last executing test programs: 1m18.590125547s ago: executing program 1 (id=25): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x41}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r0, 0x0, 0x401}, 0x11) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a31000000002c0003800800014000000000180003801400010076657468315f746f5f626f6e6400000008000240000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e657665300000000000000000001400010076657468315f746f5f626f6e64000000080002"], 0x10c}}, 0x0) 1m18.495771998s ago: executing program 1 (id=28): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r1}, 0x8) r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x32, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000380)='kfree\x00', r3, 0x0, 0x3}, 0x18) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r4, 0x0, 0x4, &(0x7f0000000080)="441f", 0x2) 1m18.495368548s ago: executing program 1 (id=29): syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) r5 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_DISCONNECT_CLAIM(r5, 0x8108551b, &(0x7f0000000000)={0x0, 0x0, "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"}) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) 1m17.595652846s ago: executing program 1 (id=37): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000002c0)='./file0\x00', 0x10, &(0x7f0000000600), 0x1, 0x59d, &(0x7f0000001100)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000001700000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r2 = syz_io_uring_setup(0x7540, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000200)=0x0) r4 = syz_io_uring_setup(0x414, &(0x7f0000000400)={0x0, 0x0, 0x40}, &(0x7f00000003c0)=0x0, &(0x7f0000001480)) syz_io_uring_submit(r5, r3, &(0x7f00000001c0)=@IORING_OP_MSG_RING={0x28, 0x0, 0x0, r4, 0x0, 0x0}) io_uring_enter(r2, 0x2003, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x8, 0xf9, 0x7ffc1ffb}]}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={&(0x7f0000000080), 0xc, &(0x7f0000000200)={&(0x7f0000000180)=@gettfilter={0x5c, 0x2e, 0x200, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x4, 0x2}, {0xe, 0xc}, {0x6, 0xfff2}}, [{0x8, 0xb, 0x7}, {0x8, 0xb, 0x2}, {0x8, 0xb, 0x6}, {0x8, 0xb, 0x4}, {0x8, 0xb, 0x4}, {0x8, 0xb, 0xffff}, {0x8, 0xb, 0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4040}, 0x34044811) r7 = syz_clone(0xa0000000, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = getpgid(0x0) kcmp(r7, r8, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) readahead(r0, 0x2, 0x9) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r9, 0x84, 0x1e, &(0x7f0000000000)=0x29a, 0x4) 1m16.732434493s ago: executing program 1 (id=49): semtimedop(0x0, &(0x7f0000000180)=[{0x2, 0x4, 0x1800}], 0x1, 0x0) semop(0x0, &(0x7f00000000c0)=[{0x4, 0x2}, {0x2}], 0x2) semop(0x0, &(0x7f0000001240)=[{0x0, 0x7}, {0x2, 0x0, 0x2000}], 0x2) semctl$GETZCNT(0x0, 0x2, 0xf, &(0x7f00000002c0)=""/67) 1m14.486116088s ago: executing program 1 (id=60): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffff7, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) socket$packet(0x11, 0x3, 0x300) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x3, @ipv4={'\x00', '\xff\xff', @empty}, 0x4}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000000)=0x7fffffff, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) clock_getres(0x7c80fe59fa833483, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x40}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) io_cancel(0x0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x8, 0xd, r0, &(0x7f0000000800)="363388737ddd3dd13ec469969cd1c59aba0aba2e3d9b73effcd06a4eac123a6f32f8fc51a1790b54c34328bce85af4cbd544295b276fb6f7edb2f2431fd324275fc7acbff2f32d", 0x47, 0x4, 0x0, 0x3}, &(0x7f0000000900)) 1m14.448293898s ago: executing program 32 (id=60): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000bc0)=ANY=[@ANYBLOB="b7000000df000000bfa300000000000007030000f0ffffff720af0fff8ffffff71a4f0ff000000005d040200000000001d400500000000004704000001ed000062030000000000003f440000000000007a0a00fe00ffffffd704000020000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710e4d58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00c37dfca3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebba2c598b4fc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a1074649c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c0dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6acdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20de2d9b0c35608d402ccdd9069bd50b994fda7a960512318a969ad6206b6c5de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c0356916f9862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c3bfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fed000000007baa5b6a686b50f0937f778af083e055f6138a757ebd0ed93517a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe45ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c25000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca485683252b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a0032f37ff559be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee07751532d5e7d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a093189af4967064878a6404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e2fa3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef907000000f01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e015cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130b51d6c9b94c5513df2d85e8c01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb581012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef670000000000000000ba470bfe62fe2933082149d42e8a000000000000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffff7, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) socket$packet(0x11, 0x3, 0x300) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x3, @ipv4={'\x00', '\xff\xff', @empty}, 0x4}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000000)=0x7fffffff, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) clock_getres(0x7c80fe59fa833483, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x40}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) io_cancel(0x0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x8, 0xd, r0, &(0x7f0000000800)="363388737ddd3dd13ec469969cd1c59aba0aba2e3d9b73effcd06a4eac123a6f32f8fc51a1790b54c34328bce85af4cbd544295b276fb6f7edb2f2431fd324275fc7acbff2f32d", 0x47, 0x4, 0x0, 0x3}, &(0x7f0000000900)) 3.338210414s ago: executing program 2 (id=920): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x1, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b7040000000000008500000001000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x2}, 0x18) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/pm_wakeup_irq', 0x0, 0xb) r4 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000001880)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000200000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f0000001600)={r3, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) 3.252506866s ago: executing program 2 (id=922): r0 = socket(0x10, 0x803, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xd9}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000007000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r2}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$qrtrtun(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0xffffffff, 0x0, 0x0, 0x4, 0x2, 0x1, 0x4}}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x9, 0xff, 0x0, 0x0, 0x0, 0x3}}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x100}) 3.159913838s ago: executing program 2 (id=924): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="ff0000001900010000bfea0010000000e00000010000000000000000086251f98cb5350c4b796a81083d333b000000008c1414bb00000000bb0000000000000c", @ANYRES16=r0, @ANYRES32=r0, @ANYRESHEX=r0], 0x23c}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x7, 0x4, 0x208, 0x21, 0x20000}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYRES64], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r2}, 0x18) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000008c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0, r4, 0x0, 0x7ffffffe, 0x4000}}, 0x20) socket(0x2d, 0x3, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ff9}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x20, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x4, &(0x7f0000000080)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEAUTHENTICATE(r5, 0x0, 0x4040000) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYRES8], &(0x7f0000000100)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000780)='mm_page_free\x00', r7}, 0x18) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42073, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) r8 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r8, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x11) rt_sigaction(0x40, 0x0, 0x0, 0x8, &(0x7f0000000540)) 2.326372215s ago: executing program 2 (id=947): sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="000425bd70000400000055000000"], 0x14}, 0x1, 0x0, 0x0, 0x240440d1}, 0x10000) r0 = syz_usb_connect(0x3, 0x1c, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)={0xffffffffffffffff, 0xffffffffffffffff}) lsetxattr$security_capability(&(0x7f0000000080)='./cgroup/cgroup.procs\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) lchown(&(0x7f0000000000)='./cgroup/cgroup.procs\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0x7}, 0x18) r4 = gettid() sendmsg$unix(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000640)='Q', 0x1}], 0x1, &(0x7f0000001040)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r4, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r2, @ANYRES32=r1, @ANYRES32=r2, @ANYRES32=r1, @ANYRES8, @ANYBLOB="1c000000000000000100000402000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYRES64=r0, @ANYRES32=r1, @ANYBLOB="0000000018"], 0xa0}, 0x4004881) socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000100)={0x1d, r6, 0x2, {0x3}}, 0x18) write$evdev(0xffffffffffffffff, &(0x7f0000000040), 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r5) pipe(&(0x7f0000000040)) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='kfree\x00', r8, 0x0, 0x8000000000000}, 0x18) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000680)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@block_validity}]}, 0x0, 0x46c, &(0x7f0000000bc0)="$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") 1.272338435s ago: executing program 0 (id=961): perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x401}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) syz_usb_connect$cdc_ncm(0x5, 0xf3, &(0x7f0000000540)=ANY=[], 0x0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000040)='hugetlbfs\x00', 0x0, &(0x7f0000000000)='gid=\x8c\xbcnk]\'') close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x100000000000000) 1.224666416s ago: executing program 3 (id=962): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\v\x00\x00\x00\a\x00\x00\x00\b\x00\x00\x00\b'], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x800, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x400}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x58, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x1}, {}, {0x7, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x28, 0x2, [@TCA_FLOW_EMATCHES={0x24, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0xfffa, 0x7, 0x8001}, {{0x2, 0x0, 0x1}, {0x3, 0x0, 0x1, 0x1}}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}]}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) 1.190896927s ago: executing program 4 (id=964): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x3, &(0x7f0000000840)=ANY=[@ANYRESHEX], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000300)='snd_soc_jack_notify\x00', r0}, 0x18) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/timers\x00', 0x0, 0x0) close(r1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getpeername$netlink(r1, &(0x7f0000000180), &(0x7f0000000240)=0xc) bind$bt_hci(r2, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r4}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r6, 0x0, 0x3}, 0x18) sendto$inet(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffffffffffe58, 0x2000c094, 0x0, 0xffffffe6) r7 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) 1.175694887s ago: executing program 3 (id=965): syz_mount_image$msdos(&(0x7f0000000080), &(0x7f00000002c0)='./file0\x00', 0x1000000, &(0x7f0000000880)=ANY=[@ANYBLOB="6e6f646f74732c646973636172642c6e6f646f74732c6e6f646f74732c6e6f646f74732c646973636172642c6e6f646f74732c6e6f646f74732c636865636b3d72656c617865642c00b5e6c35bd073685011dc2d194e94b5d25354c9718ecdc521191ffacf84f1873ec2758a87c69b22a110158faf4f36880274b3a0446fc13d9bd52197a6dd4fa73490347e9da26db0d02cdafe75530f5972b58cbc65ec398fc1f732dd188b9d543ae0ca77b54f216c7d233aa9ca2b78079ae13cfb3e20b76eb7f48733e7ec394b2258bafc61b6368203f2702017023386bb20bf6e86788ee068dfac615d1a762a68d2310e592e"], 0x1, 0x11f1, &(0x7f0000001240)="$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") bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r2, &(0x7f0000000740)="cc", 0x1) sendfile(r2, r1, 0x0, 0x7ffff000) 1.143962337s ago: executing program 4 (id=966): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0b00000007000000010001004900000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r1, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="78000000070a010200000000000000000a0000080900010073797a31000000005800048054000180090001006d6e74610000000044000280080001400000000c08000340000000000800034000000017080001400000000308000240000000230800014000000012080002400000001808"], 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x44000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r3) sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) sendmsg$tipc(r0, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, &(0x7f0000004340)=[{&(0x7f0000000f00)="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", 0xd24}, {0x0, 0x4000}, {0x0, 0x21}, {0x0}, {&(0x7f00000020c0)}], 0x5}, 0x0) 1.124224618s ago: executing program 4 (id=967): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b7"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r1, 0x0, 0x5}, 0x18) syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000980)='./file0\x00', 0x3000010, &(0x7f0000000100)={[{@resuid}, {@nobh}]}, 0x1, 0x519, &(0x7f00000009c0)="$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") bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0a000000040000000400000006"], 0x50) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x71, 0x4004, @fd_index=0x3, 0xb, &(0x7f0000000280)=[{0x0}], 0x1, 0x1e, 0x0, {0x2}}) r2 = syz_open_dev$sg(&(0x7f0000000240), 0x0, 0x48202) ioctl$SCSI_IOCTL_GET_PCI(r2, 0x5393, &(0x7f0000000000)) 1.118900368s ago: executing program 3 (id=968): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000200)='sys_enter\x00', r0}, 0x10) shmget$private(0x200000000000000, 0x4000, 0x40, &(0x7f0000ffc000/0x4000)=nil) 1.03260322s ago: executing program 3 (id=969): r0 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x800000000003}, 0x1100, 0x5dd8, 0x0, 0x3, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x23}, 0x41) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0xb, 0x518, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20007, 0xc8, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat(0xffffffffffffff9c, 0x0, 0x101842, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000001100000095"], &(0x7f0000002280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98,\xc8\x18E/\x8c\x1a\xe3\xbd') openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r7, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x3bf, 0x4, 0x14a}}) ioctl$TCSETS2(r7, 0x402c542b, 0x0) ioctl$TIOCL_PASTESEL(r7, 0x541c, &(0x7f0000000000)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x3a) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000030000008500000043000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000dfff75390000000000000000850000007d00000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001f00)={0x11, 0x2c, &(0x7f0000001cc0)=ANY=[@ANYBLOB="1800000001000000000000000800000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000001838000004000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000018120000", @ANYRES32=r1, @ANYBLOB="0000000000020000b703000000000000850000000c000000b70000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000025071000f2ffffff18520000060000000000000000000000182a0000", @ANYRES32=r1, @ANYBLOB="000000000200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000000000008500000086000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000540)='syzkaller\x00', 0x3, 0x5e, &(0x7f0000000580)=""/94, 0x41000, 0x1c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001e40)={0x2, 0x0, 0x62022e2f, 0x8}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001e80)=[r1, r1, r1, r1], &(0x7f0000001ec0), 0x10, 0x1000}, 0x94) 874.782543ms ago: executing program 4 (id=970): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x80, 0x5, 0x7fff0003}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000100)) (fail_nth: 13) 584.310829ms ago: executing program 2 (id=972): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = socket(0xa, 0x3, 0x3a) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = mq_open(&(0x7f0000000480)='!sel\x00\x00\x00\x10\x00\x00\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x00', 0x6e93ebbbcc0884f2, 0x196, &(0x7f0000000440)={0x2000000000002000, 0x1, 0x56, 0x3}) mq_timedsend(r2, 0x0, 0x0, 0x9, 0x0) mq_timedreceive(r2, &(0x7f0000000880)=""/202, 0xca, 0x100000000000000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000003c0)=ANY=[@ANYRES8, @ANYBLOB="0000000000000008b70383ec72f3bbdd2a49b112000000000000850000001b000052b7"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0xfc}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_GET(0xffffffffffffffff, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040), 0x208e24b) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002f40)={&(0x7f0000000c80)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000009000000020000000200009301000000060000000200000000000000005f615f2e2e3000bea787df836e7f6967baa0ad9cfd1ec1c48015a617f1f814b271df8a5fc1f52cc708f858b35da3f85d567b4ad47b1e426803178f3d3c21e52b14a13fa8f4d9cb8f6571c225040ada4776ddd4de3ed5c8c1689cb7c31a3b209c397b8b846c72e14c559dbd1dc2912e702099ab4ad4a82201c5f5eda7a885f69dadb959e41b3f3f1e3c9ccf5b24ef97551e89b9f1e9e8b882e4ea1f4b41aa99bf7d4a6c6dbe32d8badc3d994e399a132dd171507f208312463083b8b9105beee9f6"], &(0x7f0000002e40)=""/217, 0x45, 0xd9, 0x1, 0x6}, 0x28) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, &(0x7f0000000040), &(0x7f00000000c0)=0x68) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000840)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r4}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x8, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401}, 0x94) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000480)='kfree\x00', r5, 0x0, 0x7}, 0x18) r6 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000200)) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) 583.923319ms ago: executing program 4 (id=973): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0xb76e}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x800, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200a}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0, r2}, 0x18) r3 = socket$inet_sctp(0x2, 0x5, 0x84) close(r3) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)='F', 0x1}], 0x1, &(0x7f00000000c0)=[@sndinfo={0x20, 0x84, 0x2, {0xa, 0x4, 0x28, 0x200000b, r5}}], 0x20, 0x2400e044}, 0x0) 461.573541ms ago: executing program 0 (id=975): getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, &(0x7f00000000c0)) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r0, 0x0, 0x4092}, 0x18) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, 0x0, 0x800) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000050000000000000000001811", @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e8500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff530000008003950323030302e75"], 0x15) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = dup(r2) write$P9_RLERRORu(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20) write$binfmt_elf64(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) creat(&(0x7f00000002c0)='./file0\x00', 0x0) 460.998271ms ago: executing program 0 (id=976): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan1\x00'}) bind$can_j1939(r0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000005640)=ANY=[], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={0x0, r1}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) kexec_load(0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) clock_nanosleep(0x9, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r3}, 0x10) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffd}, 0x0, 0x9, 0x12, 0x0, 0xfffffffffff7bbfe, 0x1, 0x0, 0x0, 0x5ff}, 0x0, 0x2000800000, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000080)) 439.007961ms ago: executing program 4 (id=977): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'veth0_macvtap\x00'}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x1, 0x0, 0x7ffc0005}]}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') write$binfmt_misc(r2, 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r4) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x820, &(0x7f0000000680)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',directio,s=\x00\x00\x00\x00\x00', @ANYRESDEC=r4, @ANYBLOB=',aname=vlan0\x00,fowner>', @ANYRESDEC, @ANYBLOB=',fowner=', @ANYRESDEC=0xee01, @ANYBLOB=',dont_measure,dont_appraise,\x00']) r5 = syz_io_uring_setup(0x5c6, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x4}, &(0x7f0000000300)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r8, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r8, 0x84, 0x17, &(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="06"], 0x9) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r12}, 0x10) sendmsg$tipc(r10, &(0x7f0000000680)={&(0x7f00000001c0)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x2}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x41) syz_io_uring_submit(r6, r7, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x4}) io_uring_enter(r5, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) rt_sigsuspend(&(0x7f00000002c0)={[0x225c17d03]}, 0x8) close(0xffffffffffffffff) 331.529314ms ago: executing program 0 (id=978): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0xfffffffe}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2000}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000280)={'syztnl2\x00', &(0x7f00000001c0)={'ip6gre0\x00', 0x0, 0x2f, 0x40, 0xc, 0x1, 0x6f, @local, @private0, 0x80, 0x80, 0xb, 0x80000001}}) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, r3, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_LINK={0x8, 0x1, r4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x40000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) 300.199084ms ago: executing program 5 (id=979): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0b00000007000000d7c900000900000001"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r1, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r3}, 0x10) process_vm_writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000500)=""/163, 0xa3}, {&(0x7f0000000680)=""/151, 0x97}], 0x2, &(0x7f0000001a40)=[{&(0x7f0000000740)=""/4096, 0x1000}, {&(0x7f0000001740)=""/195, 0xc3}, {&(0x7f0000001840)=""/231, 0xe7}, {&(0x7f00000001c0)=""/1, 0x1}, {&(0x7f00000005c0)=""/116, 0x74}, {&(0x7f0000001940)=""/193, 0xc1}], 0x6, 0x0) 299.026114ms ago: executing program 0 (id=980): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\v\x00\x00\x00\a\x00\x00\x00\b\x00\x00\x00\b\x00\x00'], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x800, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x400}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x58, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x1}, {}, {0x7, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x28, 0x2, [@TCA_FLOW_EMATCHES={0x24, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0xfffa, 0x7, 0x8001}, {{0x2, 0x0, 0x1}, {0x3, 0x0, 0x1, 0x1}}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}]}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) 263.979585ms ago: executing program 2 (id=981): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r1, &(0x7f0000000340)='\x00', 0x1, 0x4c001, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000900)="2e552f5d9fd8b0d9627c4980f0d1ea2bf8f617a682acd2841acd878bd68344d4f50f83b0c51fa9025a01c95d4a068ec8b12d01010000a44c4505ba9a36f2cf4cc5e8308126d0a2c3b9d24e57c5011376b6263e2a1258eec1eb72bedea3eb5ccf73eb081b4c6d5faa998d7b795c057dd757d14200a8a6dbb3e59df96b77d16753ac4b32b94ffe6b5ee304d0428eb18056657c8c5c71c632be66cb26fe5c9abec7591ef3cb9b2a1133e9fa9bf0de6c378bed7b51cb8a07c343aabfda193349b91a5dc81a658cb61fbbfa51ef95abe03381ee2cb8d41da19ea8b96ec68ce17cf57da60f1d04acaf34a643db8d2d5ad2991f306b42744347a0c9e1fe2136b2b3da49032d3a57df1e236222cf6d6fe396aff8e5fe7fff5baa88789b783c12045e2c904a5d118369fdddc3e6e2f24bdbb26df92ac9bf4751c897a87c0223888e36ad14ba6e4d879ff464cac6f13a3a543e067d922e99c50f2fc6391e9c1c82b7195005eafdbb3374200c134cbd0f11739e8c19dd07140686242fea48caf3a1a93b86f35d77f258a2c9ce24cf321068551a584262d7a74a344e428c77c8af755e72904b0ca8a0bb359fb0", 0xffffff5d, 0x12, 0x0, 0x0) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 263.258675ms ago: executing program 5 (id=982): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\v\x00\x00\x00\a\x00\x00\x00\b\x00\x00\x00\b\x00\x00\x00'], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x800, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x400}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x58, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x1}, {}, {0x7, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x28, 0x2, [@TCA_FLOW_EMATCHES={0x24, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0xfffa, 0x7, 0x8001}, {{0x2, 0x0, 0x1}, {0x3, 0x0, 0x1, 0x1}}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}]}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) 237.891836ms ago: executing program 0 (id=983): sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="000425bd70000400000055000000"], 0x14}, 0x1, 0x0, 0x0, 0x240440d1}, 0x10000) r0 = syz_usb_connect(0x3, 0x1c, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)={0xffffffffffffffff, 0xffffffffffffffff}) lsetxattr$security_capability(&(0x7f0000000080)='./cgroup/cgroup.procs\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) lchown(&(0x7f0000000000)='./cgroup/cgroup.procs\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0x7}, 0x18) r4 = gettid() sendmsg$unix(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000640)='Q', 0x1}], 0x1, &(0x7f0000001040)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r4, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r2, @ANYRES32=r1, @ANYRES32=r2, @ANYRES32=r1, @ANYRES8, @ANYBLOB="1c000000000000000100000402000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYRES64=r0, @ANYRES32=r1, @ANYBLOB="0000000018"], 0xa0}, 0x4004881) socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000100)={0x1d, r6, 0x2, {0x3}}, 0x18) write$evdev(0xffffffffffffffff, &(0x7f0000000040), 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r5) pipe(&(0x7f0000000040)) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='kfree\x00', r8, 0x0, 0x8000000000000}, 0x18) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000680)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@block_validity}]}, 0x0, 0x46c, &(0x7f0000000bc0)="$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") 197.382956ms ago: executing program 5 (id=984): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x7, 0x4, 0x8, 0x401}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000001}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) r2 = socket(0x10, 0x803, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {0x0}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x2040000, &(0x7f0000003700)={0x77359400}) 155.856177ms ago: executing program 5 (id=985): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_read_part_table(0x60d, &(0x7f0000002200)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./file1\x00', 0x105042, 0x1db) writev(r0, &(0x7f0000000140)=[{0x0}], 0x1) 155.267137ms ago: executing program 3 (id=986): getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, &(0x7f00000000c0)) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r0, 0x0, 0x4092}, 0x18) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, 0x0, 0x800) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000050000000000000000001811", @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e8500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff530000008003950323030302e75"], 0x15) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = dup(r2) write$P9_RLERRORu(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20) write$binfmt_elf64(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) creat(&(0x7f00000002c0)='./file0\x00', 0x0) 105.763928ms ago: executing program 3 (id=987): perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x401}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) syz_usb_connect$cdc_ncm(0x5, 0xf3, &(0x7f0000000540)=ANY=[], 0x0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000040)='hugetlbfs\x00', 0x0, &(0x7f0000000000)='gid=\x8c\xbcnk]\'') close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x100000000000000) 470.16µs ago: executing program 5 (id=988): socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000180)=[{0x6}]}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000c0000000900000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0xb30, 0x0, 0x0, 0x40f00, 0x49, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$MAP_LOOKUP_ELEM(0x2, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$nci(r3, 0x0, 0xfffffeea) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000380), 0x84, r0}, 0x38) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setreuid(0x0, 0xee00) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_recvmsg\x00', r4}, 0x18) r5 = socket$kcm(0x21, 0x2, 0x2) recvmsg$kcm(r5, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) 0s ago: executing program 5 (id=989): pipe2(0x0, 0x800) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x1, 0x28}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) pipe(0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) read$rfkill(r5, &(0x7f0000000040), 0x8) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x121101, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r6, 0x4734}}, 0x10) close_range(r2, r2, 0x0) keyctl$set_reqkey_keyring(0xe, 0x5) request_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000000380)={'syz', 0x3}, &(0x7f0000000040)='F\xa2', 0x0) 0s ago: executing program 5 (id=990): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)={[{@usrquota}, {@discard}, {@bh}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@debug}, {@discard}]}, 0x1, 0x609, &(0x7f0000000f80)="$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") r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): d=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5359 comm="syz.2.561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfbfaaeba9 code=0x7ffc0000 [ 92.257149][ T29] audit: type=1326 audit(1757818499.375:3230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5359 comm="syz.2.561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbfbfaaeba9 code=0x7ffc0000 [ 92.280465][ T29] audit: type=1326 audit(1757818499.375:3231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5359 comm="syz.2.561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfbfaaeba9 code=0x7ffc0000 [ 92.303864][ T29] audit: type=1326 audit(1757818499.375:3232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5359 comm="syz.2.561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfbfaaeba9 code=0x7ffc0000 [ 92.327314][ T29] audit: type=1326 audit(1757818499.375:3233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5359 comm="syz.2.561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbfbfaad510 code=0x7ffc0000 [ 92.329094][ T5340] loop4: detected capacity change from 0 to 512 [ 92.350683][ T29] audit: type=1326 audit(1757818499.375:3234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5359 comm="syz.2.561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fbfbfab03d7 code=0x7ffc0000 [ 92.350763][ T29] audit: type=1326 audit(1757818499.375:3235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5359 comm="syz.2.561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbfbfaaeba9 code=0x7ffc0000 [ 92.359839][ T5340] EXT4-fs: Ignoring removed bh option [ 92.380329][ T29] audit: type=1326 audit(1757818499.375:3236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5359 comm="syz.2.561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fbfbfab03d7 code=0x7ffc0000 [ 92.415449][ T5340] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 92.432304][ T29] audit: type=1326 audit(1757818499.375:3237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5359 comm="syz.2.561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fbfbfaad80a code=0x7ffc0000 [ 92.501187][ T5340] EXT4-fs (loop4): 1 truncate cleaned up [ 92.519295][ T5362] loop5: detected capacity change from 0 to 8192 [ 92.644044][ T4356] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 92.754382][ T5372] loop5: detected capacity change from 0 to 8192 [ 92.793680][ T5379] 9pnet_fd: Insufficient options for proto=fd [ 92.853415][ T5381] loop2: detected capacity change from 0 to 512 [ 92.870479][ T5381] EXT4-fs: Ignoring removed bh option [ 92.880629][ T5381] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 92.889763][ T5381] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 92.910556][ T5387] netlink: 'syz.3.571': attribute type 1 has an invalid length. [ 92.918422][ T5387] __nla_validate_parse: 6 callbacks suppressed [ 92.918439][ T5387] netlink: 224 bytes leftover after parsing attributes in process `syz.3.571'. [ 92.929296][ T5381] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 92.952432][ T5381] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 93.057527][ T5381] netlink: 180 bytes leftover after parsing attributes in process `syz.2.567'. [ 93.082553][ T5381] netlink: 180 bytes leftover after parsing attributes in process `syz.2.567'. [ 93.129541][ T5381] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.567: bg 0: block 353: padding at end of block bitmap is not set [ 93.181725][ T5394] 9pnet_fd: Insufficient options for proto=fd [ 93.352093][ T5403] loop3: detected capacity change from 0 to 512 [ 93.366770][ T5403] EXT4-fs: Ignoring removed nobh option [ 93.398526][ T5403] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #3: comm syz.3.576: corrupted inode contents [ 93.414538][ T5403] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #3: comm syz.3.576: mark_inode_dirty error [ 93.428744][ T5403] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #3: comm syz.3.576: corrupted inode contents [ 93.441300][ T5403] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #3: comm syz.3.576: mark_inode_dirty error [ 93.454097][ T5403] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.576: Failed to acquire dquot type 0 [ 93.466045][ T5403] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.576: corrupted inode contents [ 93.479146][ T5403] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #16: comm syz.3.576: mark_inode_dirty error [ 93.490805][ T5403] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.576: corrupted inode contents [ 93.504122][ T5403] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #16: comm syz.3.576: mark_inode_dirty error [ 93.515615][ T5403] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.576: corrupted inode contents [ 93.530060][ T5403] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 93.538860][ T5403] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.576: corrupted inode contents [ 93.552031][ T5403] EXT4-fs error (device loop3): ext4_truncate:4666: inode #16: comm syz.3.576: mark_inode_dirty error [ 93.563505][ T5403] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 93.574014][ T5403] EXT4-fs (loop3): 1 truncate cleaned up [ 93.580281][ T5403] ext4 filesystem being mounted at /115/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.790125][ T5419] loop9: detected capacity change from 0 to 7 [ 93.796559][ T5419] Buffer I/O error on dev loop9, logical block 0, async page read [ 93.804513][ T5419] Buffer I/O error on dev loop9, logical block 0, async page read [ 93.812517][ T5419] loop9: unable to read partition table [ 93.835540][ T5419] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 93.835540][ T5419] ) failed (rc=-5) [ 94.316815][ T5437] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 94.356575][ T5433] loop5: detected capacity change from 0 to 8192 [ 94.363920][ T5435] loop4: detected capacity change from 0 to 2048 [ 94.417891][ T5435] loop4: p1 < > p4 [ 94.431203][ T5435] loop4: p4 size 8388608 extends beyond EOD, truncated [ 94.735665][ T5467] loop9: detected capacity change from 0 to 7 [ 94.744667][ T5467] Buffer I/O error on dev loop9, logical block 0, async page read [ 94.752788][ T5469] loop2: detected capacity change from 0 to 1024 [ 94.752881][ T5467] Buffer I/O error on dev loop9, logical block 0, async page read [ 94.767268][ T5467] loop9: unable to read partition table [ 94.769041][ T5469] EXT4-fs: Ignoring removed nobh option [ 94.773198][ T5467] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 94.773198][ T5467] ) failed (rc=-5) [ 94.847110][ T5474] netlink: 8 bytes leftover after parsing attributes in process `syz.5.600'. [ 94.857175][ T5474] netlink: 4 bytes leftover after parsing attributes in process `syz.5.600'. [ 94.907586][ T5481] loop9: detected capacity change from 0 to 7 [ 94.925121][ T5481] Buffer I/O error on dev loop9, logical block 0, async page read [ 94.936913][ T5481] Buffer I/O error on dev loop9, logical block 0, async page read [ 94.944888][ T5481] loop9: unable to read partition table [ 94.950949][ T5481] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 94.950949][ T5481] ) failed (rc=-5) [ 94.997824][ T5486] 9pnet_fd: Insufficient options for proto=fd [ 95.009492][ T5486] hub 6-0:1.0: USB hub found [ 95.016492][ T5486] hub 6-0:1.0: 8 ports detected [ 95.176799][ T5502] loop3: detected capacity change from 0 to 512 [ 95.186389][ T5504] loop9: detected capacity change from 0 to 7 [ 95.194431][ T5504] Buffer I/O error on dev loop9, logical block 0, async page read [ 95.203696][ T5504] Buffer I/O error on dev loop9, logical block 0, async page read [ 95.211579][ T5504] loop9: unable to read partition table [ 95.218647][ T5504] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 95.218647][ T5504] ) failed (rc=-5) [ 95.252343][ T5502] EXT4-fs: Ignoring removed bh option [ 95.259773][ T5502] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 95.268852][ T5502] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 95.279150][ T5502] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 95.288516][ T5502] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 95.300780][ T5502] netlink: 180 bytes leftover after parsing attributes in process `syz.3.610'. [ 95.311137][ T5502] netlink: 180 bytes leftover after parsing attributes in process `syz.3.610'. [ 95.324462][ T5502] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.610: bg 0: block 353: padding at end of block bitmap is not set [ 95.705252][ T5513] FAULT_INJECTION: forcing a failure. [ 95.705252][ T5513] name failslab, interval 1, probability 0, space 0, times 0 [ 95.717987][ T5513] CPU: 0 UID: 0 PID: 5513 Comm: syz.4.615 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 95.718043][ T5513] Tainted: [W]=WARN [ 95.718052][ T5513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 95.718132][ T5513] Call Trace: [ 95.718138][ T5513] [ 95.718146][ T5513] __dump_stack+0x1d/0x30 [ 95.718168][ T5513] dump_stack_lvl+0xe8/0x140 [ 95.718203][ T5513] dump_stack+0x15/0x1b [ 95.718224][ T5513] should_fail_ex+0x265/0x280 [ 95.718256][ T5513] ? sctp_association_new+0x71/0x1200 [ 95.718318][ T5513] should_failslab+0x8c/0xb0 [ 95.718374][ T5513] __kmalloc_cache_noprof+0x4c/0x320 [ 95.718416][ T5513] sctp_association_new+0x71/0x1200 [ 95.718444][ T5513] ? __ipv6_addr_type+0xe2/0x210 [ 95.718540][ T5513] sctp_connect_new_asoc+0x1a8/0x3a0 [ 95.718611][ T5513] sctp_sendmsg+0xf10/0x18d0 [ 95.718636][ T5513] ? selinux_socket_sendmsg+0x101/0x1b0 [ 95.718735][ T5513] ? __pfx_sctp_sendmsg+0x10/0x10 [ 95.718868][ T5513] inet_sendmsg+0xc2/0xd0 [ 95.718897][ T5513] __sock_sendmsg+0x102/0x180 [ 95.718939][ T5513] __sys_sendto+0x268/0x330 [ 95.718972][ T5513] __x64_sys_sendto+0x76/0x90 [ 95.719075][ T5513] x64_sys_call+0x2d05/0x2ff0 [ 95.719125][ T5513] do_syscall_64+0xd2/0x200 [ 95.719166][ T5513] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 95.719198][ T5513] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 95.719302][ T5513] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.719330][ T5513] RIP: 0033:0x7f233033eba9 [ 95.719351][ T5513] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 95.719374][ T5513] RSP: 002b:00007f232eda7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 95.719393][ T5513] RAX: ffffffffffffffda RBX: 00007f2330585fa0 RCX: 00007f233033eba9 [ 95.719406][ T5513] RDX: 0000000000000001 RSI: 0000200000000000 RDI: 0000000000000007 [ 95.719418][ T5513] RBP: 00007f232eda7090 R08: 0000200000000100 R09: 000000000000001c [ 95.719431][ T5513] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 95.719453][ T5513] R13: 00007f2330586038 R14: 00007f2330585fa0 R15: 00007ffe1d249468 [ 95.719478][ T5513] [ 95.745962][ T5517] loop2: detected capacity change from 0 to 1024 [ 95.953329][ T5517] EXT4-fs: Ignoring removed bh option [ 95.959980][ T5521] 9pnet_fd: Insufficient options for proto=fd [ 95.960302][ T5517] EXT4-fs: inline encryption not supported [ 95.972736][ T5517] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 95.984821][ T5517] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 95.993952][ T5517] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 2: comm syz.2.614: lblock 2 mapped to illegal pblock 2 (length 1) [ 96.009229][ T5517] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 48: comm syz.2.614: lblock 0 mapped to illegal pblock 48 (length 1) [ 96.026860][ T5517] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.614: Failed to acquire dquot type 0 [ 96.039473][ T5517] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 96.050982][ T5517] EXT4-fs error (device loop2): ext4_evict_inode:254: inode #11: comm syz.2.614: mark_inode_dirty error [ 96.062726][ T5517] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 96.073179][ T5517] EXT4-fs (loop2): 1 orphan inode deleted [ 96.084716][ T5517] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 1: comm syz.2.614: lblock 1 mapped to illegal pblock 1 (length 1) [ 96.099738][ T5517] FAULT_INJECTION: forcing a failure. [ 96.099738][ T5517] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 96.112858][ T5517] CPU: 1 UID: 0 PID: 5517 Comm: syz.2.614 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 96.112954][ T5517] Tainted: [W]=WARN [ 96.112963][ T5517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 96.112978][ T5517] Call Trace: [ 96.112985][ T5517] [ 96.112992][ T5517] __dump_stack+0x1d/0x30 [ 96.113020][ T5517] dump_stack_lvl+0xe8/0x140 [ 96.113043][ T5517] dump_stack+0x15/0x1b [ 96.113132][ T5517] should_fail_ex+0x265/0x280 [ 96.113157][ T5517] should_fail+0xb/0x20 [ 96.113212][ T5517] should_fail_usercopy+0x1a/0x20 [ 96.113246][ T5517] _copy_to_user+0x20/0xa0 [ 96.113286][ T5517] simple_read_from_buffer+0xb5/0x130 [ 96.113310][ T5517] proc_fail_nth_read+0x10e/0x150 [ 96.113407][ T5517] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 96.113435][ T5517] vfs_read+0x1a8/0x770 [ 96.113538][ T5517] ? __rcu_read_unlock+0x4f/0x70 [ 96.113566][ T5517] ? __fget_files+0x184/0x1c0 [ 96.113603][ T5517] ksys_read+0xda/0x1a0 [ 96.113692][ T5517] __x64_sys_read+0x40/0x50 [ 96.113720][ T5517] x64_sys_call+0x27bc/0x2ff0 [ 96.113742][ T5517] do_syscall_64+0xd2/0x200 [ 96.113777][ T5517] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 96.113877][ T5517] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 96.113917][ T5517] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.113945][ T5517] RIP: 0033:0x7fbfbfaad5bc [ 96.114034][ T5517] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 96.114054][ T5517] RSP: 002b:00007fbfbe50f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 96.114073][ T5517] RAX: ffffffffffffffda RBX: 00007fbfbfcf5fa0 RCX: 00007fbfbfaad5bc [ 96.114138][ T5517] RDX: 000000000000000f RSI: 00007fbfbe50f0a0 RDI: 000000000000000a [ 96.114188][ T5517] RBP: 00007fbfbe50f090 R08: 0000000000000000 R09: 0000000000000000 [ 96.114252][ T5517] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 96.114267][ T5517] R13: 00007fbfbfcf6038 R14: 00007fbfbfcf5fa0 R15: 00007ffd57512008 [ 96.114290][ T5517] [ 96.320530][ T4353] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:35: lblock 1 mapped to illegal pblock 1 (length 1) [ 96.335446][ T4353] EXT4-fs error (device loop2): ext4_release_dquot:6973: comm kworker/u8:35: Failed to release dquot type 0 [ 96.368853][ T3312] EXT4-fs error (device loop2): __ext4_get_inode_loc:4861: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 96.382233][ T3312] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 96.388514][ T5538] loop0: detected capacity change from 0 to 512 [ 96.391855][ T3312] EXT4-fs error (device loop2): ext4_quota_off:7221: inode #3: comm syz-executor: mark_inode_dirty error [ 96.398600][ T5538] EXT4-fs: Ignoring removed bh option [ 96.419476][ T5538] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 96.428676][ T5538] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 96.446065][ T5538] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 96.455522][ T5538] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 96.467965][ T5538] netlink: 180 bytes leftover after parsing attributes in process `syz.0.623'. [ 96.477626][ T5538] netlink: 180 bytes leftover after parsing attributes in process `syz.0.623'. [ 96.487497][ T5538] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.623: bg 0: block 353: padding at end of block bitmap is not set [ 96.612516][ T5550] FAULT_INJECTION: forcing a failure. [ 96.612516][ T5550] name failslab, interval 1, probability 0, space 0, times 0 [ 96.625269][ T5550] CPU: 0 UID: 0 PID: 5550 Comm: syz.3.626 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 96.625311][ T5550] Tainted: [W]=WARN [ 96.625320][ T5550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 96.625337][ T5550] Call Trace: [ 96.625344][ T5550] [ 96.625351][ T5550] __dump_stack+0x1d/0x30 [ 96.625372][ T5550] dump_stack_lvl+0xe8/0x140 [ 96.625391][ T5550] dump_stack+0x15/0x1b [ 96.625448][ T5550] should_fail_ex+0x265/0x280 [ 96.625479][ T5550] should_failslab+0x8c/0xb0 [ 96.625511][ T5550] kmem_cache_alloc_noprof+0x50/0x310 [ 96.625548][ T5550] ? getname_flags+0x80/0x3b0 [ 96.625657][ T5550] getname_flags+0x80/0x3b0 [ 96.625692][ T5550] user_path_at+0x28/0x130 [ 96.625756][ T5550] __se_sys_mount+0x25b/0x2e0 [ 96.625782][ T5550] ? __schedule+0x6b9/0xb30 [ 96.625808][ T5550] __x64_sys_mount+0x67/0x80 [ 96.625835][ T5550] x64_sys_call+0x2b4d/0x2ff0 [ 96.625928][ T5550] do_syscall_64+0xd2/0x200 [ 96.625966][ T5550] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 96.626049][ T5550] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 96.626091][ T5550] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.626112][ T5550] RIP: 0033:0x7f207568eba9 [ 96.626188][ T5550] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 96.626208][ T5550] RSP: 002b:00007f20740ef038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 96.626227][ T5550] RAX: ffffffffffffffda RBX: 00007f20758d5fa0 RCX: 00007f207568eba9 [ 96.626241][ T5550] RDX: 0000200000000640 RSI: 0000200000000000 RDI: 0000000000000000 [ 96.626261][ T5550] RBP: 00007f20740ef090 R08: 0000200000000200 R09: 0000000000000000 [ 96.626276][ T5550] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 96.626292][ T5550] R13: 00007f20758d6038 R14: 00007f20758d5fa0 R15: 00007ffddd0b2508 [ 96.626389][ T5550] [ 97.019219][ T5559] 9pnet_fd: Insufficient options for proto=fd [ 97.026325][ T5560] loop0: detected capacity change from 0 to 128 [ 97.033153][ T5560] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 97.045298][ T5560] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 97.056824][ T5560] netlink: 12 bytes leftover after parsing attributes in process `syz.0.628'. [ 97.132182][ T5564] SELinux: ebitmap: truncated map [ 97.139263][ T5564] SELinux: failed to load policy [ 97.165800][ T5564] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 97.194437][ T5567] loop3: detected capacity change from 0 to 1024 [ 97.217487][ T5567] EXT4-fs: Ignoring removed bh option [ 97.224767][ T5567] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 97.236100][ T5567] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e84ce018, mo2=0000] [ 97.244284][ T5567] System zones: 0-1, 3-12 [ 97.260934][ T5567] EXT4-fs error (device loop3): ext4_map_blocks:814: inode #3: block 1: comm syz.3.632: lblock 1 mapped to illegal pblock 1 (length 1) [ 97.282695][ T5567] __quota_error: 334 callbacks suppressed [ 97.282716][ T5567] Quota error (device loop3): write_blk: dquota write failed [ 97.296258][ T5567] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 97.307888][ T5567] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.632: Failed to acquire dquot type 0 [ 97.319631][ T5567] EXT4-fs error (device loop3): ext4_free_blocks:6696: comm syz.3.632: Freeing blocks not in datazone - block = 0, count = 4096 [ 97.333075][ T29] audit: type=1326 audit(1757818504.475:3566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5565 comm="syz.3.631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f207568eba9 code=0x7ffc0000 [ 97.364847][ T5567] EXT4-fs error (device loop3): ext4_read_inode_bitmap:139: comm syz.3.632: Invalid inode bitmap blk 0 in block_group 0 [ 97.380602][ T4356] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:37: lblock 1 mapped to illegal pblock 1 (length 1) [ 97.398598][ T5567] EXT4-fs error (device loop3) in ext4_free_inode:361: Corrupt filesystem [ 97.403900][ T5577] loop5: detected capacity change from 0 to 512 [ 97.413830][ T4356] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 97.414048][ T5567] EXT4-fs (loop3): 1 orphan inode deleted [ 97.422508][ T4356] EXT4-fs error (device loop3): ext4_release_dquot:6973: comm kworker/u8:37: Failed to release dquot type 0 [ 97.441055][ T5567] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000. [ 97.441672][ T5577] EXT4-fs: Ignoring removed nobh option [ 97.460930][ T5581] loop2: detected capacity change from 0 to 512 [ 97.476393][ T5581] EXT4-fs warning (device loop2): ext4_xattr_inode_get:542: inode #11: comm syz.2.635: ea_inode file size=0 entry size=6 [ 97.489712][ T5581] EXT4-fs (loop2): 1 orphan inode deleted [ 97.497461][ T5577] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #3: comm syz.5.636: corrupted inode contents [ 97.509700][ T5577] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #3: comm syz.5.636: mark_inode_dirty error [ 97.522386][ T5577] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #3: comm syz.5.636: corrupted inode contents [ 97.534627][ T5577] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #3: comm syz.5.636: mark_inode_dirty error [ 97.546606][ T5577] Quota error (device loop5): write_blk: dquota write failed [ 97.554692][ T5577] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 97.564973][ T5577] EXT4-fs error (device loop5): ext4_acquire_dquot:6937: comm syz.5.636: Failed to acquire dquot type 0 [ 97.591039][ T5577] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.636: corrupted inode contents [ 97.604578][ T5577] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #16: comm syz.5.636: mark_inode_dirty error [ 97.620343][ T5590] loop4: detected capacity change from 0 to 128 [ 97.628024][ T5590] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 97.640790][ T5577] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.636: corrupted inode contents [ 97.653327][ T5590] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 97.663380][ T5577] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #16: comm syz.5.636: mark_inode_dirty error [ 97.676343][ T5577] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.636: corrupted inode contents [ 97.701183][ T5577] EXT4-fs error (device loop5) in ext4_orphan_del:305: Corrupt filesystem [ 97.711316][ T5577] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.636: corrupted inode contents [ 97.730716][ T3374] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 97.738882][ T3374] hid-generic 0000:0000:0000.0024: hidraw0: HID v0.00 Device [syz1] on syz0 [ 97.748533][ T5577] EXT4-fs error (device loop5): ext4_truncate:4666: inode #16: comm syz.5.636: mark_inode_dirty error [ 97.761001][ T5577] EXT4-fs error (device loop5) in ext4_process_orphan:347: Corrupt filesystem [ 97.777900][ T5577] EXT4-fs (loop5): 1 truncate cleaned up [ 97.786220][ T5577] ext4 filesystem being mounted at /114/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.829499][ T5592] 9pnet_fd: Insufficient options for proto=fd [ 97.861417][ T5596] loop5: detected capacity change from 0 to 1024 [ 97.903790][ T5596] EXT4-fs: Ignoring removed nobh option [ 97.956029][ T5601] loop3: detected capacity change from 0 to 128 [ 98.209954][ T4383] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 98.221127][ T5601] ip6gre1: entered allmulticast mode [ 98.289485][ T4383] kworker/u8:62: attempt to access beyond end of device [ 98.289485][ T4383] loop3: rw=1, sector=153, nr_sectors = 8 limit=128 [ 98.320600][ T4383] kworker/u8:62: attempt to access beyond end of device [ 98.320600][ T4383] loop3: rw=1, sector=169, nr_sectors = 8 limit=128 [ 98.343623][ T4383] kworker/u8:62: attempt to access beyond end of device [ 98.343623][ T4383] loop3: rw=1, sector=185, nr_sectors = 8 limit=128 [ 98.390609][ T4383] kworker/u8:62: attempt to access beyond end of device [ 98.390609][ T4383] loop3: rw=1, sector=201, nr_sectors = 8 limit=128 [ 98.414639][ T4383] kworker/u8:62: attempt to access beyond end of device [ 98.414639][ T4383] loop3: rw=1, sector=217, nr_sectors = 8 limit=128 [ 98.429356][ T4383] kworker/u8:62: attempt to access beyond end of device [ 98.429356][ T4383] loop3: rw=1, sector=233, nr_sectors = 8 limit=128 [ 98.443058][ T4383] kworker/u8:62: attempt to access beyond end of device [ 98.443058][ T4383] loop3: rw=1, sector=249, nr_sectors = 8 limit=128 [ 98.457052][ T4383] kworker/u8:62: attempt to access beyond end of device [ 98.457052][ T4383] loop3: rw=1, sector=265, nr_sectors = 8 limit=128 [ 98.471451][ T4383] kworker/u8:62: attempt to access beyond end of device [ 98.471451][ T4383] loop3: rw=1, sector=281, nr_sectors = 8 limit=128 [ 98.491359][ T4383] kworker/u8:62: attempt to access beyond end of device [ 98.491359][ T4383] loop3: rw=1, sector=297, nr_sectors = 8 limit=128 [ 98.991769][ T5617] __nla_validate_parse: 1 callbacks suppressed [ 98.991790][ T5617] netlink: 4 bytes leftover after parsing attributes in process `syz.0.647'. [ 99.045935][ T29] audit: type=1400 audit(1757818506.185:3567): avc: denied { write } for pid=5620 comm="syz.3.648" name="file0" dev="tmpfs" ino=768 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 99.068431][ T29] audit: type=1400 audit(1757818506.185:3568): avc: denied { open } for pid=5620 comm="syz.3.648" path="/139/file0" dev="tmpfs" ino=768 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 99.142761][ T5617] netlink: 12 bytes leftover after parsing attributes in process `syz.0.647'. [ 99.173955][ T5623] loop9: detected capacity change from 0 to 7 [ 99.187614][ T5623] Buffer I/O error on dev loop9, logical block 0, async page read [ 99.204659][ T5623] Buffer I/O error on dev loop9, logical block 0, async page read [ 99.212708][ T5623] loop9: unable to read partition table [ 99.224882][ T5623] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 99.224882][ T5623] ) failed (rc=-5) [ 99.289480][ T5628] loop5: detected capacity change from 0 to 8192 [ 99.308511][ T5637] loop4: detected capacity change from 0 to 128 [ 99.315078][ T5636] loop2: detected capacity change from 0 to 512 [ 99.315322][ T5637] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 99.345220][ T5637] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 99.369897][ T5636] EXT4-fs: Ignoring removed bh option [ 99.375864][ T5636] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 99.385034][ T5636] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 99.393676][ T5643] loop5: detected capacity change from 0 to 512 [ 99.403423][ T5637] netlink: 12 bytes leftover after parsing attributes in process `syz.4.652'. [ 99.412342][ T5636] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 99.412478][ T5636] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 99.423786][ T5643] EXT4-fs: Ignoring removed nobh option [ 99.440956][ T29] audit: type=1326 audit(1757818506.585:3569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5629 comm="syz.4.652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f233033eba9 code=0x7ffc0000 [ 99.464362][ T29] audit: type=1326 audit(1757818506.585:3570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5629 comm="syz.4.652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=256 compat=0 ip=0x7f233033eba9 code=0x7ffc0000 [ 99.500438][ T5643] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #3: comm syz.5.657: corrupted inode contents [ 99.517909][ T5643] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #3: comm syz.5.657: mark_inode_dirty error [ 99.518838][ T5636] netlink: 180 bytes leftover after parsing attributes in process `syz.2.654'. [ 99.541445][ T5643] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #3: comm syz.5.657: corrupted inode contents [ 99.542547][ T5636] netlink: 180 bytes leftover after parsing attributes in process `syz.2.654'. [ 99.563825][ T5643] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #3: comm syz.5.657: mark_inode_dirty error [ 99.564871][ T5636] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.654: bg 0: block 353: padding at end of block bitmap is not set [ 99.575792][ T5643] EXT4-fs error (device loop5): ext4_acquire_dquot:6937: comm syz.5.657: Failed to acquire dquot type 0 [ 99.601492][ T5643] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.657: corrupted inode contents [ 99.627971][ T5643] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #16: comm syz.5.657: mark_inode_dirty error [ 99.641959][ T5643] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.657: corrupted inode contents [ 99.654288][ T5643] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #16: comm syz.5.657: mark_inode_dirty error [ 99.667320][ T5643] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.657: corrupted inode contents [ 99.682351][ T5643] EXT4-fs error (device loop5) in ext4_orphan_del:305: Corrupt filesystem [ 99.691191][ T5643] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.657: corrupted inode contents [ 99.706144][ T5643] EXT4-fs error (device loop5): ext4_truncate:4666: inode #16: comm syz.5.657: mark_inode_dirty error [ 99.720302][ T5643] EXT4-fs error (device loop5) in ext4_process_orphan:347: Corrupt filesystem [ 99.730453][ T5643] EXT4-fs (loop5): 1 truncate cleaned up [ 99.736656][ T5643] ext4 filesystem being mounted at /117/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.936586][ T5663] SELinux: ebitmap: truncated map [ 99.948530][ T5663] SELinux: failed to load policy [ 100.064542][ T5671] futex_wake_op: syz.5.663 tries to shift op by 35; fix this program [ 100.270677][ T5663] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 100.400357][ T5674] loop9: detected capacity change from 0 to 7 [ 100.458069][ T5674] Buffer I/O error on dev loop9, logical block 0, async page read [ 100.538153][ T5674] Buffer I/O error on dev loop9, logical block 0, async page read [ 100.546126][ T5674] loop9: unable to read partition table [ 100.591051][ T5674] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 100.591051][ T5674] ) failed (rc=-5) [ 100.627899][ T5688] loop2: detected capacity change from 0 to 1024 [ 100.630266][ T5685] loop9: detected capacity change from 0 to 7 [ 100.634590][ T5688] EXT4-fs: Ignoring removed bh option [ 100.646116][ T5685] Buffer I/O error on dev loop9, logical block 0, async page read [ 100.648779][ T5688] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 100.654384][ T5685] Buffer I/O error on dev loop9, logical block 0, async page read [ 100.672590][ T5685] loop9: unable to read partition table [ 100.678870][ T5685] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 100.678870][ T5685] ) failed (rc=-5) [ 100.697258][ T5688] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e84ce018, mo2=0000] [ 100.705481][ T5688] System zones: 0-1, 3-12 [ 100.706703][ T5691] netlink: 4 bytes leftover after parsing attributes in process `syz.4.672'. [ 100.720722][ T5688] EXT4-fs error (device loop2): ext4_map_blocks:814: inode #3: block 1: comm syz.2.670: lblock 1 mapped to illegal pblock 1 (length 1) [ 100.740652][ T5689] loop5: detected capacity change from 0 to 8192 [ 100.748074][ T5688] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.670: Failed to acquire dquot type 0 [ 100.764073][ T5688] EXT4-fs error (device loop2): ext4_free_blocks:6696: comm syz.2.670: Freeing blocks not in datazone - block = 0, count = 4096 [ 100.781263][ T5688] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.670: Invalid inode bitmap blk 0 in block_group 0 [ 100.794232][ T5688] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem [ 100.829161][ T4361] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:42: lblock 1 mapped to illegal pblock 1 (length 1) [ 100.840410][ T5688] EXT4-fs (loop2): 1 orphan inode deleted [ 100.849929][ T5688] EXT4-fs mount: 39 callbacks suppressed [ 100.849957][ T5688] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.870949][ T4361] EXT4-fs error (device loop2): ext4_release_dquot:6973: comm kworker/u8:42: Failed to release dquot type 0 [ 100.896834][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.919098][ T5704] IPv4: Oversized IP packet from 127.202.26.0 [ 101.163253][ T5716] loop9: detected capacity change from 0 to 7 [ 101.177704][ T5719] loop2: detected capacity change from 0 to 164 [ 101.182428][ T5716] Buffer I/O error on dev loop9, logical block 0, async page read [ 101.193190][ T5719] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 101.202997][ T5719] FAULT_INJECTION: forcing a failure. [ 101.202997][ T5719] name failslab, interval 1, probability 0, space 0, times 0 [ 101.205057][ T5716] Buffer I/O error on dev loop9, logical block 0, async page read [ 101.215690][ T5719] CPU: 1 UID: 0 PID: 5719 Comm: +}[@ Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 101.215730][ T5719] Tainted: [W]=WARN [ 101.215738][ T5719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 101.215789][ T5719] Call Trace: [ 101.215797][ T5719] [ 101.215806][ T5719] __dump_stack+0x1d/0x30 [ 101.215831][ T5719] dump_stack_lvl+0xe8/0x140 [ 101.215859][ T5719] dump_stack+0x15/0x1b [ 101.215885][ T5719] should_fail_ex+0x265/0x280 [ 101.215946][ T5719] should_failslab+0x8c/0xb0 [ 101.215983][ T5719] kmem_cache_alloc_lru_noprof+0x55/0x310 [ 101.216053][ T5719] ? __d_alloc+0x3d/0x340 [ 101.216096][ T5719] __d_alloc+0x3d/0x340 [ 101.216208][ T5719] d_alloc_parallel+0x53/0xc60 [ 101.216251][ T5719] ? avc_has_perm_noaudit+0x1b1/0x200 [ 101.216304][ T5719] ? lockref_get_not_dead+0x120/0x1c0 [ 101.216417][ T5719] ? __rcu_read_unlock+0x4f/0x70 [ 101.216518][ T5719] __lookup_slow+0x8c/0x250 [ 101.216572][ T5719] lookup_slow+0x3c/0x60 [ 101.216617][ T5719] link_path_walk+0x753/0x900 [ 101.216697][ T5719] path_lookupat+0x63/0x2a0 [ 101.216741][ T5719] filename_lookup+0x147/0x340 [ 101.216799][ T5719] user_path_at+0x3e/0x130 [ 101.216870][ T5719] __se_sys_chroot+0x45/0x230 [ 101.216910][ T5719] __x64_sys_chroot+0x1f/0x30 [ 101.216948][ T5719] x64_sys_call+0x214f/0x2ff0 [ 101.217041][ T5719] do_syscall_64+0xd2/0x200 [ 101.217087][ T5719] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 101.217190][ T5719] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 101.217234][ T5719] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.217264][ T5719] RIP: 0033:0x7fbfbfaaeba9 [ 101.217288][ T5719] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 101.217316][ T5719] RSP: 002b:00007fbfbe50f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a1 [ 101.217402][ T5719] RAX: ffffffffffffffda RBX: 00007fbfbfcf5fa0 RCX: 00007fbfbfaaeba9 [ 101.217421][ T5719] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 101.217502][ T5719] RBP: 00007fbfbe50f090 R08: 0000000000000000 R09: 0000000000000000 [ 101.217520][ T5719] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 101.217537][ T5719] R13: 00007fbfbfcf6038 R14: 00007fbfbfcf5fa0 R15: 00007ffd57512008 [ 101.217571][ T5719] [ 101.454168][ T5716] loop9: unable to read partition table [ 101.459932][ T5716] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 101.459932][ T5716] ) failed (rc=-5) [ 101.497254][ T5726] loop5: detected capacity change from 0 to 128 [ 101.504634][ T5726] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 101.525448][ T5726] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 101.565162][ T5728] loop4: detected capacity change from 0 to 8192 [ 101.568328][ T3374] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 101.604107][ T3374] hid-generic 0000:0000:0000.0025: hidraw0: HID v0.00 Device [syz1] on syz0 [ 101.643608][ T5738] loop2: detected capacity change from 0 to 1024 [ 101.646772][ T5735] 9pnet_fd: Insufficient options for proto=fd [ 101.656620][ T5738] EXT4-fs: Ignoring removed nobh option [ 101.678864][ T5735] hub 6-0:1.0: USB hub found [ 101.686952][ T5735] hub 6-0:1.0: 8 ports detected [ 101.709776][ T5738] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.945161][ T5754] loop3: detected capacity change from 0 to 512 [ 101.966579][ T5754] EXT4-fs: Ignoring removed bh option [ 101.972979][ T5754] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 101.982195][ T5754] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 101.985347][ T5756] loop9: detected capacity change from 0 to 7 [ 101.997849][ T4361] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 101.999116][ T5756] Buffer I/O error on dev loop9, logical block 0, async page read [ 102.016089][ T5756] Buffer I/O error on dev loop9, logical block 0, async page read [ 102.023973][ T5756] loop9: unable to read partition table [ 102.030272][ T5754] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 102.041674][ T5756] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 102.041674][ T5756] ) failed (rc=-5) [ 102.044604][ T5761] loop5: detected capacity change from 0 to 512 [ 102.055604][ T5754] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 102.069397][ T5761] EXT4-fs: Ignoring removed bh option [ 102.075783][ T5754] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.109075][ T5754] netlink: 180 bytes leftover after parsing attributes in process `syz.3.696'. [ 102.118273][ T5761] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 102.119153][ T5754] netlink: 180 bytes leftover after parsing attributes in process `syz.3.696'. [ 102.127462][ T5761] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 102.145809][ T5761] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended [ 102.158281][ T5754] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.696: bg 0: block 353: padding at end of block bitmap is not set [ 102.173838][ T5761] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 102.182704][ T5761] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.204549][ T5761] netlink: 180 bytes leftover after parsing attributes in process `syz.5.697'. [ 102.214508][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.215046][ T5761] netlink: 180 bytes leftover after parsing attributes in process `syz.5.697'. [ 102.243585][ T5761] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.697: bg 0: block 353: padding at end of block bitmap is not set [ 102.271066][ T3656] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.286691][ T5776] 9pnet_fd: Insufficient options for proto=fd [ 102.289487][ T5778] loop5: detected capacity change from 0 to 128 [ 102.299925][ T5778] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 102.312402][ T5778] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 102.329014][ T29] kauditd_printk_skb: 313 callbacks suppressed [ 102.329029][ T29] audit: type=1326 audit(1757818509.475:3879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5780 comm="syz.3.705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f207568eba9 code=0x7ffc0000 [ 102.359106][ T29] audit: type=1326 audit(1757818509.505:3880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5780 comm="syz.3.705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f207568eba9 code=0x7ffc0000 [ 102.383114][ T29] audit: type=1326 audit(1757818509.505:3881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5780 comm="syz.3.705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f207568eba9 code=0x7ffc0000 [ 102.406478][ T29] audit: type=1326 audit(1757818509.505:3882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5780 comm="syz.3.705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f207568eba9 code=0x7ffc0000 [ 102.434184][ T29] audit: type=1326 audit(1757818509.505:3883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5780 comm="syz.3.705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f207568d510 code=0x7ffc0000 [ 102.457634][ T29] audit: type=1326 audit(1757818509.505:3884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5780 comm="syz.3.705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f20756903d7 code=0x7ffc0000 [ 102.481038][ T29] audit: type=1326 audit(1757818509.505:3885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5780 comm="syz.3.705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f207568eba9 code=0x7ffc0000 [ 102.485572][ T3386] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 102.504320][ T29] audit: type=1326 audit(1757818509.505:3886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5780 comm="syz.3.705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f20756903d7 code=0x7ffc0000 [ 102.536728][ T29] audit: type=1326 audit(1757818509.505:3887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5780 comm="syz.3.705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f207568d80a code=0x7ffc0000 [ 102.559952][ T29] audit: type=1326 audit(1757818509.505:3888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5780 comm="syz.3.705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f207568eba9 code=0x7ffc0000 [ 102.560694][ T3386] hid-generic 0000:0000:0000.0026: hidraw0: HID v0.00 Device [syz1] on syz0 [ 102.595874][ T5787] loop4: detected capacity change from 0 to 128 [ 102.606349][ T5787] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 102.628847][ T5787] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 102.651950][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.698192][ T9] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 102.769730][ T5789] loop2: detected capacity change from 0 to 128 [ 102.779612][ T5789] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 102.812054][ T5789] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 102.821489][ T9] hid-generic 0000:0000:0000.0027: hidraw0: HID v0.00 Device [syz1] on syz0 [ 102.869002][ T3398] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 102.888136][ T3398] hid-generic 0000:0000:0000.0028: hidraw1: HID v0.00 Device [syz1] on syz0 [ 102.937926][ T4361] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 102.969403][ T5792] loop9: detected capacity change from 0 to 7 [ 102.976253][ T5792] loop9: unable to read partition table [ 102.981993][ T5792] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 102.981993][ T5792] ) failed (rc=-5) [ 102.998002][ T5794] IPv4: Oversized IP packet from 127.202.26.0 [ 103.046810][ T5798] loop3: detected capacity change from 0 to 2048 [ 103.083620][ T4361] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 103.102823][ T5798] loop3: p1 < > p4 [ 103.109799][ T5798] loop3: p4 size 8388608 extends beyond EOD, truncated [ 103.141974][ T5800] loop0: detected capacity change from 0 to 8192 [ 103.295814][ T5814] loop0: detected capacity change from 0 to 128 [ 103.332186][ T4383] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 103.347517][ T5817] wireguard0: entered promiscuous mode [ 103.353029][ T5817] wireguard0: entered allmulticast mode [ 103.494397][ T5825] loop9: detected capacity change from 0 to 7 [ 103.500876][ T5825] loop9: unable to read partition table [ 103.506629][ T5825] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 103.506629][ T5825] ) failed (rc=-5) [ 103.541723][ T5814] ip6gre1: entered allmulticast mode [ 103.671086][ T4383] bio_check_eod: 102 callbacks suppressed [ 103.671105][ T4383] kworker/u8:62: attempt to access beyond end of device [ 103.671105][ T4383] loop0: rw=1, sector=153, nr_sectors = 8 limit=128 [ 103.690759][ T5830] loop2: detected capacity change from 0 to 1024 [ 103.698322][ T5830] EXT4-fs: Ignoring removed nobh option [ 103.704333][ T4383] kworker/u8:62: attempt to access beyond end of device [ 103.704333][ T4383] loop0: rw=1, sector=169, nr_sectors = 8 limit=128 [ 103.718143][ T4383] kworker/u8:62: attempt to access beyond end of device [ 103.718143][ T4383] loop0: rw=1, sector=185, nr_sectors = 8 limit=128 [ 103.733796][ T5832] loop9: detected capacity change from 0 to 7 [ 103.740236][ T5832] loop9: unable to read partition table [ 103.746051][ T5832] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 103.746051][ T5832] ) failed (rc=-5) [ 103.749601][ T5830] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.792989][ T5837] loop3: detected capacity change from 0 to 128 [ 103.800092][ T5837] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 103.813704][ T5837] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 103.839863][ T3374] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0 [ 103.849193][ T3374] hid-generic 0000:0000:0000.0029: hidraw0: HID v0.00 Device [syz1] on syz0 [ 103.976967][ T4383] kworker/u8:62: attempt to access beyond end of device [ 103.976967][ T4383] loop0: rw=1, sector=201, nr_sectors = 8 limit=128 [ 103.990621][ T4383] kworker/u8:62: attempt to access beyond end of device [ 103.990621][ T4383] loop0: rw=1, sector=217, nr_sectors = 8 limit=128 [ 104.004340][ T4383] kworker/u8:62: attempt to access beyond end of device [ 104.004340][ T4383] loop0: rw=1, sector=233, nr_sectors = 8 limit=128 [ 104.021225][ T4383] kworker/u8:62: attempt to access beyond end of device [ 104.021225][ T4383] loop0: rw=1, sector=249, nr_sectors = 8 limit=128 [ 104.035297][ T4383] kworker/u8:62: attempt to access beyond end of device [ 104.035297][ T4383] loop0: rw=1, sector=265, nr_sectors = 8 limit=128 [ 104.049534][ T4383] kworker/u8:62: attempt to access beyond end of device [ 104.049534][ T4383] loop0: rw=1, sector=281, nr_sectors = 8 limit=128 [ 104.063592][ T4383] kworker/u8:62: attempt to access beyond end of device [ 104.063592][ T4383] loop0: rw=1, sector=297, nr_sectors = 8 limit=128 [ 104.085729][ T5842] loop5: detected capacity change from 0 to 512 [ 104.092575][ T5842] EXT4-fs: Ignoring removed nobh option [ 104.103220][ T5844] loop0: detected capacity change from 0 to 512 [ 104.109996][ T5844] EXT4-fs: Ignoring removed bh option [ 104.115762][ T5844] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 104.124894][ T5844] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 104.135665][ T5844] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 104.146137][ T5842] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #3: comm syz.5.727: corrupted inode contents [ 104.159411][ T5844] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 104.160239][ T5842] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #3: comm syz.5.727: mark_inode_dirty error [ 104.168301][ T5844] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.179355][ T4356] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 104.193854][ T5842] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #3: comm syz.5.727: corrupted inode contents [ 104.215912][ T5842] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #3: comm syz.5.727: mark_inode_dirty error [ 104.217661][ T5844] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.725: bg 0: block 353: padding at end of block bitmap is not set [ 104.243222][ T5842] EXT4-fs error (device loop5): ext4_acquire_dquot:6937: comm syz.5.727: Failed to acquire dquot type 0 [ 104.261886][ T5842] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.727: corrupted inode contents [ 104.277996][ T5842] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #16: comm syz.5.727: mark_inode_dirty error [ 104.289553][ T5842] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.727: corrupted inode contents [ 104.290128][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.304288][ T5842] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #16: comm syz.5.727: mark_inode_dirty error [ 104.322998][ T5842] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.727: corrupted inode contents [ 104.335178][ T5842] EXT4-fs error (device loop5) in ext4_orphan_del:305: Corrupt filesystem [ 104.345759][ T5842] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.727: corrupted inode contents [ 104.406658][ T5842] EXT4-fs error (device loop5): ext4_truncate:4666: inode #16: comm syz.5.727: mark_inode_dirty error [ 104.433575][ T5861] loop3: detected capacity change from 0 to 8192 [ 104.439691][ T5842] EXT4-fs error (device loop5) in ext4_process_orphan:347: Corrupt filesystem [ 104.475870][ T5842] EXT4-fs (loop5): 1 truncate cleaned up [ 104.483231][ T5842] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.498303][ T5842] ext4 filesystem being mounted at /129/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 104.546270][ T5863] SELinux: ebitmap: truncated map [ 104.552283][ T5863] SELinux: failed to load policy [ 104.563292][ T3656] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.586186][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.603808][ T5863] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 104.632387][ T5874] loop4: detected capacity change from 0 to 128 [ 104.641045][ T5874] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 104.641045][ T5872] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: 80:00:00:00:00:85 [ 104.675720][ T5874] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 104.693021][ T5872] __nla_validate_parse: 2 callbacks suppressed [ 104.693052][ T5872] netlink: 28 bytes leftover after parsing attributes in process `syz.2.737'. [ 104.721569][ T3398] hid-generic 0000:0000:0000.002A: unknown main item tag 0x0 [ 104.735198][ T3398] hid-generic 0000:0000:0000.002A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 104.850689][ T5885] loop0: detected capacity change from 0 to 2048 [ 104.859925][ T5889] loop2: detected capacity change from 0 to 128 [ 104.866764][ T5887] loop9: detected capacity change from 0 to 7 [ 104.866947][ T5889] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 104.873150][ T5887] buffer_io_error: 6 callbacks suppressed [ 104.873170][ T5887] Buffer I/O error on dev loop9, logical block 0, async page read [ 104.885671][ T5889] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 104.901528][ T5887] Buffer I/O error on dev loop9, logical block 0, async page read [ 104.915379][ T5887] loop9: unable to read partition table [ 104.921477][ T5887] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 104.921477][ T5887] ) failed (rc=-5) [ 104.935265][ T5885] loop0: p1 < > p4 [ 104.941282][ T5885] loop0: p4 size 8388608 extends beyond EOD, truncated [ 104.973751][ T5892] loop3: detected capacity change from 0 to 512 [ 104.983768][ T5892] EXT4-fs warning (device loop3): ext4_xattr_inode_get:542: inode #11: comm syz.3.744: ea_inode file size=0 entry size=6 [ 104.998051][ T5892] EXT4-fs (loop3): 1 orphan inode deleted [ 105.004307][ T5892] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.039836][ T3374] hid-generic 0000:0000:0000.002B: unknown main item tag 0x0 [ 105.049628][ T3374] hid-generic 0000:0000:0000.002B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 105.053841][ T5895] IPv4: Oversized IP packet from 127.202.26.0 [ 105.077262][ T4361] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 105.102302][ T5897] loop0: detected capacity change from 0 to 512 [ 105.132891][ T5897] EXT4-fs: Ignoring removed nobh option [ 105.146537][ T5899] SELinux: ebitmap: truncated map [ 105.154899][ T5899] SELinux: failed to load policy [ 105.160835][ T5897] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #3: comm syz.0.747: corrupted inode contents [ 105.173615][ T5897] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #3: comm syz.0.747: mark_inode_dirty error [ 105.189113][ T5897] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #3: comm syz.0.747: corrupted inode contents [ 105.206342][ T5897] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #3: comm syz.0.747: mark_inode_dirty error [ 105.219624][ T5897] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.747: Failed to acquire dquot type 0 [ 105.231690][ T5897] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.747: corrupted inode contents [ 105.243802][ T5897] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #16: comm syz.0.747: mark_inode_dirty error [ 105.255341][ T5897] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.747: corrupted inode contents [ 105.267467][ T5897] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #16: comm syz.0.747: mark_inode_dirty error [ 105.279042][ T5897] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.747: corrupted inode contents [ 105.292283][ T5897] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 105.301255][ T5897] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.747: corrupted inode contents [ 105.314425][ T5897] EXT4-fs error (device loop0): ext4_truncate:4666: inode #16: comm syz.0.747: mark_inode_dirty error [ 105.325678][ T4361] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 105.326120][ T5897] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 105.344501][ T5897] EXT4-fs (loop0): 1 truncate cleaned up [ 105.356323][ T5897] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.375062][ T5897] ext4 filesystem being mounted at /153/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 105.396606][ T5909] loop2: detected capacity change from 0 to 8192 [ 105.410281][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.456631][ T5912] loop0: detected capacity change from 0 to 2048 [ 105.469088][ T5914] loop5: detected capacity change from 0 to 2048 [ 105.527895][ T5914] Alternate GPT is invalid, using primary GPT. [ 105.534338][ T5914] loop5: p1 p2 p3 [ 105.541928][ T5912] loop0: p1 < > p4 [ 105.546233][ T5912] loop0: p4 size 8388608 extends beyond EOD, truncated [ 105.586378][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.614594][ T5924] loop5: detected capacity change from 0 to 128 [ 105.661120][ T5924] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 105.782442][ T5929] netlink: 28 bytes leftover after parsing attributes in process `syz.3.758'. [ 105.798745][ T5924] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 105.816464][ T5932] loop0: detected capacity change from 0 to 2048 [ 105.880466][ T4006] hid-generic 0000:0000:0000.002C: unknown main item tag 0x0 [ 105.889828][ T5932] loop0: p1 < > p4 [ 105.909727][ T5932] loop0: p4 size 8388608 extends beyond EOD, truncated [ 105.918736][ T4006] hid-generic 0000:0000:0000.002C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 105.959841][ T5935] loop3: detected capacity change from 0 to 164 [ 106.006505][ T5935] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 106.067438][ T5935] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 106.075875][ T5937] loop0: detected capacity change from 0 to 512 [ 106.092176][ T5937] EXT4-fs: Ignoring removed nobh option [ 106.100746][ T5935] rock: directory entry would overflow storage [ 106.106938][ T5935] rock: sig=0x4f50, size=4, remaining=3 [ 106.112531][ T5935] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 106.138225][ T5937] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #3: comm syz.0.760: corrupted inode contents [ 106.153744][ T5937] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #3: comm syz.0.760: mark_inode_dirty error [ 106.177537][ T5939] loop4: detected capacity change from 0 to 8192 [ 106.189781][ T5945] loop9: detected capacity change from 0 to 7 [ 106.196158][ T5945] Buffer I/O error on dev loop9, logical block 0, async page read [ 106.205339][ T5945] Buffer I/O error on dev loop9, logical block 0, async page read [ 106.205992][ T5937] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #3: comm syz.0.760: corrupted inode contents [ 106.213315][ T5945] loop9: unable to read partition table [ 106.230617][ T5945] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 106.230617][ T5945] ) failed (rc=-5) [ 106.271154][ T5937] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #3: comm syz.0.760: mark_inode_dirty error [ 106.283441][ T4383] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 106.297040][ T5949] loop9: detected capacity change from 0 to 7 [ 106.303344][ T5937] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.760: Failed to acquire dquot type 0 [ 106.314915][ T5949] Buffer I/O error on dev loop9, logical block 0, async page read [ 106.324802][ T5949] Buffer I/O error on dev loop9, logical block 0, async page read [ 106.332759][ T5949] loop9: unable to read partition table [ 106.338479][ T5949] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 106.338479][ T5949] ) failed (rc=-5) [ 106.357908][ T5937] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.760: corrupted inode contents [ 106.374572][ T5937] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #16: comm syz.0.760: mark_inode_dirty error [ 106.386007][ T5954] loop3: detected capacity change from 0 to 128 [ 106.395441][ T5937] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.760: corrupted inode contents [ 106.410610][ T5937] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #16: comm syz.0.760: mark_inode_dirty error [ 106.410762][ T5954] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 106.423795][ T5937] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.760: corrupted inode contents [ 106.446003][ T5937] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 106.449197][ T5953] loop5: detected capacity change from 0 to 2048 [ 106.457955][ T5959] loop9: detected capacity change from 0 to 7 [ 106.468004][ T5954] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 106.469113][ T5959] Buffer I/O error on dev loop9, logical block 0, async page read [ 106.478078][ T5937] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.760: corrupted inode contents [ 106.485044][ T5959] Buffer I/O error on dev loop9, logical block 0, async page read [ 106.504589][ T5959] loop9: unable to read partition table [ 106.510389][ T5959] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 106.510389][ T5959] ) failed (rc=-5) [ 106.517342][ T5937] EXT4-fs error (device loop0): ext4_truncate:4666: inode #16: comm syz.0.760: mark_inode_dirty error [ 106.537712][ T5937] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 106.547413][ T5937] EXT4-fs (loop0): 1 truncate cleaned up [ 106.553603][ T5937] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.556689][ T5961] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: 80:00:00:00:00:85 [ 106.566358][ T5937] ext4 filesystem being mounted at /156/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.605254][ T5953] loop5: p1 < > p4 [ 106.606706][ T5961] netlink: 28 bytes leftover after parsing attributes in process `syz.2.769'. [ 106.619381][ T5953] loop5: p4 size 8388608 extends beyond EOD, truncated [ 106.707893][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.726477][ T5966] loop2: detected capacity change from 0 to 8192 [ 106.799877][ T5975] loop9: detected capacity change from 0 to 7 [ 106.812888][ T5975] Buffer I/O error on dev loop9, logical block 0, async page read [ 106.837947][ T5975] Buffer I/O error on dev loop9, logical block 0, async page read [ 106.845848][ T5975] loop9: unable to read partition table [ 106.915448][ T5971] loop0: detected capacity change from 0 to 8192 [ 106.968153][ T5975] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 106.968153][ T5975] ) failed (rc=-5) [ 107.166204][ T5980] loop0: detected capacity change from 0 to 512 [ 107.342548][ T5980] EXT4-fs: Ignoring removed bh option [ 107.524231][ T5980] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 107.533513][ T5980] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 108.237249][ T5980] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 108.252815][ T5980] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 108.270298][ T5990] loop2: detected capacity change from 0 to 1024 [ 108.303321][ T5980] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.326055][ T5990] EXT4-fs: Ignoring removed bh option [ 108.333055][ T5990] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 108.353532][ T5980] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.776: bg 0: block 353: padding at end of block bitmap is not set [ 108.384125][ T5990] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e84ce018, mo2=0000] [ 108.419664][ T5990] System zones: 0-1, 3-12 [ 108.430454][ T5990] EXT4-fs error (device loop2): ext4_map_blocks:814: inode #3: block 1: comm syz.2.779: lblock 1 mapped to illegal pblock 1 (length 1) [ 108.472149][ T5990] __quota_error: 390 callbacks suppressed [ 108.472169][ T5990] Quota error (device loop2): write_blk: dquota write failed [ 108.485394][ T5990] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 108.516387][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.537311][ T5990] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.779: Failed to acquire dquot type 0 [ 108.554546][ T5990] EXT4-fs error (device loop2): ext4_free_blocks:6696: comm syz.2.779: Freeing blocks not in datazone - block = 0, count = 4096 [ 108.572116][ T5990] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.779: Invalid inode bitmap blk 0 in block_group 0 [ 108.605656][ T4361] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:42: lblock 1 mapped to illegal pblock 1 (length 1) [ 108.624830][ T4361] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 108.633459][ T4361] EXT4-fs error (device loop2): ext4_release_dquot:6973: comm kworker/u8:42: Failed to release dquot type 0 [ 108.646485][ T5990] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem [ 108.655662][ T5990] EXT4-fs (loop2): 1 orphan inode deleted [ 108.656696][ T6012] hub 6-0:1.0: USB hub found [ 108.666540][ T6012] hub 6-0:1.0: 8 ports detected [ 108.691422][ T6016] loop0: detected capacity change from 0 to 128 [ 108.702128][ T6020] loop3: detected capacity change from 0 to 128 [ 108.709109][ T5990] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.718199][ T6019] loop5: detected capacity change from 0 to 2048 [ 108.723705][ T6020] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 108.741383][ T6016] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 108.753466][ T6016] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 108.763876][ T6020] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 108.778231][ T5990] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 108.788326][ T6019] loop5: p1 < > p4 [ 108.792645][ T6019] loop5: p4 size 8388608 extends beyond EOD, truncated [ 108.818335][ T3398] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 108.836221][ T3398] hid-generic 0000:0000:0000.002D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 108.903124][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.953553][ T3398] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 108.969311][ T6022] loop2: detected capacity change from 0 to 1024 [ 108.978669][ T3398] hid-generic 0000:0000:0000.002E: hidraw1: HID v0.00 Device [syz1] on syz0 [ 108.993360][ T6024] loop5: detected capacity change from 0 to 512 [ 109.000243][ T6022] EXT4-fs: Ignoring removed bh option [ 109.007639][ T6024] EXT4-fs: Ignoring removed nobh option [ 109.019621][ T6022] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 109.033385][ T6027] loop4: detected capacity change from 0 to 128 [ 109.040032][ T6022] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e84ce018, mo2=0000] [ 109.047686][ T6027] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 109.051106][ T6022] System zones: 0-1, 3-12 [ 109.070300][ T6027] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 109.082066][ T6022] EXT4-fs error (device loop2): ext4_map_blocks:814: inode #3: block 1: comm syz.2.791: lblock 1 mapped to illegal pblock 1 (length 1) [ 109.097144][ T6024] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #3: comm syz.5.792: corrupted inode contents [ 109.115657][ T6022] Quota error (device loop2): write_blk: dquota write failed [ 109.123123][ T6022] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 109.134386][ T6022] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.791: Failed to acquire dquot type 0 [ 109.145863][ T6024] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #3: comm syz.5.792: mark_inode_dirty error [ 109.146066][ T6022] EXT4-fs error (device loop2): ext4_free_blocks:6696: comm syz.2.791: Freeing blocks not in datazone - block = 0, count = 4096 [ 109.168397][ T9] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 109.177557][ T6022] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.791: Invalid inode bitmap blk 0 in block_group 0 [ 109.178475][ T9] hid-generic 0000:0000:0000.002F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 109.201222][ T4361] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:42: lblock 1 mapped to illegal pblock 1 (length 1) [ 109.211301][ T6024] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #3: comm syz.5.792: corrupted inode contents [ 109.227928][ T6022] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem [ 109.239022][ T4361] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 109.247622][ T4361] EXT4-fs error (device loop2): ext4_release_dquot:6973: comm kworker/u8:42: Failed to release dquot type 0 [ 109.265848][ T6024] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #3: comm syz.5.792: mark_inode_dirty error [ 109.265858][ T6022] EXT4-fs (loop2): 1 orphan inode deleted [ 109.277579][ T6022] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.297520][ T4340] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 109.317907][ T6022] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 109.358613][ T6024] Quota error (device loop5): write_blk: dquota write failed [ 109.365731][ T6033] netlink: 28 bytes leftover after parsing attributes in process `syz.3.794'. [ 109.386316][ T6024] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 109.406589][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.414263][ T6024] EXT4-fs error (device loop5): ext4_acquire_dquot:6937: comm syz.5.792: Failed to acquire dquot type 0 [ 109.429179][ T6024] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.792: corrupted inode contents [ 109.442912][ T4361] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 109.452818][ T6024] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #16: comm syz.5.792: mark_inode_dirty error [ 109.480933][ T6024] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.792: corrupted inode contents [ 109.498600][ T6024] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #16: comm syz.5.792: mark_inode_dirty error [ 109.517256][ T6024] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.792: corrupted inode contents [ 109.530607][ T6024] EXT4-fs error (device loop5) in ext4_orphan_del:305: Corrupt filesystem [ 109.547261][ T6024] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.792: corrupted inode contents [ 109.565433][ T6024] EXT4-fs error (device loop5): ext4_truncate:4666: inode #16: comm syz.5.792: mark_inode_dirty error [ 109.579246][ T6024] EXT4-fs error (device loop5) in ext4_process_orphan:347: Corrupt filesystem [ 109.591729][ T6024] EXT4-fs (loop5): 1 truncate cleaned up [ 109.597913][ T6024] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.633555][ T6024] ext4 filesystem being mounted at /142/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.652882][ T6056] loop3: detected capacity change from 0 to 512 [ 109.669771][ T6060] hub 6-0:1.0: USB hub found [ 109.674358][ T6056] EXT4-fs: Ignoring removed bh option [ 109.674840][ T6060] hub 6-0:1.0: 8 ports detected [ 109.685018][ T4383] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 109.695723][ T6056] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 109.704977][ T6056] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 109.715271][ T6056] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 109.724960][ T6056] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 109.733923][ T6056] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.758243][ T29] audit: type=1326 audit(1757818516.905:4273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6066 comm="syz.2.806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfbfaaeba9 code=0x7ffc0000 [ 109.781682][ T29] audit: type=1326 audit(1757818516.905:4274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6066 comm="syz.2.806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfbfaaeba9 code=0x7ffc0000 [ 109.812736][ T6061] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 109.832812][ T6069] SELinux: ebitmap: truncated map [ 109.839277][ T6069] SELinux: failed to load policy [ 109.866764][ T6071] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.803: bg 0: block 353: padding at end of block bitmap is not set [ 109.883213][ T3656] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.970177][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.318720][ T6097] loop3: detected capacity change from 0 to 2048 [ 110.319779][ T6099] loop2: detected capacity change from 0 to 512 [ 110.332248][ T6099] EXT4-fs: Ignoring removed nobh option [ 110.348900][ T6099] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #3: comm syz.2.817: corrupted inode contents [ 110.362511][ T6099] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #3: comm syz.2.817: mark_inode_dirty error [ 110.374803][ T6097] loop3: p1 < > p4 [ 110.380172][ T6097] loop3: p4 size 8388608 extends beyond EOD, truncated [ 110.380545][ T6099] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #3: comm syz.2.817: corrupted inode contents [ 110.399680][ T6099] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #3: comm syz.2.817: mark_inode_dirty error [ 110.411556][ T6099] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.817: Failed to acquire dquot type 0 [ 110.427391][ T6099] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.817: corrupted inode contents [ 110.440296][ T6099] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #16: comm syz.2.817: mark_inode_dirty error [ 110.453105][ T6099] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.817: corrupted inode contents [ 110.465304][ T6099] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #16: comm syz.2.817: mark_inode_dirty error [ 110.477888][ T6099] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.817: corrupted inode contents [ 110.490708][ T6099] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 110.499978][ T6099] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.817: corrupted inode contents [ 110.543952][ T6108] SELinux: ebitmap: truncated map [ 110.550478][ T6099] EXT4-fs error (device loop2): ext4_truncate:4666: inode #16: comm syz.2.817: mark_inode_dirty error [ 110.550949][ T6108] SELinux: failed to load policy [ 110.608875][ T6117] netlink: 'syz.0.823': attribute type 2 has an invalid length. [ 110.616695][ T6117] netlink: 'syz.0.823': attribute type 9 has an invalid length. [ 110.624622][ T6117] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.823'. [ 110.634198][ T6099] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 110.674932][ T6119] loop4: detected capacity change from 0 to 8192 [ 110.684303][ T6099] EXT4-fs (loop2): 1 truncate cleaned up [ 110.690503][ T6099] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.719572][ T6099] ext4 filesystem being mounted at /172/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 110.772935][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.791683][ T6132] tipc: Failed to remove unknown binding: 66,1,1/0:2355315302/2355315304 [ 110.842337][ T6138] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 110.850333][ T6138] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 111.547960][ T6152] loop5: detected capacity change from 0 to 128 [ 111.555082][ T6152] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 111.567455][ T6152] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 111.603161][ T4006] hid-generic 0000:0000:0000.0030: unknown main item tag 0x0 [ 111.619658][ T4006] hid-generic 0000:0000:0000.0030: hidraw0: HID v0.00 Device [syz1] on syz0 [ 111.658087][ T6159] loop3: detected capacity change from 0 to 8192 [ 111.695339][ T6161] loop9: detected capacity change from 0 to 7 [ 111.715901][ T6161] Buffer I/O error on dev loop9, logical block 0, async page read [ 111.724893][ T6161] Buffer I/O error on dev loop9, logical block 0, async page read [ 111.732811][ T6161] loop9: unable to read partition table [ 111.752382][ T6161] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 111.752382][ T6161] ) failed (rc=-5) [ 111.815567][ T6172] loop0: detected capacity change from 0 to 1024 [ 111.822424][ T6172] EXT4-fs: Ignoring removed bh option [ 111.830608][ T6172] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 111.845313][ T6172] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e84ce018, mo2=0000] [ 111.866667][ T6172] System zones: 0-1, 3-12 [ 111.898921][ T6172] EXT4-fs error (device loop0): ext4_map_blocks:814: inode #3: block 1: comm syz.0.843: lblock 1 mapped to illegal pblock 1 (length 1) [ 111.916505][ T6175] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: 80:00:00:00:00:85 [ 111.951509][ T6172] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.843: Failed to acquire dquot type 0 [ 112.019146][ T6172] EXT4-fs error (device loop0): ext4_free_blocks:6696: comm syz.0.843: Freeing blocks not in datazone - block = 0, count = 4096 [ 112.054907][ T6175] netlink: 28 bytes leftover after parsing attributes in process `syz.2.844'. [ 112.092833][ T2705] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 112.107395][ T6172] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm syz.0.843: Invalid inode bitmap blk 0 in block_group 0 [ 112.121120][ T6172] EXT4-fs error (device loop0) in ext4_free_inode:361: Corrupt filesystem [ 112.129850][ T4361] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:42: lblock 1 mapped to illegal pblock 1 (length 1) [ 112.155732][ T6172] EXT4-fs (loop0): 1 orphan inode deleted [ 112.166071][ T6172] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.179688][ T6185] loop9: detected capacity change from 0 to 7 [ 112.181757][ T4361] EXT4-fs error (device loop0): ext4_release_dquot:6973: comm kworker/u8:42: Failed to release dquot type 0 [ 112.197704][ T6185] Buffer I/O error on dev loop9, logical block 0, async page read [ 112.206222][ T6185] Buffer I/O error on dev loop9, logical block 0, async page read [ 112.214274][ T6185] loop9: unable to read partition table [ 112.222790][ T6185] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 112.222790][ T6185] ) failed (rc=-5) [ 112.248146][ T6172] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000. [ 112.288927][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.326913][ T6195] FAULT_INJECTION: forcing a failure. [ 112.326913][ T6195] name failslab, interval 1, probability 0, space 0, times 0 [ 112.339654][ T6195] CPU: 0 UID: 0 PID: 6195 Comm: syz.0.850 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 112.339710][ T6195] Tainted: [W]=WARN [ 112.339718][ T6195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 112.339733][ T6195] Call Trace: [ 112.339749][ T6195] [ 112.339758][ T6195] __dump_stack+0x1d/0x30 [ 112.339812][ T6195] dump_stack_lvl+0xe8/0x140 [ 112.339836][ T6195] dump_stack+0x15/0x1b [ 112.339858][ T6195] should_fail_ex+0x265/0x280 [ 112.339918][ T6195] ? getname_flags+0x208/0x3b0 [ 112.339946][ T6195] should_failslab+0x8c/0xb0 [ 112.339978][ T6195] __kmalloc_cache_noprof+0x4c/0x320 [ 112.340089][ T6195] getname_flags+0x208/0x3b0 [ 112.340123][ T6195] user_path_at+0x28/0x130 [ 112.340163][ T6195] do_utimes+0xd9/0x210 [ 112.340223][ T6195] __x64_sys_utimes+0xc6/0x180 [ 112.340258][ T6195] x64_sys_call+0x1e3d/0x2ff0 [ 112.340319][ T6195] do_syscall_64+0xd2/0x200 [ 112.340359][ T6195] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 112.340389][ T6195] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 112.340435][ T6195] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.340509][ T6195] RIP: 0033:0x7f548b37eba9 [ 112.340597][ T6195] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 112.340620][ T6195] RSP: 002b:00007f5489ddf038 EFLAGS: 00000246 ORIG_RAX: 00000000000000eb [ 112.340643][ T6195] RAX: ffffffffffffffda RBX: 00007f548b5c5fa0 RCX: 00007f548b37eba9 [ 112.340658][ T6195] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000200000003040 [ 112.340733][ T6195] RBP: 00007f5489ddf090 R08: 0000000000000000 R09: 0000000000000000 [ 112.340755][ T6195] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 112.340770][ T6195] R13: 00007f548b5c6038 R14: 00007f548b5c5fa0 R15: 00007ffd0b5fe088 [ 112.340793][ T6195] [ 112.541883][ T6193] loop5: detected capacity change from 0 to 8192 [ 112.566942][ T6199] loop9: detected capacity change from 0 to 7 [ 112.573291][ T6199] Buffer I/O error on dev loop9, logical block 0, async page read [ 112.599251][ T6199] Buffer I/O error on dev loop9, logical block 0, async page read [ 112.607348][ T6199] loop9: unable to read partition table [ 112.613471][ T6199] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 112.613471][ T6199] ) failed (rc=-5) [ 112.734383][ T6203] loop5: detected capacity change from 0 to 8192 [ 112.762030][ T6208] loop0: detected capacity change from 0 to 1024 [ 112.769165][ T6208] EXT4-fs: Ignoring removed orlov option [ 112.782288][ T6208] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.010031][ T6213] loop5: detected capacity change from 0 to 128 [ 113.040359][ T6213] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 113.089837][ T6213] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 113.128639][ T6215] loop9: detected capacity change from 0 to 7 [ 113.135666][ T6215] Buffer I/O error on dev loop9, logical block 0, async page read [ 113.143986][ T6215] Buffer I/O error on dev loop9, logical block 0, async page read [ 113.151896][ T6215] loop9: unable to read partition table [ 113.158060][ T6215] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 113.158060][ T6215] ) failed (rc=-5) [ 113.177474][ T9] hid-generic 0000:0000:0000.0031: unknown main item tag 0x0 [ 113.185684][ T9] hid-generic 0000:0000:0000.0031: hidraw0: HID v0.00 Device [syz1] on syz0 [ 113.340785][ T6222] loop2: detected capacity change from 0 to 1024 [ 113.347820][ T6222] EXT4-fs: Ignoring removed bh option [ 113.353680][ T6222] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 113.365885][ T6222] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e84ce018, mo2=0000] [ 113.387287][ T6222] System zones: 0-1, 3-12 [ 113.396095][ T6222] EXT4-fs error (device loop2): ext4_map_blocks:814: inode #3: block 1: comm syz.2.861: lblock 1 mapped to illegal pblock 1 (length 1) [ 113.411417][ T6222] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.861: Failed to acquire dquot type 0 [ 113.423513][ T6222] EXT4-fs error (device loop2): ext4_free_blocks:6696: comm syz.2.861: Freeing blocks not in datazone - block = 0, count = 4096 [ 113.473403][ T6222] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.861: Invalid inode bitmap blk 0 in block_group 0 [ 113.484900][ T6225] netlink: 20 bytes leftover after parsing attributes in process `syz.4.862'. [ 113.490278][ T4353] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:35: lblock 1 mapped to illegal pblock 1 (length 1) [ 113.519061][ T4356] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 113.528848][ T4353] __quota_error: 251 callbacks suppressed [ 113.528864][ T4353] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 113.528913][ T6222] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem [ 113.534668][ T4353] EXT4-fs error (device loop2): ext4_release_dquot:6973: comm kworker/u8:35: Failed to release dquot type 0 [ 113.564941][ T6222] EXT4-fs (loop2): 1 orphan inode deleted [ 113.581894][ T6230] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.602186][ T6222] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.616903][ T6230] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.621281][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.624865][ T29] audit: type=1326 audit(1757818520.755:4519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6235 comm="syz.5.867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c32aeeba9 code=0x7ffc0000 [ 113.662287][ T29] audit: type=1326 audit(1757818520.775:4520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6235 comm="syz.5.867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c32aeeba9 code=0x7ffc0000 [ 113.685697][ T29] audit: type=1326 audit(1757818520.775:4521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6235 comm="syz.5.867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2c32aeeba9 code=0x7ffc0000 [ 113.709165][ T29] audit: type=1326 audit(1757818520.775:4522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6235 comm="syz.5.867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c32aeeba9 code=0x7ffc0000 [ 113.732548][ T29] audit: type=1326 audit(1757818520.775:4523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6235 comm="syz.5.867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c32aeeba9 code=0x7ffc0000 [ 113.755972][ T29] audit: type=1326 audit(1757818520.775:4524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6235 comm="syz.5.867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2c32aeeba9 code=0x7ffc0000 [ 113.779413][ T29] audit: type=1326 audit(1757818520.775:4525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6235 comm="syz.5.867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c32aeeba9 code=0x7ffc0000 [ 113.787240][ T6222] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 113.802968][ T29] audit: type=1326 audit(1757818520.775:4526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6235 comm="syz.5.867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c32aeeba9 code=0x7ffc0000 [ 113.834584][ T29] audit: type=1326 audit(1757818520.775:4527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6235 comm="syz.5.867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2c32aeeba9 code=0x7ffc0000 [ 113.861987][ T6230] hugetlbfs: Bad value for 'gid' [ 113.866995][ T6230] hugetlbfs: Bad value for 'gid' [ 113.897552][ T6236] SELinux: ebitmap: truncated map [ 113.903461][ T6236] SELinux: failed to load policy [ 113.932495][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.022481][ T6262] loop5: detected capacity change from 0 to 128 [ 114.029846][ T6262] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 114.033838][ T6260] loop3: detected capacity change from 0 to 512 [ 114.048320][ T6262] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 114.067990][ T6260] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 114.103837][ T3386] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 114.118779][ T6260] EXT4-fs (loop3): 1 truncate cleaned up [ 114.121680][ T3386] hid-generic 0000:0000:0000.0032: hidraw0: HID v0.00 Device [syz1] on syz0 [ 114.124917][ T6260] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.337280][ C1] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 114.387169][ T6271] loop0: detected capacity change from 0 to 512 [ 114.393872][ T6271] EXT4-fs: Ignoring removed nobh option [ 114.418462][ T6271] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #3: comm syz.0.876: corrupted inode contents [ 114.442238][ T6271] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #3: comm syz.0.876: mark_inode_dirty error [ 114.467372][ T4361] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 114.482658][ T6271] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #3: comm syz.0.876: corrupted inode contents [ 114.495100][ T6271] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #3: comm syz.0.876: mark_inode_dirty error [ 114.507759][ T6271] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.876: Failed to acquire dquot type 0 [ 114.519891][ T6271] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.876: corrupted inode contents [ 114.532348][ T6271] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #16: comm syz.0.876: mark_inode_dirty error [ 114.544296][ T6271] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.876: corrupted inode contents [ 114.544423][ T6275] FAULT_INJECTION: forcing a failure. [ 114.544423][ T6275] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 114.556419][ T6271] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #16: comm syz.0.876: mark_inode_dirty error [ 114.569322][ T6275] CPU: 1 UID: 0 PID: 6275 Comm: syz.5.877 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 114.569439][ T6275] Tainted: [W]=WARN [ 114.569448][ T6275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 114.569466][ T6275] Call Trace: [ 114.569475][ T6275] [ 114.569487][ T6275] __dump_stack+0x1d/0x30 [ 114.569518][ T6275] dump_stack_lvl+0xe8/0x140 [ 114.569545][ T6275] dump_stack+0x15/0x1b [ 114.569573][ T6275] should_fail_ex+0x265/0x280 [ 114.569617][ T6275] should_fail+0xb/0x20 [ 114.569646][ T6275] should_fail_usercopy+0x1a/0x20 [ 114.569700][ T6275] strncpy_from_user+0x25/0x230 [ 114.569795][ T6275] ? kmem_cache_alloc_noprof+0x186/0x310 [ 114.569834][ T6275] ? getname_flags+0x80/0x3b0 [ 114.569877][ T6275] getname_flags+0xae/0x3b0 [ 114.569948][ T6275] __x64_sys_linkat+0x73/0xa0 [ 114.569982][ T6275] x64_sys_call+0x28fb/0x2ff0 [ 114.570012][ T6275] do_syscall_64+0xd2/0x200 [ 114.570104][ T6275] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 114.570139][ T6275] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 114.570180][ T6275] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.570212][ T6275] RIP: 0033:0x7f2c32aeeba9 [ 114.570291][ T6275] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 114.570317][ T6275] RSP: 002b:00007f2c31557038 EFLAGS: 00000246 ORIG_RAX: 0000000000000109 [ 114.570343][ T6275] RAX: ffffffffffffffda RBX: 00007f2c32d35fa0 RCX: 00007f2c32aeeba9 [ 114.570419][ T6275] RDX: ffffffffffffff9c RSI: 00002000000006c0 RDI: ffffffffffffff9c [ 114.570435][ T6275] RBP: 00007f2c31557090 R08: 0000000000001000 R09: 0000000000000000 [ 114.570452][ T6275] R10: 0000200000000700 R11: 0000000000000246 R12: 0000000000000001 [ 114.570470][ T6275] R13: 00007f2c32d36038 R14: 00007f2c32d35fa0 R15: 00007fff49144c68 [ 114.570518][ T6275] [ 114.775951][ T6281] hub 6-0:1.0: USB hub found [ 114.780336][ T6278] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 114.781260][ T6281] hub 6-0:1.0: 8 ports detected [ 114.787773][ T6271] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.876: corrupted inode contents [ 114.805123][ T6278] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 114.806455][ T6271] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 114.822842][ T6278] batman_adv: batadv0: Removing interface: dummy0 [ 114.831744][ T6271] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.876: corrupted inode contents [ 114.872482][ T6271] EXT4-fs error (device loop0): ext4_truncate:4666: inode #16: comm syz.0.876: mark_inode_dirty error [ 114.891047][ T6271] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 114.925851][ T6271] EXT4-fs (loop0): 1 truncate cleaned up [ 114.936659][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.946200][ T6271] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.956362][ T6292] SELinux: ebitmap: truncated map [ 114.959397][ T6271] ext4 filesystem being mounted at /178/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 114.968233][ T6292] SELinux: failed to load policy [ 115.002264][ T6297] loop3: detected capacity change from 0 to 1024 [ 115.018285][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.041605][ T6297] EXT4-fs: Ignoring removed bh option [ 115.049149][ T6297] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 115.063549][ T6297] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e84ce018, mo2=0000] [ 115.076088][ T6307] loop9: detected capacity change from 0 to 7 [ 115.082858][ T6307] Buffer I/O error on dev loop9, logical block 0, async page read [ 115.090834][ T6307] Buffer I/O error on dev loop9, logical block 0, async page read [ 115.093852][ T6297] System zones: 0-1, 3-12 [ 115.098822][ T6307] loop9: unable to read partition table [ 115.109079][ T6307] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 115.109079][ T6307] ) failed (rc=-5) [ 115.111044][ T6297] EXT4-fs error (device loop3): ext4_map_blocks:814: inode #3: block 1: comm syz.3.883: lblock 1 mapped to illegal pblock 1 (length 1) [ 115.155635][ T6297] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.883: Failed to acquire dquot type 0 [ 115.167856][ T6297] EXT4-fs error (device loop3): ext4_free_blocks:6696: comm syz.3.883: Freeing blocks not in datazone - block = 0, count = 4096 [ 115.181491][ T6297] EXT4-fs error (device loop3): ext4_read_inode_bitmap:139: comm syz.3.883: Invalid inode bitmap blk 0 in block_group 0 [ 115.194386][ T4383] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:62: lblock 1 mapped to illegal pblock 1 (length 1) [ 115.209203][ T4383] EXT4-fs error (device loop3): ext4_release_dquot:6973: comm kworker/u8:62: Failed to release dquot type 0 [ 115.209624][ T6297] EXT4-fs error (device loop3) in ext4_free_inode:361: Corrupt filesystem [ 115.230166][ T6297] EXT4-fs (loop3): 1 orphan inode deleted [ 115.236382][ T6297] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.255684][ T6297] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000. [ 115.275705][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.441636][ T6324] loop3: detected capacity change from 0 to 1024 [ 115.444770][ T6325] netlink: 16 bytes leftover after parsing attributes in process `syz.4.892'. [ 115.725865][ T6328] loop3: detected capacity change from 0 to 512 [ 115.732608][ T6328] EXT4-fs: Ignoring removed nobh option [ 115.748704][ T6328] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #3: comm syz.3.896: corrupted inode contents [ 115.760641][ T6328] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #3: comm syz.3.896: mark_inode_dirty error [ 115.772740][ T6328] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #3: comm syz.3.896: corrupted inode contents [ 115.784813][ T6328] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #3: comm syz.3.896: mark_inode_dirty error [ 115.796445][ T6328] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.896: Failed to acquire dquot type 0 [ 115.808215][ T6328] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.896: corrupted inode contents [ 115.820262][ T6328] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #16: comm syz.3.896: mark_inode_dirty error [ 115.832043][ T6328] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.896: corrupted inode contents [ 115.844505][ T6328] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #16: comm syz.3.896: mark_inode_dirty error [ 115.855949][ T6328] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.896: corrupted inode contents [ 115.867959][ T6328] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 115.876723][ T6328] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.896: corrupted inode contents [ 115.888732][ T6328] EXT4-fs error (device loop3): ext4_truncate:4666: inode #16: comm syz.3.896: mark_inode_dirty error [ 115.900078][ T6328] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 115.915769][ T6328] EXT4-fs (loop3): 1 truncate cleaned up [ 115.922724][ T6328] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.935454][ T6328] ext4 filesystem being mounted at /198/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.969752][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.986347][ T6336] loop9: detected capacity change from 0 to 7 [ 116.003115][ T6336] loop9: unable to read partition table [ 116.012233][ T6340] loop3: detected capacity change from 0 to 512 [ 116.018648][ T6336] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 116.018648][ T6336] ) failed (rc=-5) [ 116.031318][ T6340] EXT4-fs: Ignoring removed bh option [ 116.038276][ T6340] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 116.047490][ T6340] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 116.056966][ T6340] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 116.066682][ T6340] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 116.075919][ T6340] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 116.078766][ T6348] loop0: detected capacity change from 0 to 512 [ 116.094170][ T6340] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.900: bg 0: block 353: padding at end of block bitmap is not set [ 116.096809][ T6348] EXT4-fs warning (device loop0): ext4_xattr_inode_get:542: inode #11: comm syz.0.902: ea_inode file size=0 entry size=6 [ 116.123373][ T6348] EXT4-fs (loop0): 1 orphan inode deleted [ 116.129882][ T6348] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 116.255244][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.400335][ T6355] SELinux: ebitmap: truncated map [ 116.427609][ T6355] SELinux: failed to load policy [ 116.487739][ T6357] loop4: detected capacity change from 0 to 8192 [ 116.659182][ T6374] loop4: detected capacity change from 0 to 512 [ 116.666294][ T6374] EXT4-fs: Ignoring removed nobh option [ 116.683605][ T6374] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #3: comm syz.4.911: corrupted inode contents [ 116.697211][ T6374] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #3: comm syz.4.911: mark_inode_dirty error [ 116.709534][ T6374] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #3: comm syz.4.911: corrupted inode contents [ 116.721800][ T6374] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #3: comm syz.4.911: mark_inode_dirty error [ 116.734046][ T6374] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.911: Failed to acquire dquot type 0 [ 116.746168][ T6374] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.911: corrupted inode contents [ 116.759003][ T6374] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #16: comm syz.4.911: mark_inode_dirty error [ 116.771013][ T6374] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.911: corrupted inode contents [ 116.783471][ T6374] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #16: comm syz.4.911: mark_inode_dirty error [ 116.795952][ T6374] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.911: corrupted inode contents [ 116.808399][ T6374] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 116.817513][ T6374] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.911: corrupted inode contents [ 116.829877][ T6374] EXT4-fs error (device loop4): ext4_truncate:4666: inode #16: comm syz.4.911: mark_inode_dirty error [ 116.841590][ T6374] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 116.851615][ T6374] EXT4-fs (loop4): 1 truncate cleaned up [ 116.857933][ T6374] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.871646][ T6374] ext4 filesystem being mounted at /160/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 116.920093][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.947900][ T6390] loop9: detected capacity change from 0 to 7 [ 116.954252][ T6390] buffer_io_error: 2 callbacks suppressed [ 116.954268][ T6390] Buffer I/O error on dev loop9, logical block 0, async page read [ 116.968532][ T6390] Buffer I/O error on dev loop9, logical block 0, async page read [ 116.976383][ T6390] loop9: unable to read partition table [ 116.982419][ T6390] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 116.982419][ T6390] ) failed (rc=-5) [ 117.066910][ T6398] loop4: detected capacity change from 0 to 8192 [ 117.094191][ T6401] loop9: detected capacity change from 0 to 7 [ 117.101962][ T6401] Buffer I/O error on dev loop9, logical block 0, async page read [ 117.111817][ T6401] Buffer I/O error on dev loop9, logical block 0, async page read [ 117.119722][ T6401] loop9: unable to read partition table [ 117.125601][ T6401] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 117.125601][ T6401] ) failed (rc=-5) [ 117.196432][ T6405] veth0_to_team: entered promiscuous mode [ 117.247642][ T6412] netlink: 71 bytes leftover after parsing attributes in process `syz.2.924'. [ 117.441995][ T6435] hub 6-0:1.0: USB hub found [ 117.446860][ T6435] hub 6-0:1.0: 8 ports detected [ 117.472204][ T6438] loop4: detected capacity change from 0 to 512 [ 117.481947][ T6438] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 117.506879][ T6438] EXT4-fs (loop4): 1 truncate cleaned up [ 117.518602][ T6438] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.552938][ T6440] loop3: detected capacity change from 0 to 8192 [ 117.630795][ T6444] netlink: 4 bytes leftover after parsing attributes in process `syz.5.934'. [ 117.654028][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.671781][ T6448] 9pnet_fd: Insufficient options for proto=fd [ 117.753933][ T6460] loop3: detected capacity change from 0 to 1024 [ 117.760728][ T6460] EXT4-fs: Ignoring removed bh option [ 117.771326][ T6460] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 117.782658][ T6460] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e84ce018, mo2=0000] [ 117.791073][ T6460] System zones: 0-1, 3-12 [ 117.800905][ T6460] EXT4-fs error (device loop3): ext4_map_blocks:814: inode #3: block 1: comm syz.3.941: lblock 1 mapped to illegal pblock 1 (length 1) [ 117.818026][ T6466] loop5: detected capacity change from 0 to 1024 [ 117.818340][ T6460] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.941: Failed to acquire dquot type 0 [ 117.824882][ T6466] EXT4-fs: Ignoring removed bh option [ 117.841272][ T6460] EXT4-fs error (device loop3): ext4_free_blocks:6696: comm syz.3.941: Freeing blocks not in datazone - block = 0, count = 4096 [ 117.855540][ T6460] EXT4-fs error (device loop3): ext4_read_inode_bitmap:139: comm syz.3.941: Invalid inode bitmap blk 0 in block_group 0 [ 117.868298][ T6466] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 117.871186][ T4383] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:62: lblock 1 mapped to illegal pblock 1 (length 1) [ 117.879774][ T6460] EXT4-fs error (device loop3) in ext4_free_inode:361: Corrupt filesystem [ 117.902349][ T6466] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e84ce018, mo2=0000] [ 117.910766][ T6466] System zones: 0-1, 3-12 [ 117.910791][ T6460] EXT4-fs (loop3): 1 orphan inode deleted [ 117.911289][ T6460] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.915183][ T6466] [ 117.916318][ T6466] EXT4-fs error (device loop5): ext4_map_blocks:814: inode #3: block 1: comm syz.5.942: lblock 1 mapped to illegal pblock 1 (length 1) [ 117.939236][ T4383] EXT4-fs error (device loop3): ext4_release_dquot:6973: comm kworker/u8:62: Failed to release dquot type 0 [ 117.967250][ T6466] EXT4-fs error (device loop5): ext4_acquire_dquot:6937: comm syz.5.942: Failed to acquire dquot type 0 [ 117.982592][ T6471] hub 6-0:1.0: USB hub found [ 117.987447][ T6471] hub 6-0:1.0: 8 ports detected [ 117.992506][ T6466] EXT4-fs error (device loop5): ext4_free_blocks:6696: comm syz.5.942: Freeing blocks not in datazone - block = 0, count = 4096 [ 118.006081][ T6460] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000. [ 118.006236][ T6466] EXT4-fs error (device loop5): ext4_read_inode_bitmap:139: comm syz.5.942: Invalid inode bitmap blk 0 in block_group 0 [ 118.015341][ T4340] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:22: lblock 1 mapped to illegal pblock 1 (length 1) [ 118.043462][ T6466] EXT4-fs error (device loop5) in ext4_free_inode:361: Corrupt filesystem [ 118.052238][ T4340] EXT4-fs error (device loop5): ext4_release_dquot:6973: comm kworker/u8:22: Failed to release dquot type 0 [ 118.064685][ T6466] EXT4-fs (loop5): 1 orphan inode deleted [ 118.071563][ T6466] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.106295][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.116149][ T6466] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000. [ 118.136455][ T3656] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.161107][ T6481] loop2: detected capacity change from 0 to 512 [ 118.170686][ T6481] EXT4-fs warning (device loop2): ext4_xattr_inode_get:542: inode #11: comm syz.2.947: ea_inode file size=0 entry size=6 [ 118.183882][ T6481] EXT4-fs (loop2): 1 orphan inode deleted [ 118.196076][ T6481] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 118.212532][ T6488] 9pnet_fd: Insufficient options for proto=fd [ 118.270947][ T6494] loop3: detected capacity change from 0 to 1024 [ 118.278580][ T6494] EXT4-fs: Ignoring removed nobh option [ 118.290636][ T6494] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.314965][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.335500][ T6499] loop5: detected capacity change from 0 to 512 [ 118.337020][ T6501] loop4: detected capacity change from 0 to 512 [ 118.342221][ T6499] EXT4-fs: Ignoring removed nobh option [ 118.349649][ T6501] EXT4-fs: Ignoring removed nobh option [ 118.369240][ T6501] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #3: comm syz.4.955: corrupted inode contents [ 118.369412][ T6499] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #3: comm syz.5.956: corrupted inode contents [ 118.393387][ T6501] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #3: comm syz.4.955: mark_inode_dirty error [ 118.393972][ T6499] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #3: comm syz.5.956: mark_inode_dirty error [ 118.405737][ T6501] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #3: comm syz.4.955: corrupted inode contents [ 118.420101][ T6499] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #3: comm syz.5.956: corrupted inode contents [ 118.428705][ T6501] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #3: comm syz.4.955: mark_inode_dirty error [ 118.439955][ T6499] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #3: comm syz.5.956: mark_inode_dirty error [ 118.451842][ T6501] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.955: Failed to acquire dquot type 0 [ 118.462528][ T6499] EXT4-fs error (device loop5): ext4_acquire_dquot:6937: comm syz.5.956: Failed to acquire dquot type 0 [ 118.474330][ T6501] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.955: corrupted inode contents [ 118.485471][ T6499] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.956: corrupted inode contents [ 118.498325][ T6501] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #16: comm syz.4.955: mark_inode_dirty error [ 118.509384][ T6499] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #16: comm syz.5.956: mark_inode_dirty error [ 118.520357][ T6501] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.955: corrupted inode contents [ 118.531282][ T6499] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.956: corrupted inode contents [ 118.543139][ T6501] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #16: comm syz.4.955: mark_inode_dirty error [ 118.554653][ T6499] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #16: comm syz.5.956: mark_inode_dirty error [ 118.566222][ T6501] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.955: corrupted inode contents [ 118.577233][ T6499] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.956: corrupted inode contents [ 118.589665][ T6501] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 118.600685][ T6499] EXT4-fs error (device loop5) in ext4_orphan_del:305: Corrupt filesystem [ 118.609976][ T6501] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.955: corrupted inode contents [ 118.617993][ T6499] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.956: corrupted inode contents [ 118.631016][ T6501] EXT4-fs error (device loop4): ext4_truncate:4666: inode #16: comm syz.4.955: mark_inode_dirty error [ 118.641281][ T6499] EXT4-fs error (device loop5): ext4_truncate:4666: inode #16: comm syz.5.956: mark_inode_dirty error [ 118.652640][ T6501] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 118.663465][ T6499] EXT4-fs error (device loop5) in ext4_process_orphan:347: Corrupt filesystem [ 118.673329][ T6501] EXT4-fs (loop4): 1 truncate cleaned up [ 118.681600][ T6499] EXT4-fs (loop5): 1 truncate cleaned up [ 118.687216][ T6501] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.693580][ T6499] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.704931][ T6501] ext4 filesystem being mounted at /168/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 118.717989][ T6499] ext4 filesystem being mounted at /173/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 118.748965][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.776326][ T3656] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.794289][ T6513] netlink: 71 bytes leftover after parsing attributes in process `syz.5.958'. [ 118.798141][ T6512] loop4: detected capacity change from 0 to 1024 [ 118.810102][ T6512] EXT4-fs: Ignoring removed bh option [ 118.816993][ T6512] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 118.821006][ T29] kauditd_printk_skb: 399 callbacks suppressed [ 118.821057][ T29] audit: type=1326 audit(1757818525.945:4908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6511 comm="syz.5.958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c32aeeba9 code=0x7ffc0000 [ 118.831629][ T6512] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e84ce018, mo2=0000] [ 118.833518][ T29] audit: type=1326 audit(1757818525.945:4909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6511 comm="syz.5.958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2c32aeeba9 code=0x7ffc0000 [ 118.860041][ T6512] System zones: [ 118.865061][ T29] audit: type=1326 audit(1757818525.945:4910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6511 comm="syz.5.958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c32aeeba9 code=0x7ffc0000 [ 118.888394][ T6512] 0-1, 3-12 [ 118.890343][ T6512] EXT4-fs error (device loop4): ext4_map_blocks:814: inode #3: block 1: comm syz.4.959: lblock 1 mapped to illegal pblock 1 (length 1) [ 118.892007][ T29] audit: type=1326 audit(1757818525.945:4911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6511 comm="syz.5.958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2c32aeeba9 code=0x7ffc0000 [ 118.916680][ T6512] Quota error (device loop4): write_blk: dquota write failed [ 118.918683][ T29] audit: type=1326 audit(1757818525.945:4912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6511 comm="syz.5.958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c32aeeba9 code=0x7ffc0000 [ 118.932556][ T6512] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 118.955923][ T29] audit: type=1326 audit(1757818525.945:4913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6511 comm="syz.5.958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2c32aeeba9 code=0x7ffc0000 [ 118.955960][ T29] audit: type=1326 audit(1757818525.945:4914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6511 comm="syz.5.958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c32aeeba9 code=0x7ffc0000 [ 118.955994][ T29] audit: type=1326 audit(1757818525.945:4915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6511 comm="syz.5.958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2c32aeeba9 code=0x7ffc0000 [ 118.964512][ T6512] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.959: Failed to acquire dquot type 0 [ 119.078877][ T6512] EXT4-fs error (device loop4): ext4_free_blocks:6696: comm syz.4.959: Freeing blocks not in datazone - block = 0, count = 4096 [ 119.093076][ T6512] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.959: Invalid inode bitmap blk 0 in block_group 0 [ 119.105900][ T4340] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:22: lblock 1 mapped to illegal pblock 1 (length 1) [ 119.106400][ T6512] EXT4-fs error (device loop4) in ext4_free_inode:361: Corrupt filesystem [ 119.132197][ T4340] EXT4-fs error (device loop4): ext4_release_dquot:6973: comm kworker/u8:22: Failed to release dquot type 0 [ 119.133514][ T6512] EXT4-fs (loop4): 1 orphan inode deleted [ 119.159179][ T6519] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.168081][ T6512] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000. [ 119.169155][ T6519] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.185305][ T6519] hugetlbfs: Bad value for 'gid' [ 119.190365][ T6519] hugetlbfs: Bad value for 'gid' [ 119.218764][ T6523] 9pnet_fd: Insufficient options for proto=fd [ 119.282478][ T6527] loop3: detected capacity change from 0 to 8192 [ 119.309769][ T6531] loop4: detected capacity change from 0 to 512 [ 119.316476][ T6531] EXT4-fs: Ignoring removed nobh option [ 119.330016][ T6531] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #3: comm syz.4.967: corrupted inode contents [ 119.343526][ T6531] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #3: comm syz.4.967: mark_inode_dirty error [ 119.355363][ T6531] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #3: comm syz.4.967: corrupted inode contents [ 119.368139][ T6531] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #3: comm syz.4.967: mark_inode_dirty error [ 119.380156][ T6531] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.967: Failed to acquire dquot type 0 [ 119.392183][ T6531] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.967: corrupted inode contents [ 119.405085][ T6531] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #16: comm syz.4.967: mark_inode_dirty error [ 119.416696][ T6531] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.967: corrupted inode contents [ 119.428802][ T6531] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #16: comm syz.4.967: mark_inode_dirty error [ 119.440343][ T6531] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.967: corrupted inode contents [ 119.452371][ T6531] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 119.461754][ T6531] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.967: corrupted inode contents [ 119.474181][ T6531] EXT4-fs error (device loop4): ext4_truncate:4666: inode #16: comm syz.4.967: mark_inode_dirty error [ 119.485831][ T6531] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 119.495280][ T6531] EXT4-fs (loop4): 1 truncate cleaned up [ 119.495710][ T6531] ext4 filesystem being mounted at /174/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 119.587213][ T6541] FAULT_INJECTION: forcing a failure. [ 119.587213][ T6541] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 119.600544][ T6541] CPU: 0 UID: 0 PID: 6541 Comm: syz.4.970 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 119.600584][ T6541] Tainted: [W]=WARN [ 119.600594][ T6541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 119.600659][ T6541] Call Trace: [ 119.600665][ T6541] [ 119.600672][ T6541] __dump_stack+0x1d/0x30 [ 119.600695][ T6541] dump_stack_lvl+0xe8/0x140 [ 119.600712][ T6541] dump_stack+0x15/0x1b [ 119.600726][ T6541] should_fail_ex+0x265/0x280 [ 119.600747][ T6541] should_fail+0xb/0x20 [ 119.600807][ T6541] should_fail_usercopy+0x1a/0x20 [ 119.600896][ T6541] _copy_from_user+0x1c/0xb0 [ 119.600923][ T6541] restore_altstack+0x4b/0x2d0 [ 119.601005][ T6541] ? __set_task_blocked+0x23a/0x2a0 [ 119.601126][ T6541] __ia32_sys_rt_sigreturn+0xdc/0x350 [ 119.601167][ T6541] ? _raw_spin_unlock_irq+0x26/0x50 [ 119.601188][ T6541] ? signal_setup_done+0x266/0x290 [ 119.601203][ T6541] ? xfd_validate_state+0x45/0xf0 [ 119.601241][ T6541] ? fpu__clear_user_states+0x63/0x1e0 [ 119.601300][ T6541] ? fpregs_mark_activate+0x66/0x140 [ 119.601326][ T6541] ? fpu__clear_user_states+0x63/0x1e0 [ 119.601357][ T6541] ? __secure_computing+0x82/0x150 [ 119.601413][ T6541] x64_sys_call+0x2d3c/0x2ff0 [ 119.601433][ T6541] do_syscall_64+0xd2/0x200 [ 119.601461][ T6541] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 119.601481][ T6541] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 119.601571][ T6541] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.601589][ T6541] RIP: 0033:0x7f23302dada9 [ 119.601603][ T6541] Code: 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 04 25 [ 119.601657][ T6541] RSP: 002b:00007f232eda6a80 EFLAGS: 00000202 ORIG_RAX: 000000000000000f [ 119.601674][ T6541] RAX: ffffffffffffffda RBX: 00007f2330585fa0 RCX: 00007f23302dada9 [ 119.601685][ T6541] RDX: 00007f232eda6a80 RSI: 00007f232eda6bb0 RDI: 0000000000000021 [ 119.601696][ T6541] RBP: 00007f232eda7090 R08: 0000000000000000 R09: 0000000000000000 [ 119.601707][ T6541] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 119.601717][ T6541] R13: 00007f2330586038 R14: 00007f2330585fa0 R15: 00007ffe1d249468 [ 119.601811][ T6541] [ 119.849043][ T6544] 9pnet_fd: Insufficient options for proto=fd [ 119.876648][ T6549] loop5: detected capacity change from 0 to 1024 [ 119.884169][ T6549] EXT4-fs: Ignoring removed bh option [ 119.890137][ T6549] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 119.901678][ T6549] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e84ce018, mo2=0000] [ 119.910073][ T6549] System zones: 0-1, 3-12 [ 119.915448][ T6549] EXT4-fs error (device loop5): ext4_map_blocks:814: inode #3: block 1: comm syz.5.974: lblock 1 mapped to illegal pblock 1 (length 1) [ 119.938064][ T6549] EXT4-fs error (device loop5): ext4_acquire_dquot:6937: comm syz.5.974: Failed to acquire dquot type 0 [ 119.967640][ T6549] EXT4-fs error (device loop5): ext4_free_blocks:6696: comm syz.5.974: Freeing blocks not in datazone - block = 0, count = 4096 [ 119.989036][ T6549] EXT4-fs error (device loop5): ext4_read_inode_bitmap:139: comm syz.5.974: Invalid inode bitmap blk 0 in block_group 0 [ 120.001899][ T4353] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:35: lblock 1 mapped to illegal pblock 1 (length 1) [ 120.035014][ T4353] EXT4-fs error (device loop5): ext4_release_dquot:6973: comm kworker/u8:35: Failed to release dquot type 0 [ 120.053527][ T6549] EXT4-fs error (device loop5) in ext4_free_inode:361: Corrupt filesystem [ 120.071018][ T6549] EXT4-fs (loop5): 1 orphan inode deleted [ 120.096273][ T6549] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000. [ 120.271869][ T6580] loop0: detected capacity change from 0 to 512 [ 120.281241][ T6579] loop5: detected capacity change from 0 to 2048 [ 120.291377][ T6580] EXT4-fs warning (device loop0): ext4_xattr_inode_get:542: inode #11: comm syz.0.983: ea_inode file size=0 entry size=6 [ 120.304309][ T6580] EXT4-fs (loop0): 1 orphan inode deleted [ 120.326651][ T6586] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.337451][ T6586] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.339149][ T6579] loop5: p1 < > p4 [ 120.346721][ T6586] hugetlbfs: Bad value for 'gid' [ 120.349785][ T6579] loop5: p4 size 8388608 extends beyond EOD, truncated [ 120.354123][ T6586] hugetlbfs: Bad value for 'gid' [ 120.447985][ T6594] ================================================================== [ 120.456115][ T6594] BUG: KCSAN: data-race in call_rcu / mas_state_walk [ 120.462831][ T6594] [ 120.465162][ T6594] write to 0xffff888109debf10 of 8 bytes by task 6595 on cpu 0: [ 120.472804][ T6594] call_rcu+0x44/0x3f0 [ 120.476901][ T6594] mas_wmb_replace+0xc6a/0x14a0 [ 120.481775][ T6594] mas_wr_store_entry+0x1773/0x2b50 [ 120.486996][ T6594] mas_store_prealloc+0x74d/0x9e0 [ 120.492048][ T6594] vma_iter_store_new+0x1c5/0x200 [ 120.497091][ T6594] mmap_region+0x1100/0x1630 [ 120.501695][ T6594] do_mmap+0x9b3/0xbe0 [ 120.505789][ T6594] vm_mmap_pgoff+0x17a/0x2e0 [ 120.510398][ T6594] ksys_mmap_pgoff+0xc2/0x310 [ 120.515081][ T6594] x64_sys_call+0x14a3/0x2ff0 [ 120.519774][ T6594] do_syscall_64+0xd2/0x200 [ 120.524303][ T6594] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.530235][ T6594] [ 120.532562][ T6594] read to 0xffff888109debf10 of 8 bytes by task 6594 on cpu 1: [ 120.540109][ T6594] mas_state_walk+0x3e9/0x650 [ 120.544814][ T6594] mas_walk+0x60/0x150 [ 120.548956][ T6594] lock_vma_under_rcu+0x8d/0x160 [ 120.553946][ T6594] do_user_addr_fault+0x233/0x1090 [ 120.559080][ T6594] exc_page_fault+0x62/0xa0 [ 120.563601][ T6594] asm_exc_page_fault+0x26/0x30 [ 120.568472][ T6594] [ 120.570799][ T6594] Reported by Kernel Concurrency Sanitizer on: [ 120.576958][ T6594] CPU: 1 UID: 0 PID: 6594 Comm: syz.5.990 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 120.588173][ T6594] Tainted: [W]=WARN [ 120.591990][ T6594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 120.602064][ T6594] ================================================================== [ 120.615422][ T6595] loop5: detected capacity change from 0 to 1024 [ 120.622141][ T6595] EXT4-fs: Ignoring removed bh option [ 120.628199][ T6595] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 120.639240][ T6595] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e84ce018, mo2=0000] [ 120.648927][ T6595] System zones: 0-1, 3-12 [ 120.654475][ T6595] EXT4-fs error (device loop5): ext4_map_blocks:814: inode #3: block 1: comm syz.5.990: lblock 1 mapped to illegal pblock 1 (length 1) [ 120.668637][ T6595] EXT4-fs error (device loop5): ext4_acquire_dquot:6937: comm syz.5.990: Failed to acquire dquot type 0 [ 120.680357][ T6595] EXT4-fs error (device loop5): ext4_free_blocks:6696: comm syz.5.990: Freeing blocks not in datazone - block = 0, count = 4096 [ 120.694116][ T6595] EXT4-fs error (device loop5): ext4_read_inode_bitmap:139: comm syz.5.990: Invalid inode bitmap blk 0 in block_group 0 [ 120.706913][ T4361] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:42: lblock 1 mapped to illegal pblock 1 (length 1) [ 120.707251][ T6595] EXT4-fs error (device loop5) in ext4_free_inode:361: Corrupt filesystem [ 120.722881][ T4361] EXT4-fs error (device loop5): ext4_release_dquot:6973: comm kworker/u8:42: Failed to release dquot type 0 [ 120.730867][ T6595] EXT4-fs (loop5): 1 orphan inode deleted [ 120.751260][ T6595] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000.