /273/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 357.433563][T23663] loop2: detected capacity change from 0 to 1024 [ 357.476586][T23667] loop4: detected capacity change from 0 to 512 [ 357.483845][T23667] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 357.505314][T23669] siw: device registration error -23 [ 357.528546][T23667] ext4 filesystem being mounted at /281/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 357.640346][T16952] EXT4-fs error (device loop9): __ext4_get_inode_loc:4792: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 357.681332][T16952] EXT4-fs error (device loop9) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 357.690957][T16952] EXT4-fs error (device loop9): ext4_quota_off:7217: inode #3: comm syz-executor: mark_inode_dirty error [ 357.741760][T23697] loop4: detected capacity change from 0 to 1024 [ 357.751765][T23695] loop9: detected capacity change from 0 to 1024 [ 357.758296][T23691] loop5: detected capacity change from 0 to 1024 [ 357.774055][T23691] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 357.798707][T23704] loop2: detected capacity change from 0 to 512 [ 357.801226][T23691] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 357.826598][T23695] ext4 filesystem being mounted at /398/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 357.839682][T23704] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 357.856904][T23691] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e01c, mo2=0000] [ 357.878418][T23691] EXT4-fs error (device loop5): ext4_map_blocks:780: inode #3: block 2: comm syz.5.6038: lblock 2 mapped to illegal pblock 2 (length 1) [ 357.901620][T23715] loop9: detected capacity change from 0 to 512 [ 357.916650][T23691] EXT4-fs error (device loop5): ext4_map_blocks:780: inode #3: block 48: comm syz.5.6038: lblock 0 mapped to illegal pblock 48 (length 1) [ 357.918479][T23704] ext4 filesystem being mounted at /279/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 357.942185][T23691] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.6038: Failed to acquire dquot type 0 [ 357.957587][T23691] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 357.967559][T23715] ext4 filesystem being mounted at /399/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 357.978358][T23691] EXT4-fs error (device loop5): ext4_evict_inode:254: inode #11: comm syz.5.6038: mark_inode_dirty error [ 358.007682][T23691] EXT4-fs warning (device loop5): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 358.021762][T23691] EXT4-fs (loop5): 1 orphan inode deleted [ 358.039241][ T4167] EXT4-fs error (device loop5): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:14: lblock 1 mapped to illegal pblock 1 (length 1) [ 358.060075][ T4167] EXT4-fs error (device loop5): ext4_release_dquot:6969: comm kworker/u8:14: Failed to release dquot type 0 [ 358.073397][T23691] EXT4-fs error (device loop5): __ext4_get_inode_loc:4792: comm syz.5.6038: Invalid inode table block 1 in block_group 0 [ 358.089969][T23726] loop2: detected capacity change from 0 to 512 [ 358.102926][T23691] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 358.119083][T23691] EXT4-fs error (device loop5): ext4_quota_off:7217: inode #3: comm syz.5.6038: mark_inode_dirty error [ 358.130374][T23728] ALSA: seq fatal error: cannot create timer (-19) [ 358.130498][T23731] loop9: detected capacity change from 0 to 512 [ 358.148410][T23728] loop4: detected capacity change from 0 to 512 [ 358.155552][T23728] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 358.169162][T23726] ext4 filesystem being mounted at /280/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 358.181176][T23731] ext4 filesystem being mounted at /400/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 358.202954][T23728] ext4 filesystem being mounted at /289/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 358.311389][T23747] loop5: detected capacity change from 0 to 1024 [ 358.323620][T23747] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 358.348444][T23747] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 358.370183][T23747] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e01c, mo2=0000] [ 358.383467][T23747] EXT4-fs error (device loop5): ext4_map_blocks:780: inode #3: block 2: comm syz.5.6056: lblock 2 mapped to illegal pblock 2 (length 1) [ 358.399468][T23747] EXT4-fs error (device loop5): ext4_map_blocks:780: inode #3: block 48: comm syz.5.6056: lblock 0 mapped to illegal pblock 48 (length 1) [ 358.413953][T23747] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.6056: Failed to acquire dquot type 0 [ 358.426692][T23747] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 358.440998][T23747] EXT4-fs error (device loop5): ext4_evict_inode:254: inode #11: comm syz.5.6056: mark_inode_dirty error [ 358.453079][T23747] EXT4-fs warning (device loop5): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 358.463543][T23747] EXT4-fs (loop5): 1 orphan inode deleted [ 358.480652][ T12] EXT4-fs error (device loop5): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 358.500896][T23750] loop2: detected capacity change from 0 to 1024 [ 358.507367][ T12] EXT4-fs error (device loop5): ext4_release_dquot:6969: comm kworker/u8:0: Failed to release dquot type 0 [ 358.536884][T23754] loop9: detected capacity change from 0 to 512 [ 358.548585][T14941] EXT4-fs error (device loop5): __ext4_get_inode_loc:4792: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 358.564476][T14941] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 358.570026][T23750] ext4 filesystem being mounted at /281/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 358.585176][T14941] EXT4-fs error (device loop5): ext4_quota_off:7217: inode #3: comm syz-executor: mark_inode_dirty error [ 358.597479][T23758] loop4: detected capacity change from 0 to 1024 [ 358.635840][T23754] ext4 filesystem being mounted at /401/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 358.649613][T23764] loop2: detected capacity change from 0 to 512 [ 358.723402][T23764] ext4 filesystem being mounted at /282/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 358.769733][T23778] loop4: detected capacity change from 0 to 2048 [ 359.066629][T23798] loop9: detected capacity change from 0 to 512 [ 359.090715][T23798] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 359.133147][T23798] ext4 filesystem being mounted at /404/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 359.472573][T23829] loop4: detected capacity change from 0 to 512 [ 359.500835][T23829] ext4 filesystem being mounted at /295/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 359.585717][T23838] loop9: detected capacity change from 0 to 1024 [ 359.596164][T23838] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 359.620006][T23838] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 359.637901][T23838] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e01c, mo2=0000] [ 359.654397][T23838] EXT4-fs error (device loop9): ext4_map_blocks:780: inode #3: block 2: comm syz.9.6088: lblock 2 mapped to illegal pblock 2 (length 1) [ 359.675988][T23838] EXT4-fs error (device loop9): ext4_map_blocks:780: inode #3: block 48: comm syz.9.6088: lblock 0 mapped to illegal pblock 48 (length 1) [ 359.691789][T23838] EXT4-fs error (device loop9): ext4_acquire_dquot:6933: comm syz.9.6088: Failed to acquire dquot type 0 [ 359.705597][T23838] EXT4-fs error (device loop9) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 359.719391][T23838] EXT4-fs error (device loop9): ext4_evict_inode:254: inode #11: comm syz.9.6088: mark_inode_dirty error [ 359.731181][T23838] EXT4-fs warning (device loop9): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 359.745113][T23838] EXT4-fs (loop9): 1 orphan inode deleted [ 359.759147][ T12] EXT4-fs error (device loop9): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 359.773593][ T12] EXT4-fs error (device loop9): ext4_release_dquot:6969: comm kworker/u8:0: Failed to release dquot type 0 [ 359.803526][T23855] loop4: detected capacity change from 0 to 1024 [ 359.806252][T23857] loop2: detected capacity change from 0 to 512 [ 359.842828][T23857] ext4 filesystem being mounted at /284/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 359.881771][T23863] loop4: detected capacity change from 0 to 2048 [ 359.943815][T23863] loop4: p1 < > p4 [ 359.950942][T23863] loop4: p4 size 8388608 extends beyond EOD, truncated [ 360.020450][ T3714] udevd[3714]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 360.031346][ T7160] udevd[7160]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 360.083703][T23877] loop2: detected capacity change from 0 to 512 [ 360.100932][T23877] ext4 filesystem being mounted at /288/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 360.124103][T23881] loop4: detected capacity change from 0 to 512 [ 360.161847][T23881] ext4 filesystem being mounted at /307/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 360.329098][T23895] tipc: Invalid UDP bearer configuration [ 360.329116][T23895] tipc: Enabling of bearer rejected, failed to enable media [ 360.373087][T16952] EXT4-fs error (device loop9): __ext4_get_inode_loc:4792: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 360.389750][T16952] EXT4-fs error (device loop9) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 360.400237][T16952] EXT4-fs error (device loop9): ext4_quota_off:7217: inode #3: comm syz-executor: mark_inode_dirty error [ 360.412650][T23901] loop4: detected capacity change from 0 to 1024 [ 360.896204][T23920] loop2: detected capacity change from 0 to 512 [ 360.916981][T23920] ext4 filesystem being mounted at /295/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 361.177972][T23935] loop2: detected capacity change from 0 to 512 [ 361.202070][ T29] kauditd_printk_skb: 301 callbacks suppressed [ 361.202084][ T29] audit: type=1326 audit(1750822590.383:16210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23936 comm="syz.5.6129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f026691e929 code=0x7ffc0000 [ 361.231927][ T29] audit: type=1326 audit(1750822590.383:16211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23936 comm="syz.5.6129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f026691e929 code=0x7ffc0000 [ 361.255583][ T29] audit: type=1326 audit(1750822590.383:16212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23936 comm="syz.5.6129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f026691e929 code=0x7ffc0000 [ 361.279332][ T29] audit: type=1326 audit(1750822590.383:16213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23936 comm="syz.5.6129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f026691e929 code=0x7ffc0000 [ 361.314983][T23939] loop5: detected capacity change from 0 to 1024 [ 361.328998][T23939] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 361.339603][T23939] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 361.350630][ T29] audit: type=1400 audit(1750822590.493:16214): avc: denied { create } for pid=23938 comm="syz.5.6130" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 361.371534][ T29] audit: type=1400 audit(1750822590.503:16215): avc: denied { mounton } for pid=23938 comm="syz.5.6130" path="/531/file0" dev="tmpfs" ino=2834 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 361.399121][T23939] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e01c, mo2=0000] [ 361.411982][T23939] EXT4-fs error (device loop5): ext4_map_blocks:780: inode #3: block 2: comm syz.5.6130: lblock 2 mapped to illegal pblock 2 (length 1) [ 361.430109][T23935] ext4 filesystem being mounted at /296/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 361.439378][T23939] Quota error (device loop5): qtree_write_dquot: dquota write failed [ 361.448613][T23939] EXT4-fs error (device loop5): ext4_map_blocks:780: inode #3: block 48: comm syz.5.6130: lblock 0 mapped to illegal pblock 48 (length 1) [ 361.463242][T23939] Quota error (device loop5): v2_write_file_info: Can't write info structure [ 361.472086][T23939] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.6130: Failed to acquire dquot type 0 [ 361.490285][T23939] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 361.507160][T23939] EXT4-fs error (device loop5): ext4_evict_inode:254: inode #11: comm syz.5.6130: mark_inode_dirty error [ 361.532547][T23939] EXT4-fs warning (device loop5): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 361.568129][T23939] EXT4-fs (loop5): 1 orphan inode deleted [ 361.579684][ T4166] EXT4-fs error (device loop5): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:13: lblock 1 mapped to illegal pblock 1 (length 1) [ 361.610873][ T4166] Quota error (device loop5): remove_tree: Can't read quota data block 1 [ 361.619462][ T4166] EXT4-fs error (device loop5): ext4_release_dquot:6969: comm kworker/u8:13: Failed to release dquot type 0 [ 361.646808][T23939] EXT4-fs error (device loop5): __ext4_get_inode_loc:4792: comm syz.5.6130: Invalid inode table block 1 in block_group 0 [ 361.690388][T23939] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 361.705139][T23958] __nla_validate_parse: 51 callbacks suppressed [ 361.705154][T23958] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6136'. [ 361.720644][T23939] EXT4-fs error (device loop5): ext4_quota_off:7217: inode #3: comm syz.5.6130: mark_inode_dirty error [ 361.754301][T23958] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6136'. [ 361.763957][T23958] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6136'. [ 361.791230][ T29] audit: type=1400 audit(1750822590.963:16216): avc: denied { unlink } for pid=14941 comm="syz-executor" name="file0" dev="tmpfs" ino=2834 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 361.822630][T23958] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6136'. [ 361.831756][T23958] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6136'. [ 361.843041][T23962] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6139'. [ 361.853492][T23962] netlink: 260 bytes leftover after parsing attributes in process `syz.5.6139'. [ 361.862574][T23962] netlink: 260 bytes leftover after parsing attributes in process `syz.5.6139'. [ 361.968684][T23971] loop5: detected capacity change from 0 to 512 [ 361.992970][T23971] ext4 filesystem being mounted at /535/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 362.010325][T23974] netlink: 76 bytes leftover after parsing attributes in process `syz.9.6137'. [ 362.581080][T23994] netlink: 24 bytes leftover after parsing attributes in process `syz.9.6152'. [ 362.665965][T24001] loop9: detected capacity change from 0 to 1024 [ 362.677717][T24001] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 362.686669][T24001] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 362.704463][T24001] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e01c, mo2=0000] [ 362.712876][T24005] loop4: detected capacity change from 0 to 512 [ 362.724221][T24005] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 362.744952][T24001] EXT4-fs error (device loop9): ext4_map_blocks:780: inode #3: block 2: comm syz.9.6154: lblock 2 mapped to illegal pblock 2 (length 1) [ 362.765251][T24005] ext4 filesystem being mounted at /323/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 362.776120][T24001] EXT4-fs error (device loop9): ext4_map_blocks:780: inode #3: block 48: comm syz.9.6154: lblock 0 mapped to illegal pblock 48 (length 1) [ 362.790575][T24001] EXT4-fs error (device loop9): ext4_acquire_dquot:6933: comm syz.9.6154: Failed to acquire dquot type 0 [ 362.803102][T24001] EXT4-fs error (device loop9) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 362.813101][T24001] EXT4-fs error (device loop9): ext4_evict_inode:254: inode #11: comm syz.9.6154: mark_inode_dirty error [ 362.824913][T24001] EXT4-fs warning (device loop9): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 362.835700][T24001] EXT4-fs (loop9): 1 orphan inode deleted [ 362.841579][ T12] EXT4-fs error (device loop9): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 362.856064][ T12] EXT4-fs error (device loop9): ext4_release_dquot:6969: comm kworker/u8:0: Failed to release dquot type 0 [ 362.894014][T24012] loop2: detected capacity change from 0 to 1024 [ 362.902677][T24012] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 362.911524][T24012] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 362.922299][T24016] loop4: detected capacity change from 0 to 1024 [ 362.930838][T24012] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e01c, mo2=0000] [ 362.940713][T24012] EXT4-fs error (device loop2): ext4_map_blocks:780: inode #3: block 2: comm syz.2.6160: lblock 2 mapped to illegal pblock 2 (length 1) [ 362.952071][T24016] ext4 filesystem being mounted at /325/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 362.955224][T24012] EXT4-fs error (device loop2): ext4_map_blocks:780: inode #3: block 48: comm syz.2.6160: lblock 0 mapped to illegal pblock 48 (length 1) [ 362.979607][T24012] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.6160: Failed to acquire dquot type 0 [ 362.991082][T24012] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 363.000751][T24012] EXT4-fs error (device loop2): ext4_evict_inode:254: inode #11: comm syz.2.6160: mark_inode_dirty error [ 363.012298][T24012] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 363.022629][T24012] EXT4-fs (loop2): 1 orphan inode deleted [ 363.029094][ T12] EXT4-fs error (device loop2): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 363.055977][ T12] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:0: Failed to release dquot type 0 [ 363.071795][T24012] EXT4-fs error (device loop2): __ext4_get_inode_loc:4792: comm syz.2.6160: Invalid inode table block 1 in block_group 0 [ 363.084654][T24012] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 363.094459][T24012] EXT4-fs error (device loop2): ext4_quota_off:7217: inode #3: comm syz.2.6160: mark_inode_dirty error [ 363.215782][T24037] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=24037 comm=syz.2.6170 [ 363.244600][T24037] siw: device registration error -23 [ 363.259191][T24043] loop5: detected capacity change from 0 to 1024 [ 363.289060][T24043] ext4 filesystem being mounted at /540/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 363.445215][T24064] loop5: detected capacity change from 0 to 512 [ 363.452833][T16952] EXT4-fs error (device loop9): __ext4_get_inode_loc:4792: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 363.465991][T16952] EXT4-fs error (device loop9) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 363.470946][T24064] ext4 filesystem being mounted at /545/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 363.476083][T16952] EXT4-fs error (device loop9): ext4_quota_off:7217: inode #3: comm syz-executor: mark_inode_dirty error [ 363.519865][T24068] loop9: detected capacity change from 0 to 1024 [ 363.527049][T24068] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 363.536291][T24068] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 363.548087][T24068] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e01c, mo2=0000] [ 363.557766][T24068] EXT4-fs error (device loop9): ext4_map_blocks:780: inode #3: block 2: comm syz.9.6180: lblock 2 mapped to illegal pblock 2 (length 1) [ 363.571998][T24068] EXT4-fs error (device loop9): ext4_map_blocks:780: inode #3: block 48: comm syz.9.6180: lblock 0 mapped to illegal pblock 48 (length 1) [ 363.586257][T24068] EXT4-fs error (device loop9): ext4_acquire_dquot:6933: comm syz.9.6180: Failed to acquire dquot type 0 [ 363.597783][T24068] EXT4-fs error (device loop9) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 363.607381][T24068] EXT4-fs error (device loop9): ext4_evict_inode:254: inode #11: comm syz.9.6180: mark_inode_dirty error [ 363.620375][T24068] EXT4-fs warning (device loop9): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 363.630614][T24068] EXT4-fs (loop9): 1 orphan inode deleted [ 363.637069][ T1656] EXT4-fs error (device loop9): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 363.651428][ T1656] EXT4-fs error (device loop9): ext4_release_dquot:6969: comm kworker/u8:6: Failed to release dquot type 0 [ 363.663994][T24068] EXT4-fs error (device loop9): __ext4_get_inode_loc:4792: comm syz.9.6180: Invalid inode table block 1 in block_group 0 [ 363.676865][T24068] EXT4-fs error (device loop9) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 363.686502][T24068] EXT4-fs error (device loop9): ext4_quota_off:7217: inode #3: comm syz.9.6180: mark_inode_dirty error [ 363.748098][T24075] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=24075 comm=syz.9.6183 [ 363.764075][T24075] siw: device registration error -23 [ 363.820476][T24082] loop9: detected capacity change from 0 to 1024 [ 363.830702][T24082] ext4 filesystem being mounted at /423/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 363.893657][T24091] loop9: detected capacity change from 0 to 512 [ 363.911160][T24091] ext4 filesystem being mounted at /426/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 364.080817][T24106] loop9: detected capacity change from 0 to 1024 [ 364.093322][T24106] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 364.102134][T24106] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 364.113522][T24106] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e01c, mo2=0000] [ 364.122510][T24110] loop4: detected capacity change from 0 to 1024 [ 364.129442][T24106] EXT4-fs error (device loop9): ext4_map_blocks:780: inode #3: block 2: comm syz.9.6191: lblock 2 mapped to illegal pblock 2 (length 1) [ 364.143609][T24106] EXT4-fs error (device loop9): ext4_map_blocks:780: inode #3: block 48: comm syz.9.6191: lblock 0 mapped to illegal pblock 48 (length 1) [ 364.152343][T24110] ext4 filesystem being mounted at /332/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 364.158813][T24106] EXT4-fs error (device loop9): ext4_acquire_dquot:6933: comm syz.9.6191: Failed to acquire dquot type 0 [ 364.180143][T24106] EXT4-fs error (device loop9) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 364.190757][T24106] EXT4-fs error (device loop9): ext4_evict_inode:254: inode #11: comm syz.9.6191: mark_inode_dirty error [ 364.202434][T24106] EXT4-fs warning (device loop9): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 364.213113][T24106] EXT4-fs (loop9): 1 orphan inode deleted [ 364.237474][ T1656] EXT4-fs error (device loop9): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 364.252984][ T1656] EXT4-fs error (device loop9): ext4_release_dquot:6969: comm kworker/u8:6: Failed to release dquot type 0 [ 364.270437][T24123] loop4: detected capacity change from 0 to 512 [ 364.291850][T24123] ext4 filesystem being mounted at /334/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 364.328894][T24129] loop2: detected capacity change from 0 to 1024 [ 364.336142][T24129] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 364.345057][T24129] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 364.355871][T24129] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e01c, mo2=0000] [ 364.365466][T24129] EXT4-fs error (device loop2): ext4_map_blocks:780: inode #3: block 2: comm syz.2.6203: lblock 2 mapped to illegal pblock 2 (length 1) [ 364.381209][T24129] EXT4-fs error (device loop2): ext4_map_blocks:780: inode #3: block 48: comm syz.2.6203: lblock 0 mapped to illegal pblock 48 (length 1) [ 364.396122][T24129] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.6203: Failed to acquire dquot type 0 [ 364.416837][T24129] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 364.444775][T24129] EXT4-fs error (device loop2): ext4_evict_inode:254: inode #11: comm syz.2.6203: mark_inode_dirty error [ 364.457664][T24129] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 364.468266][T24129] EXT4-fs (loop2): 1 orphan inode deleted [ 364.477475][ T12] EXT4-fs error (device loop2): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 364.492258][T24136] loop5: detected capacity change from 0 to 1024 [ 364.501109][T24136] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 364.510976][ T12] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:0: Failed to release dquot type 0 [ 364.523429][T24136] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 364.536817][T24136] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e01c, mo2=0000] [ 364.538863][T24129] EXT4-fs error (device loop2): __ext4_get_inode_loc:4792: comm syz.2.6203: Invalid inode table block 1 in block_group 0 [ 364.546316][T24136] EXT4-fs error (device loop5): ext4_map_blocks:780: inode #3: block 2: comm syz.5.6205: lblock 2 mapped to illegal pblock 2 (length 1) [ 364.562064][T24140] loop4: detected capacity change from 0 to 1024 [ 364.571982][T24136] EXT4-fs error (device loop5): ext4_map_blocks:780: inode #3: block 48: comm syz.5.6205: lblock 0 mapped to illegal pblock 48 (length 1) [ 364.592591][T24136] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.6205: Failed to acquire dquot type 0 [ 364.597075][T24129] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 364.613371][T24136] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 364.614781][T24129] EXT4-fs error (device loop2): ext4_quota_off:7217: inode #3: comm syz.2.6203: mark_inode_dirty error [ 364.624329][T24136] EXT4-fs error (device loop5): ext4_evict_inode:254: inode #11: comm syz.5.6205: mark_inode_dirty error [ 364.636217][T24140] ext4 filesystem being mounted at /338/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 364.645751][T24136] EXT4-fs warning (device loop5): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 364.669068][T24136] EXT4-fs (loop5): 1 orphan inode deleted [ 364.676620][ T12] EXT4-fs error (device loop5): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 364.701606][ T12] EXT4-fs error (device loop5): ext4_release_dquot:6969: comm kworker/u8:0: Failed to release dquot type 0 [ 364.716833][T24136] EXT4-fs error (device loop5): __ext4_get_inode_loc:4792: comm syz.5.6205: Invalid inode table block 1 in block_group 0 [ 364.731198][T24136] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 364.749928][T24147] loop4: detected capacity change from 0 to 512 [ 364.750274][T24136] EXT4-fs error (device loop5): ext4_quota_off:7217: inode #3: comm syz.5.6205: mark_inode_dirty error [ 364.769057][T24147] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 364.787922][T24147] ext4 filesystem being mounted at /339/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 364.866920][T16952] EXT4-fs error (device loop9): __ext4_get_inode_loc:4792: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 364.888489][T16952] EXT4-fs error (device loop9) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 364.908032][T16952] EXT4-fs error (device loop9): ext4_quota_off:7217: inode #3: comm syz-executor: mark_inode_dirty error [ 364.919758][T24161] loop5: detected capacity change from 0 to 1024 [ 364.921813][T24157] loop4: detected capacity change from 0 to 512 [ 364.932426][T24161] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 364.932531][T24161] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 364.981966][T24161] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e01c, mo2=0000] [ 364.995332][T24157] ext4 filesystem being mounted at /340/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 364.996975][T24161] EXT4-fs error (device loop5): ext4_map_blocks:780: inode #3: block 2: comm syz.5.6215: lblock 2 mapped to illegal pblock 2 (length 1) [ 365.027377][T24161] EXT4-fs error (device loop5): ext4_map_blocks:780: inode #3: block 48: comm syz.5.6215: lblock 0 mapped to illegal pblock 48 (length 1) [ 365.042409][T24161] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.6215: Failed to acquire dquot type 0 [ 365.054315][T24161] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 365.076618][T24161] EXT4-fs error (device loop5): ext4_evict_inode:254: inode #11: comm syz.5.6215: mark_inode_dirty error [ 365.076659][T24172] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=24172 comm=syz.1.6220 [ 365.080653][T24172] siw: device registration error -23 [ 365.104915][T24175] loop2: detected capacity change from 0 to 512 [ 365.113617][T24161] EXT4-fs warning (device loop5): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 365.124770][T24161] EXT4-fs (loop5): 1 orphan inode deleted [ 365.130680][ T4165] EXT4-fs error (device loop5): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:12: lblock 1 mapped to illegal pblock 1 (length 1) [ 365.164438][ T4165] EXT4-fs error (device loop5): ext4_release_dquot:6969: comm kworker/u8:12: Failed to release dquot type 0 [ 365.176503][T24175] ext4 filesystem being mounted at /313/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 365.218439][T14941] EXT4-fs error (device loop5): __ext4_get_inode_loc:4792: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 365.256868][T14941] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 365.293489][T14941] EXT4-fs error (device loop5): ext4_quota_off:7217: inode #3: comm syz-executor: mark_inode_dirty error [ 365.351106][T24200] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=24200 comm=syz.4.6233 [ 365.368309][T24200] siw: device registration error -23 [ 365.400797][T24205] loop4: detected capacity change from 0 to 1024 [ 365.415737][T24205] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 365.426944][T24205] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 365.438348][T24205] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e01c, mo2=0000] [ 365.447784][T24205] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #3: block 2: comm syz.4.6234: lblock 2 mapped to illegal pblock 2 (length 1) [ 365.463733][T24205] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #3: block 48: comm syz.4.6234: lblock 0 mapped to illegal pblock 48 (length 1) [ 365.479107][T24205] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.6234: Failed to acquire dquot type 0 [ 365.490678][T24205] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 365.500736][T24205] EXT4-fs error (device loop4): ext4_evict_inode:254: inode #11: comm syz.4.6234: mark_inode_dirty error [ 365.513215][T24205] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 365.526767][T24205] EXT4-fs (loop4): 1 orphan inode deleted [ 365.552795][ T4165] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:12: lblock 1 mapped to illegal pblock 1 (length 1) [ 365.568044][ T4165] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:12: Failed to release dquot type 0 [ 365.600384][T19664] EXT4-fs error (device loop4): __ext4_get_inode_loc:4792: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 365.617079][T24217] loop5: detected capacity change from 0 to 512 [ 365.624227][T19664] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 365.639159][T19664] EXT4-fs error (device loop4): ext4_quota_off:7217: inode #3: comm syz-executor: mark_inode_dirty error [ 365.652435][T24217] ext4 filesystem being mounted at /551/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 365.727984][T24229] loop5: detected capacity change from 0 to 1024 [ 365.737243][T24229] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 365.756102][T24229] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 365.802180][T24229] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e01c, mo2=0000] [ 365.820031][T24229] EXT4-fs error (device loop5): ext4_map_blocks:780: inode #3: block 2: comm syz.5.6244: lblock 2 mapped to illegal pblock 2 (length 1) [ 365.853280][T24229] EXT4-fs error (device loop5): ext4_map_blocks:780: inode #3: block 48: comm syz.5.6244: lblock 0 mapped to illegal pblock 48 (length 1) [ 365.869497][T24229] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.6244: Failed to acquire dquot type 0 [ 365.899269][T24229] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 365.909918][T24229] EXT4-fs error (device loop5): ext4_evict_inode:254: inode #11: comm syz.5.6244: mark_inode_dirty error [ 365.941619][T24229] EXT4-fs warning (device loop5): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 365.952137][T24229] EXT4-fs (loop5): 1 orphan inode deleted [ 365.978572][ T12] EXT4-fs error (device loop5): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 366.010461][ T12] EXT4-fs error (device loop5): ext4_release_dquot:6969: comm kworker/u8:0: Failed to release dquot type 0 [ 366.049601][T14941] EXT4-fs error (device loop5): __ext4_get_inode_loc:4792: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 366.064039][T24259] loop9: detected capacity change from 0 to 2048 [ 366.092266][T14941] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 366.160746][T14941] EXT4-fs error (device loop5): ext4_quota_off:7217: inode #3: comm syz-executor: mark_inode_dirty error [ 366.231365][ T29] kauditd_printk_skb: 235 callbacks suppressed [ 366.231391][ T29] audit: type=1400 audit(1750822595.413:16425): avc: denied { open } for pid=24273 comm="syz.4.6264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 366.257070][ T29] audit: type=1400 audit(1750822595.413:16426): avc: denied { kernel } for pid=24273 comm="syz.4.6264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 366.285429][ T29] audit: type=1400 audit(1750822595.463:16427): avc: denied { read } for pid=24269 comm="syz.2.6263" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 366.308655][ T29] audit: type=1400 audit(1750822595.463:16428): avc: denied { open } for pid=24269 comm="syz.2.6263" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 366.335231][T24275] loop5: detected capacity change from 0 to 512 [ 366.351749][ T29] audit: type=1400 audit(1750822595.533:16429): avc: denied { mounton } for pid=24272 comm="syz.5.6259" path="/554/file1" dev="tmpfs" ino=2958 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 366.392105][ T29] audit: type=1400 audit(1750822595.533:16430): avc: denied { execute } for pid=24277 comm="syz.4.6265" dev="tmpfs" ino=971 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 366.413448][ T29] audit: type=1400 audit(1750822595.563:16431): avc: denied { execute_no_trans } for pid=24277 comm="syz.4.6265" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=971 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 366.450621][ T29] audit: type=1400 audit(1750822595.633:16432): avc: denied { mount } for pid=24272 comm="syz.5.6259" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 366.461944][T24275] ext4 filesystem being mounted at /554/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 366.473255][ T29] audit: type=1400 audit(1750822595.633:16433): avc: denied { unmount } for pid=16952 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 366.503394][ T29] audit: type=1400 audit(1750822595.673:16434): avc: denied { read write } for pid=24272 comm="syz.5.6259" name="file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 366.553902][T24281] loop4: detected capacity change from 0 to 2048 [ 366.619433][ T7160] loop4: p1 < > p4 [ 366.627723][ T7160] loop4: p4 size 8388608 extends beyond EOD, truncated [ 366.652564][T24281] loop4: p1 < > p4 [ 366.666697][T24281] loop4: p4 size 8388608 extends beyond EOD, truncated [ 366.711888][ T7160] udevd[7160]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 366.722964][ T3714] udevd[3714]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 366.757923][ T3714] udevd[3714]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 366.763209][T24307] __nla_validate_parse: 26 callbacks suppressed [ 366.763227][T24307] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6277'. [ 366.768988][ T7160] udevd[7160]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 366.796146][T24307] netlink: 260 bytes leftover after parsing attributes in process `syz.1.6277'. [ 366.805346][T24307] netlink: 260 bytes leftover after parsing attributes in process `syz.1.6277'. [ 366.921337][T24325] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6286'. [ 366.930807][T24325] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6286'. [ 366.944003][T24321] loop5: detected capacity change from 0 to 2048 [ 366.958601][T24327] loop4: detected capacity change from 0 to 1024 [ 366.969000][T24327] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 366.980645][T24327] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 366.997946][T24327] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e01c, mo2=0000] [ 367.023301][T24327] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #3: block 2: comm syz.4.6287: lblock 2 mapped to illegal pblock 2 (length 1) [ 367.040772][T24327] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #3: block 48: comm syz.4.6287: lblock 0 mapped to illegal pblock 48 (length 1) [ 367.077701][T24327] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.6287: Failed to acquire dquot type 0 [ 367.112842][T24327] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 367.130157][T24327] EXT4-fs error (device loop4): ext4_evict_inode:254: inode #11: comm syz.4.6287: mark_inode_dirty error [ 367.141701][T24327] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 367.153105][T24327] EXT4-fs (loop4): 1 orphan inode deleted [ 367.178507][ T1656] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 367.202519][T24343] netlink: 24 bytes leftover after parsing attributes in process `syz.9.6292'. [ 367.212317][T24343] netlink: 260 bytes leftover after parsing attributes in process `syz.9.6292'. [ 367.221489][T24343] netlink: 260 bytes leftover after parsing attributes in process `syz.9.6292'. [ 367.233777][T24345] loop2: detected capacity change from 0 to 1024 [ 367.240438][ T1656] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:6: Failed to release dquot type 0 [ 367.276188][T19664] EXT4-fs error (device loop4): __ext4_get_inode_loc:4792: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 367.289972][T19664] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 367.299051][T24345] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 367.307945][T24345] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 367.333528][T19664] EXT4-fs error (device loop4): ext4_quota_off:7217: inode #3: comm syz-executor: mark_inode_dirty error [ 367.349504][T24345] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e01c, mo2=0000] [ 367.445436][T24345] EXT4-fs error (device loop2): ext4_map_blocks:780: inode #3: block 2: comm syz.2.6294: lblock 2 mapped to illegal pblock 2 (length 1) [ 367.463842][T24345] EXT4-fs error (device loop2): ext4_map_blocks:780: inode #3: block 48: comm syz.2.6294: lblock 0 mapped to illegal pblock 48 (length 1) [ 367.508425][T24373] loop5: detected capacity change from 0 to 512 [ 367.532455][T24345] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.6294: Failed to acquire dquot type 0 [ 367.544838][T24345] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 367.554731][T24345] EXT4-fs error (device loop2): ext4_evict_inode:254: inode #11: comm syz.2.6294: mark_inode_dirty error [ 367.566157][T24345] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 367.576611][T24345] EXT4-fs (loop2): 1 orphan inode deleted [ 367.583715][T24376] netlink: 76 bytes leftover after parsing attributes in process `syz.9.6299'. [ 367.605978][ T1656] EXT4-fs error (device loop2): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 367.645612][T24380] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6308'. [ 367.659185][T24373] ext4 filesystem being mounted at /561/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 367.672221][ T1656] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:6: Failed to release dquot type 0 [ 367.728850][T24345] EXT4-fs error (device loop2): __ext4_get_inode_loc:4792: comm syz.2.6294: Invalid inode table block 1 in block_group 0 [ 367.762981][T24345] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 367.815050][T24345] EXT4-fs error (device loop2): ext4_quota_off:7217: inode #3: comm syz.2.6294: mark_inode_dirty error [ 368.110480][T24413] loop2: detected capacity change from 0 to 1024 [ 368.119954][T24413] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 368.128541][T24415] loop5: detected capacity change from 0 to 512 [ 368.143191][T24417] loop4: detected capacity change from 0 to 512 [ 368.151348][T24413] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 368.169390][T24413] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e01c, mo2=0000] [ 368.189603][T24417] ext4 filesystem being mounted at /368/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 368.213082][T24415] ext4 filesystem being mounted at /565/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 368.227847][T24413] EXT4-fs error (device loop2): ext4_map_blocks:780: inode #3: block 2: comm syz.2.6324: lblock 2 mapped to illegal pblock 2 (length 1) [ 368.312000][T24413] EXT4-fs error (device loop2): ext4_map_blocks:780: inode #3: block 48: comm syz.2.6324: lblock 0 mapped to illegal pblock 48 (length 1) [ 368.327863][T24413] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.6324: Failed to acquire dquot type 0 [ 368.359151][T24413] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 368.388874][T24413] EXT4-fs error (device loop2): ext4_evict_inode:254: inode #11: comm syz.2.6324: mark_inode_dirty error [ 368.422778][T24413] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 368.439387][T24413] EXT4-fs (loop2): 1 orphan inode deleted [ 368.445200][ T4162] EXT4-fs error (device loop2): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:9: lblock 1 mapped to illegal pblock 1 (length 1) [ 368.469279][ T4162] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:9: Failed to release dquot type 0 [ 368.483415][T19116] EXT4-fs error (device loop2): __ext4_get_inode_loc:4792: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 368.497649][T19116] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 368.507348][T19116] EXT4-fs error (device loop2): ext4_quota_off:7217: inode #3: comm syz-executor: mark_inode_dirty error [ 368.536554][T24448] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=24448 comm=syz.5.6338 [ 368.707335][T24472] loop4: detected capacity change from 0 to 1024 [ 368.768931][T24476] loop2: detected capacity change from 0 to 2048 [ 368.777858][T24472] EXT4-fs mount: 168 callbacks suppressed [ 368.777915][T24472] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 368.802497][T24478] loop9: detected capacity change from 0 to 1024 [ 368.830772][ T7160] loop2: p1 < > p4 [ 368.835609][ T7160] loop2: p4 size 8388608 extends beyond EOD, truncated [ 368.845232][T24478] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 368.857293][T24478] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 368.860666][T19664] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 368.878051][T24476] loop2: p1 < > p4 [ 368.882722][T24478] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e01c, mo2=0000] [ 368.890973][T24476] loop2: p4 size 8388608 extends beyond EOD, truncated [ 368.904245][ T2995] loop2: p1 < > p4 [ 368.908985][ T2995] loop2: p4 size 8388608 extends beyond EOD, truncated [ 368.917879][T24478] EXT4-fs error (device loop9): ext4_map_blocks:780: inode #3: block 2: comm syz.9.6350: lblock 2 mapped to illegal pblock 2 (length 1) [ 368.949286][T24478] EXT4-fs error (device loop9): ext4_map_blocks:780: inode #3: block 48: comm syz.9.6350: lblock 0 mapped to illegal pblock 48 (length 1) [ 368.961996][ T7160] udevd[7160]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 368.965016][ T3733] udevd[3733]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 368.986745][T24478] EXT4-fs error (device loop9): ext4_acquire_dquot:6933: comm syz.9.6350: Failed to acquire dquot type 0 [ 368.992741][ T3714] udevd[3714]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 369.009530][ T7160] udevd[7160]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 369.022619][T24478] EXT4-fs error (device loop9) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 369.034143][T24478] EXT4-fs error (device loop9): ext4_evict_inode:254: inode #11: comm syz.9.6350: mark_inode_dirty error [ 369.046457][T24486] loop4: detected capacity change from 0 to 512 [ 369.046595][T24478] EXT4-fs warning (device loop9): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 369.063227][T24478] EXT4-fs (loop9): 1 orphan inode deleted [ 369.063575][T24486] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 369.069386][T24478] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 369.090572][ T4162] EXT4-fs error (device loop9): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:9: lblock 1 mapped to illegal pblock 1 (length 1) [ 369.105086][ T4162] EXT4-fs error (device loop9): ext4_release_dquot:6969: comm kworker/u8:9: Failed to release dquot type 0 [ 369.130036][T24486] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 369.145274][T24486] ext4 filesystem being mounted at /373/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 369.157325][T16952] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 369.168107][T16952] EXT4-fs error (device loop9): __ext4_get_inode_loc:4792: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 369.182407][T24495] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=24495 comm=syz.2.6356 [ 369.193584][T16952] EXT4-fs error (device loop9) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 369.207559][T24495] siw: device registration error -23 [ 369.228544][T16952] EXT4-fs error (device loop9): ext4_quota_off:7217: inode #3: comm syz-executor: mark_inode_dirty error [ 369.241176][T24498] tipc: Invalid UDP bearer configuration [ 369.241189][T24498] tipc: Enabling of bearer rejected, failed to enable media [ 369.248003][T19664] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 369.323447][T24507] loop2: detected capacity change from 0 to 512 [ 369.344023][T24507] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 369.356837][T24507] ext4 filesystem being mounted at /328/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 369.382525][T24511] loop9: detected capacity change from 0 to 1024 [ 369.410072][T24511] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 369.425139][T19116] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 369.484512][T16952] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 369.488588][T24517] loop4: detected capacity change from 0 to 1024 [ 369.539385][T24521] loop9: detected capacity change from 0 to 2048 [ 369.567568][T24517] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 369.599050][T24517] ext4 filesystem being mounted at /375/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 369.616295][T24521] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 369.662439][T19664] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 369.684949][T24533] loop5: detected capacity change from 0 to 1024 [ 369.732621][T24535] loop2: detected capacity change from 0 to 512 [ 369.744284][T24533] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 369.785105][T24535] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 369.785601][T24533] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 369.829296][T24535] ext4 filesystem being mounted at /331/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 369.883255][T24533] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e01c, mo2=0000] [ 369.934749][T19116] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 369.955789][T16952] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 369.971416][T24533] EXT4-fs error (device loop5): ext4_map_blocks:780: inode #3: block 2: comm syz.5.6368: lblock 2 mapped to illegal pblock 2 (length 1) [ 370.036980][T24533] EXT4-fs error (device loop5): ext4_map_blocks:780: inode #3: block 48: comm syz.5.6368: lblock 0 mapped to illegal pblock 48 (length 1) [ 370.090583][T24533] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.6368: Failed to acquire dquot type 0 [ 370.139120][T24533] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 370.153222][T24561] loop9: detected capacity change from 0 to 1024 [ 370.161297][T24533] EXT4-fs error (device loop5): ext4_evict_inode:254: inode #11: comm syz.5.6368: mark_inode_dirty error [ 370.180198][T24561] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 370.192667][T24533] EXT4-fs warning (device loop5): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 370.207337][T24561] ext4 filesystem being mounted at /455/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 370.209000][T24533] EXT4-fs (loop5): 1 orphan inode deleted [ 370.238187][ T4162] EXT4-fs error (device loop5): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:9: lblock 1 mapped to illegal pblock 1 (length 1) [ 370.267556][T24533] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 370.283741][ T4162] EXT4-fs error (device loop5): ext4_release_dquot:6969: comm kworker/u8:9: Failed to release dquot type 0 [ 370.301553][T16952] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 370.406805][T14941] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 370.421585][T14941] EXT4-fs error (device loop5): __ext4_get_inode_loc:4792: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 370.469816][T14941] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 370.492634][T14941] EXT4-fs error (device loop5): ext4_quota_off:7217: inode #3: comm syz-executor: mark_inode_dirty error [ 370.664194][T24583] loop5: detected capacity change from 0 to 2048 [ 370.691004][T24583] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 370.753878][T24595] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=24595 comm=syz.1.6393 [ 370.773247][T24595] siw: device registration error -23 [ 370.918072][T14941] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 370.939667][T24608] loop4: detected capacity change from 0 to 512 [ 370.964171][T24608] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 370.982552][T24608] ext4 filesystem being mounted at /380/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 371.039534][T19664] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 371.112076][T24625] loop4: detected capacity change from 0 to 1024 [ 371.152657][T24628] loop5: detected capacity change from 0 to 512 [ 371.164128][T24625] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 371.192045][T24628] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 371.194203][T24625] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 371.214484][T24628] ext4 filesystem being mounted at /573/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 371.235733][T24625] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e01c, mo2=0000] [ 371.244886][T24625] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #3: block 2: comm syz.4.6401: lblock 2 mapped to illegal pblock 2 (length 1) [ 371.259277][T24625] __quota_error: 259 callbacks suppressed [ 371.259291][T24625] Quota error (device loop4): qtree_write_dquot: dquota write failed [ 371.273370][T24625] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #3: block 48: comm syz.4.6401: lblock 0 mapped to illegal pblock 48 (length 1) [ 371.290996][T24625] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 371.299860][T24625] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.6401: Failed to acquire dquot type 0 [ 371.312771][T24625] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 371.323208][T24625] EXT4-fs error (device loop4): ext4_evict_inode:254: inode #11: comm syz.4.6401: mark_inode_dirty error [ 371.335075][T24625] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 371.349801][T24625] EXT4-fs (loop4): 1 orphan inode deleted [ 371.356046][T24633] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=24633 comm=syz.2.6406 [ 371.356257][T24625] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 371.384612][T24633] siw: device registration error -23 [ 371.404091][ T51] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 371.420231][ T29] audit: type=1400 audit(1750822600.603:16679): avc: denied { create } for pid=24638 comm="syz.2.6408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 371.445098][T24639] tipc: Invalid UDP bearer configuration [ 371.445190][T24639] tipc: Enabling of bearer rejected, failed to enable media [ 371.460901][ T51] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 371.469395][ T51] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:3: Failed to release dquot type 0 [ 371.484530][T14941] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 371.496432][T19664] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 371.519457][T19664] EXT4-fs error (device loop4): __ext4_get_inode_loc:4792: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 371.532427][ T29] audit: type=1400 audit(1750822600.703:16680): avc: denied { kexec_image_load } for pid=24642 comm="syz.2.6410" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 371.553017][T24644] loop5: detected capacity change from 0 to 512 [ 371.573564][T19664] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 371.589758][T19664] EXT4-fs error (device loop4): ext4_quota_off:7217: inode #3: comm syz-executor: mark_inode_dirty error [ 371.604651][T24644] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 371.637165][ T29] audit: type=1400 audit(1750822600.813:16681): avc: denied { create } for pid=24642 comm="syz.2.6410" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 371.657316][T24644] ext4 filesystem being mounted at /574/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 371.707923][T24652] loop4: detected capacity change from 0 to 2048 [ 371.734143][ T29] audit: type=1400 audit(1750822600.883:16682): avc: denied { execmem } for pid=24651 comm="syz.4.6409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 371.803517][T24652] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 371.810343][T24656] loop9: detected capacity change from 0 to 1024 [ 371.829037][ T29] audit: type=1326 audit(1750822600.943:16683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24653 comm="syz.9.6413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78dc8ce929 code=0x7ffc0000 [ 371.837722][T24656] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 371.852711][ T29] audit: type=1326 audit(1750822600.943:16684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24653 comm="syz.9.6413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78dc8ce929 code=0x7ffc0000 [ 371.884716][ T29] audit: type=1326 audit(1750822600.943:16685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24653 comm="syz.9.6413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f78dc8ce929 code=0x7ffc0000 [ 371.908774][T24656] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 371.962715][T24656] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e01c, mo2=0000] [ 371.978429][T14941] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 371.990441][T24656] EXT4-fs error (device loop9): ext4_map_blocks:780: inode #3: block 2: comm syz.9.6414: lblock 2 mapped to illegal pblock 2 (length 1) [ 372.028616][T24656] EXT4-fs error (device loop9): ext4_map_blocks:780: inode #3: block 48: comm syz.9.6414: lblock 0 mapped to illegal pblock 48 (length 1) [ 372.068405][T24656] EXT4-fs error (device loop9): ext4_acquire_dquot:6933: comm syz.9.6414: Failed to acquire dquot type 0 [ 372.098372][T24656] EXT4-fs error (device loop9) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 372.112375][T24656] EXT4-fs error (device loop9): ext4_evict_inode:254: inode #11: comm syz.9.6414: mark_inode_dirty error [ 372.123815][T19664] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 372.151000][T24656] EXT4-fs warning (device loop9): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 372.163075][T24656] EXT4-fs (loop9): 1 orphan inode deleted [ 372.169670][T24656] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 372.181935][ T4165] EXT4-fs error (device loop9): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:12: lblock 1 mapped to illegal pblock 1 (length 1) [ 372.204099][ T4165] EXT4-fs error (device loop9): ext4_release_dquot:6969: comm kworker/u8:12: Failed to release dquot type 0 [ 372.216749][T24656] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 372.227175][T24656] EXT4-fs error (device loop9): __ext4_get_inode_loc:4792: comm syz.9.6414: Invalid inode table block 1 in block_group 0 [ 372.242876][T24656] EXT4-fs error (device loop9) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 372.252560][T24656] EXT4-fs error (device loop9): ext4_quota_off:7217: inode #3: comm syz.9.6414: mark_inode_dirty error [ 372.270057][T24668] loop4: detected capacity change from 0 to 1024 [ 372.277970][T24668] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 372.287301][T24668] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 372.328506][T24668] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e01c, mo2=0000] [ 372.341164][T24668] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #3: block 2: comm syz.4.6417: lblock 2 mapped to illegal pblock 2 (length 1) [ 372.387789][T24675] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=24675 comm=syz.9.6419 [ 372.407358][T24675] siw: device registration error -23 [ 372.502570][T24684] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=24684 comm=syz.9.6424 [ 372.512270][T24668] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #3: block 48: comm syz.4.6417: lblock 0 mapped to illegal pblock 48 (length 1) [ 372.543219][T24684] siw: device registration error -23 [ 372.571039][T24668] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.6417: Failed to acquire dquot type 0 [ 372.648410][T24668] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 372.687952][T24703] tipc: Enabling of bearer rejected, already enabled [ 372.689019][T24668] EXT4-fs error (device loop4): ext4_evict_inode:254: inode #11: comm syz.4.6417: mark_inode_dirty error [ 372.740621][T24668] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 372.768426][T24668] EXT4-fs (loop4): 1 orphan inode deleted [ 372.774661][T24668] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 372.789105][ T4162] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:9: lblock 1 mapped to illegal pblock 1 (length 1) [ 372.791564][ T4162] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:9: Failed to release dquot type 0 [ 372.833100][T19664] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 372.833293][T19664] EXT4-fs error (device loop4): __ext4_get_inode_loc:4792: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 372.833460][T19664] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 372.833520][T19664] EXT4-fs error (device loop4): ext4_quota_off:7217: inode #3: comm syz-executor: mark_inode_dirty error [ 372.855176][T24714] loop4: detected capacity change from 0 to 512 [ 372.884236][T24714] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 372.884305][T24714] ext4 filesystem being mounted at /384/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 373.086839][T24726] __nla_validate_parse: 24 callbacks suppressed [ 373.086858][T24726] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6441'. [ 373.115858][T24730] loop9: detected capacity change from 0 to 1024 [ 373.131207][T24730] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 373.209074][T24730] ext4 filesystem being mounted at /471/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 373.209595][T19664] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 373.303467][T16952] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 373.447998][T24746] netlink: 76 bytes leftover after parsing attributes in process `syz.2.6428'. [ 373.698404][T24755] loop5: detected capacity change from 0 to 2048 [ 373.705765][T24753] loop9: detected capacity change from 0 to 1024 [ 373.741059][T24755] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 373.773418][T24753] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 373.803223][T24759] loop2: detected capacity change from 0 to 512 [ 373.819212][T24753] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 373.873787][T24759] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 373.887758][T24759] ext4 filesystem being mounted at /341/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 373.921164][T24753] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e01c, mo2=0000] [ 373.996130][T24753] EXT4-fs error (device loop9): ext4_map_blocks:780: inode #3: block 2: comm syz.9.6451: lblock 2 mapped to illegal pblock 2 (length 1) [ 374.072353][ T2995] ================================================================== [ 374.080480][ T2995] BUG: KCSAN: data-race in dont_mount / lookup_fast [ 374.087162][ T2995] [ 374.089478][ T2995] read-write to 0xffff88811a3439c0 of 4 bytes by task 7160 on cpu 0: [ 374.097532][ T2995] dont_mount+0x2a/0x40 [ 374.101689][ T2995] vfs_unlink+0x28f/0x420 [ 374.106020][ T2995] do_unlinkat+0x28e/0x4c0 [ 374.110438][ T2995] __x64_sys_unlink+0x2e/0x40 [ 374.115125][ T2995] x64_sys_call+0x22a6/0x2fb0 [ 374.119797][ T2995] do_syscall_64+0xd2/0x200 [ 374.124292][ T2995] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.130180][ T2995] [ 374.132494][ T2995] read to 0xffff88811a3439c0 of 4 bytes by task 2995 on cpu 1: [ 374.140024][ T2995] lookup_fast+0xf0/0x320 [ 374.144349][ T2995] walk_component+0x3f/0x220 [ 374.148932][ T2995] path_lookupat+0xfe/0x2a0 [ 374.153437][ T2995] filename_lookup+0x147/0x340 [ 374.158202][ T2995] do_readlinkat+0x7d/0x320 [ 374.162706][ T2995] __x64_sys_readlink+0x47/0x60 [ 374.167556][ T2995] x64_sys_call+0x2cf3/0x2fb0 [ 374.172226][ T2995] do_syscall_64+0xd2/0x200 [ 374.176723][ T2995] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.182608][ T2995] [ 374.184918][ T2995] value changed: 0x00300008 -> 0x00004008 [ 374.190631][ T2995] [ 374.192942][ T2995] Reported by Kernel Concurrency Sanitizer on: [ 374.199083][ T2995] CPU: 1 UID: 0 PID: 2995 Comm: udevd Not tainted 6.16.0-rc3-syzkaller-00044-g7595b66ae9de #0 PREEMPT(voluntary) [ 374.211051][ T2995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 374.221107][ T2995] ================================================================== [ 374.235256][T24770] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6456'. [ 374.264507][T24753] EXT4-fs error (device loop9): ext4_map_blocks:780: inode #3: block 48: comm syz.9.6451: lblock 0 mapped to illegal pblock 48 (length 1) [ 374.311962][T19116] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 374.340211][T24770] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6456'. [ 374.381152][T24753] EXT4-fs error (device loop9): ext4_acquire_dquot:6933: comm syz.9.6451: Failed to acquire dquot type 0 [ 374.430143][T24753] EXT4-fs error (device loop9) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 374.440542][T14941] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 374.469520][T24753] EXT4-fs error (device loop9): ext4_evict_inode:254: inode #11: comm syz.9.6451: mark_inode_dirty error [ 374.495707][T24753] EXT4-fs warning (device loop9): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 374.506032][T24753] EXT4-fs (loop9): 1 orphan inode deleted [ 374.512261][T24753] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 374.524550][ T4165] EXT4-fs error (device loop9): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:12: lblock 1 mapped to illegal pblock 1 (length 1) [ 374.551280][ T4165] EXT4-fs error (device loop9): ext4_release_dquot:6969: comm kworker/u8:12: Failed to release dquot type 0 [ 374.563639][T16952] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 374.573146][T16952] EXT4-fs error (device loop9): __ext4_get_inode_loc:4792: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 374.586271][T16952] EXT4-fs error (device loop9) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 374.597843][T16952] EXT4-fs error (device loop9): ext4_quota_off:7217: inode #3: comm syz-executor: mark_inode_dirty error