last executing test programs: 3.012382269s ago: executing program 4 (id=789): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x867}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) write$UHID_CREATE2(r0, &(0x7f0000001580)={0xb, {'syz0\x00', 'syz0\x00', 'syz0\x00', 0xc4, 0x2, 0xffffff16, 0x9, 0x9, 0x7ffb, "74a56849c0a63792072c262c985e8e7b2cdd615e9ce83a3dced79efa3b6dd27ef04fb99272f6b39f816d7ea607fb4d63a5ec8ea4f0b532302d4c4a72e9e5bfb79a260d8132dc4f93938704dbcd57f8279fab9f481f876c758c60d30d194cd97a2573f05c175da120addb7729b56fbcd1c42307fb619b54570b76f5c51f8d535756b20b57551ff7bca3b77a5defd36cf523f6fc04f8a699cc0d7c8ebef9706b300bf74e0c0e63ecf2425e0edcba5e1a3ec145bd2a319290c8f5c3bb4f78b0d1f063652357"}}, 0x1dc) write$UHID_DESTROY(r0, &(0x7f00000001c0), 0x4) 2.95084435s ago: executing program 0 (id=791): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1c, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000200008385000000710000001801000002696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, @void, @value}, 0x94) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x14, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000580), 0xe8182, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$inet6(0xa, 0x3, 0x4) recvmmsg(r5, &(0x7f0000008880), 0x45b, 0x2, 0x0) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) read(r3, &(0x7f00000019c0)=""/4097, 0x1001) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r2}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000300)='kmem_cache_free\x00', r0}, 0x18) r7 = signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0x5]}, 0x8) faccessat2(r7, &(0x7f0000000000)='\x00', 0x0, 0x1100) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000006e80)={0x20, 0x3b, 0x107, 0x1, 0x0, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x50}]}]}, 0x20}}, 0x4c000) 2.887990501s ago: executing program 4 (id=792): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f00000003c0)=0x3, 0x4) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, &(0x7f0000000040)="4b598b", 0x3, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000002c0)='./file1\x00', 0xa0000a, &(0x7f0000000000)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@noinit_itable}]}, 0xfe, 0x585, &(0x7f0000001500)="$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") r1 = open(&(0x7f0000000180)='./file1/file1\x00', 0xecc80, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) wait4(0x0, &(0x7f0000000680), 0x4, &(0x7f0000000ac0)) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000f00)={0x11, 0x7, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000300000018110000", @ANYRES32=r2, @ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000000c0)=@ccm_128={{0x305}, '\x00', "bcbd13b603e0f7b3bfa8909ef43c0ae1", "0000fd9f", "b08068ebce17ab00"}, 0x28) connect$inet6(r5, &(0x7f00000001c0)={0xa, 0x4000, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000000), 0x4) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000d40)='./file1\x00', 0x3a08014, &(0x7f0000001040)=ANY=[@ANYRES8=0x0, @ANYRESDEC=0x0, @ANYBLOB="98578424a2ace03c10f4631bb7ecf4995ba38b52625f6ed652f8256f0b174958cb71048eeeb06a4b6ff257f5387ad9528ccc6ea45ccfb415d8f3e76e3111267f2b3c183ddad789353b641c9cab107e8ec771974f703413e085cb25adc9434092474b892f2d0b0bc2b3eb90faa79d54adc7097365b411d9ffefbf08218f051e622ff75401086c81c358fde689f2ff07c7163f0556d086b4829e4ae689c5e206f18b31e3f8384ad531b1962d2f76c3c38951afb2e5168d3771dc27d830526a24c6d29499", @ANYRESOCT, @ANYRES64, @ANYRESHEX, @ANYRESOCT, @ANYRES32, @ANYRES8], 0x1, 0x7db, &(0x7f0000002540)="$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") creat(&(0x7f00000003c0)='./file1/file0\x00', 0x115) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x10) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYRESDEC=r1, @ANYRES16=0x0, @ANYRESHEX=r2, @ANYRESOCT=r4, @ANYBLOB="0800c400070000000800c30005000000"], 0x34}, 0x1, 0x0, 0x0, 0x4000880}, 0x40) 2.755816073s ago: executing program 4 (id=794): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) sched_getscheduler(0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) open(&(0x7f0000000300)='./file1\x00', 0x80400, 0xe4) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000640)={0x1d, r6, 0x1, {0x0, 0x1}, 0xfe}, 0x18) sendmsg$can_raw(r3, &(0x7f0000000340)={&(0x7f0000000140)={0x1d, r6}, 0x10, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x10c4}, 0x4c894) pread64(r4, &(0x7f00000006c0)=""/128, 0x80, 0x7) close_range(r2, 0xffffffffffffffff, 0x10000000000000) 2.335900868s ago: executing program 4 (id=796): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='smaps_rollup\x00') r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f0000000000)) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$UHID_DESTROY(r1, &(0x7f00000001c0), 0x4) gettid() timer_create(0x6, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @thr={&(0x7f0000000000)="dca646cb544a241062b6e69fe3ab", &(0x7f0000000180)="4cc356714b1f7a74479d"}}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) readv(r1, &(0x7f0000000300)=[{&(0x7f0000000380)=""/4096, 0x1000}], 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1000f4) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000001380)={[{0x2b, 'hugetlb'}, {0x2d, 'net_prio'}, {0x7b, 'net_prio'}, {0x2d, 'net_prio'}, {0x2b, 'net_cls'}, {0x2d, 'cpuset'}, {0x2d, 'devices'}, {0x2b, 'devices'}]}, 0x4a) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) pipe(&(0x7f0000000040)) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) unshare(0x22020400) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f00000001c0)=@abs={0x1}, 0x6e) bind$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 2.23829468s ago: executing program 2 (id=798): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0xfffffffffffffdd0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x232000, 0x1000}, 0x20) 2.176779731s ago: executing program 2 (id=799): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r0], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f00000002c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000040)='signal_deliver\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='signal_deliver\x00'}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x10) r4 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) 2.102974281s ago: executing program 2 (id=801): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x10) r2 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) 2.029842083s ago: executing program 2 (id=803): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYRES16=r0, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r2}, &(0x7f00000004c0), &(0x7f0000000500)=r3}, 0x20) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r5, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) 1.939833513s ago: executing program 2 (id=805): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f00000003c0)={&(0x7f0000000180), 0x10, &(0x7f0000000380)=[{&(0x7f0000000480)="c3e972bd85a6d84136d6dd55048d3593a74f338ce6772ab9a6f64041c2f6fbbecdc08ebcd3192b6a53662dae7c8e9c665e80a5d0925f728dcac30c29793992e588952653d414cb8ccdabc38767fee819ec5af0c5ee936880fe8549b4ed347779cab4ffd4e0b62c53a1c01db28f2b3f91c34211c9353bc1dece61511917c2245fd66cb8dffeacb4d46d627c97b498bf1ff6b313bfbc9765457c831771d5eec7997ec242e4505f01c1bb3e069b2e630f42a2be86598a61", 0x64}, {&(0x7f0000000300)='V', 0x1}, {&(0x7f0000001600)="3eed50d0125719a810f88e3f47186fe4dae74182dfd109a2587c4797410c9b8e39bd3d9aa144d5908647c30c8db69b5c17084c9b1bfbb8680737c4f88abcdbc7d294d72ab1b344270915df9ddf5635644c351c22b29d948ac4106bce7107570beed63077cfbc98ef71699eae65d37724d995b553e7a3ade619b522313ab382caf879feb48942878e605ee3ee2872794e3abe22a3f025068b628a5d92468092a5cc649bbbd978b5772e537939432a502122235ced312dafd108c9ffeb0b38cc16da9418ca01d485a6afb5827da4df6e1121ec307de14bb32b6a977608e4576a998182dd93d592ff43e55bfdbbce23ecd501e43b3e93ef8d9d01711dff54c301e299d3801a3cffe6c9883fbd0e47124dc02569f62d48b878fcb58ce99fcffcd2a5166eff3ad93cf1d137274993d86a3b3730d63ded759f6ca88fa449e5575b15321e5a58a1f888eed7466db4976ce35f6d2efb5ad05d99a66482dc607cb5acb24d326803bd337519cc98103f59c63b5962cd72e4497d1b00817d6e09de70270a09b493c2226617b1c9ef9d506be00d6e07f14633a966f04ecca90fb8d2b963ad6f3817935bd6534fa3da1c5dc468789cbf1192f3c0bff3777f1edd2ada5d35f88f12f29e952c44445ce623509d66811c80a9e0f13ad85aba37d86ff0da4dda601d9e8acb264233bc939fb056316612cff687d5c44157be05bcc88b333ff2a40041d98f1acfe6e2231a84e09bd7a54a0442cf87ce3ee8fd8da39da1862862ae40fc3cb3055c8b70e62f243850707341f51426bb3e71c7a4fffefab060db786000618b05eb087a424a2f30f6a232ff44b605f70ceec0a8f70e37907f6e0bbba21e9d5b7ecb6d287742b75c101ba79525918c3473eae38f3c177249dfa8816661c9921f0b0c858d53ab87c8407b97950c842111002edd1d1e80b801b495da28bcd5409bc971e55dab1857e188ac9728efc8f9a4543945f86ade13b445eacecbbf848a96410ac37c57e3e9e8bc8b8fadd559d225c7468639da2b5d1208558b51e94c14faa7947a7c60e81a96bb5d194cc7289adbc02ebb4b49be1f1efc429db2f9b79b5a22919dba0c35341042c5776942c52365367c4bfc95b42be383cca7107161ded7e851d0126da33d581f1e2b08d0c061e86d31e7a83f9b51c79b4034c7deda7697034e1404c6e8e459f76c2efe64350146c7437ef808e04ca14df5f6f500264fd977272bbf8fc096774e8eb61d0963430751ac1425a073f84346b0eba368cba7fa34adc420800d4f99927280eba199f9695cf88124fafc3a2b1226d2f2ab3ea27c69a127650cf5c725b54c02bd8729033cf699ce7f030f9a3442056244da3cfb61a8126dba11377624f39eb009242152fd7b8b88de7dd86057f29bfcb7b7df0e65e7e9ac9eeaa41afa62743698bff03d5b2d51fb6bca2d92294e8e177cfa3661b26f1c040e9bed983b7bc0aa154eb9c92e4ee25091318c53113a1c23ac62d2d71504cba99041f29a4f332133292cf20abec9222a2acca57cac48fa6c0668ee5eecb494741a64d33b011dcca74696d4614c5b45a5d20983b1708d365ed3ffa60f9161972a611c22642c3c259b41f943f6d7a8b60f284d325e38fe76f0645e069ff70cae38850ccf973193b6232c987df26239a574691f7f07fffa6deae1eb0324fe546573c36f2a2c31cd442517a9b036ae6a2a491e7343864693c107a5dc2585820863c146c1ba6caa4fea9b87d567716f4c8ca1a9d2848055cd750512d3b7415d090019dc8a04a1a1d28931093cd8f00e94c407ca1fa2a5ce903d9df26e008c07cd13afa783220e1bd5e6b60645f3dbb6ecb4156fedafa2dd25498c6a99d94f0b38125ea7741b75109dcac9f80635f79f5c8a0483bb9f05a3a5bf721c7541edb252449f8b13e63c370a6146332f03ca1f1b6fe0bed984f13744bb7fa0fe322e83ddf9ffb2083e94f33604a0a199220c450dad94bf154805e7f9e4350ca2d81adf2978c87dcc8a8a7d56297ec124bfef0d28f35777205e973272c87e01070f14f5b14daa3b5104d9ff6b296c4f16ed49eb42d35e7ba3bccb7a26c33a263df88aadd596e9d9de0abbd4d449df11081f2cd62e1d8962b9b9feb25a3b8e03537d61a61c11ac22b7211d12c84e60a6abcc219e558b2513d8c530b3c7a57cdc47de545aafbb2a13c0e6c75b1b92fa241c713c83a09c92b2b61d565120372a9143415583c9596f27a663d4967cd653b08cebd6cb96c1f0dc80d57267ac9a8281d7149bde880828ee27d69a6818db58320db29d1b044eaf6ab8a5108bc522de406990b5393b1f7e7bab71bf6cf8eed1cd59c7607d662e8b313f5c4fce0f59b1027371381011b63dd5b2b09739082c0d62ffad96e30153a395234937d377c32fe7af82aca3a19d0ebc4a5c5fb5ff190f14d5695c703b571fb4bf03756635cafc6cf6267eab836c347a9d07e8089fc105346934cf3364e5be370b3c42b94bc5ae3d17a817398566a2953251eb91697d67278145df9a4b917bcca1bf211780b22f4caacfcb7604c84f943d05f6fdf8edbd258d7d8dbf84f9d99e57472c5b1c2337d749a1f345e662e2536d23c7a63bbbbf00f8b5b0a2106a0342ab27b9a10b82e82668cd49e0cbb09d7be0217645f1dda3be59c8232fa290d34791cda52aa5b5cec6339ab96a2eb3f5328cc7c0e6717c2824344547a2ed518f6b2b4e4fe5b684596aa6a9d3988fc5d5ff4cb46cec99d951b8386b10949a163af974b7543df97b4882a4ed60e927a1deb67c5f814235bef65fea79a2c712815be7403c93a3707fb90d4604ec3a6a3b0928f253f6ab6bd56c958e026c8c58172c4ac2a3efe2ecd5cea70c8313f9ac2d638bc296ba99e2ca86d2fd06b5402cdcddc3f3c9845d5ae77f6f36963b91e8f6cdccd17abe8d40ed02463af4bb0e496344f350097f1cc13313fa1e172b63556ed2b8a8121c01a5fb343ff7767821626fc49b0d6bd522e1c9bf137d5a5bccb4bc8dbb64c83a82ef6c2894f3896c9f6bf0c3764011d53eeb6db9ea9dae22d3ebcca4942d5828c0bca0d9ea37701d5a06c066ac4fe318e11e9c0d6c658ac810fb5d7836cfffe4ccbb0934e5567d74695980a156d4bf1c18861c5a29ccd349999dc20562d00e1f6c1851ae563541086438d60b975c8ceb466414ff60efa0b2dee790fd0659ffa98b92414c13d5a6825368f56c4984412205041cd8e006c7127d4395ecdffb5addf80ef938ce54a367154c4fc286d5f969325c12b13655a9a956dd3b98281f537e837669fc55d8930676e807aa8cd046e0f4583d59f86cb99f3f7a7ddde1fb39111fdec7677d2fee4b8f4814a5def5ebcc67c653384ce80eaffd880405f7edf8fd3ea049f040595df4a75e2f892e7a85e0ba351fb8d263bfff7168bb85017b360fcd2ba89346682a6ea7ccc46afbdb5ab444e3f477238b2ab503bde914d3cf1789539cde9c0621152cd97bff9f235d88a1ef4ea4309db3a05d401af7fb82784b050ef529dab4f1f003eb29710a962f7538c521e617e2f0efac36182d09985e1d725cc38c3833a53742a02f76fb2854a9e45f0febacf3bda83f11183ef5b9fef02ebcdf56d4104b175bad937d8f61964f97d673577cdcbbb48d8eb62b063ee6563b9ff053719baff871bcd83822d865b2f7ef023076425ac5cd71b1f2309de0c6f14cc9c4d3e8fad945f756a7c8a084ea1bfdf5ac6e740043e7f7bdaca06774b084ae314c2636529d4fdcd965c7f8c07156572620b827d694efdc9d2bfc5aa9391220a83765f2c71fcd48d4acaed60afb53d1013fa3b15e948ec4159f7d130ef85b594018346e99034c18738285223ea53a6b1d5cf11a607de2e19608ba03ec970a915b773824261f3fc931dd6d3b934d89f07baf14776314c3eeb8cd0537ef5736f565fbd14e520d4ab2f77ed9597b76ff91f8d1f99ebd6e473efda7accb273975a06944d1037032129992b994ca791a09b4d83980a1e494b0f97098df5f6fb6bbb02722adb11dc319c565c2c363cbd19d9fb3efb4613b62d6584cd53f7bd80e3e89304f444ce9dd1835661e3bb4de02ccf568a2a5daaf0d56898d4286c3fb62e22af62d7ac318685834467f337561dde2e0c1e2827cdffcf42c17728ee64b3ff4ccc0227590badd0bd7e448b8cca0892d6a5e0130d2ac665f47c6b28daa101c1b319869bdd39fa924d6d9ba7d72feda5f21ac78641c7d4801d41c7879721b3be4dab40d9c4a78552440101f373489cc5240b0144a9ce32691a784b6dfe971a21bb5980ff67da2d1bb90b223c9e192a39c1aeadd1f5c790811079c0b51a97105c99b6f95d71bb3ea47c33d9dcb0a53c929c44499e184a3cd722c908d3b0d157e28ffdeb2ed7192e780d96a7a2f0fd5a87bdc973e049da0caf931f26f5a21813e2e602ceb2259997e0205ce48fd9424bd6d4d75dd4301f429ee30745cd839a40dbeab4c3db2f0f10bbaea071ca41d1392385681730a3678a5f60f604dbe19cb9d7dd234337e327451b8cc65394af399432ef7fc3765d055874ebdca14e5999292d6f72f31e92bacf25db5ef8f5212952c1910de06ddbe1687a0e1837922f2228289916ed3aeb7b9cc24da3ae47139e371930afa6d3573df6732c26c0c7ae06d9cedfa77160711bcb06e6553338deae4c5731cf53cc154113096d02f3036d7d9edfcdc331e4bb860c5208489212e904eab70e7f860b0379895cbdecbf7a0b7a25e5b853c7dbe08a4e296a30afec8cf5a9f6ea4aef32a508655d539a770b21e660c9ee1d7688c56abeb7cf1afccc8d59780cf26312589e0c8e1bc00ad7b1325cd9a5dd69246e0b33407c381ea09265154aec297e4ccdf9785a1042a83e77c13d4ce4360782f2428f9916b5cd123b089eb683d30c1e895b9944aa905a1a5b52301d8cc5e4741834ead6ebdb5dc05c9c49c5e883e99d40b9838037beaf876534d747856103e59caf6266fbbe760b6ef83d004634b74f14f8eb4aef93c4cc9cbbd78d83d532c70feef51ea3f170b25d81a6a9b074bfca7e9b3771bf83517e0dd9d0600f70b86b20f61fe36076f8bada334b2390fa954973bc901619a3cfd039349cb328625f495ab288dbdd6dbfd022c2a83f59e0b998619a12e35891b5ae9e83a71765507b4a571cd2241e5885c705244c1022688bef7c5065fbcf219fc01753adb611b3fbc09403dcb10a4f99d788667eff75fa27074ca8481a633530e26163ccf7dada049d23e717e067b6fa5b2f652bc50abda9e7ccdc5f2f3c35ecc2c4431c819c9691be4422e379750774e9f39dae06f26423c8a4278789c9f3111b43f6dd25b0ad47c4cc5fda3f3ed82079c9366e0adced883488f429c1d7e1b351fd0bb204dd7977ef224c4df6d7a5f7697bc6500a7d03a8a914154779fa7092bf1be6bad4092367ce5d295a5d5d0e7c469f372ca2011d612637025e89f178ae9ada0c5b73bcb7d7c034ff595263cd4216e3c76ba5f3d81932a088a90bf8043e877e299c670ef1622a098d5519d9adc4ee7d4cd00e5934a4375fa83fdb81214b892482b31bdde59a70aaf25cb7f417c3a2a91c4e54b48149f6c41d9d396ee6ff13e3028c64a7c9b1f2e7c6e67184a3d52d6f570db3d225c947423c4c6533f22df57d15c5e5a3183422bd378b06fe4732a9401dcb19840fb8fa5c50a0ff497fef362c507753e46b8881d3e767f3b1d893a3805941c94f2efa05ce34b9ea81d716984af6834230d4707a87089d40779503ee6a9bb245d7d997f14acb80e89731c042bbbbe3dcd05177b0ee0eec23455830ef5b65aca357f2b0b887e0b9821c0", 0x1000}, {&(0x7f0000000340)="b768eb20304f2fdc5a9694a4867840d93170ca1a86406f", 0xfffffec0}], 0x4, 0x0, 0x0, 0x8010}, 0x0) dup2(r2, r1) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50) syz_io_uring_setup(0x3c0c, &(0x7f0000000400)={0x0, 0xc890, 0x4002}, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000a00)=@mangle={'mangle\x00', 0x8, 0x6, 0x970, 0x780, 0x480, 0x0, 0x480, 0x0, 0x8a0, 0x8a0, 0x8a0, 0x8a0, 0x8a0, 0x6, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {0x7a00000000000000}, [@inet=@rpfilter={{0x28}}]}, @HL={0x28}}, {{@ipv6={@dev, @loopback, [0xff], [], 'pimreg0\x00', 'veth1_macvtap\x00'}, 0x0, 0x148, 0x180, 0x0, {0x5002}, [@common=@unspec=@physdev={{0x68}, {'erspan0\x00', {}, 'netpci0\x00', {0xff}, 0x14, 0x15}}, @common=@unspec=@connbytes={{0x38}}]}, @common=@inet=@SET3={0x38}}, {{@uncond, 0x0, 0x1e0, 0x208, 0x0, {}, [@common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, @ipv4={'\x00', '\xff\xff', @loopback}, @mcast2, @local, @private2, @local, @dev, @rand_addr=' \x01\x00', @private1, @mcast2, @dev, @private2, @private1, @mcast2, @loopback]}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x2d8, 0x300, 0x0, {}, [@common=@unspec=@bpf0={{0x230}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ipv6={@private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'ipvlan0\x00', 'ipvlan1\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@eui64={{0x28}}]}, @inet=@TOS={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x9d0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x0, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r6}, 0x10) setsockopt$sock_attach_bpf(r1, 0x1, 0x21, &(0x7f0000000040), 0x4) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x9, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r8}, 0x10) chown(&(0x7f00000005c0)='./file0\x00', 0xee01, 0x0) r9 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) r10 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp_SCTP_CONTEXT(r10, 0x84, 0x83, &(0x7f0000000140)={0x0, 0xfffffffe}, 0x8) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r9, 0x0) ioctl$USBDEVFS_SUBMITURB(r9, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20000009, 0x0, &(0x7f0000000240)={0x0, 0x0, 0xfffc, 0x360}, 0x8, 0x7, 0x80, 0x0, 0x1, 0x101, 0x0}) ioctl$USBDEVFS_REAPURBNDELAY(r9, 0x4008550d, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback, 0x7fff}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$sock(r0, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000080)=' ', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000280)="a6", 0x1}], 0x1}}], 0x2, 0x40080) shutdown(r0, 0x1) 1.44135961s ago: executing program 4 (id=813): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r0}, 0x9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r1}, 0x9) rseq(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) getresuid(&(0x7f0000000340), &(0x7f0000000380)=0x0, &(0x7f00000003c0)) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000640)={[{@mode={'mode', 0x3d, 0x77658f5}}, {@nr_blocks={'nr_blocks', 0x3d, [0x2d, 0x78]}}], [{@smackfsdef={'smackfsdef', 0x3d, '+[#'}}, {@fowner_gt={'fowner>', r3}}, {@smackfshat={'smackfshat', 0x3d, 'r#'}}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r4 = getpid() process_vm_readv(r4, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) process_vm_writev(0x0, &(0x7f0000000500)=[{0x0}, {0xffffffffffffffff}, {0xfffffffffffffffc}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0, 0x0, 0x0) shmat(0x0, &(0x7f0000ffa000/0x3000)=nil, 0x4000) 1.410140461s ago: executing program 0 (id=814): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x10) r2 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) 1.335210902s ago: executing program 0 (id=816): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYRES16=r0, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r2}, &(0x7f00000004c0), &(0x7f0000000500)=r3}, 0x20) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r5, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) 1.211616984s ago: executing program 0 (id=822): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0xfffffffffffffdd0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x232000, 0x1000}, 0x20) 1.125907645s ago: executing program 0 (id=824): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='smaps_rollup\x00') r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f0000000000)) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$UHID_DESTROY(r1, &(0x7f00000001c0), 0x4) gettid() timer_create(0x6, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @thr={&(0x7f0000000000)="dca646cb544a241062b6e69fe3ab", &(0x7f0000000180)="4cc356714b1f7a74479d"}}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) readv(r1, &(0x7f0000000300)=[{&(0x7f0000000380)=""/4096, 0x1000}], 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1000f4) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000001380)={[{0x2b, 'hugetlb'}, {0x2d, 'net_prio'}, {0x7b, 'net_prio'}, {0x2d, 'net_prio'}, {0x2b, 'net_cls'}, {0x2d, 'cpuset'}, {0x2d, 'devices'}, {0x2b, 'devices'}]}, 0x4a) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) pipe(&(0x7f0000000040)) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) unshare(0x22020400) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f00000001c0)=@abs={0x1}, 0x6e) bind$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 1.029156006s ago: executing program 2 (id=826): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1c, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000200008385000000710000001801000002696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, @void, @value}, 0x94) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x14, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000580), 0xe8182, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) shutdown(0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x45b, 0x2, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) read(r3, &(0x7f00000019c0)=""/4097, 0x1001) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r2}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000300)='kmem_cache_free\x00', r0}, 0x18) r6 = signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0x5]}, 0x8) faccessat2(r6, &(0x7f0000000000)='\x00', 0x0, 0x1100) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000006e80)={0x20, 0x3b, 0x107, 0x1, 0x0, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x50}]}]}, 0x20}}, 0x4c000) 979.527067ms ago: executing program 3 (id=827): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x10) r2 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) 978.947067ms ago: executing program 3 (id=828): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x867}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) write$UHID_CREATE2(r0, &(0x7f0000001580)={0xb, {'syz0\x00', 'syz0\x00', 'syz0\x00', 0xc4, 0x2, 0xffffff16, 0x9, 0x9, 0x7ffb, "74a56849c0a63792072c262c985e8e7b2cdd615e9ce83a3dced79efa3b6dd27ef04fb99272f6b39f816d7ea607fb4d63a5ec8ea4f0b532302d4c4a72e9e5bfb79a260d8132dc4f93938704dbcd57f8279fab9f481f876c758c60d30d194cd97a2573f05c175da120addb7729b56fbcd1c42307fb619b54570b76f5c51f8d535756b20b57551ff7bca3b77a5defd36cf523f6fc04f8a699cc0d7c8ebef9706b300bf74e0c0e63ecf2425e0edcba5e1a3ec145bd2a319290c8f5c3bb4f78b0d1f063652357"}}, 0x1dc) write$UHID_DESTROY(r0, &(0x7f00000001c0), 0x4) 836.940419ms ago: executing program 3 (id=830): syz_genetlink_get_family_id$gtp(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_GETPDP(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2c, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x232000, 0x1000}, 0x20) 797.500359ms ago: executing program 3 (id=831): r0 = syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x360, &(0x7f0000000b00)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file2\x00', 0x105042, 0x40) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) write$cgroup_subtree(r1, &(0x7f0000000680)=ANY=[@ANYRESOCT=0x0, @ANYRESOCT=r4, @ANYRES32=r1, @ANYBLOB="d2f890204561acec8215e4f8e6d2b20ecb94512cdb7aa589ea20eb502d2745232af34465c80a81d11a19c6d2139dc4670fae0c81c0a02ba734bf04fdf47817e8", @ANYRES8=r2, @ANYRESHEX=r0, @ANYRESOCT=r3, @ANYRES16, @ANYRES32=r3, @ANYBLOB="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"], 0x32600) 486.581104ms ago: executing program 3 (id=833): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYRES16=r0, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r2], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r2}, &(0x7f00000004c0), &(0x7f0000000500)=r3}, 0x20) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r5, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) 437.368474ms ago: executing program 1 (id=835): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0xfffffffffffffdd0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, 0x0, &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2c, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x232000, 0x1000}, 0x20) 415.062915ms ago: executing program 3 (id=836): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f00000003c0)={&(0x7f0000000180), 0x10, &(0x7f0000000380)=[{&(0x7f0000000480)="c3e972bd85a6d84136d6dd55048d3593a74f338ce6772ab9a6f64041c2f6fbbecdc08ebcd3192b6a53662dae7c8e9c665e80a5d0925f728dcac30c29793992e588952653d414cb8ccdabc38767fee819ec5af0c5ee936880fe8549b4ed347779cab4ffd4e0b62c53a1c01db28f2b3f91c34211c9353bc1dece61511917c2245fd66cb8dffeacb4d46d627c97b498bf1ff6b313bfbc9765457c831771d5eec7997ec242e4505f01c1bb3e069b2e630f42a2be86598a61", 0x64}, {&(0x7f0000000300)='V', 0x1}, {&(0x7f0000001600)="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", 0x1000}, {&(0x7f0000000340)="b768eb20304f2fdc5a9694a4867840d93170ca1a86406f", 0xfffffec0}], 0x4, 0x0, 0x0, 0x8010}, 0x0) dup2(r2, r1) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50) syz_io_uring_setup(0x3c0c, &(0x7f0000000400)={0x0, 0xc890, 0x4002}, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000a00)=@mangle={'mangle\x00', 0x8, 0x6, 0x970, 0x780, 0x480, 0x0, 0x480, 0x0, 0x8a0, 0x8a0, 0x8a0, 0x8a0, 0x8a0, 0x6, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {0x7a00000000000000}, [@inet=@rpfilter={{0x28}}]}, @HL={0x28}}, {{@ipv6={@dev, @loopback, [0xff], [], 'pimreg0\x00', 'veth1_macvtap\x00'}, 0x0, 0x148, 0x180, 0x0, {0x5002}, [@common=@unspec=@physdev={{0x68}, {'erspan0\x00', {}, 'netpci0\x00', {0xff}, 0x14, 0x15}}, @common=@unspec=@connbytes={{0x38}}]}, @common=@inet=@SET3={0x38}}, {{@uncond, 0x0, 0x1e0, 0x208, 0x0, {}, [@common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, @ipv4={'\x00', '\xff\xff', @loopback}, @mcast2, @local, @private2, @local, @dev, @rand_addr=' \x01\x00', @private1, @mcast2, @dev, @private2, @private1, @mcast2, @loopback]}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x2d8, 0x300, 0x0, {}, [@common=@unspec=@bpf0={{0x230}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ipv6={@private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'ipvlan0\x00', 'ipvlan1\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@eui64={{0x28}}]}, @inet=@TOS={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x9d0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x0, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r6}, 0x10) setsockopt$sock_attach_bpf(r1, 0x1, 0x21, &(0x7f0000000040), 0x4) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x9, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r8}, 0x10) chown(&(0x7f00000005c0)='./file0\x00', 0xee01, 0x0) r9 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) r10 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp_SCTP_CONTEXT(r10, 0x84, 0x83, &(0x7f0000000140)={0x0, 0xfffffffe}, 0x8) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r9, 0x0) ioctl$USBDEVFS_SUBMITURB(r9, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20000009, 0x0, &(0x7f0000000240)={0x0, 0x0, 0xfffc, 0x360}, 0x8, 0x7, 0x80, 0x0, 0x1, 0x101, 0x0}) ioctl$USBDEVFS_REAPURBNDELAY(r9, 0x4008550d, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback, 0x7fff}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$sock(r0, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000080)=' ', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000280)="a6", 0x1}], 0x1}}], 0x2, 0x40080) shutdown(r0, 0x1) 402.116095ms ago: executing program 1 (id=837): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800001f1a0068099b3c0000000000001860000000000000824d086bb227733218120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xa5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x9, 0x8, 0x4, 0x4009, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 290.619427ms ago: executing program 1 (id=838): syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/ipc\x00') socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x3c1, 0x3, 0x3f0, 0x210, 0x940c, 0x3002, 0x210, 0x2c0, 0x470, 0x3d8, 0x3d8, 0x470, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x1c8, 0x210, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x2, 0x1, 0x0, 'syz0\x00', 0x40}}, @common=@eui64={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@private=0xa010102, 'syzkaller0\x00'}}}, {{@ipv6={@loopback, @empty, [0xffffff00, 0xffff00, 0xff000000], [0xff, 0xff000000, 0x0, 0xff000000], 'syzkaller1\x00', 'macvtap0\x00', {}, {}, 0x2f, 0x9, 0x1, 0x8}, 0x0, 0xa8, 0x110, 0x0, {0x700}}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x450) 251.215537ms ago: executing program 0 (id=839): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) fchdir(0xffffffffffffffff) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0xf}, 0x20) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0xb8, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x29}}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_ORIG={0x1c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x4}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xffff8000}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x6a63d1e}]}, @CTA_PROTOINFO={0x8, 0x4, 0x0, 0x1, @CTA_PROTOINFO_DCCP={0x4}}]}, 0xb8}, 0x1, 0x0, 0x0, 0x4}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x10, &(0x7f0000000600), 0x1, 0x58a, &(0x7f0000000b40)="$eJzs3V1rHFUcB+D/2d2kL2lNKoLWXhgo2IKaNGlFEcEW650XvhS8KhiTtJRu29BEsLViC/Ub6AcQvBNEvCwiRb3x1jvBDyDFIm1uvFuZzUy6bXfTvGw6tfM8sM2cORnOmSy/npmzM7MBVNZo9k8tYndEzKWI4Y66RuSVo0u/d/vWpenFW5emU7Ra7/+TIuXrit9P+c+hfOOtEfH7zymerN/f7vyFi6enms3Z83l5fOHM3Pj8hYsvnTozdXL25OzZyYlXJl4+dHDy0IG+7OfOiPh17Gjj6ok393w//c2uz3/89lqKw7Ejr+/cj34ZjdHlv0mn7O/6ar8bK0k935/Otzg1SuwQa1K8fwMR8XQMRz3uvHnD8cW7pXYO2FStFNECKirJP1RUcRyQnf8Wr3KPSICH5eaRpQmA22lpbm9xOf+NpbnB2NqeG9i+mKJzWidFRD9m5rI25p5Pw9krNmkeDuju8pWIeKbb+J/a2Rxpz+Jn+a/dlf9aRLyT/8zWv7fO9kfvKcs/PDwbyf+HHfn/aJ3tyz8AAAAAAAD0z/UjEfFit8//asvX/0SX63+GIuJwH9p/8Od/tRt9aAbo4uaRiNcjorj2b7Ej/7mRel7a2b4eYCCdONWcPRART0TE/hjYkpUnVmhjdM9vAz3rOq7/y15Z+8W1gHk/bjS23L3NzNTC1Eb2GVhy80rEs41u+U/L43/qMv5nY//cKttoHX3jl151D84/sFlaX0fs6zr+33lyRVr5+Rzj7eOB8eKo4H6fHr/2Q6/25R/Kk43/21fO/0jqfF7P/Nrb+OzvPzeQ/+7H/4PpWPuRM4P5uk+mFhbOT0QMprfvXz+59j7D46jIQ5GXLP/793Y//1/p+H9bRFxeZZvHfnrraq864z+UJ8v/zJrG/7Uv7P3gq397tb+68f9Qe0zfn68x/wcrW21Ay+4nAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPwf1SJiR6Ta2PJyrTY2FjEUEU/F9lrz3PzCCyfOfXx2Jqtrf/9/rfim3+Glciq+/3+kozx5T/lgROyKiC/r29rlselzzZmydx4AAAAAAAAAAAAAAAAAAAAeEUM97v/P/FUvu3fApmuU3QGgNPIP1SX/UF3yD9Ul/1Bd8g/VJf9QXfIP1SX/UF311nfHy+4DAAAAAADQN7ueu/5HiojLr21rvzKDed1AqT0DNtvhsjsAlMYjfqC6XPoH1eUcH0gPqN+67i0BAAAAAAAAAAAAgH7Zt9v9/1BVtbI7AJSm9/3/ngwAjzv3/0N1OccH3P8PAAAAAAAAAAAAAI+++QsXT081m7Pn17uwZWObW7BQnYVIfUjcQ1oo+38mAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACg8F8AAAD//8rF+L8=") socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000700)={0xffffffffffffffff}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x80044940, &(0x7f0000001980)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x1a4243c, &(0x7f0000001b80)=ANY=[@ANYRES16=r6, @ANYRES64=r5, @ANYBLOB="12a4095a2aac12f0bfcb206d982e44066381388d27f14002d8d7431d3947f6399c7ff9f5193fc0398653e5a67bbb319f02bf4ac6f6ccd5acbfe1350cc3a6d2d48cf6c089ddf67171ffb3b15988e7b394c5daf3e12ca05e4dbdad7edd45f10cbc296a53a530d4c2d203ee650d5fff3a9b5aae78794fe84327e508172cdd72eeff5af4d6db9379bef20dde8e64b91d31a84ce8a7598bb78cc85108874811fc650f0520a5", @ANYRES32=0x0, @ANYRESDEC=r3, @ANYRESHEX=r4, @ANYRES8=r5, @ANYBLOB="9a7f40ad4c7145903a868b9020e1e8899ed5747db23004fc9d248900abcaa6b065cf0800930a71dcd8b8955d93c78b9d4e5e06d8d5c9ac9b75d177754d6eba23e6d2be546c0dfecdf61baf732950a5729c01fbdc11e36cb411be200a9135657acd97d21ee46aac313ebdddd9265af16558dd3e5ba4836659a6abfe08aad84276acf949bdaa34bdf7f7b2dfb2fe8b9d6d225dcecebeb6e15f649994728842bd99fc94897d24315ac2d17bf6c2acfbfa8464d80f36304f88b906b78ab359be3479db5b0e7555f04416807c2202d6551f2425440be741dbe053e0bfeb845623e722a9293843f1cf0a71119dcadf7e353af4da52aed3086d6e5a095774248be9a1b1418dec1c03a2cb0ece0840ebeaaf7b67867da45943b700e2d6dad775ae6f33e55aa86ca84c336c91e3b7d7224f7a9a10d5b45a6ce0769d875415bea136b5508e5e0a88290792da3b11b2284a3d757c301cec78b55d3fcfa073615ccb089f66c5b9a5c84f6c1bb78c3370c4687eab260711fa05525687c7709e15cddea061f70798cbf940ad929eb80f33ad8bb4fcd322dd0558f111d7d01351147976b425a27e573402490055054cf3d80bebde6a89f3086170633740f08780aac3a73f17eaeda8deb642c2887962596b4d78c0ffffb28d0e64073b0641f89cf83a69afaaea03ba6070838fdbdaccb81630a6fdaa77fc10146013b9fd79e965a320daf81c1a51f032a3f462f2740e579eb116cad80b4e233326bf94fea52184517accf608b1fbfb395942869841b9ca0f314beff6b2dc0a74d7599012274b24775f0382e72907c1f0c571b994f048c0266feb775d893fec84e5733cd66a96cd45b60f63743b17b05d99c427a2d00a27fef17cadf128059a2e227b80701755b0bc706f32255c8cd619fa995cc7649f28337361a62cff46669fa4cf095a2d148987a9fafa6e1fb9f59b5ac5ff10a4c62e0187a3c75a983f7f5211142c6c09170a13e29c2044e5568bda8055cee4722e445e83ea01307c42cbe63a5bc529e1200e5874f7500275abacd6cc0e3bf8fd38ab7bab39f54d180d60892e2e3a713a3e654c89b8e9ba4474909991844514c04b655c66ccd6f2a17e29ff69d343ebac7ac5e1510ad4ff52e6a932a97bb0d814259da6545022152dd63f06219a1d66ec2278b694876ed6195b0543b8c9289b8438e8ee57dd38bcdb045a6fc4cede28effaa0354afbd4190fcbccd9a0e91508e4399e0e30a0bfdedcc19454b6dd7c2785a6e4fe74a0ece1d683ad07d76eafec02fb0d88debfeacd3531413185da0ffa4fb9b5e6d5a916f7bb5d51efc8ab61e4953fc6b2d1e670769f3ca56d51b804ceb118278acc90422e1f51e448a27d2fe4f93c88cf7c6148474bf650902dd6dd96541044113d244cf938150ec426e7ed63e1f153bbe328f4232552b104c8dee60b0c4e4c25f2605e97cc6f4263d32e8340be2d167137682373ae4cd501fdc9c5359b40f52803a5e4c0e04a5de0412c5cbd4d05e6135a1209d4b2dff50d39e481f1d1b01ed71004fb0c18e736af8ab176f833a439a85c9132e6d2296f665771c6a284eadc08c94ffa520dcc37fd6426c152364699514b15d4df6732fff39834e8ba29688b19db27a970d9d7fbee973c76bee04fb6164963969ebde0f785606781d63726736d8b60a713d5f72207a23f6f00420fdf24d14c069f36a7e236620481cc7a63857cc1355bac8d4f9a3f32785ad4d9d81719077a816b33b98006c322ee473aa9f8f83fae86a4d421104b298a9e42357c44b773e3504b3f9eb5b29330411b776b78fdb6dd9713dd1aee0cc9c7ee8bd23a50d4c8babaf6d74bc25377009a8c57c941f80e58ac08c93a275656cbad3864df9e791305d66103ab30983b07553ede5b5d5b0aab157f805eb6c11c75dd7f297c2cc9110551131a797164dec422b13799f1c261464c765a62c201eb9c8686eee94642d59f429cd137cba0d1a8126dcdfc28ea5c201526c61164a86f480dfde0c60fdf6afd3cd64719de1d89b5a362e058054a9db73aaffac324b04e8903060e1f14ca4ac31c82183066e6d581685efbe3452a20a665166b03808220770d66051971b61d8114376e22a4511cae9fdf7bbed68bb9f45b57eee1c15775730ef1434731d7b82a7cbcd6155396263984edfcea62196189da0ba9908d7d5ef514d75a3e1d4ae42654365083873fc4ce969fa4fac51d640be8d948bb9464d1a7e494c8df98bd5a569ff7fe1aca542c34610148a8f1dc9d60ff0f761270577f286a362f32164184ffce3ad132637e9f0381e9ce76a11f296f9d1e835cdc44926104e1df4d0a282a84b9fbc23064bfcab0d221c6e3124ae8ba6022e62f170dcc2d655f73b40f83fd65f5c705bc1f9e8df13adeadff9e1fe4660a55be7dc969cfffaed607190162dcd09d0cd86a297b22142b88f0eb28dd1a45152a4f4f2dca0d96d39fa594349040f486cd486af619b7083236cf90324cddc6f1ed0f6a103c8d936d7f2f31d420ef50931838e66721bff7494617b6b4bc385f3e51b3f81cf5d6953ac7fddc0f3466682911b38bc7f082e0c18e3ae0badf7f3fd3e186ebc2bab71fa26f77bb14cd97e6761c93c8c25887c0ef1f3dc1d8d86ce0fb73190f66f4deca77977e8d6064bfeeac3fad2bc50488c144e2a1a82fcc1e1c12ac54bf3e2d468e8f53241e4a6ad9e466746a45b053452ded5caa20461881d78d8235e986ba8b77e83601655d2650bf1b64ce17c75314216b43bbd1101a2e12e57525bb7d3b136a70635bdac8af24367a24ce2fe2a72ef2b0e56ff8dc62a82946f86f9b6b1418a89b1971372dfe7d5ce2e6611befff721f04a19bce7f90b1551a4cdead136662c50513fdde6f9d4a199c3907ed8799f231f54dd8347c71d829ff8ddc5d96b5aac2fe58652c81ff7f54e2568119dff2763ef435aa420630dacc7e9414340ee8688f46c7a8ab96d860937641042b3cdf6857ff1d2d4e47cec1f23e65fe541f38cb96b132666f999002e89cd1896ca58c2e63b87382e1a6c1ee9afa56cf3ba923fa9c989e20bff313f37252632fdcff03fbdd2d334ee93baf75c1bdae30feaa81fb2ac1b63c42dda06f20ce8c9d003eb3efed7931def342fb874fce92763f6f477c7f589b75d2129419fc4cb7a8893a1d3f94533ed9fdf9f21fc254fd80aa74750833d390327a2107e761240928d35a36c5eaca61fd848116b8dd7ec8157928bc2dd87f7756aa517cf6a61d2009fd4ba0579ca3b3129cfd5403546f5ab6d0575799a008fc67da9658427636d8f806d9b8cad64aee438d0a9b45957f31a5afe3ed894add9acadfd347246099c6ff0b4ec6f19ac61557daf8739e528185ab1468ca72d6d72e4f026e371e540b774b6576df3014dcc9e91b2cd1f0403a4fcaa6627b22682bb54f92150c2917acaee1972b2b03bc2bd37fdb9e7352c654d94ef196b7229e4da5ee62b7d395ecdd5177f2563242ea49ff78151a4a816a94e89b03f41c7e6684f8be3e5802e9338e7cbd3b43f708c062f944a59f31b02ca9a177e6b681accee8785d2467d2d78636be4330febaa3f6907db07992a2de74e459f3ae8ee6adae20cbc75aabd2d5d3424de0ddcc3ddd981c3a4966c57f8fdb1c42db87395f0bc800ff8ddb4c228a7d793d8a997885494a8578f5433d3f82886ea573641bf16065efbc25718c88f7277ce04c94af560d8deb7968496f849d3fad78741272b08bf7aec3f3c777428d3b8b897333ae5afb6823af63cb7347601ee2e8d4e21b21a12e6d42f66a1aac26d296bc68a998d8ba179ed5f756c2efd8a7acc0e3f08093bb4a83d37f15b4fe07c90858058ad1ff0e21bb7bf4363079c5d452dba5972b21c8f41daf6f11a51d321d3c1d544190238036d907d965ff469ce4895eb7675f3e94a15f83b837b892a40390d87d76e9b15eda02366299d3dd93943466bceeb2f9e465adccc08e1a02c3ac01815931627ed327e0ffbe09563221a365b88c4f2449bd3634920d5bfbde7cdc92c4cb16a579f35f07dafc87ce6ce4de7bf9e8ff0e80b81cdab8f2164a25a0a6929679ce9ae0dc2ac7ed41a787446676f091597551dc2e8c054224bac6652bba5fb675c0b2c94d2faac160f11b7b96fc96415aca8a47fa03658b8afa24b6bd97f7dbeead9ae5f7ec1cb0d000055f41a5043c6c4c97212398b168b5cb9ee650726eabcc31b6712e815fdaae77885350884fb36d6d5444d5e5500a7d636d4eced14b9d411c765b36a4be06ca9be2965d6d6c06c3b6bcb38babeb2999ee71295d48926bf6e39363fabf74de5e57aa0b59f9dddeca142d0c50ab7ff198196c69c971e6ab591220f4e42d6525e2dbd99b6c57949c854e4ee0e4581f9e3e160b3f66b01f23f4d0472c0a1f307837ac8dac0a257d09ab82975148dcd764fe6359a5f21b9cbe2ae7b9b277489a8b3285b8289a84ff854508b4488ffcf68f47ec7a5c18a8c3d06e26b32f754ac74ea8e93a554147fd3b3daf1fbe924e2e389cac13a5f80f3a21dbd250d3917f7b5acfc739a63f2b3d6b3f099efb4be7a842215c89fc87bd8550d11ba2a4af0f111ab124503b26feeae3be3ee24168dd4553a226b9168edb11c3e61bc850adf995b4d6f1aace6db0b91f805c3d1789a3e6b470e5470968f429d5b05c8f76ca2981e37f5bde4ad00a09755c76774ead7d93f3f41255b1d56152e3699b133b2e0b277427c992323d1b4d8c438434e9e901ddd43788f80cb9a975e9dd1671ce16be5ff8033d5da824f00fd78b540edbcd69a2e9aff03e31af9afefb809434f52b4a1239fdd241ed3a268258addde19d1724155a1a4c877bd59b0659b7a786886f6ffcb5999d1f9c007d615020926f7165a9ddd4aaa3c7b631d30cc951e328131d99282ac06a18f88373092320ea5308f06c376e711aecda4cd1c2b639d9ea7a2613d4e9eaa9a0ef72774fdec622f7d131b45135d577897bf686b460a371083070139ea544bda15012251d6c8e7163c25412841faefba76765648ca7cd1b423403a654b6b5754588ae6c309621477db20f7c9236af1e422ebd3fb6d6a712e7a6d00d58416b7d65a53a2514bf51bedfe9207f16a4d79418600389b98ea8b9e06b8da708a86f191e567925af39a09ac9fd7902e8f8e77567baf1b75c05ba1eb7089b424801405afc982a8d79c80fada184a1ab3bab526a3b0a5e20d2dc6bcdd2c5cb7c49f735f3e8f4d36a388ca805876ae08f0e3acca5dd864c1fa1552068bf799095221480374fd2dcaeddb74be93470eff4fe278e190f0a131f32340ada9cca518af769f42943875f4c5707beee2179771da21cd66405b9973648bd047a516d1cf902fa1f0fcdcbc3f4c1f20fc22f9a7e9f4c3a52576399604c46f83ede44f542d06d54e6e8a1e693a2cfcbb16c178d1bace976133e72cc4533bd02b1c4ec2cc22097435aff5a682ca7227414895450831560fa682493f4814ce8fbdb190f8ce2b533ed9582638511bda93aeae5d0690f745b788db622864ba3fb60952f119427fbe66754c5c038c5fb2cb87c326d65862e353c14950bd1fa7c70e36323e9cf90c81f6275e59c7926acac1560a0b6bbc7a850817f2effa19d485315a219d49e293f871278294d02765cf72caa2f438de3337ed205bf68ff6ddaaa5e4b80de5fba022dfcf9cf074a319678df11eb77b3ef66e512b67ba5182265a60eaf457691e973d23cbaf6000537f886695074ebb616f9cdad9de7c6fe9ecfbd13d537d64c34a7c90ca56b50e60d6a7067e391e63561793edf6ed3c2eeb8555909a59ce73da1f096d41fb42de44494128324a9", @ANYRES8, @ANYRESOCT], 0x0, 0x0, &(0x7f0000000000)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f0000000280)={0x0, 0x1, {0x3, 0x0, 0x0, 0x0, 0x1}, 0x1}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r2, 0xc0709411, &(0x7f0000000740)={{r3, 0x0, 0x35c, 0x54, 0x6, 0x4, 0x1, 0xf, 0x2, 0x1d, 0x7, 0x7, 0x9, 0x0, 0xffffffff00000000}, 0x8, [0x0]}) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{}, &(0x7f0000000540), &(0x7f00000005c0)}, 0x20) r7 = socket(0x10, 0x803, 0x0) sendmsg$AUDIT_USER_AVC(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000800)={0xac, 0x453, 0x200, 0x70bd28, 0x25dfdbfd, "9aabd9dd04dd7ca16857a632416976736dfef79aaf5c2bbcb1db823fa65fffaf5091e028361f0019046de604fb55ab4c24a3b828b79a49c408f27d894d66957f3351e56a945127958ecb88db709f3a725820d7f7c81ec523670c0d0e09cf53e189088e7a887b278f6a3659fa098421f725dda8d104d893d8f1e9a9c1e544f69b70183371fc5c4e83b1ae3236eec0e7104f741ce52f4b349d937afc", ["", "", "", "", "", "", ""]}, 0xac}}, 0x800) r8 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000380)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newtfilter={0x74, 0x2c, 0xd2b, 0x70bd2b, 0x35dfdbfb, {0x0, 0x0, 0x0, r9, {0xf}, {}, {0x7, 0xffe0}}, [@filter_kind_options=@f_u32={{0x8}, {0x48, 0x2, [@TCA_U32_SEL={0x44, 0x5, {0x1, 0x1, 0x3, 0x1, 0x4, 0x2, 0x6, 0x7ffffffa, [{0x200, 0x500, 0x3, 0x6}, {0x6783, 0x2, 0x8001, 0x10}, {0x0, 0x53, 0xa9, 0x1}]}}]}}]}, 0x74}}, 0x24040084) 206.075478ms ago: executing program 4 (id=840): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000100850000005900000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@deltaction={0x48, 0x18, 0x1, 0x70bd28, 0x25dfdbfe, {0xa}, [@TCA_ACT_TAB={0x34, 0x1, [{0xc, 0x80, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x14, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x10, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}]}]}, 0x48}}, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0xce56fe61a68fc369, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x80000e, &(0x7f0000000340)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@quota}, {@errors_remount}, {@barrier}]}, 0x3, 0x44a, &(0x7f0000000bc0)="$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") ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000180)={0x0, 'veth1_vlan\x00', {0x3}, 0x4}) 205.401838ms ago: executing program 1 (id=841): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x867}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) write$UHID_CREATE2(r0, &(0x7f0000001580)={0xb, {'syz0\x00', 'syz0\x00', 'syz0\x00', 0xc4, 0x2, 0xffffff16, 0x9, 0x9, 0x7ffb, "74a56849c0a63792072c262c985e8e7b2cdd615e9ce83a3dced79efa3b6dd27ef04fb99272f6b39f816d7ea607fb4d63a5ec8ea4f0b532302d4c4a72e9e5bfb79a260d8132dc4f93938704dbcd57f8279fab9f481f876c758c60d30d194cd97a2573f05c175da120addb7729b56fbcd1c42307fb619b54570b76f5c51f8d535756b20b57551ff7bca3b77a5defd36cf523f6fc04f8a699cc0d7c8ebef9706b300bf74e0c0e63ecf2425e0edcba5e1a3ec145bd2a319290c8f5c3bb4f78b0d1f063652357"}}, 0x1dc) write$UHID_DESTROY(r0, &(0x7f00000001c0), 0x4) 114.053909ms ago: executing program 1 (id=842): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f00000003c0)=0x3, 0x4) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, &(0x7f0000000040)="4b598b", 0x3, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000002c0)='./file1\x00', 0xa0000a, &(0x7f0000000000)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@noinit_itable}]}, 0xfe, 0x585, &(0x7f0000001500)="$eJzs3d9rFNceAPDvbLLRGO81gsi99+ES8KEWcWOS/rDQB/tYWqnQvtuQrEGycSW7EZMK1Yf60pcihVIqlP4Bfe9Tkf4D/SssrSBFQluwD1tmM6ubZDfJxtWs2c8HRufMnJ0zZ2e+J+fsmWUD6Ftj6T+5iP9GxBdJxJGmfYOR7Rxby7f66MZMuiRRq334exJJtq2RP8n+H8kS/4mInz6LOJXbXG5leWV+ulQqLmbp8erC1fHK8srpywvTc8W54pXJqamzr09NvvXmG12r66sX/vz6g3vvnv38xOpX3z84eieJc3E429dcjy0d2HLvzebEWIxl70k+zm3IONHJib8Ekr0+AXZlIIvzfKRtwJEYyKIe2P8+jYha5x7v4jVAz0l2E//APtDoBzTG9jseB+8TD99ZGwBtrn+y9tlIHKyPjQ6tJutGRul4d7QL5adl/PDb3TvpEp18DgHwjG7eiogzg4Pt278N/q7t+NhndpBnYxnaP3hx7qX9nx+HIzbFf+5J/yda9H9GWsTubmwf/7kHa5NQTYa6UHAm7f+93bL/+6TI0YEs9a96ny+fXLpcKqZt278j4mTkD6TpreZzzq7eb9toNvf/0iUtv9EXzM7jweCGOafZ6er0s9S52cNbEf/bpv+btLj+6ftxYYdlHC/e/X+7fdvX//mqfRfxSsvr/3RGK9l6fnK8fj+MN+6Kzf64ffznduXvdf3T639o6/qPJs3ztZXOy/j24ONiu31jSTZp2uH9P5R8VG+ZGk3B9elqdXEiYih5v55et33y6Wsb6Ub+tP4nT7SO/63u/+GI+HiH9b997HbbrL1w/Wc7uv6dr9x/75Nv2pW/s/bvtfrayWzLTtq/tqcztH7Ls7x3AAAAAAAA0GtyQxGHI8kVsjn9w5HLFQprz3cci0O5UrlSPXWpvHRlNurflR2NfK4x0z3S9DzERPb6Rnoyez62kZ6KiKMR8eXAcD1dmCmXZve68gAAAAAAAAAAAAAAAAAAANAjRqL19/9Tvw7s9dkBz52f/Ib+tS7+D7TI0I1fegJ6kr//0L/EP/Qv8Q/9S/xD/xL/0L/EP/Qv8Q/9S/wDAAAAAAAAAAAAAAAAAAAAAAAAAABAV104fz5daquPbsxExMG4trw0X752eraYny8sLM0UZsqLVwtz5fJcqViYKS9sd7xSuXx1YjKWro9Xi5XqeGV55eJCeelK9eLlhem54sVi/sVUCwAAAAAAAAAAAAAAAAAAAF4qleWV+elSqbjYmyv5Lh/wlx6p1z5aGeyN07CyWBmOLh5wfTvxV61W26s2CgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+CQAA//87lDlV") r1 = open(&(0x7f0000000180)='./file1/file1\x00', 0xecc80, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) wait4(0x0, &(0x7f0000000680), 0x4, &(0x7f0000000ac0)) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000f00)={0x11, 0x7, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000300000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000000c0)=@ccm_128={{0x305}, '\x00', "bcbd13b603e0f7b3bfa8909ef43c0ae1", "0000fd9f", "b08068ebce17ab00"}, 0x28) connect$inet6(r5, &(0x7f00000001c0)={0xa, 0x4000, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000000), 0x4) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000d40)='./file1\x00', 0x3a08014, &(0x7f0000001040)=ANY=[@ANYRES8=0x0, @ANYRESDEC=0x0, @ANYBLOB="98578424a2ace03c10f4631bb7ecf4995ba38b52625f6ed652f8256f0b174958cb71048eeeb06a4b6ff257f5387ad9528ccc6ea45ccfb415d8f3e76e3111267f2b3c183ddad789353b641c9cab107e8ec771974f703413e085cb25adc9434092474b892f2d0b0bc2b3eb90faa79d54adc7097365b411d9ffefbf08218f051e622ff75401086c81c358fde689f2ff07c7163f0556d086b4829e4ae689c5e206f18b31e3f8384ad531b1962d2f76c3c38951afb2e5168d3771dc27d830526a24c6d29499", @ANYRESOCT, @ANYRES64, @ANYRESHEX, @ANYRESOCT, @ANYRES32, @ANYRES8], 0x1, 0x7db, &(0x7f0000002540)="$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") creat(&(0x7f00000003c0)='./file1/file0\x00', 0x115) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x10) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYRESDEC=r1, @ANYRES16=0x0, @ANYRESHEX=r2, @ANYRESOCT=r4, @ANYBLOB="0800c400070000000800c30005000000"], 0x34}, 0x1, 0x0, 0x0, 0x4000880}, 0x40) 0s ago: executing program 1 (id=843): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="020000000400000008000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) sched_getscheduler(0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) open(&(0x7f0000000300)='./file1\x00', 0x80400, 0xe4) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000640)={0x1d, r6, 0x1, {0x0, 0x1}, 0xfe}, 0x18) sendmsg$can_raw(r3, &(0x7f0000000340)={&(0x7f0000000140)={0x1d, r6}, 0x10, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x10c4}, 0x4c894) pread64(r4, &(0x7f00000006c0)=""/128, 0x80, 0x7) close_range(r2, 0xffffffffffffffff, 0x10000000000000) kernel console output (not intermixed with test programs): : USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.744942][ T4316] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.774550][ T4325] syz.1.293 uses obsolete (PF_INET,SOCK_PACKET) [ 50.786497][ T29] audit: type=1400 audit(1748042897.794:536): avc: denied { ioctl } for pid=4306 comm="syz.1.288" path="/dev/input/event1" dev="devtmpfs" ino=243 ioctlcmd=0x4504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 50.812710][ T29] audit: type=1400 audit(1748042897.874:537): avc: denied { ioctl } for pid=4317 comm="syz.1.291" path="socket:[7320]" dev="sockfs" ino=7320 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 50.838303][ T29] audit: type=1400 audit(1748042897.904:538): avc: denied { setopt } for pid=4314 comm="syz.4.290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 50.858770][ T29] audit: type=1400 audit(1748042897.904:539): avc: denied { execute } for pid=4314 comm="syz.4.290" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=7325 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 50.893172][ T4322] 9pnet_virtio: no channels available for device syz [ 50.982822][ T4316] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.011513][ T4316] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.166108][ T4342] netlink: 'syz.1.298': attribute type 7 has an invalid length. [ 51.173890][ T4342] netlink: 8 bytes leftover after parsing attributes in process `syz.1.298'. [ 51.224115][ T4346] vhci_hcd: default hub control req: 0000 v0000 i0000 l65535 [ 51.258840][ T4352] tipc: Enabling of bearer rejected, already enabled [ 51.303978][ T4352] tipc: Enabled bearer , priority 0 [ 51.442988][ T4370] loop2: detected capacity change from 0 to 1024 [ 51.459188][ T4372] netlink: 'syz.3.314': attribute type 7 has an invalid length. [ 51.466980][ T4372] netlink: 8 bytes leftover after parsing attributes in process `syz.3.314'. [ 51.478722][ T4370] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.528062][ T4381] dvmrp1: entered allmulticast mode [ 51.602186][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.669290][ T4392] : renamed from vlan0 (while UP) [ 51.757663][ T4396] tipc: Enabling of bearer rejected, already enabled [ 51.772229][ T4396] tipc: Enabled bearer , priority 0 [ 52.080646][ T4400] loop4: detected capacity change from 0 to 512 [ 52.116177][ T4400] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 52.157671][ T4400] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.171097][ T4400] ext4 filesystem being mounted at /64/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.221179][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.463986][ T4408] loop3: detected capacity change from 0 to 1024 [ 52.508494][ T4408] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.606322][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.725277][ T4419] loop3: detected capacity change from 0 to 512 [ 52.788462][ T4419] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 52.813098][ T4421] loop4: detected capacity change from 0 to 1024 [ 52.831286][ T4419] System zones: 0-2, 18-18, 34-34 [ 52.860388][ T4421] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm +}[@: Failed to acquire dquot type 0 [ 52.880705][ T4419] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.330: bg 0: block 248: padding at end of block bitmap is not set [ 52.923635][ T4421] EXT4-fs error (device loop4): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 52.947540][ T4419] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.330: Failed to acquire dquot type 1 [ 52.970246][ T4421] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #13: comm +}[@: corrupted inode contents [ 52.998770][ T4419] EXT4-fs (loop3): 1 truncate cleaned up [ 53.020024][ T4419] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.039681][ T4421] EXT4-fs error (device loop4): ext4_dirty_inode:6103: inode #13: comm +}[@: mark_inode_dirty error [ 53.071967][ T4419] ext4 filesystem being mounted at /69/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.088551][ T4421] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #13: comm +}[@: corrupted inode contents [ 53.133011][ T4421] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #13: comm +}[@: mark_inode_dirty error [ 53.165374][ T4419] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.330: Failed to acquire dquot type 1 [ 53.186673][ T4421] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #13: comm +}[@: corrupted inode contents [ 53.220636][ T4421] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 53.240262][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.252843][ T3538] EXT4-fs error (device loop3): ext4_release_dquot:6971: comm kworker/u8:57: Failed to release dquot type 1 [ 53.270199][ T4421] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #13: comm +}[@: corrupted inode contents [ 53.322325][ T4421] EXT4-fs error (device loop4): ext4_truncate:4255: inode #13: comm +}[@: mark_inode_dirty error [ 53.341516][ T4442] loop3: detected capacity change from 0 to 128 [ 53.349223][ T4421] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 53.369901][ T4440] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 53.377864][ T4440] FAT-fs (loop3): Filesystem has been set read-only [ 53.384806][ T4447] loop1: detected capacity change from 0 to 512 [ 53.396275][ T4440] syz.3.336: attempt to access beyond end of device [ 53.396275][ T4440] loop3: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 53.407406][ T4421] EXT4-fs (loop4): 1 truncate cleaned up [ 53.417903][ T4448] Cannot find add_set index 0 as target [ 53.424217][ T4447] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 53.436750][ T4440] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 53.444712][ T4440] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 53.445143][ T4450] loop2: detected capacity change from 0 to 128 [ 53.453587][ T4421] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.474371][ T4448] vhci_hcd: invalid port number 96 [ 53.479552][ T4448] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 53.491992][ T4449] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 53.492360][ T4447] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.499930][ T4449] FAT-fs (loop2): Filesystem has been set read-only [ 53.501661][ T4449] syz.2.341: attempt to access beyond end of device [ 53.501661][ T4449] loop2: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 53.517906][ T4442] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 53.519753][ T4449] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 53.542297][ T4447] ext4 filesystem being mounted at /69/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.548461][ T4449] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 53.561438][ T4421] ext4: Unknown parameter ' Z* m.Dc8'@C9G9?9S{1Jլ5 æԌqqY糔' [ 53.567056][ T4442] syz.3.336: attempt to access beyond end of device [ 53.567056][ T4442] loop3: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 53.593762][ T4440] syz.3.336: attempt to access beyond end of device [ 53.593762][ T4440] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 53.596166][ T4442] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 53.609362][ T4450] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 53.614810][ T4442] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 53.630671][ T4442] syz.3.336: attempt to access beyond end of device [ 53.630671][ T4442] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 53.644120][ T4442] syz.3.336: attempt to access beyond end of device [ 53.644120][ T4442] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 53.658616][ T4442] syz.3.336: attempt to access beyond end of device [ 53.658616][ T4442] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 53.661858][ T4450] syz.2.341: attempt to access beyond end of device [ 53.661858][ T4450] loop2: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 53.672695][ T4440] syz.3.336: attempt to access beyond end of device [ 53.672695][ T4440] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 53.690220][ T4450] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 53.699386][ T4449] syz.2.341: attempt to access beyond end of device [ 53.699386][ T4449] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 53.707283][ T4450] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 53.729413][ T3321] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.739552][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.811281][ T3366] hid (null): unknown global tag 0xd [ 53.816720][ T3366] hid (null): unknown global tag 0xe [ 53.823280][ T3366] hid-generic 0002:FFFFFF16:0009.0006: unknown global tag 0xd [ 53.830887][ T3366] hid-generic 0002:FFFFFF16:0009.0006: item 0 4 1 13 parsing failed [ 53.851402][ T3366] hid-generic 0002:FFFFFF16:0009.0006: probe with driver hid-generic failed with error -22 [ 53.920775][ T4468] loop1: detected capacity change from 0 to 1024 [ 53.966288][ T4468] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.027505][ T4480] loop3: detected capacity change from 0 to 512 [ 54.060130][ T4480] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 54.092133][ T4480] System zones: 0-2, 18-18, 34-34 [ 54.100176][ T4480] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.353: bg 0: block 248: padding at end of block bitmap is not set [ 54.115749][ T3321] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.137803][ T4480] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.353: Failed to acquire dquot type 1 [ 54.181398][ T4490] loop1: detected capacity change from 0 to 512 [ 54.188120][ T4480] EXT4-fs (loop3): 1 truncate cleaned up [ 54.221768][ T4480] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.245055][ T4490] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 54.259464][ T4480] ext4 filesystem being mounted at /75/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.288051][ T4494] loop0: detected capacity change from 0 to 1024 [ 54.330826][ T4480] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.353: Failed to acquire dquot type 1 [ 54.346347][ T4490] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.359065][ T4490] ext4 filesystem being mounted at /74/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.399254][ T4494] EXT4-fs error (device loop0): ext4_acquire_dquot:6935: comm +}[@: Failed to acquire dquot type 0 [ 54.411516][ T4494] EXT4-fs error (device loop0): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 54.428596][ T4494] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #13: comm +}[@: corrupted inode contents [ 54.440322][ T4494] EXT4-fs error (device loop0): ext4_dirty_inode:6103: inode #13: comm +}[@: mark_inode_dirty error [ 54.453357][ T4494] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #13: comm +}[@: corrupted inode contents [ 54.468231][ T4494] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #13: comm +}[@: mark_inode_dirty error [ 54.479511][ T4494] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #13: comm +}[@: corrupted inode contents [ 54.492256][ T4494] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 54.501371][ T4494] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #13: comm +}[@: corrupted inode contents [ 54.514219][ T4494] EXT4-fs error (device loop0): ext4_truncate:4255: inode #13: comm +}[@: mark_inode_dirty error [ 54.525234][ T4494] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 54.536324][ T4494] EXT4-fs (loop0): 1 truncate cleaned up [ 54.543290][ T4494] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.558539][ T4494] ext4: Unknown parameter ' Z* m.Dc8'@C9G9?9S{1Jլ5 æԌqqY糔' [ 54.603057][ T3321] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.612906][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.624989][ T3485] __quota_error: 22 callbacks suppressed [ 54.625006][ T3485] Quota error (device loop3): do_check_range: Getting block 0 out of range 1-5 [ 54.639970][ T3485] EXT4-fs error (device loop3): ext4_release_dquot:6971: comm kworker/u8:14: Failed to release dquot type 1 [ 54.655308][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.737550][ T4508] loop4: detected capacity change from 0 to 512 [ 54.807723][ T4517] loop1: detected capacity change from 0 to 128 [ 54.822218][ T4508] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 54.840204][ T4516] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 54.848166][ T4516] FAT-fs (loop1): Filesystem has been set read-only [ 54.850535][ T4508] System zones: 0-2, 18-18, 34-34 [ 54.862293][ T4525] loop3: detected capacity change from 0 to 128 [ 54.870290][ T4508] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.362: bg 0: block 248: padding at end of block bitmap is not set [ 54.886675][ T4516] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 54.894661][ T4516] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 54.909385][ T4508] Quota error (device loop4): write_blk: dquota write failed [ 54.917153][ T4508] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 54.927907][ T4508] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.362: Failed to acquire dquot type 1 [ 54.940828][ T4517] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 54.951655][ T4508] EXT4-fs (loop4): 1 truncate cleaned up [ 54.962233][ T4530] loop3: detected capacity change from 0 to 512 [ 54.966257][ T4517] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 54.975403][ T4508] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.976502][ T4517] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 55.008370][ T4530] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 55.038500][ T4530] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.040832][ T4508] ext4 filesystem being mounted at /69/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.065943][ T4530] ext4 filesystem being mounted at /79/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.119196][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.162649][ T4539] Quota error (device loop4): write_blk: dquota write failed [ 55.170281][ T4539] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 55.180497][ T4539] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.362: Failed to acquire dquot type 1 [ 55.221189][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.235971][ T3535] Quota error (device loop4): do_check_range: Getting block 0 out of range 1-5 [ 55.245245][ T3535] EXT4-fs error (device loop4): ext4_release_dquot:6971: comm kworker/u8:54: Failed to release dquot type 1 [ 55.270061][ T29] audit: type=1326 audit(1748042902.454:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4540 comm="syz.3.371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0f4b1e969 code=0x7ffc0000 [ 55.321136][ T29] audit: type=1326 audit(1748042902.484:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4540 comm="syz.3.371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0f4b1e969 code=0x7ffc0000 [ 55.345059][ T29] audit: type=1326 audit(1748042902.484:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4540 comm="syz.3.371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fb0f4b1e969 code=0x7ffc0000 [ 55.368594][ T29] audit: type=1326 audit(1748042902.484:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4540 comm="syz.3.371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0f4b1e969 code=0x7ffc0000 [ 55.545980][ T4547] loop3: detected capacity change from 0 to 512 [ 55.602631][ T4547] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 55.611848][ T4547] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 55.721712][ T4547] EXT4-fs (loop3): warning: checktime reached, running e2fsck is recommended [ 55.782640][ T4547] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 55.791115][ T4547] System zones: 0-2, 18-18, 34-34 [ 55.801310][ T4547] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 55.839986][ T4547] EXT4-fs (loop3): 1 truncate cleaned up [ 55.846644][ T4547] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.850014][ T4553] loop1: detected capacity change from 0 to 512 [ 55.979416][ T4553] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 55.992635][ T4553] System zones: 0-2, 18-18, 34-34 [ 56.000047][ T4553] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.373: bg 0: block 248: padding at end of block bitmap is not set [ 56.032321][ T4563] Cannot find add_set index 0 as target [ 56.040189][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.043268][ T4551] loop0: detected capacity change from 0 to 1024 [ 56.056720][ T4553] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.373: Failed to acquire dquot type 1 [ 56.057352][ T4553] EXT4-fs (loop1): 1 truncate cleaned up [ 56.077591][ T4551] EXT4-fs: Ignoring removed bh option [ 56.085701][ T4551] journal_path: Non-blockdev passed as './file0' [ 56.093731][ T4551] EXT4-fs: error: could not find journal device path [ 56.104563][ T4553] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.118240][ T4553] ext4 filesystem being mounted at /77/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.138614][ T4563] vhci_hcd: invalid port number 96 [ 56.143988][ T4563] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 56.247020][ T4553] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.373: Failed to acquire dquot type 1 [ 56.260474][ T4567] loop2: detected capacity change from 0 to 128 [ 56.269585][ T1032] hid (null): unknown global tag 0xd [ 56.275175][ T1032] hid (null): unknown global tag 0xe [ 56.290090][ T4566] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 56.292221][ T1032] hid-generic 0002:FFFFFF16:0009.0007: unknown global tag 0xd [ 56.297991][ T4566] FAT-fs (loop2): Filesystem has been set read-only [ 56.305564][ T1032] hid-generic 0002:FFFFFF16:0009.0007: item 0 4 1 13 parsing failed [ 56.329657][ T1032] hid-generic 0002:FFFFFF16:0009.0007: probe with driver hid-generic failed with error -22 [ 56.331280][ T4566] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 56.348047][ T4566] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 56.348260][ T4571] loop0: detected capacity change from 0 to 512 [ 56.360055][ T4567] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 56.370738][ T4567] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 56.373847][ T3321] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.378865][ T4567] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 56.404122][ T3535] EXT4-fs error (device loop1): ext4_release_dquot:6971: comm kworker/u8:54: Failed to release dquot type 1 [ 56.425917][ T4571] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 56.450233][ T4571] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.476026][ T4571] ext4 filesystem being mounted at /61/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.532237][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.587968][ T1032] hid (null): unknown global tag 0xd [ 56.593428][ T1032] hid (null): unknown global tag 0xe [ 56.600741][ T1032] hid-generic 0002:FFFFFF16:0009.0008: unknown global tag 0xd [ 56.608320][ T1032] hid-generic 0002:FFFFFF16:0009.0008: item 0 4 1 13 parsing failed [ 56.616944][ T1032] hid-generic 0002:FFFFFF16:0009.0008: probe with driver hid-generic failed with error -22 [ 57.568038][ T4601] loop1: detected capacity change from 0 to 128 [ 57.870946][ T3366] hid (null): unknown global tag 0xd [ 57.886149][ T4615] loop1: detected capacity change from 0 to 1024 [ 57.899491][ T3366] hid-generic 0002:FFFFFF16:0009.0009: unknown global tag 0xd [ 57.907228][ T3366] hid-generic 0002:FFFFFF16:0009.0009: item 0 4 1 13 parsing failed [ 57.934836][ T3366] hid-generic 0002:FFFFFF16:0009.0009: probe with driver hid-generic failed with error -22 [ 57.954119][ T4615] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.090175][ T3321] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.470351][ T4649] loop4: detected capacity change from 0 to 128 [ 58.479862][ T4647] loop1: detected capacity change from 0 to 512 [ 58.517558][ T4647] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 58.528408][ T4649] bio_check_eod: 40 callbacks suppressed [ 58.528427][ T4649] syz.4.413: attempt to access beyond end of device [ 58.528427][ T4649] loop4: rw=0, sector=2069, nr_sectors = 1 limit=128 [ 58.548280][ T4653] loop3: detected capacity change from 0 to 1024 [ 58.549439][ T4647] System zones: 0-2, 18-18, 34-34 [ 58.574398][ T3366] hid (null): unknown global tag 0xd [ 58.579809][ T3366] hid (null): unknown global tag 0xe [ 58.586582][ T4647] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.412: bg 0: block 248: padding at end of block bitmap is not set [ 58.601838][ T3366] hid-generic 0002:FFFFFF16:0009.000A: unknown global tag 0xd [ 58.604667][ T4647] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.412: Failed to acquire dquot type 1 [ 58.609481][ T3366] hid-generic 0002:FFFFFF16:0009.000A: item 0 4 1 13 parsing failed [ 58.629734][ T3366] hid-generic 0002:FFFFFF16:0009.000A: probe with driver hid-generic failed with error -22 [ 58.630828][ T4647] EXT4-fs (loop1): 1 truncate cleaned up [ 58.648390][ T4653] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.659603][ T4647] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.674492][ T4647] ext4 filesystem being mounted at /89/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.722501][ T4647] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.412: Failed to acquire dquot type 1 [ 58.756351][ T3321] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.781001][ T3538] EXT4-fs error (device loop1): ext4_release_dquot:6971: comm kworker/u8:57: Failed to release dquot type 1 [ 58.818912][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.917535][ T4678] loop3: detected capacity change from 0 to 1024 [ 58.949332][ T4678] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm +}[@: Failed to acquire dquot type 0 [ 59.010298][ T4678] EXT4-fs error (device loop3): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 59.027396][ T4678] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #13: comm +}[@: corrupted inode contents [ 59.048826][ T4678] EXT4-fs error (device loop3): ext4_dirty_inode:6103: inode #13: comm +}[@: mark_inode_dirty error [ 59.061895][ T4694] loop4: detected capacity change from 0 to 512 [ 59.075591][ T4678] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #13: comm +}[@: corrupted inode contents [ 59.092850][ T4678] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #13: comm +}[@: mark_inode_dirty error [ 59.108689][ T4678] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #13: comm +}[@: corrupted inode contents [ 59.126980][ T4678] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 59.136193][ T4694] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 59.141175][ T4678] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #13: comm +}[@: corrupted inode contents [ 59.144531][ T4694] System zones: 0-2, 18-18, 34-34 [ 59.162068][ T4694] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.430: bg 0: block 248: padding at end of block bitmap is not set [ 59.178871][ T4694] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.430: Failed to acquire dquot type 1 [ 59.194016][ T4694] EXT4-fs (loop4): 1 truncate cleaned up [ 59.199812][ T4678] EXT4-fs error (device loop3): ext4_truncate:4255: inode #13: comm +}[@: mark_inode_dirty error [ 59.203724][ T4700] Cannot find add_set index 0 as target [ 59.212672][ T4694] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.230785][ T4694] ext4 filesystem being mounted at /81/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.234534][ T4678] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 59.255130][ T4700] vhci_hcd: invalid port number 96 [ 59.260314][ T4700] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 59.278809][ T4694] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.430: Failed to acquire dquot type 1 [ 59.290804][ T4678] EXT4-fs (loop3): 1 truncate cleaned up [ 59.306596][ T4678] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.307276][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.326209][ T4678] ext4: Unknown parameter ' Z* m.Dc8'@C9G9?9S{1Jլ5 æԌqqY糔' [ 59.343125][ T3496] EXT4-fs error (device loop4): ext4_release_dquot:6971: comm kworker/u8:20: Failed to release dquot type 1 [ 59.346557][ T4708] loop1: detected capacity change from 0 to 128 [ 59.385228][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.398133][ T4708] syz.1.434: attempt to access beyond end of device [ 59.398133][ T4708] loop1: rw=0, sector=2069, nr_sectors = 1 limit=128 [ 59.653330][ T9] hid (null): unknown global tag 0xd [ 59.658835][ T9] hid (null): unknown global tag 0xe [ 59.667324][ T9] hid-generic 0002:FFFFFF16:0009.000B: unknown global tag 0xd [ 59.675159][ T9] hid-generic 0002:FFFFFF16:0009.000B: item 0 4 1 13 parsing failed [ 59.685270][ T9] hid-generic 0002:FFFFFF16:0009.000B: probe with driver hid-generic failed with error -22 [ 59.754164][ T29] kauditd_printk_skb: 78 callbacks suppressed [ 59.754181][ T29] audit: type=1326 audit(1748042906.944:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4679 comm="syz.2.427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49f11ce969 code=0x7ffc0000 [ 59.780363][ T4730] loop3: detected capacity change from 0 to 128 [ 59.797777][ T4729] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 59.805935][ T4729] FAT-fs (loop3): Filesystem has been set read-only [ 59.821505][ T4729] syz.3.444: attempt to access beyond end of device [ 59.821505][ T4729] loop3: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 59.845161][ T4729] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 59.853367][ T4729] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 59.890525][ T4730] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 59.906640][ T4730] syz.3.444: attempt to access beyond end of device [ 59.906640][ T4730] loop3: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 59.925265][ T4740] loop0: detected capacity change from 0 to 1024 [ 59.933441][ T4730] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 59.941332][ T4730] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 59.950113][ T4730] syz.3.444: attempt to access beyond end of device [ 59.950113][ T4730] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 59.964034][ T4730] syz.3.444: attempt to access beyond end of device [ 59.964034][ T4730] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 59.977859][ T4730] syz.3.444: attempt to access beyond end of device [ 59.977859][ T4730] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 59.991316][ T4730] syz.3.444: attempt to access beyond end of device [ 59.991316][ T4730] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 59.993969][ T4740] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 60.018066][ T4729] syz.3.444: attempt to access beyond end of device [ 60.018066][ T4729] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 60.048687][ T4729] syz.3.444: attempt to access beyond end of device [ 60.048687][ T4729] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 60.105002][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.186856][ T4752] loop0: detected capacity change from 0 to 1024 [ 60.214043][ T4752] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 60.273916][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.459861][ T29] audit: type=1326 audit(1748042907.644:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4762 comm="syz.1.455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1a71265927 code=0x7ffc0000 [ 60.483527][ T29] audit: type=1326 audit(1748042907.644:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4762 comm="syz.1.455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1a7120ab39 code=0x7ffc0000 [ 60.506822][ T29] audit: type=1326 audit(1748042907.644:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4762 comm="syz.1.455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1a71265927 code=0x7ffc0000 [ 60.530259][ T29] audit: type=1326 audit(1748042907.644:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4762 comm="syz.1.455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1a7120ab39 code=0x7ffc0000 [ 60.554733][ T29] audit: type=1326 audit(1748042907.644:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4762 comm="syz.1.455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1a71265927 code=0x7ffc0000 [ 60.578547][ T29] audit: type=1326 audit(1748042907.644:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4762 comm="syz.1.455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1a7120ab39 code=0x7ffc0000 [ 60.601774][ T29] audit: type=1326 audit(1748042907.644:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4762 comm="syz.1.455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1a71265927 code=0x7ffc0000 [ 60.625111][ T29] audit: type=1326 audit(1748042907.644:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4762 comm="syz.1.455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1a7120ab39 code=0x7ffc0000 [ 60.648662][ T29] audit: type=1326 audit(1748042907.644:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4762 comm="syz.1.455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1a71265927 code=0x7ffc0000 [ 61.091076][ T3392] hid (null): unknown global tag 0xd [ 61.097098][ T3392] hid (null): unknown global tag 0xe [ 61.124784][ T3392] hid-generic 0002:FFFFFF16:0009.000C: unknown global tag 0xd [ 61.132443][ T3392] hid-generic 0002:FFFFFF16:0009.000C: item 0 4 1 13 parsing failed [ 61.151913][ T3392] hid-generic 0002:FFFFFF16:0009.000C: probe with driver hid-generic failed with error -22 [ 61.445980][ T4801] loop0: detected capacity change from 0 to 512 [ 61.488472][ T4801] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 61.503194][ T4801] System zones: 0-2, 18-18, 34-34 [ 61.509459][ T4801] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.466: bg 0: block 248: padding at end of block bitmap is not set [ 61.525491][ T4801] EXT4-fs error (device loop0): ext4_acquire_dquot:6935: comm syz.0.466: Failed to acquire dquot type 1 [ 61.537773][ T4801] EXT4-fs (loop0): 1 truncate cleaned up [ 61.546170][ T4801] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.559358][ T4801] ext4 filesystem being mounted at /76/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.651511][ T4810] EXT4-fs error (device loop0): ext4_acquire_dquot:6935: comm syz.0.466: Failed to acquire dquot type 1 [ 61.739408][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.753742][ T3496] EXT4-fs error (device loop0): ext4_release_dquot:6971: comm kworker/u8:20: Failed to release dquot type 1 [ 61.807594][ T4812] loop0: detected capacity change from 0 to 128 [ 61.849858][ T4811] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 61.857865][ T4811] FAT-fs (loop0): Filesystem has been set read-only [ 61.893980][ T4811] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 61.902316][ T4811] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 61.930871][ T4812] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 61.948990][ T4812] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 61.956960][ T4812] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 62.172072][ T4827] loop4: detected capacity change from 0 to 1024 [ 62.192024][ T3366] hid (null): unknown global tag 0xd [ 62.209731][ T3366] hid-generic 0002:FFFFFF16:0009.000D: unknown global tag 0xd [ 62.217302][ T3366] hid-generic 0002:FFFFFF16:0009.000D: item 0 4 1 13 parsing failed [ 62.250555][ T4835] infiniband syz2: set active [ 62.255338][ T4835] infiniband syz2: added veth0_to_bond [ 62.256319][ T3366] hid-generic 0002:FFFFFF16:0009.000D: probe with driver hid-generic failed with error -22 [ 62.289208][ T4827] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm +}[@: Failed to acquire dquot type 0 [ 62.318532][ T4827] EXT4-fs error (device loop4): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 62.340905][ T4835] RDS/IB: syz2: added [ 62.347830][ T4835] smc: adding ib device syz2 with port count 1 [ 62.354226][ T4835] smc: ib device syz2 port 1 has pnetid [ 62.423499][ T4827] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #13: comm +}[@: corrupted inode contents [ 62.451359][ T4827] EXT4-fs error (device loop4): ext4_dirty_inode:6103: inode #13: comm +}[@: mark_inode_dirty error [ 62.488830][ T4827] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #13: comm +}[@: corrupted inode contents [ 62.505658][ T4827] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #13: comm +}[@: mark_inode_dirty error [ 62.574772][ T4827] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #13: comm +}[@: corrupted inode contents [ 62.602969][ T4827] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 62.625141][ T4827] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #13: comm +}[@: corrupted inode contents [ 62.657209][ T4827] EXT4-fs error (device loop4): ext4_truncate:4255: inode #13: comm +}[@: mark_inode_dirty error [ 62.686916][ T4827] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 62.710755][ T4827] EXT4-fs (loop4): 1 truncate cleaned up [ 62.730757][ T4827] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.149559][ T9] hid (null): unknown global tag 0xd [ 63.155086][ T9] hid (null): unknown global tag 0xe [ 63.181694][ T9] hid-generic 0002:FFFFFF16:0009.000E: unknown global tag 0xd [ 63.189356][ T9] hid-generic 0002:FFFFFF16:0009.000E: item 0 4 1 13 parsing failed [ 63.228126][ T9] hid-generic 0002:FFFFFF16:0009.000E: probe with driver hid-generic failed with error -22 [ 63.339548][ T4827] ext4: Unknown parameter ' Z* m.Dc8'@C9G9?9S{1Jլ5 æԌqqY糔' [ 63.384038][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.527341][ T4885] loop0: detected capacity change from 0 to 1024 [ 63.940632][ T4916] netlink: set zone limit has 4 unknown bytes [ 64.703402][ T4930] loop3: detected capacity change from 0 to 1024 [ 64.826480][ T4946] loop1: detected capacity change from 0 to 512 [ 64.850362][ T4946] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 64.872625][ T4946] System zones: 0-2, 18-18, 34-34 [ 64.897980][ T4946] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.518: bg 0: block 248: padding at end of block bitmap is not set [ 64.936888][ T4946] __quota_error: 903 callbacks suppressed [ 64.936909][ T4946] Quota error (device loop1): write_blk: dquota write failed [ 64.950211][ T4946] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 64.962147][ T29] audit: type=1326 audit(1748042912.144:1520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4958 comm="syz.3.523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0f4b1e969 code=0x7ffc0000 [ 64.985651][ T29] audit: type=1326 audit(1748042912.144:1521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4958 comm="syz.3.523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0f4b1e969 code=0x7ffc0000 [ 65.010211][ T29] audit: type=1326 audit(1748042912.154:1522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4958 comm="syz.3.523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb0f4b1e969 code=0x7ffc0000 [ 65.034175][ T29] audit: type=1326 audit(1748042912.154:1523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4958 comm="syz.3.523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0f4b1e969 code=0x7ffc0000 [ 65.058116][ T29] audit: type=1326 audit(1748042912.154:1524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4958 comm="syz.3.523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0f4b1e969 code=0x7ffc0000 [ 65.082411][ T29] audit: type=1326 audit(1748042912.154:1525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4958 comm="syz.3.523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb0f4b1e969 code=0x7ffc0000 [ 65.083838][ T4946] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.518: Failed to acquire dquot type 1 [ 65.105892][ T29] audit: type=1326 audit(1748042912.154:1526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4958 comm="syz.3.523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0f4b1e969 code=0x7ffc0000 [ 65.140916][ T29] audit: type=1326 audit(1748042912.154:1527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4958 comm="syz.3.523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0f4b1e969 code=0x7ffc0000 [ 65.169455][ T4946] EXT4-fs (loop1): 1 truncate cleaned up [ 65.194621][ T4946] ext4 filesystem being mounted at /115/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.226012][ T4963] netlink: set zone limit has 4 unknown bytes [ 65.360109][ T4967] netlink: 8 bytes leftover after parsing attributes in process `syz.0.520'. [ 65.395030][ T4968] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.518: Failed to acquire dquot type 1 [ 65.753184][ T3486] EXT4-fs error (device loop1): ext4_release_dquot:6971: comm kworker/u8:15: Failed to release dquot type 1 [ 66.107481][ T3306] udevd[3306]: symlink '../../loop1' '/dev/disk/by-diskseq/197.tmp-b7:1' failed: Read-only file system [ 66.207263][ T4996] loop4: detected capacity change from 0 to 1024 [ 66.301480][ T3577] udevd[3577]: symlink '../../loop1' '/dev/disk/by-diskseq/197.tmp-b7:1' failed: Read-only file system [ 66.339679][ T4996] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm +}[@: Failed to acquire dquot type 0 [ 66.420945][ T3306] udevd[3306]: symlink '../../loop4' '/dev/disk/by-diskseq/198.tmp-b7:4' failed: Read-only file system [ 66.505081][ T4996] EXT4-fs error (device loop4): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 66.573472][ T3306] udevd[3306]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 66.665788][ T4996] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #13: comm +}[@: corrupted inode contents [ 66.695800][ T3577] udevd[3577]: symlink '../../loop4' '/dev/disk/by-diskseq/198.tmp-b7:4' failed: Read-only file system [ 66.730377][ T4996] EXT4-fs error (device loop4): ext4_dirty_inode:6103: inode #13: comm +}[@: mark_inode_dirty error [ 66.773122][ T3577] udevd[3577]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 66.788022][ T3306] udevd[3306]: symlink '../../loop1' '/dev/disk/by-diskseq/197.tmp-b7:1' failed: Read-only file system [ 66.810635][ T4996] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #13: comm +}[@: corrupted inode contents [ 66.860762][ T4996] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #13: comm +}[@: mark_inode_dirty error [ 66.904394][ T3577] udevd[3577]: symlink '../../loop1' '/dev/disk/by-diskseq/197.tmp-b7:1' failed: Read-only file system [ 66.926025][ T4996] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #13: comm +}[@: corrupted inode contents [ 66.982487][ T4996] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 67.025216][ T4996] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #13: comm +}[@: corrupted inode contents [ 67.041598][ T3577] udevd[3577]: symlink '../../loop1' '/dev/disk/by-diskseq/197.tmp-b7:1' failed: Read-only file system [ 67.095529][ T4996] EXT4-fs error (device loop4): ext4_truncate:4255: inode #13: comm +}[@: mark_inode_dirty error [ 67.139138][ T3577] udevd[3577]: symlink '../../loop1' '/dev/disk/by-diskseq/197.tmp-b7:1' failed: Read-only file system [ 67.159608][ T5015] loop1: detected capacity change from 0 to 1024 [ 67.175420][ T4996] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 67.208077][ T4996] EXT4-fs (loop4): 1 truncate cleaned up [ 67.248523][ T4996] ext4: Unknown parameter ' Z* m.Dc8'@C9G9?9S{1Jլ5 æԌqqY糔' [ 67.508481][ T5032] loop1: detected capacity change from 0 to 512 [ 67.552590][ T9] hid (null): unknown global tag 0xd [ 67.558030][ T9] hid (null): unknown global tag 0xe [ 67.572092][ T9] hid-generic 0002:FFFFFF16:0009.000F: unknown global tag 0xd [ 67.579953][ T9] hid-generic 0002:FFFFFF16:0009.000F: item 0 4 1 13 parsing failed [ 67.598661][ T5032] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 67.605493][ T9] hid-generic 0002:FFFFFF16:0009.000F: probe with driver hid-generic failed with error -22 [ 67.620284][ T5032] System zones: 0-2, 18-18, 34-34 [ 67.629159][ T5044] netlink: set zone limit has 4 unknown bytes [ 67.652972][ T5032] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.548: bg 0: block 248: padding at end of block bitmap is not set [ 67.671442][ T5032] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.548: Failed to acquire dquot type 1 [ 67.683826][ T5032] EXT4-fs (loop1): 1 truncate cleaned up [ 67.690084][ T5032] ext4 filesystem being mounted at /123/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.861073][ T5050] vhci_hcd: invalid port number 96 [ 67.866382][ T5050] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 68.715398][ T5032] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.548: Failed to acquire dquot type 1 [ 68.746055][ T3321] EXT4-fs unmount: 11 callbacks suppressed [ 68.746071][ T3321] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.763977][ T3535] EXT4-fs error (device loop1): ext4_release_dquot:6971: comm kworker/u8:54: Failed to release dquot type 1 [ 68.845757][ T5077] tipc: Enabling of bearer rejected, already enabled [ 68.911976][ T5079] loop0: detected capacity change from 0 to 128 [ 68.924888][ T5078] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 68.932876][ T5078] FAT-fs (loop0): Filesystem has been set read-only [ 68.952386][ T5081] loop1: detected capacity change from 0 to 1024 [ 68.959038][ T5078] bio_check_eod: 14 callbacks suppressed [ 68.959054][ T5078] syz.0.567: attempt to access beyond end of device [ 68.959054][ T5078] loop0: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 68.979988][ T5078] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 68.987965][ T5078] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 68.998548][ T5081] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.037004][ T5079] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 69.064116][ T5079] syz.0.567: attempt to access beyond end of device [ 69.064116][ T5079] loop0: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 69.100496][ T5079] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 69.108553][ T5079] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 69.116917][ T5079] syz.0.567: attempt to access beyond end of device [ 69.116917][ T5079] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 69.130250][ T5079] syz.0.567: attempt to access beyond end of device [ 69.130250][ T5079] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 69.144957][ T3321] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.145210][ T5079] syz.0.567: attempt to access beyond end of device [ 69.145210][ T5079] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 69.167542][ T5078] syz.0.567: attempt to access beyond end of device [ 69.167542][ T5078] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 69.181380][ T5079] syz.0.567: attempt to access beyond end of device [ 69.181380][ T5079] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 69.236423][ T5078] syz.0.567: attempt to access beyond end of device [ 69.236423][ T5078] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 69.273709][ T5078] syz.0.567: attempt to access beyond end of device [ 69.273709][ T5078] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 69.345198][ T5079] syz.0.567: attempt to access beyond end of device [ 69.345198][ T5079] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 69.455747][ T5098] vhci_hcd: invalid port number 96 [ 69.461040][ T5098] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 69.476412][ T5100] loop0: detected capacity change from 0 to 128 [ 69.648649][ T5106] IPv6: NLM_F_CREATE should be specified when creating new route [ 69.665877][ T5118] tipc: Started in network mode [ 69.670922][ T5118] tipc: Node identity ac14140f, cluster identity 4711 [ 69.671881][ T3392] hid (null): unknown global tag 0xd [ 69.677871][ T5118] tipc: New replicast peer: 255.255.255.255 [ 69.689214][ T3392] hid-generic 0002:FFFFFF16:0009.0010: unknown global tag 0xd [ 69.689391][ T5118] tipc: Enabled bearer , priority 10 [ 69.696780][ T3392] hid-generic 0002:FFFFFF16:0009.0010: item 0 4 1 13 parsing failed [ 69.708314][ T3392] hid-generic 0002:FFFFFF16:0009.0010: probe with driver hid-generic failed with error -22 [ 69.724875][ T5115] loop4: detected capacity change from 0 to 512 [ 69.732066][ T5115] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 69.750330][ T5115] EXT4-fs error (device loop4): xattr_find_entry:333: inode #15: comm syz.4.575: corrupted xattr entries [ 69.762590][ T5115] EXT4-fs (loop4): Remounting filesystem read-only [ 69.769278][ T5115] EXT4-fs (loop4): 1 truncate cleaned up [ 69.775511][ T5115] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.852037][ T5128] netlink: set zone limit has 4 unknown bytes [ 69.876913][ T5130] loop3: detected capacity change from 0 to 128 [ 69.904031][ T5129] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 69.911935][ T5129] FAT-fs (loop3): Filesystem has been set read-only [ 69.919379][ T5129] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 69.927346][ T5129] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 69.937297][ T5130] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 69.945573][ T5130] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 69.953725][ T5130] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 70.015033][ T5132] loop3: detected capacity change from 0 to 128 [ 70.027501][ T5131] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 70.035785][ T5131] FAT-fs (loop3): Filesystem has been set read-only [ 70.042722][ T5131] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 70.050742][ T5131] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 70.060457][ T5132] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 70.069387][ T5132] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 70.077773][ T5132] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 70.132593][ T5134] syz2: rxe_newlink: already configured on veth0_to_bond [ 70.267403][ T5141] loop1: detected capacity change from 0 to 128 [ 70.300373][ T29] kauditd_printk_skb: 76 callbacks suppressed [ 70.300390][ T29] audit: type=1326 audit(1748042917.484:1594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5123 comm="syz.0.583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f1719e969 code=0x7ffc0000 [ 70.330077][ T29] audit: type=1326 audit(1748042917.484:1595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5123 comm="syz.0.583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f1719e969 code=0x7ffc0000 [ 70.439913][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.495065][ T5145] loop1: detected capacity change from 0 to 512 [ 70.501752][ T3392] hid (null): unknown global tag 0xd [ 70.513450][ T3392] hid-generic 0002:FFFFFF16:0009.0011: unknown global tag 0xd [ 70.520977][ T3392] hid-generic 0002:FFFFFF16:0009.0011: item 0 4 1 13 parsing failed [ 70.533423][ T3392] hid-generic 0002:FFFFFF16:0009.0011: probe with driver hid-generic failed with error -22 [ 70.676433][ T5145] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 70.685980][ T5151] IPv6: NLM_F_CREATE should be specified when creating new route [ 70.701202][ T5145] System zones: 0-2, 18-18, 34-34 [ 70.730552][ T5145] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.592: bg 0: block 248: padding at end of block bitmap is not set [ 70.766025][ T5145] Quota error (device loop1): write_blk: dquota write failed [ 70.774297][ T5145] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 70.995485][ T5165] loop2: detected capacity change from 0 to 512 [ 71.705136][ T5165] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 71.706817][ T3366] tipc: Node number set to 2886997007 [ 71.719318][ T5145] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.592: Failed to acquire dquot type 1 [ 71.737044][ T5165] EXT4-fs error (device loop2): xattr_find_entry:333: inode #15: comm syz.2.594: corrupted xattr entries [ 71.752349][ T5165] EXT4-fs (loop2): Remounting filesystem read-only [ 71.759211][ T5165] EXT4-fs (loop2): 1 truncate cleaned up [ 71.765293][ T5165] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.784773][ T3306] udevd[3306]: symlink '../../loop4' '/dev/disk/by-diskseq/217.tmp-b7:4' failed: Read-only file system [ 71.806732][ T3306] udevd[3306]: symlink '../../loop3' '/dev/disk/by-diskseq/214.tmp-b7:3' failed: Read-only file system [ 71.828040][ T3577] udevd[3577]: symlink '../../loop2' '/dev/disk/by-diskseq/219.tmp-b7:2' failed: Read-only file system [ 71.840702][ T5145] EXT4-fs (loop1): 1 truncate cleaned up [ 71.851116][ T3577] udevd[3577]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 71.867584][ T5145] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.890725][ T5145] ext4 filesystem being mounted at /130/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 71.921155][ T3306] udevd[3306]: symlink '../../loop4' '/dev/disk/by-diskseq/217.tmp-b7:4' failed: Read-only file system [ 71.951448][ T3577] udevd[3577]: symlink '../../loop0' '/dev/disk/by-diskseq/209.tmp-b7:0' failed: Read-only file system [ 71.960974][ T5145] Quota error (device loop1): write_blk: dquota write failed [ 71.969966][ T5145] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 71.970111][ T5173] loop4: detected capacity change from 0 to 1024 [ 71.979956][ T5145] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.592: Failed to acquire dquot type 1 [ 72.030176][ T5182] loop0: detected capacity change from 0 to 128 [ 72.040270][ T3577] udevd[3577]: symlink '../../loop4' '/dev/disk/by-diskseq/220.tmp-b7:4' failed: Read-only file system [ 72.050582][ T3579] udevd[3579]: symlink '../../loop3' '/dev/disk/by-diskseq/214.tmp-b7:3' failed: Read-only file system [ 72.066615][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.080027][ T3306] udevd[3306]: symlink '../../loop0' '/dev/disk/by-diskseq/221.tmp-b7:0' failed: Read-only file system [ 72.092087][ T3321] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.104911][ T3306] udevd[3306]: symlink '../../loop0' '/dev/disk/by-diskseq/221.tmp-b7:0' failed: Read-only file system [ 72.121203][ T3535] Quota error (device loop1): do_check_range: Getting block 0 out of range 1-5 [ 72.130251][ T3535] EXT4-fs error (device loop1): ext4_release_dquot:6971: comm kworker/u8:54: Failed to release dquot type 1 [ 72.145196][ T5173] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.171544][ T5179] IPv6: NLM_F_CREATE should be specified when creating new route [ 72.183736][ T5181] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 72.191668][ T5181] FAT-fs (loop0): Filesystem has been set read-only [ 72.217692][ T5181] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 72.225753][ T5181] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 72.235655][ T5182] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 72.243579][ T5182] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 72.243731][ T5185] loop3: detected capacity change from 0 to 512 [ 72.251437][ T5182] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 72.260668][ T5185] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 72.277713][ T5185] EXT4-fs error (device loop3): xattr_find_entry:333: inode #15: comm syz.3.602: corrupted xattr entries [ 72.293271][ T5185] EXT4-fs (loop3): Remounting filesystem read-only [ 72.300028][ T5185] EXT4-fs (loop3): 1 truncate cleaned up [ 72.306304][ T5185] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.330869][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.400208][ T5199] loop1: detected capacity change from 0 to 128 [ 72.455420][ T5203] loop1: detected capacity change from 0 to 1024 [ 72.484232][ T5203] Quota error (device loop1): do_check_range: Getting block 64 out of range 1-5 [ 72.493512][ T5203] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 72.503022][ T5203] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm +}[@: Failed to acquire dquot type 0 [ 72.518983][ T5203] EXT4-fs error (device loop1): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 72.535131][ T5203] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #13: comm +}[@: corrupted inode contents [ 72.549192][ T5203] EXT4-fs error (device loop1): ext4_dirty_inode:6103: inode #13: comm +}[@: mark_inode_dirty error [ 72.562010][ T5203] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #13: comm +}[@: corrupted inode contents [ 72.574871][ T5203] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #13: comm +}[@: mark_inode_dirty error [ 72.586118][ T5203] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #13: comm +}[@: corrupted inode contents [ 72.598995][ T5203] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 72.608127][ T5203] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #13: comm +}[@: corrupted inode contents [ 72.621379][ T5203] EXT4-fs error (device loop1): ext4_truncate:4255: inode #13: comm +}[@: mark_inode_dirty error [ 72.634689][ T5203] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 72.644310][ T5203] EXT4-fs (loop1): 1 truncate cleaned up [ 72.650644][ T5203] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.665474][ T5203] ext4: Unknown parameter ' Z* m.Dc8'@C9G9?9S{1Jլ5 æԌqqY糔' [ 72.691415][ T3321] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.814555][ T3392] hid (null): unknown global tag 0xd [ 72.819963][ T3392] hid (null): unknown global tag 0xe [ 72.874943][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.888334][ T3392] hid-generic 0002:FFFFFF16:0009.0012: unknown global tag 0xd [ 72.895988][ T3392] hid-generic 0002:FFFFFF16:0009.0012: item 0 4 1 13 parsing failed [ 72.996616][ T3392] hid-generic 0002:FFFFFF16:0009.0012: probe with driver hid-generic failed with error -22 [ 73.070558][ T10] hid (null): unknown global tag 0xd [ 73.076319][ T10] hid (null): unknown global tag 0xe [ 73.165501][ T10] hid-generic 0002:FFFFFF16:0009.0013: unknown global tag 0xd [ 73.173170][ T10] hid-generic 0002:FFFFFF16:0009.0013: item 0 4 1 13 parsing failed [ 73.279753][ T10] hid-generic 0002:FFFFFF16:0009.0013: probe with driver hid-generic failed with error -22 [ 73.465760][ T5228] loop2: detected capacity change from 0 to 128 [ 73.480455][ T5230] loop4: detected capacity change from 0 to 128 [ 73.506598][ T5232] loop1: detected capacity change from 0 to 1024 [ 73.526710][ T5227] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 73.535376][ T5227] FAT-fs (loop2): Filesystem has been set read-only [ 73.559290][ T5229] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 73.567282][ T5229] FAT-fs (loop4): Filesystem has been set read-only [ 73.599603][ T5232] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.618238][ T5227] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 73.626360][ T5227] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 73.639950][ T5229] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 73.648102][ T5229] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 73.674488][ T5228] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 73.686511][ T5237] vhci_hcd: invalid port number 96 [ 73.692067][ T5237] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 73.706628][ T5230] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 73.724176][ T5228] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 73.732146][ T5228] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 73.740167][ T5230] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 73.748449][ T5230] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 73.767066][ T3321] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.876130][ T5242] loop1: detected capacity change from 0 to 1024 [ 73.896237][ T5245] loop2: detected capacity change from 0 to 128 [ 73.926294][ T5242] Quota error (device loop1): do_check_range: Getting block 64 out of range 1-5 [ 73.935578][ T5242] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm +}[@: Failed to acquire dquot type 0 [ 73.972767][ T5245] bio_check_eod: 69 callbacks suppressed [ 73.972806][ T5245] syz.2.627: attempt to access beyond end of device [ 73.972806][ T5245] loop2: rw=0, sector=2069, nr_sectors = 1 limit=128 [ 74.023096][ T5242] EXT4-fs error (device loop1): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 74.059668][ T5242] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #13: comm +}[@: corrupted inode contents [ 74.120201][ T5242] EXT4-fs error (device loop1): ext4_dirty_inode:6103: inode #13: comm +}[@: mark_inode_dirty error [ 74.161123][ T5242] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #13: comm +}[@: corrupted inode contents [ 74.200725][ T5242] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #13: comm +}[@: mark_inode_dirty error [ 74.246747][ T5242] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #13: comm +}[@: corrupted inode contents [ 74.285006][ T5242] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 74.317483][ T5242] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #13: comm +}[@: corrupted inode contents [ 74.385980][ T5242] EXT4-fs error (device loop1): ext4_truncate:4255: inode #13: comm +}[@: mark_inode_dirty error [ 74.434513][ T5242] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 74.518892][ T5257] netlink: 8 bytes leftover after parsing attributes in process `syz.2.630'. [ 74.661964][ T5242] EXT4-fs (loop1): 1 truncate cleaned up [ 74.672794][ T5242] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.716973][ T10] hid (null): unknown global tag 0xd [ 74.722389][ T10] hid (null): unknown global tag 0xe [ 74.736253][ T5242] ext4: Unknown parameter ' Z* m.Dc8'@C9G9?9S{1Jլ5 æԌqqY糔' [ 74.740993][ T10] hid-generic 0002:FFFFFF16:0009.0014: unknown global tag 0xd [ 74.758076][ T10] hid-generic 0002:FFFFFF16:0009.0014: item 0 4 1 13 parsing failed [ 74.783201][ T10] hid-generic 0002:FFFFFF16:0009.0014: probe with driver hid-generic failed with error -22 [ 74.798194][ T3321] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.904611][ T10] hid (null): unknown global tag 0xd [ 74.915796][ T10] hid-generic 0002:FFFFFF16:0009.0015: unknown global tag 0xd [ 74.923770][ T10] hid-generic 0002:FFFFFF16:0009.0015: item 0 4 1 13 parsing failed [ 74.946721][ T10] hid-generic 0002:FFFFFF16:0009.0015: probe with driver hid-generic failed with error -22 [ 74.984681][ T5273] loop4: detected capacity change from 0 to 1024 [ 75.011693][ T5273] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm +}[@: Failed to acquire dquot type 0 [ 75.025098][ T5273] EXT4-fs error (device loop4): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 75.041556][ T5273] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #13: comm +}[@: corrupted inode contents [ 75.050033][ T5276] tipc: Enabling of bearer rejected, already enabled [ 75.068850][ T5273] EXT4-fs error (device loop4): ext4_dirty_inode:6103: inode #13: comm +}[@: mark_inode_dirty error [ 75.086832][ T5273] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #13: comm +}[@: corrupted inode contents [ 75.099178][ T5273] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #13: comm +}[@: mark_inode_dirty error [ 75.111981][ T5273] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #13: comm +}[@: corrupted inode contents [ 75.147631][ T5273] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 75.172442][ T5273] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #13: comm +}[@: corrupted inode contents [ 75.186260][ T5273] EXT4-fs error (device loop4): ext4_truncate:4255: inode #13: comm +}[@: mark_inode_dirty error [ 75.199458][ T5273] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 75.211082][ T5273] EXT4-fs (loop4): 1 truncate cleaned up [ 75.217830][ T5273] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.236470][ T5283] syz0: rxe_newlink: already configured on veth0_to_bond [ 75.263417][ T5278] IPv6: NLM_F_CREATE should be specified when creating new route [ 75.274152][ T5273] ext4: Unknown parameter ' Z* m.Dc8'@C9G9?9S{1Jլ5 æԌqqY糔' [ 75.326575][ T5287] loop0: detected capacity change from 0 to 512 [ 75.333513][ T5287] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 75.345142][ T5291] loop3: detected capacity change from 0 to 1024 [ 75.352291][ T5287] EXT4-fs error (device loop0): xattr_find_entry:333: inode #15: comm syz.0.638: corrupted xattr entries [ 75.365583][ T5287] EXT4-fs (loop0): Remounting filesystem read-only [ 75.372165][ T5287] EXT4-fs (loop0): 1 truncate cleaned up [ 75.378449][ T5287] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.405187][ T5291] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.423461][ T5296] loop1: detected capacity change from 0 to 1024 [ 75.436556][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.445989][ T5296] __quota_error: 5 callbacks suppressed [ 75.446024][ T5296] Quota error (device loop1): do_check_range: Getting block 64 out of range 1-5 [ 75.461494][ T5296] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 75.470946][ T5296] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm +}[@: Failed to acquire dquot type 0 [ 75.482515][ T5296] EXT4-fs error (device loop1): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 75.497820][ T5296] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #13: comm +}[@: corrupted inode contents [ 75.510391][ T5296] EXT4-fs error (device loop1): ext4_dirty_inode:6103: inode #13: comm +}[@: mark_inode_dirty error [ 75.523656][ T5296] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #13: comm +}[@: corrupted inode contents [ 75.536111][ T5296] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #13: comm +}[@: mark_inode_dirty error [ 75.548483][ T5296] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #13: comm +}[@: corrupted inode contents [ 75.552519][ T5301] loop2: detected capacity change from 0 to 128 [ 75.561395][ T5296] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 75.575605][ T5296] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #13: comm +}[@: corrupted inode contents [ 75.592667][ T5296] EXT4-fs error (device loop1): ext4_truncate:4255: inode #13: comm +}[@: mark_inode_dirty error [ 75.605346][ T5300] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 75.613743][ T5300] FAT-fs (loop2): Filesystem has been set read-only [ 75.621022][ T5296] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 75.638678][ T5296] EXT4-fs (loop1): 1 truncate cleaned up [ 75.644961][ T5296] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.649852][ T5300] syz.2.644: attempt to access beyond end of device [ 75.649852][ T5300] loop2: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 75.672044][ T5300] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 75.680056][ T5300] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 75.689020][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.696426][ T5296] ext4: Unknown parameter ' Z* m.Dc8'@C9G9?9S{1Jլ5 æԌqqY糔' [ 75.711592][ T5301] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 75.722636][ T5301] syz.2.644: attempt to access beyond end of device [ 75.722636][ T5301] loop2: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 75.745811][ T3321] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.747572][ T5300] syz.2.644: attempt to access beyond end of device [ 75.747572][ T5300] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 75.770561][ T5301] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 75.778706][ T5301] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 75.799268][ T5300] syz.2.644: attempt to access beyond end of device [ 75.799268][ T5300] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 75.812922][ T5301] syz.2.644: attempt to access beyond end of device [ 75.812922][ T5301] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 75.856566][ T5300] syz.2.644: attempt to access beyond end of device [ 75.856566][ T5300] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 75.869944][ T5301] syz.2.644: attempt to access beyond end of device [ 75.869944][ T5301] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 75.942648][ T5301] syz.2.644: attempt to access beyond end of device [ 75.942648][ T5301] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 75.993171][ T5301] syz.2.644: attempt to access beyond end of device [ 75.993171][ T5301] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 76.022716][ T5314] tipc: Enabling of bearer rejected, already enabled [ 76.075024][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.544540][ T5319] loop4: detected capacity change from 0 to 512 [ 76.556627][ T29] audit: type=1326 audit(1748042923.744:1598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5315 comm="syz.0.649" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3f1719e969 code=0x0 [ 76.607431][ T5319] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 76.607811][ T5321] loop2: detected capacity change from 0 to 128 [ 76.623547][ T5319] System zones: 0-2, 18-18, 34-34 [ 76.653864][ T5317] netlink: 8 bytes leftover after parsing attributes in process `syz.0.649'. [ 76.667511][ T5319] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.650: bg 0: block 248: padding at end of block bitmap is not set [ 76.735250][ T5319] Quota error (device loop4): write_blk: dquota write failed [ 76.742860][ T5319] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 76.761984][ T5319] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.650: Failed to acquire dquot type 1 [ 76.775209][ T5319] EXT4-fs (loop4): 1 truncate cleaned up [ 76.781492][ T5319] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.795228][ T5319] ext4 filesystem being mounted at /114/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.804649][ T3577] udevd[3577]: symlink '../../loop2' '/dev/disk/by-diskseq/254.tmp-b7:2' failed: Read-only file system [ 76.819038][ T5337] loop3: detected capacity change from 0 to 1024 [ 76.823897][ T5341] loop2: detected capacity change from 0 to 1024 [ 76.832148][ T29] audit: type=1400 audit(1748042923.994:1599): avc: denied { create } for pid=5340 comm="syz.2.658" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 76.868069][ T3579] udevd[3579]: symlink '../../loop1' '/dev/disk/by-diskseq/249.tmp-b7:1' failed: Read-only file system [ 76.870593][ T3306] udevd[3306]: symlink '../../loop3' '/dev/disk/by-diskseq/255.tmp-b7:3' failed: Read-only file system [ 76.892817][ T5341] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.893980][ T5345] Quota error (device loop4): write_blk: dquota write failed [ 76.906987][ T5341] netlink: 9412 bytes leftover after parsing attributes in process `syz.2.658'. [ 76.912330][ T5345] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 76.923064][ T3306] udevd[3306]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 76.931341][ T5345] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.650: Failed to acquire dquot type 1 [ 76.949901][ T3306] udevd[3306]: symlink '../../loop3' '/dev/disk/by-diskseq/255.tmp-b7:3' failed: Read-only file system [ 76.966460][ T3577] udevd[3577]: symlink '../../loop2' '/dev/disk/by-diskseq/256.tmp-b7:2' failed: Read-only file system [ 76.966480][ T3306] udevd[3306]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 76.983720][ T5337] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.990771][ T3577] udevd[3577]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 77.031809][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.046868][ T5353] vhci_hcd: invalid port number 96 [ 77.052044][ T5353] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 77.056723][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.069920][ T3486] Quota error (device loop4): do_check_range: Getting block 0 out of range 1-5 [ 77.079146][ T3486] EXT4-fs error (device loop4): ext4_release_dquot:6971: comm kworker/u8:15: Failed to release dquot type 1 [ 77.081760][ T3577] udevd[3577]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 77.108535][ T3577] udevd[3577]: symlink '../../loop2' '/dev/disk/by-diskseq/256.tmp-b7:2' failed: Read-only file system [ 77.144739][ T5360] loop4: detected capacity change from 0 to 128 [ 77.156439][ T5358] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 77.164410][ T5358] FAT-fs (loop4): Filesystem has been set read-only [ 77.172987][ T5358] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 77.177123][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.181096][ T5358] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 77.182499][ T5360] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 77.206639][ T5360] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 77.214646][ T5360] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 77.227368][ T10] hid (null): unknown global tag 0xd [ 77.232820][ T10] hid (null): unknown global tag 0xe [ 77.241819][ T10] hid-generic 0002:FFFFFF16:0009.0016: unknown global tag 0xd [ 77.249416][ T10] hid-generic 0002:FFFFFF16:0009.0016: item 0 4 1 13 parsing failed [ 77.258701][ T10] hid-generic 0002:FFFFFF16:0009.0016: probe with driver hid-generic failed with error -22 [ 77.318392][ T5368] loop3: detected capacity change from 0 to 128 [ 77.385702][ T10] hid (null): unknown global tag 0xd [ 77.391156][ T10] hid (null): unknown global tag 0xe [ 77.411556][ T10] hid-generic 0002:FFFFFF16:0009.0017: unknown global tag 0xd [ 77.419238][ T10] hid-generic 0002:FFFFFF16:0009.0017: item 0 4 1 13 parsing failed [ 77.433834][ T10] hid-generic 0002:FFFFFF16:0009.0017: probe with driver hid-generic failed with error -22 [ 77.646965][ T5395] loop3: detected capacity change from 0 to 1024 [ 77.664371][ T5395] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.758349][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.856624][ T29] audit: type=1326 audit(1748042925.044:1600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5403 comm="syz.4.680" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbd647de969 code=0x0 [ 78.200163][ T5412] loop1: detected capacity change from 0 to 128 [ 78.217269][ T3366] hid (null): unknown global tag 0xd [ 78.223256][ T3366] hid (null): unknown global tag 0xe [ 78.231961][ T5413] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 78.231961][ T5413] program syz.0.681 not setting count and/or reply_len properly [ 78.239818][ T3366] hid-generic 0002:FFFFFF16:0009.0018: unknown global tag 0xd [ 78.253884][ T5413] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5413 comm=syz.0.681 [ 78.256434][ T3366] hid-generic 0002:FFFFFF16:0009.0018: item 0 4 1 13 parsing failed [ 78.278486][ T3366] hid-generic 0002:FFFFFF16:0009.0018: probe with driver hid-generic failed with error -22 [ 78.349622][ T5421] bridge0: entered promiscuous mode [ 78.351598][ T5422] loop1: detected capacity change from 0 to 1024 [ 78.355243][ T5421] pim6reg1: entered allmulticast mode [ 78.368029][ T5421] bridge0: entered allmulticast mode [ 78.423591][ T5422] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.493749][ T3321] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.747763][ T5424] FAULT_INJECTION: forcing a failure. [ 78.747763][ T5424] name failslab, interval 1, probability 0, space 0, times 1 [ 78.762400][ T5424] CPU: 1 UID: 0 PID: 5424 Comm: syz.2.688 Not tainted 6.15.0-rc7-syzkaller-00112-geccf6f2f6ab9 #0 PREEMPT(voluntary) [ 78.762433][ T5424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 78.762449][ T5424] Call Trace: [ 78.762459][ T5424] [ 78.762469][ T5424] __dump_stack+0x1d/0x30 [ 78.762497][ T5424] dump_stack_lvl+0xe8/0x140 [ 78.762517][ T5424] dump_stack+0x15/0x1b [ 78.762535][ T5424] should_fail_ex+0x265/0x280 [ 78.762571][ T5424] should_failslab+0x8c/0xb0 [ 78.762608][ T5424] kmem_cache_alloc_noprof+0x50/0x310 [ 78.762632][ T5424] ? vm_area_dup+0x32/0x230 [ 78.762660][ T5424] vm_area_dup+0x32/0x230 [ 78.762688][ T5424] __split_vma+0xe9/0x610 [ 78.762716][ T5424] vma_modify+0x1a4/0x210 [ 78.762754][ T5424] vma_modify_policy+0x101/0x130 [ 78.762799][ T5424] mbind_range+0x1b8/0x440 [ 78.762831][ T5424] ? mas_find+0x4ea/0x610 [ 78.762863][ T5424] __se_sys_mbind+0x648/0xac0 [ 78.762898][ T5424] __x64_sys_mbind+0x78/0x90 [ 78.762922][ T5424] x64_sys_call+0x14af/0x2fb0 [ 78.762948][ T5424] do_syscall_64+0xd0/0x1a0 [ 78.762977][ T5424] ? clear_bhb_loop+0x40/0x90 [ 78.763003][ T5424] ? clear_bhb_loop+0x40/0x90 [ 78.763025][ T5424] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.763050][ T5424] RIP: 0033:0x7f49f11ce969 [ 78.763079][ T5424] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 78.763102][ T5424] RSP: 002b:00007f49ef837038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 78.763138][ T5424] RAX: ffffffffffffffda RBX: 00007f49f13f5fa0 RCX: 00007f49f11ce969 [ 78.763153][ T5424] RDX: 0000000000000001 RSI: 0000000000600000 RDI: 0000200000000000 [ 78.763165][ T5424] RBP: 00007f49ef837090 R08: 0000000000000000 R09: 0000000000000002 [ 78.763181][ T5424] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 78.763198][ T5424] R13: 0000000000000000 R14: 00007f49f13f5fa0 R15: 00007ffdce75a1a8 [ 78.763223][ T5424] [ 78.764099][ T5451] xt_connbytes: Forcing CT accounting to be enabled [ 78.982437][ T5455] netlink: 8 bytes leftover after parsing attributes in process `syz.1.696'. [ 79.008803][ T5458] loop0: detected capacity change from 0 to 128 [ 79.014157][ T5455] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: invalid value (0) [ 79.025081][ T5455] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: allowed values 1 - 65535 [ 79.036010][ T5457] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 79.044835][ T5457] FAT-fs (loop0): Filesystem has been set read-only [ 79.051683][ T5457] bio_check_eod: 14 callbacks suppressed [ 79.051696][ T5457] syz.0.698: attempt to access beyond end of device [ 79.051696][ T5457] loop0: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 79.074245][ T5457] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 79.082145][ T5457] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 79.091010][ T5451] Cannot find add_set index 0 as target [ 79.153682][ T5458] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 79.165965][ T5458] syz.0.698: attempt to access beyond end of device [ 79.165965][ T5458] loop0: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 79.200670][ T5458] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 79.208625][ T5458] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 79.245471][ T5458] syz.0.698: attempt to access beyond end of device [ 79.245471][ T5458] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 79.294337][ T5458] syz.0.698: attempt to access beyond end of device [ 79.294337][ T5458] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 79.339790][ T5458] syz.0.698: attempt to access beyond end of device [ 79.339790][ T5458] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 79.405342][ T5457] syz.0.698: attempt to access beyond end of device [ 79.405342][ T5457] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 79.420257][ T5458] syz.0.698: attempt to access beyond end of device [ 79.420257][ T5458] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 79.498502][ T5457] syz.0.698: attempt to access beyond end of device [ 79.498502][ T5457] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 79.517813][ T5457] syz.0.698: attempt to access beyond end of device [ 79.517813][ T5457] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 79.570741][ T5462] syz.0.698: attempt to access beyond end of device [ 79.570741][ T5462] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 79.648653][ T3366] hid (null): unknown global tag 0xd [ 79.655069][ T3366] hid-generic 0002:FFFFFF16:0009.0019: unknown global tag 0xd [ 79.662905][ T3366] hid-generic 0002:FFFFFF16:0009.0019: item 0 4 1 13 parsing failed [ 79.702717][ T3366] hid-generic 0002:FFFFFF16:0009.0019: probe with driver hid-generic failed with error -22 [ 79.744316][ T5480] loop0: detected capacity change from 0 to 1024 [ 79.773164][ T5484] loop3: detected capacity change from 0 to 128 [ 79.783482][ T5480] EXT4-fs error (device loop0): ext4_acquire_dquot:6935: comm +}[@: Failed to acquire dquot type 0 [ 79.801442][ T5487] tipc: Enabling of bearer rejected, already enabled [ 79.803263][ T5480] EXT4-fs error (device loop0): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 79.825540][ T5480] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #13: comm +}[@: corrupted inode contents [ 79.837158][ T5480] EXT4-fs error (device loop0): ext4_dirty_inode:6103: inode #13: comm +}[@: mark_inode_dirty error [ 79.855591][ T5480] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #13: comm +}[@: corrupted inode contents [ 79.882800][ T5480] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #13: comm +}[@: mark_inode_dirty error [ 79.910713][ T5480] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #13: comm +}[@: corrupted inode contents [ 79.954699][ T5480] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 79.995266][ T5480] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #13: comm +}[@: corrupted inode contents [ 80.019415][ T5495] $H: renamed from bond0 (while UP) [ 80.027258][ T5495] $H: entered promiscuous mode [ 80.032416][ T5495] bond_slave_0: entered promiscuous mode [ 80.038347][ T5495] bond_slave_1: entered promiscuous mode [ 80.052396][ T5480] EXT4-fs error (device loop0): ext4_truncate:4255: inode #13: comm +}[@: mark_inode_dirty error [ 80.075491][ T5480] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 80.116743][ T5480] EXT4-fs (loop0): 1 truncate cleaned up [ 80.136056][ T5480] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.190288][ T5480] ext4: Unknown parameter ' Z* m.Dc8'@C9G9?9S{1Jլ5 æԌqqY糔' [ 80.309504][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.440052][ T5505] loop0: detected capacity change from 0 to 128 [ 80.476344][ T5504] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 80.484286][ T5504] FAT-fs (loop0): Filesystem has been set read-only [ 80.498867][ T5500] loop3: detected capacity change from 0 to 1024 [ 80.516054][ T5500] EXT4-fs: Ignoring removed bh option [ 80.533164][ T5500] EXT4-fs: inline encryption not supported [ 80.540325][ T5500] EXT4-fs: Ignoring removed i_version option [ 80.577980][ T5504] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 80.586017][ T5504] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 80.602703][ T3366] hid (null): unknown global tag 0xd [ 80.609284][ T3366] hid-generic 0002:FFFFFF16:0009.001A: unknown global tag 0xd [ 80.614144][ T5500] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 80.617006][ T3366] hid-generic 0002:FFFFFF16:0009.001A: item 0 4 1 13 parsing failed [ 80.629212][ T3366] hid-generic 0002:FFFFFF16:0009.001A: probe with driver hid-generic failed with error -22 [ 80.653289][ T5505] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 80.701969][ T5505] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 80.710100][ T5505] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 80.729453][ T5500] EXT4-fs error (device loop3): ext4_map_blocks:709: inode #3: block 1: comm syz.3.715: lblock 1 mapped to illegal pblock 1 (length 1) [ 80.746869][ T5500] __quota_error: 6 callbacks suppressed [ 80.746927][ T5500] Quota error (device loop3): write_blk: dquota write failed [ 80.762412][ T5500] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 80.778899][ T5515] rdma_rxe: rxe_newlink: failed to add veth0_to_bond [ 80.786826][ T5500] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.715: Failed to acquire dquot type 0 [ 80.817896][ T5500] EXT4-fs error (device loop3): ext4_free_blocks:6587: comm syz.3.715: Freeing blocks not in datazone - block = 0, count = 4096 [ 80.845002][ T5500] EXT4-fs error (device loop3): ext4_read_inode_bitmap:139: comm syz.3.715: Invalid inode bitmap blk 0 in block_group 0 [ 80.863847][ T3538] EXT4-fs error (device loop3): ext4_map_blocks:675: inode #3: block 1: comm kworker/u8:57: lblock 1 mapped to illegal pblock 1 (length 1) [ 80.901933][ T5500] EXT4-fs error (device loop3) in ext4_free_inode:361: Corrupt filesystem [ 80.912896][ T3538] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 80.921362][ T3538] EXT4-fs error (device loop3): ext4_release_dquot:6971: comm kworker/u8:57: Failed to release dquot type 0 [ 80.934454][ T5500] EXT4-fs (loop3): 1 orphan inode deleted [ 80.953397][ T5522] loop1: detected capacity change from 0 to 512 [ 80.963195][ T5517] FAULT_INJECTION: forcing a failure. [ 80.963195][ T5517] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 80.976576][ T5517] CPU: 0 UID: 0 PID: 5517 Comm: syz.0.721 Not tainted 6.15.0-rc7-syzkaller-00112-geccf6f2f6ab9 #0 PREEMPT(voluntary) [ 80.976619][ T5517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 80.976636][ T5517] Call Trace: [ 80.976643][ T5517] [ 80.976650][ T5517] __dump_stack+0x1d/0x30 [ 80.976674][ T5517] dump_stack_lvl+0xe8/0x140 [ 80.976694][ T5517] dump_stack+0x15/0x1b [ 80.976766][ T5517] should_fail_ex+0x265/0x280 [ 80.976808][ T5517] should_fail+0xb/0x20 [ 80.976905][ T5517] should_fail_usercopy+0x1a/0x20 [ 80.976932][ T5517] _copy_from_iter+0xcf/0xdd0 [ 80.976992][ T5517] ? __build_skb_around+0x1a0/0x200 [ 80.977047][ T5517] skb_copy_datagram_from_iter+0xb1/0x490 [ 80.977125][ T5517] tun_get_user+0x10b6/0x24d0 [ 80.977161][ T5517] ? ref_tracker_alloc+0x1f2/0x2f0 [ 80.977199][ T5517] ? avc_policy_seqno+0x15/0x30 [ 80.977255][ T5517] tun_chr_write_iter+0x15e/0x210 [ 80.977337][ T5517] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 80.977361][ T5517] vfs_write+0x4a0/0x8d0 [ 80.977426][ T5517] ksys_write+0xda/0x1a0 [ 80.977531][ T5517] __x64_sys_write+0x40/0x50 [ 80.977559][ T5517] x64_sys_call+0x2cdd/0x2fb0 [ 80.977580][ T5517] do_syscall_64+0xd0/0x1a0 [ 80.977636][ T5517] ? clear_bhb_loop+0x40/0x90 [ 80.977662][ T5517] ? clear_bhb_loop+0x40/0x90 [ 80.977683][ T5517] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.977742][ T5517] RIP: 0033:0x7f3f1719e969 [ 80.977762][ T5517] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 80.977781][ T5517] RSP: 002b:00007f3f15807038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 80.977800][ T5517] RAX: ffffffffffffffda RBX: 00007f3f173c5fa0 RCX: 00007f3f1719e969 [ 80.977812][ T5517] RDX: 0000000000000066 RSI: 0000000000000000 RDI: 0000000000000006 [ 80.977823][ T5517] RBP: 00007f3f15807090 R08: 0000000000000000 R09: 0000000000000000 [ 80.977891][ T5517] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 80.977902][ T5517] R13: 0000000000000000 R14: 00007f3f173c5fa0 R15: 00007ffe402cb058 [ 80.977921][ T5517] [ 81.197420][ T5500] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.251997][ T23] hid (null): unknown global tag 0xd [ 81.257470][ T23] hid (null): unknown global tag 0xe [ 81.265938][ T23] hid-generic 0002:FFFFFF16:0009.001B: unknown global tag 0xd [ 81.273536][ T23] hid-generic 0002:FFFFFF16:0009.001B: item 0 4 1 13 parsing failed [ 81.292973][ T5522] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 81.301268][ T5522] System zones: 0-2, 18-18, 34-34 [ 81.310525][ T5534] loop0: detected capacity change from 0 to 1024 [ 81.323896][ T5522] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.722: bg 0: block 248: padding at end of block bitmap is not set [ 81.355747][ T5522] Quota error (device loop1): write_blk: dquota write failed [ 81.359959][ T23] hid-generic 0002:FFFFFF16:0009.001B: probe with driver hid-generic failed with error -22 [ 81.363301][ T5522] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 81.383475][ T5522] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.722: Failed to acquire dquot type 1 [ 81.395723][ T5522] EXT4-fs (loop1): 1 truncate cleaned up [ 81.398909][ T5534] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.401885][ T5522] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.417819][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.426190][ T5522] ext4 filesystem being mounted at /158/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.468799][ T23] hid (null): unknown global tag 0xd [ 81.478986][ T23] hid-generic 0002:FFFFFF16:0009.001C: unknown global tag 0xd [ 81.483092][ T5522] Quota error (device loop1): write_blk: dquota write failed [ 81.486672][ T23] hid-generic 0002:FFFFFF16:0009.001C: item 0 4 1 13 parsing failed [ 81.493955][ T5522] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 81.511934][ T5522] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.722: Failed to acquire dquot type 1 [ 81.517647][ T23] hid-generic 0002:FFFFFF16:0009.001C: probe with driver hid-generic failed with error -22 [ 81.673405][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.693217][ T3321] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.702406][ T3486] Quota error (device loop1): do_check_range: Getting block 0 out of range 1-5 [ 81.711452][ T3486] EXT4-fs error (device loop1): ext4_release_dquot:6971: comm kworker/u8:15: Failed to release dquot type 1 [ 81.726775][ T5550] loop2: detected capacity change from 0 to 512 [ 81.734045][ T5550] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 81.756337][ T5550] EXT4-fs error (device loop2): xattr_find_entry:333: inode #15: comm syz.2.732: corrupted xattr entries [ 81.767972][ T5550] EXT4-fs (loop2): Remounting filesystem read-only [ 81.774599][ T5550] EXT4-fs (loop2): 1 truncate cleaned up [ 81.780682][ T5550] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.836510][ T3577] udevd[3577]: symlink '../../loop0' '/dev/disk/by-diskseq/282.tmp-b7:0' failed: Read-only file system [ 81.847972][ T3306] udevd[3306]: symlink '../../loop1' '/dev/disk/by-diskseq/279.tmp-b7:1' failed: Read-only file system [ 81.880221][ T3577] udevd[3577]: symlink '../../loop0' '/dev/disk/by-diskseq/282.tmp-b7:0' failed: Read-only file system [ 81.894872][ T5557] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.906535][ T5558] syz0: rxe_newlink: already configured on veth0_to_bond [ 82.204989][ T5557] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.355875][ T5557] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.434494][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.466555][ T3577] udevd[3577]: symlink '../../loop2' '/dev/disk/by-diskseq/283.tmp-b7:2' failed: Read-only file system [ 82.491436][ T5565] loop2: detected capacity change from 0 to 1024 [ 82.505970][ T3306] udevd[3306]: symlink '../../loop0' '/dev/disk/by-diskseq/282.tmp-b7:0' failed: Read-only file system [ 82.519313][ T5557] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.532753][ T3309] udevd[3309]: symlink '../../loop4' '/dev/disk/by-diskseq/261.tmp-b7:4' failed: Read-only file system [ 82.546425][ T3579] udevd[3579]: symlink '../../loop1' '/dev/disk/by-diskseq/284.tmp-b7:1' failed: Read-only file system [ 82.562166][ T5569] xt_hashlimit: max too large, truncated to 1048576 [ 82.565258][ T5565] Quota error (device loop2): do_check_range: Getting block 64 out of range 1-5 [ 82.571088][ T3577] udevd[3577]: symlink '../../loop2' '/dev/disk/by-diskseq/283.tmp-b7:2' failed: Read-only file system [ 82.577984][ T5565] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 82.590444][ T3577] udevd[3577]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 82.599231][ T5565] EXT4-fs error (device loop2): ext4_acquire_dquot:6935: comm +}[@: Failed to acquire dquot type 0 [ 82.617663][ T3577] udevd[3577]: symlink '../../loop2' '/dev/disk/by-diskseq/285.tmp-b7:2' failed: Read-only file system [ 82.623127][ T5569] FAULT_INJECTION: forcing a failure. [ 82.623127][ T5569] name failslab, interval 1, probability 0, space 0, times 0 [ 82.645121][ T5569] CPU: 1 UID: 0 PID: 5569 Comm: syz.1.738 Not tainted 6.15.0-rc7-syzkaller-00112-geccf6f2f6ab9 #0 PREEMPT(voluntary) [ 82.645204][ T5569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 82.645220][ T5569] Call Trace: [ 82.645228][ T5569] [ 82.645238][ T5569] __dump_stack+0x1d/0x30 [ 82.645266][ T5569] dump_stack_lvl+0xe8/0x140 [ 82.645291][ T5569] dump_stack+0x15/0x1b [ 82.645308][ T5569] should_fail_ex+0x265/0x280 [ 82.645416][ T5569] should_failslab+0x8c/0xb0 [ 82.645459][ T5569] __kvmalloc_node_noprof+0x126/0x4d0 [ 82.645488][ T5569] ? nf_hook_entries_grow+0x1bc/0x440 [ 82.645528][ T5569] ? _raw_spin_unlock_irqrestore+0x2b/0x60 [ 82.645633][ T5569] nf_hook_entries_grow+0x1bc/0x440 [ 82.645668][ T5569] __nf_register_net_hook+0x18e/0x480 [ 82.645698][ T5569] ? queue_delayed_work_on+0x106/0x170 [ 82.645725][ T5569] nf_register_net_hook+0x88/0x130 [ 82.645900][ T5569] nf_register_net_hooks+0x44/0x150 [ 82.645942][ T5569] nf_defrag_ipv4_enable+0x6e/0xc0 [ 82.645977][ T5569] nf_ct_netns_do_get+0x13c/0x380 [ 82.646014][ T5569] nf_ct_netns_get+0x87/0xc0 [ 82.646126][ T5569] conntrack_mt_check+0x35/0xa0 [ 82.646161][ T5569] xt_check_match+0x2aa/0x4f0 [ 82.646241][ T5569] ? xt_find_match+0x1d1/0x210 [ 82.646274][ T5569] ? xt_find_match+0x1b5/0x210 [ 82.646362][ T5569] translate_table+0xa9c/0xf90 [ 82.646407][ T5569] ? _copy_from_user+0x89/0xb0 [ 82.646434][ T5569] do_ipt_set_ctl+0x66f/0x820 [ 82.646507][ T5569] nf_setsockopt+0x196/0x1b0 [ 82.646580][ T5569] ip_setsockopt+0x102/0x110 [ 82.646612][ T5569] udp_setsockopt+0x99/0xb0 [ 82.646705][ T5569] sock_common_setsockopt+0x66/0x80 [ 82.646821][ T5569] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 82.646953][ T5569] __sys_setsockopt+0x181/0x200 [ 82.646976][ T5569] __x64_sys_setsockopt+0x64/0x80 [ 82.647042][ T5569] x64_sys_call+0x2bd5/0x2fb0 [ 82.647069][ T5569] do_syscall_64+0xd0/0x1a0 [ 82.647140][ T5569] ? clear_bhb_loop+0x40/0x90 [ 82.647165][ T5569] ? clear_bhb_loop+0x40/0x90 [ 82.647190][ T5569] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.647222][ T5569] RIP: 0033:0x7f1a7126e969 [ 82.647237][ T5569] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 82.647255][ T5569] RSP: 002b:00007f1a6f8d7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 82.647337][ T5569] RAX: ffffffffffffffda RBX: 00007f1a71495fa0 RCX: 00007f1a7126e969 [ 82.647354][ T5569] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000005 [ 82.647371][ T5569] RBP: 00007f1a6f8d7090 R08: 00000000000003c8 R09: 0000000000000000 [ 82.647388][ T5569] R10: 0000200000000540 R11: 0000000000000246 R12: 0000000000000001 [ 82.647403][ T5569] R13: 0000000000000000 R14: 00007f1a71495fa0 R15: 00007ffdb793fec8 [ 82.647422][ T5569] [ 82.647431][ T5569] xt_conntrack: cannot load conntrack support for proto=2 [ 82.675326][ T5565] EXT4-fs error (device loop2): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 82.935871][ T5576] loop1: detected capacity change from 0 to 512 [ 82.956226][ T5565] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #13: comm +}[@: corrupted inode contents [ 82.968583][ T5576] EXT4-fs: Ignoring removed oldalloc option [ 82.976041][ T5576] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 82.984485][ T5565] EXT4-fs error (device loop2): ext4_dirty_inode:6103: inode #13: comm +}[@: mark_inode_dirty error [ 83.007093][ T5565] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #13: comm +}[@: corrupted inode contents [ 83.013541][ T5557] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.028350][ T5565] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #13: comm +}[@: mark_inode_dirty error [ 83.039439][ T5576] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a042c118, mo2=0002] [ 83.048354][ T5557] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.052883][ T5576] System zones: 1-12 [ 83.060788][ T5565] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #13: comm +}[@: corrupted inode contents [ 83.073564][ T5581] tipc: Enabling of bearer rejected, already enabled [ 83.081792][ T5576] EXT4-fs error (device loop1): ext4_iget_extra_inode:4693: inode #15: comm syz.1.741: corrupted in-inode xattr: e_value size too large [ 83.082672][ T5565] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 83.107465][ T5576] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.741: couldn't read orphan inode 15 (err -117) [ 83.115448][ T5557] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.130264][ T5576] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.133459][ T5557] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.162205][ T5565] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #13: comm +}[@: corrupted inode contents [ 83.200763][ T5565] EXT4-fs error (device loop2): ext4_truncate:4255: inode #13: comm +}[@: mark_inode_dirty error [ 83.214289][ T5565] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 83.224874][ T5585] loop4: detected capacity change from 0 to 1024 [ 83.231574][ T5585] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 83.233964][ T5591] IPVS: set_ctl: invalid protocol: 2 10.1.1.2:20001 [ 83.242361][ T5565] EXT4-fs (loop2): 1 truncate cleaned up [ 83.264592][ T5565] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.277630][ T5576] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.319681][ T5565] ext4: Unknown parameter ' Z* m.Dc8'@C9G9?9S{1Jլ5 æԌqqY糔' [ 83.340006][ T5594] rdma_rxe: rxe_newlink: failed to add veth0_to_bond [ 83.422005][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.538518][ T5603] Cannot find add_set index 0 as target [ 83.561723][ T5611] pim6reg1: entered promiscuous mode [ 83.567218][ T5611] pim6reg1: entered allmulticast mode [ 83.581082][ T5603] vhci_hcd: invalid port number 96 [ 83.586742][ T5603] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 83.650782][ T5627] loop2: detected capacity change from 0 to 1024 [ 83.697747][ T5629] IPVS: set_ctl: invalid protocol: 2 10.1.1.2:20001 [ 83.715015][ T5627] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.810311][ T5637] loop1: detected capacity change from 0 to 1024 [ 83.827078][ T5637] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm +}[@: Failed to acquire dquot type 0 [ 83.852243][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.886967][ T5637] EXT4-fs error (device loop1): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 83.909372][ T5637] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #13: comm +}[@: corrupted inode contents [ 83.959346][ T5637] EXT4-fs error (device loop1): ext4_dirty_inode:6103: inode #13: comm +}[@: mark_inode_dirty error [ 83.980562][ T5637] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #13: comm +}[@: corrupted inode contents [ 83.992271][ T5637] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #13: comm +}[@: mark_inode_dirty error [ 84.014282][ T5637] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #13: comm +}[@: corrupted inode contents [ 84.059910][ T5637] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 84.076686][ T5637] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #13: comm +}[@: corrupted inode contents [ 84.103201][ T5637] EXT4-fs error (device loop1): ext4_truncate:4255: inode #13: comm +}[@: mark_inode_dirty error [ 84.116478][ T5637] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 84.144864][ T5637] EXT4-fs (loop1): 1 truncate cleaned up [ 84.151626][ T5637] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.175670][ T5637] ext4: Unknown parameter ' Z* m.Dc8'@C9G9?9S{1Jլ5 æԌqqY糔' [ 84.239718][ T3321] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.249096][ T5659] loop2: detected capacity change from 0 to 512 [ 84.258087][ T5663] IPVS: set_ctl: invalid protocol: 2 10.1.1.2:20001 [ 84.329703][ T5659] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 84.337909][ T5659] System zones: 0-2, 18-18, 34-34 [ 84.351527][ T5670] loop3: detected capacity change from 0 to 1024 [ 84.380869][ T5659] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.773: bg 0: block 248: padding at end of block bitmap is not set [ 84.432028][ T5659] EXT4-fs error (device loop2): ext4_acquire_dquot:6935: comm syz.2.773: Failed to acquire dquot type 1 [ 84.443237][ T5670] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.499280][ T5659] EXT4-fs (loop2): 1 truncate cleaned up [ 84.526327][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.543071][ T5659] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.577802][ T5659] ext4 filesystem being mounted at /161/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.695093][ T5687] EXT4-fs error (device loop2): ext4_acquire_dquot:6935: comm syz.2.773: Failed to acquire dquot type 1 [ 84.753899][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.763277][ T3538] EXT4-fs error (device loop2): ext4_release_dquot:6971: comm kworker/u8:57: Failed to release dquot type 1 [ 85.082663][ T5699] Cannot find add_set index 0 as target [ 85.285905][ T5704] loop1: detected capacity change from 0 to 1024 [ 85.320279][ T5702] vhci_hcd: invalid port number 96 [ 85.325542][ T5702] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 85.376963][ T5704] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm +}[@: Failed to acquire dquot type 0 [ 85.418702][ T5704] EXT4-fs error (device loop1): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 85.434223][ T5704] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #13: comm +}[@: corrupted inode contents [ 85.438814][ T5710] tipc: Started in network mode [ 85.451053][ T5710] tipc: Node identity ac14140f, cluster identity 4711 [ 85.458651][ T5710] tipc: New replicast peer: 255.255.255.255 [ 85.464917][ T5710] tipc: Enabled bearer , priority 10 [ 85.471233][ T5704] EXT4-fs error (device loop1): ext4_dirty_inode:6103: inode #13: comm +}[@: mark_inode_dirty error [ 85.487622][ T5704] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #13: comm +}[@: corrupted inode contents [ 85.512116][ T5715] loop4: detected capacity change from 0 to 1024 [ 85.519584][ T5704] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #13: comm +}[@: mark_inode_dirty error [ 85.540885][ T5704] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #13: comm +}[@: corrupted inode contents [ 85.552869][ T5718] loop2: detected capacity change from 0 to 128 [ 85.559420][ T5704] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 85.570493][ T5704] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #13: comm +}[@: corrupted inode contents [ 85.573167][ T5717] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 85.583069][ T5704] EXT4-fs error (device loop1): ext4_truncate:4255: inode #13: comm +}[@: mark_inode_dirty error [ 85.589989][ T5717] FAT-fs (loop2): Filesystem has been set read-only [ 85.603374][ T5715] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.608099][ T5717] bio_check_eod: 13 callbacks suppressed [ 85.608118][ T5717] syz.2.793: attempt to access beyond end of device [ 85.608118][ T5717] loop2: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 85.639903][ T5717] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 85.647923][ T5717] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 85.648250][ T5704] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 85.658018][ T5718] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 85.667808][ T5722] netlink: set zone limit has 4 unknown bytes [ 85.675608][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.688388][ T5718] syz.2.793: attempt to access beyond end of device [ 85.688388][ T5718] loop2: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 85.704267][ T5718] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 85.712327][ T5718] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 85.713039][ T5704] EXT4-fs (loop1): 1 truncate cleaned up [ 85.720325][ T5718] syz.2.793: attempt to access beyond end of device [ 85.720325][ T5718] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 85.739457][ T5718] syz.2.793: attempt to access beyond end of device [ 85.739457][ T5718] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 85.740711][ T5704] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.754202][ T5717] syz.2.793: attempt to access beyond end of device [ 85.754202][ T5717] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 85.779563][ T5718] syz.2.793: attempt to access beyond end of device [ 85.779563][ T5718] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 85.803320][ T5718] syz.2.793: attempt to access beyond end of device [ 85.803320][ T5718] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 85.812690][ T5725] netlink: 4 bytes leftover after parsing attributes in process `syz.3.795'. [ 85.816702][ T29] kauditd_printk_skb: 131 callbacks suppressed [ 85.816744][ T29] audit: type=1326 audit(1748042932.994:1727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5723 comm="syz.3.795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0f4b1e969 code=0x7ffc0000 [ 85.832739][ T5717] syz.2.793: attempt to access beyond end of device [ 85.832739][ T5717] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 85.856499][ T29] audit: type=1326 audit(1748042932.994:1728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5723 comm="syz.3.795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb0f4b1e969 code=0x7ffc0000 [ 85.856554][ T29] audit: type=1326 audit(1748042932.994:1729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5723 comm="syz.3.795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0f4b1e969 code=0x7ffc0000 [ 85.883437][ T5726] netlink: 4 bytes leftover after parsing attributes in process `syz.3.795'. [ 85.893008][ T29] audit: type=1326 audit(1748042932.994:1730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5723 comm="syz.3.795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fb0f4b1e969 code=0x7ffc0000 [ 85.893045][ T29] audit: type=1326 audit(1748042932.994:1731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5723 comm="syz.3.795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0f4b1e969 code=0x7ffc0000 [ 85.893106][ T29] audit: type=1326 audit(1748042932.994:1732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5723 comm="syz.3.795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fb0f4b1e969 code=0x7ffc0000 [ 85.958500][ T5717] syz.2.793: attempt to access beyond end of device [ 85.958500][ T5717] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 85.988653][ T29] audit: type=1326 audit(1748042933.144:1733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5723 comm="syz.3.795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0f4b1e969 code=0x7ffc0000 [ 85.999102][ T5704] ext4: Unknown parameter ' Z* m.Dc8'@C9G9?9S{1Jլ5 æԌqqY糔' [ 86.009926][ T29] audit: type=1326 audit(1748042933.144:1734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5723 comm="syz.3.795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0f4b1e969 code=0x7ffc0000 [ 86.082798][ T5718] syz.2.793: attempt to access beyond end of device [ 86.082798][ T5718] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 86.098307][ T29] audit: type=1326 audit(1748042933.284:1735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5723 comm="syz.3.795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fb0f4b1e969 code=0x7ffc0000 [ 86.138689][ T3321] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.148774][ T29] audit: type=1326 audit(1748042933.314:1736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5723 comm="syz.3.795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0f4b1e969 code=0x7ffc0000 [ 86.340010][ T3392] hid (null): unknown global tag 0xd [ 86.345878][ T3392] hid (null): unknown global tag 0xe [ 86.355310][ T3392] hid-generic 0002:FFFFFF16:0009.001D: unknown global tag 0xd [ 86.362890][ T3392] hid-generic 0002:FFFFFF16:0009.001D: item 0 4 1 13 parsing failed [ 86.371585][ T3392] hid-generic 0002:FFFFFF16:0009.001D: probe with driver hid-generic failed with error -22 [ 86.422585][ T5749] tipc: Enabling of bearer rejected, already enabled [ 86.539881][ T5757] loop1: detected capacity change from 0 to 1024 [ 86.563670][ T5757] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm +}[@: Failed to acquire dquot type 0 [ 86.587261][ T5757] EXT4-fs error (device loop1): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 86.599682][ T5761] Cannot find add_set index 0 as target [ 86.601895][ T3392] tipc: Node number set to 2886997007 [ 86.615984][ T5757] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #13: comm +}[@: corrupted inode contents [ 86.628882][ T5757] EXT4-fs error (device loop1): ext4_dirty_inode:6103: inode #13: comm +}[@: mark_inode_dirty error [ 86.642649][ T5757] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #13: comm +}[@: corrupted inode contents [ 86.657291][ T5761] vhci_hcd: invalid port number 96 [ 86.662456][ T5761] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 86.674886][ T5757] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #13: comm +}[@: mark_inode_dirty error [ 86.687309][ T5757] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #13: comm +}[@: corrupted inode contents [ 86.701217][ T5757] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 86.711404][ T5757] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #13: comm +}[@: corrupted inode contents [ 86.723284][ T5757] EXT4-fs error (device loop1): ext4_truncate:4255: inode #13: comm +}[@: mark_inode_dirty error [ 86.742835][ T5757] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 86.753909][ T5757] EXT4-fs (loop1): 1 truncate cleaned up [ 86.761489][ T5757] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.772059][ T5763] loop3: detected capacity change from 0 to 128 [ 86.779545][ T5757] ext4: Unknown parameter ' Z* m.Dc8'@C9G9?9S{1Jլ5 æԌqqY糔' [ 86.805652][ T5762] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 86.813728][ T5762] FAT-fs (loop3): Filesystem has been set read-only [ 86.820657][ T5762] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 86.828567][ T5762] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 86.838308][ T5763] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 86.846549][ T5763] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 86.854796][ T5763] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 86.875252][ T3577] udevd[3577]: symlink '../../loop1' '/dev/disk/by-diskseq/306.tmp-b7:1' failed: Read-only file system [ 86.901443][ T3577] udevd[3577]: symlink '../../loop1' '/dev/disk/by-diskseq/306.tmp-b7:1' failed: Read-only file system [ 86.945971][ T3306] udevd[3306]: symlink '../../loop3' '/dev/disk/by-diskseq/307.tmp-b7:3' failed: Read-only file system [ 86.957268][ T3577] udevd[3577]: symlink '../../loop1' '/dev/disk/by-diskseq/308.tmp-b7:1' failed: Read-only file system [ 86.984623][ T3577] udevd[3577]: symlink '../../loop3' '/dev/disk/by-diskseq/307.tmp-b7:3' failed: Read-only file system [ 87.012214][ T3579] udevd[3579]: symlink '../../loop0' '/dev/disk/by-diskseq/282.tmp-b7:0' failed: Read-only file system [ 87.025846][ T3309] udevd[3309]: symlink '../../loop1' '/dev/disk/by-diskseq/308.tmp-b7:1' failed: Read-only file system [ 87.028520][ T3306] udevd[3306]: symlink '../../loop4' '/dev/disk/by-diskseq/303.tmp-b7:4' failed: Read-only file system [ 87.041703][ T3577] udevd[3577]: symlink '../../loop3' '/dev/disk/by-diskseq/309.tmp-b7:3' failed: Read-only file system [ 87.083590][ T3579] udevd[3579]: symlink '../../loop0' '/dev/disk/by-diskseq/282.tmp-b7:0' failed: Read-only file system [ 87.129796][ T5788] loop1: detected capacity change from 0 to 128 [ 87.139239][ T5786] tipc: Enabling of bearer rejected, already enabled [ 87.213306][ T5791] loop1: detected capacity change from 0 to 1024 [ 87.240114][ T5791] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm +}[@: Failed to acquire dquot type 0 [ 87.253479][ T5791] EXT4-fs error (device loop1): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 87.290597][ T5791] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #13: comm +}[@: corrupted inode contents [ 87.306921][ T5791] EXT4-fs error (device loop1): ext4_dirty_inode:6103: inode #13: comm +}[@: mark_inode_dirty error [ 87.319496][ T5791] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #13: comm +}[@: corrupted inode contents [ 87.331776][ T5791] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #13: comm +}[@: mark_inode_dirty error [ 87.351333][ T5791] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #13: comm +}[@: corrupted inode contents [ 87.395911][ T5791] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 87.428265][ T5791] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #13: comm +}[@: corrupted inode contents [ 87.459242][ T5791] EXT4-fs error (device loop1): ext4_truncate:4255: inode #13: comm +}[@: mark_inode_dirty error [ 87.459928][ T23] hid (null): unknown global tag 0xd [ 87.470158][ T5791] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 87.475194][ T23] hid (null): unknown global tag 0xe [ 87.486303][ T5791] EXT4-fs (loop1): 1 truncate cleaned up [ 87.493351][ T23] hid-generic 0002:FFFFFF16:0009.001E: unknown global tag 0xd [ 87.501419][ T5791] ext4: Unknown parameter ' Z* m.Dc8'@C9G9?9S{1Jլ5 æԌqqY糔' [ 87.502820][ T23] hid-generic 0002:FFFFFF16:0009.001E: item 0 4 1 13 parsing failed [ 87.532872][ T5811] netlink: set zone limit has 4 unknown bytes [ 87.543643][ T23] hid-generic 0002:FFFFFF16:0009.001E: probe with driver hid-generic failed with error -22 [ 87.643318][ T5817] loop3: detected capacity change from 0 to 128 [ 87.679778][ T5819] FAULT_INJECTION: forcing a failure. [ 87.679778][ T5819] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 87.693185][ T5819] CPU: 0 UID: 0 PID: 5819 Comm: syz.1.832 Not tainted 6.15.0-rc7-syzkaller-00112-geccf6f2f6ab9 #0 PREEMPT(voluntary) [ 87.693214][ T5819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 87.693226][ T5819] Call Trace: [ 87.693234][ T5819] [ 87.693243][ T5819] __dump_stack+0x1d/0x30 [ 87.693269][ T5819] dump_stack_lvl+0xe8/0x140 [ 87.693294][ T5819] dump_stack+0x15/0x1b [ 87.693358][ T5819] should_fail_ex+0x265/0x280 [ 87.693435][ T5819] should_fail+0xb/0x20 [ 87.693521][ T5819] should_fail_usercopy+0x1a/0x20 [ 87.693592][ T5819] _copy_to_user+0x20/0xa0 [ 87.693616][ T5819] simple_read_from_buffer+0xb5/0x130 [ 87.693717][ T5819] proc_fail_nth_read+0x100/0x140 [ 87.693755][ T5819] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 87.693781][ T5819] vfs_read+0x19d/0x6f0 [ 87.693805][ T5819] ? __rcu_read_unlock+0x4f/0x70 [ 87.693860][ T5819] ? __rcu_read_unlock+0x4f/0x70 [ 87.693897][ T5819] ? __fget_files+0x184/0x1c0 [ 87.693939][ T5819] ksys_read+0xda/0x1a0 [ 87.694046][ T5819] __x64_sys_read+0x40/0x50 [ 87.694082][ T5819] x64_sys_call+0x2d77/0x2fb0 [ 87.694112][ T5819] do_syscall_64+0xd0/0x1a0 [ 87.694137][ T5819] ? clear_bhb_loop+0x40/0x90 [ 87.694242][ T5819] ? clear_bhb_loop+0x40/0x90 [ 87.694273][ T5819] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.694295][ T5819] RIP: 0033:0x7f1a7126d37c [ 87.694315][ T5819] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 87.694341][ T5819] RSP: 002b:00007f1a6f8d7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 87.694367][ T5819] RAX: ffffffffffffffda RBX: 00007f1a71495fa0 RCX: 00007f1a7126d37c [ 87.694381][ T5819] RDX: 000000000000000f RSI: 00007f1a6f8d70a0 RDI: 0000000000000006 [ 87.694434][ T5819] RBP: 00007f1a6f8d7090 R08: 0000000000000000 R09: 0000000000000000 [ 87.694451][ T5819] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 87.694468][ T5819] R13: 0000000000000000 R14: 00007f1a71495fa0 R15: 00007ffdb793fec8 [ 87.694494][ T5819] [ 87.945240][ T5822] tipc: Enabling of bearer rejected, already enabled [ 88.095497][ T5831] Cannot find add_set index 0 as target [ 88.182926][ T5835] loop0: detected capacity change from 0 to 1024 [ 88.215110][ T9] hid (null): unknown global tag 0xd [ 88.220536][ T9] hid (null): unknown global tag 0xe [ 88.229341][ T9] hid-generic 0002:FFFFFF16:0009.001F: unknown global tag 0xd [ 88.237362][ T9] hid-generic 0002:FFFFFF16:0009.001F: item 0 4 1 13 parsing failed [ 88.245876][ T5831] vhci_hcd: invalid port number 96 [ 88.251245][ T5831] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 88.261553][ T9] hid-generic 0002:FFFFFF16:0009.001F: probe with driver hid-generic failed with error -22 [ 88.325025][ T5835] EXT4-fs error (device loop0): ext4_acquire_dquot:6935: comm +}[@: Failed to acquire dquot type 0 [ 88.337772][ T5835] EXT4-fs error (device loop0): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 88.354353][ T5843] loop1: detected capacity change from 0 to 1024 [ 88.354360][ T5835] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #13: comm +}[@: corrupted inode contents [ 88.354490][ T5843] ================================================================== [ 88.354510][ T5835] EXT4-fs error (device loop0): ext4_dirty_inode:6103: inode #13: comm +}[@: mark_inode_dirty error [ 88.354541][ T5843] BUG: KCSAN: data-race in data_push_tail / string [ 88.354594][ T5843] [ 88.354602][ T5843] write to 0xffffffff88e13790 of 1 bytes by task 5835 on cpu 0: [ 88.354619][ T5843] string+0x187/0x220 [ 88.354654][ T5843] vsnprintf+0x532/0x890 [ 88.354695][ T5843] vscnprintf+0x41/0x90 [ 88.354717][ T5835] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #13: comm +}[@: corrupted inode contents [ 88.354736][ T5843] printk_sprint+0x30/0x2d0 [ 88.354759][ T5843] vprintk_store+0x599/0x860 [ 88.354777][ T5843] vprintk_emit+0x178/0x650 [ 88.354796][ T5843] vprintk_default+0x26/0x30 [ 88.354818][ T5843] vprintk+0x1d/0x30 [ 88.354863][ T5843] _printk+0x79/0xa0 [ 88.354895][ T5835] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #13: comm +}[@: mark_inode_dirty error [ 88.354905][ T5843] __ext4_error_inode+0x2ca/0x3f0 [ 88.354946][ T5843] ext4_mark_iloc_dirty+0x35e/0xda0 [ 88.354990][ T5843] __ext4_mark_inode_dirty+0x2e2/0x3f0 [ 88.355027][ T5843] ext4_dirty_inode+0x92/0xc0 [ 88.355060][ T5843] __mark_inode_dirty+0x15c/0x760 [ 88.355066][ T5835] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #13: comm +}[@: corrupted inode contents [ 88.355098][ T5843] ext4_free_blocks+0xe3f/0x1400 [ 88.355136][ T5843] ext4_ext_remove_space+0x1775/0x2900 [ 88.355168][ T5843] ext4_ext_truncate+0xc7/0x170 [ 88.355193][ T5843] ext4_truncate+0x6f8/0xac0 [ 88.355199][ T5835] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 88.355227][ T5843] ext4_process_orphan+0x110/0x1c0 [ 88.355275][ T5843] ext4_orphan_cleanup+0x6a8/0xa00 [ 88.355315][ T5835] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #13: comm +}[@: corrupted inode contents [ 88.355320][ T5843] ext4_fill_super+0x3171/0x34e0 [ 88.355358][ T5843] get_tree_bdev_flags+0x28e/0x300 [ 88.355395][ T5843] get_tree_bdev+0x1f/0x30 [ 88.355431][ T5843] ext4_get_tree+0x1c/0x30 [ 88.355444][ T5835] EXT4-fs error (device loop0): ext4_truncate:4255: inode #13: comm +}[@: mark_inode_dirty error [ 88.355470][ T5843] vfs_get_tree+0x57/0x1d0 [ 88.355507][ T5843] do_new_mount+0x207/0x680 [ 88.355543][ T5843] path_mount+0x4a4/0xb20 [ 88.355557][ T5835] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 88.355576][ T5843] __se_sys_mount+0x28f/0x2e0 [ 88.355614][ T5843] __x64_sys_mount+0x67/0x80 [ 88.355651][ T5843] x64_sys_call+0xd36/0x2fb0 [ 88.355676][ T5843] do_syscall_64+0xd0/0x1a0 [ 88.355701][ T5843] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.355727][ T5843] [ 88.355736][ T5843] read to 0xffffffff88e13790 of 8 bytes by task 5843 on cpu 1: [ 88.355758][ T5843] data_push_tail+0xfd/0x420 [ 88.355805][ T5843] data_alloc+0xbf/0x2b0 [ 88.355855][ T5843] prb_reserve+0x808/0xaf0 [ 88.355898][ T5843] vprintk_store+0x56d/0x860 [ 88.355919][ T5843] vprintk_emit+0x178/0x650 [ 88.355940][ T5843] vprintk_default+0x26/0x30 [ 88.355962][ T5835] EXT4-fs (loop0): 1 truncate cleaned up [ 88.355965][ T5843] vprintk+0x1d/0x30 [ 88.355999][ T5843] _printk+0x79/0xa0 [ 88.356037][ T5843] set_capacity_and_notify+0x14c/0x1f0 [ 88.356068][ T5843] loop_set_size+0x2e/0x70 [ 88.356109][ T5843] loop_configure+0x8d3/0xa50 [ 88.356145][ T5843] lo_ioctl+0x559/0x15d0 [ 88.356187][ T5843] blkdev_ioctl+0x352/0x440 [ 88.356211][ T5843] __se_sys_ioctl+0xcb/0x140 [ 88.356242][ T5843] __x64_sys_ioctl+0x43/0x50 [ 88.356268][ T5843] x64_sys_call+0x19a8/0x2fb0 [ 88.356292][ T5843] do_syscall_64+0xd0/0x1a0 [ 88.356324][ T5843] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.356353][ T5843] [ 88.356380][ T5843] value changed: 0x00000000ffffe103 -> 0x7865203a2930706f [ 88.356396][ T5843] [ 88.356404][ T5843] Reported by Kernel Concurrency Sanitizer on: [ 88.356421][ T5843] CPU: 1 UID: 0 PID: 5843 Comm: syz.1.842 Not tainted 6.15.0-rc7-syzkaller-00112-geccf6f2f6ab9 #0 PREEMPT(voluntary) [ 88.356452][ T5843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 88.356468][ T5843] ================================================================== [ 88.357717][ T5835] ext4: Unknown parameter ' Z* m.Dc8'@C9G9?9S{1Jլ5 æԌqqY糔' [ 88.805299][ T5842] loop4: detected capacity change from 0 to 512 [ 88.817179][ T5842] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 88.829196][ T5842] EXT4-fs error (device loop4): xattr_find_entry:333: inode #15: comm syz.4.840: corrupted xattr entries [ 88.841578][ T5842] EXT4-fs (loop4): Remounting filesystem read-only [ 88.848965][ T5842] EXT4-fs (loop4): 1 truncate cleaned up