last executing test programs: 5.217110845s ago: executing program 1 (id=1663): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x7, 0x4, 0x80, 0x4, 0x28}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000700000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b7000000000000009500000000000000a25b63677aed69d7de830d93493d5ff70c173fad9a72c783879cb4897beb33a69f066737a7a6ec5840cf3b"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='hrtimer_init\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='hrtimer_init\x00'}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0xfffffe00, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x4, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) 3.430543441s ago: executing program 1 (id=1686): bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_NAME(0xf, 0x0) gettid() openat$selinux_checkreqprot(0xffffffffffffff9c, 0x0, 0x4000, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3014850, &(0x7f0000000700)={[{@quota}, {@max_batch_time={'max_batch_time', 0x3d, 0xb1}}, {@grpjquota}, {@norecovery}, {@dioread_lock}]}, 0x3, 0x4de, &(0x7f0000001080)="$eJzs3d9rXFkdAPDvnSRt0qYmVR9q0Vq0khbtTNLYNvhQI4g+Faz1PcZkEkImmZCZtE0okuIfIIi/0CeffBF8FkH6J6hQ0HcRUYrbdh92YXdnmcmdbZudSSbb+dEmnw+c3HPuvZPv92SYkzn3Xu4N4Mg6HxHTEdEXEZciYiRdn0lLbO+U6n5Pn9yfq5YkKpXb/08iSdfVf1eSLk+mLxuMiO9/N+JHycfjlja3lmcLhfx62s6VV9Zypc2ty0srs4v5xfzq9OTEtanrU1enxtvW1xvf/s8vf/r779z4y9fu/mvmfxd/XE1rOI7Vtr3Yj1Zst7jfTtcHan+Luv6IWD9IsNdYX9qfgV4nAgBAS6rf8T8dEV+KiGe/6XU2AAAAQCdUvjkc7yURFQAAAODQytSugU0y2fRagOHIZLLZnWt4PxsnMoViqfzVheLG6nx1W8RoDGQWlgr58fRa4dEYSKrtiVr9efvKrvZkRJyOiJ+PDNXa2bliYb7XBz8AAADgiDi5a/7/9sjO/B8AAAA4ZEZ7nQAAAADQceb/AAAAcPg1nf8n/d1NBAAAAOiE7928WS2V+vOv5+9sbiwX71yez5eWsysbc9m54vpadrFYXKzds29lv99XKBbXvh6rG/dy5XypnCttbs2sFDdWyzO153rP5D0nGgAAALrv9Bcf/jOJiO1vDNVK1bF0Wwtz9enOZgd0UuZguyedygPovr5eJwD0zD4X+P7t891KBOg65+OBfSb2v9jVPuBhAwAA4HUw9rlXOv/vfCC8wUzk4ej6ROf/T7U/D6D73OALjq6mc3wTAzgaju+/y2CzDX9tcy4AAEDHDNdKksmmU/7hyGSy2Z1D/KMxkCwsFfLjEfGpiPjHyMDxanui10kDAAAAAAAAAAAAAAAAAAAAAAAAwBumUkmiAgAAABxqEZn/JumD/MdGLgzvPj5wLHlnpLaMiLu/vf2re7Pl8vpEdf1bH60v/zpdf6UXRzAAAACA3erz9Po8HgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADa6emT+3P10s24j78VEaON4vfHYG05+KeRiDjxLIn+F16XRERfG+JvP4iIM43iJ9W0YjTNYnf8TEQM9Tj+yTbEh6PsYXX8mW70+cvE+dqy8eevPy2v6vH5ZuNfpj7+1ca5RuPfqRZjnH30x1zT+A8izvY3Hn/q8ZNXHH9/+IOtrWbbKr+LGGv4/yd5KVauvLKWK21uXV5amV3ML+ZXJycnrk1dn7o6NZ5bWCrk058NY/zsC3/+YK/+n2gSf3Sf/l9osf/vP7r35DN7xL/45d3x3629/2f2iF/9238l/T9Q3T5Wr2/v1F907g9/P7dX/+eb9H+/9/9ii/2/dOsn/25xVwCgC0qbW8uzhUJ+XeWNrAx4B9tcGYrXIo12VW6lH/QDv7zHAxMAANB2z7/09zoTAAAAAAAAAAAAAAAAAAAAOLo6fhOy4y/fWWCwd10FAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANjThwEAAP//sxnTZg==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) chown(&(0x7f00000002c0)='./file2\x00', r1, 0x0) 3.016117804s ago: executing program 1 (id=1697): bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f00000003c0), 0x2000) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000002c0)='kfree\x00', r0}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f000000000000000002000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4005}, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000880)=ANY=[@ANYBLOB="20000000690003050000000000000000000000000000000008000100020000005dbed2d84f373f5283d98367a1384b35251b7f0b3f35a8b6975a202c3b1f0b3309536a0d8bf674e9477ede81a05dfd2bc2b2b1f5755625cef0295ef92a131b06baefb9a51a65b5edf622"], 0x20}}, 0x0) 2.652240474s ago: executing program 1 (id=1701): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 1.910430594s ago: executing program 2 (id=1717): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x7, 0x4, 0x80, 0x4, 0x28}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000700000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b7000000000000009500000000000000a25b63677aed69d7de830d93493d5ff70c173fad9a72c783879cb4897beb33a69f066737a7a6ec5840cf3b"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='hrtimer_init\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0xfffffe00, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x4, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) 1.692796092s ago: executing program 0 (id=1723): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x1, 0x2, 0x7fff7ffc}]}) close_range(r0, 0xffffffffffffffff, 0x0) 1.654274685s ago: executing program 0 (id=1724): ioctl$BTRFS_IOC_FS_INFO(0xffffffffffffffff, 0x8400941f, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x8, 0x2aa80) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x108000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x1809049, 0x0, 0xff, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000040)={'gretap0\x00', &(0x7f0000000580)={'gre0\x00', 0x0, 0x7800, 0x40, 0x6, 0x200, {{0x1a, 0x4, 0x3, 0x39, 0x68, 0x66, 0x0, 0x51, 0x29, 0x0, @local, @private=0xa010102, {[@timestamp={0x44, 0x24, 0xbe, 0x0, 0x1, [0x40, 0xe6d, 0x0, 0x9, 0x200, 0x6, 0xffffffff, 0x4]}, @timestamp_addr={0x44, 0x1c, 0x47, 0x1, 0x2, [{@loopback, 0x5b7}, {@private=0xa010100, 0x1000}, {@multicast2, 0x9}]}, @timestamp_addr={0x44, 0x14, 0x8e, 0x1, 0x8, [{@local, 0x9}, {@loopback, 0x6}]}]}}}}}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', r4, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r6 = getpgrp(0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0300000005000000000400000900000003"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r7, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r8}, 0x10) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="500000001000010400000000000000000000ffff", @ANYRES32=0x0, @ANYBLOB="421c0000000000001c001280090001007866726d000000000c00028008020200feffffff140003007866726d3000"/56], 0x50}}, 0x0) r10 = syz_pidfd_open(r6, 0x0) r11 = pidfd_getfd(r10, r10, 0x0) setns(r11, 0x14020000) write$UHID_CREATE2(r11, &(0x7f0000000840)={0xb, {'syz1\x00', 'syz1\x00', 'syz0\x00', 0x2a, 0x1, 0xc, 0x1000, 0x9, 0x10000, "7d366195a272ac16d5a75d16fe708ebad44e21a908cccb799c7cd6aa4c117940499c0cbb0a9489f3c7c2"}}, 0x142) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000002c0)='kfree\x00', r5}, 0x10) r12 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000700), r1) sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f0000000a80)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000800)=ANY=[@ANYBLOB="03000000", @ANYRES16=r12, @ANYBLOB="080027bd7000fcdbdf2507000000"], 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x40800) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) 1.386217087s ago: executing program 0 (id=1725): prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000001000/0x4000)=nil) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) brk(0x400000ffc000) 1.251755718s ago: executing program 0 (id=1726): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket(0x1d, 0x2, 0x6) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000deab44f4850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x3, 0x2}, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f00000002c0)={0x0, 0x300, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000000000000000005000600030000000800090001000000050002"], 0x44}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sys_enter\x00', r1}, 0x10) shmdt(0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000002540)=ANY=[], 0x81a) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, 0xffffffffffffffff, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_IBSS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="08002c800000009beea5ea7f76b76832834373cad8deb35fe0", @ANYRES32=r6], 0x1c}, 0x1, 0x0, 0x0, 0x44000000}, 0x40004) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) r7 = socket(0x11, 0x3, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r7, &(0x7f0000000180)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @dev}, 0x14) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r7, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="02011400012918000e3580009f000114000000110600ac141430e0000003808a8972bd0b72e41082b1a3d2061fd7fdfe4b88942a31f48597e36e039b1c599db6e466749c2d4c8303a0f7fbda34fb8825f80200e3c0aba61f6304a80500ffffca88faca"], 0xdd12}], 0x1}, 0x10) 1.251161378s ago: executing program 1 (id=1727): bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x7fffffff}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x20, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELRULE={0x2c, 0x8, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x94}}, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'veth0_virt_wifi\x00', 0x2000000}, 0x18) setsockopt$IP_VS_SO_SET_STOPDAEMON(r2, 0x0, 0x48c, &(0x7f00000002c0)={0x1, 'wg1\x00', 0x2}, 0x18) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xb8, 0x19, 0xfd3649826d894c67, 0x70bd26, 0x4, {{@in6=@private0={0xfc, 0x0, '\x00', 0x2}, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0xfffffffffffffffc}, {0x0, 0x0, 0xfffffffffffffffe, 0x4000000000000004}, 0x400, 0x0, 0x0, 0x1}}, 0xb8}}, 0x20048050) syz_emit_ethernet(0x4e, &(0x7f0000000780)={@local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x18, 0x11, 0x0, @remote, @local, {[], {0x4e20, 0xe22, 0x18, 0x0, @wg=@data={0x4, 0x3, 0x5}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000003380)={0x18, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4, 0x0, 0xfffffffffffffffe}, 0x18) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x38, 0x1403, 0x1, 0x70bd29, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_to_bridge\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8081}, 0x20000010) 1.189924633s ago: executing program 0 (id=1728): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 1.189236453s ago: executing program 3 (id=1729): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="07000000040000000802000001"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000021000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="6c00000010001fff010000000000000000060000", @ANYRES32=0x0, @ANYBLOB="81ffffff00000000440012800b00010067656e6576650000340002800500090000000000050009000100000005000a000000000005000300f90000000500040040000000050004000800000008000a00"], 0x6c}}, 0x40) 1.174558214s ago: executing program 1 (id=1730): prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000001000/0x4000)=nil) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="bbfb28bd7000fedbdf2567000000080001005d00000008000300", @ANYRES32=0x0, @ANYBLOB="0800c400ff0300000800c3", @ANYRES64=r1], 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYRESDEC=r2, @ANYRES8=0x0, @ANYRES32=r2, @ANYBLOB="d3d80cc73468e56f79f3535a6ace6da00b2b912b7b088b703bbea036203ef4bfb09ece2fdcad69dd19ef688d934088b6efa25c9e8642ab117db1ca6e076b97fba4c5a4f377a356b19c892bce7ef6ec6a", @ANYBLOB="c911880e0e99a9660ef5c0fa7e842f7609da4b1d903b5db8598e95add8f85c6895e2427ab60e285527754f70da50ab76d71054bf4cc6a4e42a6e7251656174fe52f9363c2cdb86654a734188a16755274b403ffc4e6dd6b4b57943f3ddb8517f613084747977cb1769b58b9a22aa90ab9c4f2479dc26395abfe3cf7fe57f09dd20aa5ee89ed0efce3b0370c0adb645f96d5d15027b63690f790e1ac4b8745ebe"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x12, 0x8, &(0x7f00000009c0)=ANY=[@ANYRESDEC=r2, @ANYRES32=r3, @ANYRES16=r0], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x25, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x18) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e0000001100c188e6b62aa73772cc9f1ba1f8483b0000005e140602000000002f001c000f0000e0028000001268", 0x2e}], 0x1}, 0x4040064) r7 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r8 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) r9 = dup3(r7, r8, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) r11 = openat$cgroup_ro(r10, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) write$binfmt_script(r10, &(0x7f0000001640)={'#! ', './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0xff1) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r12 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r12, &(0x7f0000005600)=[{{&(0x7f00000001c0)={0xa, 0x4e25, 0x0, @private2}, 0x1c, &(0x7f0000000880)=[{&(0x7f00000003c0)="e3", 0x1}], 0x1}}, {{&(0x7f0000000700)={0xa, 0x4e24, 0x8, @private2, 0x101}, 0x1c, &(0x7f0000000840)=[{&(0x7f0000000780)="93", 0x1}], 0x1}}, {{&(0x7f0000000dc0)={0xa, 0x4e21, 0x8001, @local, 0x2}, 0x1c, &(0x7f0000005880)=[{&(0x7f0000000ec0)="d758b353df3a", 0x6}], 0x1}}], 0x3, 0x8041) shutdown(r12, 0x1) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x22, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3, 0x12, r11, 0x0) ioctl$MON_IOCG_STATS(r9, 0xc0109207, &(0x7f00000001c0)) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r13, {0x0, 0x4}, {0xffff, 0xffff}, {0x1, 0x9}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}}, 0x4000000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(0xffffffffffffffff, r14, &(0x7f0000000080)=0x40, 0x1000004fe) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18735fa7", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000000000008500000086000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x4d, &(0x7f00000000c0)=""/77, 0x40f00, 0xc, '\x00', r13, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000180)={0x2, 0x10, 0x9, 0x47ae1511}, 0x10, 0x0, 0x0, 0x8, &(0x7f00000001c0)=[r3, r3], &(0x7f0000000580)=[{0x5, 0x4, 0x9, 0x6}, {0x4, 0x3, 0x10, 0x6}, {0x3, 0x1, 0x8, 0x8}, {0x2, 0x5, 0x6, 0x4}, {0x2, 0x3, 0xb, 0x5}, {0x2, 0xffffffff, 0xe, 0x7}, {0x3, 0x1, 0x7}, {0xffffffff, 0x1, 0x2, 0xa}], 0x10, 0x8}, 0x94) brk(0x400000ffc000) 1.044969185s ago: executing program 4 (id=1732): r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0xf503, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = syz_io_uring_setup(0x497, &(0x7f0000000540)={0x0, 0x4660, 0x400, 0x3, 0x285}, &(0x7f00000004c0)=0x0, &(0x7f0000000280)=0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a38500000070000000"], &(0x7f0000000400)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa50}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r6, 0x0, 0x400000000000006}, 0x18) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)={0x30, r8, 0xc4fc9e906872338b, 0x70bd2a, 0x0, {{0x15}, {@void, @val={0xc, 0x99, {0x4, 0x3a}}}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x4, 0x3, 0x0, 0x0}]}]}]}]}, 0x30}}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r1, 0x0, 0x0}) io_uring_enter(r3, 0x40f9, 0x217, 0x48, 0x0, 0x2000) dup3(r3, r0, 0x80000) socket$nl_route(0x10, 0x3, 0x0) r9 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x8001}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4008000) sendmsg$ETHTOOL_MSG_WOL_SET(r7, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x20001050}, 0x40001) fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0) r10 = fsmount(r9, 0x0, 0x80) fchdir(r10) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') 1.010443628s ago: executing program 2 (id=1733): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f000000000000000002000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4005}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 976.41835ms ago: executing program 3 (id=1734): bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f00000003c0), 0x2000) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000002c0)='kfree\x00', r0}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f000000000000000002000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4005}, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000880)=ANY=[@ANYBLOB="20000000690003050000000000000000000000000000000008000100020000005dbed2d84f373f5283d98367a1384b35251b7f0b3f35a8b6975a202c3b1f0b3309536a0d8bf674e9477ede81a05dfd2bc2b2b1f5755625cef0295ef92a131b06baefb9a51a65b5edf622"], 0x20}}, 0x0) 935.204223ms ago: executing program 2 (id=1735): r0 = socket(0x10, 0x803, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) pipe(0x0) io_setup(0x3ff, &(0x7f0000000500)=0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r4}, 0x10) fadvise64(0xffffffffffffffff, 0x20000004, 0xfc, 0x5) io_destroy(r2) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f0000000280)={0x0, r5}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, 0x0, 0x24040840) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0xffffff2e, 0x6, 0x7, 0x2}) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x15, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setrlimit(0x40000000000008, &(0x7f0000000080)={0x0, 0x6}) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r6, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendmmsg$inet(r6, &(0x7f0000000780)=[{{&(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaffffffff0000000010000000000000000000000007"], 0x30}}], 0x1, 0x4008804) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x2, 0x0) 932.369134ms ago: executing program 3 (id=1736): bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f00000003c0), 0x2000) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000002c0)='kfree\x00', r0}, 0x18) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f000000000000000002000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4005}, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) 887.124437ms ago: executing program 3 (id=1737): bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f000000000000000002000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4005}, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000880)=ANY=[@ANYBLOB="20000000690003050000000000000000000000000000000008000100020000005dbed2d84f373f5283d98367a1384b35251b7f0b3f35a8b6975a202c3b1f0b3309536a0d8bf674e9477ede81a05dfd2bc2b2b1f5755625cef0295ef92a131b06baefb9a51a65b5edf622"], 0x20}}, 0x0) 886.534757ms ago: executing program 4 (id=1738): prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='\xac\xed\x00\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000540)={r4, &(0x7f0000000480), &(0x7f0000000340)=@udp6=r0}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000380)={r5, r2, 0x25, 0x2, @val=@tcx}, 0x1c) syz_emit_ethernet(0x180, &(0x7f0000000580)={@local, @random="8e0a05004011", @void, {@ipv4={0x800, @tcp={{0x26, 0x4, 0x2, 0x3, 0x172, 0x67, 0x0, 0x7f, 0x6, 0x0, @loopback, @private=0xa010102, {[@rr={0x7, 0x1b, 0x9a, [@multicast1, @empty, @multicast2, @broadcast, @multicast1, @rand_addr=0x64010102]}, @noop, @timestamp_addr={0x44, 0x14, 0x43, 0x1, 0xe, [{@rand_addr=0x64010100, 0x8}, {@rand_addr=0x64010101, 0x3}]}, @noop, @rr={0x7, 0xf, 0x26, [@empty, @broadcast, @multicast1]}, @timestamp_addr={0x44, 0x34, 0x2c, 0x1, 0xe, [{@empty, 0xfe2}, {@local, 0x6}, {@broadcast, 0x9}, {@multicast1, 0x8}, {@private=0xa010101, 0x800}, {@empty, 0x1}]}, @lsrr={0x83, 0xf, 0x7b, [@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @empty]}, @end]}}, {{0x4e20, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0xb, 0xc2, 0x18, 0x0, 0xa, {[@sack={0x5, 0x16, [0xd, 0x7ff, 0x4, 0x401, 0xb4]}]}}, {"09920691cd3febe966fa4cb65587e2f8047de3fdaaf7e0b37048b371a6c684360584b408c724ae392ef265ca929a5ab91f434ba87d4e132eb80627bb2d90c4f90455f99bfc327a744b85e1c3b21b69249a2cb2a5ce1c01fc1e7c70103cb28d308d35de6ab7e2b5c457088d46ae2e499adb2a56d4359b939e7ddb3c27a0d646dbe789fe437c6a4e9ba6bbacfeda09ccb4da8b1cd45f781844bf87e9dddf11f39cdd7486f1dbe19674b114c7742c1b"}}}}}}, 0x0) 851.62188ms ago: executing program 4 (id=1739): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket(0x1d, 0x2, 0x6) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000deab44f4850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x3, 0x2}, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f00000002c0)={0x0, 0x300, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000000000000000005000600030000000800090001000000050002"], 0x44}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sys_enter\x00', r1}, 0x10) shmdt(0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000002540)=ANY=[], 0x81a) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, 0xffffffffffffffff, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_IBSS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="08002c800000009beea5ea7f76b76832834373cad8deb35fe0", @ANYRES32=r6], 0x1c}, 0x1, 0x0, 0x0, 0x44000000}, 0x40004) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) r7 = socket(0x11, 0x3, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r7, &(0x7f0000000180)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @dev}, 0x14) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r7, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="02011400012918000e3580009f000114000000110600ac141430e0000003808a8972bd0b72e41082b1a3d2061fd7fdfe4b88942a31f48597e36e039b1c599db6e466749c2d4c8303a0f7fbda34fb8825f80200e3c0aba61f6304a80500ffffca88faca"], 0xdd12}], 0x1}, 0x10) 850.4241ms ago: executing program 3 (id=1740): bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x7fffffff}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x20, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELRULE={0x2c, 0x8, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x94}}, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'veth0_virt_wifi\x00', 0x2000000}, 0x18) setsockopt$IP_VS_SO_SET_STOPDAEMON(r2, 0x0, 0x48c, &(0x7f00000002c0)={0x1, 'wg1\x00', 0x2}, 0x18) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xb8, 0x19, 0xfd3649826d894c67, 0x70bd26, 0x4, {{@in6=@private0={0xfc, 0x0, '\x00', 0x2}, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0xfffffffffffffffc}, {0x0, 0x0, 0xfffffffffffffffe, 0x4000000000000004}, 0x400, 0x0, 0x0, 0x1}}, 0xb8}}, 0x20048050) syz_emit_ethernet(0x4e, &(0x7f0000000780)={@local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x18, 0x11, 0x0, @remote, @local, {[], {0x4e20, 0xe22, 0x18, 0x0, @wg=@data={0x4, 0x3, 0x5}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000003380)={0x18, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4, 0x0, 0xfffffffffffffffe}, 0x18) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x38, 0x1403, 0x1, 0x70bd29, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_to_bridge\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8081}, 0x20000010) 784.955576ms ago: executing program 2 (id=1741): bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_NAME(0xf, 0x0) gettid() openat$selinux_checkreqprot(0xffffffffffffff9c, 0x0, 0x4000, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3014850, &(0x7f0000000700)={[{@quota}, {@max_batch_time={'max_batch_time', 0x3d, 0xb1}}, {@grpjquota}, {@norecovery}, {@dioread_lock}]}, 0x3, 0x4de, &(0x7f0000001080)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x800) chown(&(0x7f00000002c0)='./file2\x00', 0x0, 0x0) 784.227386ms ago: executing program 4 (id=1742): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x4}, 0x18) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0xfffffffe, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000200)=@gcm_256={{0x304}, "b5d4c27c5c778dd0", "5f128fd81908609c81286d4f6a539024ffb7007ed672afb4be7aec5ca3d27dbf", '\x00', "b690a3fabf2cb970"}, 0x38) write$binfmt_script(r2, &(0x7f0000001300), 0x8f) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f00000013c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000001380)=0x40) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000380)="ac", 0x1}], 0x1) 759.297808ms ago: executing program 3 (id=1743): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x7, 0x4, 0x80, 0x4, 0x28}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000700000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b7000000000000009500000000000000a25b63677aed69d7de830d93493d5ff70c173fad9a72c783879cb4897beb33a69f066737a7a6ec5840cf3b"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='hrtimer_init\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0xfffffe00, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x4, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) 730.54421ms ago: executing program 4 (id=1744): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x101005) ioctl$SG_IO(r0, 0x2285, 0x0) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000040)="aa1d484e240003000000f7c08b0e278ad10ab08ba900b92d276d720984d211fbdf23ea32db0e8f21d5bc27d85e4475", 0x2f}], 0x1) 581.960622ms ago: executing program 2 (id=1745): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x1, 0x2, 0x7fff7ffc}]}) socket$inet6(0xa, 0x80002, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 512.953438ms ago: executing program 4 (id=1746): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000005f00)={0x40, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x6}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x4}]}]}, 0x40}}, 0x4004) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000001700)={'syztnl2\x00', &(0x7f0000000840)={'gre0\x00', 0x0, 0x20, 0x80, 0x7, 0x1, {{0x22, 0x4, 0x2, 0x3, 0x88, 0x66, 0x0, 0x4, 0x4, 0x0, @multicast2, @multicast2, {[@cipso={0x86, 0x17, 0x3, [{0x5, 0xe, "41aea444e1a790ae0f803d25"}, {0x0, 0x3, "f3"}]}, @timestamp_prespec={0x44, 0x3c, 0x50, 0x3, 0x9, [{@multicast2, 0x7714140e}, {@multicast1, 0x4}, {@empty, 0x4}, {@loopback, 0x4}, {@empty}, {@empty, 0x5}, {@multicast2, 0xa0000}]}, @lsrr={0x83, 0xf, 0xe5, [@private=0xa010100, @loopback, @dev={0xac, 0x14, 0x14, 0x26}]}, @generic={0x89, 0x10, "cbe5b563423b9f8ff9af0713579e"}, @noop]}}}}}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="02000000040000000800000001000000800000002509225a71d9b3aafefc9a7243af6e0534ab6acb61d1d8af4eee1583adffc8623d6f66bbc6bb67953364f2d5a7d4a81753658830e4297ebf74075b9fb65fa7a839ff1e1a2f218dbbecf03101eb154f47a15b5700"/119, @ANYRES32, @ANYBLOB="6accffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="010000000400"/28], 0x50) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r3, 0x0, 0x4}, 0x18) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000043, &(0x7f0000000000), 0xa, 0x502, &(0x7f0000000b00)="$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") open(&(0x7f0000000480)='.\x00', 0x0, 0x0) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r5 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r4}, 0x8) close(r5) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000000)={r5, 0xffffffffffffffff, 0x0, r5}, 0x10) sendmsg$qrtr(0xffffffffffffffff, &(0x7f0000002600)={&(0x7f0000002300)={0x2a, 0xffffffffffffffff, 0x4000}, 0xc, &(0x7f00000025c0)=[{&(0x7f0000002340)="2d6582524da43d29d2820daea3435aad09d55660d38ea9654d84a91e741ddd2740e7d9c0c1f1527e47c49ee7ab59ed615e21e15e5ab93a2b7a4d74d2b7373581ab890ad75b6d081c27121d896d5752a9168cf819a3e0b5cde64f9652d6d0949c0a0241b791e2a19723b5ebc3c6fa60d86dc4d6a585384e47647d38f30a949b10235d5a5392f5587e89eb4bcf95e69eac91720905c2b5ef44ed943259f322241f15a3d4057d659f944212685b2392c1ba9d1bc545795be9b10cfcb63dad83e7425eaf618b3c02980c464a819b65e08b86763f23b060af9ab8bc3f41c43ec1897b", 0xe0}, {&(0x7f0000002440)="46a00ac8650d99cdcf8084a9b6eac5539a8264e4f3824c853489e28cd0a0cc84ad3fa6030c38028dca8c9cb00f1eb86b97f4b59aa35d032012e1be0c8d21e14bdd1996b46e8c8aaa403dcde5c4d2bfda0d895f855922671553b92b08aabbdcc59674d7b7aee8cbd5a30bf2bcdaecbb53792199108397572ea5399816b6376cf9d6", 0x81}, {&(0x7f0000002500)="58222c062d5f461c01879a9d6e9041a6", 0x10}, {&(0x7f0000002540)="170fb9c280ce3820ac67c215291f32b862cfaddb11b9a2d8afdc6bed41ed09c0c802512ee1ee59ac1b7056cca9ddc8d6ccdfd9bc42ee51ef074e58739a08da4ccba0acaf43906ecf3b1fd302d6f53c58fae4b6d8c67f7b0a11a21f4a4bb2", 0x5e}], 0x4, 0x0, 0x0, 0x20000000}, 0x38) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1000b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x2000, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r6, 0x400, 0x0) socket$key(0xf, 0x3, 0x2) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r8}, 0x10) 112.347821ms ago: executing program 0 (id=1747): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000005f00)={0x3c, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x10, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x6}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x3c}}, 0x4004) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000001700)={'syztnl2\x00', &(0x7f0000000840)={'gre0\x00', 0x0, 0x20, 0x80, 0x7, 0x1, {{0x22, 0x4, 0x2, 0x3, 0x88, 0x66, 0x0, 0x4, 0x4, 0x0, @multicast2, @multicast2, {[@cipso={0x86, 0x17, 0x3, [{0x5, 0xe, "41aea444e1a790ae0f803d25"}, {0x0, 0x3, "f3"}]}, @timestamp_prespec={0x44, 0x3c, 0x50, 0x3, 0x9, [{@multicast2, 0x7714140e}, {@multicast1, 0x4}, {@empty, 0x4}, {@loopback, 0x4}, {@empty}, {@empty, 0x5}, {@multicast2, 0xa0000}]}, @lsrr={0x83, 0xf, 0xe5, [@private=0xa010100, @loopback, @dev={0xac, 0x14, 0x14, 0x26}]}, @generic={0x89, 0x10, "cbe5b563423b9f8ff9af0713579e"}, @noop]}}}}}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="02000000040000000800000001000000800000002509225a71d9b3aafefc9a7243af6e0534ab6acb61d1d8af4eee1583adffc8623d6f66bbc6bb67953364f2d5a7d4a81753658830e4297ebf74075b9fb65fa7a839ff1e1a2f218dbbecf03101eb154f47a15b5700"/119, @ANYRES32, @ANYBLOB="6accffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="010000000400"/28], 0x50) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r3, 0x0, 0x4}, 0x18) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000043, &(0x7f0000000000), 0xa, 0x502, &(0x7f0000000b00)="$eJzs3U9vG2kZAPBnnLhN0rDOLhyWldgtu12lCOokm/0TcVi2En9OKyGWexoSJ4rixFXitE1UQfoJQKgCJE6cuCDxAZBQPwJCqgQ3DpxAFaTtgQsyGnvcJo6dJtRrt87vJ03nnfet53mepB7POzOqAzizLkbEJxExFBHvRkQh689lS+w1lvTvPdy/vZguSdRqn/0riSTra93nhexlqR98L+JHydG4Wzu7awvlcmnzcPfuldX1hZXSSmljdnbmw7mP5j6Ymz5hJcnwcaOvRMTH3378i5/+9rsf//EbN/8+/8/LP85HxLVsvF0d3dAoPR8j55s9x6b50hnKKsr3OxEAAE7kUkS8FhFvR8TXohBDA3Z+CgAAAETUvjXevDNVAwAAAAZTLiLGI8kVs+d9xyOXKxYbz/B+KcZy5cpW9evLle2NpXQsYiLyueXVcmk6e1Z4IvJJuj1Tbz/dfq9lezYiXo2Iu4XRdLs+BgAAAPTGhZb5/+NCY/4PAAAADBg34wEAAGDwmf8DAADA4DP/BwAAgIH2/U8/TZfaw/3b9e8BWLqxs71WuXFlqbS1VlzfXiwuVjavF1cqlZVyqTj07P2VK5Xr78fG9q2p6vBWdWprZ3d+vbK9UZ2vf6/3fOm1HtQEAAAAHPbqW/f+mkTE3jdH60vqXDaW72tmwAskGW7puPbVPmUCdMUJLukfdnH780kE6LnWz3Tg7DDHB5LWjpYTg5FOpwp/On0s5xwAANAfk192/x/Oqly/EwD65mf9TgDoG9fi4ezKn/4JQGDAHLn/32Kk08Az7v8/vYZYq506KQAAoKvGG6u9yO4FjkcuVyw+uS2YLK+WS9MR8UpE/KWQP59uz/QxXwAAAAAAAAAAAAAAAAAAAAAAAAB4GdVqSdQAAACAgRaR+0eSff/XZOHSeOv1gXPJfwr1dUTc/PVnv7y1UK1uzqT9/37SX/1V1v9eP65gAAAAwFmUP3a0OU9vzuMBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoJse7t9ebC69jPvgaozGRLv4wzFSX49EPiLGHiUxfOB1SUQMdSH+3p2IeL1d/CRNKyayLMYenT/0ulxEjPY0/uH60/gXuhAfzrJ7VyPik3bvv1xcrK/bv/+Gs+V5Pbhaf5O3jd88/g11OP594YQx3rj/+6mO8e9EvDHc/vjTjJ90iP/OCeNf++Hubqex2m8iJtt+/iSHYk1V169Pbe3sXlldX1gprZQ2ZmdnPpz7aO6Duemp5dVyKfuzbYyff+UPe3c71p+rrw/Gb9Y50cjwJ53qv3TC+v97/9b+FxvN/NH4EZffaf/7f72+bv/zT/9NvJt9DqTjk832XqN90Ju/+/ObnXJL4y91+Pk3fv+FWqf6L5/rWHJyoH2kZgCgv7Z2dtcWyuXSZg8ab7/fvR0mPcr5ZWisjEX0POjIi1F7rxvfee79NE+Hn2c/f+taXemcof1Qnw9MAABA1z096e93JgAAAAAAAAAAAAAAAAAAAHB2/V//edhbp3tVa8y9/pQKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHCs/wUAAP//dvnG0Q==") open(&(0x7f0000000480)='.\x00', 0x0, 0x0) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r5 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r4}, 0x8) close(r5) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000000)={r5, 0xffffffffffffffff, 0x0, r5}, 0x10) sendmsg$qrtr(0xffffffffffffffff, &(0x7f0000002600)={&(0x7f0000002300)={0x2a, 0xffffffffffffffff, 0x4000}, 0xc, &(0x7f00000025c0)=[{&(0x7f0000002340)="2d6582524da43d29d2820daea3435aad09d55660d38ea9654d84a91e741ddd2740e7d9c0c1f1527e47c49ee7ab59ed615e21e15e5ab93a2b7a4d74d2b7373581ab890ad75b6d081c27121d896d5752a9168cf819a3e0b5cde64f9652d6d0949c0a0241b791e2a19723b5ebc3c6fa60d86dc4d6a585384e47647d38f30a949b10235d5a5392f5587e89eb4bcf95e69eac91720905c2b5ef44ed943259f322241f15a3d4057d659f944212685b2392c1ba9d1bc545795be9b10cfcb63dad83e7425eaf618b3c02980c464a819b65e08b86763f23b060af9ab8bc3f41c43ec1897b", 0xe0}, {&(0x7f0000002440)="46a00ac8650d99cdcf8084a9b6eac5539a8264e4f3824c853489e28cd0a0cc84ad3fa6030c38028dca8c9cb00f1eb86b97f4b59aa35d032012e1be0c8d21e14bdd1996b46e8c8aaa403dcde5c4d2bfda0d895f855922671553b92b08aabbdcc59674d7b7aee8cbd5a30bf2bcdaecbb53792199108397572ea5399816b6376cf9d6", 0x81}, {&(0x7f0000002500)="58222c062d5f461c01879a9d6e9041a6", 0x10}, {&(0x7f0000002540)="170fb9c280ce3820ac67c215291f32b862cfaddb11b9a2d8afdc6bed41ed09c0c802512ee1ee59ac1b7056cca9ddc8d6ccdfd9bc42ee51ef074e58739a08da4ccba0acaf43906ecf3b1fd302d6f53c58fae4b6d8c67f7b0a11a21f4a4bb2", 0x5e}], 0x4, 0x0, 0x0, 0x20000000}, 0x38) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1000b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x2000, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r6, 0x400, 0x0) socket$key(0xf, 0x3, 0x2) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r8}, 0x10) 0s ago: executing program 2 (id=1748): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x7, 0x4, 0x80, 0x4, 0x28}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000700000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b7000000000000009500000000000000a25b63677aed69d7de830d93493d5ff70c173fad9a72c783879cb4897beb33a69f066737a7a6ec5840cf3b"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='hrtimer_init\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='hrtimer_init\x00'}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0xfffffe00, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) r6 = add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @desc3}, &(0x7f0000000480)={0x0, "6035ae1e0fe721441705322225930e6c1e3e2a51a92fd796bc34d7cf6e0236805b4377f7ab1a9b01c103a4c6a7ef54e6763fd7264c39ea00c508ba6062696138"}, 0x48, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x4, r6, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): arse: 2 callbacks suppressed [ 93.335119][ T6880] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1156'. [ 93.338089][ T6871] EXT4-fs (loop1): dirty_blocks=12 [ 93.338107][ T6871] EXT4-fs (loop1): Block reservation details [ 93.376318][ T6871] EXT4-fs (loop1): i_reserved_data_blocks=12 [ 93.392882][ T6873] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 93.407631][ T6873] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 93.454146][ T6873] EXT4-fs error (device loop2): ext4_lookup:1791: inode #2: comm syz.2.1155: deleted inode referenced: 15 [ 93.476377][ T6887] IPVS: stopping master sync thread 6888 ... [ 93.483273][ T6888] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 93.499879][ T6887] siw: device registration error -23 [ 93.666080][ T6902] bridge0: entered promiscuous mode [ 93.699211][ T6902] bridge0: port 3(macsec1) entered blocking state [ 93.705836][ T6902] bridge0: port 3(macsec1) entered disabled state [ 93.728799][ T6902] macsec1: entered allmulticast mode [ 93.734265][ T6902] bridge0: entered allmulticast mode [ 93.744672][ T6904] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1167'. [ 93.763755][ T6902] macsec1: left allmulticast mode [ 93.769020][ T6902] bridge0: left allmulticast mode [ 93.778930][ T6902] bridge0: left promiscuous mode [ 93.795549][ T6898] geneve2: entered promiscuous mode [ 93.800854][ T6898] geneve2: entered allmulticast mode [ 93.894436][ T6912] lo speed is unknown, defaulting to 1000 [ 93.919658][ T6916] loop2: detected capacity change from 0 to 512 [ 93.932759][ T6919] loop4: detected capacity change from 0 to 512 [ 93.944107][ T6919] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 93.964788][ T6916] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 93.989720][ T6923] sg_write: data in/out 196608/1 bytes for SCSI command 0xdb-- guessing data in; [ 93.989720][ T6923] program syz.3.1176 not setting count and/or reply_len properly [ 94.007454][ T6916] EXT4-fs (loop2): orphan cleanup on readonly fs [ 94.013981][ T6916] EXT4-fs error (device loop2): ext4_ext_check_inode:523: inode #3: comm syz.2.1173: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 7, max 0(0), depth 0(0) [ 94.032504][ T6916] EXT4-fs error (device loop2): ext4_quota_enable:7127: comm syz.2.1173: Bad quota inode: 3, type: 0 [ 94.057147][ T6916] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 94.071944][ T6916] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 94.101275][ T6919] ext4 filesystem being mounted at /208/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.131909][ T6919] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 94.150627][ T6916] EXT4-fs error (device loop2): ext4_lookup:1791: inode #2: comm syz.2.1173: deleted inode referenced: 15 [ 94.163497][ T6919] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 5 with max blocks 12 with error 28 [ 94.176042][ T6919] EXT4-fs (loop4): This should not happen!! Data will be lost [ 94.176042][ T6919] [ 94.185847][ T6919] EXT4-fs (loop4): Total free blocks count 0 [ 94.191869][ T6919] EXT4-fs (loop4): Free/Dirty block details [ 94.197802][ T6919] EXT4-fs (loop4): free_blocks=39626 [ 94.203108][ T6919] EXT4-fs (loop4): dirty_blocks=12 [ 94.208328][ T6919] EXT4-fs (loop4): Block reservation details [ 94.214317][ T6919] EXT4-fs (loop4): i_reserved_data_blocks=12 [ 94.266333][ T6889] process '/newroot/221/file0' started with executable stack [ 94.291985][ T6889] ------------[ cut here ]------------ [ 94.298065][ T6889] WARNING: CPU: 0 PID: 6889 at kernel/events/core.c:7218 perf_pending_task+0x202/0x210 [ 94.308083][ T6889] Modules linked in: [ 94.312089][ T6889] CPU: 0 UID: 0 PID: 6889 Comm: file0 Not tainted 6.16.0-syzkaller-06699-ge8d780dcd957 #0 PREEMPT(voluntary) [ 94.323798][ T6889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 94.334123][ T6889] RIP: 0010:perf_pending_task+0x202/0x210 [ 94.340056][ T6889] Code: 40 fe cd e8 80 ef fc ff 41 88 6c 1d 00 eb 05 e8 d4 4c e2 ff 5b 41 5c 41 5d 41 5e 41 5f 5d e9 45 57 f0 03 cc e8 bf 4c e2 ff 90 <0f> 0b 90 eb 84 66 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 [ 94.360487][ T6889] RSP: 0018:ffffc90011f47d00 EFLAGS: 00010283 [ 94.366736][ T6889] RAX: ffffffff81759721 RBX: ffff888119ccddf0 RCX: 0000000000080000 [ 94.374846][ T6889] RDX: ffffc900026b9000 RSI: 000000000002ce9c RDI: 000000000002ce9d [ 94.382863][ T6889] RBP: 0000000000000000 R08: 0001888124463f8f R09: 0000000000000000 [ 94.390886][ T6889] R10: 0001c90011f47d38 R11: ffffffff81759520 R12: ffff888124463f00 [ 94.399200][ T6889] R13: ffff88811e6b5280 R14: 0000000000000000 R15: ffff888119ccda70 [ 94.407809][ T6889] FS: 0000000000000000(0000) GS:ffff8882aee65000(0000) knlGS:0000000000000000 [ 94.417141][ T6889] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 94.423857][ T6889] CR2: 0000001b3211fffc CR3: 0000000124b84000 CR4: 00000000003506f0 [ 94.433752][ T6889] Call Trace: [ 94.437097][ T6889] [ 94.440086][ T6889] task_work_run+0x131/0x1a0 [ 94.444972][ T6889] get_signal+0xe13/0xf70 [ 94.449906][ T6889] ? __slab_free+0x77/0x270 [ 94.454450][ T6889] ? putname+0xda/0x100 [ 94.458927][ T6889] arch_do_signal_or_restart+0x96/0x480 [ 94.464511][ T6889] exit_to_user_mode_loop+0x7a/0x100 [ 94.469873][ T6889] do_syscall_64+0x1d6/0x200 [ 94.474524][ T6889] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 94.480408][ T6889] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.486336][ T6889] RIP: 0033:0x7f077990e9a9 [ 94.490824][ T6889] Code: Unable to access opcode bytes at 0x7f077990e97f. [ 94.497906][ T6889] RSP: 002b:00007f0777f77038 EFLAGS: 00000246 ORIG_RAX: 000000000000000b [ 94.506528][ T6889] RAX: ffffffffffffffea RBX: 00007f0779b35fa0 RCX: 00007f077990e9a9 [ 94.507563][ T6941] loop2: detected capacity change from 0 to 512 [ 94.514572][ T6889] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000400 [ 94.514592][ T6889] RBP: 00007f0779990d69 R08: 0000000000000000 R09: 0000000000000000 [ 94.514607][ T6889] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 94.529061][ T6941] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 94.536947][ T6889] R13: 0000000000000000 R14: 00007f0779b35fa0 R15: 00007ffe594b1618 [ 94.536977][ T6889] [ 94.536985][ T6889] ---[ end trace 0000000000000000 ]--- [ 94.588747][ T6949] bridge0: entered promiscuous mode [ 94.605548][ T6949] bridge0: port 1(macsec1) entered blocking state [ 94.612248][ T6949] bridge0: port 1(macsec1) entered disabled state [ 94.619940][ T6941] EXT4-fs (loop2): orphan cleanup on readonly fs [ 94.626402][ T6941] EXT4-fs error (device loop2): ext4_ext_check_inode:523: inode #3: comm syz.2.1181: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 7, max 0(0), depth 0(0) [ 94.633415][ T6954] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1187'. [ 94.653084][ T6949] macsec1: entered allmulticast mode [ 94.658741][ T6949] bridge0: entered allmulticast mode [ 94.666163][ T6941] EXT4-fs error (device loop2): ext4_quota_enable:7127: comm syz.2.1181: Bad quota inode: 3, type: 0 [ 94.684284][ T6941] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 94.699139][ T6941] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 94.715313][ T6949] macsec1: left allmulticast mode [ 94.720479][ T6949] bridge0: left allmulticast mode [ 94.736226][ T6949] bridge0: left promiscuous mode [ 94.746818][ T6960] loop4: detected capacity change from 0 to 512 [ 94.747659][ T6947] geneve2: entered promiscuous mode [ 94.753734][ T6960] EXT4-fs: Ignoring removed mblk_io_submit option [ 94.758863][ T6947] geneve2: entered allmulticast mode [ 94.773349][ T6960] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 94.810757][ T6960] EXT4-fs (loop4): 1 truncate cleaned up [ 94.832801][ T6960] ip6gre7: entered allmulticast mode [ 94.905983][ T6970] IPVS: stopping master sync thread 6971 ... [ 94.913161][ T6971] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 94.955480][ T6970] siw: device registration error -23 [ 94.980193][ T6976] loop3: detected capacity change from 0 to 512 [ 94.991938][ T6975] loop1: detected capacity change from 0 to 512 [ 94.999390][ T6976] EXT4-fs: Ignoring removed mblk_io_submit option [ 95.025004][ T6975] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 95.048549][ T6976] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 95.089257][ T6981] loop2: detected capacity change from 0 to 512 [ 95.098304][ T6975] EXT4-fs (loop1): orphan cleanup on readonly fs [ 95.112111][ T6975] EXT4-fs error (device loop1): ext4_ext_check_inode:523: inode #3: comm syz.1.1195: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 7, max 0(0), depth 0(0) [ 95.135523][ T6981] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 95.159061][ T6976] EXT4-fs (loop3): 1 truncate cleaned up [ 95.171528][ T6981] ext4 filesystem being mounted at /236/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.196061][ T6975] EXT4-fs error (device loop1): ext4_quota_enable:7127: comm syz.1.1195: Bad quota inode: 3, type: 0 [ 95.229676][ T29] kauditd_printk_skb: 402 callbacks suppressed [ 95.229695][ T29] audit: type=1326 audit(1753953256.074:4649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6974 comm="syz.3.1196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd49ee9e9a9 code=0x7ffc0000 [ 95.260760][ T36] usb usb6-port1: attempt power cycle [ 95.281316][ T6976] ip6gre7: entered allmulticast mode [ 95.288096][ T6981] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 95.311173][ T6975] EXT4-fs warning (device loop1): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 95.326127][ T6975] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 95.334944][ T29] audit: type=1326 audit(1753953256.114:4650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6974 comm="syz.3.1196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd49ee9e9a9 code=0x7ffc0000 [ 95.359964][ T29] audit: type=1326 audit(1753953256.114:4651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6974 comm="syz.3.1196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd49ee9e9a9 code=0x7ffc0000 [ 95.362797][ T6981] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 5 with max blocks 12 with error 28 [ 95.384086][ T29] audit: type=1326 audit(1753953256.114:4652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6974 comm="syz.3.1196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd49ee9e9a9 code=0x7ffc0000 [ 95.396634][ T6981] EXT4-fs (loop2): This should not happen!! Data will be lost [ 95.396634][ T6981] [ 95.420504][ T29] audit: type=1326 audit(1753953256.114:4653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6974 comm="syz.3.1196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd49ee9e9a9 code=0x7ffc0000 [ 95.430154][ T6981] EXT4-fs (loop2): Total free blocks count 0 [ 95.430175][ T6981] EXT4-fs (loop2): Free/Dirty block details [ 95.453626][ T29] audit: type=1326 audit(1753953256.114:4654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6974 comm="syz.3.1196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd49ee9e9a9 code=0x7ffc0000 [ 95.459697][ T6981] EXT4-fs (loop2): free_blocks=39626 [ 95.465668][ T29] audit: type=1326 audit(1753953256.114:4655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6974 comm="syz.3.1196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd49ee9e9a9 code=0x7ffc0000 [ 95.489516][ T6981] EXT4-fs (loop2): dirty_blocks=12 [ 95.489541][ T6981] EXT4-fs (loop2): Block reservation details [ 95.494858][ T29] audit: type=1326 audit(1753953256.114:4656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6974 comm="syz.3.1196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd49ee9e9a9 code=0x7ffc0000 [ 95.518425][ T6981] EXT4-fs (loop2): i_reserved_data_blocks=12 [ 95.523571][ T29] audit: type=1326 audit(1753953256.114:4657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6974 comm="syz.3.1196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd49ee9e9a9 code=0x7ffc0000 [ 95.583954][ T29] audit: type=1326 audit(1753953256.114:4658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6974 comm="syz.3.1196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd49ee9e9a9 code=0x7ffc0000 [ 95.597903][ T6975] EXT4-fs error (device loop1): ext4_lookup:1791: inode #2: comm syz.1.1195: deleted inode referenced: 15 [ 95.730152][ T6997] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1201'. [ 95.947532][ T7017] IPVS: stopping master sync thread 7018 ... [ 95.948893][ T7018] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 95.967363][ T7017] siw: device registration error -23 [ 96.043255][ T7023] loop1: detected capacity change from 0 to 512 [ 96.051771][ T7023] EXT4-fs: Ignoring removed mblk_io_submit option [ 96.332828][ T7030] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1212'. [ 96.604967][ T7023] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 96.721128][ T7034] loop2: detected capacity change from 0 to 512 [ 96.745736][ T7023] EXT4-fs (loop1): 1 truncate cleaned up [ 96.773385][ T7034] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 96.817368][ T7034] EXT4-fs (loop2): orphan cleanup on readonly fs [ 96.824795][ T7034] EXT4-fs error (device loop2): ext4_ext_check_inode:523: inode #3: comm syz.2.1213: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 7, max 0(0), depth 0(0) [ 96.833316][ T7023] ip6gre6: entered allmulticast mode [ 96.903327][ T7053] loop0: detected capacity change from 0 to 512 [ 96.910530][ T7053] EXT4-fs: Ignoring removed mblk_io_submit option [ 96.917279][ T7034] EXT4-fs error (device loop2): ext4_quota_enable:7127: comm syz.2.1213: Bad quota inode: 3, type: 0 [ 96.930223][ T7034] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 96.945191][ T7034] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 96.955610][ T7053] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 96.977914][ T7034] EXT4-fs error (device loop2): ext4_lookup:1791: inode #2: comm syz.2.1213: deleted inode referenced: 15 [ 96.980365][ T7056] geneve2: entered promiscuous mode [ 96.995109][ T7056] geneve2: entered allmulticast mode [ 97.003692][ T7053] EXT4-fs (loop0): 1 truncate cleaned up [ 97.024563][ T7053] ip6gre4: entered allmulticast mode [ 97.100527][ T7062] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1225'. [ 97.361140][ T7085] loop3: detected capacity change from 0 to 512 [ 97.368887][ T7085] EXT4-fs: Ignoring removed mblk_io_submit option [ 97.378804][ T7085] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 97.423569][ T7085] EXT4-fs (loop3): 1 truncate cleaned up [ 97.790431][ T7085] ip6gre8: entered allmulticast mode [ 97.804711][ T7092] loop4: detected capacity change from 0 to 512 [ 97.814022][ T7092] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 97.840159][ T7092] EXT4-fs (loop4): orphan cleanup on readonly fs [ 97.844442][ T3302] EXT4-fs unmount: 81 callbacks suppressed [ 97.844458][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.847117][ T7092] EXT4-fs error (device loop4): ext4_ext_check_inode:523: inode #3: comm syz.4.1235: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 7, max 0(0), depth 0(0) [ 97.888476][ T7097] geneve2: entered promiscuous mode [ 97.893837][ T7097] geneve2: entered allmulticast mode [ 97.909467][ T7099] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1237'. [ 97.928224][ T7092] EXT4-fs error (device loop4): ext4_quota_enable:7127: comm syz.4.1235: Bad quota inode: 3, type: 0 [ 97.962266][ T7092] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 97.977130][ T7092] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 97.998191][ T7092] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 98.084252][ T7116] EXT4-fs error (device loop4): ext4_lookup:1791: inode #2: comm syz.4.1235: deleted inode referenced: 15 [ 98.114830][ T7121] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1246'. [ 98.164382][ T7126] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1250'. [ 98.245739][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.252104][ T36] usb usb6-port1: unable to enumerate USB device [ 98.339397][ T7138] loop4: detected capacity change from 0 to 512 [ 98.346431][ T7139] geneve2: entered promiscuous mode [ 98.352123][ T7139] geneve2: entered allmulticast mode [ 98.360667][ T7138] EXT4-fs: Ignoring removed mblk_io_submit option [ 98.376232][ T7143] sg_write: data in/out 196608/1 bytes for SCSI command 0xdb-- guessing data in; [ 98.376232][ T7143] program syz.3.1258 not setting count and/or reply_len properly [ 98.393831][ T7138] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 98.461552][ T7138] EXT4-fs (loop4): 1 truncate cleaned up [ 98.491166][ T7138] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.524071][ T7138] ip6gre8: entered allmulticast mode [ 98.537806][ T7153] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1262'. [ 98.599105][ T7155] loop2: detected capacity change from 0 to 512 [ 98.659141][ T7155] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 98.676191][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.765750][ T7155] EXT4-fs (loop2): orphan cleanup on readonly fs [ 98.843800][ T7155] EXT4-fs error (device loop2): ext4_ext_check_inode:523: inode #3: comm syz.2.1263: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 7, max 0(0), depth 0(0) [ 98.976830][ T7155] EXT4-fs error (device loop2): ext4_quota_enable:7127: comm syz.2.1263: Bad quota inode: 3, type: 0 [ 99.089157][ T7155] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 99.104012][ T7155] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 99.168022][ T7171] sg_write: data in/out 196608/1 bytes for SCSI command 0xdb-- guessing data in; [ 99.168022][ T7171] program syz.4.1270 not setting count and/or reply_len properly [ 99.170663][ T7155] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 99.214254][ T7155] EXT4-fs error (device loop2): ext4_lookup:1791: inode #2: comm syz.2.1263: deleted inode referenced: 15 [ 99.232085][ T7176] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 99.243385][ T7174] IPVS: stopping master sync thread 7176 ... [ 99.281963][ T7174] siw: device registration error -23 [ 99.309996][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.315050][ T7185] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1275'. [ 99.369576][ T7187] loop0: detected capacity change from 0 to 512 [ 99.377875][ T7187] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 99.391598][ T7191] loop4: detected capacity change from 0 to 512 [ 99.401582][ T7187] EXT4-fs (loop0): orphan cleanup on readonly fs [ 99.413175][ T7191] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 99.422041][ T7187] EXT4-fs error (device loop0): ext4_ext_check_inode:523: inode #3: comm syz.0.1278: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 7, max 0(0), depth 0(0) [ 99.431706][ T7191] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.452391][ T7191] ext4 filesystem being mounted at /230/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.474412][ T7187] EXT4-fs error (device loop0): ext4_quota_enable:7127: comm syz.0.1278: Bad quota inode: 3, type: 0 [ 99.521472][ T7187] EXT4-fs warning (device loop0): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 99.536266][ T7187] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 99.547703][ T7187] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 99.565317][ T7187] EXT4-fs error (device loop0): ext4_lookup:1791: inode #2: comm syz.0.1278: deleted inode referenced: 15 [ 99.603903][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.653205][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.685287][ T7219] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1292'. [ 99.711293][ T7219] loop1: detected capacity change from 0 to 512 [ 99.733628][ T7219] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 99.756248][ T7215] loop3: detected capacity change from 0 to 512 [ 99.806094][ T7215] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 99.889067][ T7233] loop2: detected capacity change from 0 to 512 [ 99.931387][ T7233] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 99.964920][ T7215] EXT4-fs (loop3): orphan cleanup on readonly fs [ 99.980841][ T7219] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.018923][ T7215] EXT4-fs error (device loop3): ext4_ext_check_inode:523: inode #3: comm syz.3.1290: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 7, max 0(0), depth 0(0) [ 100.080940][ T7233] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.111060][ T7219] ext4 filesystem being mounted at /237/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 100.143153][ T7215] EXT4-fs error (device loop3): ext4_quota_enable:7127: comm syz.3.1290: Bad quota inode: 3, type: 0 [ 100.181030][ T7233] ext4 filesystem being mounted at /255/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.203776][ T7243] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1298'. [ 100.248825][ T7215] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 100.263550][ T7215] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 100.290764][ T7233] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 100.312717][ T29] kauditd_printk_skb: 327 callbacks suppressed [ 100.312733][ T29] audit: type=1326 audit(1753953261.154:4986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7238 comm="syz.0.1298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa0d26e9a9 code=0x7ffc0000 [ 100.314923][ T7215] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 100.319131][ T29] audit: type=1326 audit(1753953261.154:4987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7238 comm="syz.0.1298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa0d26e9a9 code=0x7ffc0000 [ 100.343587][ T7233] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 5 with max blocks 12 with error 28 [ 100.390986][ T7233] EXT4-fs (loop2): This should not happen!! Data will be lost [ 100.390986][ T7233] [ 100.400865][ T7233] EXT4-fs (loop2): Total free blocks count 0 [ 100.406977][ T7233] EXT4-fs (loop2): Free/Dirty block details [ 100.412913][ T7233] EXT4-fs (loop2): free_blocks=39626 [ 100.418425][ T7233] EXT4-fs (loop2): dirty_blocks=12 [ 100.423625][ T7233] EXT4-fs (loop2): Block reservation details [ 100.429703][ T7233] EXT4-fs (loop2): i_reserved_data_blocks=12 [ 100.441149][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.444593][ T7215] EXT4-fs error (device loop3): ext4_lookup:1791: inode #2: comm syz.3.1290: deleted inode referenced: 15 [ 100.523953][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.539997][ T7255] geneve2: entered promiscuous mode [ 100.545388][ T7255] geneve2: entered allmulticast mode [ 100.584261][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.584822][ T7262] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 100.600030][ T7262] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 100.607592][ T7262] vhci_hcd vhci_hcd.0: Device attached [ 100.731580][ T7262] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(6) [ 100.739022][ T7262] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 100.747890][ T7262] vhci_hcd vhci_hcd.0: Device attached [ 100.770794][ T7289] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 100.796779][ T1037] vhci_hcd: vhci_device speed not set [ 100.802511][ T7293] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 100.813690][ T7288] IPVS: stopping master sync thread 7293 ... [ 100.822474][ T7288] siw: device registration error -23 [ 100.832715][ T7262] vhci_hcd vhci_hcd.0: pdev(2) rhport(4) sockfd(8) [ 100.839260][ T7262] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 100.847079][ T7262] vhci_hcd vhci_hcd.0: Device attached [ 100.853395][ T7289] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(11) [ 100.860104][ T7289] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 100.868113][ T7289] vhci_hcd vhci_hcd.0: Device attached [ 100.875967][ T1037] usb 5-1: new full-speed USB device number 5 using vhci_hcd [ 100.881988][ T7262] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(13) [ 100.890038][ T7262] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 100.897777][ T7262] vhci_hcd vhci_hcd.0: Device attached [ 100.906013][ T7262] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 100.973419][ T7301] vhci_hcd: connection closed [ 100.973694][ T7283] vhci_hcd: connection closed [ 100.981778][ T7295] vhci_hcd: connection closed [ 100.986659][ T7292] vhci_hcd: connection closed [ 100.991924][ T51] vhci_hcd: stop threads [ 101.000994][ T51] vhci_hcd: release socket [ 101.005464][ T51] vhci_hcd: disconnect device [ 101.010288][ T7263] vhci_hcd: connection reset by peer [ 101.048568][ T7308] lo speed is unknown, defaulting to 1000 [ 101.322315][ T51] vhci_hcd: stop threads [ 101.326804][ T51] vhci_hcd: release socket [ 101.331427][ T51] vhci_hcd: disconnect device [ 101.336458][ T51] vhci_hcd: stop threads [ 101.340769][ T51] vhci_hcd: release socket [ 101.345213][ T51] vhci_hcd: disconnect device [ 101.351763][ T51] vhci_hcd: stop threads [ 101.356048][ T51] vhci_hcd: release socket [ 101.360674][ T51] vhci_hcd: disconnect device [ 101.368948][ T7318] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 101.377044][ T51] vhci_hcd: stop threads [ 101.381368][ T51] vhci_hcd: release socket [ 101.385819][ T51] vhci_hcd: disconnect device [ 101.493108][ T7327] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 101.524452][ T7331] IPVS: stopping master sync thread 7332 ... [ 101.526737][ T7332] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 101.609242][ T7342] loop1: detected capacity change from 0 to 256 [ 101.623677][ T7342] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1333'. [ 101.632763][ T7342] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1333'. [ 101.641791][ T7342] netlink: 'syz.1.1333': attribute type 18 has an invalid length. [ 101.650088][ T7342] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1333'. [ 101.722252][ T7349] loop0: detected capacity change from 0 to 512 [ 101.775211][ T7349] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.799383][ T7349] ext4 filesystem being mounted at /297/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.823672][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.840715][ T7361] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 101.891347][ T7364] IPVS: stopping master sync thread 7368 ... [ 101.899911][ T7368] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 101.944559][ T7375] siw: device registration error -23 [ 101.950679][ T7372] loop1: detected capacity change from 0 to 1024 [ 101.988130][ T7372] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 102.037549][ T7372] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 102.127877][ T7372] JBD2: no valid journal superblock found [ 102.133649][ T7372] EXT4-fs (loop1): Could not load journal inode [ 102.196794][ T29] audit: type=1400 audit(1753953263.014:4988): avc: denied { cpu } for pid=7392 comm="syz.3.1352" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 102.434215][ T7408] loop2: detected capacity change from 0 to 512 [ 102.502765][ T7413] IPVS: stopping master sync thread 7414 ... [ 102.510994][ T7413] siw: device registration error -23 [ 102.602776][ T7408] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 102.629128][ T7408] EXT4-fs (loop2): orphan cleanup on readonly fs [ 102.635795][ T7408] EXT4-fs error (device loop2): ext4_ext_check_inode:523: inode #3: comm syz.2.1358: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 7, max 0(0), depth 0(0) [ 102.745951][ T7408] EXT4-fs error (device loop2): ext4_quota_enable:7127: comm syz.2.1358: Bad quota inode: 3, type: 0 [ 102.790270][ T7432] loop0: detected capacity change from 0 to 512 [ 102.825662][ T7408] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 102.840444][ T7408] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 102.855779][ T7432] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 102.880254][ T7408] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 102.881134][ T7432] EXT4-fs (loop0): orphan cleanup on readonly fs [ 102.902040][ T7408] EXT4-fs error (device loop2): ext4_lookup:1791: inode #2: comm syz.2.1358: deleted inode referenced: 15 [ 102.919813][ T7432] EXT4-fs error (device loop0): ext4_ext_check_inode:523: inode #3: comm syz.0.1365: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 7, max 0(0), depth 0(0) [ 102.947214][ T29] audit: type=1326 audit(1753953263.754:4989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7435 comm="syz.1.1367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f077990e9a9 code=0x7ffc0000 [ 102.971216][ T29] audit: type=1326 audit(1753953263.754:4990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7435 comm="syz.1.1367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f077990e9a9 code=0x7ffc0000 [ 102.995259][ T29] audit: type=1326 audit(1753953263.754:4991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7435 comm="syz.1.1367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f077990e9a9 code=0x7ffc0000 [ 103.018664][ T7440] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1367'. [ 103.018992][ T29] audit: type=1326 audit(1753953263.754:4992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7435 comm="syz.1.1367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f077990e9a9 code=0x7ffc0000 [ 103.051481][ T29] audit: type=1326 audit(1753953263.754:4993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7435 comm="syz.1.1367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f077990e9a9 code=0x7ffc0000 [ 103.075102][ T29] audit: type=1326 audit(1753953263.754:4994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7435 comm="syz.1.1367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=280 compat=0 ip=0x7f077990e9a9 code=0x7ffc0000 [ 103.098897][ T29] audit: type=1326 audit(1753953263.754:4995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7435 comm="syz.1.1367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f077990e9a9 code=0x7ffc0000 [ 103.146720][ T7432] EXT4-fs error (device loop0): ext4_quota_enable:7127: comm syz.0.1365: Bad quota inode: 3, type: 0 [ 103.181387][ T7432] EXT4-fs warning (device loop0): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 103.196192][ T7432] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 103.211898][ T7432] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 103.276234][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.287463][ T7432] EXT4-fs error (device loop0): ext4_lookup:1791: inode #2: comm syz.0.1365: deleted inode referenced: 15 [ 103.357324][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.438758][ T7457] loop4: detected capacity change from 0 to 512 [ 103.472003][ T7457] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 103.551982][ T7462] loop1: detected capacity change from 0 to 512 [ 103.561130][ T7459] IPVS: stopping master sync thread 7463 ... [ 103.579366][ T7459] siw: device registration error -23 [ 103.612182][ T7462] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 103.638177][ T7457] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.655272][ T7457] ext4 filesystem being mounted at /240/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.678681][ T7470] loop2: detected capacity change from 0 to 1024 [ 103.700701][ T7470] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 103.721524][ T7462] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.737765][ T7456] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 103.754422][ T7470] EXT4-fs error (device loop2): ext4_map_blocks:816: inode #3: block 1: comm syz.2.1376: lblock 1 mapped to illegal pblock 1 (length 1) [ 103.769487][ T7462] ext4 filesystem being mounted at /264/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.780797][ T7456] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 5 with max blocks 12 with error 28 [ 103.793201][ T7456] EXT4-fs (loop4): This should not happen!! Data will be lost [ 103.793201][ T7456] [ 103.803163][ T7456] EXT4-fs (loop4): Total free blocks count 0 [ 103.809331][ T7456] EXT4-fs (loop4): Free/Dirty block details [ 103.813843][ T7470] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.1376: Failed to acquire dquot type 0 [ 103.815338][ T7456] EXT4-fs (loop4): free_blocks=39626 [ 103.815358][ T7456] EXT4-fs (loop4): dirty_blocks=12 [ 103.815371][ T7456] EXT4-fs (loop4): Block reservation details [ 103.829153][ T7462] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, [ 103.831974][ T7456] EXT4-fs (loop4): i_reserved_data_blocks=12 [ 103.837152][ T7462] block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 103.883309][ T7470] EXT4-fs error (device loop2): ext4_free_blocks:6587: comm syz.2.1376: Freeing blocks not in datazone - block = 0, count = 4096 [ 103.884047][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.897265][ T7462] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 5 with max blocks 12 with error 28 [ 103.918569][ T7462] EXT4-fs (loop1): This should not happen!! Data will be lost [ 103.918569][ T7462] [ 103.926962][ T7470] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.1376: Invalid inode bitmap blk 0 in block_group 0 [ 103.928535][ T7462] EXT4-fs (loop1): Total free blocks count 0 [ 103.946789][ T4794] EXT4-fs error (device loop2): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:8: lblock 1 mapped to illegal pblock 1 (length 1) [ 103.947132][ T7462] EXT4-fs (loop1): Free/Dirty block details [ 103.967325][ T7462] EXT4-fs (loop1): free_blocks=39626 [ 103.973272][ T7462] EXT4-fs (loop1): dirty_blocks=12 [ 103.978464][ T7462] EXT4-fs (loop1): Block reservation details [ 103.981266][ T4794] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:8: Failed to release dquot type 0 [ 103.984979][ T7462] EXT4-fs (loop1): i_reserved_data_blocks=12 [ 104.004752][ T7470] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem [ 104.030353][ T7477] loop0: detected capacity change from 0 to 512 [ 104.043427][ T7470] EXT4-fs (loop2): 1 orphan inode deleted [ 104.057653][ T7477] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 104.061153][ T7470] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.086486][ T7477] EXT4-fs (loop0): orphan cleanup on readonly fs [ 104.093104][ T7477] EXT4-fs error (device loop0): ext4_ext_check_inode:523: inode #3: comm syz.0.1379: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 7, max 0(0), depth 0(0) [ 104.114676][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.124300][ T7477] EXT4-fs error (device loop0): ext4_quota_enable:7127: comm syz.0.1379: Bad quota inode: 3, type: 0 [ 104.128204][ T7482] loop4: detected capacity change from 0 to 512 [ 104.143287][ T7477] EXT4-fs warning (device loop0): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 104.158093][ T7477] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 104.229687][ T7477] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 104.252108][ T7492] loop4: detected capacity change from 0 to 512 [ 104.272215][ T7477] EXT4-fs error (device loop0): ext4_lookup:1791: inode #2: comm syz.0.1379: deleted inode referenced: 15 [ 104.334132][ T7492] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 104.369482][ T7492] EXT4-fs (loop4): orphan cleanup on readonly fs [ 104.375965][ T7492] EXT4-fs error (device loop4): ext4_ext_check_inode:523: inode #3: comm syz.4.1384: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 7, max 0(0), depth 0(0) [ 104.395950][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.406162][ T7492] EXT4-fs error (device loop4): ext4_quota_enable:7127: comm syz.4.1384: Bad quota inode: 3, type: 0 [ 104.422936][ T7492] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 104.437844][ T7492] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 104.450747][ T7492] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 104.481225][ T7492] EXT4-fs error (device loop4): ext4_lookup:1791: inode #2: comm syz.4.1384: deleted inode referenced: 15 [ 104.483954][ T7504] loop3: detected capacity change from 0 to 512 [ 104.494749][ T7503] IPVS: stopping master sync thread 7505 ... [ 104.500548][ T7505] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 104.519958][ T7503] siw: device registration error -23 [ 104.526394][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.553716][ T7507] geneve2: entered promiscuous mode [ 104.559036][ T7507] geneve2: entered allmulticast mode [ 104.569501][ T7504] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 104.599633][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.600116][ T7504] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.623905][ T7504] ext4 filesystem being mounted at /297/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 104.701184][ T7504] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 104.850153][ T7504] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 5 with max blocks 12 with error 28 [ 104.862667][ T7504] EXT4-fs (loop3): This should not happen!! Data will be lost [ 104.862667][ T7504] [ 104.872338][ T7504] EXT4-fs (loop3): Total free blocks count 0 [ 104.878457][ T7504] EXT4-fs (loop3): Free/Dirty block details [ 104.884370][ T7504] EXT4-fs (loop3): free_blocks=39626 [ 104.889727][ T7504] EXT4-fs (loop3): dirty_blocks=12 [ 104.894970][ T7504] EXT4-fs (loop3): Block reservation details [ 104.901084][ T7504] EXT4-fs (loop3): i_reserved_data_blocks=12 [ 104.936200][ T7517] geneve2: entered promiscuous mode [ 104.941793][ T7517] geneve2: entered allmulticast mode [ 105.127997][ T7520] loop4: detected capacity change from 0 to 512 [ 105.225228][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.308655][ T7520] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.344506][ T7520] ext4 filesystem being mounted at /245/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 105.406324][ T7530] loop0: detected capacity change from 0 to 512 [ 105.458164][ T7530] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 105.508065][ T7530] EXT4-fs (loop0): orphan cleanup on readonly fs [ 105.514571][ T7530] EXT4-fs error (device loop0): ext4_ext_check_inode:523: inode #3: comm syz.0.1397: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 7, max 0(0), depth 0(0) [ 105.547923][ T7530] EXT4-fs error (device loop0): ext4_quota_enable:7127: comm syz.0.1397: Bad quota inode: 3, type: 0 [ 105.548623][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.588023][ T7537] loop2: detected capacity change from 0 to 512 [ 105.597617][ T7530] EXT4-fs warning (device loop0): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 105.612930][ T7530] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 105.623092][ T29] kauditd_printk_skb: 70 callbacks suppressed [ 105.623110][ T29] audit: type=1400 audit(1753953266.474:5063): avc: denied { watch watch_reads } for pid=7538 comm="syz.3.1402" path="/300" dev="tmpfs" ino=1592 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 105.666899][ T7537] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 105.676847][ T7530] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 105.695917][ T7530] EXT4-fs error (device loop0): ext4_lookup:1791: inode #2: comm syz.0.1397: deleted inode referenced: 15 [ 105.711687][ T7537] EXT4-fs (loop2): orphan cleanup on readonly fs [ 105.719846][ T7537] EXT4-fs error (device loop2): ext4_ext_check_inode:523: inode #3: comm syz.2.1401: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 7, max 0(0), depth 0(0) [ 105.784198][ T29] audit: type=1326 audit(1753953266.624:5064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7545 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f768e27e9a9 code=0x7ffc0000 [ 105.784371][ T7537] EXT4-fs error (device loop2): ext4_quota_enable:7127: comm syz.2.1401: Bad quota inode: 3, type: 0 [ 105.807351][ T29] audit: type=1326 audit(1753953266.624:5065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7545 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f768e27e9a9 code=0x7ffc0000 [ 105.842952][ T29] audit: type=1326 audit(1753953266.684:5066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7545 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f768e27e9a9 code=0x7ffc0000 [ 105.846114][ T7537] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 105.866129][ T29] audit: type=1326 audit(1753953266.684:5067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7545 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f768e27e9a9 code=0x7ffc0000 [ 105.880970][ T7537] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 105.903942][ T29] audit: type=1326 audit(1753953266.684:5068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7545 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f768e27e9a9 code=0x7ffc0000 [ 105.943026][ T7537] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 105.957983][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.975966][ T1037] usb 5-1: enqueue for inactive port 0 [ 105.984568][ T29] audit: type=1326 audit(1753953266.684:5069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7545 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f768e27e9a9 code=0x7ffc0000 [ 106.002339][ T1037] usb 5-1: enqueue for inactive port 0 [ 106.007402][ T29] audit: type=1326 audit(1753953266.684:5070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7545 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f768e27e9a9 code=0x7ffc0000 [ 106.035882][ T29] audit: type=1326 audit(1753953266.684:5071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7545 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f768e27e9a9 code=0x7ffc0000 [ 106.058919][ T29] audit: type=1326 audit(1753953266.764:5072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7545 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f768e27e9a9 code=0x7ffc0000 [ 106.086670][ T1037] vhci_hcd: vhci_device speed not set [ 106.096728][ T7537] EXT4-fs error (device loop2): ext4_lookup:1791: inode #2: comm syz.2.1401: deleted inode referenced: 15 [ 106.199629][ T7554] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1406'. [ 106.241883][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.265175][ T7573] loop4: detected capacity change from 0 to 512 [ 106.320502][ T7573] EXT4-fs: Ignoring removed mblk_io_submit option [ 106.434034][ T7573] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 106.609809][ T7573] EXT4-fs (loop4): 1 truncate cleaned up [ 106.620865][ T7573] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.711596][ T7573] ip6gre9: entered allmulticast mode [ 106.806143][ T7594] bridge0: entered promiscuous mode [ 106.856375][ T7598] loop2: detected capacity change from 0 to 512 [ 106.878235][ T7598] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 106.890067][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.905490][ T7598] EXT4-fs (loop2): orphan cleanup on readonly fs [ 106.912226][ T7598] EXT4-fs error (device loop2): ext4_ext_check_inode:523: inode #3: comm syz.2.1423: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 7, max 0(0), depth 0(0) [ 106.921526][ T7596] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1422'. [ 106.953220][ T7598] EXT4-fs error (device loop2): ext4_quota_enable:7127: comm syz.2.1423: Bad quota inode: 3, type: 0 [ 106.970166][ T7598] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 106.985205][ T7598] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 106.993486][ T7598] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 107.010835][ T7598] EXT4-fs error (device loop2): ext4_lookup:1791: inode #2: comm syz.2.1423: deleted inode referenced: 15 [ 107.033132][ T7608] geneve2: entered promiscuous mode [ 107.038543][ T7608] geneve2: entered allmulticast mode [ 107.092033][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.202980][ T7623] FAULT_INJECTION: forcing a failure. [ 107.202980][ T7623] name failslab, interval 1, probability 0, space 0, times 0 [ 107.203014][ T7623] CPU: 0 UID: 0 PID: 7623 Comm: syz.1.1432 Tainted: G W 6.16.0-syzkaller-06699-ge8d780dcd957 #0 PREEMPT(voluntary) [ 107.203047][ T7623] Tainted: [W]=WARN [ 107.203053][ T7623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 107.203065][ T7623] Call Trace: [ 107.203070][ T7623] [ 107.203077][ T7623] __dump_stack+0x1d/0x30 [ 107.203099][ T7623] dump_stack_lvl+0xe8/0x140 [ 107.203132][ T7623] dump_stack+0x15/0x1b [ 107.203146][ T7623] should_fail_ex+0x265/0x280 [ 107.203165][ T7623] should_failslab+0x8c/0xb0 [ 107.203197][ T7623] kmem_cache_alloc_noprof+0x50/0x310 [ 107.203219][ T7623] ? mas_alloc_nodes+0x265/0x520 [ 107.203244][ T7623] mas_alloc_nodes+0x265/0x520 [ 107.203270][ T7623] mas_preallocate+0x33e/0x520 [ 107.203292][ T7623] mmap_region+0xb7e/0x1580 [ 107.203345][ T7623] do_mmap+0x9b3/0xbe0 [ 107.203372][ T7623] vm_mmap_pgoff+0x17a/0x2e0 [ 107.203392][ T7623] ksys_mmap_pgoff+0xc2/0x310 [ 107.203413][ T7623] ? __x64_sys_mmap+0x49/0x70 [ 107.203433][ T7623] x64_sys_call+0x14a3/0x2ff0 [ 107.203454][ T7623] do_syscall_64+0xd2/0x200 [ 107.203476][ T7623] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 107.203504][ T7623] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 107.203540][ T7623] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.203563][ T7623] RIP: 0033:0x7f077990e9e3 [ 107.203580][ T7623] Code: f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 41 89 ca 41 f7 c1 ff 0f 00 00 75 14 b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 25 c3 0f 1f 40 00 48 c7 c0 a8 ff ff ff 64 c7 [ 107.203600][ T7623] RSP: 002b:00007f0777f76e18 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 107.203622][ T7623] RAX: ffffffffffffffda RBX: 000000000000045a RCX: 00007f077990e9e3 [ 107.203635][ T7623] RDX: 0000000000000003 RSI: 0000000008400000 RDI: 0000000000000000 [ 107.203646][ T7623] RBP: 0000200000002402 R08: 00000000ffffffff R09: 0000000000000000 [ 107.203658][ T7623] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000006 [ 107.203669][ T7623] R13: 00007f0777f76ef0 R14: 00007f0777f76eb0 R15: 0000200000000680 [ 107.203695][ T7623] [ 107.293608][ T7627] ip6_vti0: mtu greater than device maximum [ 107.339300][ T7632] loop1: detected capacity change from 0 to 512 [ 107.339702][ T7632] EXT4-fs: Ignoring removed mblk_io_submit option [ 107.340104][ T7632] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 107.345670][ T7634] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1433'. [ 107.361779][ T7632] EXT4-fs (loop1): 1 truncate cleaned up [ 107.362305][ T7632] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.425521][ T7632] ip6gre7: entered allmulticast mode [ 107.559903][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.782328][ T7640] loop0: detected capacity change from 0 to 512 [ 107.795622][ T7640] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 107.942137][ T7640] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.039984][ T7640] ext4 filesystem being mounted at /319/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 108.099083][ T7646] loop4: detected capacity change from 0 to 512 [ 108.182409][ T7646] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 108.228908][ T7640] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 108.251471][ T7640] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 5 with max blocks 12 with error 28 [ 108.263897][ T7640] EXT4-fs (loop0): This should not happen!! Data will be lost [ 108.263897][ T7640] [ 108.273757][ T7640] EXT4-fs (loop0): Total free blocks count 0 [ 108.279782][ T7640] EXT4-fs (loop0): Free/Dirty block details [ 108.285760][ T7640] EXT4-fs (loop0): free_blocks=39626 [ 108.291133][ T7640] EXT4-fs (loop0): dirty_blocks=12 [ 108.296327][ T7640] EXT4-fs (loop0): Block reservation details [ 108.300950][ T7646] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.302393][ T7640] EXT4-fs (loop0): i_reserved_data_blocks=12 [ 108.321310][ T7646] ext4 filesystem being mounted at /253/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 108.334749][ T7648] loop2: detected capacity change from 0 to 512 [ 108.343958][ T7648] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 108.366063][ T7646] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 108.387983][ T7648] EXT4-fs (loop2): orphan cleanup on readonly fs [ 108.394624][ T7648] EXT4-fs error (device loop2): ext4_ext_check_inode:523: inode #3: comm syz.2.1439: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 7, max 0(0), depth 0(0) [ 108.399093][ T7646] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 5 with max blocks 12 with error 28 [ 108.424126][ T7646] EXT4-fs (loop4): This should not happen!! Data will be lost [ 108.424126][ T7646] [ 108.433992][ T7646] EXT4-fs (loop4): Total free blocks count 0 [ 108.441466][ T7646] EXT4-fs (loop4): Free/Dirty block details [ 108.447498][ T7646] EXT4-fs (loop4): free_blocks=39626 [ 108.452917][ T7646] EXT4-fs (loop4): dirty_blocks=12 [ 108.458167][ T7646] EXT4-fs (loop4): Block reservation details [ 108.464162][ T7646] EXT4-fs (loop4): i_reserved_data_blocks=12 [ 108.480495][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.533008][ T7656] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1441'. [ 108.546390][ T7648] EXT4-fs error (device loop2): ext4_quota_enable:7127: comm syz.2.1439: Bad quota inode: 3, type: 0 [ 108.561871][ T7648] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 108.576746][ T7648] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 108.584339][ T7648] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 108.601064][ T7648] EXT4-fs error (device loop2): ext4_lookup:1791: inode #2: comm syz.2.1439: deleted inode referenced: 15 [ 108.621845][ T7659] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 108.628490][ T7659] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 108.636132][ T7659] vhci_hcd vhci_hcd.0: Device attached [ 108.664358][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.675975][ T7659] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(6) [ 108.682762][ T7659] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 108.690577][ T7659] vhci_hcd vhci_hcd.0: Device attached [ 108.699627][ T7669] loop1: detected capacity change from 0 to 512 [ 108.721588][ T7669] EXT4-fs: Ignoring removed mblk_io_submit option [ 108.729606][ T7659] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 108.738030][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.748149][ T7669] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 108.758819][ T7659] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(10) [ 108.765531][ T7659] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 108.773328][ T7659] vhci_hcd vhci_hcd.0: Device attached [ 108.774968][ T7669] EXT4-fs (loop1): 1 truncate cleaned up [ 108.783151][ T7673] loop4: detected capacity change from 0 to 512 [ 108.785019][ T7669] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.808401][ T7673] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 108.817012][ T9] vhci_hcd: vhci_device speed not set [ 108.818282][ T7669] ip6gre8: entered allmulticast mode [ 108.827501][ T7679] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(13) [ 108.835030][ T7679] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 108.842848][ T7679] vhci_hcd vhci_hcd.0: Device attached [ 108.852104][ T7673] EXT4-fs (loop4): orphan cleanup on readonly fs [ 108.860083][ T7673] EXT4-fs error (device loop4): ext4_ext_check_inode:523: inode #3: comm syz.4.1444: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 7, max 0(0), depth 0(0) [ 108.878150][ T9] usb 1-1: new full-speed USB device number 5 using vhci_hcd [ 108.886409][ T7673] EXT4-fs error (device loop4): ext4_quota_enable:7127: comm syz.4.1444: Bad quota inode: 3, type: 0 [ 108.887905][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.900918][ T7673] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 108.921901][ T7673] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 108.922469][ T7659] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(12) [ 108.929139][ T7679] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 108.935208][ T7659] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 108.951329][ T7659] vhci_hcd vhci_hcd.0: Device attached [ 108.958800][ T7673] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 108.979949][ T7689] bond_slave_1: entered promiscuous mode [ 108.991713][ T7689] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1450'. [ 109.005868][ T7673] EXT4-fs error (device loop4): ext4_lookup:1791: inode #2: comm syz.4.1444: deleted inode referenced: 15 [ 109.030843][ T7674] vhci_hcd: connection closed [ 109.034457][ T7689] bond_slave_1 (unregistering): left promiscuous mode [ 109.045247][ T7666] vhci_hcd: connection closed [ 109.046141][ T4794] vhci_hcd: stop threads [ 109.048369][ T7685] vhci_hcd: connection closed [ 109.050956][ T4794] vhci_hcd: release socket [ 109.055305][ T7660] vhci_hcd: connection reset by peer [ 109.059989][ T4794] vhci_hcd: disconnect device [ 109.082495][ T4794] vhci_hcd: stop threads [ 109.086827][ T4794] vhci_hcd: release socket [ 109.086861][ T7681] vhci_hcd: connection closed [ 109.091256][ T4794] vhci_hcd: disconnect device [ 109.103746][ T4794] vhci_hcd: stop threads [ 109.108165][ T4794] vhci_hcd: release socket [ 109.112865][ T4794] vhci_hcd: disconnect device [ 109.123584][ T4794] vhci_hcd: stop threads [ 109.127983][ T4794] vhci_hcd: release socket [ 109.132584][ T4794] vhci_hcd: disconnect device [ 109.160639][ T4794] vhci_hcd: stop threads [ 109.165095][ T4794] vhci_hcd: release socket [ 109.169738][ T4794] vhci_hcd: disconnect device [ 109.229990][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.350907][ T7715] loop1: detected capacity change from 0 to 512 [ 109.357760][ T7715] EXT4-fs: Ignoring removed mblk_io_submit option [ 109.366626][ T7715] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 109.385723][ T7715] EXT4-fs (loop1): 1 truncate cleaned up [ 109.395781][ T7715] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.409223][ T7717] loop3: detected capacity change from 0 to 512 [ 109.416862][ T7717] EXT4-fs: Ignoring removed mblk_io_submit option [ 109.449010][ T7717] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 109.518148][ T7717] EXT4-fs (loop3): 1 truncate cleaned up [ 109.523557][ T7715] ip6gre9: entered allmulticast mode [ 109.537708][ T7717] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.589705][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.634670][ T7728] loop1: detected capacity change from 0 to 512 [ 109.641932][ T7717] ip6gre9: entered allmulticast mode [ 109.658218][ T7728] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 109.679549][ T7728] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.711617][ T7728] ext4 filesystem being mounted at /282/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.741245][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.774966][ T7728] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 109.856321][ T7728] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 5 with max blocks 12 with error 28 [ 109.868973][ T7728] EXT4-fs (loop1): This should not happen!! Data will be lost [ 109.868973][ T7728] [ 109.878997][ T7728] EXT4-fs (loop1): Total free blocks count 0 [ 109.885003][ T7728] EXT4-fs (loop1): Free/Dirty block details [ 109.890975][ T7728] EXT4-fs (loop1): free_blocks=39626 [ 109.896287][ T7728] EXT4-fs (loop1): dirty_blocks=12 [ 109.901654][ T7728] EXT4-fs (loop1): Block reservation details [ 109.907701][ T7728] EXT4-fs (loop1): i_reserved_data_blocks=12 [ 109.980916][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.279164][ T7755] loop2: detected capacity change from 0 to 512 [ 110.307219][ T7755] EXT4-fs: Ignoring removed mblk_io_submit option [ 110.338010][ T7755] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 110.388932][ T7755] EXT4-fs (loop2): 1 truncate cleaned up [ 110.395098][ T7755] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.470950][ T7755] ip6gre6: entered allmulticast mode [ 110.589242][ T7762] loop4: detected capacity change from 0 to 512 [ 110.611330][ T7762] EXT4-fs: Ignoring removed mblk_io_submit option [ 110.637507][ T7762] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 110.692698][ T29] kauditd_printk_skb: 472 callbacks suppressed [ 110.692718][ T29] audit: type=1326 audit(1753953271.534:5545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7739 comm="syz.3.1464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd49ee9e9a9 code=0x7ffc0000 [ 110.723032][ T29] audit: type=1326 audit(1753953271.534:5546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7739 comm="syz.3.1464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd49ee9e9a9 code=0x7ffc0000 [ 110.753674][ T7762] EXT4-fs (loop4): 1 truncate cleaned up [ 110.786294][ T29] audit: type=1326 audit(1753953271.624:5547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7761 comm="syz.4.1475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f768e27e9a9 code=0x7ffc0000 [ 110.813896][ T7762] ip6gre10: entered allmulticast mode [ 110.836055][ T29] audit: type=1326 audit(1753953271.664:5548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7761 comm="syz.4.1475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f768e27e9a9 code=0x7ffc0000 [ 110.859808][ T29] audit: type=1326 audit(1753953271.664:5549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7761 comm="syz.4.1475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f768e27e9a9 code=0x7ffc0000 [ 110.883319][ T29] audit: type=1326 audit(1753953271.664:5550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7761 comm="syz.4.1475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f768e27e9a9 code=0x7ffc0000 [ 110.906877][ T29] audit: type=1326 audit(1753953271.664:5551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7761 comm="syz.4.1475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f768e27e9a9 code=0x7ffc0000 [ 110.930537][ T29] audit: type=1326 audit(1753953271.664:5552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7761 comm="syz.4.1475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f768e27e9a9 code=0x7ffc0000 [ 110.954225][ T29] audit: type=1326 audit(1753953271.664:5553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7761 comm="syz.4.1475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f768e27e9a9 code=0x7ffc0000 [ 110.978002][ T29] audit: type=1326 audit(1753953271.664:5554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7761 comm="syz.4.1475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f768e27e9a9 code=0x7ffc0000 [ 111.043511][ T7740] loop3: detected capacity change from 0 to 1024 [ 111.138845][ T7740] ext4 filesystem being mounted at /313/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 111.410354][ T7783] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1481'. [ 111.642597][ T7794] IPVS: stopping master sync thread 7795 ... [ 111.647267][ T7795] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 111.694099][ T7794] siw: device registration error -23 [ 111.740791][ T7801] loop3: detected capacity change from 0 to 512 [ 111.771631][ T7803] loop1: detected capacity change from 0 to 512 [ 111.789396][ T7801] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 111.817410][ T7803] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 111.848543][ T7803] EXT4-fs (loop1): orphan cleanup on readonly fs [ 111.856455][ T7801] ext4 filesystem being mounted at /314/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 111.893675][ T7803] EXT4-fs error (device loop1): ext4_ext_check_inode:523: inode #3: comm syz.1.1488: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 7, max 0(0), depth 0(0) [ 111.931272][ T7801] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 111.947052][ T7803] EXT4-fs error (device loop1): ext4_quota_enable:7127: comm syz.1.1488: Bad quota inode: 3, type: 0 [ 111.970519][ T7801] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 5 with max blocks 12 with error 28 [ 111.982855][ T7801] EXT4-fs (loop3): This should not happen!! Data will be lost [ 111.982855][ T7801] [ 111.992669][ T7801] EXT4-fs (loop3): Total free blocks count 0 [ 111.998786][ T7801] EXT4-fs (loop3): Free/Dirty block details [ 112.004893][ T7801] EXT4-fs (loop3): free_blocks=39626 [ 112.010252][ T7801] EXT4-fs (loop3): dirty_blocks=12 [ 112.015391][ T7801] EXT4-fs (loop3): Block reservation details [ 112.021421][ T7801] EXT4-fs (loop3): i_reserved_data_blocks=12 [ 112.036761][ T7812] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1491'. [ 112.049036][ T7812] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1491'. [ 112.058191][ T7803] EXT4-fs warning (device loop1): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 112.073168][ T7803] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 112.164069][ T7803] EXT4-fs error (device loop1): ext4_lookup:1791: inode #2: comm syz.1.1488: deleted inode referenced: 15 [ 112.461200][ T7842] geneve2: entered promiscuous mode [ 112.466486][ T7842] geneve2: entered allmulticast mode [ 112.512978][ T7845] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 112.512986][ T7844] IPVS: stopping master sync thread 7845 ... [ 112.555347][ T7838] siw: device registration error -23 [ 112.619506][ T7848] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 112.626193][ T7848] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 112.633757][ T7848] vhci_hcd vhci_hcd.0: Device attached [ 112.674610][ T7852] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1504'. [ 112.694712][ T7853] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(7) [ 112.701327][ T7853] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 112.708903][ T7853] vhci_hcd vhci_hcd.0: Device attached [ 112.730435][ T7852] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1504'. [ 112.762552][ T7848] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 112.807553][ T7848] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(9) [ 112.814210][ T7848] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 112.822044][ T7848] vhci_hcd vhci_hcd.0: Device attached [ 112.878659][ T7861] loop1: detected capacity change from 0 to 512 [ 112.908522][ T7861] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 112.921807][ T7848] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(12) [ 112.928580][ T7848] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 112.936268][ T7848] vhci_hcd vhci_hcd.0: Device attached [ 112.946089][ T7861] EXT4-fs (loop1): orphan cleanup on readonly fs [ 112.985453][ T7861] EXT4-fs error (device loop1): ext4_ext_check_inode:523: inode #3: comm syz.1.1506: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 7, max 0(0), depth 0(0) [ 113.010790][ T7853] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 113.023918][ T7848] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(14) [ 113.030654][ T7848] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 113.032793][ T7868] IPVS: stopping master sync thread 7871 ... [ 113.038637][ T7848] vhci_hcd vhci_hcd.0: Device attached [ 113.049027][ T7868] siw: device registration error -23 [ 113.085245][ T7849] vhci_hcd: connection closed [ 113.085419][ T7869] vhci_hcd: connection closed [ 113.085471][ T7854] vhci_hcd: connection closed [ 113.096454][ T152] vhci_hcd: stop threads [ 113.096541][ T7859] vhci_hcd: connection closed [ 113.101213][ T152] vhci_hcd: release socket [ 113.101233][ T152] vhci_hcd: disconnect device [ 113.101729][ T152] vhci_hcd: stop threads [ 113.106104][ T7864] vhci_hcd: connection closed [ 113.110526][ T152] vhci_hcd: release socket [ 113.110540][ T152] vhci_hcd: disconnect device [ 113.146440][ T7873] loop2: detected capacity change from 0 to 512 [ 113.153192][ T7861] EXT4-fs error (device loop1): ext4_quota_enable:7127: comm syz.1.1506: Bad quota inode: 3, type: 0 [ 113.161640][ T152] vhci_hcd: stop threads [ 113.168767][ T152] vhci_hcd: release socket [ 113.173244][ T152] vhci_hcd: disconnect device [ 113.185109][ T7861] EXT4-fs warning (device loop1): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 113.199791][ T7861] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 113.203646][ T7873] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 113.231496][ T7873] EXT4-fs (loop2): orphan cleanup on readonly fs [ 113.238213][ T152] vhci_hcd: stop threads [ 113.242488][ T152] vhci_hcd: release socket [ 113.247002][ T152] vhci_hcd: disconnect device [ 113.262252][ T7873] EXT4-fs error (device loop2): ext4_ext_check_inode:523: inode #3: comm syz.2.1509: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 7, max 0(0), depth 0(0) [ 113.292310][ T7861] EXT4-fs error (device loop1): ext4_lookup:1791: inode #2: comm syz.1.1506: deleted inode referenced: 15 [ 113.307044][ T152] vhci_hcd: stop threads [ 113.311525][ T152] vhci_hcd: release socket [ 113.315979][ T152] vhci_hcd: disconnect device [ 113.408233][ T7873] EXT4-fs error (device loop2): ext4_quota_enable:7127: comm syz.2.1509: Bad quota inode: 3, type: 0 [ 113.419591][ T7873] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 113.434485][ T7873] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 113.489018][ T7893] FAULT_INJECTION: forcing a failure. [ 113.489018][ T7893] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 113.502279][ T7893] CPU: 1 UID: 0 PID: 7893 Comm: syz.1.1515 Tainted: G W 6.16.0-syzkaller-06699-ge8d780dcd957 #0 PREEMPT(voluntary) [ 113.502390][ T7893] Tainted: [W]=WARN [ 113.502396][ T7893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 113.502409][ T7893] Call Trace: [ 113.502415][ T7893] [ 113.502431][ T7893] __dump_stack+0x1d/0x30 [ 113.502456][ T7893] dump_stack_lvl+0xe8/0x140 [ 113.502490][ T7893] dump_stack+0x15/0x1b [ 113.502566][ T7893] should_fail_ex+0x265/0x280 [ 113.502585][ T7893] should_fail+0xb/0x20 [ 113.502601][ T7893] should_fail_usercopy+0x1a/0x20 [ 113.502624][ T7893] _copy_to_user+0x20/0xa0 [ 113.502661][ T7893] simple_read_from_buffer+0xb5/0x130 [ 113.502690][ T7893] proc_fail_nth_read+0x10e/0x150 [ 113.502789][ T7893] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 113.502821][ T7893] vfs_read+0x19d/0x6f0 [ 113.502875][ T7893] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 113.502965][ T7893] ? __rcu_read_unlock+0x4f/0x70 [ 113.503035][ T7893] ? __fget_files+0x184/0x1c0 [ 113.503063][ T7893] ksys_read+0xda/0x1a0 [ 113.503092][ T7893] __x64_sys_read+0x40/0x50 [ 113.503179][ T7893] x64_sys_call+0x27bc/0x2ff0 [ 113.503201][ T7893] do_syscall_64+0xd2/0x200 [ 113.503226][ T7893] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 113.503281][ T7893] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 113.503336][ T7893] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.503359][ T7893] RIP: 0033:0x7f077990d3bc [ 113.503378][ T7893] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 113.503398][ T7893] RSP: 002b:00007f0777f77030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 113.503491][ T7893] RAX: ffffffffffffffda RBX: 00007f0779b35fa0 RCX: 00007f077990d3bc [ 113.503503][ T7893] RDX: 000000000000000f RSI: 00007f0777f770a0 RDI: 0000000000000004 [ 113.503514][ T7893] RBP: 00007f0777f77090 R08: 0000000000000000 R09: 0000000000000000 [ 113.503526][ T7893] R10: 0000000800000009 R11: 0000000000000246 R12: 0000000000000001 [ 113.503537][ T7893] R13: 0000000000000000 R14: 00007f0779b35fa0 R15: 00007ffe594b1618 [ 113.503606][ T7893] [ 113.763943][ T7873] EXT4-fs error (device loop2): ext4_lookup:1791: inode #2: comm syz.2.1509: deleted inode referenced: 15 [ 113.776142][ T7896] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1516'. [ 113.813902][ T7896] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1516'. [ 113.865842][ T7901] IPVS: stopping master sync thread 7903 ... [ 113.878547][ T7903] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 113.887385][ T9] usb 1-1: enqueue for inactive port 0 [ 113.895214][ T9] usb 1-1: enqueue for inactive port 0 [ 113.983598][ T7908] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1522'. [ 114.050699][ T7916] geneve2: entered promiscuous mode [ 114.056052][ T7916] geneve2: entered allmulticast mode [ 114.056793][ T9] vhci_hcd: vhci_device speed not set [ 114.106121][ T7913] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1524'. [ 114.174658][ T7924] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 114.181220][ T7924] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 114.189080][ T7924] vhci_hcd vhci_hcd.0: Device attached [ 114.225389][ T7930] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(7) [ 114.232072][ T7930] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 114.239867][ T7930] vhci_hcd vhci_hcd.0: Device attached [ 114.247350][ T7924] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 114.282344][ T7937] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1529'. [ 114.295490][ T7924] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(10) [ 114.302126][ T7924] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 114.309984][ T7924] vhci_hcd vhci_hcd.0: Device attached [ 114.375167][ T7924] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(12) [ 114.381840][ T7924] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 114.389607][ T7924] vhci_hcd vhci_hcd.0: Device attached [ 114.416680][ T4884] vhci_hcd: vhci_device speed not set [ 114.438709][ T7930] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(13) [ 114.445593][ T7930] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 114.453238][ T7930] vhci_hcd vhci_hcd.0: Device attached [ 114.453828][ T7924] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 114.462485][ T7942] loop4: detected capacity change from 0 to 1024 [ 114.483789][ T4884] usb 3-1: new low-speed USB device number 5 using vhci_hcd [ 114.511889][ T7942] ext4 filesystem being mounted at /271/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 114.530963][ T7933] vhci_hcd: connection closed [ 114.531020][ T7927] vhci_hcd: connection reset by peer [ 114.531376][ T7944] vhci_hcd: connection closed [ 114.536177][ T7939] vhci_hcd: connection closed [ 114.553253][ T12] vhci_hcd: stop threads [ 114.562507][ T12] vhci_hcd: release socket [ 114.567068][ T12] vhci_hcd: disconnect device [ 114.574403][ T7931] vhci_hcd: connection closed [ 114.617272][ T12] vhci_hcd: stop threads [ 114.626936][ T12] vhci_hcd: release socket [ 114.631457][ T12] vhci_hcd: disconnect device [ 114.694342][ T12] vhci_hcd: stop threads [ 114.698671][ T12] vhci_hcd: release socket [ 114.703112][ T12] vhci_hcd: disconnect device [ 114.733241][ T7954] IPVS: stopping master sync thread 7955 ... [ 114.739837][ T7955] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 114.755759][ T12] vhci_hcd: stop threads [ 114.760081][ T12] vhci_hcd: release socket [ 114.764680][ T12] vhci_hcd: disconnect device [ 114.775458][ T7954] siw: device registration error -23 [ 114.787401][ T12] vhci_hcd: stop threads [ 114.791718][ T12] vhci_hcd: release socket [ 114.796225][ T12] vhci_hcd: disconnect device [ 115.001659][ T7970] loop3: detected capacity change from 0 to 512 [ 115.022751][ T7970] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 115.051741][ T7970] EXT4-fs (loop3): orphan cleanup on readonly fs [ 115.073552][ T7970] EXT4-fs error (device loop3): ext4_ext_check_inode:523: inode #3: comm syz.3.1539: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 7, max 0(0), depth 0(0) [ 115.112308][ T7970] EXT4-fs error (device loop3): ext4_quota_enable:7127: comm syz.3.1539: Bad quota inode: 3, type: 0 [ 115.137108][ T7970] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 115.151898][ T7970] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 115.162014][ T7970] EXT4-fs error (device loop3): ext4_lookup:1791: inode #2: comm syz.3.1539: deleted inode referenced: 15 [ 115.240349][ T7985] loop3: detected capacity change from 0 to 512 [ 115.252327][ T7985] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 115.262950][ T7985] EXT4-fs (loop3): orphan cleanup on readonly fs [ 115.274897][ T7987] IPVS: stopping master sync thread 7988 ... [ 115.284914][ T7988] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 115.338623][ T7985] EXT4-fs error (device loop3): ext4_ext_check_inode:523: inode #3: comm syz.3.1544: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 7, max 0(0), depth 0(0) [ 115.434393][ T7985] EXT4-fs error (device loop3): ext4_quota_enable:7127: comm syz.3.1544: Bad quota inode: 3, type: 0 [ 115.459036][ T7995] geneve2: entered promiscuous mode [ 115.464475][ T7995] geneve2: entered allmulticast mode [ 115.466200][ T7993] loop1: detected capacity change from 0 to 1024 [ 115.481304][ T7985] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 115.496192][ T7985] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 115.521205][ T7993] ext4 filesystem being mounted at /298/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.538138][ T7985] EXT4-fs error (device loop3): ext4_lookup:1791: inode #2: comm syz.3.1544: deleted inode referenced: 15 [ 115.654747][ T8013] loop2: detected capacity change from 0 to 512 [ 115.671465][ T8013] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 115.704327][ T8013] EXT4-fs (loop2): orphan cleanup on readonly fs [ 115.730902][ T8013] EXT4-fs error (device loop2): ext4_ext_check_inode:523: inode #3: comm syz.2.1554: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 7, max 0(0), depth 0(0) [ 115.783374][ T8013] EXT4-fs error (device loop2): ext4_quota_enable:7127: comm syz.2.1554: Bad quota inode: 3, type: 0 [ 115.795915][ T8013] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 115.810837][ T8013] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 115.830121][ T8013] EXT4-fs error (device loop2): ext4_lookup:1791: inode #2: comm syz.2.1554: deleted inode referenced: 15 [ 115.853869][ T8020] IPVS: stopping master sync thread 8022 ... [ 115.861285][ T8022] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 115.908588][ T8020] siw: device registration error -23 [ 115.973466][ T8026] FAULT_INJECTION: forcing a failure. [ 115.973466][ T8026] name failslab, interval 1, probability 0, space 0, times 0 [ 115.986969][ T8026] CPU: 0 UID: 0 PID: 8026 Comm: syz.2.1559 Tainted: G W 6.16.0-syzkaller-06699-ge8d780dcd957 #0 PREEMPT(voluntary) [ 115.987014][ T8026] Tainted: [W]=WARN [ 115.987022][ T8026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 115.987035][ T8026] Call Trace: [ 115.987043][ T8026] [ 115.987051][ T8026] __dump_stack+0x1d/0x30 [ 115.987073][ T8026] dump_stack_lvl+0xe8/0x140 [ 115.987127][ T8026] dump_stack+0x15/0x1b [ 115.987143][ T8026] should_fail_ex+0x265/0x280 [ 115.987166][ T8026] should_failslab+0x8c/0xb0 [ 115.987199][ T8026] __kmalloc_cache_node_noprof+0x54/0x320 [ 115.987220][ T8026] ? __get_vm_area_node+0x106/0x1d0 [ 115.987285][ T8026] __get_vm_area_node+0x106/0x1d0 [ 115.987313][ T8026] __vmalloc_node_range_noprof+0x273/0xe00 [ 115.987342][ T8026] ? bpf_prog_alloc_no_stats+0x47/0x3a0 [ 115.987375][ T8026] ? avc_has_perm_noaudit+0x1b1/0x200 [ 115.987457][ T8026] ? cred_has_capability+0x210/0x280 [ 115.987478][ T8026] ? bpf_prog_alloc_no_stats+0x47/0x3a0 [ 115.987507][ T8026] __vmalloc_noprof+0x83/0xc0 [ 115.987533][ T8026] ? bpf_prog_alloc_no_stats+0x47/0x3a0 [ 115.987637][ T8026] bpf_prog_alloc_no_stats+0x47/0x3a0 [ 115.987669][ T8026] ? bpf_prog_alloc+0x2a/0x150 [ 115.987709][ T8026] bpf_prog_alloc+0x3c/0x150 [ 115.987803][ T8026] bpf_prog_load+0x514/0x1070 [ 115.987834][ T8026] ? security_bpf+0x2b/0x90 [ 115.987871][ T8026] __sys_bpf+0x462/0x7b0 [ 115.987923][ T8026] __x64_sys_bpf+0x41/0x50 [ 115.987949][ T8026] x64_sys_call+0x2aea/0x2ff0 [ 115.988094][ T8026] do_syscall_64+0xd2/0x200 [ 115.988118][ T8026] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 115.988148][ T8026] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 115.988261][ T8026] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.988288][ T8026] RIP: 0033:0x7f42fb1fe9a9 [ 115.988308][ T8026] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 115.988329][ T8026] RSP: 002b:00007f42f985f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 115.988354][ T8026] RAX: ffffffffffffffda RBX: 00007f42fb425fa0 RCX: 00007f42fb1fe9a9 [ 115.988366][ T8026] RDX: 0000000000000094 RSI: 00002000000002c0 RDI: 0000000000000005 [ 115.988433][ T8026] RBP: 00007f42f985f090 R08: 0000000000000000 R09: 0000000000000000 [ 115.988448][ T8026] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 115.988463][ T8026] R13: 0000000000000000 R14: 00007f42fb425fa0 R15: 00007ffc39230048 [ 115.988519][ T8026] [ 115.988529][ T8026] syz.2.1559: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0 [ 116.252275][ T8026] CPU: 0 UID: 0 PID: 8026 Comm: syz.2.1559 Tainted: G W 6.16.0-syzkaller-06699-ge8d780dcd957 #0 PREEMPT(voluntary) [ 116.252352][ T8026] Tainted: [W]=WARN [ 116.252359][ T8026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 116.252511][ T8026] Call Trace: [ 116.252516][ T8026] [ 116.252521][ T8026] __dump_stack+0x1d/0x30 [ 116.252536][ T8026] dump_stack_lvl+0xe8/0x140 [ 116.252623][ T8026] dump_stack+0x15/0x1b [ 116.252667][ T8026] warn_alloc+0x12b/0x1a0 [ 116.252688][ T8026] __vmalloc_node_range_noprof+0x297/0xe00 [ 116.252719][ T8026] ? avc_has_perm_noaudit+0x1b1/0x200 [ 116.252749][ T8026] ? cred_has_capability+0x210/0x280 [ 116.252847][ T8026] ? bpf_prog_alloc_no_stats+0x47/0x3a0 [ 116.252868][ T8026] __vmalloc_noprof+0x83/0xc0 [ 116.252883][ T8026] ? bpf_prog_alloc_no_stats+0x47/0x3a0 [ 116.252903][ T8026] bpf_prog_alloc_no_stats+0x47/0x3a0 [ 116.252934][ T8026] ? bpf_prog_alloc+0x2a/0x150 [ 116.252954][ T8026] bpf_prog_alloc+0x3c/0x150 [ 116.252975][ T8026] bpf_prog_load+0x514/0x1070 [ 116.253042][ T8026] ? security_bpf+0x2b/0x90 [ 116.253062][ T8026] __sys_bpf+0x462/0x7b0 [ 116.253078][ T8026] __x64_sys_bpf+0x41/0x50 [ 116.253195][ T8026] x64_sys_call+0x2aea/0x2ff0 [ 116.253209][ T8026] do_syscall_64+0xd2/0x200 [ 116.253223][ T8026] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 116.253240][ T8026] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 116.253262][ T8026] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.253360][ T8026] RIP: 0033:0x7f42fb1fe9a9 [ 116.253370][ T8026] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 116.253383][ T8026] RSP: 002b:00007f42f985f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 116.253397][ T8026] RAX: ffffffffffffffda RBX: 00007f42fb425fa0 RCX: 00007f42fb1fe9a9 [ 116.253492][ T8026] RDX: 0000000000000094 RSI: 00002000000002c0 RDI: 0000000000000005 [ 116.253501][ T8026] RBP: 00007f42f985f090 R08: 0000000000000000 R09: 0000000000000000 [ 116.253510][ T8026] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 116.253581][ T8026] R13: 0000000000000000 R14: 00007f42fb425fa0 R15: 00007ffc39230048 [ 116.253593][ T8026] [ 116.474155][ T8026] Mem-Info: [ 116.477314][ T8026] active_anon:9952 inactive_anon:0 isolated_anon:0 [ 116.477314][ T8026] active_file:19293 inactive_file:2247 isolated_file:0 [ 116.477314][ T8026] unevictable:0 dirty:734 writeback:0 [ 116.477314][ T8026] slab_reclaimable:3376 slab_unreclaimable:28889 [ 116.477314][ T8026] mapped:32895 shmem:3150 pagetables:1196 [ 116.477314][ T8026] sec_pagetables:0 bounce:0 [ 116.477314][ T8026] kernel_misc_reclaimable:0 [ 116.477314][ T8026] free:1844785 free_pcp:23794 free_cma:0 [ 116.522838][ T8026] Node 0 active_anon:39808kB inactive_anon:0kB active_file:77172kB inactive_file:8988kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:131580kB dirty:2936kB writeback:0kB shmem:12600kB writeback_tmp:0kB kernel_stack:3584kB pagetables:4784kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 116.552438][ T8026] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 116.581455][ T8026] lowmem_reserve[]: 0 2883 7862 7862 [ 116.587177][ T8026] Node 0 DMA32 free:2949396kB boost:0kB min:4132kB low:7064kB high:9996kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2953028kB mlocked:0kB bounce:0kB free_pcp:3632kB local_pcp:100kB free_cma:0kB [ 116.618034][ T8026] lowmem_reserve[]: 0 0 4978 4978 [ 116.623310][ T8026] Node 0 Normal free:4414384kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB free_highatomic:0KB active_anon:39344kB inactive_anon:0kB active_file:77172kB inactive_file:8988kB unevictable:0kB writepending:2936kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:91784kB local_pcp:33400kB free_cma:0kB [ 116.655700][ T8026] lowmem_reserve[]: 0 0 0 0 [ 116.660286][ T8026] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 116.673030][ T8026] Node 0 DMA32: 3*4kB (M) 3*8kB (M) 3*16kB (M) 2*32kB (M) 4*64kB (M) 3*128kB (M) 2*256kB (M) 4*512kB (M) 3*1024kB (M) 3*2048kB (M) 717*4096kB (M) = 2949396kB [ 116.689479][ T8026] Node 0 Normal: 1614*4kB (UM) 1101*8kB (UM) 713*16kB (UME) 492*32kB (UM) 450*64kB (UME) 167*128kB (UM) 126*256kB (UME) 90*512kB (UME) 64*1024kB (UME) 44*2048kB (UME) 998*4096kB (UM) = 4414384kB [ 116.708954][ T8026] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 116.718361][ T8026] 24573 total pagecache pages [ 116.723072][ T8026] 10 pages in swap cache [ 116.727366][ T8026] Free swap = 124956kB [ 116.731543][ T8026] Total swap = 124996kB [ 116.735692][ T8026] 2097051 pages RAM [ 116.739783][ T8026] 0 pages HighMem/MovableOnly [ 116.744561][ T8026] 80394 pages reserved [ 116.981528][ T8050] loop2: detected capacity change from 0 to 512 [ 117.000751][ T8050] EXT4-fs: Ignoring removed mblk_io_submit option [ 117.020486][ T8052] __nla_validate_parse: 5 callbacks suppressed [ 117.020507][ T8052] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1569'. [ 117.045404][ T8050] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 117.055946][ T8052] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1569'. [ 117.070060][ T8050] EXT4-fs (loop2): 1 truncate cleaned up [ 117.085627][ T29] kauditd_printk_skb: 160 callbacks suppressed [ 117.085647][ T29] audit: type=1326 audit(1753955855.925:5715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8048 comm="syz.2.1568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42fb1fe9a9 code=0x7ffc0000 [ 117.090214][ T8050] ip6gre7: entered allmulticast mode [ 117.094184][ T29] audit: type=1326 audit(1753955855.925:5716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8048 comm="syz.2.1568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42fb1fe9a9 code=0x7ffc0000 [ 117.144544][ T29] audit: type=1326 audit(1753955855.925:5717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8048 comm="syz.2.1568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f42fb1fe9a9 code=0x7ffc0000 [ 117.168060][ T29] audit: type=1326 audit(1753955855.925:5718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8048 comm="syz.2.1568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42fb1fe9a9 code=0x7ffc0000 [ 117.191804][ T29] audit: type=1326 audit(1753955855.925:5719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8048 comm="syz.2.1568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42fb1fe9a9 code=0x7ffc0000 [ 117.215616][ T29] audit: type=1326 audit(1753955855.925:5720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8048 comm="syz.2.1568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f42fb1fe9a9 code=0x7ffc0000 [ 117.239357][ T29] audit: type=1326 audit(1753955855.935:5721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8048 comm="syz.2.1568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42fb1fe9a9 code=0x7ffc0000 [ 117.262932][ T29] audit: type=1326 audit(1753955855.935:5722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8048 comm="syz.2.1568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42fb1fe9a9 code=0x7ffc0000 [ 117.286738][ T29] audit: type=1326 audit(1753955855.935:5723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8048 comm="syz.2.1568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f42fb1fe9a9 code=0x7ffc0000 [ 117.310172][ T29] audit: type=1326 audit(1753955855.935:5724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8048 comm="syz.2.1568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42fb1fe9a9 code=0x7ffc0000 [ 117.392648][ T8059] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 117.399365][ T8059] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 117.406958][ T8059] vhci_hcd vhci_hcd.0: Device attached [ 117.423462][ T8064] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(6) [ 117.430035][ T8064] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 117.437752][ T8064] vhci_hcd vhci_hcd.0: Device attached [ 117.469061][ T8059] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 117.494668][ T8059] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(10) [ 117.501357][ T8059] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 117.509083][ T8059] vhci_hcd vhci_hcd.0: Device attached [ 117.551468][ T8064] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(13) [ 117.558115][ T8064] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 117.565850][ T8064] vhci_hcd vhci_hcd.0: Device attached [ 117.581467][ T8059] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(12) [ 117.588105][ T8059] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 117.595897][ T8059] vhci_hcd vhci_hcd.0: Device attached [ 117.601860][ T5158] vhci_hcd: vhci_device speed not set [ 117.652205][ T8059] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 117.675090][ T8073] vhci_hcd: connection closed [ 117.675235][ T152] vhci_hcd: stop threads [ 117.675537][ T8067] vhci_hcd: connection closed [ 117.680082][ T152] vhci_hcd: release socket [ 117.680095][ T152] vhci_hcd: disconnect device [ 117.680647][ T8071] vhci_hcd: connection closed [ 117.684947][ T5158] usb 7-1: new full-speed USB device number 5 using vhci_hcd [ 117.718511][ T8065] vhci_hcd: connection closed [ 117.718521][ T8060] vhci_hcd: connection closed [ 117.721768][ T8078] loop4: detected capacity change from 0 to 512 [ 117.734661][ T8061] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 117.741116][ T152] vhci_hcd: stop threads [ 117.745562][ T152] vhci_hcd: release socket [ 117.750101][ T152] vhci_hcd: disconnect device [ 117.755741][ T152] vhci_hcd: stop threads [ 117.760074][ T152] vhci_hcd: release socket [ 117.764512][ T152] vhci_hcd: disconnect device [ 117.764771][ T8078] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 117.792203][ T8081] FAULT_INJECTION: forcing a failure. [ 117.792203][ T8081] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 117.803887][ T152] vhci_hcd: stop threads [ 117.805402][ T8081] CPU: 0 UID: 0 PID: 8081 Comm: syz.0.1576 Tainted: G W 6.16.0-syzkaller-06699-ge8d780dcd957 #0 PREEMPT(voluntary) [ 117.805453][ T8081] Tainted: [W]=WARN [ 117.805461][ T8081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 117.805473][ T8081] Call Trace: [ 117.805479][ T8081] [ 117.805551][ T8081] __dump_stack+0x1d/0x30 [ 117.805573][ T8081] dump_stack_lvl+0xe8/0x140 [ 117.805604][ T8081] dump_stack+0x15/0x1b [ 117.805660][ T8081] should_fail_ex+0x265/0x280 [ 117.805726][ T8081] should_fail+0xb/0x20 [ 117.805743][ T8081] should_fail_usercopy+0x1a/0x20 [ 117.805764][ T8081] strncpy_from_user+0x25/0x230 [ 117.805791][ T8081] ? __fget_files+0x184/0x1c0 [ 117.805818][ T8081] __se_sys_add_key+0x86/0x350 [ 117.805862][ T8081] __x64_sys_add_key+0x67/0x80 [ 117.805883][ T8081] x64_sys_call+0x28c4/0x2ff0 [ 117.805904][ T8081] do_syscall_64+0xd2/0x200 [ 117.806030][ T8081] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 117.806057][ T8081] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 117.806089][ T8081] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.806164][ T8081] RIP: 0033:0x7faa0d26e9a9 [ 117.806180][ T8081] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 117.806199][ T8081] RSP: 002b:00007faa0b8cf038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 117.806295][ T8081] RAX: ffffffffffffffda RBX: 00007faa0d495fa0 RCX: 00007faa0d26e9a9 [ 117.806308][ T8081] RDX: 00002000000009c0 RSI: 0000000000000000 RDI: 0000200000000040 [ 117.806320][ T8081] RBP: 00007faa0b8cf090 R08: 000000000021f269 R09: 0000000000000000 [ 117.806340][ T8081] R10: 000000000000002b R11: 0000000000000246 R12: 0000000000000001 [ 117.806353][ T8081] R13: 0000000000000000 R14: 00007faa0d495fa0 R15: 00007fff457f2188 [ 117.806371][ T8081] [ 117.842365][ T8084] netlink: 4344 bytes leftover after parsing attributes in process `syz.0.1577'. [ 117.844652][ T152] vhci_hcd: release socket [ 117.844669][ T152] vhci_hcd: disconnect device [ 118.022203][ T8078] EXT4-fs (loop4): orphan cleanup on readonly fs [ 118.029681][ T8078] EXT4-fs error (device loop4): ext4_ext_check_inode:523: inode #3: comm syz.4.1575: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 7, max 0(0), depth 0(0) [ 118.048542][ T8078] EXT4-fs error (device loop4): ext4_quota_enable:7127: comm syz.4.1575: Bad quota inode: 3, type: 0 [ 118.060772][ T8078] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 118.075642][ T8078] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 118.102025][ T8078] EXT4-fs error (device loop4): ext4_lookup:1791: inode #2: comm syz.4.1575: deleted inode referenced: 15 [ 118.214109][ T152] vhci_hcd: stop threads [ 118.218665][ T152] vhci_hcd: release socket [ 118.223115][ T152] vhci_hcd: disconnect device [ 118.308702][ T8097] loop0: detected capacity change from 0 to 512 [ 118.315723][ T8097] EXT4-fs: Ignoring removed mblk_io_submit option [ 118.323152][ T8097] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 118.342521][ T8097] EXT4-fs (loop0): 1 truncate cleaned up [ 118.357414][ T8097] ip6gre5: entered allmulticast mode [ 118.491004][ T8108] loop3: detected capacity change from 0 to 4096 [ 118.551901][ T8111] loop2: detected capacity change from 0 to 512 [ 118.580765][ T8111] EXT4-fs: Ignoring removed mblk_io_submit option [ 118.591055][ T8113] loop1: detected capacity change from 0 to 512 [ 118.593698][ T8111] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 118.618629][ T8113] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 118.649351][ T8111] EXT4-fs (loop2): 1 truncate cleaned up [ 118.662750][ T8118] loop3: detected capacity change from 0 to 512 [ 118.687668][ T8113] ext4 filesystem being mounted at /301/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 118.699456][ T8118] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 118.723431][ T8111] ip6gre8: entered allmulticast mode [ 118.740309][ T8118] EXT4-fs (loop3): orphan cleanup on readonly fs [ 118.794755][ T8118] EXT4-fs error (device loop3): ext4_ext_check_inode:523: inode #3: comm syz.3.1591: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 7, max 0(0), depth 0(0) [ 118.888363][ T8118] EXT4-fs error (device loop3): ext4_quota_enable:7127: comm syz.3.1591: Bad quota inode: 3, type: 0 [ 118.965535][ T8118] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 118.980327][ T8118] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 119.080342][ T8118] EXT4-fs error (device loop3): ext4_lookup:1791: inode #2: comm syz.3.1591: deleted inode referenced: 15 [ 119.553075][ T8150] bridge0: port 1(batadv0) entered blocking state [ 119.559668][ T8150] bridge0: port 1(batadv0) entered disabled state [ 119.566443][ T4884] usb 3-1: enqueue for inactive port 0 [ 119.578780][ T4884] usb 3-1: enqueue for inactive port 0 [ 119.608112][ T8153] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1601'. [ 119.617945][ T8150] batadv0: entered allmulticast mode [ 119.628412][ T8150] batadv0: entered promiscuous mode [ 119.639817][ T8152] IPVS: stopping master sync thread 8155 ... [ 119.649183][ T8152] siw: device registration error -23 [ 119.666280][ T4884] vhci_hcd: vhci_device speed not set [ 119.776636][ T8162] loop4: detected capacity change from 0 to 512 [ 119.785649][ T8161] loop0: detected capacity change from 0 to 512 [ 119.796864][ T8162] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 119.822478][ T8162] ext4 filesystem being mounted at /293/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 119.839065][ T8161] EXT4-fs (loop0): 1 orphan inode deleted [ 119.856588][ T8161] ext4 filesystem being mounted at /356/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 119.860392][ T4794] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:8: Failed to release dquot type 1 [ 119.889862][ T8172] loop3: detected capacity change from 0 to 512 [ 119.984032][ T8172] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 120.004249][ T8172] EXT4-fs (loop3): orphan cleanup on readonly fs [ 120.016279][ T8172] EXT4-fs error (device loop3): ext4_ext_check_inode:523: inode #3: comm syz.3.1608: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 7, max 0(0), depth 0(0) [ 120.034516][ T8172] EXT4-fs error (device loop3): ext4_quota_enable:7127: comm syz.3.1608: Bad quota inode: 3, type: 0 [ 120.052645][ T8172] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 120.067560][ T8172] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 120.074728][ T139] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 120.084200][ T139] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 120.129086][ T8172] EXT4-fs error (device loop3): ext4_lookup:1791: inode #2: comm syz.3.1608: deleted inode referenced: 15 [ 120.142288][ T8187] loop0: detected capacity change from 0 to 512 [ 120.166469][ T8187] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 120.186889][ T8189] IPVS: stopping master sync thread 8190 ... [ 120.192479][ T8190] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 120.215482][ T8189] siw: device registration error -23 [ 120.221698][ T8187] ext4 filesystem being mounted at /358/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 120.318251][ T8199] FAULT_INJECTION: forcing a failure. [ 120.318251][ T8199] name failslab, interval 1, probability 0, space 0, times 0 [ 120.331754][ T8199] CPU: 1 UID: 0 PID: 8199 Comm: syz.0.1617 Tainted: G W 6.16.0-syzkaller-06699-ge8d780dcd957 #0 PREEMPT(voluntary) [ 120.331886][ T8199] Tainted: [W]=WARN [ 120.331892][ T8199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 120.331904][ T8199] Call Trace: [ 120.331909][ T8199] [ 120.331916][ T8199] __dump_stack+0x1d/0x30 [ 120.331940][ T8199] dump_stack_lvl+0xe8/0x140 [ 120.332038][ T8199] dump_stack+0x15/0x1b [ 120.332052][ T8199] should_fail_ex+0x265/0x280 [ 120.332124][ T8199] should_failslab+0x8c/0xb0 [ 120.332154][ T8199] kmem_cache_alloc_noprof+0x50/0x310 [ 120.332174][ T8199] ? audit_log_start+0x365/0x6c0 [ 120.332288][ T8199] audit_log_start+0x365/0x6c0 [ 120.332407][ T8199] audit_seccomp+0x48/0x100 [ 120.332436][ T8199] ? __seccomp_filter+0x68c/0x10d0 [ 120.332474][ T8199] __seccomp_filter+0x69d/0x10d0 [ 120.332497][ T8199] ? vfs_write+0x75e/0x8e0 [ 120.332588][ T8199] __secure_computing+0x82/0x150 [ 120.332623][ T8199] syscall_trace_enter+0xcf/0x1e0 [ 120.332647][ T8199] do_syscall_64+0xac/0x200 [ 120.332761][ T8199] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 120.332786][ T8199] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 120.332822][ T8199] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.332926][ T8199] RIP: 0033:0x7faa0d26e9a9 [ 120.332944][ T8199] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 120.332961][ T8199] RSP: 002b:00007faa0b8cf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 120.332980][ T8199] RAX: ffffffffffffffda RBX: 00007faa0d495fa0 RCX: 00007faa0d26e9a9 [ 120.332992][ T8199] RDX: 0000000005000000 RSI: 0000000000002000 RDI: 0000200000ff5000 [ 120.333004][ T8199] RBP: 00007faa0b8cf090 R08: 0000200000ffd000 R09: 0000000000000000 [ 120.333033][ T8199] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 120.333048][ T8199] R13: 0000000000000000 R14: 00007faa0d495fa0 R15: 00007fff457f2188 [ 120.333068][ T8199] [ 120.564632][ T8205] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.585462][ T8205] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.071295][ T8199] loop0: detected capacity change from 0 to 1024 [ 121.091677][ T8199] /dev/loop0: Can't open blockdev [ 121.196270][ T8221] loop2: detected capacity change from 0 to 512 [ 121.203142][ T8221] /dev/loop2: Can't open blockdev [ 121.318167][ T8226] IPVS: stopping master sync thread 8228 ... [ 121.326106][ T8226] siw: device registration error -23 [ 121.549905][ T8249] loop4: detected capacity change from 0 to 512 [ 121.589720][ T8249] EXT4-fs (loop4): too many log groups per flexible block group [ 121.597589][ T8249] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 121.676988][ T8249] EXT4-fs (loop4): mount failed [ 121.690689][ T8259] IPVS: stopping master sync thread 8260 ... [ 121.700443][ T8259] siw: device registration error -23 [ 121.833437][ T8211] loop1: detected capacity change from 0 to 1024 [ 121.876322][ T8211] ext4 filesystem being mounted at /309/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 122.035983][ T8271] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 122.241175][ T8294] netlink: 'syz.4.1651': attribute type 13 has an invalid length. [ 122.249239][ T8294] netlink: 14581 bytes leftover after parsing attributes in process `syz.4.1651'. [ 122.489997][ T8301] siw: device registration error -23 [ 122.508213][ T8299] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 122.508236][ T8300] IPVS: stopping master sync thread 8299 ... [ 122.626612][ T29] kauditd_printk_skb: 328 callbacks suppressed [ 122.626687][ T29] audit: type=1400 audit(1753955861.476:6050): avc: denied { write } for pid=8302 comm="syz.3.1653" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 122.714407][ T8309] vlan2: entered allmulticast mode [ 122.720276][ T36] usb usb4-port1: attempt power cycle [ 122.726585][ T8309] dummy0: entered allmulticast mode [ 122.776841][ T8317] lo speed is unknown, defaulting to 1000 [ 122.908371][ T5158] usb 7-1: enqueue for inactive port 0 [ 122.916970][ T8316] netlink: 'syz.1.1655': attribute type 1 has an invalid length. [ 122.939470][ T5158] usb 7-1: enqueue for inactive port 0 [ 123.065246][ T8316] bond1: entered promiscuous mode [ 123.112810][ T8316] 8021q: adding VLAN 0 to HW filter on device bond1 [ 123.126575][ T5158] vhci_hcd: vhci_device speed not set [ 123.149125][ T8328] syz.2.1660 (8328): attempted to duplicate a private mapping with mremap. This is not supported. [ 123.161352][ T8318] 8021q: adding VLAN 0 to HW filter on device bond2 [ 123.170053][ T8318] bond1: (slave bond2): making interface the new active one [ 123.177974][ T8318] bond2: entered promiscuous mode [ 123.184235][ T8318] bond1: (slave bond2): Enslaving as an active interface with an up link [ 123.198444][ T8328] loop2: detected capacity change from 0 to 128 [ 123.206236][ T8328] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 123.229292][ T8328] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 123.290100][ T8337] loop3: detected capacity change from 0 to 512 [ 123.309411][ T8337] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 123.320169][ T8337] EXT4-fs (loop3): orphan cleanup on readonly fs [ 123.328429][ T8337] EXT4-fs error (device loop3): ext4_ext_check_inode:523: inode #3: comm syz.3.1664: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 7, max 0(0), depth 0(0) [ 123.361655][ T8328] FAULT_INJECTION: forcing a failure. [ 123.361655][ T8328] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 123.374929][ T8328] CPU: 1 UID: 0 PID: 8328 Comm: wg1 Tainted: G W 6.16.0-syzkaller-06699-ge8d780dcd957 #0 PREEMPT(voluntary) [ 123.375028][ T8328] Tainted: [W]=WARN [ 123.375036][ T8328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 123.375049][ T8328] Call Trace: [ 123.375056][ T8328] [ 123.375072][ T8328] __dump_stack+0x1d/0x30 [ 123.375096][ T8328] dump_stack_lvl+0xe8/0x140 [ 123.375139][ T8328] dump_stack+0x15/0x1b [ 123.375205][ T8328] should_fail_ex+0x265/0x280 [ 123.375225][ T8328] should_fail+0xb/0x20 [ 123.375240][ T8328] should_fail_usercopy+0x1a/0x20 [ 123.375260][ T8328] _copy_from_user+0x1c/0xb0 [ 123.375288][ T8328] ___sys_sendmsg+0xc1/0x1d0 [ 123.375404][ T8328] __x64_sys_sendmsg+0xd4/0x160 [ 123.375444][ T8328] x64_sys_call+0x191e/0x2ff0 [ 123.375466][ T8328] do_syscall_64+0xd2/0x200 [ 123.375487][ T8328] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 123.375538][ T8328] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.375569][ T8328] RIP: 0033:0x7f42fb1fe9a9 [ 123.375588][ T8328] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 123.375616][ T8328] RSP: 002b:00007f42f985f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 123.375657][ T8328] RAX: ffffffffffffffda RBX: 00007f42fb425fa0 RCX: 00007f42fb1fe9a9 [ 123.375671][ T8328] RDX: 0000000000000810 RSI: 0000200000000280 RDI: 0000000000000007 [ 123.375685][ T8328] RBP: 00007f42f985f090 R08: 0000000000000000 R09: 0000000000000000 [ 123.375698][ T8328] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 123.375712][ T8328] R13: 0000000000000000 R14: 00007f42fb425fa0 R15: 00007ffc39230048 [ 123.375732][ T8328] [ 123.553891][ T8337] EXT4-fs error (device loop3): ext4_quota_enable:7127: comm syz.3.1664: Bad quota inode: 3, type: 0 [ 123.569128][ T8337] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 123.584448][ T8337] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 123.586281][ T8328] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8328 comm=wg1 [ 123.652156][ T8343] EXT4-fs error (device loop3): ext4_lookup:1791: inode #2: comm syz.3.1664: deleted inode referenced: 15 [ 123.688881][ T29] audit: type=1326 audit(1753955862.526:6051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8346 comm="syz.4.1667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f768e27e9a9 code=0x7ffc0000 [ 123.688918][ T29] audit: type=1326 audit(1753955862.526:6052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8346 comm="syz.4.1667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f768e27e9a9 code=0x7ffc0000 [ 123.688999][ T29] audit: type=1326 audit(1753955862.526:6053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8346 comm="syz.4.1667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f768e27e9a9 code=0x7ffc0000 [ 123.689022][ T29] audit: type=1326 audit(1753955862.526:6054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8346 comm="syz.4.1667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f768e27e9a9 code=0x7ffc0000 [ 123.689045][ T29] audit: type=1326 audit(1753955862.526:6055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8346 comm="syz.4.1667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f768e27e9a9 code=0x7ffc0000 [ 123.689139][ T29] audit: type=1326 audit(1753955862.526:6056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8346 comm="syz.4.1667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f768e27e9a9 code=0x7ffc0000 [ 123.689172][ T29] audit: type=1326 audit(1753955862.526:6057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8346 comm="syz.4.1667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f768e27e9a9 code=0x7ffc0000 [ 123.689194][ T29] audit: type=1326 audit(1753955862.526:6058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8346 comm="syz.4.1667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f768e27e9a9 code=0x7ffc0000 [ 123.689253][ T29] audit: type=1326 audit(1753955862.526:6059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8346 comm="syz.4.1667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f768e27e9a9 code=0x7ffc0000 [ 123.846997][ T8352] loop2: detected capacity change from 0 to 512 [ 123.849388][ T8352] EXT4-fs: Ignoring removed mblk_io_submit option [ 123.871899][ T8352] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 123.993027][ T8357] siw: device registration error -23 [ 124.055733][ T8352] EXT4-fs (loop2): 1 truncate cleaned up [ 124.096233][ T8356] IPVS: stopping master sync thread 8358 ... [ 124.098986][ T8352] ip6gre9: entered allmulticast mode [ 124.576746][ T8386] loop4: detected capacity change from 0 to 1024 [ 124.584705][ T8385] Driver unsupported XDP return value 0 on prog (id 1081) dev N/A, expect packet loss! [ 124.595601][ T8386] EXT4-fs: Ignoring removed nomblk_io_submit option [ 124.686227][ T36] usb usb4-port1: unable to enumerate USB device [ 124.772003][ T8390] loop4: detected capacity change from 0 to 512 [ 124.787719][ T8390] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 124.811465][ T8390] EXT4-fs (loop4): orphan cleanup on readonly fs [ 124.823824][ T8390] EXT4-fs error (device loop4): ext4_ext_check_inode:523: inode #3: comm syz.4.1680: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 7, max 0(0), depth 0(0) [ 124.843517][ T8390] EXT4-fs error (device loop4): ext4_quota_enable:7127: comm syz.4.1680: Bad quota inode: 3, type: 0 [ 124.855179][ T8390] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 124.870193][ T8390] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 124.931059][ T8390] EXT4-fs error (device loop4): ext4_lookup:1791: inode #2: comm syz.4.1680: deleted inode referenced: 15 [ 125.027754][ T8397] IPVS: stopping master sync thread 8398 ... [ 125.030719][ T8398] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 125.057585][ T8397] siw: device registration error -23 [ 125.094825][ T8404] loop1: detected capacity change from 0 to 512 [ 125.151219][ T8404] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 125.170948][ T8410] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1688'. [ 125.191567][ T8415] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1690'. [ 125.235288][ T8404] ext4 filesystem being mounted at /312/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 125.285593][ T8404] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 125.305474][ T8404] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 5 with max blocks 12 with error 28 [ 125.317890][ T8404] EXT4-fs (loop1): This should not happen!! Data will be lost [ 125.317890][ T8404] [ 125.324716][ T8422] netlink: 'syz.4.1694': attribute type 1 has an invalid length. [ 125.327744][ T8404] EXT4-fs (loop1): Total free blocks count 0 [ 125.342344][ T8404] EXT4-fs (loop1): Free/Dirty block details [ 125.348341][ T8404] EXT4-fs (loop1): free_blocks=39626 [ 125.353989][ T8404] EXT4-fs (loop1): dirty_blocks=12 [ 125.359225][ T8404] EXT4-fs (loop1): Block reservation details [ 125.365821][ T8404] EXT4-fs (loop1): i_reserved_data_blocks=12 [ 125.486048][ T8435] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 125.507901][ T8434] IPVS: stopping master sync thread 8435 ... [ 125.518940][ T8429] siw: device registration error -23 [ 125.624514][ T8444] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 125.952680][ T8451] loop2: detected capacity change from 0 to 512 [ 126.022430][ T8451] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 126.128880][ T8457] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1703'. [ 126.161227][ T8461] loop4: detected capacity change from 0 to 512 [ 126.175612][ T8451] ext4 filesystem being mounted at /347/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 126.181861][ T8461] EXT4-fs: Ignoring removed mblk_io_submit option [ 126.200986][ T8461] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 126.215112][ T8451] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 126.230573][ T8461] EXT4-fs (loop4): 1 truncate cleaned up [ 126.259525][ T8461] ip6gre11: entered allmulticast mode [ 126.277942][ T8466] netlink: 'syz.3.1706': attribute type 1 has an invalid length. [ 126.287469][ T8451] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 5 with max blocks 12 with error 28 [ 126.299985][ T8451] EXT4-fs (loop2): This should not happen!! Data will be lost [ 126.299985][ T8451] [ 126.309853][ T8451] EXT4-fs (loop2): Total free blocks count 0 [ 126.315947][ T8451] EXT4-fs (loop2): Free/Dirty block details [ 126.321892][ T8451] EXT4-fs (loop2): free_blocks=39626 [ 126.327595][ T8451] EXT4-fs (loop2): dirty_blocks=12 [ 126.333015][ T8451] EXT4-fs (loop2): Block reservation details [ 126.339404][ T8451] EXT4-fs (loop2): i_reserved_data_blocks=12 [ 126.374514][ T8466] bond2: entered promiscuous mode [ 126.384111][ T8466] 8021q: adding VLAN 0 to HW filter on device bond2 [ 126.402725][ T8473] 8021q: adding VLAN 0 to HW filter on device bond3 [ 126.417131][ T8473] bond2: (slave bond3): making interface the new active one [ 126.424601][ T8473] bond3: entered promiscuous mode [ 126.430681][ T8473] bond2: (slave bond3): Enslaving as an active interface with an up link [ 126.453234][ T8484] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1711'. [ 126.513593][ T8492] IPVS: stopping master sync thread 8495 ... [ 126.537862][ T8495] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 126.562742][ T8492] siw: device registration error -23 [ 126.732729][ T8499] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1716'. [ 126.770082][ T8514] loop3: detected capacity change from 0 to 512 [ 126.936643][ T8514] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 127.028066][ T8521] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1724'. [ 127.042819][ T8514] ext4 filesystem being mounted at /356/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 127.083397][ T8514] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 127.184803][ T8514] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 5 with max blocks 12 with error 28 [ 127.197515][ T8514] EXT4-fs (loop3): This should not happen!! Data will be lost [ 127.197515][ T8514] [ 127.207349][ T8514] EXT4-fs (loop3): Total free blocks count 0 [ 127.213592][ T8514] EXT4-fs (loop3): Free/Dirty block details [ 127.219850][ T8514] EXT4-fs (loop3): free_blocks=39626 [ 127.225235][ T8514] EXT4-fs (loop3): dirty_blocks=12 [ 127.230457][ T8514] EXT4-fs (loop3): Block reservation details [ 127.236520][ T8514] EXT4-fs (loop3): i_reserved_data_blocks=12 [ 127.280979][ T8528] IPVS: stopping master sync thread 8533 ... [ 127.288271][ T8533] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 127.345153][ T8538] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1730'. [ 127.368455][ T8541] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1731'. [ 127.381034][ T8542] geneve2: entered promiscuous mode [ 127.386579][ T8542] geneve2: entered allmulticast mode [ 127.689918][ T8567] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 127.703584][ T8565] IPVS: stopping master sync thread 8567 ... [ 127.713038][ T8565] siw: device registration error -23 [ 127.722465][ T8570] loop2: detected capacity change from 0 to 512 [ 127.730238][ T8570] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 127.761155][ T8570] ext4 filesystem being mounted at /354/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 127.801976][ T8570] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 127.844407][ T8570] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 5 with max blocks 12 with error 28 [ 127.856973][ T8570] EXT4-fs (loop2): This should not happen!! Data will be lost [ 127.856973][ T8570] [ 127.866863][ T8570] EXT4-fs (loop2): Total free blocks count 0 [ 127.873123][ T8570] EXT4-fs (loop2): Free/Dirty block details [ 127.879245][ T8570] EXT4-fs (loop2): free_blocks=39626 [ 127.884561][ T8570] EXT4-fs (loop2): dirty_blocks=12 [ 127.889849][ T8570] EXT4-fs (loop2): Block reservation details [ 127.895885][ T8570] EXT4-fs (loop2): i_reserved_data_blocks=12 [ 127.934504][ T3300] EXT4-fs unmount: 64 callbacks suppressed [ 127.934521][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.040260][ T8584] loop4: detected capacity change from 0 to 512 [ 128.049282][ T8584] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 128.108623][ T8584] EXT4-fs (loop4): orphan cleanup on readonly fs [ 128.129036][ T8584] EXT4-fs error (device loop4): ext4_ext_check_inode:523: inode #3: comm syz.4.1746: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 7, max 0(0), depth 0(0) [ 128.252220][ T8584] EXT4-fs error (device loop4): ext4_quota_enable:7127: comm syz.4.1746: Bad quota inode: 3, type: 0 [ 128.324058][ T8584] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 128.338837][ T8584] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 128.481058][ T8584] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 128.493740][ T8587] loop0: detected capacity change from 0 to 512 [ 128.528365][ T2990] ================================================================== [ 128.534574][ T8587] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 128.536490][ T2990] BUG: KCSAN: data-race in d_delete / step_into [ 128.536525][ T2990] [ 128.554104][ T2990] read-write to 0xffff88810570d0c0 of 4 bytes by task 3290 on cpu 0: [ 128.562181][ T2990] d_delete+0x15a/0x180 [ 128.566377][ T2990] d_delete_notify+0x32/0x100 [ 128.571168][ T2990] vfs_unlink+0x30b/0x420 [ 128.575513][ T2990] do_unlinkat+0x24e/0x480 [ 128.580041][ T2990] __x64_sys_unlink+0x2e/0x40 [ 128.584829][ T2990] x64_sys_call+0x2dc0/0x2ff0 [ 128.589609][ T2990] do_syscall_64+0xd2/0x200 [ 128.594160][ T2990] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.600251][ T2990] [ 128.602585][ T2990] read to 0xffff88810570d0c0 of 4 bytes by task 2990 on cpu 1: [ 128.610146][ T2990] step_into+0x12f/0x820 [ 128.614460][ T2990] walk_component+0x162/0x220 [ 128.619179][ T2990] path_lookupat+0xfe/0x2a0 [ 128.623716][ T2990] filename_lookup+0x147/0x340 [ 128.628521][ T2990] do_readlinkat+0x7d/0x320 [ 128.633057][ T2990] __x64_sys_readlink+0x47/0x60 [ 128.638018][ T2990] x64_sys_call+0x28da/0x2ff0 [ 128.642716][ T2990] do_syscall_64+0xd2/0x200 [ 128.647253][ T2990] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.653472][ T2990] [ 128.655814][ T2990] value changed: 0x00300180 -> 0x00004080 [ 128.661638][ T2990] [ 128.663992][ T2990] Reported by Kernel Concurrency Sanitizer on: [ 128.670272][ T2990] CPU: 1 UID: 0 PID: 2990 Comm: udevd Tainted: G W 6.16.0-syzkaller-06699-ge8d780dcd957 #0 PREEMPT(voluntary) [ 128.683516][ T2990] Tainted: [W]=WARN [ 128.687410][ T2990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 128.697484][ T2990] ================================================================== [ 128.757763][ T8582] EXT4-fs error (device loop4): ext4_lookup:1791: inode #2: comm syz.4.1746: deleted inode referenced: 15 [ 128.760045][ T8587] EXT4-fs (loop0): orphan cleanup on readonly fs [ 128.776193][ T8587] EXT4-fs error (device loop0): ext4_ext_check_inode:523: inode #3: comm syz.0.1747: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 7, max 0(0), depth 0(0) [ 128.803501][ T8587] EXT4-fs error (device loop0): ext4_quota_enable:7127: comm syz.0.1747: Bad quota inode: 3, type: 0 [ 128.817156][ T8587] EXT4-fs warning (device loop0): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 128.831947][ T8587] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 128.839402][ T8587] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 128.852997][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.890531][ T8587] EXT4-fs error (device loop0): ext4_lookup:1791: inode #2: comm syz.0.1747: deleted inode referenced: 15 [ 128.937983][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.