last executing test programs: 2.777605574s ago: executing program 4 (id=653): r0 = accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000240), &(0x7f00000002c0)=0x60) r1 = syz_open_dev$usbmon(&(0x7f0000000080), 0x38e, 0x20800) unshare(0x4000680) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0x9205, 0x0) getsockname(r0, &(0x7f0000000300)=@sco, &(0x7f0000000380)=0x80) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000004000000000002000004027f01dc5b06da22761aa0000000000000888f9011600"], 0x48) syz_clone3(&(0x7f00000008c0)={0x100000000, &(0x7f0000000480), &(0x7f00000004c0), &(0x7f0000000500)=0x0, {0x35}, &(0x7f0000000740)=""/167, 0xa7, &(0x7f0000000800)=""/166, &(0x7f0000000580)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x4}, 0x58) tkill(r3, 0xa) socket(0x6, 0x80000, 0x9) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x7, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000f7ffffff000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000000000008500000086000000950000000000a284de0014441df7e88421267b7f6433cf0cfaf5e23175fb095879"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) kexec_load(0x4, 0xa, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r4}, 0x10) r5 = socket(0xa, 0x3, 0x3a) getsockopt$MRT6(r5, 0x29, 0xd0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000240)=',-\x10*\x00', &(0x7f0000000380)='$\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000540)='\x00', &(0x7f0000001c80)='n', 0x1) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000005c0)='\x00H\xeb', 0x0, 0xffffffffffffffff) sigaltstack(&(0x7f0000000040)={0xffffffffffffffff, 0x0, 0xfffffffffffffefa}, 0x0) syz_clone(0x102311, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r6, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0x940}], 0x1) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000000)='\x04\x00', &(0x7f00000001c0)='\':\\$\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000000a40)="$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") r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x4c58, 0x10000, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r8 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$int_in(r8, 0x5452, &(0x7f0000000080)=0x1494) fcntl$setstatus(r8, 0x4, 0x0) truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r7, 0x0) 2.472081749s ago: executing program 2 (id=660): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$KDGKBDIACR(r1, 0x4b4a, &(0x7f00000000c0)=""/139) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xf, &(0x7f00000005c0)=ANY=[@ANYBLOB="22000000ff000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0xc6, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='mm_page_free\x00', r2}, 0x18) socketpair(0x3f, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$kcm(0x2d, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x62, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8000, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x0, 0x6}, 0x0, 0x0, 0x800003, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x380}, 0x0, 0x1, 0xffffffffffffffff, 0x1) r5 = socket(0x1e, 0x4, 0x0) r6 = socket(0x1e, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0e000000040000"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0xfffffffc}, 0x10) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r10, 0x40045431, 0x0) ioctl$TIOCGPTPEER(r10, 0x5441, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='btrfs_inode_mod_outstanding_extents\x00', r9, 0x0, 0xb}, 0x17) r11 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r11, 0x2275, &(0x7f0000000040)) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x900, 0x0) ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNSETTXFILTER(r12, 0x400454d1, &(0x7f00000000c0)=ANY=[@ANYBLOB="019f07"]) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2, 0x4}, 0x10) sendmmsg(r5, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmmsg(0xffffffffffffffff, &(0x7f0000001100)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)=""/8, 0x8}], 0x1}, 0xffffffff}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000300)=""/29, 0x1d}], 0x1}, 0x2}], 0x2, 0x40000001, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000000340)={r4}) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f00000002c0)={r3}) 2.039325017s ago: executing program 3 (id=663): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002f00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x1d, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x11, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0x10) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) fsetxattr$system_posix_acl(r3, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f00000004c0)=ANY=[@ANYBLOB="02"], 0xfe44, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x42}], 0x1}, 0x24000004) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x18) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x21081e, &(0x7f00000002c0), 0x0, 0x4f2, &(0x7f0000000600)="$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") 2.028842937s ago: executing program 0 (id=664): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x1f, &(0x7f0000000000)={[{@max_batch_time={'max_batch_time', 0x3d, 0x6}}, {@stripe}]}, 0x6, 0x5fd, &(0x7f00000004c0)="$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") r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000240), &(0x7f0000000280)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$selinux_validatetrans(r2, &(0x7f0000000180)=ANY=[@ANYBLOB='system_u:object_r:semanage_t system_u:object_r:fixed_disk_device_t:s0 0'], 0x79) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 1.697949762s ago: executing program 4 (id=666): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="34000000680001e902001000fdfeff7f00000200000000000cd53246e2f010963af3d0c400020001000000150000005661100008724b3a8b333d37980931978647c89c28ddfe0906357574e4ea43df7916da2e6a534f7ea1b23e45a3f7253ee8b3ee32ea4badf8c27adce1d00d6e8f97dd975a10c92e152575d3b1965c"], 0x34}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101804bc9555e1affd5020000000900010001797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000000009000300737975320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x24040010}, 0x0) 1.593146994s ago: executing program 1 (id=667): bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f0000"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = creat(&(0x7f0000000080)='./file0/file1\x00', 0x90) write$cgroup_type(r0, &(0x7f00000009c0), 0xd4ba0ff) removexattr(&(0x7f0000000000)='./file0/file1\x00', &(0x7f00000002c0)=@known='user.incfs.size\x00') unlink(&(0x7f0000000100)='./file0/file1\x00') bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9001}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000005c0)={r2, 0xffffffffffffffff, 0x33, 0x0, @val=@kprobe_multi=@syms={0x1, 0x0, 0x0, 0x0, 0x5}}, 0x30) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='xen_mmu_alloc_ptpage\x00', r1, 0x0, 0xc}, 0x18) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r3}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x4, &(0x7f00000003c0)=ANY=[@ANYRESHEX=0x0], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000004c0)='gpu_mem_total\x00', r0, 0x0, 0x400}, 0x18) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f0000fcb000), 0x4) r5 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_int(r5, 0x29, 0x16, &(0x7f0000fcb000)=0x80, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r6, {0x10, 0x4}, {0x7}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) 1.567420154s ago: executing program 0 (id=668): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0x1}, 0x50) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000021000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) add_key(&(0x7f0000000040)='encrypted\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) r5 = inotify_init1(0x0) inotify_add_watch(r5, &(0x7f0000000400)='.\x00', 0xa4000025) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="310301000000000000000900000008000300", @ANYRES32, @ANYBLOB="08000600ae"], 0x24}, 0x1, 0x0, 0x0, 0x20000095}, 0x200480c4) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000280)={0x6, [0x10, 0x6], 0x6}, 0x10) socket$inet(0x2b, 0x801, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 1.549046494s ago: executing program 4 (id=669): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000300)='f2fs_update_extent_tree_range\x00', r1}, 0x18) process_madvise(0xffffffffffffffff, 0x0, 0x0, 0x13, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/255, 0xff}], 0x1}, 0x18) close(r2) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000000700)={0x0, 0x3}, 0x8) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r4}, &(0x7f0000000000), &(0x7f0000000040)='%ps \x00'}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0xea, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000006c0)='kmem_cache_free\x00', r5, 0x0, 0x2000}, 0x18) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$tipc(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="f7", 0x1}], 0x1, 0x0, 0x0, 0x807}, 0xfff5) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r6 = syz_open_dev$tty1(0xc, 0x4, 0x4) pwritev2(r6, &(0x7f0000000400)=[{&(0x7f0000000540)="19a219563c2ea1b1a2dd52b8d25ce716b1575ac4ebfad7e69b92aa676205135e6c37f67ff998eaee22dbe7ac959096beb7a1b715bc86e0a0bc84ce32c0ed0048a13e0c3bc0ab974f38750f8ae872dd908b76f2f15018df8b959cdd7e3c39e6294588e48e5a0079129f27d32f8a4aec9635799922e1acb474a5334630be648457ebb1e6c7335606f4c742bc6026edeb7bc93c78a6e14ae743eea37b2fb00bf90643fa4fb9ed9730db6fb71a3f39480bbcb4fce011d39a18fae3ec650a2588075b418378f2699914aeec17ebe5a272ebc56de320aa805d148214509221a11e10b13b9390fc7c", 0xe5}, {&(0x7f0000000640)="29f6ca13d79933be5fd18c4e51ee619b7dfd26176812975dc4bca1b681a4bd0d3f95a6c4c3c15cc329d8f964b41c0da893eb5554648bb922f56ed59385c66b1ff8bc4b7e4efb9631fd1b0c7c1eb613d6d30aa051abe42a3fdae0f436fb229858672d938ba8b5061610e25b705aab13dc078e838bd9fe78bb0746", 0x7a}], 0x2, 0x8, 0x7, 0xe) r7 = socket(0x10, 0x3, 0x0) connect$netlink(r7, &(0x7f0000000000)=@kern={0x10, 0x0, 0x0, 0x1000}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb7910009875f37538e486dd6317ce8102033300fefd000e40000200875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x8914, &(0x7f0000000080)) utimensat(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000740)={{0x0, 0x2710}}, 0x100) 1.427497336s ago: executing program 2 (id=670): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="34000000680001e902001000fdfeff7f00000200000000000cd53246e2f010963af3d0c400020001000000150000005661100008724b3a8b333d37980931978647c89c28ddfe0906357574e4ea43df7916da2e6a534f7ea1b23e45a3f7253ee8b3ee32ea4badf8c27adce1d00d6e8f97dd975a10c92e152575d3b1965c"], 0x34}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101804bc9555e1affd5020000000900010001797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000000009000300737975320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x24040010}, 0x0) 1.426615516s ago: executing program 3 (id=671): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x1f, &(0x7f0000000000)={[{@max_batch_time={'max_batch_time', 0x3d, 0x6}}, {@stripe}]}, 0x6, 0x5fd, &(0x7f00000004c0)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000240), &(0x7f0000000280)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = openat$selinux_validatetrans(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$selinux_validatetrans(r2, &(0x7f0000000180)=ANY=[@ANYBLOB='system_u:object_r:semanage_t system_u:object_r:fixed_disk_device_t:s0 0'], 0x79) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 1.402949497s ago: executing program 2 (id=672): r0 = io_uring_setup(0x25d0, &(0x7f00000002c0)={0x0, 0xf838, 0x80, 0x0, 0xffffffff}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, [@call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="0107000000000000000020000000040003"], 0x1c}, 0x1, 0x0, 0x0, 0x20048851}, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') r4 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000200100000102"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bc00551a000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close_range(r0, 0xffffffffffffffff, 0x0) 1.286850009s ago: executing program 3 (id=673): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x204410, &(0x7f0000000740), 0x1, 0x4a1, &(0x7f00000007c0)="$eJzs3M1vVFUbAPDn3mnLN+3Li6h8SBWNjR8tLags3Gh0p4mJLnBjUttCKgM1tCRCiFZjcGlI3BvdGKJ/gSvdGHVl4lb3hoQoMQFdmDF35t4yU2ZKW6YdcH6/5JZz5p7pOc+ce+499x6mAXStwexHErE1In6JiP5atrHAYO2f61fPT/x19fxEEpXKq78n1XLXrp6fKIoW79uSZ4bSiPTDJK+k0ezZcyfGy+Wp03l+ZO7k2yOzZ889OX1y/PjU8alTY0eOHD40+szTY0+1Jc4srmu7353Zm/S8fvHliaMX3/zhqzQidu2r7a+P47akWxaSg1ngf1SqFhd7pC2V3Tm21aWTng42hBUpRUTWXb3V8d8fpbjRef3x4gcdbRywprJr04bWu+crwH9YEp1uAdAZxYU+u/8ttnWaetwRrjxXuwHK4r6eb7U9PZHmZXrXsP77IuLo/N+fZlvk/fDP1jWsEADoet9k858nms3/0thVV257voYyEBH/i4gdEfH/iNgZEfdEVMvem89nVqK2NFRayN88/0wvrzq4Zcjmf8/ma1uN879i9hcDpTy3rRp/b3Jsujx1MP9MhqJ3Q5YfXaKOb1/4+eNW+wbr5n/ZltVfzAXzdlzuWfSAbnJ8brxdk9Ir70fs7mkWf7KwEpBExP0RsXtlv3p7kZh+7NLeVoVuHf8S2rDOVPks4tFa/8/HovgLydLrkyMbozx1cKQ4Km72408XXmle+8bbi78Nsv7f3Hj8LyrR/2dSv147u/I6Lvz6Uct7ytUe/33Ja9Ux2Ze/9s743Nzp0Yi+5KVqvuH1sRvvLfJF+Sz+oQPNx/+O/D1Z/HsiIjuI90XEAxGxP2/7gxHxUEQcWCL+759/+K0VxT+9vv0/2fT8t3D8DzT2/8oTpRPffd2q/jz+4mTbov8PV1ND+SvV898ttG5OlKciKpVVH80AAABw98luvLdGkg4vpNN0eLj2f/h3xua0PDM79/ixmTOnJmvfERiI3rR40tWfPw/N7rZHk/n8N9aej47lz4qL56WH8ufGn5Q2VfPDEzPlyQ7HDt1uS4vxn/mt1OnWAWvO97Wgey0e/2mH2gGsP9d/6F7GP3Qv4x+6V934//LMhT3VxHvVn/sXdjRdC1jiL4cAd4dF1/9Ln3eqIcC6M/+H7mX8Q/cy/qEr3c73+juT2JS3/FaF+zrf1NUlvuidLWXx1e1KeiI637DGRKRLlXkjmu8ajIg1aljcER9LuxPJMg715SaOHc+HznIKd/KsBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0D7/BgAA//9ajd4t") creat(&(0x7f0000000100)='./bus\x00', 0x0) (fail_nth: 6) 1.23760044s ago: executing program 2 (id=674): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000004c0)={r0, 0x0, 0x0}, 0x20) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r2, 0x0) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x2000000b, 0x80, &(0x7f0000000240)={0x3, 0x0, 0xfffc, 0x4360}, 0x8, 0x6, 0x7d, 0x0, 0x1, 0x101, 0x0}) setsockopt$inet_udp_encap(r1, 0x11, 0x64, &(0x7f0000000380)=0x3, 0x4) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x3800480, &(0x7f0000000280), 0x45, 0x786, &(0x7f00000007c0)="$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") r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000740000000700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000001c0)='ext4_ext_remove_space\x00', r3}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000226e894af6b3000000000018110000", @ANYRES32, @ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) r5 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$selinux_access(r5, &(0x7f0000000680)=ANY=[@ANYBLOB="71797374656d5f753a6f626a6563745f723a6770675f6167656e745f657865635f743a733020756e636f6e66696e656420303030303030303030947ef89e7ed179ff5d75e8b7204c303030303030303030303300"], 0x46) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000012c0), 0xfe, 0x244, &(0x7f0000000400)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x11) ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f00000005c0)) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='xen_mmu_alloc_ptpage\x00', r7}, 0x18) r8 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_misc(r8, &(0x7f0000000240), 0xfffffecc) ioctl$EXT4_IOC_MIGRATE(r6, 0x6609) syz_clone(0x3000, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000240)={0x9, {{0x2, 0x0, @multicast2}}}, 0x88) 1.18337269s ago: executing program 3 (id=675): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x18) process_madvise(0xffffffffffffffff, 0x0, 0x0, 0x13, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x18) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c30000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)='%ps \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0xea, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000006c0)='kmem_cache_free\x00', r1, 0x0, 0x2000}, 0x18) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="f7", 0x1}], 0x1, 0x0, 0x0, 0x807}, 0xfff5) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) pwritev2(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000540)="19a219563c2ea1b1a2dd52b8d25ce716b1575ac4ebfad7e69b92aa676205135e6c37f67ff998eaee22dbe7ac959096beb7a1b715bc86e0a0bc84ce32c0ed0048a13e0c3bc0ab974f38750f8ae872dd908b76f2f15018df8b959cdd7e3c39e6294588e48e5a0079129f27d32f8a4aec9635799922e1acb474a5334630be648457ebb1e6c7335606f4c742bc6026edeb7bc93c78a6e14ae743eea37b2fb00bf90643fa4fb9ed9730db6fb71a3f39480bbcb4fce011d39a18fae3ec650a2588075b418378f2699914aeec17ebe5a272ebc56de320aa805d148214509221a11e10b13b9390fc7c", 0xe5}, {&(0x7f0000000640)="29f6ca13d79933be5fd18c4e51ee619b7dfd26176812975dc4bca1b681a4bd0d3f95a6c4c3c15cc329d8f964b41c0da893eb5554648bb922f56ed59385c66b1ff8bc4b7e4efb9631fd1b0c7c1eb613d6d30aa051abe42a3fdae0f436fb229858672d938ba8b5061610e25b705aab13dc078e838bd9fe78bb0746", 0x7a}], 0x2, 0x8, 0x7, 0xe) r2 = socket(0x10, 0x3, 0x0) connect$netlink(r2, &(0x7f0000000000)=@kern={0x10, 0x0, 0x0, 0x1000}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb7910009875f37538e486dd6317ce8102033300fefd000e40000200875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) write$cgroup_int(r3, &(0x7f00000000c0), 0x12) utimensat(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000740)={{0x0, 0x2710}}, 0x100) 919.550965ms ago: executing program 4 (id=676): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10001}, 0xc104}, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xa, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="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", @ANYRESDEC=r0, @ANYBLOB="00000000000000296ca3ea07f65fe900b70800000000c7057b8af8ff00000000bfa20e000000000007020000f8ffffffb703000008000000b7040000000000e877bcf3c5b79af99e7c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) write$UHID_DESTROY(r3, &(0x7f0000000200), 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000240)='sys_enter\x00', r4, 0x0, 0x2}, 0x18) finit_module(0xffffffffffffffff, 0x0, 0x2) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020732600000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r5, 0x0, 0x2}, 0x18) r6 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) mq_timedsend(r6, 0x0, 0x2c, 0x1fffd, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) mq_unlink(&(0x7f0000000000)='eth0\x00') close(r6) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r2) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r2, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000005c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="200028bd700000000c001473797a3100"/34], 0x28}, 0x1, 0x0, 0x0, 0x4084}, 0x20000000) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008f00850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000500)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000280)='kfree\x00', r10}, 0x18) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="5953fdfffffffddbdf256b000000080043", @ANYRES16=r0], 0x28}}, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000340)='mmap_lock_acquire_returned\x00', r11}, 0x18) r12 = gettid() process_vm_writev(r12, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1000000201005) 728.294518ms ago: executing program 1 (id=677): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101804bc9555e1affd5020000000900010001797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000000009000300737975320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x24040010}, 0x0) close(r2) 709.091508ms ago: executing program 3 (id=678): r0 = io_uring_setup(0x25d0, &(0x7f00000002c0)={0x0, 0xf838, 0x80, 0x0, 0xffffffff}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, [@call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r1}, 0x18) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r2, 0xfffffffc) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000200100000102"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bc00551a000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close_range(r0, 0xffffffffffffffff, 0x0) 686.258788ms ago: executing program 1 (id=679): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x1f, &(0x7f0000000000)={[{@max_batch_time={'max_batch_time', 0x3d, 0x6}}, {@stripe}]}, 0x6, 0x5fd, &(0x7f00000004c0)="$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") r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000240), &(0x7f0000000280)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$selinux_validatetrans(r2, &(0x7f0000000180)=ANY=[@ANYBLOB='system_u:object_r:semanage_t system_u:object_r:fixed_disk_device_t:s0 0'], 0x79) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 624.805049ms ago: executing program 3 (id=680): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000680)=@newtaction={0xc8, 0x30, 0xffff, 0xffffffff, 0x0, {}, [{0xb4, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x5, 0x0, 0x0, 0x0, {}, {0x0, 0x2}}}]]}, {0x4}, {0xc}, {0xc}}}, @m_bpf={0x44, 0x2, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x2, 0x10000000, 0xf, 0xd2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xc8}}, 0x0) r5 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r6}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$selinux_load(r1, &(0x7f0000000000)=ANY=[], 0x44f0) r7 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e21, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000180)=[{&(0x7f00000000c0)="88", 0x1}, {&(0x7f0000000100)="831650242fd7cafa83d6306f824db24e7798e1d4c5eeba14e48fedbb627704ff3c0f243300be9d3fc86ceed2c2b6a1a81cbe26357b552b3a1920f389857c378c2881ba9fe2320fd944f93c3476", 0x4d}], 0x2}, 0x4048043) bpf$OBJ_GET_MAP(0x7, &(0x7f00000002c0)=@o_path={&(0x7f0000000280)='./file0\x00', 0x0, 0x2018, r0}, 0x18) r8 = dup(r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x4, 0x0, 0x0, 0x9, 0x0, 0x0, 0x40f00, 0x46, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8001}, 0x94) r9 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r9, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x10) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r10, &(0x7f0000000000), 0xffffff6a) sendfile(r9, r10, 0x0, 0xffffffff000) recvmmsg(r9, &(0x7f0000000640)=[{{0x0, 0x0, 0x0}, 0xffffffff}], 0x19, 0x0, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=@newtaction={0x80, 0x30, 0x9e54f29ff072a93b, 0x0, 0x25dfdbfc, {}, [{0x6c, 0x1, [@m_csum={0x68, 0x1, 0x0, 0x0, {{0x9}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0x0, 0x0, 0x0, 0x400}, 0x2d}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0x7, 0x4, 0x6, 0xfffffff9}, 0x64}}]}, {}, {0xc}, {0xc}}}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000}, 0x0) setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f0000000000)='bond_slave_1\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x8, 0xff}, 0x9c) 616.548229ms ago: executing program 4 (id=681): ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'wg2\x00', @multicast}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa067707"], 0xfdef) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x169a82, 0x109) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000040), 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3ff}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000280)='timer_start\x00', r3}, 0x18) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000940)) sendmsg$netlink(r1, &(0x7f0000005d80)={&(0x7f0000000440)=@proc={0x10, 0x0, 0x25dfdbff, 0x80000}, 0xc, &(0x7f0000005cc0)=[{&(0x7f0000001380)=ANY=[], 0x38}], 0x1, 0x0, 0x0, 0x44011}, 0x0) r4 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000200)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000280)={r5}) sendfile(r0, r0, 0x0, 0xb) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2, 0x31}, 0x48) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000000, 0x10, 0xffffffffffffffff, 0x10000000) close_range(r7, 0xffffffffffffffff, 0x200000000000000) 554.532901ms ago: executing program 1 (id=682): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x1f, &(0x7f0000000000)={[{@max_batch_time={'max_batch_time', 0x3d, 0x6}}, {@stripe}]}, 0x6, 0x5fd, &(0x7f00000004c0)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000240), &(0x7f0000000280)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$selinux_validatetrans(r2, 0x0, 0x79) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 470.472152ms ago: executing program 4 (id=683): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x50) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0x3, 0x0, 0x0, 0xf, 0x0, 0x5}]}}, &(0x7f0000000340)=""/249, 0x26, 0xf9, 0x9}, 0x28) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x841, 0x0, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r5, &(0x7f0000001340)=[{&(0x7f0000000580)=""/148, 0x94}], 0x1) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) readv(r5, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/215, 0xd7}], 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688ca4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000001"], 0x18}, 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[@ANYBLOB="2000000002"], 0x8840) socket$netlink(0x10, 0x3, 0xc) r6 = socket$unix(0x1, 0x5, 0x0) sched_setaffinity(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x4, 0xa}, {}, {0xfff2, 0xc}}, [@filter_kind_options=@f_bpf={{0x8}, {0x28, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x2}, @TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x8, 0xb}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) ioctl$SIOCX25GSUBSCRIP(r1, 0x89e0, &(0x7f0000000240)={'ipvlan1\x00', 0x7fffffffffffffff, 0xfffffffe}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000080)={&(0x7f0000000000)="4f1f470a8be12f89c3f73137b831d0043e1d5ce112b574aec307beb165def87545a3b889207fa7e5c2656f696efd8ed452299d00990a00da43883f513ad61785e1528f4e0e7171037eb7cf415851865cdd9c300996ce4aa1729cb802e57711633cdfbd2981623da4b5add8ea58d6f32de5d194f9f298fbd5470b", &(0x7f0000000280)=""/154, &(0x7f00000001c0)="b86ffc90dee998b95d8a1368ca611482b5dc3795e623c3207bc46fd0bb0d39d0ffa8a208f21f9fa60d450269c0e59931deb993b181b07b166fadc71bc8ce0dfe41b51f2d9cfc3227b80f8ca82e6008134fe95bd6c8a74adb43905de3d09a", &(0x7f0000000340)="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", 0x9, r0}, 0x38) 387.649903ms ago: executing program 0 (id=684): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000140)='mm_page_alloc\x00', r0}, 0x10) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000180)='sys_enter\x00', r3}, 0x18) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) unshare(0x22020600) r6 = syz_io_uring_setup(0x17af, &(0x7f0000000500)={0x0, 0xbc48, 0x13290, 0x0, 0x1e1}, &(0x7f0000000300)=0x0, &(0x7f0000000340)=0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r9 = socket$inet(0x2, 0x3, 0xd) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x7, 0x0, 0x0, 0xfffffffb}]}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a0000020000002400018014", @ANYRES8], 0x64}}, 0x20008011) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) getsockopt$inet_mreqsrc(r9, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) r10 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200000, 0x0, 0x6, 0x7}) r11 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r11) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_open_procfs(r10, &(0x7f0000000240)='fdinfo\x00') syz_io_uring_submit(r7, r8, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r6}) io_uring_enter(r6, 0x1, 0xffff4000, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)={0x24, r5, 0x1, 0xfffffffd, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r12}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r12}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x44040) sendmsg$NL802154_CMD_GET_WPAN_PHY(r1, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r2, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r12}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x40448c5) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000000)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 379.503913ms ago: executing program 2 (id=685): r0 = io_uring_setup(0x25d0, &(0x7f00000002c0)={0x0, 0xf838, 0x80, 0x0, 0xffffffff}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, [@call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="0107000000000000000020000000040003"], 0x1c}, 0x1, 0x0, 0x0, 0x20048851}, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000200100000102"], 0x50) close_range(r0, 0xffffffffffffffff, 0x0) 331.932274ms ago: executing program 0 (id=686): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000300)='f2fs_update_extent_tree_range\x00', r1}, 0x18) process_madvise(0xffffffffffffffff, 0x0, 0x0, 0x13, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/255, 0xff}], 0x1}, 0x18) close(r2) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000000700)={0x0, 0x3}, 0x8) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r4}, &(0x7f0000000000), &(0x7f0000000040)='%ps \x00'}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0xea, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000006c0)='kmem_cache_free\x00', r5, 0x0, 0x2000}, 0x18) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$tipc(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="f7", 0x1}], 0x1, 0x0, 0x0, 0x807}, 0xfff5) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r6 = syz_open_dev$tty1(0xc, 0x4, 0x4) pwritev2(r6, &(0x7f0000000400)=[{&(0x7f0000000540)="19a219563c2ea1b1a2dd52b8d25ce716b1575ac4ebfad7e69b92aa676205135e6c37f67ff998eaee22dbe7ac959096beb7a1b715bc86e0a0bc84ce32c0ed0048a13e0c3bc0ab974f38750f8ae872dd908b76f2f15018df8b959cdd7e3c39e6294588e48e5a0079129f27d32f8a4aec9635799922e1acb474a5334630be648457ebb1e6c7335606f4c742bc6026edeb7bc93c78a6e14ae743eea37b2fb00bf90643fa4fb9ed9730db6fb71a3f39480bbcb4fce011d39a18fae3ec650a2588075b418378f2699914aeec17ebe5a272ebc56de320aa805d148214509221a11e10b13b9390fc7c", 0xe5}, {&(0x7f0000000640)="29f6ca13d79933be5fd18c4e51ee619b7dfd26176812975dc4bca1b681a4bd0d3f95a6c4c3c15cc329d8f964b41c0da893eb5554648bb922f56ed59385c66b1ff8bc4b7e4efb9631fd1b0c7c1eb613d6d30aa051abe42a3fdae0f436fb229858672d938ba8b5061610e25b705aab13dc078e838bd9fe78bb0746", 0x7a}], 0x2, 0x8, 0x7, 0xe) r7 = socket(0x10, 0x3, 0x0) connect$netlink(r7, &(0x7f0000000000)=@kern={0x10, 0x0, 0x0, 0x1000}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb7910009875f37538e486dd6317ce8102033300fefd000e40000200875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x8914, &(0x7f0000000080)) utimensat(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000740)={{0x0, 0x2710}}, 0x100) 236.059066ms ago: executing program 2 (id=687): bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f0000"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = creat(&(0x7f0000000080)='./file0/file1\x00', 0x90) write$cgroup_type(r0, &(0x7f00000009c0), 0xd4ba0ff) removexattr(&(0x7f0000000000)='./file0/file1\x00', &(0x7f00000002c0)=@known='user.incfs.size\x00') unlink(&(0x7f0000000100)='./file0/file1\x00') bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9001}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000005c0)={r2, 0xffffffffffffffff, 0x33, 0x0, @val=@kprobe_multi=@syms={0x1, 0x0, 0x0, 0x0, 0x5}}, 0x30) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='xen_mmu_alloc_ptpage\x00', r1, 0x0, 0xc}, 0x18) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r3}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x4, &(0x7f00000003c0)=ANY=[@ANYRESHEX=0x0], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000004c0)='gpu_mem_total\x00', r0, 0x0, 0x400}, 0x18) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f0000fcb000), 0x4) r5 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_int(r5, 0x29, 0x16, &(0x7f0000fcb000)=0x80, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r6, {0x10, 0x4}, {0x7}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) 224.689666ms ago: executing program 1 (id=688): socket(0x400000000010, 0x3, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x841, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r1, 0x0, 0x0) 123.288167ms ago: executing program 1 (id=689): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x2800c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='debugfs\x00', 0x0, 0x0) mount$bind(0x0, &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x20000, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1a8584c, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x120584c, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r0}, 0x18) r1 = gettid() r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000180)=ANY=[@ANYBLOB="8510000004000000950000000000000018000000000000000000000000000000950000000000000085100000fcffffff95"], &(0x7f00000000c0)='GPL\x00'}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r2, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x200000000000014f, 0x1000000, &(0x7f0000001680)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x19, 0x0, 0x8, 0x0, 0x0}}, 0x10) r3 = eventfd2(0x0, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x82, 0x400) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r4, 0x5386, &(0x7f00000002c0)) write$eventfd(r3, &(0x7f0000000140)=0xfffffffffffffff8, 0x8) write$eventfd(r3, &(0x7f0000000040)=0x8, 0x8) timer_create(0x0, &(0x7f0000000180)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 101.491498ms ago: executing program 0 (id=690): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc9aa}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x8, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x7, 0xa, 0xfffffff3}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newtfilter={0x44, 0x2c, 0xd2b, 0x803, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x6}, {}, {0x7, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_IP_TOS={0x5, 0x49, 0x9}, @TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x86dd}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2404c044}, 0x240440d4) 0s ago: executing program 0 (id=691): r0 = io_uring_setup(0x25d0, &(0x7f00000002c0)={0x0, 0xf838, 0x80, 0x0, 0xffffffff}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, [@call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r1}, 0x18) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r2, 0xfffffffc) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000200100000102"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bc00551a000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close_range(r0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): _bitmap:139: comm syz.0.70: Invalid inode bitmap blk 0 in block_group 0 [ 35.716596][ T3702] EXT4-fs error (device loop0) in ext4_free_inode:361: Corrupt filesystem [ 35.716655][ T3702] EXT4-fs (loop0): 1 orphan inode deleted [ 35.716706][ T2750] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:6: Failed to release dquot type 0 [ 35.782811][ T3702] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 35.848862][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.873740][ T3708] loop0: detected capacity change from 0 to 512 [ 35.895116][ T3705] syzkaller0: entered promiscuous mode [ 35.895134][ T3705] syzkaller0: entered allmulticast mode [ 35.897293][ T3708] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.897389][ T3708] ext4 filesystem being mounted at /13/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 35.970174][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.023523][ T3717] loop1: detected capacity change from 0 to 164 [ 36.195808][ T3733] loop1: detected capacity change from 0 to 1024 [ 36.217510][ T3733] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 36.240878][ T3733] EXT4-fs (loop1): orphan cleanup on readonly fs [ 36.249510][ T3733] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.80: Invalid block bitmap block 0 in block_group 0 [ 36.249689][ T3733] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.80: Failed to acquire dquot type 0 [ 36.249824][ T3733] EXT4-fs error (device loop1): ext4_free_blocks:6587: comm syz.1.80: Freeing blocks not in datazone - block = 0, count = 4096 [ 36.250173][ T3733] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.80: Invalid inode bitmap blk 0 in block_group 0 [ 36.250231][ T3733] EXT4-fs error (device loop1) in ext4_free_inode:361: Corrupt filesystem [ 36.250332][ T3733] EXT4-fs (loop1): 1 orphan inode deleted [ 36.250389][ T41] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:2: Failed to release dquot type 0 [ 36.250914][ T3733] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 36.286508][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.303645][ T3738] netlink: 4 bytes leftover after parsing attributes in process `syz.3.78'. [ 36.347258][ T3744] loop0: detected capacity change from 0 to 512 [ 36.389836][ T3744] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.389953][ T3744] ext4 filesystem being mounted at /18/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 36.544180][ T29] kauditd_printk_skb: 310 callbacks suppressed [ 36.544198][ T29] audit: type=1326 audit(1753569866.938:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3739 comm="syz.1.82" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff8d0e3e9a9 code=0x0 [ 36.685051][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.704278][ T3754] loop3: detected capacity change from 0 to 764 [ 36.780661][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.015239][ T29] audit: type=1326 audit(1753569867.448:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3772 comm="syz.4.92" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2bc98e9a9 code=0x7ffc0000 [ 37.038809][ T29] audit: type=1326 audit(1753569867.448:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3772 comm="syz.4.92" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa2bc98e9a9 code=0x7ffc0000 [ 37.062316][ T29] audit: type=1326 audit(1753569867.448:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3772 comm="syz.4.92" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2bc98e9a9 code=0x7ffc0000 [ 37.085827][ T29] audit: type=1326 audit(1753569867.448:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3772 comm="syz.4.92" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2bc98e9a9 code=0x7ffc0000 [ 37.100439][ T3776] loop0: detected capacity change from 0 to 1024 [ 37.109159][ T29] audit: type=1326 audit(1753569867.448:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3772 comm="syz.4.92" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa2bc98e9a9 code=0x7ffc0000 [ 37.138692][ T29] audit: type=1326 audit(1753569867.448:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3772 comm="syz.4.92" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2bc98e9a9 code=0x7ffc0000 [ 37.150861][ T3776] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 37.162094][ T29] audit: type=1326 audit(1753569867.448:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3772 comm="syz.4.92" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2bc98e9a9 code=0x7ffc0000 [ 37.176269][ T3776] EXT4-fs (loop0): orphan cleanup on readonly fs [ 37.195530][ T29] audit: type=1326 audit(1753569867.448:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3772 comm="syz.4.92" exe="/root/syz-executor" sig=0 arch=c000003e syscall=440 compat=0 ip=0x7fa2bc98e9a9 code=0x7ffc0000 [ 37.204772][ T3776] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.93: Invalid block bitmap block 0 in block_group 0 [ 37.225103][ T29] audit: type=1326 audit(1753569867.448:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3772 comm="syz.4.92" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2bc98e9a9 code=0x7ffc0000 [ 37.239258][ T3776] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.93: Failed to acquire dquot type 0 [ 37.274666][ T3776] EXT4-fs error (device loop0): ext4_free_blocks:6587: comm syz.0.93: Freeing blocks not in datazone - block = 0, count = 4096 [ 37.292418][ T3776] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm syz.0.93: Invalid inode bitmap blk 0 in block_group 0 [ 37.305224][ T3776] EXT4-fs error (device loop0) in ext4_free_inode:361: Corrupt filesystem [ 37.314920][ T3776] EXT4-fs (loop0): 1 orphan inode deleted [ 37.321043][ T51] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:3: Failed to release dquot type 0 [ 37.339819][ T3776] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 37.385638][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.420146][ T3781] vhci_hcd: invalid port number 96 [ 37.425319][ T3781] vhci_hcd: default hub control req: 0300 vfffc i0060 l0 [ 37.453149][ T3781] loop3: detected capacity change from 0 to 2048 [ 37.466945][ T3787] Zero length message leads to an empty skb [ 37.491202][ T3781] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.590037][ T3800] netlink: 4 bytes leftover after parsing attributes in process `syz.0.97'. [ 37.661361][ T3799] netlink: 'syz.4.101': attribute type 3 has an invalid length. [ 37.727651][ T3809] loop2: detected capacity change from 0 to 764 [ 38.233827][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.259475][ T3820] loop3: detected capacity change from 0 to 1024 [ 38.266730][ T3820] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 38.278712][ T3820] EXT4-fs (loop3): orphan cleanup on readonly fs [ 38.289810][ T3820] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.106: Invalid block bitmap block 0 in block_group 0 [ 38.304564][ T3820] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.106: Failed to acquire dquot type 0 [ 38.316453][ T3820] EXT4-fs error (device loop3): ext4_free_blocks:6587: comm syz.3.106: Freeing blocks not in datazone - block = 0, count = 4096 [ 38.336305][ T3820] EXT4-fs error (device loop3): ext4_read_inode_bitmap:139: comm syz.3.106: Invalid inode bitmap blk 0 in block_group 0 [ 38.349059][ T382] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:5: Failed to release dquot type 0 [ 38.349273][ T3820] EXT4-fs error (device loop3) in ext4_free_inode:361: Corrupt filesystem [ 38.369425][ T3820] EXT4-fs (loop3): 1 orphan inode deleted [ 38.376225][ T3820] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 38.402790][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.425376][ T3825] loop3: detected capacity change from 0 to 1024 [ 38.437216][ T3825] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 38.452430][ T3825] EXT4-fs (loop3): orphan cleanup on readonly fs [ 38.461079][ T3825] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.108: Invalid block bitmap block 0 in block_group 0 [ 38.478334][ T3825] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.108: Failed to acquire dquot type 0 [ 38.490012][ T3825] EXT4-fs error (device loop3): ext4_free_blocks:6587: comm syz.3.108: Freeing blocks not in datazone - block = 0, count = 4096 [ 38.504389][ T3825] EXT4-fs error (device loop3): ext4_read_inode_bitmap:139: comm syz.3.108: Invalid inode bitmap blk 0 in block_group 0 [ 38.540796][ T3825] EXT4-fs error (device loop3) in ext4_free_inode:361: Corrupt filesystem [ 38.551231][ T382] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:5: Failed to release dquot type 0 [ 38.555299][ T3825] EXT4-fs (loop3): 1 orphan inode deleted [ 38.574601][ T3825] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 38.631414][ T3837] netlink: 'syz.4.114': attribute type 3 has an invalid length. [ 38.646868][ T3834] vhci_hcd: invalid port number 96 [ 38.652074][ T3834] vhci_hcd: default hub control req: 0300 vfffc i0060 l0 [ 38.676325][ T3834] loop1: detected capacity change from 0 to 2048 [ 38.683569][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.710802][ T3834] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.732331][ T3847] loop4: detected capacity change from 0 to 764 [ 38.873996][ T3860] loop2: detected capacity change from 0 to 512 [ 38.886186][ T3860] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.886302][ T3860] ext4 filesystem being mounted at /23/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 38.937324][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.991664][ T3869] netlink: 'syz.2.122': attribute type 3 has an invalid length. [ 39.367980][ T3880] loop4: detected capacity change from 0 to 1024 [ 39.369913][ T3880] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 39.374084][ T3880] EXT4-fs (loop4): orphan cleanup on readonly fs [ 39.394155][ T3880] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.126: Invalid block bitmap block 0 in block_group 0 [ 39.394325][ T3880] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.126: Failed to acquire dquot type 0 [ 39.394511][ T3880] EXT4-fs error (device loop4): ext4_free_blocks:6587: comm syz.4.126: Freeing blocks not in datazone - block = 0, count = 4096 [ 39.394719][ T3880] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.126: Invalid inode bitmap blk 0 in block_group 0 [ 39.445124][ T41] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:2: Failed to release dquot type 0 [ 39.445662][ T3880] EXT4-fs error (device loop4) in ext4_free_inode:361: Corrupt filesystem [ 39.465340][ T3880] EXT4-fs (loop4): 1 orphan inode deleted [ 39.472786][ T3880] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 39.487473][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.509126][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.605767][ T3894] loop3: detected capacity change from 0 to 512 [ 39.620312][ T3894] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.634246][ T3894] ext4 filesystem being mounted at /22/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 39.680260][ T3905] loop1: detected capacity change from 0 to 764 [ 39.719825][ T3910] netlink: 'syz.0.136': attribute type 3 has an invalid length. [ 39.732913][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.780354][ T3915] vhci_hcd: invalid port number 96 [ 39.785490][ T3915] vhci_hcd: default hub control req: 0300 vfffc i0060 l0 [ 39.799201][ T3915] loop0: detected capacity change from 0 to 2048 [ 39.820537][ T3915] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.923752][ T3924] loop2: detected capacity change from 0 to 1024 [ 39.927210][ T3924] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 39.941322][ T3924] EXT4-fs (loop2): orphan cleanup on readonly fs [ 39.941934][ T3924] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.140: Invalid block bitmap block 0 in block_group 0 [ 39.962176][ T3924] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.140: Failed to acquire dquot type 0 [ 39.962506][ T3924] EXT4-fs error (device loop2): ext4_free_blocks:6587: comm syz.2.140: Freeing blocks not in datazone - block = 0, count = 4096 [ 39.962769][ T3924] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.140: Invalid inode bitmap blk 0 in block_group 0 [ 39.999661][ T57] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:4: Failed to release dquot type 0 [ 39.999931][ T3924] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem [ 40.019855][ T3924] EXT4-fs (loop2): 1 orphan inode deleted [ 40.020423][ T3924] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 40.053451][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.241050][ T3933] vhci_hcd: invalid port number 96 [ 40.241063][ T3933] vhci_hcd: default hub control req: 0300 vfffc i0060 l0 [ 40.270576][ T3933] loop1: detected capacity change from 0 to 2048 [ 40.624968][ T3933] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.661636][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.725710][ T3949] loop4: detected capacity change from 0 to 512 [ 40.751431][ T3949] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.751535][ T3949] ext4 filesystem being mounted at /36/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.769244][ T3953] netlink: 'syz.0.149': attribute type 3 has an invalid length. [ 40.823343][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.888288][ T3966] loop3: detected capacity change from 0 to 1024 [ 40.889383][ T3966] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 40.930063][ T3966] EXT4-fs (loop3): orphan cleanup on readonly fs [ 40.930874][ T3966] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.153: Invalid block bitmap block 0 in block_group 0 [ 40.947357][ T3968] vhci_hcd: invalid port number 96 [ 40.955504][ T3968] vhci_hcd: default hub control req: 0300 vfffc i0060 l0 [ 40.964124][ T3966] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.153: Failed to acquire dquot type 0 [ 40.985615][ T3966] EXT4-fs error (device loop3): ext4_free_blocks:6587: comm syz.3.153: Freeing blocks not in datazone - block = 0, count = 4096 [ 41.047808][ T3974] vhci_hcd: invalid port number 96 [ 41.047822][ T3974] vhci_hcd: default hub control req: 0300 vfffc i0060 l0 [ 41.065924][ T3974] loop2: detected capacity change from 0 to 2048 [ 41.066535][ T3968] loop4: detected capacity change from 0 to 2048 [ 41.076703][ T3966] EXT4-fs error (device loop3): ext4_read_inode_bitmap:139: comm syz.3.153: Invalid inode bitmap blk 0 in block_group 0 [ 41.097143][ T57] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:4: Failed to release dquot type 0 [ 41.107065][ T3966] EXT4-fs error (device loop3) in ext4_free_inode:361: Corrupt filesystem [ 41.125789][ T3968] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.138708][ T3974] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.171157][ T3966] EXT4-fs (loop3): 1 orphan inode deleted [ 41.171572][ T3966] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 41.190695][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.253534][ T3970] netlink: 4 bytes leftover after parsing attributes in process `syz.0.155'. [ 41.267981][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.283181][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.339980][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.361189][ T3996] netlink: 'syz.1.161': attribute type 3 has an invalid length. [ 41.384067][ T3998] loop2: detected capacity change from 0 to 512 [ 41.410404][ T3998] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.426884][ T3998] ext4 filesystem being mounted at /32/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.492976][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.523942][ T4017] loop1: detected capacity change from 0 to 1024 [ 41.543838][ T4017] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 41.588295][ T29] kauditd_printk_skb: 133 callbacks suppressed [ 41.588328][ T29] audit: type=1326 audit(1753569871.998:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4007 comm="syz.4.165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2bc98e9a9 code=0x7ffc0000 [ 41.601225][ T4011] syzkaller0: entered promiscuous mode [ 41.617883][ T29] audit: type=1326 audit(1753569871.998:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4007 comm="syz.4.165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2bc98e9a9 code=0x7ffc0000 [ 41.623333][ T4011] syzkaller0: entered allmulticast mode [ 41.646514][ T29] audit: type=1326 audit(1753569871.998:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4007 comm="syz.4.165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7fa2bc98e9a9 code=0x7ffc0000 [ 41.675396][ T29] audit: type=1326 audit(1753569871.998:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4007 comm="syz.4.165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2bc98e9a9 code=0x7ffc0000 [ 41.682350][ T4017] EXT4-fs (loop1): orphan cleanup on readonly fs [ 41.698684][ T29] audit: type=1326 audit(1753569871.998:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4007 comm="syz.4.165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa2bc98d310 code=0x7ffc0000 [ 41.698710][ T29] audit: type=1326 audit(1753569871.998:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4007 comm="syz.4.165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2bc98e9a9 code=0x7ffc0000 [ 41.698778][ T29] audit: type=1326 audit(1753569871.998:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4007 comm="syz.4.165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2bc98e9a9 code=0x7ffc0000 [ 41.705830][ T4017] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.168: Invalid block bitmap block 0 in block_group 0 [ 41.728300][ T29] audit: type=1326 audit(1753569871.998:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4007 comm="syz.4.165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=328 compat=0 ip=0x7fa2bc98e9a9 code=0x7ffc0000 [ 41.753711][ T4017] Quota error (device loop1): write_blk: dquota write failed [ 41.774677][ T29] audit: type=1326 audit(1753569871.998:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4007 comm="syz.4.165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2bc98e9a9 code=0x7ffc0000 [ 41.844297][ T4017] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.168: Failed to acquire dquot type 0 [ 41.855963][ T4017] EXT4-fs error (device loop1): ext4_free_blocks:6587: comm syz.1.168: Freeing blocks not in datazone - block = 0, count = 4096 [ 41.869860][ T4017] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.168: Invalid inode bitmap blk 0 in block_group 0 [ 41.882743][ T4017] EXT4-fs error (device loop1) in ext4_free_inode:361: Corrupt filesystem [ 41.891501][ T41] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:2: Failed to release dquot type 0 [ 41.895678][ T4017] EXT4-fs (loop1): 1 orphan inode deleted [ 41.909293][ T4017] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 41.969418][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.403834][ T4033] vhci_hcd: invalid port number 96 [ 42.409012][ T4033] vhci_hcd: default hub control req: 0300 vfffc i0060 l0 [ 42.473244][ T4041] loop0: detected capacity change from 0 to 164 [ 42.482257][ T4033] loop1: detected capacity change from 0 to 2048 [ 42.518443][ T4033] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.576625][ T4048] netlink: 4 bytes leftover after parsing attributes in process `syz.3.173'. [ 42.655735][ T4056] loop2: detected capacity change from 0 to 1024 [ 42.791473][ T4056] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 42.805012][ T4056] EXT4-fs (loop2): orphan cleanup on readonly fs [ 42.805885][ T4056] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.179: Invalid block bitmap block 0 in block_group 0 [ 42.806060][ T4056] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.179: Failed to acquire dquot type 0 [ 42.806196][ T4056] EXT4-fs error (device loop2): ext4_free_blocks:6587: comm syz.2.179: Freeing blocks not in datazone - block = 0, count = 4096 [ 42.806562][ T4056] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.179: Invalid inode bitmap blk 0 in block_group 0 [ 42.806720][ T4056] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem [ 42.806782][ T4056] EXT4-fs (loop2): 1 orphan inode deleted [ 42.809441][ T2750] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:6: Failed to release dquot type 0 [ 43.235519][ T4056] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 43.262804][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.317449][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.639343][ T4086] netlink: 'syz.0.188': attribute type 3 has an invalid length. [ 43.667111][ T4088] loop0: detected capacity change from 0 to 1024 [ 43.674669][ T4088] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 43.686979][ T4088] EXT4-fs (loop0): orphan cleanup on readonly fs [ 43.694758][ T4088] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.189: Invalid block bitmap block 0 in block_group 0 [ 43.708578][ T4088] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.189: Failed to acquire dquot type 0 [ 43.720259][ T4088] EXT4-fs error (device loop0): ext4_free_blocks:6587: comm syz.0.189: Freeing blocks not in datazone - block = 0, count = 4096 [ 43.734164][ T4088] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm syz.0.189: Invalid inode bitmap blk 0 in block_group 0 [ 43.747032][ T3516] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:7: Failed to release dquot type 0 [ 43.747044][ T4088] EXT4-fs error (device loop0) in ext4_free_inode:361: Corrupt filesystem [ 43.747151][ T4088] EXT4-fs (loop0): 1 orphan inode deleted [ 43.773185][ T4088] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 43.807147][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.911429][ T4097] loop0: detected capacity change from 0 to 1024 [ 43.922263][ T4097] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 43.933143][ T4097] EXT4-fs (loop0): orphan cleanup on readonly fs [ 43.940607][ T4097] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.193: Invalid block bitmap block 0 in block_group 0 [ 43.954562][ T4097] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.193: Failed to acquire dquot type 0 [ 43.966011][ T4097] EXT4-fs error (device loop0): ext4_free_blocks:6587: comm syz.0.193: Freeing blocks not in datazone - block = 0, count = 4096 [ 43.979742][ T4097] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm syz.0.193: Invalid inode bitmap blk 0 in block_group 0 [ 43.993414][ T4097] EXT4-fs error (device loop0) in ext4_free_inode:361: Corrupt filesystem [ 44.002457][ T51] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:3: Failed to release dquot type 0 [ 44.003106][ T4097] EXT4-fs (loop0): 1 orphan inode deleted [ 44.020258][ T4097] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 44.045038][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.111481][ T4102] vhci_hcd: invalid port number 96 [ 44.116783][ T4102] vhci_hcd: default hub control req: 0300 vfffc i0060 l0 [ 44.185135][ T4102] loop0: detected capacity change from 0 to 2048 [ 44.214551][ T4102] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.246608][ T4112] loop4: detected capacity change from 0 to 512 [ 44.286929][ T4112] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.300632][ T4112] ext4 filesystem being mounted at /45/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.438054][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.443784][ T4134] loop1: detected capacity change from 0 to 1024 [ 44.444502][ T4134] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 44.445959][ T4134] EXT4-fs (loop1): orphan cleanup on readonly fs [ 44.447460][ T4134] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.205: Invalid block bitmap block 0 in block_group 0 [ 44.447773][ T4134] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.205: Failed to acquire dquot type 0 [ 44.448183][ T4134] EXT4-fs error (device loop1): ext4_free_blocks:6587: comm syz.1.205: Freeing blocks not in datazone - block = 0, count = 4096 [ 44.448371][ T4134] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.205: Invalid inode bitmap blk 0 in block_group 0 [ 44.448733][ T4134] EXT4-fs error (device loop1) in ext4_free_inode:361: Corrupt filesystem [ 44.448836][ T4134] EXT4-fs (loop1): 1 orphan inode deleted [ 44.452313][ T41] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:2: Failed to release dquot type 0 [ 44.482584][ T4134] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 44.514640][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.653049][ T4144] syzkaller0: entered promiscuous mode [ 44.653069][ T4144] syzkaller0: entered allmulticast mode [ 44.873462][ T4160] loop4: detected capacity change from 0 to 164 [ 44.938792][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.045784][ T4171] loop0: detected capacity change from 0 to 764 [ 45.337231][ T4175] loop3: detected capacity change from 0 to 1024 [ 45.347979][ T4175] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 45.359579][ T4175] EXT4-fs (loop3): orphan cleanup on readonly fs [ 45.366991][ T4175] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.220: Invalid block bitmap block 0 in block_group 0 [ 45.391440][ T4175] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.220: Failed to acquire dquot type 0 [ 45.405685][ T4175] EXT4-fs error (device loop3): ext4_free_blocks:6587: comm syz.3.220: Freeing blocks not in datazone - block = 0, count = 4096 [ 45.420263][ T4175] EXT4-fs error (device loop3): ext4_read_inode_bitmap:139: comm syz.3.220: Invalid inode bitmap blk 0 in block_group 0 [ 45.433504][ T4175] EXT4-fs error (device loop3) in ext4_free_inode:361: Corrupt filesystem [ 45.453250][ T3516] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:7: Failed to release dquot type 0 [ 45.465521][ T4175] EXT4-fs (loop3): 1 orphan inode deleted [ 45.471823][ T4175] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 45.653455][ T4193] loop0: detected capacity change from 0 to 164 [ 45.731364][ T4197] vhci_hcd: invalid port number 96 [ 45.736591][ T4197] vhci_hcd: default hub control req: 0300 vfffc i0060 l0 [ 45.752685][ T4197] loop0: detected capacity change from 0 to 2048 [ 45.821732][ T4202] netlink: 4 bytes leftover after parsing attributes in process `syz.1.226'. [ 46.359057][ T4220] vhci_hcd: invalid port number 96 [ 46.359070][ T4220] vhci_hcd: default hub control req: 0300 vfffc i0060 l0 [ 46.371798][ T4220] loop4: detected capacity change from 0 to 2048 [ 46.606290][ T29] kauditd_printk_skb: 74 callbacks suppressed [ 46.606305][ T29] audit: type=1326 audit(1753569877.038:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4221 comm="syz.2.235" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1eaa01e9a9 code=0x0 [ 47.110730][ T4246] loop0: detected capacity change from 0 to 1024 [ 47.112469][ T4246] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 47.131430][ T4246] EXT4-fs (loop0): orphan cleanup on readonly fs [ 47.149585][ T4246] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.241: Invalid block bitmap block 0 in block_group 0 [ 47.168483][ T4246] Quota error (device loop0): write_blk: dquota write failed [ 47.168501][ T4246] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 47.168645][ T4246] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.241: Failed to acquire dquot type 0 [ 47.169509][ T4246] EXT4-fs error (device loop0): ext4_free_blocks:6587: comm syz.0.241: Freeing blocks not in datazone - block = 0, count = 4096 [ 47.169852][ T4246] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm syz.0.241: Invalid inode bitmap blk 0 in block_group 0 [ 47.169987][ T4246] EXT4-fs error (device loop0) in ext4_free_inode:361: Corrupt filesystem [ 47.170086][ T4246] EXT4-fs (loop0): 1 orphan inode deleted [ 47.170266][ T2750] Quota error (device loop0): do_check_range: Getting block 0 out of range 1-8 [ 47.170285][ T2750] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:6: Failed to release dquot type 0 [ 47.516480][ T4250] loop2: detected capacity change from 0 to 512 [ 47.543443][ T4250] ext4 filesystem being mounted at /48/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.742605][ T4269] loop4: detected capacity change from 0 to 512 [ 47.875138][ T4269] ext4 filesystem being mounted at /59/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.953657][ T29] audit: type=1326 audit(1753569878.388:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4271 comm="syz.3.249" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f093804e9a9 code=0x0 [ 48.149763][ T4292] netlink: 4 bytes leftover after parsing attributes in process `syz.1.251'. [ 48.194343][ T4295] loop4: detected capacity change from 0 to 1024 [ 48.204969][ T4295] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 48.218477][ T4295] EXT4-fs (loop4): orphan cleanup on readonly fs [ 48.226332][ T4295] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.253: Invalid block bitmap block 0 in block_group 0 [ 48.241121][ T4295] Quota error (device loop4): write_blk: dquota write failed [ 48.248575][ T4295] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 48.259388][ T4295] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.253: Failed to acquire dquot type 0 [ 48.270721][ T4295] EXT4-fs error (device loop4): ext4_free_blocks:6587: comm syz.4.253: Freeing blocks not in datazone - block = 0, count = 4096 [ 48.285207][ T4295] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.253: Invalid inode bitmap blk 0 in block_group 0 [ 48.297976][ T57] Quota error (device loop4): do_check_range: Getting block 0 out of range 1-8 [ 48.298030][ T4295] EXT4-fs error (device loop4) in ext4_free_inode:361: Corrupt filesystem [ 48.298134][ T4295] EXT4-fs (loop4): 1 orphan inode deleted [ 48.307076][ T57] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:4: Failed to release dquot type 0 [ 48.422359][ T4305] vhci_hcd: invalid port number 96 [ 48.427635][ T4305] vhci_hcd: default hub control req: 0300 vfffc i0060 l0 [ 48.440967][ T4309] vhci_hcd: invalid port number 96 [ 48.446194][ T4309] vhci_hcd: default hub control req: 0300 vfffc i0060 l0 [ 48.446418][ T4305] loop1: detected capacity change from 0 to 2048 [ 48.463854][ T4309] loop4: detected capacity change from 0 to 2048 [ 48.537448][ T4315] loop0: detected capacity change from 0 to 1024 [ 48.539302][ T4315] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 48.540088][ T4315] EXT4-fs (loop0): orphan cleanup on readonly fs [ 48.564552][ T4315] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.261: Invalid block bitmap block 0 in block_group 0 [ 48.564752][ T4315] Quota error (device loop0): write_blk: dquota write failed [ 48.564765][ T4315] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 48.564794][ T4315] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.261: Failed to acquire dquot type 0 [ 48.579773][ T4315] EXT4-fs error (device loop0): ext4_free_blocks:6587: comm syz.0.261: Freeing blocks not in datazone - block = 0, count = 4096 [ 48.581961][ T4315] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm syz.0.261: Invalid inode bitmap blk 0 in block_group 0 [ 48.582076][ T4315] EXT4-fs error (device loop0) in ext4_free_inode:361: Corrupt filesystem [ 48.582220][ T4315] EXT4-fs (loop0): 1 orphan inode deleted [ 48.585398][ T51] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:3: Failed to release dquot type 0 [ 48.740199][ T4327] loop3: detected capacity change from 0 to 512 [ 48.767884][ T4327] ext4 filesystem being mounted at /42/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.876233][ T4340] netlink: 4 bytes leftover after parsing attributes in process `syz.3.267'. [ 48.968213][ T4110] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 234: padding at end of block bitmap is not set [ 49.287297][ T4359] loop1: detected capacity change from 0 to 1024 [ 49.290067][ T4359] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 49.339265][ T4359] EXT4-fs (loop1): orphan cleanup on readonly fs [ 49.346331][ T4359] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.274: Invalid block bitmap block 0 in block_group 0 [ 49.363464][ T4359] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.274: Failed to acquire dquot type 0 [ 49.375048][ T4359] EXT4-fs error (device loop1): ext4_free_blocks:6587: comm syz.1.274: Freeing blocks not in datazone - block = 0, count = 4096 [ 49.389619][ T4359] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.274: Invalid inode bitmap blk 0 in block_group 0 [ 49.402535][ T4359] EXT4-fs error (device loop1) in ext4_free_inode:361: Corrupt filesystem [ 49.445354][ T4359] EXT4-fs (loop1): 1 orphan inode deleted [ 49.548866][ T57] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:4: Failed to release dquot type 0 [ 49.649183][ T4370] vhci_hcd: invalid port number 96 [ 49.654477][ T4370] vhci_hcd: default hub control req: 0300 vfffc i0060 l0 [ 49.674785][ T4370] loop4: detected capacity change from 0 to 2048 [ 49.702025][ T4373] netlink: 4 bytes leftover after parsing attributes in process `syz.1.279'. [ 49.833370][ T4383] vhci_hcd: invalid port number 96 [ 49.833384][ T4383] vhci_hcd: default hub control req: 0300 vfffc i0060 l0 [ 49.842823][ T4383] loop1: detected capacity change from 0 to 2048 [ 50.177202][ T4400] loop0: detected capacity change from 0 to 1024 [ 50.185772][ T4400] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 50.214136][ T4400] EXT4-fs (loop0): orphan cleanup on readonly fs [ 50.214784][ T4400] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.287: Invalid block bitmap block 0 in block_group 0 [ 50.239399][ T4400] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.287: Failed to acquire dquot type 0 [ 50.246406][ T4400] EXT4-fs error (device loop0): ext4_free_blocks:6587: comm syz.0.287: Freeing blocks not in datazone - block = 0, count = 4096 [ 50.265602][ T4400] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm syz.0.287: Invalid inode bitmap blk 0 in block_group 0 [ 50.278272][ T4400] EXT4-fs error (device loop0) in ext4_free_inode:361: Corrupt filesystem [ 50.279595][ T51] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:3: Failed to release dquot type 0 [ 50.287146][ T4400] EXT4-fs (loop0): 1 orphan inode deleted [ 50.442691][ T4410] netlink: 4 bytes leftover after parsing attributes in process `syz.0.291'. [ 50.538976][ T4417] vhci_hcd: invalid port number 96 [ 50.544189][ T4417] vhci_hcd: default hub control req: 0300 vfffc i0060 l0 [ 50.552220][ T4417] loop4: detected capacity change from 0 to 2048 [ 50.723256][ T4428] loop1: detected capacity change from 0 to 512 [ 50.732564][ T4428] ext4 filesystem being mounted at /48/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.802287][ T4434] netlink: 'syz.1.298': attribute type 3 has an invalid length. [ 50.844474][ T4436] loop1: detected capacity change from 0 to 1024 [ 50.851560][ T4436] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 50.852165][ T4436] EXT4-fs (loop1): orphan cleanup on readonly fs [ 50.852768][ T4436] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.299: Invalid block bitmap block 0 in block_group 0 [ 50.882857][ T4436] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.299: Failed to acquire dquot type 0 [ 50.882967][ T4436] EXT4-fs error (device loop1): ext4_free_blocks:6587: comm syz.1.299: Freeing blocks not in datazone - block = 0, count = 4096 [ 50.883184][ T4436] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.299: Invalid inode bitmap blk 0 in block_group 0 [ 50.883254][ T4436] EXT4-fs error (device loop1) in ext4_free_inode:361: Corrupt filesystem [ 50.883305][ T4436] EXT4-fs (loop1): 1 orphan inode deleted [ 50.883658][ T382] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:5: Failed to release dquot type 0 [ 51.271497][ T4450] netlink: 4 bytes leftover after parsing attributes in process `syz.2.304'. [ 51.312431][ T4453] loop2: detected capacity change from 0 to 512 [ 51.325691][ T4453] ext4 filesystem being mounted at /60/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.420247][ T4463] loop1: detected capacity change from 0 to 512 [ 51.435993][ T4463] ext4 filesystem being mounted at /54/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.479834][ T4468] loop0: detected capacity change from 0 to 1024 [ 51.486951][ T4468] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 51.514506][ T4468] EXT4-fs (loop0): orphan cleanup on readonly fs [ 51.526253][ T4472] loop2: detected capacity change from 0 to 512 [ 51.533323][ T4468] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.310: Invalid block bitmap block 0 in block_group 0 [ 51.555137][ T4468] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.310: Failed to acquire dquot type 0 [ 51.564797][ T4472] ======================================================= [ 51.564797][ T4472] WARNING: The mand mount option has been deprecated and [ 51.564797][ T4472] and is ignored by this kernel. Remove the mand [ 51.564797][ T4472] option from the mount to silence this warning. [ 51.564797][ T4472] ======================================================= [ 51.619525][ T4477] loop3: detected capacity change from 0 to 164 [ 51.627451][ T4468] EXT4-fs error (device loop0): ext4_free_blocks:6587: comm syz.0.310: Freeing blocks not in datazone - block = 0, count = 4096 [ 51.643889][ T4472] ext4 filesystem being mounted at /62/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 51.654210][ T4480] loop1: detected capacity change from 0 to 164 [ 51.661043][ T4468] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm syz.0.310: Invalid inode bitmap blk 0 in block_group 0 [ 51.682605][ T51] __quota_error: 15 callbacks suppressed [ 51.682627][ T51] Quota error (device loop0): do_check_range: Getting block 0 out of range 1-8 [ 51.691570][ T4468] EXT4-fs error (device loop0) in ext4_free_inode:361: Corrupt filesystem [ 51.697317][ T51] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:3: Failed to release dquot type 0 [ 51.718058][ T4468] EXT4-fs (loop0): 1 orphan inode deleted [ 51.723975][ T29] audit: type=1400 audit(1753570138.158:576): avc: denied { setattr } for pid=4471 comm="syz.2.311" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 51.820120][ T4491] netlink: 4 bytes leftover after parsing attributes in process `syz.0.316'. [ 51.900664][ T29] audit: type=1326 audit(1753570138.338:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4501 comm="syz.2.322" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1eaa01e9a9 code=0x0 [ 51.950908][ T4506] vhci_hcd: invalid port number 96 [ 51.956079][ T4506] vhci_hcd: default hub control req: 0300 vfffc i0060 l0 [ 51.971065][ T4508] vhci_hcd: invalid port number 96 [ 51.976225][ T4508] vhci_hcd: default hub control req: 0300 vfffc i0060 l0 [ 51.996166][ T4506] loop3: detected capacity change from 0 to 2048 [ 52.033056][ T4511] loop0: detected capacity change from 0 to 2048 [ 52.110181][ T4510] syzkaller0: entered promiscuous mode [ 52.110198][ T4510] syzkaller0: entered allmulticast mode [ 52.230823][ T4521] loop1: detected capacity change from 0 to 164 [ 52.262885][ T4523] loop1: detected capacity change from 0 to 512 [ 52.282241][ T4523] ext4 filesystem being mounted at /58/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.343595][ T4530] loop1: detected capacity change from 0 to 1024 [ 52.344395][ T4530] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 52.364274][ T4530] EXT4-fs (loop1): orphan cleanup on readonly fs [ 52.364821][ T4530] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.327: Invalid block bitmap block 0 in block_group 0 [ 52.385031][ T4530] Quota error (device loop1): write_blk: dquota write failed [ 52.385051][ T4530] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 52.385083][ T4530] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.327: Failed to acquire dquot type 0 [ 52.415735][ T4530] EXT4-fs error (device loop1): ext4_free_blocks:6587: comm syz.1.327: Freeing blocks not in datazone - block = 0, count = 4096 [ 52.415857][ T4530] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.327: Invalid inode bitmap blk 0 in block_group 0 [ 52.415984][ T4530] EXT4-fs error (device loop1) in ext4_free_inode:361: Corrupt filesystem [ 52.416069][ T4530] EXT4-fs (loop1): 1 orphan inode deleted [ 52.416122][ T41] Quota error (device loop1): do_check_range: Getting block 0 out of range 1-8 [ 52.416146][ T41] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:2: Failed to release dquot type 0 [ 52.505473][ T4537] loop1: detected capacity change from 0 to 512 [ 52.523122][ T4537] ext4 filesystem being mounted at /62/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.611465][ T4546] netlink: 4 bytes leftover after parsing attributes in process `syz.1.332'. [ 52.842680][ T4561] loop3: detected capacity change from 0 to 164 [ 52.856521][ T4563] loop0: detected capacity change from 0 to 1024 [ 52.904729][ T4563] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 52.933251][ T4567] loop3: detected capacity change from 0 to 1024 [ 52.937035][ T4569] loop2: detected capacity change from 0 to 512 [ 52.946313][ T4563] EXT4-fs (loop0): orphan cleanup on readonly fs [ 52.958860][ T4567] EXT4-fs: Ignoring removed orlov option [ 52.984429][ T4563] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.338: Invalid block bitmap block 0 in block_group 0 [ 53.004817][ T29] audit: type=1400 audit(1753570139.438:578): avc: denied { write } for pid=4564 comm="syz.3.340" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 53.024774][ T29] audit: type=1400 audit(1753570139.438:579): avc: denied { write } for pid=4564 comm="syz.3.340" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 53.053026][ T4569] ext4 filesystem being mounted at /65/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.070112][ T4563] Quota error (device loop0): write_blk: dquota write failed [ 53.070283][ T4567] EXT4-fs: Ignoring sb option on remount [ 53.077508][ T4563] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 53.083224][ T4567] EXT4-fs: Ignoring removed orlov option [ 53.096780][ T4563] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.338: Failed to acquire dquot type 0 [ 53.109990][ T4567] EXT4-fs: Ignoring removed nomblk_io_submit option [ 53.110019][ T4567] EXT4-fs: Remounting fs w/o journal so ignoring data_err option [ 53.118097][ T4563] EXT4-fs error (device loop0): ext4_free_blocks:6587: comm syz.0.338: Freeing blocks not in datazone - block = 0, count = 4096 [ 53.124699][ T4576] loop1: detected capacity change from 0 to 1024 [ 53.145025][ T4563] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm syz.0.338: Invalid inode bitmap blk 0 in block_group 0 [ 53.145456][ T4567] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000. [ 53.162061][ T4576] EXT4-fs: Ignoring removed nobh option [ 53.171213][ T4576] EXT4-fs: Ignoring removed bh option [ 53.177707][ T4563] EXT4-fs error (device loop0) in ext4_free_inode:361: Corrupt filesystem [ 53.187789][ T4563] EXT4-fs (loop0): 1 orphan inode deleted [ 53.203239][ T41] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:2: Failed to release dquot type 0 [ 53.286349][ T4576] EXT4-fs error (device loop1): mb_free_blocks:1948: group 0, inode 15: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 53.337658][ T4593] netlink: 12 bytes leftover after parsing attributes in process `syz.0.346'. [ 53.361655][ T4597] FAULT_INJECTION: forcing a failure. [ 53.361655][ T4597] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 53.375276][ T4597] CPU: 0 UID: 0 PID: 4597 Comm: syz.0.349 Not tainted 6.16.0-rc7-syzkaller-00127-g302f88ff3584 #0 PREEMPT(voluntary) [ 53.375322][ T4597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 53.375337][ T4597] Call Trace: [ 53.375343][ T4597] [ 53.375349][ T4597] __dump_stack+0x1d/0x30 [ 53.375369][ T4597] dump_stack_lvl+0xe8/0x140 [ 53.375386][ T4597] dump_stack+0x15/0x1b [ 53.375429][ T4597] should_fail_ex+0x265/0x280 [ 53.375459][ T4597] should_fail+0xb/0x20 [ 53.375485][ T4597] should_fail_usercopy+0x1a/0x20 [ 53.375518][ T4597] _copy_to_user+0x20/0xa0 [ 53.375555][ T4597] simple_read_from_buffer+0xb5/0x130 [ 53.375586][ T4597] proc_fail_nth_read+0x100/0x140 [ 53.375654][ T4597] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 53.375746][ T4597] vfs_read+0x1a0/0x6f0 [ 53.375829][ T4597] ? percpu_counter_add_batch+0xb6/0x130 [ 53.375899][ T4597] ? __rcu_read_unlock+0x4f/0x70 [ 53.375918][ T4597] ? __fget_files+0x184/0x1c0 [ 53.375934][ T4597] ksys_read+0xda/0x1a0 [ 53.375979][ T4597] __x64_sys_read+0x40/0x50 [ 53.376005][ T4597] x64_sys_call+0x2d77/0x2fb0 [ 53.376024][ T4597] do_syscall_64+0xd2/0x200 [ 53.376049][ T4597] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 53.376151][ T4597] ? clear_bhb_loop+0x40/0x90 [ 53.376169][ T4597] ? clear_bhb_loop+0x40/0x90 [ 53.376256][ T4597] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.376273][ T4597] RIP: 0033:0x7ff173e1d3bc [ 53.376290][ T4597] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 53.376305][ T4597] RSP: 002b:00007ff172487030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 53.376370][ T4597] RAX: ffffffffffffffda RBX: 00007ff174045fa0 RCX: 00007ff173e1d3bc [ 53.376380][ T4597] RDX: 000000000000000f RSI: 00007ff1724870a0 RDI: 0000000000000004 [ 53.376391][ T4597] RBP: 00007ff172487090 R08: 0000000000000000 R09: 0000000000000000 [ 53.376424][ T4597] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 53.376434][ T4597] R13: 0000000000000000 R14: 00007ff174045fa0 R15: 00007fffd5c931c8 [ 53.376461][ T4597] [ 53.378374][ T4594] vhci_hcd: invalid port number 96 [ 53.579533][ T4602] loop1: detected capacity change from 0 to 2048 [ 53.586523][ T4594] vhci_hcd: default hub control req: 0300 vfffc i0060 l0 [ 53.654449][ T4612] netlink: 4 bytes leftover after parsing attributes in process `syz.0.354'. [ 53.677404][ T4614] loop3: detected capacity change from 0 to 512 [ 53.701883][ T4614] ext4 filesystem being mounted at /62/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.781042][ T4625] loop3: detected capacity change from 0 to 512 [ 53.803884][ T4625] ext4 filesystem being mounted at /63/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.836889][ T4632] loop0: detected capacity change from 0 to 512 [ 53.945228][ T4636] loop3: detected capacity change from 0 to 164 [ 53.949334][ T4638] netlink: 12 bytes leftover after parsing attributes in process `syz.0.360'. [ 54.141035][ T4656] loop0: detected capacity change from 0 to 512 [ 54.168068][ T4660] loop2: detected capacity change from 0 to 512 [ 54.240089][ T4656] ext4 filesystem being mounted at /89/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.252047][ T4660] ext4 filesystem being mounted at /67/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.331701][ T4674] loop0: detected capacity change from 0 to 1024 [ 54.342522][ T4674] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 54.356846][ T4674] EXT4-fs (loop0): orphan cleanup on readonly fs [ 54.370736][ T4674] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.373: Invalid block bitmap block 0 in block_group 0 [ 54.387552][ T4674] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.373: Failed to acquire dquot type 0 [ 54.399351][ T4674] EXT4-fs error (device loop0): ext4_free_blocks:6587: comm syz.0.373: Freeing blocks not in datazone - block = 0, count = 4096 [ 54.413140][ T4674] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm syz.0.373: Invalid inode bitmap blk 0 in block_group 0 [ 54.425823][ T382] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:5: Failed to release dquot type 0 [ 54.426207][ T4674] EXT4-fs error (device loop0) in ext4_free_inode:361: Corrupt filesystem [ 54.446345][ T4674] EXT4-fs (loop0): 1 orphan inode deleted [ 54.497967][ T4683] vlan2: entered allmulticast mode [ 54.853600][ T4700] loop3: detected capacity change from 0 to 512 [ 54.870711][ T4700] ext4 filesystem being mounted at /67/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.902444][ T4704] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 54.910048][ T4704] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 54.917655][ T4704] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 54.925180][ T4704] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 55.056176][ T4709] loop4: detected capacity change from 0 to 512 [ 55.066784][ T4709] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 55.257077][ T4724] netlink: 4 bytes leftover after parsing attributes in process `syz.1.387'. [ 55.431373][ T4735] loop3: detected capacity change from 0 to 164 [ 55.500896][ T4740] vhci_hcd: invalid port number 96 [ 55.506102][ T4740] vhci_hcd: default hub control req: 0300 vfffc i0060 l0 [ 55.513280][ T4742] vhci_hcd: invalid port number 96 [ 55.518511][ T4742] vhci_hcd: default hub control req: 0300 vfffc i0060 l0 [ 55.528706][ T4740] loop1: detected capacity change from 0 to 2048 [ 55.535443][ T4742] loop3: detected capacity change from 0 to 2048 [ 55.639399][ T4758] xt_TCPMSS: Only works on TCP SYN packets [ 55.866399][ T4771] loop0: detected capacity change from 0 to 1024 [ 55.866961][ T4771] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 55.877143][ T4771] EXT4-fs (loop0): orphan cleanup on readonly fs [ 55.877831][ T4771] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.405: Invalid block bitmap block 0 in block_group 0 [ 55.877982][ T4771] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.405: Failed to acquire dquot type 0 [ 55.878206][ T4771] EXT4-fs error (device loop0): ext4_free_blocks:6587: comm syz.0.405: Freeing blocks not in datazone - block = 0, count = 4096 [ 55.878511][ T4771] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm syz.0.405: Invalid inode bitmap blk 0 in block_group 0 [ 55.878651][ T4771] EXT4-fs error (device loop0) in ext4_free_inode:361: Corrupt filesystem [ 55.878710][ T4771] EXT4-fs (loop0): 1 orphan inode deleted [ 55.878810][ T51] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:3: Failed to release dquot type 0 [ 56.062247][ T4776] netlink: 4 bytes leftover after parsing attributes in process `syz.0.406'. [ 56.189731][ T4778] capability: warning: `syz.0.407' uses deprecated v2 capabilities in a way that may be insecure [ 56.226956][ T4783] loop0: detected capacity change from 0 to 1024 [ 56.230553][ T4783] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 56.244209][ T4783] EXT4-fs (loop0): orphan cleanup on readonly fs [ 56.247042][ T4783] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.408: Invalid block bitmap block 0 in block_group 0 [ 56.264614][ T4783] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.408: Failed to acquire dquot type 0 [ 56.264798][ T4783] EXT4-fs error (device loop0): ext4_free_blocks:6587: comm syz.0.408: Freeing blocks not in datazone - block = 0, count = 4096 [ 56.264939][ T4783] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm syz.0.408: Invalid inode bitmap blk 0 in block_group 0 [ 56.265061][ T4783] EXT4-fs error (device loop0) in ext4_free_inode:361: Corrupt filesystem [ 56.265184][ T4783] EXT4-fs (loop0): 1 orphan inode deleted [ 56.265238][ T382] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:5: Failed to release dquot type 0 [ 56.315397][ T4786] loop4: detected capacity change from 0 to 1024 [ 56.365250][ T4786] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 56.373389][ T4786] EXT4-fs (loop4): orphan cleanup on readonly fs [ 56.374189][ T4786] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.410: Invalid block bitmap block 0 in block_group 0 [ 56.374329][ T4786] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.410: Failed to acquire dquot type 0 [ 56.374437][ T4786] EXT4-fs error (device loop4): ext4_free_blocks:6587: comm syz.4.410: Freeing blocks not in datazone - block = 0, count = 4096 [ 56.374826][ T4786] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.410: Invalid inode bitmap blk 0 in block_group 0 [ 56.374955][ T4786] EXT4-fs error (device loop4) in ext4_free_inode:361: Corrupt filesystem [ 56.375068][ T4786] EXT4-fs (loop4): 1 orphan inode deleted [ 56.381302][ T57] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:4: Failed to release dquot type 0 [ 56.624325][ T4808] loop2: detected capacity change from 0 to 1024 [ 56.649180][ T4808] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 56.662291][ T4808] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 56.683467][ T4820] loop1: detected capacity change from 0 to 1024 [ 56.688433][ T4808] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 56.700827][ T4808] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 56.717995][ T4820] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 56.728731][ T4808] JBD2: no valid journal superblock found [ 56.734482][ T4808] EXT4-fs (loop2): Could not load journal inode [ 56.741382][ T4823] xt_CT: You must specify a L4 protocol and not use inversions on it [ 56.758044][ T4820] EXT4-fs (loop1): orphan cleanup on readonly fs [ 56.778786][ T4820] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.423: Invalid block bitmap block 0 in block_group 0 [ 56.844880][ T29] kauditd_printk_skb: 36 callbacks suppressed [ 56.844895][ T29] audit: type=1326 audit(1753570143.278:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4827 comm="syz.4.425" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa2bc98e9a9 code=0x0 [ 56.885069][ T4831] netlink: 4 bytes leftover after parsing attributes in process `syz.0.418'. [ 56.970508][ T4820] Quota error (device loop1): write_blk: dquota write failed [ 56.977957][ T4820] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 57.020091][ T29] audit: type=1400 audit(1753570143.448:604): avc: denied { read } for pid=4833 comm="syz.2.426" name="usbmon7" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 57.043349][ T29] audit: type=1400 audit(1753570143.448:605): avc: denied { open } for pid=4833 comm="syz.2.426" path="/dev/usbmon7" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 57.080592][ T4820] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.423: Failed to acquire dquot type 0 [ 57.098522][ T4820] EXT4-fs error (device loop1): ext4_free_blocks:6587: comm syz.1.423: Freeing blocks not in datazone - block = 0, count = 4096 [ 57.112148][ T4820] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.423: Invalid inode bitmap blk 0 in block_group 0 [ 57.125005][ T57] Quota error (device loop1): do_check_range: Getting block 0 out of range 1-8 [ 57.134072][ T57] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:4: Failed to release dquot type 0 [ 57.138488][ T4820] EXT4-fs error (device loop1) in ext4_free_inode:361: Corrupt filesystem [ 57.155536][ T4820] EXT4-fs (loop1): 1 orphan inode deleted [ 57.156902][ T4841] netlink: 268 bytes leftover after parsing attributes in process `syz.2.427'. [ 57.170458][ T4841] unsupported nla_type 65024 [ 57.175183][ T29] audit: type=1400 audit(1753570143.588:606): avc: denied { create } for pid=4840 comm="syz.2.427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 57.195239][ T29] audit: type=1400 audit(1753570143.588:607): avc: denied { write } for pid=4840 comm="syz.2.427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 57.215230][ T29] audit: type=1400 audit(1753570143.588:608): avc: denied { nlmsg_write } for pid=4840 comm="syz.2.427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 57.258880][ T4841] tipc: Started in network mode [ 57.263816][ T4841] tipc: Node identity 3a329ce3d642, cluster identity 4711 [ 57.271076][ T4841] tipc: Enabled bearer , priority 0 [ 57.281489][ T382] tipc: Resetting bearer [ 57.295535][ T4840] tipc: Resetting bearer [ 57.307977][ T4840] tipc: Disabling bearer [ 57.323262][ T29] audit: type=1400 audit(1753570143.758:609): avc: denied { create } for pid=4848 comm="syz.0.430" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 57.473923][ T4860] loop2: detected capacity change from 0 to 1024 [ 57.481983][ T4860] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 57.497239][ T4860] EXT4-fs (loop2): orphan cleanup on readonly fs [ 57.511300][ T4860] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.435: Invalid block bitmap block 0 in block_group 0 [ 57.532324][ T4860] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.435: Failed to acquire dquot type 0 [ 57.548779][ T4860] EXT4-fs error (device loop2): ext4_free_blocks:6587: comm syz.2.435: Freeing blocks not in datazone - block = 0, count = 4096 [ 57.562757][ T4860] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.435: Invalid inode bitmap blk 0 in block_group 0 [ 57.575702][ T4860] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem [ 57.584328][ T382] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:5: Failed to release dquot type 0 [ 57.584486][ T4860] EXT4-fs (loop2): 1 orphan inode deleted [ 57.688637][ T4878] loop4: detected capacity change from 0 to 1024 [ 57.700452][ T4878] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 57.712214][ T4878] EXT4-fs (loop4): orphan cleanup on readonly fs [ 57.725310][ T4878] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.442: Invalid block bitmap block 0 in block_group 0 [ 57.756279][ T4882] netlink: 4 bytes leftover after parsing attributes in process `syz.3.439'. [ 57.777215][ T4878] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.442: Failed to acquire dquot type 0 [ 57.794218][ T4878] EXT4-fs error (device loop4): ext4_free_blocks:6587: comm syz.4.442: Freeing blocks not in datazone - block = 0, count = 4096 [ 57.808019][ T4878] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.442: Invalid inode bitmap blk 0 in block_group 0 [ 57.828178][ T51] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:3: Failed to release dquot type 0 [ 57.845282][ T4878] EXT4-fs error (device loop4) in ext4_free_inode:361: Corrupt filesystem [ 57.857482][ T4878] EXT4-fs (loop4): 1 orphan inode deleted [ 58.343234][ T4919] FAULT_INJECTION: forcing a failure. [ 58.343234][ T4919] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 58.356361][ T4919] CPU: 1 UID: 0 PID: 4919 Comm: syz.0.456 Not tainted 6.16.0-rc7-syzkaller-00127-g302f88ff3584 #0 PREEMPT(voluntary) [ 58.356388][ T4919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 58.356401][ T4919] Call Trace: [ 58.356407][ T4919] [ 58.356414][ T4919] __dump_stack+0x1d/0x30 [ 58.356443][ T4919] dump_stack_lvl+0xe8/0x140 [ 58.356463][ T4919] dump_stack+0x15/0x1b [ 58.356481][ T4919] should_fail_ex+0x265/0x280 [ 58.356510][ T4919] should_fail+0xb/0x20 [ 58.356535][ T4919] should_fail_usercopy+0x1a/0x20 [ 58.356672][ T4919] copy_folio_from_iter_atomic+0x278/0x1170 [ 58.356765][ T4919] ? shmem_write_begin+0xa8/0x190 [ 58.356793][ T4919] ? shmem_write_begin+0xe1/0x190 [ 58.356890][ T4919] generic_perform_write+0x2c2/0x490 [ 58.356916][ T4919] shmem_file_write_iter+0xc5/0xf0 [ 58.356935][ T4919] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 58.356952][ T4919] vfs_write+0x4a0/0x8e0 [ 58.356985][ T4919] ksys_write+0xda/0x1a0 [ 58.357020][ T4919] __x64_sys_write+0x40/0x50 [ 58.357127][ T4919] x64_sys_call+0x2cdd/0x2fb0 [ 58.357150][ T4919] do_syscall_64+0xd2/0x200 [ 58.357167][ T4919] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 58.357190][ T4919] ? clear_bhb_loop+0x40/0x90 [ 58.357244][ T4919] ? clear_bhb_loop+0x40/0x90 [ 58.357268][ T4919] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.357288][ T4919] RIP: 0033:0x7ff173e1e9a9 [ 58.357301][ T4919] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 58.357353][ T4919] RSP: 002b:00007ff172487038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 58.357370][ T4919] RAX: ffffffffffffffda RBX: 00007ff174045fa0 RCX: 00007ff173e1e9a9 [ 58.357381][ T4919] RDX: 0000000000040010 RSI: 0000200000000180 RDI: 0000000000000006 [ 58.357391][ T4919] RBP: 00007ff172487090 R08: 0000000000000000 R09: 0000000000000000 [ 58.357402][ T4919] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 58.357414][ T4919] R13: 0000000000000000 R14: 00007ff174045fa0 R15: 00007fffd5c931c8 [ 58.357433][ T4919] [ 58.695517][ T4923] netlink: 4 bytes leftover after parsing attributes in process `syz.0.457'. [ 58.764473][ T4925] loop0: detected capacity change from 0 to 1024 [ 58.773353][ T4925] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 58.797607][ T4925] EXT4-fs (loop0): orphan cleanup on readonly fs [ 58.806022][ T4925] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.458: Invalid block bitmap block 0 in block_group 0 [ 58.824787][ T4925] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.458: Failed to acquire dquot type 0 [ 58.843097][ T4925] EXT4-fs error (device loop0): ext4_free_blocks:6587: comm syz.0.458: Freeing blocks not in datazone - block = 0, count = 4096 [ 58.857083][ T4925] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm syz.0.458: Invalid inode bitmap blk 0 in block_group 0 [ 58.878406][ T4925] EXT4-fs error (device loop0) in ext4_free_inode:361: Corrupt filesystem [ 58.878773][ T2750] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:6: Failed to release dquot type 0 [ 58.899112][ T4925] EXT4-fs (loop0): 1 orphan inode deleted [ 58.986594][ T4945] loop0: detected capacity change from 0 to 128 [ 58.996900][ T4945] FAT-fs (loop0): Directory bread(block 162) failed [ 59.003748][ T4945] FAT-fs (loop0): Directory bread(block 163) failed [ 59.017334][ T4945] FAT-fs (loop0): Directory bread(block 164) failed [ 59.024367][ T4945] FAT-fs (loop0): Directory bread(block 165) failed [ 59.050767][ T4945] FAT-fs (loop0): Directory bread(block 166) failed [ 59.059241][ T4945] FAT-fs (loop0): Directory bread(block 167) failed [ 59.065943][ T4945] FAT-fs (loop0): Directory bread(block 168) failed [ 59.073380][ T4945] FAT-fs (loop0): Directory bread(block 169) failed [ 59.083000][ T4945] FAT-fs (loop0): Directory bread(block 162) failed [ 59.090831][ T4945] FAT-fs (loop0): Directory bread(block 163) failed [ 59.099061][ T4945] syz.0.467: attempt to access beyond end of device [ 59.099061][ T4945] loop0: rw=3, sector=226, nr_sectors = 6 limit=128 [ 59.112344][ T4945] syz.0.467: attempt to access beyond end of device [ 59.112344][ T4945] loop0: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 59.125421][ T4953] netlink: 4 bytes leftover after parsing attributes in process `syz.2.468'. [ 59.140506][ T4945] syz.0.467: attempt to access beyond end of device [ 59.140506][ T4945] loop0: rw=3, sector=234, nr_sectors = 6 limit=128 [ 59.153627][ T4945] syz.0.467: attempt to access beyond end of device [ 59.153627][ T4945] loop0: rw=2051, sector=240, nr_sectors = 2 limit=128 [ 59.188812][ T4956] xt_CT: You must specify a L4 protocol and not use inversions on it [ 59.835412][ T4973] loop3: detected capacity change from 0 to 1024 [ 59.844921][ T4973] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 59.856845][ T4973] EXT4-fs (loop3): orphan cleanup on readonly fs [ 59.867995][ T4973] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.476: Invalid block bitmap block 0 in block_group 0 [ 59.881702][ T4976] loop4: detected capacity change from 0 to 1024 [ 59.888546][ T4973] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.476: Failed to acquire dquot type 0 [ 59.900803][ T4976] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 59.901647][ T4973] EXT4-fs error (device loop3): ext4_free_blocks:6587: comm syz.3.476: Freeing blocks not in datazone - block = 0, count = 4096 [ 59.913063][ T4976] EXT4-fs (loop4): orphan cleanup on readonly fs [ 59.927320][ T4973] EXT4-fs error (device loop3): ext4_read_inode_bitmap:139: comm syz.3.476: Invalid inode bitmap blk 0 in block_group 0 [ 59.932437][ T4976] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.477: Invalid block bitmap block 0 in block_group 0 [ 59.943399][ T57] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:4: Failed to release dquot type 0 [ 59.957818][ T4976] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.477: Failed to acquire dquot type 0 [ 59.980587][ T4976] EXT4-fs error (device loop4): ext4_free_blocks:6587: comm syz.4.477: Freeing blocks not in datazone - block = 0, count = 4096 [ 59.996946][ T4973] EXT4-fs error (device loop3) in ext4_free_inode:361: Corrupt filesystem [ 59.999710][ T4976] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.477: Invalid inode bitmap blk 0 in block_group 0 [ 60.018185][ T57] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:4: Failed to release dquot type 0 [ 60.019784][ T4976] EXT4-fs error (device loop4) in ext4_free_inode:361: Corrupt filesystem [ 60.039803][ T4973] EXT4-fs (loop3): 1 orphan inode deleted [ 60.040488][ T4976] EXT4-fs (loop4): 1 orphan inode deleted [ 60.104892][ T4984] FAULT_INJECTION: forcing a failure. [ 60.104892][ T4984] name failslab, interval 1, probability 0, space 0, times 1 [ 60.117594][ T4984] CPU: 0 UID: 0 PID: 4984 Comm: syz.1.480 Not tainted 6.16.0-rc7-syzkaller-00127-g302f88ff3584 #0 PREEMPT(voluntary) [ 60.117653][ T4984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 60.117665][ T4984] Call Trace: [ 60.117672][ T4984] [ 60.117679][ T4984] __dump_stack+0x1d/0x30 [ 60.117700][ T4984] dump_stack_lvl+0xe8/0x140 [ 60.117741][ T4984] dump_stack+0x15/0x1b [ 60.117756][ T4984] should_fail_ex+0x265/0x280 [ 60.117829][ T4984] should_failslab+0x8c/0xb0 [ 60.117909][ T4984] kmem_cache_alloc_node_noprof+0x57/0x320 [ 60.117976][ T4984] ? __alloc_skb+0x101/0x320 [ 60.118009][ T4984] __alloc_skb+0x101/0x320 [ 60.118034][ T4984] ? audit_log_start+0x365/0x6c0 [ 60.118062][ T4984] audit_log_start+0x380/0x6c0 [ 60.118118][ T4984] audit_seccomp+0x48/0x100 [ 60.118142][ T4984] ? __seccomp_filter+0x68c/0x10d0 [ 60.118161][ T4984] __seccomp_filter+0x69d/0x10d0 [ 60.118180][ T4984] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 60.118304][ T4984] ? vfs_write+0x75e/0x8e0 [ 60.118336][ T4984] __secure_computing+0x82/0x150 [ 60.118354][ T4984] syscall_trace_enter+0xcf/0x1e0 [ 60.118375][ T4984] do_syscall_64+0xac/0x200 [ 60.118391][ T4984] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 60.118474][ T4984] ? clear_bhb_loop+0x40/0x90 [ 60.118492][ T4984] ? clear_bhb_loop+0x40/0x90 [ 60.118577][ T4984] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.118595][ T4984] RIP: 0033:0x7ff8d0e3e9a9 [ 60.118608][ T4984] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 60.118623][ T4984] RSP: 002b:00007ff8cf4a7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000042 [ 60.118639][ T4984] RAX: ffffffffffffffda RBX: 00007ff8d1065fa0 RCX: 00007ff8d0e3e9a9 [ 60.118650][ T4984] RDX: 0000000000000014 RSI: 0000000000000001 RDI: 0000000000000000 [ 60.118682][ T4984] RBP: 00007ff8cf4a7090 R08: 0000000000000000 R09: 0000000000000000 [ 60.118692][ T4984] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 60.118710][ T4984] R13: 0000000000000000 R14: 00007ff8d1065fa0 R15: 00007fff365e3f88 [ 60.118725][ T4984] [ 60.373042][ T4991] 9pnet_fd: Insufficient options for proto=fd [ 60.423954][ T4999] FAULT_INJECTION: forcing a failure. [ 60.423954][ T4999] name failslab, interval 1, probability 0, space 0, times 0 [ 60.436664][ T4999] CPU: 1 UID: 0 PID: 4999 Comm: syz.2.487 Not tainted 6.16.0-rc7-syzkaller-00127-g302f88ff3584 #0 PREEMPT(voluntary) [ 60.436691][ T4999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 60.436703][ T4999] Call Trace: [ 60.436710][ T4999] [ 60.436717][ T4999] __dump_stack+0x1d/0x30 [ 60.436738][ T4999] dump_stack_lvl+0xe8/0x140 [ 60.436758][ T4999] dump_stack+0x15/0x1b [ 60.436775][ T4999] should_fail_ex+0x265/0x280 [ 60.436806][ T4999] should_failslab+0x8c/0xb0 [ 60.436829][ T4999] kmem_cache_alloc_noprof+0x50/0x310 [ 60.436854][ T4999] ? mas_alloc_nodes+0x265/0x520 [ 60.436874][ T4999] mas_alloc_nodes+0x265/0x520 [ 60.436894][ T4999] mas_preallocate+0x33e/0x520 [ 60.436931][ T4999] mmap_region+0xb7e/0x1580 [ 60.436970][ T4999] do_mmap+0x9b3/0xbe0 [ 60.437001][ T4999] vm_mmap_pgoff+0x17a/0x2e0 [ 60.437028][ T4999] ksys_mmap_pgoff+0xc2/0x310 [ 60.437055][ T4999] ? __x64_sys_mmap+0x49/0x70 [ 60.437078][ T4999] x64_sys_call+0x1602/0x2fb0 [ 60.437097][ T4999] do_syscall_64+0xd2/0x200 [ 60.437113][ T4999] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 60.437138][ T4999] ? clear_bhb_loop+0x40/0x90 [ 60.437156][ T4999] ? clear_bhb_loop+0x40/0x90 [ 60.437174][ T4999] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.437191][ T4999] RIP: 0033:0x7f1eaa01e9e3 [ 60.437204][ T4999] Code: f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 41 89 ca 41 f7 c1 ff 0f 00 00 75 14 b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 25 c3 0f 1f 40 00 48 c7 c0 a8 ff ff ff 64 c7 [ 60.437219][ T4999] RSP: 002b:00007f1ea867ee18 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 60.437235][ T4999] RAX: ffffffffffffffda RBX: 0000000000000508 RCX: 00007f1eaa01e9e3 [ 60.437247][ T4999] RDX: 0000000000000003 RSI: 0000000008400000 RDI: 0000000000000000 [ 60.437257][ T4999] RBP: 0000200000000942 R08: 00000000ffffffff R09: 0000000000000000 [ 60.437268][ T4999] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000004 [ 60.437278][ T4999] R13: 00007f1ea867eef0 R14: 00007f1ea867eeb0 R15: 0000200000000140 [ 60.437292][ T4999] [ 60.703091][ T5009] loop1: detected capacity change from 0 to 1024 [ 60.722391][ T5009] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 60.765110][ T5009] EXT4-fs (loop1): orphan cleanup on readonly fs [ 60.772370][ T5009] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.492: Invalid block bitmap block 0 in block_group 0 [ 60.786684][ T5009] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.492: Failed to acquire dquot type 0 [ 60.798744][ T5009] EXT4-fs error (device loop1): ext4_free_blocks:6587: comm syz.1.492: Freeing blocks not in datazone - block = 0, count = 4096 [ 60.812388][ T5009] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.492: Invalid inode bitmap blk 0 in block_group 0 [ 60.825134][ T3516] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:7: Failed to release dquot type 0 [ 60.837285][ T5009] EXT4-fs error (device loop1) in ext4_free_inode:361: Corrupt filesystem [ 60.845968][ T5009] EXT4-fs (loop1): 1 orphan inode deleted [ 61.271008][ T5036] vhci_hcd: invalid port number 96 [ 61.276165][ T5036] vhci_hcd: default hub control req: 0300 vfffc i0060 l0 [ 61.290037][ T5036] loop3: detected capacity change from 0 to 2048 [ 61.615920][ T5043] loop4: detected capacity change from 0 to 764 [ 61.772356][ T5052] loop2: detected capacity change from 0 to 1024 [ 61.783172][ T5052] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 61.784061][ T5052] EXT4-fs (loop2): orphan cleanup on readonly fs [ 61.784881][ T5052] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.504: Invalid block bitmap block 0 in block_group 0 [ 61.815509][ T5052] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.504: Failed to acquire dquot type 0 [ 61.815681][ T5052] EXT4-fs error (device loop2): ext4_free_blocks:6587: comm syz.2.504: Freeing blocks not in datazone - block = 0, count = 4096 [ 61.815789][ T5052] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.504: Invalid inode bitmap blk 0 in block_group 0 [ 61.815888][ T5052] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem [ 61.816203][ T5052] EXT4-fs (loop2): 1 orphan inode deleted [ 61.816492][ T51] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:3: Failed to release dquot type 0 [ 61.878796][ T5050] syzkaller0: entered promiscuous mode [ 61.895380][ T5050] syzkaller0: entered allmulticast mode [ 61.905039][ T29] kauditd_printk_skb: 230 callbacks suppressed [ 61.905051][ T29] audit: type=1326 audit(1753570148.338:817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5055 comm="syz.1.505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8d0e3e9a9 code=0x7ffc0000 [ 61.934528][ T29] audit: type=1326 audit(1753570148.338:818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5055 comm="syz.1.505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8d0e3e9a9 code=0x7ffc0000 [ 61.934556][ T29] audit: type=1326 audit(1753570148.338:819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5055 comm="syz.1.505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff8d0e3d310 code=0x7ffc0000 [ 61.934578][ T29] audit: type=1326 audit(1753570148.338:820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5055 comm="syz.1.505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8d0e3e9a9 code=0x7ffc0000 [ 61.934617][ T29] audit: type=1326 audit(1753570148.338:821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5055 comm="syz.1.505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=328 compat=0 ip=0x7ff8d0e3e9a9 code=0x7ffc0000 [ 61.934641][ T29] audit: type=1326 audit(1753570148.338:822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5055 comm="syz.1.505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8d0e3e9a9 code=0x7ffc0000 [ 61.934662][ T29] audit: type=1326 audit(1753570148.338:823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5055 comm="syz.1.505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff8d0e3e9a9 code=0x7ffc0000 [ 62.074081][ T29] audit: type=1326 audit(1753570148.338:824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5055 comm="syz.1.505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8d0e3e9a9 code=0x7ffc0000 [ 62.097349][ T29] audit: type=1326 audit(1753570148.338:825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5055 comm="syz.1.505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7ff8d0e3e9a9 code=0x7ffc0000 [ 62.097405][ T29] audit: type=1326 audit(1753570148.338:826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5055 comm="syz.1.505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8d0e3e9a9 code=0x7ffc0000 [ 62.221905][ T5057] syzkaller0: entered promiscuous mode [ 62.221925][ T5057] syzkaller0: entered allmulticast mode [ 62.301005][ T5070] SELinux: Context Ü is not valid (left unmapped). [ 62.307661][ T5070] SELinux: Context  is not valid (left unmapped). [ 63.116872][ T5077] netlink: 'syz.0.510': attribute type 1 has an invalid length. [ 63.404199][ T5074] netlink: 68 bytes leftover after parsing attributes in process `syz.0.510'. [ 63.627243][ T5092] netlink: 4 bytes leftover after parsing attributes in process `syz.3.511'. [ 63.753722][ T5102] loop0: detected capacity change from 0 to 1024 [ 63.782435][ T5102] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 63.822704][ T5102] EXT4-fs (loop0): orphan cleanup on readonly fs [ 63.855321][ T5102] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.516: Invalid block bitmap block 0 in block_group 0 [ 63.897714][ T5102] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.516: Failed to acquire dquot type 0 [ 63.940849][ T5102] EXT4-fs error (device loop0): ext4_free_blocks:6587: comm syz.0.516: Freeing blocks not in datazone - block = 0, count = 4096 [ 63.997336][ T5102] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm syz.0.516: Invalid inode bitmap blk 0 in block_group 0 [ 64.018625][ T51] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:3: Failed to release dquot type 0 [ 64.066406][ T5102] EXT4-fs error (device loop0) in ext4_free_inode:361: Corrupt filesystem [ 64.088189][ T5102] EXT4-fs (loop0): 1 orphan inode deleted [ 64.231428][ T5109] loop3: detected capacity change from 0 to 764 [ 64.461502][ T5114] vhci_hcd: invalid port number 96 [ 64.466691][ T5114] vhci_hcd: default hub control req: 0300 vfffc i0060 l0 [ 64.482763][ T5114] loop1: detected capacity change from 0 to 2048 [ 64.508185][ T5119] vhci_hcd: invalid port number 96 [ 64.513368][ T5119] vhci_hcd: default hub control req: 0300 vfffc i0060 l0 [ 64.528057][ T5119] loop2: detected capacity change from 0 to 128 [ 64.555069][ T5119] ext4 filesystem being mounted at /103/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 64.875793][ T5140] syzkaller0: entered promiscuous mode [ 64.875814][ T5140] syzkaller0: entered allmulticast mode [ 65.055363][ T5145] loop4: detected capacity change from 0 to 1024 [ 65.063652][ T5145] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 65.067499][ T5145] EXT4-fs (loop4): orphan cleanup on readonly fs [ 65.081438][ T5145] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.528: Invalid block bitmap block 0 in block_group 0 [ 65.081605][ T5145] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.528: Failed to acquire dquot type 0 [ 65.081696][ T5145] EXT4-fs error (device loop4): ext4_free_blocks:6587: comm syz.4.528: Freeing blocks not in datazone - block = 0, count = 4096 [ 65.082135][ T5145] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.528: Invalid inode bitmap blk 0 in block_group 0 [ 65.082196][ T5145] EXT4-fs error (device loop4) in ext4_free_inode:361: Corrupt filesystem [ 65.082248][ T5145] EXT4-fs (loop4): 1 orphan inode deleted [ 65.082320][ T3516] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:7: Failed to release dquot type 0 [ 65.168303][ T5124] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 234: padding at end of block bitmap is not set [ 65.355415][ T3308] EXT4-fs unmount: 109 callbacks suppressed [ 65.355430][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.390305][ T5162] loop4: detected capacity change from 0 to 1024 [ 65.390879][ T5162] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 65.391463][ T5162] EXT4-fs (loop4): orphan cleanup on readonly fs [ 65.392127][ T5162] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.536: Invalid block bitmap block 0 in block_group 0 [ 65.392280][ T5162] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.536: Failed to acquire dquot type 0 [ 65.392562][ T5162] EXT4-fs error (device loop4): ext4_free_blocks:6587: comm syz.4.536: Freeing blocks not in datazone - block = 0, count = 4096 [ 65.392717][ T5162] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.536: Invalid inode bitmap blk 0 in block_group 0 [ 65.392780][ T5162] EXT4-fs error (device loop4) in ext4_free_inode:361: Corrupt filesystem [ 65.392946][ T5162] EXT4-fs (loop4): 1 orphan inode deleted [ 65.394698][ T51] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:3: Failed to release dquot type 0 [ 65.397666][ T5162] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 65.407477][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.417859][ T5165] loop4: detected capacity change from 0 to 764 [ 65.706958][ T3312] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 66.242085][ T5188] loop4: detected capacity change from 0 to 1024 [ 66.268319][ T5188] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 66.289485][ T5188] EXT4-fs (loop4): orphan cleanup on readonly fs [ 66.443096][ T5188] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.542: Invalid block bitmap block 0 in block_group 0 [ 66.470138][ T5188] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.542: Failed to acquire dquot type 0 [ 66.482805][ T5188] EXT4-fs error (device loop4): ext4_free_blocks:6587: comm syz.4.542: Freeing blocks not in datazone - block = 0, count = 4096 [ 66.497768][ T5188] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.542: Invalid inode bitmap blk 0 in block_group 0 [ 66.498180][ T51] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:3: Failed to release dquot type 0 [ 66.524007][ T5197] vhci_hcd: invalid port number 96 [ 66.529179][ T5197] vhci_hcd: default hub control req: 0300 vfffc i0060 l0 [ 66.540494][ T5188] EXT4-fs error (device loop4) in ext4_free_inode:361: Corrupt filesystem [ 66.548794][ T5197] loop3: detected capacity change from 0 to 2048 [ 66.556687][ T5188] EXT4-fs (loop4): 1 orphan inode deleted [ 66.579722][ T5188] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 66.600902][ T5197] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.625058][ T5194] netlink: 4 bytes leftover after parsing attributes in process `syz.2.543'. [ 66.664363][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.771149][ T5222] SELinux: failed to load policy [ 66.940082][ T5214] syzkaller0: entered promiscuous mode [ 66.940106][ T5214] syzkaller0: entered allmulticast mode [ 66.941495][ T29] kauditd_printk_skb: 301 callbacks suppressed [ 66.941522][ T29] audit: type=1326 audit(1753570153.378:1116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5213 comm="syz.4.550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2bc98e9a9 code=0x7ffc0000 [ 66.941743][ T29] audit: type=1326 audit(1753570153.378:1117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5213 comm="syz.4.550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2bc98e9a9 code=0x7ffc0000 [ 66.947356][ T29] audit: type=1326 audit(1753570153.378:1118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5213 comm="syz.4.550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=280 compat=0 ip=0x7fa2bc98e9a9 code=0x7ffc0000 [ 66.947400][ T29] audit: type=1326 audit(1753570153.378:1119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5213 comm="syz.4.550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2bc98e9a9 code=0x7ffc0000 [ 66.947491][ T29] audit: type=1326 audit(1753570153.378:1120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5213 comm="syz.4.550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2bc98e9a9 code=0x7ffc0000 [ 67.068323][ T29] audit: type=1326 audit(1753570153.488:1121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5224 comm="syz.1.556" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff8d0e3e9a9 code=0x0 [ 67.308240][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.382137][ T5239] loop4: detected capacity change from 0 to 1024 [ 67.389292][ T5239] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 67.687582][ T5242] loop3: detected capacity change from 0 to 1024 [ 67.740012][ T5242] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 67.772628][ T5242] EXT4-fs (loop3): orphan cleanup on readonly fs [ 67.792441][ T5242] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.560: Invalid block bitmap block 0 in block_group 0 [ 67.836809][ T5242] Quota error (device loop3): write_blk: dquota write failed [ 67.844270][ T5242] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 67.868416][ T5242] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.560: Failed to acquire dquot type 0 [ 67.881173][ T5242] EXT4-fs error (device loop3): ext4_free_blocks:6587: comm syz.3.560: Freeing blocks not in datazone - block = 0, count = 4096 [ 67.897867][ T5242] EXT4-fs error (device loop3): ext4_read_inode_bitmap:139: comm syz.3.560: Invalid inode bitmap blk 0 in block_group 0 [ 67.920521][ T5242] EXT4-fs error (device loop3) in ext4_free_inode:361: Corrupt filesystem [ 67.923559][ T57] Quota error (device loop3): do_check_range: Getting block 0 out of range 1-8 [ 67.938345][ T57] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:4: Failed to release dquot type 0 [ 67.997837][ T5247] loop0: detected capacity change from 0 to 1024 [ 68.047473][ T5242] EXT4-fs (loop3): 1 orphan inode deleted [ 68.060422][ T5247] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 68.097122][ T5247] EXT4-fs (loop0): orphan cleanup on readonly fs [ 68.107204][ T5242] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 68.137628][ T5247] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.562: Invalid block bitmap block 0 in block_group 0 [ 68.189728][ T5247] Quota error (device loop0): write_blk: dquota write failed [ 68.208772][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.221174][ T5247] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.562: Failed to acquire dquot type 0 [ 68.267343][ T5247] EXT4-fs error (device loop0): ext4_free_blocks:6587: comm syz.0.562: Freeing blocks not in datazone - block = 0, count = 4096 [ 68.305180][ T5255] loop2: detected capacity change from 0 to 1024 [ 68.318298][ T5247] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm syz.0.562: Invalid inode bitmap blk 0 in block_group 0 [ 68.338860][ T5255] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 68.364588][ T5247] EXT4-fs error (device loop0) in ext4_free_inode:361: Corrupt filesystem [ 68.383778][ T5255] EXT4-fs (loop2): orphan cleanup on readonly fs [ 68.398384][ T5247] EXT4-fs (loop0): 1 orphan inode deleted [ 68.405005][ T5255] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.566: Invalid block bitmap block 0 in block_group 0 [ 68.431186][ T5255] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.566: Failed to acquire dquot type 0 [ 68.459137][ T5255] EXT4-fs error (device loop2): ext4_free_blocks:6587: comm syz.2.566: Freeing blocks not in datazone - block = 0, count = 4096 [ 68.482912][ T5255] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.566: Invalid inode bitmap blk 0 in block_group 0 [ 68.516493][ T5255] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem [ 68.526052][ T5255] EXT4-fs (loop2): 1 orphan inode deleted [ 68.669736][ T3516] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:7: Failed to release dquot type 0 [ 68.693536][ T3516] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:7: Failed to release dquot type 0 [ 68.717927][ T5255] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 68.768961][ T5247] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 68.791752][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.812641][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.885220][ T5278] netlink: 4 bytes leftover after parsing attributes in process `syz.3.564'. [ 68.901201][ T5281] loop0: detected capacity change from 0 to 1024 [ 68.919290][ T5281] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 68.932716][ T5281] EXT4-fs (loop0): orphan cleanup on readonly fs [ 68.941084][ T5281] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.575: Invalid block bitmap block 0 in block_group 0 [ 68.967879][ T5281] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.575: Failed to acquire dquot type 0 [ 68.989411][ T5281] EXT4-fs error (device loop0): ext4_free_blocks:6587: comm syz.0.575: Freeing blocks not in datazone - block = 0, count = 4096 [ 69.022611][ T5281] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm syz.0.575: Invalid inode bitmap blk 0 in block_group 0 [ 69.036127][ T5281] EXT4-fs error (device loop0) in ext4_free_inode:361: Corrupt filesystem [ 69.045157][ T51] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:3: Failed to release dquot type 0 [ 69.053484][ T5281] EXT4-fs (loop0): 1 orphan inode deleted [ 69.063106][ T5281] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 69.099436][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.104635][ T5287] syzkaller0: entered promiscuous mode [ 69.113968][ T5287] syzkaller0: entered allmulticast mode [ 69.154132][ T5294] loop3: detected capacity change from 0 to 1024 [ 69.161129][ T5294] EXT4-fs: Ignoring removed orlov option [ 69.166988][ T5294] EXT4-fs: Ignoring removed nomblk_io_submit option [ 69.176661][ T5292] vhci_hcd: invalid port number 96 [ 69.181943][ T5292] vhci_hcd: default hub control req: 0300 vfffc i0060 l0 [ 69.183884][ T5294] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.202153][ T5292] loop0: detected capacity change from 0 to 2048 [ 69.214457][ T5294] netlink: 16 bytes leftover after parsing attributes in process `syz.3.579'. [ 69.240866][ T5292] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.371459][ T5306] syzkaller0: entered promiscuous mode [ 69.371475][ T5306] syzkaller0: entered allmulticast mode [ 69.457147][ T5312] loop1: detected capacity change from 0 to 1024 [ 69.458626][ T5312] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 69.479157][ T5312] EXT4-fs (loop1): orphan cleanup on readonly fs [ 69.479741][ T5312] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.583: Invalid block bitmap block 0 in block_group 0 [ 69.479828][ T5312] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.583: Failed to acquire dquot type 0 [ 69.510987][ T5312] EXT4-fs error (device loop1): ext4_free_blocks:6587: comm syz.1.583: Freeing blocks not in datazone - block = 0, count = 4096 [ 69.511274][ T5312] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.583: Invalid inode bitmap blk 0 in block_group 0 [ 69.511338][ T5312] EXT4-fs error (device loop1) in ext4_free_inode:361: Corrupt filesystem [ 69.511385][ T5312] EXT4-fs (loop1): 1 orphan inode deleted [ 69.511457][ T51] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:3: Failed to release dquot type 0 [ 69.512229][ T5312] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 69.541289][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.983095][ T5330] netlink: 4 bytes leftover after parsing attributes in process `syz.2.587'. [ 70.011285][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.021421][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.122483][ T5337] loop0: detected capacity change from 0 to 164 [ 70.227193][ T5343] uprobe: syz.2.594:5343 failed to unregister, leaking uprobe [ 70.247301][ T5339] netlink: 'syz.4.592': attribute type 64 has an invalid length. [ 70.258900][ T5336] syzkaller0: entered promiscuous mode [ 70.264404][ T5336] syzkaller0: entered allmulticast mode [ 70.322473][ T5339] capability: warning: `syz.4.592' uses 32-bit capabilities (legacy support in use) [ 70.416074][ T5353] netlink: 4 bytes leftover after parsing attributes in process `syz.0.596'. [ 70.418281][ T5357] netlink: 8 bytes leftover after parsing attributes in process `syz.3.599'. [ 70.459043][ T5353] hsr_slave_0 (unregistering): left promiscuous mode [ 70.733757][ T5382] loop3: detected capacity change from 0 to 512 [ 70.763215][ T5378] syzkaller0: entered promiscuous mode [ 70.768752][ T5378] syzkaller0: entered allmulticast mode [ 70.781502][ T5382] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.814577][ T5382] ext4 filesystem being mounted at /108/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.927733][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.089617][ T5397] syzkaller0: entered promiscuous mode [ 71.095150][ T5397] syzkaller0: entered allmulticast mode [ 71.300432][ T5420] loop2: detected capacity change from 0 to 512 [ 71.307065][ T5420] EXT4-fs: Ignoring removed orlov option [ 71.320292][ T5420] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 71.330886][ T5420] EXT4-fs (loop2): orphan cleanup on readonly fs [ 71.341624][ T5420] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.619: bg 0: block 248: padding at end of block bitmap is not set [ 71.356071][ T5420] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.619: Failed to acquire dquot type 1 [ 71.367911][ T5420] EXT4-fs (loop2): 1 truncate cleaned up [ 71.374091][ T5424] loop1: detected capacity change from 0 to 1024 [ 71.374484][ T5420] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 71.398190][ T5424] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 71.419465][ T5424] EXT4-fs (loop1): orphan cleanup on readonly fs [ 71.430579][ T5420] syz.2.619 (5420) used greatest stack depth: 9224 bytes left [ 71.440416][ T5424] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.620: Invalid block bitmap block 0 in block_group 0 [ 71.464146][ T5424] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.620: Failed to acquire dquot type 0 [ 71.475824][ T5424] EXT4-fs error (device loop1): ext4_free_blocks:6587: comm syz.1.620: Freeing blocks not in datazone - block = 0, count = 4096 [ 71.490209][ T5424] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.620: Invalid inode bitmap blk 0 in block_group 0 [ 71.503579][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.518270][ T5424] EXT4-fs error (device loop1) in ext4_free_inode:361: Corrupt filesystem [ 71.527234][ T5424] EXT4-fs (loop1): 1 orphan inode deleted [ 71.675231][ T382] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:5: Failed to release dquot type 0 [ 71.690786][ T5424] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 71.715680][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.906666][ T5439] syzkaller0: entered promiscuous mode [ 71.912340][ T5439] syzkaller0: entered allmulticast mode [ 71.981025][ T5454] loop4: detected capacity change from 0 to 1024 [ 71.988679][ T5454] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 71.999574][ T5454] EXT4-fs (loop4): orphan cleanup on readonly fs [ 72.006811][ T5454] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.631: Invalid block bitmap block 0 in block_group 0 [ 72.020984][ T5454] __quota_error: 778 callbacks suppressed [ 72.020997][ T5454] Quota error (device loop4): write_blk: dquota write failed [ 72.034178][ T5454] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 72.045075][ T5454] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.631: Failed to acquire dquot type 0 [ 72.056720][ T5454] EXT4-fs error (device loop4): ext4_free_blocks:6587: comm syz.4.631: Freeing blocks not in datazone - block = 0, count = 4096 [ 72.070314][ T5454] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.631: Invalid inode bitmap blk 0 in block_group 0 [ 72.083438][ T5454] EXT4-fs error (device loop4) in ext4_free_inode:361: Corrupt filesystem [ 72.093335][ T12] Quota error (device loop4): do_check_range: Getting block 0 out of range 1-8 [ 72.094795][ T5458] vhci_hcd: invalid port number 96 [ 72.102303][ T12] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:0: Failed to release dquot type 0 [ 72.102336][ T5454] EXT4-fs (loop4): 1 orphan inode deleted [ 72.107431][ T5458] vhci_hcd: default hub control req: 0300 vfffc i0060 l0 [ 72.132935][ T5454] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 72.146838][ T5458] loop1: detected capacity change from 0 to 2048 [ 72.164115][ T5458] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.189392][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.198547][ T5464] loop3: detected capacity change from 0 to 1024 [ 72.205689][ T5464] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 72.224714][ T5464] EXT4-fs (loop3): orphan cleanup on readonly fs [ 72.231865][ T5464] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.633: Invalid block bitmap block 0 in block_group 0 [ 72.252807][ T5464] Quota error (device loop3): write_blk: dquota write failed [ 72.260266][ T5464] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 72.260832][ T5464] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.633: Failed to acquire dquot type 0 [ 72.261444][ T5464] EXT4-fs error (device loop3): ext4_free_blocks:6587: comm syz.3.633: Freeing blocks not in datazone - block = 0, count = 4096 [ 72.295937][ T5464] EXT4-fs error (device loop3): ext4_read_inode_bitmap:139: comm syz.3.633: Invalid inode bitmap blk 0 in block_group 0 [ 72.296069][ T5464] EXT4-fs error (device loop3) in ext4_free_inode:361: Corrupt filesystem [ 72.296186][ T5464] EXT4-fs (loop3): 1 orphan inode deleted [ 72.296235][ T51] Quota error (device loop3): do_check_range: Getting block 0 out of range 1-8 [ 72.296258][ T51] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:3: Failed to release dquot type 0 [ 72.296689][ T5464] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 72.375378][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.630260][ T29] audit: type=1400 audit(1753570159.068:1884): avc: denied { create } for pid=5484 comm="syz.2.640" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 72.651635][ T29] audit: type=1400 audit(1753570159.088:1885): avc: denied { connect } for pid=5484 comm="syz.2.640" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 72.671286][ T29] audit: type=1400 audit(1753570159.088:1886): avc: denied { write } for pid=5484 comm="syz.2.640" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 72.781801][ T5485] loop2: detected capacity change from 0 to 512 [ 72.800719][ T5485] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.800784][ T5485] ext4 filesystem being mounted at /121/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 72.814950][ T5485] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 72.839741][ T5485] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 33 with error 28 [ 72.839795][ T5485] EXT4-fs (loop2): This should not happen!! Data will be lost [ 72.839795][ T5485] [ 72.839809][ T5485] EXT4-fs (loop2): Total free blocks count 0 [ 72.839821][ T5485] EXT4-fs (loop2): Free/Dirty block details [ 72.839831][ T5485] EXT4-fs (loop2): free_blocks=65280 [ 72.839842][ T5485] EXT4-fs (loop2): dirty_blocks=33 [ 72.839853][ T5485] EXT4-fs (loop2): Block reservation details [ 72.839877][ T5485] EXT4-fs (loop2): i_reserved_data_blocks=33 [ 72.943695][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.959149][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.074772][ T5494] syzkaller0: entered promiscuous mode [ 73.080322][ T5494] syzkaller0: entered allmulticast mode [ 73.113908][ T5499] netlink: 4 bytes leftover after parsing attributes in process `syz.1.643'. [ 73.294955][ T29] audit: type=1326 audit(1753570159.728:1887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5503 comm="syz.4.645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2bc98e9a9 code=0x7ffc0000 [ 73.411700][ T5508] FAULT_INJECTION: forcing a failure. [ 73.411700][ T5508] name failslab, interval 1, probability 0, space 0, times 0 [ 73.424482][ T5508] CPU: 1 UID: 0 PID: 5508 Comm: syz.3.647 Not tainted 6.16.0-rc7-syzkaller-00127-g302f88ff3584 #0 PREEMPT(voluntary) [ 73.424505][ T5508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 73.424561][ T5508] Call Trace: [ 73.424567][ T5508] [ 73.424575][ T5508] __dump_stack+0x1d/0x30 [ 73.424595][ T5508] dump_stack_lvl+0xe8/0x140 [ 73.424611][ T5508] dump_stack+0x15/0x1b [ 73.424626][ T5508] should_fail_ex+0x265/0x280 [ 73.424721][ T5508] should_failslab+0x8c/0xb0 [ 73.424742][ T5508] kmem_cache_alloc_noprof+0x50/0x310 [ 73.424766][ T5508] ? alloc_empty_file+0x76/0x200 [ 73.424814][ T5508] alloc_empty_file+0x76/0x200 [ 73.424836][ T5508] alloc_file_pseudo+0xc6/0x160 [ 73.424929][ T5508] __shmem_file_setup+0x1de/0x210 [ 73.424998][ T5508] shmem_file_setup+0x3b/0x50 [ 73.425045][ T5508] __se_sys_memfd_create+0x2c3/0x590 [ 73.425090][ T5508] __x64_sys_memfd_create+0x31/0x40 [ 73.425119][ T5508] x64_sys_call+0x122f/0x2fb0 [ 73.425154][ T5508] do_syscall_64+0xd2/0x200 [ 73.425216][ T5508] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 73.425241][ T5508] ? clear_bhb_loop+0x40/0x90 [ 73.425260][ T5508] ? clear_bhb_loop+0x40/0x90 [ 73.425279][ T5508] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.425298][ T5508] RIP: 0033:0x7f093804e9a9 [ 73.425387][ T5508] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 73.425406][ T5508] RSP: 002b:00007f09366aee18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 73.425424][ T5508] RAX: ffffffffffffffda RBX: 000000000000023f RCX: 00007f093804e9a9 [ 73.425476][ T5508] RDX: 00007f09366aeef0 RSI: 0000000000000000 RDI: 00007f09380d16fc [ 73.425490][ T5508] RBP: 0000200000000540 R08: 00007f09366aebb7 R09: 00007f09366aee40 [ 73.425503][ T5508] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000280 [ 73.425514][ T5508] R13: 00007f09366aeef0 R14: 00007f09366aeeb0 R15: 0000200000000180 [ 73.425532][ T5508] [ 73.434705][ T5504] syzkaller0: entered promiscuous mode [ 73.631255][ T5504] syzkaller0: entered allmulticast mode [ 73.794306][ T5519] vhci_hcd: invalid port number 96 [ 73.799513][ T5519] vhci_hcd: default hub control req: 0300 vfffc i0060 l0 [ 73.814499][ T5513] syzkaller0: entered promiscuous mode [ 73.820101][ T5513] syzkaller0: entered allmulticast mode [ 73.836490][ T5519] loop1: detected capacity change from 0 to 128 [ 73.867029][ T5519] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 73.906071][ T5519] ext4 filesystem being mounted at /113/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 74.133217][ T5530] syzkaller0: entered promiscuous mode [ 74.138748][ T5530] syzkaller0: entered allmulticast mode [ 74.150766][ T5538] loop4: detected capacity change from 0 to 1024 [ 74.158660][ T5538] EXT4-fs: Ignoring removed nobh option [ 74.158752][ T5538] EXT4-fs: Ignoring removed bh option [ 74.184058][ T5538] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.334090][ T5548] loop3: detected capacity change from 0 to 1024 [ 74.336678][ T5548] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 74.366854][ T5548] can0: slcan on ttyS3. [ 74.408518][ T5548] can0 (unregistered): slcan off ttyS3. [ 74.414204][ T5548] can0: slcan on ttyS3. [ 74.435543][ T5548] syz.3.659 uses obsolete (PF_INET,SOCK_PACKET) [ 74.437059][ T5548] process 'syz.3.659' launched './file0' with NULL argv: empty string added [ 74.618268][ T5547] can0 (unregistered): slcan off ttyS3. [ 74.661336][ T5568] loop3: detected capacity change from 0 to 512 [ 74.675748][ T5568] EXT4-fs error (device loop3): ext4_iget_extra_inode:5035: inode #15: comm syz.3.661: corrupted in-inode xattr: invalid ea_ino [ 74.691328][ T5568] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.661: couldn't read orphan inode 15 (err -117) [ 74.705573][ T5568] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.719749][ T5568] EXT4-fs error (device loop3): ext4_add_entry:2417: inode #2: comm syz.3.661: Directory hole found for htree leaf block 0 [ 74.737940][ T3308] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 74.761944][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.795385][ T5578] loop0: detected capacity change from 0 to 1024 [ 74.821017][ T5578] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 74.833516][ T5578] EXT4-fs (loop0): orphan cleanup on readonly fs [ 74.852472][ T5584] loop1: detected capacity change from 0 to 1024 [ 74.865156][ T5583] netlink: 'syz.3.663': attribute type 10 has an invalid length. [ 74.875337][ T5584] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 74.887938][ T5578] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.664: Invalid block bitmap block 0 in block_group 0 [ 74.898701][ T5584] EXT4-fs (loop1): orphan cleanup on readonly fs [ 74.911825][ T5584] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.665: Invalid block bitmap block 0 in block_group 0 [ 74.929386][ T5583] team0: Port device dummy0 added [ 74.934670][ T5584] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.665: Failed to acquire dquot type 0 [ 74.935394][ T5591] netlink: 'syz.3.663': attribute type 10 has an invalid length. [ 74.945867][ T5578] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.664: Failed to acquire dquot type 0 [ 74.966255][ T5584] EXT4-fs error (device loop1): ext4_free_blocks:6587: comm syz.1.665: Freeing blocks not in datazone - block = 0, count = 4096 [ 74.979837][ T5578] EXT4-fs error (device loop0): ext4_free_blocks:6587: comm syz.0.664: Freeing blocks not in datazone - block = 0, count = 4096 [ 74.993457][ T5591] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 75.004202][ T5584] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.665: Invalid inode bitmap blk 0 in block_group 0 [ 75.016897][ T5591] team0: Failed to send options change via netlink (err -105) [ 75.017225][ T5578] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm syz.0.664: Invalid inode bitmap blk 0 in block_group 0 [ 75.024407][ T5591] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 75.045894][ T5591] team0: Port device dummy0 removed [ 75.051272][ T5584] EXT4-fs error (device loop1) in ext4_free_inode:361: Corrupt filesystem [ 75.058419][ T5583] loop3: detected capacity change from 0 to 512 [ 75.059943][ T51] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:3: Failed to release dquot type 0 [ 75.079558][ T5584] EXT4-fs (loop1): 1 orphan inode deleted [ 75.085478][ T51] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:3: Failed to release dquot type 0 [ 75.090662][ T5591] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 75.105876][ T5578] EXT4-fs error (device loop0) in ext4_free_inode:361: Corrupt filesystem [ 75.106333][ T5584] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 75.115292][ T5578] EXT4-fs (loop0): 1 orphan inode deleted [ 75.135563][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.138685][ T5578] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 75.158867][ T5584] syz.1.665 (5584) used greatest stack depth: 8976 bytes left [ 75.168904][ T5583] EXT4-fs (loop3): too many log groups per flexible block group [ 75.176607][ T5583] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 75.192666][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.192725][ T5583] EXT4-fs (loop3): mount failed [ 75.217936][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.367383][ T5601] syzkaller0: entered promiscuous mode [ 75.372904][ T5601] syzkaller0: entered allmulticast mode [ 75.389348][ T5610] loop3: detected capacity change from 0 to 1024 [ 75.406123][ T5610] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 75.417121][ T5612] netlink: 'syz.2.672': attribute type 3 has an invalid length. [ 75.422928][ T5614] netlink: 4 bytes leftover after parsing attributes in process `syz.1.667'. [ 75.434314][ T5610] EXT4-fs (loop3): orphan cleanup on readonly fs [ 75.443149][ T5610] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.671: Invalid block bitmap block 0 in block_group 0 [ 75.457120][ T5610] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.671: Failed to acquire dquot type 0 [ 75.469654][ T5610] EXT4-fs error (device loop3): ext4_free_blocks:6587: comm syz.3.671: Freeing blocks not in datazone - block = 0, count = 4096 [ 75.483225][ T5610] EXT4-fs error (device loop3): ext4_read_inode_bitmap:139: comm syz.3.671: Invalid inode bitmap blk 0 in block_group 0 [ 75.483303][ T5610] EXT4-fs error (device loop3) in ext4_free_inode:361: Corrupt filesystem [ 75.483358][ T5610] EXT4-fs (loop3): 1 orphan inode deleted [ 75.483425][ T12] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:0: Failed to release dquot type 0 [ 75.483963][ T5610] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 75.500114][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.517918][ T5618] loop3: detected capacity change from 0 to 512 [ 75.525143][ T5618] EXT4-fs error (device loop3): ext4_iget_extra_inode:5035: inode #15: comm syz.3.673: corrupted in-inode xattr: invalid ea_ino [ 75.525272][ T5618] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.673: couldn't read orphan inode 15 (err -117) [ 75.525691][ T5618] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.526175][ T5618] FAULT_INJECTION: forcing a failure. [ 75.526175][ T5618] name failslab, interval 1, probability 0, space 0, times 0 [ 75.526197][ T5618] CPU: 0 UID: 0 PID: 5618 Comm: syz.3.673 Not tainted 6.16.0-rc7-syzkaller-00127-g302f88ff3584 #0 PREEMPT(voluntary) [ 75.526222][ T5618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 75.526233][ T5618] Call Trace: [ 75.526238][ T5618] [ 75.526245][ T5618] __dump_stack+0x1d/0x30 [ 75.526268][ T5618] dump_stack_lvl+0xe8/0x140 [ 75.526308][ T5618] dump_stack+0x15/0x1b [ 75.526325][ T5618] should_fail_ex+0x265/0x280 [ 75.526358][ T5618] should_failslab+0x8c/0xb0 [ 75.526399][ T5618] kmem_cache_alloc_lru_noprof+0x55/0x310 [ 75.526494][ T5618] ? ext4_alloc_inode+0x38/0x310 [ 75.526521][ T5618] ? __pfx_ext4_alloc_inode+0x10/0x10 [ 75.526556][ T5618] ext4_alloc_inode+0x38/0x310 [ 75.526580][ T5618] ? __pfx_ext4_alloc_inode+0x10/0x10 [ 75.526602][ T5618] alloc_inode+0x40/0x170 [ 75.526634][ T5618] new_inode+0x1d/0xe0 [ 75.526732][ T5618] __ext4_new_inode+0x166/0x22e0 [ 75.526761][ T5618] ? __d_rehash+0x139/0x1f0 [ 75.526828][ T5618] ext4_create+0x16e/0x2f0 [ 75.526859][ T5618] ? __pfx_ext4_create+0x10/0x10 [ 75.526889][ T5618] path_openat+0x1102/0x2170 [ 75.527056][ T5618] do_filp_open+0x109/0x230 [ 75.527091][ T5618] do_sys_openat2+0xa6/0x110 [ 75.527119][ T5618] __x64_sys_creat+0x65/0x90 [ 75.527157][ T5618] x64_sys_call+0x114d/0x2fb0 [ 75.527196][ T5618] do_syscall_64+0xd2/0x200 [ 75.527217][ T5618] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 75.527300][ T5618] ? clear_bhb_loop+0x40/0x90 [ 75.527319][ T5618] ? clear_bhb_loop+0x40/0x90 [ 75.527403][ T5618] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.527423][ T5618] RIP: 0033:0x7f093804e9a9 [ 75.527438][ T5618] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 75.527457][ T5618] RSP: 002b:00007f09366af038 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 75.527482][ T5618] RAX: ffffffffffffffda RBX: 00007f0938275fa0 RCX: 00007f093804e9a9 [ 75.527515][ T5618] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000100 [ 75.527525][ T5618] RBP: 00007f09366af090 R08: 0000000000000000 R09: 0000000000000000 [ 75.527536][ T5618] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 75.527546][ T5618] R13: 0000000000000000 R14: 00007f0938275fa0 R15: 00007ffe4538ac28 [ 75.527564][ T5618] [ 75.563156][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.612188][ T5622] vhci_hcd: invalid port number 96 [ 75.883886][ T5624] loop2: detected capacity change from 0 to 2048 [ 75.890758][ T5622] vhci_hcd: default hub control req: 0300 vfffc i0060 l0 [ 75.975903][ T5626] netlink: 12 bytes leftover after parsing attributes in process `syz.4.676'. [ 76.020654][ T5624] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.126053][ T5637] loop1: detected capacity change from 0 to 1024 [ 76.143259][ T5637] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 76.144792][ T5637] EXT4-fs (loop1): orphan cleanup on readonly fs [ 76.145396][ T5637] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.679: Invalid block bitmap block 0 in block_group 0 [ 76.145471][ T5637] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.679: Failed to acquire dquot type 0 [ 76.145781][ T5637] EXT4-fs error (device loop1): ext4_free_blocks:6587: comm syz.1.679: Freeing blocks not in datazone - block = 0, count = 4096 [ 76.146165][ T5637] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.679: Invalid inode bitmap blk 0 in block_group 0 [ 76.146315][ T5637] EXT4-fs error (device loop1) in ext4_free_inode:361: Corrupt filesystem [ 76.146372][ T5637] EXT4-fs (loop1): 1 orphan inode deleted [ 76.146416][ T57] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:4: Failed to release dquot type 0 [ 76.146856][ T5637] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 76.224038][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.237340][ T5641] SELinux: failed to load policy [ 76.260317][ T5645] loop1: detected capacity change from 0 to 1024 [ 76.285211][ T5645] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 76.359285][ T5648] netlink: 28 bytes leftover after parsing attributes in process `syz.3.680'. [ 76.359304][ T5648] netlink: 28 bytes leftover after parsing attributes in process `syz.3.680'. [ 76.368252][ T5645] EXT4-fs (loop1): orphan cleanup on readonly fs [ 76.404974][ T5645] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.682: Invalid block bitmap block 0 in block_group 0 [ 76.420684][ T5645] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.682: Failed to acquire dquot type 0 [ 76.432348][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.461297][ T5645] EXT4-fs error (device loop1): ext4_free_blocks:6587: comm syz.1.682: Freeing blocks not in datazone - block = 0, count = 4096 [ 76.475649][ T5645] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.682: Invalid inode bitmap blk 0 in block_group 0 [ 76.488895][ T12] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:0: Failed to release dquot type 0 [ 76.494715][ T5645] EXT4-fs error (device loop1) in ext4_free_inode:361: Corrupt filesystem [ 76.509337][ T5645] EXT4-fs (loop1): 1 orphan inode deleted [ 76.510731][ T5658] netlink: 'syz.2.685': attribute type 3 has an invalid length. [ 76.515835][ T5645] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 76.561013][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.593955][ T5656] syzkaller0: entered promiscuous mode [ 76.599509][ T5656] syzkaller0: entered allmulticast mode [ 76.728880][ T5670] netlink: 4 bytes leftover after parsing attributes in process `syz.2.687'. [ 76.802399][ T5666] ================================================================== [ 76.810525][ T5666] BUG: KCSAN: data-race in shmem_fallocate / shmem_fault [ 76.817568][ T5666] [ 76.819890][ T5666] write to 0xffff88811ac462d0 of 8 bytes by task 5671 on cpu 1: [ 76.827517][ T5666] shmem_fallocate+0x221/0x840 [ 76.832280][ T5666] vfs_fallocate+0x410/0x450 [ 76.836863][ T5666] madvise_do_behavior+0x1152/0x1f20 [ 76.842142][ T5666] do_madvise+0x103/0x190 [ 76.846466][ T5666] __x64_sys_madvise+0x64/0x80 [ 76.851224][ T5666] x64_sys_call+0x2455/0x2fb0 [ 76.855895][ T5666] do_syscall_64+0xd2/0x200 [ 76.860389][ T5666] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.866280][ T5666] [ 76.868595][ T5666] read to 0xffff88811ac462d0 of 8 bytes by task 5666 on cpu 0: [ 76.876123][ T5666] shmem_fault+0x90/0x250 [ 76.880451][ T5666] __do_fault+0xbc/0x200 [ 76.884684][ T5666] handle_mm_fault+0xf78/0x2be0 [ 76.889526][ T5666] __get_user_pages+0x1036/0x1fb0 [ 76.894541][ T5666] __mm_populate+0x243/0x3a0 [ 76.899123][ T5666] vm_mmap_pgoff+0x232/0x2e0 [ 76.903707][ T5666] ksys_mmap_pgoff+0xc2/0x310 [ 76.908384][ T5666] x64_sys_call+0x1602/0x2fb0 [ 76.913061][ T5666] do_syscall_64+0xd2/0x200 [ 76.917555][ T5666] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.923437][ T5666] [ 76.925747][ T5666] value changed: 0x0000000000000000 -> 0xffffc9000feb3be8 [ 76.932840][ T5666] [ 76.935152][ T5666] Reported by Kernel Concurrency Sanitizer on: [ 76.941292][ T5666] CPU: 0 UID: 0 PID: 5666 Comm: syz.1.689 Not tainted 6.16.0-rc7-syzkaller-00127-g302f88ff3584 #0 PREEMPT(voluntary) [ 76.953609][ T5666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 76.963656][ T5666] ================================================================== [ 77.498714][ T29] kauditd_printk_skb: 291 callbacks suppressed [ 77.498727][ T29] audit: type=1400 audit(1753570163.938:2164): avc: denied { unmount } for pid=3308 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 77.525096][ T29] audit: type=1400 audit(1753570163.958:2165): avc: denied { unmount } for pid=3308 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1