last executing test programs: 2.341071979s ago: executing program 3 (id=1080): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xd, &(0x7f00000004c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0xf}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) syz_clone(0x40100000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r2}, 0x10) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x4}, 0x0, 0x0) 1.869165648s ago: executing program 4 (id=1088): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x34, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1400, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0xc, 0x10001, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r6 = dup(r5) write$P9_RLERRORu(r6, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r6, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r6, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfd', @ANYRESHEX=r6]) open(&(0x7f00009e1000)='./file0\x00', 0x48141, 0xfeff) creat(&(0x7f00000003c0)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0xb00, r3, {0x9, 0x7}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x14, 0x2, [@TCA_CGROUP_EMATCHES={0x10, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xb}}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x90}, 0x40000) 1.756403787s ago: executing program 4 (id=1091): r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000500)={[{@grpquota}, {@nojournal_checksum}, {@barrier_val={'barrier', 0x3d, 0x9ef}}, {@dioread_lock}, {@data_err_ignore}, {@mb_optimize_scan}, {@dioread_nolock}, {@jqfmt_vfsv1}, {@abort}, {@journal_dev={'journal_dev', 0x3d, 0x2}}, {@norecovery}, {@errors_remount}]}, 0xfd, 0x570, &(0x7f00000019c0)="$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") r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r1, 0x6, 0x1a, 0x0, 0x0) r2 = signalfd(r0, &(0x7f0000000280)={[0x3]}, 0x8) getsockopt$PNPIPE_INITSTATE(r2, 0x113, 0x4, &(0x7f00000002c0), &(0x7f0000000300)=0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="090000a3e9cd6768c4828bc93e10b9dbc37b9417", @ANYRES32, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r3, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)='%-010d \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000800)={{r4}, &(0x7f0000000780)=0x40000000, &(0x7f00000007c0)='%pS \x00', 0x2}, 0x20) openat$autofs(0xffffffffffffff9c, &(0x7f0000000180), 0x18a03, 0x0) socket(0x11, 0x3, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r6 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x29ba, 0x80, 0x1, 0x357}, &(0x7f0000000080)=0x0, &(0x7f0000000340)=0x0) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000015c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b7030000010000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$packet(0x11, 0x3, 0x300) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r12 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f0000000040)={'vcan0\x00', @broadcast}) write$tun(r11, &(0x7f0000003040)=ANY=[@ANYBLOB="0800080000030000010000000000450000280000000000899078000000000300000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], 0x36) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r10}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2c, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x42, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, {0x2}}) io_uring_enter(r6, 0x47bc, 0x2, 0x8, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) r13 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000340)={'gre0\x00'}) 1.699736022s ago: executing program 1 (id=1092): r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0xf503, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = syz_io_uring_setup(0x497, &(0x7f0000000540)={0x0, 0x4660, 0x400, 0x3, 0x285}, &(0x7f00000004c0)=0x0, &(0x7f0000000280)=0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xb, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa50}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r5, 0x0, 0x400000000000006}, 0x18) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)={0x30, r7, 0xc4fc9e906872338b, 0x70bd2a, 0x0, {{0x15}, {@void, @val={0xc, 0x99, {0x4, 0x3a}}}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x4, 0x3, 0x0, 0x0}]}]}]}]}, 0x30}}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r1, 0x0, 0x0}) io_uring_enter(r2, 0x40f9, 0x217, 0x48, 0x0, 0xffa1) dup3(r2, r0, 0x80000) fchdir(0xffffffffffffffff) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') 1.698764592s ago: executing program 0 (id=1093): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000780), r0) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000080)='./file1\x00', 0x8, &(0x7f0000000200)={[{@dots}, {@fat=@check_normal}, {@nodots}, {@nodots}, {@nodots}, {@dots}, {@fat=@flush}, {@nodots}, {@fat=@nfs_nostale_ro}, {@nodots}, {@nodots}, {@nodots}, {@dots}, {@nodots}, {@nodots}, {@dots}, {@nodots}, {@fat=@nfs}, {@dots}, {@dots}, {@dots}, {@fat=@check_normal}]}, 0xfd, 0x1bf, &(0x7f0000000840)="$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") mount$nfs(&(0x7f0000000000)='.\\\xbf. ', &(0x7f0000000140)='./file0\x00', 0x0, 0x2000, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x6, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f00000001c0)='cpu>00\t&&') bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x30000c6, &(0x7f00000000c0), 0x2, 0x572, &(0x7f0000001600)="$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") syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f00000001c0)={[{@nobh}, {@jqfmt_vfsv0}, {@data_err_ignore}]}, 0x3, 0x4cd, &(0x7f0000000280)="$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") creat(0x0, 0x102) io_submit(0x0, 0x0, &(0x7f0000000540)) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x48a, &(0x7f0000000000)={[{@jqfmt_vfsold}, {@usrjquota, 0x22}, {@errors_continue}, {@noload}, {@data_err_ignore}, {@usrjquota, 0x22}, {@errors_continue}, {@errors_remount}, {@data_writeback}]}, 0x1, 0x45a, &(0x7f0000002000)="$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") mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2200020, &(0x7f0000000000)) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x20042, 0x1) fallocate(r5, 0x0, 0x0, 0x8000c62) r6 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) sendfile(r6, r6, 0x0, 0x100000800000009) 1.639353877s ago: executing program 2 (id=1094): r0 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r2}, 0x10) mq_notify(r0, 0x0) 1.638646237s ago: executing program 2 (id=1095): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendfile(r0, r0, 0x0, 0x7ff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002ec0)=ANY=[@ANYBLOB="54020e6e", @ANYRES16=r3, @ANYBLOB="5953fdfffffffddbdf256b00000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007200000010001d800c00008008000d8004000380"], 0x38}}, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), r4) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x80000, 0x0, 0x0, 0x41100}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x1, 0x7ffc1ffe}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r6, 0xffffffffffffffff}, 0x4) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$VFAT_IOCTL_READDIR_SHORT(r7, 0x82307202, &(0x7f0000000c00)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000200)='kfree\x00', r8}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r9 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r9}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) futex(0x0, 0xd, 0x0, 0x0, 0x0, 0x2) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2000000, 0x300) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) 1.562587353s ago: executing program 1 (id=1096): syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) (async) socket$inet6_sctp(0xa, 0x801, 0x84) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) capset(0x0, &(0x7f0000000300)={0x0, 0x0, 0x5f22}) socket(0x10, 0x3, 0xfffffffd) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) ioctl$SG_EMULATED_HOST(r1, 0x2203, &(0x7f0000000080)) (async) r2 = open_tree(r1, &(0x7f0000000100)='./file0\x00', 0x0) mount_setattr(r2, 0x0, 0x0, &(0x7f0000001dc0)={0x0, 0x0, 0xa0000}, 0x20) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x5, 0x8000) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24000000) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) (async) listen(r4, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r8 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) (async) ptrace$setregset(0x4205, r8, 0x1, &(0x7f0000000100)={&(0x7f0000000040)="dcef58b7f29c1f7c93d183044aedba283413e674c7719c33a4b17f028f68610a6c55bb2bf8282853f3e16f8394a8676ff55a3507e2ad50248c6130863b0f7433c7fbc9b978a39eae88bffd05d139cedbee444f7c98e1f92b0f64462b4b470bedced2125e0b1f38fbaa348c6d75aa1a4011e9cdae15ecb9309b0101edbf6dd6d111d6132f1821a4e4cbec8438c571a70e7ca7b0451a6cc55c", 0x98}) (async) ptrace$setregset(0x4205, r8, 0x1, &(0x7f0000000300)={&(0x7f00000002c0)="c945b941eb6a3f6dedf11f1508685636", 0x10}) (async) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000000001000000280001801400040000000000000000000200ffffac1414aa060001000a0080000800060003"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) 1.562187913s ago: executing program 1 (id=1097): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xe, 0x7fff0000}]}) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000200)=@o_path={&(0x7f00000001c0)='./file0\x00', 0x0, 0x4000, r0}, 0x18) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000180)=[{&(0x7f0000000040)=""/140, 0x8c}, {0x0}], 0x2, 0x2fd, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3, 0x0, 0xfffffffffffffffd}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) r4 = io_uring_setup(0x1694, &(0x7f0000000080)={0x0, 0x1aeb, 0x8}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb904}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 1.541580784s ago: executing program 4 (id=1098): syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x1809049, 0x0, 0xff, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) capset(0x0, 0x0) r1 = syz_io_uring_setup(0xcdb, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, 0x0) io_uring_enter(r1, 0x3519, 0xfffffffd, 0x26, 0x0, 0x4) 1.503410248s ago: executing program 2 (id=1099): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x35, 0x1, 0x0, 0x0, 0x0, 0x7, 0x2c450, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={0x0, 0xd}, 0x4c58, 0x10000, 0x3, 0x8, 0x8, 0x20002, 0x40b, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000400)='./file1\x00', 0x200200, &(0x7f00000000c0)=ANY=[], 0x1, 0x3c6, &(0x7f0000000c00)="$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") r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) (fail_nth: 5) 1.459088191s ago: executing program 1 (id=1100): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000a50000002a00000095"], &(0x7f0000000440)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000580)={0x0, @in6={{0xa, 0x4e20, 0x6, @empty, 0x4}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0x6}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x500, @loopback}}, 0x0, 0x0, 0x300, 0x0, 0x54}, 0x9c) 1.433637034s ago: executing program 4 (id=1101): r0 = socket$kcm(0x29, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") r1 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pread64(r1, &(0x7f00000004c0)=""/62, 0x3e, 0x6) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r0}, 0x8) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r2 = gettid() r3 = eventfd2(0x0, 0x0) write$eventfd(r3, &(0x7f0000000140)=0xfffffffffffffff8, 0x8) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="140100002800010004000000fcdbdf2503"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) write$eventfd(r3, &(0x7f0000000040)=0x8, 0x8) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x8091}, 0x800) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000180)=ANY=[@ANYBLOB="8510000004000000950000000000000018000000000000000000000000000000950000000000000085100000fcffffff95"], &(0x7f00000000c0)='GPL\x00'}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r6, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 1.252032188s ago: executing program 3 (id=1102): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') preadv(r0, &(0x7f0000000c00), 0x0, 0xffff, 0x5dd073cf) 1.22988276s ago: executing program 3 (id=1103): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffed6, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000380)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@max_batch_time={'max_batch_time', 0x3d, 0x131}}, {@mblk_io_submit}, {@quota}]}, 0x3, 0x437, &(0x7f0000000d80)="$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") socket$kcm(0x21, 0x2, 0x2) unlink(&(0x7f0000000180)='./file1\x00') 1.09876852s ago: executing program 0 (id=1104): prctl$PR_SET_NAME(0xf, &(0x7f0000000700)=',&#^%\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000e40)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000040000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) move_pages(0x0, 0x2064, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], &(0x7f0000001180), &(0x7f0000000000), 0x0) 1.082228272s ago: executing program 3 (id=1105): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x18) r1 = fsopen(&(0x7f0000000280)='configfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async) r2 = fsmount(r1, 0x0, 0x2) fchdir(r2) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000640)='.\x00', 0x0, 0x0) lseek(r3, 0x1000000, 0x3) (async) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000980)='./file0\x00', 0x3000010, &(0x7f0000000100)={[{@journal_dev={'journal_dev', 0x3d, 0x2d353}}, {@nobh}]}, 0x1, 0x512, &(0x7f0000000380)="$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") 1.063516464s ago: executing program 0 (id=1106): unshare(0x40020000) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=ANY=[@ANYBLOB="3400000014000b032bbd7000fcdbdf250a281000", @ANYRES32=r1, @ANYBLOB="080008000604000014000100ff"], 0x34}}, 0x0) (fail_nth: 6) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000100)={0x3ff8, 0x0, 0x0, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) getsockopt$inet6_mptcp_buf(0xffffffffffffffff, 0x11c, 0x2, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x3ff8) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r3, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) socketpair$unix(0x2d, 0x2, 0x0, &(0x7f0000000200)) r4 = socket$unix(0x1, 0x2, 0x0) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000240)={'ip6tnl0\x00', 0x0, 0x4, 0x2, 0x1, 0x200, 0x0, @loopback, @private2, 0x40, 0x8, 0x0, 0xe}}) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="000226bd7000fcdbdf250200000008000600", @ANYRES32=r6, @ANYBLOB="00cf3a97dad934"], 0x24}, 0x1, 0x0, 0x0, 0x20044000}, 0x10) pwrite64(r3, &(0x7f0000000000)="b16e2bae3d91de54d8a6cfa24a9625cac38e38a8703ea1228f197e0242cee189a3c5c45ebe7ec3b4b173a823c9ddc684fe6a6a5bdc938d7734fb4b0ac71c8a5f9ea1a03ff67f2133de225e2f54cbf2ba61ea4472bb7f7febc70a3aca029e4cb8f08d197efd4087bbc6dcf030d430f319962045f87741b2a637c9546a4fffbc3737900660e6494112140eb7e7d5b7cbf59d78292b92a7905ab12e2156d9e13bea933306e1deb2decefbe6f387c017d3ff692ca6148a66c2d9a8ed2d76e63f118cf300cbdb99d8e2c44f607770b6b0012fb121f4558dc43c6887ff99902a04257e8596f9e911b05efc55d087b5", 0xec, 0x100000001) socket$nl_generic(0x10, 0x3, 0x10) connect$unix(r4, &(0x7f0000002a40)=@abs={0x0, 0x0, 0x4e20}, 0x6e) 998.638249ms ago: executing program 3 (id=1107): syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x10, &(0x7f0000000040)={[{@usrjquota}]}, 0x1, 0x3e7, &(0x7f0000000480)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r1, &(0x7f0000000740)="cc", 0x1) futex(0xffffffffffffffff, 0x3, 0x1, 0x0, 0x0, 0x0) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7fffeffd) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f00000007c0), 0x4) socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1c1840, 0x0) write(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) 998.289849ms ago: executing program 2 (id=1108): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_io_uring_setup(0x10b, &(0x7f0000000580)={0x0, 0xd736, 0x8, 0x3, 0xbffffffa}, &(0x7f00000003c0)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f00000002c0)=0x9, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0xa, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x80, 0x6000}) io_uring_enter(r0, 0x1c3a, 0xe176, 0x22, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000240)='sched_switch\x00', r4}, 0x44) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010e7010000000000000000000000000a20000000000a03000000000000000000070000000c00044000000000000000021c000000090a010400000000000000000700000008000a4000000003"], 0x64}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="3400000010000d0425bd7000fcf3d97900000004", @ANYRES32=0x0, @ANYBLOB="1000000000000000140012800b000100627269646765000004000280"], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) 699.076963ms ago: executing program 0 (id=1109): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x222}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b40000000000000071118e000000000004000000000000fe3cabba0000000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffd98, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kfree_skb\x00', r0, 0x0, 0x5}, 0xfffffffffffffde3) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe28, 0xfffffffffffffff5, &(0x7f0000000980)="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", 0x0, 0x2f, 0xe8034000, 0xf000, 0xfffffffffffffe2a, &(0x7f0000000000), &(0x7f00000000c0)="c6769e45b7c61302926682c7f9e9bb5ba2b3cdf023e8da0392a4cd62e2370f25ae5ba0dab896bcf5b774cd28bebbde39f796ae27d04582bb7c03e9fe830ea22c9fd03f6d2779515fdad3f5d0de07b7b70996102fdb67b1e77a34a5b7136a212fa2c0ea502588309dc3e42c55a6f93e6ba5e1b492f9db48f0fdd2f9fb937b3e8a63dcf9dd855837433998ba579da27559", 0x5dc}, 0x28) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) io_uring_setup(0x31fa, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="40000000090601020000000000000000000000000900020073797a310000000005000100070000001800078008001c40000000040c000280080001407f0000015a92b580a2fa4cc13a72a0049a942927939a"], 0x40}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) ioctl$FS_IOC_SETFSLABEL(r2, 0x41009432, &(0x7f00000004c0)="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") 649.347307ms ago: executing program 0 (id=1110): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendfile(r0, r0, 0x0, 0x7ff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002ec0)=ANY=[@ANYBLOB="54020e6e", @ANYRES16=r3, @ANYBLOB="5953fdfffffffddbdf256b00000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007200000010001d800c00008008000d8004000380"], 0x38}}, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), r4) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x80000, 0x0, 0x0, 0x41100}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x1, 0x7ffc1ffe}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r6, 0xffffffffffffffff}, 0x4) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$VFAT_IOCTL_READDIR_SHORT(r7, 0x82307202, &(0x7f0000000c00)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000200)='kfree\x00', r8}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r9 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r9}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) futex(0x0, 0xd, 0x0, 0x0, 0x0, 0x2) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2000000, 0x300) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) 582.966283ms ago: executing program 1 (id=1111): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xe, 0x7fff0000}]}) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000200)=@o_path={&(0x7f00000001c0)='./file0\x00', 0x0, 0x4000, r0}, 0x18) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000180)=[{&(0x7f0000000040)=""/140, 0x8c}, {0x0}], 0x2, 0x2fd, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3, 0x0, 0xfffffffffffffffd}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb904}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 582.146293ms ago: executing program 4 (id=1112): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030097850000007b00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='sched_switch\x00', r0}, 0x10) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10048, 0x0, 0xfffffffe, 0x2, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010800000000000000000a0000010900020073797a31000000000900010073797a31000000001400038010"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESHEX=0x0, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b702000000000000850000008400"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3, 0x0, 0x2}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00'}, 0x10) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f00000001c0)='syzkaller\x00'}, 0x80) r5 = socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$TCSETS(r7, 0x8925, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x81, 0x0, "5dee000000594000"}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000640)={0x4, 0x0}, 0x8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000680)={r4, r6, 0x25, 0x0, @val=@tracing={r8, 0x3c73}}, 0x20) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r10, {}, {}, {0xfff3}}}, 0x24}}, 0x40000) 542.641726ms ago: executing program 0 (id=1113): socket$isdn_base(0x22, 0x3, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000200)='./file2\x00', 0x1000410, &(0x7f0000000100), 0x6, 0x504, &(0x7f0000019940)="$eJzs3c9vG1kdAPDvOHGTZt1NF/YACNiyLBRU6vzobrRaDnQvILRaCbFCQuLQDYk3imLXUZwsTcghPXJHohIn+BO4cUDqiQM3bnDjUg5IBSJQg8Rh0IyniZvEdWiTeGt/PtJ45r1x/H3PznvP8xznBTC0rkTETkRciIgPI2KyyE+KLW62t+x+j3a3F/Z2txeSSNMP/pHk57O86PiZzEvFY45HxPe/E/Hj5Gjc1ubWyny9Xlsr0lPrjdWp1ubW9eVSkTM7NzM3/faNt2ZPra6vNX7z8NvL7/3gd7/9woM/7nz9p1mxKj+7lJ/rrMdpale9HJWOvNGIeO8sgvXJaPH7w4sna22fiojX8/Y/GSP5qwkADLI0nYx0sjMNAAy67Pq/EkmpWswFVKJUqlbbc3ivxkSp3mytX5tsbtxejHwO63KUSx8t12vTxVzh5SgnWXomPz5Izx5K34iIVyLi52MX83R1oVlf7OcbHwAYYi8dGv//PdYe/wGAATfe7wIAAOfO+A8Aw8f4DwDD5/8Y/307EAAGhOt/ABg+xn8AGD49x/+751MOAOBcfO/997Mt3Sv+//Xix5sb36x8fH2x1lqpNjYWqgvNtdXqUrO5VK9VF9K01+PVm83VmTf3k63NrVuN5sbt9VvLjfml2q1a+YzrAwD09spr9/+cRMTOOxfzLTrWcjBWw2ArPZE6ZqEeYGCN9LsAQN/4Pg8MrxNc45sGgAHX68q/658I3bP4K7yorn7W/D8Mq1K/CwD0zbPN/3/r1MsBnD/z/zC80jSx5j8ADBlz/MCzfP7/wyg+/wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAhVcm3pFTN1wLfyW5L1WrEpYi4HOXko+V6bToiXo6IP42Vx7L0TL8LDQA8p9LfkmL9r6uTb1QOn72Q/Gcs30fET375wS/uzK+vr81k+f/cz1+/V+TPXuhHBQCATjePZrXH6WLfcSH/aHd74fF2nkV8+G57cdEs7l6xtc+Mxmi+H49yREz8KynSbdn7lZFTiL9zNyI+c1D/Ox0RKvkcSHvl08Pxs9iXziD+wfOfRJqm6UH80hPxS3nZsn05fy4+fQplgWFz/912P5m1u4u721kTK9pfKa7k++Pb/3jeQz2/x/3f3pH+r7Tf/40ciZ/kbf7KfvrpJXn45u+/eyQznWyfuxvxudHj4if78ZMu/e8bJ6zjXz7/xde7nUt/FXE1jo/f1si72an1xupUa3Pr+nJjfqm2VLs9Ozs3Mzf99o23ZqfyOer27R+Oi/H3d6693C1+Vv+JLvHHe9T/Kyes/6//++GPvvSU+F/78vGv/6tPiZ+NiV89Yfz5iZvHLd+9H3+xS/17vf7XThj/wV+3Fk94VwDgHLQ2t1bm6/XaWo+D7L1mr/s4eDEPYifinIN+YzziE1F3B90O+t0zAWftoNH3uyQAAAAAAAAAAAAAAEA3rc2tlbE4268T9buOAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADK7/BQAA//+TAtDE") setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0), &(0x7f00000003c0)=ANY=[], 0x841, 0x1) r0 = syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1, 0x0, 0xc231}, 0x18) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) quotactl_fd$Q_GETNEXTQUOTA(r2, 0xffffffff80000901, 0x0, &(0x7f0000000040)) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000041) 491.75024ms ago: executing program 1 (id=1114): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000980)={0x6}, 0x10) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000900)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0xfffffd9d) sendfile(r1, r2, 0x0, 0x8000002b) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0xc000) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="50000000270001000000000006000000ac1e0101000000000000000000000000dc", @ANYRES32=r3, @ANYRES32=r1], 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kmem_cache_free\x00', r4}, 0x10) r5 = openat$cgroup(r2, &(0x7f0000000300)='syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r5, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x13, 0x0, 0x3, 0xe, 0x0, 0x700, 0x0, [@sadb_key={0x5, 0x9, 0xe0, 0x0, "01d78771b90bd8a3b4914783c58777003d5b9538a9d03e6e9bfdac55"}, @sadb_address={0x3, 0x6, 0x0, 0xa0, 0x0, @in={0x2, 0x0, @private=0xa010100}}, @sadb_x_nat_t_type={0x1, 0x14, 0x2d}, @sadb_address={0x3, 0x5, 0x0, 0x60, 0x0, @in={0x2, 0x100, @dev}}]}, 0x70}, 0x1, 0x7}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="590d19ce1ba5e7d539e3eb0082c5333726dade55b8b147968f53c1e1f9b9cd853a233c2aa7cfdbf2177e1dde33be2aadf9cd1e441540aacdfbafcddf71981282ef57227c2f45f8f8d8d3dec4615c3078306a81bc2072a39d91b5c8d19e2a09ed86877de2caad0183a8801de90ef0a82e8a69f82d12b38b11dc91582321b39ac060a28c0e36f890db9a44a9973e3a0517c5c687b1041ac5b66e6592d35c5186db4273c1c46bd3d054f9f43eb097b78a88faa65236880d49554a658ce1e3e5a5902bc086a700a3", @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x2a, &(0x7f0000000380)=ANY=[@ANYBLOB="4ed6672c1e3fbdd008f435167f59f4cdaaaaaaaaaaaa00000000000008004500001c000000000033907800faff00fffc24ff00004e2000089078", @ANYRESDEC=r7], 0x0) setresuid(0x0, 0xee00, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_procs(r8, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r9, &(0x7f0000000040), 0x12) 488.95412ms ago: executing program 2 (id=1115): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000780), r0) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000080)='./file1\x00', 0x8, &(0x7f0000000200)={[{@dots}, {@fat=@check_normal}, {@nodots}, {@nodots}, {@nodots}, {@dots}, {@fat=@flush}, {@nodots}, {@fat=@nfs_nostale_ro}, {@nodots}, {@nodots}, {@nodots}, {@dots}, {@nodots}, {@nodots}, {@dots}, {@nodots}, {@fat=@nfs}, {@dots}, {@dots}, {@dots}, {@fat=@check_normal}]}, 0xfd, 0x1bf, &(0x7f0000000840)="$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") mount$nfs(&(0x7f0000000000)='.\\\xbf. ', &(0x7f0000000140)='./file0\x00', 0x0, 0x2000, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x6, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f00000001c0)='cpu>00\t&&') bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x30000c6, &(0x7f00000000c0), 0x2, 0x572, &(0x7f0000001600)="$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") syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f00000001c0)={[{@nobh}, {@jqfmt_vfsv0}, {@data_err_ignore}]}, 0x3, 0x4cd, &(0x7f0000000280)="$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") creat(0x0, 0x102) io_submit(0x0, 0x0, &(0x7f0000000540)) mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2200020, &(0x7f0000000000)) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x20042, 0x1) fallocate(r5, 0x0, 0x0, 0x8000c62) r6 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) sendfile(r6, r6, 0x0, 0x100000800000009) 60.963425ms ago: executing program 3 (id=1116): prctl$PR_SET_NAME(0xf, &(0x7f0000000700)=',&#^%\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000e40)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000040000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) move_pages(0x0, 0x2064, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], &(0x7f0000001180), &(0x7f0000000000), 0x0) 13.236119ms ago: executing program 4 (id=1117): r0 = socket(0xa, 0x3, 0x87) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ipvlan0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x18, r1}) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x8916, &(0x7f0000000000)) (fail_nth: 2) 0s ago: executing program 2 (id=1118): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f0000000000)={@mcast1}, 0x14) (async) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0, 0x0, 0x7}, 0x18) (async) r3 = memfd_secret(0x80000) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYRESOCT=r2, @ANYRES64=r3, @ANYBLOB="d4ded276e5602d26024b3d2a60835e7244d3ef3068f9ba302b14a759aa840742ad3cfa7ca4407d5ba76664bb5e0528f63d3eb6d257afe42ad4269b880127b066fe4fa58384a944b324a3e0f2907c1caa77a06dd80fa1ff9afe18d0c5cc888ec467f54724fd2780eae82592a11f85b1a67af20670e53fa3222eb1367cfd255e1c039eaf350e583bdf44e07f8e1c53839f7877f4d81e83a6f7e2e8ad1666dafc9c06298f4853db593f7139957708c9e66754a0ce", @ANYRES32], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r4}, 0x18) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)="2e00000011008b88040f80ec59acbc0413a1f8480f0000005e2900421803001825000a001400000002800000121f", 0x2e}], 0x1}, 0x800) (async) fcntl$setlease(r3, 0x400, 0x0) (async) r6 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r8, 0x0, 0x7}, 0x18) r9 = fcntl$dupfd(r6, 0x0, r6) write$sndseq(r9, &(0x7f0000000180)=[{0xff, 0x0, 0x0, 0x0, @tick=0x4, {}, {}, @result={0x1, 0x2}}, {0x0, 0x0, 0xff, 0x3, @tick=0xf27, {0x1, 0x31}, {0x7f}, @addr={0x2a, 0x5}}], 0x38) readv(r9, &(0x7f0000000000)=[{&(0x7f0000001140)=""/136, 0x3f}], 0x1) (async) close(r3) (async) socket$igmp6(0xa, 0x3, 0x3a) (async) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r10, 0x0) (async) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r10, 0x84, 0xc, &(0x7f00000001c0), 0x4) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000200)=[@in6={0xa, 0x4e21, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}, 0xf45}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r10, 0x84, 0x6d, &(0x7f0000000240)={r11}, &(0x7f0000000180)=0x8) keyctl$session_to_parent(0x12) kernel console output (not intermixed with test programs): Trace: [ 63.018380][ T5327] [ 63.018403][ T5327] __dump_stack+0x1d/0x30 [ 63.018424][ T5327] dump_stack_lvl+0xe8/0x140 [ 63.018460][ T5327] dump_stack+0x15/0x1b [ 63.018527][ T5327] should_fail_ex+0x265/0x280 [ 63.018548][ T5327] ? ip_set_create+0x1ec/0x960 [ 63.018584][ T5327] should_failslab+0x8c/0xb0 [ 63.018617][ T5327] __kmalloc_cache_noprof+0x4c/0x320 [ 63.018641][ T5327] ip_set_create+0x1ec/0x960 [ 63.018679][ T5327] ? __nla_parse+0x40/0x60 [ 63.018703][ T5327] nfnetlink_rcv_msg+0x4c6/0x590 [ 63.018741][ T5327] netlink_rcv_skb+0x123/0x220 [ 63.018813][ T5327] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 63.018829][ T5327] nfnetlink_rcv+0x16b/0x1690 [ 63.018843][ T5327] ? nlmon_xmit+0x4f/0x60 [ 63.018857][ T5327] ? consume_skb+0x49/0x150 [ 63.018886][ T5327] ? nlmon_xmit+0x4f/0x60 [ 63.018899][ T5327] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 63.018969][ T5327] ? __dev_queue_xmit+0x1200/0x2000 [ 63.018986][ T5327] ? __dev_queue_xmit+0x182/0x2000 [ 63.019012][ T5327] ? ref_tracker_free+0x37d/0x3e0 [ 63.019081][ T5327] ? __netlink_deliver_tap+0x4dc/0x500 [ 63.019120][ T5327] netlink_unicast+0x5bd/0x690 [ 63.019136][ T5327] netlink_sendmsg+0x58b/0x6b0 [ 63.019229][ T5327] ? __pfx_netlink_sendmsg+0x10/0x10 [ 63.019263][ T5327] __sock_sendmsg+0x142/0x180 [ 63.019320][ T5327] ____sys_sendmsg+0x31e/0x4e0 [ 63.019351][ T5327] ___sys_sendmsg+0x17b/0x1d0 [ 63.019374][ T5327] __x64_sys_sendmsg+0xd4/0x160 [ 63.019471][ T5327] x64_sys_call+0x191e/0x2ff0 [ 63.019534][ T5327] do_syscall_64+0xd2/0x200 [ 63.019547][ T5327] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 63.019562][ T5327] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 63.019654][ T5327] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.019666][ T5327] RIP: 0033:0x7f2ba974e9a9 [ 63.019676][ T5327] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 63.019686][ T5327] RSP: 002b:00007f2ba7db7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 63.019729][ T5327] RAX: ffffffffffffffda RBX: 00007f2ba9975fa0 RCX: 00007f2ba974e9a9 [ 63.019736][ T5327] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 63.019823][ T5327] RBP: 00007f2ba7db7090 R08: 0000000000000000 R09: 0000000000000000 [ 63.019830][ T5327] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 63.019837][ T5327] R13: 0000000000000000 R14: 00007f2ba9975fa0 R15: 00007ffd6912a0c8 [ 63.019847][ T5327] [ 63.302856][ T3379] hid-generic 0000:007F:FFFFFFFE.0010: unknown main item tag 0x0 [ 63.310693][ T3379] hid-generic 0000:007F:FFFFFFFE.0010: unknown main item tag 0x0 [ 63.318425][ T3379] hid-generic 0000:007F:FFFFFFFE.0010: unknown main item tag 0x0 [ 63.326211][ T3379] hid-generic 0000:007F:FFFFFFFE.0010: unknown main item tag 0x0 [ 63.333958][ T3379] hid-generic 0000:007F:FFFFFFFE.0010: unknown main item tag 0x0 [ 63.341722][ T3379] hid-generic 0000:007F:FFFFFFFE.0010: unknown main item tag 0x0 [ 63.349545][ T3379] hid-generic 0000:007F:FFFFFFFE.0010: unknown main item tag 0x0 [ 63.357298][ T3379] hid-generic 0000:007F:FFFFFFFE.0010: unknown main item tag 0x0 [ 63.365037][ T3379] hid-generic 0000:007F:FFFFFFFE.0010: unknown main item tag 0x0 [ 63.372795][ T3379] hid-generic 0000:007F:FFFFFFFE.0010: unknown main item tag 0x0 [ 63.380573][ T3379] hid-generic 0000:007F:FFFFFFFE.0010: unknown main item tag 0x0 [ 63.388295][ T3379] hid-generic 0000:007F:FFFFFFFE.0010: unknown main item tag 0x0 [ 63.396107][ T3379] hid-generic 0000:007F:FFFFFFFE.0010: unknown main item tag 0x0 [ 63.403841][ T3379] hid-generic 0000:007F:FFFFFFFE.0010: unknown main item tag 0x0 [ 63.411568][ T3379] hid-generic 0000:007F:FFFFFFFE.0010: unknown main item tag 0x0 [ 63.419301][ T3379] hid-generic 0000:007F:FFFFFFFE.0010: unknown main item tag 0x0 [ 63.427014][ T3379] hid-generic 0000:007F:FFFFFFFE.0010: unknown main item tag 0x0 [ 63.434804][ T3379] hid-generic 0000:007F:FFFFFFFE.0010: unknown main item tag 0x0 [ 63.442526][ T3379] hid-generic 0000:007F:FFFFFFFE.0010: unknown main item tag 0x0 [ 63.450411][ T3379] hid-generic 0000:007F:FFFFFFFE.0010: unknown main item tag 0x0 [ 63.458164][ T3379] hid-generic 0000:007F:FFFFFFFE.0010: unknown main item tag 0x0 [ 63.465899][ T3379] hid-generic 0000:007F:FFFFFFFE.0010: unknown main item tag 0x0 [ 63.473666][ T3379] hid-generic 0000:007F:FFFFFFFE.0010: unknown main item tag 0x0 [ 63.481408][ T3379] hid-generic 0000:007F:FFFFFFFE.0010: unknown main item tag 0x0 [ 63.489150][ T3379] hid-generic 0000:007F:FFFFFFFE.0010: unknown main item tag 0x0 [ 63.496888][ T3379] hid-generic 0000:007F:FFFFFFFE.0010: unknown main item tag 0x0 [ 63.504647][ T3379] hid-generic 0000:007F:FFFFFFFE.0010: unknown main item tag 0x0 [ 63.512393][ T3379] hid-generic 0000:007F:FFFFFFFE.0010: unknown main item tag 0x0 [ 63.520152][ T3379] hid-generic 0000:007F:FFFFFFFE.0010: unknown main item tag 0x0 [ 63.527888][ T3379] hid-generic 0000:007F:FFFFFFFE.0010: unknown main item tag 0x0 [ 63.535736][ T3379] hid-generic 0000:007F:FFFFFFFE.0010: unknown main item tag 0x0 [ 63.543507][ T3379] hid-generic 0000:007F:FFFFFFFE.0010: unknown main item tag 0x0 [ 63.547171][ T5343] loop0: detected capacity change from 0 to 128 [ 63.551275][ T3379] hid-generic 0000:007F:FFFFFFFE.0010: unknown main item tag 0x0 [ 63.560200][ T5343] ext4 filesystem being mounted at /79/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 63.565244][ T3379] hid-generic 0000:007F:FFFFFFFE.0010: unknown main item tag 0x0 [ 63.583131][ T3379] hid-generic 0000:007F:FFFFFFFE.0010: unknown main item tag 0x0 [ 63.591014][ T3379] hid-generic 0000:007F:FFFFFFFE.0010: unknown main item tag 0x0 [ 63.598819][ T3379] hid-generic 0000:007F:FFFFFFFE.0010: unknown main item tag 0x0 [ 63.606534][ T3379] hid-generic 0000:007F:FFFFFFFE.0010: unknown main item tag 0x0 [ 63.614436][ T3379] hid-generic 0000:007F:FFFFFFFE.0010: unknown main item tag 0x0 [ 63.622273][ T3379] hid-generic 0000:007F:FFFFFFFE.0010: unknown main item tag 0x0 [ 63.629998][ T3379] hid-generic 0000:007F:FFFFFFFE.0010: unknown main item tag 0x0 [ 63.637798][ T3379] hid-generic 0000:007F:FFFFFFFE.0010: unknown main item tag 0x0 [ 63.645581][ T3379] hid-generic 0000:007F:FFFFFFFE.0010: unknown main item tag 0x0 [ 63.653850][ T3379] hid-generic 0000:007F:FFFFFFFE.0010: hidraw0: HID v0.00 Device [syz1] on syz1 [ 63.835982][ T5376] geneve1 speed is unknown, defaulting to 1000 [ 63.842736][ T5376] geneve1 speed is unknown, defaulting to 1000 [ 63.851434][ T5376] geneve1 speed is unknown, defaulting to 1000 [ 63.912251][ T5380] syzkaller0: entered promiscuous mode [ 63.917746][ T5380] syzkaller0: entered allmulticast mode [ 63.944118][ T5376] infiniband syz2: set active [ 63.948897][ T5376] infiniband syz2: added geneve1 [ 63.955464][ T3379] geneve1 speed is unknown, defaulting to 1000 [ 63.965291][ T5384] loop2: detected capacity change from 0 to 256 [ 63.972030][ T5384] msdos: Unknown parameter 'umíI oïd77Yç8wask' [ 64.014762][ T5376] RDS/IB: syz2: added [ 64.028281][ T5376] smc: adding ib device syz2 with port count 1 [ 64.044728][ T5376] smc: ib device syz2 port 1 has pnetid [ 64.050691][ T3370] geneve1 speed is unknown, defaulting to 1000 [ 64.057599][ T5376] geneve1 speed is unknown, defaulting to 1000 [ 64.060682][ T5397] loop0: detected capacity change from 0 to 2048 [ 64.091326][ T5376] geneve1 speed is unknown, defaulting to 1000 [ 64.125979][ T5376] geneve1 speed is unknown, defaulting to 1000 [ 64.161968][ T5376] geneve1 speed is unknown, defaulting to 1000 [ 64.204773][ T5376] geneve1 speed is unknown, defaulting to 1000 [ 64.307500][ T5437] __nla_validate_parse: 5 callbacks suppressed [ 64.307517][ T5437] netlink: 8 bytes leftover after parsing attributes in process `syz.3.427'. [ 64.369082][ T5447] loop3: detected capacity change from 0 to 128 [ 64.377252][ T5447] ext4 filesystem being mounted at /93/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 64.472564][ T5477] loop2: detected capacity change from 0 to 2048 [ 64.499410][ T5481] FAULT_INJECTION: forcing a failure. [ 64.499410][ T5481] name failslab, interval 1, probability 0, space 0, times 0 [ 64.512087][ T5481] CPU: 1 UID: 0 PID: 5481 Comm: syz.1.433 Not tainted 6.16.0-syzkaller-06699-ge8d780dcd957 #0 PREEMPT(voluntary) [ 64.512160][ T5481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 64.512175][ T5481] Call Trace: [ 64.512183][ T5481] [ 64.512191][ T5481] __dump_stack+0x1d/0x30 [ 64.512211][ T5481] dump_stack_lvl+0xe8/0x140 [ 64.512245][ T5481] dump_stack+0x15/0x1b [ 64.512297][ T5481] should_fail_ex+0x265/0x280 [ 64.512318][ T5481] should_failslab+0x8c/0xb0 [ 64.512349][ T5481] __kmalloc_node_noprof+0xa9/0x410 [ 64.512409][ T5481] ? qdisc_alloc+0x65/0x440 [ 64.512435][ T5481] qdisc_alloc+0x65/0x440 [ 64.512458][ T5481] ? nla_strcmp+0xc3/0xe0 [ 64.512479][ T5481] qdisc_create+0xf5/0x9e0 [ 64.512581][ T5481] tc_modify_qdisc+0xf2e/0x1420 [ 64.512612][ T5481] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 64.512635][ T5481] rtnetlink_rcv_msg+0x65a/0x6d0 [ 64.512658][ T5481] netlink_rcv_skb+0x123/0x220 [ 64.512745][ T5481] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 64.512768][ T5481] rtnetlink_rcv+0x1c/0x30 [ 64.512785][ T5481] netlink_unicast+0x5bd/0x690 [ 64.512811][ T5481] netlink_sendmsg+0x58b/0x6b0 [ 64.512877][ T5481] ? __pfx_netlink_sendmsg+0x10/0x10 [ 64.512906][ T5481] __sock_sendmsg+0x142/0x180 [ 64.512927][ T5481] ____sys_sendmsg+0x31e/0x4e0 [ 64.513005][ T5481] ___sys_sendmsg+0x17b/0x1d0 [ 64.513045][ T5481] __x64_sys_sendmsg+0xd4/0x160 [ 64.513081][ T5481] x64_sys_call+0x191e/0x2ff0 [ 64.513102][ T5481] do_syscall_64+0xd2/0x200 [ 64.513124][ T5481] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 64.513226][ T5481] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 64.513291][ T5481] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.513310][ T5481] RIP: 0033:0x7f5f771be9a9 [ 64.513325][ T5481] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 64.513343][ T5481] RSP: 002b:00007f5f75827038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 64.513386][ T5481] RAX: ffffffffffffffda RBX: 00007f5f773e5fa0 RCX: 00007f5f771be9a9 [ 64.513399][ T5481] RDX: 0000000000004840 RSI: 0000200000001200 RDI: 0000000000000003 [ 64.513412][ T5481] RBP: 00007f5f75827090 R08: 0000000000000000 R09: 0000000000000000 [ 64.513424][ T5481] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 64.513465][ T5481] R13: 0000000000000000 R14: 00007f5f773e5fa0 R15: 00007ffc68b9ee88 [ 64.513480][ T5481] [ 64.513491][ T5488] netlink: 96 bytes leftover after parsing attributes in process `syz.3.431'. [ 64.927683][ T5547] loop2: detected capacity change from 0 to 512 [ 64.984967][ T5547] ext4 filesystem being mounted at /84/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.002381][ T5579] loop0: detected capacity change from 0 to 512 [ 65.038461][ T5579] ext4 filesystem being mounted at /82/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.091226][ T5600] loop3: detected capacity change from 0 to 1024 [ 65.133891][ T5609] loop2: detected capacity change from 0 to 2048 [ 65.163081][ T5609] netlink: 256 bytes leftover after parsing attributes in process `syz.2.455'. [ 65.193074][ T5635] FAULT_INJECTION: forcing a failure. [ 65.193074][ T5635] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 65.206182][ T5635] CPU: 0 UID: 0 PID: 5635 Comm: syz.0.459 Not tainted 6.16.0-syzkaller-06699-ge8d780dcd957 #0 PREEMPT(voluntary) [ 65.206213][ T5635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 65.206226][ T5635] Call Trace: [ 65.206234][ T5635] [ 65.206242][ T5635] __dump_stack+0x1d/0x30 [ 65.206318][ T5635] dump_stack_lvl+0xe8/0x140 [ 65.206352][ T5635] dump_stack+0x15/0x1b [ 65.206369][ T5635] should_fail_ex+0x265/0x280 [ 65.206399][ T5635] should_fail+0xb/0x20 [ 65.206416][ T5635] should_fail_usercopy+0x1a/0x20 [ 65.206439][ T5635] strncpy_from_user+0x25/0x230 [ 65.206467][ T5635] ? __kmalloc_cache_noprof+0x189/0x320 [ 65.206491][ T5635] __se_sys_memfd_create+0x1ff/0x590 [ 65.206566][ T5635] __x64_sys_memfd_create+0x31/0x40 [ 65.206591][ T5635] x64_sys_call+0x2abe/0x2ff0 [ 65.206612][ T5635] do_syscall_64+0xd2/0x200 [ 65.206707][ T5635] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 65.206736][ T5635] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 65.206784][ T5635] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.206807][ T5635] RIP: 0033:0x7f2b2289e9a9 [ 65.206822][ T5635] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 65.206840][ T5635] RSP: 002b:00007f2b20efee18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 65.206911][ T5635] RAX: ffffffffffffffda RBX: 000000000000045c RCX: 00007f2b2289e9a9 [ 65.206925][ T5635] RDX: 00007f2b20efeef0 RSI: 0000000000000000 RDI: 00007f2b229216fc [ 65.206938][ T5635] RBP: 0000200000002400 R08: 00007f2b20efebb7 R09: 00007f2b20efee40 [ 65.206950][ T5635] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000000 [ 65.206971][ T5635] R13: 00007f2b20efeef0 R14: 00007f2b20efeeb0 R15: 0000200000000680 [ 65.207038][ T5635] [ 65.428799][ T5654] loop3: detected capacity change from 0 to 2048 [ 65.481875][ T5674] loop3: detected capacity change from 0 to 512 [ 65.492058][ T5674] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 65.507275][ T5674] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 65.522629][ T5674] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 65.536633][ T5674] EXT4-fs (loop3): 1 truncate cleaned up [ 65.560427][ T5674] smc: net device bond0 applied user defined pnetid SYZH [ 65.630716][ T5709] loop3: detected capacity change from 0 to 128 [ 65.638323][ T5712] loop0: detected capacity change from 0 to 1024 [ 65.646365][ T5712] EXT4-fs: inline encryption not supported [ 65.651131][ T5709] ext4 filesystem being mounted at /102/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 65.657801][ T5712] EXT4-fs: Ignoring removed mblk_io_submit option [ 65.699418][ T5712] EXT4-fs (loop0): can't mount with data_err=abort, fs mounted w/o journal [ 65.856041][ T5767] FAULT_INJECTION: forcing a failure. [ 65.856041][ T5767] name failslab, interval 1, probability 0, space 0, times 0 [ 65.868774][ T5767] CPU: 0 UID: 0 PID: 5767 Comm: syz.1.481 Not tainted 6.16.0-syzkaller-06699-ge8d780dcd957 #0 PREEMPT(voluntary) [ 65.868806][ T5767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 65.868821][ T5767] Call Trace: [ 65.868827][ T5767] [ 65.868835][ T5767] __dump_stack+0x1d/0x30 [ 65.868855][ T5767] dump_stack_lvl+0xe8/0x140 [ 65.868978][ T5767] dump_stack+0x15/0x1b [ 65.868996][ T5767] should_fail_ex+0x265/0x280 [ 65.869022][ T5767] should_failslab+0x8c/0xb0 [ 65.869107][ T5767] __kmalloc_noprof+0xa5/0x3e0 [ 65.869125][ T5767] ? rds_rdma_extra_size+0x8e/0x270 [ 65.869154][ T5767] ? kfree+0x27b/0x320 [ 65.869172][ T5767] rds_rdma_extra_size+0x8e/0x270 [ 65.869201][ T5767] ? krealloc_noprof+0x136/0x2d0 [ 65.869275][ T5767] rds_rm_size+0x326/0x490 [ 65.869319][ T5767] rds_sendmsg+0x842/0x14a0 [ 65.869394][ T5767] ? __pfx_rds_sendmsg+0x10/0x10 [ 65.869475][ T5767] __sock_sendmsg+0x142/0x180 [ 65.869597][ T5767] ____sys_sendmsg+0x31e/0x4e0 [ 65.869626][ T5767] ___sys_sendmsg+0x17b/0x1d0 [ 65.869665][ T5767] __x64_sys_sendmsg+0xd4/0x160 [ 65.869695][ T5767] x64_sys_call+0x191e/0x2ff0 [ 65.869721][ T5767] do_syscall_64+0xd2/0x200 [ 65.869740][ T5767] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 65.869764][ T5767] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 65.869865][ T5767] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.869884][ T5767] RIP: 0033:0x7f5f771be9a9 [ 65.869898][ T5767] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 65.869914][ T5767] RSP: 002b:00007f5f75827038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 65.869950][ T5767] RAX: ffffffffffffffda RBX: 00007f5f773e5fa0 RCX: 00007f5f771be9a9 [ 65.869961][ T5767] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000006 [ 65.869972][ T5767] RBP: 00007f5f75827090 R08: 0000000000000000 R09: 0000000000000000 [ 65.869982][ T5767] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 65.869993][ T5767] R13: 0000000000000000 R14: 00007f5f773e5fa0 R15: 00007ffc68b9ee88 [ 65.870043][ T5767] [ 65.870780][ T5765] FAULT_INJECTION: forcing a failure. [ 65.870780][ T5765] name failslab, interval 1, probability 0, space 0, times 0 [ 66.093385][ T5765] CPU: 1 UID: 0 PID: 5765 Comm: syz.3.480 Not tainted 6.16.0-syzkaller-06699-ge8d780dcd957 #0 PREEMPT(voluntary) [ 66.093465][ T5765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 66.093473][ T5765] Call Trace: [ 66.093505][ T5765] [ 66.093511][ T5765] __dump_stack+0x1d/0x30 [ 66.093523][ T5765] dump_stack_lvl+0xe8/0x140 [ 66.093584][ T5765] dump_stack+0x15/0x1b [ 66.093593][ T5765] should_fail_ex+0x265/0x280 [ 66.093604][ T5765] should_failslab+0x8c/0xb0 [ 66.093622][ T5765] kmem_cache_alloc_noprof+0x50/0x310 [ 66.093642][ T5765] ? skb_clone+0x151/0x1f0 [ 66.093660][ T5765] skb_clone+0x151/0x1f0 [ 66.093677][ T5765] __netlink_deliver_tap+0x2c9/0x500 [ 66.093735][ T5765] netlink_unicast+0x66b/0x690 [ 66.093756][ T5765] netlink_sendmsg+0x58b/0x6b0 [ 66.093774][ T5765] ? __pfx_netlink_sendmsg+0x10/0x10 [ 66.093827][ T5765] __sock_sendmsg+0x142/0x180 [ 66.093840][ T5765] ____sys_sendmsg+0x31e/0x4e0 [ 66.093858][ T5765] ___sys_sendmsg+0x17b/0x1d0 [ 66.093900][ T5765] __x64_sys_sendmsg+0xd4/0x160 [ 66.094089][ T5765] x64_sys_call+0x191e/0x2ff0 [ 66.094175][ T5765] do_syscall_64+0xd2/0x200 [ 66.094188][ T5765] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 66.094204][ T5765] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 66.094278][ T5765] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.094291][ T5765] RIP: 0033:0x7f2ba974e9a9 [ 66.094300][ T5765] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 66.094311][ T5765] RSP: 002b:00007f2ba7db7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 66.094361][ T5765] RAX: ffffffffffffffda RBX: 00007f2ba9975fa0 RCX: 00007f2ba974e9a9 [ 66.094447][ T5765] RDX: 0000000000000080 RSI: 0000200000000080 RDI: 0000000000000003 [ 66.094456][ T5765] RBP: 00007f2ba7db7090 R08: 0000000000000000 R09: 0000000000000000 [ 66.094463][ T5765] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 66.094470][ T5765] R13: 0000000000000000 R14: 00007f2ba9975fa0 R15: 00007ffd6912a0c8 [ 66.094481][ T5765] [ 66.096421][ T3315] EXT4-fs unmount: 85 callbacks suppressed [ 66.096436][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.213521][ T5782] loop0: detected capacity change from 0 to 512 [ 66.335564][ T5782] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.348703][ T5782] ext4 filesystem being mounted at /97/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.363992][ T29] kauditd_printk_skb: 345 callbacks suppressed [ 66.364008][ T29] audit: type=1400 audit(1753963777.400:1842): avc: denied { read } for pid=5781 comm="syz.0.488" name="event2" dev="devtmpfs" ino=249 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 66.393623][ T29] audit: type=1400 audit(1753963777.400:1843): avc: denied { open } for pid=5781 comm="syz.0.488" path="/dev/input/event2" dev="devtmpfs" ino=249 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 66.417730][ T29] audit: type=1400 audit(1753963777.400:1844): avc: denied { ioctl } for pid=5781 comm="syz.0.488" path="/dev/input/event2" dev="devtmpfs" ino=249 ioctlcmd=0x4590 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 66.443286][ T29] audit: type=1400 audit(1753963777.410:1845): avc: denied { getopt } for pid=5781 comm="syz.0.488" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 66.465750][ T5799] loop2: detected capacity change from 0 to 128 [ 66.472520][ T5799] vfat: Bad value for 'uni_xlate' [ 66.473371][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.507547][ T5815] loop2: detected capacity change from 0 to 512 [ 66.514892][ T5815] EXT4-fs: Ignoring removed mblk_io_submit option [ 66.521810][ T5815] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 66.535389][ T5815] EXT4-fs error (device loop2): ext4_orphan_get:1393: inode #15: comm syz.2.494: iget: bad extended attribute block 1 [ 66.554488][ T5818] netlink: 12 bytes leftover after parsing attributes in process `syz.1.495'. [ 66.563501][ T5814] loop0: detected capacity change from 0 to 8192 [ 66.570432][ T5815] EXT4-fs error (device loop2): ext4_orphan_get:1398: comm syz.2.494: couldn't read orphan inode 15 (err -117) [ 66.571143][ T5821] loop3: detected capacity change from 0 to 1024 [ 66.589457][ T5815] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.602325][ T5815] FAULT_INJECTION: forcing a failure. [ 66.602325][ T5815] name failslab, interval 1, probability 0, space 0, times 0 [ 66.614968][ T5815] CPU: 1 UID: 0 PID: 5815 Comm: syz.2.494 Not tainted 6.16.0-syzkaller-06699-ge8d780dcd957 #0 PREEMPT(voluntary) [ 66.614996][ T5815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 66.615061][ T5815] Call Trace: [ 66.615067][ T5815] [ 66.615075][ T5815] __dump_stack+0x1d/0x30 [ 66.615097][ T5815] dump_stack_lvl+0xe8/0x140 [ 66.615159][ T5815] dump_stack+0x15/0x1b [ 66.615173][ T5815] should_fail_ex+0x265/0x280 [ 66.615192][ T5815] should_failslab+0x8c/0xb0 [ 66.615225][ T5815] __kmalloc_noprof+0xa5/0x3e0 [ 66.615297][ T5815] ? ext4_mb_init_cache+0x11e/0xb70 [ 66.615327][ T5815] ext4_mb_init_cache+0x11e/0xb70 [ 66.615435][ T5815] ? folio_add_lru+0x175/0x1f0 [ 66.615460][ T5815] ? __filemap_get_folio+0x47f/0x6b0 [ 66.615528][ T5815] ext4_mb_init_group+0x25b/0x3f0 [ 66.615560][ T5815] ext4_mb_regular_allocator+0xb1a/0x2300 [ 66.615626][ T5815] ? __ext4_mark_inode_dirty+0x2fe/0x3f0 [ 66.615663][ T5815] ext4_mb_new_blocks+0x800/0x2050 [ 66.615698][ T5815] ? ext4_ind_map_blocks+0x814/0x14f0 [ 66.615780][ T5815] ? ext4_get_branch+0x321/0x3a0 [ 66.615820][ T5815] ext4_ind_map_blocks+0xb4c/0x14f0 [ 66.615852][ T5815] ext4_map_blocks+0x5d2/0xd70 [ 66.615879][ T5815] ? __rcu_read_unlock+0x4f/0x70 [ 66.615903][ T5815] _ext4_get_block+0x10a/0x350 [ 66.615958][ T5815] ext4_get_block+0x39/0x50 [ 66.616000][ T5815] ext4_block_write_begin+0x3d3/0xa60 [ 66.616036][ T5815] ? __pfx_ext4_get_block+0x10/0x10 [ 66.616068][ T5815] ? folio_mapping+0xb9/0x120 [ 66.616089][ T5815] ext4_write_begin+0x5cf/0xd90 [ 66.616182][ T5815] generic_perform_write+0x181/0x490 [ 66.616214][ T5815] ext4_buffered_write_iter+0x1ee/0x3c0 [ 66.616234][ T5815] ext4_file_write_iter+0x383/0xf00 [ 66.616252][ T5815] ? kstrtouint_from_user+0x9f/0xf0 [ 66.616274][ T5815] ? avc_policy_seqno+0x15/0x30 [ 66.616310][ T5815] ? selinux_file_permission+0x1e4/0x320 [ 66.616330][ T5815] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 66.616364][ T5815] vfs_write+0x49d/0x8e0 [ 66.616392][ T5815] ksys_write+0xda/0x1a0 [ 66.616422][ T5815] __x64_sys_write+0x40/0x50 [ 66.616505][ T5815] x64_sys_call+0x27fe/0x2ff0 [ 66.616527][ T5815] do_syscall_64+0xd2/0x200 [ 66.616550][ T5815] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 66.616610][ T5815] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 66.616643][ T5815] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.616720][ T5815] RIP: 0033:0x7f0dd1d7e9a9 [ 66.616736][ T5815] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 66.616760][ T5815] RSP: 002b:00007f0dd03df038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 66.616781][ T5815] RAX: ffffffffffffffda RBX: 00007f0dd1fa5fa0 RCX: 00007f0dd1d7e9a9 [ 66.616794][ T5815] RDX: 000000000208e24b RSI: 0000200000001400 RDI: 0000000000000004 [ 66.616806][ T5815] RBP: 00007f0dd03df090 R08: 0000000000000000 R09: 0000000000000000 [ 66.616862][ T5815] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 66.616873][ T5815] R13: 0000000000000000 R14: 00007f0dd1fa5fa0 R15: 00007ffd34f691a8 [ 66.616889][ T5815] [ 66.617111][ T5815] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, [ 66.650918][ T5821] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.654434][ T5815] block bitmap and bg descriptor inconsistent: 7879 vs 220 free clusters [ 66.699062][ T5814] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 66.762215][ T5833] loop4: detected capacity change from 0 to 512 [ 66.804061][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.815322][ T5836] loop0: detected capacity change from 0 to 128 [ 66.817245][ T5836] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 66.848102][ T5833] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.874321][ T5836] ext4 filesystem being mounted at /99/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 66.879832][ T5833] ext4 filesystem being mounted at /100/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.928976][ T5853] loop2: detected capacity change from 0 to 512 [ 66.937277][ T5831] EXT4-fs error (device loop4): ext4_do_update_inode:5563: inode #4: comm syz.4.498: corrupted inode contents [ 66.961787][ T5853] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.964839][ T5831] EXT4-fs error (device loop4): ext4_dirty_inode:6454: inode #4: comm syz.4.498: mark_inode_dirty error [ 66.974434][ T5853] ext4 filesystem being mounted at /89/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.982568][ T5831] EXT4-fs error (device loop4): ext4_do_update_inode:5563: inode #4: comm syz.4.498: corrupted inode contents [ 67.088675][ T5857] netlink: 96 bytes leftover after parsing attributes in process `syz.0.501'. [ 67.097548][ T5831] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #4: comm syz.4.498: mark_inode_dirty error [ 67.116810][ T5831] Quota error (device loop4): write_blk: dquota write failed [ 67.124225][ T5831] Quota error (device loop4): find_free_dqentry: Can't write quota data block 5 [ 67.133337][ T5831] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 67.143249][ T5831] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.498: Failed to acquire dquot type 1 [ 67.158669][ T3303] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 67.174643][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.190410][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.191611][ T29] audit: type=1326 audit(1753963778.230:1846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5864 comm="syz.1.502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f771be9a9 code=0x7ffc0000 [ 67.222703][ T29] audit: type=1326 audit(1753963778.230:1847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5864 comm="syz.1.502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5f771be9a9 code=0x7ffc0000 [ 67.246037][ T29] audit: type=1326 audit(1753963778.230:1848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5864 comm="syz.1.502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f771be9a9 code=0x7ffc0000 [ 67.278995][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.288311][ T5869] FAULT_INJECTION: forcing a failure. [ 67.288311][ T5869] name failslab, interval 1, probability 0, space 0, times 0 [ 67.301038][ T5869] CPU: 0 UID: 0 PID: 5869 Comm: syz.0.503 Not tainted 6.16.0-syzkaller-06699-ge8d780dcd957 #0 PREEMPT(voluntary) [ 67.301070][ T5869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 67.301084][ T5869] Call Trace: [ 67.301090][ T5869] [ 67.301098][ T5869] __dump_stack+0x1d/0x30 [ 67.301120][ T5869] dump_stack_lvl+0xe8/0x140 [ 67.301156][ T5869] dump_stack+0x15/0x1b [ 67.301178][ T5869] should_fail_ex+0x265/0x280 [ 67.301201][ T5869] should_failslab+0x8c/0xb0 [ 67.301235][ T5869] kmem_cache_alloc_node_noprof+0x57/0x320 [ 67.301258][ T5869] ? __alloc_skb+0x101/0x320 [ 67.301304][ T5869] __alloc_skb+0x101/0x320 [ 67.301334][ T5869] netlink_alloc_large_skb+0xba/0xf0 [ 67.301366][ T5869] netlink_sendmsg+0x3cf/0x6b0 [ 67.301492][ T5869] ? __pfx_netlink_sendmsg+0x10/0x10 [ 67.301525][ T5869] __sock_sendmsg+0x142/0x180 [ 67.301549][ T5869] ____sys_sendmsg+0x31e/0x4e0 [ 67.301585][ T5869] ___sys_sendmsg+0x17b/0x1d0 [ 67.301639][ T5869] __x64_sys_sendmsg+0xd4/0x160 [ 67.301675][ T5869] x64_sys_call+0x191e/0x2ff0 [ 67.301694][ T5869] do_syscall_64+0xd2/0x200 [ 67.301713][ T5869] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 67.301776][ T5869] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 67.301807][ T5869] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.301832][ T5869] RIP: 0033:0x7f2b2289e9a9 [ 67.301845][ T5869] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 67.301861][ T5869] RSP: 002b:00007f2b20eff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 67.301878][ T5869] RAX: ffffffffffffffda RBX: 00007f2b22ac5fa0 RCX: 00007f2b2289e9a9 [ 67.301909][ T5869] RDX: 0000000000000010 RSI: 00002000000001c0 RDI: 0000000000000005 [ 67.301920][ T5869] RBP: 00007f2b20eff090 R08: 0000000000000000 R09: 0000000000000000 [ 67.301931][ T5869] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 67.301950][ T5869] R13: 0000000000000000 R14: 00007f2b22ac5fa0 R15: 00007ffc47b1d328 [ 67.301966][ T5869] [ 67.512651][ T5886] loop2: detected capacity change from 0 to 512 [ 67.542174][ T5886] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.562570][ T5886] ext4 filesystem being mounted at /90/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.582120][ T5901] loop0: detected capacity change from 0 to 512 [ 67.589429][ T5901] EXT4-fs: Ignoring removed mblk_io_submit option [ 67.596767][ T5901] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 67.606661][ T5901] EXT4-fs error (device loop0): ext4_orphan_get:1393: inode #15: comm syz.0.509: iget: bad extended attribute block 1 [ 67.622496][ T5901] EXT4-fs error (device loop0): ext4_orphan_get:1398: comm syz.0.509: couldn't read orphan inode 15 (err -117) [ 67.642875][ T5901] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.656125][ T5901] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 7879 vs 220 free clusters [ 67.693145][ T5888] loop4: detected capacity change from 0 to 512 [ 67.708859][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.718447][ T5888] EXT4-fs: Ignoring removed oldalloc option [ 67.724501][ T5888] ext4: Unknown parameter 'smackfsfloor' [ 67.743815][ T5928] loop2: detected capacity change from 0 to 128 [ 67.751046][ T5888] netlink: 256 bytes leftover after parsing attributes in process `syz.4.505'. [ 67.764421][ T5928] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 67.774226][ T5937] loop3: detected capacity change from 0 to 512 [ 67.777699][ T5928] ext4 filesystem being mounted at /91/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 67.796785][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.812166][ T5937] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.824954][ T5937] ext4 filesystem being mounted at /118/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.856380][ T5937] EXT4-fs error (device loop3): ext4_do_update_inode:5563: inode #4: comm syz.3.516: corrupted inode contents [ 67.874217][ T5937] EXT4-fs error (device loop3): ext4_dirty_inode:6454: inode #4: comm syz.3.516: mark_inode_dirty error [ 67.890649][ T5954] netlink: 256 bytes leftover after parsing attributes in process `syz.1.519'. [ 67.919633][ T5959] netlink: 96 bytes leftover after parsing attributes in process `syz.2.514'. [ 67.945322][ T5961] loop0: detected capacity change from 0 to 2048 [ 67.954592][ T5937] EXT4-fs error (device loop3): ext4_do_update_inode:5563: inode #4: comm syz.3.516: corrupted inode contents [ 67.968346][ T5937] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #4: comm syz.3.516: mark_inode_dirty error [ 67.980230][ T5937] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.516: Failed to acquire dquot type 1 [ 68.005203][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.015383][ T5961] loop0: p1 < > p4 [ 68.020360][ T5961] loop0: p4 size 722688 extends beyond EOD, truncated [ 68.033189][ T5961] netlink: 16 bytes leftover after parsing attributes in process `syz.0.521'. [ 68.061015][ T3315] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 68.088367][ T5989] netlink: 12 bytes leftover after parsing attributes in process `syz.3.525'. [ 68.541498][ T6011] loop2: detected capacity change from 0 to 1024 [ 68.574385][ T6011] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.787108][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.001059][ T6093] loop3: detected capacity change from 0 to 512 [ 69.008118][ T6093] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 69.020343][ T6093] EXT4-fs (loop3): 1 orphan inode deleted [ 69.026069][ T6093] EXT4-fs (loop3): 1 truncate cleaned up [ 69.032589][ T6093] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.047033][ T6093] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 69.081618][ T6093] EXT4-fs (loop3): Remounting filesystem read-only [ 69.088186][ T6093] EXT4-fs (loop3): error restoring inline_data for inode -- potential data loss! (inode 12, error -30) [ 69.157299][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.199446][ T6111] loop2: detected capacity change from 0 to 1024 [ 69.261392][ T6111] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.386932][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.476522][ T6124] __nla_validate_parse: 7 callbacks suppressed [ 69.476606][ T6124] netlink: 12 bytes leftover after parsing attributes in process `syz.2.562'. [ 69.499884][ T6128] FAULT_INJECTION: forcing a failure. [ 69.499884][ T6128] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 69.512987][ T6128] CPU: 0 UID: 0 PID: 6128 Comm: syz.3.566 Not tainted 6.16.0-syzkaller-06699-ge8d780dcd957 #0 PREEMPT(voluntary) [ 69.513018][ T6128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 69.513029][ T6128] Call Trace: [ 69.513035][ T6128] [ 69.513041][ T6128] __dump_stack+0x1d/0x30 [ 69.513060][ T6128] dump_stack_lvl+0xe8/0x140 [ 69.513126][ T6128] dump_stack+0x15/0x1b [ 69.513139][ T6128] should_fail_ex+0x265/0x280 [ 69.513157][ T6128] should_fail+0xb/0x20 [ 69.513255][ T6128] should_fail_usercopy+0x1a/0x20 [ 69.513277][ T6128] _copy_to_user+0x20/0xa0 [ 69.513302][ T6128] simple_read_from_buffer+0xb5/0x130 [ 69.513344][ T6128] proc_fail_nth_read+0x10e/0x150 [ 69.513372][ T6128] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 69.513411][ T6128] vfs_read+0x19d/0x6f0 [ 69.513492][ T6128] ? __rcu_read_unlock+0x4f/0x70 [ 69.513524][ T6128] ? __fget_files+0x184/0x1c0 [ 69.513553][ T6128] ksys_read+0xda/0x1a0 [ 69.513617][ T6128] __x64_sys_read+0x40/0x50 [ 69.513643][ T6128] x64_sys_call+0x27bc/0x2ff0 [ 69.513716][ T6128] do_syscall_64+0xd2/0x200 [ 69.513736][ T6128] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 69.513763][ T6128] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 69.513836][ T6128] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.513858][ T6128] RIP: 0033:0x7f2ba974d3bc [ 69.513873][ T6128] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 69.513892][ T6128] RSP: 002b:00007f2ba7db7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 69.513912][ T6128] RAX: ffffffffffffffda RBX: 00007f2ba9975fa0 RCX: 00007f2ba974d3bc [ 69.514039][ T6128] RDX: 000000000000000f RSI: 00007f2ba7db70a0 RDI: 0000000000000005 [ 69.514052][ T6128] RBP: 00007f2ba7db7090 R08: 0000000000000000 R09: 0000000000000000 [ 69.514065][ T6128] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 69.514078][ T6128] R13: 0000000000000000 R14: 00007f2ba9975fa0 R15: 00007ffd6912a0c8 [ 69.514097][ T6128] [ 69.925677][ T6144] loop4: detected capacity change from 0 to 128 [ 69.946910][ T6144] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 69.969870][ T6144] ext4 filesystem being mounted at /111/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 69.996831][ T6156] loop0: detected capacity change from 0 to 512 [ 70.045387][ T6162] loop2: detected capacity change from 0 to 2048 [ 70.062309][ T6156] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.075267][ T6156] ext4 filesystem being mounted at /113/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.089587][ T6162] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.148415][ T6162] netlink: 256 bytes leftover after parsing attributes in process `syz.2.575'. [ 70.163066][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.164253][ T6091] netlink: 24 bytes leftover after parsing attributes in process `syz.1.557'. [ 70.180076][ T6170] netlink: 96 bytes leftover after parsing attributes in process `syz.4.570'. [ 70.226600][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.249742][ T6184] loop0: detected capacity change from 0 to 512 [ 70.311534][ T6184] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.331915][ T6184] ext4 filesystem being mounted at /115/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.431160][ T6217] netlink: 'syz.3.586': attribute type 3 has an invalid length. [ 70.449521][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.459511][ T3304] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 70.505857][ T6225] netlink: 12 bytes leftover after parsing attributes in process `syz.4.587'. [ 70.551768][ T6232] loop3: detected capacity change from 0 to 2048 [ 70.565250][ T6237] loop0: detected capacity change from 0 to 512 [ 70.600297][ T6237] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.609335][ T6232] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.622170][ T6237] ext4 filesystem being mounted at /118/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.652480][ T6232] netlink: 256 bytes leftover after parsing attributes in process `syz.3.589'. [ 70.706367][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.731190][ T6237] EXT4-fs error (device loop0): ext4_do_update_inode:5563: inode #4: comm syz.0.594: corrupted inode contents [ 70.765489][ T6237] EXT4-fs error (device loop0): ext4_dirty_inode:6454: inode #4: comm syz.0.594: mark_inode_dirty error [ 70.781442][ T6237] EXT4-fs error (device loop0): ext4_do_update_inode:5563: inode #4: comm syz.0.594: corrupted inode contents [ 70.795423][ T6237] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #4: comm syz.0.594: mark_inode_dirty error [ 70.806820][ T6237] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.594: Failed to acquire dquot type 1 [ 70.844248][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.939156][ T6267] loop0: detected capacity change from 0 to 512 [ 70.975090][ T6267] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.007304][ T6273] loop4: detected capacity change from 0 to 128 [ 71.024442][ T6267] ext4 filesystem being mounted at /120/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 71.057260][ T6273] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 71.084037][ T6261] geneve1 speed is unknown, defaulting to 1000 [ 71.091775][ T6273] ext4 filesystem being mounted at /115/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 71.115210][ T6230] netlink: 24 bytes leftover after parsing attributes in process `syz.1.591'. [ 71.171797][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.229153][ T6283] loop0: detected capacity change from 0 to 164 [ 71.238978][ T6283] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 71.258444][ T6283] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 71.278013][ T6283] rock: directory entry would overflow storage [ 71.284243][ T6283] rock: sig=0x4f50, size=4, remaining=3 [ 71.289816][ T6283] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 71.309262][ T6296] netlink: 96 bytes leftover after parsing attributes in process `syz.4.600'. [ 71.319402][ T6283] netlink: 32 bytes leftover after parsing attributes in process `syz.0.601'. [ 71.466237][ T29] kauditd_printk_skb: 325 callbacks suppressed [ 71.466251][ T29] audit: type=1326 audit(1753963782.500:2166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6319 comm="syz.1.604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f771be9a9 code=0x7ffc0000 [ 71.495851][ T29] audit: type=1326 audit(1753963782.500:2167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6319 comm="syz.1.604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f771be9a9 code=0x7ffc0000 [ 71.560729][ T6322] loop3: detected capacity change from 0 to 2048 [ 71.570904][ T29] audit: type=1326 audit(1753963782.500:2168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6319 comm="syz.1.604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=117 compat=0 ip=0x7f5f771be9a9 code=0x7ffc0000 [ 71.579704][ T6324] netlink: 16 bytes leftover after parsing attributes in process `syz.1.606'. [ 71.594377][ T29] audit: type=1326 audit(1753963782.500:2169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6319 comm="syz.1.604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f771be9a9 code=0x7ffc0000 [ 71.613782][ T6328] loop2: detected capacity change from 0 to 512 [ 71.626484][ T29] audit: type=1326 audit(1753963782.500:2170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6319 comm="syz.1.604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f771be9a9 code=0x7ffc0000 [ 71.673563][ T6324] bridge0: entered promiscuous mode [ 71.680638][ T6324] bridge0: port 3(macvlan2) entered blocking state [ 71.682355][ T29] audit: type=1400 audit(1753963782.610:2171): avc: denied { create } for pid=6323 comm="syz.1.606" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 71.687238][ T6324] bridge0: port 3(macvlan2) entered disabled state [ 71.714279][ T6324] macvlan2: entered allmulticast mode [ 71.719676][ T6324] bridge0: entered allmulticast mode [ 71.723552][ T6322] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.725691][ T6328] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.737783][ T3304] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 71.750269][ T6328] ext4 filesystem being mounted at /111/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 71.775219][ T6324] macvlan2: left allmulticast mode [ 71.780417][ T6324] bridge0: left allmulticast mode [ 71.786068][ T6328] EXT4-fs error (device loop2): ext4_do_update_inode:5563: inode #4: comm syz.2.607: corrupted inode contents [ 71.795586][ T6324] bridge0: left promiscuous mode [ 71.798659][ T6328] EXT4-fs error (device loop2): ext4_dirty_inode:6454: inode #4: comm syz.2.607: mark_inode_dirty error [ 71.805039][ T29] audit: type=1400 audit(1753963782.840:2172): avc: denied { unmount } for pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 71.816260][ T6328] EXT4-fs error (device loop2): ext4_do_update_inode:5563: inode #4: comm syz.2.607: corrupted inode contents [ 71.845802][ T6328] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #4: comm syz.2.607: mark_inode_dirty error [ 71.857388][ T6328] Quota error (device loop2): write_blk: dquota write failed [ 71.864850][ T6328] Quota error (device loop2): find_free_dqentry: Can't write quota data block 5 [ 71.873918][ T6328] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 71.883867][ T6328] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.607: Failed to acquire dquot type 1 [ 71.924587][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.960712][ T6374] loop2: detected capacity change from 0 to 512 [ 71.991709][ T6374] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.008945][ T6374] ext4 filesystem being mounted at /112/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 72.025564][ T6374] EXT4-fs error (device loop2): ext4_do_update_inode:5563: inode #4: comm syz.2.622: corrupted inode contents [ 72.038674][ T6374] EXT4-fs error (device loop2): ext4_dirty_inode:6454: inode #4: comm syz.2.622: mark_inode_dirty error [ 72.051079][ T6374] EXT4-fs error (device loop2): ext4_do_update_inode:5563: inode #4: comm syz.2.622: corrupted inode contents [ 72.086919][ T6374] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #4: comm syz.2.622: mark_inode_dirty error [ 72.140801][ T6374] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.622: Failed to acquire dquot type 1 [ 72.178199][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.225183][ T6410] bond1 (unregistering): Released all slaves [ 72.264303][ T6410] loop2: detected capacity change from 0 to 512 [ 72.289626][ T6410] EXT4-fs error (device loop2): ext4_do_update_inode:5563: inode #16: comm syz.2.621: corrupted inode contents [ 72.303273][ T6410] EXT4-fs error (device loop2): ext4_dirty_inode:6454: inode #16: comm syz.2.621: mark_inode_dirty error [ 72.314931][ T6410] EXT4-fs error (device loop2): ext4_do_update_inode:5563: inode #16: comm syz.2.621: corrupted inode contents [ 72.328468][ T6410] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #16: comm syz.2.621: mark_inode_dirty error [ 72.340033][ T6410] EXT4-fs error (device loop2): ext4_do_update_inode:5563: inode #16: comm syz.2.621: corrupted inode contents [ 72.356063][ T6410] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 72.367919][ T6410] EXT4-fs error (device loop2): ext4_do_update_inode:5563: inode #16: comm syz.2.621: corrupted inode contents [ 72.380525][ T6410] EXT4-fs error (device loop2): ext4_truncate:4592: inode #16: comm syz.2.621: mark_inode_dirty error [ 72.391767][ T6410] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 72.393531][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.401839][ T6410] EXT4-fs (loop2): 1 truncate cleaned up [ 72.411243][ T3587] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:39: Failed to release dquot type 1 [ 72.427593][ T6410] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.440652][ T6410] ext4 filesystem being mounted at /114/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 72.466543][ T6505] loop3: detected capacity change from 0 to 512 [ 72.486981][ T6505] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.500546][ T6505] ext4 filesystem being mounted at /146/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 72.517615][ T6505] EXT4-fs error (device loop3): ext4_do_update_inode:5563: inode #4: comm syz.3.628: corrupted inode contents [ 72.529559][ T6505] EXT4-fs error (device loop3): ext4_dirty_inode:6454: inode #4: comm syz.3.628: mark_inode_dirty error [ 72.542057][ T6505] EXT4-fs error (device loop3): ext4_do_update_inode:5563: inode #4: comm syz.3.628: corrupted inode contents [ 72.553910][ T6509] loop4: detected capacity change from 0 to 512 [ 72.563530][ T6505] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #4: comm syz.3.628: mark_inode_dirty error [ 72.578430][ T6520] loop0: detected capacity change from 0 to 512 [ 72.590887][ T6509] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.604643][ T6505] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.628: Failed to acquire dquot type 1 [ 72.616538][ T6509] ext4 filesystem being mounted at /123/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 72.628975][ T6520] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.642376][ T6521] EXT4-fs error (device loop3): ext4_do_update_inode:5563: inode #4: comm syz.3.628: corrupted inode contents [ 72.654264][ T6520] ext4 filesystem being mounted at /130/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 72.659323][ T6505] bridge0: entered promiscuous mode [ 72.671417][ T6505] bridge0: port 3(macvlan2) entered blocking state [ 72.677953][ T6505] bridge0: port 3(macvlan2) entered disabled state [ 72.684898][ T6509] EXT4-fs error (device loop4): ext4_do_update_inode:5563: inode #4: comm syz.4.629: corrupted inode contents [ 72.685270][ T6505] macvlan2: entered allmulticast mode [ 72.698749][ T6520] EXT4-fs error (device loop0): ext4_do_update_inode:5563: inode #4: comm syz.0.632: corrupted inode contents [ 72.701991][ T6505] bridge0: entered allmulticast mode [ 72.715403][ T6521] EXT4-fs error (device loop3): ext4_dirty_inode:6454: inode #4: comm syz.3.628: mark_inode_dirty error [ 72.727251][ T6509] EXT4-fs error (device loop4): ext4_dirty_inode:6454: inode #4: comm syz.4.629: mark_inode_dirty error [ 72.741547][ T6505] macvlan2: left allmulticast mode [ 72.742471][ T6509] EXT4-fs error (device loop4): ext4_do_update_inode:5563: inode #4: comm syz.4.629: corrupted inode contents [ 72.746716][ T6505] bridge0: left allmulticast mode [ 72.747114][ T6505] bridge0: left promiscuous mode [ 72.759258][ T6521] EXT4-fs error (device loop3): ext4_do_update_inode:5563: inode #4: comm syz.3.628: corrupted inode contents [ 72.782935][ T6520] EXT4-fs error (device loop0): ext4_dirty_inode:6454: inode #4: comm syz.0.632: mark_inode_dirty error [ 72.788932][ T6509] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #4: comm syz.4.629: mark_inode_dirty error [ 72.807035][ T6509] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.629: Failed to acquire dquot type 1 [ 72.818805][ T6530] EXT4-fs error (device loop4): ext4_do_update_inode:5563: inode #4: comm syz.4.629: corrupted inode contents [ 72.822689][ T6520] EXT4-fs error (device loop0): ext4_do_update_inode:5563: inode #4: comm syz.0.632: corrupted inode contents [ 72.831967][ T6530] EXT4-fs error (device loop4): ext4_dirty_inode:6454: inode #4: comm syz.4.629: mark_inode_dirty error [ 72.858706][ T6520] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #4: comm syz.0.632: mark_inode_dirty error [ 72.882670][ T6521] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #4: comm syz.3.628: mark_inode_dirty error [ 72.882699][ T6530] EXT4-fs error (device loop4): ext4_do_update_inode:5563: inode #4: comm syz.4.629: corrupted inode contents [ 72.907732][ T6521] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.628: Failed to acquire dquot type 1 [ 72.908834][ T6530] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #4: comm syz.4.629: mark_inode_dirty error [ 72.919003][ T6520] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.632: Failed to acquire dquot type 1 [ 72.932565][ T6530] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.629: Failed to acquire dquot type 1 [ 72.987363][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.003408][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.024830][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.032483][ T6550] geneve1 speed is unknown, defaulting to 1000 [ 73.058433][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.876600][ T6625] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 73.997934][ T6643] loop0: detected capacity change from 0 to 128 [ 74.011015][ T6643] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 74.038411][ T6643] ext4 filesystem being mounted at /133/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 74.049990][ T6651] loop3: detected capacity change from 0 to 512 [ 74.053322][ T6652] loop4: detected capacity change from 0 to 512 [ 74.082040][ T6652] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.094965][ T6652] ext4 filesystem being mounted at /127/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.096201][ T6651] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.129076][ T6651] ext4 filesystem being mounted at /151/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.146249][ T6651] EXT4-fs error (device loop3): ext4_do_update_inode:5563: inode #4: comm syz.3.663: corrupted inode contents [ 74.170702][ T6651] EXT4-fs error (device loop3): ext4_dirty_inode:6454: inode #4: comm syz.3.663: mark_inode_dirty error [ 74.217452][ T6651] EXT4-fs error (device loop3): ext4_do_update_inode:5563: inode #4: comm syz.3.663: corrupted inode contents [ 74.259667][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.278859][ T6666] loop2: detected capacity change from 0 to 512 [ 74.285888][ T6666] EXT4-fs: Ignoring removed mblk_io_submit option [ 74.293331][ T6651] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #4: comm syz.3.663: mark_inode_dirty error [ 74.304768][ T3303] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 74.314426][ T6651] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.663: Failed to acquire dquot type 1 [ 74.326124][ T6666] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 74.343275][ T6666] EXT4-fs (loop2): 1 truncate cleaned up [ 74.359990][ T6666] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.434290][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.503857][ T6682] geneve1 speed is unknown, defaulting to 1000 [ 74.572825][ T6694] __nla_validate_parse: 8 callbacks suppressed [ 74.572839][ T6694] netlink: 12 bytes leftover after parsing attributes in process `syz.1.671'. [ 74.769233][ T6724] netlink: 60 bytes leftover after parsing attributes in process `syz.1.673'. [ 74.863216][ T6731] loop0: detected capacity change from 0 to 512 [ 74.891213][ T6731] ext4 filesystem being mounted at /136/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.904528][ T6731] EXT4-fs error (device loop0): ext4_do_update_inode:5563: inode #4: comm syz.0.676: corrupted inode contents [ 74.936857][ T6731] EXT4-fs error (device loop0): ext4_dirty_inode:6454: inode #4: comm syz.0.676: mark_inode_dirty error [ 75.044549][ T6731] EXT4-fs error (device loop0): ext4_do_update_inode:5563: inode #4: comm syz.0.676: corrupted inode contents [ 75.050236][ T6738] netlink: 16 bytes leftover after parsing attributes in process `syz.0.676'. [ 75.107328][ T6738] bridge0: entered promiscuous mode [ 75.118980][ T6738] bridge0: port 4(macvlan2) entered blocking state [ 75.125526][ T6738] bridge0: port 4(macvlan2) entered disabled state [ 75.127356][ T6731] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #4: comm syz.0.676: mark_inode_dirty error [ 75.166647][ T6731] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.676: Failed to acquire dquot type 1 [ 75.170322][ T6738] macvlan2: entered allmulticast mode [ 75.183267][ T6738] bridge0: entered allmulticast mode [ 75.187869][ T6747] loop2: detected capacity change from 0 to 2048 [ 75.209060][ T6738] macvlan2: left allmulticast mode [ 75.214204][ T6738] bridge0: left allmulticast mode [ 75.230157][ T6747] netlink: 256 bytes leftover after parsing attributes in process `syz.2.682'. [ 75.240228][ T6737] EXT4-fs error (device loop0): ext4_do_update_inode:5563: inode #4: comm syz.0.676: corrupted inode contents [ 75.246069][ T6738] bridge0: left promiscuous mode [ 75.254052][ T6737] EXT4-fs error (device loop0): ext4_dirty_inode:6454: inode #4: comm syz.0.676: mark_inode_dirty error [ 75.273518][ T6737] EXT4-fs error (device loop0): ext4_do_update_inode:5563: inode #4: comm syz.0.676: corrupted inode contents [ 75.295640][ T6737] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #4: comm syz.0.676: mark_inode_dirty error [ 75.336058][ T6737] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.676: Failed to acquire dquot type 1 [ 75.355054][ T6764] loop3: detected capacity change from 0 to 128 [ 75.369872][ T6764] ext4 filesystem being mounted at /153/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 75.383934][ T6677] loop4: detected capacity change from 0 to 1024 [ 75.505705][ T6776] netlink: 96 bytes leftover after parsing attributes in process `syz.3.683'. [ 75.653467][ T6788] netlink: 12 bytes leftover after parsing attributes in process `syz.0.687'. [ 75.792855][ T6813] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 75.847036][ T6821] netlink: 12 bytes leftover after parsing attributes in process `syz.3.694'. [ 76.055157][ T6840] ieee802154 phy0 wpan0: encryption failed: -22 [ 76.075649][ T6843] loop4: detected capacity change from 0 to 128 [ 76.093416][ T6845] netlink: 12 bytes leftover after parsing attributes in process `syz.2.702'. [ 76.110332][ T6843] ext4 filesystem being mounted at /132/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 76.262634][ T6859] netlink: 96 bytes leftover after parsing attributes in process `syz.4.701'. [ 76.312724][ T6861] netlink: 12 bytes leftover after parsing attributes in process `syz.3.707'. [ 76.524511][ T29] kauditd_printk_skb: 172 callbacks suppressed [ 76.524526][ T29] audit: type=1400 audit(1753963787.560:2316): avc: denied { create } for pid=6886 comm="syz.4.712" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 76.569980][ T29] audit: type=1400 audit(1753963787.560:2317): avc: denied { ioctl } for pid=6886 comm="syz.4.712" path="socket:[10932]" dev="sockfs" ino=10932 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 76.598850][ T29] audit: type=1326 audit(1753963787.630:2318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6886 comm="syz.4.712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4fdebe9a9 code=0x7ffc0000 [ 76.622224][ T29] audit: type=1326 audit(1753963787.630:2319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6886 comm="syz.4.712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4fdebe9a9 code=0x7ffc0000 [ 76.645745][ T29] audit: type=1326 audit(1753963787.630:2320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6886 comm="syz.4.712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=448 compat=0 ip=0x7fb4fdebe9a9 code=0x7ffc0000 [ 76.669072][ T29] audit: type=1326 audit(1753963787.630:2321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6886 comm="syz.4.712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4fdebe9a9 code=0x7ffc0000 [ 76.693298][ T29] audit: type=1326 audit(1753963787.640:2322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6886 comm="syz.4.712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb4fdebe9a9 code=0x7ffc0000 [ 76.702243][ T6889] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 76.716580][ T29] audit: type=1326 audit(1753963787.640:2323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6886 comm="syz.4.712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4fdebe9a9 code=0x7ffc0000 [ 76.755106][ T29] audit: type=1326 audit(1753963787.640:2324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6886 comm="syz.4.712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4fdebe9a9 code=0x7ffc0000 [ 76.757963][ T6892] loop4: detected capacity change from 0 to 1764 [ 76.778465][ T29] audit: type=1326 audit(1753963787.640:2325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6886 comm="syz.4.712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb4fdebd310 code=0x7ffc0000 [ 76.806751][ T6892] iso9660: Unknown parameter 'dmo [ 76.806751][ T6892] k' [ 76.877244][ T6905] loop0: detected capacity change from 0 to 512 [ 76.901392][ T6905] ext4 filesystem being mounted at /142/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.915029][ T6905] EXT4-fs error (device loop0): ext4_do_update_inode:5563: inode #4: comm syz.0.716: corrupted inode contents [ 76.929575][ T6905] EXT4-fs error (device loop0): ext4_dirty_inode:6454: inode #4: comm syz.0.716: mark_inode_dirty error [ 76.941252][ T6905] EXT4-fs error (device loop0): ext4_do_update_inode:5563: inode #4: comm syz.0.716: corrupted inode contents [ 76.954105][ T6905] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #4: comm syz.0.716: mark_inode_dirty error [ 76.968741][ T6905] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.716: Failed to acquire dquot type 1 [ 77.017981][ T6928] loop3: detected capacity change from 0 to 512 [ 77.025706][ T6928] EXT4-fs: Ignoring removed mblk_io_submit option [ 77.032689][ T6928] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 77.045166][ T6930] geneve1 speed is unknown, defaulting to 1000 [ 77.057597][ T6928] EXT4-fs (loop3): 1 truncate cleaned up [ 77.243093][ T6987] SELinux: policydb magic number 0x77359400 does not match expected magic number 0xf97cff8c [ 77.254961][ T6987] SELinux: failed to load policy [ 77.288954][ T6991] loop2: detected capacity change from 0 to 256 [ 77.342377][ T3386] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 77.350356][ T3386] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 77.358100][ T3386] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 77.365860][ T3386] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 77.373673][ T3386] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 77.381436][ T3386] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 77.389272][ T3386] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 77.396998][ T3386] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 77.404749][ T3386] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 77.412540][ T3386] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 77.420356][ T3386] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 77.428113][ T3386] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 77.435876][ T3386] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 77.443638][ T3386] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 77.451450][ T3386] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 77.459181][ T3386] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 77.466972][ T3386] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 77.474712][ T3386] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 77.482439][ T3386] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 77.490200][ T3386] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 77.497928][ T3386] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 77.505748][ T3386] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 77.513580][ T3386] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 77.521332][ T3386] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 77.529122][ T3386] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 77.536903][ T3386] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 77.541484][ T7004] geneve1 speed is unknown, defaulting to 1000 [ 77.544655][ T3386] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 77.558582][ T3386] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 77.566311][ T3386] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 77.574061][ T3386] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 77.581833][ T3386] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 77.589588][ T3386] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 77.597319][ T3386] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 77.605062][ T3386] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 77.612808][ T3386] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 77.620570][ T3386] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 77.628324][ T3386] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 77.636144][ T3386] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 77.644020][ T3386] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 77.651772][ T3386] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 77.659515][ T3386] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 77.667245][ T3386] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 77.675083][ T3386] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 77.684019][ T3386] hid-generic 0000:007F:FFFFFFFE.0011: hidraw0: HID v0.00 Device [syz1] on syz1 [ 77.806703][ T7053] loop0: detected capacity change from 0 to 128 [ 77.815589][ T7053] ext4 filesystem being mounted at /153/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 77.884539][ T7077] loop2: detected capacity change from 0 to 512 [ 77.898866][ T7077] EXT4-fs: Ignoring removed mblk_io_submit option [ 77.907561][ T7077] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 77.920287][ T7077] EXT4-fs (loop2): 1 truncate cleaned up [ 78.029224][ T3409] hid-generic 0000:007F:FFFFFFFE.0012: unknown main item tag 0x0 [ 78.037003][ T3409] hid-generic 0000:007F:FFFFFFFE.0012: unknown main item tag 0x0 [ 78.044781][ T3409] hid-generic 0000:007F:FFFFFFFE.0012: unknown main item tag 0x0 [ 78.052607][ T3409] hid-generic 0000:007F:FFFFFFFE.0012: unknown main item tag 0x0 [ 78.060437][ T3409] hid-generic 0000:007F:FFFFFFFE.0012: unknown main item tag 0x0 [ 78.068164][ T3409] hid-generic 0000:007F:FFFFFFFE.0012: unknown main item tag 0x0 [ 78.075985][ T3409] hid-generic 0000:007F:FFFFFFFE.0012: unknown main item tag 0x0 [ 78.083818][ T3409] hid-generic 0000:007F:FFFFFFFE.0012: unknown main item tag 0x0 [ 78.091685][ T3409] hid-generic 0000:007F:FFFFFFFE.0012: unknown main item tag 0x0 [ 78.099425][ T3409] hid-generic 0000:007F:FFFFFFFE.0012: unknown main item tag 0x0 [ 78.107146][ T3409] hid-generic 0000:007F:FFFFFFFE.0012: unknown main item tag 0x0 [ 78.109470][ T7088] loop2: detected capacity change from 0 to 256 [ 78.114900][ T3409] hid-generic 0000:007F:FFFFFFFE.0012: unknown main item tag 0x0 [ 78.129002][ T3409] hid-generic 0000:007F:FFFFFFFE.0012: unknown main item tag 0x0 [ 78.136886][ T3409] hid-generic 0000:007F:FFFFFFFE.0012: unknown main item tag 0x0 [ 78.144730][ T3409] hid-generic 0000:007F:FFFFFFFE.0012: unknown main item tag 0x0 [ 78.152541][ T3409] hid-generic 0000:007F:FFFFFFFE.0012: unknown main item tag 0x0 [ 78.160289][ T3409] hid-generic 0000:007F:FFFFFFFE.0012: unknown main item tag 0x0 [ 78.168198][ T3409] hid-generic 0000:007F:FFFFFFFE.0012: unknown main item tag 0x0 [ 78.176051][ T3409] hid-generic 0000:007F:FFFFFFFE.0012: unknown main item tag 0x0 [ 78.184019][ T3409] hid-generic 0000:007F:FFFFFFFE.0012: unknown main item tag 0x0 [ 78.191828][ T3409] hid-generic 0000:007F:FFFFFFFE.0012: unknown main item tag 0x0 [ 78.199593][ T3409] hid-generic 0000:007F:FFFFFFFE.0012: unknown main item tag 0x0 [ 78.207320][ T3409] hid-generic 0000:007F:FFFFFFFE.0012: unknown main item tag 0x0 [ 78.215107][ T3409] hid-generic 0000:007F:FFFFFFFE.0012: unknown main item tag 0x0 [ 78.222896][ T3409] hid-generic 0000:007F:FFFFFFFE.0012: unknown main item tag 0x0 [ 78.230702][ T3409] hid-generic 0000:007F:FFFFFFFE.0012: unknown main item tag 0x0 [ 78.238619][ T3409] hid-generic 0000:007F:FFFFFFFE.0012: unknown main item tag 0x0 [ 78.246446][ T3409] hid-generic 0000:007F:FFFFFFFE.0012: unknown main item tag 0x0 [ 78.254276][ T3409] hid-generic 0000:007F:FFFFFFFE.0012: unknown main item tag 0x0 [ 78.262073][ T3409] hid-generic 0000:007F:FFFFFFFE.0012: unknown main item tag 0x0 [ 78.269792][ T3409] hid-generic 0000:007F:FFFFFFFE.0012: unknown main item tag 0x0 [ 78.277528][ T3409] hid-generic 0000:007F:FFFFFFFE.0012: unknown main item tag 0x0 [ 78.285250][ T3409] hid-generic 0000:007F:FFFFFFFE.0012: unknown main item tag 0x0 [ 78.293003][ T3409] hid-generic 0000:007F:FFFFFFFE.0012: unknown main item tag 0x0 [ 78.300775][ T3409] hid-generic 0000:007F:FFFFFFFE.0012: unknown main item tag 0x0 [ 78.308513][ T3409] hid-generic 0000:007F:FFFFFFFE.0012: unknown main item tag 0x0 [ 78.316357][ T3409] hid-generic 0000:007F:FFFFFFFE.0012: unknown main item tag 0x0 [ 78.324157][ T3409] hid-generic 0000:007F:FFFFFFFE.0012: unknown main item tag 0x0 [ 78.331971][ T3409] hid-generic 0000:007F:FFFFFFFE.0012: unknown main item tag 0x0 [ 78.339807][ T3409] hid-generic 0000:007F:FFFFFFFE.0012: unknown main item tag 0x0 [ 78.347534][ T3409] hid-generic 0000:007F:FFFFFFFE.0012: unknown main item tag 0x0 [ 78.355282][ T3409] hid-generic 0000:007F:FFFFFFFE.0012: unknown main item tag 0x0 [ 78.363007][ T3409] hid-generic 0000:007F:FFFFFFFE.0012: unknown main item tag 0x0 [ 78.378617][ T3409] hid-generic 0000:007F:FFFFFFFE.0012: hidraw0: HID v0.00 Device [syz1] on syz1 [ 78.437939][ T7112] geneve1 speed is unknown, defaulting to 1000 [ 78.519786][ T7153] loop2: detected capacity change from 0 to 512 [ 78.528891][ T7153] EXT4-fs: Ignoring removed mblk_io_submit option [ 78.536071][ T7153] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 78.551384][ T7156] netlink: 'syz.1.762': attribute type 4 has an invalid length. [ 78.552814][ T7157] IPVS: Error joining to the multicast group [ 78.560943][ T7153] EXT4-fs (loop2): 1 truncate cleaned up [ 78.570957][ T7160] loop0: detected capacity change from 0 to 128 [ 78.586669][ T7160] ext4 filesystem being mounted at /156/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 78.773237][ T7185] geneve1 speed is unknown, defaulting to 1000 [ 78.791237][ T7198] loop4: detected capacity change from 0 to 512 [ 78.820991][ T7198] ext4 filesystem being mounted at /138/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 78.938077][ T7226] IPVS: Error joining to the multicast group [ 79.356971][ T7248] netlink: 'syz.0.786': attribute type 4 has an invalid length. [ 79.461987][ T7250] loop0: detected capacity change from 0 to 512 [ 79.510431][ T7250] ext4 filesystem being mounted at /161/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.845828][ T7257] loop4: detected capacity change from 0 to 512 [ 79.875434][ T7264] geneve1 speed is unknown, defaulting to 1000 [ 79.884070][ T7257] ext4 filesystem being mounted at /142/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.045504][ T7303] __nla_validate_parse: 8 callbacks suppressed [ 80.045519][ T7303] netlink: 8 bytes leftover after parsing attributes in process `syz.0.796'. [ 80.063144][ T7314] bridge0: entered promiscuous mode [ 80.068427][ T7314] macvlan2: entered promiscuous mode [ 80.075400][ T7303] IPVS: Error joining to the multicast group [ 80.081126][ T7314] loop3: detected capacity change from 0 to 1024 [ 80.095519][ T7314] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 80.116039][ T7314] EXT4-fs error (device loop3): ext4_map_blocks:816: inode #3: block 1: comm syz.3.800: lblock 1 mapped to illegal pblock 1 (length 1) [ 80.165157][ T7323] loop4: detected capacity change from 0 to 512 [ 80.175185][ T7314] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.800: Failed to acquire dquot type 0 [ 80.219390][ T7325] loop2: detected capacity change from 0 to 512 [ 80.232249][ T7323] ext4 filesystem being mounted at /144/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.244416][ T7314] EXT4-fs error (device loop3): ext4_free_blocks:6587: comm syz.3.800: Freeing blocks not in datazone - block = 0, count = 4096 [ 80.259420][ T7325] EXT4-fs: Ignoring removed mblk_io_submit option [ 80.267246][ T7323] EXT4-fs error (device loop4): ext4_do_update_inode:5563: inode #4: comm syz.4.801: corrupted inode contents [ 80.284272][ T7325] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 80.295362][ T7314] EXT4-fs error (device loop3): ext4_read_inode_bitmap:139: comm syz.3.800: Invalid inode bitmap blk 0 in block_group 0 [ 80.298647][ T7323] EXT4-fs error (device loop4): ext4_dirty_inode:6454: inode #4: comm syz.4.801: mark_inode_dirty error [ 80.309527][ T7314] EXT4-fs error (device loop3) in ext4_free_inode:361: Corrupt filesystem [ 80.327699][ T3566] EXT4-fs error (device loop3): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:22: lblock 1 mapped to illegal pblock 1 (length 1) [ 80.342753][ T7323] EXT4-fs error (device loop4): ext4_do_update_inode:5563: inode #4: comm syz.4.801: corrupted inode contents [ 80.354766][ T3566] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:22: Failed to release dquot type 0 [ 80.355453][ T7325] EXT4-fs (loop2): 1 truncate cleaned up [ 80.372136][ T7323] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #4: comm syz.4.801: mark_inode_dirty error [ 80.383511][ T7323] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.801: Failed to acquire dquot type 1 [ 80.394955][ T7314] EXT4-fs (loop3): 1 orphan inode deleted [ 80.526952][ T7344] geneve1 speed is unknown, defaulting to 1000 [ 80.607297][ T7378] loop2: detected capacity change from 0 to 512 [ 80.620230][ T7378] ext4 filesystem being mounted at /148/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.879183][ T7401] loop0: detected capacity change from 0 to 512 [ 80.901391][ T7401] ext4 filesystem being mounted at /171/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.937818][ T7401] EXT4-fs error (device loop0): ext4_do_update_inode:5563: inode #4: comm syz.0.817: corrupted inode contents [ 81.000468][ T7401] EXT4-fs error (device loop0): ext4_dirty_inode:6454: inode #4: comm syz.0.817: mark_inode_dirty error [ 81.052694][ T7401] EXT4-fs error (device loop0): ext4_do_update_inode:5563: inode #4: comm syz.0.817: corrupted inode contents [ 81.080166][ T7401] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #4: comm syz.0.817: mark_inode_dirty error [ 81.116228][ T7401] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.817: Failed to acquire dquot type 1 [ 81.374850][ T7426] geneve1 speed is unknown, defaulting to 1000 [ 81.404806][ T7394] loop4: detected capacity change from 0 to 1024 [ 81.452845][ T7437] loop3: detected capacity change from 0 to 512 [ 81.484108][ T7437] ext4 filesystem being mounted at /189/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.533500][ T29] kauditd_printk_skb: 372 callbacks suppressed [ 81.533513][ T29] audit: type=1326 audit(1753963792.570:2684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7393 comm="syz.4.814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4fdebe9a9 code=0x7ffc0000 [ 81.564537][ T29] audit: type=1326 audit(1753963792.600:2685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7393 comm="syz.4.814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fb4fdebe9a9 code=0x7ffc0000 [ 81.638277][ T29] audit: type=1326 audit(1753963792.670:2686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7393 comm="syz.4.814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb4fdeb5967 code=0x7ffc0000 [ 81.661651][ T29] audit: type=1326 audit(1753963792.670:2687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7393 comm="syz.4.814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb4fde5ab89 code=0x7ffc0000 [ 81.685014][ T29] audit: type=1326 audit(1753963792.670:2688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7393 comm="syz.4.814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb4fdeb5967 code=0x7ffc0000 [ 81.708262][ T29] audit: type=1326 audit(1753963792.670:2689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7393 comm="syz.4.814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb4fde5ab89 code=0x7ffc0000 [ 81.731506][ T29] audit: type=1326 audit(1753963792.670:2690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7393 comm="syz.4.814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb4fdeb5967 code=0x7ffc0000 [ 81.754808][ T29] audit: type=1326 audit(1753963792.670:2691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7393 comm="syz.4.814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb4fde5ab89 code=0x7ffc0000 [ 81.778051][ T29] audit: type=1326 audit(1753963792.670:2692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7393 comm="syz.4.814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb4fdeb5967 code=0x7ffc0000 [ 81.801300][ T29] audit: type=1326 audit(1753963792.670:2693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7393 comm="syz.4.814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb4fde5ab89 code=0x7ffc0000 [ 82.016760][ T7471] loop2: detected capacity change from 0 to 512 [ 82.043624][ T7471] ext4 filesystem being mounted at /153/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 82.097957][ T7486] loop3: detected capacity change from 0 to 512 [ 82.119994][ T7486] ext4 filesystem being mounted at /191/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 82.146372][ T7486] EXT4-fs error (device loop3): ext4_do_update_inode:5563: inode #4: comm syz.3.831: corrupted inode contents [ 82.202265][ T7486] EXT4-fs error (device loop3): ext4_dirty_inode:6454: inode #4: comm syz.3.831: mark_inode_dirty error [ 82.243691][ T7502] loop4: detected capacity change from 0 to 128 [ 82.243713][ T7486] EXT4-fs error (device loop3): ext4_do_update_inode:5563: inode #4: comm syz.3.831: corrupted inode contents [ 82.270428][ T7501] loop2: detected capacity change from 0 to 512 [ 82.280134][ T7502] ext4 filesystem being mounted at /150/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 82.287160][ T7501] EXT4-fs: Ignoring removed mblk_io_submit option [ 82.300990][ T7501] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 82.325081][ T7486] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #4: comm syz.3.831: mark_inode_dirty error [ 82.357585][ T7501] EXT4-fs (loop2): 1 truncate cleaned up [ 82.385673][ T7486] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.831: Failed to acquire dquot type 1 [ 82.744431][ T7523] netlink: 60 bytes leftover after parsing attributes in process `syz.3.841'. [ 83.102011][ T7515] loop2: detected capacity change from 0 to 1024 [ 83.190983][ T7538] loop0: detected capacity change from 0 to 512 [ 83.210314][ T7538] ext4 filesystem being mounted at /179/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.245315][ T7553] netlink: 256 bytes leftover after parsing attributes in process `syz.4.847'. [ 83.319762][ T7564] loop2: detected capacity change from 0 to 256 [ 83.382029][ T7572] loop0: detected capacity change from 0 to 2048 [ 83.402126][ T7572] netlink: 256 bytes leftover after parsing attributes in process `syz.0.851'. [ 83.501423][ T7587] loop3: detected capacity change from 0 to 128 [ 83.510369][ T7587] ext4 filesystem being mounted at /194/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 83.880882][ T7597] loop2: detected capacity change from 0 to 1024 [ 84.044934][ T7619] loop2: detected capacity change from 0 to 512 [ 84.075110][ T7619] ext4 filesystem being mounted at /163/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.108148][ T7625] loop3: detected capacity change from 0 to 512 [ 84.135367][ T7625] ext4 filesystem being mounted at /198/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.173056][ T7637] netlink: 60 bytes leftover after parsing attributes in process `syz.4.863'. [ 84.250619][ T7646] loop2: detected capacity change from 0 to 512 [ 84.271213][ T7646] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 84.329553][ T7646] EXT4-fs (loop2): orphan cleanup on readonly fs [ 84.335970][ T7646] EXT4-fs error (device loop2): ext4_ext_check_inode:523: inode #3: comm syz.2.866: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 7, max 0(0), depth 0(0) [ 84.356104][ T7646] EXT4-fs error (device loop2): ext4_quota_enable:7127: comm syz.2.866: Bad quota inode: 3, type: 0 [ 84.367664][ T7646] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 84.382367][ T7646] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 84.406085][ T7646] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.866: bg 0: block 64: padding at end of block bitmap is not set [ 84.475627][ T7670] geneve1 speed is unknown, defaulting to 1000 [ 84.566621][ T3379] hid-generic 0000:007F:FFFFFFFE.0013: unknown main item tag 0x0 [ 84.574482][ T3379] hid-generic 0000:007F:FFFFFFFE.0013: unknown main item tag 0x0 [ 84.582336][ T3379] hid-generic 0000:007F:FFFFFFFE.0013: unknown main item tag 0x0 [ 84.590118][ T3379] hid-generic 0000:007F:FFFFFFFE.0013: unknown main item tag 0x0 [ 84.597840][ T3379] hid-generic 0000:007F:FFFFFFFE.0013: unknown main item tag 0x0 [ 84.605646][ T3379] hid-generic 0000:007F:FFFFFFFE.0013: unknown main item tag 0x0 [ 84.613500][ T3379] hid-generic 0000:007F:FFFFFFFE.0013: unknown main item tag 0x0 [ 84.621303][ T3379] hid-generic 0000:007F:FFFFFFFE.0013: unknown main item tag 0x0 [ 84.629097][ T3379] hid-generic 0000:007F:FFFFFFFE.0013: unknown main item tag 0x0 [ 84.636826][ T3379] hid-generic 0000:007F:FFFFFFFE.0013: unknown main item tag 0x0 [ 84.644629][ T3379] hid-generic 0000:007F:FFFFFFFE.0013: unknown main item tag 0x0 [ 84.652427][ T3379] hid-generic 0000:007F:FFFFFFFE.0013: unknown main item tag 0x0 [ 84.660181][ T3379] hid-generic 0000:007F:FFFFFFFE.0013: unknown main item tag 0x0 [ 84.667928][ T3379] hid-generic 0000:007F:FFFFFFFE.0013: unknown main item tag 0x0 [ 84.675695][ T3379] hid-generic 0000:007F:FFFFFFFE.0013: unknown main item tag 0x0 [ 84.683444][ T3379] hid-generic 0000:007F:FFFFFFFE.0013: unknown main item tag 0x0 [ 84.691189][ T3379] hid-generic 0000:007F:FFFFFFFE.0013: unknown main item tag 0x0 [ 84.698944][ T3379] hid-generic 0000:007F:FFFFFFFE.0013: unknown main item tag 0x0 [ 84.706673][ T3379] hid-generic 0000:007F:FFFFFFFE.0013: unknown main item tag 0x0 [ 84.714441][ T3379] hid-generic 0000:007F:FFFFFFFE.0013: unknown main item tag 0x0 [ 84.722210][ T3379] hid-generic 0000:007F:FFFFFFFE.0013: unknown main item tag 0x0 [ 84.730048][ T3379] hid-generic 0000:007F:FFFFFFFE.0013: unknown main item tag 0x0 [ 84.737912][ T3379] hid-generic 0000:007F:FFFFFFFE.0013: unknown main item tag 0x0 [ 84.745667][ T3379] hid-generic 0000:007F:FFFFFFFE.0013: unknown main item tag 0x0 [ 84.753411][ T3379] hid-generic 0000:007F:FFFFFFFE.0013: unknown main item tag 0x0 [ 84.761168][ T3379] hid-generic 0000:007F:FFFFFFFE.0013: unknown main item tag 0x0 [ 84.768982][ T3379] hid-generic 0000:007F:FFFFFFFE.0013: unknown main item tag 0x0 [ 84.776824][ T3379] hid-generic 0000:007F:FFFFFFFE.0013: unknown main item tag 0x0 [ 84.784672][ T3379] hid-generic 0000:007F:FFFFFFFE.0013: unknown main item tag 0x0 [ 84.792476][ T3379] hid-generic 0000:007F:FFFFFFFE.0013: unknown main item tag 0x0 [ 84.800228][ T3379] hid-generic 0000:007F:FFFFFFFE.0013: unknown main item tag 0x0 [ 84.807961][ T3379] hid-generic 0000:007F:FFFFFFFE.0013: unknown main item tag 0x0 [ 84.815709][ T3379] hid-generic 0000:007F:FFFFFFFE.0013: unknown main item tag 0x0 [ 84.823457][ T3379] hid-generic 0000:007F:FFFFFFFE.0013: unknown main item tag 0x0 [ 84.831225][ T3379] hid-generic 0000:007F:FFFFFFFE.0013: unknown main item tag 0x0 [ 84.839006][ T3379] hid-generic 0000:007F:FFFFFFFE.0013: unknown main item tag 0x0 [ 84.846809][ T3379] hid-generic 0000:007F:FFFFFFFE.0013: unknown main item tag 0x0 [ 84.854554][ T3379] hid-generic 0000:007F:FFFFFFFE.0013: unknown main item tag 0x0 [ 84.862331][ T3379] hid-generic 0000:007F:FFFFFFFE.0013: unknown main item tag 0x0 [ 84.870096][ T3379] hid-generic 0000:007F:FFFFFFFE.0013: unknown main item tag 0x0 [ 84.877834][ T3379] hid-generic 0000:007F:FFFFFFFE.0013: unknown main item tag 0x0 [ 84.885632][ T3379] hid-generic 0000:007F:FFFFFFFE.0013: unknown main item tag 0x0 [ 84.893410][ T3379] hid-generic 0000:007F:FFFFFFFE.0013: unknown main item tag 0x0 [ 84.901917][ T3379] hid-generic 0000:007F:FFFFFFFE.0013: hidraw0: HID v0.00 Device [syz1] on syz1 [ 84.951593][ T7705] geneve1 speed is unknown, defaulting to 1000 [ 85.322010][ T7668] loop2: detected capacity change from 0 to 1024 [ 85.340319][ T7730] loop4: detected capacity change from 0 to 128 [ 85.360826][ T7735] loop3: detected capacity change from 0 to 512 [ 85.370903][ T7730] ext4 filesystem being mounted at /156/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 85.439864][ T7735] ext4 filesystem being mounted at /201/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.539443][ T7752] loop3: detected capacity change from 0 to 512 [ 85.566103][ T7752] ext4 filesystem being mounted at /203/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.717644][ T7769] netlink: 'syz.4.885': attribute type 22 has an invalid length. [ 85.738314][ T7769] capability: warning: `syz.4.885' uses deprecated v2 capabilities in a way that may be insecure [ 85.760709][ T7769] debugfs: 'ptm0' already exists in 'caif_serial' [ 85.806399][ T7793] loop4: detected capacity change from 0 to 512 [ 85.820029][ T7782] geneve1 speed is unknown, defaulting to 1000 [ 85.827359][ T7791] loop3: detected capacity change from 0 to 512 [ 85.835167][ T7791] EXT4-fs: Ignoring removed mblk_io_submit option [ 85.851710][ T7791] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 85.865653][ T7793] ext4 filesystem being mounted at /158/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.883067][ T7791] EXT4-fs (loop3): 1 truncate cleaned up [ 85.989143][ T7831] loop3: detected capacity change from 0 to 256 [ 86.088516][ T7844] geneve1 speed is unknown, defaulting to 1000 [ 86.218420][ T7874] loop3: detected capacity change from 0 to 128 [ 86.232738][ T7874] ext4 filesystem being mounted at /207/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 86.405300][ T7891] loop0: detected capacity change from 0 to 512 [ 86.434734][ T7891] ext4 filesystem being mounted at /189/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.614542][ T7904] loop0: detected capacity change from 0 to 512 [ 86.656339][ T7904] ext4 filesystem being mounted at /190/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.677593][ T7904] netlink: 24 bytes leftover after parsing attributes in process `syz.0.907'. [ 86.727339][ T7904] netlink: 4 bytes leftover after parsing attributes in process `syz.0.907'. [ 86.739699][ T7924] netlink: 'syz.2.908': attribute type 3 has an invalid length. [ 86.789915][ T7924] syzkaller1: tun_chr_ioctl cmd 1074025681 [ 86.801762][ T7934] loop4: detected capacity change from 0 to 256 [ 86.826994][ T29] kauditd_printk_skb: 462 callbacks suppressed [ 86.827007][ T29] audit: type=1400 audit(1753963797.860:3153): avc: denied { remount } for pid=7901 comm="syz.0.907" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 86.837621][ T7904] EXT4-fs: Ignoring removed orlov option [ 86.858384][ T7904] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 86.867427][ T7904] EXT4-fs (loop0): can't enable nombcache during remount [ 86.895997][ T29] audit: type=1326 audit(1753963797.930:3154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7951 comm="syz.1.914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f771be9a9 code=0x7ffc0000 [ 86.938909][ T29] audit: type=1326 audit(1753963797.970:3155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7951 comm="syz.1.914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=117 compat=0 ip=0x7f5f771be9a9 code=0x7ffc0000 [ 86.962290][ T29] audit: type=1326 audit(1753963797.970:3156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7951 comm="syz.1.914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f771be9a9 code=0x7ffc0000 [ 87.001379][ T7958] loop3: detected capacity change from 0 to 512 [ 87.035989][ T7958] ext4 filesystem being mounted at /209/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.036154][ T7965] geneve1 speed is unknown, defaulting to 1000 [ 87.048109][ T7969] netlink: 4 bytes leftover after parsing attributes in process `syz.0.920'. [ 87.100217][ T29] audit: type=1326 audit(1753963798.120:3157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7971 comm="syz.2.921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dd1d7e9a9 code=0x7ffc0000 [ 87.123670][ T29] audit: type=1326 audit(1753963798.120:3158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7971 comm="syz.2.921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0dd1d7e9a9 code=0x7ffc0000 [ 87.147112][ T29] audit: type=1326 audit(1753963798.120:3159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7971 comm="syz.2.921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dd1d7e9a9 code=0x7ffc0000 [ 87.170442][ T29] audit: type=1326 audit(1753963798.120:3160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7971 comm="syz.2.921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0dd1d7e9a9 code=0x7ffc0000 [ 87.194011][ T29] audit: type=1326 audit(1753963798.120:3161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7971 comm="syz.2.921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dd1d7e9a9 code=0x7ffc0000 [ 87.217389][ T29] audit: type=1326 audit(1753963798.120:3162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7971 comm="syz.2.921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f0dd1d7e9a9 code=0x7ffc0000 [ 87.267327][ T7990] loop0: detected capacity change from 0 to 512 [ 87.303000][ T7990] ext4 filesystem being mounted at /193/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.342409][ T8004] geneve1 speed is unknown, defaulting to 1000 [ 87.453971][ T8020] ªªªªªª: renamed from vlan0 (while UP) [ 87.474114][ T8024] loop0: detected capacity change from 0 to 128 [ 87.559979][ T8024] ext4 filesystem being mounted at /194/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 87.982413][ T8067] loop3: detected capacity change from 0 to 512 [ 88.010341][ T8068] netlink: 60 bytes leftover after parsing attributes in process `syz.1.932'. [ 88.040887][ T8067] ext4 filesystem being mounted at /216/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.073162][ T8010] loop4: detected capacity change from 0 to 1024 [ 88.122618][ T8067] EXT4-fs error (device loop3): ext4_do_update_inode:5563: inode #4: comm syz.3.933: corrupted inode contents [ 88.134651][ T8067] EXT4-fs error (device loop3): ext4_dirty_inode:6454: inode #4: comm syz.3.933: mark_inode_dirty error [ 88.146941][ T8067] EXT4-fs error (device loop3): ext4_do_update_inode:5563: inode #4: comm syz.3.933: corrupted inode contents [ 88.159649][ T8067] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #4: comm syz.3.933: mark_inode_dirty error [ 88.171643][ T8067] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.933: Failed to acquire dquot type 1 [ 88.222094][ T8078] netlink: 4 bytes leftover after parsing attributes in process `syz.2.934'. [ 88.250853][ T8082] loop3: detected capacity change from 0 to 512 [ 88.282764][ T8082] ext4 filesystem being mounted at /217/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.313067][ T8094] loop2: detected capacity change from 0 to 512 [ 88.319748][ T8094] EXT4-fs: Ignoring removed mblk_io_submit option [ 88.328690][ T8094] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 88.344877][ T8094] EXT4-fs (loop2): 1 truncate cleaned up [ 88.396840][ T8104] loop2: detected capacity change from 0 to 2048 [ 88.430166][ T8118] geneve1 speed is unknown, defaulting to 1000 [ 88.467253][ T8130] loop2: detected capacity change from 0 to 512 [ 88.522387][ T8130] ext4 filesystem being mounted at /176/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.553548][ T8145] netlink: 12 bytes leftover after parsing attributes in process `syz.4.948'. [ 88.579592][ T8145] netlink: 12 bytes leftover after parsing attributes in process `syz.4.948'. [ 88.592322][ T8130] EXT4-fs error (device loop2): ext4_do_update_inode:5563: inode #4: comm syz.2.946: corrupted inode contents [ 88.625569][ T8130] EXT4-fs error (device loop2): ext4_dirty_inode:6454: inode #4: comm syz.2.946: mark_inode_dirty error [ 88.649047][ T8130] EXT4-fs error (device loop2): ext4_do_update_inode:5563: inode #4: comm syz.2.946: corrupted inode contents [ 88.734432][ T8164] netlink: 60 bytes leftover after parsing attributes in process `syz.1.949'. [ 88.765581][ T8130] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #4: comm syz.2.946: mark_inode_dirty error [ 88.852561][ T8145] netlink: 4 bytes leftover after parsing attributes in process `syz.4.948'. [ 88.885435][ T8130] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.946: Failed to acquire dquot type 1 [ 89.155292][ T8185] loop2: detected capacity change from 0 to 2048 [ 89.211977][ T8185] netlink: 256 bytes leftover after parsing attributes in process `syz.2.957'. [ 89.245073][ T8194] 9pnet_fd: Insufficient options for proto=fd [ 89.497177][ T8216] geneve1 speed is unknown, defaulting to 1000 [ 89.673192][ T8183] loop4: detected capacity change from 0 to 1024 [ 90.185729][ T8259] loop2: detected capacity change from 0 to 512 [ 90.196012][ T8257] 9pnet_fd: Insufficient options for proto=fd [ 90.210799][ T8259] ext4 filesystem being mounted at /184/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.257637][ T8271] geneve1 speed is unknown, defaulting to 1000 [ 90.389996][ T8279] 9pnet_fd: Insufficient options for proto=fd [ 90.444073][ T8283] loop4: detected capacity change from 0 to 512 [ 90.623034][ T8283] ext4 filesystem being mounted at /168/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.664117][ T8283] EXT4-fs error (device loop4): ext4_do_update_inode:5563: inode #4: comm syz.4.973: corrupted inode contents [ 90.681219][ T8297] loop3: detected capacity change from 0 to 512 [ 90.699604][ T8283] EXT4-fs error (device loop4): ext4_dirty_inode:6454: inode #4: comm syz.4.973: mark_inode_dirty error [ 90.713973][ T8297] ext4 filesystem being mounted at /223/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.728495][ T8283] EXT4-fs error (device loop4): ext4_do_update_inode:5563: inode #4: comm syz.4.973: corrupted inode contents [ 90.752850][ T8283] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #4: comm syz.4.973: mark_inode_dirty error [ 90.764716][ T8283] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.973: Failed to acquire dquot type 1 [ 90.995058][ T8330] loop4: detected capacity change from 0 to 2048 [ 91.066488][ T8339] loop2: detected capacity change from 0 to 512 [ 91.110794][ T8339] ext4 filesystem being mounted at /189/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.164747][ T8353] loop0: detected capacity change from 0 to 256 [ 91.256387][ T8372] loop3: detected capacity change from 0 to 512 [ 91.290604][ T8372] ext4 filesystem being mounted at /226/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.302416][ T8372] EXT4-fs error (device loop3): ext4_do_update_inode:5563: inode #4: comm syz.3.990: corrupted inode contents [ 91.314449][ T8372] EXT4-fs error (device loop3): ext4_dirty_inode:6454: inode #4: comm syz.3.990: mark_inode_dirty error [ 91.325993][ T8372] EXT4-fs error (device loop3): ext4_do_update_inode:5563: inode #4: comm syz.3.990: corrupted inode contents [ 91.337943][ T8372] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #4: comm syz.3.990: mark_inode_dirty error [ 91.349725][ T8372] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.990: Failed to acquire dquot type 1 [ 91.509905][ T8391] 9pnet_fd: Insufficient options for proto=fd [ 91.597335][ T8399] loop0: detected capacity change from 0 to 1024 [ 91.712742][ T8414] loop0: detected capacity change from 0 to 512 [ 91.740552][ T8414] ext4 filesystem being mounted at /211/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.752182][ T8414] EXT4-fs error (device loop0): ext4_do_update_inode:5563: inode #4: comm syz.0.1001: corrupted inode contents [ 91.764252][ T8414] EXT4-fs error (device loop0): ext4_dirty_inode:6454: inode #4: comm syz.0.1001: mark_inode_dirty error [ 91.779173][ T8414] EXT4-fs error (device loop0): ext4_do_update_inode:5563: inode #4: comm syz.0.1001: corrupted inode contents [ 91.791684][ T8414] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #4: comm syz.0.1001: mark_inode_dirty error [ 91.795050][ T8420] loop3: detected capacity change from 0 to 256 [ 91.803764][ T8414] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.1001: Failed to acquire dquot type 1 [ 91.857768][ T8431] loop0: detected capacity change from 0 to 512 [ 91.870791][ T8431] ext4 filesystem being mounted at /212/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.887006][ T29] kauditd_printk_skb: 456 callbacks suppressed [ 91.887018][ T29] audit: type=1326 audit(1753963802.920:3602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8410 comm="syz.1.1000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f771be9a9 code=0x7ffc0000 [ 91.916789][ T29] audit: type=1326 audit(1753963802.920:3603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8410 comm="syz.1.1000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f5f771be9a9 code=0x7ffc0000 [ 91.940118][ T29] audit: type=1326 audit(1753963802.920:3604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8410 comm="syz.1.1000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f771be9a9 code=0x7ffc0000 [ 91.963538][ T29] audit: type=1326 audit(1753963802.920:3605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8410 comm="syz.1.1000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5f771be9a9 code=0x7ffc0000 [ 91.986961][ T29] audit: type=1326 audit(1753963802.920:3606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8410 comm="syz.1.1000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f771be9a9 code=0x7ffc0000 [ 92.010437][ T29] audit: type=1326 audit(1753963802.920:3607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8410 comm="syz.1.1000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f5f771be9a9 code=0x7ffc0000 [ 92.017643][ T8427] __nla_validate_parse: 3 callbacks suppressed [ 92.017659][ T8427] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1003'. [ 92.033788][ T29] audit: type=1326 audit(1753963802.920:3608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8410 comm="syz.1.1000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f771be9a9 code=0x7ffc0000 [ 92.072243][ T29] audit: type=1326 audit(1753963802.920:3609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8410 comm="syz.1.1000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5f771be9a9 code=0x7ffc0000 [ 92.095649][ T29] audit: type=1326 audit(1753963802.920:3610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8410 comm="syz.1.1000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f771be9a9 code=0x7ffc0000 [ 92.119087][ T29] audit: type=1326 audit(1753963802.920:3611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8410 comm="syz.1.1000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5f771be9a9 code=0x7ffc0000 [ 92.298680][ T8462] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1012'. [ 92.479250][ T8477] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1018'. [ 92.533629][ T8460] loop0: detected capacity change from 0 to 1024 [ 92.804300][ T8495] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1024'. [ 92.828755][ T8495] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1024'. [ 92.882962][ T8495] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1024'. [ 92.960873][ T8500] loop0: detected capacity change from 0 to 128 [ 92.971849][ T8500] ext4 filesystem being mounted at /215/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 93.140092][ T8517] loop3: detected capacity change from 0 to 512 [ 93.150831][ T8517] ext4 filesystem being mounted at /236/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.226307][ T8528] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1033'. [ 93.252925][ T8529] loop3: detected capacity change from 0 to 512 [ 93.259697][ T8529] EXT4-fs: Ignoring removed mblk_io_submit option [ 93.267086][ T8529] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 93.311410][ T8529] EXT4-fs (loop3): 1 truncate cleaned up [ 93.328774][ T8515] rdma_rxe: rxe_newlink: failed to add geneve1 [ 93.366506][ T8541] loop3: detected capacity change from 0 to 128 [ 93.378288][ T8541] ext4 filesystem being mounted at /238/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 93.511737][ T8547] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1038'. [ 93.522488][ T8547] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1038'. [ 93.640677][ T8547] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1038'. [ 93.691051][ T8565] loop4: detected capacity change from 0 to 512 [ 93.731271][ T8565] ext4 filesystem being mounted at /179/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.756629][ T8574] loop2: detected capacity change from 0 to 512 [ 93.764555][ T8574] EXT4-fs: Ignoring removed mblk_io_submit option [ 93.777472][ T8574] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 93.790007][ T8574] EXT4-fs (loop2): 1 truncate cleaned up [ 93.815400][ T8581] loop2: detected capacity change from 0 to 128 [ 93.824581][ T8581] ext4 filesystem being mounted at /201/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 93.854385][ T8590] loop4: detected capacity change from 0 to 128 [ 93.864439][ T8590] ext4 filesystem being mounted at /180/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 93.963764][ T8601] loop4: detected capacity change from 0 to 512 [ 93.982085][ T8601] ext4 filesystem being mounted at /182/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.995802][ T8601] EXT4-fs error (device loop4): ext4_do_update_inode:5563: inode #4: comm syz.4.1051: corrupted inode contents [ 94.019232][ T8601] EXT4-fs error (device loop4): ext4_dirty_inode:6454: inode #4: comm syz.4.1051: mark_inode_dirty error [ 94.033015][ T8608] loop0: detected capacity change from 0 to 512 [ 94.041136][ T8601] EXT4-fs error (device loop4): ext4_do_update_inode:5563: inode #4: comm syz.4.1051: corrupted inode contents [ 94.054704][ T8608] ext4 filesystem being mounted at /219/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.067182][ T8601] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #4: comm syz.4.1051: mark_inode_dirty error [ 94.082632][ T8601] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.1051: Failed to acquire dquot type 1 [ 94.179876][ T8627] loop0: detected capacity change from 0 to 256 [ 94.476328][ T8635] loop4: detected capacity change from 0 to 128 [ 94.478175][ T8636] loop0: detected capacity change from 0 to 512 [ 94.493227][ T8635] ext4 filesystem being mounted at /186/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 94.506174][ T8636] ext4 filesystem being mounted at /221/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.701635][ T8659] loop2: detected capacity change from 0 to 512 [ 94.713927][ T8663] loop0: detected capacity change from 0 to 512 [ 94.739983][ T8659] ext4 filesystem being mounted at /202/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.760612][ T8663] ext4 filesystem being mounted at /223/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.771259][ T8673] loop3: detected capacity change from 0 to 512 [ 94.784627][ T8678] loop4: detected capacity change from 0 to 256 [ 94.794002][ T8659] EXT4-fs error (device loop2): ext4_do_update_inode:5563: inode #4: comm syz.2.1067: corrupted inode contents [ 94.806902][ T8673] ext4 filesystem being mounted at /243/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.816154][ T8659] EXT4-fs error (device loop2): ext4_dirty_inode:6454: inode #4: comm syz.2.1067: mark_inode_dirty error [ 94.829120][ T8659] EXT4-fs error (device loop2): ext4_do_update_inode:5563: inode #4: comm syz.2.1067: corrupted inode contents [ 94.843568][ T8659] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #4: comm syz.2.1067: mark_inode_dirty error [ 94.855102][ T8659] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.1067: Failed to acquire dquot type 1 [ 94.954970][ T8697] 9pnet_fd: Insufficient options for proto=fd [ 94.972142][ T8705] loop3: detected capacity change from 0 to 512 [ 94.978775][ T8705] EXT4-fs: Ignoring removed mblk_io_submit option [ 94.985449][ T8705] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 94.996602][ T8705] EXT4-fs (loop3): 1 truncate cleaned up [ 95.032447][ T8713] loop0: detected capacity change from 0 to 512 [ 95.055288][ T8713] ext4 filesystem being mounted at /225/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.082471][ T8722] geneve1 speed is unknown, defaulting to 1000 [ 95.183677][ T8748] loop0: detected capacity change from 0 to 128 [ 95.209566][ T8748] ext4 filesystem being mounted at /226/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 95.396275][ T8765] loop0: detected capacity change from 0 to 512 [ 95.418049][ T8765] ext4 filesystem being mounted at /229/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.445070][ T8765] EXT4-fs error (device loop0): ext4_do_update_inode:5563: inode #4: comm syz.0.1086: corrupted inode contents [ 95.459575][ T8771] loop4: detected capacity change from 0 to 128 [ 95.467884][ T8771] ext4 filesystem being mounted at /192/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 95.485313][ T8765] EXT4-fs error (device loop0): ext4_dirty_inode:6454: inode #4: comm syz.0.1086: mark_inode_dirty error [ 95.500698][ T8765] EXT4-fs error (device loop0): ext4_do_update_inode:5563: inode #4: comm syz.0.1086: corrupted inode contents [ 95.518605][ T8765] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #4: comm syz.0.1086: mark_inode_dirty error [ 95.539843][ T8765] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.1086: Failed to acquire dquot type 1 [ 95.571327][ T8778] 9pnet_fd: Insufficient options for proto=fd [ 95.601839][ T8786] loop0: detected capacity change from 0 to 512 [ 95.608461][ T8786] EXT4-fs: Ignoring removed mblk_io_submit option [ 95.630652][ T8786] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 95.663525][ T8791] loop4: detected capacity change from 0 to 1024 [ 95.684755][ T8791] EXT4-fs: Mount option(s) incompatible with ext2 [ 95.691306][ T8786] EXT4-fs (loop0): 1 truncate cleaned up [ 95.718228][ T8799] loop0: detected capacity change from 0 to 256 [ 95.737418][ T8791] vcan0: entered promiscuous mode [ 95.742509][ T8791] vcan0: entered allmulticast mode [ 95.926174][ T8828] loop2: detected capacity change from 0 to 136 [ 95.951161][ T8828] Attempt to read inode for relocated directory [ 95.961308][ T8828] FAULT_INJECTION: forcing a failure. [ 95.961308][ T8828] name failslab, interval 1, probability 0, space 0, times 0 [ 95.973964][ T8828] CPU: 1 UID: 0 PID: 8828 Comm: syz.2.1099 Not tainted 6.16.0-syzkaller-06699-ge8d780dcd957 #0 PREEMPT(voluntary) [ 95.973994][ T8828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 95.974008][ T8828] Call Trace: [ 95.974015][ T8828] [ 95.974022][ T8828] __dump_stack+0x1d/0x30 [ 95.974056][ T8828] dump_stack_lvl+0xe8/0x140 [ 95.974092][ T8828] dump_stack+0x15/0x1b [ 95.974150][ T8828] should_fail_ex+0x265/0x280 [ 95.974170][ T8828] ? netdevice_event+0x2ae/0x610 [ 95.974253][ T8828] should_failslab+0x8c/0xb0 [ 95.974290][ T8828] __kmalloc_cache_noprof+0x4c/0x320 [ 95.974346][ T8828] ? __pfx_netdevice_event+0x10/0x10 [ 95.974373][ T8828] netdevice_event+0x2ae/0x610 [ 95.974397][ T8828] ? __pfx_del_netdev_ips+0x10/0x10 [ 95.974502][ T8828] ? __pfx_pass_all_filter+0x10/0x10 [ 95.974572][ T8828] ? __pfx_netdevice_event+0x10/0x10 [ 95.974595][ T8828] raw_notifier_call_chain+0x6c/0x1b0 [ 95.974612][ T8828] ? call_netdevice_notifiers_info+0x9c/0x100 [ 95.974634][ T8828] call_netdevice_notifiers_info+0xae/0x100 [ 95.974656][ T8828] unregister_netdevice_many_notify+0xda9/0x15d0 [ 95.974739][ T8828] unregister_netdevice_queue+0x1f5/0x220 [ 95.974860][ T8828] br_dev_delete+0xc4/0xe0 [ 95.974962][ T8828] br_del_bridge+0x97/0xc0 [ 95.975065][ T8828] br_ioctl_stub+0x535/0x860 [ 95.975080][ T8828] ? ioctl_has_perm+0x257/0x2a0 [ 95.975104][ T8828] ? __pfx_br_ioctl_stub+0x10/0x10 [ 95.975141][ T8828] sock_ioctl+0x39c/0x610 [ 95.975163][ T8828] ? __pfx_sock_ioctl+0x10/0x10 [ 95.975263][ T8828] __se_sys_ioctl+0xcb/0x140 [ 95.975298][ T8828] __x64_sys_ioctl+0x43/0x50 [ 95.975319][ T8828] x64_sys_call+0x1816/0x2ff0 [ 95.975341][ T8828] do_syscall_64+0xd2/0x200 [ 95.975363][ T8828] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 95.975428][ T8828] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 95.975459][ T8828] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.975480][ T8828] RIP: 0033:0x7f0dd1d7e9a9 [ 95.975496][ T8828] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 95.975513][ T8828] RSP: 002b:00007f0dd03df038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 95.975588][ T8828] RAX: ffffffffffffffda RBX: 00007f0dd1fa5fa0 RCX: 00007f0dd1d7e9a9 [ 95.975600][ T8828] RDX: 0000200000000040 RSI: 00000000000089a1 RDI: 0000000000000007 [ 95.975611][ T8828] RBP: 00007f0dd03df090 R08: 0000000000000000 R09: 0000000000000000 [ 95.975624][ T8828] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 95.975636][ T8828] R13: 0000000000000000 R14: 00007f0dd1fa5fa0 R15: 00007ffd34f691a8 [ 95.975775][ T8828] [ 95.997563][ T8835] loop4: detected capacity change from 0 to 2048 [ 96.245310][ T8841] loop3: detected capacity change from 0 to 512 [ 96.252088][ T8841] EXT4-fs: Ignoring removed mblk_io_submit option [ 96.261055][ T8841] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 96.266021][ T8835] EXT4-fs mount: 169 callbacks suppressed [ 96.266036][ T8835] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 96.273096][ T8841] EXT4-fs (loop3): 1 truncate cleaned up [ 96.294949][ T8841] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.326430][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.347812][ T8863] loop3: detected capacity change from 0 to 512 [ 96.365996][ T8865] geneve1 speed is unknown, defaulting to 1000 [ 96.374895][ T8874] loop3: detected capacity change from 0 to 512 [ 96.384705][ T8874] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 96.402805][ T8881] FAULT_INJECTION: forcing a failure. [ 96.402805][ T8881] name failslab, interval 1, probability 0, space 0, times 0 [ 96.415490][ T8881] CPU: 1 UID: 0 PID: 8881 Comm: syz.0.1106 Not tainted 6.16.0-syzkaller-06699-ge8d780dcd957 #0 PREEMPT(voluntary) [ 96.415596][ T8881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 96.415611][ T8881] Call Trace: [ 96.415617][ T8881] [ 96.415625][ T8881] __dump_stack+0x1d/0x30 [ 96.415644][ T8881] dump_stack_lvl+0xe8/0x140 [ 96.415755][ T8881] dump_stack+0x15/0x1b [ 96.415772][ T8881] should_fail_ex+0x265/0x280 [ 96.415793][ T8881] ? __ipv6_dev_mc_inc+0x284/0x5b0 [ 96.415870][ T8881] should_failslab+0x8c/0xb0 [ 96.415928][ T8881] __kmalloc_cache_noprof+0x4c/0x320 [ 96.415953][ T8881] __ipv6_dev_mc_inc+0x284/0x5b0 [ 96.415973][ T8881] __ipv6_sock_mc_join+0x290/0x470 [ 96.415993][ T8881] ipv6_sock_mc_join+0x24/0x30 [ 96.416011][ T8881] ipv6_mc_config+0x70/0xe0 [ 96.416078][ T8881] inet6_addr_add+0x213/0x6a0 [ 96.416105][ T8881] ? xa_load+0xb1/0xe0 [ 96.416127][ T8881] ? __rcu_read_unlock+0x4f/0x70 [ 96.416171][ T8881] ? ipv6_get_ifaddr+0x2d9/0x310 [ 96.416190][ T8881] inet6_rtm_newaddr+0x7f2/0x8b0 [ 96.416227][ T8881] ? __pfx_inet6_rtm_newaddr+0x10/0x10 [ 96.416274][ T8881] rtnetlink_rcv_msg+0x5fb/0x6d0 [ 96.416295][ T8881] ? avc_has_perm_noaudit+0x1b1/0x200 [ 96.416388][ T8881] netlink_rcv_skb+0x123/0x220 [ 96.416417][ T8881] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 96.416446][ T8881] rtnetlink_rcv+0x1c/0x30 [ 96.416479][ T8881] netlink_unicast+0x5bd/0x690 [ 96.416504][ T8881] netlink_sendmsg+0x58b/0x6b0 [ 96.416533][ T8881] ? __pfx_netlink_sendmsg+0x10/0x10 [ 96.416566][ T8881] __sock_sendmsg+0x142/0x180 [ 96.416651][ T8881] ____sys_sendmsg+0x31e/0x4e0 [ 96.416724][ T8881] ___sys_sendmsg+0x17b/0x1d0 [ 96.416777][ T8881] __x64_sys_sendmsg+0xd4/0x160 [ 96.416813][ T8881] x64_sys_call+0x191e/0x2ff0 [ 96.416833][ T8881] do_syscall_64+0xd2/0x200 [ 96.416852][ T8881] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 96.416930][ T8881] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 96.416959][ T8881] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.417049][ T8881] RIP: 0033:0x7f2b2289e9a9 [ 96.417065][ T8881] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 96.417083][ T8881] RSP: 002b:00007f2b20ede038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 96.417121][ T8881] RAX: ffffffffffffffda RBX: 00007f2b22ac6080 RCX: 00007f2b2289e9a9 [ 96.417132][ T8881] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 96.417159][ T8881] RBP: 00007f2b20ede090 R08: 0000000000000000 R09: 0000000000000000 [ 96.417170][ T8881] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 96.417183][ T8881] R13: 0000000000000000 R14: 00007f2b22ac6080 R15: 00007ffc47b1d328 [ 96.417202][ T8881] [ 96.843451][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.910146][ T8920] loop2: detected capacity change from 0 to 256 [ 96.929868][ T8917] loop0: detected capacity change from 0 to 512 [ 96.970442][ T8917] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.005685][ T29] kauditd_printk_skb: 485 callbacks suppressed [ 97.005699][ T29] audit: type=1326 audit(1753963808.040:4085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8914 comm="syz.4.1112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4fdebe9a9 code=0x7ffc0000 [ 97.038660][ T8917] ext4 filesystem being mounted at /236/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.054611][ T8917] EXT4-fs error (device loop0): ext4_do_update_inode:5563: inode #4: comm syz.0.1113: corrupted inode contents [ 97.078007][ T29] audit: type=1326 audit(1753963808.080:4086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8914 comm="syz.4.1112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb4fdebe9a9 code=0x7ffc0000 [ 97.101456][ T29] audit: type=1326 audit(1753963808.080:4087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8914 comm="syz.4.1112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4fdebe9a9 code=0x7ffc0000 [ 97.124927][ T29] audit: type=1326 audit(1753963808.080:4088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8914 comm="syz.4.1112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb4fdebe9a9 code=0x7ffc0000 [ 97.148353][ T29] audit: type=1326 audit(1753963808.080:4089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8914 comm="syz.4.1112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4fdebe9a9 code=0x7ffc0000 [ 97.171802][ T29] audit: type=1326 audit(1753963808.080:4090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8914 comm="syz.4.1112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb4fdebe9a9 code=0x7ffc0000 [ 97.195373][ T29] audit: type=1326 audit(1753963808.080:4091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8914 comm="syz.4.1112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4fdebe9a9 code=0x7ffc0000 [ 97.218886][ T29] audit: type=1326 audit(1753963808.080:4092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8914 comm="syz.4.1112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb4fdebe9a9 code=0x7ffc0000 [ 97.242364][ T29] audit: type=1326 audit(1753963808.080:4093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8914 comm="syz.4.1112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4fdebe9a9 code=0x7ffc0000 [ 97.265759][ T29] audit: type=1326 audit(1753963808.080:4094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8914 comm="syz.4.1112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb4fdebe9a9 code=0x7ffc0000 [ 97.312319][ T8917] EXT4-fs error (device loop0): ext4_dirty_inode:6454: inode #4: comm syz.0.1113: mark_inode_dirty error [ 97.335329][ T8917] EXT4-fs error (device loop0): ext4_do_update_inode:5563: inode #4: comm syz.0.1113: corrupted inode contents [ 97.348418][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.352297][ T8929] __nla_validate_parse: 7 callbacks suppressed [ 97.352311][ T8929] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1112'. [ 97.357698][ T8917] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #4: comm syz.0.1113: mark_inode_dirty error [ 97.409562][ T8935] FAULT_INJECTION: forcing a failure. [ 97.409562][ T8935] name failslab, interval 1, probability 0, space 0, times 0 [ 97.422208][ T8935] CPU: 0 UID: 0 PID: 8935 Comm: syz.4.1117 Not tainted 6.16.0-syzkaller-06699-ge8d780dcd957 #0 PREEMPT(voluntary) [ 97.422236][ T8935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 97.422247][ T8935] Call Trace: [ 97.422252][ T8935] [ 97.422258][ T8935] __dump_stack+0x1d/0x30 [ 97.422297][ T8935] dump_stack_lvl+0xe8/0x140 [ 97.422327][ T8935] dump_stack+0x15/0x1b [ 97.422341][ T8935] should_fail_ex+0x265/0x280 [ 97.422358][ T8935] should_failslab+0x8c/0xb0 [ 97.422390][ T8935] __kmalloc_noprof+0xa5/0x3e0 [ 97.422407][ T8935] ? fib6_info_alloc+0x2e/0x90 [ 97.422510][ T8935] fib6_info_alloc+0x2e/0x90 [ 97.422531][ T8935] ip6_route_info_create+0xe7/0x390 [ 97.422569][ T8935] ip6_route_add+0x49/0x170 [ 97.422593][ T8935] addrconf_add_dev+0x1c6/0x240 [ 97.422704][ T8935] inet6_addr_add+0x115/0x6a0 [ 97.422727][ T8935] ? selinux_capable+0x31/0x40 [ 97.422756][ T8935] ? should_fail_ex+0xdb/0x280 [ 97.422777][ T8935] addrconf_add_ifaddr+0x1ab/0x270 [ 97.422813][ T8935] inet6_ioctl+0xb0/0x190 [ 97.422932][ T8935] ? ioctl_has_perm+0x257/0x2a0 [ 97.422953][ T8935] sock_do_ioctl+0x73/0x220 [ 97.422974][ T8935] sock_ioctl+0x41b/0x610 [ 97.422993][ T8935] ? __pfx_sock_ioctl+0x10/0x10 [ 97.423010][ T8935] __se_sys_ioctl+0xcb/0x140 [ 97.423067][ T8935] __x64_sys_ioctl+0x43/0x50 [ 97.423086][ T8935] x64_sys_call+0x1816/0x2ff0 [ 97.423103][ T8935] do_syscall_64+0xd2/0x200 [ 97.423191][ T8935] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 97.423218][ T8935] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 97.423299][ T8935] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.423321][ T8935] RIP: 0033:0x7fb4fdebe9a9 [ 97.423336][ T8935] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 97.423354][ T8935] RSP: 002b:00007fb4fc51f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 97.423370][ T8935] RAX: ffffffffffffffda RBX: 00007fb4fe0e5fa0 RCX: 00007fb4fdebe9a9 [ 97.423415][ T8935] RDX: 0000200000000000 RSI: 0000000000008916 RDI: 0000000000000003 [ 97.423428][ T8935] RBP: 00007fb4fc51f090 R08: 0000000000000000 R09: 0000000000000000 [ 97.423487][ T8935] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 97.423499][ T8935] R13: 0000000000000000 R14: 00007fb4fe0e5fa0 R15: 00007ffcbbc543d8 [ 97.423561][ T8935] [ 97.428627][ T8942] ================================================================== [ 97.668352][ T8942] BUG: KCSAN: data-race in mas_state_walk / mas_wr_store_entry [ 97.675884][ T8942] [ 97.678194][ T8942] write to 0xffff888104608110 of 8 bytes by task 8938 on cpu 1: [ 97.685801][ T8942] mas_wr_store_entry+0x1581/0x2b50 [ 97.690984][ T8942] mas_store_prealloc+0x74d/0x9e0 [ 97.695991][ T8942] commit_merge+0x6a5/0x730 [ 97.700485][ T8942] vma_expand+0x1d0/0x370 [ 97.704803][ T8942] vma_merge_new_range+0x296/0x310 [ 97.709908][ T8942] mmap_region+0x9fa/0x1580 [ 97.714405][ T8942] do_mmap+0x9b3/0xbe0 [ 97.718463][ T8942] vm_mmap_pgoff+0x17a/0x2e0 [ 97.723033][ T8942] ksys_mmap_pgoff+0xc2/0x310 [ 97.727698][ T8942] x64_sys_call+0x14a3/0x2ff0 [ 97.732362][ T8942] do_syscall_64+0xd2/0x200 [ 97.736852][ T8942] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.742730][ T8942] [ 97.745038][ T8942] read to 0xffff888104608110 of 8 bytes by task 8942 on cpu 0: [ 97.752559][ T8942] mas_state_walk+0x2f5/0x650 [ 97.757218][ T8942] mas_walk+0x30/0x120 [ 97.761269][ T8942] lock_vma_under_rcu+0xa2/0x2f0 [ 97.766192][ T8942] do_user_addr_fault+0x233/0x1090 [ 97.771296][ T8942] exc_page_fault+0x62/0xa0 [ 97.775796][ T8942] asm_exc_page_fault+0x26/0x30 [ 97.780631][ T8942] [ 97.782936][ T8942] value changed: 0x00007f0dd039dfff -> 0x00007f0dd037cfff [ 97.790019][ T8942] [ 97.792321][ T8942] Reported by Kernel Concurrency Sanitizer on: [ 97.798455][ T8942] CPU: 0 UID: 0 PID: 8942 Comm: syz.2.1118 Not tainted 6.16.0-syzkaller-06699-ge8d780dcd957 #0 PREEMPT(voluntary) [ 97.810505][ T8942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 97.820546][ T8942] ================================================================== [ 97.844411][ T8917] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.1113: Failed to acquire dquot type 1 [ 97.865993][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.