last executing test programs: 42.880582263s ago: executing program 4 (id=152): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='kfree\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000001980), 0x1) ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, 0x0) (fail_nth: 2) 42.471108775s ago: executing program 4 (id=153): openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffea4, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) clock_adjtime(0x0, &(0x7f0000000080)={0x100000000, 0x37347d00, 0xcfa5, 0x2, 0x8, 0xe0f, 0x4, 0x5, 0xe, 0xfffffffffffffffb, 0x1, 0x5, 0x0, 0x9, 0x1000, 0x577, 0xffffffffffffff38, 0x8, 0x6, 0xfffffffffffffff9, 0x8000000000000000, 0x9, 0x6, 0x6, 0x2, 0xc33}) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000100)='system_u:object_r:ifconfig_exec_t:s0\x00', 0x25, 0x1) 42.373899766s ago: executing program 4 (id=157): syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x4000, &(0x7f0000000d00)=ANY=[@ANYBLOB='check=strict,session=0x0000000000000024,iocharset=ascii,overriderockperm,overriderockperm,gid=', @ANYRESOCT=0x0, @ANYRES16=0x0, @ANYRESHEX=0x0, @ANYBLOB="48fed4d7f5b8976a72325a7a4475518c8d8a9629deb06c4e680f4ea7e455be0095b78419dc32be7a7a984436b376fd03f67af3ed1d5bb35f216485b41cdcbf53694e0687154e6aff974b9a4a09eae3b13fc668d251214c5c55f89b8d7da9a6384351758802bf51495393dc6788aa2f3a5fe2ca65e943cc864c99e74acf06ce962859b644646dd81a4f6c7951f40ce7172bfd3307720a3a7d80c4", @ANYRESOCT, @ANYRESDEC], 0xfe, 0xa27, &(0x7f0000000e80)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x107842, 0x42) 42.233381147s ago: executing program 4 (id=164): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000240)='./file0\x00', 0x98400, &(0x7f00000002c0)=ANY=[@ANYRES8=0x0, @ANYRES16, @ANYRES8, @ANYRESDEC, @ANYRES32, @ANYBLOB="8d59b4d39b6fc7f8243f709487f52e7112845ed7961e28ee60b15123c00e4e0f85a7106710b4729b2b235cbdd9472f523d7d804e9e991f859e5fed6e656791bd4f2c2053188b2050b234c5ad28370bbaad695e7e5fa3641214d5ccd8b8f0c88b2fa3e5af453df1d2556bbf7ae969f656af47b2c0103b91f967b6c1b1f5843da809e29cd348f8361b23c4b2fe429e08464011521ec947803cb623b3389638ef3e79c00ff35c875e3922b1d564a6e01df6"], 0x1, 0x2ee, &(0x7f00000006c0)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000040)='./file0/../file0/../file0/../file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x458, 0x0, 0x2b8, 0xb0000010, 0x2, 0x5c8f0200, 0x388, 0x3a8, 0x3a8, 0x388, 0x3a8, 0x3, 0x0, {[{{@ipv6={@private1, @local, [], [], 'vlan1\x00', 'veth0_to_team\x00'}, 0x0, 0x248, 0x290, 0x700, {}, [@common=@inet=@hashlimit3={{0x158}, {'geneve1\x00', {0xf1, 0x0, 0x33, 0x0, 0x0, 0x1, 0x7fffffff}}}, @common=@unspec=@limit={{0x48}, {0x10000000, 0x3}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x206, 'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000540)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000200)='./file0\x00') setsockopt$inet_int(r2, 0x0, 0x12, &(0x7f00000000c0), 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) unshare(0x68060200) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000000)={r2, r1}) 41.666469311s ago: executing program 4 (id=169): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r0}, &(0x7f0000000540), &(0x7f0000000580)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000140)='mm_page_alloc\x00', r1}, 0x10) unshare(0x62040200) 37.943017764s ago: executing program 4 (id=218): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) r1 = gettid() kcmp(r1, r1, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0a00000003000000b30000007f"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) fsmount(0xffffffffffffffff, 0x1, 0x7) open(0x0, 0x4000, 0x6) signalfd4(0xffffffffffffffff, &(0x7f00000002c0)={[0xa3]}, 0x8, 0x0) 37.942850744s ago: executing program 32 (id=218): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) r1 = gettid() kcmp(r1, r1, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0a00000003000000b30000007f"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) fsmount(0xffffffffffffffff, 0x1, 0x7) open(0x0, 0x4000, 0x6) signalfd4(0xffffffffffffffff, &(0x7f00000002c0)={[0xa3]}, 0x8, 0x0) 3.024267919s ago: executing program 3 (id=810): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ec0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.memory_pressure_enabled\x00', 0x26e1, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, &(0x7f0000000400)={0x3a, 0xc, '\x00', [@hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x43}}, @calipso={0x7, 0x50, {0x3, 0x12, 0x5, 0x1, [0x5, 0x0, 0x7b, 0x1ff, 0x0, 0x1, 0x4, 0xffffffffffff7c7d, 0xfffffffffffffff9]}}, @padn]}, 0x70) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r6}, &(0x7f0000000a00), &(0x7f0000000a40)=r5}, 0x20) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r7, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) r8 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r8) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x11, &(0x7f0000000300)={&(0x7f00000003c0)=@delchain={0x3c, 0x2c, 0xf31, 0x0, 0x2000, {0x0, 0x0, 0x0, r9, {}, {0xfff2, 0xffff}, {0xffff, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008844}, 0x4010) 2.954743439s ago: executing program 1 (id=813): mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x200000, 0x91) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x41}, 0x3}}, 0x10) listen(r3, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x0) close(0xffffffffffffffff) accept4(r3, 0x0, 0x0, 0x80000) 2.80300663s ago: executing program 3 (id=817): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) setsockopt$MRT_TABLE(r0, 0x0, 0xcf, &(0x7f0000000040)=0xffffff02, 0x4) write$binfmt_elf64(r0, &(0x7f0000001e00)=ANY=[@ANYBLOB="7f454c464900000700000000000000000200060006"], 0x40) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) setitimer(0x1, &(0x7f0000000000), 0x0) 2.771660381s ago: executing program 3 (id=820): mkdir(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2}, 0x0, &(0x7f0000000040)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) unshare(0x64000600) 2.046837125s ago: executing program 1 (id=831): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x3f, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44000000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000080000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000000, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r3 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDFONTOP_SET(r3, 0x4b72, &(0x7f0000000080)={0x0, 0x3000000, 0x8, 0x1b, 0x100, &(0x7f00000000c0)="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"}) 1.982024346s ago: executing program 1 (id=832): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r1, 0x0, 0x80000}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="adffa888000000001c00128009000100626f6e64000000000c000280050001000600000008000a0079"], 0x44}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000a80)='kfree\x00', r4}, 0x18) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00', 0x49}) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x3004000, &(0x7f0000000100)={[{@abort}, {@resuid}, {@block_validity}, {@resuid={'resuid', 0x3d, 0xee01}}, {@discard}, {@noblock_validity}, {@dioread_nolock}]}, 0x1, 0x790, &(0x7f0000000f80)="$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") r6 = msgget$private(0x0, 0x0) msgrcv(r6, 0x0, 0x0, 0x1, 0x2000) msgrcv(r6, &(0x7f0000000000)={0x0, ""/226}, 0xea, 0x0, 0x3000) 1.934944866s ago: executing program 2 (id=833): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) chdir(&(0x7f0000000100)='./file0\x00') link(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000240)='mm_collapse_huge_page_isolate\x00', r0, 0x0, 0x5}, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) openat(0xffffffffffffff9c, &(0x7f0000000c00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8a601, 0x5c) socket$netlink(0x10, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x15, 0x10, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10) syz_clone(0xc0000000, 0x0, 0x0, 0x0, 0x0, 0x0) 1.663430458s ago: executing program 2 (id=838): r0 = memfd_create(&(0x7f0000000640)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Mc\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'e\xe5\x8f\xf8\xd2\x1c\xc0\xfb\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6&\xd0\x9daA\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\xfe@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xf2\xde\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\x91\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7yn\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xefCGa\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xca\x00'/440, 0x0) io_setup(0xb4, &(0x7f0000002340)=0x0) io_submit(r1, 0x1, &(0x7f0000000d40)=[&(0x7f0000000600)={0x0, 0x0, 0xfe, 0x1, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x2}]) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1e, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x3a) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00'}, 0x10) unshare(0x44040200) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='kfree\x00', 0xffffffffffffffff, 0x0, 0xbed}, 0x18) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x18) r6 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x1) fchdir(r7) 1.602120039s ago: executing program 5 (id=840): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYRESHEX=r1, @ANYRES16=r1, @ANYBLOB="00f4ff0000"], 0x30}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="04000000040000000400000005", @ANYRESHEX=r1, @ANYRES64=r2], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x8}}, './file0\x00'}) r4 = getpid() unshare(0x2a020480) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000", @ANYRES32, @ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000dfff75390000000000000000850000007500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r5}, 0x10) r6 = io_uring_setup(0x868, &(0x7f0000000400)={0x0, 0x0, 0x8000, 0x4}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r6, 0x14, 0x0, 0x2) r7 = syz_pidfd_open(r4, 0x0) socket(0x2c, 0x70394e591e9f47c4, 0x9) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) setns(r7, 0x24020000) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r8 = io_uring_setup(0x931, &(0x7f0000000000)={0x0, 0x0, 0x80, 0x1, 0x328}) io_uring_register$IORING_REGISTER_PBUF_RING(r8, 0x16, &(0x7f00000006c0)={&(0x7f0000001000)={[{0x0, 0x0, 0x10}, {0x0, 0x0, 0xfffc}, {0x0, 0x0, 0xfffe}, {0x0, 0x0, 0x2}]}, 0x4, 0x1}, 0x1) 1.516577779s ago: executing program 5 (id=842): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x3f, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44000000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000800000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000000, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r3 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDFONTOP_SET(r3, 0x4b72, &(0x7f0000000080)={0x0, 0x3000000, 0x8, 0x1b, 0x100, &(0x7f00000000c0)="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"}) 1.469957639s ago: executing program 5 (id=843): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100003020702500000000002020207b1af8ff00000000bfa1000000000000070100003affffffb702000008000000b7030000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000400)='kfree\x00', r0}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000010000a80000000060a0904000000000000000002000000540004"], 0xc8}}, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)={0x68, 0xb, 0x6, 0x101, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x3c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_COMMENT={0x7, 0x1a, '$.\x00'}}, {0x58, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x9}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x10}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0xffff}}]}, @IPSET_ATTR_ADT={0x4}]}, 0x68}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="280500003d0007010000000000000000017c000004"], 0x528}}, 0xc000) 1.43637046s ago: executing program 3 (id=844): open(&(0x7f00000001c0)='./file0\x00', 0x80ff, 0x88) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fcntl$setlease(r0, 0x400, 0x1) prctl$PR_GET_PDEATHSIG(0x2, 0xfffffffffffffffc) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') pread64(r1, &(0x7f0000000080)=""/237, 0xed, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x2000, 0x100) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000140), 0x12) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_bp={&(0x7f0000000380), 0x8}, 0x1100, 0x5dd8, 0x3, 0x5, 0x0, 0x8, 0xff7b, 0x0, 0x0, 0x0, 0x2000000000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r6 = openat$cgroup(r4, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) r7 = openat$cgroup_procs(r6, &(0x7f00000004c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f0000000500), 0x12) 1.4237217s ago: executing program 5 (id=845): r0 = msgget$private(0x0, 0x0) msgrcv(r0, 0x0, 0x0, 0x1, 0x2000) msgrcv(r0, &(0x7f0000000000)={0x0, ""/226}, 0xea, 0x0, 0x3000) msgctl$IPC_SET(r0, 0x1, &(0x7f0000258f88)={{0x1, 0x0, 0x0, 0x0, 0x0, 0x170}, 0x0, 0x0, 0x800000000000000, 0x6, 0xffffffffffffffff, 0x0, 0x3, 0xe8, 0x0, 0x0, 0x0, 0xffffffffffffffff}) msgsnd(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0200c7612f33117c281794584c199e0af2676f21d1ef000000000000"], 0xe, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000020"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x2000000000000273, &(0x7f0000001740)=ANY=[@ANYRES16, @ANYRES64=r1, @ANYRESHEX=r0, @ANYRESDEC=r0, @ANYBLOB="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"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000700)='kfree\x00', r2, 0x0, 0x1}, 0x18) 1.35501995s ago: executing program 2 (id=846): quotactl$Q_GETNEXTQUOTA(0xffffffff80000901, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xd, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff0000bb7b94a000000000000007020000f8ffffffb703000008000000b7040000f66f63bb85000000430000009532e7614a36b375e0f0e5502b6943"], 0x0, 0xffff, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000840)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r1}, 0x10) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0x59, 0xffffff69, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000600)={'syztnl1\x00', &(0x7f00000003c0)={'syztnl1\x00', 0x0, 0x80, 0x80, 0x2, 0x1, {{0xa, 0x4, 0x1, 0x1, 0x45, 0x65, 0x0, 0x8, 0x4, 0x0, @loopback, @multicast2, {[@noop, @end, @end, @ra={0x94, 0xfffffffffffffdb8, 0x1}, @noop]}}}}}) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', r8, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r9}, 0x10) 1.299688631s ago: executing program 0 (id=847): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffea4, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000100)='system_u:object_r:ifconfig_exec_t:s0\x00', 0x25, 0x1) 1.254353061s ago: executing program 0 (id=848): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000400)='kfree\x00', r0}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000010000a80000000060a0904000000000000000002000000540004"], 0xc8}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="280500003d0007010000000000000000017c000004"], 0x528}}, 0xc000) 1.220918021s ago: executing program 0 (id=849): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) chdir(&(0x7f0000000100)='./file0\x00') link(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000240)='mm_collapse_huge_page_isolate\x00', r0, 0x0, 0x5}, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) openat(0xffffffffffffff9c, &(0x7f0000000c00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8a601, 0x5c) socket$netlink(0x10, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x15, 0x10, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10) syz_clone(0xc0000000, 0x0, 0x0, 0x0, 0x0, 0x0) 1.111408422s ago: executing program 0 (id=850): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}}, @NFT_MSG_NEWSET={0x1c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x58}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYRESOCT=r0], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000004c0)="7fb097316220ad6fd99e5ddadf935d45bab860fe8178256a1b7a278f079f0ee8ecd048e5da0a41055c51c58be352155c53597c3a5d7afe25760f204cff5391f7817ac1c3cb7583ba464a7fe161a512e3886b662f075d6b48a2c1cde8dcaf3dae1bb9fe7cd8da339ee4014a28afe20eba498f2f8b9861ceed6d210c45a2e87d881e046f4c5a0280728400", 0x8a}, {&(0x7f0000000580)="7292b23102f3139db5569e8c0c7692bda3778e6babd2e29ff7640b475f06048a615f4eefac7c746ffdabad950502bacf8285b74e9258cd0a3ca24178d8c01c58715d503b6a25435bc5e6b9368e0171a0ad1b14f3caec85945b3bf7ca6a56247b594e4d0be5eb194b1275dad7903aa7721b196ef79dbe367e8bc1244da3912988de57eab574ef8cb824bca1ab563c5d45c3f30ae6f03dedebaf38192d819e8e7d5569ae6b521d01f90269e8fb08", 0xad}, {&(0x7f0000000680)="e8ca8e1560f9ef6674aa07902c832b443df53274d7c7937416b2a5a13f4ed4223ab4336851cf402e1a189fc032c224149c707fa49fdf35792d685912ed945f5a69e9a12294c64baad821136e363d32c62fb5ecd73a803f61c5e83f3661606cfdf74d46a5bf2a5130233214474f271bfe4274dda28cada8397b813f89e52bed4be2663ecfdbf49ea14f22c5cd1e5a91a7c0979f8b5e5fd7edc175f3d349bdc7299c5bc9eb312c0c585f9b29a0a5065145022ad3b859f98a44a9fe72365b316bef2da9f793b322142983aae355b04904c0dc08b0734e660eef78ced40de250", 0xde}, {&(0x7f0000000780)="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", 0xfa}], 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000080008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000400000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) sendmsg$nl_xfrm(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)=@updsa={0x144, 0x10, 0x1, 0x0, 0x200019, {{@in6=@dev, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32}, {@in6=@remote, 0x0, 0x32}, @in=@multicast2, {0x0, 0x100000}, {}, {0x0, 0x7}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @offload={0xc, 0x1c, {r6, 0x4}}]}, 0x144}}, 0x0) 1.023018602s ago: executing program 1 (id=851): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYRESHEX=r1, @ANYRES16=r1, @ANYBLOB="00f4ff0000"], 0x30}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="04000000040000000400000005", @ANYRESHEX=r1, @ANYRES64=r2], 0x48) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x8}}, './file0\x00'}) r3 = getpid() unshare(0x2a020480) r4 = socket$can_j1939(0x1d, 0x2, 0x7) connect$vsock_stream(r4, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000", @ANYRES32, @ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000dfff75390000000000000000850000007500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r5}, 0x10) r6 = io_uring_setup(0x868, &(0x7f0000000400)={0x0, 0x0, 0x8000, 0x4}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r6, 0x14, 0x0, 0x2) r7 = syz_pidfd_open(r3, 0x0) socket(0x2c, 0x70394e591e9f47c4, 0x9) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) setns(r7, 0x24020000) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r8 = io_uring_setup(0x931, &(0x7f0000000000)={0x0, 0x0, 0x80, 0x1, 0x328}) io_uring_register$IORING_REGISTER_PBUF_RING(r8, 0x16, &(0x7f00000006c0)={&(0x7f0000001000)={[{0x0, 0x0, 0x10}, {0x0, 0x0, 0xfffc}, {0x0, 0x0, 0xfffe}, {0x0, 0x0, 0x2}]}, 0x4, 0x1}, 0x1) 962.398733ms ago: executing program 0 (id=852): r0 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r3}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="440000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="adffa888000000001c00128009000100626f6e64000000000c000280050001000600000008000a0079"], 0x44}}, 0x0) r5 = openat$cgroup_procs(r1, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$fou(&(0x7f0000000b40), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010026bd7006fddbdf2503000000060001004e220000"], 0x1c}, 0x1, 0x0, 0x0, 0x40000010}, 0x10) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00"/11], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x200, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0xfffffffc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xd}, {0xe, 0x10}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r9}, 0x10) write$cgroup_pid(r5, &(0x7f0000000140), 0x12) r11 = openat$cgroup(r1, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) r12 = openat$cgroup_procs(r11, &(0x7f00000004c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r12, &(0x7f0000000500), 0x12) 647.141345ms ago: executing program 1 (id=853): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x3f, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44000000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000800000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000000, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r3 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDFONTOP_SET(r3, 0x4b72, &(0x7f0000000080)={0x0, 0x3000000, 0x8, 0x1b, 0x100, &(0x7f00000000c0)="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"}) 631.727205ms ago: executing program 0 (id=854): clock_nanosleep(0xfffffff2, 0xca9a3b, 0x0, 0xfffffffffffffffe) r0 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x14) fcntl$setsig(r0, 0xa, 0x13) fcntl$setlease(r0, 0x400, 0x0) timer_create(0x0, 0x0, &(0x7f0000000280)) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sys_enter\x00', r1}, 0x10) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x1000000) 611.817875ms ago: executing program 1 (id=855): mkdir(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2}, 0x0, &(0x7f0000000040)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) unshare(0x64000600) 497.890496ms ago: executing program 5 (id=856): r0 = memfd_create(&(0x7f0000000640)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Mc\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'e\xe5\x8f\xf8\xd2\x1c\xc0\xfb\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6&\xd0\x9daA\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\xfe@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xf2\xde\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\x91\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7yn\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xefCGa\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xca\x00'/440, 0x0) io_setup(0xb4, &(0x7f0000002340)=0x0) io_submit(r1, 0x1, &(0x7f0000000d40)=[&(0x7f0000000600)={0x0, 0x0, 0xfe, 0x1, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x2}]) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1e, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x3a) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00'}, 0x10) unshare(0x44040200) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='kfree\x00', 0xffffffffffffffff, 0x0, 0xbed}, 0x18) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x18) r6 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x1) fchdir(r7) 481.737806ms ago: executing program 2 (id=857): syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x10000, 0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]}) stat(0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b66ef4c2b000400060000000700000015000080", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x24) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r2}, 0x9) syz_read_part_table(0x624, &(0x7f0000000640)="$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") r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1804000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000140)='kfree\x00', r3, 0x0, 0x401002}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0, r4}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{}, &(0x7f0000000000), &(0x7f00000005c0)=r5}, 0x20) r6 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_SET_RESERVED_SIZE(r6, 0x2275, &(0x7f0000000300)=0xc92b) 423.374047ms ago: executing program 3 (id=858): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[], 0x50) pipe(&(0x7f0000000380)={0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x7, &(0x7f0000000b00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="000000e1ffffffffb6020000000000008500000086000000950000000000000069846178a2830004fb8ba0984fcdca43be3bd6a17ff6ae000000547f280f1aab1bba3276477bfcf578202177d3221b62fde87078c56112b27b539532c81144f5d1bfe58740f36e336006e2eb5876cc47f112d8b35e89d60ceaef563c649c32b0277bf7192e658ad208f576448c1a396ff16b0d88dc81ad13b455b74eec584c550107f41f1408819f36a678bcb18a029c1a8ff8841e335c89c42e"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f00000003c0)='ext4_lazy_itable_init\x00', r2, 0x0, 0xd}, 0x18) set_tid_address(0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) sendmmsg(r1, &(0x7f0000000400), 0x0, 0x4000040) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000800)=ANY=[@ANYRES16=r4, @ANYRESHEX=r3, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES64, @ANYBLOB='\x00'/28], 0x48) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000056a80000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x15, 0x1c, &(0x7f0000000540)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r6, @ANYRESDEC=r3, @ANYRES32=r5, @ANYBLOB="0000000022000000bb5aa6c40800000046a969548da9cb0cad5179de55ca7bc6ff11d0bfe654a27f8f8c62184e5008f0ff76000000bf9800000000000056080000000000008500000007000000411d479ef2de0b711deca7e56fbda162bea10600e1da0244ba24abd1a4"], &(0x7f0000000980)='GPL\x00', 0xf, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback=0x1b, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='netfs_read\x00', 0xffffffffffffffff, 0x0, 0xe90e}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000080), 0x1, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") r7 = open(&(0x7f0000000000)='./file1\x00', 0x14927e, 0x93) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0xf, 0x52, 0x40, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_bp={0x0, 0xe}, 0x24, 0xffffffff, 0x3, 0x9, 0x3, 0x1, 0xfffb, 0x0, 0x2, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r7, 0x11, 0x0, 0x8800000) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) pwritev2(r8, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) 170.081908ms ago: executing program 2 (id=859): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x3f, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r1 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDFONTOP_SET(r1, 0x4b72, &(0x7f0000000080)={0x0, 0x3000000, 0x8, 0x1b, 0x100, &(0x7f00000000c0)="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"}) 109.416449ms ago: executing program 2 (id=860): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000400)='kfree\x00', r0}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000010000a80000000060a0904000000000000000002000000540004"], 0xc8}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="280500003d0007010000000000000000017c000004"], 0x528}}, 0xc000) 6.43267ms ago: executing program 5 (id=861): mkdir(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r3}, 0x0, &(0x7f0000000040)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) unshare(0x64000600) 0s ago: executing program 3 (id=862): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000080), 0x1, 0x553, &(0x7f0000001080)="$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") fallocate(0xffffffffffffffff, 0x11, 0x0, 0x8800000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) kernel console output (not intermixed with test programs): ? clear_bhb_loop+0x55/0xb0 [ 55.275830][ T4172] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.275864][ T4172] RIP: 0033:0x7f2e2848d169 [ 55.275884][ T4172] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 55.275942][ T4172] RSP: 002b:00007f2e26af7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 55.275965][ T4172] RAX: ffffffffffffffda RBX: 00007f2e286a5fa0 RCX: 00007f2e2848d169 [ 55.275981][ T4172] RDX: 000000000000fea2 RSI: 0000400000000100 RDI: 0000000000000006 [ 55.275996][ T4172] RBP: 00007f2e26af7090 R08: 0000000000000000 R09: 0000000000000000 [ 55.276010][ T4172] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 55.276024][ T4172] R13: 0000000000000000 R14: 00007f2e286a5fa0 R15: 00007fffd4a30e38 [ 55.276080][ T4172] [ 55.286251][ T4166] EXT4-fs (loop2): shut down requested (2) [ 55.287406][ T4154] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5366: group 0, free 0, pa_free 1 [ 55.584478][ T4181] vlan2: left allmulticast mode [ 55.589460][ T4181] bridge0: left allmulticast mode [ 55.614903][ T30] audit: type=1326 audit(1741765573.606:1368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4185 comm="syz.3.243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e2848d169 code=0x7ffc0000 [ 55.646352][ T4156] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 55.653940][ T4169] __nla_validate_parse: 15 callbacks suppressed [ 55.653956][ T4169] netlink: 1196 bytes leftover after parsing attributes in process `syz.2.240'. [ 55.672690][ T4053] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.698830][ T4053] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.768065][ T4053] team0: Port device team_slave_0 added [ 55.778856][ T4053] team0: Port device team_slave_1 added [ 55.833111][ T4053] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.840144][ T4053] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.866100][ T4053] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.905386][ T4053] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.912529][ T4053] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.938468][ T4053] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.958858][ T4210] loop2: detected capacity change from 0 to 512 [ 56.013461][ T4210] ext4 filesystem being mounted at /47/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.065857][ T4210] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 56.106101][ T4053] hsr_slave_0: entered promiscuous mode [ 56.117178][ T4210] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 31 with error 28 [ 56.129253][ T4053] hsr_slave_1: entered promiscuous mode [ 56.129503][ T4210] EXT4-fs (loop2): This should not happen!! Data will be lost [ 56.129503][ T4210] [ 56.135424][ T4053] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.144767][ T4210] EXT4-fs (loop2): Total free blocks count 0 [ 56.152282][ T4053] Cannot create hsr debugfs directory [ 56.154861][ T4221] netlink: 'syz.0.251': attribute type 6 has an invalid length. [ 56.158268][ T4210] EXT4-fs (loop2): Free/Dirty block details [ 56.177403][ T4210] EXT4-fs (loop2): free_blocks=65280 [ 56.177422][ T4210] EXT4-fs (loop2): dirty_blocks=31 [ 56.177435][ T4210] EXT4-fs (loop2): Block reservation details [ 56.177446][ T4210] EXT4-fs (loop2): i_reserved_data_blocks=31 [ 56.275779][ T4226] bond1: entered promiscuous mode [ 56.280878][ T4226] bond1: entered allmulticast mode [ 56.286273][ T4226] 8021q: adding VLAN 0 to HW filter on device bond1 [ 56.350182][ T4239] loop1: detected capacity change from 0 to 2048 [ 56.364946][ T4226] bond1 (unregistering): Released all slaves [ 56.499511][ T4238] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.595244][ T4238] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.697131][ T4238] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.745125][ T4053] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 56.770962][ T4053] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 56.793032][ T4053] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 56.802576][ T4053] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 56.875814][ T4238] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.900794][ T4263] netlink: 28 bytes leftover after parsing attributes in process `syz.2.253'. [ 56.952252][ T4053] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.983489][ T4053] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.025293][ T29] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.032410][ T29] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.046960][ T4272] netlink: 'syz.3.258': attribute type 26 has an invalid length. [ 57.057497][ T405] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.064652][ T405] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.083300][ T4272] loop3: detected capacity change from 0 to 1024 [ 57.104325][ T4272] EXT4-fs: Ignoring removed orlov option [ 57.110225][ T4272] EXT4-fs: Ignoring removed nomblk_io_submit option [ 57.211599][ T4053] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 57.222057][ T4053] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 57.277950][ T4272] EXT4-fs (loop3): shut down requested (2) [ 57.499593][ T4053] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.618329][ T4238] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.646338][ T4238] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.671221][ T4238] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.705007][ T4272] netlink: 1196 bytes leftover after parsing attributes in process `syz.3.258'. [ 57.742431][ T4307] netlink: 60 bytes leftover after parsing attributes in process `syz.2.261'. [ 57.752690][ T4307] netlink: 60 bytes leftover after parsing attributes in process `syz.2.261'. [ 57.754887][ T4238] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.801035][ T4307] netlink: 60 bytes leftover after parsing attributes in process `syz.2.261'. [ 57.842536][ T4316] netlink: 60 bytes leftover after parsing attributes in process `syz.0.262'. [ 57.850021][ T4307] netlink: 60 bytes leftover after parsing attributes in process `syz.2.261'. [ 57.871462][ T4316] netlink: 60 bytes leftover after parsing attributes in process `syz.0.262'. [ 57.926359][ T4316] netlink: 60 bytes leftover after parsing attributes in process `syz.0.262'. [ 57.982123][ T4053] veth0_vlan: entered promiscuous mode [ 58.003760][ T4053] veth1_vlan: entered promiscuous mode [ 58.049885][ T4053] veth0_macvtap: entered promiscuous mode [ 58.057523][ T4053] veth1_macvtap: entered promiscuous mode [ 58.082712][ T4053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.093228][ T4053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.103274][ T4053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.113806][ T4053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.123676][ T4053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.134201][ T4053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.144155][ T4053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.154597][ T4053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.165510][ T4053] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.188433][ T4053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.198969][ T4053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.208926][ T4053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.216598][ T4349] loop0: detected capacity change from 0 to 1024 [ 58.219401][ T4053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.226212][ T4349] EXT4-fs: inline encryption not supported [ 58.235561][ T4053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.251900][ T4053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.261847][ T4053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.263026][ T4349] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 58.272289][ T4053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.274386][ T4053] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.299736][ T4053] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.308609][ T4053] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.317433][ T4053] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.326261][ T4053] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.335466][ T4349] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 58.408719][ T4349] EXT4-fs error (device loop0): ext4_map_blocks:671: inode #3: block 2: comm syz.0.266: lblock 2 mapped to illegal pblock 2 (length 1) [ 58.429790][ T4349] EXT4-fs error (device loop0): ext4_map_blocks:671: inode #3: block 48: comm syz.0.266: lblock 0 mapped to illegal pblock 48 (length 1) [ 58.446238][ T4349] EXT4-fs error (device loop0): ext4_acquire_dquot:6927: comm syz.0.266: Failed to acquire dquot type 0 [ 58.458081][ T4349] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5838: Corrupt filesystem [ 58.469909][ T4349] EXT4-fs error (device loop0): ext4_evict_inode:256: inode #11: comm syz.0.266: mark_inode_dirty error [ 58.483389][ T4349] EXT4-fs warning (device loop0): ext4_evict_inode:259: couldn't mark inode dirty (err -117) [ 58.494370][ T4349] EXT4-fs (loop0): 1 orphan inode deleted [ 58.510391][ T12] EXT4-fs error (device loop0): ext4_map_blocks:671: inode #3: block 1: comm kworker/u8:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 58.532586][ T12] EXT4-fs error (device loop0): ext4_release_dquot:6950: comm kworker/u8:0: Failed to release dquot type 0 [ 58.548123][ T4349] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: none. [ 58.950124][ T4388] netlink: 'syz.2.272': attribute type 26 has an invalid length. [ 58.988118][ T4388] loop2: detected capacity change from 0 to 1024 [ 59.012105][ T4394] FAULT_INJECTION: forcing a failure. [ 59.012105][ T4394] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 59.025213][ T4394] CPU: 1 UID: 0 PID: 4394 Comm: syz.1.271 Not tainted 6.14.0-rc6-syzkaller-00007-g0b46b049d6ec #0 [ 59.025237][ T4394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 59.025249][ T4394] Call Trace: [ 59.025254][ T4394] [ 59.025263][ T4394] dump_stack_lvl+0xf2/0x150 [ 59.025335][ T4394] dump_stack+0x15/0x1a [ 59.025361][ T4394] should_fail_ex+0x24a/0x260 [ 59.025429][ T4394] should_fail+0xb/0x10 [ 59.025467][ T4394] should_fail_usercopy+0x1a/0x20 [ 59.025505][ T4394] _copy_from_user+0x1c/0xa0 [ 59.025526][ T4394] __se_sys_io_uring_setup+0xf3/0x1e0 [ 59.025550][ T4394] __x64_sys_io_uring_setup+0x31/0x40 [ 59.025620][ T4394] x64_sys_call+0x270c/0x2dc0 [ 59.025705][ T4394] do_syscall_64+0xc9/0x1c0 [ 59.025739][ T4394] ? clear_bhb_loop+0x55/0xb0 [ 59.025766][ T4394] ? clear_bhb_loop+0x55/0xb0 [ 59.025797][ T4394] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.025847][ T4394] RIP: 0033:0x7fa80e6fd169 [ 59.025905][ T4394] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 59.025923][ T4394] RSP: 002b:00007fa80cd25038 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 59.025945][ T4394] RAX: ffffffffffffffda RBX: 00007fa80e916160 RCX: 00007fa80e6fd169 [ 59.025960][ T4394] RDX: 0000000000000000 RSI: 0000400000000180 RDI: 0000000000004f01 [ 59.025974][ T4394] RBP: 00007fa80cd25090 R08: 0000000000000000 R09: 0000000000000000 [ 59.025988][ T4394] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 59.026002][ T4394] R13: 0000000000000000 R14: 00007fa80e916160 R15: 00007fff0b8f03b8 [ 59.026101][ T4394] [ 59.203024][ T4388] EXT4-fs: Ignoring removed orlov option [ 59.208852][ T4388] EXT4-fs: Ignoring removed nomblk_io_submit option [ 59.257315][ T4393] netlink: 'syz.5.273': attribute type 6 has an invalid length. [ 59.324986][ T4401] loop5: detected capacity change from 0 to 1764 [ 59.343991][ T4388] EXT4-fs (loop2): shut down requested (2) [ 59.531378][ T4416] loop2: detected capacity change from 0 to 1024 [ 59.538175][ T4416] EXT4-fs: inline encryption not supported [ 59.544394][ T4416] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 59.553300][ T4416] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 59.565770][ T4416] EXT4-fs error (device loop2): ext4_map_blocks:671: inode #3: block 2: comm syz.2.279: lblock 2 mapped to illegal pblock 2 (length 1) [ 59.581703][ T4416] __quota_error: 227 callbacks suppressed [ 59.581721][ T4416] Quota error (device loop2): qtree_write_dquot: dquota write failed [ 59.598177][ T4416] EXT4-fs error (device loop2): ext4_map_blocks:671: inode #3: block 48: comm syz.2.279: lblock 0 mapped to illegal pblock 48 (length 1) [ 59.614484][ T4416] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 59.623324][ T4416] EXT4-fs error (device loop2): ext4_acquire_dquot:6927: comm syz.2.279: Failed to acquire dquot type 0 [ 59.647652][ T30] audit: type=1400 audit(1741765577.646:1593): avc: denied { sqpoll } for pid=4407 comm="syz.5.277" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 59.774169][ T4416] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5838: Corrupt filesystem [ 59.960247][ T3379] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 59.971190][ T4416] EXT4-fs error (device loop2): ext4_evict_inode:256: inode #11: comm syz.2.279: mark_inode_dirty error [ 59.987260][ T4427] FAULT_INJECTION: forcing a failure. [ 59.987260][ T4427] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 60.000415][ T4427] CPU: 0 UID: 0 PID: 4427 Comm: syz.0.283 Not tainted 6.14.0-rc6-syzkaller-00007-g0b46b049d6ec #0 [ 60.000443][ T4427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 60.000534][ T4427] Call Trace: [ 60.000542][ T4427] [ 60.000551][ T4427] dump_stack_lvl+0xf2/0x150 [ 60.000580][ T4427] dump_stack+0x15/0x1a [ 60.000605][ T4427] should_fail_ex+0x24a/0x260 [ 60.000645][ T4427] should_fail+0xb/0x10 [ 60.000698][ T4427] should_fail_usercopy+0x1a/0x20 [ 60.000732][ T4427] _copy_from_user+0x1c/0xa0 [ 60.000755][ T4427] __sys_bpf+0x14e/0x7a0 [ 60.000796][ T4427] __x64_sys_bpf+0x43/0x50 [ 60.000900][ T4427] x64_sys_call+0x2914/0x2dc0 [ 60.000969][ T4427] do_syscall_64+0xc9/0x1c0 [ 60.001006][ T4427] ? clear_bhb_loop+0x55/0xb0 [ 60.001174][ T4427] ? clear_bhb_loop+0x55/0xb0 [ 60.001285][ T4427] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.001314][ T4427] RIP: 0033:0x7f45e335d169 [ 60.001329][ T4427] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 60.001345][ T4427] RSP: 002b:00007f45e19c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 60.001365][ T4427] RAX: ffffffffffffffda RBX: 00007f45e3575fa0 RCX: 00007f45e335d169 [ 60.001379][ T4427] RDX: 0000000000000070 RSI: 0000400000000440 RDI: 0000000000000005 [ 60.001393][ T4427] RBP: 00007f45e19c7090 R08: 0000000000000000 R09: 0000000000000000 [ 60.001406][ T4427] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 60.001478][ T4427] R13: 0000000000000000 R14: 00007f45e3575fa0 R15: 00007ffcc922e048 [ 60.001496][ T4427] [ 60.004573][ T4416] EXT4-fs warning (device loop2): ext4_evict_inode:259: couldn't mark inode dirty (err -117) [ 60.125481][ T4425] loop1: detected capacity change from 0 to 2048 [ 60.133356][ T4416] EXT4-fs (loop2): 1 orphan inode deleted [ 60.192604][ T59] EXT4-fs error (device loop2): ext4_map_blocks:671: inode #3: block 1: comm kworker/u8:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 60.212867][ T59] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 60.221473][ T59] EXT4-fs error (device loop2): ext4_release_dquot:6950: comm kworker/u8:4: Failed to release dquot type 0 [ 60.235509][ T4425] loop1: p1 < > p4 [ 60.242875][ T4425] loop1: p4 size 8388608 extends beyond EOD, truncated [ 60.256487][ T4416] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: none. [ 60.345414][ T30] audit: type=1400 audit(1741765578.336:1594): avc: denied { name_bind } for pid=4431 comm="syz.0.285" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 60.367209][ T30] audit: type=1400 audit(1741765578.336:1595): avc: denied { node_bind } for pid=4431 comm="syz.0.285" saddr=224.0.0.2 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 60.389250][ T30] audit: type=1326 audit(1741765578.336:1596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4431 comm="syz.0.285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45e335d169 code=0x7ffc0000 [ 60.412653][ T30] audit: type=1326 audit(1741765578.336:1597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4431 comm="syz.0.285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45e335d169 code=0x7ffc0000 [ 60.436357][ T30] audit: type=1326 audit(1741765578.336:1598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4431 comm="syz.0.285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f45e335d169 code=0x7ffc0000 [ 60.459731][ T30] audit: type=1326 audit(1741765578.336:1599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4431 comm="syz.0.285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45e335d169 code=0x7ffc0000 [ 60.474048][ T4439] netlink: 'syz.5.286': attribute type 16 has an invalid length. [ 60.491358][ T4439] netlink: 'syz.5.286': attribute type 17 has an invalid length. [ 60.533814][ T4439] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 60.556385][ T4436] bond1: entered promiscuous mode [ 60.561520][ T4436] bond1: entered allmulticast mode [ 60.567123][ T4436] 8021q: adding VLAN 0 to HW filter on device bond1 [ 60.579174][ T4448] loop2: detected capacity change from 0 to 1024 [ 60.591159][ T4436] bond1 (unregistering): Released all slaves [ 60.601958][ T4448] EXT4-fs: Ignoring removed orlov option [ 60.607677][ T4448] EXT4-fs: Ignoring removed nomblk_io_submit option [ 60.628935][ T4443] netlink: 'syz.2.287': attribute type 26 has an invalid length. [ 60.684301][ T4443] EXT4-fs (loop2): shut down requested (2) [ 60.691396][ T4443] __nla_validate_parse: 12 callbacks suppressed [ 60.691412][ T4443] netlink: 1196 bytes leftover after parsing attributes in process `syz.2.287'. [ 60.698302][ T4460] bond1: entered promiscuous mode [ 60.711826][ T4460] bond1: entered allmulticast mode [ 60.718085][ T4460] 8021q: adding VLAN 0 to HW filter on device bond1 [ 60.738444][ T4462] netlink: 'syz.1.293': attribute type 16 has an invalid length. [ 60.746301][ T4462] netlink: 'syz.1.293': attribute type 17 has an invalid length. [ 60.763855][ T4464] FAULT_INJECTION: forcing a failure. [ 60.763855][ T4464] name failslab, interval 1, probability 0, space 0, times 0 [ 60.776708][ T4464] CPU: 1 UID: 0 PID: 4464 Comm: syz.0.295 Not tainted 6.14.0-rc6-syzkaller-00007-g0b46b049d6ec #0 [ 60.776732][ T4464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 60.776747][ T4464] Call Trace: [ 60.776754][ T4464] [ 60.776762][ T4464] dump_stack_lvl+0xf2/0x150 [ 60.776844][ T4464] dump_stack+0x15/0x1a [ 60.776933][ T4464] should_fail_ex+0x24a/0x260 [ 60.776969][ T4464] should_failslab+0x8f/0xb0 [ 60.777005][ T4464] __kmalloc_node_track_caller_noprof+0xa8/0x410 [ 60.777030][ T4464] ? __request_module+0x1d5/0x3e0 [ 60.777054][ T4464] kstrdup+0x3d/0xd0 [ 60.777114][ T4464] __request_module+0x1d5/0x3e0 [ 60.777149][ T4464] dev_load+0xa0/0xb0 [ 60.777174][ T4464] dev_ioctl+0x844/0xab0 [ 60.777197][ T4464] sock_do_ioctl+0x11c/0x260 [ 60.777230][ T4464] sock_ioctl+0x40f/0x600 [ 60.777279][ T4464] ? __pfx_sock_ioctl+0x10/0x10 [ 60.777315][ T4464] __se_sys_ioctl+0xc9/0x140 [ 60.777375][ T4464] __x64_sys_ioctl+0x43/0x50 [ 60.777529][ T4464] x64_sys_call+0x1690/0x2dc0 [ 60.777558][ T4464] do_syscall_64+0xc9/0x1c0 [ 60.777596][ T4464] ? clear_bhb_loop+0x55/0xb0 [ 60.777697][ T4464] ? clear_bhb_loop+0x55/0xb0 [ 60.777724][ T4464] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.777803][ T4464] RIP: 0033:0x7f45e335d169 [ 60.777821][ T4464] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 60.777841][ T4464] RSP: 002b:00007f45e19c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 60.777863][ T4464] RAX: ffffffffffffffda RBX: 00007f45e3575fa0 RCX: 00007f45e335d169 [ 60.777877][ T4464] RDX: 0000400000000340 RSI: 0000000000008946 RDI: 0000000000000003 [ 60.777891][ T4464] RBP: 00007f45e19c7090 R08: 0000000000000000 R09: 0000000000000000 [ 60.777939][ T4464] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 60.777953][ T4464] R13: 0000000000000000 R14: 00007f45e3575fa0 R15: 00007ffcc922e048 [ 60.777974][ T4464] [ 60.988921][ T4460] bond1 (unregistering): Released all slaves [ 61.002556][ T3377] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 61.054962][ T4476] loop5: detected capacity change from 0 to 1024 [ 61.063538][ T4476] EXT4-fs: inline encryption not supported [ 61.069746][ T4476] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 61.078477][ T4462] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 61.085900][ T4478] loop2: detected capacity change from 0 to 1024 [ 61.105662][ T4480] netlink: 60 bytes leftover after parsing attributes in process `syz.3.300'. [ 61.114043][ T4476] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 61.125791][ T4480] netlink: 60 bytes leftover after parsing attributes in process `syz.3.300'. [ 61.159243][ T4476] EXT4-fs error (device loop5): ext4_map_blocks:671: inode #3: block 2: comm syz.5.298: lblock 2 mapped to illegal pblock 2 (length 1) [ 61.161128][ T4480] netlink: 60 bytes leftover after parsing attributes in process `syz.3.300'. [ 61.182732][ T4476] EXT4-fs error (device loop5): ext4_map_blocks:671: inode #3: block 48: comm syz.5.298: lblock 0 mapped to illegal pblock 48 (length 1) [ 61.183348][ T4478] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4115: comm syz.2.299: Allocating blocks 385-513 which overlap fs metadata [ 61.206379][ T4480] netlink: 60 bytes leftover after parsing attributes in process `syz.3.300'. [ 61.222645][ T4476] EXT4-fs error (device loop5): ext4_acquire_dquot:6927: comm syz.5.298: Failed to acquire dquot type 0 [ 61.234387][ T4476] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5838: Corrupt filesystem [ 61.244170][ T4476] EXT4-fs error (device loop5): ext4_evict_inode:256: inode #11: comm syz.5.298: mark_inode_dirty error [ 61.262381][ T4476] EXT4-fs warning (device loop5): ext4_evict_inode:259: couldn't mark inode dirty (err -117) [ 61.291993][ T4480] netlink: 60 bytes leftover after parsing attributes in process `syz.3.300'. [ 61.301430][ T4476] EXT4-fs (loop5): 1 orphan inode deleted [ 61.308231][ T4477] EXT4-fs (loop2): pa ffff8881007a95b0: logic 16, phys. 129, len 24 [ 61.316339][ T4477] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5366: group 0, free 0, pa_free 8 [ 61.326837][ T59] EXT4-fs error (device loop5): ext4_map_blocks:671: inode #3: block 1: comm kworker/u8:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 61.358184][ T4480] netlink: 60 bytes leftover after parsing attributes in process `syz.3.300'. [ 61.367325][ T59] EXT4-fs error (device loop5): ext4_release_dquot:6950: comm kworker/u8:4: Failed to release dquot type 0 [ 61.400560][ T4476] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: none. [ 61.448229][ T4501] netlink: 'syz.2.305': attribute type 26 has an invalid length. [ 61.478333][ T4501] loop2: detected capacity change from 0 to 1024 [ 61.499539][ T4501] EXT4-fs: Ignoring removed orlov option [ 61.499584][ T4501] EXT4-fs: Ignoring removed nomblk_io_submit option [ 61.544257][ T4511] netlink: 16 bytes leftover after parsing attributes in process `syz.3.309'. [ 61.544319][ T4511] netlink: 60 bytes leftover after parsing attributes in process `syz.3.309'. [ 61.567450][ T4501] EXT4-fs (loop2): shut down requested (2) [ 61.568657][ T4501] netlink: 1196 bytes leftover after parsing attributes in process `syz.2.305'. [ 61.629697][ T4491] mmap: syz.0.301 (4491) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 61.700169][ T4532] loop1: detected capacity change from 0 to 1024 [ 61.708260][ T4532] EXT4-fs: inline encryption not supported [ 61.716140][ T4532] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 61.725231][ T4532] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 61.737464][ T4532] EXT4-fs error (device loop1): ext4_map_blocks:671: inode #3: block 2: comm syz.1.317: lblock 2 mapped to illegal pblock 2 (length 1) [ 61.752010][ T4532] EXT4-fs error (device loop1): ext4_map_blocks:671: inode #3: block 48: comm syz.1.317: lblock 0 mapped to illegal pblock 48 (length 1) [ 61.766692][ T4532] EXT4-fs error (device loop1): ext4_acquire_dquot:6927: comm syz.1.317: Failed to acquire dquot type 0 [ 61.778421][ T4532] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5838: Corrupt filesystem [ 61.789785][ T4532] EXT4-fs error (device loop1): ext4_evict_inode:256: inode #11: comm syz.1.317: mark_inode_dirty error [ 61.804249][ T4532] EXT4-fs warning (device loop1): ext4_evict_inode:259: couldn't mark inode dirty (err -117) [ 61.814846][ T4532] EXT4-fs (loop1): 1 orphan inode deleted [ 61.823376][ T170] EXT4-fs error (device loop1): ext4_map_blocks:671: inode #3: block 1: comm kworker/u8:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 61.838122][ T170] EXT4-fs error (device loop1): ext4_release_dquot:6950: comm kworker/u8:5: Failed to release dquot type 0 [ 61.862385][ T4532] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: none. [ 61.951062][ T4548] netlink: 'syz.5.323': attribute type 26 has an invalid length. [ 61.965600][ T4548] loop5: detected capacity change from 0 to 1024 [ 61.973441][ T4548] EXT4-fs: Ignoring removed orlov option [ 61.979199][ T4548] EXT4-fs: Ignoring removed nomblk_io_submit option [ 61.985375][ T3452] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 62.009793][ T2964] IPVS: starting estimator thread 0... [ 62.023426][ T3377] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 62.084717][ T4548] EXT4-fs (loop5): shut down requested (2) [ 62.102353][ T4552] IPVS: using max 2256 ests per chain, 112800 per kthread [ 62.154102][ T4565] loop5: detected capacity change from 0 to 512 [ 62.185503][ T4565] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 62.194601][ T4565] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 62.306156][ T4565] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended [ 62.316958][ T4565] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 62.326209][ T4565] System zones: 0-2, 18-18, 34-35 [ 62.692481][ T4580] loop2: detected capacity change from 0 to 1024 [ 62.724192][ T4571] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.731402][ T4571] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.739857][ T4580] EXT4-fs: inline encryption not supported [ 62.763534][ T4580] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 62.784307][ T4572] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 62.853443][ T4580] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 62.941924][ T4580] EXT4-fs error (device loop2): ext4_map_blocks:671: inode #3: block 2: comm syz.2.333: lblock 2 mapped to illegal pblock 2 (length 1) [ 62.994531][ T4580] EXT4-fs error (device loop2): ext4_map_blocks:671: inode #3: block 48: comm syz.2.333: lblock 0 mapped to illegal pblock 48 (length 1) [ 63.028712][ T4571] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 63.041097][ T4571] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 63.067349][ T4591] FAULT_INJECTION: forcing a failure. [ 63.067349][ T4591] name failslab, interval 1, probability 0, space 0, times 0 [ 63.080128][ T4591] CPU: 0 UID: 0 PID: 4591 Comm: syz.5.335 Not tainted 6.14.0-rc6-syzkaller-00007-g0b46b049d6ec #0 [ 63.080156][ T4591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 63.080171][ T4591] Call Trace: [ 63.080179][ T4591] [ 63.080188][ T4591] dump_stack_lvl+0xf2/0x150 [ 63.080219][ T4591] dump_stack+0x15/0x1a [ 63.080240][ T4591] should_fail_ex+0x24a/0x260 [ 63.080298][ T4591] should_failslab+0x8f/0xb0 [ 63.080334][ T4591] kmem_cache_alloc_noprof+0x52/0x320 [ 63.080355][ T4591] ? skb_clone+0x154/0x1f0 [ 63.080388][ T4591] skb_clone+0x154/0x1f0 [ 63.080446][ T4591] __netlink_deliver_tap+0x2bd/0x4f0 [ 63.080542][ T4591] netlink_unicast+0x64a/0x670 [ 63.080612][ T4591] netlink_sendmsg+0x5cc/0x6e0 [ 63.080653][ T4591] ? __pfx_netlink_sendmsg+0x10/0x10 [ 63.080693][ T4591] __sock_sendmsg+0x140/0x180 [ 63.080802][ T4591] ____sys_sendmsg+0x326/0x4b0 [ 63.080837][ T4591] __sys_sendmsg+0x19d/0x230 [ 63.080880][ T4591] __x64_sys_sendmsg+0x46/0x50 [ 63.080905][ T4591] x64_sys_call+0x2734/0x2dc0 [ 63.080986][ T4591] do_syscall_64+0xc9/0x1c0 [ 63.081100][ T4591] ? clear_bhb_loop+0x55/0xb0 [ 63.081143][ T4591] ? clear_bhb_loop+0x55/0xb0 [ 63.081175][ T4591] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.081207][ T4591] RIP: 0033:0x7f88313bd169 [ 63.081305][ T4591] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 63.081326][ T4591] RSP: 002b:00007f882fa27038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 63.081348][ T4591] RAX: ffffffffffffffda RBX: 00007f88315d5fa0 RCX: 00007f88313bd169 [ 63.081360][ T4591] RDX: 0000000000000000 RSI: 0000400000000040 RDI: 0000000000000003 [ 63.081371][ T4591] RBP: 00007f882fa27090 R08: 0000000000000000 R09: 0000000000000000 [ 63.081388][ T4591] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 63.081400][ T4591] R13: 0000000000000000 R14: 00007f88315d5fa0 R15: 00007ffd88832e68 [ 63.081479][ T4591] [ 63.087012][ T4580] EXT4-fs error (device loop2): ext4_acquire_dquot:6927: comm syz.2.333: Failed to acquire dquot type 0 [ 63.147962][ T3375] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 63.304449][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 63.312556][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 63.365704][ T4580] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5838: Corrupt filesystem [ 63.375717][ T4580] EXT4-fs error (device loop2): ext4_evict_inode:256: inode #11: comm syz.2.333: mark_inode_dirty error [ 63.395158][ T4580] EXT4-fs warning (device loop2): ext4_evict_inode:259: couldn't mark inode dirty (err -117) [ 63.406190][ T4580] EXT4-fs (loop2): 1 orphan inode deleted [ 63.428380][ T4571] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.437379][ T4571] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.446321][ T4571] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.455325][ T4571] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.474382][ T29] EXT4-fs error (device loop2): ext4_map_blocks:671: inode #3: block 1: comm kworker/u8:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 63.495803][ T29] EXT4-fs error (device loop2): ext4_release_dquot:6950: comm kworker/u8:1: Failed to release dquot type 0 [ 63.513330][ T4601] loop3: detected capacity change from 0 to 1024 [ 63.520284][ T4601] EXT4-fs: Ignoring removed orlov option [ 63.526056][ T4601] EXT4-fs: Ignoring removed nomblk_io_submit option [ 63.535227][ T4580] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: none. [ 63.625226][ T4601] EXT4-fs (loop3): shut down requested (2) [ 63.635888][ T4595] netlink: 'syz.3.337': attribute type 26 has an invalid length. [ 64.099863][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 64.209617][ T4606] loop0: detected capacity change from 0 to 2048 [ 64.220687][ T4606] EXT4-fs: Ignoring removed bh option [ 64.426009][ T4636] FAULT_INJECTION: forcing a failure. [ 64.426009][ T4636] name failslab, interval 1, probability 0, space 0, times 0 [ 64.438716][ T4636] CPU: 1 UID: 0 PID: 4636 Comm: syz.5.349 Not tainted 6.14.0-rc6-syzkaller-00007-g0b46b049d6ec #0 [ 64.438746][ T4636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 64.438761][ T4636] Call Trace: [ 64.438768][ T4636] [ 64.438776][ T4636] dump_stack_lvl+0xf2/0x150 [ 64.438811][ T4636] dump_stack+0x15/0x1a [ 64.438835][ T4636] should_fail_ex+0x24a/0x260 [ 64.438949][ T4636] should_failslab+0x8f/0xb0 [ 64.438988][ T4636] __kmalloc_node_track_caller_noprof+0xa8/0x410 [ 64.439018][ T4636] ? security_context_to_sid_core+0x66/0x3b0 [ 64.439144][ T4636] kmemdup_nul+0x35/0xc0 [ 64.439180][ T4636] security_context_to_sid_core+0x66/0x3b0 [ 64.439224][ T4636] security_context_to_sid_force+0x30/0x40 [ 64.439263][ T4636] selinux_inode_setxattr+0x513/0x700 [ 64.439357][ T4636] security_inode_setxattr+0x169/0x1f0 [ 64.439400][ T4636] __vfs_setxattr_locked+0x88/0x1d0 [ 64.439441][ T4636] vfs_setxattr+0x140/0x290 [ 64.439481][ T4636] filename_setxattr+0x1a6/0x2a0 [ 64.439532][ T4636] path_setxattrat+0x284/0x310 [ 64.439637][ T4636] __x64_sys_lsetxattr+0x71/0x90 [ 64.439678][ T4636] x64_sys_call+0x29c8/0x2dc0 [ 64.439704][ T4636] do_syscall_64+0xc9/0x1c0 [ 64.439737][ T4636] ? clear_bhb_loop+0x55/0xb0 [ 64.439836][ T4636] ? clear_bhb_loop+0x55/0xb0 [ 64.439865][ T4636] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.439910][ T4636] RIP: 0033:0x7f88313bd169 [ 64.439928][ T4636] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 64.439949][ T4636] RSP: 002b:00007f882fa27038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 64.439973][ T4636] RAX: ffffffffffffffda RBX: 00007f88315d5fa0 RCX: 00007f88313bd169 [ 64.439995][ T4636] RDX: 0000400000000280 RSI: 0000400000000240 RDI: 00004000000001c0 [ 64.440010][ T4636] RBP: 00007f882fa27090 R08: 0000000000000000 R09: 0000000000000000 [ 64.440070][ T4636] R10: 000000000000001e R11: 0000000000000246 R12: 0000000000000001 [ 64.440085][ T4636] R13: 0000000000000001 R14: 00007f88315d5fa0 R15: 00007ffd88832e68 [ 64.440107][ T4636] [ 64.842260][ T30] kauditd_printk_skb: 87 callbacks suppressed [ 64.842313][ T30] audit: type=1326 audit(1741765582.836:1678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4646 comm="syz.5.351" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f88313bd169 code=0x0 [ 64.917413][ T4650] bond1: entered promiscuous mode [ 64.922679][ T4650] bond1: entered allmulticast mode [ 64.928452][ T4650] 8021q: adding VLAN 0 to HW filter on device bond1 [ 64.929212][ T59] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 64.954409][ T4650] bond1 (unregistering): Released all slaves [ 64.969553][ T4653] netlink: 'syz.3.353': attribute type 26 has an invalid length. [ 64.983759][ T4656] loop3: detected capacity change from 0 to 1024 [ 64.993622][ T4656] EXT4-fs: Ignoring removed orlov option [ 64.999340][ T4656] EXT4-fs: Ignoring removed nomblk_io_submit option [ 65.006045][ T59] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 65.018339][ T59] EXT4-fs (loop0): This should not happen!! Data will be lost [ 65.018339][ T59] [ 65.028052][ T59] EXT4-fs (loop0): Total free blocks count 0 [ 65.034096][ T59] EXT4-fs (loop0): Free/Dirty block details [ 65.040035][ T59] EXT4-fs (loop0): free_blocks=2415919104 [ 65.045807][ T59] EXT4-fs (loop0): dirty_blocks=1600 [ 65.051141][ T59] EXT4-fs (loop0): Block reservation details [ 65.057181][ T59] EXT4-fs (loop0): i_reserved_data_blocks=100 [ 65.066754][ T51] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 1572 with error 28 [ 65.079540][ T51] EXT4-fs (loop0): This should not happen!! Data will be lost [ 65.079540][ T51] [ 65.207774][ T30] audit: type=1400 audit(1741765583.206:1679): avc: denied { append } for pid=4659 comm="syz.0.354" name="001" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 65.234053][ T4660] loop0: detected capacity change from 0 to 512 [ 65.245512][ T4660] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 65.368926][ T4668] loop1: detected capacity change from 0 to 512 [ 65.382911][ T3375] net_ratelimit: 1 callbacks suppressed [ 65.382925][ T3375] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 65.417688][ T4668] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 65.548942][ T4679] SELinux: Context Ü?ðvÊ€TW'×ÍY€g5É{1Þ²r is not valid (left unmapped). [ 65.599600][ T4668] EXT4-fs (loop1): orphan cleanup on readonly fs [ 65.630882][ T4668] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.355: bg 0: block 248: padding at end of block bitmap is not set [ 65.654600][ T4680] loop2: detected capacity change from 0 to 512 [ 65.688500][ T4680] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 65.787187][ T4668] Quota error (device loop1): write_blk: dquota write failed [ 65.794870][ T4668] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 65.804859][ T4668] EXT4-fs error (device loop1): ext4_acquire_dquot:6927: comm syz.1.355: Failed to acquire dquot type 1 [ 65.866994][ T4668] EXT4-fs (loop1): 1 truncate cleaned up [ 65.927748][ T30] audit: type=1400 audit(1741765583.926:1680): avc: denied { read } for pid=4690 comm="syz.1.365" path="socket:[8615]" dev="sockfs" ino=8615 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 66.041347][ T30] audit: type=1400 audit(1741765584.036:1681): avc: denied { map } for pid=4701 comm="syz.2.368" path="socket:[8626]" dev="sockfs" ino=8626 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 66.064691][ T30] audit: type=1400 audit(1741765584.036:1682): avc: denied { read } for pid=4701 comm="syz.2.368" path="socket:[8626]" dev="sockfs" ino=8626 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 66.172846][ T4706] __nla_validate_parse: 17 callbacks suppressed [ 66.172865][ T4706] netlink: 16 bytes leftover after parsing attributes in process `syz.1.371'. [ 66.193458][ T4712] loop3: detected capacity change from 0 to 512 [ 66.210054][ T30] audit: type=1400 audit(1741765584.176:1683): avc: denied { bind } for pid=4705 comm="syz.1.371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 66.261923][ T3376] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 66.280701][ T4706] loop1: detected capacity change from 0 to 2048 [ 66.289727][ T4712] ext4 filesystem being mounted at /84/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 66.346220][ T3376] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 66.355634][ T30] audit: type=1400 audit(1741765584.336:1684): avc: denied { read } for pid=4720 comm="syz.0.375" path="socket:[9501]" dev="sockfs" ino=9501 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 66.379813][ T30] audit: type=1326 audit(1741765584.336:1685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4705 comm="syz.1.371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa80e6fd169 code=0x7ffc0000 [ 66.406327][ T4725] loop5: detected capacity change from 0 to 512 [ 66.421480][ T3375] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 66.456630][ T4725] ext4 filesystem being mounted at /26/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.490717][ T4735] SELinux: Context Ü?ðvÊ is not valid (left unmapped). [ 66.535749][ T4737] 9p: Unknown uid 00000000004294967295 [ 66.582452][ T4737] loop3: detected capacity change from 0 to 256 [ 66.589141][ T4737] msdos: Bad value for 'gid' [ 66.593830][ T4737] msdos: Bad value for 'gid' [ 66.620831][ T4750] FAULT_INJECTION: forcing a failure. [ 66.620831][ T4750] name failslab, interval 1, probability 0, space 0, times 0 [ 66.633700][ T4750] CPU: 0 UID: 0 PID: 4750 Comm: syz.1.383 Not tainted 6.14.0-rc6-syzkaller-00007-g0b46b049d6ec #0 [ 66.633747][ T4750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 66.633759][ T4750] Call Trace: [ 66.633767][ T4750] [ 66.633776][ T4750] dump_stack_lvl+0xf2/0x150 [ 66.633877][ T4750] dump_stack+0x15/0x1a [ 66.633898][ T4750] should_fail_ex+0x24a/0x260 [ 66.633931][ T4750] should_failslab+0x8f/0xb0 [ 66.633979][ T4750] kmem_cache_alloc_node_noprof+0x59/0x320 [ 66.634009][ T4750] ? __alloc_skb+0x10b/0x310 [ 66.634037][ T4750] ? __rtnl_unlock+0x99/0xb0 [ 66.634135][ T4750] __alloc_skb+0x10b/0x310 [ 66.634163][ T4750] netlink_ack+0xef/0x4f0 [ 66.634215][ T4750] ? avc_has_perm_noaudit+0x1cc/0x210 [ 66.634243][ T4750] netlink_rcv_skb+0x19c/0x230 [ 66.634279][ T4750] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 66.634325][ T4750] rtnetlink_rcv+0x1c/0x30 [ 66.634374][ T4750] netlink_unicast+0x599/0x670 [ 66.634453][ T4750] netlink_sendmsg+0x5cc/0x6e0 [ 66.634547][ T4750] ? __pfx_netlink_sendmsg+0x10/0x10 [ 66.634628][ T4750] __sock_sendmsg+0x140/0x180 [ 66.634668][ T4750] ____sys_sendmsg+0x326/0x4b0 [ 66.634698][ T4750] __sys_sendmsg+0x19d/0x230 [ 66.634744][ T4750] __x64_sys_sendmsg+0x46/0x50 [ 66.634817][ T4750] x64_sys_call+0x2734/0x2dc0 [ 66.634912][ T4750] do_syscall_64+0xc9/0x1c0 [ 66.634952][ T4750] ? clear_bhb_loop+0x55/0xb0 [ 66.634986][ T4750] ? clear_bhb_loop+0x55/0xb0 [ 66.635018][ T4750] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.635121][ T4750] RIP: 0033:0x7fa80e6fd169 [ 66.635139][ T4750] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 66.635173][ T4750] RSP: 002b:00007fa80cd67038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 66.635196][ T4750] RAX: ffffffffffffffda RBX: 00007fa80e915fa0 RCX: 00007fa80e6fd169 [ 66.635211][ T4750] RDX: 000000001000c840 RSI: 00004000000000c0 RDI: 0000000000000006 [ 66.635226][ T4750] RBP: 00007fa80cd67090 R08: 0000000000000000 R09: 0000000000000000 [ 66.635240][ T4750] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 66.635252][ T4750] R13: 0000000000000000 R14: 00007fa80e915fa0 R15: 00007fff0b8f03b8 [ 66.635273][ T4750] [ 66.874008][ T4752] loop3: detected capacity change from 0 to 1024 [ 66.948379][ T4759] netlink: 60 bytes leftover after parsing attributes in process `syz.3.387'. [ 66.958598][ T4759] netlink: 60 bytes leftover after parsing attributes in process `syz.3.387'. [ 67.003489][ T4759] netlink: 60 bytes leftover after parsing attributes in process `syz.3.387'. [ 67.018821][ T4759] netlink: 60 bytes leftover after parsing attributes in process `syz.3.387'. [ 67.046364][ T4759] netlink: 60 bytes leftover after parsing attributes in process `syz.3.387'. [ 67.056018][ T4759] netlink: 60 bytes leftover after parsing attributes in process `syz.3.387'. [ 67.096819][ T4771] loop2: detected capacity change from 0 to 764 [ 67.184437][ T4782] bond1: entered promiscuous mode [ 67.189558][ T4782] bond1: entered allmulticast mode [ 67.243977][ T4771] Symlink component flag not implemented [ 67.249870][ T4771] Symlink component flag not implemented (129) [ 67.262329][ T4786] netlink: 'syz.1.395': attribute type 16 has an invalid length. [ 67.265022][ T4782] 8021q: adding VLAN 0 to HW filter on device bond1 [ 67.270145][ T4786] netlink: 'syz.1.395': attribute type 17 has an invalid length. [ 67.317974][ T4771] rock: directory entry would overflow storage [ 67.324345][ T4771] rock: sig=0x4f50, size=4, remaining=3 [ 67.330074][ T4771] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 67.423862][ T4782] bond1 (unregistering): Released all slaves [ 67.437511][ T4794] netlink: 4 bytes leftover after parsing attributes in process `syz.0.399'. [ 67.616113][ T4786] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.625487][ T4796] netlink: 24 bytes leftover after parsing attributes in process `syz.0.399'. [ 67.687622][ T4786] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.705049][ T3375] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 67.713903][ T4794] dccp_invalid_packet: P.Data Offset(0) too small [ 67.731000][ T4801] loop2: detected capacity change from 0 to 512 [ 67.737690][ T4786] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 67.771790][ T4801] ext4 filesystem being mounted at /71/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 67.835441][ T4811] netlink: 60 bytes leftover after parsing attributes in process `syz.5.404'. [ 67.913660][ T4822] loop0: detected capacity change from 0 to 512 [ 67.933189][ T4822] ext4 filesystem being mounted at /93/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 68.042018][ T4836] FAULT_INJECTION: forcing a failure. [ 68.042018][ T4836] name failslab, interval 1, probability 0, space 0, times 0 [ 68.054747][ T4836] CPU: 1 UID: 0 PID: 4836 Comm: syz.3.413 Not tainted 6.14.0-rc6-syzkaller-00007-g0b46b049d6ec #0 [ 68.054771][ T4836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 68.054783][ T4836] Call Trace: [ 68.054790][ T4836] [ 68.054798][ T4836] dump_stack_lvl+0xf2/0x150 [ 68.054947][ T4836] dump_stack+0x15/0x1a [ 68.054975][ T4836] should_fail_ex+0x24a/0x260 [ 68.055012][ T4836] should_failslab+0x8f/0xb0 [ 68.055046][ T4836] __kmalloc_noprof+0xab/0x3f0 [ 68.055142][ T4836] ? fib6_info_alloc+0x2c/0x90 [ 68.055175][ T4836] fib6_info_alloc+0x2c/0x90 [ 68.055293][ T4836] ip6_route_info_create+0x34c/0xa80 [ 68.055334][ T4836] ip6_route_add+0x26/0x120 [ 68.055369][ T4836] inet6_rtm_newroute+0x173/0x1260 [ 68.055463][ T4836] ? fixup_exception+0x7c0/0xca0 [ 68.055487][ T4836] ? __memcg_slab_free_hook+0xc9/0x1e0 [ 68.055525][ T4836] ? security_capable+0x81/0x90 [ 68.055567][ T4836] ? ns_capable+0x7d/0xb0 [ 68.055608][ T4836] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 68.055640][ T4836] rtnetlink_rcv_msg+0x6aa/0x710 [ 68.055698][ T4836] ? ref_tracker_free+0x3a5/0x410 [ 68.055732][ T4836] netlink_rcv_skb+0x12c/0x230 [ 68.055770][ T4836] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 68.055869][ T4836] rtnetlink_rcv+0x1c/0x30 [ 68.055904][ T4836] netlink_unicast+0x599/0x670 [ 68.055938][ T4836] netlink_sendmsg+0x5cc/0x6e0 [ 68.055979][ T4836] ? __pfx_netlink_sendmsg+0x10/0x10 [ 68.056017][ T4836] __sock_sendmsg+0x140/0x180 [ 68.056079][ T4836] ____sys_sendmsg+0x326/0x4b0 [ 68.056180][ T4836] __sys_sendmsg+0x19d/0x230 [ 68.056233][ T4836] __x64_sys_sendmsg+0x46/0x50 [ 68.056298][ T4836] x64_sys_call+0x2734/0x2dc0 [ 68.056331][ T4836] do_syscall_64+0xc9/0x1c0 [ 68.056369][ T4836] ? clear_bhb_loop+0x55/0xb0 [ 68.056414][ T4836] ? clear_bhb_loop+0x55/0xb0 [ 68.056473][ T4836] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.056504][ T4836] RIP: 0033:0x7f2e2848d169 [ 68.056521][ T4836] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 68.056540][ T4836] RSP: 002b:00007f2e26af7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 68.056561][ T4836] RAX: ffffffffffffffda RBX: 00007f2e286a5fa0 RCX: 00007f2e2848d169 [ 68.056574][ T4836] RDX: 000000001000c840 RSI: 00004000000000c0 RDI: 0000000000000006 [ 68.056588][ T4836] RBP: 00007f2e26af7090 R08: 0000000000000000 R09: 0000000000000000 [ 68.056631][ T4836] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 68.056655][ T4836] R13: 0000000000000000 R14: 00007f2e286a5fa0 R15: 00007fffd4a30e38 [ 68.056719][ T4836] [ 68.317129][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 68.338436][ T4841] SELinux: Context Ü?ðvÊ is not valid (left unmapped). [ 68.339800][ T4839] loop1: detected capacity change from 0 to 512 [ 68.383730][ T4839] ext4: Unknown parameter 'subj_role' [ 68.480914][ T4837] loop2: detected capacity change from 0 to 2048 [ 68.531046][ T4837] loop2: p1 < > p4 < > [ 68.626020][ T3889] udevd[3889]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 68.628312][ T3294] udevd[3294]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 68.638532][ T4876] xt_TCPMSS: Only works on TCP SYN packets [ 68.662435][ T4874] loop2: detected capacity change from 0 to 512 [ 68.669328][ T4876] serio: Serial port ptm0 [ 68.691783][ T4874] ext4 filesystem being mounted at /73/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 68.716999][ T4874] EXT4-fs error (device loop2): ext4_do_update_inode:5154: inode #2: comm syz.2.425: corrupted inode contents [ 68.737437][ T4874] EXT4-fs error (device loop2): ext4_dirty_inode:6042: inode #2: comm syz.2.425: mark_inode_dirty error [ 68.749201][ T3379] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 68.763449][ T4874] EXT4-fs error (device loop2): ext4_do_update_inode:5154: inode #2: comm syz.2.425: corrupted inode contents [ 68.776069][ T4874] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #2: comm syz.2.425: mark_inode_dirty error [ 68.833131][ T4894] FAULT_INJECTION: forcing a failure. [ 68.833131][ T4894] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 68.846277][ T4894] CPU: 1 UID: 0 PID: 4894 Comm: syz.0.433 Not tainted 6.14.0-rc6-syzkaller-00007-g0b46b049d6ec #0 [ 68.846305][ T4894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 68.846318][ T4894] Call Trace: [ 68.846325][ T4894] [ 68.846334][ T4894] dump_stack_lvl+0xf2/0x150 [ 68.846369][ T4894] dump_stack+0x15/0x1a [ 68.846391][ T4894] should_fail_ex+0x24a/0x260 [ 68.846428][ T4894] should_fail+0xb/0x10 [ 68.846475][ T4894] should_fail_usercopy+0x1a/0x20 [ 68.846506][ T4894] _copy_from_user+0x1c/0xa0 [ 68.846593][ T4894] __sys_bpf+0x14e/0x7a0 [ 68.846628][ T4894] __x64_sys_bpf+0x43/0x50 [ 68.846719][ T4894] x64_sys_call+0x2914/0x2dc0 [ 68.846749][ T4894] do_syscall_64+0xc9/0x1c0 [ 68.846781][ T4894] ? clear_bhb_loop+0x55/0xb0 [ 68.846842][ T4894] ? clear_bhb_loop+0x55/0xb0 [ 68.846874][ T4894] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.846931][ T4894] RIP: 0033:0x7f45e335d169 [ 68.846946][ T4894] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 68.846970][ T4894] RSP: 002b:00007f45e19c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 68.846992][ T4894] RAX: ffffffffffffffda RBX: 00007f45e3575fa0 RCX: 00007f45e335d169 [ 68.847006][ T4894] RDX: 0000000000000048 RSI: 00004000000008c0 RDI: 0000000000000000 [ 68.847021][ T4894] RBP: 00007f45e19c7090 R08: 0000000000000000 R09: 0000000000000000 [ 68.847107][ T4894] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 68.847121][ T4894] R13: 0000000000000000 R14: 00007f45e3575fa0 R15: 00007ffcc922e048 [ 68.847143][ T4894] [ 69.045306][ T4899] loop3: detected capacity change from 0 to 1024 [ 69.063729][ T4901] loop0: detected capacity change from 0 to 1024 [ 69.073204][ T4899] EXT4-fs mount: 54 callbacks suppressed [ 69.073219][ T4899] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.110689][ T4904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 69.121116][ T4891] netlink: 'syz.3.431': attribute type 4 has an invalid length. [ 69.134448][ T4901] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.167884][ T4901] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4115: comm syz.0.435: Allocating blocks 385-513 which overlap fs metadata [ 69.184846][ T4901] EXT4-fs (loop0): pa ffff8881007a9620: logic 16, phys. 129, len 24 [ 69.193111][ T4901] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5366: group 0, free 0, pa_free 8 [ 69.203611][ T4901] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 28 [ 69.216012][ T4901] EXT4-fs (loop0): This should not happen!! Data will be lost [ 69.216012][ T4901] [ 69.225699][ T4901] EXT4-fs (loop0): Total free blocks count 0 [ 69.231755][ T4901] EXT4-fs (loop0): Free/Dirty block details [ 69.237673][ T4901] EXT4-fs (loop0): free_blocks=128 [ 69.242852][ T4901] EXT4-fs (loop0): dirty_blocks=0 [ 69.247945][ T4901] EXT4-fs (loop0): Block reservation details [ 69.254052][ T4901] EXT4-fs (loop0): i_reserved_data_blocks=0 [ 69.270032][ T4906] loop1: detected capacity change from 0 to 512 [ 69.290596][ T4906] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 69.305272][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.317117][ T4906] EXT4-fs (loop1): warning: maximal mount count reached, running e2fsck is recommended [ 69.338391][ T4906] EXT4-fs error (device loop1): ext4_orphan_get:1389: comm syz.1.437: inode #15: comm syz.1.437: iget: illegal inode # [ 69.366752][ T4921] loop2: detected capacity change from 0 to 2048 [ 69.370291][ T4906] EXT4-fs error (device loop1): ext4_orphan_get:1394: comm syz.1.437: couldn't read orphan inode 15 (err -117) [ 69.397899][ T4928] FAULT_INJECTION: forcing a failure. [ 69.397899][ T4928] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 69.411079][ T4928] CPU: 1 UID: 0 PID: 4928 Comm: syz.3.445 Not tainted 6.14.0-rc6-syzkaller-00007-g0b46b049d6ec #0 [ 69.411112][ T4928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 69.411128][ T4928] Call Trace: [ 69.411138][ T4928] [ 69.411148][ T4928] dump_stack_lvl+0xf2/0x150 [ 69.411191][ T4928] dump_stack+0x15/0x1a [ 69.411254][ T4928] should_fail_ex+0x24a/0x260 [ 69.411294][ T4928] should_fail+0xb/0x10 [ 69.411327][ T4928] should_fail_usercopy+0x1a/0x20 [ 69.411423][ T4928] _copy_from_user+0x1c/0xa0 [ 69.411448][ T4928] copy_msghdr_from_user+0x54/0x2a0 [ 69.411535][ T4928] ? __fget_files+0x17c/0x1c0 [ 69.411599][ T4928] __sys_sendmsg+0x13e/0x230 [ 69.411771][ T4928] __x64_sys_sendmsg+0x46/0x50 [ 69.411804][ T4928] x64_sys_call+0x2734/0x2dc0 [ 69.411838][ T4928] do_syscall_64+0xc9/0x1c0 [ 69.411878][ T4928] ? clear_bhb_loop+0x55/0xb0 [ 69.411965][ T4928] ? clear_bhb_loop+0x55/0xb0 [ 69.412075][ T4928] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.412190][ T4928] RIP: 0033:0x7f2e2848d169 [ 69.412209][ T4928] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 69.412234][ T4928] RSP: 002b:00007f2e26af7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 69.412258][ T4928] RAX: ffffffffffffffda RBX: 00007f2e286a5fa0 RCX: 00007f2e2848d169 [ 69.412274][ T4928] RDX: 0000000000000800 RSI: 0000400000001ac0 RDI: 0000000000000006 [ 69.412289][ T4928] RBP: 00007f2e26af7090 R08: 0000000000000000 R09: 0000000000000000 [ 69.412305][ T4928] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 69.412320][ T4928] R13: 0000000000000000 R14: 00007f2e286a5fa0 R15: 00007fffd4a30e38 [ 69.412344][ T4928] [ 69.611396][ T4906] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.615139][ T4921] loop2: p1 < > p4 < > [ 69.657569][ T3001] loop2: p1 < > p4 < > [ 69.715026][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.832991][ T4954] loop3: detected capacity change from 0 to 1024 [ 69.863758][ T30] kauditd_printk_skb: 335 callbacks suppressed [ 69.863776][ T30] audit: type=1326 audit(1741765587.866:2021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4953 comm="syz.3.452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f2e2848bdca code=0x7ffc0000 [ 69.900752][ T30] audit: type=1400 audit(1741765587.876:2022): avc: denied { unmount } for pid=4053 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 69.920590][ T30] audit: type=1326 audit(1741765587.896:2023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4953 comm="syz.3.452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f2e2848bdca code=0x7ffc0000 [ 69.943843][ T30] audit: type=1326 audit(1741765587.896:2024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4953 comm="syz.3.452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f2e2848b9d7 code=0x7ffc0000 [ 69.967185][ T30] audit: type=1326 audit(1741765587.896:2025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4953 comm="syz.3.452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f2e2848e90a code=0x7ffc0000 [ 69.992049][ T30] audit: type=1326 audit(1741765587.916:2026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4962 comm="syz.5.453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88313bd169 code=0x7ffc0000 [ 70.015402][ T30] audit: type=1326 audit(1741765587.916:2027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4962 comm="syz.5.453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88313bd169 code=0x7ffc0000 [ 70.038746][ T30] audit: type=1326 audit(1741765587.916:2028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4962 comm="syz.5.453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f88313bd169 code=0x7ffc0000 [ 70.062133][ T30] audit: type=1326 audit(1741765587.916:2029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4962 comm="syz.5.453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88313bd169 code=0x7ffc0000 [ 70.085773][ T30] audit: type=1326 audit(1741765587.916:2030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4962 comm="syz.5.453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f88313bd169 code=0x7ffc0000 [ 70.124336][ T4963] loop5: detected capacity change from 0 to 1024 [ 70.175587][ T4963] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.195755][ T4984] netlink: 'syz.1.457': attribute type 26 has an invalid length. [ 70.200358][ T4963] netlink: 'syz.5.453': attribute type 4 has an invalid length. [ 70.209067][ T4984] loop1: detected capacity change from 0 to 1024 [ 70.213705][ T4954] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.220266][ T4984] EXT4-fs: Ignoring removed orlov option [ 70.235311][ T4984] EXT4-fs: Ignoring removed nomblk_io_submit option [ 70.243409][ T4954] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4115: comm syz.3.452: Allocating blocks 385-513 which overlap fs metadata [ 70.263759][ T4954] EXT4-fs (loop3): pa ffff8881007a9690: logic 16, phys. 129, len 24 [ 70.271922][ T4954] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5366: group 0, free 0, pa_free 8 [ 70.287277][ T4954] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 28 [ 70.289427][ T4984] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.299700][ T4954] EXT4-fs (loop3): This should not happen!! Data will be lost [ 70.299700][ T4954] [ 70.299720][ T4954] EXT4-fs (loop3): Total free blocks count 0 [ 70.299735][ T4954] EXT4-fs (loop3): Free/Dirty block details [ 70.299748][ T4954] EXT4-fs (loop3): free_blocks=128 [ 70.338512][ T4954] EXT4-fs (loop3): dirty_blocks=0 [ 70.343645][ T4954] EXT4-fs (loop3): Block reservation details [ 70.349636][ T4954] EXT4-fs (loop3): i_reserved_data_blocks=0 [ 70.403535][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.474396][ T4053] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.612114][ T5025] netlink: 'syz.1.465': attribute type 6 has an invalid length. [ 70.712660][ T5039] loop0: detected capacity change from 0 to 1024 [ 70.748963][ T5039] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.772707][ T5039] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4115: comm syz.0.469: Allocating blocks 385-513 which overlap fs metadata [ 70.792046][ T5051] loop1: detected capacity change from 0 to 1024 [ 70.801808][ T5053] netlink: 'syz.3.473': attribute type 26 has an invalid length. [ 70.813122][ T5039] EXT4-fs (loop0): pa ffff8881007a9620: logic 16, phys. 129, len 24 [ 70.821242][ T5039] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5366: group 0, free 0, pa_free 8 [ 70.831577][ T3375] net_ratelimit: 4 callbacks suppressed [ 70.831592][ T3375] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 70.837560][ T5053] loop3: detected capacity change from 0 to 1024 [ 70.854273][ T5051] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.867050][ T5039] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 28 [ 70.879587][ T5039] EXT4-fs (loop0): This should not happen!! Data will be lost [ 70.879587][ T5039] [ 70.889296][ T5039] EXT4-fs (loop0): Total free blocks count 0 [ 70.895402][ T5039] EXT4-fs (loop0): Free/Dirty block details [ 70.901360][ T5039] EXT4-fs (loop0): free_blocks=128 [ 70.906496][ T5039] EXT4-fs (loop0): dirty_blocks=0 [ 70.911697][ T5039] EXT4-fs (loop0): Block reservation details [ 70.917697][ T5039] EXT4-fs (loop0): i_reserved_data_blocks=0 [ 70.937339][ T5053] EXT4-fs: Ignoring removed orlov option [ 70.943174][ T5053] EXT4-fs: Ignoring removed nomblk_io_submit option [ 70.947607][ T5043] netlink: 'syz.1.471': attribute type 4 has an invalid length. [ 70.982908][ T5053] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.084220][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.106487][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.175175][ T5092] loop2: detected capacity change from 0 to 512 [ 71.184416][ T5096] loop0: detected capacity change from 0 to 512 [ 71.201994][ T5096] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.234193][ T5092] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.243959][ T5096] ext4 filesystem being mounted at /103/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 71.268157][ T5100] netlink: 'syz.3.479': attribute type 6 has an invalid length. [ 71.271795][ T5092] ext4 filesystem being mounted at /85/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 71.287353][ T5107] __nla_validate_parse: 19 callbacks suppressed [ 71.287368][ T5107] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.484'. [ 71.365836][ T5115] loop1: detected capacity change from 0 to 1024 [ 71.381228][ T3452] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 71.403258][ T5115] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.420289][ T5115] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4115: comm syz.1.487: Allocating blocks 385-513 which overlap fs metadata [ 71.439764][ T5115] EXT4-fs (loop1): pa ffff8881007a9620: logic 16, phys. 129, len 24 [ 71.447864][ T5115] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5366: group 0, free 0, pa_free 8 [ 71.459668][ T5115] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 28 [ 71.472235][ T5115] EXT4-fs (loop1): This should not happen!! Data will be lost [ 71.472235][ T5115] [ 71.481924][ T5115] EXT4-fs (loop1): Total free blocks count 0 [ 71.487940][ T5115] EXT4-fs (loop1): Free/Dirty block details [ 71.493995][ T5115] EXT4-fs (loop1): free_blocks=128 [ 71.499130][ T5115] EXT4-fs (loop1): dirty_blocks=0 [ 71.504183][ T5115] EXT4-fs (loop1): Block reservation details [ 71.510222][ T5115] EXT4-fs (loop1): i_reserved_data_blocks=0 [ 71.574492][ T5137] loop1: detected capacity change from 0 to 1024 [ 71.593609][ T5137] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.608804][ T5140] netlink: 'syz.5.489': attribute type 26 has an invalid length. [ 71.618400][ T5140] netlink: 1196 bytes leftover after parsing attributes in process `syz.5.489'. [ 71.661557][ T5144] netlink: 40 bytes leftover after parsing attributes in process `syz.5.491'. [ 71.673716][ T5144] netlink: 12 bytes leftover after parsing attributes in process `syz.5.491'. [ 71.700379][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.938157][ T3375] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 72.045223][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.115312][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.367156][ T5174] loop3: detected capacity change from 0 to 1024 [ 72.388751][ T5174] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.413213][ T5183] validate_nla: 2 callbacks suppressed [ 72.413229][ T5183] netlink: 'syz.0.506': attribute type 6 has an invalid length. [ 72.460408][ T5185] loop2: detected capacity change from 0 to 1024 [ 72.468734][ T5188] loop0: detected capacity change from 0 to 2048 [ 72.476917][ T5185] EXT4-fs: inline encryption not supported [ 72.486395][ T5174] netlink: 'syz.3.503': attribute type 4 has an invalid length. [ 72.499304][ T5185] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 72.516839][ T5185] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 72.528796][ T5188] loop0: p1 < > p4 < > [ 72.548147][ T3001] loop0: p1 < > p4 < > [ 72.556065][ T5185] EXT4-fs error (device loop2): ext4_map_blocks:671: inode #3: block 2: comm syz.2.507: lblock 2 mapped to illegal pblock 2 (length 1) [ 72.605558][ T5185] EXT4-fs error (device loop2): ext4_map_blocks:671: inode #3: block 48: comm syz.2.507: lblock 0 mapped to illegal pblock 48 (length 1) [ 72.632046][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.632354][ T5185] EXT4-fs error (device loop2): ext4_acquire_dquot:6927: comm syz.2.507: Failed to acquire dquot type 0 [ 72.654182][ T5185] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5838: Corrupt filesystem [ 72.665492][ T5185] EXT4-fs error (device loop2): ext4_evict_inode:256: inode #11: comm syz.2.507: mark_inode_dirty error [ 72.677016][ T5185] EXT4-fs warning (device loop2): ext4_evict_inode:259: couldn't mark inode dirty (err -117) [ 72.688139][ T5185] EXT4-fs (loop2): 1 orphan inode deleted [ 72.694265][ T5185] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.706383][ T51] EXT4-fs error (device loop2): ext4_map_blocks:671: inode #3: block 1: comm kworker/u8:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 72.733086][ T51] EXT4-fs error (device loop2): ext4_release_dquot:6950: comm kworker/u8:3: Failed to release dquot type 0 [ 72.754461][ T5185] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: none. [ 72.808707][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.818843][ T5211] loop3: detected capacity change from 0 to 1024 [ 72.836272][ T5211] EXT4-fs: inline encryption not supported [ 72.852416][ T5211] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 72.900794][ T5211] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 72.929481][ T5218] loop2: detected capacity change from 0 to 2048 [ 72.962405][ T5211] EXT4-fs error (device loop3): ext4_map_blocks:671: inode #3: block 2: comm syz.3.509: lblock 2 mapped to illegal pblock 2 (length 1) [ 72.980348][ T3375] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 72.990187][ T5229] netlink: 1196 bytes leftover after parsing attributes in process `syz.5.519'. [ 72.991079][ T5218] loop2: p1 < > p4 < > [ 73.030613][ T5211] EXT4-fs error (device loop3): ext4_map_blocks:671: inode #3: block 48: comm syz.3.509: lblock 0 mapped to illegal pblock 48 (length 1) [ 73.045050][ T5226] netlink: 'syz.0.518': attribute type 6 has an invalid length. [ 73.061411][ T3294] udevd[3294]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 73.072637][ T3889] udevd[3889]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 73.084165][ T5211] EXT4-fs error (device loop3): ext4_acquire_dquot:6927: comm syz.3.509: Failed to acquire dquot type 0 [ 73.116696][ T3294] udevd[3294]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 73.127848][ T5235] netlink: 40 bytes leftover after parsing attributes in process `syz.5.522'. [ 73.128800][ T3889] udevd[3889]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 73.142382][ T5211] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5838: Corrupt filesystem [ 73.156262][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 73.170497][ T5235] netlink: 12 bytes leftover after parsing attributes in process `syz.5.522'. [ 73.182353][ T5236] loop0: detected capacity change from 0 to 1024 [ 73.193173][ T5211] EXT4-fs error (device loop3): ext4_evict_inode:256: inode #11: comm syz.3.509: mark_inode_dirty error [ 73.211687][ T5236] EXT4-fs: inline encryption not supported [ 73.218555][ T5236] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 73.228974][ T5211] EXT4-fs warning (device loop3): ext4_evict_inode:259: couldn't mark inode dirty (err -117) [ 73.240160][ T5236] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 73.256979][ T5211] EXT4-fs (loop3): 1 orphan inode deleted [ 73.269376][ T5211] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.301418][ T5236] EXT4-fs error (device loop0): ext4_map_blocks:671: inode #3: block 2: comm syz.0.524: lblock 2 mapped to illegal pblock 2 (length 1) [ 73.328130][ T51] EXT4-fs error (device loop3): ext4_map_blocks:671: inode #3: block 1: comm kworker/u8:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 73.342742][ T5236] EXT4-fs error (device loop0): ext4_map_blocks:671: inode #3: block 48: comm syz.0.524: lblock 0 mapped to illegal pblock 48 (length 1) [ 73.344593][ T51] EXT4-fs error (device loop3): ext4_release_dquot:6950: comm kworker/u8:3: Failed to release dquot type 0 [ 73.371518][ T5236] EXT4-fs error (device loop0): ext4_acquire_dquot:6927: comm syz.0.524: Failed to acquire dquot type 0 [ 73.387691][ T5236] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5838: Corrupt filesystem [ 73.414139][ T5236] EXT4-fs error (device loop0): ext4_evict_inode:256: inode #11: comm syz.0.524: mark_inode_dirty error [ 73.428122][ T5236] EXT4-fs warning (device loop0): ext4_evict_inode:259: couldn't mark inode dirty (err -117) [ 73.428122][ T5211] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: none. [ 73.428202][ T5236] EXT4-fs (loop0): 1 orphan inode deleted [ 73.428505][ T5236] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.466761][ T51] EXT4-fs error (device loop0): ext4_map_blocks:671: inode #3: block 1: comm kworker/u8:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 73.467058][ T51] EXT4-fs error (device loop0): ext4_release_dquot:6950: comm kworker/u8:3: Failed to release dquot type 0 [ 73.471222][ T5236] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: none. [ 73.484517][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.484896][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.598001][ T5260] loop3: detected capacity change from 0 to 1024 [ 73.624038][ T5262] bond1: entered promiscuous mode [ 73.629166][ T5262] bond1: entered allmulticast mode [ 73.629469][ T5260] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.634807][ T5262] 8021q: adding VLAN 0 to HW filter on device bond1 [ 73.656766][ T5262] bond1 (unregistering): Released all slaves [ 73.666970][ T5264] netlink: 'syz.1.534': attribute type 6 has an invalid length. [ 73.676170][ T5269] netlink: 'syz.0.535': attribute type 16 has an invalid length. [ 73.684061][ T5269] netlink: 'syz.0.535': attribute type 17 has an invalid length. [ 73.692318][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.703939][ T5269] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 74.021490][ T3377] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 74.550368][ T5303] netlink: 'syz.5.548': attribute type 6 has an invalid length. [ 74.595786][ T5305] bond1: entered promiscuous mode [ 74.600997][ T5305] bond1: entered allmulticast mode [ 74.606337][ T5305] 8021q: adding VLAN 0 to HW filter on device bond1 [ 74.616530][ T5305] bond1 (unregistering): Released all slaves [ 74.631835][ T5307] netlink: 'syz.5.549': attribute type 16 has an invalid length. [ 74.639705][ T5307] netlink: 'syz.5.549': attribute type 17 has an invalid length. [ 74.658557][ T5307] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 74.904357][ T30] kauditd_printk_skb: 1143 callbacks suppressed [ 74.904373][ T30] audit: type=1326 audit(1741765592.906:3165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5326 comm="syz.0.559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45e335d169 code=0x7ffc0000 [ 74.934322][ T30] audit: type=1326 audit(1741765592.906:3166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5326 comm="syz.0.559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45e335d169 code=0x7ffc0000 [ 74.934410][ T5325] loop1: detected capacity change from 0 to 1024 [ 74.964219][ T30] audit: type=1326 audit(1741765592.906:3167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5326 comm="syz.0.559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f45e335d169 code=0x7ffc0000 [ 74.974152][ T5327] netlink: 'syz.0.559': attribute type 6 has an invalid length. [ 74.987650][ T30] audit: type=1326 audit(1741765592.906:3168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5326 comm="syz.0.559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45e335d169 code=0x7ffc0000 [ 75.018651][ T30] audit: type=1326 audit(1741765592.906:3169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5326 comm="syz.0.559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45e335d169 code=0x7ffc0000 [ 75.044877][ T30] audit: type=1326 audit(1741765592.926:3170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5324 comm="syz.1.558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa80e6fd169 code=0x7ffc0000 [ 75.068372][ T30] audit: type=1326 audit(1741765592.926:3171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5324 comm="syz.1.558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa80e6fd169 code=0x7ffc0000 [ 75.085550][ T5325] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.091806][ T30] audit: type=1326 audit(1741765592.926:3172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5324 comm="syz.1.558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa80e6fd169 code=0x7ffc0000 [ 75.127620][ T30] audit: type=1326 audit(1741765592.926:3173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5324 comm="syz.1.558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa80e6fd169 code=0x7ffc0000 [ 75.151099][ T30] audit: type=1326 audit(1741765592.926:3174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5324 comm="syz.1.558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa80e6fd169 code=0x7ffc0000 [ 75.355507][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.437896][ T5338] loop0: detected capacity change from 0 to 1024 [ 75.453610][ T5338] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.511863][ T3375] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 75.573764][ T5343] loop1: detected capacity change from 0 to 1024 [ 75.583615][ T5343] EXT4-fs: inline encryption not supported [ 75.599303][ T5343] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 75.611791][ T5343] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 75.625164][ T5343] EXT4-fs error (device loop1): ext4_map_blocks:671: inode #3: block 2: comm syz.1.563: lblock 2 mapped to illegal pblock 2 (length 1) [ 75.668777][ T5343] EXT4-fs error (device loop1): ext4_map_blocks:671: inode #3: block 48: comm syz.1.563: lblock 0 mapped to illegal pblock 48 (length 1) [ 75.684499][ T5343] EXT4-fs error (device loop1): ext4_acquire_dquot:6927: comm syz.1.563: Failed to acquire dquot type 0 [ 75.697678][ T5343] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5838: Corrupt filesystem [ 75.707781][ T5343] EXT4-fs error (device loop1): ext4_evict_inode:256: inode #11: comm syz.1.563: mark_inode_dirty error [ 75.725516][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.736191][ T5343] EXT4-fs warning (device loop1): ext4_evict_inode:259: couldn't mark inode dirty (err -117) [ 75.747008][ T5343] EXT4-fs (loop1): 1 orphan inode deleted [ 75.754387][ T5343] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.771726][ T12] EXT4-fs error (device loop1): ext4_map_blocks:671: inode #3: block 1: comm kworker/u8:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 75.818577][ T12] EXT4-fs error (device loop1): ext4_release_dquot:6950: comm kworker/u8:0: Failed to release dquot type 0 [ 75.828130][ T5357] bond1: entered promiscuous mode [ 75.835235][ T5357] bond1: entered allmulticast mode [ 75.847044][ T5357] 8021q: adding VLAN 0 to HW filter on device bond1 [ 75.848600][ T5343] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: none. [ 75.868533][ T5357] bond1 (unregistering): Released all slaves [ 75.902165][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.922406][ T5361] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 75.929887][ T5366] netlink: 40 bytes leftover after parsing attributes in process `syz.5.573'. [ 75.939436][ T5365] netlink: 1196 bytes leftover after parsing attributes in process `syz.1.571'. [ 76.026286][ T5368] loop0: detected capacity change from 0 to 1024 [ 76.027588][ T5372] loop1: detected capacity change from 0 to 512 [ 76.033587][ T5368] EXT4-fs: inline encryption not supported [ 76.047488][ T5368] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 76.058158][ T5368] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 76.075485][ T5368] EXT4-fs error (device loop0): ext4_map_blocks:671: inode #3: block 2: comm syz.0.575: lblock 2 mapped to illegal pblock 2 (length 1) [ 76.092234][ T5368] EXT4-fs error (device loop0): ext4_map_blocks:671: inode #3: block 48: comm syz.0.575: lblock 0 mapped to illegal pblock 48 (length 1) [ 76.107054][ T5368] EXT4-fs error (device loop0): ext4_acquire_dquot:6927: comm syz.0.575: Failed to acquire dquot type 0 [ 76.121982][ T5372] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.149083][ T5368] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5838: Corrupt filesystem [ 76.158790][ T5368] EXT4-fs error (device loop0): ext4_evict_inode:256: inode #11: comm syz.0.575: mark_inode_dirty error [ 76.170342][ T5372] ext4 filesystem being mounted at /139/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.190548][ T5368] EXT4-fs warning (device loop0): ext4_evict_inode:259: couldn't mark inode dirty (err -117) [ 76.200900][ T5368] EXT4-fs (loop0): 1 orphan inode deleted [ 76.208130][ T5368] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.230911][ T3452] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 76.241843][ T5374] loop2: detected capacity change from 0 to 1024 [ 76.247821][ T405] EXT4-fs error (device loop0): ext4_map_blocks:671: inode #3: block 1: comm kworker/u8:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 76.262146][ T5374] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.264580][ T405] EXT4-fs error (device loop0): ext4_release_dquot:6950: comm kworker/u8:6: Failed to release dquot type 0 [ 76.288035][ T5368] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: none. [ 76.311397][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.387062][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.419329][ T5395] loop0: detected capacity change from 0 to 1024 [ 76.446793][ T5395] EXT4-fs: inline encryption not supported [ 76.456851][ T5395] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 76.468210][ T5395] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 76.487786][ T5395] EXT4-fs error (device loop0): ext4_map_blocks:671: inode #3: block 2: comm syz.0.584: lblock 2 mapped to illegal pblock 2 (length 1) [ 76.490876][ T5402] netlink: 40 bytes leftover after parsing attributes in process `syz.3.586'. [ 76.510975][ T5395] EXT4-fs error (device loop0): ext4_map_blocks:671: inode #3: block 48: comm syz.0.584: lblock 0 mapped to illegal pblock 48 (length 1) [ 76.514169][ T5399] bond1: entered promiscuous mode [ 76.526433][ T5395] EXT4-fs error (device loop0): ext4_acquire_dquot:6927: comm syz.0.584: Failed to acquire dquot type 0 [ 76.530138][ T5399] bond1: entered allmulticast mode [ 76.542527][ T5395] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5838: Corrupt filesystem [ 76.556496][ T5399] 8021q: adding VLAN 0 to HW filter on device bond1 [ 76.562479][ T5395] EXT4-fs error (device loop0): ext4_evict_inode:256: inode #11: comm syz.0.584: mark_inode_dirty error [ 76.574840][ T5395] EXT4-fs warning (device loop0): ext4_evict_inode:259: couldn't mark inode dirty (err -117) [ 76.582464][ T3375] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 76.585359][ T5395] EXT4-fs (loop0): 1 orphan inode deleted [ 76.595178][ T5399] bond1 (unregistering): Released all slaves [ 76.599548][ T5395] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.617124][ T12] EXT4-fs error (device loop0): ext4_map_blocks:671: inode #3: block 1: comm kworker/u8:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 76.633656][ T12] EXT4-fs error (device loop0): ext4_release_dquot:6950: comm kworker/u8:0: Failed to release dquot type 0 [ 76.654277][ T5395] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: none. [ 76.684024][ T5404] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 76.703941][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.847777][ T5424] netlink: 1196 bytes leftover after parsing attributes in process `syz.0.595'. [ 76.879203][ T5422] loop2: detected capacity change from 0 to 1024 [ 76.894454][ T5422] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.966575][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.003894][ T5429] netlink: 60 bytes leftover after parsing attributes in process `syz.1.597'. [ 77.014432][ T5429] netlink: 60 bytes leftover after parsing attributes in process `syz.1.597'. [ 77.059814][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.068915][ T5429] netlink: 60 bytes leftover after parsing attributes in process `syz.1.597'. [ 77.078352][ T5429] netlink: 60 bytes leftover after parsing attributes in process `syz.1.597'. [ 77.118037][ T5429] netlink: 60 bytes leftover after parsing attributes in process `syz.1.597'. [ 77.158967][ T5429] netlink: 60 bytes leftover after parsing attributes in process `syz.1.597'. [ 77.169195][ T5433] loop5: detected capacity change from 0 to 512 [ 77.188944][ T5433] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 77.226643][ T5433] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.236482][ T5445] bond1: entered promiscuous mode [ 77.242466][ T5433] ext4 filesystem being mounted at /68/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 77.244389][ T5445] bond1: entered allmulticast mode [ 77.261944][ T5433] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.274632][ T5445] 8021q: adding VLAN 0 to HW filter on device bond1 [ 77.293076][ T5445] bond1 (unregistering): Released all slaves [ 77.354207][ T5457] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 77.440769][ T5465] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 77.455815][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 77.499496][ T5468] loop1: detected capacity change from 0 to 1024 [ 77.533167][ T5471] netlink: 60 bytes leftover after parsing attributes in process `syz.2.612'. [ 77.542261][ T5468] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.556323][ T5471] netlink: 60 bytes leftover after parsing attributes in process `syz.2.612'. [ 77.567981][ T5468] validate_nla: 12 callbacks suppressed [ 77.567997][ T5468] netlink: 'syz.1.611': attribute type 4 has an invalid length. [ 77.624618][ T3377] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 77.661007][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.741644][ T5491] loop3: detected capacity change from 0 to 1024 [ 77.763159][ T5493] netlink: 'syz.0.618': attribute type 6 has an invalid length. [ 77.780626][ T5491] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.828876][ T5491] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4115: comm syz.3.620: Allocating blocks 385-513 which overlap fs metadata [ 77.858962][ T5501] bond1: entered promiscuous mode [ 77.863914][ T5491] EXT4-fs (loop3): pa ffff8881007a9700: logic 16, phys. 129, len 24 [ 77.864192][ T5501] bond1: entered allmulticast mode [ 77.872148][ T5491] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5366: group 0, free 0, pa_free 8 [ 77.887511][ T5491] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 28 [ 77.889406][ T5501] 8021q: adding VLAN 0 to HW filter on device bond1 [ 77.899891][ T5491] EXT4-fs (loop3): This should not happen!! Data will be lost [ 77.899891][ T5491] [ 77.916213][ T5491] EXT4-fs (loop3): Total free blocks count 0 [ 77.922244][ T5491] EXT4-fs (loop3): Free/Dirty block details [ 77.928160][ T5491] EXT4-fs (loop3): free_blocks=128 [ 77.933330][ T5491] EXT4-fs (loop3): dirty_blocks=0 [ 77.938382][ T5491] EXT4-fs (loop3): Block reservation details [ 77.944401][ T5491] EXT4-fs (loop3): i_reserved_data_blocks=0 [ 77.952483][ T5508] netlink: 'syz.1.623': attribute type 16 has an invalid length. [ 77.960315][ T5508] netlink: 'syz.1.623': attribute type 17 has an invalid length. [ 77.974396][ T5501] bond1 (unregistering): Released all slaves [ 77.991817][ T5508] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 78.034417][ T5513] loop2: detected capacity change from 0 to 1024 [ 78.081094][ T5513] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.108634][ T5511] netlink: 'syz.2.626': attribute type 4 has an invalid length. [ 78.211651][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.275169][ T5541] netlink: 'syz.1.637': attribute type 6 has an invalid length. [ 78.313655][ T5543] loop5: detected capacity change from 0 to 1024 [ 78.343188][ T5543] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.383221][ T5554] loop2: detected capacity change from 0 to 512 [ 78.391105][ T5543] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4115: comm syz.5.639: Allocating blocks 385-513 which overlap fs metadata [ 78.432405][ T5543] EXT4-fs (loop5): pa ffff8881007a9700: logic 16, phys. 129, len 24 [ 78.440513][ T5543] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5366: group 0, free 0, pa_free 8 [ 78.441586][ T5554] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.452307][ T5543] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 28 [ 78.475324][ T5543] EXT4-fs (loop5): This should not happen!! Data will be lost [ 78.475324][ T5543] [ 78.485045][ T5543] EXT4-fs (loop5): Total free blocks count 0 [ 78.487981][ T5554] ext4 filesystem being mounted at /110/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 78.491157][ T5543] EXT4-fs (loop5): Free/Dirty block details [ 78.507616][ T5543] EXT4-fs (loop5): free_blocks=128 [ 78.512819][ T5543] EXT4-fs (loop5): dirty_blocks=0 [ 78.512838][ T5543] EXT4-fs (loop5): Block reservation details [ 78.512853][ T5543] EXT4-fs (loop5): i_reserved_data_blocks=0 [ 78.655217][ T5572] loop1: detected capacity change from 0 to 1024 [ 78.664310][ T3377] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 78.679719][ T5575] loop5: detected capacity change from 0 to 1024 [ 78.691731][ T5575] EXT4-fs: dax option not supported [ 78.699134][ T5572] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.737769][ T5572] netlink: 'syz.1.647': attribute type 4 has an invalid length. [ 78.812291][ T5578] loop5: detected capacity change from 0 to 2048 [ 78.961500][ T5578] loop5: p1 < > p4 [ 78.977762][ T5578] loop5: p4 size 8388608 extends beyond EOD, truncated [ 79.068916][ T5586] 9pnet_fd: Insufficient options for proto=fd [ 79.162652][ T5594] loop1: detected capacity change from 0 to 1024 [ 79.194119][ T5594] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4115: comm syz.1.655: Allocating blocks 385-513 which overlap fs metadata [ 79.212199][ T5594] EXT4-fs (loop1): pa ffff8881007ae540: logic 16, phys. 129, len 24 [ 79.220394][ T5594] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5366: group 0, free 0, pa_free 8 [ 79.230568][ T5594] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 28 [ 79.243076][ T5594] EXT4-fs (loop1): This should not happen!! Data will be lost [ 79.243076][ T5594] [ 79.252815][ T5594] EXT4-fs (loop1): Total free blocks count 0 [ 79.258822][ T5594] EXT4-fs (loop1): Free/Dirty block details [ 79.264761][ T5594] EXT4-fs (loop1): free_blocks=128 [ 79.269907][ T5594] EXT4-fs (loop1): dirty_blocks=0 [ 79.274998][ T5594] EXT4-fs (loop1): Block reservation details [ 79.281058][ T5594] EXT4-fs (loop1): i_reserved_data_blocks=0 [ 79.335405][ T5599] loop2: detected capacity change from 0 to 2048 [ 79.360543][ T5599] loop2: p1 < > p4 < > [ 79.783256][ T5628] loop0: detected capacity change from 0 to 512 [ 79.807050][ T5634] loop1: detected capacity change from 0 to 1024 [ 79.818389][ T5628] ext4 filesystem being mounted at /144/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.867979][ T5634] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4115: comm syz.1.669: Allocating blocks 385-513 which overlap fs metadata [ 79.920018][ T30] kauditd_printk_skb: 1161 callbacks suppressed [ 79.920035][ T30] audit: type=1326 audit(1741765597.916:4327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5632 comm="syz.1.669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa80e6fd169 code=0x7ffc0000 [ 79.922026][ T5634] EXT4-fs (loop1): pa ffff8881007ae5b0: logic 16, phys. 129, len 24 [ 79.926350][ T30] audit: type=1326 audit(1741765597.916:4328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5632 comm="syz.1.669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa80e6fd169 code=0x7ffc0000 [ 79.926382][ T30] audit: type=1326 audit(1741765597.916:4329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5632 comm="syz.1.669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=328 compat=0 ip=0x7fa80e6fd169 code=0x7ffc0000 [ 79.949702][ T5634] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5366: group 0, free 0, pa_free 8 [ 80.017228][ T30] audit: type=1326 audit(1741765598.016:4330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5637 comm="syz.5.670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88313bd169 code=0x7ffc0000 [ 80.051879][ T5634] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 28 [ 80.062464][ T30] audit: type=1326 audit(1741765598.016:4331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5637 comm="syz.5.670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88313bd169 code=0x7ffc0000 [ 80.064286][ T5634] EXT4-fs (loop1): This should not happen!! Data will be lost [ 80.064286][ T5634] [ 80.097363][ T5634] EXT4-fs (loop1): Total free blocks count 0 [ 80.103431][ T5634] EXT4-fs (loop1): Free/Dirty block details [ 80.109345][ T5634] EXT4-fs (loop1): free_blocks=128 [ 80.114589][ T5634] EXT4-fs (loop1): dirty_blocks=0 [ 80.120001][ T5634] EXT4-fs (loop1): Block reservation details [ 80.126243][ T5634] EXT4-fs (loop1): i_reserved_data_blocks=0 [ 80.133892][ T30] audit: type=1326 audit(1741765598.136:4332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5632 comm="syz.1.669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa80e6fd169 code=0x7ffc0000 [ 80.157407][ T30] audit: type=1326 audit(1741765598.136:4333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5632 comm="syz.1.669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa80e6fd169 code=0x7ffc0000 [ 80.259333][ T5664] 9pnet_fd: Insufficient options for proto=fd [ 80.596432][ T5703] 9pnet_fd: Insufficient options for proto=fd [ 80.798330][ T5732] 9pnet_fd: Insufficient options for proto=fd [ 80.836509][ T5734] loop5: detected capacity change from 0 to 512 [ 80.904919][ T5734] ext4 filesystem being mounted at /86/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.025971][ T10] net_ratelimit: 4 callbacks suppressed [ 81.025989][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 81.080244][ T5752] bond1: entered promiscuous mode [ 81.085430][ T5752] bond1: entered allmulticast mode [ 81.091173][ T5752] 8021q: adding VLAN 0 to HW filter on device bond1 [ 81.101897][ T5752] bond1 (unregistering): Released all slaves [ 81.185339][ T5755] netlink: 'syz.2.713': attribute type 16 has an invalid length. [ 81.193165][ T5755] netlink: 'syz.2.713': attribute type 17 has an invalid length. [ 81.345228][ T5755] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 81.620241][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 81.654120][ T5762] __nla_validate_parse: 67 callbacks suppressed [ 81.654138][ T5762] netlink: 60 bytes leftover after parsing attributes in process `syz.0.716'. [ 81.669393][ T5762] netlink: 60 bytes leftover after parsing attributes in process `syz.0.716'. [ 81.687861][ T5762] netlink: 60 bytes leftover after parsing attributes in process `syz.0.716'. [ 81.706829][ T5762] netlink: 60 bytes leftover after parsing attributes in process `syz.0.716'. [ 81.716591][ T5765] netlink: 1196 bytes leftover after parsing attributes in process `syz.2.717'. [ 81.768912][ T5762] netlink: 60 bytes leftover after parsing attributes in process `syz.0.716'. [ 81.782018][ T3375] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 81.816735][ T5762] netlink: 60 bytes leftover after parsing attributes in process `syz.0.716'. [ 81.859413][ T5778] loop3: detected capacity change from 0 to 1024 [ 81.883315][ T5784] netlink: 1296 bytes leftover after parsing attributes in process `syz.5.723'. [ 81.891427][ T30] audit: type=1326 audit(1741765599.886:4334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5780 comm="syz.1.725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa80e6fd169 code=0x7ffc0000 [ 81.915736][ T30] audit: type=1326 audit(1741765599.886:4335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5780 comm="syz.1.725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa80e6fd169 code=0x7ffc0000 [ 81.945647][ T30] audit: type=1326 audit(1741765599.936:4336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5780 comm="syz.1.725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=4 compat=0 ip=0x7fa80e6fd169 code=0x7ffc0000 [ 81.985189][ T5788] bond1: entered promiscuous mode [ 81.990292][ T5788] bond1: entered allmulticast mode [ 82.016046][ T5788] 8021q: adding VLAN 0 to HW filter on device bond1 [ 82.033041][ T5781] loop1: detected capacity change from 0 to 2048 [ 82.058096][ T5788] bond1 (unregistering): Released all slaves [ 82.164162][ T5781] loop1: p1 < > p4 < > [ 82.173614][ T5794] loop0: detected capacity change from 0 to 2048 [ 82.376175][ T5804] netlink: 40 bytes leftover after parsing attributes in process `syz.5.733'. [ 82.552830][ T5821] netlink: 24 bytes leftover after parsing attributes in process `syz.1.740'. [ 82.658729][ T5821] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5821 comm=syz.1.740 [ 83.678409][ T2964] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 83.686941][ T3375] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 83.716514][ T3452] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 83.932004][ T5845] geneve0: entered allmulticast mode [ 83.960157][ T5845] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5845 comm=+}[@ [ 84.138575][ T5845] loop3: detected capacity change from 0 to 512 [ 84.185090][ T5845] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 84.247702][ T5845] EXT4-fs (loop3): orphan cleanup on readonly fs [ 84.292289][ T5845] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm +}[@: bg 0: block 248: padding at end of block bitmap is not set [ 84.336167][ T5868] bond1: entered promiscuous mode [ 84.341341][ T5868] bond1: entered allmulticast mode [ 84.346730][ T5868] 8021q: adding VLAN 0 to HW filter on device bond1 [ 84.356150][ T5845] EXT4-fs error (device loop3): ext4_acquire_dquot:6927: comm +}[@: Failed to acquire dquot type 1 [ 84.370875][ T5868] bond1 (unregistering): Released all slaves [ 84.372775][ T5872] netlink: 'syz.5.759': attribute type 16 has an invalid length. [ 84.378304][ T5845] EXT4-fs (loop3): 1 truncate cleaned up [ 84.384822][ T5872] netlink: 'syz.5.759': attribute type 17 has an invalid length. [ 84.408248][ T5875] loop1: detected capacity change from 0 to 1024 [ 84.415598][ T5875] EXT4-fs: inline encryption not supported [ 84.434075][ T5877] netlink: 'syz.0.760': attribute type 16 has an invalid length. [ 84.441890][ T5877] netlink: 'syz.0.760': attribute type 17 has an invalid length. [ 84.443599][ T5871] bond1: entered promiscuous mode [ 84.451659][ T5875] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 84.454868][ T5871] bond1: entered allmulticast mode [ 84.463823][ T5875] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 84.481355][ T5871] 8021q: adding VLAN 0 to HW filter on device bond1 [ 84.481935][ T5845] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 84.491366][ T5875] EXT4-fs error (device loop1): ext4_map_blocks:671: inode #3: block 2: comm syz.1.761: lblock 2 mapped to illegal pblock 2 (length 1) [ 84.513768][ T5871] bond1 (unregistering): Released all slaves [ 84.518919][ T5875] EXT4-fs error (device loop1): ext4_map_blocks:671: inode #3: block 48: comm syz.1.761: lblock 0 mapped to illegal pblock 48 (length 1) [ 84.535658][ T5875] EXT4-fs error (device loop1): ext4_acquire_dquot:6927: comm syz.1.761: Failed to acquire dquot type 0 [ 84.548416][ T5845] EXT4-fs error (device loop3): __ext4_remount:6738: comm +}[@: Abort forced by user [ 84.558373][ T5875] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5838: Corrupt filesystem [ 84.559575][ T5845] EXT4-fs (loop3): Remounting filesystem read-only [ 84.574557][ T5845] EXT4-fs (loop3): re-mounted 00000000-c0ff-ffff-0000-000000000000 r/w. Quota mode: writeback. [ 84.575726][ T5875] EXT4-fs error (device loop1): ext4_evict_inode:256: inode #11: comm syz.1.761: mark_inode_dirty error [ 84.586790][ T5845] ext4 filesystem being remounted at /157/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 84.606690][ T5872] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 84.671036][ T5875] EXT4-fs warning (device loop1): ext4_evict_inode:259: couldn't mark inode dirty (err -117) [ 84.681771][ T5875] EXT4-fs (loop1): 1 orphan inode deleted [ 84.698511][ T5877] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 84.714164][ T12] EXT4-fs error (device loop1): ext4_map_blocks:671: inode #3: block 1: comm kworker/u8:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 84.731222][ T12] EXT4-fs error (device loop1): ext4_release_dquot:6950: comm kworker/u8:0: Failed to release dquot type 0 [ 84.737134][ T5886] bond2: entered promiscuous mode [ 84.747873][ T5886] bond2: entered allmulticast mode [ 84.758351][ T3375] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 84.766671][ T5886] 8021q: adding VLAN 0 to HW filter on device bond2 [ 84.778025][ T5891] loop3: detected capacity change from 0 to 2048 [ 84.882744][ T5886] bond2 (unregistering): Released all slaves [ 84.892905][ T5875] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: none. [ 85.431050][ T5914] loop5: detected capacity change from 0 to 1024 [ 85.437723][ T5914] EXT4-fs: inline encryption not supported [ 85.446038][ T5914] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 85.463865][ T5914] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 85.499775][ T5920] loop1: detected capacity change from 0 to 512 [ 85.508119][ T5920] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 85.517329][ T5920] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 85.640421][ T5920] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 85.661680][ T5914] EXT4-fs error (device loop5): ext4_map_blocks:671: inode #3: block 2: comm syz.5.775: lblock 2 mapped to illegal pblock 2 (length 1) [ 85.687139][ T5920] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 85.703144][ T5914] __quota_error: 83 callbacks suppressed [ 85.703162][ T5914] Quota error (device loop5): qtree_write_dquot: dquota write failed [ 85.719354][ T5927] netlink: 'syz.2.777': attribute type 16 has an invalid length. [ 85.727190][ T5927] netlink: 'syz.2.777': attribute type 17 has an invalid length. [ 85.737489][ T5920] System zones: 0-2, 18-18, 34-35 [ 85.750093][ T30] audit: type=1326 audit(1741765603.746:4415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5919 comm="syz.1.776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa80e6fd169 code=0x7ffc0000 [ 85.773558][ T30] audit: type=1326 audit(1741765603.746:4416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5919 comm="syz.1.776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7fa80e6fd169 code=0x7ffc0000 [ 85.796991][ T30] audit: type=1326 audit(1741765603.746:4417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5919 comm="syz.1.776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa80e6fd169 code=0x7ffc0000 [ 85.820398][ T30] audit: type=1326 audit(1741765603.746:4418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5919 comm="syz.1.776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa80e6fd169 code=0x7ffc0000 [ 85.843779][ T30] audit: type=1326 audit(1741765603.746:4419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5919 comm="syz.1.776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fa80e6fd169 code=0x7ffc0000 [ 85.867186][ T30] audit: type=1326 audit(1741765603.746:4420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5919 comm="syz.1.776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa80e6fd169 code=0x7ffc0000 [ 85.882378][ T5914] EXT4-fs error (device loop5): ext4_map_blocks:671: inode #3: block 48: comm syz.5.775: lblock 0 mapped to illegal pblock 48 (length 1) [ 85.890524][ T30] audit: type=1326 audit(1741765603.746:4421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5919 comm="syz.1.776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7fa80e6fd169 code=0x7ffc0000 [ 85.916666][ T5924] bond1: entered promiscuous mode [ 85.927862][ T30] audit: type=1326 audit(1741765603.746:4422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5919 comm="syz.1.776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa80e6fd169 code=0x7ffc0000 [ 85.927898][ T30] audit: type=1326 audit(1741765603.746:4423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5919 comm="syz.1.776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7fa80e6fd169 code=0x7ffc0000 [ 85.932955][ T5924] bond1: entered allmulticast mode [ 85.977032][ T5914] EXT4-fs error (device loop5): ext4_acquire_dquot:6927: comm syz.5.775: Failed to acquire dquot type 0 [ 86.016063][ T5929] 9pnet_fd: Insufficient options for proto=fd [ 86.025774][ T5924] 8021q: adding VLAN 0 to HW filter on device bond1 [ 86.044279][ T5914] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5838: Corrupt filesystem [ 86.069893][ T5924] bond1 (unregistering): Released all slaves [ 86.081633][ T5914] EXT4-fs error (device loop5): ext4_evict_inode:256: inode #11: comm syz.5.775: mark_inode_dirty error [ 86.094151][ T5914] EXT4-fs warning (device loop5): ext4_evict_inode:259: couldn't mark inode dirty (err -117) [ 86.105204][ T5914] EXT4-fs (loop5): 1 orphan inode deleted [ 86.130079][ T37] EXT4-fs error (device loop5): ext4_map_blocks:671: inode #3: block 1: comm kworker/u8:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 86.152458][ T37] EXT4-fs error (device loop5): ext4_release_dquot:6950: comm kworker/u8:2: Failed to release dquot type 0 [ 86.171923][ T5940] loop0: detected capacity change from 0 to 1024 [ 86.178651][ T5940] EXT4-fs: inline encryption not supported [ 86.185826][ T5927] net_ratelimit: 5 callbacks suppressed [ 86.185836][ T5927] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 86.209151][ T5940] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 86.218610][ T5940] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 86.229928][ T5914] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: none. [ 86.282304][ T5940] EXT4-fs error (device loop0): ext4_map_blocks:671: inode #3: block 2: comm syz.0.783: lblock 2 mapped to illegal pblock 2 (length 1) [ 86.297372][ T5940] EXT4-fs error (device loop0): ext4_map_blocks:671: inode #3: block 48: comm syz.0.783: lblock 0 mapped to illegal pblock 48 (length 1) [ 86.306168][ T5944] netlink: 'syz.1.784': attribute type 6 has an invalid length. [ 86.312778][ T5940] EXT4-fs error (device loop0): ext4_acquire_dquot:6927: comm syz.0.783: Failed to acquire dquot type 0 [ 86.331836][ T5940] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5838: Corrupt filesystem [ 86.345407][ T5940] EXT4-fs error (device loop0): ext4_evict_inode:256: inode #11: comm syz.0.783: mark_inode_dirty error [ 86.358656][ T5940] EXT4-fs warning (device loop0): ext4_evict_inode:259: couldn't mark inode dirty (err -117) [ 86.369073][ T5940] EXT4-fs (loop0): 1 orphan inode deleted [ 86.381071][ T37] EXT4-fs error (device loop0): ext4_map_blocks:671: inode #3: block 1: comm kworker/u8:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 86.387890][ T5946] bond1: entered promiscuous mode [ 86.398058][ T37] EXT4-fs error (device loop0): ext4_release_dquot:6950: comm kworker/u8:2: Failed to release dquot type 0 [ 86.400391][ T5946] bond1: entered allmulticast mode [ 86.418295][ T5940] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: none. [ 86.448092][ T5946] 8021q: adding VLAN 0 to HW filter on device bond1 [ 86.518869][ T5946] bond1 (unregistering): Released all slaves [ 86.525982][ T5948] loop2: detected capacity change from 0 to 2048 [ 86.536861][ T5956] 9pnet_fd: Insufficient options for proto=fd [ 86.602727][ T5963] loop3: detected capacity change from 0 to 1024 [ 86.740583][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 86.822942][ T5975] __nla_validate_parse: 12 callbacks suppressed [ 86.822962][ T5975] netlink: 40 bytes leftover after parsing attributes in process `syz.3.796'. [ 86.912226][ T5977] bond2: entered promiscuous mode [ 86.917312][ T5977] bond2: entered allmulticast mode [ 86.922970][ T5977] 8021q: adding VLAN 0 to HW filter on device bond2 [ 86.933960][ T5977] bond2 (unregistering): Released all slaves [ 86.943316][ T5981] netlink: 'syz.3.798': attribute type 16 has an invalid length. [ 86.951128][ T5981] netlink: 'syz.3.798': attribute type 17 has an invalid length. [ 86.960916][ T5979] netlink: 'syz.1.797': attribute type 6 has an invalid length. [ 86.983055][ T3377] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 86.991595][ T2964] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 87.038386][ T5981] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 87.056677][ T5984] loop1: detected capacity change from 0 to 512 [ 87.088089][ T5984] ext4 filesystem being mounted at /189/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.380093][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 87.395251][ T3452] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 88.022372][ T3375] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 88.030686][ T3377] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 88.045866][ T6007] loop5: detected capacity change from 0 to 1024 [ 88.213872][ T6015] loop2: detected capacity change from 0 to 2048 [ 88.251625][ T6023] bond1: entered promiscuous mode [ 88.256771][ T6023] bond1: entered allmulticast mode [ 88.260862][ T6021] netlink: 24 bytes leftover after parsing attributes in process `syz.3.810'. [ 88.262478][ T6023] 8021q: adding VLAN 0 to HW filter on device bond1 [ 88.279202][ T6015] loop2: p1 < > p4 < > [ 88.284969][ T6023] bond1 (unregistering): Released all slaves [ 88.338260][ T6032] netlink: 1196 bytes leftover after parsing attributes in process `syz.5.814'. [ 88.382651][ T6029] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 88.393600][ T3889] udevd[3889]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 88.408095][ T3294] udevd[3294]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 88.408971][ T6021] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6021 comm=syz.3.810 [ 88.457668][ T6037] loop5: detected capacity change from 0 to 512 [ 88.473656][ T6037] ext4 filesystem being mounted at /113/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.592007][ T6039] bond1: entered promiscuous mode [ 88.597182][ T6039] bond1: entered allmulticast mode [ 88.602832][ T6039] 8021q: adding VLAN 0 to HW filter on device bond1 [ 88.614275][ T6039] bond1 (unregistering): Released all slaves [ 88.966962][ T6067] loop2: detected capacity change from 0 to 1024 [ 88.989770][ T6067] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4115: comm syz.2.827: Allocating blocks 385-513 which overlap fs metadata [ 89.024872][ T6067] EXT4-fs (loop2): pa ffff8881007ae620: logic 16, phys. 129, len 24 [ 89.033093][ T6067] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5366: group 0, free 0, pa_free 8 [ 89.039130][ T6071] loop0: detected capacity change from 0 to 1024 [ 89.066633][ T6067] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 28 [ 89.079115][ T6067] EXT4-fs (loop2): This should not happen!! Data will be lost [ 89.079115][ T6067] [ 89.088827][ T6067] EXT4-fs (loop2): Total free blocks count 0 [ 89.094940][ T6067] EXT4-fs (loop2): Free/Dirty block details [ 89.100944][ T6067] EXT4-fs (loop2): free_blocks=128 [ 89.106067][ T6067] EXT4-fs (loop2): dirty_blocks=0 [ 89.111156][ T6067] EXT4-fs (loop2): Block reservation details [ 89.117141][ T6067] EXT4-fs (loop2): i_reserved_data_blocks=0 [ 89.277181][ T6080] netlink: 1196 bytes leftover after parsing attributes in process `syz.2.830'. [ 89.339169][ T6082] bond1: entered promiscuous mode [ 89.344598][ T6082] bond1: entered allmulticast mode [ 89.350444][ T6082] 8021q: adding VLAN 0 to HW filter on device bond1 [ 89.359847][ T6082] bond1 (unregistering): Released all slaves [ 89.406241][ T6088] loop1: detected capacity change from 0 to 2048 [ 89.545961][ T6093] loop0: detected capacity change from 0 to 2048 [ 89.562222][ T6099] netlink: 40 bytes leftover after parsing attributes in process `syz.5.837'. [ 89.621247][ T6093] loop0: p1 < > p4 < > [ 89.630813][ T3001] loop0: p1 < > p4 < > [ 89.747784][ T6108] loop0: detected capacity change from 0 to 1024 [ 89.789798][ T6108] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4115: comm syz.0.841: Allocating blocks 385-513 which overlap fs metadata [ 89.806360][ T6114] netlink: 1196 bytes leftover after parsing attributes in process `syz.5.843'. [ 89.838304][ T6108] EXT4-fs (loop0): pa ffff8881007ae690: logic 16, phys. 129, len 24 [ 89.846505][ T6108] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5366: group 0, free 0, pa_free 8 [ 89.857051][ T6108] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 28 [ 89.869843][ T6108] EXT4-fs (loop0): This should not happen!! Data will be lost [ 89.869843][ T6108] [ 89.879711][ T6108] EXT4-fs (loop0): Total free blocks count 0 [ 89.885752][ T6108] EXT4-fs (loop0): Free/Dirty block details [ 89.891793][ T6108] EXT4-fs (loop0): free_blocks=128 [ 89.896981][ T6108] EXT4-fs (loop0): dirty_blocks=0 [ 89.902194][ T6108] EXT4-fs (loop0): Block reservation details [ 89.908185][ T6108] EXT4-fs (loop0): i_reserved_data_blocks=0 [ 90.012043][ T6130] netlink: 1296 bytes leftover after parsing attributes in process `syz.0.848'. [ 90.214455][ T6136] netlink: 40 bytes leftover after parsing attributes in process `syz.0.850'. [ 90.352483][ T6138] bond1: entered promiscuous mode [ 90.357626][ T6138] bond1: entered allmulticast mode [ 90.364708][ T6138] 8021q: adding VLAN 0 to HW filter on device bond1 [ 90.377231][ T6138] bond1 (unregistering): Released all slaves [ 90.399174][ T6140] validate_nla: 4 callbacks suppressed [ 90.399188][ T6140] netlink: 'syz.0.852': attribute type 16 has an invalid length. [ 90.412505][ T6140] netlink: 'syz.0.852': attribute type 17 has an invalid length. [ 90.754163][ T30] kauditd_printk_skb: 528 callbacks suppressed [ 90.754180][ T30] audit: type=1326 audit(1741765608.756:4947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6149 comm="syz.5.856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88313bd169 code=0x7ffc0000 [ 90.786363][ T30] audit: type=1326 audit(1741765608.786:4948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6149 comm="syz.5.856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88313bd169 code=0x7ffc0000 [ 90.829426][ T6152] loop2: detected capacity change from 0 to 2048 [ 90.836876][ T30] audit: type=1326 audit(1741765608.796:4949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6149 comm="syz.5.856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f88313bd169 code=0x7ffc0000 [ 90.860301][ T30] audit: type=1326 audit(1741765608.796:4950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6149 comm="syz.5.856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88313bd169 code=0x7ffc0000 [ 90.883780][ T30] audit: type=1326 audit(1741765608.796:4951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6149 comm="syz.5.856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f88313bd169 code=0x7ffc0000 [ 90.907229][ T30] audit: type=1326 audit(1741765608.796:4952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6149 comm="syz.5.856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88313bd169 code=0x7ffc0000 [ 90.930791][ T30] audit: type=1326 audit(1741765608.796:4953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6149 comm="syz.5.856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f88313bd169 code=0x7ffc0000 [ 90.954122][ T30] audit: type=1326 audit(1741765608.796:4954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6149 comm="syz.5.856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88313bd169 code=0x7ffc0000 [ 90.977453][ T30] audit: type=1326 audit(1741765608.796:4955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6149 comm="syz.5.856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f88313bd169 code=0x7ffc0000 [ 91.000834][ T30] audit: type=1326 audit(1741765608.796:4956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6149 comm="syz.5.856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88313bd169 code=0x7ffc0000 [ 91.029534][ T6155] loop3: detected capacity change from 0 to 1024 [ 91.040330][ T6152] loop2: p1 < > p4 < > [ 91.064726][ T6155] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4115: comm syz.3.858: Allocating blocks 385-513 which overlap fs metadata [ 91.082748][ T3001] loop2: p1 < > p4 < > [ 91.089501][ T6155] EXT4-fs (loop3): pa ffff8881007ae690: logic 16, phys. 129, len 24 [ 91.097744][ T6155] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5366: group 0, free 0, pa_free 8 [ 91.120498][ T6155] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 28 [ 91.132979][ T6155] EXT4-fs (loop3): This should not happen!! Data will be lost [ 91.132979][ T6155] [ 91.142817][ T6155] EXT4-fs (loop3): Total free blocks count 0 [ 91.148985][ T6155] EXT4-fs (loop3): Free/Dirty block details [ 91.154931][ T6155] EXT4-fs (loop3): free_blocks=128 [ 91.160066][ T6155] EXT4-fs (loop3): dirty_blocks=0 [ 91.165122][ T6155] EXT4-fs (loop3): Block reservation details [ 91.171221][ T6155] EXT4-fs (loop3): i_reserved_data_blocks=0 [ 91.186349][ T3889] udevd[3889]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 91.197635][ T3294] udevd[3294]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 91.220091][ T6163] netlink: 1296 bytes leftover after parsing attributes in process `syz.2.860'. [ 91.229383][ T10] net_ratelimit: 17 callbacks suppressed [ 91.229402][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 91.363584][ T3889] ================================================================== [ 91.363936][ T3294] udevd[3294]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 91.371682][ T3889] BUG: KCSAN: data-race in generic_fillattr / touch_atime [ 91.388544][ T3889] [ 91.390878][ T3889] read to 0xffff888118c300f0 of 4 bytes by task 3294 on cpu 0: [ 91.398448][ T3889] generic_fillattr+0x16f/0x330 [ 91.403339][ T3889] shmem_getattr+0x17b/0x200 [ 91.407977][ T3889] vfs_getattr+0x172/0x1b0 [ 91.412410][ T3889] vfs_fstatat+0xa7/0x130 [ 91.416761][ T3889] __se_sys_newfstatat+0x58/0x260 [ 91.421886][ T3889] __x64_sys_newfstatat+0x55/0x70 [ 91.426919][ T3889] x64_sys_call+0x236d/0x2dc0 [ 91.431613][ T3889] do_syscall_64+0xc9/0x1c0 [ 91.436138][ T3889] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.442067][ T3889] [ 91.444395][ T3889] write to 0xffff888118c300f0 of 4 bytes by task 3889 on cpu 1: [ 91.452031][ T3889] touch_atime+0x1f3/0x350 [ 91.456465][ T3889] shmem_file_read_iter+0x46a/0x540 [ 91.461681][ T3889] vfs_read+0x5cc/0x6f0 [ 91.465848][ T3889] ksys_read+0xe8/0x1b0 [ 91.470016][ T3889] __x64_sys_read+0x42/0x50 [ 91.474534][ T3889] x64_sys_call+0x2874/0x2dc0 [ 91.479219][ T3889] do_syscall_64+0xc9/0x1c0 [ 91.483739][ T3889] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.489645][ T3889] [ 91.491971][ T3889] value changed: 0x15fdaff5 -> 0x161554bb [ 91.497688][ T3889] [ 91.500015][ T3889] Reported by Kernel Concurrency Sanitizer on: [ 91.506161][ T3889] CPU: 1 UID: 0 PID: 3889 Comm: udevd Not tainted 6.14.0-rc6-syzkaller-00007-g0b46b049d6ec #0 [ 91.516408][ T3889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 91.526464][ T3889] ================================================================== [ 91.674232][ T3889] udevd[3889]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 92.020350][ T3377] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 92.055585][ T6169] loop3: detected capacity change from 0 to 1024 [ 92.182797][ T3375] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 92.820214][ T1040] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 93.060444][ T1040] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 93.068638][ T3377] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 93.224687][ T2964] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 94.100117][ T2964] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 94.263679][ T3377] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 95.060309][ T1040] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 96.344753][ T3377] net_ratelimit: 5 callbacks suppressed [ 96.344767][ T3377] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 96.980582][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 97.221261][ T3377] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 97.393046][ T2964] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 97.620119][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 97.620570][ T1040] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 98.260674][ T3377] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 98.432026][ T2964] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 98.900283][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 99.140107][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog