last executing test programs: 12.061208867s ago: executing program 2 (id=811): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r2, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 11.02945271s ago: executing program 2 (id=821): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_usbip_server_init(0x5) 9.523906355s ago: executing program 2 (id=835): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000240)={[{@noblock_validity}, {}, {@sysvgroups}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@grpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) (async) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000200)={[0x7f]}, 0x8, 0x0) r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000001300), 0x10000, 0x0) pidfd_send_signal(r2, 0x28, &(0x7f0000001340)={0x11, 0x80000001, 0x6}, 0x0) (async) socket$packet(0x11, 0x2, 0x300) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) (async) getrandom(0x0, 0x0, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000480)={&(0x7f0000001100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x2c, 0x0, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_NEWTABLE={0xcc, 0x0, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_USERDATA={0x73, 0x6, "a35af7e5bd81ec686aa618b41a5c21d8ba51cabd6a2a8922d438270d8b32ed44ead700a8f63af0581bf73708af0ec3d89349083f0a27f6e059356ae53e1f8bf9bc31d737530bba88466dbb3bcfc08f06d1149b90c01dabb289f4303595a094b2bf8ea9f47a69b64ef0ea84e2107cc8"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELSETELEM={0x14, 0xe, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x1}}, @NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT={0xc, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x2b}]}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_RULE_ID={0x8}]}, @NFT_MSG_DELRULE={0x14, 0x8, 0xa, 0x201, 0x0, 0x0, {0x1}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x1cc}}, 0x5) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffbfffff5]}, 0x8, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000001140)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000020000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kmem_cache_free\x00', r6}, 0x10) unshare(0x20060400) syz_clone(0x638c1100, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000020500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000002b0900020073797a310000000008000a40ffff"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xfff2}, {0xffff, 0xffff}, {0x5, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) 9.430131309s ago: executing program 2 (id=840): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000000) pwritev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000380)="1a7db08f9db0f60db54b852e70c2260a", 0x10}], 0x1, 0x3, 0x9) openat$sysfs(0xffffffffffffff9c, 0x0, 0x149a82, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x400400, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x4}, 0x18) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f00000005c0)={[{@jqfmt_vfsold}, {@orlov}, {@user_xattr}, {@noload}, {@nombcache}, {@noblock_validity}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@nodiscard}]}, 0xfa, 0x47c, &(0x7f0000000a80)="$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") openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x80) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x4, &(0x7f0000000400)=@framed={{}, [@exit]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, 0x0, 0x0) 8.536845107s ago: executing program 2 (id=847): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000180)=@req={0x401, 0xfffffffe, 0x3, 0xfffffffb}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r1}, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000030d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1], 0x0, 0xfffffffd, 0x0, 0x0, 0x41100}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='rss_stat\x00', r2}, 0x10) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) close(r0) 8.517243097s ago: executing program 2 (id=849): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000900)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, r5, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000e80)={0x6, 0x11, &(0x7f0000000600)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}}, @exit, @generic={0xf2, 0x0, 0x6, 0xa, 0x40}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, @call={0x85, 0x0, 0x0, 0x1}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x7fffffff}, @jmp={0x5, 0x1, 0x0, 0x2, 0x9, 0x100, 0x8}], &(0x7f00000002c0)='syzkaller\x00', 0x8, 0xcf, &(0x7f0000000800)=""/207, 0x40f00, 0x8, '\x00', r6, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000400)={0x1, 0x8, 0xb496, 0xea}, 0x10, 0x0, 0x0, 0x1, &(0x7f00000004c0)=[r3, r1, r7, r3, r2, r0], &(0x7f0000000580)=[{0x3, 0x1, 0x3, 0xc}], 0x10, 0x800}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x100000001}, 0x18) r8 = socket$netlink(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r9, 0x1, 0x200000, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40840d4}, 0x0) socket$kcm(0x1e, 0x1, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x5, 0x5, &(0x7f0000000480)=ANY=[], 0x0, 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7056}, 0x94) syz_clone3(&(0x7f0000000740)={0x8180080, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff], 0x1}, 0x58) listen(0xffffffffffffffff, 0x8) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000100)={[{@init_itable_val={'init_itable', 0x3d, 0x1}}, {@errors_remount}, {@dioread_lock}, {@barrier}, {@bsdgroups}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}, 0x1, 0x783, &(0x7f0000001340)="$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") r10 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r10, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000f40)=ANY=[], 0x0) 5.018363446s ago: executing program 0 (id=878): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000000000000000000000000001812", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000846, &(0x7f00000001c0)={[{@delalloc}, {@nombcache}, {@barrier}, {@dioread_lock}, {@stripe={'stripe', 0x3d, 0x5}}, {@resgid}, {@data_err_ignore}, {@jqfmt_vfsv0}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x558, &(0x7f0000000380)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000d80)='./file1\x00', 0x143042, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = syz_io_uring_setup(0x9e, &(0x7f0000000300)={0x0, 0x5867, 0x800, 0x0, 0x1bd}, &(0x7f0000000040)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f00000002c0)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4007, @fd_index=0x4, 0x0, &(0x7f0000000980)=[{&(0x7f0000000880)=""/216, 0xd8}], 0x1}) io_uring_enter(r3, 0x100847c0, 0x0, 0x1, 0x0, 0x0) pwritev2(r2, 0x0, 0x0, 0xe7c, 0x0, 0x1ee) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) pipe2(&(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r7, 0x0, r6, 0x0, 0x3, 0x0) 3.366682226s ago: executing program 1 (id=889): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9ee6, 0x200000005}, 0x104022, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x3d8, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x308, 0x2e8, 0x2e8, 0x308, 0x2e8, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, [], [0xff, 0x0, 0x0, 0xff000000], 'erspan0\x00', 'geneve1\x00'}, 0x0, 0x190, 0x1f8, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "cfcfcf0c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1a, 0x0, {0x80000}}}, @inet=@rpfilter={{0x28}, {0x6}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x17, 0x3, 0x6, 0x80000000, 'snmp\x00', 'syz0\x00', {0xe6}}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @broadcast}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xff, 0xff000000, 0xff000000, 0xff], [0xffffff00, 0x0, 0xffffff00], 'wg0\x00', 'nicvf0\x00', {0xff}, {0xff}, 0x0, 0xc0, 0x0, 0x14}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x4, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x438) 3.184871644s ago: executing program 3 (id=892): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_usbip_server_init(0x5) 3.085320379s ago: executing program 4 (id=893): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r0}, 0x18) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000280)={'ip6tnl0\x00', &(0x7f0000000400)={'ip6gre0\x00', 0x0, 0x2f, 0x0, 0x2, 0x9, 0x59, @loopback, @loopback, 0x10, 0xb6, 0x1, 0x9}}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'ip6gretap0\x00', 0x0}) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000280)={@remote, r4}, 0x14) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r4, {0xfff1, 0x10}, {0x8, 0x4}, {0x6, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x8804) getsockopt$inet6_mreq(r0, 0x29, 0x0, &(0x7f0000000380)={@private0, 0x0}, &(0x7f0000000480)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'batadv0\x00', 0x0}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0x58, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000680)={'syztnl1\x00', &(0x7f0000000600)={'ip6_vti0\x00', 0x0, 0x2f, 0x9, 0xa2, 0x5e6, 0x10, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x700, 0x40, 0x2, 0x3}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000006c0)={'ip6tnl0\x00', &(0x7f0000000740)={'ip6gre0\x00', 0x0, 0x29, 0x4, 0xd0, 0x3, 0x10, @local, @mcast2, 0x80, 0x80, 0xffff8001, 0x800}}) r10 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'geneve1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r10, 0x890b, &(0x7f00000005c0)={@empty, @remote, @remote, 0x6, 0x2, 0x0, 0x0, 0xb7, 0x2000213, r11}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000840)={'syztnl0\x00', &(0x7f00000007c0)={'syztnl1\x00', 0x0, 0x29, 0x8, 0x2, 0x0, 0x20, @mcast2, @empty, 0x8000, 0x10, 0xe, 0x1}}) sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000a40)={&(0x7f0000000880)={0x178, 0x0, 0x300, 0x70bd28, 0x25dfdbfd, {}, [@HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x4}]}, 0x178}, 0x1, 0x0, 0x0, 0x9}, 0x4004000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r13, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000dc0)={0xa8, r14, 0x5, 0x70bd2a, 0x25dfdbfd, {}, [@WGDEVICE_A_PEERS={0x8c, 0x8, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_FLAGS={0x8, 0x3, 0x7}]}, {0x58, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_ALLOWEDIPS={0x30, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}]}, {0x4}]}]}]}, @WGDEVICE_A_IFINDEX={0x8}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4000}, 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x181) r15 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r15, &(0x7f0000000100)={0xa, 0x4e22, 0x5ccc6e74, @ipv4={'\x00', '\xff\xff', @loopback}, 0xffff2d76}, 0x1c) listen(r15, 0x3) mount$9p_tcp(&(0x7f0000000100), &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e22']) close_range(r15, r15, 0x0) 2.407106287s ago: executing program 4 (id=894): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x6, 0xe7fd}, 0x100002, 0x3, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x21c91c, &(0x7f0000000440)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800000}}, {@noblock_validity}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x200000}}, {@jqfmt_vfsold}, {@noinit_itable}, {@quota}, {@noauto_da_alloc}, {@sysvgroups}, {@resgid, 0x32}]}, 0x1, 0x4e0, &(0x7f0000001a40)="$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") 2.236527705s ago: executing program 1 (id=895): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[], 0x119) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) r2 = dup2(r1, r0) ioctl$sock_SIOCINQ(r2, 0x541b, 0x0) 2.088936991s ago: executing program 1 (id=896): r0 = syz_init_net_socket$llc(0x1a, 0x802, 0x0) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x1, 0x3, 0x3, 0x4a}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="020000cf084dc02cd88eda0000f60000000200001400001cffffffffffffffff8500000083000000bf0900000000e92055090100000000009500000000000000bf99150000000000000085000000b7"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) close(r0) 1.990709045s ago: executing program 0 (id=897): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1], &(0x7f0000000600)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r2}, 0x18) symlinkat(0x0, 0xffffffffffffffff, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, &(0x7f0000000100)=[{{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}], 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x18) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000000)={0x7, 0xd, 0x0, 0xffdffffc, 0x6, "00001000"}) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0xff2e) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000580)={0x0, 0x0, 0x3, 0x0, 0x1b, "00000000000000000000ffff00"}) r5 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) read$watch_queue(r5, &(0x7f0000000340)=""/133, 0xfdef) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="020000000400000008000000"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='kfree\x00', r7, 0x0, 0xfffffffffffffffd}, 0x18) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB="020200030f0000002cbd7040fedbdf2503000900800000001cdc0dca1d9f68846960e56de42944af030006000000000002004e22ac1414bb000000000000000002000100000000000000070c00000080030005000000000002004e20ac1414bb0000000000000000020013"], 0x78}, 0x1, 0x7}, 0x8000) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @local}, 0xc) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) 1.989710995s ago: executing program 1 (id=898): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180100000100002500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200000a000000b703000000000000850000006d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f00000003c0)='signal_generate\x00', r0}, 0x40) r1 = gettid() r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r2}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0xfffffffffffffd2d, 0x0, 0x0, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) syz_open_dev$usbfs(0x0, 0x203, 0x8401) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_procfs(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)={[{@usrquota}, {@noblock_validity}, {@bh}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@debug}, {@inlinecrypt}]}, 0x6, 0x5fc, &(0x7f0000000c00)="$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") rt_sigprocmask(0x2, &(0x7f00000001c0)={[0xfffffffffffffffd]}, 0x0, 0x8) rt_sigqueueinfo(r1, 0x21, &(0x7f00000002c0)={0x1f, 0x0, 0x1}) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x42718, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0xd06, 0x2000044}, 0x101929, 0x5, 0x0, 0x1, 0xa, 0x0, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket(0x10, 0x3, 0x9) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x20, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) connect$netlink(r4, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r6, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)=[0x4], 0x0, 0x0, 0x2e, 0x1}}, 0x40) sendmsg$NFT_BATCH(r4, &(0x7f00000002c0)={&(0x7f0000000080), 0xc, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYRES16=r4], 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x40040) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r4) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r4, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x11c, r7, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xa}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}]}, @TIPC_NLA_NODE={0xa8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x99, 0x3, "0ab964b9f11b8d852662bf38593f553c090368339ff4471752fe9d45cbd5aecd63ae2e51744630aea202d4807b3eabcdad46f74576f32ae7f44743262aef03ed864c60f98e1d470e98c41456b27cf21a881a42e0af6d2c4bdec0f0eacb12ae09d699c106fec78cf977b3137107f3bf89de929901fa087bf53178919de6bbe689f59ee4c8a4d8390c28526550963cc881ec3ba14469"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_NET={0x48, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8bc}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x43}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x81}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8001}, @TIPC_NLA_NET_ADDR={0x8}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) 1.964176947s ago: executing program 4 (id=899): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0, 0x0, 0x1}, 0x18) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) writev(r1, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, 0x0, 0x8, 0x301, 0x0, 0x0, {0x7, 0x0, 0x6}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x8044}, 0x40440b0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x7, &(0x7f0000000080)=[{0x8, 0x3, 0x7, 0x800}, {0x8, 0x3, 0xc, 0x8}, {0x0, 0x7, 0x8b, 0x142b}, {0x6, 0x9, 0x62, 0x7}, {0xe381, 0x9, 0x0, 0x3}, {0x9, 0x5f, 0xfd, 0x4}, {0xd2, 0x2, 0x0, 0x3fe}]}) 1.87531235s ago: executing program 0 (id=900): r0 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x80, 0x2, 0x1f9}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r0, 0x0, 0x0, 0x64, 0x183000, 0x12345}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001480)=ANY=[], 0x50) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x18) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x2000) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000180)={0x0, 0x2}, 0x8) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0xffffffffffffff22}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0xa) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000440)={0x24, &(0x7f0000000340)={0x20, 0x9dac924696ef00d0, 0x6, {0x6, 0x0, "cf17f472"}}, 0x0, &(0x7f0000001500)=ANY=[@ANYBLOB="00f315033a009f8348e98491db341363a3242c548a1cfaaa14aff1515fdf4bb1429fca39ecf46f7e6201aabb5dc66e506d17729b2863bec4c4c1a1fd395f7576ff80b208c12931eb3edbc6c7c4e5db6e0a7189c532468ba629efdfca5498462fc3e3373e3e91fabed00a99143f6f84ff21871ea7c99c22bc6003f0703ddd"], &(0x7f0000000400)={0x0, 0x21, 0x9, {0x9, 0x21, 0x8, 0x7, 0x1, {0x22, 0x5b4}}}}, 0x0) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) r7 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r7, 0xf504, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000340000000400000002"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xf, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000611201"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x24}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r9}, &(0x7f0000000040), 0x0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r9}, &(0x7f0000000080), &(0x7f0000000380)=r8}, 0x20) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r10) ioctl$sock_SIOCGIFINDEX_802154(r10, 0x8933, &(0x7f0000000380)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r10, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES16=r11, @ANYBLOB="010029bd7000fcdbdf252100000008000300", @ANYRES32=r12, @ANYBLOB="24002d8005000100020000000500040001004000080002"], 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 1.816597902s ago: executing program 3 (id=901): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='kfree\x00', r2, 0x0, 0x10000001}, 0x18) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 1.662574189s ago: executing program 3 (id=902): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32=0x0, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000000c0)="010001", 0x3, 0xfffffffffffffffd) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x2) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0xfffc}, 0x4000800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00'}, 0x10) openat(0xffffffffffffff9c, 0x0, 0x143041, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000003080)=@delchain={0x34, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', r4, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4c50, &(0x7f0000000000), 0xfe, 0x293, &(0x7f0000001240)="$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") 1.662104249s ago: executing program 4 (id=903): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r2, &(0x7f0000000040)={0x23, 0x14}, 0x10) bind$phonet(r1, &(0x7f0000000000)={0x23, 0x4}, 0x10) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r3, &(0x7f0000000040)={0x23, 0x4, 0x2}, 0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f00000002c0)=ANY=[@ANYBLOB="04000000020003475467d96a28584d51d841008100ff07"], 0xc) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000140)=ANY=[@ANYRES32=0x0, @ANYBLOB="79fd7cecec3c829df1211e714bf73d1d1e13666b1850d74d9d4f2b3be38ed4026f56b5771ab55b36ea3dfd91faf55ef019d06f5de343a4c025596d4a7775eb7171387ea5707b9ce55f64f45afc477b5063653ba7d827e1aa75bff191633e8a6784e7d7d3a6b567bf759f57c2aed3a6af53bd8a4f042c83d2e038386c7187df24651df46e54"], 0xc) r4 = socket(0xa, 0x3, 0x3a) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYRESDEC=0x0, @ANYRES8=r4, @ANYBLOB="725bf64baf179c5118f9ee53ba50c88cf2b403b8c0d23f8c4635c8a652bc3a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1b, 0xc, &(0x7f0000000f80)=ANY=[], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58}, 0x94) setsockopt$MRT6_INIT(r4, 0x29, 0xc8, &(0x7f0000000340), 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r7, {}, {}, {0x8, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x8881}, 0x0) setsockopt$MRT6_ADD_MIF(r4, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1, 0x6, r7}, 0xc) setsockopt$MRT6_ADD_MFC_PROXY(r4, 0x29, 0xd2, &(0x7f00000005c0)={{0xa, 0xfffc, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x33}}}, {0xa, 0x0, 0x1, @empty}, 0x0, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe]}}, 0x5c) setsockopt$MRT6_FLUSH(r4, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4) sendto$inet6(r0, &(0x7f00000005c0)="f5", 0x1, 0x20000880, &(0x7f0000000240)={0xa, 0x4e20, 0xfffffffc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000dd0000000000003b810000850000006d000000a50000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='kfree\x00', r8}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f00000004c0)={[{@acl}, {@barrier}, {@barrier_val}, {@sysvgroups}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@resuid}, {@nodelalloc}, {@acl}, {@noinit_itable}]}, 0xfc, 0x587, &(0x7f0000002100)="$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") syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a438, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) 1.263351236s ago: executing program 4 (id=904): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x20085e, &(0x7f00000107c0)={[{@grpjquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xa32}}, {@acl}]}, 0x1, 0x53a, &(0x7f0000010280)="$eJzs3c9vI1cdAPDvOLGT3U2bbekBELRLW1jQap2Nt11VPUA5IYQqIXoEaRsSbxTFjqPYKU1YifTMFYlKnODIH8C5J+5cENy4lAMSPyJQg8Rh0IwnWSexk7SbxJH9+Ugjz5vnzPe9zc57469jvwDG1q2I2ImISkS8GxGzxfGk2OKt7pY975Pdx4t7u48Xk0jTd/6Z5PXZsej5mcyN4pzTEfGD70T8ODket721vbrQaNQ3ivJcp7k+197avrvSXFiuL9fXarUH8w/uvXH/9dqn6M30ibUvNSvF3pc//sPON36aNWumONLbj/PU7Xr5IE5mMiK+dxHBhmCi6E9l2A3hMylFxPMR8XJ+/c/GRP7bBABGWZrORjrbWwYARl03B5aUqkUuYCZKpWq1m8N7Ia6XGq12586j1ubaUjdXdjPKpUcrjfq9Ild4M8pJVp7P95+Ua0fK9yPiuYj4xdS1vFxdbDWWhnnjAwBj7MaR+f8/U935HwAYcSf/2QwAMIrM/wAwfsz/ADB+zP8AMH668/+1T/tjaZr+7CKaAwBcgnz+7/MlXQDA6JL/B4Cx8v233862dK/4/uul97Y2V1vv3V2qt1erzc3F6mJrY7263Got59/Z0zztfI1Wa33+tdh8/+Y319udufbW9sNma3Ot8zD/Xu+H9XL+rJ1L6BkAMMhzL3305ySbkd+8lm/Rs5ZDeagtAy5aadgNAIZm4vgh7wbAmOiu9uVvf2AcPXmNP2jaH7iyo/QAjIjT7gCm+31AKE3T9OKaBFyw21+Q/4dxVeT/J+X9YPz0yf8fkq8N7E1CGEmTw24AMDRpmpx1zf846xMBgKvthBz/zcu8DwGGZ8D7/88Xj78t3hz40dLRZ3x4ka0CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAq21//d9qsczvTJRK1WrEM/kCQOXk0Uqjfi8ino2IP02Vp7Ly/JDbDAA8rdLfkmL9r9uzr84cqnrxxsFuJSJ+8qt3fvn+Qqez8ceISvKvqf3jnQ+L47VTg01fRA8AgJPtz9P5Y88L+U92Hy/ub5fZnr9/u3tXkMXd263E3kH8yZjMH6ejHBHX/50U5a6kJ3fxNHY+iIjP9+t/EjN5DqR7y3I0fhb7mXOKP3Gm+KVD8UvFAs2l4t/ic+fQFhg3H2Xjz1v9rr9S3Mof+1//0/kI9fSK8S871eJePgY+ib8//k0MGP9uHT/dVN8Yr/3+u929a8frPoj44mTEfuy9nvFnP34yIP6rZ+zjX7704suD6tJfR9yO/vF7Y811mutz7a3tuyvNheX6cn2tVnsw/+DeG/dfr83lOeq5wbPBP9688+yguqz/1wfEnz6l/18ddNIjr3J/8793f/iVE+J//ZV+8UvxwgnxsznxawN7fNjC9d8NfN2dxV863v/kLL//O2eM//Fft48tGw4ADE97a3t1odGob9gZ0Z3K1WjG+exk/2WvQDP67nzrsmJVon/Vz1/pXtNHqtL0M8UaNGKcR9YNuAoOLvqI+O+wGwMAAAAAAAAAAAAAAPR1GZ9YGnYfAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGF3/DwAA//8mOdOX") r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x80642, 0x150) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000100000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xfecc) fallocate(r0, 0x0, 0xbf5, 0x2000402) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0xc, r0, 0x0, 0x0, 0x0, 0xfffffffffdffffff}) 1.125485572s ago: executing program 3 (id=905): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010729bd3000fcdbdf256700000008000300", @ANYRES32=0x0, @ANYBLOB="0800c300741300000500c4000f000000"], 0x2c}}, 0x40) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x10}, 0x50) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYRESDEC=r2], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r6, r7, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r6}, &(0x7f00000006c0), &(0x7f0000000700)=r5}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r8}, 0x10) sendmsg$inet(r4, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r2, 0x0, 0x400}, 0x18) r9 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300", 0xffffffff}, 0x48, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000280)={'fscrypt:', @auto=[0x63, 0x63, 0x33, 0x36, 0x64, 0x62, 0x31, 0x9, 0x63, 0x36, 0x32, 0x6c, 0x39, 0x34, 0x32, 0x37]}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300", 0x17}, 0x48, r9) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r11 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r11, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bind$inet(r11, &(0x7f0000000040)={0x2, 0x4e20, @multicast1}, 0x10) r12 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r12, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r12, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x1}]}, 0x10) bind$inet6(r12, &(0x7f0000000200)={0xa, 0x4e20, 0x4000b, @empty, 0x80ad}, 0x1c) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r13}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) 1.087657274s ago: executing program 0 (id=906): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001000)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020047b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000020000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x18) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) socket$nl_rdma(0x10, 0x3, 0x14) r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) gettid() sendmsg$AUDIT_SET(r7, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0xa7401800}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x3c, 0x3e9, 0x1, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x1, r0, 0x572115d, 0x9a, 0x10000, 0x1, 0x0, 0x401, 0x9}, ["", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x80) mkdir(&(0x7f00000003c0)='./file0\x00', 0x12c) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000340)='configfs\x00', 0x0, 0x0) r8 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000840)='./file0\x00', &(0x7f0000000080), 0x18) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000100), 0x4000) utimensat(r8, 0x0, &(0x7f0000000180), 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r10, 0x0, 0xffffffffffffffff}, 0x18) 830.454425ms ago: executing program 3 (id=907): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r0}, 0x18) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000280)={'ip6tnl0\x00', &(0x7f0000000400)={'ip6gre0\x00', 0x0, 0x2f, 0x0, 0x2, 0x9, 0x59, @loopback, @loopback, 0x10, 0xb6, 0x1, 0x9}}) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'ip6gretap0\x00', 0x0}) getsockopt$inet6_mreq(r0, 0x29, 0x0, &(0x7f0000000380)={@private0, 0x0}, &(0x7f0000000480)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'batadv0\x00', 0x0}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0x58, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000680)={'syztnl1\x00', &(0x7f0000000600)={'ip6_vti0\x00', 0x0, 0x2f, 0x9, 0xa2, 0x5e6, 0x10, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x700, 0x40, 0x2, 0x3}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000006c0)={'ip6tnl0\x00', &(0x7f0000000740)={'ip6gre0\x00', 0x0, 0x29, 0x4, 0xd0, 0x3, 0x10, @local, @mcast2, 0x80, 0x80, 0xffff8001, 0x800}}) r9 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'geneve1\x00', 0x0}) sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000a40)={&(0x7f0000000880)={0x194, 0x0, 0x300, 0x70bd28, 0x25dfdbfd, {}, [@HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x4}]}, 0x194}, 0x1, 0x0, 0x0, 0x9}, 0x4004000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r11, 0x8933, &(0x7f00000002c0)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r12, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000dc0)={0xa8, r13, 0x5, 0x70bd2a, 0x25dfdbfd, {}, [@WGDEVICE_A_PEERS={0x8c, 0x8, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_FLAGS={0x8, 0x3, 0x7}]}, {0x58, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_ALLOWEDIPS={0x30, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}]}, {0x4}]}]}]}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r14}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4000}, 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x181) r15 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r15, &(0x7f0000000100)={0xa, 0x4e22, 0x5ccc6e74, @ipv4={'\x00', '\xff\xff', @loopback}, 0xffff2d76}, 0x1c) listen(r15, 0x3) mount$9p_tcp(&(0x7f0000000100), &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e22']) close_range(r15, r15, 0x0) 767.289077ms ago: executing program 4 (id=908): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000181200", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000846, &(0x7f00000001c0)={[{@delalloc}, {@nombcache}, {@barrier}, {@dioread_lock}, {@stripe={'stripe', 0x3d, 0x5}}, {@resgid}, {@data_err_ignore}, {@jqfmt_vfsv0}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x558, &(0x7f0000000380)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000d80)='./file1\x00', 0x143042, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = syz_io_uring_setup(0x9e, &(0x7f0000000300)={0x0, 0x5867, 0x800, 0x0, 0x1bd}, &(0x7f0000000040)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f00000002c0)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4007, @fd_index=0x4, 0x0, &(0x7f0000000980)=[{&(0x7f0000000880)=""/216, 0xd8}], 0x1}) io_uring_enter(r3, 0x100847c0, 0x0, 0x1, 0x0, 0x0) pwritev2(r2, 0x0, 0x0, 0xe7c, 0x0, 0x1ee) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) pipe2(&(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r7, 0x0, r6, 0x0, 0x3, 0x0) 673.849921ms ago: executing program 3 (id=909): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x6, 0xe7fd}, 0x100002, 0x3, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x21c91c, &(0x7f0000000440)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800000}}, {@noblock_validity}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x200000}}, {@jqfmt_vfsold}, {@noinit_itable}, {@quota}, {@noauto_da_alloc}, {@sysvgroups}, {@resgid, 0x32}]}, 0x1, 0x4e0, &(0x7f0000001a40)="$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") 581.875155ms ago: executing program 0 (id=910): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x6, 0xe7fd}, 0x100002, 0x3, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x21c91c, &(0x7f0000000440)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800000}}, {@noblock_validity}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x200000}}, {@jqfmt_vfsold}, {@noinit_itable}, {@quota}, {@noauto_da_alloc}, {@sysvgroups}, {@resgid, 0x32}]}, 0x1, 0x4e0, &(0x7f0000001a40)="$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") 231.64352ms ago: executing program 1 (id=911): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0xff, 0x7ffc1ffd}]}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r3}, 0x10) getrusage(0xffffffffffffffff, &(0x7f0000001640)) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000780)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kmem_cache_free\x00', r4, 0x0, 0xf7}, 0x18) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x18, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r5, 0x0, 0xfffffffffffffffd}, 0x18) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000580)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@errors_remount}, {@nombcache}]}, 0x1, 0x437, &(0x7f0000000900)="$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") socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000480)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='io_uring_file_get\x00', r6, 0x0, 0xf}, 0x18) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000480)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='io_uring_file_get\x00', r7, 0x0, 0xf}, 0x18) r8 = syz_io_uring_setup(0x1e1e, &(0x7f0000000380)={0x0, 0x86f7, 0x10100, 0x3, 0x38a}, &(0x7f0000002000)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r9, r10, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x6000, @fd_index=0x8, 0xffffffffffffdffd, 0x0, 0x0, 0x22, 0x1}) io_uring_enter(r8, 0x48e9, 0xf2bb, 0x2, 0x0, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000080)=ANY=[], 0xfe37, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000c40)='./file1\x00', 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r11, 0x8923, &(0x7f00000000c0)={'team_slave_1\x00', @random="01320136b1ff"}) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8}, {0x0, 0x8}}}, 0xb8}}, 0x0) socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 172.530312ms ago: executing program 1 (id=912): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x20085e, &(0x7f00000107c0)={[{@grpjquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xa32}}, {@acl}]}, 0x1, 0x53a, &(0x7f0000010280)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x80642, 0x150) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) write$cgroup_int(r3, 0x0, 0x0) pwrite64(r2, &(0x7f0000000140)='2', 0xfdef, 0xfecc) fallocate(r1, 0x0, 0xbf5, 0x2000402) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0xc, r1, 0x0, 0x0, 0x0, 0xfffffffffdffffff}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000079100000000000007b0a00ff000000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x48) 0s ago: executing program 0 (id=913): bpf$TOKEN_CREATE(0x24, &(0x7f0000000180), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB="00f7ffffff000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000956142f88b859bf8016f003524d4be914b1b0a03799a83054601b60223bcd641ae7b0b81d8aee045c88b87da0bb921bf29a71505d200ef23c02ad0dd1e17fb0a7b7c8e784939e26acd7be3b77b7738bf7ae70551f52f41261fc090bad8e5d93e03bd336c38c5a9f8361590"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$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") r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x1000f4) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0x4}, 0x18) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xc3, 0x0, 0x0, 0x0, 0x0, 0x100000000000, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffd, 0x1000}, 0x0, 0x0, 0xffffffff, 0x5, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) sendmsg$nl_route_sched(r1, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000003800)=@newtaction={0x88c, 0x30, 0x12f, 0x0, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0xfffffffd, 0x0, 0xfffffffe, 0xb84, 0x3, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x100, 0x0, 0x0, 0xc74, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x100, 0x5, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x100, 0x0, 0x7, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffff002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, 0x8, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x3, 0xffffffff, 0x0, 0x200, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0xfffffffc, 0x6, 0x0, 0x0, 0x0, 0xf, 0xf, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x1, 0x5, 0x1000000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5, 0xfffffffc, 0x0, 0x0, 0xfffffffc, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5, 0x0, 0x7, 0x0, 0xfffffffc, 0x1]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xe8d0, 0x101, 0x8, 0x200, 0x3, 0x7f, 0x13, 0xffffffff, 0x3, 0x80000001, 0x8000000b, 0x1, 0xfffff0c2, 0x7, 0xa042, 0xfffffc21, 0xffff7fff, 0x4, 0x4, 0x400, 0x8, 0x7, 0x5d3b2fc3, 0x87f, 0x7ff, 0x5, 0x5, 0x2, 0x1, 0xa0, 0xb, 0x6, 0x2, 0x8, 0x7, 0x1, 0x1, 0x5, 0x1, 0x9, 0x4, 0x1, 0x8, 0x7, 0x8, 0x40000000, 0x5, 0x0, 0x40, 0x1, 0x5, 0x1, 0x9, 0x1ff, 0x0, 0x9, 0x426, 0x5, 0x7fff, 0xffffffff, 0x3a, 0x5, 0x9, 0x3feb, 0x0, 0x5, 0xeb5, 0x1fe, 0x5, 0x8, 0x0, 0x0, 0x7, 0x4, 0x2597, 0x9, 0x7, 0x4, 0xb8, 0xcb, 0xf, 0x0, 0x2, 0x4, 0x0, 0x27d, 0xc2c, 0x6, 0x1, 0x6, 0x4, 0x0, 0x8, 0x9, 0x10001, 0x3, 0x6, 0x2, 0xc, 0x6, 0x9, 0x3, 0x800001c1, 0x3, 0x9, 0x4, 0x3, 0xfffffffa, 0x6, 0x4, 0xa21, 0xffff, 0x3ff, 0x0, 0x8, 0x355a, 0x1, 0x6, 0xffffff60, 0xee, 0x1000, 0x6, 0xfffffffb, 0x2, 0x7, 0x0, 0x2, 0xe0, 0x7f, 0xea50, 0x5, 0x2, 0x1000, 0x8, 0x0, 0x8, 0x1002, 0x7, 0x5, 0xfffffffa, 0x200, 0x7ff, 0xfffffff9, 0xfffffffd, 0x6, 0x1000, 0x8, 0x7fb, 0x81, 0x401, 0xe, 0x0, 0x8, 0x5, 0xfff, 0x1f2, 0x24000, 0x7, 0x100, 0x5, 0x6, 0x7ff, 0x7, 0x1b, 0x3a03, 0x7, 0xffffffff, 0x2, 0x3, 0x5, 0x403, 0x171751e3, 0x5, 0x6, 0x54, 0xfffffffb, 0xfa7, 0x7, 0x60, 0x1, 0x10, 0xcc0b, 0xa, 0x62, 0x8, 0x120000, 0x8, 0x4, 0x1, 0x8001, 0xd, 0x5, 0x5, 0x5c, 0x4, 0x20067bd, 0x3866, 0x9, 0xed1, 0x8, 0x5, 0x1, 0x0, 0x2, 0x2, 0xdf9, 0xb, 0x6, 0xb0c, 0x7, 0x5, 0x5c3b, 0x6, 0xb21, 0x40, 0xc1c, 0x3, 0x8, 0x3, 0x40000000, 0x2, 0x8, 0x4, 0xfff, 0x80000000, 0x5, 0x3ff, 0x0, 0x3, 0x8, 0x9, 0x6, 0x400, 0x10e, 0x7, 0x101, 0x41a, 0x6, 0x7, 0x6, 0x0, 0x8, 0x6, 0x401, 0xfffffffe, 0x100a, 0x0, 0x0, 0x1, 0xfffffff8, 0x8, 0xf87, 0x1, 0x9, 0x5, 0x9]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0xffff, 0x0, 0x1, 0x9, 0x100, {0x4, 0x2, 0x7, 0x2, 0x8000, 0x3}, {0x8, 0x0, 0x7fff, 0x8, 0x1, 0x100}, 0x2, 0x10, 0xe723}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x1, 0x2}}}}]}]}, 0x88c}}, 0xc0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000003c0)=ANY=[], 0x0) kernel console output (not intermixed with test programs): [ 90.022552][ T5544] EXT4-fs: Ignoring removed orlov option [ 90.104105][ T29] audit: type=1326 audit(1764557324.903:955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5549 comm="syz.1.587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40198bf749 code=0x7ffc0000 [ 90.127665][ T29] audit: type=1326 audit(1764557324.903:956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5549 comm="syz.1.587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f40198bf749 code=0x7ffc0000 [ 90.131671][ T5552] netlink: 4 bytes leftover after parsing attributes in process `syz.4.588'. [ 90.242968][ T5557] loop4: detected capacity change from 0 to 512 [ 90.253059][ T5557] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 90.266879][ T5557] ext4 filesystem being mounted at /126/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 90.560529][ T5563] lo speed is unknown, defaulting to 1000 [ 90.680863][ T5563] loop4: detected capacity change from 0 to 512 [ 90.688423][ T1046] usb usb6-port1: attempt power cycle [ 90.713023][ T5563] ext4 filesystem being mounted at /127/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 90.733857][ T5563] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #2: comm syz.4.590: corrupted inode contents [ 90.746259][ T5563] EXT4-fs error (device loop4): ext4_dirty_inode:6517: inode #2: comm syz.4.590: mark_inode_dirty error [ 90.758218][ T5563] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #2: comm syz.4.590: corrupted inode contents [ 90.770328][ T5563] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #2: comm syz.4.590: mark_inode_dirty error [ 90.850922][ T5567] netlink: 52 bytes leftover after parsing attributes in process `syz.0.591'. [ 90.936089][ T5569] netlink: 4 bytes leftover after parsing attributes in process `syz.0.592'. [ 90.979555][ T5573] loop0: detected capacity change from 0 to 1024 [ 90.986854][ T5573] EXT4-fs (loop0): stripe (32769) is not aligned with cluster size (16), stripe is disabled [ 91.049449][ T5579] xt_hashlimit: max too large, truncated to 1048576 [ 91.182377][ T5588] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 91.196106][ T23] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 91.206882][ T5588] loop0: detected capacity change from 0 to 1024 [ 91.213706][ T5588] EXT4-fs: Ignoring removed orlov option [ 91.221681][ T23] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 91.304758][ T9] usb usb10-port1: unable to enumerate USB device [ 91.350193][ T5597] loop4: detected capacity change from 0 to 1024 [ 91.356962][ T5039] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 345: padding at end of block bitmap is not set [ 91.371834][ T5597] ext4: Unknown parameter 'uid' [ 91.383044][ T5039] EXT4-fs (loop3): Remounting filesystem read-only [ 91.390321][ T5597] loop4: detected capacity change from 0 to 128 [ 91.437533][ T5603] pim6reg: entered allmulticast mode [ 91.443471][ T5603] pim6reg: left allmulticast mode [ 91.491745][ T5603] loop0: detected capacity change from 0 to 1024 [ 91.509284][ T5603] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000. [ 91.579965][ T5613] loop0: detected capacity change from 0 to 1024 [ 91.587361][ T5613] EXT4-fs (loop0): stripe (32769) is not aligned with cluster size (16), stripe is disabled [ 91.652043][ T5619] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 91.667973][ T9] lo speed is unknown, defaulting to 1000 [ 92.134532][ T3501] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 92.134597][ T4160] Bluetooth: hci0: command 0x1003 tx timeout [ 92.332006][ T5629] loop0: detected capacity change from 0 to 512 [ 92.341536][ T5629] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 92.356301][ T5629] ext4 filesystem being mounted at /120/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 92.418431][ T5636] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=62549 sclass=netlink_route_socket pid=5636 comm=syz.0.613 [ 92.434856][ T5636] hub 9-0:1.0: USB hub found [ 92.439589][ T5636] hub 9-0:1.0: 8 ports detected [ 92.475323][ T5638] tipc: Enabling of bearer rejected, already enabled [ 92.517089][ T5643] loop0: detected capacity change from 0 to 1024 [ 92.524373][ T5643] EXT4-fs (loop0): stripe (32769) is not aligned with cluster size (16), stripe is disabled [ 92.545100][ T1046] usb usb6-port1: unable to enumerate USB device [ 92.652517][ T5649] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 92.740227][ T5654] loop2: detected capacity change from 0 to 512 [ 92.759405][ T5654] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 92.762123][ T5651] loop3: detected capacity change from 0 to 512 [ 92.798986][ T5654] ext4 filesystem being mounted at /120/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 92.809762][ T5658] loop0: detected capacity change from 0 to 1024 [ 92.816304][ T5651] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 92.820301][ T5658] ext4: Unknown parameter 'uid' [ 92.851989][ T5658] loop0: detected capacity change from 0 to 128 [ 92.869258][ T5651] ext4 filesystem being mounted at /117/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 93.090583][ T66] Bluetooth: hci0: Frame reassembly failed (-84) [ 93.192942][ T5671] __nla_validate_parse: 5 callbacks suppressed [ 93.192962][ T5671] netlink: 12 bytes leftover after parsing attributes in process `syz.2.624'. [ 93.221595][ T5671] loop2: detected capacity change from 0 to 512 [ 93.228956][ T5671] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 93.237934][ T5671] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 93.266566][ T5671] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4193: comm syz.2.624: Allocating blocks 41-42 which overlap fs metadata [ 93.280701][ T5671] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4193: comm syz.2.624: Allocating blocks 41-42 which overlap fs metadata [ 93.294654][ T5671] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.624: Failed to acquire dquot type 1 [ 93.306265][ T5671] EXT4-fs error (device loop2): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 93.320826][ T5671] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #12: comm syz.2.624: corrupted inode contents [ 93.334558][ T5671] EXT4-fs error (device loop2): ext4_dirty_inode:6517: inode #12: comm syz.2.624: mark_inode_dirty error [ 93.346592][ T5671] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #12: comm syz.2.624: corrupted inode contents [ 93.352525][ T5677] loop1: detected capacity change from 0 to 1024 [ 93.365800][ T5671] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #12: comm syz.2.624: mark_inode_dirty error [ 93.373670][ T5679] loop4: detected capacity change from 0 to 1024 [ 93.384390][ T5679] EXT4-fs (loop4): stripe (32769) is not aligned with cluster size (16), stripe is disabled [ 93.388500][ T5677] ext4: Unknown parameter 'uid' [ 93.400140][ T5671] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #12: comm syz.2.624: corrupted inode contents [ 93.412456][ T5671] EXT4-fs error (device loop2) in ext4_orphan_del:301: Corrupt filesystem [ 93.421255][ T5671] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #12: comm syz.2.624: corrupted inode contents [ 93.433527][ T5671] EXT4-fs error (device loop2): ext4_truncate:4637: inode #12: comm syz.2.624: mark_inode_dirty error [ 93.437204][ T5677] loop1: detected capacity change from 0 to 128 [ 93.448247][ T5671] EXT4-fs error (device loop2) in ext4_process_orphan:343: Corrupt filesystem [ 93.465898][ T5671] EXT4-fs (loop2): 1 truncate cleaned up [ 93.483639][ T29] kauditd_printk_skb: 74 callbacks suppressed [ 93.483734][ T29] audit: type=1326 audit(1764557328.283:1027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5676 comm="syz.1.627" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f40198bf749 code=0x0 [ 93.638595][ T5688] loop4: detected capacity change from 0 to 2048 [ 93.656603][ T5688] ext4 filesystem being mounted at /135/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.668473][ T5688] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 93.676986][ T5688] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 93.906814][ T5695] FAULT_INJECTION: forcing a failure. [ 93.906814][ T5695] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 93.920157][ T5695] CPU: 1 UID: 0 PID: 5695 Comm: syz.2.632 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 93.920190][ T5695] Tainted: [W]=WARN [ 93.920253][ T5695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 93.920264][ T5695] Call Trace: [ 93.920270][ T5695] [ 93.920278][ T5695] __dump_stack+0x1d/0x30 [ 93.920303][ T5695] dump_stack_lvl+0xe8/0x140 [ 93.920326][ T5695] dump_stack+0x15/0x1b [ 93.920347][ T5695] should_fail_ex+0x265/0x280 [ 93.920369][ T5695] should_fail+0xb/0x20 [ 93.920446][ T5695] should_fail_usercopy+0x1a/0x20 [ 93.920465][ T5695] _copy_from_user+0x1c/0xb0 [ 93.920507][ T5695] kstrtouint_from_user+0x69/0xf0 [ 93.920530][ T5695] ? 0xffffffff81000000 [ 93.920621][ T5695] ? selinux_file_permission+0x1e4/0x320 [ 93.920649][ T5695] proc_fail_nth_write+0x50/0x160 [ 93.920739][ T5695] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 93.920777][ T5695] vfs_write+0x269/0x960 [ 93.920821][ T5695] ? vfs_read+0x4e6/0x770 [ 93.920835][ T5695] ? __rcu_read_unlock+0x4f/0x70 [ 93.920905][ T5695] ? __fget_files+0x184/0x1c0 [ 93.920923][ T5695] ksys_write+0xda/0x1a0 [ 93.920940][ T5695] __x64_sys_write+0x40/0x50 [ 93.920955][ T5695] x64_sys_call+0x2802/0x3000 [ 93.920990][ T5695] do_syscall_64+0xd2/0x200 [ 93.921003][ T5695] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 93.921020][ T5695] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 93.921112][ T5695] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.921245][ T5695] RIP: 0033:0x7f82d461e1ff [ 93.921256][ T5695] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 93.921268][ T5695] RSP: 002b:00007f82d307f030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 93.921283][ T5695] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f82d461e1ff [ 93.921369][ T5695] RDX: 0000000000000001 RSI: 00007f82d307f0a0 RDI: 0000000000000007 [ 93.921377][ T5695] RBP: 00007f82d307f090 R08: 0000000000000000 R09: 0000000000000000 [ 93.921385][ T5695] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 93.921393][ T5695] R13: 00007f82d4876038 R14: 00007f82d4875fa0 R15: 00007ffec2e745a8 [ 93.921406][ T5695] [ 94.172482][ T5698] loop2: detected capacity change from 0 to 256 [ 94.222709][ T5706] loop2: detected capacity change from 0 to 512 [ 94.234395][ T5706] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13 [ 94.247948][ T5706] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #13: comm syz.2.635: attempt to clear invalid blocks 2 len 1 [ 94.261692][ T5706] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 94.289337][ T5706] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.635: invalid indirect mapped block 1819239214 (level 0) [ 94.303627][ T5706] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.635: invalid indirect mapped block 1819239214 (level 1) [ 94.318394][ T5706] EXT4-fs (loop2): 1 truncate cleaned up [ 94.704081][ T5718] loop0: detected capacity change from 0 to 1024 [ 94.711260][ T5718] EXT4-fs (loop0): stripe (32769) is not aligned with cluster size (16), stripe is disabled [ 94.775774][ T5722] xt_hashlimit: max too large, truncated to 1048576 [ 94.869698][ T5727] tipc: Enabling of bearer rejected, already enabled [ 94.969177][ T29] audit: type=1400 audit(1764557329.773:1028): avc: denied { create } for pid=5734 comm="syz.1.644" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 94.989373][ T29] audit: type=1400 audit(1764557329.773:1029): avc: denied { write } for pid=5734 comm="syz.1.644" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 95.009807][ T29] audit: type=1400 audit(1764557329.773:1030): avc: denied { nlmsg_write } for pid=5734 comm="syz.1.644" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 95.094801][ T3501] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 95.102744][ T29] audit: type=1326 audit(1764557329.903:1031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5669 comm="syz.3.625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff06126f749 code=0x7ffc0000 [ 95.126283][ T29] audit: type=1326 audit(1764557329.903:1032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5669 comm="syz.3.625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff06126f749 code=0x7ffc0000 [ 95.315484][ T5743] netlink: 4 bytes leftover after parsing attributes in process `syz.0.646'. [ 95.385490][ T5746] loop1: detected capacity change from 0 to 512 [ 95.457514][ T5746] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 95.466284][ T5746] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 95.477220][ T1046] usb usb6-port1: attempt power cycle [ 95.575722][ T5746] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4193: comm syz.1.645: Allocating blocks 41-42 which overlap fs metadata [ 95.590356][ T5746] Quota error (device loop1): write_blk: dquota write failed [ 95.597819][ T5746] Quota error (device loop1): find_free_dqentry: Can't write quota data block 5 [ 95.607096][ T5746] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4193: comm syz.1.645: Allocating blocks 41-42 which overlap fs metadata [ 95.621687][ T5746] Quota error (device loop1): write_blk: dquota write failed [ 95.629302][ T5746] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 95.639482][ T5746] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.645: Failed to acquire dquot type 1 [ 95.651651][ T5746] EXT4-fs error (device loop1): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 95.666289][ T5746] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #12: comm syz.1.645: corrupted inode contents [ 95.680453][ T5746] EXT4-fs error (device loop1): ext4_dirty_inode:6517: inode #12: comm syz.1.645: mark_inode_dirty error [ 95.692147][ T5746] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #12: comm syz.1.645: corrupted inode contents [ 95.704628][ T5746] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #12: comm syz.1.645: mark_inode_dirty error [ 95.716631][ T5746] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #12: comm syz.1.645: corrupted inode contents [ 95.728940][ T5746] EXT4-fs error (device loop1) in ext4_orphan_del:301: Corrupt filesystem [ 95.738262][ T5746] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #12: comm syz.1.645: corrupted inode contents [ 95.750372][ T5746] EXT4-fs error (device loop1): ext4_truncate:4637: inode #12: comm syz.1.645: mark_inode_dirty error [ 95.769147][ T5746] EXT4-fs error (device loop1) in ext4_process_orphan:343: Corrupt filesystem [ 95.778777][ T5746] EXT4-fs (loop1): 1 truncate cleaned up [ 96.241606][ T5762] loop1: detected capacity change from 0 to 1024 [ 96.249007][ T5762] EXT4-fs (loop1): stripe (32769) is not aligned with cluster size (16), stripe is disabled [ 96.428141][ T5778] 9pnet_fd: p9_fd_create_tcp (5778): problem connecting socket to 127.0.0.1 [ 96.437630][ T5777] tipc: Enabling of bearer rejected, already enabled [ 96.489801][ T5780] loop1: detected capacity change from 0 to 1024 [ 96.536584][ T5780] EXT4-fs: Ignoring removed nobh option [ 96.542258][ T5780] EXT4-fs: Ignoring removed bh option [ 96.560460][ T5784] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 96.588886][ T5780] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 96.627841][ T5786] loop2: detected capacity change from 0 to 512 [ 96.642642][ T5786] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 96.651488][ T5786] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 96.666332][ T5786] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4193: comm syz.2.658: Allocating blocks 41-42 which overlap fs metadata [ 96.684914][ T5786] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.658: Failed to acquire dquot type 1 [ 96.704839][ T5786] EXT4-fs error (device loop2): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 96.721817][ T5786] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #12: comm syz.2.658: corrupted inode contents [ 96.734158][ T5786] EXT4-fs error (device loop2): ext4_dirty_inode:6517: inode #12: comm syz.2.658: mark_inode_dirty error [ 96.745652][ T5786] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #12: comm syz.2.658: corrupted inode contents [ 96.757791][ T5786] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #12: comm syz.2.658: mark_inode_dirty error [ 96.770069][ T5786] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #12: comm syz.2.658: corrupted inode contents [ 96.782400][ T5786] EXT4-fs error (device loop2) in ext4_orphan_del:301: Corrupt filesystem [ 96.791158][ T5786] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #12: comm syz.2.658: corrupted inode contents [ 96.803486][ T5786] EXT4-fs error (device loop2): ext4_truncate:4637: inode #12: comm syz.2.658: mark_inode_dirty error [ 96.815031][ T5786] EXT4-fs error (device loop2) in ext4_process_orphan:343: Corrupt filesystem [ 96.824178][ T5786] EXT4-fs (loop2): 1 truncate cleaned up [ 97.153688][ T5800] loop2: detected capacity change from 0 to 512 [ 97.162750][ T5800] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 97.171481][ T5800] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 97.278012][ T5800] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4193: comm syz.2.659: Allocating blocks 41-42 which overlap fs metadata [ 97.292651][ T5800] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4193: comm syz.2.659: Allocating blocks 41-42 which overlap fs metadata [ 97.306924][ T5800] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.659: Failed to acquire dquot type 1 [ 97.320620][ T5800] EXT4-fs error (device loop2): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 97.335142][ T5800] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #12: comm syz.2.659: corrupted inode contents [ 97.347428][ T5800] EXT4-fs error (device loop2): ext4_dirty_inode:6517: inode #12: comm syz.2.659: mark_inode_dirty error [ 97.359201][ T5800] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #12: comm syz.2.659: corrupted inode contents [ 97.371630][ T5800] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #12: comm syz.2.659: mark_inode_dirty error [ 97.383319][ T5800] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #12: comm syz.2.659: corrupted inode contents [ 97.396418][ T1046] usb usb6-port1: unable to enumerate USB device [ 97.411922][ T5800] EXT4-fs error (device loop2) in ext4_orphan_del:301: Corrupt filesystem [ 97.425566][ T5800] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #12: comm syz.2.659: corrupted inode contents [ 97.438376][ T5800] EXT4-fs error (device loop2): ext4_truncate:4637: inode #12: comm syz.2.659: mark_inode_dirty error [ 97.452703][ T5800] EXT4-fs error (device loop2) in ext4_process_orphan:343: Corrupt filesystem [ 97.462226][ T5800] EXT4-fs (loop2): 1 truncate cleaned up [ 97.468322][ T5800] EXT4-fs mount: 106 callbacks suppressed [ 97.468338][ T5800] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.504150][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.536818][ T5805] netlink: 60 bytes leftover after parsing attributes in process `syz.4.663'. [ 97.759828][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.921950][ T5815] loop2: detected capacity change from 0 to 128 [ 97.946556][ T5815] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 97.954493][ T5815] FAT-fs (loop2): Filesystem has been set read-only [ 97.963938][ T5815] bio_check_eod: 59071 callbacks suppressed [ 97.963955][ T5815] syz.2.667: attempt to access beyond end of device [ 97.963955][ T5815] loop2: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 97.977252][ T5816] loop3: detected capacity change from 0 to 512 [ 97.992466][ T5815] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 98.000379][ T5815] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 98.008518][ T5817] syz.2.667: attempt to access beyond end of device [ 98.008518][ T5817] loop2: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 98.021793][ T5817] buffer_io_error: 57758 callbacks suppressed [ 98.021811][ T5817] Buffer I/O error on dev loop2, logical block 2065, async page read [ 98.044854][ T5816] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 98.053950][ T5817] syz.2.667: attempt to access beyond end of device [ 98.053950][ T5817] loop2: rw=0, sector=2066, nr_sectors = 1 limit=128 [ 98.067171][ T5817] Buffer I/O error on dev loop2, logical block 2066, async page read [ 98.075694][ T5817] syz.2.667: attempt to access beyond end of device [ 98.075694][ T5817] loop2: rw=0, sector=2067, nr_sectors = 1 limit=128 [ 98.076564][ T5816] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.088869][ T5817] Buffer I/O error on dev loop2, logical block 2067, async page read [ 98.088906][ T5817] syz.2.667: attempt to access beyond end of device [ 98.088906][ T5817] loop2: rw=0, sector=2068, nr_sectors = 1 limit=128 [ 98.122729][ T5817] Buffer I/O error on dev loop2, logical block 2068, async page read [ 98.126357][ T5816] ext4 filesystem being mounted at /123/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 98.130975][ T5817] syz.2.667: attempt to access beyond end of device [ 98.130975][ T5817] loop2: rw=0, sector=2069, nr_sectors = 1 limit=128 [ 98.154451][ T5817] Buffer I/O error on dev loop2, logical block 2069, async page read [ 98.162628][ T5817] syz.2.667: attempt to access beyond end of device [ 98.162628][ T5817] loop2: rw=0, sector=2070, nr_sectors = 1 limit=128 [ 98.175925][ T5817] Buffer I/O error on dev loop2, logical block 2070, async page read [ 98.184021][ T5817] syz.2.667: attempt to access beyond end of device [ 98.184021][ T5817] loop2: rw=0, sector=2071, nr_sectors = 1 limit=128 [ 98.197233][ T5817] Buffer I/O error on dev loop2, logical block 2071, async page read [ 98.205573][ T5817] syz.2.667: attempt to access beyond end of device [ 98.205573][ T5817] loop2: rw=0, sector=2072, nr_sectors = 1 limit=128 [ 98.218744][ T5817] Buffer I/O error on dev loop2, logical block 2072, async page read [ 98.227020][ T5817] syz.2.667: attempt to access beyond end of device [ 98.227020][ T5817] loop2: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 98.240304][ T5817] Buffer I/O error on dev loop2, logical block 2065, async page read [ 98.248580][ T5817] Buffer I/O error on dev loop2, logical block 2066, async page read [ 98.281172][ T5822] Illegal XDP return value 5822 on prog (id 421) dev N/A, expect packet loss! [ 98.308541][ T5822] netlink: 4 bytes leftover after parsing attributes in process `syz.0.668'. [ 98.341304][ T5822] bond0: (slave bond_slave_0): Releasing backup interface [ 98.367689][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.390541][ T5823] lo speed is unknown, defaulting to 1000 [ 98.436528][ T5827] xt_hashlimit: max too large, truncated to 1048576 [ 98.691353][ T5835] loop3: detected capacity change from 0 to 2048 [ 98.754908][ T5835] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.794559][ T5835] ext4 filesystem being mounted at /126/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.794706][ T5838] netlink: 4 bytes leftover after parsing attributes in process `syz.0.674'. [ 98.826042][ T5835] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.828958][ T5838] pim6reg: entered allmulticast mode [ 98.834757][ T5835] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.866307][ T5838] pim6reg: left allmulticast mode [ 98.900062][ T5845] loop2: detected capacity change from 0 to 512 [ 98.910854][ T5845] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13 [ 98.923977][ T5845] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #13: comm syz.2.675: attempt to clear invalid blocks 2 len 1 [ 98.939722][ T5847] loop0: detected capacity change from 0 to 1024 [ 98.964416][ T5845] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 98.988913][ T5845] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.675: invalid indirect mapped block 1819239214 (level 0) [ 99.003228][ T5845] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.675: invalid indirect mapped block 1819239214 (level 1) [ 99.003488][ T5847] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.018118][ T5845] EXT4-fs (loop2): 1 truncate cleaned up [ 99.035712][ T5845] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.165622][ T5838] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000. [ 99.193748][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.308875][ T5853] loop0: detected capacity change from 0 to 128 [ 99.342458][ T5853] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 99.350413][ T5853] FAT-fs (loop0): Filesystem has been set read-only [ 99.368910][ T5853] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 99.376823][ T5853] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 99.500657][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.576689][ T5856] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 99.709400][ T5859] loop1: detected capacity change from 0 to 512 [ 99.724495][ T5859] EXT4-fs (loop1): 1 orphan inode deleted [ 99.761302][ T5859] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.454826][ T5870] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 100.461386][ T5870] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 100.469162][ T5870] vhci_hcd vhci_hcd.0: Device attached [ 100.564672][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.754672][ T1046] usb 2-1: SetAddress Request (7) to port 0 [ 100.773668][ T1046] usb 2-1: new SuperSpeed USB device number 7 using vhci_hcd [ 100.826782][ T5875] loop4: detected capacity change from 0 to 512 [ 100.869805][ T5875] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 100.942695][ T5875] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #13: comm syz.4.684: attempt to clear invalid blocks 2 len 1 [ 101.024092][ T5875] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 101.132527][ T10] usb usb6-port1: attempt power cycle [ 101.144669][ T5875] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.684: invalid indirect mapped block 1819239214 (level 0) [ 101.177415][ T5871] vhci_hcd: connection reset by peer [ 101.177500][ T5609] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 345: padding at end of block bitmap is not set [ 101.207650][ T5609] EXT4-fs (loop3): Remounting filesystem read-only [ 101.208147][ T5875] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.684: invalid indirect mapped block 1819239214 (level 1) [ 101.232055][ T52] vhci_hcd: stop threads [ 101.236392][ T52] vhci_hcd: release socket [ 101.240879][ T52] vhci_hcd: disconnect device [ 101.255013][ T5875] EXT4-fs (loop4): 1 truncate cleaned up [ 101.261199][ T5875] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.277357][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.296400][ T5882] loop1: detected capacity change from 0 to 512 [ 101.303709][ T5882] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 101.312560][ T5882] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 101.349205][ T5882] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4193: comm syz.1.687: Allocating blocks 41-42 which overlap fs metadata [ 101.369310][ T5882] __quota_error: 10 callbacks suppressed [ 101.369327][ T5882] Quota error (device loop1): write_blk: dquota write failed [ 101.382487][ T5882] Quota error (device loop1): find_free_dqentry: Can't write quota data block 5 [ 101.392018][ T5882] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4193: comm syz.1.687: Allocating blocks 41-42 which overlap fs metadata [ 101.406119][ T5882] Quota error (device loop1): write_blk: dquota write failed [ 101.413655][ T5882] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 101.482896][ T5882] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.687: Failed to acquire dquot type 1 [ 101.507184][ T5882] EXT4-fs error (device loop1): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 101.600582][ T5882] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #12: comm syz.1.687: corrupted inode contents [ 101.690695][ T5882] EXT4-fs error (device loop1): ext4_dirty_inode:6517: inode #12: comm syz.1.687: mark_inode_dirty error [ 101.893628][ T29] audit: type=1326 audit(1764557336.693:1036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5889 comm="syz.0.688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb297fcf749 code=0x7ffc0000 [ 101.925809][ T5882] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #12: comm syz.1.687: corrupted inode contents [ 101.927914][ T29] audit: type=1326 audit(1764557336.723:1037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5889 comm="syz.0.688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb297fcf749 code=0x7ffc0000 [ 101.961110][ T29] audit: type=1326 audit(1764557336.723:1038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5889 comm="syz.0.688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb297fcf749 code=0x7ffc0000 [ 101.965237][ T5882] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #12: comm syz.1.687: mark_inode_dirty error [ 101.985193][ T29] audit: type=1326 audit(1764557336.723:1039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5889 comm="syz.0.688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=268 compat=0 ip=0x7fb297fcf749 code=0x7ffc0000 [ 101.997905][ T5882] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #12: comm syz.1.687: corrupted inode contents [ 102.020032][ T29] audit: type=1326 audit(1764557336.723:1040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5889 comm="syz.0.688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb297fcf749 code=0x7ffc0000 [ 102.032453][ T5882] EXT4-fs error (device loop1) in ext4_orphan_del:301: Corrupt filesystem [ 102.055189][ T29] audit: type=1326 audit(1764557336.723:1041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5889 comm="syz.0.688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb297fcf749 code=0x7ffc0000 [ 102.064568][ T5882] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #12: comm syz.1.687: corrupted inode contents [ 102.099642][ T5882] EXT4-fs error (device loop1): ext4_truncate:4637: inode #12: comm syz.1.687: mark_inode_dirty error [ 102.112397][ T5882] EXT4-fs error (device loop1) in ext4_process_orphan:343: Corrupt filesystem [ 102.122322][ T5882] EXT4-fs (loop1): 1 truncate cleaned up [ 102.128678][ T5882] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.142626][ T5882] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.224306][ T5895] 9pnet_fd: p9_fd_create_tcp (5895): problem connecting socket to 127.0.0.1 [ 102.249854][ T5897] loop2: detected capacity change from 0 to 512 [ 102.257292][ T5897] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 102.266148][ T5897] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 102.294329][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 102.302923][ T5897] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4193: comm syz.2.690: Allocating blocks 41-42 which overlap fs metadata [ 102.318285][ T5897] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.690: Failed to acquire dquot type 1 [ 102.330007][ T5897] EXT4-fs error (device loop2): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 102.345288][ T5897] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #12: comm syz.2.690: corrupted inode contents [ 102.348225][ T5899] 9pnet_fd: p9_fd_create_tcp (5899): problem connecting socket to 127.0.0.1 [ 102.378619][ T5897] EXT4-fs error (device loop2): ext4_dirty_inode:6517: inode #12: comm syz.2.690: mark_inode_dirty error [ 102.399874][ T5897] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #12: comm syz.2.690: corrupted inode contents [ 102.412173][ T5897] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #12: comm syz.2.690: mark_inode_dirty error [ 102.424000][ T5897] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #12: comm syz.2.690: corrupted inode contents [ 102.436178][ T5897] EXT4-fs error (device loop2) in ext4_orphan_del:301: Corrupt filesystem [ 102.444957][ T5897] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #12: comm syz.2.690: corrupted inode contents [ 102.457603][ T5897] EXT4-fs error (device loop2): ext4_truncate:4637: inode #12: comm syz.2.690: mark_inode_dirty error [ 102.491856][ T5897] EXT4-fs error (device loop2) in ext4_process_orphan:343: Corrupt filesystem [ 102.508413][ T5897] EXT4-fs (loop2): 1 truncate cleaned up [ 102.514567][ T5897] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.538576][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.571204][ T5910] loop2: detected capacity change from 0 to 128 [ 102.601782][ T5910] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 102.609787][ T5910] FAT-fs (loop2): Filesystem has been set read-only [ 102.616562][ T5910] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 102.624402][ T5910] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 102.637669][ T5911] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 102.644572][ T5911] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 102.652319][ T5911] vhci_hcd vhci_hcd.0: Device attached [ 102.966312][ T5910] bio_check_eod: 66235 callbacks suppressed [ 102.966333][ T5910] syz.2.694: attempt to access beyond end of device [ 102.966333][ T5910] loop2: rw=0, sector=2072, nr_sectors = 1 limit=128 [ 103.024950][ T5910] syz.2.694: attempt to access beyond end of device [ 103.024950][ T5910] loop2: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 103.038246][ T5910] buffer_io_error: 51406 callbacks suppressed [ 103.038264][ T5910] Buffer I/O error on dev loop2, logical block 2065, async page read [ 103.075212][ T10] usb usb6-port1: unable to enumerate USB device [ 103.135261][ T5910] syz.2.694: attempt to access beyond end of device [ 103.135261][ T5910] loop2: rw=0, sector=2066, nr_sectors = 1 limit=128 [ 103.148573][ T5910] Buffer I/O error on dev loop2, logical block 2066, async page read [ 103.162025][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.182123][ T5910] syz.2.694: attempt to access beyond end of device [ 103.182123][ T5910] loop2: rw=0, sector=2067, nr_sectors = 1 limit=128 [ 103.195381][ T5910] Buffer I/O error on dev loop2, logical block 2067, async page read [ 103.222258][ T5910] syz.2.694: attempt to access beyond end of device [ 103.222258][ T5910] loop2: rw=0, sector=2068, nr_sectors = 1 limit=128 [ 103.236049][ T5910] Buffer I/O error on dev loop2, logical block 2068, async page read [ 103.257452][ T5910] syz.2.694: attempt to access beyond end of device [ 103.257452][ T5910] loop2: rw=0, sector=2069, nr_sectors = 1 limit=128 [ 103.270869][ T5910] Buffer I/O error on dev loop2, logical block 2069, async page read [ 103.280336][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.290005][ T5910] syz.2.694: attempt to access beyond end of device [ 103.290005][ T5910] loop2: rw=0, sector=2070, nr_sectors = 1 limit=128 [ 103.303209][ T5910] Buffer I/O error on dev loop2, logical block 2070, async page read [ 103.311520][ T5910] syz.2.694: attempt to access beyond end of device [ 103.311520][ T5910] loop2: rw=0, sector=2071, nr_sectors = 1 limit=128 [ 103.324804][ T5910] Buffer I/O error on dev loop2, logical block 2071, async page read [ 103.337392][ T5910] syz.2.694: attempt to access beyond end of device [ 103.337392][ T5910] loop2: rw=0, sector=2072, nr_sectors = 1 limit=128 [ 103.350749][ T5910] Buffer I/O error on dev loop2, logical block 2072, async page read [ 103.359366][ T5910] syz.2.694: attempt to access beyond end of device [ 103.359366][ T5910] loop2: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 103.372606][ T5910] Buffer I/O error on dev loop2, logical block 2065, async page read [ 103.387150][ T5912] vhci_hcd: connection closed [ 103.387356][ T66] vhci_hcd: stop threads [ 103.396385][ T66] vhci_hcd: release socket [ 103.400824][ T66] vhci_hcd: disconnect device [ 103.417623][ T5910] Buffer I/O error on dev loop2, logical block 2066, async page read [ 103.484285][ T5926] netlink: 12 bytes leftover after parsing attributes in process `syz.3.695'. [ 103.508323][ T5926] loop3: detected capacity change from 0 to 512 [ 103.525889][ T5927] pim6reg: entered allmulticast mode [ 103.540190][ T5927] pim6reg: left allmulticast mode [ 103.565360][ T5925] netlink: 4 bytes leftover after parsing attributes in process `syz.4.697'. [ 103.576724][ T5926] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 103.585523][ T5926] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 103.627223][ T5926] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4193: comm syz.3.695: Allocating blocks 41-42 which overlap fs metadata [ 103.641878][ T5926] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4193: comm syz.3.695: Allocating blocks 41-42 which overlap fs metadata [ 103.656339][ T5926] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.695: Failed to acquire dquot type 1 [ 103.668521][ T5926] EXT4-fs error (device loop3): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 103.682979][ T5926] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #12: comm syz.3.695: corrupted inode contents [ 103.695753][ T5926] EXT4-fs error (device loop3): ext4_dirty_inode:6517: inode #12: comm syz.3.695: mark_inode_dirty error [ 103.708246][ T5926] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #12: comm syz.3.695: corrupted inode contents [ 103.720462][ T5926] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #12: comm syz.3.695: mark_inode_dirty error [ 103.732010][ T5926] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #12: comm syz.3.695: corrupted inode contents [ 103.744315][ T5926] EXT4-fs error (device loop3) in ext4_orphan_del:301: Corrupt filesystem [ 103.753063][ T5926] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #12: comm syz.3.695: corrupted inode contents [ 103.765202][ T5926] EXT4-fs error (device loop3): ext4_truncate:4637: inode #12: comm syz.3.695: mark_inode_dirty error [ 103.776692][ T5926] EXT4-fs error (device loop3) in ext4_process_orphan:343: Corrupt filesystem [ 103.786056][ T5926] EXT4-fs (loop3): 1 truncate cleaned up [ 103.792048][ T5926] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.841273][ T5934] xt_hashlimit: max too large, truncated to 1048576 [ 103.848353][ T5923] loop4: detected capacity change from 0 to 1024 [ 103.871544][ T5923] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.001759][ T5923] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000. [ 104.055442][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.149046][ T5942] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 104.155604][ T5942] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 104.163466][ T5942] vhci_hcd vhci_hcd.0: Device attached [ 104.181167][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.282192][ T5950] loop3: detected capacity change from 0 to 1024 [ 104.289830][ T5950] EXT4-fs (loop3): stripe (32769) is not aligned with cluster size (16), stripe is disabled [ 104.304674][ T3501] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 104.318341][ T5951] tipc: Enabling of bearer rejected, already enabled [ 104.342012][ T5950] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.469839][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.494735][ T4263] usb 6-1: SetAddress Request (22) to port 0 [ 104.578301][ T4263] usb 6-1: new SuperSpeed USB device number 22 using vhci_hcd [ 104.601156][ T5956] netlink: 12 bytes leftover after parsing attributes in process `syz.0.704'. [ 104.610386][ T5956] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 104.620835][ T23] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 104.628784][ T23] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 104.640233][ T5956] loop0: detected capacity change from 0 to 1024 [ 104.650334][ T5956] EXT4-fs: Ignoring removed orlov option [ 104.664871][ T3407] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 104.680056][ T5962] loop3: detected capacity change from 0 to 1024 [ 104.684080][ T5964] loop4: detected capacity change from 0 to 2048 [ 104.688313][ T5956] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.705663][ T3407] hid-generic 0000:0000:0000.0005: hidraw1: HID v0.00 Device [syz1] on syz0 [ 104.710830][ T5962] EXT4-fs: Ignoring removed orlov option [ 104.732759][ T5964] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.745711][ T5962] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.774722][ T5964] ext4 filesystem being mounted at /146/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 104.778828][ T5943] vhci_hcd: connection reset by peer [ 104.791283][ T3453] vhci_hcd: stop threads [ 104.795615][ T3453] vhci_hcd: release socket [ 104.799442][ T5964] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.800088][ T3453] vhci_hcd: disconnect device [ 104.808622][ T5964] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.832251][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.842054][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.883246][ T5974] netlink: 8 bytes leftover after parsing attributes in process `syz.0.706'. [ 104.883940][ T5978] loop3: detected capacity change from 0 to 512 [ 104.898980][ T5974] netlink: 8 bytes leftover after parsing attributes in process `syz.0.706'. [ 104.908885][ T5974] netlink: 8 bytes leftover after parsing attributes in process `syz.0.706'. [ 104.918300][ T5974] netlink: 8 bytes leftover after parsing attributes in process `syz.0.706'. [ 104.940340][ T5978] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 104.967808][ T5984] xt_hashlimit: max too large, truncated to 1048576 [ 104.968856][ T5978] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.987508][ T5978] ext4 filesystem being mounted at /131/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 105.065456][ T5992] loop0: detected capacity change from 0 to 512 [ 105.071110][ T5994] nftables ruleset with unbound chain [ 105.077525][ T5992] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 105.086322][ T5992] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 105.116753][ T5992] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4193: comm syz.0.713: Allocating blocks 41-42 which overlap fs metadata [ 105.137306][ T5992] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.713: Failed to acquire dquot type 1 [ 105.149606][ T5992] EXT4-fs error (device loop0): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 105.160768][ T5997] netlink: 'syz.1.716': attribute type 9 has an invalid length. [ 105.165353][ T5992] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #12: comm syz.0.713: corrupted inode contents [ 105.173205][ T5997] netlink: 36 bytes leftover after parsing attributes in process `syz.1.716'. [ 105.185328][ T5992] EXT4-fs error (device loop0): ext4_dirty_inode:6517: inode #12: comm syz.0.713: mark_inode_dirty error [ 105.185496][ T5992] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #12: comm syz.0.713: corrupted inode contents [ 105.185697][ T5992] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #12: comm syz.0.713: mark_inode_dirty error [ 105.185900][ T5992] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #12: comm syz.0.713: corrupted inode contents [ 105.186222][ T5992] EXT4-fs error (device loop0) in ext4_orphan_del:301: Corrupt filesystem [ 105.186465][ T5992] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #12: comm syz.0.713: corrupted inode contents [ 105.186655][ T5992] EXT4-fs error (device loop0): ext4_truncate:4637: inode #12: comm syz.0.713: mark_inode_dirty error [ 105.231633][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.241781][ T5992] EXT4-fs error (device loop0) in ext4_process_orphan:343: Corrupt filesystem [ 105.291363][ T5992] EXT4-fs (loop0): 1 truncate cleaned up [ 105.297499][ T5992] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.319947][ T6001] loop3: detected capacity change from 0 to 512 [ 105.331169][ T5992] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.356382][ T6001] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.379907][ T23] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 105.383635][ T6001] ext4 filesystem being mounted at /132/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 105.387981][ T23] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 105.420325][ T6005] loop2: detected capacity change from 0 to 1024 [ 105.438950][ T6005] EXT4-fs: Ignoring removed orlov option [ 105.447124][ T6005] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.484999][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.503161][ T6016] netlink: 8 bytes leftover after parsing attributes in process `syz.2.720'. [ 105.516002][ T6016] netlink: 8 bytes leftover after parsing attributes in process `syz.2.720'. [ 105.546608][ T6021] tipc: Enabling of bearer rejected, already enabled [ 105.612065][ T6026] tipc: Enabling of bearer rejected, already enabled [ 105.630768][ T6025] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 105.764985][ T6035] loop2: detected capacity change from 0 to 512 [ 105.774781][ T6035] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 105.803958][ T6035] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.816841][ T6035] ext4 filesystem being mounted at /146/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 105.834300][ T6041] loop1: detected capacity change from 0 to 512 [ 105.851594][ T6041] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.728: invalid indirect mapped block 4294967295 (level 1) [ 105.866341][ T6041] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.728: invalid indirect mapped block 4294967295 (level 1) [ 105.881446][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.886672][ T6041] EXT4-fs (loop1): 2 truncates cleaned up [ 105.897074][ T6041] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.910002][ T1046] usb 2-1: device descriptor read/8, error -110 [ 105.916877][ T6043] loop0: detected capacity change from 0 to 512 [ 105.938594][ T6045] loop2: detected capacity change from 0 to 512 [ 105.949880][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.956707][ T6045] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13 [ 105.960885][ T6043] EXT4-fs (loop0): 1 orphan inode deleted [ 105.973998][ T6043] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.989269][ T6045] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #13: comm syz.2.729: attempt to clear invalid blocks 2 len 1 [ 106.004850][ T6045] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 106.027744][ T1046] usb 2-1: new SuperSpeed USB device number 7 using vhci_hcd [ 106.031867][ T6045] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.729: invalid indirect mapped block 1819239214 (level 0) [ 106.049458][ T6045] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.729: invalid indirect mapped block 1819239214 (level 1) [ 106.063533][ T6051] loop1: detected capacity change from 0 to 128 [ 106.064206][ T1046] usb 2-1: enqueue for inactive port 0 [ 106.085651][ T6045] EXT4-fs (loop2): 1 truncate cleaned up [ 106.087365][ T1046] usb 2-1: enqueue for inactive port 0 [ 106.094887][ T6045] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.097280][ T1046] usb 2-1: enqueue for inactive port 0 [ 106.182789][ T6054] loop1: detected capacity change from 0 to 512 [ 106.205964][ T6054] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 106.214834][ T6054] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 106.236624][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.257486][ T6054] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4193: comm syz.1.732: Allocating blocks 41-42 which overlap fs metadata [ 106.282750][ T6056] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 106.298868][ T6054] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4193: comm syz.1.732: Allocating blocks 41-42 which overlap fs metadata [ 106.318389][ T6054] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.732: Failed to acquire dquot type 1 [ 106.343224][ T6054] EXT4-fs error (device loop1): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 106.360013][ T6060] loop3: detected capacity change from 0 to 128 [ 106.375178][ T5930] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 345: padding at end of block bitmap is not set [ 106.399330][ T6054] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #12: comm syz.1.732: corrupted inode contents [ 106.412670][ T5930] EXT4-fs (loop4): Remounting filesystem read-only [ 106.429427][ T6060] FAULT_INJECTION: forcing a failure. [ 106.429427][ T6060] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 106.442743][ T6060] CPU: 0 UID: 0 PID: 6060 Comm: syz.3.734 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 106.442833][ T6060] Tainted: [W]=WARN [ 106.442840][ T6060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 106.442853][ T6060] Call Trace: [ 106.442860][ T6060] [ 106.442868][ T6060] __dump_stack+0x1d/0x30 [ 106.442893][ T6060] dump_stack_lvl+0xe8/0x140 [ 106.442916][ T6060] dump_stack+0x15/0x1b [ 106.442977][ T6060] should_fail_ex+0x265/0x280 [ 106.443063][ T6060] should_fail_alloc_page+0xf2/0x100 [ 106.443156][ T6060] __alloc_frozen_pages_noprof+0xff/0x360 [ 106.443193][ T6060] alloc_pages_mpol+0xb3/0x260 [ 106.443230][ T6060] folio_alloc_noprof+0x97/0x150 [ 106.443253][ T6060] filemap_alloc_folio_noprof+0x66/0x210 [ 106.443285][ T6060] __filemap_get_folio+0x28f/0x650 [ 106.443331][ T6060] block_truncate_page+0xa2/0x510 [ 106.443357][ T6060] ? __pfx_fat_get_block+0x10/0x10 [ 106.443457][ T6060] fat_block_truncate_page+0x2e/0x40 [ 106.443484][ T6060] fat_setattr+0x73b/0x8a0 [ 106.443510][ T6060] ? __pfx_fat_setattr+0x10/0x10 [ 106.443590][ T6060] notify_change+0x872/0x8f0 [ 106.443616][ T6060] do_ftruncate+0x34b/0x450 [ 106.443653][ T6060] __x64_sys_ftruncate+0x68/0xc0 [ 106.443682][ T6060] x64_sys_call+0x2d61/0x3000 [ 106.443706][ T6060] do_syscall_64+0xd2/0x200 [ 106.443729][ T6060] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 106.443793][ T6060] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 106.443859][ T6060] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.443882][ T6060] RIP: 0033:0x7ff06126f749 [ 106.443900][ T6060] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 106.443920][ T6060] RSP: 002b:00007ff05fcd7038 EFLAGS: 00000246 ORIG_RAX: 000000000000004d [ 106.443957][ T6060] RAX: ffffffffffffffda RBX: 00007ff0614c5fa0 RCX: 00007ff06126f749 [ 106.444016][ T6060] RDX: 0000000000000000 RSI: 0000000000000a75 RDI: 0000000000000004 [ 106.444074][ T6060] RBP: 00007ff05fcd7090 R08: 0000000000000000 R09: 0000000000000000 [ 106.444087][ T6060] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 106.444099][ T6060] R13: 00007ff0614c6038 R14: 00007ff0614c5fa0 R15: 00007ffe6e93d2b8 [ 106.444142][ T6060] [ 106.444381][ T6054] EXT4-fs error (device loop1): ext4_dirty_inode:6517: inode #12: comm syz.1.732: mark_inode_dirty error [ 106.709627][ T6054] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #12: comm syz.1.732: corrupted inode contents [ 106.721652][ T6054] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #12: comm syz.1.732: mark_inode_dirty error [ 106.739075][ T6063] loop3: detected capacity change from 0 to 4096 [ 106.739483][ T6054] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #12: comm syz.1.732: corrupted inode contents [ 106.757905][ T6054] EXT4-fs error (device loop1) in ext4_orphan_del:301: Corrupt filesystem [ 106.758367][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.775862][ T6054] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #12: comm syz.1.732: corrupted inode contents [ 106.809383][ T6063] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.833415][ T29] kauditd_printk_skb: 112 callbacks suppressed [ 106.833432][ T29] audit: type=1400 audit(1764557341.633:1140): avc: denied { read append } for pid=6062 comm="syz.3.735" path="/135/file1/blkio.bfq.io_queued_recursive" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 106.865408][ T29] audit: type=1400 audit(1764557341.643:1141): avc: denied { ioctl } for pid=6062 comm="syz.3.735" path="/135/file1/blkio.bfq.io_queued_recursive" dev="loop3" ino=18 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 106.887863][ T6054] EXT4-fs error (device loop1): ext4_truncate:4637: inode #12: comm syz.1.732: mark_inode_dirty error [ 106.903937][ T6068] xt_hashlimit: max too large, truncated to 1048576 [ 106.921946][ T6054] EXT4-fs error (device loop1) in ext4_process_orphan:343: Corrupt filesystem [ 106.954976][ T6054] EXT4-fs (loop1): 1 truncate cleaned up [ 106.962110][ T6054] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.998042][ T6071] netlink: 'syz.0.738': attribute type 9 has an invalid length. [ 107.052401][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.128653][ T6075] loop1: detected capacity change from 0 to 512 [ 107.148496][ T6075] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 107.170713][ T6075] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.183729][ T6075] ext4 filesystem being mounted at /147/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 107.205205][ T1046] usb usb2-port1: attempt power cycle [ 107.242006][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.267061][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.318429][ T6080] netlink: 'syz.1.740': attribute type 7 has an invalid length. [ 107.328248][ T29] audit: type=1326 audit(1764557342.133:1142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6079 comm="syz.1.740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40198bf749 code=0x7ffc0000 [ 107.352259][ T29] audit: type=1326 audit(1764557342.133:1143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6079 comm="syz.1.740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40198bf749 code=0x7ffc0000 [ 107.375660][ T29] audit: type=1326 audit(1764557342.133:1144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6079 comm="syz.1.740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40198bf749 code=0x7ffc0000 [ 107.399098][ T29] audit: type=1326 audit(1764557342.133:1145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6079 comm="syz.1.740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40198bf749 code=0x7ffc0000 [ 107.422651][ T29] audit: type=1326 audit(1764557342.133:1146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6079 comm="syz.1.740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f40198bf749 code=0x7ffc0000 [ 107.446138][ T29] audit: type=1326 audit(1764557342.133:1147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6079 comm="syz.1.740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40198bf749 code=0x7ffc0000 [ 107.469615][ T29] audit: type=1326 audit(1764557342.133:1148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6079 comm="syz.1.740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40198bf749 code=0x7ffc0000 [ 107.493034][ T29] audit: type=1326 audit(1764557342.133:1149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6079 comm="syz.1.740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40198bf749 code=0x7ffc0000 [ 107.517825][ T6080] loop1: detected capacity change from 0 to 164 [ 107.532107][ T6080] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 107.542781][ T6080] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 107.563766][ T6080] Symlink component flag not implemented [ 107.569499][ T6080] Symlink component flag not implemented [ 107.575758][ T6080] Symlink component flag not implemented (7) [ 107.578204][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.581850][ T6080] Symlink component flag not implemented (116) [ 107.617229][ T6087] loop0: detected capacity change from 0 to 1024 [ 107.634954][ T6087] EXT4-fs (loop0): stripe (32769) is not aligned with cluster size (16), stripe is disabled [ 107.658710][ T6087] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.704386][ T6093] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 107.720235][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.761950][ T6097] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6097 comm=syz.3.746 [ 107.808617][ T66] Bluetooth: hci0: Frame reassembly failed (-84) [ 108.150280][ T6102] xt_hashlimit: max too large, truncated to 1048576 [ 108.694080][ T6109] xt_hashlimit: max too large, truncated to 1048576 [ 108.765990][ T6111] loop0: detected capacity change from 0 to 512 [ 108.773584][ T6111] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 108.796017][ T6111] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.808875][ T6111] ext4 filesystem being mounted at /163/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 108.845816][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.884378][ T6116] __nla_validate_parse: 5 callbacks suppressed [ 108.884399][ T6116] netlink: 4 bytes leftover after parsing attributes in process `syz.0.752'. [ 108.902004][ T6116] pim6reg: entered allmulticast mode [ 108.907894][ T6116] pim6reg: left allmulticast mode [ 108.965558][ T6119] loop0: detected capacity change from 0 to 1024 [ 108.977239][ T6119] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.991265][ T6116] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000. [ 109.008444][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.084659][ T1046] usb usb2-port1: unable to enumerate USB device [ 109.134724][ T9] usb usb8-port1: attempt power cycle [ 109.279398][ T6130] loop2: detected capacity change from 0 to 512 [ 109.288450][ T6130] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 109.297285][ T6130] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 109.362262][ T6130] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4193: comm syz.2.755: Allocating blocks 41-42 which overlap fs metadata [ 109.376863][ T6130] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4193: comm syz.2.755: Allocating blocks 41-42 which overlap fs metadata [ 109.391170][ T6130] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.755: Failed to acquire dquot type 1 [ 109.403898][ T6130] EXT4-fs error (device loop2): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 109.418650][ T6130] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #12: comm syz.2.755: corrupted inode contents [ 109.431530][ T6130] EXT4-fs error (device loop2): ext4_dirty_inode:6517: inode #12: comm syz.2.755: mark_inode_dirty error [ 109.443771][ T6130] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #12: comm syz.2.755: corrupted inode contents [ 109.455985][ T6130] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #12: comm syz.2.755: mark_inode_dirty error [ 109.467717][ T6130] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #12: comm syz.2.755: corrupted inode contents [ 109.479994][ T6130] EXT4-fs error (device loop2) in ext4_orphan_del:301: Corrupt filesystem [ 109.488998][ T6130] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #12: comm syz.2.755: corrupted inode contents [ 109.501495][ T6130] EXT4-fs error (device loop2): ext4_truncate:4637: inode #12: comm syz.2.755: mark_inode_dirty error [ 109.514064][ T6130] EXT4-fs error (device loop2) in ext4_process_orphan:343: Corrupt filesystem [ 109.524969][ T6130] EXT4-fs (loop2): 1 truncate cleaned up [ 109.531592][ T6130] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.654531][ T4263] usb 6-1: device descriptor read/8, error -110 [ 109.774485][ T4263] usb 6-1: new SuperSpeed USB device number 22 using vhci_hcd [ 109.794497][ T4263] usb 6-1: enqueue for inactive port 0 [ 109.800133][ T4263] usb 6-1: enqueue for inactive port 0 [ 109.805728][ T4263] usb 6-1: enqueue for inactive port 0 [ 109.814525][ T3501] Bluetooth: hci0: command 0x1003 tx timeout [ 109.814901][ T4160] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 109.958416][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.110564][ T6136] loop2: detected capacity change from 0 to 512 [ 110.120597][ T6136] EXT4-fs (loop2): 1 orphan inode deleted [ 110.126879][ T6136] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.148975][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.170166][ T6140] loop2: detected capacity change from 0 to 512 [ 110.186102][ T6140] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.199290][ T6140] ext4 filesystem being mounted at /155/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 110.380853][ T6148] loop3: detected capacity change from 0 to 1024 [ 110.388130][ T6148] EXT4-fs: Ignoring removed nobh option [ 110.393708][ T6148] EXT4-fs: Ignoring removed bh option [ 110.400048][ T6148] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 110.864921][ T4263] usb usb6-port1: attempt power cycle [ 111.074724][ T9] usb usb8-port1: unable to enumerate USB device [ 111.180166][ T6158] loop1: detected capacity change from 0 to 512 [ 111.186602][ T6163] ip6t_srh: unknown srh match flags 4000 [ 111.193920][ T6158] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 111.206307][ T6158] ext4 filesystem being mounted at /149/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 111.332322][ T6174] netlink: 24 bytes leftover after parsing attributes in process `syz.1.769'. [ 111.459141][ T6180] loop2: detected capacity change from 0 to 512 [ 111.485980][ T6180] ext4 filesystem being mounted at /161/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 112.434286][ T6196] loop2: detected capacity change from 0 to 1024 [ 112.441317][ T6196] ext4: Unknown parameter 'uid' [ 112.450981][ T29] kauditd_printk_skb: 220 callbacks suppressed [ 112.451014][ T29] audit: type=1326 audit(1764559907.252:1366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6195 comm="syz.2.777" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f82d461f749 code=0x0 [ 112.526741][ T6197] loop1: detected capacity change from 0 to 512 [ 112.538341][ T6197] EXT4-fs (loop1): 1 orphan inode deleted [ 112.704880][ T4263] usb usb6-port1: unable to enumerate USB device [ 112.944704][ T9] usb usb8-port1: attempt power cycle [ 113.307380][ T29] audit: type=1326 audit(1764559908.112:1367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6205 comm="syz.1.780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40198bf749 code=0x7ffc0000 [ 113.331595][ T29] audit: type=1326 audit(1764559908.112:1368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6205 comm="syz.1.780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40198bf749 code=0x7ffc0000 [ 113.355238][ T29] audit: type=1326 audit(1764559908.142:1369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6205 comm="syz.1.780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40198bf749 code=0x7ffc0000 [ 113.379291][ T29] audit: type=1326 audit(1764559908.142:1370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6205 comm="syz.1.780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40198bf749 code=0x7ffc0000 [ 113.402710][ T29] audit: type=1326 audit(1764559908.142:1371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6205 comm="syz.1.780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=268 compat=0 ip=0x7f40198bf749 code=0x7ffc0000 [ 113.430328][ T29] audit: type=1326 audit(1764559908.142:1372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6205 comm="syz.1.780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40198bf749 code=0x7ffc0000 [ 113.453800][ T29] audit: type=1326 audit(1764559908.142:1373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6205 comm="syz.1.780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40198bf749 code=0x7ffc0000 [ 113.477316][ T29] audit: type=1326 audit(1764559908.162:1374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6205 comm="syz.1.780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40198bf749 code=0x7ffc0000 [ 113.500734][ T29] audit: type=1326 audit(1764559908.162:1375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6205 comm="syz.1.780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40198bf749 code=0x7ffc0000 [ 113.543661][ T6213] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 113.585940][ T6215] loop1: detected capacity change from 0 to 128 [ 113.603522][ T6215] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 113.611471][ T6215] FAT-fs (loop1): Filesystem has been set read-only [ 113.620298][ T6215] bio_check_eod: 143 callbacks suppressed [ 113.620315][ T6215] syz.1.785: attempt to access beyond end of device [ 113.620315][ T6215] loop1: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 113.645541][ T6215] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 113.653503][ T6215] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 113.661551][ T6215] syz.1.785: attempt to access beyond end of device [ 113.661551][ T6215] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 113.674881][ T6215] syz.1.785: attempt to access beyond end of device [ 113.674881][ T6215] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 113.688437][ T6215] syz.1.785: attempt to access beyond end of device [ 113.688437][ T6215] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 113.701715][ T6215] syz.1.785: attempt to access beyond end of device [ 113.701715][ T6215] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 113.726517][ T6215] syz.1.785: attempt to access beyond end of device [ 113.726517][ T6215] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 113.740929][ T6215] syz.1.785: attempt to access beyond end of device [ 113.740929][ T6215] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 113.754580][ T6215] syz.1.785: attempt to access beyond end of device [ 113.754580][ T6215] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 113.767881][ T6215] syz.1.785: attempt to access beyond end of device [ 113.767881][ T6215] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 113.781264][ T6215] syz.1.785: attempt to access beyond end of device [ 113.781264][ T6215] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 113.847010][ T6221] netlink: 12 bytes leftover after parsing attributes in process `syz.3.783'. [ 113.870818][ T6221] loop3: detected capacity change from 0 to 512 [ 113.935882][ T6221] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 113.944669][ T6221] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 113.998572][ T6221] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4193: comm syz.3.783: Allocating blocks 41-42 which overlap fs metadata [ 114.014825][ T6221] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4193: comm syz.3.783: Allocating blocks 41-42 which overlap fs metadata [ 114.029759][ T6221] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.783: Failed to acquire dquot type 1 [ 114.050012][ T6221] EXT4-fs error (device loop3): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 114.064574][ T6221] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #12: comm syz.3.783: corrupted inode contents [ 114.077913][ T6221] EXT4-fs error (device loop3): ext4_dirty_inode:6517: inode #12: comm syz.3.783: mark_inode_dirty error [ 114.094497][ T6221] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #12: comm syz.3.783: corrupted inode contents [ 114.111158][ T6221] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #12: comm syz.3.783: mark_inode_dirty error [ 114.122868][ T6221] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #12: comm syz.3.783: corrupted inode contents [ 114.135059][ T6221] EXT4-fs error (device loop3) in ext4_orphan_del:301: Corrupt filesystem [ 114.144154][ T6221] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #12: comm syz.3.783: corrupted inode contents [ 114.156142][ T6221] EXT4-fs error (device loop3): ext4_truncate:4637: inode #12: comm syz.3.783: mark_inode_dirty error [ 114.167437][ T6221] EXT4-fs error (device loop3) in ext4_process_orphan:343: Corrupt filesystem [ 114.176692][ T6221] EXT4-fs (loop3): 1 truncate cleaned up [ 114.967691][ T4263] usb usb6-port1: attempt power cycle [ 115.060583][ T6235] loop2: detected capacity change from 0 to 512 [ 115.067963][ T6235] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 115.076854][ T6235] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 115.096244][ T6235] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4193: comm syz.2.789: Allocating blocks 41-42 which overlap fs metadata [ 115.110652][ T6235] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.789: Failed to acquire dquot type 1 [ 115.122214][ T6235] EXT4-fs error (device loop2): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 115.136689][ T6235] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #12: comm syz.2.789: corrupted inode contents [ 115.148721][ T6235] EXT4-fs error (device loop2): ext4_dirty_inode:6517: inode #12: comm syz.2.789: mark_inode_dirty error [ 115.160285][ T6235] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #12: comm syz.2.789: corrupted inode contents [ 115.172377][ T6235] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #12: comm syz.2.789: mark_inode_dirty error [ 115.184118][ T6235] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #12: comm syz.2.789: corrupted inode contents [ 115.196377][ T6235] EXT4-fs error (device loop2) in ext4_orphan_del:301: Corrupt filesystem [ 115.205534][ T6235] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #12: comm syz.2.789: corrupted inode contents [ 115.217575][ T6235] EXT4-fs error (device loop2): ext4_truncate:4637: inode #12: comm syz.2.789: mark_inode_dirty error [ 115.228748][ T6235] EXT4-fs error (device loop2) in ext4_process_orphan:343: Corrupt filesystem [ 115.238024][ T6235] EXT4-fs (loop2): 1 truncate cleaned up [ 115.266618][ T6235] syz.2.789 (6235) used greatest stack depth: 9832 bytes left [ 115.308877][ T6244] loop2: detected capacity change from 0 to 512 [ 115.318465][ T6244] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 115.327258][ T6244] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 115.346411][ T6244] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4193: comm syz.2.792: Allocating blocks 41-42 which overlap fs metadata [ 115.360528][ T6244] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4193: comm syz.2.792: Allocating blocks 41-42 which overlap fs metadata [ 115.375752][ T6244] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.792: Failed to acquire dquot type 1 [ 115.401847][ T6244] EXT4-fs error (device loop2): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 115.424734][ T6244] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #12: comm syz.2.792: corrupted inode contents [ 115.436836][ T6248] loop3: detected capacity change from 0 to 1024 [ 115.443479][ T6250] FAULT_INJECTION: forcing a failure. [ 115.443479][ T6250] name failslab, interval 1, probability 0, space 0, times 0 [ 115.456431][ T6250] CPU: 1 UID: 0 PID: 6250 Comm: syz.1.793 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 115.456467][ T6250] Tainted: [W]=WARN [ 115.456474][ T6250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 115.456488][ T6250] Call Trace: [ 115.456563][ T6250] [ 115.456572][ T6250] __dump_stack+0x1d/0x30 [ 115.456599][ T6250] dump_stack_lvl+0xe8/0x140 [ 115.456621][ T6250] dump_stack+0x15/0x1b [ 115.456641][ T6250] should_fail_ex+0x265/0x280 [ 115.456663][ T6250] should_failslab+0x8c/0xb0 [ 115.456706][ T6250] __kmalloc_node_track_caller_noprof+0xa5/0x580 [ 115.456800][ T6250] ? cond_bools_copy+0x30/0x80 [ 115.456820][ T6250] ? __pfx_cond_bools_destroy+0x10/0x10 [ 115.456839][ T6250] kmemdup_noprof+0x2b/0x70 [ 115.456872][ T6250] ? __pfx_cond_bools_destroy+0x10/0x10 [ 115.456896][ T6250] cond_bools_copy+0x30/0x80 [ 115.456927][ T6250] ? __pfx_cond_bools_destroy+0x10/0x10 [ 115.456962][ T6250] hashtab_duplicate+0x11e/0x360 [ 115.456992][ T6250] ? __pfx_cond_bools_copy+0x10/0x10 [ 115.457017][ T6250] cond_policydb_dup+0xd2/0x4e0 [ 115.457043][ T6250] security_set_bools+0xa0/0x340 [ 115.457076][ T6250] sel_commit_bools_write+0x1ea/0x270 [ 115.457173][ T6250] vfs_writev+0x406/0x8b0 [ 115.457206][ T6250] ? __pfx_sel_commit_bools_write+0x10/0x10 [ 115.457300][ T6250] ? mutex_lock+0xd/0x30 [ 115.457334][ T6250] do_writev+0xe7/0x210 [ 115.457363][ T6250] __x64_sys_writev+0x45/0x50 [ 115.457462][ T6250] x64_sys_call+0x1e9a/0x3000 [ 115.457529][ T6250] do_syscall_64+0xd2/0x200 [ 115.457585][ T6250] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 115.457611][ T6250] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 115.457639][ T6250] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.457707][ T6250] RIP: 0033:0x7f40198bf749 [ 115.457723][ T6250] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 115.457741][ T6250] RSP: 002b:00007f4018327038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 115.457780][ T6250] RAX: ffffffffffffffda RBX: 00007f4019b15fa0 RCX: 00007f40198bf749 [ 115.457792][ T6250] RDX: 0000000000000001 RSI: 00002000000025c0 RDI: 0000000000000003 [ 115.457806][ T6250] RBP: 00007f4018327090 R08: 0000000000000000 R09: 0000000000000000 [ 115.457819][ T6250] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 115.457832][ T6250] R13: 00007f4019b16038 R14: 00007f4019b15fa0 R15: 00007fff99ba87e8 [ 115.457906][ T6250] [ 115.458635][ T6248] EXT4-fs: Ignoring removed nobh option [ 115.470614][ T6244] EXT4-fs error (device loop2): ext4_dirty_inode:6517: inode #12: comm syz.2.792: mark_inode_dirty error [ 115.474081][ T6248] EXT4-fs: Ignoring removed bh option [ 115.506652][ T6244] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #12: comm syz.2.792: corrupted inode contents [ 115.509969][ T6248] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 115.522118][ T6244] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #12: comm syz.2.792: mark_inode_dirty error [ 115.644453][ T6259] netlink: 4 bytes leftover after parsing attributes in process `syz.1.796'. [ 115.652228][ T9] usb usb8-port1: unable to enumerate USB device [ 115.661468][ T6244] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #12: comm syz.2.792: corrupted inode contents [ 115.789617][ T6244] EXT4-fs error (device loop2) in ext4_orphan_del:301: Corrupt filesystem [ 115.815562][ T6244] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #12: comm syz.2.792: corrupted inode contents [ 115.837883][ T6244] EXT4-fs error (device loop2): ext4_truncate:4637: inode #12: comm syz.2.792: mark_inode_dirty error [ 115.863441][ T6244] EXT4-fs error (device loop2) in ext4_process_orphan:343: Corrupt filesystem [ 115.872959][ T6244] EXT4-fs (loop2): 1 truncate cleaned up [ 116.066472][ T6265] loop0: detected capacity change from 0 to 512 [ 116.074233][ T6265] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 116.083343][ T6265] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 116.118385][ T6265] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4193: comm syz.0.797: Allocating blocks 41-42 which overlap fs metadata [ 116.212249][ T6274] tipc: Enabling of bearer rejected, failed to enable media [ 116.222249][ T6265] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4193: comm syz.0.797: Allocating blocks 41-42 which overlap fs metadata [ 116.258217][ T6265] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.797: Failed to acquire dquot type 1 [ 116.292026][ T6265] EXT4-fs error (device loop0): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 116.306710][ T6265] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #12: comm syz.0.797: corrupted inode contents [ 116.322410][ T6265] EXT4-fs error (device loop0): ext4_dirty_inode:6517: inode #12: comm syz.0.797: mark_inode_dirty error [ 116.334777][ T6265] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #12: comm syz.0.797: corrupted inode contents [ 116.348273][ T6265] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #12: comm syz.0.797: mark_inode_dirty error [ 116.360901][ T6265] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #12: comm syz.0.797: corrupted inode contents [ 116.367426][ T6280] ip6gre1: entered promiscuous mode [ 116.373250][ T6265] EXT4-fs error (device loop0) in ext4_orphan_del:301: Corrupt filesystem [ 116.377994][ T6280] ip6gre1: entered allmulticast mode [ 116.392578][ T6265] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #12: comm syz.0.797: corrupted inode contents [ 116.404638][ T6280] loop1: detected capacity change from 0 to 1024 [ 116.416177][ T6265] EXT4-fs error (device loop0): ext4_truncate:4637: inode #12: comm syz.0.797: mark_inode_dirty error [ 116.427818][ T6265] EXT4-fs error (device loop0) in ext4_process_orphan:343: Corrupt filesystem [ 116.437214][ T6265] EXT4-fs (loop0): 1 truncate cleaned up [ 117.255005][ T6281] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 117.261631][ T6281] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 117.269369][ T6281] vhci_hcd vhci_hcd.0: Device attached [ 117.382462][ T6288] vhci_hcd: connection closed [ 117.414553][ T4263] usb 6-1: SetAddress Request (29) to port 0 [ 117.434602][ T37] vhci_hcd: stop threads [ 117.439011][ T37] vhci_hcd: release socket [ 117.443638][ T37] vhci_hcd: disconnect device [ 117.449556][ T4263] usb 6-1: new SuperSpeed USB device number 29 using vhci_hcd [ 117.494409][ T4263] usb 6-1: enqueue for inactive port 0 [ 117.500120][ T4263] usb 6-1: enqueue for inactive port 0 [ 117.505770][ T4263] usb 6-1: enqueue for inactive port 0 [ 117.621907][ T6300] lo speed is unknown, defaulting to 1000 [ 117.674503][ T29] kauditd_printk_skb: 129 callbacks suppressed [ 117.674525][ T29] audit: type=1400 audit(1764559912.462:1490): avc: denied { firmware_load } for pid=6290 comm="syz.0.805" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 117.976308][ T6308] netlink: 4 bytes leftover after parsing attributes in process `syz.1.808'. [ 117.994701][ T4263] usb 6-1: new SuperSpeed USB device number 29 using vhci_hcd [ 118.014507][ T4263] usb 6-1: enqueue for inactive port 0 [ 118.022840][ T4263] usb 6-1: enqueue for inactive port 0 [ 118.028411][ T4263] usb 6-1: enqueue for inactive port 0 [ 118.028777][ T6312] xt_hashlimit: max too large, truncated to 1048576 [ 118.306143][ T6319] loop1: detected capacity change from 0 to 512 [ 118.390403][ T6319] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 118.399263][ T6319] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 118.440205][ T6319] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4193: comm syz.1.812: Allocating blocks 41-42 which overlap fs metadata [ 118.454417][ T6319] Quota error (device loop1): write_blk: dquota write failed [ 118.461848][ T6319] Quota error (device loop1): find_free_dqentry: Can't write quota data block 5 [ 118.471040][ T6319] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4193: comm syz.1.812: Allocating blocks 41-42 which overlap fs metadata [ 118.485245][ T6319] Quota error (device loop1): write_blk: dquota write failed [ 118.492909][ T6319] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 118.502943][ T6319] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.812: Failed to acquire dquot type 1 [ 118.514611][ T6319] EXT4-fs error (device loop1): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 118.529298][ T6319] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #12: comm syz.1.812: corrupted inode contents [ 118.541928][ T6319] EXT4-fs error (device loop1): ext4_dirty_inode:6517: inode #12: comm syz.1.812: mark_inode_dirty error [ 118.553432][ T6319] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #12: comm syz.1.812: corrupted inode contents [ 118.565501][ T6319] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #12: comm syz.1.812: mark_inode_dirty error [ 118.576987][ T6319] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #12: comm syz.1.812: corrupted inode contents [ 118.589134][ T6319] EXT4-fs error (device loop1) in ext4_orphan_del:301: Corrupt filesystem [ 118.598035][ T6319] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #12: comm syz.1.812: corrupted inode contents [ 118.612674][ T6319] EXT4-fs error (device loop1): ext4_truncate:4637: inode #12: comm syz.1.812: mark_inode_dirty error [ 118.624417][ T6319] EXT4-fs error (device loop1) in ext4_process_orphan:343: Corrupt filesystem [ 118.633881][ T6319] EXT4-fs (loop1): 1 truncate cleaned up [ 118.669655][ T6325] loop0: detected capacity change from 0 to 512 [ 118.677855][ T6325] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 118.707446][ T6329] xt_hashlimit: size too large, truncated to 1048576 [ 118.819099][ T6325] ext4 filesystem being mounted at /169/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 119.352637][ T29] audit: type=1326 audit(1764559914.152:1491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6345 comm="syz.1.819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40198bf749 code=0x7ffc0000 [ 119.484634][ T6349] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 119.491197][ T6349] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 119.499004][ T6349] vhci_hcd vhci_hcd.0: Device attached [ 119.796024][ T29] audit: type=1326 audit(1764559914.182:1492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6345 comm="syz.1.819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40198bf749 code=0x7ffc0000 [ 119.819460][ T29] audit: type=1326 audit(1764559914.182:1493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6345 comm="syz.1.819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40198bf749 code=0x7ffc0000 [ 119.842873][ T29] audit: type=1326 audit(1764559914.182:1494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6345 comm="syz.1.819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=268 compat=0 ip=0x7f40198bf749 code=0x7ffc0000 [ 119.866822][ T29] audit: type=1326 audit(1764559914.232:1495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6345 comm="syz.1.819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40198bf749 code=0x7ffc0000 [ 119.894508][ T1046] usb 6-1: SetAddress Request (30) to port 0 [ 119.909125][ T1046] usb 6-1: new SuperSpeed USB device number 30 using vhci_hcd [ 120.014790][ T6363] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 120.017675][ T6351] vhci_hcd: connection reset by peer [ 120.039000][ T3453] vhci_hcd: stop threads [ 120.043338][ T3453] vhci_hcd: release socket [ 120.047962][ T3453] vhci_hcd: disconnect device [ 120.063233][ T6364] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 120.069893][ T6364] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 120.077625][ T6364] vhci_hcd vhci_hcd.0: Device attached [ 120.097947][ T6369] loop1: detected capacity change from 0 to 1024 [ 120.104799][ T6369] EXT4-fs: Ignoring removed orlov option [ 120.138506][ T6365] loop3: detected capacity change from 0 to 512 [ 120.161459][ T6373] netlink: 4 bytes leftover after parsing attributes in process `syz.1.829'. [ 120.190616][ T6365] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 120.202231][ T6373] netlink: 28 bytes leftover after parsing attributes in process `syz.1.829'. [ 120.202495][ T6366] vhci_hcd: connection closed [ 120.213028][ T3453] vhci_hcd: stop threads [ 120.222075][ T3453] vhci_hcd: release socket [ 120.226557][ T3453] vhci_hcd: disconnect device [ 120.233430][ T6365] ext4 filesystem being mounted at /149/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 120.304174][ T6378] loop1: detected capacity change from 0 to 512 [ 120.325987][ T6378] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 120.347422][ T6378] ext4 filesystem being mounted at /183/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 120.499377][ T6384] mmap: ,&#^% (6384): VmData 29118464 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 120.658923][ T6403] netlink: 4 bytes leftover after parsing attributes in process `syz.1.838'. [ 120.670805][ T6402] netlink: 4 bytes leftover after parsing attributes in process `syz.3.836'. [ 120.671100][ T6409] loop4: detected capacity change from 0 to 512 [ 120.682672][ T6403] pim6reg: entered allmulticast mode [ 120.695441][ T6402] pim6reg: entered allmulticast mode [ 120.703273][ T6409] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 120.704007][ T6402] pim6reg: left allmulticast mode [ 120.712017][ T6409] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 120.718416][ T6411] loop2: detected capacity change from 0 to 512 [ 120.732944][ T6411] EXT4-fs: Ignoring removed orlov option [ 120.743525][ T6403] pim6reg: left allmulticast mode [ 120.749508][ T6411] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 120.763267][ T6409] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4193: comm syz.4.839: Allocating blocks 41-42 which overlap fs metadata [ 120.784692][ T6414] loop1: detected capacity change from 0 to 1024 [ 120.791133][ T6411] EXT4-fs error (device loop2): ext4_iget_extra_inode:5075: inode #15: comm syz.2.840: corrupted in-inode xattr: e_value size too large [ 120.807455][ T6409] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4193: comm syz.4.839: Allocating blocks 41-42 which overlap fs metadata [ 120.807943][ T6416] loop3: detected capacity change from 0 to 1024 [ 120.827780][ T6411] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.840: couldn't read orphan inode 15 (err -117) [ 120.849133][ T6409] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.839: Failed to acquire dquot type 1 [ 120.872054][ T6409] EXT4-fs error (device loop4): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 120.887790][ T6409] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #12: comm syz.4.839: corrupted inode contents [ 120.889756][ T6418] FAULT_INJECTION: forcing a failure. [ 120.889756][ T6418] name failslab, interval 1, probability 0, space 0, times 0 [ 120.900837][ T6409] EXT4-fs error (device loop4): ext4_dirty_inode:6517: inode #12: comm syz.4.839: mark_inode_dirty error [ 120.912351][ T6418] CPU: 1 UID: 0 PID: 6418 Comm: syz.0.841 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 120.912386][ T6418] Tainted: [W]=WARN [ 120.912393][ T6418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 120.912404][ T6418] Call Trace: [ 120.912412][ T6418] [ 120.912437][ T6418] __dump_stack+0x1d/0x30 [ 120.912461][ T6418] dump_stack_lvl+0xe8/0x140 [ 120.912481][ T6418] dump_stack+0x15/0x1b [ 120.912498][ T6418] should_fail_ex+0x265/0x280 [ 120.912550][ T6418] should_failslab+0x8c/0xb0 [ 120.912576][ T6418] __kmalloc_noprof+0xa5/0x570 [ 120.912604][ T6418] ? io_cache_alloc_new+0x2a/0xb0 [ 120.912657][ T6418] io_cache_alloc_new+0x2a/0xb0 [ 120.912680][ T6418] __io_prep_rw+0xcf/0x6d0 [ 120.912757][ T6418] ? __rcu_read_unlock+0x4f/0x70 [ 120.912782][ T6418] io_prep_rwv+0x33/0x250 [ 120.912810][ T6418] io_prep_writev+0x22/0x30 [ 120.912837][ T6418] io_submit_sqes+0x5ef/0x1060 [ 120.912950][ T6418] __se_sys_io_uring_enter+0x1c1/0x1b70 [ 120.913048][ T6418] ? 0xffffffff81000000 [ 120.913062][ T6418] ? __rcu_read_unlock+0x4f/0x70 [ 120.913104][ T6418] ? get_pid_task+0x96/0xd0 [ 120.913126][ T6418] ? proc_fail_nth_write+0x13b/0x160 [ 120.913156][ T6418] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 120.913326][ T6418] ? vfs_write+0x7e8/0x960 [ 120.913350][ T6418] ? __rcu_read_unlock+0x4f/0x70 [ 120.913373][ T6418] ? __fget_files+0x184/0x1c0 [ 120.913399][ T6418] ? fput+0x8f/0xc0 [ 120.913417][ T6418] __x64_sys_io_uring_enter+0x78/0x90 [ 120.913474][ T6418] x64_sys_call+0x2df0/0x3000 [ 120.913495][ T6418] do_syscall_64+0xd2/0x200 [ 120.913572][ T6418] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 120.913637][ T6418] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 120.913667][ T6418] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.913688][ T6418] RIP: 0033:0x7fb297fcf749 [ 120.913703][ T6418] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 120.913756][ T6418] RSP: 002b:00007fb296a2f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 120.913777][ T6418] RAX: ffffffffffffffda RBX: 00007fb298225fa0 RCX: 00007fb297fcf749 [ 120.913789][ T6418] RDX: 0000000000003e82 RSI: 00000000000047ba RDI: 0000000000000007 [ 120.913802][ T6418] RBP: 00007fb296a2f090 R08: 0000000000000000 R09: 0000000000000000 [ 120.913814][ T6418] R10: 0000000000000060 R11: 0000000000000246 R12: 0000000000000001 [ 120.913826][ T6418] R13: 00007fb298226038 R14: 00007fb298225fa0 R15: 00007ffc84ad1ac8 [ 120.913843][ T6418] [ 121.172474][ T6403] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000. [ 121.173897][ T6409] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #12: comm syz.4.839: corrupted inode contents [ 121.180933][ T6402] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000. [ 121.192704][ T6409] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #12: comm syz.4.839: mark_inode_dirty error [ 121.212027][ T6409] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #12: comm syz.4.839: corrupted inode contents [ 121.224963][ T6409] EXT4-fs error (device loop4) in ext4_orphan_del:301: Corrupt filesystem [ 121.234129][ T6409] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #12: comm syz.4.839: corrupted inode contents [ 121.269978][ T6409] EXT4-fs error (device loop4): ext4_truncate:4637: inode #12: comm syz.4.839: mark_inode_dirty error [ 121.281486][ T6409] EXT4-fs error (device loop4) in ext4_process_orphan:343: Corrupt filesystem [ 121.290901][ T6409] EXT4-fs (loop4): 1 truncate cleaned up [ 121.503965][ T6428] loop1: detected capacity change from 0 to 512 [ 121.515689][ T6428] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 121.586162][ T6428] ext4 filesystem being mounted at /186/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 121.717695][ T6456] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.771838][ T6458] netlink: 4 bytes leftover after parsing attributes in process `syz.1.853'. [ 121.790566][ T6464] loop3: detected capacity change from 0 to 128 [ 121.809680][ T6458] pim6reg: entered allmulticast mode [ 121.816901][ T6464] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 121.824887][ T6464] FAT-fs (loop3): Filesystem has been set read-only [ 121.831872][ T6464] bio_check_eod: 8601 callbacks suppressed [ 121.831891][ T6464] syz.3.854: attempt to access beyond end of device [ 121.831891][ T6464] loop3: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 121.851702][ T6464] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 121.856055][ T6462] loop2: detected capacity change from 0 to 2048 [ 121.859603][ T6464] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 121.876102][ T6464] syz.3.854: attempt to access beyond end of device [ 121.876102][ T6464] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 121.877034][ T6456] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.889839][ T6464] syz.3.854: attempt to access beyond end of device [ 121.889839][ T6464] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 121.916202][ T6464] syz.3.854: attempt to access beyond end of device [ 121.916202][ T6464] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 121.929979][ T6464] syz.3.854: attempt to access beyond end of device [ 121.929979][ T6464] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 121.943540][ T6464] syz.3.854: attempt to access beyond end of device [ 121.943540][ T6464] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 121.953377][ T6462] ext4 filesystem being mounted at /178/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 121.971201][ T6462] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.980626][ T6462] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.988775][ T6464] syz.3.854: attempt to access beyond end of device [ 121.988775][ T6464] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 121.992100][ T6466] pim6reg: left allmulticast mode [ 122.029155][ T6469] loop1: detected capacity change from 0 to 1024 [ 122.045933][ T6464] syz.3.854: attempt to access beyond end of device [ 122.045933][ T6464] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 122.064120][ T6456] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.115098][ T6458] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000. [ 122.133568][ T6476] netlink: 4 bytes leftover after parsing attributes in process `syz.4.856'. [ 122.143442][ T6464] syz.3.854: attempt to access beyond end of device [ 122.143442][ T6464] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 122.157426][ T6464] syz.3.854: attempt to access beyond end of device [ 122.157426][ T6464] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 122.176250][ T6456] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.245640][ T6485] loop1: detected capacity change from 0 to 512 [ 122.282093][ T37] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.300241][ T37] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.308716][ T37] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.323043][ T37] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.350809][ T6485] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 122.387276][ T6485] ext4 filesystem being mounted at /190/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 122.588735][ T6483] loop4: detected capacity change from 0 to 512 [ 122.614667][ T6483] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 122.664975][ T6483] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 122.695769][ T6483] EXT4-fs (loop4): 1 truncate cleaned up [ 122.702205][ T29] kauditd_printk_skb: 180 callbacks suppressed [ 122.702218][ T29] audit: type=1326 audit(1764559917.502:1672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6482 comm="syz.4.858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1b984adf90 code=0x7ffc0000 [ 122.733409][ T29] audit: type=1326 audit(1764559917.532:1673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6482 comm="syz.4.858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7f1b984ae497 code=0x7ffc0000 [ 122.756765][ T29] audit: type=1326 audit(1764559917.532:1674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6482 comm="syz.4.858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1b984adf90 code=0x7ffc0000 [ 122.780399][ T29] audit: type=1326 audit(1764559917.532:1675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6482 comm="syz.4.858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b984af749 code=0x7ffc0000 [ 122.811220][ T6500] IPv6: NLM_F_CREATE should be specified when creating new route [ 122.828858][ T6502] xt_hashlimit: max too large, truncated to 1048576 [ 122.855560][ T29] audit: type=1326 audit(1764559917.572:1676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6482 comm="syz.4.858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b984af749 code=0x7ffc0000 [ 122.878979][ T29] audit: type=1326 audit(1764559917.572:1677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6482 comm="syz.4.858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b984af749 code=0x7ffc0000 [ 122.931894][ T6506] loop3: detected capacity change from 0 to 512 [ 122.950207][ T6506] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 122.959073][ T6506] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #13: comm syz.3.865: attempt to clear invalid blocks 2 len 1 [ 122.975379][ T6506] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 122.990228][ T6506] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.865: invalid indirect mapped block 1819239214 (level 0) [ 123.004827][ T6506] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.865: invalid indirect mapped block 1819239214 (level 1) [ 123.019647][ T6506] EXT4-fs (loop3): 1 truncate cleaned up [ 123.163266][ T29] audit: type=1400 audit(1764559917.962:1678): avc: denied { create } for pid=6503 comm="syz.0.864" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 123.201095][ T29] audit: type=1400 audit(1764559917.982:1679): avc: denied { write } for pid=6503 comm="syz.0.864" name="file0" dev="tmpfs" ino=979 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 123.223623][ T29] audit: type=1400 audit(1764559917.982:1680): avc: denied { open } for pid=6503 comm="syz.0.864" path="/177/file0" dev="tmpfs" ino=979 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 123.246378][ T29] audit: type=1400 audit(1764559917.982:1681): avc: denied { ioctl } for pid=6503 comm="syz.0.864" path="/177/file0" dev="tmpfs" ino=979 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 123.468247][ T6540] netlink: 4 bytes leftover after parsing attributes in process `syz.4.868'. [ 124.058973][ T6634] loop1: detected capacity change from 0 to 512 [ 124.099161][ T6634] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 124.137231][ T6634] ext4 filesystem being mounted at /192/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 124.381227][ T6643] netlink: 12 bytes leftover after parsing attributes in process `syz.0.874'. [ 124.405594][ T6643] loop0: detected capacity change from 0 to 512 [ 124.413759][ T6643] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 124.422575][ T6643] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 124.493841][ T6643] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4193: comm syz.0.874: Allocating blocks 41-42 which overlap fs metadata [ 124.508098][ T6643] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4193: comm syz.0.874: Allocating blocks 41-42 which overlap fs metadata [ 124.522161][ T6643] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.874: Failed to acquire dquot type 1 [ 124.533801][ T6643] EXT4-fs error (device loop0): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 124.548360][ T6643] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #12: comm syz.0.874: corrupted inode contents [ 124.560461][ T6643] EXT4-fs error (device loop0): ext4_dirty_inode:6517: inode #12: comm syz.0.874: mark_inode_dirty error [ 124.572107][ T6643] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #12: comm syz.0.874: corrupted inode contents [ 124.584462][ T6643] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #12: comm syz.0.874: mark_inode_dirty error [ 124.596904][ T6643] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #12: comm syz.0.874: corrupted inode contents [ 124.608914][ T6643] EXT4-fs error (device loop0) in ext4_orphan_del:301: Corrupt filesystem [ 124.618227][ T6643] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #12: comm syz.0.874: corrupted inode contents [ 124.630364][ T6643] EXT4-fs error (device loop0): ext4_truncate:4637: inode #12: comm syz.0.874: mark_inode_dirty error [ 124.641653][ T6643] EXT4-fs error (device loop0) in ext4_process_orphan:343: Corrupt filesystem [ 124.651291][ T6643] EXT4-fs (loop0): 1 truncate cleaned up [ 124.691228][ T6371] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 345: padding at end of block bitmap is not set [ 124.746475][ T6371] EXT4-fs (loop2): Remounting filesystem read-only [ 125.024848][ T1046] usb 6-1: device descriptor read/8, error -110 [ 125.127512][ T6657] loop0: detected capacity change from 0 to 1024 [ 125.146504][ T6657] EXT4-fs: Ignoring removed nobh option [ 125.152168][ T6657] EXT4-fs: Ignoring removed bh option [ 125.184864][ T6657] EXT4-fs (loop0): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 125.242547][ T1046] usb 6-1: new SuperSpeed USB device number 30 using vhci_hcd [ 125.265266][ T1046] usb 6-1: enqueue for inactive port 0 [ 125.271252][ T1046] usb 6-1: enqueue for inactive port 0 [ 125.276875][ T1046] usb 6-1: enqueue for inactive port 0 [ 125.348126][ T6663] netlink: 4 bytes leftover after parsing attributes in process `syz.4.879'. [ 125.359798][ T6663] pim6reg: entered allmulticast mode [ 125.365899][ T6663] pim6reg: left allmulticast mode [ 125.429713][ T6666] loop4: detected capacity change from 0 to 1024 [ 125.487734][ T6663] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000. [ 125.706197][ T6673] loop4: detected capacity change from 0 to 512 [ 125.797438][ T6676] xt_hashlimit: max too large, truncated to 1048576 [ 125.825200][ T6673] EXT4-fs (loop4): 1 orphan inode deleted [ 125.856599][ T6678] loop3: detected capacity change from 0 to 512 [ 125.890682][ T6678] ext4 filesystem being mounted at /161/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 126.087666][ T6691] loop4: detected capacity change from 0 to 1764 [ 126.105879][ T6691] netlink: 'syz.4.886': attribute type 1 has an invalid length. [ 126.119221][ T6691] 8021q: adding VLAN 0 to HW filter on device bond2 [ 126.138423][ T6691] 8021q: adding VLAN 0 to HW filter on device bond2 [ 126.145432][ T6691] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 126.156748][ T6691] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 126.189129][ T6693] gretap1: entered promiscuous mode [ 126.196274][ T6693] bond2: (slave gretap1): making interface the new active one [ 126.204007][ T6693] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 126.304886][ T1046] usb usb6-port1: attempt power cycle [ 126.814264][ T6701] netlink: 4 bytes leftover after parsing attributes in process `syz.4.890'. [ 126.827129][ T6701] pim6reg: entered allmulticast mode [ 126.833518][ T6701] pim6reg: left allmulticast mode [ 126.859742][ T6707] loop3: detected capacity change from 0 to 128 [ 126.867898][ T6707] vfat: Unknown parameter 'shortn./file7' [ 126.889982][ T6701] loop4: detected capacity change from 0 to 1024 [ 127.006820][ T6701] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000. [ 127.561022][ T6716] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 127.567661][ T6716] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 127.575586][ T6716] vhci_hcd vhci_hcd.0: Device attached [ 127.636843][ T6720] netlink: 4 bytes leftover after parsing attributes in process `syz.4.893'. [ 127.727995][ T6725] loop4: detected capacity change from 0 to 512 [ 127.741120][ T6717] vhci_hcd: connection closed [ 127.741393][ T31] vhci_hcd: stop threads [ 127.750967][ T31] vhci_hcd: release socket [ 127.751714][ T6725] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 127.755473][ T31] vhci_hcd: disconnect device [ 127.764508][ T6725] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 127.786787][ T6725] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4193: comm syz.4.894: Allocating blocks 41-42 which overlap fs metadata [ 127.800734][ T6725] __quota_error: 162 callbacks suppressed [ 127.800748][ T6725] Quota error (device loop4): write_blk: dquota write failed [ 127.813905][ T6725] Quota error (device loop4): find_free_dqentry: Can't write quota data block 5 [ 127.823187][ T6725] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4193: comm syz.4.894: Allocating blocks 41-42 which overlap fs metadata [ 127.837234][ T6725] Quota error (device loop4): write_blk: dquota write failed [ 127.844849][ T6725] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 127.854930][ T6725] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.894: Failed to acquire dquot type 1 [ 127.866386][ T6725] EXT4-fs error (device loop4): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 127.887323][ T6725] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #12: comm syz.4.894: corrupted inode contents [ 127.891375][ T6729] loop1: detected capacity change from 0 to 1024 [ 127.900137][ T6725] EXT4-fs error (device loop4): ext4_dirty_inode:6517: inode #12: comm syz.4.894: mark_inode_dirty error [ 127.907997][ T6729] EXT4-fs: Ignoring removed orlov option [ 127.917287][ T6725] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #12: comm syz.4.894: corrupted inode contents [ 127.934894][ T6725] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #12: comm syz.4.894: mark_inode_dirty error [ 127.947022][ T6725] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #12: comm syz.4.894: corrupted inode contents [ 127.951972][ T6729] EXT4-fs mount: 64 callbacks suppressed [ 127.951988][ T6729] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.959091][ T6725] EXT4-fs error (device loop4) in ext4_orphan_del:301: Corrupt filesystem [ 127.986373][ T6725] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #12: comm syz.4.894: corrupted inode contents [ 127.986505][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.998584][ T6725] EXT4-fs error (device loop4): ext4_truncate:4637: inode #12: comm syz.4.894: mark_inode_dirty error [ 128.018743][ T6725] EXT4-fs error (device loop4) in ext4_process_orphan:343: Corrupt filesystem [ 128.028148][ T6725] EXT4-fs (loop4): 1 truncate cleaned up [ 128.034328][ T6725] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.048161][ T6725] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.049406][ T29] audit: type=1400 audit(1764559922.852:1840): avc: denied { create } for pid=6731 comm="syz.1.896" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 128.094405][ T29] audit: type=1400 audit(1764559922.892:1841): avc: denied { bind } for pid=6731 comm="syz.1.896" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 128.131934][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.172375][ T6734] loop1: detected capacity change from 0 to 1024 [ 128.189414][ T6736] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 128.218682][ T29] audit: type=1400 audit(1764559923.022:1842): avc: denied { mounton } for pid=6733 comm="syz.1.898" path="/200/file0" dev="tmpfs" ino=1118 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 128.241921][ T6734] EXT4-fs: Ignoring removed bh option [ 128.291556][ T1046] usb usb6-port1: unable to enumerate USB device [ 128.301151][ T6734] EXT4-fs: inline encryption not supported [ 128.308025][ T29] audit: type=1400 audit(1764559923.022:1843): avc: denied { read write } for pid=3319 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 128.332368][ T29] audit: type=1400 audit(1764559923.022:1844): avc: denied { open } for pid=3319 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 128.356599][ T29] audit: type=1400 audit(1764559923.022:1845): avc: denied { ioctl } for pid=3319 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=100 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 128.398415][ T6734] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 128.439694][ T6747] netlink: 24 bytes leftover after parsing attributes in process `syz.3.902'. [ 128.478832][ T6750] netlink: 4 bytes leftover after parsing attributes in process `syz.4.903'. [ 128.487834][ T6734] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 128.526881][ T6747] loop3: detected capacity change from 0 to 128 [ 128.532491][ T6745] pim6reg: entered allmulticast mode [ 128.539909][ T6745] pim6reg: left allmulticast mode [ 128.556179][ T6734] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 2: comm syz.1.898: lblock 2 mapped to illegal pblock 2 (length 1) [ 128.572708][ T6747] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 128.604323][ T6754] loop4: detected capacity change from 0 to 1024 [ 128.644495][ T6734] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 48: comm syz.1.898: lblock 0 mapped to illegal pblock 48 (length 1) [ 128.658691][ T6747] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #2: comm syz.3.902: corrupted xattr block 5: invalid header [ 128.672487][ T6754] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 128.684615][ T6734] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.898: Failed to acquire dquot type 0 [ 128.733705][ T6734] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 128.743459][ T6747] SELinux: (dev loop3, type ext4) getxattr errno 117 [ 128.760512][ T6745] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000. [ 128.785038][ T6747] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 128.794217][ T6734] EXT4-fs error (device loop1): ext4_evict_inode:254: inode #11: comm syz.1.898: mark_inode_dirty error [ 128.844097][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.844932][ T6734] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 128.885372][ T6734] EXT4-fs (loop1): 1 orphan inode deleted [ 128.904528][ T31] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 128.929511][ T6734] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.944793][ T31] EXT4-fs error (device loop1): ext4_release_dquot:6981: comm kworker/u8:1: Failed to release dquot type 0 [ 129.009792][ T6734] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.055021][ T6760] netlink: 'syz.3.905': attribute type 196 has an invalid length. [ 129.065460][ T6734] EXT4-fs error (device loop1): __ext4_get_inode_loc:4832: comm syz.1.898: Invalid inode table block 1 in block_group 0 [ 129.104718][ T6763] loop4: detected capacity change from 0 to 512 [ 129.111982][ T6734] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 129.122408][ T6763] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 129.158254][ T6734] EXT4-fs error (device loop1): ext4_quota_off:7229: inode #3: comm syz.1.898: mark_inode_dirty error [ 129.181252][ T6763] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.224620][ T6763] ext4 filesystem being mounted at /172/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 129.358129][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.467878][ T6774] loop3: detected capacity change from 0 to 512 [ 129.484759][ T6774] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 129.493587][ T6774] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 129.549815][ T6734] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=6734 comm=syz.1.898 [ 129.560796][ T6776] loop4: detected capacity change from 0 to 1024 [ 129.585100][ T6778] loop0: detected capacity change from 0 to 512 [ 129.592658][ T6774] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4193: comm syz.3.909: Allocating blocks 41-42 which overlap fs metadata [ 129.602197][ T6781] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=6781 comm=syz.1.898 [ 129.626139][ T6776] EXT4-fs: Ignoring removed nobh option [ 129.631861][ T6776] EXT4-fs: Ignoring removed bh option [ 129.637469][ T6778] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 129.646362][ T6778] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 129.665316][ T6774] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4193: comm syz.3.909: Allocating blocks 41-42 which overlap fs metadata [ 129.684696][ T6776] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 129.719460][ T6778] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4193: comm syz.0.910: Allocating blocks 41-42 which overlap fs metadata [ 129.763329][ T6774] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.909: Failed to acquire dquot type 1 [ 129.796591][ T6774] EXT4-fs error (device loop3): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 129.811252][ T6778] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.910: Failed to acquire dquot type 1 [ 129.811431][ T6774] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #12: comm syz.3.909: corrupted inode contents [ 129.826805][ T6776] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 129.841238][ T6774] EXT4-fs error (device loop3): ext4_dirty_inode:6517: inode #12: comm syz.3.909: mark_inode_dirty error [ 129.858675][ T6778] EXT4-fs error (device loop0): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 129.859862][ T6774] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #12: comm syz.3.909: corrupted inode contents [ 129.873642][ T6778] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #12: comm syz.0.910: corrupted inode contents [ 129.895707][ T6774] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #12: comm syz.3.909: mark_inode_dirty error [ 129.897835][ T6778] EXT4-fs error (device loop0): ext4_dirty_inode:6517: inode #12: comm syz.0.910: mark_inode_dirty error [ 129.920464][ T6778] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #12: comm syz.0.910: corrupted inode contents [ 129.932425][ T6774] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #12: comm syz.3.909: corrupted inode contents [ 129.938563][ T6778] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #12: comm syz.0.910: mark_inode_dirty error [ 129.956408][ T6778] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #12: comm syz.0.910: corrupted inode contents [ 129.968639][ T6774] EXT4-fs error (device loop3) in ext4_orphan_del:301: Corrupt filesystem [ 129.968828][ T6778] EXT4-fs error (device loop0) in ext4_orphan_del:301: Corrupt filesystem [ 129.986183][ T6778] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #12: comm syz.0.910: corrupted inode contents [ 129.998279][ T6774] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #12: comm syz.3.909: corrupted inode contents [ 129.998482][ T6778] EXT4-fs error (device loop0): ext4_truncate:4637: inode #12: comm syz.0.910: mark_inode_dirty error [ 130.014740][ T6789] loop1: detected capacity change from 0 to 512 [ 130.021591][ T6778] EXT4-fs error (device loop0) in ext4_process_orphan:343: Corrupt filesystem [ 130.036569][ T6774] EXT4-fs error (device loop3): ext4_truncate:4637: inode #12: comm syz.3.909: mark_inode_dirty error [ 130.038121][ T6778] EXT4-fs (loop0): 1 truncate cleaned up [ 130.047825][ T6789] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 130.053792][ T6778] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.062346][ T6774] EXT4-fs error (device loop3) in ext4_process_orphan:343: Corrupt filesystem [ 130.085135][ T6789] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.097879][ T6774] EXT4-fs (loop3): 1 truncate cleaned up [ 130.103984][ T6774] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.106047][ T6789] ext4 filesystem being mounted at /202/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 130.118007][ T6774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.127846][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.146773][ T3319] ================================================================== [ 130.154896][ T3319] BUG: KCSAN: data-race in find_get_block_common / has_bh_in_lru [ 130.163192][ T3319] [ 130.165528][ T3319] read-write to 0xffff888237c26fe8 of 8 bytes by task 6789 on cpu 0: [ 130.173602][ T3319] find_get_block_common+0x542/0x960 [ 130.178995][ T3319] bdev_getblk+0x30d/0x3b0 [ 130.183857][ T3319] ext4_getblk+0x1b6/0x510 [ 130.188287][ T3319] ext4_bread_batch+0x5c/0x320 [ 130.193259][ T3319] __ext4_find_entry+0x840/0xf40 [ 130.198202][ T3319] ext4_lookup+0xbb/0x390 [ 130.202541][ T3319] path_openat+0xcf3/0x2170 [ 130.207257][ T3319] do_filp_open+0x109/0x230 [ 130.211760][ T3319] do_sys_openat2+0xa6/0x110 [ 130.216440][ T3319] __x64_sys_creat+0x65/0x90 [ 130.221037][ T3319] x64_sys_call+0x2da3/0x3000 [ 130.225917][ T3319] do_syscall_64+0xd2/0x200 [ 130.230513][ T3319] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.236406][ T3319] [ 130.238734][ T3319] read to 0xffff888237c26fe8 of 8 bytes by task 3319 on cpu 1: [ 130.246272][ T3319] has_bh_in_lru+0x8c/0x1f0 [ 130.250783][ T3319] __lru_add_drain_all+0x287/0x450 [ 130.255994][ T3319] lru_add_drain_all+0x10/0x20 [ 130.260758][ T3319] invalidate_bdev+0x47/0x70 [ 130.265427][ T3319] ext4_put_super+0x624/0x7d0 [ 130.270110][ T3319] generic_shutdown_super+0xe6/0x210 [ 130.275405][ T3319] kill_block_super+0x2a/0x70 [ 130.280089][ T3319] ext4_kill_sb+0x42/0x80 [ 130.284422][ T3319] deactivate_locked_super+0x75/0x1c0 [ 130.289804][ T3319] deactivate_super+0x97/0xa0 [ 130.294709][ T3319] cleanup_mnt+0x269/0x2e0 [ 130.299134][ T3319] __cleanup_mnt+0x19/0x20 [ 130.303819][ T3319] task_work_run+0x131/0x1a0 [ 130.308439][ T3319] exit_to_user_mode_loop+0xed/0x110 [ 130.313730][ T3319] do_syscall_64+0x1d6/0x200 [ 130.318410][ T3319] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.324317][ T3319] [ 130.326733][ T3319] value changed: 0x0000000000000000 -> 0xffff88810da567b8 [ 130.333836][ T3319] [ 130.336155][ T3319] Reported by Kernel Concurrency Sanitizer on: [ 130.342395][ T3319] CPU: 1 UID: 0 PID: 3319 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 130.353856][ T3319] Tainted: [W]=WARN [ 130.357662][ T3319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 130.368014][ T3319] ================================================================== [ 130.376703][ T3407] usb usb6-port1: attempt power cycle [ 130.453229][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.467737][ T6793] loop0: detected capacity change from 0 to 8192 [ 130.544253][ T6794] lo speed is unknown, defaulting to 1000 [ 130.584338][ T6794] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.594736][ T6794] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 132.194598][ T3407] usb usb6-port1: unable to enumerate USB device [ 132.201784][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.562841][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.