last executing test programs: 32.608692783s ago: executing program 2 (id=446): bpf$MAP_CREATE(0x0, 0x0, 0xffffff55) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000004000000000000000010000851000000600000018020000", @ANYRES32, @ANYBLOB="0000000000000000660002000000ffb0180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) 31.612408866s ago: executing program 2 (id=450): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x1, 0x28}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xb, 0x4, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x11, 0x63, 0xa, 0xff04}, [@call={0x44, 0x0, 0x0, 0x2000000}, @exit, @map_fd, @jmp]}, &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7dc470d00281f324, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) stat(&(0x7f0000000300)='./bus\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl$Q_GETINFO(0xffffffff80000502, &(0x7f00000002c0)=@nbd={'/dev/nbd', 0x0}, r5, &(0x7f00000003c0)) mount$9p_rdma(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x80, &(0x7f0000000580)={'trans=rdma,', {'port', 0x3d, 0x4e23}, 0x2c, {[{@common=@access_uid={'access', 0x3d, r5}}, {@rq={'rq', 0x3d, 0x9}}, {@timeout={'timeout', 0x3d, 0x7}}], [{@func={'func', 0x3d, 'FIRMWARE_CHECK'}}]}}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r7}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r6}, 0x10) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a2809302060000ff41fd01020400000a00120002002800000019002d007fffffff0022de1330d54400009b84136ef75afb83de066a5900e1baac968300000000f2ff000001000000", 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x4000884) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r3, 0x0) write$selinux_load(r2, &(0x7f0000000000)=ANY=[], 0xffa8) r9 = creat(&(0x7f00000000c0)='./file0\x00', 0xa2) r10 = dup2(r9, r9) ioctl$BLKTRACESETUP(r10, 0xc0481273, &(0x7f0000000240)={'\x00', 0x40, 0xa9a, 0x76c4, 0x7, 0x7}) ioctl$BLKTRACESTART(r10, 0x1274, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1e, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f00000007c0)={[{@nodioread_nolock}, {@errors_remount}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x3}}]}, 0x1, 0x46f, &(0x7f0000000bc0)="$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") 31.100195209s ago: executing program 2 (id=453): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c00"], 0x50) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="190000000400000008000000"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r2}, &(0x7f0000000800), &(0x7f0000000840)=r3}, 0x20) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000500)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r6, 0x0, 0x800000000006}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0004}]}) r7 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xc44d, 0x80, 0x2, 0x11a}, 0x0, &(0x7f0000000100)) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r7, 0x18, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x1, {0x4, 0x6d4}, 0xf0}, 0x1) connect$phonet_pipe(r4, &(0x7f0000000040)={0x23, 0x0, 0x0, 0x3}, 0x10) ioctl$SIOCPNENABLEPIPE(r4, 0x89ed, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x2172, 0xffffffffffffffff, 0x0) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r8, &(0x7f0000000340)="0a000300010000", 0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00'}, 0x10) syz_emit_ethernet(0xfc, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x0) 31.028016412s ago: executing program 2 (id=455): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000500), 0x1, 0x523, &(0x7f0000000c00)="$eJzs3c9vHFcdAPDvTLK2k7h1WnoABG1oCwFFWceb1qp6gHJCCFVC9AgiNfbGsrzrtbzrUptIuGeuSFTiBEf+AM49ceeC4MalHJD4YYFqJA5TzezY2di79qaJvZb385FG89688X7fizPvzbxd7wtgbN2IiJ2ImIiIdyNipjyelFu81d3y8z7ZfbC4t/tgMYkse+dfSVGeH4uen8ldK19zKiJ+8J2InyRH47a3tlcXGo36Rpmf7TTXZ9tb27dXmgvL9eX6Wq02Pzd/5427r9ceozVTx5a+1JwoU1/++I873/hZXq3p8khvO56mbtMrB3FylyPie6cRbAQule2ZGHVF+EzSiHg+Il4urv+ZuFT8NgGAiyzLZiKb6c0DABddWsyBJWm1nAuYjjStVrtzeC/E1bTRandu3W9tri1158quRyW9v9Ko3ynnCq9HJcnzc0X6Yb52KH83Ip6LiF9OXiny1cVWY2mUNz4AMMauHRr//zvZHf8BgAvu+I/NAAAXkfEfAMaP8R8Axo/xHwDGT3f8v/K4P5Zl2c9PozoAwBnw/A8A48f4DwBj5ftvv51v2V75/ddL721trrbeu71Ub69Wm5uL1cXWxnp1udVaLr6zp3nS6zVarfW512Lz/evfXG93Zttb2/earc21zr3ie73v1SvFWTtn0DIAYJDnXvroL0k+Ir95pdiiZy2HykhrBpy2dNQVAEbm0qgrAIyM1b5gfD18xn/sDwGYHoALos8SvY+Y6vcHQlmWZadXJeCU3fyC+X8YVz3z/z4FDGPmpPn/Ym1gbxLChWT+H8ZXliXDrvkfw54IAJxvx8zxXz/L+xBgdAa8//98uf9d+ebAj5YOn/HhadYKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAzrf99X+r5TK/05Gm1WrEM8UCQJXk/kqjficino2IP09WJvP83IjrDAA8qfTvSbn+182ZV6cfKXrx2kFyIiJ++ut3fvX+Qqez8aeIieTfk/vHOx+Wx2snBps6jRYAAMfbH6eLfc+D/Ce7Dxb3t7Oszz++3b0ryOPu7U7E3kH8y3G52E9FJSKu/icp811Jz9zFk9j5ICI+36/9SUwXcyDdW5bD8fPYz5xp/PSR+Gm5QHNa/lt87inUBcbNR3n/81a/6y+NG8W+//U/VfRQT67s//KXWtwr+sCH8ff7v0sD+r8bw8Z47Q/f7aauHC37IOKLlyP2Y+/19D/78ZMB8V8dMv5fv/Tiy4PKst9E3Iz+8XtjzXaa67Ptre3bK82F5fpyfa1Wm5+bv/PG3ddrs8Uc9ezg0eCfb956dlBZ3v6rA+JPndD+rw7Z/t/+/90ffuWY+F9/pV/8NF44Jn4+Jn5tyPgLV38/8Lk7j790tP3JML//W0PG//hv20eWDQcARqe9tb260GjUNyTGNPHjOBfVGC6R/5c9B9Xom/jWWcWaiP5Fv3ile00fKsqyzxRrUI/xNGbdgPPg4KKPiP+NujIAAAAAAAAAAAAAAEBfZ/EXS6NuIwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABfXpwEAAP//+E3TQw==") r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x8, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) r3 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_int(r3, 0x29, 0x16, &(0x7f0000fcb000), 0x4) close(r3) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xc, 0x400, 0x0, 0x12, 0x1a, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c000000000000000000c00002000", "036c47f9ffffffffffffff00000000335263bdbcaf549ba197fcffffffffffffffff00000000e8f20000000200000000000000000000000000a649ba5400", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_read_part_table(0x60d, &(0x7f0000002200)="$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") ioprio_set$uid(0x3, 0x0, 0x0) r4 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) sendfile(r4, r4, 0x0, 0x800000009) quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000240)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) 30.742694545s ago: executing program 2 (id=456): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r0, 0x0, 0x0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0xce56fe61a68fc369, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000380)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1d}, @in=@empty, 0x4e24, 0x0, 0x4e22, 0x8, 0xa, 0xbe37d0dc05c3ce72, 0xa0, 0xa4, 0x0, r3}, {0x4, 0x9, 0x7, 0x6, 0x7ffffffffffffffe, 0x3, 0x1, 0x5}, {0x7, 0x347e, 0x7fff, 0x9}, 0xffffffff, 0x6e6bb9, 0x2, 0x1, 0x2, 0x2}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d6, 0x6c}, 0xa, @in6=@remote, 0x3503, 0x1, 0x2, 0x9, 0xfffffbff, 0x5, 0x7ff}}, 0xe8) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001004900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000f1ff000000000000"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r4, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r4}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) gettid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000), 0xc, 0x0}, 0x0) io_setup(0x7, &(0x7f0000000280)=0x0) io_submit(r5, 0x1, &(0x7f0000000500)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0xfffffc98}]) 30.539974254s ago: executing program 2 (id=457): r0 = syz_open_procfs(0x0, 0x0) r1 = socket(0x10, 0x400000000080803, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f00000001c0)=@ethtool_ringparam={0x4, 0x0, 0x1, 0xfffffffa, 0xc11, 0x6, 0x20000, 0x8000000, 0xf}}) r2 = socket(0x80000000000000a, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, 0x2, r0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r3}, 0x10) fsetxattr$trusted_overlay_nlink(r2, &(0x7f0000000000), &(0x7f0000000040)={'U-'}, 0x16, 0x3) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000380), &(0x7f00000005c0)=r5}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f00000001c0)='mm_vmscan_lru_isolate\x00', r6}, 0x18) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000000800004000000", @ANYRES32, @ANYBLOB="000000000000000000000000006358f121000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000400"/28], 0x50) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="00000000050000000400000032a9000009"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000900000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000f9ffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r8}, 0x10) quotactl_fd$Q_GETQUOTA(0xffffffffffffffff, 0xffffffff80000700, 0x0, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'syztnl2\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000300)={r4, &(0x7f00000002c0)="1f129e62134a9786e0a828f3d2a681fe4561dd759cfe13d4a2a09599973e866ced00a9335e48", &(0x7f0000000900)=""/78}, 0x20) 30.519696635s ago: executing program 32 (id=457): r0 = syz_open_procfs(0x0, 0x0) r1 = socket(0x10, 0x400000000080803, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f00000001c0)=@ethtool_ringparam={0x4, 0x0, 0x1, 0xfffffffa, 0xc11, 0x6, 0x20000, 0x8000000, 0xf}}) r2 = socket(0x80000000000000a, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, 0x2, r0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r3}, 0x10) fsetxattr$trusted_overlay_nlink(r2, &(0x7f0000000000), &(0x7f0000000040)={'U-'}, 0x16, 0x3) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000380), &(0x7f00000005c0)=r5}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f00000001c0)='mm_vmscan_lru_isolate\x00', r6}, 0x18) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000000800004000000", @ANYRES32, @ANYBLOB="000000000000000000000000006358f121000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000400"/28], 0x50) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="00000000050000000400000032a9000009"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000900000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000f9ffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r8}, 0x10) quotactl_fd$Q_GETQUOTA(0xffffffffffffffff, 0xffffffff80000700, 0x0, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'syztnl2\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000300)={r4, &(0x7f00000002c0)="1f129e62134a9786e0a828f3d2a681fe4561dd759cfe13d4a2a09599973e866ced00a9335e48", &(0x7f0000000900)=""/78}, 0x20) 4.10151883s ago: executing program 1 (id=795): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfd', @ANYRESHEX=r3]) write$P9_RLERRORu(r2, &(0x7f0000000100)=ANY=[], 0xe) 4.033266642s ago: executing program 1 (id=798): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_config_ext={0x40000000000, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000580)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@errors_remount}, {@nombcache}]}, 0x1, 0x437, &(0x7f0000000900)="$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") r0 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r0, &(0x7f0000000040)=""/41, 0x29) getdents64(r0, &(0x7f0000002f40)=""/4098, 0x1002) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r1) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="fc000000", @ANYRES16=r2, @ANYBLOB], 0xfc}}, 0x804) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'sit0\x00', &(0x7f0000000080)={'tunl0\x00', 0x0, 0x40, 0x8000, 0x10000, 0x3, {{0x8, 0x4, 0x2, 0x39, 0x20, 0x64, 0x0, 0x4, 0x2f, 0x0, @remote, @rand_addr=0x64010100, {[@ssrr={0x89, 0xb, 0x70, [@dev={0xac, 0x14, 0x14, 0x2c}, @loopback]}]}}}}}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f00000007c0)={0x0, 0x5c9, 0x7, 0x1000, 0x3, 0x8, 0x7, 0x5, {0x0, @in6={{0xa, 0x4e24, 0xa, @dev={0xfe, 0x80, '\x00', 0x37}}}, 0x7, 0x5, 0x259, 0x5, 0xdd1}}, &(0x7f0000000480)=0xb0) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f00000004c0)={r7, 0x400}, 0x8) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000200)={'gretap0\x00', &(0x7f0000000340)={'tunl0\x00', 0x0, 0x8000, 0x80, 0xf, 0x9, {{0x20, 0x4, 0x2, 0x4, 0x80, 0x66, 0x0, 0x6e, 0x29, 0x0, @rand_addr=0x64010101, @multicast1, {[@ssrr={0x89, 0x23, 0x58, [@broadcast, @broadcast, @multicast2, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x14}, @broadcast, @remote, @multicast1]}, @ra={0x94, 0x4}, @rr={0x7, 0x27, 0x2f, [@private=0xa010101, @remote, @multicast2, @loopback, @multicast2, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @broadcast]}, @rr={0x7, 0x1b, 0x1d, [@loopback, @private=0xa010101, @broadcast, @multicast1, @multicast1, @rand_addr=0x64010100]}]}}}}}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f0000000d40)={0x170, r2, 0x300, 0x70bd26, 0x25dfdbfe, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0xb0, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x3}, @ETHTOOL_A_BITSET_VALUE={0x94, 0x4, "181b1a528f58f645f00da858df38b527c49b4c16c75f98ac0db02202d99cea072745c6e922f58741decb279331f9382e6f41145d07f06b4c36631228639e3e58917b8bd02476e3cc6f9c416c27643cbeed49c1aa165e45711e56468c0f2a3de0bc1ff8d9fe8aae54d5aa90b1127de950f47282beb855abd73fe1fbd023ae6eec722baf8a4caee98955d68a117e91d88c"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x9, 0x4, "30d5516802"}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}]}, 0x170}, 0x1, 0x0, 0x0, 0x40041}, 0x0) syz_usb_connect(0x3, 0x0, 0x0, 0x0) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x2, 0x7, 0x0, 0x0, 0x2, 0x0, 0x70bd29}, 0x10}}, 0x0) 3.308593474s ago: executing program 4 (id=808): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno', @ANYRESHEX=r3]) write$P9_RLERRORu(r2, &(0x7f0000000100)=ANY=[], 0xe) 3.261465587s ago: executing program 4 (id=809): syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2f00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000006000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000840), 0x81, r1}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x8) fchdir(r3) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000300)={[{@usrquota}, {@noblock_validity}, {@mblk_io_submit}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@debug}, {@inlinecrypt}]}, 0x6, 0x5fc, &(0x7f0000000c00)="$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") prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000580)={'vxcan1\x00'}) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0a0000000400000008f3000008000000000000", @ANYRES32, @ANYBLOB="9b5800"/20, @ANYRES32=0x0, @ANYRES32], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000000)={[{@bsdgroups}, {@jqfmt_vfsv1}]}, 0xc1, 0x7e9, &(0x7f00000017c0)="$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") prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r5 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r6) sendmsg$NL80211_CMD_GET_SCAN(r6, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x1c, r7, 0xb29, 0x0, 0x0, {{}, {@val={0x5}, @void}}}, 0x1c}}, 0x2404c044) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) 2.403997904s ago: executing program 4 (id=812): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) mount$9p_rdma(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x80, &(0x7f0000000580)={'trans=rdma,', {'port', 0x3d, 0x4e23}, 0x2c, {[], [{@func={'func', 0x3d, 'FIRMWARE_CHECK'}}]}}) 2.387970155s ago: executing program 4 (id=813): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001b00)=@newqdisc={0x24, 0x24, 0xd0f, 0x0, 0x40000, {0x60, 0x0, 0x0, r2, {0x0, 0x4}, {0xffff, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x8080) 2.367242086s ago: executing program 4 (id=814): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) (fail_nth: 2) 2.090933618s ago: executing program 4 (id=815): bpf$MAP_CREATE(0x0, 0x0, 0xffffff55) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$key(0xf, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="03113875c492b796ffffff00000004001801000020206925000000"], &(0x7f0000000600)='syzkaller\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000004000000000000000010000851000000600000018020000", @ANYRES32, @ANYBLOB="0000000000000000660002000000ffb0180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x3004d91, &(0x7f0000000080)={[{@noinit_itable}]}, 0x1, 0x523, &(0x7f0000000a80)="$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") 1.131901051s ago: executing program 0 (id=823): r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r1, @ANYBLOB="01000000000000001c0012000c000100626f6e6400"], 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB="44000000100005ff0000006124c97c66524eb6b4aba91bdd4fcc00000000000000014a7606ddbb1c9b26c1ea6f678c9914b81904ac2ce6ed38fe7d711a48879739301819244d93ba9ebc6cc4a6642f9fe631a4769da861bf4ce9bc8fbf601e49aec481797acaef4515d441b4cadbac844f664dd1211726ce2436907aa88a870e8e12e5da04ef8b696f0277391717865434a558fcf318703d2c4bd903fbc207000000bdaae9e1b436d119442ed332e334b788e13d9e56b991ef1a67a32db4072c63bf976de9d6decb1c0f24cd7b064e7f35ca", @ANYRES32=0x0, @ANYBLOB="28200400000000001c0012800b00010067726574617000000c00028008000700ac1e010108000a00", @ANYRES32=r1, @ANYBLOB], 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r1, {0x6}}}, 0x24}}, 0x0) 1.058911294s ago: executing program 0 (id=825): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno', @ANYRESHEX=r3]) write$P9_RLERRORu(r2, &(0x7f0000000100)=ANY=[], 0xe) 1.007720846s ago: executing program 0 (id=827): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x1, 0x28}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xb, 0x4, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x11, 0x63, 0xa, 0xff04}, [@call={0x44, 0x0, 0x0, 0x2000000}, @exit, @map_fd, @jmp]}, &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7dc470d00281f324, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) stat(&(0x7f0000000300)='./bus\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl$Q_GETINFO(0xffffffff80000502, &(0x7f00000002c0)=@nbd={'/dev/nbd', 0x0}, r3, &(0x7f00000003c0)) mount$9p_rdma(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x80, &(0x7f0000000580)={'trans=rdma,', {'port', 0x3d, 0x4e23}, 0x2c, {[{@common=@access_uid={'access', 0x3d, r3}}, {@rq={'rq', 0x3d, 0x9}}, {@timeout={'timeout', 0x3d, 0x7}}], [{@func={'func', 0x3d, 'FIRMWARE_CHECK'}}]}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$netlink(0x10, 0x3, 0x0) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0xa2) r5 = dup2(r4, r4) ioctl$BLKTRACESTART(r5, 0x1274, 0x0) 943.209919ms ago: executing program 1 (id=829): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x1, 0x28}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xb, 0x4, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x11, 0x63, 0xa, 0xff04}, [@call={0x44, 0x0, 0x0, 0x2000000}, @exit, @map_fd, @jmp]}, &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7dc470d00281f324, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) stat(&(0x7f0000000300)='./bus\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl$Q_GETINFO(0xffffffff80000502, &(0x7f00000002c0)=@nbd={'/dev/nbd', 0x0}, r5, &(0x7f00000003c0)) mount$9p_rdma(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x80, &(0x7f0000000580)={'trans=rdma,', {'port', 0x3d, 0x4e23}, 0x2c, {[{@common=@access_uid={'access', 0x3d, r5}}, {@rq={'rq', 0x3d, 0x9}}, {@timeout={'timeout', 0x3d, 0x7}}], [{@func={'func', 0x3d, 'FIRMWARE_CHECK'}}]}}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r7}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r6}, 0x10) socket$netlink(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r3, 0x0) write$selinux_load(r2, &(0x7f0000000000)=ANY=[], 0xffa8) r8 = creat(&(0x7f00000000c0)='./file0\x00', 0xa2) r9 = dup2(r8, r8) ioctl$BLKTRACESETUP(r9, 0xc0481273, &(0x7f0000000240)={'\x00', 0x40, 0xa9a, 0x76c4, 0x7, 0x7}) ioctl$BLKTRACESTART(r9, 0x1274, 0x0) ioctl$BLKTRACESTOP(r9, 0x1275, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1e, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f00000007c0)={[{@nodioread_nolock}, {@errors_remount}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x3}}]}, 0x1, 0x46f, &(0x7f0000000bc0)="$eJzs281rHOUfAPDvTF7a/vqS/Gp9aa0aLUJQTJq0ag9eFAWRioIe6jEm2xK6baSJYmuxqYgnQQp6Fo+if4E3EUQ9CV49eZJC0V7aeorM7Ey62WYTazaZ2P18YLPPM/PszvebeXv2eXYD6FpD2Z8kYkdE/BoRA43q0gZDjafrV89P3rh6fjKJhYXX/kjydteunp8sm5av215UhtOI9MOk2MhSs2fPnZyo12tnivro3Km3RmfPnnvinVMTJ2onaqfHjxw5fGjs6afGn+xInlle1/a9P7N/74tvXHp58tilN3/8Oot3R7G+OY9OGcoS/3Mh17ru0U5vrGI7m8pJb4WBcFt6IiLbXX35+T8QPXFz5w3ECx9UGhywrrJ705b2q+cXgDtYElVHAFSjvNFnn3/LxwZ1PTaFK882PgBleV8vHo01vZEWbfpaPt920lBEHJv/6/PsEes0DgEA0Ozjyc+O9kfEeze+einrewwsrknjnvz5t/zvrmIOZTAi/h8RuyPirojYExF3R+Rt742I+9YYz639n/TyGt9yRVn/75libmtp/6/s/cVgT1HbmefflxyfrtcOFv+T4ejbktXHVtjGt8//8km7dc39v+yRbb/sCxZxXO5tGaCbmpibyDulHXDlYsS+3uXyTxZnApKI2BsR+27vrXeVhenHvtzfrtHq+a+gA/NMC19k6c1n+c9HS/6lpHl+cvqW+cnRrVGvHRwtj4pb/fTzR6+22/6a8u+AK7XGc9P+b20ymDTP1852dvv/8vhP+5PX83nm/mLZuxNzc2fGIvqTo3l9yfLxm68t62X77PgfPrD8+b+7eE2W//0RkR3ED0TEgxHxUBH7wxHxSEQcWCHHH55bPf9IK9r/FyOmlr3+LR7/Lfv/9gs9J7//pt32/9n+P5yXhosl+fVvFcuFk10uWgNcy/8OAAAA/ivS/DvwSTqyWE7TkZHGd/j3xP/S+szs3OPHZ94+PdX4rvxg9KXlSNdAMR5an67XxpL54h0b46PjxVhxOV56qBg3/rRnW14fmZypT1WcO3S77W3O/8zvPVVHB6yzbcsuHe/f8ECACrTOo6dLqxdeCRcDuFP5vTZ0r1XO/3Sj4gA2nvs/dK/lzv8LLXVzAXBncv+H7uX8hy6Vfld1BECF3P+hK63ld/3rWNi6OcKoprBZd0peiCgL6aaIR2GdClVfmQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADrj7wAAAP//KFzmgQ==") 930.147499ms ago: executing program 0 (id=830): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001f80)=ANY=[@ANYBLOB="4000000010003904000000000000000000000000b3667439372b7c8ff1c847a4a845b7d73a494349e5b40c8f86ffd945402c84d1a99fbb263baf7ebd5ffeef808fc21f48f2a9e4aec30db9fd477ec69b1ceaee803d35ad2932e3f10d1aa3d2e4c52d88b5d0d5e2f9cd69bad232392481d6a437fbf9d07cd6db5295cc15eb4ff318b617e28dd29a92e0cf90bf91a6c480a359632b8348c7bd2fde641c", @ANYRES32=r2, @ANYBLOB="01980600000000002000128008000100677265001400028008000700ac14140206000e0001000000"], 0x40}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000001c0)="11ebda8886dd", 0x6, 0x2404c081, &(0x7f0000000200)={0x11, 0x88a8, r2, 0x1, 0x4, 0x6, @multicast}, 0x14) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000800)=ANY=[@ANYBLOB="9feb010018000000000000001800090018000000050000000100000001000013040000000200000088060000ff0f0000002e2e3d7d8ba7247229c3eb4adab638a257f8af549206c0d058670c187b5fd6ea6bf162c1a9e861c192f4c797ed64a3241dbe402d1197940bf779f5cc95860cbc0d5bb46da22f4e8106c56200c71b9327f62c245158a8b49945cf54fab455491abaa47ff5d80a644ebae5e85b1cb86fda1aee22b3b4084f36711e27a744ecc77753ec6663a038c71236e9db5bd2be71251ec28f30352cfcdfd38a52ae8bcc933bcf68234bc0de43663828deefb4b9852f96f486"], 0x0, 0x35, 0x0, 0x1, 0x3}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000300e100000041989081f9442596f4f3963c79a200009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x5, '\x00', 0x0, 0x0, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x0, 0x2, 0x4, 0x6}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x2, 0x5) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r4}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, 0x0, &(0x7f0000000600)) r5 = syz_io_uring_setup(0x5c6, &(0x7f0000000140)={0x0, 0x80001021, 0x80, 0x6, 0x237}, &(0x7f0000000340)=0x0, &(0x7f0000000240)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(r5, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) pause() 710.155039ms ago: executing program 1 (id=837): r0 = socket$inet_icmp(0x2, 0x2, 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3400000011000500040000000000000007000000", @ANYRES32=r3, @ANYBLOB="000000000a00000014001a80100004800c000280"], 0x34}}, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000200)=@nat={'nat\x00', 0x19, 0x0, 0xc0, [0x200000000140, 0x0, 0x0, 0x200000000170, 0x2000000001a0], 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000001000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff00000000"]}, 0x138) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000006110000000000000620002000000000095"], &(0x7f0000000100)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x25}, 0x94) socket$inet_icmp(0x2, 0x2, 0x1) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000023000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') link(&(0x7f00000019c0)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r5 = socket(0x8, 0x80000, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r6 = socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) r7 = socket$inet(0x2, 0xa, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="240000001000010700000000000000000a000000060001001700000008000a00", @ANYRES32=r7], 0x24}, 0x1, 0x0, 0x0, 0x20050880}, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f0000000200)=@nat={'nat\x00', 0x19, 0x1, 0x20e, [0x200000000280, 0x0, 0x0, 0x20000000042e, 0x20000000045e], 0x0, 0x0, &(0x7f0000000280)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{0x5, 0x0, 0x0, 'team_slave_1\x00', 'batadv_slave_1\x00', 'wlan0\x00', 'veth1_to_bond\x00', @link_local, [0x0, 0xff, 0xff, 0x0, 0xff], @multicast, [0xff, 0x0, 0x0, 0xff, 0x0, 0xff], 0xde, 0x14e, 0x17e, [@physdev={{'physdev\x00', 0x0, 0x48}, {{'vxcan1\x00', {0xff}, 'vcan0\x00', {}, 0x11, 0x8}}}], [@arpreply={'arpreply\x00', 0x10, {{@dev={'\xaa\xaa\xaa\xaa\xaa', 0x17}, 0xffffffffffffffff}}}, @snat={'snat\x00', 0x10, {{@empty, 0xfffffffffffffffc}}}], @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x286) 657.869641ms ago: executing program 1 (id=838): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) write$P9_RLERRORu(r1, &(0x7f0000000100)=ANY=[], 0xe) 655.495771ms ago: executing program 3 (id=840): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x1, 0x28}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xb, 0x4, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x11, 0x63, 0xa, 0xff04}, [@call={0x44, 0x0, 0x0, 0x2000000}, @exit, @map_fd, @jmp]}, &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7dc470d00281f324, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) stat(&(0x7f0000000300)='./bus\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl$Q_GETINFO(0xffffffff80000502, &(0x7f00000002c0)=@nbd={'/dev/nbd', 0x0}, r3, &(0x7f00000003c0)) mount$9p_rdma(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x80, &(0x7f0000000580)={'trans=rdma,', {'port', 0x3d, 0x4e23}, 0x2c, {[{@common=@access_uid={'access', 0x3d, r3}}, {@rq={'rq', 0x3d, 0x9}}, {@timeout={'timeout', 0x3d, 0x7}}], [{@func={'func', 0x3d, 'FIRMWARE_CHECK'}}]}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$netlink(0x10, 0x3, 0x0) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0xa2) r5 = dup2(r4, r4) ioctl$BLKTRACESTART(r5, 0x1274, 0x0) 630.098203ms ago: executing program 1 (id=841): pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x129c81, 0x0) ppoll(&(0x7f0000000280)=[{r1, 0x6200}], 0x1, 0x0, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x7f, 0x4000006, 0x3, "42341f9b1000007e4f00"}) syz_open_pts(r1, 0x103100) splice(r1, 0x0, r0, 0x0, 0x7ffff000, 0x0) 614.647833ms ago: executing program 3 (id=842): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4f, 0x3, 0x2, 0x8}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=ANY=[@ANYBLOB="200000001600010a00"], 0x20}, 0x1, 0x0, 0x0, 0x200c0801}, 0x0) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{&(0x7f0000000080)=@in6={0xa, 0x4e24, 0x5, @mcast1, 0x40}, 0xc, &(0x7f0000000280), 0x2, &(0x7f0000000000)=ANY=[@ANYBLOB="30000000000000008400000001000000000000000c00"], 0x30, 0x20040004}], 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000001800), &(0x7f0000000240)='./file1\x00', 0x8, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x4, 0x27a, &(0x7f0000000440)="$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") lseek(0xffffffffffffffff, 0x8, 0x3) creat(&(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x20) statfs(&(0x7f0000000200)='.\x00', 0x0) r2 = socket(0x2, 0x80805, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000001080)={0x200000, 0x200000}) r3 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x804525, 0x1000, 0x2, 0x12d}, &(0x7f0000000440)=0x0, &(0x7f0000000640)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffff8, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2f, 0x28, 0x0, 0x9}]}, 0x10) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_MSG_RING={0x28, 0x20, 0x0, r3, 0x0, 0x0, 0x0, 0x2, 0x1}) io_uring_enter(r3, 0x22d0, 0x20, 0x0, 0x0, 0x0) sendmmsg$inet(r2, &(0x7f0000000000)=[{{&(0x7f0000000080)={0x2, 0x4c21, @private=0xa010100}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f00000002c0)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000ac0)="6cb76def2c36dab0f366cf47ad785ed2fb5e1fa5fb56d566acdc377060c4ba50a58104620df72c3004bfbc77173110e163f7d8ad60c34cdb064852353438fea809e390e392afbf35311690cd8286a6c49668aee29b7537078dba77963d15c085d7343c1012135d361ac15c082b7ac8db87cc10fe3ffc374c8be18fc53437100a11dddb9981072ec036d513870a5bbf62ce9e39f790f61ef997af390b9f5fc8a699e001c59077c459eb40ee80a3ffeb35737da668ef974592faf129325cd9ad0dc5663950a329804c9f5d261f71165b05dac212cc2afc40f980ddef8773f1045e75de4ec606aef87052e9ac784bb0f5a43f9cac5e44ae1a6dd575ce17a4749dc7cd4d7f76a40676e792e5b31a25703b1f35b48a89ed84582ef8f4ac046695f402c25da1fa6bc732a7016edf093b4c31193130b3bc143702e2b1d23743ca797b24495dc4979b81413701c0597dcd5e3bcc9c2050c18cfe03814d358e0f795e990dc44d2c1b9890514bd5ea94a3f3a1e25a8cdc67133e9176d76dc54c31274cff0101d8a42c103bad1b8b57362446f2c2ed8a69daf3d7306ef3fa2015e4ee1ef3392120b82671d73b07f3082ea69ffa0ebc7b53c78862a3e1ece518c1f0abbe4053b4dfafe815c1fe4b0d079446e80d13af972e00644a0188605d7309812e24cd1158677f94a16a5eb0c5d48b60329fc522026efa596ac913540f2a9b0345f279329bfba29a7dfc8894e6a08eeee3dd974c3de9e0602cfd1e3e584b10dd26cd13f7fb432e72ea85fd1d3a872061bc967d7a67a3a7f09f34cc825db5d9ef3ce0ff9873f8eff342eb30fa970007e2f591f07dc9bc5141a9679a2f7c69aa50894353a7830a0f7cf766aff6e81d7c3b88d730946ce3f327716ef6fd270d5bf467aef288db903f740b6ac27b962a3c6462372e63f8da8505f05d17b364dd8c6b5d449accd01b4c6da297669f098bee986b95e389a2d003539ca9dec8c26b9f6bbb5f7fe6f0b764d99bc0dafcad4121ed6a749ac71fc5deeee54d0e8a2d9dccc87df818258d73c8816b78c1be3670fb14dded879caf925e0f8abf63f55ffee02bbffb465f0303338bd12e22fe94fdaa3f033127ecaf41649232c38e83850fd3ebc890ea5db2763a8389ac49bd9b7f6b81f381d3eeb90d0f596e2b7f7dfa2a0e9453c1f5f359b56aae9e97a51f6c092d25a031843e351f5733a25c5905706618ab569359bdca4932f6471f4f2d152f84cfc0c563885b0d93fd015095a8eb9422e3d17ddaf3f20dde5eeea415f76c0617964198c824b98f4d53ab0d4d734dcd6d07dddd5b77c1bd71208632941973bd5b5aca981137ec21dcd86ba518b3d4979b68f704a2a7d7cfeb9be3edf4b4b3560e930d9dba0bc358cba36a129748c1fa73483a69759ba0c4f2ee2a936899e163c213bb3fe5a28e68669fb2da6bbcdf4c55e933d127a8bc68b8d0e6c6c757fe8ea47f26ceb7c1b3ca8b962eb31a081756ed56fe4385dccc5e2a7a53300e9c8a1a55bcf8db3f828cb3db8485110da631a50199a5c1932b5538a2b1c3cddb4451868a413418e3f761530fd477b2ebb449070c73171964203ad7bad4302af13fa6fe55fb88ede096a7aba95ef3665da778250daa9dd4bd5ecb8a807d83fe6dcf2f0cf5de7a4ef742979afd7d93bb2672ad45f6537640313b1ca8838f3fdc08e57455af6398ce5b253312fe1a88206210831e0de59d1e3f9442fb9dd43f1b9c00d151d3234028990f8bcaf65c0ad9ea1bc20e4b7641ff26969b02ccd60d2d8d2d72fe5fd58068cd6d7525c9e24c4246cd776ecf1f57550bb6bddad5093618797547cde5c07e165bc979bfbb5479c58e89c29efa5fdfa5b4a87917a4275609afc849384458ca980ba5a2aa4d10c761bb3b3a57e3d3b41001cdf6", 0x541}], 0x1}}], 0x2, 0x0) recvmsg$unix(r2, &(0x7f0000000a40)={&(0x7f00000000c0), 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000140)=""/136, 0x88}, {&(0x7f0000000040)=""/28, 0x1c}, {&(0x7f0000000280)=""/168, 0xa8}, {&(0x7f0000000340)=""/32, 0x20}, {&(0x7f0000000380)=""/177, 0xb1}], 0x5, &(0x7f00000009c0)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}, 0x40002000) 552.548636ms ago: executing program 5 (id=843): sched_setaffinity(0x0, 0x4, &(0x7f00000002c0)=0x2) 490.416479ms ago: executing program 5 (id=844): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000500)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x800000000006}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00'}, 0x10) syz_emit_ethernet(0xfc, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x0) 489.915639ms ago: executing program 5 (id=845): r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x88002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xf, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pwritev(r0, &(0x7f0000000100)=[{&(0x7f0000000140)="de", 0x1}], 0x1, 0x0, 0x0) 454.790361ms ago: executing program 5 (id=846): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[], 0x0, 0x7ff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0xce56fe61a68fc369, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) socket$inet_tcp(0x2, 0x1, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000300), 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001004900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000f1ff000000000000"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r2}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r3 = gettid() prlimit64(r3, 0xe, &(0x7f0000000480)={0x77c1, 0x1}, &(0x7f0000000540)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) io_setup(0x7, &(0x7f0000000280)) openat$sysfs(0xffffff9c, &(0x7f00000001c0)='/sys/power/pm_trace', 0x42, 0x0) 383.406573ms ago: executing program 3 (id=847): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x1, 0x28}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xb, 0x4, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x11, 0x63, 0xa, 0xff04}, [@call={0x44, 0x0, 0x0, 0x2000000}, @exit, @map_fd, @jmp]}, &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7dc470d00281f324, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) stat(&(0x7f0000000300)='./bus\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl$Q_GETINFO(0xffffffff80000502, &(0x7f00000002c0)=@nbd={'/dev/nbd', 0x0}, r5, &(0x7f00000003c0)) mount$9p_rdma(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x80, &(0x7f0000000580)={'trans=rdma,', {'port', 0x3d, 0x4e23}, 0x2c, {[{@common=@access_uid={'access', 0x3d, r5}}, {@rq={'rq', 0x3d, 0x9}}, {@timeout={'timeout', 0x3d, 0x7}}], [{@func={'func', 0x3d, 'FIRMWARE_CHECK'}}]}}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r7}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r6}, 0x10) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a2809302060000ff41fd01020400000a00120002002800000019002d007fffffff0022de1330d54400009b84136ef75afb83de066a5900e1baac968300000000f2ff000001000000", 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x4000884) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r3, 0x0) write$selinux_load(r2, &(0x7f0000000000)=ANY=[], 0xffa8) r8 = creat(&(0x7f00000000c0)='./file0\x00', 0xa2) r9 = dup2(r8, r8) ioctl$BLKTRACESETUP(r9, 0xc0481273, &(0x7f0000000240)={'\x00', 0x40, 0xa9a, 0x76c4, 0x7, 0x7}) ioctl$BLKTRACESTART(r9, 0x1274, 0x0) ioctl$BLKTRACESTOP(r9, 0x1275, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1e, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f00000007c0)={[{@nodioread_nolock}, {@errors_remount}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x3}}]}, 0x1, 0x46f, &(0x7f0000000bc0)="$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") 369.411784ms ago: executing program 5 (id=848): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000f80)={0x30, r1, 0x2cb3b0415539fbbb, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void, @val={0xc, 0x99, {0xcb, 0x49}}}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0xfffffff7}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0xfffffbff}]}, 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x80) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x3f, 0x0, 0x0, 0x0, 0xb}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3, 0x0, 0xffffffffffffffff}, 0x18) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000ec0)=@raw={'raw\x00', 0x8, 0x3, 0x538, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x618, 0xffffffff, 0xffffffff, 0x618, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x330, 0x358, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa', {0x6}}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x8000, 0x16a, 0x1, 'syz1\x00', 'syz0\x00', {0x80000001}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x598) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000300)={'wg1\x00'}) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)={[{@usrquota}, {@noblock_validity}, {@bh}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@debug}, {@inlinecrypt}]}, 0x6, 0x5fc, &(0x7f0000000c00)="$eJzs3c9rHGUfAPDvzCZ5kzavaUXEFsWAhxakaVKLVS+29WAPBQv2IOKhoUlq6PYHTQq2FkzBg4KCiFeRXvwHvEvv3kRQb56FKlJRUOnK7M62m2Q3XdPsTpr5fGCzz/PM7D7PdydP5pmZPDsBlNZ49iON2BVx51QSMdaybDQaC8fz9W7/du109kiiVnv91ySSvKy5fpI/b88zwxHx7dGIRyur6124cvXsdLXW8F7E/sVzF/cvXLm6b/7c9JnZM7Pnpw68cPDQ5ItTB6c2JM7t+fOx4689+fH7bz8/9111XxKH4+TguzOxIo6NMh7jcScPsbV8ICIOZYk2n8vDZguEUGqV/PdxMCIej7Go1HMNYzH/UaGNA3qqVomoASWV6P9QUs1xQPPYvrvj4JM9HpX0z60jjQOg1fEPNM6NxHD92Gjb7aTlyKhxbmPHBtSf1fHPtd2fZ49Ydh7iz7tbZ2AD6ulk6XpEPNEu/qTeth31SLP402XtSCJiMiKG8va98gBtSFrSvTgPs5b1xp9GxOH8OSs/us76x1fk+x0/AOV080i+I1/Kcvf2f9nYozn+iTbjn9E2+671KHr/13n819zfD9fPkacrxmHZmOVE+7ccXFnw04fHPu1Uf+v4L3tk9TfHgv1w63rE7hXxf5AFm49/sviTNts/W+XU4e7qePX7X451WlZ0/LUbEXvaHv/cG5VmqTWuT+6fm6/OTjZ+tq3j62/e+rJT/UXHn23/bR3ib9n+6crXZZ/JxS7r+OrEjXOdlo3eN/7056Gkcbw5lJe8M724eGkqYig5nq/SUn5g7bY012m+Rxb/3mfa9/9lv//Xl7/PSPNPZhcuvnH2dqdl69n+LReT79S6bEMnWfwz99/+q/p/VvZJl3X88eblpzotWyv+kQcJDAAAAAAAAEoorV+DTdKJu+k0nZhozJd9LLal1QsLi8/OXbh8fiZib/3/IQfT5pXusUY+yfJT+f/DNvMHVuSfi4idEfFZZaSenzh9oTpTdPAAAAAAAAAAAAAAAAAAAACwSWzP5/8371P9e6Ux/x8oiV7eYA7Y3PR/KK96/191iyegDOz/obz0fygv/R/KS/+H8tL/obz0fygv/R/KS/8HAAAAgC1p59M3f0wiYumlkfojM5QvMyMItrbBohsAFKZSdAOAwty99G+wD6XT1fj/r/zLAXvfHKAASbvC+uCgtnbnv9n2lQAAAAAAAAAAAABAD+zZ1Xn+v7nBsLWZ9gfl9QDz/311ADzkfPU/lJdjfOB+s/iHOy0w/x8AAAAAAAAAAAAA+ma0/kjSiXwu8Gik6cRExP8jYkcMJnPz1dnJiHgkIn6oDP4vy08V3WgAAAAAAAAAAAAAAAAAAADYYhauXD07Xa3OXmpN/L2qZGsnmndB7UNdL8d/fFUk/f9YRiKi8I3Ss8RAS0kSsZRt+U3RsEsLsTmaUU8U/IcJAAAAAAAAAAAAAAAAAABKqGXucXu7v+hziwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACg/+7d/793iaJjBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeTv8GAAD//7V5QCw=") syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f00000001c0)='.\x00', 0x1ac8431, &(0x7f00000008c0)=ANY=[], 0x0, 0x0, &(0x7f00000001c0)) 269.999088ms ago: executing program 3 (id=849): openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) 242.58441ms ago: executing program 3 (id=850): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x1, 0x28}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xb, 0x4, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x11, 0x63, 0xa, 0xff04}, [@call={0x44, 0x0, 0x0, 0x2000000}, @exit, @map_fd, @jmp]}, &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7dc470d00281f324, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) stat(&(0x7f0000000300)='./bus\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl$Q_GETINFO(0xffffffff80000502, &(0x7f00000002c0)=@nbd={'/dev/nbd', 0x0}, r5, &(0x7f00000003c0)) mount$9p_rdma(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x80, &(0x7f0000000580)={'trans=rdma,', {'port', 0x3d, 0x4e23}, 0x2c, {[{@common=@access_uid={'access', 0x3d, r5}}, {@rq={'rq', 0x3d, 0x9}}, {@timeout={'timeout', 0x3d, 0x7}}], [{@func={'func', 0x3d, 'FIRMWARE_CHECK'}}]}}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r7}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r6}, 0x10) socket$netlink(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r3, 0x0) write$selinux_load(r2, &(0x7f0000000000)=ANY=[], 0xffa8) r8 = creat(&(0x7f00000000c0)='./file0\x00', 0xa2) r9 = dup2(r8, r8) ioctl$BLKTRACESETUP(r9, 0xc0481273, &(0x7f0000000240)={'\x00', 0x40, 0xa9a, 0x76c4, 0x7, 0x7}) ioctl$BLKTRACESTART(r9, 0x1274, 0x0) ioctl$BLKTRACESTOP(r9, 0x1275, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1e, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f00000007c0)={[{@nodioread_nolock}, {@errors_remount}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x3}}]}, 0x1, 0x46f, &(0x7f0000000bc0)="$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") 31.041369ms ago: executing program 0 (id=851): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r0, 0x0, 0x0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0xce56fe61a68fc369, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000380)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1d}, @in=@empty, 0x4e24, 0x0, 0x4e22, 0x8, 0xa, 0xbe37d0dc05c3ce72, 0xa0, 0xa4}, {0x4, 0x9, 0x7, 0x6, 0x7ffffffffffffffe, 0x3, 0x1, 0x5}, {0x7, 0x347e, 0x7fff, 0x9}, 0xffffffff, 0x6e6bb9, 0x2, 0x1, 0x2, 0x2}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d6, 0x6c}, 0xa, @in6=@remote, 0x3503, 0x1, 0x2, 0x9, 0xfffffbff, 0x5, 0x7ff}}, 0xe8) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001004900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r3, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r3}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) gettid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000), 0xc, 0x0}, 0x0) io_setup(0x7, &(0x7f0000000280)=0x0) io_submit(r4, 0x1, &(0x7f0000000500)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0xfffffc98}]) 14.01685ms ago: executing program 3 (id=852): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b00"/13], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYRES32=r2, @ANYRESOCT=r1, @ANYRES16=r0, @ANYRES8=r3, @ANYBLOB="d75e7a102607a34830fbdf2ab1c890ab56b0256695b3d8920094879d3df43ce03ef75c6359e0fe1c2304c7d8e9b66c6680190ae471bf14a92f616bf6356c9a66e61fc77012f3167a3f75f661e07785e88f74ed917a7db215e8757c8f4476f1904f89502f3a3da977af93af4a9d9236dc26be42b1f1780b33ca3319e776ce96c34a731a76c9f8a3b7799da6d55d17905f14c4aa50876cde76234968fbf13c6acaa8bd997e24125c71dde3af1334e90314c3006dd5f703a0ce06c651358541aa787d4727b232c3fa435d635078071bd51ddeb266597aa87b8598d331f4"], 0x50) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r5}, 0x10) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x8, 0x3, 0x4e8, 0x0, 0x11, 0x148, 0x340, 0x0, 0x450, 0x2a8, 0x2a8, 0x450, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x81}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x4f, 0x7, "72f6daeff0a9c6294e211d2d88fe6dcff5d0e552201da3b7a1fdb30dcb59"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x548) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x2000003, 0x13, 0xffffffffffffffff, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r8, 0x0) 10.21265ms ago: executing program 5 (id=853): syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2f00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000006000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000840), 0x81, r1}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x8) fchdir(r3) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000300)={[{@usrquota}, {@noblock_validity}, {@mblk_io_submit}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@debug}, {@inlinecrypt}]}, 0x6, 0x5fc, &(0x7f0000000c00)="$eJzs3c9rHGUfAPDvzCZ5kzavaUXEFsWAhxakaVKLVS+29WAPBQv2IOKhoUlq6PYHTQq2FkzBg4KCiFeRXvwHvEvv3kRQb56FKlJRUOnK7M62m2Q3XdPsTpr5fGCzz/PM7D7PdydP5pmZPDsBlNZ49iON2BVx51QSMdaybDQaC8fz9W7/du109kiiVnv91ySSvKy5fpI/b88zwxHx7dGIRyur6124cvXsdLXW8F7E/sVzF/cvXLm6b/7c9JnZM7Pnpw68cPDQ5ItTB6c2JM7t+fOx4689+fH7bz8/9111XxKH4+TguzOxIo6NMh7jcScPsbV8ICIOZYk2n8vDZguEUGqV/PdxMCIej7Go1HMNYzH/UaGNA3qqVomoASWV6P9QUs1xQPPYvrvj4JM9HpX0z60jjQOg1fEPNM6NxHD92Gjb7aTlyKhxbmPHBtSf1fHPtd2fZ49Ydh7iz7tbZ2AD6ulk6XpEPNEu/qTeth31SLP402XtSCJiMiKG8va98gBtSFrSvTgPs5b1xp9GxOH8OSs/us76x1fk+x0/AOV080i+I1/Kcvf2f9nYozn+iTbjn9E2+671KHr/13n819zfD9fPkacrxmHZmOVE+7ccXFnw04fHPu1Uf+v4L3tk9TfHgv1w63rE7hXxf5AFm49/sviTNts/W+XU4e7qePX7X451WlZ0/LUbEXvaHv/cG5VmqTWuT+6fm6/OTjZ+tq3j62/e+rJT/UXHn23/bR3ib9n+6crXZZ/JxS7r+OrEjXOdlo3eN/7056Gkcbw5lJe8M724eGkqYig5nq/SUn5g7bY012m+Rxb/3mfa9/9lv//Xl7/PSPNPZhcuvnH2dqdl69n+LReT79S6bEMnWfwz99/+q/p/VvZJl3X88eblpzotWyv+kQcJDAAAAAAAAEoorV+DTdKJu+k0nZhozJd9LLal1QsLi8/OXbh8fiZib/3/IQfT5pXusUY+yfJT+f/DNvMHVuSfi4idEfFZZaSenzh9oTpTdPAAAAAAAAAAAAAAAAAAAACwSWzP5/8371P9e6Ux/x8oiV7eYA7Y3PR/KK96/191iyegDOz/obz0fygv/R/KS/+H8tL/obz0fygv/R/KS/8HAAAAgC1p59M3f0wiYumlkfojM5QvMyMItrbBohsAFKZSdAOAwty99G+wD6XT1fj/r/zLAXvfHKAASbvC+uCgtnbnv9n2lQAAAAAAAAAAAABAD+zZ1Xn+v7nBsLWZ9gfl9QDz/311ADzkfPU/lJdjfOB+s/iHOy0w/x8AAAAAAAAAAAAA+ma0/kjSiXwu8Gik6cRExP8jYkcMJnPz1dnJiHgkIn6oDP4vy08V3WgAAAAAAAAAAAAAAAAAAADYYhauXD07Xa3OXmpN/L2qZGsnmndB7UNdL8d/fFUk/f9YRiKi8I3Ss8RAS0kSsZRt+U3RsEsLsTmaUU8U/IcJAAAAAAAAAAAAAAAAAABKqGXucXu7v+hziwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACg/+7d/793iaJjBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeTv8GAAD//7V5QCw=") prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000580)={'vxcan1\x00'}) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0a0000000400000008f3000008000000000000", @ANYRES32, @ANYBLOB="9b5800"/20, @ANYRES32, @ANYBLOB="00000000000000000500"/28], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000000)={[{@bsdgroups}, {@jqfmt_vfsv1}]}, 0xc1, 0x7e9, &(0x7f00000017c0)="$eJzs3c1rHG8dAPDvbF42SauJIGh7CggaKN2YGlsFDxEPIlgo6Nk2bLahZpMt2U1pQqDpQfAiqHgQ9NKzL/UgePXlqv+EeJAW0TRYT7oys7t53d0kbXa3/fXzgck8M/PMPPPN88yzz+4MuwF8sKbTP7mIKxHxwyRisrk+iYiRLDUcsdDI93p3u5hOSdTr3/pnkuX57aWDYyXN+aXmwqcj4o/fi7iWO17qeHNeLq03U7O11Yez1c2t6w9WF5dLy6W1m3Pz8zduffHWzZN7val//2Xr8ssfff1zv14Yjk89/8GfkliIy81te7vbxbc8/AnTMd38n4yk/8IjvnbRhQ1YMugT4I2kl+ZQ4yqPKzEZQ1mqg7e9AAGAd8KTiKgDAB+Y5LTX/yFDBAD4aGl9DrC3u11sTYP9RKK//vHViBhrxN+6v9nYMty8ZzeW3Qed2EuO3BlJImLqAsqfjoif/+47v0yn6NF9SIB2dp425nu7+WP9f5L2f6OnHyHfccvnu+1Wb+w3fWy1/g/65/fp+OdLJ8d/V/cf6BnL/h4b/4zl21y7b+L06z/3osOuZ+ibTpeO/75y6Nm2g/Hf/kNrU0PNpY9lY76R5P6Dcint2z4eETMxkk+X57Ks7Z+Cmnn131edyj88/vvXj7/7i7T8dH6QI/diOB/1xnN5/8vG60uLtcWLiD2L/2nE1eF28Sf749/kSP0v7Ed6p+NRj1bNN778/Z91ypnGn8bbmk7G31v1ZxGfbVv/B3WZdH0+cTZrDrOtRtHGb/7204lO5R/Ufz6bp+W33gv0Q1r/E93jn0pT1c2tlcVyubRePX8Zf342+YdO2w63//bxZ+3/iLT9jybfztKtlvZ4sVZbn4sYTb55cv2Ng31by638afwzn2l//bdv/42+IH1PeG9/qbvhl6O/ah6qbfyZnU7x91Ya/9K56r9Lot7c59im569XhjqVf7b6n89SM801Z+n/TjnTt2jNAAAAAAAAAAAAAAAAAAAAAAAAAHB+uYi4HEmusJ/O5QqFxm94fzImcuVKtXbtfmVjbSmy38qeipFc66suJw99H+pc8/vwW8s3ji1/ISI+ERE/yY9ny4Vipbw06OABAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoOnS0d//f5LOCoXGtr/nB312AEDPjA36BACAvvP6DwAfnvO9/o/37DwAgP459/v/etKbEwEA+ubMr//3enseAED/uP8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAj925fTud6v/Z3S6my0uPNjdWKo+uL5WqK4XVjWKhWFl/WFiuVJbLpUKxstrxQDuNWblSeTgfaxuPZ2ulam22url1d7WysVa7+2B1cbl0tzTSt8gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Oyqm1sri+VyaV2iS2K8NN45TxIRAz/D0xJpXV/kAYff0ZB3/jqSteuumWPqvWn8o13yJBdZ1vjxNYd7ifFBdE0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA74X/BwAA///YTBJy") prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r5 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r6) sendmsg$NL80211_CMD_GET_SCAN(r6, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x1c, r7, 0xb29, 0x0, 0x0, {{}, {@val={0x5}, @void}}}, 0x1c}}, 0x2404c044) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="b1921d91d43adc04000000", @ANYRES16=r7, @ANYBLOB="200029bd7000fedbdf2544000000040070000a0018000303030303030000"], 0x24}, 0x1, 0x0, 0x0, 0x4004084}, 0x4008080) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) 0s ago: executing program 0 (id=854): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f0000000400)=@delpolicy={0xa4, 0x14, 0x20, 0x70bd28, 0x25dfdbfd, {{@in6=@loopback, @in=@multicast1, 0x4e21, 0x0, 0x4e23, 0x1, 0xa, 0xa0, 0x80, 0x8}, 0x6e6bba, 0x2}, [@mark={0xc, 0x15, {0x35075a, 0x3}}, @srcaddr={0x14, 0xd, @in=@multicast1}, @coaddr={0x14, 0xe, @in6=@mcast1}, @replay_val={0x10, 0xa, {0x70bd25, 0x70bd2a, 0x824}}, @extra_flags={0x8, 0x18, 0xa}, @proto={0x5, 0x19, 0x33}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) writev(r2, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}, {0x0, 0x900}], 0x2) kernel console output (not intermixed with test programs): EXT4-fs (loop3): Remounting filesystem read-only [ 85.149782][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.150308][ T5460] veth1_vlan: entered promiscuous mode [ 85.172638][ T5649] EXT4-fs warning (device loop3): ext4_evict_inode:273: xattr delete (err -30) [ 85.182328][ T5460] veth0_macvtap: entered promiscuous mode [ 85.190134][ T5460] veth1_macvtap: entered promiscuous mode [ 85.190713][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.209934][ T5460] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.217224][ T5649] EXT4-fs (loop3): 1 orphan inode deleted [ 85.231211][ T5460] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.252398][ T42] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.273058][ T42] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.303199][ T42] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.327970][ T42] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.358299][ T5709] netlink: 'syz.1.487': attribute type 10 has an invalid length. [ 85.366055][ T5709] netlink: 40 bytes leftover after parsing attributes in process `syz.1.487'. [ 85.525045][ T5713] set_capacity_and_notify: 3 callbacks suppressed [ 85.525167][ T5713] loop1: detected capacity change from 0 to 512 [ 85.588860][ T5720] loop5: detected capacity change from 0 to 512 [ 85.602505][ T5720] EXT4-fs (loop5): orphan cleanup on readonly fs [ 85.612071][ T5720] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.491: Failed to acquire dquot type 1 [ 85.623704][ T5720] EXT4-fs (loop5): 1 truncate cleaned up [ 85.674665][ T5713] EXT4-fs (loop1): 1 truncate cleaned up [ 85.714388][ T5730] hub 9-0:1.0: USB hub found [ 85.735139][ T5730] hub 9-0:1.0: 8 ports detected [ 85.829634][ T5732] loop4: detected capacity change from 0 to 512 [ 85.838085][ T5732] EXT4-fs (loop4): orphan cleanup on readonly fs [ 85.844800][ T5732] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.493: Failed to acquire dquot type 1 [ 85.858164][ T5732] EXT4-fs (loop4): 1 truncate cleaned up [ 85.875131][ T5742] SELinux: failed to load policy [ 85.882729][ T5742] blktrace: Concurrent blktraces are not allowed on loop6 [ 85.892799][ T5742] loop3: detected capacity change from 0 to 512 [ 85.911149][ T5742] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #18: comm syz.3.497: iget: bad extra_isize 90 (inode size 256) [ 85.934387][ T5747] loop5: detected capacity change from 0 to 2048 [ 85.954828][ T5742] EXT4-fs (loop3): Remounting filesystem read-only [ 85.968339][ T5742] EXT4-fs warning (device loop3): ext4_evict_inode:273: xattr delete (err -30) [ 85.983718][ T5752] SELinux: policydb magic number 0x6c65732f does not match expected magic number 0xf97cff8c [ 86.003812][ T5746] lo speed is unknown, defaulting to 1000 [ 86.003873][ T5742] EXT4-fs (loop3): 1 orphan inode deleted [ 86.027457][ T5752] SELinux: failed to load policy [ 86.039050][ T5752] blktrace: Concurrent blktraces are not allowed on loop2 [ 86.063040][ T5752] loop1: detected capacity change from 0 to 512 [ 86.106342][ T5752] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #18: comm syz.1.502: iget: bad extra_isize 90 (inode size 256) [ 86.136322][ T5752] EXT4-fs (loop1): Remounting filesystem read-only [ 86.146546][ T5752] EXT4-fs warning (device loop1): ext4_evict_inode:273: xattr delete (err -30) [ 86.167764][ T5752] EXT4-fs (loop1): 1 orphan inode deleted [ 86.190487][ T5765] SELinux: failed to load policy [ 86.198144][ T5765] blktrace: Concurrent blktraces are not allowed on loop8 [ 86.209865][ T5765] loop4: detected capacity change from 0 to 512 [ 86.222562][ T5765] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: inode #18: comm syz.4.506: iget: bad extra_isize 90 (inode size 256) [ 86.242532][ T5765] EXT4-fs (loop4): Remounting filesystem read-only [ 86.255795][ T5768] loop3: detected capacity change from 0 to 1024 [ 86.267955][ T5765] EXT4-fs warning (device loop4): ext4_evict_inode:273: xattr delete (err -30) [ 86.272295][ T5768] EXT4-fs: Ignoring removed mblk_io_submit option [ 86.277321][ T5765] EXT4-fs (loop4): 1 orphan inode deleted [ 86.288550][ T5775] hub 9-0:1.0: USB hub found [ 86.290083][ T5768] EXT4-fs: inline encryption not supported [ 86.295859][ T5775] hub 9-0:1.0: 8 ports detected [ 86.305039][ T5768] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 86.316414][ T5768] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 86.331396][ T5768] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 2: comm syz.3.507: lblock 2 mapped to illegal pblock 2 (length 1) [ 86.348217][ T5768] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 48: comm syz.3.507: lblock 0 mapped to illegal pblock 48 (length 1) [ 86.375114][ T5768] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.507: Failed to acquire dquot type 0 [ 86.386830][ T5768] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 86.396486][ T5768] EXT4-fs error (device loop3): ext4_evict_inode:253: inode #11: comm syz.3.507: mark_inode_dirty error [ 86.408378][ T5768] EXT4-fs warning (device loop3): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 86.418718][ T5768] EXT4-fs (loop3): 1 orphan inode deleted [ 86.426404][ T911] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:8: lblock 1 mapped to illegal pblock 1 (length 1) [ 86.455999][ T5784] hub 9-0:1.0: USB hub found [ 86.460704][ T911] EXT4-fs error (device loop3): ext4_release_dquot:7022: comm kworker/u8:8: Failed to release dquot type 0 [ 86.460822][ T5784] hub 9-0:1.0: 8 ports detected [ 86.482088][ T5780] lo speed is unknown, defaulting to 1000 [ 86.589350][ T5768] EXT4-fs error (device loop3): __ext4_get_inode_loc:4830: comm syz.3.507: Invalid inode table block 1 in block_group 0 [ 86.613695][ T5768] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 86.692175][ T5768] EXT4-fs error (device loop3): ext4_quota_off:7270: inode #3: comm syz.3.507: mark_inode_dirty error [ 86.834670][ T5792] loop4: detected capacity change from 0 to 512 [ 86.854082][ T5792] EXT4-fs (loop4): 1 truncate cleaned up [ 86.908575][ T5796] loop5: detected capacity change from 0 to 1024 [ 86.918201][ T5796] EXT4-fs: Ignoring removed bh option [ 86.923676][ T5796] EXT4-fs: inline encryption not supported [ 86.967654][ T5796] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 87.001323][ T5796] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 87.028385][ T5796] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #3: block 2: comm syz.5.518: lblock 2 mapped to illegal pblock 2 (length 1) [ 87.035986][ T5805] hub 9-0:1.0: USB hub found [ 87.067052][ T5807] EXT4-fs: Ignoring removed mblk_io_submit option [ 87.072511][ T5805] hub 9-0:1.0: 8 ports detected [ 87.074054][ T5807] EXT4-fs: inline encryption not supported [ 87.084773][ T5807] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 87.097698][ T5807] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 87.114272][ T5796] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #3: block 48: comm syz.5.518: lblock 0 mapped to illegal pblock 48 (length 1) [ 87.128654][ T5796] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.518: Failed to acquire dquot type 0 [ 87.139997][ T5796] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 87.150791][ T5796] EXT4-fs error (device loop5): ext4_evict_inode:253: inode #11: comm syz.5.518: mark_inode_dirty error [ 87.162309][ T5796] EXT4-fs warning (device loop5): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 87.173349][ T5807] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #3: block 2: comm syz.4.521: lblock 2 mapped to illegal pblock 2 (length 1) [ 87.189285][ T5796] EXT4-fs (loop5): 1 orphan inode deleted [ 87.208091][ T3692] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:15: lblock 1 mapped to illegal pblock 1 (length 1) [ 87.225392][ T5768] netlink: 'syz.3.507': attribute type 3 has an invalid length. [ 87.234761][ T3692] EXT4-fs error (device loop5): ext4_release_dquot:7022: comm kworker/u8:15: Failed to release dquot type 0 [ 87.257663][ T5807] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #3: block 48: comm syz.4.521: lblock 0 mapped to illegal pblock 48 (length 1) [ 87.278768][ T5796] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 87.298447][ T5814] EXT4-fs: Ignoring removed mblk_io_submit option [ 87.304936][ T5807] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.521: Failed to acquire dquot type 0 [ 87.334707][ T5814] EXT4-fs: inline encryption not supported [ 87.340974][ T5807] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 87.350570][ T5814] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 87.383432][ T5814] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 87.402213][ T5807] EXT4-fs error (device loop4): ext4_evict_inode:253: inode #11: comm syz.4.521: mark_inode_dirty error [ 87.419071][ T5817] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 87.438892][ T5814] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #3: block 2: comm syz.0.524: lblock 2 mapped to illegal pblock 2 (length 1) [ 87.468118][ T5814] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #3: block 48: comm syz.0.524: lblock 0 mapped to illegal pblock 48 (length 1) [ 87.494566][ T5807] EXT4-fs warning (device loop4): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 87.515457][ T5817] ext4 filesystem being mounted at /15/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.529668][ T5814] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.524: Failed to acquire dquot type 0 [ 87.555031][ T5823] FAULT_INJECTION: forcing a failure. [ 87.555031][ T5823] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 87.568096][ T5823] CPU: 1 UID: 0 PID: 5823 Comm: syz.1.527 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 87.568222][ T5823] Tainted: [W]=WARN [ 87.568228][ T5823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 87.568239][ T5823] Call Trace: [ 87.568245][ T5823] [ 87.568252][ T5823] __dump_stack+0x1d/0x30 [ 87.568277][ T5823] dump_stack_lvl+0xe8/0x140 [ 87.568300][ T5823] dump_stack+0x15/0x1b [ 87.568337][ T5823] should_fail_ex+0x265/0x280 [ 87.568356][ T5823] should_fail+0xb/0x20 [ 87.568372][ T5823] should_fail_usercopy+0x1a/0x20 [ 87.568392][ T5823] _copy_from_user+0x1c/0xb0 [ 87.568439][ T5823] ucma_write+0xd9/0x250 [ 87.568542][ T5823] vfs_writev+0x406/0x8b0 [ 87.568563][ T5823] ? __pfx_ucma_write+0x10/0x10 [ 87.568591][ T5823] do_writev+0xe7/0x210 [ 87.568617][ T5823] __x64_sys_writev+0x45/0x50 [ 87.568681][ T5823] x64_sys_call+0x1ba5/0x3000 [ 87.568701][ T5823] do_syscall_64+0xd8/0x2a0 [ 87.568728][ T5823] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.568745][ T5823] RIP: 0033:0x7ff10e0df749 [ 87.568759][ T5823] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 87.568823][ T5823] RSP: 002b:00007ff10cb47038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 87.568841][ T5823] RAX: ffffffffffffffda RBX: 00007ff10e335fa0 RCX: 00007ff10e0df749 [ 87.568907][ T5823] RDX: 0000000000000002 RSI: 0000200000000040 RDI: 0000000000000004 [ 87.568919][ T5823] RBP: 00007ff10cb47090 R08: 0000000000000000 R09: 0000000000000000 [ 87.568929][ T5823] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 87.568941][ T5823] R13: 00007ff10e336038 R14: 00007ff10e335fa0 R15: 00007ffcecf737f8 [ 87.568966][ T5823] [ 87.569168][ T29] kauditd_printk_skb: 717 callbacks suppressed [ 87.569180][ T29] audit: type=1326 audit(1765219383.710:15800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5815 comm="syz.5.525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8413e0f749 code=0x7ffc0000 [ 87.632921][ T5807] EXT4-fs (loop4): 1 orphan inode deleted [ 87.638761][ T29] audit: type=1400 audit(1765219383.760:15801): avc: denied { map_create } for pid=5824 comm="syz.3.528" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 87.647873][ T341] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 87.649705][ T29] audit: type=1400 audit(1765219383.760:15802): avc: denied { bpf } for pid=5824 comm="syz.3.528" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 87.663571][ T29] audit: type=1400 audit(1765219383.760:15803): avc: denied { map_read map_write } for pid=5824 comm="syz.3.528" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 87.671049][ T341] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 87.673852][ T29] audit: type=1400 audit(1765219383.770:15804): avc: denied { prog_load } for pid=5824 comm="syz.3.528" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 87.693476][ T341] EXT4-fs error (device loop4): ext4_release_dquot:7022: comm kworker/u8:6: Failed to release dquot type 0 [ 87.701869][ T29] audit: type=1400 audit(1765219383.770:15805): avc: denied { perfmon } for pid=5824 comm="syz.3.528" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 87.716922][ T5814] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 87.717825][ T29] audit: type=1400 audit(1765219383.770:15806): avc: denied { mounton } for pid=5824 comm="syz.3.528" path="/116/file0" dev="tmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 87.742475][ T5814] EXT4-fs error (device loop0): ext4_evict_inode:253: inode #11: comm syz.0.524: mark_inode_dirty error [ 87.744857][ T29] audit: type=1326 audit(1765219383.770:15807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5815 comm="syz.5.525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8413e0f749 code=0x7ffc0000 [ 87.776004][ T5814] EXT4-fs warning (device loop0): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 87.780042][ T29] audit: type=1400 audit(1765219383.770:15808): avc: denied { prog_run } for pid=5815 comm="syz.5.525" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 87.888526][ T5825] EXT4-fs error (device loop3): ext4_quota_enable:7177: comm syz.3.528: inode #2048: comm syz.3.528: iget: illegal inode # [ 87.928074][ T5814] EXT4-fs (loop0): 1 orphan inode deleted [ 87.956819][ T5825] EXT4-fs error (device loop3): ext4_quota_enable:7180: comm syz.3.528: Bad quota inode: 2048, type: 2 [ 87.979831][ T341] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 87.990622][ T5825] EXT4-fs warning (device loop3): ext4_enable_quotas:7221: Failed to enable quota tracking (type=2, err=-117, ino=2048). Please run e2fsck to fix. [ 88.038989][ T341] EXT4-fs error (device loop0): ext4_release_dquot:7022: comm kworker/u8:6: Failed to release dquot type 0 [ 88.079879][ T5828] EXT4-fs error (device loop1): ext4_quota_enable:7177: comm syz.1.529: inode #2048: comm syz.1.529: iget: illegal inode # [ 88.080187][ T5825] EXT4-fs (loop3): mount failed [ 88.098144][ T5814] EXT4-fs error (device loop0): __ext4_get_inode_loc:4830: comm syz.0.524: Invalid inode table block 1 in block_group 0 [ 88.111125][ T5814] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 88.118295][ T5828] EXT4-fs error (device loop1): ext4_quota_enable:7180: comm syz.1.529: Bad quota inode: 2048, type: 2 [ 88.131776][ T5814] EXT4-fs error (device loop0): ext4_quota_off:7270: inode #3: comm syz.0.524: mark_inode_dirty error [ 88.152613][ T5807] EXT4-fs error (device loop4): __ext4_get_inode_loc:4830: comm syz.4.521: Invalid inode table block 1 in block_group 0 [ 88.175492][ T5831] netlink: 'syz.5.530': attribute type 10 has an invalid length. [ 88.183266][ T5831] netlink: 40 bytes leftover after parsing attributes in process `syz.5.530'. [ 88.193793][ T5828] EXT4-fs warning (device loop1): ext4_enable_quotas:7221: Failed to enable quota tracking (type=2, err=-117, ino=2048). Please run e2fsck to fix. [ 88.215831][ T5831] batman_adv: batadv0: Adding interface: veth1_vlan [ 88.222455][ T5831] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.249262][ T5807] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 88.249276][ T5828] EXT4-fs (loop1): mount failed [ 88.250308][ T5831] batman_adv: batadv0: Interface activated: veth1_vlan [ 88.299232][ T5807] EXT4-fs error (device loop4): ext4_quota_off:7270: inode #3: comm syz.4.521: mark_inode_dirty error [ 88.305859][ T5814] netlink: 'syz.0.524': attribute type 3 has an invalid length. [ 88.337313][ T5840] hub 9-0:1.0: USB hub found [ 88.342085][ T5840] hub 9-0:1.0: 8 ports detected [ 88.428427][ T5846] lo speed is unknown, defaulting to 1000 [ 88.452584][ T3712] hid-generic 0000:0100:0001.0001: unknown main item tag 0x0 [ 88.462108][ T3712] hid-generic 0000:0100:0001.0001: hidraw0: HID v0.28 Device [syz1] on syz0 [ 88.511664][ T5807] netlink: 'syz.4.521': attribute type 3 has an invalid length. [ 88.593713][ T5853] SELinux: failed to load policy [ 88.733754][ T5859] EXT4-fs error (device loop5): ext4_xattr_inode_iget:441: inode #18: comm syz.5.537: iget: bad extra_isize 90 (inode size 256) [ 88.757545][ T5864] EXT4-fs: Ignoring removed bh option [ 88.762606][ T5859] EXT4-fs (loop5): Remounting filesystem read-only [ 88.769600][ T5859] EXT4-fs warning (device loop5): ext4_evict_inode:273: xattr delete (err -30) [ 88.771685][ T5864] EXT4-fs: inline encryption not supported [ 88.778597][ T5859] EXT4-fs (loop5): 1 orphan inode deleted [ 88.793932][ T5864] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 88.816463][ T5866] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 88.827176][ T5864] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 88.836969][ T5866] EXT4-fs (loop0): 1 truncate cleaned up [ 88.845569][ T5864] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #3: block 2: comm syz.4.540: lblock 2 mapped to illegal pblock 2 (length 1) [ 88.860326][ T5864] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #3: block 48: comm syz.4.540: lblock 0 mapped to illegal pblock 48 (length 1) [ 88.875077][ T5864] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.540: Failed to acquire dquot type 0 [ 88.876704][ T5870] FAULT_INJECTION: forcing a failure. [ 88.876704][ T5870] name failslab, interval 1, probability 0, space 0, times 0 [ 88.898968][ T5870] CPU: 0 UID: 0 PID: 5870 Comm: syz.5.542 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 88.899049][ T5870] Tainted: [W]=WARN [ 88.899056][ T5870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 88.899123][ T5870] Call Trace: [ 88.899129][ T5870] [ 88.899137][ T5870] __dump_stack+0x1d/0x30 [ 88.899162][ T5870] dump_stack_lvl+0xe8/0x140 [ 88.899229][ T5870] dump_stack+0x15/0x1b [ 88.899248][ T5870] should_fail_ex+0x265/0x280 [ 88.899270][ T5870] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 88.899299][ T5870] should_failslab+0x8c/0xb0 [ 88.899388][ T5870] kmem_cache_alloc_lru_noprof+0x6d/0x4c0 [ 88.899467][ T5870] ? shmem_alloc_inode+0x34/0x50 [ 88.899495][ T5870] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 88.899521][ T5870] shmem_alloc_inode+0x34/0x50 [ 88.899563][ T5870] alloc_inode+0x40/0x170 [ 88.899583][ T5870] new_inode+0x1d/0xe0 [ 88.899605][ T5870] shmem_get_inode+0x246/0x750 [ 88.899687][ T5870] __shmem_file_setup+0x113/0x210 [ 88.899712][ T5870] shmem_file_setup+0x3b/0x50 [ 88.899736][ T5870] __se_sys_memfd_create+0x2f7/0x6b0 [ 88.899844][ T5870] __x64_sys_memfd_create+0x31/0x40 [ 88.899873][ T5870] x64_sys_call+0x28cb/0x3000 [ 88.899897][ T5870] do_syscall_64+0xd8/0x2a0 [ 88.899928][ T5870] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.899998][ T5870] RIP: 0033:0x7f8413e0f749 [ 88.900013][ T5870] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 88.900054][ T5870] RSP: 002b:00007f8412876e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 88.900091][ T5870] RAX: ffffffffffffffda RBX: 00000000000005d2 RCX: 00007f8413e0f749 [ 88.900104][ T5870] RDX: 00007f8412876ef0 RSI: 0000000000000000 RDI: 00007f8413e94960 [ 88.900136][ T5870] RBP: 0000200000001200 R08: 00007f8412876bb7 R09: 00007f8412876e40 [ 88.900269][ T5870] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000400 [ 88.900282][ T5870] R13: 00007f8412876ef0 R14: 00007f8412876eb0 R15: 0000200000000640 [ 88.900355][ T5870] [ 89.014695][ T5882] EXT4-fs error (device loop5): ext4_quota_enable:7177: comm syz.5.543: inode #2048: comm syz.5.543: iget: illegal inode # [ 89.017458][ T5864] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 89.022437][ T5882] EXT4-fs error (device loop5): ext4_quota_enable:7180: comm syz.5.543: Bad quota inode: 2048, type: 2 [ 89.028202][ T5864] EXT4-fs error (device loop4): ext4_evict_inode:253: inode #11: comm syz.4.540: mark_inode_dirty error [ 89.033208][ T5882] EXT4-fs warning (device loop5): ext4_enable_quotas:7221: Failed to enable quota tracking (type=2, err=-117, ino=2048). Please run e2fsck to fix. [ 89.060862][ T5864] EXT4-fs warning (device loop4): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 89.075659][ T5882] EXT4-fs (loop5): mount failed [ 89.076488][ T5864] EXT4-fs (loop4): 1 orphan inode deleted [ 89.120710][ T5889] netlink: 'syz.5.544': attribute type 10 has an invalid length. [ 89.191326][ T5889] netlink: 40 bytes leftover after parsing attributes in process `syz.5.544'. [ 89.200326][ T341] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 89.216004][ T341] EXT4-fs error (device loop4): ext4_release_dquot:7022: comm kworker/u8:6: Failed to release dquot type 0 [ 89.228322][ T5864] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 89.270146][ T5905] hub 9-0:1.0: USB hub found [ 89.274859][ T5905] hub 9-0:1.0: 8 ports detected [ 89.314138][ T5906] SELinux: failed to load policy [ 89.331778][ T5910] SELinux: policydb magic number 0x6c65732f does not match expected magic number 0xf97cff8c [ 89.357891][ T5910] SELinux: failed to load policy [ 89.365739][ T5910] blktrace: Concurrent blktraces are not allowed on loop2 [ 89.399368][ T5906] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: inode #18: comm syz.4.547: iget: bad extra_isize 90 (inode size 256) [ 89.413492][ T5906] EXT4-fs (loop4): Remounting filesystem read-only [ 89.414593][ T5910] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #18: comm syz.1.548: iget: bad extra_isize 90 (inode size 256) [ 89.427685][ T5906] EXT4-fs warning (device loop4): ext4_evict_inode:273: xattr delete (err -30) [ 89.449937][ T5906] EXT4-fs (loop4): 1 orphan inode deleted [ 89.467954][ T5910] EXT4-fs (loop1): Remounting filesystem read-only [ 89.479985][ T5910] EXT4-fs warning (device loop1): ext4_evict_inode:273: xattr delete (err -30) [ 89.506144][ T5910] EXT4-fs (loop1): 1 orphan inode deleted [ 89.524111][ T5942] lo speed is unknown, defaulting to 1000 [ 89.645685][ T5951] netlink: 'syz.1.555': attribute type 10 has an invalid length. [ 89.653484][ T5951] netlink: 40 bytes leftover after parsing attributes in process `syz.1.555'. [ 89.660730][ T5940] SELinux: failed to load policy [ 89.861545][ T5940] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: inode #18: comm syz.4.554: iget: bad extra_isize 90 (inode size 256) [ 89.910989][ T5968] EXT4-fs: Ignoring removed mblk_io_submit option [ 89.932225][ T5968] EXT4-fs: inline encryption not supported [ 89.941274][ T5940] EXT4-fs (loop4): Remounting filesystem read-only [ 89.960745][ T5968] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 89.975557][ T5940] EXT4-fs warning (device loop4): ext4_evict_inode:273: xattr delete (err -30) [ 89.999218][ T5940] EXT4-fs (loop4): 1 orphan inode deleted [ 90.005742][ T5968] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 90.031534][ T5969] EXT4-fs (loop5): orphan cleanup on readonly fs [ 90.038274][ T5969] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.552: Failed to acquire dquot type 1 [ 90.071700][ T5968] EXT4-fs error (device loop1): ext4_map_blocks:783: inode #3: block 2: comm syz.1.556: lblock 2 mapped to illegal pblock 2 (length 1) [ 90.131961][ T5979] netlink: 32 bytes leftover after parsing attributes in process `syz.4.557'. [ 90.171550][ T5968] EXT4-fs error (device loop1): ext4_map_blocks:783: inode #3: block 48: comm syz.1.556: lblock 0 mapped to illegal pblock 48 (length 1) [ 90.260935][ T5968] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.556: Failed to acquire dquot type 0 [ 90.279174][ T5969] EXT4-fs (loop5): 1 truncate cleaned up [ 90.319654][ T5988] EXT4-fs: Ignoring removed bh option [ 90.325071][ T5988] EXT4-fs: inline encryption not supported [ 90.331655][ T5988] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 90.357932][ T5968] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 90.373603][ T5988] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 90.381938][ T5968] EXT4-fs error (device loop1): ext4_evict_inode:253: inode #11: comm syz.1.556: mark_inode_dirty error [ 90.398105][ T5968] EXT4-fs warning (device loop1): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 90.413305][ T5988] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #3: block 2: comm syz.4.558: lblock 2 mapped to illegal pblock 2 (length 1) [ 90.424817][ T5968] EXT4-fs (loop1): 1 orphan inode deleted [ 90.433088][ T5988] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #3: block 48: comm syz.4.558: lblock 0 mapped to illegal pblock 48 (length 1) [ 90.437878][ T1849] EXT4-fs error (device loop1): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:10: lblock 1 mapped to illegal pblock 1 (length 1) [ 90.481872][ T1849] EXT4-fs error (device loop1): ext4_release_dquot:7022: comm kworker/u8:10: Failed to release dquot type 0 [ 90.493882][ T5988] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.558: Failed to acquire dquot type 0 [ 90.536977][ T5988] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 90.558543][ T5968] EXT4-fs error (device loop1): __ext4_get_inode_loc:4830: comm syz.1.556: Invalid inode table block 1 in block_group 0 [ 90.575636][ T5988] EXT4-fs error (device loop4): ext4_evict_inode:253: inode #11: comm syz.4.558: mark_inode_dirty error [ 90.600314][ T5968] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 90.621856][ T5988] EXT4-fs warning (device loop4): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 90.636609][ T5968] EXT4-fs error (device loop1): ext4_quota_off:7270: inode #3: comm syz.1.556: mark_inode_dirty error [ 90.655429][ T6004] netlink: 32 bytes leftover after parsing attributes in process `syz.3.559'. [ 90.667086][ T5988] EXT4-fs (loop4): 1 orphan inode deleted [ 90.677949][ T3692] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:15: lblock 1 mapped to illegal pblock 1 (length 1) [ 90.715170][ T3692] EXT4-fs error (device loop4): ext4_release_dquot:7022: comm kworker/u8:15: Failed to release dquot type 0 [ 90.751092][ T5988] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 90.934152][ T6032] SELinux: failed to load policy [ 90.942531][ T6032] set_capacity_and_notify: 18 callbacks suppressed [ 90.942543][ T6032] loop1: detected capacity change from 0 to 512 [ 90.958919][ T6032] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #18: comm syz.1.564: iget: bad extra_isize 90 (inode size 256) [ 90.972567][ T6032] EXT4-fs (loop1): Remounting filesystem read-only [ 90.979420][ T6032] EXT4-fs warning (device loop1): ext4_evict_inode:273: xattr delete (err -30) [ 90.988876][ T6032] EXT4-fs (loop1): 1 orphan inode deleted [ 91.106916][ T6043] loop4: detected capacity change from 0 to 512 [ 91.178457][ T6043] EXT4-fs (loop4): orphan cleanup on readonly fs [ 91.185208][ T6043] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.565: Failed to acquire dquot type 1 [ 91.197055][ T6043] EXT4-fs (loop4): 1 truncate cleaned up [ 91.538543][ T6046] loop3: detected capacity change from 0 to 1024 [ 91.552524][ T6046] EXT4-fs: Ignoring removed mblk_io_submit option [ 91.569573][ T6046] EXT4-fs: inline encryption not supported [ 91.582885][ T6046] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 91.605558][ T6046] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 91.627288][ T6046] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 2: comm syz.3.566: lblock 2 mapped to illegal pblock 2 (length 1) [ 91.656533][ T6046] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 48: comm syz.3.566: lblock 0 mapped to illegal pblock 48 (length 1) [ 91.686610][ T6046] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.566: Failed to acquire dquot type 0 [ 91.711586][ T6046] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 91.731392][ T6046] EXT4-fs error (device loop3): ext4_evict_inode:253: inode #11: comm syz.3.566: mark_inode_dirty error [ 91.755420][ T6046] EXT4-fs warning (device loop3): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 91.777361][ T6046] EXT4-fs (loop3): 1 orphan inode deleted [ 91.787924][ T1849] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:10: lblock 1 mapped to illegal pblock 1 (length 1) [ 91.821355][ T1849] EXT4-fs error (device loop3): ext4_release_dquot:7022: comm kworker/u8:10: Failed to release dquot type 0 [ 91.847061][ T6046] EXT4-fs error (device loop3): __ext4_get_inode_loc:4830: comm syz.3.566: Invalid inode table block 1 in block_group 0 [ 91.921959][ T6046] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 91.974614][ T6046] EXT4-fs error (device loop3): ext4_quota_off:7270: inode #3: comm syz.3.566: mark_inode_dirty error [ 92.133973][ T6071] loop0: detected capacity change from 0 to 1024 [ 92.160920][ T6073] hub 9-0:1.0: USB hub found [ 92.171024][ T6071] EXT4-fs: Ignoring removed mblk_io_submit option [ 92.182947][ T6074] syz.3.569 uses obsolete (PF_INET,SOCK_PACKET) [ 92.197872][ T6073] hub 9-0:1.0: 8 ports detected [ 92.202817][ T6071] EXT4-fs: inline encryption not supported [ 92.223397][ T6071] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 92.241533][ T6074] netdevsim netdevsim3: Direct firmware load for (tun failed with error -2 [ 92.272097][ T6071] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 92.298401][ T6077] netlink: 20 bytes leftover after parsing attributes in process `syz.1.572'. [ 92.318553][ T6071] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #3: block 2: comm syz.0.570: lblock 2 mapped to illegal pblock 2 (length 1) [ 92.368697][ T6071] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #3: block 48: comm syz.0.570: lblock 0 mapped to illegal pblock 48 (length 1) [ 92.403623][ T6071] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.570: Failed to acquire dquot type 0 [ 92.430164][ T6071] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 92.449435][ T6071] EXT4-fs error (device loop0): ext4_evict_inode:253: inode #11: comm syz.0.570: mark_inode_dirty error [ 92.462854][ T6071] EXT4-fs warning (device loop0): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 92.480590][ T6071] EXT4-fs (loop0): 1 orphan inode deleted [ 92.496495][ T911] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:8: lblock 1 mapped to illegal pblock 1 (length 1) [ 92.511234][ T911] EXT4-fs error (device loop0): ext4_release_dquot:7022: comm kworker/u8:8: Failed to release dquot type 0 [ 92.529799][ T6071] EXT4-fs error (device loop0): __ext4_get_inode_loc:4830: comm syz.0.570: Invalid inode table block 1 in block_group 0 [ 92.543579][ T6071] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 92.571929][ T6071] EXT4-fs error (device loop0): ext4_quota_off:7270: inode #3: comm syz.0.570: mark_inode_dirty error [ 92.600421][ T29] kauditd_printk_skb: 469 callbacks suppressed [ 92.600494][ T29] audit: type=1326 audit(1765219388.740:16258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6070 comm="syz.0.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f992862f749 code=0x7ffc0000 [ 92.654665][ T6071] loop0: detected capacity change from 0 to 2048 [ 92.664816][ T6087] cgroup: fork rejected by pids controller in /syz1 [ 92.675130][ T29] audit: type=1326 audit(1765219388.770:16259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6070 comm="syz.0.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f992862f749 code=0x7ffc0000 [ 92.698588][ T29] audit: type=1326 audit(1765219388.770:16260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6070 comm="syz.0.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f992862f749 code=0x7ffc0000 [ 92.722030][ T29] audit: type=1326 audit(1765219388.770:16261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6070 comm="syz.0.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f992862f749 code=0x7ffc0000 [ 92.745428][ T29] audit: type=1326 audit(1765219388.770:16262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6070 comm="syz.0.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f992862f749 code=0x7ffc0000 [ 92.768798][ T29] audit: type=1326 audit(1765219388.770:16263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6070 comm="syz.0.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f992862f749 code=0x7ffc0000 [ 92.792091][ T29] audit: type=1326 audit(1765219388.770:16264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6070 comm="syz.0.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f992862f749 code=0x7ffc0000 [ 92.815526][ T29] audit: type=1326 audit(1765219388.770:16265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6070 comm="syz.0.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9928631667 code=0x7ffc0000 [ 92.838927][ T29] audit: type=1326 audit(1765219388.770:16266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6070 comm="syz.0.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f99286315dc code=0x7ffc0000 [ 92.862217][ T29] audit: type=1326 audit(1765219388.770:16267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6070 comm="syz.0.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f9928631514 code=0x7ffc0000 [ 92.941119][ T6071] netlink: 'syz.0.570': attribute type 3 has an invalid length. [ 92.967378][ T6125] lo speed is unknown, defaulting to 1000 [ 93.014656][ T6128] lo speed is unknown, defaulting to 1000 [ 93.108585][ T6134] loop5: detected capacity change from 0 to 1024 [ 93.132581][ T6134] EXT4-fs: Ignoring removed bh option [ 93.147922][ T6134] EXT4-fs: inline encryption not supported [ 93.149369][ T6136] loop0: detected capacity change from 0 to 1024 [ 93.157056][ T6134] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 93.177642][ T6136] EXT4-fs: Ignoring removed mblk_io_submit option [ 93.184696][ T6136] EXT4-fs: inline encryption not supported [ 93.191946][ T6134] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 93.206382][ T6134] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #3: block 2: comm syz.5.579: lblock 2 mapped to illegal pblock 2 (length 1) [ 93.231826][ T6136] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 93.252846][ T6134] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #3: block 48: comm syz.5.579: lblock 0 mapped to illegal pblock 48 (length 1) [ 93.267170][ T6134] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.579: Failed to acquire dquot type 0 [ 93.279056][ T6136] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 93.288243][ T6134] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 93.298902][ T6136] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #3: block 2: comm syz.0.580: lblock 2 mapped to illegal pblock 2 (length 1) [ 93.313173][ T6134] EXT4-fs error (device loop5): ext4_evict_inode:253: inode #11: comm syz.5.579: mark_inode_dirty error [ 93.324650][ T6136] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #3: block 48: comm syz.0.580: lblock 0 mapped to illegal pblock 48 (length 1) [ 93.340404][ T6134] EXT4-fs warning (device loop5): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 93.350937][ T6136] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.580: Failed to acquire dquot type 0 [ 93.362365][ T6134] EXT4-fs (loop5): 1 orphan inode deleted [ 93.369005][ T6136] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 93.378659][ T3683] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:13: lblock 1 mapped to illegal pblock 1 (length 1) [ 93.393313][ T3683] EXT4-fs error (device loop5): ext4_release_dquot:7022: comm kworker/u8:13: Failed to release dquot type 0 [ 93.407070][ T6136] EXT4-fs error (device loop0): ext4_evict_inode:253: inode #11: comm syz.0.580: mark_inode_dirty error [ 93.423629][ T6134] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 93.435875][ T6136] EXT4-fs warning (device loop0): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 93.446240][ T6136] EXT4-fs (loop0): 1 orphan inode deleted [ 93.457883][ T1849] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:10: lblock 1 mapped to illegal pblock 1 (length 1) [ 93.473422][ T1849] EXT4-fs error (device loop0): ext4_release_dquot:7022: comm kworker/u8:10: Failed to release dquot type 0 [ 93.486620][ T6136] EXT4-fs error (device loop0): __ext4_get_inode_loc:4830: comm syz.0.580: Invalid inode table block 1 in block_group 0 [ 93.490572][ T6158] netlink: 32 bytes leftover after parsing attributes in process `syz.5.582'. [ 93.499386][ T6136] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 93.526192][ T6136] EXT4-fs error (device loop0): ext4_quota_off:7270: inode #3: comm syz.0.580: mark_inode_dirty error [ 93.552081][ T6161] netlink: 20 bytes leftover after parsing attributes in process `syz.5.583'. [ 93.605068][ T6164] lo speed is unknown, defaulting to 1000 [ 93.672940][ T6169] xt_hashlimit: max too large, truncated to 1048576 [ 93.739714][ T6175] bridge: RTM_NEWNEIGH with invalid ether address [ 93.749785][ T6177] loop0: detected capacity change from 0 to 512 [ 93.762252][ T6177] EXT4-fs error (device loop0): ext4_quota_enable:7177: comm syz.0.590: inode #2048: comm syz.0.590: iget: illegal inode # [ 93.778934][ T6177] EXT4-fs error (device loop0): ext4_quota_enable:7180: comm syz.0.590: Bad quota inode: 2048, type: 2 [ 93.781325][ T6180] loop4: detected capacity change from 0 to 512 [ 93.796822][ T6180] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 93.806508][ T6177] EXT4-fs warning (device loop0): ext4_enable_quotas:7221: Failed to enable quota tracking (type=2, err=-117, ino=2048). Please run e2fsck to fix. [ 93.812008][ T6182] hub 9-0:1.0: USB hub found [ 93.826385][ T6182] hub 9-0:1.0: 8 ports detected [ 93.831798][ T6177] EXT4-fs (loop0): mount failed [ 93.833524][ T6180] EXT4-fs (loop4): 1 truncate cleaned up [ 93.895858][ T6190] loop0: detected capacity change from 0 to 4096 [ 93.918856][ T6198] EXT4-fs: Ignoring removed mblk_io_submit option [ 93.921506][ T6197] EXT4-fs: Ignoring removed bh option [ 93.934207][ T6197] EXT4-fs: inline encryption not supported [ 93.939537][ T6198] EXT4-fs: inline encryption not supported [ 93.945959][ T6197] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 93.947555][ T6198] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 93.967739][ T6197] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 93.976548][ T6198] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 93.984140][ T6197] EXT4-fs error (device loop1): ext4_map_blocks:783: inode #3: block 2: comm syz.1.596: lblock 2 mapped to illegal pblock 2 (length 1) [ 93.998775][ T6197] EXT4-fs error (device loop1): ext4_map_blocks:783: inode #3: block 48: comm syz.1.596: lblock 0 mapped to illegal pblock 48 (length 1) [ 94.000957][ T6198] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 2: comm syz.3.597: lblock 2 mapped to illegal pblock 2 (length 1) [ 94.027836][ T6198] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 48: comm syz.3.597: lblock 0 mapped to illegal pblock 48 (length 1) [ 94.038764][ T6197] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.596: Failed to acquire dquot type 0 [ 94.054756][ T6198] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.597: Failed to acquire dquot type 0 [ 94.054697][ T6197] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 94.054941][ T6197] EXT4-fs error (device loop1): ext4_evict_inode:253: inode #11: comm syz.1.596: mark_inode_dirty error [ 94.077946][ T6197] EXT4-fs warning (device loop1): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 94.086664][ T6198] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 94.103843][ T6197] EXT4-fs (loop1): 1 orphan inode deleted [ 94.106502][ T6198] EXT4-fs error (device loop3): ext4_evict_inode:253: inode #11: comm syz.3.597: mark_inode_dirty error [ 94.119508][ T1849] EXT4-fs error (device loop1): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:10: lblock 1 mapped to illegal pblock 1 (length 1) [ 94.131354][ T6198] EXT4-fs warning (device loop3): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 94.147432][ T6198] EXT4-fs (loop3): 1 orphan inode deleted [ 94.154075][ T1849] EXT4-fs error (device loop1): ext4_release_dquot:7022: comm kworker/u8:10: Failed to release dquot type 0 [ 94.165987][ T1849] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:10: lblock 1 mapped to illegal pblock 1 (length 1) [ 94.180649][ T1849] EXT4-fs error (device loop3): ext4_release_dquot:7022: comm kworker/u8:10: Failed to release dquot type 0 [ 94.207279][ T6197] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 94.221805][ T3314] EXT4-fs error (device loop3): __ext4_get_inode_loc:4830: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 94.235803][ T3314] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 94.245868][ T3314] EXT4-fs error (device loop3): ext4_quota_off:7270: inode #3: comm syz-executor: mark_inode_dirty error [ 94.316001][ T6221] SELinux: failed to load policy [ 94.331333][ T6239] netlink: 'syz.3.599': attribute type 10 has an invalid length. [ 94.333626][ T6221] /dev/loop0: Can't open blockdev [ 94.339151][ T6239] netlink: 40 bytes leftover after parsing attributes in process `syz.3.599'. [ 94.447412][ T6258] hub 9-0:1.0: USB hub found [ 94.453284][ T6258] hub 9-0:1.0: 8 ports detected [ 94.518980][ T6270] Process accounting resumed [ 94.542738][ T6282] netlink: 12 bytes leftover after parsing attributes in process `syz.5.610'. [ 94.555149][ T6288] random: crng reseeded on system resumption [ 94.563470][ T6285] netlink: 20 bytes leftover after parsing attributes in process `syz.1.611'. [ 94.587564][ T6282] 8021q: adding VLAN 0 to HW filter on device bond1 [ 94.620506][ T6300] netlink: 'syz.5.615': attribute type 10 has an invalid length. [ 94.628322][ T6300] netlink: 40 bytes leftover after parsing attributes in process `syz.5.615'. [ 94.655377][ T6307] FAULT_INJECTION: forcing a failure. [ 94.655377][ T6307] name failslab, interval 1, probability 0, space 0, times 0 [ 94.668117][ T6307] CPU: 0 UID: 0 PID: 6307 Comm: syz.0.617 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 94.668145][ T6307] Tainted: [W]=WARN [ 94.668189][ T6307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 94.668199][ T6307] Call Trace: [ 94.668205][ T6307] [ 94.668213][ T6307] __dump_stack+0x1d/0x30 [ 94.668237][ T6307] dump_stack_lvl+0xe8/0x140 [ 94.668287][ T6307] dump_stack+0x15/0x1b [ 94.668308][ T6307] should_fail_ex+0x265/0x280 [ 94.668396][ T6307] should_failslab+0x8c/0xb0 [ 94.668419][ T6307] kmem_cache_alloc_noprof+0x69/0x4b0 [ 94.668442][ T6307] ? alloc_empty_file+0x76/0x200 [ 94.668521][ T6307] alloc_empty_file+0x76/0x200 [ 94.668543][ T6307] path_openat+0x63/0x23b0 [ 94.668634][ T6307] ? __rcu_read_unlock+0x4f/0x70 [ 94.668665][ T6307] ? path_openat+0x1d88/0x23b0 [ 94.668695][ T6307] ? path_openat+0x1e82/0x23b0 [ 94.668725][ T6307] ? _parse_integer_limit+0x170/0x190 [ 94.668808][ T6307] do_filp_open+0x109/0x230 [ 94.668934][ T6310] netlink: 4 bytes leftover after parsing attributes in process `syz.5.618'. [ 94.668960][ T6307] do_open_execat+0xd8/0x260 [ 94.668988][ T6307] alloc_bprm+0x25/0x350 [ 94.669067][ T6307] do_execveat_common+0x12e/0x750 [ 94.669110][ T6307] ? getname_flags+0x154/0x3b0 [ 94.669211][ T6307] __x64_sys_execveat+0x73/0x90 [ 94.669261][ T6307] x64_sys_call+0x1c0e/0x3000 [ 94.669286][ T6307] do_syscall_64+0xd8/0x2a0 [ 94.669356][ T6307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.669378][ T6307] RIP: 0033:0x7f992862f749 [ 94.669392][ T6307] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 94.669425][ T6307] RSP: 002b:00007f9927097038 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 94.669444][ T6307] RAX: ffffffffffffffda RBX: 00007f9928885fa0 RCX: 00007f992862f749 [ 94.669457][ T6307] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 94.669470][ T6307] RBP: 00007f9927097090 R08: 0000000000001000 R09: 0000000000000000 [ 94.669483][ T6307] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 94.669495][ T6307] R13: 00007f9928886038 R14: 00007f9928885fa0 R15: 00007fff81f6aa48 [ 94.669513][ T6307] [ 94.721083][ T6314] hub 9-0:1.0: USB hub found [ 94.744516][ T6310] netlink: 12 bytes leftover after parsing attributes in process `syz.5.618'. [ 94.747529][ T6314] hub 9-0:1.0: 8 ports detected [ 94.941010][ T6336] netlink: 20 bytes leftover after parsing attributes in process `syz.5.624'. [ 94.987944][ T6346] FAULT_INJECTION: forcing a failure. [ 94.987944][ T6346] name failslab, interval 1, probability 0, space 0, times 0 [ 94.996245][ T6347] netlink: 'syz.5.628': attribute type 10 has an invalid length. [ 95.000588][ T6346] CPU: 1 UID: 0 PID: 6346 Comm: syz.0.627 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 95.000616][ T6346] Tainted: [W]=WARN [ 95.000623][ T6346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 95.000635][ T6346] Call Trace: [ 95.000641][ T6346] [ 95.000649][ T6346] __dump_stack+0x1d/0x30 [ 95.000686][ T6346] dump_stack_lvl+0xe8/0x140 [ 95.000709][ T6346] dump_stack+0x15/0x1b [ 95.000727][ T6346] should_fail_ex+0x265/0x280 [ 95.000749][ T6346] should_failslab+0x8c/0xb0 [ 95.000836][ T6346] __kvmalloc_node_noprof+0x149/0x6b0 [ 95.000862][ T6346] ? xt_alloc_entry_offsets+0x4d/0x60 [ 95.000947][ T6346] ? refill_obj_stock+0x254/0x2e0 [ 95.000976][ T6346] xt_alloc_entry_offsets+0x4d/0x60 [ 95.001018][ T6346] translate_table+0xa9/0xf90 [ 95.001037][ T6346] ? __rcu_read_unlock+0x4f/0x70 [ 95.001060][ T6346] ? should_fail_ex+0xdb/0x280 [ 95.001082][ T6346] ? _copy_from_user+0x89/0xb0 [ 95.001176][ T6346] do_ipt_set_ctl+0x66f/0x820 [ 95.001195][ T6346] ? _raw_spin_unlock_bh+0x36/0x40 [ 95.001240][ T6346] ? tcp_release_cb+0xf1/0x370 [ 95.001274][ T6346] nf_setsockopt+0x199/0x1b0 [ 95.001295][ T6346] ip_setsockopt+0x102/0x110 [ 95.001322][ T6346] tcp_setsockopt+0x98/0xb0 [ 95.001431][ T6346] sock_common_setsockopt+0x69/0x80 [ 95.001449][ T6346] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 95.001471][ T6346] __sys_setsockopt+0x184/0x200 [ 95.001494][ T6346] __x64_sys_setsockopt+0x64/0x80 [ 95.001514][ T6346] x64_sys_call+0x21d5/0x3000 [ 95.001613][ T6346] do_syscall_64+0xd8/0x2a0 [ 95.001643][ T6346] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.001663][ T6346] RIP: 0033:0x7f992862f749 [ 95.001678][ T6346] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 95.001713][ T6346] RSP: 002b:00007f9927097038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 95.001732][ T6346] RAX: ffffffffffffffda RBX: 00007f9928885fa0 RCX: 00007f992862f749 [ 95.001745][ T6346] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000007 [ 95.001757][ T6346] RBP: 00007f9927097090 R08: 00000000000003f0 R09: 0000000000000000 [ 95.001770][ T6346] R10: 0000200000000580 R11: 0000000000000246 R12: 0000000000000001 [ 95.001782][ T6346] R13: 00007f9928886038 R14: 00007f9928885fa0 R15: 00007fff81f6aa48 [ 95.001800][ T6346] [ 95.241681][ T6347] netlink: 40 bytes leftover after parsing attributes in process `syz.5.628'. [ 95.426058][ T6408] SELinux: policydb magic number 0x6c65732f does not match expected magic number 0xf97cff8c [ 95.436324][ T6408] SELinux: failed to load policy [ 95.445665][ T6408] /dev/loop0: Can't open blockdev [ 95.510617][ T6413] lo speed is unknown, defaulting to 1000 [ 95.520407][ T6421] hub 9-0:1.0: USB hub found [ 95.525372][ T6421] hub 9-0:1.0: 8 ports detected [ 95.530936][ T6419] lo speed is unknown, defaulting to 1000 [ 95.564371][ T6422] SELinux: policydb magic number 0x6c65732f does not match expected magic number 0xf97cff8c [ 95.588586][ T6424] hub 9-0:1.0: USB hub found [ 95.598878][ T6424] hub 9-0:1.0: 8 ports detected [ 95.609483][ T6422] SELinux: failed to load policy [ 95.668351][ T6414] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #18: comm syz.1.634: iget: bad extra_isize 90 (inode size 256) [ 95.745749][ T6414] EXT4-fs (loop1): Remounting filesystem read-only [ 95.752695][ T6414] EXT4-fs warning (device loop1): ext4_evict_inode:273: xattr delete (err -30) [ 95.762091][ T6414] EXT4-fs (loop1): 1 orphan inode deleted [ 95.796693][ T6431] netlink: 'syz.1.641': attribute type 10 has an invalid length. [ 95.879759][ T6434] EXT4-fs (loop0): orphan cleanup on readonly fs [ 95.886942][ T6434] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.640: Failed to acquire dquot type 1 [ 95.961108][ T6434] EXT4-fs (loop0): 1 truncate cleaned up [ 96.198328][ T6437] set_capacity_and_notify: 6 callbacks suppressed [ 96.198391][ T6437] loop3: detected capacity change from 0 to 1024 [ 96.223697][ T6437] EXT4-fs: Ignoring removed bh option [ 96.226449][ T6439] loop1: detected capacity change from 0 to 512 [ 96.238586][ T6437] EXT4-fs: inline encryption not supported [ 96.250008][ T6437] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 96.359311][ T6437] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 96.386161][ T6439] EXT4-fs error (device loop1): ext4_quota_enable:7177: comm syz.1.645: inode #2048: comm syz.1.645: iget: illegal inode # [ 96.400410][ T6437] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 2: comm syz.3.643: lblock 2 mapped to illegal pblock 2 (length 1) [ 96.433834][ T6439] EXT4-fs error (device loop1): ext4_quota_enable:7180: comm syz.1.645: Bad quota inode: 2048, type: 2 [ 96.448164][ T6439] EXT4-fs warning (device loop1): ext4_enable_quotas:7221: Failed to enable quota tracking (type=2, err=-117, ino=2048). Please run e2fsck to fix. [ 96.463523][ T6437] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 48: comm syz.3.643: lblock 0 mapped to illegal pblock 48 (length 1) [ 96.486908][ T6439] EXT4-fs (loop1): mount failed [ 96.548306][ T6437] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.643: Failed to acquire dquot type 0 [ 96.565624][ T6437] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 96.616412][ T6437] EXT4-fs error (device loop3): ext4_evict_inode:253: inode #11: comm syz.3.643: mark_inode_dirty error [ 96.648310][ T6437] EXT4-fs warning (device loop3): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 96.669403][ T6437] EXT4-fs (loop3): 1 orphan inode deleted [ 96.682025][ T6437] EXT4-fs mount: 75 callbacks suppressed [ 96.682087][ T6437] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.700536][ T341] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 96.728829][ T341] EXT4-fs error (device loop3): ext4_release_dquot:7022: comm kworker/u8:6: Failed to release dquot type 0 [ 96.758096][ T6437] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 97.159402][ T6455] hub 9-0:1.0: USB hub found [ 97.164313][ T6455] hub 9-0:1.0: 8 ports detected [ 97.378529][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.388889][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.430200][ T6460] loop4: detected capacity change from 0 to 7 [ 97.448696][ T6459] SELinux: failed to load policy [ 97.459031][ T6459] loop1: detected capacity change from 0 to 512 [ 97.465391][ T6464] loop0: detected capacity change from 0 to 512 [ 97.472251][ T6460] Buffer I/O error on dev loop4, logical block 0, async page read [ 97.473733][ T6459] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #18: comm syz.1.654: iget: bad extra_isize 90 (inode size 256) [ 97.498770][ T6464] loop0: detected capacity change from 0 to 128 [ 97.505405][ T6460] Buffer I/O error on dev loop4, logical block 0, async page read [ 97.513262][ T6460] loop4: unable to read partition table [ 97.560547][ T6467] pim6reg: entered allmulticast mode [ 97.578860][ T6464] FAT-fs (loop0): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 97.610845][ T29] kauditd_printk_skb: 393 callbacks suppressed [ 97.610911][ T29] audit: type=1326 audit(1765219393.750:16644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6456 comm="syz.5.651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8413e0f749 code=0x7ffc0000 [ 97.678597][ T6467] pim6reg: left allmulticast mode [ 97.698959][ T6460] loop_reread_partitions: partition scan of loop4 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 97.722004][ T29] audit: type=1326 audit(1765219393.780:16645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6456 comm="syz.5.651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8413e0f749 code=0x7ffc0000 [ 97.745423][ T29] audit: type=1326 audit(1765219393.780:16646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6456 comm="syz.5.651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8413e0f749 code=0x7ffc0000 [ 97.768862][ T29] audit: type=1326 audit(1765219393.780:16647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6456 comm="syz.5.651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8413e0f749 code=0x7ffc0000 [ 97.792235][ T29] audit: type=1326 audit(1765219393.780:16648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6456 comm="syz.5.651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8413e0f749 code=0x7ffc0000 [ 97.815626][ T29] audit: type=1326 audit(1765219393.780:16649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6456 comm="syz.5.651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f8413e0f749 code=0x7ffc0000 [ 97.838914][ T29] audit: type=1400 audit(1765219393.780:16650): avc: denied { execmem } for pid=6466 comm="syz.3.653" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 97.858147][ T29] audit: type=1326 audit(1765219393.790:16651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6463 comm="syz.0.652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f992862f749 code=0x7ffc0000 [ 97.881543][ T29] audit: type=1326 audit(1765219393.790:16652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6463 comm="syz.0.652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f992862f749 code=0x7ffc0000 [ 97.904892][ T29] audit: type=1326 audit(1765219393.790:16653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6463 comm="syz.0.652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=282 compat=0 ip=0x7f992862f749 code=0x7ffc0000 [ 98.140713][ T6477] SELinux: policydb magic number 0x6c65732f does not match expected magic number 0xf97cff8c [ 98.161177][ T6477] SELinux: failed to load policy [ 98.178950][ T6477] loop0: detected capacity change from 0 to 512 [ 98.304936][ T6457] syz.5.651 (6457) used greatest stack depth: 7240 bytes left [ 98.315836][ T6477] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: inode #18: comm syz.0.656: iget: bad extra_isize 90 (inode size 256) [ 98.353394][ T6479] loop3: detected capacity change from 0 to 512 [ 98.381952][ T6477] EXT4-fs (loop0): Remounting filesystem read-only [ 98.392043][ T6477] EXT4-fs warning (device loop0): ext4_evict_inode:273: xattr delete (err -30) [ 98.428011][ T6477] EXT4-fs (loop0): 1 orphan inode deleted [ 98.445515][ T6459] EXT4-fs (loop1): Remounting filesystem read-only [ 98.452309][ T6459] EXT4-fs warning (device loop1): ext4_evict_inode:273: xattr delete (err -30) [ 98.471942][ T6477] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.494749][ T6479] EXT4-fs (loop3): orphan cleanup on readonly fs [ 98.504581][ T6459] EXT4-fs (loop1): 1 orphan inode deleted [ 98.522048][ T6483] lo speed is unknown, defaulting to 1000 [ 98.532044][ T6459] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.544820][ T6477] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.555493][ T6479] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.653: Failed to acquire dquot type 1 [ 98.589044][ T6459] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.667179][ T6479] EXT4-fs (loop3): 1 truncate cleaned up [ 98.705388][ T6490] __nla_validate_parse: 1 callbacks suppressed [ 98.705404][ T6490] netlink: 20 bytes leftover after parsing attributes in process `syz.1.660'. [ 98.724333][ T6479] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 99.020178][ T6500] loop5: detected capacity change from 0 to 512 [ 99.051382][ T6500] EXT4-fs error (device loop5): ext4_quota_enable:7177: comm syz.5.665: inode #2048: comm syz.5.665: iget: illegal inode # [ 99.068367][ T6500] EXT4-fs error (device loop5): ext4_quota_enable:7180: comm syz.5.665: Bad quota inode: 2048, type: 2 [ 99.114012][ T6503] SELinux: failed to load policy [ 99.148011][ T6500] EXT4-fs warning (device loop5): ext4_enable_quotas:7221: Failed to enable quota tracking (type=2, err=-117, ino=2048). Please run e2fsck to fix. [ 99.205457][ T6509] SELinux: policydb magic number 0x6c65732f does not match expected magic number 0xf97cff8c [ 99.216204][ T6500] EXT4-fs (loop5): mount failed [ 99.221424][ T6509] SELinux: failed to load policy [ 99.230490][ T6511] netlink: 32 bytes leftover after parsing attributes in process `syz.1.669'. [ 99.263928][ T6509] loop0: detected capacity change from 0 to 512 [ 99.346317][ T6509] /dev/loop0: Can't open blockdev [ 99.424009][ T6514] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 99.444573][ T6513] EXT4-fs (loop4): orphan cleanup on readonly fs [ 99.452645][ T6513] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.667: Failed to acquire dquot type 1 [ 99.464735][ T6513] EXT4-fs (loop4): 1 truncate cleaned up [ 99.540942][ T6514] EXT4-fs error (device loop5): ext4_orphan_get:1391: inode #15: comm syz.5.670: inode has both inline data and extents flags [ 99.568248][ T6514] EXT4-fs (loop5): Remounting filesystem read-only [ 99.593380][ T6514] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.670316][ T6514] lo speed is unknown, defaulting to 1000 [ 100.158198][ T6535] hub 9-0:1.0: USB hub found [ 100.195612][ T6513] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 100.250511][ T5460] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.273903][ T6535] hub 9-0:1.0: 8 ports detected [ 100.691354][ T6544] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.717275][ T6544] ext4 filesystem being mounted at /48/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.912097][ T6550] netlink: 260 bytes leftover after parsing attributes in process `syz.0.683'. [ 100.976611][ T6552] EXT4-fs: Ignoring removed bh option [ 100.987451][ T6552] EXT4-fs: inline encryption not supported [ 101.000266][ T6552] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 101.021803][ T6552] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 101.039444][ T6552] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #3: block 2: comm syz.0.684: lblock 2 mapped to illegal pblock 2 (length 1) [ 101.068856][ T6552] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #3: block 48: comm syz.0.684: lblock 0 mapped to illegal pblock 48 (length 1) [ 101.097966][ T6552] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.684: Failed to acquire dquot type 0 [ 101.137775][ T6552] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 101.162447][ T6552] EXT4-fs error (device loop0): ext4_evict_inode:253: inode #11: comm syz.0.684: mark_inode_dirty error [ 101.180105][ T5460] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.180557][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.222788][ T6552] EXT4-fs warning (device loop0): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 101.237905][ T6552] EXT4-fs (loop0): 1 orphan inode deleted [ 101.244086][ T6552] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.258203][ T3683] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:13: lblock 1 mapped to illegal pblock 1 (length 1) [ 101.277965][ T3683] EXT4-fs error (device loop0): ext4_release_dquot:7022: comm kworker/u8:13: Failed to release dquot type 0 [ 101.309967][ T6552] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 101.334514][ T6555] set_capacity_and_notify: 4 callbacks suppressed [ 101.334529][ T6555] loop5: detected capacity change from 0 to 128 [ 101.366693][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.453821][ T6569] loop5: detected capacity change from 0 to 512 [ 101.461889][ T6567] netlink: 20 bytes leftover after parsing attributes in process `syz.0.691'. [ 101.479227][ T6565] loop4: detected capacity change from 0 to 1024 [ 101.485814][ T6565] EXT4-fs: Ignoring removed bh option [ 101.502676][ T6571] SELinux: failed to load policy [ 101.512725][ T6569] EXT4-fs error (device loop5): ext4_quota_enable:7177: comm syz.5.690: inode #2048: comm syz.5.690: iget: illegal inode # [ 101.517913][ T6565] EXT4-fs: inline encryption not supported [ 101.539030][ T6565] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 101.552397][ T6571] loop1: detected capacity change from 0 to 512 [ 101.567157][ T6569] EXT4-fs error (device loop5): ext4_quota_enable:7180: comm syz.5.690: Bad quota inode: 2048, type: 2 [ 101.581293][ T6565] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 101.590876][ T6571] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #18: comm syz.1.689: iget: bad extra_isize 90 (inode size 256) [ 101.604341][ T6569] EXT4-fs warning (device loop5): ext4_enable_quotas:7221: Failed to enable quota tracking (type=2, err=-117, ino=2048). Please run e2fsck to fix. [ 101.621627][ T6565] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #3: block 2: comm syz.4.688: lblock 2 mapped to illegal pblock 2 (length 1) [ 101.644749][ T6571] EXT4-fs (loop1): Remounting filesystem read-only [ 101.651839][ T6569] EXT4-fs (loop5): mount failed [ 101.655717][ T6578] netlink: 12 bytes leftover after parsing attributes in process `syz.0.693'. [ 101.656786][ T6565] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #3: block 48: comm syz.4.688: lblock 0 mapped to illegal pblock 48 (length 1) [ 101.668062][ T6571] EXT4-fs warning (device loop1): ext4_evict_inode:273: xattr delete (err -30) [ 101.694460][ T6578] 8021q: adding VLAN 0 to HW filter on device bond2 [ 101.704073][ T6578] netlink: 36 bytes leftover after parsing attributes in process `syz.0.693'. [ 101.713219][ T6571] EXT4-fs (loop1): 1 orphan inode deleted [ 101.718137][ T6565] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.688: Failed to acquire dquot type 0 [ 101.719549][ T6571] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.742291][ T6578] netlink: 4 bytes leftover after parsing attributes in process `syz.0.693'. [ 101.752788][ T6565] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 101.753949][ T6571] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.771773][ T6565] EXT4-fs error (device loop4): ext4_evict_inode:253: inode #11: comm syz.4.688: mark_inode_dirty error [ 101.798083][ T6565] EXT4-fs warning (device loop4): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 101.827931][ T6565] EXT4-fs (loop4): 1 orphan inode deleted [ 101.838486][ T6565] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.851352][ T53] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 101.866505][ T53] EXT4-fs error (device loop4): ext4_release_dquot:7022: comm kworker/u8:4: Failed to release dquot type 0 [ 101.894292][ T6589] netlink: 4 bytes leftover after parsing attributes in process `syz.5.698'. [ 101.912133][ T6565] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 101.948323][ T6592] netlink: 12 bytes leftover after parsing attributes in process `syz.5.698'. [ 101.950349][ T6564] Process accounting resumed [ 101.969006][ T6594] FAULT_INJECTION: forcing a failure. [ 101.969006][ T6594] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 101.982117][ T6594] CPU: 1 UID: 0 PID: 6594 Comm: syz.0.700 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 101.982144][ T6594] Tainted: [W]=WARN [ 101.982150][ T6594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 101.982173][ T6594] Call Trace: [ 101.982178][ T6594] [ 101.982184][ T6594] __dump_stack+0x1d/0x30 [ 101.982209][ T6594] dump_stack_lvl+0xe8/0x140 [ 101.982258][ T6594] dump_stack+0x15/0x1b [ 101.982275][ T6594] should_fail_ex+0x265/0x280 [ 101.982319][ T6594] should_fail+0xb/0x20 [ 101.982338][ T6594] should_fail_usercopy+0x1a/0x20 [ 101.982362][ T6594] _copy_from_iter+0xcf/0xe70 [ 101.982386][ T6594] ? __alloc_skb+0x3bb/0x4d0 [ 101.982431][ T6594] ? __alloc_skb+0x24d/0x4d0 [ 101.982455][ T6594] netlink_sendmsg+0x471/0x6b0 [ 101.982485][ T6594] ? __pfx_netlink_sendmsg+0x10/0x10 [ 101.982510][ T6594] __sock_sendmsg+0x145/0x180 [ 101.982541][ T6594] ____sys_sendmsg+0x31e/0x4a0 [ 101.982632][ T6594] ___sys_sendmsg+0x17b/0x1d0 [ 101.982683][ T6594] __x64_sys_sendmsg+0xd4/0x160 [ 101.982709][ T6594] x64_sys_call+0x17ba/0x3000 [ 101.982813][ T6594] do_syscall_64+0xd8/0x2a0 [ 101.982845][ T6594] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.982864][ T6594] RIP: 0033:0x7f992862f749 [ 101.982876][ T6594] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 101.982921][ T6594] RSP: 002b:00007f9927097038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 101.983015][ T6594] RAX: ffffffffffffffda RBX: 00007f9928885fa0 RCX: 00007f992862f749 [ 101.983100][ T6594] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000005 [ 101.983110][ T6594] RBP: 00007f9927097090 R08: 0000000000000000 R09: 0000000000000000 [ 101.983121][ T6594] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 101.983132][ T6594] R13: 00007f9928886038 R14: 00007f9928885fa0 R15: 00007fff81f6aa48 [ 101.983147][ T6594] [ 101.984278][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.110536][ T6601] hub 9-0:1.0: USB hub found [ 102.190637][ T6601] hub 9-0:1.0: 8 ports detected [ 102.215848][ T6605] netlink: 'syz.4.702': attribute type 10 has an invalid length. [ 102.223659][ T6605] netlink: 40 bytes leftover after parsing attributes in process `syz.4.702'. [ 102.262948][ T6607] 8021q: adding VLAN 0 to HW filter on device bond3 [ 102.334637][ T6618] program syz.5.710 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 102.343806][ T6618] FAULT_INJECTION: forcing a failure. [ 102.343806][ T6618] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 102.356854][ T6618] CPU: 0 UID: 0 PID: 6618 Comm: syz.5.710 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 102.356940][ T6618] Tainted: [W]=WARN [ 102.356946][ T6618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 102.357028][ T6618] Call Trace: [ 102.357035][ T6618] [ 102.357041][ T6618] __dump_stack+0x1d/0x30 [ 102.357064][ T6618] dump_stack_lvl+0xe8/0x140 [ 102.357157][ T6618] dump_stack+0x15/0x1b [ 102.357178][ T6618] should_fail_ex+0x265/0x280 [ 102.357202][ T6618] should_fail+0xb/0x20 [ 102.357223][ T6618] should_fail_usercopy+0x1a/0x20 [ 102.357288][ T6618] _copy_from_user+0x1c/0xb0 [ 102.357330][ T6618] scsi_ioctl+0x1108/0x14d0 [ 102.357353][ T6618] ? avc_has_perm+0xf7/0x180 [ 102.357428][ T6618] ? file_has_perm+0x359/0x3a0 [ 102.357482][ T6618] ? do_vfs_ioctl+0x866/0xe10 [ 102.357508][ T6618] sg_ioctl+0xdf6/0x1360 [ 102.357539][ T6618] ? __pfx_sg_ioctl+0x10/0x10 [ 102.357629][ T6618] __se_sys_ioctl+0xce/0x140 [ 102.357653][ T6618] __x64_sys_ioctl+0x43/0x50 [ 102.357760][ T6618] x64_sys_call+0x14b0/0x3000 [ 102.357789][ T6618] do_syscall_64+0xd8/0x2a0 [ 102.357827][ T6618] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.357846][ T6618] RIP: 0033:0x7f8413e0f749 [ 102.357860][ T6618] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 102.357875][ T6618] RSP: 002b:00007f8412877038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 102.357892][ T6618] RAX: ffffffffffffffda RBX: 00007f8414065fa0 RCX: 00007f8413e0f749 [ 102.357905][ T6618] RDX: 00002000000000c0 RSI: 0000000000000001 RDI: 0000000000000006 [ 102.357919][ T6618] RBP: 00007f8412877090 R08: 0000000000000000 R09: 0000000000000000 [ 102.358006][ T6618] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 102.358017][ T6618] R13: 00007f8414066038 R14: 00007f8414065fa0 R15: 00007ffccb674ec8 [ 102.358040][ T6618] [ 102.587660][ T6621] loop4: detected capacity change from 0 to 1024 [ 102.594895][ T6621] EXT4-fs: Ignoring removed bh option [ 102.600807][ T6621] EXT4-fs: inline encryption not supported [ 102.664489][ T29] kauditd_printk_skb: 396 callbacks suppressed [ 102.664504][ T29] audit: type=1326 audit(1765219398.800:17038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6625 comm="syz.5.714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8413e0f749 code=0x7ffc0000 [ 102.703794][ T6621] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 102.717677][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.732817][ T6623] program syz.1.713 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 102.743245][ T6621] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 102.759907][ T29] audit: type=1326 audit(1765219398.830:17039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6625 comm="syz.5.714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8413e0f749 code=0x7ffc0000 [ 102.783303][ T29] audit: type=1326 audit(1765219398.830:17040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6625 comm="syz.5.714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8413e0f749 code=0x7ffc0000 [ 102.806705][ T29] audit: type=1326 audit(1765219398.830:17041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6625 comm="syz.5.714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8413e0f749 code=0x7ffc0000 [ 102.830123][ T29] audit: type=1326 audit(1765219398.830:17042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6625 comm="syz.5.714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f8413e0f749 code=0x7ffc0000 [ 102.853575][ T29] audit: type=1326 audit(1765219398.830:17043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6625 comm="syz.5.714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8413e0f749 code=0x7ffc0000 [ 102.877035][ T29] audit: type=1326 audit(1765219398.830:17044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6625 comm="syz.5.714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8413e0f749 code=0x7ffc0000 [ 102.900515][ T29] audit: type=1326 audit(1765219398.830:17045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6625 comm="syz.5.714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8413e0f749 code=0x7ffc0000 [ 102.923941][ T29] audit: type=1326 audit(1765219398.830:17047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6625 comm="syz.5.714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8413e0f749 code=0x7ffc0000 [ 102.947377][ T29] audit: type=1326 audit(1765219398.830:17046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6625 comm="syz.5.714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f8413e0f749 code=0x7ffc0000 [ 102.979493][ T6621] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #3: block 2: comm syz.4.712: lblock 2 mapped to illegal pblock 2 (length 1) [ 102.997517][ T6621] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #3: block 48: comm syz.4.712: lblock 0 mapped to illegal pblock 48 (length 1) [ 103.011858][ T6621] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.712: Failed to acquire dquot type 0 [ 103.023299][ T6621] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 103.033327][ T6621] EXT4-fs error (device loop4): ext4_evict_inode:253: inode #11: comm syz.4.712: mark_inode_dirty error [ 103.044897][ T6621] EXT4-fs warning (device loop4): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 103.063376][ T6621] EXT4-fs (loop4): 1 orphan inode deleted [ 103.069487][ T6621] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.082105][ T3683] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:13: lblock 1 mapped to illegal pblock 1 (length 1) [ 103.096499][ T3683] EXT4-fs error (device loop4): ext4_release_dquot:7022: comm kworker/u8:13: Failed to release dquot type 0 [ 103.098684][ T6621] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 103.103216][ T6631] loop1: detected capacity change from 0 to 1024 [ 103.115880][ T6631] EXT4-fs: Ignoring removed bh option [ 103.115915][ T6631] EXT4-fs: inline encryption not supported [ 103.135168][ T6631] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 103.136041][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.136461][ T6631] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 103.137450][ T6631] EXT4-fs error (device loop1): ext4_map_blocks:783: inode #3: block 2: comm syz.1.716: lblock 2 mapped to illegal pblock 2 (length 1) [ 103.137544][ T6631] EXT4-fs error (device loop1): ext4_map_blocks:783: inode #3: block 48: comm syz.1.716: lblock 0 mapped to illegal pblock 48 (length 1) [ 103.137619][ T6631] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.716: Failed to acquire dquot type 0 [ 103.137763][ T6631] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 103.138194][ T6631] EXT4-fs error (device loop1): ext4_evict_inode:253: inode #11: comm syz.1.716: mark_inode_dirty error [ 103.138947][ T6631] EXT4-fs warning (device loop1): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 103.138983][ T6631] EXT4-fs (loop1): 1 orphan inode deleted [ 103.139456][ T6631] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.140569][ T911] EXT4-fs error (device loop1): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:8: lblock 1 mapped to illegal pblock 1 (length 1) [ 103.146561][ T911] EXT4-fs error (device loop1): ext4_release_dquot:7022: comm kworker/u8:8: Failed to release dquot type 0 [ 103.146896][ T6631] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 103.164448][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.243684][ T6648] loop4: detected capacity change from 0 to 512 [ 103.264377][ T6643] loop5: detected capacity change from 0 to 1024 [ 103.279834][ T6652] 9p: Bad value for 'rfdno' [ 103.307241][ T6643] EXT4-fs: Ignoring removed mblk_io_submit option [ 103.358745][ T6643] EXT4-fs: inline encryption not supported [ 103.359775][ T6648] EXT4-fs error (device loop4): __ext4_fill_super:5553: inode #2: comm syz.4.719: iget: checksum invalid [ 103.364993][ T6643] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 103.388437][ T6648] EXT4-fs (loop4): get root inode failed [ 103.394062][ T6648] EXT4-fs (loop4): mount failed [ 103.429208][ T6643] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 103.446241][ T6643] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #3: block 2: comm syz.5.718: lblock 2 mapped to illegal pblock 2 (length 1) [ 103.488511][ T6643] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #3: block 48: comm syz.5.718: lblock 0 mapped to illegal pblock 48 (length 1) [ 103.508095][ T6643] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.718: Failed to acquire dquot type 0 [ 103.550652][ T6668] FAULT_INJECTION: forcing a failure. [ 103.550652][ T6668] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 103.563723][ T6668] CPU: 1 UID: 0 PID: 6668 Comm: syz.3.729 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 103.563754][ T6668] Tainted: [W]=WARN [ 103.563762][ T6668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 103.563797][ T6668] Call Trace: [ 103.563802][ T6668] [ 103.563809][ T6668] __dump_stack+0x1d/0x30 [ 103.563829][ T6668] dump_stack_lvl+0xe8/0x140 [ 103.563849][ T6668] dump_stack+0x15/0x1b [ 103.563934][ T6668] should_fail_ex+0x265/0x280 [ 103.564007][ T6668] should_fail+0xb/0x20 [ 103.564026][ T6668] should_fail_usercopy+0x1a/0x20 [ 103.564050][ T6668] copy_fpstate_to_sigframe+0x628/0x7d0 [ 103.564076][ T6668] ? copy_fpstate_to_sigframe+0xe6/0x7d0 [ 103.564129][ T6668] ? x86_task_fpu+0x36/0x60 [ 103.564149][ T6668] get_sigframe+0x34d/0x490 [ 103.564170][ T6668] ? get_signal+0xdc7/0xf70 [ 103.564196][ T6668] x64_setup_rt_frame+0xa8/0x580 [ 103.564234][ T6668] arch_do_signal_or_restart+0x24c/0x450 [ 103.564261][ T6668] exit_to_user_mode_loop+0x6a/0x740 [ 103.564279][ T6668] ? fput+0x8f/0xc0 [ 103.564369][ T6668] ? __x64_sys_pwritev+0x1b2/0x1c0 [ 103.564387][ T6668] ? syscall_exit_work+0x74/0x1f0 [ 103.564484][ T6668] do_syscall_64+0x202/0x2a0 [ 103.564512][ T6668] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.564555][ T6668] RIP: 0033:0x7f7be365f749 [ 103.564568][ T6668] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 103.564614][ T6668] RSP: 002b:00007f7be20c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000128 [ 103.564666][ T6668] RAX: 0000000000000000 RBX: 00007f7be38b5fa0 RCX: 00007f7be365f749 [ 103.564679][ T6668] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 103.564691][ T6668] RBP: 00007f7be20c7090 R08: 0000000000000000 R09: 0000000000000000 [ 103.564704][ T6668] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 103.564717][ T6668] R13: 00007f7be38b6038 R14: 00007f7be38b5fa0 R15: 00007ffc3214f528 [ 103.564735][ T6668] [ 103.764575][ T6643] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 103.783649][ T6643] EXT4-fs error (device loop5): ext4_evict_inode:253: inode #11: comm syz.5.718: mark_inode_dirty error [ 103.808049][ T6643] EXT4-fs warning (device loop5): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 103.820245][ T6643] EXT4-fs (loop5): 1 orphan inode deleted [ 103.827372][ T6643] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.840006][ T53] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 103.864404][ T53] EXT4-fs error (device loop5): ext4_release_dquot:7022: comm kworker/u8:4: Failed to release dquot type 0 [ 103.896367][ T6643] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.902459][ T6674] loop3: detected capacity change from 0 to 1024 [ 103.926919][ T6674] EXT4-fs: Ignoring removed bh option [ 103.943507][ T6674] EXT4-fs: inline encryption not supported [ 103.965398][ T6674] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 103.975963][ T6643] EXT4-fs error (device loop5): __ext4_get_inode_loc:4830: comm syz.5.718: Invalid inode table block 1 in block_group 0 [ 104.021472][ T6674] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 104.023052][ T6643] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 104.038456][ T6674] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 2: comm syz.3.730: lblock 2 mapped to illegal pblock 2 (length 1) [ 104.044666][ T6643] EXT4-fs error (device loop5): ext4_quota_off:7270: inode #3: comm syz.5.718: mark_inode_dirty error [ 104.088134][ T6674] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 48: comm syz.3.730: lblock 0 mapped to illegal pblock 48 (length 1) [ 104.120165][ T6677] __nla_validate_parse: 10 callbacks suppressed [ 104.120232][ T6677] netlink: 36 bytes leftover after parsing attributes in process `syz.1.731'. [ 104.135808][ T6674] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.730: Failed to acquire dquot type 0 [ 104.136407][ T6677] netlink: 4 bytes leftover after parsing attributes in process `syz.1.731'. [ 104.161884][ T6674] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 104.174884][ T6681] 9p: Bad value for 'rfdno' [ 104.198359][ T6674] EXT4-fs error (device loop3): ext4_evict_inode:253: inode #11: comm syz.3.730: mark_inode_dirty error [ 104.220303][ T6679] netlink: 'wޣ': attribute type 30 has an invalid length. [ 104.231115][ T6683] lo speed is unknown, defaulting to 1000 [ 104.239251][ T6674] EXT4-fs warning (device loop3): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 104.245435][ T6641] loop5: detected capacity change from 0 to 2048 [ 104.276889][ T6674] EXT4-fs (loop3): 1 orphan inode deleted [ 104.288152][ T3683] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:13: lblock 1 mapped to illegal pblock 1 (length 1) [ 104.288936][ T6641] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 104.314556][ T3683] EXT4-fs error (device loop3): ext4_release_dquot:7022: comm kworker/u8:13: Failed to release dquot type 0 [ 104.314948][ T6674] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.361412][ T6641] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 104.396603][ T6641] netlink: 'syz.5.718': attribute type 3 has an invalid length. [ 104.415983][ T6674] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 104.510987][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.553449][ T6697] syzkaller1: entered promiscuous mode [ 104.559068][ T6697] syzkaller1: entered allmulticast mode [ 104.590558][ T6699] EXT4-fs: Ignoring removed nobh option [ 104.596157][ T6699] EXT4-fs: Ignoring removed bh option [ 104.624233][ T6699] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.704088][ T6699] IPv6: Can't replace route, no match found [ 104.711655][ T6699] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4215: comm syz.3.738: Allocating blocks 385-513 which overlap fs metadata [ 104.729156][ T6706] hub 9-0:1.0: USB hub found [ 104.733892][ T6706] hub 9-0:1.0: 8 ports detected [ 104.765783][ T6709] EXT4-fs (loop3): pa ffff888107a83380: logic 16, phys. 129, len 24 [ 104.773835][ T6709] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 8 [ 104.798515][ T6711] netlink: 24 bytes leftover after parsing attributes in process `syz.5.742'. [ 104.819213][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.850900][ T6713] syzkaller1: entered promiscuous mode [ 104.856454][ T6713] syzkaller1: entered allmulticast mode [ 104.872930][ T6713] FAULT_INJECTION: forcing a failure. [ 104.872930][ T6713] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 104.886118][ T6713] CPU: 1 UID: 0 PID: 6713 Comm: syz.3.743 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 104.886148][ T6713] Tainted: [W]=WARN [ 104.886155][ T6713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 104.886168][ T6713] Call Trace: [ 104.886174][ T6713] [ 104.886210][ T6713] __dump_stack+0x1d/0x30 [ 104.886291][ T6713] dump_stack_lvl+0xe8/0x140 [ 104.886370][ T6713] dump_stack+0x15/0x1b [ 104.886387][ T6713] should_fail_ex+0x265/0x280 [ 104.886412][ T6713] should_fail+0xb/0x20 [ 104.886432][ T6713] should_fail_usercopy+0x1a/0x20 [ 104.886478][ T6713] _copy_from_iter+0xcf/0xe70 [ 104.886502][ T6713] ? lockref_put_return+0xf7/0x130 [ 104.886531][ T6713] ? __rcu_read_unlock+0x4f/0x70 [ 104.886551][ T6713] tun_get_user+0x3d0/0x2670 [ 104.886611][ T6713] ? _parse_integer_limit+0x170/0x190 [ 104.886652][ T6713] ? ref_tracker_alloc+0x1f2/0x2f0 [ 104.886676][ T6713] ? selinux_file_permission+0x1e2/0x320 [ 104.886702][ T6713] tun_chr_write_iter+0x15e/0x210 [ 104.886723][ T6713] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 104.886760][ T6713] vfs_write+0x52a/0x960 [ 104.886785][ T6713] ksys_write+0xda/0x1a0 [ 104.886806][ T6713] __x64_sys_write+0x40/0x50 [ 104.886837][ T6713] x64_sys_call+0x2847/0x3000 [ 104.886888][ T6713] do_syscall_64+0xd8/0x2a0 [ 104.886921][ T6713] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.886985][ T6713] RIP: 0033:0x7f7be365f749 [ 104.886998][ T6713] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 104.887016][ T6713] RSP: 002b:00007f7be20c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 104.887108][ T6713] RAX: ffffffffffffffda RBX: 00007f7be38b5fa0 RCX: 00007f7be365f749 [ 104.887119][ T6713] RDX: 0000000000000086 RSI: 0000200000000440 RDI: 0000000000000003 [ 104.887130][ T6713] RBP: 00007f7be20c7090 R08: 0000000000000000 R09: 0000000000000000 [ 104.887141][ T6713] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 104.887224][ T6713] R13: 00007f7be38b6038 R14: 00007f7be38b5fa0 R15: 00007ffc3214f528 [ 104.887240][ T6713] [ 105.115163][ T6718] netlink: 36 bytes leftover after parsing attributes in process `syz.1.744'. [ 105.124639][ T6718] netlink: 4 bytes leftover after parsing attributes in process `syz.1.744'. [ 105.162040][ T6720] EXT4-fs: Ignoring removed bh option [ 105.168504][ T6720] EXT4-fs: inline encryption not supported [ 105.176597][ T6722] hub 9-0:1.0: USB hub found [ 105.184511][ T6722] hub 9-0:1.0: 8 ports detected [ 105.191087][ T6720] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 105.201818][ T6724] EXT4-fs: Ignoring removed mblk_io_submit option [ 105.209974][ T6720] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 105.224025][ T6724] EXT4-fs: inline encryption not supported [ 105.230180][ T6724] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 105.242128][ T6720] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #3: block 2: comm syz.5.745: lblock 2 mapped to illegal pblock 2 (length 1) [ 105.267669][ T6727] EXT4-fs: Ignoring removed bh option [ 105.273447][ T6720] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #3: block 48: comm syz.5.745: lblock 0 mapped to illegal pblock 48 (length 1) [ 105.287540][ T6727] EXT4-fs: inline encryption not supported [ 105.293989][ T6727] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 105.304560][ T6724] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 105.313573][ T6724] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 2: comm syz.3.747: lblock 2 mapped to illegal pblock 2 (length 1) [ 105.328316][ T6720] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.745: Failed to acquire dquot type 0 [ 105.348006][ T6720] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 105.348388][ T6727] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 105.362470][ T6720] EXT4-fs error (device loop5): ext4_evict_inode:253: inode #11: comm syz.5.745: mark_inode_dirty error [ 105.366839][ T6727] EXT4-fs error (device loop1): ext4_map_blocks:783: inode #3: block 2: comm syz.1.748: lblock 2 mapped to illegal pblock 2 (length 1) [ 105.376740][ T6724] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 48: comm syz.3.747: lblock 0 mapped to illegal pblock 48 (length 1) [ 105.391587][ T6727] EXT4-fs error (device loop1): ext4_map_blocks:783: inode #3: block 48: comm syz.1.748: lblock 0 mapped to illegal pblock 48 (length 1) [ 105.418742][ T6724] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.747: Failed to acquire dquot type 0 [ 105.430208][ T6720] EXT4-fs warning (device loop5): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 105.439032][ T6727] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.748: Failed to acquire dquot type 0 [ 105.440978][ T6720] EXT4-fs (loop5): 1 orphan inode deleted [ 105.457292][ T6724] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 105.457756][ T6720] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.466793][ T3694] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:16: lblock 1 mapped to illegal pblock 1 (length 1) [ 105.493550][ T6724] EXT4-fs error (device loop3): ext4_evict_inode:253: inode #11: comm syz.3.747: mark_inode_dirty error [ 105.510550][ T6724] EXT4-fs warning (device loop3): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 105.521356][ T6727] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 105.531002][ T6724] EXT4-fs (loop3): 1 orphan inode deleted [ 105.548874][ T6724] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.561347][ T3694] EXT4-fs error (device loop5): ext4_release_dquot:7022: comm kworker/u8:16: Failed to release dquot type 0 [ 105.562310][ T6727] EXT4-fs error (device loop1): ext4_evict_inode:253: inode #11: comm syz.1.748: mark_inode_dirty error [ 105.573179][ T3694] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:16: lblock 1 mapped to illegal pblock 1 (length 1) [ 105.586726][ T6731] EXT4-fs: Ignoring removed bh option [ 105.598527][ T3694] EXT4-fs error (device loop3): ext4_release_dquot:7022: comm kworker/u8:16: Failed to release dquot type 0 [ 105.603753][ T6731] EXT4-fs: inline encryption not supported [ 105.619293][ T6733] xt_hashlimit: max too large, truncated to 1048576 [ 105.621792][ T6731] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 105.627972][ T6720] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 105.637906][ T6727] EXT4-fs warning (device loop1): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 105.656633][ T6727] EXT4-fs (loop1): 1 orphan inode deleted [ 105.662850][ T6727] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.677398][ T6731] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 105.686594][ T6731] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #3: block 2: comm syz.4.749: lblock 2 mapped to illegal pblock 2 (length 1) [ 105.700707][ T6731] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #3: block 48: comm syz.4.749: lblock 0 mapped to illegal pblock 48 (length 1) [ 105.714793][ T3694] EXT4-fs error (device loop1): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:16: lblock 1 mapped to illegal pblock 1 (length 1) [ 105.720208][ T6731] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.749: Failed to acquire dquot type 0 [ 105.733911][ T3694] EXT4-fs error (device loop1): ext4_release_dquot:7022: comm kworker/u8:16: Failed to release dquot type 0 [ 105.752418][ T6731] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 105.752786][ T6724] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.768257][ T6727] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 105.779834][ T6731] EXT4-fs error (device loop4): ext4_evict_inode:253: inode #11: comm syz.4.749: mark_inode_dirty error [ 105.785320][ T6724] EXT4-fs error (device loop3): __ext4_get_inode_loc:4830: comm syz.3.747: Invalid inode table block 1 in block_group 0 [ 105.798225][ T5460] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.812583][ T6724] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 105.822135][ T6731] EXT4-fs warning (device loop4): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 105.832593][ T6724] EXT4-fs error (device loop3): ext4_quota_off:7270: inode #3: comm syz.3.747: mark_inode_dirty error [ 105.843824][ T6731] EXT4-fs (loop4): 1 orphan inode deleted [ 105.853607][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.867940][ T3694] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:16: lblock 1 mapped to illegal pblock 1 (length 1) [ 105.885440][ T6738] netlink: 24 bytes leftover after parsing attributes in process `syz.1.753'. [ 105.888381][ T6731] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.927961][ T3694] EXT4-fs error (device loop4): ext4_release_dquot:7022: comm kworker/u8:16: Failed to release dquot type 0 [ 105.928992][ T6741] xt_hashlimit: max too large, truncated to 1048576 [ 105.951946][ T6724] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 105.966555][ T6724] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 105.995854][ T6731] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 106.011685][ T6724] netlink: 'syz.3.747': attribute type 3 has an invalid length. [ 106.021570][ T6746] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.034390][ T6746] ext4 filesystem being mounted at /161/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.037645][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.124896][ T6758] hub 9-0:1.0: USB hub found [ 106.133920][ T6758] hub 9-0:1.0: 8 ports detected [ 106.140663][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.144456][ T6756] hub 9-0:1.0: USB hub found [ 106.154300][ T6756] hub 9-0:1.0: 8 ports detected [ 106.180451][ T6762] xt_hashlimit: max too large, truncated to 1048576 [ 106.230642][ T6764] EXT4-fs: Ignoring removed bh option [ 106.236181][ T6764] EXT4-fs: inline encryption not supported [ 106.248702][ T6764] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 106.268195][ T6764] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 106.278251][ T6764] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #3: block 2: comm syz.0.763: lblock 2 mapped to illegal pblock 2 (length 1) [ 106.292334][ T6764] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #3: block 48: comm syz.0.763: lblock 0 mapped to illegal pblock 48 (length 1) [ 106.307113][ T6764] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.763: Failed to acquire dquot type 0 [ 106.316405][ T6777] netlink: 4 bytes leftover after parsing attributes in process `syz.3.767'. [ 106.327030][ T6764] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 106.336632][ T6764] EXT4-fs error (device loop0): ext4_evict_inode:253: inode #11: comm syz.0.763: mark_inode_dirty error [ 106.338906][ T6777] netlink: 12 bytes leftover after parsing attributes in process `syz.3.767'. [ 106.350228][ T6764] EXT4-fs warning (device loop0): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 106.366889][ T6764] EXT4-fs (loop0): 1 orphan inode deleted [ 106.373086][ T6764] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.385698][ T3694] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:16: lblock 1 mapped to illegal pblock 1 (length 1) [ 106.402400][ T3694] EXT4-fs error (device loop0): ext4_release_dquot:7022: comm kworker/u8:16: Failed to release dquot type 0 [ 106.461891][ T6764] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 106.469392][ T6782] lo speed is unknown, defaulting to 1000 [ 106.521331][ T6784] SELinux: failed to load policy [ 106.537234][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.553575][ T6790] hub 9-0:1.0: USB hub found [ 106.564832][ T6790] hub 9-0:1.0: 8 ports detected [ 106.572108][ T6775] SELinux: failed to load policy [ 106.616151][ T6775] set_capacity_and_notify: 8 callbacks suppressed [ 106.616166][ T6775] loop1: detected capacity change from 0 to 512 [ 106.630297][ T6797] FAULT_INJECTION: forcing a failure. [ 106.630297][ T6797] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 106.634095][ T6775] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #18: comm syz.1.768: iget: bad extra_isize 90 (inode size 256) [ 106.643447][ T6797] CPU: 0 UID: 0 PID: 6797 Comm: syz.0.772 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 106.643486][ T6797] Tainted: [W]=WARN [ 106.643494][ T6797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 106.643506][ T6797] Call Trace: [ 106.643512][ T6797] [ 106.643520][ T6797] __dump_stack+0x1d/0x30 [ 106.643614][ T6797] dump_stack_lvl+0xe8/0x140 [ 106.643636][ T6797] dump_stack+0x15/0x1b [ 106.643655][ T6797] should_fail_ex+0x265/0x280 [ 106.643731][ T6797] should_fail+0xb/0x20 [ 106.643750][ T6797] should_fail_usercopy+0x1a/0x20 [ 106.643774][ T6797] _copy_to_user+0x20/0xa0 [ 106.643843][ T6797] simple_read_from_buffer+0xb5/0x130 [ 106.643864][ T6797] proc_fail_nth_read+0x10e/0x150 [ 106.643925][ T6797] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 106.643951][ T6797] vfs_read+0x1a8/0x770 [ 106.643969][ T6797] ? __rcu_read_unlock+0x4f/0x70 [ 106.644036][ T6797] ? __fget_files+0x184/0x1c0 [ 106.644058][ T6797] ? mutex_lock+0x58/0x90 [ 106.644138][ T6797] ksys_read+0xda/0x1a0 [ 106.644157][ T6797] __x64_sys_read+0x40/0x50 [ 106.644176][ T6797] x64_sys_call+0x2889/0x3000 [ 106.644200][ T6797] do_syscall_64+0xd8/0x2a0 [ 106.644303][ T6797] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.644322][ T6797] RIP: 0033:0x7f992862e15c [ 106.644335][ T6797] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 106.644352][ T6797] RSP: 002b:00007f9927076030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 106.644377][ T6797] RAX: ffffffffffffffda RBX: 00007f9928886090 RCX: 00007f992862e15c [ 106.644391][ T6797] RDX: 000000000000000f RSI: 00007f99270760a0 RDI: 0000000000000005 [ 106.644403][ T6797] RBP: 00007f9927076090 R08: 0000000000000000 R09: 0000000000000000 [ 106.644416][ T6797] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 106.644429][ T6797] R13: 00007f9928886128 R14: 00007f9928886090 R15: 00007fff81f6aa48 [ 106.644452][ T6797] [ 106.673023][ T6795] hub 9-0:1.0: USB hub found [ 106.791215][ T6775] EXT4-fs (loop1): Remounting filesystem read-only [ 106.801640][ T6795] hub 9-0:1.0: 8 ports detected [ 106.810092][ T6775] EXT4-fs warning (device loop1): ext4_evict_inode:273: xattr delete (err -30) [ 106.880780][ T6804] loop0: detected capacity change from 0 to 1024 [ 106.887695][ T6804] EXT4-fs: Ignoring removed mblk_io_submit option [ 106.895493][ T6775] EXT4-fs (loop1): 1 orphan inode deleted [ 106.896885][ T6804] EXT4-fs: inline encryption not supported [ 106.901905][ T6775] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.909197][ T6804] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 106.921668][ T6775] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.942666][ T6802] xt_hashlimit: max too large, truncated to 1048576 [ 106.951812][ T6804] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 106.960783][ T6804] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #3: block 2: comm syz.0.776: lblock 2 mapped to illegal pblock 2 (length 1) [ 106.974744][ T6804] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #3: block 48: comm syz.0.776: lblock 0 mapped to illegal pblock 48 (length 1) [ 107.009753][ T6804] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.776: Failed to acquire dquot type 0 [ 107.029863][ T6804] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 107.059863][ T6813] 9pnet_fd: Insufficient options for proto=fd [ 107.066128][ T6804] EXT4-fs error (device loop0): ext4_evict_inode:253: inode #11: comm syz.0.776: mark_inode_dirty error [ 107.077590][ T6804] EXT4-fs warning (device loop0): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 107.088408][ T6804] EXT4-fs (loop0): 1 orphan inode deleted [ 107.098825][ T6804] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.098954][ T6811] netlink: 'syz.3.779': attribute type 10 has an invalid length. [ 107.119068][ T6811] netlink: 40 bytes leftover after parsing attributes in process `syz.3.779'. [ 107.129019][ T3688] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:14: lblock 1 mapped to illegal pblock 1 (length 1) [ 107.149581][ T6817] syzkaller0: entered promiscuous mode [ 107.155103][ T6817] syzkaller0: entered allmulticast mode [ 107.164711][ T3688] EXT4-fs error (device loop0): ext4_release_dquot:7022: comm kworker/u8:14: Failed to release dquot type 0 [ 107.181505][ T6804] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.202869][ T6804] EXT4-fs error (device loop0): __ext4_get_inode_loc:4830: comm syz.0.776: Invalid inode table block 1 in block_group 0 [ 107.219560][ T6804] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 107.231556][ T6823] loop1: detected capacity change from 0 to 512 [ 107.231945][ T6822] hub 9-0:1.0: USB hub found [ 107.242659][ T6804] EXT4-fs error (device loop0): ext4_quota_off:7270: inode #3: comm syz.0.776: mark_inode_dirty error [ 107.251085][ T6823] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 107.253765][ T6822] hub 9-0:1.0: 8 ports detected [ 107.271000][ T6823] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 107.280786][ T6823] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (8775!=33349) [ 107.292971][ T6823] EXT4-fs (loop1): failed to initialize system zone (-117) [ 107.316998][ T6800] loop0: detected capacity change from 0 to 2048 [ 107.324775][ T6823] EXT4-fs (loop1): mount failed [ 107.337884][ T6800] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 107.352181][ T6800] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 107.370973][ T6836] loop4: detected capacity change from 0 to 512 [ 107.381308][ T6800] netlink: 'syz.0.776': attribute type 3 has an invalid length. [ 107.390662][ T6834] SELinux: policydb magic number 0x6c65732f does not match expected magic number 0xf97cff8c [ 107.397707][ T6838] netlink: 4 bytes leftover after parsing attributes in process `syz.1.790'. [ 107.401368][ T6834] SELinux: failed to load policy [ 107.420056][ T6836] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.789: bg 0: block 248: padding at end of block bitmap is not set [ 107.434810][ T6834] loop3: detected capacity change from 0 to 512 [ 107.442080][ T6836] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.789: Failed to acquire dquot type 1 [ 107.455409][ T6834] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #18: comm syz.3.788: iget: bad extra_isize 90 (inode size 256) [ 107.469821][ T6834] EXT4-fs (loop3): Remounting filesystem read-only [ 107.476389][ T6836] EXT4-fs (loop4): 1 truncate cleaned up [ 107.482587][ T6836] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.495499][ T6834] EXT4-fs warning (device loop3): ext4_evict_inode:273: xattr delete (err -30) [ 107.504806][ T6834] EXT4-fs (loop3): 1 orphan inode deleted [ 107.507868][ T6836] ext4 filesystem being mounted at /137/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 107.511136][ T6834] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.533675][ T6834] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.580101][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.624130][ T6849] 9pnet_fd: Insufficient options for proto=fd [ 107.640458][ T6800] Process accounting resumed [ 107.685568][ T29] kauditd_printk_skb: 15597 callbacks suppressed [ 107.685582][ T29] audit: type=1400 audit(1765219403.810:32589): avc: denied { read write } for pid=6857 comm="syz.3.799" name="ppp" dev="devtmpfs" ino=139 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 107.715262][ T29] audit: type=1400 audit(1765219403.810:32590): avc: denied { open } for pid=6857 comm="syz.3.799" path="/dev/ppp" dev="devtmpfs" ino=139 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 107.738462][ T29] audit: type=1400 audit(1765219403.810:32591): avc: denied { ioctl } for pid=6857 comm="syz.3.799" path="/dev/ppp" dev="devtmpfs" ino=139 ioctlcmd=0x7440 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 107.763158][ T29] audit: type=1400 audit(1765219403.810:32592): avc: denied { allowed } for pid=6857 comm="syz.3.799" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 107.765081][ T6860] loop4: detected capacity change from 0 to 7 [ 107.783104][ T29] audit: type=1400 audit(1765219403.880:32593): avc: denied { open } for pid=6856 comm="syz.1.798" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 107.807989][ T29] audit: type=1400 audit(1765219403.880:32594): avc: denied { kernel } for pid=6856 comm="syz.1.798" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 107.819565][ T6860] Buffer I/O error on dev loop4, logical block 0, async page read [ 107.827463][ T29] audit: type=1400 audit(1765219403.900:32595): avc: denied { create } for pid=6854 comm="syz.0.797" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 107.857592][ T6860] Buffer I/O error on dev loop4, logical block 0, async page read [ 107.864528][ T6861] loop1: detected capacity change from 0 to 512 [ 107.865478][ T6860] loop4: unable to read partition table [ 107.877431][ T6860] loop_reread_partitions: partition scan of loop4 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 107.891123][ T6861] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 107.918296][ T6861] EXT4-fs (loop1): 1 truncate cleaned up [ 107.927465][ T6861] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.958783][ T29] audit: type=1400 audit(1765219404.100:32596): avc: denied { mount } for pid=6856 comm="syz.1.798" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 108.012735][ T6864] loop3: detected capacity change from 0 to 2048 [ 108.093312][ T29] audit: type=1326 audit(1765219404.210:32597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6869 comm="syz.5.803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8413e0f749 code=0x7ffc0000 [ 108.116739][ T29] audit: type=1326 audit(1765219404.210:32598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6869 comm="syz.5.803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8413e0f749 code=0x7ffc0000 [ 108.142759][ T6864] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.165474][ T6864] ext4 filesystem being mounted at /161/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 108.205254][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.303807][ T6883] SELinux: policydb magic number 0x6c65732f does not match expected magic number 0xf97cff8c [ 108.328076][ T6883] SELinux: failed to load policy [ 108.333535][ T6883] blktrace: Concurrent blktraces are not allowed on loop8 [ 108.400730][ T6898] 9pnet_fd: Insufficient options for proto=fd [ 108.525695][ T6916] netlink: 'syz.4.809': attribute type 3 has an invalid length. [ 108.566432][ T6854] syz.0.797 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 108.577376][ T6854] CPU: 1 UID: 0 PID: 6854 Comm: syz.0.797 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 108.577490][ T6854] Tainted: [W]=WARN [ 108.577498][ T6854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 108.577510][ T6854] Call Trace: [ 108.577517][ T6854] [ 108.577526][ T6854] __dump_stack+0x1d/0x30 [ 108.577605][ T6854] dump_stack_lvl+0xe8/0x140 [ 108.577628][ T6854] dump_stack+0x15/0x1b [ 108.577648][ T6854] dump_header+0x81/0x240 [ 108.577796][ T6854] oom_kill_process+0x295/0x350 [ 108.577818][ T6854] out_of_memory+0x97b/0xb80 [ 108.577847][ T6854] try_charge_memcg+0x610/0xa10 [ 108.577870][ T6854] charge_memcg+0x51/0xc0 [ 108.577900][ T6854] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 108.577932][ T6854] __read_swap_cache_async+0x17b/0x2d0 [ 108.578042][ T6854] swap_cluster_readahead+0x362/0x3c0 [ 108.578077][ T6854] swapin_readahead+0xde/0x820 [ 108.578103][ T6854] ? mod_memcg_lruvec_state+0x1a1/0x280 [ 108.578142][ T6854] ? __rcu_read_unlock+0x34/0x70 [ 108.578187][ T6854] ? __rcu_read_unlock+0x4f/0x70 [ 108.578207][ T6854] ? swap_cache_get_folio+0x277/0x280 [ 108.578282][ T6854] do_swap_page+0x2b4/0x21e0 [ 108.578319][ T6854] ? css_rstat_updated+0x53/0x240 [ 108.578340][ T6854] ? css_rstat_updated+0xb7/0x240 [ 108.578367][ T6854] ? __pfx_default_wake_function+0x10/0x10 [ 108.578400][ T6854] handle_mm_fault+0x9d8/0x2c60 [ 108.578435][ T6854] do_user_addr_fault+0x630/0x1080 [ 108.578477][ T6854] exc_page_fault+0x62/0xa0 [ 108.578503][ T6854] asm_exc_page_fault+0x26/0x30 [ 108.578523][ T6854] RIP: 0033:0x7f992850f0b3 [ 108.578536][ T6854] Code: 89 e7 4c 89 44 24 10 4c 89 54 24 08 e8 66 e6 fd ff 4c 8b 54 24 08 4c 8b 44 24 10 84 c0 0f 85 60 ff ff ff 80 7c 24 1f 00 75 0d <80> 3d ce 2f 37 00 00 0f 85 70 01 00 00 48 83 7b 50 07 77 08 48 c7 [ 108.578554][ T6854] RSP: 002b:00007fff81f6aad0 EFLAGS: 00010246 [ 108.578568][ T6854] RAX: 0000000000000000 RBX: 00007f99293b5720 RCX: ffffffff81984b36 [ 108.578582][ T6854] RDX: 0000000000000b36 RSI: ffffffff81984b36 RDI: 000000000000000d [ 108.578595][ T6854] RBP: ffffffff81984b36 R08: 00007f9928886038 R09: 00007f9928872000 [ 108.578608][ T6854] R10: 00007f992809f008 R11: 000000000000000d R12: 000000000000000d [ 108.578621][ T6854] R13: 0000000000000000 R14: ffffffff819845a2 R15: 0000000000000001 [ 108.578674][ T6854] ? fdget+0x12/0x110 [ 108.578692][ T6854] ? get_close_on_exec+0x6/0x70 [ 108.578727][ T6854] ? get_close_on_exec+0x6/0x70 [ 108.578818][ T6854] ? get_close_on_exec+0x6/0x70 [ 108.578842][ T6854] [ 108.818941][ T6854] memory: usage 307200kB, limit 307200kB, failcnt 251 [ 108.825698][ T6854] memory+swap: usage 307396kB, limit 9007199254740988kB, failcnt 0 [ 108.833760][ T6854] kmem: usage 307196kB, limit 9007199254740988kB, failcnt 0 [ 108.841175][ T6854] Memory cgroup stats for /syz0: [ 108.846883][ T6854] cache 0 [ 108.854868][ T6854] rss 0 [ 108.857626][ T6854] shmem 0 [ 108.860591][ T6854] mapped_file 0 [ 108.864120][ T6854] dirty 0 [ 108.867099][ T6854] writeback 0 [ 108.870409][ T6854] workingset_refault_anon 48 [ 108.874990][ T6854] workingset_refault_file 282 [ 108.879688][ T6854] swap 200704 [ 108.882974][ T6854] swapcached 0 [ 108.886339][ T6854] pgpgin 49550 [ 108.889719][ T6854] pgpgout 49549 [ 108.893170][ T6854] pgfault 69017 [ 108.896632][ T6854] pgmajfault 43 [ 108.900113][ T6854] inactive_anon 0 [ 108.903728][ T6854] active_anon 0 [ 108.907246][ T6854] inactive_file 0 [ 108.910903][ T6854] active_file 4096 [ 108.914614][ T6854] unevictable 0 [ 108.918107][ T6854] hierarchical_memory_limit 314572800 [ 108.923530][ T6854] hierarchical_memsw_limit 9223372036854771712 [ 108.929498][ T6929] lo speed is unknown, defaulting to 1000 [ 108.929716][ T6854] total_cache 0 [ 108.938857][ T6854] total_rss 0 [ 108.942133][ T6854] total_shmem 0 [ 108.945629][ T6854] total_mapped_file 0 [ 108.949629][ T6854] total_dirty 0 [ 108.953116][ T6854] total_writeback 0 [ 108.956910][ T6854] total_workingset_refault_anon 48 [ 108.962042][ T6854] total_workingset_refault_file 282 [ 108.967283][ T6854] total_swap 200704 [ 108.971143][ T6854] total_swapcached 0 [ 108.975027][ T6854] total_pgpgin 49550 [ 108.978967][ T6854] total_pgpgout 49549 [ 108.982936][ T6854] total_pgfault 69017 [ 108.986908][ T6854] total_pgmajfault 43 [ 108.990905][ T6854] total_inactive_anon 0 [ 108.995052][ T6854] total_active_anon 0 [ 108.999062][ T6854] total_inactive_file 0 [ 109.003203][ T6854] total_active_file 4096 [ 109.007429][ T6854] total_unevictable 0 [ 109.011463][ T6854] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.797,pid=6854,uid=0 [ 109.026100][ T6854] Memory cgroup out of memory: Killed process 6854 (syz.0.797) total-vm:93968kB, anon-rss:1264kB, file-rss:22440kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 109.228082][ T6971] smc: net device bond0 applied user defined pnetid SYZ0 [ 109.236059][ T6971] smc: net device bond0 erased user defined pnetid SYZ0 [ 109.338729][ T6987] FAULT_INJECTION: forcing a failure. [ 109.338729][ T6987] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 109.351844][ T6987] CPU: 0 UID: 0 PID: 6987 Comm: syz.4.814 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 109.351907][ T6987] Tainted: [W]=WARN [ 109.351913][ T6987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 109.351923][ T6987] Call Trace: [ 109.351962][ T6987] [ 109.351969][ T6987] __dump_stack+0x1d/0x30 [ 109.352070][ T6987] dump_stack_lvl+0xe8/0x140 [ 109.352093][ T6987] dump_stack+0x15/0x1b [ 109.352140][ T6987] should_fail_ex+0x265/0x280 [ 109.352159][ T6987] should_fail+0xb/0x20 [ 109.352179][ T6987] should_fail_usercopy+0x1a/0x20 [ 109.352262][ T6987] strncpy_from_user+0x27/0x260 [ 109.352314][ T6987] getname_flags+0xae/0x3b0 [ 109.352378][ T6987] do_sys_openat2+0x60/0x150 [ 109.352472][ T6987] __x64_sys_openat+0xf2/0x120 [ 109.352497][ T6987] x64_sys_call+0x2b07/0x3000 [ 109.352523][ T6987] do_syscall_64+0xd8/0x2a0 [ 109.352554][ T6987] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.352592][ T6987] RIP: 0033:0x7f77c19ff749 [ 109.352608][ T6987] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 109.352623][ T6987] RSP: 002b:00007f77c0467038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 109.352640][ T6987] RAX: ffffffffffffffda RBX: 00007f77c1c55fa0 RCX: 00007f77c19ff749 [ 109.352651][ T6987] RDX: 0000000000000202 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 109.352662][ T6987] RBP: 00007f77c0467090 R08: 0000000000000000 R09: 0000000000000000 [ 109.352673][ T6987] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 109.352715][ T6987] R13: 00007f77c1c56038 R14: 00007f77c1c55fa0 R15: 00007ffe48ac3ee8 [ 109.352735][ T6987] [ 109.725570][ T7003] __nla_validate_parse: 2 callbacks suppressed [ 109.725585][ T7003] netlink: 32 bytes leftover after parsing attributes in process `syz.0.816'. [ 109.825835][ T7012] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 109.838699][ T7015] capability: warning: `syz.3.817' uses 32-bit capabilities (legacy support in use) [ 109.880879][ T7017] loop4: detected capacity change from 0 to 512 [ 109.894070][ T7017] EXT4-fs (loop4): orphan cleanup on readonly fs [ 109.901023][ T7017] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.815: Failed to acquire dquot type 1 [ 109.917704][ T7017] EXT4-fs (loop4): 1 truncate cleaned up [ 109.932775][ T7017] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 110.570729][ T7060] netlink: 12 bytes leftover after parsing attributes in process `syz.0.823'. [ 110.586598][ T7060] 8021q: adding VLAN 0 to HW filter on device bond4 [ 110.601413][ T7060] netlink: 36 bytes leftover after parsing attributes in process `syz.0.823'. [ 110.616321][ T7060] netlink: 4 bytes leftover after parsing attributes in process `syz.0.823'. [ 110.652521][ T7067] 9pnet_fd: Insufficient options for proto=fd [ 110.742611][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.773557][ T7078] netlink: 32 bytes leftover after parsing attributes in process `syz.0.830'. [ 110.833728][ T7076] SELinux: failed to load policy [ 110.842082][ T7076] blktrace: Concurrent blktraces are not allowed on loop2 [ 110.882093][ T7076] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #18: comm syz.1.829: iget: bad extra_isize 90 (inode size 256) [ 110.895932][ T7076] EXT4-fs (loop1): Remounting filesystem read-only [ 110.902604][ T7076] EXT4-fs warning (device loop1): ext4_evict_inode:273: xattr delete (err -30) [ 110.911911][ T7076] EXT4-fs (loop1): 1 orphan inode deleted [ 110.918112][ T7076] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.951836][ T7076] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.991040][ T7095] netlink: 8 bytes leftover after parsing attributes in process `syz.1.837'. [ 111.021040][ T7097] 9p: Bad value for 'rfdno' [ 111.094792][ T7105] netlink: 8 bytes leftover after parsing attributes in process `syz.3.842'. [ 111.109761][ T7105] capability: warning: `syz.3.842' uses deprecated v2 capabilities in a way that may be insecure [ 111.298920][ T7117] SELinux: failed to load policy [ 111.304818][ T7117] blktrace: Concurrent blktraces are not allowed on loop6 [ 111.329953][ T7117] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #18: comm syz.3.847: iget: bad extra_isize 90 (inode size 256) [ 111.343772][ T7117] EXT4-fs (loop3): Remounting filesystem read-only [ 111.349715][ T7120] EXT4-fs: Ignoring removed bh option [ 111.350393][ T7117] EXT4-fs warning (device loop3): ext4_evict_inode:273: xattr delete (err -30) [ 111.355652][ T7120] EXT4-fs: inline encryption not supported [ 111.364636][ T7117] EXT4-fs (loop3): 1 orphan inode deleted [ 111.371717][ T7120] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 111.394336][ T7120] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 111.403367][ T7120] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #3: block 2: comm syz.5.848: lblock 2 mapped to illegal pblock 2 (length 1) [ 111.429874][ T7120] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #3: block 48: comm syz.5.848: lblock 0 mapped to illegal pblock 48 (length 1) [ 111.457710][ T7120] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.848: Failed to acquire dquot type 0 [ 111.504998][ T7125] SELinux: failed to load policy [ 111.512387][ T7125] blktrace: Concurrent blktraces are not allowed on loop6 [ 111.523538][ T7120] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 111.534600][ T7125] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #18: comm syz.3.850: iget: bad extra_isize 90 (inode size 256) [ 111.547988][ T7120] EXT4-fs error (device loop5): ext4_evict_inode:253: inode #11: comm syz.5.848: mark_inode_dirty error [ 111.559653][ T7125] EXT4-fs (loop3): Remounting filesystem read-only [ 111.566194][ T7125] EXT4-fs warning (device loop3): ext4_evict_inode:273: xattr delete (err -30) [ 111.575759][ T7120] EXT4-fs warning (device loop5): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 111.586032][ T7120] EXT4-fs (loop5): 1 orphan inode deleted [ 111.592235][ T7125] EXT4-fs (loop3): 1 orphan inode deleted [ 111.598201][ T52] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 111.633861][ T52] EXT4-fs error (device loop5): ext4_release_dquot:7022: comm kworker/u8:3: Failed to release dquot type 0 [ 111.648608][ T7120] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 111.704152][ T7131] xt_hashlimit: max too large, truncated to 1048576 [ 111.711791][ T7131] ================================================================== [ 111.719871][ T7131] BUG: KCSAN: data-race in avc_policy_seqno / avc_ss_reset [ 111.727066][ T7131] [ 111.729382][ T7131] write to 0xffffffff88f03c28 of 4 bytes by task 7133 on cpu 1: [ 111.736993][ T7131] avc_ss_reset+0x20c/0x240 [ 111.741492][ T7131] security_set_bools+0x301/0x340 [ 111.746509][ T7131] sel_commit_bools_write+0x1ea/0x270 [ 111.751865][ T7131] vfs_writev+0x406/0x8b0 [ 111.756183][ T7131] do_writev+0xe7/0x210 [ 111.760325][ T7131] __x64_sys_writev+0x45/0x50 [ 111.764987][ T7131] x64_sys_call+0x1ba5/0x3000 [ 111.769652][ T7131] do_syscall_64+0xd8/0x2a0 [ 111.774147][ T7131] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.780024][ T7131] [ 111.782333][ T7131] read to 0xffffffff88f03c28 of 4 bytes by task 7131 on cpu 0: [ 111.789856][ T7131] avc_policy_seqno+0x15/0x30 [ 111.794515][ T7131] selinux_inode_permission+0x3bc/0x7c0 [ 111.800051][ T7131] security_inode_permission+0x6d/0xb0 [ 111.805495][ T7131] inode_permission+0x20e/0x3c0 [ 111.810335][ T7131] link_path_walk+0x899/0xe30 [ 111.815003][ T7131] path_lookupat+0x8c/0x500 [ 111.819493][ T7131] filename_lookup+0x147/0x340 [ 111.824248][ T7131] kern_path+0x3b/0x130 [ 111.828397][ T7131] bpf_prog_get_type_path+0x45/0x1c0 [ 111.833676][ T7131] bpf_mt_check_v1+0xee/0x260 [ 111.838342][ T7131] xt_check_match+0x2ad/0x4f0 [ 111.843009][ T7131] translate_table+0xa9c/0xf90 [ 111.847756][ T7131] do_ipt_set_ctl+0x66f/0x820 [ 111.852421][ T7131] nf_setsockopt+0x199/0x1b0 [ 111.856994][ T7131] ip_setsockopt+0x102/0x110 [ 111.861578][ T7131] udp_setsockopt+0x99/0xb0 [ 111.866070][ T7131] sock_common_setsockopt+0x69/0x80 [ 111.871252][ T7131] __sys_setsockopt+0x184/0x200 [ 111.876095][ T7131] __x64_sys_setsockopt+0x64/0x80 [ 111.881108][ T7131] x64_sys_call+0x21d5/0x3000 [ 111.885771][ T7131] do_syscall_64+0xd8/0x2a0 [ 111.890267][ T7131] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.896150][ T7131] [ 111.898455][ T7131] value changed: 0x0000001f -> 0x00000020 [ 111.904151][ T7131] [ 111.906453][ T7131] Reported by Kernel Concurrency Sanitizer on: [ 111.912586][ T7131] CPU: 0 UID: 0 PID: 7131 Comm: syz.3.852 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 111.923766][ T7131] Tainted: [W]=WARN [ 111.927549][ T7131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 111.937587][ T7131] ================================================================== [ 111.982326][ T7134] set_capacity_and_notify: 5 callbacks suppressed [ 111.982341][ T7134] loop5: detected capacity change from 0 to 1024 [ 112.004543][ T7134] EXT4-fs: Ignoring removed mblk_io_submit option [ 112.011180][ T7134] EXT4-fs: inline encryption not supported [ 112.017372][ T7134] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 112.029215][ T7134] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 112.038183][ T7134] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #3: block 2: comm syz.5.853: lblock 2 mapped to illegal pblock 2 (length 1) [ 112.052113][ T7134] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #3: block 48: comm syz.5.853: lblock 0 mapped to illegal pblock 48 (length 1) [ 112.066504][ T7134] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.853: Failed to acquire dquot type 0 [ 112.077923][ T7134] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 112.087342][ T7134] EXT4-fs error (device loop5): ext4_evict_inode:253: inode #11: comm syz.5.853: mark_inode_dirty error [ 112.098772][ T7134] EXT4-fs warning (device loop5): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 112.109015][ T7134] EXT4-fs (loop5): 1 orphan inode deleted [ 112.115301][ T52] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 112.129670][ T52] EXT4-fs error (device loop5): ext4_release_dquot:7022: comm kworker/u8:3: Failed to release dquot type 0 [ 112.141886][ T7134] EXT4-fs error (device loop5): __ext4_get_inode_loc:4830: comm syz.5.853: Invalid inode table block 1 in block_group 0 [ 112.154539][ T7134] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 112.164164][ T7134] EXT4-fs error (device loop5): ext4_quota_off:7270: inode #3: comm syz.5.853: mark_inode_dirty error [ 112.187920][ T7134] loop5: detected capacity change from 0 to 2048 [ 112.205844][ T7134] netlink: 'syz.5.853': attribute type 3 has an invalid length.