last executing test programs: 1m55.396441697s ago: executing program 2 (id=8215): socket$nl_netfilter(0x10, 0x3, 0xc) pwrite64(0xffffffffffffffff, &(0x7f00000001c0)="977ad355d10a35edfcae1a5057694b4fd03bafbd", 0x14, 0x0) r0 = creat(&(0x7f0000000600)='./file0\x00', 0xe5) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff108500000007"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x30, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, @void, @value}, 0x94) write$qrtrtun(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000a40)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000008180)=ANY=[], 0x50}}, 0x4000044) connect$can_bcm(r3, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x5, 0x0, 0x0, {}, {0x77359400}, {}, 0x2, @can={{}, 0x0, 0x0, 0x0, 0x0, "3fd31340e92c4bb8"}}, 0x48}, 0x300}, 0x0) sendmsg$can_bcm(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="0500"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="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"], 0x48}, 0x300}, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r2}, 0xc) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000340)='kmem_cache_free\x00', r5, 0x0, 0xffffffffffffffff}, 0x18) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f00000002c0)=[{0x6, 0x5, 0x0, 0x40000000}]}, 0x10) write$binfmt_misc(r6, &(0x7f0000001280), 0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000001c0)='sys_enter\x00', r4}, 0x18) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1, 0xffffffffffffffff}, 0x4) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000200)='kfree\x00', r8}, 0x18) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYRES32=r9, @ANYBLOB="0000000000000000b702000014fa0000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r10}, 0x10) syz_open_dev$tty1(0xc, 0x4, 0x1) 1m55.279589839s ago: executing program 2 (id=8217): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001740)=@newtfilter={0x4c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x5, 0xfff1}, {}, {0x7, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_EMATCHES={0x10, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x4}]}, @TCA_FLOW_KEYS={0x8, 0x1, 0x681e}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x2008c014) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000c80)=ANY=[@ANYRES16, @ANYRES32], &(0x7f0000000240)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 1m55.249536308s ago: executing program 2 (id=8219): r0 = syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x86e1, 0x1, 0x8}, &(0x7f0000010080), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000010300)=[{0x0}, {0x0}], 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001680)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffc01, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x62, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x40}, 0x18) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180200000020702500000000002020207b1af8ff00000000bfa100000000000007010000dbffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2b, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r3, 0x0, 0xfffffffffffffffc}, 0x18) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_type(r4, &(0x7f00000000c0), 0x2, 0x0) rmdir(&(0x7f0000000700)='./cgroup/../file0\x00') setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f873918cf87310300", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) writev(r2, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r5 = io_uring_setup(0x191a, &(0x7f0000000000)={0x0, 0x761, 0x10, 0x1, 0x11cb}) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xd, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r6], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x36e084fcb6392193, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) close(r2) 1m54.916858464s ago: executing program 2 (id=8228): mknod$loop(0x0, 0x6000, 0x0) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0xfffffdfd) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x8, &(0x7f00000001c0)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}}]}, &(0x7f0000000300)='GPL\x00', 0x9, 0x1, &(0x7f0000000340)=""/1, 0x0, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) io_submit(0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f0000000400)='./file0\x00', 0x410c84, &(0x7f00000003c0)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x4}}]}, 0x1, 0x775, &(0x7f0000001180)="$eJzs3c9rXNUeAPDvnSRNm/a95MGD9+oqIGigdGJqbBVcVFyIYKGga9thMg01k0zJTEoTAlpEcCOouBB007U/6s6tP7b6X7gQS9W0WHEhkTu5t502M2mSJpnqfD5wM+fceyfnfOf+OGfmHu4NoGeNpn8KEYcj4t0kYjibn0TEQDPVH3Fybb1bK8vldEpidfXlX5LmOjdXlsvR8p7UwSzz/4j45q2II4X15dYXl2ZK1WplPsuPN2YvjNcXl46eny1NV6Yrc8cnJiePnXjqxPGdi/W375cOXXvvhcc/P/nHm/+7+s63SZyMQ9my1jh2ymiMZp/JQPoR3uX5nS6sy5JuV4BtSQ/NvrWjPA7HcPQ1UwDAP9nrEbEKAPSYRPsPAD0m/x3g5spyOZ+6+4vE3rr+XETsX4s/v765tqQ/u2a3v3kddOhmcteVkSQiRnag/NGI+PjLVz9Np9il65AA7bxxOSLOjoyuP/8n68YsbNUTGyzbl72O3jPf+Q/2zldp/+fpdv2/wu3+T7Tp/wy2OXa3477H/4EdKGQDaf/v2Zaxbbda4s+M9GW5fzX7fAPJufPVSnpu+3dEjMXAYJqf2KCMsRt/3ui0rLX/9+v7r32Slp++3lmj8FP/4N3vmSo1Sg8Sc6vrlyMe6W8Xf3J7+ycd+r+nN1nGi8+8/VGnZWn8abz5tD7+yEYn7Y7VKxGPtd3+d0a0JRuOTxxv7g7j+U7Rxhc/fDjUqfzW7Z9Oafn5d4G9kG7/oY3jH0lax2vWt17Gd1eGv+607P7xt9//9yWvNNN5P+JSqdGYn4jYl7y0fv6xO+/N8/n6afxjj7Y//jfa/9PvhGc3GX//tZ8/2378uyuNf2pL23/riau3Zvo6lb+57T/ZTI1lczZz/ttsBR/kswMAAAAAAAAAAAAAAAAAAAAAAACAzSpExKFICsXb6UKhWFx7hvd/Y6hQrdUbR87VFuamovms7JEYKOS3uhxuuR/qRHY//Dx/7J78kxHxn4j4YPBAkt9HcarLsQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA7mCH5/+nfhzsdu0AgF2zv9sVAAD2nPYfAHqP9h8Aeo/2HwB6j/YfAHqP9h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBddvrUqXRa/X1luZzmpy4uLszULh6dqtRnirML5WK5Nn+hOF2rTVcrxXJt9n7/r1qrXZiMuYVL441KvTFeX1w6M1tbmGucOT9bmq6cqQzsSVQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsDX1xaWZUrVamZfYRmL14ahG9xN92e70sNRnTxPJw1GNHU50+cQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8DfxVwAAAP//02Ii/w==") open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x8c7) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x69) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000c"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYRES16=r0], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) close(0xffffffffffffffff) r7 = openat$binfmt_register(0xffffff9c, &(0x7f0000000040), 0x1, 0x0) write$binfmt_register(r7, &(0x7f0000000000)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x6, 0x3a, 'E', 0x3a, '@{@$\x9a$^', 0x3a, './file2', 0x3a, [0x46, 0x43, 0x43]}, 0x32) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write(r6, &(0x7f0000004200)='t', 0x1) sendfile(r6, r5, 0x0, 0x3ffff) sendfile(r6, r5, 0x0, 0x7ffff000) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x54, r3, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @local}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x28, r1, 0x1, 0x70bd2b, 0x0, {0x2}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x28}}, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 1m53.671117841s ago: executing program 2 (id=8242): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x3, 0x800000000001}, 0x5284, 0x5dd8, 0x0, 0x2, 0x0, 0x6d, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x4, 0x0, 0x6, 0xa5c, 0x62, @empty, @private0, 0x80, 0x806c1463de0e7f43, 0x8001, 0x4}}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) msgctl$IPC_RMID(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) r4 = socket(0x40000000015, 0x805, 0x0) getsockopt(r4, 0x114, 0x271c, 0x0, &(0x7f00000000c0)) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="b927e4950e7cea266e3b49d3c228763d70536f9029f88d109918b734eb1b8ef3757a276b46cef1817a7443e518092b440b900bd18d196ab457f03a17728b30f182616694a25ea69dbaa0cfa229ae6996ccc02cce3f41693b77c8e5b58382a6e2"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001600)={r5, 0x0, 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) write$char_usb(r6, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet(0x2, 0x6e7dbbfec51210c9, 0x8004) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="24000000680009032cbd7000000000000a0000000000000004000b00080001000100000080442fc0887d80d810cece14535346193f8bf8bcbb5e82fa146496f06fbb78045a96c90b3eb8c6c94bf5ce09be9bac10c2885b191b56592792d940c86110913fa35e95778c2e14c1bf77550f376e27798dc9e0c61f8d4ca0c819ccc5bd006d5167c4c96c69f9bc39518277c71975051345203c671e82223cc3e4ad50c2dfaae80be0d5de"], 0x24}, 0x1, 0x9f, 0x0, 0x20004002}, 0x40004) getsockname$packet(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', r2}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085100000fcffffff250000001000000007000000faffffff95"], &(0x7f0000001500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x56, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd639291dd00200001fc010000000000000000000000000001ff0200000000000000000000000000012b"], 0x0) 1m53.583744962s ago: executing program 2 (id=8243): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000280)='%pS \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) mount_setattr(0xffffffffffffffff, &(0x7f0000000100)='.\x00', 0x9000, &(0x7f0000001dc0)={0x0, 0x85, 0x20000}, 0x20) 1m53.554012713s ago: executing program 32 (id=8243): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000280)='%pS \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) mount_setattr(0xffffffffffffffff, &(0x7f0000000100)='.\x00', 0x9000, &(0x7f0000001dc0)={0x0, 0x85, 0x20000}, 0x20) 1m19.321139074s ago: executing program 3 (id=8842): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) sendto$inet6(r1, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, 0x0, 0x8000) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, 0x0, &(0x7f00000000c0)) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r2) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r2, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000a40)={0x1c, r3, 0x1, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x24040000}, 0x8000) r4 = epoll_create1(0x0) socket$kcm(0x10, 0x3, 0x10) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000180)={0xc0000009}) socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) ppoll(&(0x7f0000000500)=[{r5}], 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f000006a000/0x2000)=nil, 0x2000, 0xd, 0x4000010, 0xffffffffffffffff, 0x2000) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) socket(0x2, 0x6, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r7, &(0x7f0000000080)={0xa002a008}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) close(0x4) 1m18.297083388s ago: executing program 3 (id=8853): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000280)='%pS \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0xbb, &(0x7f0000000400)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaa2aaaa86dd6000000000853c003b010000000000000000000000000002fe8000000000000000000000000000aa3303000000000000070800000000000000000708"], 0x0) 1m18.263619009s ago: executing program 3 (id=8855): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00'}, 0x10) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="34000000100001080000cd6c0000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x34}}, 0x44000) 1m18.15009315s ago: executing program 3 (id=8858): mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) (async) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) (async) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(0xffffffffffffff9c, &(0x7f0000000140)='./file0/../file1\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0/../file0\x00', 0x397) 1m18.102823521s ago: executing program 3 (id=8859): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000280)='%pS \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) mount_setattr(0xffffffffffffffff, &(0x7f0000000100)='.\x00', 0x9000, &(0x7f0000001dc0)={0x0, 0x85, 0x20000}, 0x20) 1m17.697854137s ago: executing program 3 (id=8867): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x20010, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000080)={0x0, &(0x7f0000000040)}, 0x10) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x0) 1m17.697496527s ago: executing program 33 (id=8867): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x20010, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000080)={0x0, &(0x7f0000000040)}, 0x10) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x0) 1m12.217096954s ago: executing program 4 (id=8932): creat(&(0x7f00000000c0)='./file0\x00', 0x198) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001040)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r2}, &(0x7f0000000800), &(0x7f0000000840)=r3}, 0x20) socket(0xa, 0x3, 0x3a) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r4) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r5 = dup(r1) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0xffffffff, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00'}, 0x10) write$P9_RLERRORu(r5, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r5, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) 1m12.192928484s ago: executing program 4 (id=8933): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x10000}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0xff81, &(0x7f00000002c0)={&(0x7f0000001840)=@newtaction={0xe68, 0x30, 0x25, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x3}, [{}, {0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0xffffffff}, {0x0, 0x3}, {}, {0x0, 0x240, 0x0, 0x0, 0x3}, {}, {0x0, 0x9, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x400000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xdc79}, {0x0, 0x0, 0x1ff}, {}, {}, {}, {}, {0x6}, {}, {}, {}, {}, {}, {0xfffffffd}, {}, {}, {}, {0x0, 0x10000}, {0x0, 0x6}, {}, {0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x0, 0x0, 0xfffffff9}, {}, {0x0, 0x7, 0x4}, {0x1}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {0x10000}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x8}, {0x3}, {0x3}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x8, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x10000000}, {0x0, 0x1}, {}, {0x0, 0x0, 0x0, 0x800000}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x200}, {}, {}, {}, {0x0, 0xfffffffe, 0x0, 0x0, 0x2}, {}, {}, {}, {0x2}, {0x0, 0x6}, {}, {}, {0x0, 0x40000000}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x5}, {0x80, 0x0, 0x0, 0x951b000}, {}, {0x0, 0x0, 0x0, 0x0, 0x24}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {0x0, 0xffffffff, 0x80000000}], [{0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) 1m12.097164226s ago: executing program 4 (id=8934): r0 = io_uring_setup(0xf08, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000640), 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x80a, &(0x7f0000001400), 0x1, 0x7aa, &(0x7f0000001440)="$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") ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x14) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0xffffffcc, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', 0xffffffffffffffff, 0x0, 0x2000000000}, 0x18) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000004400)='./file0\x00', 0x0, &(0x7f0000000340)={[{@usrquota}, {@grpjquota}, {@bh}, {@dioread_lock}, {@nojournal_checksum}, {@inlinecrypt}]}, 0x8, 0x5fc, &(0x7f0000000c00)="$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") r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r3, 0x6, 0x0, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000005c0)='kfree\x00', r5, 0x0, 0x8000}, 0x18) r6 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001c00)=@newtaction={0x2ec, 0x30, 0x0, 0x70bd25, 0x25dfdbfd, {}, [{0x2d8, 0x1, [@m_ife={0x70, 0x2, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x7, 0x5, 0x4, 0xc, 0x2}, 0xfffe}}]}, {0x29, 0x6, "2480269da6ae649428bbaed3269d33d8b364106213d72bb8d214f7bef5b7e91a9133185743"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_csum={0x14c, 0xe, 0x0, 0x0, {{0xfffffffffffffebe}, {0xac, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xfffffff8, 0x7, 0x1, 0x5, 0x44}, 0x76}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xfdfffeff, 0x100, 0x2, 0x684e, 0x7f}, 0x34}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x147b, 0x3, 0x2, 0x1, 0xa}, 0x34}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x6, 0xfffffffd, 0x8, 0x9, 0x97}, 0x28}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x6, 0x9, 0x10000000, 0x6, 0x1000}, 0x4c}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x80000001, 0x0, 0x3, 0x400, 0x3}, 0x3b}}]}, {0x76, 0x6, "57ba165aac359f32ee8cd27f8eb504f8da8671302141e45d201903d39dbfb6d84e41ec849a32007da1ab63acd4e00d0fe524b2226e8c77dc05ebb83d3ac27b6049a900fabfa2c629be9ed0562cf85f9573166f7f44ee8ef6d9e0758046fe9e58b5b99d4a91607fd99c3923c48330ed5b7be2"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_sample={0x118, 0x10, 0x0, 0x0, {{0xb}, {0x4}, {0xea, 0x6, "f5b384cbdec1243ed54abd91af11ad7090ef0023071ad65638a94cb2989e4a448128a7f07e90999d0d52931348fd108cc111c5f082005620973a9bc2ca4bcf250553f0ff970fe685cf23c935258f75893e9110854dd7c6236716e9200914c2706df6184ae4c807f751e631669b42ac76d79b1ec5e0666a1089223d8fe87e22d96a85c818476a46c2cd5b4197c2e336feece79ae82f5abc2b75d101e0ac94721f48378a4d275e8bd3c4e16f265454af79a1ec72cc3b457ed5183af7477552ff1eeebb8e0842f0418791918b92d892dff3b0c006b601bd64eeedb43e75cc86121fb475d855fe92"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}]}]}, 0x2ec}, 0x1, 0x0, 0x0, 0x4000000}, 0x4018080) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=@newchain={0x90, 0x64, 0x20, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb, 0x9}, {0xfff1, 0x5}, {0xb, 0x7}}, [@filter_kind_options=@f_fw={{0x7}, {0x64, 0x2, [@TCA_FW_MASK={0x8, 0x5, 0x8}, @TCA_FW_CLASSID={0x8, 0x1, {0x2}}, @TCA_FW_MASK={0x8, 0x5, 0x4}, @TCA_FW_MASK={0x8, 0x5, 0x6}, @TCA_FW_POLICE={0x2c, 0x2, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1a}, @TCA_POLICE_RESULT={0x8, 0x5, 0x3}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x6d77}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x8000}]}, @TCA_FW_INDEV={0x14, 0x3, 'vlan1\x00'}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) fsmount(r3, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000003c0)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="180300000000000000000000000000008510000006000000180000000000000000000000000000006500000002000000180000000101000000000000ea8c93009500000000000000540300000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1aca421, &(0x7f0000000600)=ANY=[@ANYRES32=r0, @ANYRESDEC=0x0, @ANYRES8=r6, @ANYBLOB="f18e3f83c22d1ca7b10ce13dfdf1b4e5c9b24d8d066b1c732d4fd2799783a6367f15029550e89f42784920ebc7ab6a90fc98a86c6d330ba897c8ad4c6d2d868f1eddd0ed9f105a8a642f4a48b0e121df355b39b77e5f10529a881f83db6b37d2d6e465cdda9825c0eafab0d8307e617af15f9c7583a204467b378dd395045255b57c68fd81c8d264ae9ac25583322fad91f995c3f6b944df9b49bdcef33b3279925b8f82ea17a593a7ee40fe4f251e3bce7539899e398133580f6ea165bd5c4fb39e358f58729f59bf5ec2382115af2c9ba6f27443a7b59f9eaf2833c8951f95826a693df8e00d987b77d2eb", @ANYRES64=r2, @ANYRES8=0x0], 0xb, 0x0, &(0x7f0000000000)) 1m11.654045572s ago: executing program 4 (id=8942): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000200), 0x3, 0x434, &(0x7f0000000940)="$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") r0 = open(&(0x7f0000000000)='./file1\x00', 0x802, 0x4) write$P9_RREADDIR(r0, &(0x7f00000002c0)={0xb, 0x29, 0x2, {0x4007}}, 0xb) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x8000, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x2, @perf_config_ext={0xf60, 0x40ffffffff}, 0x1100, 0x5, 0x3a65, 0x5, 0x0, 0x5, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x820720, &(0x7f0000000d80)={[{@orlov}, {@nodelalloc}, {@nomblk_io_submit}, {@grpjquota_path={'grpjquota', 0x3d, './file1'}}, {@barrier}, {@usrjquota}, {@jqfmt_vfsold}, {@minixdf}]}, 0x3, 0x466, &(0x7f0000000340)="$eJzs3E1sFFUcAPD/TD9QvloRP0DUKjE2frS0oHLwgtHEA0YTPeCxtoUQCjW0JkKIVGPwYmJI9Gw8mng38ebFqCcTr3o3JES5gMZDzczOlN1ltx+w7C7u75cMvDfztu/9++btvJm32wB61kj2TxKxNSJ+i4ihSra2wEjlv2tXzk3/feXcdBLLy2/+meTlrl45N10WLV+3pciMphHpx0lRSa2FM2dPTM3NzZ4u8uOLJ98dXzhz9tnjJ6eOzR6bPTV58OCB/RMvPD/5XEvizOK6uvuD+T27Xn374mvTRy6+89M3WXu3Fser42iVkSzwv5Zz9ceeaHVlHbatKp30d7AhbEhfRGTdNZCP/6Hoi+udNxSvfNTRxgG3VXZt2tT88NLyjb5tsA+4IyXR6RYAnVFe6LP733Jr09SjK1w+VLkByuK+VmyVI/2RFmUG6u5vW2kkIo4s/fNltsVteg4BAFDt0+kvDsczjeZ/adxfVW57sYYyHBH3RMSOiLg3InZGxH0RedkHIuLBDdZfvzR04/wnvXRTga1TNv97sVjbqp3/lbO/GO4rctvy+AeSo8fnZvcVv5PRGNiU5SdWqeP7l3/9rNmx6vlftmX1l3PBoh2X+use0M1MLU7lk9IWuPxhxO7+RvEnKysBSUTsiojdG/vR28vE8ae+3tOs0Nrxr6IF60zLX0U8Wen/paiLv5Ssvj45flfMze4bL8+KG/38y4U3mtV/S/G3QNb/m2vP//oiw0n1eu3Cxuu48PsnTe9pbvb8H0zeyvtlsNj3/tTi4umJiMHkcJ6v2T95/bVl/t/lSvks/tG9jcf/juI1WT0PRUR2Ej8cEY9ExKNF2x+LiMcjYu8q8f/4UvNj3dD/Mw3f/1bO/5r+z9LFibByRqyV6Dvxw3fN6l9f/x/IU6PFnvz9bw3rbeCt/O4AAADgTpHmn4FP0rGVdJqOjVU+w78zNqdz8wuLTx+df+/UTOWz8sMxkJZPuoaqnodOJEvFT6zkJ4tnxeXx/cVz48/77s7zY9PzczMdjh163ZYm4z/zR1+nWwfcdo3W0SYHO9AQoO3qx39amz3/ejsbA7SV72tD71pj/KftagfQfq7/0Lsajf/zdXlrAfD/5PoPvcv4h95l/EPvMv6hJ63/W/wS3Zs41IFKI+2O2NdKJBHRBc3o/kT5F4WKPR1+YwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGiR/wIAAP//VMLodg==") r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) socket$kcm(0x29, 0x7, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x6}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x6) symlinkat(&(0x7f0000000400)='./file0/../file0\x00', r5, &(0x7f00000003c0)='./file0\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x10000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x88, 0x800000000001}, 0x100140, 0x5dd8, 0x400c, 0x8, 0x1, 0x8, 0xfffb, 0x0, 0x2, 0x0, 0x1}, 0x0, 0x6, 0xffffffffffffffff, 0x0) mq_notify(0xffffffffffffffff, 0x0) statx(0xffffffffffffffff, 0x0, 0x2000, 0x80, &(0x7f00000001c0)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x2) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = gettid() setpgid(r6, r7) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f00000007c0)={{{@in6=@mcast2, @in=@remote}}, {{@in6=@local}, 0x0, @in6=@private0}}, &(0x7f00000008c0)=0xe8) 1m11.422051285s ago: executing program 4 (id=8943): r0 = socket$nl_route(0x10, 0x3, 0x0) connect$netlink(r0, &(0x7f0000000280)=@proc={0x10, 0x0, 0x25dfdbfb, 0x80000}, 0xc) sendmsg$nl_route(r0, &(0x7f0000000300)={&(0x7f0000000080), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000020000f0000f901000000000002"], 0x1c}}, 0x0) 1m11.0795794s ago: executing program 4 (id=8944): creat(&(0x7f00000000c0)='./file0\x00', 0x198) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001040)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r2}, &(0x7f0000000800), &(0x7f0000000840)=r3}, 0x20) socket(0xa, 0x3, 0x3a) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r4) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r5 = dup(r1) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0xffffffff, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00'}, 0x10) write$P9_RLERRORu(r5, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r5, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) 1m11.06586332s ago: executing program 34 (id=8944): creat(&(0x7f00000000c0)='./file0\x00', 0x198) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001040)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r2}, &(0x7f0000000800), &(0x7f0000000840)=r3}, 0x20) socket(0xa, 0x3, 0x3a) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r4) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r5 = dup(r1) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0xffffffff, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00'}, 0x10) write$P9_RLERRORu(r5, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r5, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) 1.946608362s ago: executing program 7 (id=10550): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x14) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x0, 0x2000000000}, 0x18) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000004400)='./file0\x00', 0x0, &(0x7f0000000340)={[{@usrquota}, {@grpjquota}, {@bh}, {@dioread_lock}, {@nojournal_checksum}, {@inlinecrypt}]}, 0x8, 0x5fc, &(0x7f0000000c00)="$eJzs3c9rHGUfAPDvzCZ5kzavaUXEFsWAhxakaVKLVS+29WAPBQv2IOKhoUlq6PYHTQq2FkzBg4KCiFeRXvwHvEvv3kRQb56FKlJRUOnK7M62m2Q3XdPsTpr5fGCzz/PM7D7PdydP5pmZPDsBlNZ49iON2BVx51QSMdaybDQaC8fz9W7/du109kiiVnv91ySSvKy5fpI/b88zwxHx7dGIRyur6124cvXsdLXW8F7E/sVzF/cvXLm6b/7c9JnZM7Pnpw68cPDQ5ItTB6c2JM7t+fOx4689+fH7bz8/9111XxKH4+TguzOxIo6NMh7jcScPsbV8ICIOZYk2n8vDZguEUGqV/PdxMCIej7Go1HMNYzH/UaGNA3qqVomoASWV6P9QUs1xQPPYvrvj4JM9HpX0z60jjQOg1fEPNM6NxHD92Gjb7aTlyKhxbmPHBtSf1fHPtd2fZ49Ydh7iz7tbZ2AD6ulk6XpEPNEu/qTeth31SLP402XtSCJiMiKG8va98gBtSFrSvTgPs5b1xp9GxOH8OSs/us76x1fk+x0/AOV080i+I1/Kcvf2f9nYozn+iTbjn9E2+671KHr/13n819zfD9fPkacrxmHZmOVE+7ccXFnw04fHPu1Uf+v4L3tk9TfHgv1w63rE7hXxf5AFm49/sviTNts/W+XU4e7qePX7X451WlZ0/LUbEXvaHv/cG5VmqTWuT+6fm6/OTjZ+tq3j62/e+rJT/UXHn23/bR3ib9n+6crXZZ/JxS7r+OrEjXOdlo3eN/7056Gkcbw5lJe8M724eGkqYig5nq/SUn5g7bY012m+Rxb/3mfa9/9lv//Xl7/PSPNPZhcuvnH2dqdl69n+LReT79S6bEMnWfwz99/+q/p/VvZJl3X88eblpzotWyv+kQcJDAAAAAAAAEoorV+DTdKJu+k0nZhozJd9LLal1QsLi8/OXbh8fiZib/3/IQfT5pXusUY+yfJT+f/DNvMHVuSfi4idEfFZZaSenzh9oTpTdPAAAAAAAAAAAAAAAAAAAACwSWzP5/8371P9e6Ux/x8oiV7eYA7Y3PR/KK96/191iyegDOz/obz0fygv/R/KS/+H8tL/obz0fygv/R/KS/8HAAAAgC1p59M3f0wiYumlkfojM5QvMyMItrbBohsAFKZSdAOAwty99G+wD6XT1fj/r/zLAXvfHKAASbvC+uCgtnbnv9n2lQAAAAAAAAAAAABAD+zZ1Xn+v7nBsLWZ9gfl9QDz/311ADzkfPU/lJdjfOB+s/iHOy0w/x8AAAAAAAAAAAAA+ma0/kjSiXwu8Gik6cRExP8jYkcMJnPz1dnJiHgkIn6oDP4vy08V3WgAAAAAAAAAAAAAAAAAAADYYhauXD07Xa3OXmpN/L2qZGsnmndB7UNdL8d/fFUk/f9YRiKi8I3Ss8RAS0kSsZRt+U3RsEsLsTmaUU8U/IcJAAAAAAAAAAAAAAAAAABKqGXucXu7v+hziwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACg/+7d/793iaJjBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeTv8GAAD//7V5QCw=") r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) r4 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001c00)=@newtaction={0x2ec, 0x30, 0x0, 0x70bd25, 0x25dfdbfd, {}, [{0x2d8, 0x1, [@m_ife={0x70, 0x2, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x7, 0x5, 0x4, 0xc, 0x2}, 0xfffe}}]}, {0x29, 0x6, "2480269da6ae649428bbaed3269d33d8b364106213d72bb8d214f7bef5b7e91a9133185743"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_csum={0x14c, 0xe, 0x0, 0x0, {{0xfffffffffffffebe}, {0xac, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xfffffff8, 0x7, 0x1, 0x5, 0x44}, 0x76}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xfdfffeff, 0x100, 0x2, 0x684e, 0x7f}, 0x34}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x147b, 0x3, 0x2, 0x1, 0xa}, 0x34}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x6, 0xfffffffd, 0x8, 0x9, 0x97}, 0x28}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x6, 0x9, 0x10000000, 0x6, 0x1000}, 0x4c}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x80000001, 0x0, 0x3, 0x400, 0x3}, 0x3b}}]}, {0x76, 0x6, "57ba165aac359f32ee8cd27f8eb504f8da8671302141e45d201903d39dbfb6d84e41ec849a32007da1ab63acd4e00d0fe524b2226e8c77dc05ebb83d3ac27b6049a900fabfa2c629be9ed0562cf85f9573166f7f44ee8ef6d9e0758046fe9e58b5b99d4a91607fd99c3923c48330ed5b7be2"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_sample={0x118, 0x10, 0x0, 0x0, {{0xb}, {0x4}, {0xea, 0x6, "f5b384cbdec1243ed54abd91af11ad7090ef0023071ad65638a94cb2989e4a448128a7f07e90999d0d52931348fd108cc111c5f082005620973a9bc2ca4bcf250553f0ff970fe685cf23c935258f75893e9110854dd7c6236716e9200914c2706df6184ae4c807f751e631669b42ac76d79b1ec5e0666a1089223d8fe87e22d96a85c818476a46c2cd5b4197c2e336feece79ae82f5abc2b75d101e0ac94721f48378a4d275e8bd3c4e16f265454af79a1ec72cc3b457ed5183af7477552ff1eeebb8e0842f0418791918b92d892dff3b0c006b601bd64eeedb43e75cc86121fb475d855fe92"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}]}]}, 0x2ec}, 0x1, 0x0, 0x0, 0x4000000}, 0x4018080) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=@newchain={0x90, 0x64, 0x20, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb, 0x9}, {0xfff1, 0x5}, {0xb, 0x7}}, [@filter_kind_options=@f_fw={{0x7}, {0x64, 0x2, [@TCA_FW_MASK={0x8, 0x5, 0x8}, @TCA_FW_CLASSID={0x8, 0x1, {0x2}}, @TCA_FW_MASK={0x8, 0x5, 0x4}, @TCA_FW_MASK={0x8, 0x5, 0x6}, @TCA_FW_POLICE={0x2c, 0x2, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1a}, @TCA_POLICE_RESULT={0x8, 0x5, 0x3}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x6d77}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x8000}]}, @TCA_FW_INDEV={0x14, 0x3, 'vlan1\x00'}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) fsmount(r2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000003c0)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="180300000000000000000000000000008510000006000000180000000000000000000000000000006500000002000000180000000101000000000000ea8c93009500000000000000540300000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1aca421, &(0x7f0000000600)=ANY=[@ANYRES32, @ANYRESDEC=0x0, @ANYRES8=r4, @ANYBLOB="f18e3f83c22d1ca7b10ce13dfdf1b4e5c9b24d8d066b1c732d4fd2799783a6367f15029550e89f42784920ebc7ab6a90fc98a86c6d330ba897c8ad4c6d2d868f1eddd0ed9f105a8a642f4a48b0e121df355b39b77e5f10529a881f83db6b37d2d6e465cdda9825c0eafab0d8307e617af15f9c7583a204467b378dd395045255b57c68fd81c8d264ae9ac25583322fad91f995c3f6b944df9b49bdcef33b3279925b8f82ea17a593a7ee40fe4f251e3bce7539899e398133580f6ea165bd5c4fb39e358f58729f59bf5ec2382115af2c9ba6f27443a7b59f9eaf2833c8951f95826a693df8e00d987b77d2eb", @ANYRES64=r1, @ANYRES8=0x0], 0xb, 0x0, &(0x7f0000000000)) 1.575572128s ago: executing program 5 (id=10563): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500000002"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x18) unshare(0x24040000) unshare(0x2c020400) 1.502692719s ago: executing program 5 (id=10565): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) sched_getattr(0x0, &(0x7f0000000040)={0x38}, 0x38, 0x0) 1.487377959s ago: executing program 7 (id=10566): mknod$loop(0x0, 0x6000, 0x0) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0xfffffdfd) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x8, &(0x7f00000001c0)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}}]}, &(0x7f0000000300)='GPL\x00', 0x9, 0x1, &(0x7f0000000340)=""/1, 0x0, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f0000000400)='./file0\x00', 0x410c84, &(0x7f00000003c0)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x4}}]}, 0x1, 0x775, &(0x7f0000001180)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x8c7) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x69) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000c"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYRES16=r0], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) close(0xffffffffffffffff) r7 = openat$binfmt_register(0xffffff9c, &(0x7f0000000040), 0x1, 0x0) write$binfmt_register(r7, &(0x7f0000000000)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x6, 0x3a, 'E', 0x3a, '@{@$\x9a$^', 0x3a, './file2', 0x3a, [0x46, 0x43, 0x43]}, 0x32) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write(r6, &(0x7f0000004200)='t', 0x1) sendfile(r6, r5, 0x0, 0x3ffff) sendfile(r6, r5, 0x0, 0x7ffff000) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x54, r3, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @local}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x28, r1, 0x1, 0x70bd2b, 0x0, {0x2}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x28}}, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 1.482477189s ago: executing program 5 (id=10567): mknod$loop(0x0, 0x6000, 0x0) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0xfffffdfd) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x8, &(0x7f00000001c0)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}}]}, &(0x7f0000000300)='GPL\x00', 0x9, 0x1, &(0x7f0000000340)=""/1, 0x0, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f0000000400)='./file0\x00', 0x410c84, &(0x7f00000003c0)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x4}}]}, 0x1, 0x775, &(0x7f0000001180)="$eJzs3c9rXNUeAPDvnSRNm/a95MGD9+oqIGigdGJqbBVcVFyIYKGga9thMg01k0zJTEoTAlpEcCOouBB007U/6s6tP7b6X7gQS9W0WHEhkTu5t502M2mSJpnqfD5wM+fceyfnfOf+OGfmHu4NoGeNpn8KEYcj4t0kYjibn0TEQDPVH3Fybb1bK8vldEpidfXlX5LmOjdXlsvR8p7UwSzz/4j45q2II4X15dYXl2ZK1WplPsuPN2YvjNcXl46eny1NV6Yrc8cnJiePnXjqxPGdi/W375cOXXvvhcc/P/nHm/+7+s63SZyMQ9my1jh2ymiMZp/JQPoR3uX5nS6sy5JuV4BtSQ/NvrWjPA7HcPQ1UwDAP9nrEbEKAPSYRPsPAD0m/x3g5spyOZ+6+4vE3rr+XETsX4s/v765tqQ/u2a3v3kddOhmcteVkSQiRnag/NGI+PjLVz9Np9il65AA7bxxOSLOjoyuP/8n68YsbNUTGyzbl72O3jPf+Q/2zldp/+fpdv2/wu3+T7Tp/wy2OXa3477H/4EdKGQDaf/v2Zaxbbda4s+M9GW5fzX7fAPJufPVSnpu+3dEjMXAYJqf2KCMsRt/3ui0rLX/9+v7r32Slp++3lmj8FP/4N3vmSo1Sg8Sc6vrlyMe6W8Xf3J7+ycd+r+nN1nGi8+8/VGnZWn8abz5tD7+yEYn7Y7VKxGPtd3+d0a0JRuOTxxv7g7j+U7Rxhc/fDjUqfzW7Z9Oafn5d4G9kG7/oY3jH0lax2vWt17Gd1eGv+607P7xt9//9yWvNNN5P+JSqdGYn4jYl7y0fv6xO+/N8/n6afxjj7Y//jfa/9PvhGc3GX//tZ8/2378uyuNf2pL23/riau3Zvo6lb+57T/ZTI1lczZz/ttsBR/kswMAAAAAAAAAAAAAAAAAAAAAAACAzSpExKFICsXb6UKhWFx7hvd/Y6hQrdUbR87VFuamovms7JEYKOS3uhxuuR/qRHY//Dx/7J78kxHxn4j4YPBAkt9HcarLsQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA7mCH5/+nfhzsdu0AgF2zv9sVAAD2nPYfAHqP9h8Aeo/2HwB6j/YfAHqP9h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBddvrUqXRa/X1luZzmpy4uLszULh6dqtRnirML5WK5Nn+hOF2rTVcrxXJt9n7/r1qrXZiMuYVL441KvTFeX1w6M1tbmGucOT9bmq6cqQzsSVQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsDX1xaWZUrVamZfYRmL14ahG9xN92e70sNRnTxPJw1GNHU50+cQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8DfxVwAAAP//02Ii/w==") open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x8c7) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x69) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000c"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYRES16=r0], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) close(0xffffffffffffffff) r7 = openat$binfmt_register(0xffffff9c, &(0x7f0000000040), 0x1, 0x0) write$binfmt_register(r7, &(0x7f0000000000)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x6, 0x3a, 'E', 0x3a, '@{@$\x9a$^', 0x3a, './file2', 0x3a, [0x46, 0x43, 0x43]}, 0x32) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write(r6, &(0x7f0000004200)='t', 0x1) sendfile(r6, r5, 0x0, 0x3ffff) sendfile(r6, r5, 0x0, 0x7ffff000) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x54, r3, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @local}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x28, r1, 0x1, 0x70bd2b, 0x0, {0x2}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x28}}, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 1.161557074s ago: executing program 0 (id=10571): shutdown(0xffffffffffffffff, 0x1) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0xff, 0x7ffc0002}]}) r2 = syz_clone(0x0, 0x0, 0x9, 0x0, 0x0, 0x0) kcmp(r2, r2, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) 1.053657916s ago: executing program 0 (id=10573): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x25dfdbfe, {{@in6=@private0={0xfc, 0x0, '\x00', 0x40}, @in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0x0, 0x400, 0x0, 0x0, 0xa, 0x60, 0x80, 0x0, 0x0, 0xee01}, {}, {}, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) (fail_nth: 4) 772.554679ms ago: executing program 0 (id=10575): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="fd8d00000000000000000200000008000300", @ANYRES32=r2, @ANYBLOB="0a0009000180c2000000fdff"], 0x30}}, 0x0) 642.793981ms ago: executing program 0 (id=10580): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) clock_gettime(0x0, &(0x7f0000002600)={0x0, 0x0}) recvmmsg(r0, &(0x7f00000024c0)=[{{&(0x7f0000000180)=@qipcrtr, 0x80, &(0x7f0000000000)=[{&(0x7f0000000240)=""/200, 0xc8}], 0x1, &(0x7f000001bac0)=""/99, 0x63}, 0x9}, {{0x0, 0x0, &(0x7f0000000340), 0x3, &(0x7f00000005c0)=""/108, 0x6c}, 0x9}, {{&(0x7f0000000640)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f00000007c0)=[{&(0x7f00000006c0)=""/133, 0x85}, {&(0x7f0000000c00)=""/4096, 0x1000}], 0x2, &(0x7f0000000800)=""/111, 0x6f}, 0x2}, {{&(0x7f000001bb40)=@nl, 0x80, &(0x7f0000001f80)=[{&(0x7f0000000900)=""/53, 0x35}, {&(0x7f0000000940)=""/141, 0x8d}, {&(0x7f0000000a00)=""/153, 0x99}, {&(0x7f0000000ac0)=""/179, 0xb3}, {&(0x7f000001ba40)=""/69, 0x45}, {&(0x7f0000001c80)=""/184, 0xb8}, {&(0x7f0000001d40)=""/88, 0x58}, {&(0x7f0000000b80)=""/21, 0x15}, {&(0x7f0000001dc0)=""/186, 0xba}, {&(0x7f0000001e80)=""/235, 0xeb}], 0xa, &(0x7f0000002040)=""/173, 0xad}, 0x618}, {{0x0, 0x0, &(0x7f0000002400)=[{&(0x7f0000002100)=""/48, 0x30}, {&(0x7f0000002140)=""/159, 0x9f}, {&(0x7f0000002200)}, {&(0x7f0000002240)=""/203, 0x28}, {&(0x7f0000002340)=""/22, 0x16}, {&(0x7f0000002380)=""/7, 0x7}, {&(0x7f00000023c0)=""/51, 0x33}], 0x7, &(0x7f0000002480)=""/31, 0x1f}, 0xeaf}], 0x5, 0x1, &(0x7f0000002640)={r1, r2+60000000}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x169000, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x2000c004) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xf}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000040000000000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000838500000071000000850000005000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) pipe2$9p(&(0x7f0000001900), 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f000001bbc0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018010000202070250000002f0e2a822f6200002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500003e7e3bdb8b19a23a1d325400eba913a8b436ea6e4c6d717d27995a19153862349a0ee7aceb1a8d406222fa9308f6b25b09fae200b4aa2180f4b79ac0bacc3a8fbd222f8a7b595fb56d8f39466e36ec82ea6c0c949ea5899f5df0379719ae79cde81da6"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00', r9}, 0x10) r10 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r10, &(0x7f0000001240)=""/102400, 0x200000, 0x40000000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa1000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r11}, 0x10) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) r12 = socket(0x10, 0x80003, 0x0) write(r12, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85) close_range(r12, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) 528.220633ms ago: executing program 7 (id=10582): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000004180)=ANY=[@ANYBLOB="020000000400000007000000020000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) listen(r0, 0x3) 343.271825ms ago: executing program 7 (id=10585): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) fgetxattr(0xffffffffffffffff, &(0x7f00000000c0)=@known='trusted.overlay.origin\x00', 0x0, 0x0) 342.147395ms ago: executing program 6 (id=10586): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x15) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chown(&(0x7f0000000240)='./file0\x00', 0xee00, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0xe8) 301.133516ms ago: executing program 5 (id=10587): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500000002"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x18) unshare(0x24040000) unshare(0x2c020400) 300.262346ms ago: executing program 6 (id=10588): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x15) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chown(&(0x7f0000000240)='./file0\x00', 0xee00, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0xe8) 295.491486ms ago: executing program 7 (id=10589): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000003c0)={'team0\x00', 0x0}) bind$xdp(r2, &(0x7f0000000400)={0x2c, 0x2, r3, 0x2e, r2}, 0x10) sendmsg$AUDIT_MAKE_EQUIV(r0, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200820}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x28, 0x3f7, 0x8, 0x70bd28, 0x25dfdbfc, {0x7, 0x7, './file0', './file0'}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) r4 = fsopen(&(0x7f0000000080)='bpf\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) symlinkat(&(0x7f0000000480)='./file0/../file0\x00', r5, &(0x7f0000000140)='./file0\x00') readlinkat(r5, &(0x7f00000001c0)='./file0/../file0\x00', &(0x7f00000002c0)=""/204, 0xcc) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 276.972386ms ago: executing program 6 (id=10590): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r2, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x183000, 0x23456}) io_uring_enter(r2, 0x47f6, 0x0, 0x2, 0x0, 0x0) 252.278696ms ago: executing program 1 (id=10591): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$kcm(0xa, 0x2, 0x88) sendmsg$inet(r1, &(0x7f0000001600)={&(0x7f0000001340)={0x2, 0x2, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000001580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @loopback, @multicast1}}}], 0x20}, 0x8000) sendmsg$inet(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000380)=[{0x0}, {&(0x7f0000000580)="914781", 0x3}], 0x2}, 0x48800) 222.466297ms ago: executing program 5 (id=10592): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf05", 0x29}], 0x1}, 0x0) 204.891597ms ago: executing program 1 (id=10593): bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000072000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000200000000000000001809"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x1200) 203.709257ms ago: executing program 0 (id=10594): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f00000001c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000140), r1}}, 0x18) 202.319867ms ago: executing program 1 (id=10595): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001040)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) 183.102618ms ago: executing program 5 (id=10596): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = socket$inet(0xa, 0x801, 0x84) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000240)='kfree\x00', r2, 0x0, 0x4ab}, 0x18) ioctl$SIOCGETVIFCNT(r0, 0x89e0, &(0x7f0000000040)) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0xfffd, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, 0x0) r3 = syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x5885, 0x100, 0x0, 0xffeffc03}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, 0xffffffffffffffff, 0x32, &(0x7f00000000c0)=@un=@abs={0x1, 0x0, 0x4e20}}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x4001) io_uring_enter(r3, 0x3516, 0x483, 0x0, 0x0, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r6}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x52e, &(0x7f0000000640)="$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") socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) vmsplice(r7, &(0x7f0000000080)=[{&(0x7f00000004c0)="7cd1f233", 0x4}], 0x1, 0x0) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000240)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r8, 0xffffffffffffffff, 0x0) r9 = inotify_init1(0x0) inotify_add_watch(r9, &(0x7f00000000c0)='.\x00', 0xa4000061) r10 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$IPSET_CMD_CREATE(r10, 0x0, 0x40) read(r9, &(0x7f0000000140)=""/68, 0x44) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x160}, 0x1, 0x0, 0x0, 0x20040880}, 0x20040000) pause() 173.639038ms ago: executing program 7 (id=10597): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x14) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000004400)='./file0\x00', 0x0, &(0x7f0000000340)={[{@usrquota}, {@grpjquota}, {@bh}, {@dioread_lock}, {@nojournal_checksum}, {@inlinecrypt}]}, 0x8, 0x5fc, &(0x7f0000000c00)="$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") r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) r4 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001c00)=@newtaction={0x2ec, 0x30, 0x0, 0x70bd25, 0x25dfdbfd, {}, [{0x2d8, 0x1, [@m_ife={0x70, 0x2, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x7, 0x5, 0x4, 0xc, 0x2}, 0xfffe}}]}, {0x29, 0x6, "2480269da6ae649428bbaed3269d33d8b364106213d72bb8d214f7bef5b7e91a9133185743"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_csum={0x14c, 0xe, 0x0, 0x0, {{0xfffffffffffffebe}, {0xac, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xfffffff8, 0x7, 0x1, 0x5, 0x44}, 0x76}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xfdfffeff, 0x100, 0x2, 0x684e, 0x7f}, 0x34}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x147b, 0x3, 0x2, 0x1, 0xa}, 0x34}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x6, 0xfffffffd, 0x8, 0x9, 0x97}, 0x28}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x6, 0x9, 0x10000000, 0x6, 0x1000}, 0x4c}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x80000001, 0x0, 0x3, 0x400, 0x3}, 0x3b}}]}, {0x76, 0x6, "57ba165aac359f32ee8cd27f8eb504f8da8671302141e45d201903d39dbfb6d84e41ec849a32007da1ab63acd4e00d0fe524b2226e8c77dc05ebb83d3ac27b6049a900fabfa2c629be9ed0562cf85f9573166f7f44ee8ef6d9e0758046fe9e58b5b99d4a91607fd99c3923c48330ed5b7be2"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_sample={0x118, 0x10, 0x0, 0x0, {{0xb}, {0x4}, {0xea, 0x6, "f5b384cbdec1243ed54abd91af11ad7090ef0023071ad65638a94cb2989e4a448128a7f07e90999d0d52931348fd108cc111c5f082005620973a9bc2ca4bcf250553f0ff970fe685cf23c935258f75893e9110854dd7c6236716e9200914c2706df6184ae4c807f751e631669b42ac76d79b1ec5e0666a1089223d8fe87e22d96a85c818476a46c2cd5b4197c2e336feece79ae82f5abc2b75d101e0ac94721f48378a4d275e8bd3c4e16f265454af79a1ec72cc3b457ed5183af7477552ff1eeebb8e0842f0418791918b92d892dff3b0c006b601bd64eeedb43e75cc86121fb475d855fe92"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}]}]}, 0x2ec}, 0x1, 0x0, 0x0, 0x4000000}, 0x4018080) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=@newchain={0x90, 0x64, 0x20, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb, 0x9}, {0xfff1, 0x5}, {0xb, 0x7}}, [@filter_kind_options=@f_fw={{0x7}, {0x64, 0x2, [@TCA_FW_MASK={0x8, 0x5, 0x8}, @TCA_FW_CLASSID={0x8, 0x1, {0x2}}, @TCA_FW_MASK={0x8, 0x5, 0x4}, @TCA_FW_MASK={0x8, 0x5, 0x6}, @TCA_FW_POLICE={0x2c, 0x2, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1a}, @TCA_POLICE_RESULT={0x8, 0x5, 0x3}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x6d77}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x8000}]}, @TCA_FW_INDEV={0x14, 0x3, 'vlan1\x00'}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) fsmount(r2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000003c0)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="180300000000000000000000000000008510000006000000180000000000000000000000000000006500000002000000180000000101000000000000ea8c93009500000000000000540300000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1aca421, &(0x7f0000000600)=ANY=[@ANYRES32, @ANYRESDEC=0x0, @ANYRES8=r4, @ANYBLOB="f18e3f83c22d1ca7b10ce13dfdf1b4e5c9b24d8d066b1c732d4fd2799783a6367f15029550e89f42784920ebc7ab6a90fc98a86c6d330ba897c8ad4c6d2d868f1eddd0ed9f105a8a642f4a48b0e121df355b39b77e5f10529a881f83db6b37d2d6e465cdda9825c0eafab0d8307e617af15f9c7583a204467b378dd395045255b57c68fd81c8d264ae9ac25583322fad91f995c3f6b944df9b49bdcef33b3279925b8f82ea17a593a7ee40fe4f251e3bce7539899e398133580f6ea165bd5c4fb39e358f58729f59bf5ec2382115af2c9ba6f27443a7b59f9eaf2833c8951f95826a693df8e00d987b77d2eb", @ANYRES64=r1, @ANYRES8=0x0], 0xb, 0x0, &(0x7f0000000000)) 159.981728ms ago: executing program 0 (id=10598): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @empty}], 0x1c) sendto$inet6(r1, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, 0x0, 0x8000) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, 0x0, &(0x7f00000000c0)) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r2) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r2, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24040000}, 0x8000) r3 = epoll_create1(0x0) socket$kcm(0x10, 0x3, 0x10) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000180)={0xc0000009}) socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f000006a000/0x2000)=nil, 0x2000, 0xd, 0x4000010, 0xffffffffffffffff, 0x2000) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) socket(0x2, 0x6, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r6, &(0x7f0000000080)={0xa002a008}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) close(0x4) 157.698398ms ago: executing program 6 (id=10599): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) fgetxattr(0xffffffffffffffff, &(0x7f00000000c0)=@known='trusted.overlay.origin\x00', 0x0, 0x0) 152.877428ms ago: executing program 1 (id=10600): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500000002"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x18) unshare(0x24040000) unshare(0x2c020400) 112.131139ms ago: executing program 6 (id=10601): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000400)='dctcp\x00', 0x6) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg(r0, &(0x7f0000005ec0), 0x0, 0x1) r1 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r1, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) 92.169059ms ago: executing program 1 (id=10602): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000410"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x18) unshare(0x24040000) unshare(0x2c020400) 36.77477ms ago: executing program 6 (id=10603): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$kcm(0xa, 0x2, 0x88) sendmsg$inet(r1, &(0x7f0000001600)={&(0x7f0000001340)={0x2, 0x2, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000001580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @loopback, @multicast1}}}], 0x20}, 0x8000) sendmsg$inet(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000380)=[{0x0}, {&(0x7f0000000580)="914781", 0x3}], 0x2}, 0x48800) 0s ago: executing program 1 (id=10604): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500000002"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x18) unshare(0x24040000) unshare(0x2c020400) kernel console output (not intermixed with test programs): ncryption not supported [ 439.525091][T28946] EXT4-fs: Ignoring removed i_version option [ 439.569247][T28955] bond2: (slave veth13): making interface the new active one [ 439.577092][T28955] veth13: entered promiscuous mode [ 439.611731][T28946] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 439.649842][T28955] bond2: (slave veth13): Enslaving as an active interface with an up link [ 439.886750][T28946] EXT4-fs error (device loop0): ext4_map_blocks:709: inode #3: block 1: comm syz.0.9742: lblock 1 mapped to illegal pblock 1 (length 1) [ 439.925752][T28946] EXT4-fs error (device loop0): ext4_acquire_dquot:6935: comm syz.0.9742: Failed to acquire dquot type 0 [ 439.931616][T28982] netlink: 'syz.6.9756': attribute type 1 has an invalid length. [ 439.961938][T28946] EXT4-fs error (device loop0): ext4_free_blocks:6587: comm syz.0.9742: Freeing blocks not in datazone - block = 0, count = 4096 [ 440.002538][T28982] bond2: entered promiscuous mode [ 440.009336][T28982] 8021q: adding VLAN 0 to HW filter on device bond2 [ 440.029569][T28986] bond2: (slave veth9): making interface the new active one [ 440.036971][T28986] veth9: entered promiscuous mode [ 440.045319][T28986] bond2: (slave veth9): Enslaving as an active interface with an up link [ 440.057246][T28946] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm syz.0.9742: Invalid inode bitmap blk 0 in block_group 0 [ 440.078668][T27590] EXT4-fs error (device loop0): ext4_map_blocks:675: inode #3: block 1: comm kworker/u8:31: lblock 1 mapped to illegal pblock 1 (length 1) [ 440.087033][T28946] EXT4-fs error (device loop0) in ext4_free_inode:361: Corrupt filesystem [ 440.112950][T28946] EXT4-fs (loop0): 1 orphan inode deleted [ 440.131415][T27590] EXT4-fs error (device loop0): ext4_release_dquot:6971: comm kworker/u8:31: Failed to release dquot type 0 [ 440.199396][T28946] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 440.383013][T26713] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 440.673898][T29037] loop6: detected capacity change from 0 to 2048 [ 440.682172][T29030] loop0: detected capacity change from 0 to 2048 [ 440.705501][T29037] loop6: p1 < > p4 < > [ 440.716017][T29030] EXT4-fs error (device loop0): ext4_ext_check_inode:524: inode #2: comm syz.0.9780: pblk 0 bad header/extent: eh_entries is 0 but eh_depth is > 0 - magic f30a, entries 0, max 4(4), depth 5(5) [ 440.755221][T29039] binfmt_misc: register: failed to install interpreter file ./file2 [ 440.769518][T29037] __nla_validate_parse: 8 callbacks suppressed [ 440.769535][T29037] netlink: 16 bytes leftover after parsing attributes in process `syz.6.9784'. [ 440.829042][T29030] EXT4-fs (loop0): get root inode failed [ 440.834808][T29030] EXT4-fs (loop0): mount failed [ 440.880348][T29030] loop0: detected capacity change from 0 to 1024 [ 440.895879][T29030] EXT4-fs: Ignoring removed bh option [ 440.901381][T29030] EXT4-fs: inline encryption not supported [ 440.923357][T29030] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 440.929105][T29055] netlink: 76 bytes leftover after parsing attributes in process `syz.6.9789'. [ 440.945988][T29030] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 441.002748][T29030] EXT4-fs error (device loop0): ext4_map_blocks:709: inode #3: block 1: comm syz.0.9780: lblock 1 mapped to illegal pblock 1 (length 1) [ 441.030863][T29047] netlink: 36 bytes leftover after parsing attributes in process `syz.7.9787'. [ 441.038990][T29030] EXT4-fs error (device loop0): ext4_acquire_dquot:6935: comm syz.0.9780: Failed to acquire dquot type 0 [ 441.099706][T29030] EXT4-fs error (device loop0): ext4_free_blocks:6587: comm syz.0.9780: Freeing blocks not in datazone - block = 0, count = 4096 [ 441.146827][T29030] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm syz.0.9780: Invalid inode bitmap blk 0 in block_group 0 [ 441.179497][T27589] EXT4-fs error (device loop0): ext4_map_blocks:675: inode #3: block 1: comm kworker/u8:30: lblock 1 mapped to illegal pblock 1 (length 1) [ 441.199389][T29030] EXT4-fs error (device loop0) in ext4_free_inode:361: Corrupt filesystem [ 441.212151][T29030] EXT4-fs (loop0): 1 orphan inode deleted [ 441.228345][T27589] EXT4-fs error (device loop0): ext4_release_dquot:6971: comm kworker/u8:30: Failed to release dquot type 0 [ 441.313617][T29074] loop5: detected capacity change from 0 to 2048 [ 441.322606][T29030] ext4: Unknown parameter 'ÿÿÿÿ00000000000000000000ñŽ?ƒÂ-§± á' [ 441.342908][T29073] netlink: 'syz.6.9797': attribute type 1 has an invalid length. [ 441.388264][T29073] bond3: entered promiscuous mode [ 441.396208][T29074] EXT4-fs error (device loop5): ext4_ext_check_inode:524: inode #2: comm syz.5.9796: pblk 0 bad header/extent: eh_entries is 0 but eh_depth is > 0 - magic f30a, entries 0, max 4(4), depth 5(5) [ 441.421923][T29073] 8021q: adding VLAN 0 to HW filter on device bond3 [ 441.446672][T29078] bond3: (slave veth11): making interface the new active one [ 441.454314][T29078] veth11: entered promiscuous mode [ 441.464421][T29074] EXT4-fs (loop5): get root inode failed [ 441.470114][T29074] EXT4-fs (loop5): mount failed [ 441.497178][T29078] bond3: (slave veth11): Enslaving as an active interface with an up link [ 441.531349][T29074] loop5: detected capacity change from 0 to 1024 [ 441.563178][T29074] EXT4-fs: Ignoring removed bh option [ 441.563796][T29082] loop7: detected capacity change from 0 to 512 [ 441.568693][T29074] EXT4-fs: inline encryption not supported [ 441.606221][T29082] EXT4-fs (loop7): orphan cleanup on readonly fs [ 441.609433][T29074] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 441.636708][T29082] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.9799: bg 0: block 248: padding at end of block bitmap is not set [ 441.686785][T29082] EXT4-fs error (device loop7): ext4_acquire_dquot:6935: comm syz.7.9799: Failed to acquire dquot type 1 [ 441.707524][T29074] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 441.730824][T29082] EXT4-fs (loop7): 1 truncate cleaned up [ 441.746882][T29093] loop6: detected capacity change from 0 to 1024 [ 441.766285][T29074] EXT4-fs error (device loop5): ext4_map_blocks:709: inode #3: block 1: comm syz.5.9796: lblock 1 mapped to illegal pblock 1 (length 1) [ 441.793261][T29080] netlink: 36 bytes leftover after parsing attributes in process `syz.0.9798'. [ 441.793391][T29093] EXT4-fs: Ignoring removed bh option [ 441.793442][T29093] EXT4-fs: inline encryption not supported [ 441.813984][T29093] EXT4-fs: Ignoring removed i_version option [ 441.820252][T29074] EXT4-fs error (device loop5): ext4_acquire_dquot:6935: comm syz.5.9796: Failed to acquire dquot type 0 [ 441.834500][T29093] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 441.879506][T29074] EXT4-fs error (device loop5): ext4_free_blocks:6587: comm syz.5.9796: Freeing blocks not in datazone - block = 0, count = 4096 [ 441.897144][T29080] bridge0: port 3(vlan2) entered blocking state [ 441.905173][T29080] bridge0: port 3(vlan2) entered disabled state [ 441.906669][T29093] EXT4-fs error (device loop6): ext4_map_blocks:709: inode #3: block 1: comm syz.6.9804: lblock 1 mapped to illegal pblock 1 (length 1) [ 441.923345][T29080] vlan2: entered allmulticast mode [ 441.939601][T29080] dummy0: entered allmulticast mode [ 441.946590][T29074] EXT4-fs error (device loop5): ext4_read_inode_bitmap:139: comm syz.5.9796: Invalid inode bitmap blk 0 in block_group 0 [ 441.959668][T29093] EXT4-fs error (device loop6): ext4_acquire_dquot:6935: comm syz.6.9804: Failed to acquire dquot type 0 [ 441.971290][T27590] EXT4-fs error (device loop5): ext4_map_blocks:675: inode #3: block 1: comm kworker/u8:31: lblock 1 mapped to illegal pblock 1 (length 1) [ 441.978150][T29093] EXT4-fs error (device loop6): ext4_free_blocks:6587: comm syz.6.9804: Freeing blocks not in datazone - block = 0, count = 4096 [ 442.001145][T29074] EXT4-fs error (device loop5) in ext4_free_inode:361: Corrupt filesystem [ 442.009762][T27590] EXT4-fs error (device loop5): ext4_release_dquot:6971: comm kworker/u8:31: Failed to release dquot type 0 [ 442.026152][T29080] vlan2: entered promiscuous mode [ 442.037074][T29080] dummy0: entered promiscuous mode [ 442.037123][T29074] EXT4-fs (loop5): 1 orphan inode deleted [ 442.049193][T29093] EXT4-fs error (device loop6): ext4_read_inode_bitmap:139: comm syz.6.9804: Invalid inode bitmap blk 0 in block_group 0 [ 442.049419][T29093] EXT4-fs error (device loop6) in ext4_free_inode:361: Corrupt filesystem [ 442.049567][T29093] EXT4-fs (loop6): 1 orphan inode deleted [ 442.080249][T27587] EXT4-fs error (device loop6): ext4_map_blocks:675: inode #3: block 1: comm kworker/u8:28: lblock 1 mapped to illegal pblock 1 (length 1) [ 442.127881][T27587] EXT4-fs error (device loop6): ext4_release_dquot:6971: comm kworker/u8:28: Failed to release dquot type 0 [ 442.160402][T29074] ext4: Unknown parameter 'ÿÿÿÿ00000000000000000000ñŽ?ƒÂ-§± á' [ 442.261513][T29116] netlink: 24 bytes leftover after parsing attributes in process `syz.7.9813'. [ 442.305973][T29120] FAULT_INJECTION: forcing a failure. [ 442.305973][T29120] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 442.319138][T29120] CPU: 0 UID: 0 PID: 29120 Comm: syz.1.9815 Not tainted 6.15.0-rc6-syzkaller-00047-ge9565e23cd89 #0 PREEMPT(voluntary) [ 442.319182][T29120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 442.319199][T29120] Call Trace: [ 442.319208][T29120] [ 442.319218][T29120] __dump_stack+0x1d/0x30 [ 442.319245][T29120] dump_stack_lvl+0xe8/0x140 [ 442.319270][T29120] dump_stack+0x15/0x1b [ 442.319291][T29120] should_fail_ex+0x265/0x280 [ 442.319392][T29120] should_fail+0xb/0x20 [ 442.319462][T29120] should_fail_usercopy+0x1a/0x20 [ 442.319488][T29120] _copy_to_user+0x20/0xa0 [ 442.319517][T29120] simple_read_from_buffer+0xb5/0x130 [ 442.319605][T29120] proc_fail_nth_read+0x100/0x140 [ 442.319667][T29120] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 442.319691][T29120] vfs_read+0x1a0/0x6f0 [ 442.319722][T29120] ? __rcu_read_unlock+0x4f/0x70 [ 442.319799][T29120] ? __fget_files+0x184/0x1c0 [ 442.319832][T29120] ksys_read+0xda/0x1a0 [ 442.319920][T29120] __x64_sys_read+0x40/0x50 [ 442.319951][T29120] x64_sys_call+0x2d77/0x2fb0 [ 442.320059][T29120] do_syscall_64+0xd0/0x1a0 [ 442.320088][T29120] ? clear_bhb_loop+0x40/0x90 [ 442.320167][T29120] ? clear_bhb_loop+0x40/0x90 [ 442.320189][T29120] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 442.320220][T29120] RIP: 0033:0x7fdd3e02d37c [ 442.320239][T29120] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 442.320260][T29120] RSP: 002b:00007fdd3c697030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 442.320283][T29120] RAX: ffffffffffffffda RBX: 00007fdd3e255fa0 RCX: 00007fdd3e02d37c [ 442.320299][T29120] RDX: 000000000000000f RSI: 00007fdd3c6970a0 RDI: 0000000000000008 [ 442.320314][T29120] RBP: 00007fdd3c697090 R08: 0000000000000000 R09: 0000000000000000 [ 442.320354][T29120] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 442.320369][T29120] R13: 0000000000000000 R14: 00007fdd3e255fa0 R15: 00007fff52028118 [ 442.320391][T29120] [ 442.377593][T29111] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 442.539246][T29111] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 442.552565][T29111] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 442.570891][T29111] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 442.708205][T29148] netlink: 24 bytes leftover after parsing attributes in process `syz.5.9827'. [ 442.717737][T29147] netlink: 24 bytes leftover after parsing attributes in process `syz.7.9828'. [ 442.750797][T29147] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9828'. [ 442.765940][T29150] lo speed is unknown, defaulting to 1000 [ 442.788108][T29153] netlink: 'syz.1.9830': attribute type 1 has an invalid length. [ 442.828587][T29153] bond3: entered promiscuous mode [ 442.835706][T29153] 8021q: adding VLAN 0 to HW filter on device bond3 [ 442.890406][T29150] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9829'. [ 442.911320][T29171] FAULT_INJECTION: forcing a failure. [ 442.911320][T29171] name failslab, interval 1, probability 0, space 0, times 0 [ 442.924214][T29171] CPU: 0 UID: 0 PID: 29171 Comm: syz.7.9835 Not tainted 6.15.0-rc6-syzkaller-00047-ge9565e23cd89 #0 PREEMPT(voluntary) [ 442.924249][T29171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 442.924282][T29171] Call Trace: [ 442.924290][T29171] [ 442.924299][T29171] __dump_stack+0x1d/0x30 [ 442.924323][T29171] dump_stack_lvl+0xe8/0x140 [ 442.924354][T29171] dump_stack+0x15/0x1b [ 442.924376][T29171] should_fail_ex+0x265/0x280 [ 442.924414][T29171] should_failslab+0x8c/0xb0 [ 442.924530][T29171] kmem_cache_alloc_noprof+0x50/0x310 [ 442.924555][T29171] ? skb_clone+0x151/0x1f0 [ 442.924614][T29171] skb_clone+0x151/0x1f0 [ 442.924633][T29171] __netlink_deliver_tap+0x2c9/0x500 [ 442.924765][T29171] netlink_unicast+0x64c/0x670 [ 442.924804][T29171] netlink_sendmsg+0x58b/0x6b0 [ 442.924832][T29171] ? __pfx_netlink_sendmsg+0x10/0x10 [ 442.924855][T29171] __sock_sendmsg+0x142/0x180 [ 442.924951][T29171] ____sys_sendmsg+0x31e/0x4e0 [ 442.924980][T29171] ___sys_sendmsg+0x17b/0x1d0 [ 442.925110][T29171] __x64_sys_sendmsg+0xd4/0x160 [ 442.925142][T29171] x64_sys_call+0x2999/0x2fb0 [ 442.925167][T29171] do_syscall_64+0xd0/0x1a0 [ 442.925195][T29171] ? clear_bhb_loop+0x40/0x90 [ 442.925236][T29171] ? clear_bhb_loop+0x40/0x90 [ 442.925260][T29171] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 442.925338][T29171] RIP: 0033:0x7fbf5957e969 [ 442.925357][T29171] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 442.925380][T29171] RSP: 002b:00007fbf57be7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 442.925402][T29171] RAX: ffffffffffffffda RBX: 00007fbf597a5fa0 RCX: 00007fbf5957e969 [ 442.925474][T29171] RDX: 0000000000008840 RSI: 0000200000000740 RDI: 0000000000000005 [ 442.925486][T29171] RBP: 00007fbf57be7090 R08: 0000000000000000 R09: 0000000000000000 [ 442.925498][T29171] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 442.925510][T29171] R13: 0000000000000000 R14: 00007fbf597a5fa0 R15: 00007fff530f6498 [ 442.925534][T29171] [ 443.155334][T29176] netlink: 20 bytes leftover after parsing attributes in process `syz.7.9841'. [ 443.421530][T29214] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65430 sclass=netlink_route_socket pid=29214 comm=syz.7.9857 [ 443.573390][T29225] netlink: 'syz.7.9857': attribute type 7 has an invalid length. [ 443.616064][ T29] kauditd_printk_skb: 403 callbacks suppressed [ 443.616083][ T29] audit: type=1400 audit(1747158936.891:10655): avc: denied { write } for pid=29213 comm="syz.7.9857" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 443.662580][ T29] audit: type=1400 audit(1747158936.910:10656): avc: denied { getopt } for pid=29228 comm="syz.6.9861" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 443.707757][ T29] audit: type=1326 audit(1747158936.975:10657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29233 comm="syz.6.9863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd9ab4e969 code=0x7ffc0000 [ 443.728826][T29234] loop6: detected capacity change from 0 to 2048 [ 443.731492][ T29] audit: type=1326 audit(1747158936.975:10658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29233 comm="syz.6.9863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd9ab4e969 code=0x7ffc0000 [ 443.761414][ T29] audit: type=1326 audit(1747158936.975:10659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29233 comm="syz.6.9863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbd9ab4e969 code=0x7ffc0000 [ 443.785177][ T29] audit: type=1326 audit(1747158936.975:10660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29233 comm="syz.6.9863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd9ab4e969 code=0x7ffc0000 [ 443.808917][ T29] audit: type=1326 audit(1747158936.975:10661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29233 comm="syz.6.9863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd9ab4e969 code=0x7ffc0000 [ 443.832735][ T29] audit: type=1326 audit(1747158936.975:10662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29233 comm="syz.6.9863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbd9ab4e969 code=0x7ffc0000 [ 443.857450][ T29] audit: type=1326 audit(1747158936.975:10663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29233 comm="syz.6.9863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd9ab4e969 code=0x7ffc0000 [ 443.881164][ T29] audit: type=1326 audit(1747158936.975:10664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29233 comm="syz.6.9863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbd9ab4e969 code=0x7ffc0000 [ 443.890755][T29240] vhci_hcd: invalid port number 12 [ 443.909988][T29240] vhci_hcd: default hub control req: 4008 v0101 i000c l0 [ 443.920595][T29242] FAULT_INJECTION: forcing a failure. [ 443.920595][T29242] name failslab, interval 1, probability 0, space 0, times 0 [ 443.933459][T29242] CPU: 0 UID: 0 PID: 29242 Comm: syz.1.9867 Not tainted 6.15.0-rc6-syzkaller-00047-ge9565e23cd89 #0 PREEMPT(voluntary) [ 443.933496][T29242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 443.933514][T29242] Call Trace: [ 443.933523][T29242] [ 443.933541][T29242] __dump_stack+0x1d/0x30 [ 443.933614][T29242] dump_stack_lvl+0xe8/0x140 [ 443.933639][T29242] dump_stack+0x15/0x1b [ 443.933735][T29242] should_fail_ex+0x265/0x280 [ 443.933775][T29242] should_failslab+0x8c/0xb0 [ 443.933824][T29242] __kvmalloc_node_noprof+0x126/0x4d0 [ 443.933853][T29242] ? bpf_test_run_xdp_live+0x114/0xfd0 [ 443.933900][T29242] bpf_test_run_xdp_live+0x114/0xfd0 [ 443.933953][T29242] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 443.933987][T29242] ? __pfx_autoremove_wake_function+0x10/0x10 [ 443.934094][T29242] ? synchronize_rcu+0x45/0x320 [ 443.934201][T29242] ? bpf_dispatcher_xdp+0x800/0x1000 [ 443.934224][T29242] ? bpf_dispatcher_xdp+0x800/0x1000 [ 443.934240][T29242] ? bpf_dispatcher_change_prog+0x6ec/0x7f0 [ 443.934280][T29242] ? bpf_dispatcher_xdp+0x800/0x1000 [ 443.934339][T29242] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 443.934374][T29242] bpf_prog_test_run_xdp+0x4f5/0x8f0 [ 443.934420][T29242] ? __rcu_read_unlock+0x4f/0x70 [ 443.934456][T29242] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 443.934494][T29242] bpf_prog_test_run+0x20a/0x390 [ 443.934612][T29242] __sys_bpf+0x3dc/0x790 [ 443.934654][T29242] __x64_sys_bpf+0x41/0x50 [ 443.934680][T29242] x64_sys_call+0x2478/0x2fb0 [ 443.934710][T29242] do_syscall_64+0xd0/0x1a0 [ 443.934741][T29242] ? clear_bhb_loop+0x40/0x90 [ 443.934769][T29242] ? clear_bhb_loop+0x40/0x90 [ 443.934843][T29242] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 443.934883][T29242] RIP: 0033:0x7fdd3e02e969 [ 443.934902][T29242] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 443.934922][T29242] RSP: 002b:00007fdd3c697038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 443.935002][T29242] RAX: ffffffffffffffda RBX: 00007fdd3e255fa0 RCX: 00007fdd3e02e969 [ 443.935018][T29242] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 443.935030][T29242] RBP: 00007fdd3c697090 R08: 0000000000000000 R09: 0000000000000000 [ 443.935116][T29242] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 443.935131][T29242] R13: 0000000000000000 R14: 00007fdd3e255fa0 R15: 00007fff52028118 [ 443.935155][T29242] [ 444.190537][T29234] loop6: p1 < > p4 < > [ 444.453381][T29275] loop7: detected capacity change from 0 to 512 [ 444.496230][T29279] loop6: detected capacity change from 0 to 2048 [ 444.503870][T29275] EXT4-fs (loop7): orphan cleanup on readonly fs [ 444.513171][T29275] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.9882: bg 0: block 248: padding at end of block bitmap is not set [ 444.529725][T29275] EXT4-fs error (device loop7): ext4_acquire_dquot:6935: comm syz.7.9882: Failed to acquire dquot type 1 [ 444.543916][T29275] EXT4-fs (loop7): 1 truncate cleaned up [ 444.554149][T29279] loop6: p1 < > p4 < > [ 444.625909][T29292] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 444.796237][T29306] can0: slcan on ttyS3. [ 444.824024][T29273] netlink: 'syz.5.9880': attribute type 7 has an invalid length. [ 444.853775][T29306] can0 (unregistered): slcan off ttyS3. [ 444.868299][T29306] Falling back ldisc for ttyS3. [ 444.879774][T29313] loop7: detected capacity change from 0 to 2048 [ 445.000246][T29311] loop6: detected capacity change from 0 to 1024 [ 445.011282][T29311] EXT4-fs: Ignoring removed bh option [ 445.018352][T29311] EXT4-fs: inline encryption not supported [ 445.026337][T29311] EXT4-fs: Ignoring removed i_version option [ 445.049055][T29311] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 445.069358][T29325] loop0: detected capacity change from 0 to 512 [ 445.123761][T29325] EXT4-fs (loop0): orphan cleanup on readonly fs [ 445.133168][T29325] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.9902: bg 0: block 248: padding at end of block bitmap is not set [ 445.154061][T29325] EXT4-fs error (device loop0): ext4_acquire_dquot:6935: comm syz.0.9902: Failed to acquire dquot type 1 [ 445.171202][T29325] EXT4-fs (loop0): 1 truncate cleaned up [ 445.193848][T29311] EXT4-fs error (device loop6): ext4_map_blocks:709: inode #3: block 1: comm syz.6.9896: lblock 1 mapped to illegal pblock 1 (length 1) [ 445.212193][T29311] EXT4-fs error (device loop6): ext4_acquire_dquot:6935: comm syz.6.9896: Failed to acquire dquot type 0 [ 445.231328][T29311] EXT4-fs error (device loop6): ext4_free_blocks:6587: comm syz.6.9896: Freeing blocks not in datazone - block = 0, count = 4096 [ 445.254404][T29311] EXT4-fs error (device loop6): ext4_read_inode_bitmap:139: comm syz.6.9896: Invalid inode bitmap blk 0 in block_group 0 [ 445.272549][T27581] EXT4-fs error (device loop6): ext4_map_blocks:675: inode #3: block 1: comm kworker/u8:23: lblock 1 mapped to illegal pblock 1 (length 1) [ 445.288454][T29311] EXT4-fs error (device loop6) in ext4_free_inode:361: Corrupt filesystem [ 445.301297][T27581] EXT4-fs error (device loop6): ext4_release_dquot:6971: comm kworker/u8:23: Failed to release dquot type 0 [ 445.316428][T29311] EXT4-fs (loop6): 1 orphan inode deleted [ 445.338625][T29333] FAULT_INJECTION: forcing a failure. [ 445.338625][T29333] name failslab, interval 1, probability 0, space 0, times 0 [ 445.351419][T29333] CPU: 1 UID: 0 PID: 29333 Comm: syz.0.9905 Not tainted 6.15.0-rc6-syzkaller-00047-ge9565e23cd89 #0 PREEMPT(voluntary) [ 445.351457][T29333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 445.351474][T29333] Call Trace: [ 445.351484][T29333] [ 445.351563][T29333] __dump_stack+0x1d/0x30 [ 445.351591][T29333] dump_stack_lvl+0xe8/0x140 [ 445.351617][T29333] dump_stack+0x15/0x1b [ 445.351639][T29333] should_fail_ex+0x265/0x280 [ 445.351682][T29333] ? audit_log_d_path+0x8d/0x150 [ 445.351749][T29333] should_failslab+0x8c/0xb0 [ 445.351817][T29333] __kmalloc_cache_noprof+0x4c/0x320 [ 445.351846][T29333] audit_log_d_path+0x8d/0x150 [ 445.351926][T29333] audit_log_d_path_exe+0x42/0x70 [ 445.351968][T29333] audit_log_task+0x1e9/0x250 [ 445.352002][T29333] audit_seccomp+0x61/0x100 [ 445.352080][T29333] ? __seccomp_filter+0x68c/0x10d0 [ 445.352104][T29333] __seccomp_filter+0x69d/0x10d0 [ 445.352133][T29333] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 445.352172][T29333] ? vfs_write+0x75e/0x8d0 [ 445.352205][T29333] ? __rcu_read_unlock+0x4f/0x70 [ 445.352234][T29333] ? __fget_files+0x184/0x1c0 [ 445.352274][T29333] __secure_computing+0x82/0x150 [ 445.352361][T29333] syscall_trace_enter+0xcf/0x1e0 [ 445.352392][T29333] do_syscall_64+0xaa/0x1a0 [ 445.352455][T29333] ? clear_bhb_loop+0x40/0x90 [ 445.352483][T29333] ? clear_bhb_loop+0x40/0x90 [ 445.352532][T29333] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.352558][T29333] RIP: 0033:0x7f363388e969 [ 445.352578][T29333] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 445.352645][T29333] RSP: 002b:00007f3631ef7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a3 [ 445.352670][T29333] RAX: ffffffffffffffda RBX: 00007f3633ab5fa0 RCX: 00007f363388e969 [ 445.352688][T29333] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 445.352744][T29333] RBP: 00007f3631ef7090 R08: 0000000000000000 R09: 0000000000000000 [ 445.352760][T29333] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 445.352776][T29333] R13: 0000000000000000 R14: 00007f3633ab5fa0 R15: 00007ffdbc06e278 [ 445.352807][T29333] [ 445.612350][T29335] loop0: detected capacity change from 0 to 2048 [ 445.627606][T29335] EXT4-fs: inline encryption not supported [ 445.638121][T29335] EXT4-fs: Ignoring removed i_version option [ 445.759107][T29335] SELinux: policydb magic number 0xa does not match expected magic number 0xf97cff8c [ 445.775822][T29335] SELinux: failed to load policy [ 445.805116][T29350] loop7: detected capacity change from 0 to 1024 [ 445.819001][T29350] EXT4-fs: Ignoring removed bh option [ 445.824597][T29350] EXT4-fs: inline encryption not supported [ 445.850514][T29350] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 445.863048][T29350] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 445.922071][T29350] EXT4-fs error (device loop7): ext4_map_blocks:709: inode #3: block 1: comm syz.7.9911: lblock 1 mapped to illegal pblock 1 (length 1) [ 445.947316][T29350] EXT4-fs error (device loop7): ext4_acquire_dquot:6935: comm syz.7.9911: Failed to acquire dquot type 0 [ 446.001396][T29350] EXT4-fs error (device loop7): ext4_free_blocks:6587: comm syz.7.9911: Freeing blocks not in datazone - block = 0, count = 4096 [ 446.044023][T29350] EXT4-fs error (device loop7): ext4_read_inode_bitmap:139: comm syz.7.9911: Invalid inode bitmap blk 0 in block_group 0 [ 446.061007][T29350] EXT4-fs error (device loop7) in ext4_free_inode:361: Corrupt filesystem [ 446.067872][T27588] EXT4-fs error (device loop7): ext4_map_blocks:675: inode #3: block 1: comm kworker/u8:29: lblock 1 mapped to illegal pblock 1 (length 1) [ 446.069710][T29350] EXT4-fs (loop7): 1 orphan inode deleted [ 446.092980][T27588] EXT4-fs error (device loop7): ext4_release_dquot:6971: comm kworker/u8:29: Failed to release dquot type 0 [ 446.120952][T29362] loop5: detected capacity change from 0 to 1024 [ 446.130987][T29362] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 446.157582][T29350] ext4: Unknown parameter 'ÿÿÿÿ00000000000000000000ñŽ?ƒÂ-§± á' [ 446.174594][T29362] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 446.180184][T29365] FAULT_INJECTION: forcing a failure. [ 446.180184][T29365] name failslab, interval 1, probability 0, space 0, times 0 [ 446.182669][T29362] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c854e01c, mo2=0100] [ 446.195377][T29365] CPU: 1 UID: 0 PID: 29365 Comm: syz.0.9915 Not tainted 6.15.0-rc6-syzkaller-00047-ge9565e23cd89 #0 PREEMPT(voluntary) [ 446.195413][T29365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 446.195522][T29365] Call Trace: [ 446.195532][T29365] [ 446.195543][T29365] __dump_stack+0x1d/0x30 [ 446.195572][T29365] dump_stack_lvl+0xe8/0x140 [ 446.195655][T29365] dump_stack+0x15/0x1b [ 446.195753][T29365] should_fail_ex+0x265/0x280 [ 446.195832][T29365] ? hid_allocate_device+0x2f/0x1c0 [ 446.195874][T29365] should_failslab+0x8c/0xb0 [ 446.195940][T29365] __kmalloc_cache_noprof+0x4c/0x320 [ 446.195970][T29365] hid_allocate_device+0x2f/0x1c0 [ 446.196076][T29365] uhid_dev_create2+0xc0/0x440 [ 446.196113][T29365] uhid_char_write+0x1c0/0x650 [ 446.196147][T29365] ? __pfx_uhid_char_write+0x10/0x10 [ 446.196181][T29365] vfs_write+0x269/0x8d0 [ 446.196310][T29365] ? __rcu_read_unlock+0x4f/0x70 [ 446.196340][T29365] ? __fget_files+0x184/0x1c0 [ 446.196440][T29365] ksys_write+0xda/0x1a0 [ 446.196476][T29365] __x64_sys_write+0x40/0x50 [ 446.196510][T29365] x64_sys_call+0x2cdd/0x2fb0 [ 446.196545][T29365] do_syscall_64+0xd0/0x1a0 [ 446.196577][T29365] ? clear_bhb_loop+0x40/0x90 [ 446.196605][T29365] ? clear_bhb_loop+0x40/0x90 [ 446.196633][T29365] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 446.196674][T29365] RIP: 0033:0x7f363388e969 [ 446.196695][T29365] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 446.196839][T29365] RSP: 002b:00007f3631ef7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 446.196866][T29365] RAX: ffffffffffffffda RBX: 00007f3633ab5fa0 RCX: 00007f363388e969 [ 446.196884][T29365] RDX: 000000000000011d RSI: 00002000000003c0 RDI: 0000000000000003 [ 446.196900][T29365] RBP: 00007f3631ef7090 R08: 0000000000000000 R09: 0000000000000000 [ 446.196916][T29365] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 446.196933][T29365] R13: 0000000000000000 R14: 00007f3633ab5fa0 R15: 00007ffdbc06e278 [ 446.196967][T29365] [ 446.411998][T29362] EXT4-fs (loop5): orphan cleanup on readonly fs [ 446.419330][T29362] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 446.429111][T29362] EXT4-fs error (device loop5): ext4_dirty_inode:6103: inode #3: comm syz.5.9914: mark_inode_dirty error [ 446.441625][T29362] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:483: comm syz.5.9914: Invalid block bitmap block 3 in block_group 0 [ 446.455525][T29362] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:483: comm syz.5.9914: Invalid block bitmap block 3 in block_group 0 [ 446.483398][T29362] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:483: comm syz.5.9914: Invalid block bitmap block 3 in block_group 0 [ 446.509121][T29362] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 446.519395][T29362] EXT4-fs error (device loop5): ext4_dirty_inode:6103: inode #3: comm syz.5.9914: mark_inode_dirty error [ 446.534072][T29362] EXT4-fs error (device loop5): ext4_map_blocks:675: inode #3: block 1: comm syz.5.9914: lblock 6 mapped to illegal pblock 1 (length 1) [ 446.549836][T29362] EXT4-fs error (device loop5): ext4_map_blocks:675: inode #3: block 48: comm syz.5.9914: lblock 0 mapped to illegal pblock 48 (length 1) [ 446.573214][T29362] EXT4-fs error (device loop5): ext4_acquire_dquot:6935: comm syz.5.9914: Failed to acquire dquot type 0 [ 446.595896][T29362] EXT4-fs error (device loop5): ext4_map_blocks:675: inode #3: block 49: comm syz.5.9914: lblock 1 mapped to illegal pblock 49 (length 1) [ 446.620833][T29362] EXT4-fs error (device loop5): ext4_acquire_dquot:6935: comm syz.5.9914: Failed to acquire dquot type 0 [ 446.653577][T29362] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 446.680379][T29362] EXT4-fs error (device loop5): ext4_evict_inode:259: inode #15: comm syz.5.9914: mark_inode_dirty error [ 446.728214][T29362] EXT4-fs warning (device loop5): ext4_evict_inode:262: couldn't mark inode dirty (err -117) [ 446.758785][T29362] EXT4-fs (loop5): 1 orphan inode deleted [ 446.771339][T29382] __nla_validate_parse: 17 callbacks suppressed [ 446.771364][T29382] netlink: 36 bytes leftover after parsing attributes in process `syz.7.9923'. [ 446.829517][T29392] loop0: detected capacity change from 0 to 1024 [ 446.875376][T29392] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 446.910067][T29392] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 446.918142][T29392] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c854e01c, mo2=0100] [ 446.961783][T29392] EXT4-fs (loop0): orphan cleanup on readonly fs [ 447.021752][T29392] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 447.056254][T29392] EXT4-fs error (device loop0): ext4_dirty_inode:6103: inode #3: comm syz.0.9928: mark_inode_dirty error [ 447.097028][T29392] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.9928: Invalid block bitmap block 3 in block_group 0 [ 447.145649][T29392] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.9928: Invalid block bitmap block 3 in block_group 0 [ 447.213591][T29392] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.9928: Invalid block bitmap block 3 in block_group 0 [ 447.239945][T29392] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 447.252365][T29392] EXT4-fs error (device loop0): ext4_dirty_inode:6103: inode #3: comm syz.0.9928: mark_inode_dirty error [ 447.276436][T29392] EXT4-fs error (device loop0): ext4_map_blocks:675: inode #3: block 1: comm syz.0.9928: lblock 6 mapped to illegal pblock 1 (length 1) [ 447.342631][T29392] EXT4-fs error (device loop0): ext4_map_blocks:675: inode #3: block 48: comm syz.0.9928: lblock 0 mapped to illegal pblock 48 (length 1) [ 447.365057][T29392] EXT4-fs error (device loop0): ext4_acquire_dquot:6935: comm syz.0.9928: Failed to acquire dquot type 0 [ 447.404433][T29392] EXT4-fs error (device loop0): ext4_map_blocks:675: inode #3: block 49: comm syz.0.9928: lblock 1 mapped to illegal pblock 49 (length 1) [ 447.442259][T29392] EXT4-fs error (device loop0): ext4_acquire_dquot:6935: comm syz.0.9928: Failed to acquire dquot type 0 [ 447.456231][T29392] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 447.474385][T29392] EXT4-fs error (device loop0): ext4_evict_inode:259: inode #15: comm syz.0.9928: mark_inode_dirty error [ 447.487596][T29392] EXT4-fs warning (device loop0): ext4_evict_inode:262: couldn't mark inode dirty (err -117) [ 447.514035][T29392] EXT4-fs (loop0): 1 orphan inode deleted [ 447.679397][T29443] loop0: detected capacity change from 0 to 512 [ 447.689667][T29443] EXT4-fs (loop0): orphan cleanup on readonly fs [ 447.698946][T29443] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.9950: bg 0: block 248: padding at end of block bitmap is not set [ 447.714817][T29443] EXT4-fs error (device loop0): ext4_acquire_dquot:6935: comm syz.0.9950: Failed to acquire dquot type 1 [ 447.726938][T29443] EXT4-fs (loop0): 1 truncate cleaned up [ 448.031421][T29453] netlink: 36 bytes leftover after parsing attributes in process `syz.5.9953'. [ 448.184719][T29462] loop7: detected capacity change from 0 to 1024 [ 448.227603][T29462] EXT4-fs: Ignoring removed bh option [ 448.247014][T29481] loop0: detected capacity change from 0 to 2048 [ 448.254049][T29462] EXT4-fs: inline encryption not supported [ 448.260836][T29462] EXT4-fs: Ignoring removed i_version option [ 448.275723][T29462] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 448.276868][T29483] loop6: detected capacity change from 0 to 2048 [ 448.331675][T29481] loop0: p1 < > p4 < > [ 448.341199][T29481] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9968'. [ 448.348258][T29483] loop6: p1 < > p4 < > [ 448.412151][T29483] netlink: 16 bytes leftover after parsing attributes in process `syz.6.9969'. [ 448.439661][T29462] EXT4-fs error (device loop7): ext4_map_blocks:709: inode #3: block 1: comm syz.7.9959: lblock 1 mapped to illegal pblock 1 (length 1) [ 448.475772][T29462] EXT4-fs error (device loop7): ext4_acquire_dquot:6935: comm syz.7.9959: Failed to acquire dquot type 0 [ 448.500207][T29462] EXT4-fs error (device loop7): ext4_free_blocks:6587: comm syz.7.9959: Freeing blocks not in datazone - block = 0, count = 4096 [ 448.536521][T29462] EXT4-fs error (device loop7): ext4_read_inode_bitmap:139: comm syz.7.9959: Invalid inode bitmap blk 0 in block_group 0 [ 448.567155][T27587] EXT4-fs error (device loop7): ext4_map_blocks:675: inode #3: block 1: comm kworker/u8:28: lblock 1 mapped to illegal pblock 1 (length 1) [ 448.591432][T29462] EXT4-fs error (device loop7) in ext4_free_inode:361: Corrupt filesystem [ 448.609947][T27587] EXT4-fs error (device loop7): ext4_release_dquot:6971: comm kworker/u8:28: Failed to release dquot type 0 [ 448.624065][T29462] EXT4-fs (loop7): 1 orphan inode deleted [ 448.879231][T29515] loop0: detected capacity change from 0 to 1024 [ 448.886540][T29515] EXT4-fs: Ignoring removed nobh option [ 448.892156][T29515] EXT4-fs: Ignoring removed bh option [ 448.913135][T29517] loop7: detected capacity change from 0 to 2048 [ 448.942551][T29518] loop6: detected capacity change from 0 to 2048 [ 449.000532][T29517] loop7: p1 < > p4 < > [ 449.013744][T29523] loop0: detected capacity change from 0 to 1024 [ 449.026375][T29517] netlink: 16 bytes leftover after parsing attributes in process `syz.7.9982'. [ 449.045757][T29523] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 449.093118][T29523] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 449.101157][T29523] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c854e01c, mo2=0100] [ 449.142006][T29523] EXT4-fs (loop0): orphan cleanup on readonly fs [ 449.152851][T29523] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 449.176047][T29523] EXT4-fs error (device loop0): ext4_dirty_inode:6103: inode #3: comm syz.0.9983: mark_inode_dirty error [ 449.200261][T29523] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.9983: Invalid block bitmap block 3 in block_group 0 [ 449.224703][T29533] loop7: detected capacity change from 0 to 2048 [ 449.234765][T29523] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.9983: Invalid block bitmap block 3 in block_group 0 [ 449.255915][T29523] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.9983: Invalid block bitmap block 3 in block_group 0 [ 449.289344][T29523] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 449.314201][T29523] EXT4-fs error (device loop0): ext4_dirty_inode:6103: inode #3: comm syz.0.9983: mark_inode_dirty error [ 449.342448][T29523] __quota_error: 521 callbacks suppressed [ 449.342468][T29523] Quota error (device loop0): write_blk: dquota write failed [ 449.355927][T29523] EXT4-fs error (device loop0): ext4_map_blocks:675: inode #3: block 1: comm syz.0.9983: lblock 6 mapped to illegal pblock 1 (length 1) [ 449.396751][T29523] Quota error (device loop0): write_blk: dquota write failed [ 449.404318][T29523] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 449.434958][T29523] EXT4-fs error (device loop0): ext4_map_blocks:675: inode #3: block 48: comm syz.0.9983: lblock 0 mapped to illegal pblock 48 (length 1) [ 449.453400][T29523] Quota error (device loop0): v2_write_file_info: Can't write info structure [ 449.462304][T29523] EXT4-fs error (device loop0): ext4_acquire_dquot:6935: comm syz.0.9983: Failed to acquire dquot type 0 [ 449.496507][T29523] EXT4-fs error (device loop0): ext4_map_blocks:675: inode #3: block 49: comm syz.0.9983: lblock 1 mapped to illegal pblock 49 (length 1) [ 449.511084][ T29] audit: type=1326 audit(1747158942.401:11157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29550 comm="syz.5.9992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44ab4de969 code=0x7ffc0000 [ 449.589982][T29523] Quota error (device loop0): do_insert_tree: Can't read tree quota block 1 [ 449.598803][T29523] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 449.608796][T29523] EXT4-fs error (device loop0): ext4_acquire_dquot:6935: comm syz.0.9983: Failed to acquire dquot type 0 [ 449.627057][ T29] audit: type=1326 audit(1747158942.438:11158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29550 comm="syz.5.9992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f44ab4de969 code=0x7ffc0000 [ 449.650843][ T29] audit: type=1326 audit(1747158942.438:11159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29550 comm="syz.5.9992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44ab4de969 code=0x7ffc0000 [ 449.674579][ T29] audit: type=1326 audit(1747158942.438:11160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29550 comm="syz.5.9992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44ab4de969 code=0x7ffc0000 [ 449.723032][T29523] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 449.737460][T29523] EXT4-fs error (device loop0): ext4_evict_inode:259: inode #15: comm syz.0.9983: mark_inode_dirty error [ 449.770164][T29523] EXT4-fs warning (device loop0): ext4_evict_inode:262: couldn't mark inode dirty (err -117) [ 449.787092][T29523] EXT4-fs (loop0): 1 orphan inode deleted [ 449.824913][T29559] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9995'. [ 450.008607][T29568] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9999'. [ 450.165848][T29571] netlink: 36 bytes leftover after parsing attributes in process `syz.1.10000'. [ 450.238068][T29558] loop5: detected capacity change from 0 to 1024 [ 450.302404][T29558] EXT4-fs: Ignoring removed bh option [ 450.322671][T29558] EXT4-fs: inline encryption not supported [ 450.330863][T29558] EXT4-fs: Ignoring removed i_version option [ 450.374869][T29558] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 450.456526][T29558] EXT4-fs error (device loop5): ext4_map_blocks:709: inode #3: block 1: comm syz.5.9996: lblock 1 mapped to illegal pblock 1 (length 1) [ 450.482421][T29558] EXT4-fs error (device loop5): ext4_acquire_dquot:6935: comm syz.5.9996: Failed to acquire dquot type 0 [ 450.518935][T29595] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10011'. [ 450.555772][T29558] EXT4-fs error (device loop5): ext4_free_blocks:6587: comm syz.5.9996: Freeing blocks not in datazone - block = 0, count = 4096 [ 450.610131][T29558] EXT4-fs error (device loop5): ext4_read_inode_bitmap:139: comm syz.5.9996: Invalid inode bitmap blk 0 in block_group 0 [ 450.643460][T27588] EXT4-fs error (device loop5): ext4_map_blocks:675: inode #3: block 1: comm kworker/u8:29: lblock 1 mapped to illegal pblock 1 (length 1) [ 450.668822][T29558] EXT4-fs error (device loop5) in ext4_free_inode:361: Corrupt filesystem [ 450.686417][T27588] EXT4-fs error (device loop5): ext4_release_dquot:6971: comm kworker/u8:29: Failed to release dquot type 0 [ 450.706287][T29558] EXT4-fs (loop5): 1 orphan inode deleted [ 450.747290][T29610] loop7: detected capacity change from 0 to 2048 [ 450.818331][T29610] loop7: p1 < > p4 < > [ 450.829187][T29610] netlink: 16 bytes leftover after parsing attributes in process `syz.7.10018'. [ 451.027403][T29643] loop5: detected capacity change from 0 to 512 [ 451.045458][T29643] EXT4-fs error (device loop5): ext4_iget_extra_inode:4693: inode #15: comm syz.5.10034: corrupted in-inode xattr: invalid ea_ino [ 451.062987][T29643] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.10034: couldn't read orphan inode 15 (err -117) [ 451.120457][T29649] loop5: detected capacity change from 0 to 2048 [ 451.176131][T29649] loop5: p1 < > p4 < > [ 451.381691][T29669] FAULT_INJECTION: forcing a failure. [ 451.381691][T29669] name failslab, interval 1, probability 0, space 0, times 0 [ 451.394483][T29669] CPU: 1 UID: 0 PID: 29669 Comm: syz.5.10042 Not tainted 6.15.0-rc6-syzkaller-00047-ge9565e23cd89 #0 PREEMPT(voluntary) [ 451.394523][T29669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 451.394548][T29669] Call Trace: [ 451.394558][T29669] [ 451.394569][T29669] __dump_stack+0x1d/0x30 [ 451.394597][T29669] dump_stack_lvl+0xe8/0x140 [ 451.394638][T29669] dump_stack+0x15/0x1b [ 451.394654][T29669] should_fail_ex+0x265/0x280 [ 451.394689][T29669] ? audit_log_d_path+0x8d/0x150 [ 451.394769][T29669] should_failslab+0x8c/0xb0 [ 451.394807][T29669] __kmalloc_cache_noprof+0x4c/0x320 [ 451.394835][T29669] audit_log_d_path+0x8d/0x150 [ 451.394962][T29669] audit_log_d_path_exe+0x42/0x70 [ 451.395010][T29669] audit_log_task+0x1e9/0x250 [ 451.395039][T29669] audit_seccomp+0x61/0x100 [ 451.395071][T29669] ? __seccomp_filter+0x68c/0x10d0 [ 451.395098][T29669] __seccomp_filter+0x69d/0x10d0 [ 451.395120][T29669] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 451.395183][T29669] ? vfs_write+0x75e/0x8d0 [ 451.395207][T29669] ? __rcu_read_unlock+0x4f/0x70 [ 451.395229][T29669] ? __fget_files+0x184/0x1c0 [ 451.395319][T29669] __secure_computing+0x82/0x150 [ 451.395402][T29669] syscall_trace_enter+0xcf/0x1e0 [ 451.395476][T29669] do_syscall_64+0xaa/0x1a0 [ 451.395507][T29669] ? clear_bhb_loop+0x40/0x90 [ 451.395579][T29669] ? clear_bhb_loop+0x40/0x90 [ 451.395604][T29669] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 451.395632][T29669] RIP: 0033:0x7f44ab4de969 [ 451.395650][T29669] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 451.395678][T29669] RSP: 002b:00007f44a9b26038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ac [ 451.395698][T29669] RAX: ffffffffffffffda RBX: 00007f44ab706080 RCX: 00007f44ab4de969 [ 451.395714][T29669] RDX: 0000000000000801 RSI: 0000200000000000 RDI: ffffffffffffffff [ 451.395802][T29669] RBP: 00007f44a9b26090 R08: 0000000000000000 R09: 0000000000000000 [ 451.395837][T29669] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 451.395854][T29669] R13: 0000000000000000 R14: 00007f44ab706080 R15: 00007ffc3caf7fa8 [ 451.395879][T29669] [ 452.776457][T29752] loop5: detected capacity change from 0 to 1024 [ 452.779723][T29760] loop7: detected capacity change from 0 to 1024 [ 452.808797][T29760] EXT4-fs: Ignoring removed bh option [ 452.817206][T29760] EXT4-fs: inline encryption not supported [ 452.817235][T29752] EXT4-fs: Ignoring removed bh option [ 452.818019][T29760] EXT4-fs: Ignoring removed i_version option [ 452.828957][T29752] EXT4-fs: inline encryption not supported [ 452.829524][T29752] EXT4-fs: Ignoring removed i_version option [ 452.863174][T29752] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 452.881370][T29760] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 452.941803][T29752] EXT4-fs error (device loop5): ext4_map_blocks:709: inode #3: block 1: comm syz.5.10083: lblock 1 mapped to illegal pblock 1 (length 1) [ 453.055581][T29752] EXT4-fs error (device loop5): ext4_acquire_dquot:6935: comm syz.5.10083: Failed to acquire dquot type 0 [ 453.091596][T29760] EXT4-fs error (device loop7): ext4_map_blocks:709: inode #3: block 1: comm syz.7.10085: lblock 1 mapped to illegal pblock 1 (length 1) [ 453.151145][T29752] EXT4-fs error (device loop5): ext4_free_blocks:6587: comm syz.5.10083: Freeing blocks not in datazone - block = 0, count = 4096 [ 453.168484][T29760] EXT4-fs error (device loop7): ext4_acquire_dquot:6935: comm syz.7.10085: Failed to acquire dquot type 0 [ 453.192919][T29752] EXT4-fs error (device loop5): ext4_read_inode_bitmap:139: comm syz.5.10083: Invalid inode bitmap blk 0 in block_group 0 [ 453.233095][T27590] EXT4-fs error (device loop5): ext4_map_blocks:675: inode #3: block 1: comm kworker/u8:31: lblock 1 mapped to illegal pblock 1 (length 1) [ 453.248603][T29752] EXT4-fs error (device loop5) in ext4_free_inode:361: Corrupt filesystem [ 453.255394][T29760] EXT4-fs error (device loop7): ext4_free_blocks:6587: comm syz.7.10085: Freeing blocks not in datazone - block = 0, count = 4096 [ 453.264158][T29779] 9pnet_fd: Insufficient options for proto=fd [ 453.282431][T27590] EXT4-fs error (device loop5): ext4_release_dquot:6971: comm kworker/u8:31: Failed to release dquot type 0 [ 453.294325][T29752] EXT4-fs (loop5): 1 orphan inode deleted [ 453.317095][T29752] EXT4-fs mount: 38 callbacks suppressed [ 453.317237][T29752] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 453.338831][T29760] EXT4-fs error (device loop7): ext4_read_inode_bitmap:139: comm syz.7.10085: Invalid inode bitmap blk 0 in block_group 0 [ 453.343399][T29760] EXT4-fs error (device loop7) in ext4_free_inode:361: Corrupt filesystem [ 453.379455][T27590] EXT4-fs error (device loop7): ext4_map_blocks:675: inode #3: block 1: comm kworker/u8:31: lblock 1 mapped to illegal pblock 1 (length 1) [ 453.406284][T27590] EXT4-fs error (device loop7): ext4_release_dquot:6971: comm kworker/u8:31: Failed to release dquot type 0 [ 453.421723][T29760] EXT4-fs (loop7): 1 orphan inode deleted [ 453.456463][T29760] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 453.537187][T24767] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 453.639417][T26800] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 453.747357][T29808] 9pnet_fd: Insufficient options for proto=fd [ 453.874009][T29817] loop7: detected capacity change from 0 to 1024 [ 453.885900][T29817] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 453.926740][T29817] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 453.934924][T29817] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c854e01c, mo2=0100] [ 453.981917][T29817] EXT4-fs (loop7): orphan cleanup on readonly fs [ 453.988936][T29817] EXT4-fs error (device loop7) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 454.001774][T29817] EXT4-fs error (device loop7): ext4_dirty_inode:6103: inode #3: comm syz.7.10110: mark_inode_dirty error [ 454.013514][T29817] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:483: comm syz.7.10110: Invalid block bitmap block 3 in block_group 0 [ 454.020648][T29825] loop6: detected capacity change from 0 to 1024 [ 454.033789][T29817] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:483: comm syz.7.10110: Invalid block bitmap block 3 in block_group 0 [ 454.037425][T29825] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 454.058160][T29817] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:483: comm syz.7.10110: Invalid block bitmap block 3 in block_group 0 [ 454.072093][T29817] EXT4-fs error (device loop7) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 454.076248][T29825] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 454.089749][T29825] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c854e01c, mo2=0100] [ 454.098136][T29817] EXT4-fs error (device loop7): ext4_dirty_inode:6103: inode #3: comm syz.7.10110: mark_inode_dirty error [ 454.110568][T29825] EXT4-fs (loop6): orphan cleanup on readonly fs [ 454.117268][T29817] EXT4-fs error (device loop7): ext4_map_blocks:675: inode #3: block 1: comm syz.7.10110: lblock 6 mapped to illegal pblock 1 (length 1) [ 454.122231][T29825] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 454.141428][T29817] EXT4-fs error (device loop7): ext4_map_blocks:675: inode #3: block 48: comm syz.7.10110: lblock 0 mapped to illegal pblock 48 (length 1) [ 454.144162][T29825] EXT4-fs error (device loop6): ext4_dirty_inode:6103: inode #3: comm syz.6.10113: mark_inode_dirty error [ 454.167399][T29817] EXT4-fs error (device loop7): ext4_acquire_dquot:6935: comm syz.7.10110: Failed to acquire dquot type 0 [ 454.169868][T29825] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:483: comm syz.6.10113: Invalid block bitmap block 3 in block_group 0 [ 454.192770][T29817] EXT4-fs error (device loop7): ext4_map_blocks:675: inode #3: block 49: comm syz.7.10110: lblock 1 mapped to illegal pblock 49 (length 1) [ 454.195327][T29825] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:483: comm syz.6.10113: Invalid block bitmap block 3 in block_group 0 [ 454.223718][T29817] EXT4-fs error (device loop7): ext4_acquire_dquot:6935: comm syz.7.10110: Failed to acquire dquot type 0 [ 454.237395][T29817] EXT4-fs error (device loop7) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 454.249965][T29817] EXT4-fs error (device loop7): ext4_evict_inode:259: inode #15: comm syz.7.10110: mark_inode_dirty error [ 454.261582][T29825] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:483: comm syz.6.10113: Invalid block bitmap block 3 in block_group 0 [ 454.275298][T29817] EXT4-fs warning (device loop7): ext4_evict_inode:262: couldn't mark inode dirty (err -117) [ 454.285863][T29817] EXT4-fs (loop7): 1 orphan inode deleted [ 454.291787][T29825] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 454.301624][T29825] EXT4-fs error (device loop6): ext4_dirty_inode:6103: inode #3: comm syz.6.10113: mark_inode_dirty error [ 454.313698][T29817] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 454.314050][T29825] EXT4-fs error (device loop6): ext4_map_blocks:675: inode #3: block 1: comm syz.6.10113: lblock 6 mapped to illegal pblock 1 (length 1) [ 454.340604][T29825] EXT4-fs error (device loop6): ext4_map_blocks:675: inode #3: block 48: comm syz.6.10113: lblock 0 mapped to illegal pblock 48 (length 1) [ 454.356726][T29825] EXT4-fs error (device loop6): ext4_acquire_dquot:6935: comm syz.6.10113: Failed to acquire dquot type 0 [ 454.370676][T29825] EXT4-fs error (device loop6): ext4_map_blocks:675: inode #3: block 49: comm syz.6.10113: lblock 1 mapped to illegal pblock 49 (length 1) [ 454.385492][T26800] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 454.385933][T29825] EXT4-fs error (device loop6): ext4_acquire_dquot:6935: comm syz.6.10113: Failed to acquire dquot type 0 [ 454.406101][T29825] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 454.415695][T29825] EXT4-fs error (device loop6): ext4_evict_inode:259: inode #15: comm syz.6.10113: mark_inode_dirty error [ 454.427468][T29825] EXT4-fs warning (device loop6): ext4_evict_inode:262: couldn't mark inode dirty (err -117) [ 454.483557][T29825] EXT4-fs (loop6): 1 orphan inode deleted [ 454.489856][T29825] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 454.490300][T29834] __nla_validate_parse: 7 callbacks suppressed [ 454.490317][T29834] netlink: 100 bytes leftover after parsing attributes in process `syz.7.10118'. [ 454.546205][T29834] loop7: detected capacity change from 0 to 1024 [ 454.589981][T29834] EXT4-fs: Ignoring removed bh option [ 454.595629][T29834] EXT4-fs: inline encryption not supported [ 454.622775][T29834] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 454.633676][T26528] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 454.644615][T29844] netlink: 'syz.1.10122': attribute type 39 has an invalid length. [ 454.665613][T29834] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c80ce018, mo2=0000] [ 454.676970][T29850] netlink: 36 bytes leftover after parsing attributes in process `syz.6.10123'. [ 454.716025][ T29] kauditd_printk_skb: 290 callbacks suppressed [ 454.716042][ T29] audit: type=1400 audit(1747158947.275:11430): avc: denied { cpu } for pid=29843 comm="syz.1.10122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 454.742150][ T29] audit: type=1400 audit(1747158947.275:11431): avc: denied { getopt } for pid=29843 comm="syz.1.10122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 454.770029][T29834] EXT4-fs error (device loop7): ext4_map_blocks:675: inode #3: block 2: comm syz.7.10118: lblock 2 mapped to illegal pblock 2 (length 1) [ 454.801451][T29857] loop5: detected capacity change from 0 to 2048 [ 454.820754][T29838] loop0: detected capacity change from 0 to 1024 [ 454.834941][T29834] Quota error (device loop7): qtree_write_dquot: dquota write failed [ 454.847421][T29838] EXT4-fs: Ignoring removed bh option [ 454.853629][T29838] EXT4-fs: inline encryption not supported [ 454.861039][T29838] EXT4-fs: Ignoring removed i_version option [ 454.881181][T29834] EXT4-fs error (device loop7): ext4_map_blocks:675: inode #3: block 48: comm syz.7.10118: lblock 0 mapped to illegal pblock 48 (length 1) [ 454.894354][T29857] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 454.917545][T29838] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 454.932249][ T29] audit: type=1400 audit(1747158947.462:11432): avc: denied { ioctl } for pid=29862 comm="syz.6.10129" path="socket:[138598]" dev="sockfs" ino=138598 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 454.980246][T29834] Quota error (device loop7): v2_write_file_info: Can't write info structure [ 454.989175][T29834] EXT4-fs error (device loop7): ext4_acquire_dquot:6935: comm syz.7.10118: Failed to acquire dquot type 0 [ 455.002434][T29834] EXT4-fs error (device loop7) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 455.007965][T29866] 9pnet_fd: Insufficient options for proto=fd [ 455.014758][T29834] EXT4-fs error (device loop7): ext4_evict_inode:259: inode #11: comm syz.7.10118: mark_inode_dirty error [ 455.030986][T29834] EXT4-fs warning (device loop7): ext4_evict_inode:262: couldn't mark inode dirty (err -117) [ 455.042005][T29834] EXT4-fs (loop7): 1 orphan inode deleted [ 455.048205][T29834] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 455.060816][T27581] EXT4-fs error (device loop7): ext4_map_blocks:675: inode #3: block 1: comm kworker/u8:23: lblock 1 mapped to illegal pblock 1 (length 1) [ 455.081643][T29863] loop6: detected capacity change from 0 to 512 [ 455.089323][T27581] Quota error (device loop7): remove_tree: Can't read quota data block 1 [ 455.097845][T27581] EXT4-fs error (device loop7): ext4_release_dquot:6971: comm kworker/u8:23: Failed to release dquot type 0 [ 455.121379][T29863] Quota error (device loop6): v2_read_file_info: Free block number 1 out of range (1, 6). [ 455.131796][T29863] EXT4-fs warning (device loop6): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 455.140219][T29838] EXT4-fs error (device loop0): ext4_map_blocks:709: inode #3: block 1: comm syz.0.10119: lblock 1 mapped to illegal pblock 1 (length 1) [ 455.148224][T29863] EXT4-fs (loop6): mount failed [ 455.167971][T29870] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10131'. [ 455.169477][T29838] Quota error (device loop0): write_blk: dquota write failed [ 455.188943][T29838] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 455.214523][ T29] audit: type=1400 audit(1747158947.724:11433): avc: denied { read append } for pid=29833 comm="syz.7.10118" name="usbmon6" dev="devtmpfs" ino=160 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 455.244210][T29838] EXT4-fs error (device loop0): ext4_acquire_dquot:6935: comm syz.0.10119: Failed to acquire dquot type 0 [ 455.263944][T29870] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10131'. [ 455.280142][T29838] EXT4-fs error (device loop0): ext4_free_blocks:6587: comm syz.0.10119: Freeing blocks not in datazone - block = 0, count = 4096 [ 455.309646][T29838] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm syz.0.10119: Invalid inode bitmap blk 0 in block_group 0 [ 455.326075][T29838] EXT4-fs error (device loop0) in ext4_free_inode:361: Corrupt filesystem [ 455.335582][T27587] EXT4-fs error (device loop0): ext4_map_blocks:675: inode #3: block 1: comm kworker/u8:28: lblock 1 mapped to illegal pblock 1 (length 1) [ 455.335697][T27587] EXT4-fs error (device loop0): ext4_release_dquot:6971: comm kworker/u8:28: Failed to release dquot type 0 [ 455.364726][T26800] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 455.365526][T29838] EXT4-fs (loop0): 1 orphan inode deleted [ 455.385339][T26800] EXT4-fs error (device loop7): __ext4_get_inode_loc:4450: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 455.412736][T29838] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 455.426698][T26800] EXT4-fs error (device loop7) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 455.448066][T26800] EXT4-fs error (device loop7): ext4_quota_off:7219: inode #3: comm syz-executor: mark_inode_dirty error [ 455.493289][T29882] loop7: detected capacity change from 0 to 1024 [ 455.500996][T29882] EXT4-fs: Ignoring removed bh option [ 455.506706][T29882] EXT4-fs: inline encryption not supported [ 455.512709][T29882] EXT4-fs: Ignoring removed i_version option [ 455.519934][T29882] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 455.562600][T29882] EXT4-fs error (device loop7): ext4_map_blocks:709: inode #3: block 1: comm syz.7.10132: lblock 1 mapped to illegal pblock 1 (length 1) [ 455.578617][T29882] EXT4-fs error (device loop7): ext4_acquire_dquot:6935: comm syz.7.10132: Failed to acquire dquot type 0 [ 455.579530][T26713] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 455.592196][T29882] EXT4-fs error (device loop7): ext4_free_blocks:6587: comm syz.7.10132: Freeing blocks not in datazone - block = 0, count = 4096 [ 455.621033][T29882] EXT4-fs error (device loop7): ext4_read_inode_bitmap:139: comm syz.7.10132: Invalid inode bitmap blk 0 in block_group 0 [ 455.634167][T29882] EXT4-fs error (device loop7) in ext4_free_inode:361: Corrupt filesystem [ 455.642832][T27587] EXT4-fs error (device loop7): ext4_map_blocks:675: inode #3: block 1: comm kworker/u8:28: lblock 1 mapped to illegal pblock 1 (length 1) [ 455.658528][T29882] EXT4-fs (loop7): 1 orphan inode deleted [ 455.659045][T27587] EXT4-fs error (device loop7): ext4_release_dquot:6971: comm kworker/u8:28: Failed to release dquot type 0 [ 455.703373][T29882] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 455.770611][T24767] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 455.812767][T26800] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 455.832805][T29896] netlink: 24 bytes leftover after parsing attributes in process `syz.6.10141'. [ 455.874061][T29899] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10143'. [ 455.895234][T29897] loop5: detected capacity change from 0 to 2048 [ 455.905438][T29899] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10143'. [ 455.929603][T29897] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 455.948231][T29907] netlink: 36 bytes leftover after parsing attributes in process `syz.7.10146'. [ 455.995108][T29915] loop0: detected capacity change from 0 to 1024 [ 456.028446][T29915] EXT4-fs: Ignoring removed bh option [ 456.034094][T29915] EXT4-fs: inline encryption not supported [ 456.056807][T29915] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 456.081444][T29915] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 456.113010][T29915] EXT4-fs error (device loop0): ext4_map_blocks:709: inode #3: block 1: comm syz.0.10148: lblock 1 mapped to illegal pblock 1 (length 1) [ 456.139510][T29915] EXT4-fs error (device loop0): ext4_acquire_dquot:6935: comm syz.0.10148: Failed to acquire dquot type 0 [ 456.152350][T29915] EXT4-fs error (device loop0): ext4_free_blocks:6587: comm syz.0.10148: Freeing blocks not in datazone - block = 0, count = 4096 [ 456.170699][T29915] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm syz.0.10148: Invalid inode bitmap blk 0 in block_group 0 [ 456.190173][T29915] EXT4-fs error (device loop0) in ext4_free_inode:361: Corrupt filesystem [ 456.199042][T27589] EXT4-fs error (device loop0): ext4_map_blocks:675: inode #3: block 1: comm kworker/u8:30: lblock 1 mapped to illegal pblock 1 (length 1) [ 456.200560][T29933] netlink: 24 bytes leftover after parsing attributes in process `syz.7.10156'. [ 456.225838][T27589] EXT4-fs error (device loop0): ext4_release_dquot:6971: comm kworker/u8:30: Failed to release dquot type 0 [ 456.243829][T29915] EXT4-fs (loop0): 1 orphan inode deleted [ 456.253100][T29915] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 456.296569][T29915] ext4: Unknown parameter 'ÿÿÿÿ00000000000000000000ñŽ?ƒÂ-§± á' [ 456.391810][T29951] 9pnet_fd: Insufficient options for proto=fd [ 456.451387][T26713] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 456.583931][T29969] loop6: detected capacity change from 0 to 1024 [ 456.591207][T29969] EXT4-fs: Ignoring removed bh option [ 456.596676][T29969] EXT4-fs: inline encryption not supported [ 456.602611][T29969] EXT4-fs: Ignoring removed i_version option [ 456.648695][T29969] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 456.682184][T29969] EXT4-fs error (device loop6): ext4_map_blocks:709: inode #3: block 1: comm syz.6.10171: lblock 1 mapped to illegal pblock 1 (length 1) [ 456.697027][T29969] EXT4-fs error (device loop6): ext4_acquire_dquot:6935: comm syz.6.10171: Failed to acquire dquot type 0 [ 456.712566][T29975] 9pnet_fd: Insufficient options for proto=fd [ 456.735506][T29969] EXT4-fs error (device loop6): ext4_free_blocks:6587: comm syz.6.10171: Freeing blocks not in datazone - block = 0, count = 4096 [ 456.758623][T29969] EXT4-fs error (device loop6): ext4_read_inode_bitmap:139: comm syz.6.10171: Invalid inode bitmap blk 0 in block_group 0 [ 456.771779][T27593] EXT4-fs error (device loop6): ext4_map_blocks:675: inode #3: block 1: comm kworker/u8:34: lblock 1 mapped to illegal pblock 1 (length 1) [ 456.788663][T27588] bond0 (unregistering): Released all slaves [ 456.799567][T29969] EXT4-fs error (device loop6) in ext4_free_inode:361: Corrupt filesystem [ 456.808211][T27593] EXT4-fs error (device loop6): ext4_release_dquot:6971: comm kworker/u8:34: Failed to release dquot type 0 [ 456.820024][T29969] EXT4-fs (loop6): 1 orphan inode deleted [ 456.826964][T29977] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65430 sclass=netlink_route_socket pid=29977 comm=syz.0.10176 [ 456.848506][T29969] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 456.864767][T24767] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 456.885364][T27588] tipc: Disabling bearer [ 456.890737][T27588] tipc: Left network mode [ 456.906354][T29982] netlink: 'syz.0.10176': attribute type 7 has an invalid length. [ 456.914588][T29982] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10176'. [ 456.963980][T26528] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 457.006171][T27588] hsr_slave_0: left promiscuous mode [ 457.013304][T27588] hsr_slave_1: left promiscuous mode [ 457.035376][T27588] veth1_macvtap: left promiscuous mode [ 457.049813][T27588] veth0_macvtap: left promiscuous mode [ 457.058693][T27588] veth1_vlan: left promiscuous mode [ 457.064062][T27588] veth0_vlan: left promiscuous mode [ 457.426537][T30030] loop0: detected capacity change from 0 to 2048 [ 457.479108][T30030] loop0: p1 < > p4 < > [ 457.625716][T30055] 9pnet_fd: Insufficient options for proto=fd [ 457.747139][T30068] loop0: detected capacity change from 0 to 2048 [ 457.819251][T30068] loop0: p1 < > p4 < > [ 458.012067][T30093] netlink: 'syz.0.10225': attribute type 39 has an invalid length. [ 458.306849][T30085] loop6: detected capacity change from 0 to 1024 [ 458.374669][T30085] EXT4-fs: Ignoring removed bh option [ 458.380794][T30085] EXT4-fs: inline encryption not supported [ 458.388041][T30085] EXT4-fs: Ignoring removed i_version option [ 458.408028][T30085] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 458.458390][T30085] EXT4-fs error (device loop6): ext4_map_blocks:709: inode #3: block 1: comm syz.6.10220: lblock 1 mapped to illegal pblock 1 (length 1) [ 458.514187][T30085] EXT4-fs error (device loop6): ext4_acquire_dquot:6935: comm syz.6.10220: Failed to acquire dquot type 0 [ 458.567238][T30085] EXT4-fs error (device loop6): ext4_free_blocks:6587: comm syz.6.10220: Freeing blocks not in datazone - block = 0, count = 4096 [ 458.637664][T30085] EXT4-fs error (device loop6): ext4_read_inode_bitmap:139: comm syz.6.10220: Invalid inode bitmap blk 0 in block_group 0 [ 458.656724][T27587] EXT4-fs error (device loop6): ext4_map_blocks:675: inode #3: block 1: comm kworker/u8:28: lblock 1 mapped to illegal pblock 1 (length 1) [ 458.680410][T30085] EXT4-fs error (device loop6) in ext4_free_inode:361: Corrupt filesystem [ 458.702640][T30085] EXT4-fs (loop6): 1 orphan inode deleted [ 458.710715][T30109] loop0: detected capacity change from 0 to 1024 [ 458.717284][T27587] EXT4-fs error (device loop6): ext4_release_dquot:6971: comm kworker/u8:28: Failed to release dquot type 0 [ 458.749858][T30109] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 458.752063][T30085] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 458.785592][T30109] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 458.793703][T30109] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c854e01c, mo2=0100] [ 458.807134][T30109] EXT4-fs (loop0): orphan cleanup on readonly fs [ 458.823787][T30109] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 458.855026][T30109] EXT4-fs error (device loop0): ext4_dirty_inode:6103: inode #3: comm syz.0.10231: mark_inode_dirty error [ 458.905703][T30109] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.10231: Invalid block bitmap block 3 in block_group 0 [ 458.955475][T30109] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.10231: Invalid block bitmap block 3 in block_group 0 [ 458.970166][T30109] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.10231: Invalid block bitmap block 3 in block_group 0 [ 458.990721][T30109] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 459.012485][T30109] EXT4-fs error (device loop0): ext4_dirty_inode:6103: inode #3: comm syz.0.10231: mark_inode_dirty error [ 459.029330][T26528] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 459.043252][T30109] EXT4-fs error (device loop0): ext4_map_blocks:675: inode #3: block 1: comm syz.0.10231: lblock 6 mapped to illegal pblock 1 (length 1) [ 459.071948][T30109] EXT4-fs error (device loop0): ext4_map_blocks:675: inode #3: block 48: comm syz.0.10231: lblock 0 mapped to illegal pblock 48 (length 1) [ 459.089038][T30109] EXT4-fs error (device loop0): ext4_acquire_dquot:6935: comm syz.0.10231: Failed to acquire dquot type 0 [ 459.103371][T30109] EXT4-fs error (device loop0): ext4_map_blocks:675: inode #3: block 49: comm syz.0.10231: lblock 1 mapped to illegal pblock 49 (length 1) [ 459.175926][T30109] EXT4-fs error (device loop0): ext4_acquire_dquot:6935: comm syz.0.10231: Failed to acquire dquot type 0 [ 459.197201][T30109] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 459.207147][T30109] EXT4-fs error (device loop0): ext4_evict_inode:259: inode #15: comm syz.0.10231: mark_inode_dirty error [ 459.226526][T30109] EXT4-fs warning (device loop0): ext4_evict_inode:262: couldn't mark inode dirty (err -117) [ 459.237413][T30109] EXT4-fs (loop0): 1 orphan inode deleted [ 459.246260][T30109] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 459.287429][T30130] loop7: detected capacity change from 0 to 512 [ 459.321578][T26713] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 459.350160][T30130] EXT4-fs warning (device loop7): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 459.376934][T30130] EXT4-fs (loop7): mount failed [ 459.674208][T30152] loop5: detected capacity change from 0 to 1024 [ 459.699667][T30152] EXT4-fs: Ignoring removed bh option [ 459.709576][T30152] EXT4-fs: inline encryption not supported [ 459.717927][T30152] EXT4-fs: Ignoring removed i_version option [ 459.727564][T30152] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 459.783293][T30152] EXT4-fs error (device loop5): ext4_map_blocks:709: inode #3: block 1: comm syz.5.10250: lblock 1 mapped to illegal pblock 1 (length 1) [ 459.812136][T30152] EXT4-fs error (device loop5): ext4_acquire_dquot:6935: comm syz.5.10250: Failed to acquire dquot type 0 [ 459.830026][T30198] loop0: detected capacity change from 0 to 2048 [ 459.838247][T30152] EXT4-fs error (device loop5): ext4_free_blocks:6587: comm syz.5.10250: Freeing blocks not in datazone - block = 0, count = 4096 [ 459.855911][T30152] EXT4-fs error (device loop5): ext4_read_inode_bitmap:139: comm syz.5.10250: Invalid inode bitmap blk 0 in block_group 0 [ 459.875654][T27593] EXT4-fs error (device loop5): ext4_map_blocks:675: inode #3: block 1: comm kworker/u8:34: lblock 1 mapped to illegal pblock 1 (length 1) [ 459.876105][T30152] EXT4-fs error (device loop5) in ext4_free_inode:361: Corrupt filesystem [ 459.892015][T30198] loop0: p1 < > p4 < > [ 459.906146][T30152] EXT4-fs (loop5): 1 orphan inode deleted [ 459.912594][T27593] EXT4-fs error (device loop5): ext4_release_dquot:6971: comm kworker/u8:34: Failed to release dquot type 0 [ 459.928898][T30152] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 459.982004][T30198] __nla_validate_parse: 8 callbacks suppressed [ 459.982020][T30198] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10270'. [ 460.045048][T24767] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 460.072625][ T29] kauditd_printk_skb: 337 callbacks suppressed [ 460.072644][ T29] audit: type=1326 audit(1747158952.290:11748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30222 comm="syz.0.10283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f363388e969 code=0x7ffc0000 [ 460.089329][T30224] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10284'. [ 460.103116][ T29] audit: type=1326 audit(1747158952.290:11749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30222 comm="syz.0.10283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f363388e969 code=0x7ffc0000 [ 460.135500][ T29] audit: type=1326 audit(1747158952.290:11750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30222 comm="syz.0.10283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f363388e969 code=0x7ffc0000 [ 460.159320][ T29] audit: type=1326 audit(1747158952.290:11751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30222 comm="syz.0.10283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f363388e969 code=0x7ffc0000 [ 460.183206][ T29] audit: type=1326 audit(1747158952.290:11752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30222 comm="syz.0.10283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f363388e969 code=0x7ffc0000 [ 460.207024][ T29] audit: type=1326 audit(1747158952.299:11753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30222 comm="syz.0.10283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f363388e969 code=0x7ffc0000 [ 460.230862][ T29] audit: type=1326 audit(1747158952.299:11754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30222 comm="syz.0.10283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f363388e969 code=0x7ffc0000 [ 460.254789][ T29] audit: type=1326 audit(1747158952.299:11755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30222 comm="syz.0.10283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f363388e969 code=0x7ffc0000 [ 460.278569][ T29] audit: type=1326 audit(1747158952.299:11756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30222 comm="syz.0.10283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f363388e969 code=0x7ffc0000 [ 460.302473][ T29] audit: type=1326 audit(1747158952.299:11757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30222 comm="syz.0.10283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f363388e969 code=0x7ffc0000 [ 460.414735][T30245] netlink: 24 bytes leftover after parsing attributes in process `syz.6.10293'. [ 460.490372][T30256] netlink: 24 bytes leftover after parsing attributes in process `syz.6.10298'. [ 460.543145][T30256] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10298'. [ 460.553591][T30236] loop7: detected capacity change from 0 to 1024 [ 460.562450][T30255] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10299'. [ 460.573949][T30236] EXT4-fs: Ignoring removed bh option [ 460.583875][T30236] EXT4-fs: inline encryption not supported [ 460.591609][T30236] EXT4-fs: Ignoring removed i_version option [ 460.603983][T30236] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 460.656413][T30266] loop0: detected capacity change from 0 to 512 [ 460.667487][T30236] EXT4-fs error (device loop7): ext4_map_blocks:709: inode #3: block 1: comm syz.7.10289: lblock 1 mapped to illegal pblock 1 (length 1) [ 460.686543][T30236] EXT4-fs error (device loop7): ext4_acquire_dquot:6935: comm syz.7.10289: Failed to acquire dquot type 0 [ 460.718359][T30236] EXT4-fs error (device loop7): ext4_free_blocks:6587: comm syz.7.10289: Freeing blocks not in datazone - block = 0, count = 4096 [ 460.733899][T30266] EXT4-fs warning (device loop0): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 460.734915][T30266] EXT4-fs (loop0): mount failed [ 460.755077][T30236] EXT4-fs error (device loop7): ext4_read_inode_bitmap:139: comm syz.7.10289: Invalid inode bitmap blk 0 in block_group 0 [ 460.771497][T30236] EXT4-fs error (device loop7) in ext4_free_inode:361: Corrupt filesystem [ 460.772389][T27593] EXT4-fs error (device loop7): ext4_map_blocks:675: inode #3: block 1: comm kworker/u8:34: lblock 1 mapped to illegal pblock 1 (length 1) [ 460.785918][T30236] EXT4-fs (loop7): 1 orphan inode deleted [ 460.807088][T30236] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 460.820917][T27593] EXT4-fs error (device loop7): ext4_release_dquot:6971: comm kworker/u8:34: Failed to release dquot type 0 [ 460.860616][T30280] netlink: 24 bytes leftover after parsing attributes in process `syz.6.10309'. [ 460.889872][T26800] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 460.950336][T30293] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10315'. [ 460.971557][T30293] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10315'. [ 461.011428][T30301] loop7: detected capacity change from 0 to 2048 [ 461.026760][T30301] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 461.083488][T30313] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10324'. [ 461.508040][T30335] loop5: detected capacity change from 0 to 1024 [ 461.515265][T30335] EXT4-fs: Ignoring removed bh option [ 461.520957][T30335] EXT4-fs: inline encryption not supported [ 461.527580][T30335] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 461.556690][T30335] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 461.571956][T30335] EXT4-fs error (device loop5): ext4_map_blocks:709: inode #3: block 1: comm syz.5.10332: lblock 1 mapped to illegal pblock 1 (length 1) [ 461.595328][T30335] EXT4-fs error (device loop5): ext4_acquire_dquot:6935: comm syz.5.10332: Failed to acquire dquot type 0 [ 461.636077][T30335] EXT4-fs error (device loop5): ext4_free_blocks:6587: comm syz.5.10332: Freeing blocks not in datazone - block = 0, count = 4096 [ 461.650547][T30335] EXT4-fs error (device loop5): ext4_read_inode_bitmap:139: comm syz.5.10332: Invalid inode bitmap blk 0 in block_group 0 [ 461.666787][T27587] EXT4-fs error (device loop5): ext4_map_blocks:675: inode #3: block 1: comm kworker/u8:28: lblock 1 mapped to illegal pblock 1 (length 1) [ 461.681696][T27587] EXT4-fs error (device loop5): ext4_release_dquot:6971: comm kworker/u8:28: Failed to release dquot type 0 [ 461.700525][T30335] EXT4-fs error (device loop5) in ext4_free_inode:361: Corrupt filesystem [ 461.714949][T30335] EXT4-fs (loop5): 1 orphan inode deleted [ 461.754870][T30335] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 461.770087][T30342] loop0: detected capacity change from 0 to 512 [ 461.786809][T30335] ext4: Unknown parameter 'ÿÿÿÿ00000000000000000000ñŽ?ƒÂ-§± á' [ 461.806749][T30342] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 461.816959][T30342] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.10335: invalid indirect mapped block 2683928664 (level 1) [ 461.833759][T30342] EXT4-fs (loop0): Remounting filesystem read-only [ 461.840487][T30342] EXT4-fs (loop0): 1 truncate cleaned up [ 461.846882][T30342] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 461.914013][T24767] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 462.033854][T30355] loop5: detected capacity change from 0 to 2048 [ 462.054231][T27581] bond0 (unregistering): Released all slaves [ 462.073561][T30355] loop5: p1 < > p4 < > [ 462.123564][T27581] tipc: Left network mode [ 462.133812][T27581] hsr_slave_0: left promiscuous mode [ 462.150951][T27581] veth1_macvtap: left promiscuous mode [ 462.158720][T27581] veth0_macvtap: left promiscuous mode [ 462.164296][T27581] veth1_vlan: left promiscuous mode [ 462.175426][T27581] veth0_vlan: left promiscuous mode [ 462.184392][T26800] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 462.295439][T30372] loop6: detected capacity change from 0 to 2048 [ 462.343078][T30373] loop7: detected capacity change from 0 to 1024 [ 462.348684][T27581] batadv0 (unregistering): left allmulticast mode [ 462.352118][T30373] EXT4-fs: Ignoring removed bh option [ 462.362896][T30373] EXT4-fs: inline encryption not supported [ 462.368778][T30373] EXT4-fs: Ignoring removed i_version option [ 462.380235][ T3392] infiniband syz1: ib_query_port failed (-19) [ 462.389536][T30372] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 462.404571][T30373] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 462.418083][T30364] tipc: Enabled bearer , priority 10 [ 462.424583][T30364] tipc: Disabling bearer [ 462.444944][T30373] EXT4-fs error (device loop7): ext4_map_blocks:709: inode #3: block 1: comm syz.7.10345: lblock 1 mapped to illegal pblock 1 (length 1) [ 462.464768][T26528] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 462.475456][T30373] EXT4-fs error (device loop7): ext4_acquire_dquot:6935: comm syz.7.10345: Failed to acquire dquot type 0 [ 462.500220][T30373] EXT4-fs error (device loop7): ext4_free_blocks:6587: comm syz.7.10345: Freeing blocks not in datazone - block = 0, count = 4096 [ 462.530757][T30378] loop6: detected capacity change from 0 to 512 [ 462.538980][T30373] EXT4-fs error (device loop7): ext4_read_inode_bitmap:139: comm syz.7.10345: Invalid inode bitmap blk 0 in block_group 0 [ 462.555685][T30373] EXT4-fs error (device loop7) in ext4_free_inode:361: Corrupt filesystem [ 462.572258][T27587] EXT4-fs error (device loop7): ext4_map_blocks:675: inode #3: block 1: comm kworker/u8:28: lblock 1 mapped to illegal pblock 1 (length 1) [ 462.591362][T30378] EXT4-fs warning (device loop6): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 462.610342][T30373] EXT4-fs (loop7): 1 orphan inode deleted [ 462.616277][T27587] EXT4-fs error (device loop7): ext4_release_dquot:6971: comm kworker/u8:28: Failed to release dquot type 0 [ 462.629186][T30373] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 462.650612][T30378] EXT4-fs (loop6): mount failed [ 462.668531][T26713] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 462.723342][T26800] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 462.943970][T30403] loop7: detected capacity change from 0 to 1024 [ 462.951814][T30403] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 462.966680][T30403] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 462.974690][T30403] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c854e01c, mo2=0100] [ 462.999798][T30403] EXT4-fs (loop7): orphan cleanup on readonly fs [ 463.017648][T30403] EXT4-fs error (device loop7) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 463.029270][T30403] EXT4-fs error (device loop7): ext4_dirty_inode:6103: inode #3: comm syz.7.10356: mark_inode_dirty error [ 463.051708][T30403] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:483: comm syz.7.10356: Invalid block bitmap block 3 in block_group 0 [ 463.073380][T30403] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:483: comm syz.7.10356: Invalid block bitmap block 3 in block_group 0 [ 463.119736][T30403] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:483: comm syz.7.10356: Invalid block bitmap block 3 in block_group 0 [ 463.158400][T30403] EXT4-fs error (device loop7) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 463.182036][T30403] EXT4-fs error (device loop7): ext4_dirty_inode:6103: inode #3: comm syz.7.10356: mark_inode_dirty error [ 463.200512][T30403] EXT4-fs error (device loop7): ext4_map_blocks:675: inode #3: block 1: comm syz.7.10356: lblock 6 mapped to illegal pblock 1 (length 1) [ 463.230000][T30403] EXT4-fs error (device loop7): ext4_map_blocks:675: inode #3: block 48: comm syz.7.10356: lblock 0 mapped to illegal pblock 48 (length 1) [ 463.247556][T30403] EXT4-fs error (device loop7): ext4_acquire_dquot:6935: comm syz.7.10356: Failed to acquire dquot type 0 [ 463.263038][T30403] EXT4-fs error (device loop7): ext4_map_blocks:675: inode #3: block 49: comm syz.7.10356: lblock 1 mapped to illegal pblock 49 (length 1) [ 463.277987][T30403] EXT4-fs error (device loop7): ext4_acquire_dquot:6935: comm syz.7.10356: Failed to acquire dquot type 0 [ 463.293496][T30403] EXT4-fs error (device loop7) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 463.303400][T30403] EXT4-fs error (device loop7): ext4_evict_inode:259: inode #15: comm syz.7.10356: mark_inode_dirty error [ 463.326334][T30403] EXT4-fs warning (device loop7): ext4_evict_inode:262: couldn't mark inode dirty (err -117) [ 463.338153][T30403] EXT4-fs (loop7): 1 orphan inode deleted [ 463.347766][T30403] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 463.392152][T26800] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 463.494009][T30448] loop7: detected capacity change from 0 to 2048 [ 463.531115][T30448] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 463.554291][T30448] tipc: Enabled bearer , priority 10 [ 463.562855][T30448] tipc: Disabling bearer [ 463.576668][T30443] loop6: detected capacity change from 0 to 1024 [ 463.593281][T30443] EXT4-fs: Ignoring removed bh option [ 463.607004][T26800] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 463.626631][T30443] EXT4-fs: inline encryption not supported [ 463.633283][T30443] EXT4-fs: Ignoring removed i_version option [ 463.653464][T30443] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 463.688344][T30456] loop7: detected capacity change from 0 to 2048 [ 463.727840][T30456] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 463.752117][T30443] EXT4-fs error (device loop6): ext4_map_blocks:709: inode #3: block 1: comm syz.6.10375: lblock 1 mapped to illegal pblock 1 (length 1) [ 463.776823][T30443] EXT4-fs error (device loop6): ext4_acquire_dquot:6935: comm syz.6.10375: Failed to acquire dquot type 0 [ 463.792724][T30443] EXT4-fs error (device loop6): ext4_free_blocks:6587: comm syz.6.10375: Freeing blocks not in datazone - block = 0, count = 4096 [ 463.814299][T30443] EXT4-fs error (device loop6): ext4_read_inode_bitmap:139: comm syz.6.10375: Invalid inode bitmap blk 0 in block_group 0 [ 463.827703][T27593] EXT4-fs error (device loop6): ext4_map_blocks:675: inode #3: block 1: comm kworker/u8:34: lblock 1 mapped to illegal pblock 1 (length 1) [ 463.828300][T27593] EXT4-fs error (device loop6): ext4_release_dquot:6971: comm kworker/u8:34: Failed to release dquot type 0 [ 463.867480][T30443] EXT4-fs error (device loop6) in ext4_free_inode:361: Corrupt filesystem [ 463.881625][T30443] EXT4-fs (loop6): 1 orphan inode deleted [ 463.903423][T30443] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 463.904557][T30478] tipc: Enabled bearer , priority 10 [ 463.954181][T30478] tipc: Disabling bearer [ 463.965859][T30480] loop0: detected capacity change from 0 to 2048 [ 464.000996][T30480] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 464.024330][T30480] tipc: Enabled bearer , priority 10 [ 464.030848][T30480] tipc: Disabling bearer [ 464.050103][T26713] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 464.060400][T26528] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 464.646869][T26800] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 464.689822][T30517] loop0: detected capacity change from 0 to 1024 [ 464.714489][T30517] EXT4-fs: Ignoring removed bh option [ 464.722769][T30517] EXT4-fs: inline encryption not supported [ 464.729981][T30517] EXT4-fs: Ignoring removed i_version option [ 464.795651][T30517] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 464.868114][T30517] EXT4-fs error (device loop0): ext4_map_blocks:709: inode #3: block 1: comm syz.0.10406: lblock 1 mapped to illegal pblock 1 (length 1) [ 464.896272][T30517] EXT4-fs error (device loop0): ext4_acquire_dquot:6935: comm syz.0.10406: Failed to acquire dquot type 0 [ 465.019040][T30517] EXT4-fs error (device loop0): ext4_free_blocks:6587: comm syz.0.10406: Freeing blocks not in datazone - block = 0, count = 4096 [ 465.051362][T30517] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm syz.0.10406: Invalid inode bitmap blk 0 in block_group 0 [ 465.070568][T27593] EXT4-fs error (device loop0): ext4_map_blocks:675: inode #3: block 1: comm kworker/u8:34: lblock 1 mapped to illegal pblock 1 (length 1) [ 465.086144][T30517] EXT4-fs error (device loop0) in ext4_free_inode:361: Corrupt filesystem [ 465.103289][T27593] EXT4-fs error (device loop0): ext4_release_dquot:6971: comm kworker/u8:34: Failed to release dquot type 0 [ 465.117448][T30517] EXT4-fs (loop0): 1 orphan inode deleted [ 465.166309][T30517] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 465.271774][T30545] loop6: detected capacity change from 0 to 1024 [ 465.286214][T30559] loop7: detected capacity change from 0 to 1024 [ 465.296026][T26713] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 465.307595][T30545] EXT4-fs: Ignoring removed bh option [ 465.313609][T30559] EXT4-fs: Ignoring removed bh option [ 465.313764][T30559] EXT4-fs: inline encryption not supported [ 465.314063][T30559] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 465.314290][T30559] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 465.334523][T30559] EXT4-fs error (device loop7): ext4_map_blocks:709: inode #3: block 1: comm syz.7.10425: lblock 1 mapped to illegal pblock 1 (length 1) [ 465.341230][T30545] EXT4-fs: inline encryption not supported [ 465.367182][T30559] EXT4-fs error (device loop7): ext4_acquire_dquot:6935: comm syz.7.10425: Failed to acquire dquot type 0 [ 465.367428][T30559] EXT4-fs error (device loop7): ext4_free_blocks:6587: comm syz.7.10425: Freeing blocks not in datazone - block = 0, count = 4096 [ 465.367651][T30559] EXT4-fs error (device loop7): ext4_read_inode_bitmap:139: comm syz.7.10425: Invalid inode bitmap blk 0 in block_group 0 [ 465.379672][T30545] EXT4-fs: Ignoring removed i_version option [ 465.393115][T27593] EXT4-fs error (device loop7): ext4_map_blocks:675: inode #3: block 1: comm kworker/u8:34: lblock 1 mapped to illegal pblock 1 (length 1) [ 465.436733][T30559] EXT4-fs error (device loop7) in ext4_free_inode:361: Corrupt filesystem [ 465.447104][T27593] __quota_error: 170 callbacks suppressed [ 465.447122][T27593] Quota error (device loop7): remove_tree: Can't read quota data block 1 [ 465.461445][T27593] EXT4-fs error (device loop7): ext4_release_dquot:6971: comm kworker/u8:34: Failed to release dquot type 0 [ 465.473553][T30545] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 465.475613][T30559] EXT4-fs (loop7): 1 orphan inode deleted [ 465.490911][T30559] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 465.519327][ T29] audit: type=1326 audit(1747158957.388:11903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30565 comm="syz.5.10430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44ab4de969 code=0x7ffc0000 [ 465.536204][T30559] ext4: Unknown parameter 'ÿÿÿÿ00000000000000000000ñŽ?ƒÂ-§± á' [ 465.558065][ T29] audit: type=1326 audit(1747158957.407:11904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30565 comm="syz.5.10430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44ab4de969 code=0x7ffc0000 [ 465.582008][ T29] audit: type=1326 audit(1747158957.407:11905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30565 comm="syz.5.10430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f44ab4de969 code=0x7ffc0000 [ 465.605966][ T29] audit: type=1326 audit(1747158957.407:11906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30565 comm="syz.5.10430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44ab4de969 code=0x7ffc0000 [ 465.629716][ T29] audit: type=1326 audit(1747158957.407:11907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30565 comm="syz.5.10430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44ab4de969 code=0x7ffc0000 [ 465.653846][ T29] audit: type=1326 audit(1747158957.407:11908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30565 comm="syz.5.10430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f44ab4de969 code=0x7ffc0000 [ 465.658904][T30545] EXT4-fs error (device loop6): ext4_map_blocks:709: inode #3: block 1: comm syz.6.10420: lblock 1 mapped to illegal pblock 1 (length 1) [ 465.677693][ T29] audit: type=1326 audit(1747158957.407:11909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30565 comm="syz.5.10430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44ab4de969 code=0x7ffc0000 [ 465.677744][ T29] audit: type=1326 audit(1747158957.407:11910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30565 comm="syz.5.10430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f44ab4de969 code=0x7ffc0000 [ 465.677864][ T29] audit: type=1326 audit(1747158957.407:11911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30565 comm="syz.5.10430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44ab4de969 code=0x7ffc0000 [ 465.776065][T30545] EXT4-fs error (device loop6): ext4_acquire_dquot:6935: comm syz.6.10420: Failed to acquire dquot type 0 [ 465.802035][T30545] EXT4-fs error (device loop6): ext4_free_blocks:6587: comm syz.6.10420: Freeing blocks not in datazone - block = 0, count = 4096 [ 465.818482][T30579] __nla_validate_parse: 17 callbacks suppressed [ 465.818538][T30579] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10435'. [ 465.828222][T30581] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10436'. [ 465.828249][T30581] netlink: 36 bytes leftover after parsing attributes in process `syz.5.10436'. [ 465.862310][T30545] EXT4-fs error (device loop6): ext4_read_inode_bitmap:139: comm syz.6.10420: Invalid inode bitmap blk 0 in block_group 0 [ 465.879132][T27587] EXT4-fs error (device loop6): ext4_map_blocks:675: inode #3: block 1: comm kworker/u8:28: lblock 1 mapped to illegal pblock 1 (length 1) [ 465.910429][T30545] EXT4-fs error (device loop6) in ext4_free_inode:361: Corrupt filesystem [ 465.921003][T27587] EXT4-fs error (device loop6): ext4_release_dquot:6971: comm kworker/u8:28: Failed to release dquot type 0 [ 465.950624][T30545] EXT4-fs (loop6): 1 orphan inode deleted [ 465.972321][T26800] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 466.021637][T30545] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 466.120552][T26528] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 466.252155][T30609] loop6: detected capacity change from 0 to 1024 [ 466.271377][T30609] EXT4-fs: Ignoring removed bh option [ 466.277151][T30609] EXT4-fs: inline encryption not supported [ 466.286450][T30607] loop0: detected capacity change from 0 to 1024 [ 466.299931][T30607] EXT4-fs: Ignoring removed bh option [ 466.308870][T30609] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 466.319351][T30607] EXT4-fs: inline encryption not supported [ 466.327012][T30607] EXT4-fs: Ignoring removed i_version option [ 466.339294][T30609] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 466.357784][T30607] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 466.378268][T30609] EXT4-fs error (device loop6): ext4_map_blocks:709: inode #3: block 1: comm syz.6.10448: lblock 1 mapped to illegal pblock 1 (length 1) [ 466.412155][T30609] EXT4-fs error (device loop6): ext4_acquire_dquot:6935: comm syz.6.10448: Failed to acquire dquot type 0 [ 466.435213][T30607] EXT4-fs error (device loop0): ext4_map_blocks:709: inode #3: block 1: comm syz.0.10449: lblock 1 mapped to illegal pblock 1 (length 1) [ 466.451103][T30609] EXT4-fs error (device loop6): ext4_free_blocks:6587: comm syz.6.10448: Freeing blocks not in datazone - block = 0, count = 4096 [ 466.454326][T30607] EXT4-fs error (device loop0): ext4_acquire_dquot:6935: comm syz.0.10449: Failed to acquire dquot type 0 [ 466.482897][T30609] EXT4-fs error (device loop6): ext4_read_inode_bitmap:139: comm syz.6.10448: Invalid inode bitmap blk 0 in block_group 0 [ 466.496675][T30609] EXT4-fs error (device loop6) in ext4_free_inode:361: Corrupt filesystem [ 466.505409][T27587] EXT4-fs error (device loop6): ext4_map_blocks:675: inode #3: block 1: comm kworker/u8:28: lblock 1 mapped to illegal pblock 1 (length 1) [ 466.528152][T30607] EXT4-fs error (device loop0): ext4_free_blocks:6587: comm syz.0.10449: Freeing blocks not in datazone - block = 0, count = 4096 [ 466.549444][T30609] EXT4-fs (loop6): 1 orphan inode deleted [ 466.555369][T27587] EXT4-fs error (device loop6): ext4_release_dquot:6971: comm kworker/u8:28: Failed to release dquot type 0 [ 466.567421][T30609] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 466.587917][T30607] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm syz.0.10449: Invalid inode bitmap blk 0 in block_group 0 [ 466.607475][T27593] EXT4-fs error (device loop0): ext4_map_blocks:675: inode #3: block 1: comm kworker/u8:34: lblock 1 mapped to illegal pblock 1 (length 1) [ 466.625662][T27593] EXT4-fs error (device loop0): ext4_release_dquot:6971: comm kworker/u8:34: Failed to release dquot type 0 [ 466.640561][T30607] EXT4-fs error (device loop0) in ext4_free_inode:361: Corrupt filesystem [ 466.652183][T30607] EXT4-fs (loop0): 1 orphan inode deleted [ 466.653732][T30609] ext4: Unknown parameter 'ÿÿÿÿ00000000000000000000ñŽ?ƒÂ-§± á' [ 466.685309][T30607] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 466.739203][T26713] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 466.801571][T26528] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 466.813451][T30622] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10455'. [ 466.859559][T30624] loop6: detected capacity change from 0 to 2048 [ 466.888385][T30634] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10459'. [ 466.900411][T30624] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 467.146966][T30633] loop7: detected capacity change from 0 to 1024 [ 467.165965][T30633] EXT4-fs: Ignoring removed bh option [ 467.192287][T30633] EXT4-fs: inline encryption not supported [ 467.203362][T30633] EXT4-fs: Ignoring removed i_version option [ 467.221735][T30633] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 467.355548][T30633] EXT4-fs error (device loop7): ext4_map_blocks:709: inode #3: block 1: comm syz.7.10458: lblock 1 mapped to illegal pblock 1 (length 1) [ 467.390186][T30633] EXT4-fs error (device loop7): ext4_acquire_dquot:6935: comm syz.7.10458: Failed to acquire dquot type 0 [ 467.406579][T30658] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10467'. [ 467.423300][T30633] EXT4-fs error (device loop7): ext4_free_blocks:6587: comm syz.7.10458: Freeing blocks not in datazone - block = 0, count = 4096 [ 467.486525][T30633] EXT4-fs error (device loop7): ext4_read_inode_bitmap:139: comm syz.7.10458: Invalid inode bitmap blk 0 in block_group 0 [ 467.503134][T27587] EXT4-fs error (device loop7): ext4_map_blocks:675: inode #3: block 1: comm kworker/u8:28: lblock 1 mapped to illegal pblock 1 (length 1) [ 467.517971][T30633] EXT4-fs error (device loop7) in ext4_free_inode:361: Corrupt filesystem [ 467.533716][T27587] EXT4-fs error (device loop7): ext4_release_dquot:6971: comm kworker/u8:28: Failed to release dquot type 0 [ 467.549363][T30633] EXT4-fs (loop7): 1 orphan inode deleted [ 467.571115][T30633] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 467.622489][T30668] binfmt_misc: register: failed to install interpreter file ./file2 [ 467.632952][T30668] tipc: Enabled bearer , priority 10 [ 467.639838][T30668] tipc: Disabling bearer [ 467.676951][T30670] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10472'. [ 467.725350][T26800] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 467.961379][T26528] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 467.965301][T30687] loop0: detected capacity change from 0 to 2048 [ 468.035001][T30694] loop7: detected capacity change from 0 to 512 [ 468.055706][T30694] EXT4-fs warning (device loop7): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 468.073568][T30702] loop6: detected capacity change from 0 to 1024 [ 468.080995][T30702] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 468.106795][T30694] EXT4-fs (loop7): mount failed [ 468.111840][T30702] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 468.119996][T30702] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c854e01c, mo2=0100] [ 468.130994][T30702] EXT4-fs (loop6): orphan cleanup on readonly fs [ 468.140719][T30702] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 468.151144][T30702] EXT4-fs error (device loop6): ext4_dirty_inode:6103: inode #3: comm syz.6.10487: mark_inode_dirty error [ 468.162918][T30702] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:483: comm syz.6.10487: Invalid block bitmap block 3 in block_group 0 [ 468.177063][T30702] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:483: comm syz.6.10487: Invalid block bitmap block 3 in block_group 0 [ 468.201278][T30702] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:483: comm syz.6.10487: Invalid block bitmap block 3 in block_group 0 [ 468.201368][T30710] loop5: detected capacity change from 0 to 128 [ 468.216238][T30702] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 468.221853][T30710] vfat: Unknown parameter '' [ 468.236597][T30702] EXT4-fs error (device loop6): ext4_dirty_inode:6103: inode #3: comm syz.6.10487: mark_inode_dirty error [ 468.249014][T30702] EXT4-fs error (device loop6): ext4_map_blocks:675: inode #3: block 1: comm syz.6.10487: lblock 6 mapped to illegal pblock 1 (length 1) [ 468.303182][T30702] EXT4-fs error (device loop6): ext4_map_blocks:675: inode #3: block 48: comm syz.6.10487: lblock 0 mapped to illegal pblock 48 (length 1) [ 468.328884][T30702] EXT4-fs error (device loop6): ext4_acquire_dquot:6935: comm syz.6.10487: Failed to acquire dquot type 0 [ 468.341178][T30702] EXT4-fs error (device loop6): ext4_map_blocks:675: inode #3: block 49: comm syz.6.10487: lblock 1 mapped to illegal pblock 49 (length 1) [ 468.359444][T30702] EXT4-fs error (device loop6): ext4_acquire_dquot:6935: comm syz.6.10487: Failed to acquire dquot type 0 [ 468.371530][T30702] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 468.382763][T30702] EXT4-fs error (device loop6): ext4_evict_inode:259: inode #15: comm syz.6.10487: mark_inode_dirty error [ 468.397282][T30702] EXT4-fs warning (device loop6): ext4_evict_inode:262: couldn't mark inode dirty (err -117) [ 468.408057][T30702] EXT4-fs (loop6): 1 orphan inode deleted [ 468.417915][T30718] netlink: 20 bytes leftover after parsing attributes in process `syz.7.10492'. [ 468.633539][T30732] loop7: detected capacity change from 0 to 512 [ 468.687721][T30732] EXT4-fs warning (device loop7): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 468.711781][T30732] EXT4-fs (loop7): mount failed [ 468.750701][T30745] loop6: detected capacity change from 0 to 1024 [ 468.757611][T30745] EXT4-fs: Ignoring removed bh option [ 468.763054][T30745] EXT4-fs: inline encryption not supported [ 468.769460][T30745] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 468.778163][T30745] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 468.791631][T30745] EXT4-fs error (device loop6): ext4_map_blocks:709: inode #3: block 1: comm syz.6.10504: lblock 1 mapped to illegal pblock 1 (length 1) [ 468.812553][T30745] EXT4-fs error (device loop6): ext4_acquire_dquot:6935: comm syz.6.10504: Failed to acquire dquot type 0 [ 468.829584][T30745] EXT4-fs error (device loop6): ext4_free_blocks:6587: comm syz.6.10504: Freeing blocks not in datazone - block = 0, count = 4096 [ 468.877269][T30745] EXT4-fs error (device loop6): ext4_read_inode_bitmap:139: comm syz.6.10504: Invalid inode bitmap blk 0 in block_group 0 [ 468.894667][T27587] EXT4-fs error (device loop6): ext4_map_blocks:675: inode #3: block 1: comm kworker/u8:28: lblock 1 mapped to illegal pblock 1 (length 1) [ 468.911941][T30745] EXT4-fs error (device loop6) in ext4_free_inode:361: Corrupt filesystem [ 468.921192][T27587] EXT4-fs error (device loop6): ext4_release_dquot:6971: comm kworker/u8:28: Failed to release dquot type 0 [ 468.934090][T30759] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10508'. [ 468.965775][T30745] EXT4-fs (loop6): 1 orphan inode deleted [ 469.024350][T30745] ext4: Unknown parameter 'ÿÿÿÿ00000000000000000000ñŽ?ƒÂ-§± á' [ 469.078772][T30769] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10514'. [ 469.153150][T30773] binfmt_misc: register: failed to install interpreter file ./file2 [ 469.168326][T30777] loop0: detected capacity change from 0 to 512 [ 469.213454][T30781] loop6: detected capacity change from 0 to 2048 [ 469.273447][T30777] EXT4-fs warning (device loop0): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 469.290514][T30788] tipc: Enabled bearer , priority 10 [ 469.309241][T30777] EXT4-fs (loop0): mount failed [ 469.373372][T30795] tipc: Enabled bearer , priority 10 [ 469.390373][T30795] tipc: Disabling bearer [ 469.399213][T30788] tipc: Disabling bearer [ 469.526668][T30794] loop5: detected capacity change from 0 to 8192 [ 469.567128][T30794] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 469.905146][T30804] loop5: detected capacity change from 0 to 1024 [ 469.913154][T30804] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 470.027166][T30804] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 470.035170][T30804] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c854e01c, mo2=0100] [ 470.048011][T30804] EXT4-fs (loop5): orphan cleanup on readonly fs [ 470.096481][T30804] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 470.112287][T30804] EXT4-fs error (device loop5): ext4_dirty_inode:6103: inode #3: comm syz.5.10525: mark_inode_dirty error [ 470.142652][T30804] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:483: comm syz.5.10525: Invalid block bitmap block 3 in block_group 0 [ 470.198362][T30804] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:483: comm syz.5.10525: Invalid block bitmap block 3 in block_group 0 [ 470.226026][T30804] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:483: comm syz.5.10525: Invalid block bitmap block 3 in block_group 0 [ 470.275946][T30804] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 470.306121][T30822] loop6: detected capacity change from 0 to 1024 [ 470.312962][T30822] EXT4-fs: Ignoring removed bh option [ 470.318509][T30822] EXT4-fs: inline encryption not supported [ 470.323547][T30804] EXT4-fs error (device loop5): ext4_dirty_inode:6103: inode #3: comm syz.5.10525: mark_inode_dirty error [ 470.336220][T30822] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 470.350440][T30822] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 470.363209][T30804] EXT4-fs error (device loop5): ext4_map_blocks:675: inode #3: block 1: comm syz.5.10525: lblock 6 mapped to illegal pblock 1 (length 1) [ 470.377855][T30804] EXT4-fs error (device loop5): ext4_map_blocks:675: inode #3: block 48: comm syz.5.10525: lblock 0 mapped to illegal pblock 48 (length 1) [ 470.407753][T30804] EXT4-fs error (device loop5): ext4_acquire_dquot:6935: comm syz.5.10525: Failed to acquire dquot type 0 [ 470.427548][T30804] EXT4-fs error (device loop5): ext4_map_blocks:675: inode #3: block 49: comm syz.5.10525: lblock 1 mapped to illegal pblock 49 (length 1) [ 470.442118][T30804] EXT4-fs error (device loop5): ext4_acquire_dquot:6935: comm syz.5.10525: Failed to acquire dquot type 0 [ 470.454672][T30804] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 470.462336][T30822] EXT4-fs error (device loop6): ext4_map_blocks:709: inode #3: block 1: comm syz.6.10533: lblock 1 mapped to illegal pblock 1 (length 1) [ 470.482453][T30804] EXT4-fs error (device loop5): ext4_evict_inode:259: inode #15: comm syz.5.10525: mark_inode_dirty error [ 470.495529][T30822] EXT4-fs error (device loop6): ext4_acquire_dquot:6935: comm syz.6.10533: Failed to acquire dquot type 0 [ 470.507639][T30822] EXT4-fs error (device loop6): ext4_free_blocks:6587: comm syz.6.10533: Freeing blocks not in datazone - block = 0, count = 4096 [ 470.519737][T30804] EXT4-fs warning (device loop5): ext4_evict_inode:262: couldn't mark inode dirty (err -117) [ 470.530089][T30822] EXT4-fs error (device loop6): ext4_read_inode_bitmap:139: comm syz.6.10533: Invalid inode bitmap blk 0 in block_group 0 [ 470.538742][T30804] EXT4-fs (loop5): 1 orphan inode deleted [ 470.544750][T30822] EXT4-fs error (device loop6) in ext4_free_inode:361: Corrupt filesystem [ 470.549906][T27589] EXT4-fs error (device loop6): ext4_map_blocks:675: inode #3: block 1: comm kworker/u8:30: lblock 1 mapped to illegal pblock 1 (length 1) [ 470.566356][T30822] EXT4-fs (loop6): 1 orphan inode deleted [ 470.596064][T27589] EXT4-fs error (device loop6): ext4_release_dquot:6971: comm kworker/u8:30: Failed to release dquot type 0 [ 470.650645][T30838] FAULT_INJECTION: forcing a failure. [ 470.650645][T30838] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 470.663877][T30838] CPU: 0 UID: 0 PID: 30838 Comm: syz.7.10540 Not tainted 6.15.0-rc6-syzkaller-00047-ge9565e23cd89 #0 PREEMPT(voluntary) [ 470.663924][T30838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 470.663957][T30838] Call Trace: [ 470.663966][T30838] [ 470.663974][T30838] __dump_stack+0x1d/0x30 [ 470.664001][T30838] dump_stack_lvl+0xe8/0x140 [ 470.664026][T30838] dump_stack+0x15/0x1b [ 470.664048][T30838] should_fail_ex+0x265/0x280 [ 470.664157][T30838] should_fail+0xb/0x20 [ 470.664196][T30838] should_fail_usercopy+0x1a/0x20 [ 470.664223][T30838] _copy_from_user+0x1c/0xb0 [ 470.664302][T30838] ucma_write+0xd9/0x250 [ 470.664330][T30838] ? __pfx_ucma_write+0x10/0x10 [ 470.664406][T30838] vfs_write+0x269/0x8d0 [ 470.664518][T30838] ? __rcu_read_unlock+0x4f/0x70 [ 470.664609][T30838] ? __fget_files+0x184/0x1c0 [ 470.664645][T30838] ksys_write+0xda/0x1a0 [ 470.664681][T30838] __x64_sys_write+0x40/0x50 [ 470.664769][T30838] x64_sys_call+0x2cdd/0x2fb0 [ 470.664796][T30838] do_syscall_64+0xd0/0x1a0 [ 470.664833][T30838] ? clear_bhb_loop+0x40/0x90 [ 470.664923][T30838] ? clear_bhb_loop+0x40/0x90 [ 470.664943][T30838] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 470.664963][T30838] RIP: 0033:0x7fbf5957e969 [ 470.664979][T30838] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 470.665074][T30838] RSP: 002b:00007fbf57be7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 470.665098][T30838] RAX: ffffffffffffffda RBX: 00007fbf597a5fa0 RCX: 00007fbf5957e969 [ 470.665114][T30838] RDX: 0000000000000018 RSI: 00002000000001c0 RDI: 0000000000000003 [ 470.665129][T30838] RBP: 00007fbf57be7090 R08: 0000000000000000 R09: 0000000000000000 [ 470.665141][T30838] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 470.665217][T30838] R13: 0000000000000000 R14: 00007fbf597a5fa0 R15: 00007fff530f6498 [ 470.665242][T30838] [ 470.906431][T30822] ext4: Unknown parameter 'ÿÿÿÿ00000000000000000000ñŽ?ƒÂ-§± á' [ 470.950570][ T29] kauditd_printk_skb: 224 callbacks suppressed [ 470.950584][ T29] audit: type=1326 audit(1747158962.468:12103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30848 comm="syz.7.10545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf5957e969 code=0x7ffc0000 [ 471.009070][ T29] audit: type=1326 audit(1747158962.468:12104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30848 comm="syz.7.10545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fbf5957e969 code=0x7ffc0000 [ 471.032840][ T29] audit: type=1326 audit(1747158962.487:12105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30850 comm="syz.7.10545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fbf595b1225 code=0x7ffc0000 [ 471.056533][ T29] audit: type=1326 audit(1747158962.487:12106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30848 comm="syz.7.10545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf5957e969 code=0x7ffc0000 [ 471.080507][ T29] audit: type=1326 audit(1747158962.496:12107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30848 comm="syz.7.10545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=312 compat=0 ip=0x7fbf5957e969 code=0x7ffc0000 [ 471.104245][ T29] audit: type=1326 audit(1747158962.496:12108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30848 comm="syz.7.10545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf5957e969 code=0x7ffc0000 [ 471.128082][ T29] audit: type=1326 audit(1747158962.496:12109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30848 comm="syz.7.10545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf5957e969 code=0x7ffc0000 [ 471.152266][ T29] audit: type=1326 audit(1747158962.636:12110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30850 comm="syz.7.10545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7fbf5957e969 code=0x7ffc0000 [ 471.204850][T30858] __nla_validate_parse: 9 callbacks suppressed [ 471.204869][T30858] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10549'. [ 471.293158][T30863] loop7: detected capacity change from 0 to 1024 [ 471.303930][T30863] EXT4-fs: Ignoring removed bh option [ 471.309533][T30863] EXT4-fs: inline encryption not supported [ 471.317319][T30863] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 471.328356][T30863] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 471.338958][T30866] netlink: 24 bytes leftover after parsing attributes in process `syz.5.10551'. [ 471.359967][T30863] EXT4-fs error (device loop7): ext4_map_blocks:709: inode #3: block 1: comm syz.7.10550: lblock 1 mapped to illegal pblock 1 (length 1) [ 471.361360][T30866] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10551'. [ 471.391251][T30863] Quota error (device loop7): write_blk: dquota write failed [ 471.398725][T30863] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 471.409279][T30863] EXT4-fs error (device loop7): ext4_acquire_dquot:6935: comm syz.7.10550: Failed to acquire dquot type 0 [ 471.423792][T30863] EXT4-fs error (device loop7): ext4_free_blocks:6587: comm syz.7.10550: Freeing blocks not in datazone - block = 0, count = 4096 [ 471.466064][T30863] EXT4-fs error (device loop7): ext4_read_inode_bitmap:139: comm syz.7.10550: Invalid inode bitmap blk 0 in block_group 0 [ 471.483074][T27581] EXT4-fs error (device loop7): ext4_map_blocks:675: inode #3: block 1: comm kworker/u8:23: lblock 1 mapped to illegal pblock 1 (length 1) [ 471.504406][T30863] EXT4-fs error (device loop7) in ext4_free_inode:361: Corrupt filesystem [ 471.515106][T30863] EXT4-fs (loop7): 1 orphan inode deleted [ 471.521705][T27581] EXT4-fs error (device loop7): ext4_release_dquot:6971: comm kworker/u8:23: Failed to release dquot type 0 [ 471.560277][T30884] netlink: 24 bytes leftover after parsing attributes in process `syz.5.10558'. [ 471.608739][T30863] ext4: Unknown parameter 'ÿÿÿÿ00000000000000000000ñŽ?ƒÂ-§± á' [ 471.620727][T30890] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10562'. [ 471.689149][T30894] loop6: detected capacity change from 0 to 1024 [ 471.772367][T30899] loop5: detected capacity change from 0 to 2048 [ 471.789172][T30901] loop7: detected capacity change from 0 to 2048 [ 471.799139][T30902] netlink: 'syz.6.10564': attribute type 21 has an invalid length. [ 471.807172][T30902] IPv6: NLM_F_CREATE should be specified when creating new route [ 471.949353][T30918] tipc: Enabled bearer , priority 10 [ 471.959625][T30919] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10569'. [ 471.961622][T30918] tipc: Disabling bearer [ 472.027414][T30919] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10569'. [ 472.052977][T30927] tipc: Enabled bearer , priority 10 [ 472.059630][T30927] tipc: Disabling bearer [ 472.162133][T30936] FAULT_INJECTION: forcing a failure. [ 472.162133][T30936] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 472.175426][T30936] CPU: 1 UID: 0 PID: 30936 Comm: syz.0.10573 Not tainted 6.15.0-rc6-syzkaller-00047-ge9565e23cd89 #0 PREEMPT(voluntary) [ 472.175498][T30936] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 472.175523][T30936] Call Trace: [ 472.175530][T30936] [ 472.175540][T30936] __dump_stack+0x1d/0x30 [ 472.175562][T30936] dump_stack_lvl+0xe8/0x140 [ 472.175580][T30936] dump_stack+0x15/0x1b [ 472.175595][T30936] should_fail_ex+0x265/0x280 [ 472.175641][T30936] should_fail+0xb/0x20 [ 472.175678][T30936] should_fail_usercopy+0x1a/0x20 [ 472.175780][T30936] _copy_from_iter+0xcf/0xdd0 [ 472.175798][T30936] ? __build_skb_around+0x1a0/0x200 [ 472.175831][T30936] ? __alloc_skb+0x223/0x320 [ 472.175943][T30936] netlink_sendmsg+0x471/0x6b0 [ 472.175970][T30936] ? __pfx_netlink_sendmsg+0x10/0x10 [ 472.175989][T30936] __sock_sendmsg+0x142/0x180 [ 472.176090][T30936] ____sys_sendmsg+0x31e/0x4e0 [ 472.176117][T30936] ___sys_sendmsg+0x17b/0x1d0 [ 472.176162][T30936] __x64_sys_sendmsg+0xd4/0x160 [ 472.176210][T30936] x64_sys_call+0x2999/0x2fb0 [ 472.176229][T30936] do_syscall_64+0xd0/0x1a0 [ 472.176252][T30936] ? clear_bhb_loop+0x40/0x90 [ 472.176284][T30936] ? clear_bhb_loop+0x40/0x90 [ 472.176389][T30936] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.176482][T30936] RIP: 0033:0x7f363388e969 [ 472.176501][T30936] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 472.176523][T30936] RSP: 002b:00007f3631ef7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 472.176543][T30936] RAX: ffffffffffffffda RBX: 00007f3633ab5fa0 RCX: 00007f363388e969 [ 472.176559][T30936] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000003 [ 472.176575][T30936] RBP: 00007f3631ef7090 R08: 0000000000000000 R09: 0000000000000000 [ 472.176600][T30936] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 472.176616][T30936] R13: 0000000000000000 R14: 00007f3633ab5fa0 R15: 00007ffdbc06e278 [ 472.176688][T30936] [ 472.403914][T30940] netlink: 24 bytes leftover after parsing attributes in process `syz.6.10574'. [ 472.434693][T30942] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10575'. [ 472.527221][T30950] loop6: detected capacity change from 0 to 1024 [ 472.534136][T30950] EXT4-fs: Ignoring removed bh option [ 472.539803][T30950] EXT4-fs: inline encryption not supported [ 472.546639][T30950] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 472.566788][T30950] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 472.589364][T30950] EXT4-fs error (device loop6): ext4_map_blocks:709: inode #3: block 1: comm syz.6.10577: lblock 1 mapped to illegal pblock 1 (length 1) [ 472.603749][T30950] EXT4-fs error (device loop6): ext4_acquire_dquot:6935: comm syz.6.10577: Failed to acquire dquot type 0 [ 472.615570][T30950] EXT4-fs error (device loop6): ext4_free_blocks:6587: comm syz.6.10577: Freeing blocks not in datazone - block = 0, count = 4096 [ 472.629493][T30950] EXT4-fs error (device loop6): ext4_read_inode_bitmap:139: comm syz.6.10577: Invalid inode bitmap blk 0 in block_group 0 [ 472.642530][T27587] EXT4-fs error (device loop6): ext4_map_blocks:675: inode #3: block 1: comm kworker/u8:28: lblock 1 mapped to illegal pblock 1 (length 1) [ 472.683329][T30950] EXT4-fs error (device loop6) in ext4_free_inode:361: Corrupt filesystem [ 472.693804][T27587] EXT4-fs error (device loop6): ext4_release_dquot:6971: comm kworker/u8:28: Failed to release dquot type 0 [ 472.712162][T30950] EXT4-fs (loop6): 1 orphan inode deleted [ 472.728696][T30950] ext4: Unknown parameter 'ÿÿÿÿ00000000000000000000ñŽ?ƒÂ-§± á' [ 472.814572][T30963] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10584'. [ 473.057437][T30990] loop7: detected capacity change from 0 to 1024 [ 473.077794][T30990] EXT4-fs: Ignoring removed bh option [ 473.083467][T30990] EXT4-fs: inline encryption not supported [ 473.137172][T30988] loop5: detected capacity change from 0 to 512 [ 473.153201][T30990] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 473.163538][T30990] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 473.185312][T30988] EXT4-fs warning (device loop5): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 473.185439][T30990] ================================================================== [ 473.205647][T30988] EXT4-fs (loop5): mount failed [ 473.208071][T30990] BUG: KCSAN: data-race in data_alloc / prb_reserve [ 473.208127][T30990] [ 473.208134][T30990] write to 0xffffffff868921b8 of 8 bytes by task 30988 on cpu 0: [ 473.208151][T30990] data_alloc+0x27d/0x2b0 [ 473.208188][T30990] prb_reserve+0x808/0xaf0 [ 473.238429][T30990] vprintk_store+0x56d/0x860 [ 473.243035][T30990] vprintk_emit+0x178/0x650 [ 473.247568][T30990] vprintk_default+0x26/0x30 [ 473.252271][T30990] vprintk+0x1d/0x30 [ 473.256272][T30990] _printk+0x79/0xa0 [ 473.260276][T30990] __ext4_warning+0x12b/0x140 [ 473.264996][T30990] ext4_enable_quotas+0x390/0x400 [ 473.270048][T30990] ext4_fill_super+0x30d4/0x34e0 [ 473.275007][T30990] get_tree_bdev_flags+0x291/0x300 [ 473.280221][T30990] get_tree_bdev+0x1f/0x30 [ 473.284659][T30990] ext4_get_tree+0x1c/0x30 [ 473.289096][T30990] vfs_get_tree+0x54/0x1d0 [ 473.293527][T30990] do_new_mount+0x207/0x680 [ 473.298079][T30990] path_mount+0x4a4/0xb20 [ 473.302436][T30990] __se_sys_mount+0x28f/0x2e0 [ 473.307132][T30990] __x64_sys_mount+0x67/0x80 [ 473.311756][T30990] x64_sys_call+0xd36/0x2fb0 [ 473.316403][T30990] do_syscall_64+0xd0/0x1a0 [ 473.321038][T30990] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.326944][T30990] [ 473.329275][T30990] read to 0xffffffff868921b8 of 8 bytes by task 30990 on cpu 1: [ 473.336912][T30990] prb_reserve+0x221/0xaf0 [ 473.341351][T30990] vprintk_store+0x56d/0x860 [ 473.345951][T30990] vprintk_emit+0x178/0x650 [ 473.350469][T30990] vprintk_default+0x26/0x30 [ 473.355072][T30990] vprintk+0x1d/0x30 [ 473.358994][T30990] _printk+0x79/0xa0 [ 473.362907][T30990] __ext4_error_inode+0x30f/0x3f0 [ 473.367957][T30990] ext4_map_blocks+0x9f4/0xd00 [ 473.372760][T30990] ext4_getblk+0x114/0x510 [ 473.377192][T30990] ext4_bread+0x28/0x110 [ 473.381479][T30990] ext4_quota_write+0x167/0x360 [ 473.386354][T30990] write_blk+0x99/0x110 [ 473.390523][T30990] do_insert_tree+0x7c3/0x9b0 [ 473.395226][T30990] qtree_write_dquot+0x2cb/0x300 [ 473.400188][T30990] v2_write_dquot+0xda/0x140 [ 473.404796][T30990] dquot_acquire+0x1c0/0x2b0 [ 473.409422][T30990] ext4_acquire_dquot+0x15f/0x200 [ 473.414455][T30990] dqget+0x535/0x8d0 [ 473.418362][T30990] __dquot_initialize+0x27f/0x7c0 [ 473.423417][T30990] dquot_initialize+0x1a/0x30 [ 473.428119][T30990] ext4_process_orphan+0x32/0x1c0 [ 473.433175][T30990] ext4_orphan_cleanup+0x6a8/0xa00 [ 473.438409][T30990] ext4_fill_super+0x3171/0x34e0 [ 473.443369][T30990] get_tree_bdev_flags+0x291/0x300 [ 473.448509][T30990] get_tree_bdev+0x1f/0x30 [ 473.452944][T30990] ext4_get_tree+0x1c/0x30 [ 473.457409][T30990] vfs_get_tree+0x54/0x1d0 [ 473.461841][T30990] do_new_mount+0x207/0x680 [ 473.466359][T30990] path_mount+0x4a4/0xb20 [ 473.470703][T30990] __se_sys_mount+0x28f/0x2e0 [ 473.475483][T30990] __x64_sys_mount+0x67/0x80 [ 473.480090][T30990] x64_sys_call+0xd36/0x2fb0 [ 473.484691][T30990] do_syscall_64+0xd0/0x1a0 [ 473.489212][T30990] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.495126][T30990] [ 473.497480][T30990] value changed: 0x000000000003cf30 -> 0x00000000000de128 [ 473.504611][T30990] [ 473.506942][T30990] Reported by Kernel Concurrency Sanitizer on: [ 473.513098][T30990] CPU: 1 UID: 0 PID: 30990 Comm: syz.7.10597 Not tainted 6.15.0-rc6-syzkaller-00047-ge9565e23cd89 #0 PREEMPT(voluntary) [ 473.525698][T30990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 473.535765][T30990] ================================================================== [ 473.185283][T30990] EXT4-fs error (device loop7): ext4_map_blocks:709: inode #3: block 1: comm syz.7.10597: lblock 1 mapped to illegal pblock 1 (length 1) [ 473.583034][T30990] EXT4-fs error (device loop7): ext4_acquire_dquot:6935: comm syz.7.10597: Failed to acquire dquot type 0 [ 473.595204][T30990] EXT4-fs error (device loop7): ext4_free_blocks:6587: comm syz.7.10597: Freeing blocks not in datazone - block = 0, count = 4096 [ 473.609173][T30990] EXT4-fs error (device loop7): ext4_read_inode_bitmap:139: comm syz.7.10597: Invalid inode bitmap blk 0 in block_group 0 [ 473.622365][T30990] EXT4-fs error (device loop7) in ext4_free_inode:361: Corrupt filesystem [ 473.628021][T27587] EXT4-fs error (device loop7): ext4_map_blocks:675: inode #3: block 1: comm kworker/u8:28: lblock 1 mapped to illegal pblock 1 (length 1) [ 473.632780][T30990] EXT4-fs (loop7): 1 orphan inode deleted [ 473.674214][T27587] EXT4-fs error (device loop7): ext4_release_dquot:6971: comm kworker/u8:28: Failed to release dquot type 0 [ 473.716350][T30990] ext4: Unknown parameter 'ÿÿÿÿ00000000000000000000ñŽ?ƒÂ-§± á'