last executing test programs: 5.770184289s ago: executing program 1 (id=4771): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000d80), r0) sendmsg$NFC_CMD_DEV_DOWN(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x14, r1, 0x1, 0x70bd2a, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x40) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x2000008, &(0x7f0000000000), 0x2, 0x541, &(0x7f0000000600)="$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") 5.025899632s ago: executing program 1 (id=4778): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xf0b, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, {0x2}, {0xffff, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x4084810}, 0x2000c805) r0 = socket(0x200000000000011, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000700)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x6558, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000054000147880000000000000007008209", @ANYRES32, @ANYBLOB="20000100", @ANYRES32=r4, @ANYBLOB="00001000e000030000010001000000000000000008"], 0x38}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) 4.450692367s ago: executing program 1 (id=4782): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000640)="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", 0x183}], 0x1}}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000a00)="449f6aed247d197178d7f0a82e1deae14825b22ab6c0ec1ca0c27cd21d8a48637cb781581aac75a2f848f285c99133f0435497bf6ae25625c64f82ecc0a7bb7b", 0x40}, {&(0x7f0000000cc0)="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", 0x17e}], 0x2}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000140)="a7040f7dff0a4fed838b52a29c46952dfe5aff84e281448c520c4b0808bdb32447fc2ba20baa8cc06a99aea4a4221e753e94bf215e02377273", 0x39}, {&(0x7f00000002c0)="d0f28c036a8b6293adbae6a1f4a98928a2efe08e665dac369f8749c5c15e9819ef3627a4cf2264401c991774440846e7b4146eca22035546a286d4571d16423012a6cc000f8a5fb3c2555ef48a1e7dc5a9c834f7dfdb9487e74566a7a9e2262d739ba78f19916bd9efee8442b70298a91798f9186dcd1a9e63316e7d18debc6fe4280aff3b3400849f8d659d4d5a", 0x8e}, {&(0x7f0000000380)="ba78a730565fdeecaa98beb39bb0a1e4a46f0808ce0b5b03542d54303591031ad9f9073b1dff296b9df9eca8a08c6bf80659214737633acdcd8a7f2cfbeeaf58ac4f24a24f362b8356f278b8bd35ea4252eaa3cd4d77c9732606a6ef391938556550996483853a6837696da775fb0b6dd87e1c4d21", 0x75}, {&(0x7f0000000400)="59233b75f9898a5e3d65e9a97a89e9e8e1e6bf764de774e88c9c89a1e91fc07edeb783ef957b", 0x26}], 0x4}}], 0x3, 0x54004) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000a40)={0x54, 0x0, 0x200, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x8, 0x25}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'gretap0\x00'}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}]]}, 0x54}, 0x1, 0x0, 0x0, 0x4044800}, 0x24000004) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0x4, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 4.190304419s ago: executing program 0 (id=4786): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @empty}, 0x1c) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) ptrace(0x4207, r0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) fcntl$getownex(r2, 0x10, 0x0) ioctl(0xffffffffffffffff, 0x8b22, &(0x7f0000000040)) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x100, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r3, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, 0x0) mount(0x0, 0x0, &(0x7f0000000080)='xfs\x00', 0x2208004, 0x0) syz_io_uring_setup(0x44cd, &(0x7f00000004c0)={0x0, 0x5331, 0x10100, 0x1000006, 0xfffefffe}, &(0x7f0000000100), 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r4, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r4, 0x4040534e, &(0x7f0000000140)={0x16f, @tick=0x7, 0x0, {0x0, 0x7}}) 3.04687654s ago: executing program 0 (id=4791): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) write$rfkill(r3, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="2000000010000100760100000475000000000000", @ANYRES32=r2, @ANYBLOB="9a"], 0x20}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0) close(r5) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) ioctl$SIOCSIFHWADDR(r5, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="060000000010"}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001000010000003a194618d96d6d2e8553", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) 3.04612096s ago: executing program 1 (id=4792): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f00006f2000/0x1000)=nil, 0x1000, 0x0, 0x12, 0xffffffffffffffff, 0xdc560000) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000008c0)='./file1\x00', 0x1008490, &(0x7f0000000a40)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000001500)="$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") quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000100)={0x3, 0x1, 0x246, 0x7fffffffffffffff, 0xfffffffffffffffa, 0xfffffffffffffffb, 0x10000000000000, 0x7fff, 0x9b}) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x1) ioctl$TCSETS(r5, 0x89f1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./bus\x00', 0x0, &(0x7f00000002c0)=ANY=[], 0x41, 0x2c8, &(0x7f0000000580)="$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") perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4db, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x4, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) pwritev2(r4, &(0x7f0000000940), 0x0, 0x7fff, 0xc92, 0xc) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r7, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) getsockopt$inet_sctp_SCTP_EVENTS(r7, 0x84, 0xb, &(0x7f0000000000), &(0x7f00000001c0)=0xe) perf_event_open(&(0x7f0000000140)={0x8, 0x80, 0x7, 0x0, 0x0, 0x23, 0x82, 0x0, 0x10042, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xf}, 0x9302, 0x0, 0x3, 0x0, 0x80000000b4c, 0x0, 0x7, 0x0, 0x0, 0x0, 0x10000000000006}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2) 2.977843458s ago: executing program 4 (id=4795): getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x10, 0x0, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r0, &(0x7f0000000600)=[{&(0x7f0000000240)="b0bd2415924136ae0d28fd9249fdc0505e2525abefb54d4a911d3d5eafd0d5dbf30dcc84a89eae038804cf2ad11271bd68ac803b1991c93185872fc6035caf5ade94162a22bbe6b02eb1197da555866ddfdb8cbd71e3e75633203be7ff", 0x5d}, {0x0}, {&(0x7f0000000000)="e584ef7bfd3ad10d236b7e7357233fe38c1d929a7e30a1e474b720", 0x1b}, {&(0x7f0000000440)="1dfbb09635b639c363cc7c8e2f91e57c3aee52c228846f2de54469cae591a2d0b3141ba7387b886c122a85a9e21ae0394b4b64b6e49a2dd5987b4538b4b9568e04fd1a8ebda94744d07fe92d03a2954eca9dd60508947ae9ac6d03e116d4dfa1e2121312f7e34e5ccb0dcc0f5668d047c8849c7175ade24201e1243b2ef44bf91ae17938962eb88089871689aee0595f0a30", 0x92}, {&(0x7f0000000500)="a39e690656698fab3e46b4f82fb42a16127ce9ab879c934de5bc62ab9b38cf9ae2d66b706cafef7ab03764c6", 0x2c}], 0x5) 2.976437717s ago: executing program 2 (id=4796): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000300000000000000000000f195"], 0x0}, 0x94) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181000b00000000010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0) 2.945360281s ago: executing program 4 (id=4798): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) connect$can_j1939(r0, &(0x7f0000000040)={0x1d, 0x0, 0xffbffffffffffffe, {0x0, 0xf1, 0x2}, 0x1}, 0x18) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001b00)=@newqdisc={0x50, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0x4}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x20, 0x2, {{0x0, 0x0, 0x0, 0x386561e9, 0x4}, [@TCA_NETEM_DELAY_DIST={0x4, 0xd}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8080) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000000c0)={0x0, @dev, @loopback}, &(0x7f0000000100)=0xc) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'sit0\x00', &(0x7f0000000680)={'gre0\x00', 0x0, 0x700, 0x7, 0x4, 0x1, {{0x3d, 0x4, 0x0, 0x2, 0xf4, 0x66, 0x0, 0x7, 0x0, 0x0, @private=0xa010101, @broadcast, {[@end, @timestamp={0x44, 0x4, 0xb5, 0x0, 0x7}, @ssrr={0x89, 0x1f, 0x10, [@local, @remote, @private=0xa010102, @multicast1, @empty, @private=0xa010101, @private=0xa010102]}, @timestamp_addr={0x44, 0x2c, 0x16, 0x1, 0xf, [{@empty}, {@private=0xa010100, 0x7}, {@remote, 0x3ff}, {@local, 0x4}, {@private=0xa010101, 0x5}]}, @timestamp_addr={0x44, 0x54, 0xbb, 0x1, 0x4, [{@multicast1, 0x2}, {@loopback, 0x200}, {@empty, 0x2f}, {@remote, 0xa}, {@rand_addr=0x64010100, 0x100}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xbb}, {@broadcast, 0x8}, {@remote, 0x2}, {@private=0xa010100, 0x100}, {@remote, 0x4}]}, @timestamp_prespec={0x44, 0x3c, 0xec, 0x3, 0x5, [{@broadcast, 0xfffffbff}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x80000001}, {@broadcast, 0x90b}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}, {@loopback, 0x4}, {@local, 0xe08}, {@broadcast, 0xffffffff}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000340)={'syztnl2\x00', &(0x7f00000001c0)={'syztnl0\x00', 0x0, 0x29, 0x9, 0xf, 0x8001, 0x0, @mcast1, @private0, 0x10, 0x1, 0x7f, 0x1fb944ae}}) r7 = socket$packet(0x11, 0x3, 0x300) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r9, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r8, 0x0, 0x0) sendto$packet(r7, &(0x7f0000000380)="44c394f305916c4516999da286dd", 0xe, 0x0, &(0x7f0000000340)={0x11, 0x3, r10, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000007c0)={'syztnl1\x00', &(0x7f0000000540)={'ip6tnl0\x00', 0x0, 0x2f, 0x3, 0xf1, 0xa, 0x66, @loopback, @private0, 0x7, 0x8, 0x2, 0x9}}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f00000009c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000980)={&(0x7f0000000800)=ANY=[@ANYBLOB="64010000", @ANYRES16=0x0, @ANYBLOB="040028bd7000fbdbdf25190000000c00018008000100", @ANYRES32=0x0, @ANYBLOB="14000180080003000000000008000300000000001c00018008000100", @ANYRES32, @ANYBLOB="080003000100000008000300010000002c00018008000100", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="080003000200000008000100", @ANYRES32=r6, @ANYBLOB="3c0001800800030003000000140002006e696376663000000000000000000000080003000200000014000200736974300000000000000000000000006400018008000300000000000800030000000000140002007465616d5f736c6176655f310000000008000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="080003000100000008000100", @ANYRES32=r10, @ANYBLOB="140002006e657464657673696d3000000000000008000100", @ANYRES32=r11, @ANYBLOB="480001801400020076657468305f6d616376000000140002007465616d5f736c6176655f310000000008000100000000", @ANYRES32=0x0, @ANYBLOB="14000200766574683100"/20], 0x164}, 0x1, 0x0, 0x0, 0x80000}, 0x1) recvmmsg(r0, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) 2.77410567s ago: executing program 2 (id=4799): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r0) sendmsg$DEVLINK_CMD_SB_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000fddbdf250b000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20040480}, 0x24000080) 2.689487814s ago: executing program 4 (id=4801): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @empty}, 0x1c) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) ptrace(0x4207, r0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) fcntl$getownex(r2, 0x10, 0x0) ioctl(0xffffffffffffffff, 0x8b22, &(0x7f0000000040)) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x100, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r3, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) mount(0x0, 0x0, &(0x7f0000000080)='xfs\x00', 0x2208004, 0x0) syz_io_uring_setup(0x44cd, &(0x7f00000004c0)={0x0, 0x5331, 0x10100, 0x1000006, 0xfffefffe}, &(0x7f0000000100), 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r4, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r4, 0x4040534e, &(0x7f0000000140)={0x16f, @tick=0x7, 0x0, {0x0, 0x7}}) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) 2.671940271s ago: executing program 3 (id=4802): r0 = socket(0x10, 0x3, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x497, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, &(0x7f00000012c0), 0x0, 0x1) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000001c0)={0x0, 0xfffffff8, 0xe, 0x4}, 0x10) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000050000"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r1}, 0x38) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0xe99, 0x0, 0x0, 0x0, 0xd56, 0x80}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000001100)={0x0, &(0x7f0000001180)=""/127, &(0x7f0000001200), &(0x7f0000000580), 0x6e, r1}, 0x38) sendmsg$nl_route(r0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x28, 0x68, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x4}, [@NHA_OIF={0x8}, @NHA_ID={0x8, 0x6, 0xffffffff}]}, 0x28}}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000000)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r2, 0x0) socket$packet(0x11, 0x3, 0x300) syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/user\x00') 2.600952818s ago: executing program 2 (id=4803): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000640)="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", 0x183}], 0x1}}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000a00)="449f6aed247d197178d7f0a82e1deae14825b22ab6c0ec1ca0c27cd21d8a48637cb781581aac75a2f848f285c99133f0435497bf6ae25625c64f82ecc0a7bb7b", 0x40}, {&(0x7f0000000cc0)="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", 0x17e}], 0x2}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000140)="a7040f7dff0a4fed838b52a29c46952dfe5aff84e281448c520c4b0808bdb32447fc2ba20baa8cc06a99aea4a4221e753e94bf215e02377273", 0x39}, {&(0x7f00000002c0)="d0f28c036a8b6293adbae6a1f4a98928a2efe08e665dac369f8749c5c15e9819ef3627a4cf2264401c991774440846e7b4146eca22035546a286d4571d16423012a6cc000f8a5fb3c2555ef48a1e7dc5a9c834f7dfdb9487e74566a7a9e2262d739ba78f19916bd9efee8442b70298a91798f9186dcd1a9e63316e7d18debc6fe4280aff3b3400849f8d659d4d5a", 0x8e}, {&(0x7f0000000380)="ba78a730565fdeecaa98beb39bb0a1e4a46f0808ce0b5b03542d54303591031ad9f9073b1dff296b9df9eca8a08c6bf80659214737633acdcd8a7f2cfbeeaf58ac4f24a24f362b8356f278b8bd35ea4252eaa3cd4d77c9732606a6ef391938556550996483853a6837696da775fb0b6dd87e1c4d21", 0x75}, {&(0x7f0000000400)="59233b75f9898a5e3d65e9a97a89e9e8e1e6bf764de774e88c9c89a1e91fc07edeb783ef957b", 0x26}], 0x4}}], 0x3, 0x54004) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000a40)={0x54, 0x0, 0x200, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x8, 0x25}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'gretap0\x00'}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}]]}, 0x54}, 0x1, 0x0, 0x0, 0x4044800}, 0x24000004) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0x4, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 2.475450695s ago: executing program 3 (id=4804): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{}], 0x1}, 0x0) 2.34038053s ago: executing program 3 (id=4805): pwritev(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000380)="5c6c4382729d97ae21edb23b8fb352fac0e39f685dfc1d4e83e34a3f6cedcff709787b28d838a7cbc3bdef02dc5678478de7a2e236edfbc1a2d79a1bef89fd8cca6db5612d0c821feea0426b7ba102004a45511e252c", 0x56}], 0x1, 0x2000, 0xfffffff8) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000003840)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)="fbe6bd8dfcdda5a210b8cfefbd66f459c7261b927d25d3cf74d2f7c97735eba47f606a290d18492592230700000000000000081fdbd921ed4db0e67c9d5ab1452445a1e0da5ac68b13f4afe2712eeaad350d07", 0x53}], 0x1}, 0x0) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0x12, &(0x7f00000008c0)=r4, 0x4) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b05d25a806c8c6394f90324fc601000050008000900053582c137153e37000c0180fc0b1d00f80b", 0x33fe0}], 0x1, 0x0, 0x0, 0x12}, 0x0) recvmsg$kcm(r1, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x800) 2.280295299s ago: executing program 3 (id=4806): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @empty}, 0x1c) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) ptrace(0x4207, r0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) fcntl$getownex(r2, 0x10, 0x0) ioctl(0xffffffffffffffff, 0x8b22, &(0x7f0000000040)) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x100, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r3, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, 0x0) mount(0x0, 0x0, &(0x7f0000000080)='xfs\x00', 0x2208004, 0x0) syz_io_uring_setup(0x44cd, &(0x7f00000004c0)={0x0, 0x5331, 0x10100, 0x1000006, 0xfffefffe}, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(0xffffffffffffffff, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f0000000140)={0x16f, @tick=0x7, 0x0, {0x0, 0x7}}) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) 2.025683512s ago: executing program 0 (id=4807): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32=r1, @ANYBLOB], 0x34}}, 0x8044) 1.991510436s ago: executing program 0 (id=4808): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000005c0)=@newqdisc={0x48, 0x24, 0x2, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xe, 0xc}, {0xfff3, 0x10}, {0xffe0, 0x5}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1, 0x3, 0xe83, 0x3, 0x0, 0x6, 0x80}}, {0x4}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000040}, 0x4000080) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000006c0)={0x4c, 0x0, 0x9, 0x5, 0x0, 0x0, {0x1}}, 0x4c}}, 0x800) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)={0x14, 0x0, 0x0, 0x0, 0x25dfdbfe}, 0x14}}, 0x0) sendto(0xffffffffffffffff, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x1c}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0xbe8}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 1.863927972s ago: executing program 0 (id=4809): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000240)={0x4, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x40, 0x0, 0x7, 0x0, 0x48a1, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$ARCH_GET_GS(0x1e, r3, 0x0, 0x1004) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r5, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000140)=0xff, 0xffffffffffffffff, 0x0, 0x3, 0x1}}, 0x20) setsockopt$inet_tcp_int(r4, 0x6, 0xa, &(0x7f00000000c0)=0x7b, 0x4) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x2000877d, &(0x7f0000000180)={0x2, 0x4e23, @empty}, 0x10) sendto$inet(r4, &(0x7f0000000700)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff959bcecc7a95425a3a07e758044ab4ea6f7c555d88fecf90b037511bf746bec66ba", 0x994b6e03113064ae, 0x0, 0x0, 0x0) recvmsg(r4, &(0x7f0000000100)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f0000000780)=""/4108, 0x437aba2}], 0x1, 0x0, 0xfffffdee, 0x407006}, 0x104) shutdown(0xffffffffffffffff, 0x1) 1.863271762s ago: executing program 1 (id=4810): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000300000000000000000000f195"], 0x0}, 0x94) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181000b00000000010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0) 1.701251892s ago: executing program 4 (id=4811): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xf0b, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, {0x2}, {0xffff, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x4084810}, 0x2000c805) r0 = socket(0x200000000000011, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockname$packet(r0, &(0x7f00000015c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000700)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x6558, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000054000147880000000000000007008209", @ANYRES32=r2, @ANYBLOB="20000100", @ANYRES32=r4, @ANYBLOB="00001000e000030000010001000000000000000008"], 0x38}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.185983108s ago: executing program 2 (id=4812): r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xfe123, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_config_ext={0xd, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r3) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x66137, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) io_cancel(0x0, 0x0, 0x0) 1.184967677s ago: executing program 4 (id=4813): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) mbind(&(0x7f0000bdf000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f00006f2000/0x1000)=nil, 0x1000, 0x0, 0x12, 0xffffffffffffffff, 0xdc560000) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000008c0)='./file1\x00', 0x1008490, &(0x7f0000000a40)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000001500)="$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") quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x1) ioctl$TCSETS(r5, 0x89f1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./bus\x00', 0x0, &(0x7f00000002c0)=ANY=[], 0x41, 0x2c8, &(0x7f0000000580)="$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") perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4db, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x4, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) pwritev2(r4, &(0x7f0000000940), 0x0, 0x7fff, 0xc92, 0xc) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r7, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000001280)={'#! ', '', [], 0xa, "02ce00b26cd16126940cfac2"}, 0x10) getsockopt$inet_sctp_SCTP_EVENTS(r7, 0x84, 0xb, &(0x7f0000000000), &(0x7f00000001c0)=0xe) 1.09023669s ago: executing program 2 (id=4814): r0 = syz_io_uring_setup(0x3c3, &(0x7f0000001480)={0x0, 0x124a, 0x80, 0x0, 0x1f}, &(0x7f0000001080)=0x0, &(0x7f0000000180)=0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r3, 0xa3d8, &(0x7f0000000340)=[{&(0x7f00000000c0)='\x009z', 0x3}], 0x1, 0x0, 0x1, {0x2}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r0, 0x47f8, 0x0, 0x0, 0x0, 0x0) 1.087604429s ago: executing program 3 (id=4815): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) mbind(&(0x7f0000bdf000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f00006f2000/0x1000)=nil, 0x1000, 0x0, 0x12, 0xffffffffffffffff, 0xdc560000) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000008c0)='./file1\x00', 0x1008490, &(0x7f0000000a40)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000001500)="$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") quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000100)={0x3, 0x1, 0x246, 0x7fffffffffffffff, 0xfffffffffffffffa, 0xfffffffffffffffb, 0x10000000000000, 0x7fff, 0x9b}) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x1) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./bus\x00', 0x0, &(0x7f00000002c0)=ANY=[], 0x41, 0x2c8, &(0x7f0000000580)="$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") perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4db, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x4, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) pwritev2(r4, &(0x7f0000000940), 0x0, 0x7fff, 0xc92, 0xc) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r6, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) getsockopt$inet_sctp_SCTP_EVENTS(r6, 0x84, 0xb, &(0x7f0000000000), &(0x7f00000001c0)=0xe) 1.025548288s ago: executing program 2 (id=4816): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x9400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0xb, 0x7}, 0x8591, 0xa88, 0x4, 0x5, 0x0, 0x40, 0xffff, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfefffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$inet6(0xa, 0x2, 0x3a) sendto$inet6(r0, &(0x7f0000000200)="800034ca00000000", 0x8, 0x2004c080, &(0x7f0000000180)={0xa, 0xfffd, 0xc9, @mcast2}, 0x1a) ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000000240)={{0x3, 0xe8b5c71a5eb6f040, 0x5, 0xb7a4, 0x1, 0xffff}, 0x341, [0xc, 0x40, 0xcd7, 0x4, 0x6, 0x0, 0x80000000, 0x7, 0x9, 0x7a18fde9, 0x9, 0xf12, 0x4, 0x3, 0x378, 0x9, 0x4, 0x0, 0x1, 0xffff06bd, 0x0, 0xf, 0x1a, 0xf2, 0x10, 0x9, 0x8, 0x10001, 0x401, 0x80000000, 0x401, 0x3ca5, 0x1, 0x0, 0xff, 0x40000004, 0x4, 0x3, 0x0, 0xaa80, 0x40000000, 0x80000000, 0x7fff, 0x7, 0x5, 0xa, 0x0, 0x10000, 0x405, 0x8, 0xffff, 0x91ba, 0x7, 0x9, 0x9, 0xb6, 0x24, 0xcb, 0x180, 0x7f, 0x5, 0x311, 0x66d1, 0xfffffffc, 0x9, 0xb6eb, 0xc74, 0x77, 0x1, 0xc0000000, 0x5cb5, 0xfffffffd, 0x401, 0xedf4, 0x4, 0x1000, 0x6, 0xfffffffe, 0x8001, 0xc1, 0x1, 0x8, 0x1, 0x32, 0x98, 0x7f, 0xffff, 0x401, 0x2, 0x2, 0x4680, 0x9a7f, 0xe665, 0x3c6e, 0x3, 0x7, 0x80, 0x4b, 0x9, 0x2, 0xb, 0x6, 0x4fa4, 0x80000000, 0x1, 0xb, 0x0, 0xfffffffa, 0x3, 0x8001, 0xfd, 0x101, 0x4, 0x10, 0xa, 0x1b, 0x202, 0x7ff, 0x9, 0x80000000, 0xffff, 0x9, 0x3, 0x6, 0x2, 0xffffff87, 0xe, 0xd, 0x5, 0x8, 0x9, 0x7, 0x6, 0x400, 0x8, 0xff2, 0x6, 0x0, 0x6, 0x0, 0x8, 0x1, 0x3, 0x664, 0x4, 0x9, 0x9, 0x2, 0x8, 0xfffffffd, 0xeb6, 0x0, 0x9, 0x10000, 0x1, 0x9, 0x9, 0xc6, 0x1, 0x4, 0x7ff, 0xe6, 0x6, 0x10001, 0x9, 0x68, 0x7, 0x201, 0x5, 0x3, 0x9a3f, 0x400000, 0x0, 0x80000067, 0xffffff7e, 0x7, 0x10000000, 0x10001, 0x7, 0x3, 0x10, 0x10a, 0xa, 0x40, 0x18, 0x80, 0xb5f8, 0x8bc, 0x3, 0x8000103, 0x5, 0xfffffffc, 0x4, 0x18000, 0x10, 0x1000, 0x288c, 0x1ffe, 0x73ee, 0x1, 0x5, 0x9, 0x7fffffff, 0x73, 0x6, 0x8, 0x6, 0x400, 0x40, 0x0, 0x0, 0x0, 0x546c, 0x981, 0x5aa, 0x7fff, 0x7, 0x4, 0x7, 0xc4c, 0x45e3, 0x5, 0x7, 0x3, 0x5, 0x3, 0x0, 0x1, 0x2, 0xffffffff, 0x4, 0x200000ce, 0x6, 0x0, 0x1, 0xa, 0x3, 0x0, 0x9, 0x9, 0x37c, 0x10001, 0x8, 0x1, 0x5, 0x2, 0x6, 0x4, 0x6, 0x1, 0x8, 0x6, 0xfffffffa, 0x5, 0x0, 0x9, 0x5, 0x2, 0x7, 0x3, 0xffffff1b, 0x9, 0x2, 0xd, 0x34ea, 0x10000, 0x0, 0x80002001, 0x8, 0x8000, 0x10004, 0x10, 0x8, 0x9, 0x5, 0x1, 0x6, 0x10001, 0x0, 0x5, 0x10000, 0x4, 0xffff, 0x2, 0x89, 0x2, 0x3, 0x1, 0x73, 0x3, 0x9, 0x4, 0x1, 0x9, 0x1, 0x8, 0x0, 0x81, 0x80000004, 0x9, 0x9, 0x0, 0x4, 0x10000004, 0x0, 0x1, 0xce5fb90f, 0x5, 0x4, 0x10001, 0xf, 0x9, 0x100, 0x44, 0x59b, 0x7, 0x8, 0x9, 0x3, 0x2, 0x4, 0x6, 0x0, 0x8, 0x40, 0xd3, 0x7, 0xffffffff, 0x89aa, 0x8, 0x0, 0xf0ce, 0x2, 0x1, 0x0, 0x2, 0xc6, 0x1000, 0x800001, 0x937, 0xa, 0x6, 0x3, 0xffffffff, 0x5, 0x9, 0x5, 0xffffffff, 0xbe, 0x1, 0x7, 0xe, 0xffffffff, 0x0, 0x3d6, 0x0, 0xae, 0x6, 0x1, 0xfffffeff, 0x4, 0x5, 0x7fff, 0x103, 0x7, 0x6, 0x709, 0x2, 0x49, 0x10, 0xfffffff7, 0xfffff772, 0x8, 0x80000000, 0x3, 0x7, 0xa9c, 0x9, 0x8, 0x1, 0x2, 0x8d, 0x1000, 0x69f, 0x1ff, 0x9, 0x10, 0x3, 0x10000, 0xffff0000, 0xf, 0x1, 0x3, 0xffffa9b4, 0x1, 0x4, 0x5, 0x9, 0x4b5f, 0x6, 0x7fffffff, 0xffffffff, 0x1, 0x80000000, 0xb, 0x0, 0x88d, 0x1, 0x7, 0x8, 0x1, 0x89, 0x6, 0x818a, 0x10, 0x8, 0x10, 0xfffffffc, 0xfffff001, 0xa, 0xfffffff7, 0x8000005, 0x4, 0xffd, 0x9, 0x10, 0xfffffffd, 0x4, 0xc2, 0x400, 0x7, 0x0, 0x80000000, 0xd, 0x2, 0x1, 0x0, 0x20000003, 0xb6, 0x101, 0x401, 0x2, 0x7, 0xc, 0x6623258, 0xf2, 0x741, 0xfffffffc, 0x9, 0xffffa0a6, 0xc, 0x11, 0x2, 0x8, 0x9, 0x1, 0x7f, 0x98, 0x9, 0xb, 0x800, 0x4, 0x9, 0x5, 0x7, 0x7, 0x8, 0xfe, 0x7f, 0x9, 0x4, 0x6, 0x20080000, 0x2, 0x8000, 0x0, 0x0, 0x1000, 0xb, 0x0, 0x7, 0x8000000, 0x0, 0xfff, 0x8101, 0x4, 0x0, 0x9, 0xc, 0x5, 0xffe, 0x100, 0xffff, 0x1, 0x401, 0xf0, 0x0, 0xfffff53d, 0x9, 0x2, 0x6, 0x0, 0x4, 0x4b15, 0x10000, 0x1, 0x6, 0x9, 0xd, 0x8, 0x4, 0xfffffe01, 0x1, 0x6, 0x0, 0x2, 0x10001, 0x1, 0x7, 0xe4ce, 0x5, 0x9, 0xffffc487, 0x204, 0x10002, 0x1000, 0x7, 0x6, 0x6, 0x8, 0xfffffe00, 0x1, 0x1, 0x0, 0xe, 0x2, 0x2, 0x4, 0x0, 0xb66d, 0x3, 0x1000, 0x1eb4bce6, 0x10, 0x8, 0x1, 0x5, 0x1, 0x5, 0x9, 0x1000, 0x7, 0x62f2f805, 0x5, 0x3, 0xffffffff, 0x2, 0x7f, 0x6, 0xd, 0x40, 0x5, 0x2, 0xa, 0x5, 0x6, 0x80000000, 0x25, 0x8, 0x7, 0x7, 0x1, 0x5, 0x9, 0x6708, 0x10001, 0x0, 0x80, 0x8, 0x6, 0x0, 0xa95a, 0x0, 0x5, 0x2, 0x2, 0x4, 0xfff9, 0x80000001, 0x5, 0x1, 0x9, 0x0, 0xb7, 0x3, 0xff, 0x9, 0x0, 0x80, 0xfea5, 0x7fff, 0x7, 0x7, 0x7, 0x7485, 0x197, 0x8, 0x0, 0x5, 0x10, 0x3, 0xe, 0x8, 0x1000, 0x4, 0x7, 0x382d, 0x459, 0xcad, 0x9, 0x0, 0x2, 0x119, 0x6, 0x20000a4, 0xe0, 0xfffffffb, 0x5, 0xffffffff, 0x2, 0x4007, 0xa05a, 0x0, 0x0, 0x3, 0x35, 0x8, 0x1, 0x2, 0x30, 0xb, 0x101, 0x2, 0x9, 0x3, 0x7, 0x8, 0x8, 0x1, 0x2, 0x4, 0x15294b70, 0x3, 0x3, 0x2, 0x1, 0xf, 0x9, 0x1, 0x80000000, 0x9, 0x8001, 0x5, 0x800081, 0x1, 0x2, 0x3fd, 0x1df, 0x6, 0x6, 0xfffffffa, 0x81, 0x9, 0x2, 0x9, 0x1, 0x9, 0x7, 0x2c1, 0x9e95, 0x0, 0xfffffedd, 0x30c8, 0x2, 0x38a0, 0x7b, 0x0, 0x8, 0x4, 0x6, 0x9, 0x0, 0x8, 0x9, 0x8, 0x1ff, 0x7fff, 0x3, 0x9, 0x8, 0x2b, 0x200006, 0x4, 0x7, 0x2, 0x4, 0xbfb, 0x7, 0x405, 0x6, 0x4, 0x91, 0x9, 0x8, 0x3, 0x6ae574d2, 0x6, 0xfffffe00, 0x1000, 0x5, 0x92, 0xffffffff, 0x7fffffff, 0xd7, 0x8001, 0x905, 0x3, 0x6, 0xfffffb31, 0xb, 0x4, 0x7, 0x8, 0x1, 0x6, 0x1, 0xff, 0x103, 0x7, 0x3, 0x6, 0x80000001, 0x0, 0x100a, 0x7fffffff, 0x7fff, 0x2, 0xfffffff8, 0x2, 0x9af, 0x10001, 0x8, 0x4, 0x8, 0x6, 0x7742348d, 0x5, 0x5, 0x1f, 0x40, 0x0, 0x6, 0xffffffff, 0x7, 0x7, 0x8, 0x17f, 0x6, 0x2, 0x1, 0x6, 0x14827783, 0xb, 0xe, 0x5, 0x1, 0xfe7, 0xfffffffc, 0x8, 0x7ff, 0x3e9, 0x0, 0x3, 0x2000, 0xa, 0x3, 0x9, 0x80000001, 0x81, 0x8, 0x14, 0x8, 0x4, 0x7f, 0xd, 0xf28c, 0x7, 0x6, 0x4, 0x7fffffff, 0xffff, 0x7fffffff, 0xc9, 0x2, 0xfffffffe, 0x924, 0x499, 0x100, 0x1, 0x5, 0xffff351b, 0x7, 0xfffffffb, 0x3, 0x9, 0x2, 0x7, 0x4, 0x4, 0x4, 0xff, 0xee, 0x2, 0x4, 0x8, 0x9f, 0x7, 0x3, 0x9, 0xc9, 0x1, 0x1, 0x1, 0xfffffff7, 0x0, 0x6, 0x5, 0x6, 0x400, 0x51, 0x7, 0xefb, 0x200000b8, 0x1, 0x5, 0xfffffff7, 0x7, 0x7, 0x4, 0x6330, 0xff, 0x6, 0xea, 0xbb2d, 0xfff, 0x7, 0x6, 0x0, 0x6, 0xffff, 0xfffffffa, 0x3, 0x0, 0x1, 0x6, 0xfffffc00, 0x5, 0x7, 0x64c822e3, 0x9, 0x6, 0x80, 0x6, 0xfff, 0x0, 0xa7b, 0x62cc, 0xfffffff7, 0x7, 0x40, 0xa, 0x9b, 0x3, 0xe, 0xf01, 0x1, 0x3, 0x40, 0x3, 0x4, 0x5, 0x5, 0x7ff, 0x5, 0x8, 0x5, 0x3, 0x8, 0x2, 0x80000001, 0x54, 0x80400, 0x1, 0x8, 0xa, 0x9, 0x10000c0, 0x3, 0x72, 0x80, 0x1000, 0x7, 0x800, 0x6, 0xd19, 0x3, 0x93c, 0x6, 0x20000000, 0x0, 0xe, 0x5, 0x3, 0xfffffffa, 0xa01, 0xf3, 0xffffff00, 0x8, 0xe, 0x3, 0x3ff, 0x5, 0x2, 0x6, 0xa3, 0xffff, 0xfffffff9, 0x9, 0x5, 0x62, 0x2, 0x1, 0xfffffffa, 0x2, 0x2, 0x9, 0x7, 0x0, 0x7, 0x8, 0x10000, 0x42, 0xaa1, 0x7, 0x2b, 0x6, 0x10, 0x5, 0x200, 0x9, 0x6, 0x3, 0x8, 0x10, 0x4, 0x6, 0x633, 0xf05, 0x401, 0x101, 0x200, 0x8, 0x7ff, 0x0, 0x40, 0x1, 0x10000, 0x9, 0x40, 0x9, 0x0, 0x7f, 0x8, 0x6, 0xe, 0x3, 0x80000001, 0x0, 0x8, 0x8, 0x7, 0xde, 0x6, 0x89, 0x0, 0x100, 0x1, 0x9, 0x6, 0x400, 0x1, 0x0, 0x200, 0xe9ab, 0x3, 0x8000, 0x13, 0x2, 0x2, 0x43, 0x3ff, 0x0, 0x7, 0xc, 0x401, 0x6, 0x7, 0xa, 0xf, 0xf39d, 0x71, 0xfff, 0x7, 0x8]}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000000feffff720a00fef8ffffff71a400fe000000007110100000000000e5000600000000004704000001ed030407030000060000001d440000000000006b0a20fe0000000072030000000a0000e500f9ff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616276fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a26048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdec86f9b1eb93d491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f806694d461b76a58d88cf0f520310a1e80dc18cde9ad662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a090f3b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf71126233cb8791c3c"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x483, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x1000, 0x2, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) syz_open_procfs(0x0, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0xb) bpf$MAP_CREATE(0xc00000000000000, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000040)=0x85) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r3, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00'}) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r4, 0x6, 0x19, 0x0, 0x0) bind$inet(r4, 0x0, 0x0) sendmmsg$inet(r4, 0x0, 0x0, 0x20008000) bpf$PROG_LOAD(0x5, 0x0, 0x0) kexec_load(0x100, 0x1, &(0x7f0000000800)=[{0x0, 0x0, 0x5, 0x869b}], 0x1) 635.213537ms ago: executing program 0 (id=4817): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r2, 0x29, 0x4e, &(0x7f0000000040)=0x9, 0x4) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0x1a, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x3736, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8001}, 0x94) r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r3, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mknodat$loop(r3, &(0x7f0000000080)='./file0\x00', 0x40, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x100) socket$xdp(0x2c, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2141, 0x59) close(0x3) r4 = socket(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e23, 0x2003, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xc}}, 0x2}, 0x1c) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') sendfile(r4, r5, 0x0, 0xffffffff) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x200, 0xed84}, 0x1022e0, 0x10004, 0x0, 0x1, 0x8, 0x800, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) close(0x3) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x0) 57.99982ms ago: executing program 3 (id=4818): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=ANY=[@ANYBLOB="700000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r2], 0x70}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000001c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x0, 0x6}, {0x7, 0x6}, {0x3}}}, 0x24}}, 0x0) 22.772734ms ago: executing program 1 (id=4819): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000005c0)=@newqdisc={0x48, 0x24, 0x2, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xe, 0xc}, {0xfff3, 0x10}, {0xffe0, 0x5}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1, 0x3, 0xe83, 0x3, 0x0, 0x6, 0x80}}, {0x4}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000040}, 0x4000080) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000006c0)={0x4c, 0x0, 0x9, 0x5, 0x0, 0x0, {0x1}}, 0x4c}}, 0x800) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)={0x14, 0x0, 0x0, 0x0, 0x25dfdbfe}, 0x14}}, 0x0) sendto(0xffffffffffffffff, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x1c}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0xbe8}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 0s ago: executing program 4 (id=4820): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xc, 0x8001, 0x0, 0x9, 0x4f, 0x8, 0xfa11, 0x1}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32=0x1, @ANYRESHEX, @ANYRES32=0x0, @ANYRES32, @ANYRES8], 0x50) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8b0b, &(0x7f0000000200)={'wlan1\x00', @random="9ffff7070600"}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r3) mkdirat$cgroup(r3, &(0x7f0000000dc0)='syz0\x00', 0x1ff) socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) write$cgroup_freezer_state(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000002) kernel console output (not intermixed with test programs): 8-01-19 (0x7fffffff) [ 939.348271][ T122] vhci_hcd vhci_hcd.3: stop threads [ 939.353624][ T122] vhci_hcd vhci_hcd.3: release socket [ 939.359047][ T122] vhci_hcd vhci_hcd.3: disconnect device [ 939.364904][ T122] vhci_hcd vhci_hcd.3: stop threads [ 939.370125][ T122] vhci_hcd vhci_hcd.3: release socket [ 939.375671][ T122] vhci_hcd vhci_hcd.3: disconnect device [ 939.710607][ T3365] usb 3-1: enqueue for inactive port 0 [ 939.716543][ T3365] usb 3-1: enqueue for inactive port 0 [ 939.801434][ T3365] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 940.039474][T15549] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 940.049006][T16356] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 940.322884][T20138] loop0: detected capacity change from 0 to 512 [ 940.394676][T20138] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 940.407369][T20138] ext4 filesystem being mounted at /189/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 940.948685][T20146] loop2: detected capacity change from 0 to 512 [ 941.002674][T20146] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 941.016417][T15549] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 941.039161][T20146] ext4 filesystem being mounted at /158/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 941.086940][ T28] audit: type=1400 audit(1772899197.718:16697): avc: denied { getopt } for pid=20135 comm="syz.4.3980" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 941.179163][T20155] loop3: detected capacity change from 0 to 512 [ 941.783472][T15373] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 941.846782][T20155] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 941.891005][T20155] ext4 filesystem being mounted at /226/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 942.069557][T20173] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3984'. [ 942.076829][T20175] 9p: Bad value for 'rfdno' [ 942.187525][T20175] loop1: detected capacity change from 0 to 2048 [ 942.238481][T20173] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3984'. [ 942.276142][T20175] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 942.367560][T20183] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(16) [ 942.374205][T20183] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 942.416995][T20183] vhci_hcd vhci_hcd.0: Device attached [ 942.450539][T20183] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(18) [ 942.457225][T20183] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 942.510597][T20183] vhci_hcd vhci_hcd.0: Device attached [ 942.530673][T20188] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(21) [ 942.537314][T20188] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 942.550594][T20188] vhci_hcd vhci_hcd.0: Device attached [ 942.623620][T20183] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(20) [ 942.630373][T20183] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 942.646779][T20183] vhci_hcd vhci_hcd.0: Device attached [ 942.660618][ T10] usb 9-1: new low-speed USB device number 10 using vhci_hcd [ 942.670766][T20183] vhci_hcd vhci_hcd.0: pdev(4) rhport(4) sockfd(24) [ 942.677422][T20183] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 942.705918][T20183] vhci_hcd vhci_hcd.0: Device attached [ 942.712702][T20178] loop0: detected capacity change from 0 to 128 [ 942.740847][T20188] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 942.785193][T20183] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 942.832102][T20183] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 942.880705][T20194] vhci_hcd: connection closed [ 942.880848][T20189] vhci_hcd: connection closed [ 942.881200][T20184] vhci_hcd: connection reset by peer [ 942.885666][T20191] vhci_hcd: connection closed [ 942.890349][T20186] vhci_hcd: connection closed [ 942.900594][T11609] vhci_hcd vhci_hcd.4: stop threads [ 942.912300][T14891] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 942.921378][T11609] vhci_hcd vhci_hcd.4: release socket [ 942.921403][T11609] vhci_hcd vhci_hcd.4: disconnect device [ 942.921605][T11609] vhci_hcd vhci_hcd.4: stop threads [ 942.939512][T11609] vhci_hcd vhci_hcd.4: release socket [ 942.959447][T11609] vhci_hcd vhci_hcd.4: disconnect device [ 942.973240][T11609] vhci_hcd vhci_hcd.4: stop threads [ 942.978546][T11609] vhci_hcd vhci_hcd.4: release socket [ 942.999173][T11609] vhci_hcd vhci_hcd.4: disconnect device [ 943.009439][T11609] vhci_hcd vhci_hcd.4: stop threads [ 943.019332][T11609] vhci_hcd vhci_hcd.4: release socket [ 943.029466][T11609] vhci_hcd vhci_hcd.4: disconnect device [ 943.041996][T11609] vhci_hcd vhci_hcd.4: stop threads [ 943.051361][T11609] vhci_hcd vhci_hcd.4: release socket [ 943.068964][T11609] vhci_hcd vhci_hcd.4: disconnect device [ 943.161509][T15373] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 944.202816][T11780] usb 7-1: enqueue for inactive port 0 [ 944.208344][T11780] usb 7-1: enqueue for inactive port 0 [ 944.215775][T16356] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 944.280553][T11780] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 945.816889][ T28] audit: type=1400 audit(1772899202.338:16698): avc: denied { write } for pid=20231 comm="syz.1.3998" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 945.817697][T20234] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3999'. [ 945.840781][ T28] audit: type=1400 audit(1772899202.448:16699): avc: denied { read } for pid=20231 comm="syz.1.3998" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 945.856635][T20222] loop3: detected capacity change from 0 to 512 [ 945.875457][ T28] audit: type=1400 audit(1772899202.448:16700): avc: denied { bind } for pid=20233 comm="syz.0.3999" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 945.875486][ T28] audit: type=1400 audit(1772899202.448:16701): avc: denied { name_bind } for pid=20233 comm="syz.0.3999" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 945.875510][ T28] audit: type=1400 audit(1772899202.448:16702): avc: denied { node_bind } for pid=20233 comm="syz.0.3999" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 946.208640][T20246] loop0: detected capacity change from 0 to 512 [ 946.305482][T20222] EXT4-fs (loop3): 1 orphan inode deleted [ 946.326648][T20222] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 946.705801][T20246] EXT4-fs (loop0): 1 orphan inode deleted [ 946.784349][T20246] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 947.406374][T14891] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 947.519341][T20263] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(16) [ 947.519769][T20264] loop3: detected capacity change from 0 to 512 [ 947.526156][T20263] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 947.526336][T20263] vhci_hcd vhci_hcd.0: Device attached [ 947.552267][T20264] EXT4-fs (loop3): 1 truncate cleaned up [ 947.573273][T20268] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(19) [ 947.579949][T20268] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 947.597611][T20264] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 947.646900][T20268] vhci_hcd vhci_hcd.0: Device attached [ 947.674833][T20263] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(18) [ 947.681502][T20263] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 947.710672][ T10] usb 9-1: enqueue for inactive port 0 [ 947.716393][ T10] usb 9-1: enqueue for inactive port 0 [ 947.730780][T20263] vhci_hcd vhci_hcd.0: Device attached [ 947.748796][T20268] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(21) [ 947.755556][T20268] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 947.780623][T11969] usb 3-1: new low-speed USB device number 9 using vhci_hcd [ 947.788984][T20263] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(25) [ 947.796285][T20263] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 947.813861][ T10] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 947.881198][T20263] vhci_hcd vhci_hcd.0: Device attached [ 947.933871][T20263] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 947.952542][T15549] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 947.975285][T20268] vhci_hcd vhci_hcd.0: Device attached [ 947.981422][T20280] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 948.003695][T20263] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 948.016534][T20274] vhci_hcd: connection closed [ 948.016592][T20276] vhci_hcd: connection closed [ 948.016851][T20265] vhci_hcd: connection reset by peer [ 948.021469][ T122] vhci_hcd vhci_hcd.1: stop threads [ 948.039083][T20271] vhci_hcd: connection closed [ 948.039235][T20269] vhci_hcd: connection closed [ 948.047126][T20287] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4011'. [ 948.049505][ T122] vhci_hcd vhci_hcd.1: release socket [ 948.066737][ T12] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm kworker/u8:0: bg 0: block 465: padding at end of block bitmap is not set [ 948.083608][ T12] EXT4-fs (loop3): Delayed block allocation failed for inode 13 at logical offset 2158284 with max blocks 4 with error 28 [ 948.097251][ T122] vhci_hcd vhci_hcd.1: disconnect device [ 948.103208][ T122] vhci_hcd vhci_hcd.1: stop threads [ 948.112785][ T12] EXT4-fs (loop3): This should not happen!! Data will be lost [ 948.112785][ T12] [ 948.122758][ T122] vhci_hcd vhci_hcd.1: release socket [ 948.128208][ T12] EXT4-fs (loop3): Total free blocks count 0 [ 948.135233][ T122] vhci_hcd vhci_hcd.1: disconnect device [ 948.142916][ T12] EXT4-fs (loop3): Free/Dirty block details [ 948.149113][ T122] vhci_hcd vhci_hcd.1: stop threads [ 948.154491][ T12] EXT4-fs (loop3): free_blocks=0 [ 948.161528][ T122] vhci_hcd vhci_hcd.1: release socket [ 948.167013][ T12] EXT4-fs (loop3): dirty_blocks=4 [ 948.172239][ T122] vhci_hcd vhci_hcd.1: disconnect device [ 948.176260][T20289] loop4: detected capacity change from 0 to 512 [ 948.178085][ T12] EXT4-fs (loop3): Block reservation details [ 948.198350][ T122] vhci_hcd vhci_hcd.1: stop threads [ 948.205495][T20289] SELinux: policydb table sizes (0,0) do not match mine (6,7) [ 948.208906][ T12] EXT4-fs (loop3): i_reserved_data_blocks=4 [ 948.219151][T20292] netem: change failed [ 948.219924][ T122] vhci_hcd vhci_hcd.1: release socket [ 948.226501][T20289] SELinux: failed to load policy [ 948.230042][ T122] vhci_hcd vhci_hcd.1: disconnect device [ 948.261781][ T122] vhci_hcd vhci_hcd.1: stop threads [ 948.274926][ T122] vhci_hcd vhci_hcd.1: release socket [ 948.298635][T14891] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 948.308846][ T122] vhci_hcd vhci_hcd.1: disconnect device [ 948.336536][T20297] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4015'. [ 948.590335][T20311] loop0: detected capacity change from 0 to 128 [ 949.160743][T20311] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 950.187880][ T12] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 950.304358][T20332] loop1: detected capacity change from 0 to 512 [ 950.394465][T20332] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 950.407331][T20332] ext4 filesystem being mounted at /200/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 950.513871][T20329] loop0: detected capacity change from 0 to 512 [ 950.625298][T20329] EXT4-fs (loop0): 1 orphan inode deleted [ 950.644392][T20339] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4022'. [ 950.674862][T20329] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 950.982554][T15373] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 950.998520][T20342] loop3: detected capacity change from 0 to 512 [ 951.050336][T20347] loop1: detected capacity change from 0 to 512 [ 951.086209][T20348] loop4: detected capacity change from 0 to 512 [ 951.099267][T20347] EXT4-fs (loop1): 1 truncate cleaned up [ 951.107227][T20347] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 951.194422][T20348] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 951.207366][T20348] ext4 filesystem being mounted at /206/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 951.583948][T20342] EXT4-fs (loop3): 1 truncate cleaned up [ 951.604153][T20342] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 951.653222][T15549] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 951.744806][ T30] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm kworker/u8:1: bg 0: block 465: padding at end of block bitmap is not set [ 951.760599][ T30] EXT4-fs (loop1): Delayed block allocation failed for inode 13 at logical offset 2158284 with max blocks 4 with error 28 [ 951.809870][ T30] EXT4-fs (loop1): This should not happen!! Data will be lost [ 951.809870][ T30] [ 951.820156][ T30] EXT4-fs (loop1): Total free blocks count 0 [ 951.827043][ T30] EXT4-fs (loop1): Free/Dirty block details [ 951.836322][T20361] loop2: detected capacity change from 0 to 512 [ 951.843580][ T30] EXT4-fs (loop1): free_blocks=0 [ 951.848635][ T30] EXT4-fs (loop1): dirty_blocks=4 [ 951.871440][ T30] EXT4-fs (loop1): Block reservation details [ 951.877847][ T30] EXT4-fs (loop1): i_reserved_data_blocks=4 [ 951.995876][T14891] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 952.006174][T16001] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 952.024490][T20361] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 952.037236][T20361] ext4 filesystem being mounted at /163/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 952.154416][T15373] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 952.219756][T20373] loop3: detected capacity change from 0 to 512 [ 952.255664][T20373] SELinux: policydb table sizes (0,0) do not match mine (6,7) [ 952.294241][T20373] SELinux: failed to load policy [ 952.414285][T16356] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 952.543895][T20377] loop4: detected capacity change from 0 to 512 [ 952.737087][T20394] loop1: detected capacity change from 0 to 512 [ 952.828362][T20394] EXT4-fs (loop1): 1 truncate cleaned up [ 952.836648][T20377] EXT4-fs (loop4): 1 orphan inode deleted [ 952.841131][T11969] usb 3-1: enqueue for inactive port 0 [ 952.859566][T20377] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 952.873822][T11969] usb 3-1: enqueue for inactive port 0 [ 952.898871][T20394] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 952.955572][T11969] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 952.984146][T15373] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 953.012333][T20407] loop2: detected capacity change from 0 to 8192 [ 953.028509][T20405] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 953.311830][T20422] loop2: detected capacity change from 0 to 512 [ 953.564572][T20422] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 953.577301][T20422] ext4 filesystem being mounted at /168/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 953.913807][T20429] loop3: detected capacity change from 0 to 512 [ 954.232283][T16356] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 954.259156][T20429] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 954.272179][T20429] ext4 filesystem being mounted at /241/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 954.414846][T20437] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4050'. [ 954.494752][T16001] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 954.538054][T20441] EXT4-fs: inline encryption not supported [ 954.589912][T20441] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 954.602973][T14891] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 954.635756][T20441] EXT4-fs error (device loop4): mb_free_blocks:2047: group 0, inode 15: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 954.661165][T20441] EXT4-fs (loop4): Remounting filesystem read-only [ 954.681084][T20448] FAULT_INJECTION: forcing a failure. [ 954.681084][T20448] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 954.829479][T20448] CPU: 1 UID: 0 PID: 20448 Comm: syz.3.4054 Tainted: G W syzkaller #0 PREEMPT(full) [ 954.829540][T20448] Tainted: [W]=WARN [ 954.829549][T20448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 954.829564][T20448] Call Trace: [ 954.829573][T20448] [ 954.829583][T20448] __dump_stack+0x1d/0x30 [ 954.829615][T20448] dump_stack_lvl+0x95/0xd0 [ 954.829709][T20448] dump_stack+0x15/0x1b [ 954.829735][T20448] should_fail_ex+0x263/0x280 [ 954.829760][T20448] should_fail+0xb/0x20 [ 954.829780][T20448] should_fail_usercopy+0x1a/0x20 [ 954.829841][T20448] _copy_from_user+0x1c/0xb0 [ 954.829882][T20448] do_sock_getsockopt+0xf1/0x210 [ 954.829928][T20448] __x64_sys_getsockopt+0x11d/0x1a0 [ 954.830006][T20448] x64_sys_call+0x2dcf/0x3020 [ 954.830031][T20448] do_syscall_64+0x12c/0x370 [ 954.830055][T20448] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 954.830080][T20448] RIP: 0033:0x7f421dccc799 [ 954.830100][T20448] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 954.830133][T20448] RSP: 002b:00007f421c727028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 954.830159][T20448] RAX: ffffffffffffffda RBX: 00007f421df45fa0 RCX: 00007f421dccc799 [ 954.830176][T20448] RDX: 000000000000006f RSI: 0000000000000084 RDI: 0000000000000003 [ 954.830192][T20448] RBP: 00007f421c727090 R08: 0000200000000240 R09: 0000000000000000 [ 954.830207][T20448] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000001 [ 954.830249][T20448] R13: 00007f421df46038 R14: 00007f421df45fa0 R15: 00007ffee8f80f78 [ 954.830269][T20448] [ 955.001828][T16001] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 955.110065][T20450] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 955.641155][ T122] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 955.936922][T20467] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 956.088806][T20475] set_capacity_and_notify: 3 callbacks suppressed [ 956.088827][T20475] loop1: detected capacity change from 0 to 512 [ 956.163932][T20475] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 956.219346][T20475] ext4 filesystem being mounted at /208/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 956.320069][T20473] loop3: detected capacity change from 0 to 512 [ 956.644653][T20486] loop0: detected capacity change from 0 to 512 [ 956.666714][T20485] loop2: detected capacity change from 0 to 512 [ 956.783612][T20486] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 956.796334][T20486] ext4 filesystem being mounted at /211/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 956.979512][T20473] EXT4-fs (loop3): 1 orphan inode deleted [ 957.000918][T20473] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 957.319080][T20485] EXT4-fs (loop2): 1 orphan inode deleted [ 957.378601][T20485] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 957.380390][T15549] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 957.478588][T14891] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 957.856231][T15373] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 957.970075][T20506] loop3: detected capacity change from 0 to 8192 [ 958.117181][T20523] ip6t_srh: unknown srh match flags 4000 [ 958.281888][T20516] loop1: detected capacity change from 0 to 512 [ 958.328519][T20527] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 958.345987][T16356] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 958.358102][T20516] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 958.395547][T20516] ext4 filesystem being mounted at /213/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 958.527240][T20543] loop0: detected capacity change from 0 to 8192 [ 958.547495][T20543] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 958.573413][T20543] FAULT_INJECTION: forcing a failure. [ 958.573413][T20543] name failslab, interval 1, probability 0, space 0, times 0 [ 958.598500][T20543] CPU: 0 UID: 0 PID: 20543 Comm: syz.0.4083 Tainted: G W syzkaller #0 PREEMPT(full) [ 958.598535][T20543] Tainted: [W]=WARN [ 958.598593][T20543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 958.598605][T20543] Call Trace: [ 958.598612][T20543] [ 958.598621][T20543] __dump_stack+0x1d/0x30 [ 958.598647][T20543] dump_stack_lvl+0x95/0xd0 [ 958.598668][T20543] dump_stack+0x15/0x1b [ 958.598722][T20543] should_fail_ex+0x263/0x280 [ 958.598745][T20543] should_failslab+0x8c/0xb0 [ 958.598767][T20543] kmem_cache_alloc_noprof+0x66/0x400 [ 958.598788][T20543] ? do_getname+0x2e/0x1c0 [ 958.598873][T20543] do_getname+0x2e/0x1c0 [ 958.598897][T20543] getname_flags+0x1d/0x30 [ 958.598921][T20543] do_sys_openat2+0x60/0x130 [ 958.598949][T20543] __x64_sys_openat+0xf2/0x120 [ 958.598993][T20543] x64_sys_call+0x1e39/0x3020 [ 958.599023][T20543] do_syscall_64+0x12c/0x370 [ 958.599044][T20543] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 958.599109][T20543] RIP: 0033:0x7ff3ee8fc799 [ 958.599126][T20543] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 958.599146][T20543] RSP: 002b:00007ff3ed357028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 958.599169][T20543] RAX: ffffffffffffffda RBX: 00007ff3eeb75fa0 RCX: 00007ff3ee8fc799 [ 958.599184][T20543] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 958.599197][T20543] RBP: 00007ff3ed357090 R08: 0000000000000000 R09: 0000000000000000 [ 958.599234][T20543] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 958.599248][T20543] R13: 00007ff3eeb76038 R14: 00007ff3eeb75fa0 R15: 00007ffeb03dcbf8 [ 958.599267][T20543] [ 959.112275][T15373] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 959.440942][T20556] loop0: detected capacity change from 0 to 8192 [ 959.491281][T20558] loop3: detected capacity change from 0 to 8192 [ 959.506291][T20558] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 959.540848][T20561] program syz.2.4089 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 959.548659][ T28] audit: type=1400 audit(1772899216.178:16703): avc: denied { append } for pid=20560 comm="syz.2.4089" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 959.642082][T20566] loop2: detected capacity change from 0 to 512 [ 959.666333][ T28] audit: type=1400 audit(1772899216.298:16704): avc: denied { associate } for pid=20565 comm="syz.2.4091" name="pfkey" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 959.729765][T16202] kernel read not supported for file [fscontext] (pid: 16202 comm: kworker/0:3) [ 959.815374][T20571] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 959.864643][T20581] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4097'. [ 959.942425][T20583] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 959.984413][T20583] ext4 filesystem being mounted at /214/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 960.080893][T20589] vfat: Unknown parameter '00000000000000000000000`’NX#öEeOnŽßøá©Hï°Ô¹©ÔÃ]¬³Á§ê%‡Õ‘ew' [ 960.099418][T16356] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 960.300335][T16001] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 960.677017][T20597] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4101'. [ 960.757161][T20602] FAULT_INJECTION: forcing a failure. [ 960.757161][T20602] name failslab, interval 1, probability 0, space 0, times 0 [ 960.785709][T20602] CPU: 1 UID: 0 PID: 20602 Comm: syz.2.4103 Tainted: G W syzkaller #0 PREEMPT(full) [ 960.785747][T20602] Tainted: [W]=WARN [ 960.785755][T20602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 960.785769][T20602] Call Trace: [ 960.785835][T20602] [ 960.785845][T20602] __dump_stack+0x1d/0x30 [ 960.785876][T20602] dump_stack_lvl+0x95/0xd0 [ 960.785899][T20602] dump_stack+0x15/0x1b [ 960.785977][T20602] should_fail_ex+0x263/0x280 [ 960.785999][T20602] should_failslab+0x8c/0xb0 [ 960.786021][T20602] __kvmalloc_node_noprof+0x155/0x650 [ 960.786052][T20602] ? traverse+0xa2/0x3a0 [ 960.786135][T20602] traverse+0xa2/0x3a0 [ 960.786205][T20602] seq_read_iter+0x85f/0x940 [ 960.786231][T20602] ? _parse_integer_limit+0x170/0x190 [ 960.786252][T20602] seq_read+0x279/0x2c0 [ 960.786334][T20602] ? __pfx_seq_read+0x10/0x10 [ 960.786360][T20602] proc_reg_read+0x128/0x1c0 [ 960.786381][T20602] ? __pfx_proc_reg_read+0x10/0x10 [ 960.786477][T20602] vfs_readv+0x432/0x6e0 [ 960.786509][T20602] __x64_sys_preadv+0xfd/0x1c0 [ 960.786532][T20602] x64_sys_call+0x2915/0x3020 [ 960.786561][T20602] do_syscall_64+0x12c/0x370 [ 960.786612][T20602] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 960.786692][T20602] RIP: 0033:0x7f1daf55c799 [ 960.786707][T20602] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 960.786752][T20602] RSP: 002b:00007f1dadfaf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 960.786776][T20602] RAX: ffffffffffffffda RBX: 00007f1daf7d5fa0 RCX: 00007f1daf55c799 [ 960.786830][T20602] RDX: 0000000000000001 RSI: 00002000000001c0 RDI: 0000000000000005 [ 960.786879][T20602] RBP: 00007f1dadfaf090 R08: 0000000020000000 R09: 0000000000000000 [ 960.786892][T20602] R10: 0000000000004007 R11: 0000000000000246 R12: 0000000000000001 [ 960.786905][T20602] R13: 00007f1daf7d6038 R14: 00007f1daf7d5fa0 R15: 00007ffd704479f8 [ 960.786922][T20602] [ 961.007695][T20608] EXT4-fs: inline encryption not supported [ 961.043830][T20608] EXT4-fs error (device loop3): mb_free_blocks:2047: group 0, inode 15: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 961.059031][T20608] EXT4-fs (loop3): Remounting filesystem read-only [ 961.201140][ T10] kernel read not supported for file [fscontext] (pid: 10 comm: kworker/0:1) [ 961.281739][T20625] set_capacity_and_notify: 6 callbacks suppressed [ 961.281760][T20625] loop3: detected capacity change from 0 to 2048 [ 961.302983][T20623] loop2: detected capacity change from 0 to 512 [ 961.840328][T20635] loop0: detected capacity change from 0 to 512 [ 961.885877][T20623] EXT4-fs (loop2): 1 truncate cleaned up [ 961.940029][T20635] ext4 filesystem being mounted at /222/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 962.073947][T20647] FAULT_INJECTION: forcing a failure. [ 962.073947][T20647] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 962.087450][T20647] CPU: 0 UID: 0 PID: 20647 Comm: syz.4.4116 Tainted: G W syzkaller #0 PREEMPT(full) [ 962.087595][T20647] Tainted: [W]=WARN [ 962.087603][T20647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 962.087617][T20647] Call Trace: [ 962.087625][T20647] [ 962.087661][T20647] __dump_stack+0x1d/0x30 [ 962.087763][T20647] dump_stack_lvl+0x95/0xd0 [ 962.087859][T20647] dump_stack+0x15/0x1b [ 962.087938][T20647] should_fail_ex+0x263/0x280 [ 962.087964][T20647] should_fail+0xb/0x20 [ 962.087986][T20647] should_fail_usercopy+0x1a/0x20 [ 962.088021][T20647] _copy_from_user+0x1c/0xb0 [ 962.088100][T20647] __sys_sendto+0x1ca/0x490 [ 962.088135][T20647] __x64_sys_sendto+0x76/0x90 [ 962.088161][T20647] x64_sys_call+0x2d35/0x3020 [ 962.088237][T20647] do_syscall_64+0x12c/0x370 [ 962.088340][T20647] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 962.088365][T20647] RIP: 0033:0x7f59c31dc799 [ 962.088445][T20647] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 962.088465][T20647] RSP: 002b:00007f59c1c37028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 962.088489][T20647] RAX: ffffffffffffffda RBX: 00007f59c3455fa0 RCX: 00007f59c31dc799 [ 962.088505][T20647] RDX: 000000000000ffeb RSI: 0000200000000100 RDI: 0000000000000003 [ 962.088519][T20647] RBP: 00007f59c1c37090 R08: 0000200000001100 R09: 0000000000000010 [ 962.088578][T20647] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 962.088592][T20647] R13: 00007f59c3456038 R14: 00007f59c3455fa0 R15: 00007ffe592663b8 [ 962.088612][T20647] [ 962.386330][T20660] loop3: detected capacity change from 0 to 1024 [ 962.413177][T20660] EXT4-fs: inline encryption not supported [ 962.433640][T20657] loop2: detected capacity change from 0 to 8192 [ 962.652009][T20660] EXT4-fs error (device loop3): mb_free_blocks:2047: group 0, inode 15: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 962.725517][T20660] EXT4-fs (loop3): Remounting filesystem read-only [ 962.871533][T20677] wireguard0: entered promiscuous mode [ 962.877352][T20677] wireguard0: entered allmulticast mode [ 962.998851][T20683] loop1: detected capacity change from 0 to 512 [ 963.292341][T20682] loop3: detected capacity change from 0 to 512 [ 963.801166][T20688] loop0: detected capacity change from 0 to 128 [ 963.824476][T20688] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 964.015121][T20683] ext4 filesystem being mounted at /221/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 964.316902][T11609] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 964.337185][T20682] EXT4-fs (loop3): 1 truncate cleaned up [ 964.619482][T20704] loop2: detected capacity change from 0 to 8192 [ 964.655625][T20705] loop0: detected capacity change from 0 to 512 [ 965.819535][T20702] SELinux: policydb magic number 0x1 does not match expected magic number 0xf97cff8c [ 965.923664][T20723] EXT4-fs mount: 14 callbacks suppressed [ 965.923681][T20723] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 965.942243][T20723] ext4 filesystem being mounted at /260/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 965.962163][T20726] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 965.974797][T20726] ext4 filesystem being mounted at /225/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 965.993839][T20702] SELinux: failed to load policy [ 966.125924][T16202] kernel read not supported for file [fscontext] (pid: 16202 comm: kworker/0:3) [ 966.187223][T14891] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 966.224696][T20731] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 966.251594][T20731] ext4 filesystem being mounted at /222/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 966.367196][T15373] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 966.370992][T20728] EXT4-fs (loop2): 1 truncate cleaned up [ 966.381592][T20735] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 966.398064][T20728] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 966.518842][T20748] set_capacity_and_notify: 5 callbacks suppressed [ 966.518866][T20748] loop3: detected capacity change from 0 to 8192 [ 966.596771][T16356] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 966.627316][T15549] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 966.925008][T20768] loop0: detected capacity change from 0 to 512 [ 967.052284][T20768] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 967.065325][T20768] ext4 filesystem being mounted at /229/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 967.277227][T20769] can: request_module (can-proto-0) failed. [ 967.472515][T20778] FAULT_INJECTION: forcing a failure. [ 967.472515][T20778] name failslab, interval 1, probability 0, space 0, times 0 [ 967.485549][T20778] CPU: 1 UID: 0 PID: 20778 Comm: syz.3.4152 Tainted: G W syzkaller #0 PREEMPT(full) [ 967.485623][T20778] Tainted: [W]=WARN [ 967.485632][T20778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 967.485647][T20778] Call Trace: [ 967.485656][T20778] [ 967.485666][T20778] __dump_stack+0x1d/0x30 [ 967.485729][T20778] dump_stack_lvl+0x95/0xd0 [ 967.485798][T20778] dump_stack+0x15/0x1b [ 967.485819][T20778] should_fail_ex+0x263/0x280 [ 967.485841][T20778] should_failslab+0x8c/0xb0 [ 967.485878][T20778] kmem_cache_alloc_noprof+0x66/0x400 [ 967.485904][T20778] ? create_new_namespaces+0x3c/0x440 [ 967.486008][T20778] create_new_namespaces+0x3c/0x440 [ 967.486059][T20778] unshare_nsproxy_namespaces+0xe6/0x120 [ 967.486087][T20778] ksys_unshare+0x3f2/0x6f0 [ 967.486111][T20778] __x64_sys_unshare+0x1f/0x30 [ 967.486134][T20778] x64_sys_call+0x1cef/0x3020 [ 967.486227][T20778] do_syscall_64+0x12c/0x370 [ 967.486246][T20778] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 967.486266][T20778] RIP: 0033:0x7f421dccc799 [ 967.486282][T20778] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 967.486320][T20778] RSP: 002b:00007f421c706028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 967.486406][T20778] RAX: ffffffffffffffda RBX: 00007f421df46090 RCX: 00007f421dccc799 [ 967.486419][T20778] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 967.486431][T20778] RBP: 00007f421c706090 R08: 0000000000000000 R09: 0000000000000000 [ 967.486443][T20778] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 967.486471][T20778] R13: 00007f421df46128 R14: 00007f421df46090 R15: 00007ffee8f80f78 [ 967.486488][T20778] [ 967.486719][T20769] loop2: detected capacity change from 0 to 1024 [ 967.747417][T20769] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a055c11c, mo2=0002] [ 967.763757][T15549] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 967.773503][T20769] System zones: 0-1, 3-36 [ 967.788136][T20769] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 967.838897][T16001] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 967.892270][T16356] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 967.899912][T20784] loop4: detected capacity change from 0 to 164 [ 967.917933][T20784] Unable to read rock-ridge attributes [ 967.941498][T20784] Unable to read rock-ridge attributes [ 967.956153][T20784] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 968.145452][T20793] loop2: detected capacity change from 0 to 512 [ 968.162752][T16202] kernel read not supported for file [fscontext] (pid: 16202 comm: kworker/0:3) [ 968.182732][T20797] loop1: detected capacity change from 0 to 2048 [ 968.219133][T20797] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 968.266370][T20795] loop3: detected capacity change from 0 to 8192 [ 968.275480][T20793] EXT4-fs (loop2): 1 truncate cleaned up [ 968.291539][T20793] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 968.546348][T15373] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 969.098074][T11609] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm kworker/u8:4: bg 0: block 465: padding at end of block bitmap is not set [ 969.150916][T11609] EXT4-fs (loop2): Delayed block allocation failed for inode 13 at logical offset 2158284 with max blocks 4 with error 28 [ 969.165258][T11609] EXT4-fs (loop2): This should not happen!! Data will be lost [ 969.165258][T11609] [ 969.181237][T11609] EXT4-fs (loop2): Total free blocks count 0 [ 969.197196][ T28] audit: type=1400 audit(1772899225.828:16705): avc: denied { bind } for pid=20811 comm="syz.1.4163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 969.312090][T11609] EXT4-fs (loop2): Free/Dirty block details [ 969.318052][T11609] EXT4-fs (loop2): free_blocks=0 [ 969.330896][T11609] EXT4-fs (loop2): dirty_blocks=4 [ 969.336568][T11609] EXT4-fs (loop2): Block reservation details [ 969.393105][T11609] EXT4-fs (loop2): i_reserved_data_blocks=4 [ 969.448907][T16356] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 969.522139][T20813] loop0: detected capacity change from 0 to 256 [ 969.612900][T20824] loop3: detected capacity change from 0 to 512 [ 969.812983][T20838] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4170'. [ 969.824167][T20824] EXT4-fs (loop3): 1 orphan inode deleted [ 969.855855][T20824] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 969.888901][T20838] veth3: entered allmulticast mode [ 969.916353][T20838] 9p: Bad value for 'rfdno' [ 969.971832][T20840] loop2: detected capacity change from 0 to 512 [ 970.306008][T20851] xt_hashlimit: size too large, truncated to 1048576 [ 970.342546][T20840] EXT4-fs (loop2): 1 truncate cleaned up [ 970.423221][T20840] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 970.552198][T20856] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4175'. [ 970.726911][T20861] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4175'. [ 970.984322][T11609] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm kworker/u8:4: bg 0: block 465: padding at end of block bitmap is not set [ 971.055622][T11609] EXT4-fs (loop2): Delayed block allocation failed for inode 13 at logical offset 2158284 with max blocks 4 with error 117 [ 971.069193][T11609] EXT4-fs (loop2): This should not happen!! Data will be lost [ 971.069193][T11609] [ 971.162000][T20865] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 971.176119][T20865] ext4 filesystem being mounted at /233/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 971.506610][T16356] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 971.862352][T15373] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 971.938212][T14891] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 972.770577][T20892] set_capacity_and_notify: 1 callbacks suppressed [ 972.770727][T20892] loop3: detected capacity change from 0 to 128 [ 973.611228][T20892] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 973.628298][T20893] loop4: detected capacity change from 0 to 128 [ 973.706274][T20893] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 973.754683][T20879] loop1: detected capacity change from 0 to 256 [ 973.951425][ T50] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 974.014895][T20903] loop1: detected capacity change from 0 to 512 [ 974.015410][T20898] loop0: detected capacity change from 0 to 512 [ 974.110614][ T12] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 974.134795][T20901] loop2: detected capacity change from 0 to 256 [ 974.282934][T20918] loop3: detected capacity change from 0 to 256 [ 974.317918][T20903] EXT4-fs (loop1): 1 orphan inode deleted [ 974.406566][T20903] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 974.545649][T20924] loop3: detected capacity change from 0 to 512 [ 974.554432][T20898] EXT4-fs (loop0): 1 orphan inode deleted [ 974.595604][T20898] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 974.762043][T20926] loop4: detected capacity change from 0 to 256 [ 974.837365][T20924] EXT4-fs (loop3): 1 truncate cleaned up [ 974.981343][T20924] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 975.179656][T15373] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 975.206350][T15549] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 975.265538][T20944] netlink: 207496 bytes leftover after parsing attributes in process `syz.0.4205'. [ 975.276649][T20946] loop1: detected capacity change from 0 to 512 [ 975.297289][ T50] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm kworker/u8:3: bg 0: block 465: padding at end of block bitmap is not set [ 975.317125][ T50] EXT4-fs (loop3): Delayed block allocation failed for inode 13 at logical offset 2158284 with max blocks 4 with error 117 [ 975.330597][ T50] EXT4-fs (loop3): This should not happen!! Data will be lost [ 975.330597][ T50] [ 975.345006][T14891] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 975.360599][T20946] Quota error (device loop1): do_check_range: Getting block 196613 out of range 1-5 [ 975.370421][T20946] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 975.379927][T20946] EXT4-fs error (device loop1): ext4_acquire_dquot:7001: comm syz.1.4204: Failed to acquire dquot type 1 [ 975.394871][T20946] loop1: lost filesystem error report for type 5 error -117 [ 975.395098][T20946] Quota error (device loop1): do_check_range: Getting block 196613 out of range 1-5 [ 975.397047][T20953] FAULT_INJECTION: forcing a failure. [ 975.397047][T20953] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 975.402451][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 975.402470][ C0] EXT4-fs (loop1): last error at time 1772899232: ext4_acquire_dquot:7001 [ 975.402503][T20946] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 975.402525][T20946] EXT4-fs error (device loop1): ext4_acquire_dquot:7001: comm syz.1.4204: Failed to acquire dquot type 1 [ 975.402546][T20946] loop1: lost filesystem error report for type 5 error -117 [ 975.427143][T20953] CPU: 1 UID: 0 PID: 20953 Comm: syz.3.4206 Tainted: G W syzkaller #0 PREEMPT(full) [ 975.427233][T20953] Tainted: [W]=WARN [ 975.427240][T20953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 975.427253][T20953] Call Trace: [ 975.427267][T20953] [ 975.427275][T20953] __dump_stack+0x1d/0x30 [ 975.427304][T20953] dump_stack_lvl+0x95/0xd0 [ 975.427354][T20953] dump_stack+0x15/0x1b [ 975.427376][T20953] should_fail_ex+0x263/0x280 [ 975.427402][T20953] should_fail+0xb/0x20 [ 975.427422][T20953] should_fail_usercopy+0x1a/0x20 [ 975.427519][T20953] strncpy_from_user+0x27/0x250 [ 975.427548][T20953] ? kmem_cache_alloc_noprof+0x2f9/0x400 [ 975.427602][T20953] do_getname+0x59/0x1c0 [ 975.427627][T20953] getname_flags+0x1d/0x30 [ 975.427649][T20953] path_setxattrat+0x20f/0x310 [ 975.427795][T20953] __x64_sys_setxattr+0x6e/0x90 [ 975.427836][T20953] x64_sys_call+0x2ee2/0x3020 [ 975.427862][T20953] do_syscall_64+0x12c/0x370 [ 975.427885][T20953] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 975.427976][T20953] RIP: 0033:0x7f421dccc799 [ 975.427994][T20953] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 975.428019][T20953] RSP: 002b:00007f421c727028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 975.428042][T20953] RAX: ffffffffffffffda RBX: 00007f421df45fa0 RCX: 00007f421dccc799 [ 975.428069][T20953] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000200000000140 [ 975.428101][T20953] RBP: 00007f421c727090 R08: 0000000000000000 R09: 0000000000000000 [ 975.428114][T20953] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 975.428128][T20953] R13: 00007f421df46038 R14: 00007f421df45fa0 R15: 00007ffee8f80f78 [ 975.428147][T20953] [ 975.666919][T20946] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.4204: bg 0: block 248: padding at end of block bitmap is not set [ 975.681805][T20946] loop1: lost filesystem error report for type 5 error -117 [ 975.694444][T20946] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 975.734178][T20946] loop1: lost filesystem error report for type 5 error -117 [ 975.736257][T20946] Quota error (device loop1): do_check_range: Getting block 196613 out of range 1-5 [ 975.754165][T20946] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 975.764281][T20946] EXT4-fs error (device loop1): ext4_acquire_dquot:7001: comm syz.1.4204: Failed to acquire dquot type 1 [ 975.776070][T20946] loop1: lost filesystem error report for type 5 error -117 [ 975.776440][T20946] EXT4-fs (loop1): 1 orphan inode deleted [ 975.790848][T20946] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 975.804589][T20946] ext4 filesystem being mounted at /236/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 975.855966][T15373] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 976.168840][T20979] netlink: 207496 bytes leftover after parsing attributes in process `syz.1.4217'. [ 977.963959][T21015] set_capacity_and_notify: 2 callbacks suppressed [ 977.964045][T21015] loop2: detected capacity change from 0 to 512 [ 978.401124][T21006] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 978.438150][T21006] ext4 filesystem being mounted at /237/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 979.151590][T21015] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 979.164615][T21015] ext4 filesystem being mounted at /207/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 979.352056][T16001] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 979.477542][T16356] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 980.058468][T21039] netlink: 207496 bytes leftover after parsing attributes in process `syz.2.4234'. [ 980.396403][T21056] loop4: detected capacity change from 0 to 512 [ 980.668809][T21071] netlink: 207496 bytes leftover after parsing attributes in process `syz.0.4247'. [ 980.745534][T21077] loop0: detected capacity change from 0 to 128 [ 980.777037][T21077] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 981.442394][T21098] netlink: 207496 bytes leftover after parsing attributes in process `syz.2.4258'. [ 981.465313][T21099] loop1: detected capacity change from 0 to 512 [ 981.547958][T21099] EXT4-fs (loop1): 1 orphan inode deleted [ 981.591728][T21099] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 981.946207][T21117] loop4: detected capacity change from 0 to 1024 [ 981.952921][T21117] EXT4-fs: inline encryption not supported [ 982.082966][T21117] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 982.425765][T21117] EXT4-fs error (device loop4): mb_free_blocks:2047: group 0, inode 15: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 982.466986][T21117] EXT4-fs (loop4): Remounting filesystem read-only [ 982.547839][T16001] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 982.665076][T21127] loop2: detected capacity change from 0 to 512 [ 982.702716][T15373] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 982.715733][T21133] netlink: 207496 bytes leftover after parsing attributes in process `syz.3.4270'. [ 982.777513][T21139] loop3: detected capacity change from 0 to 128 [ 982.834987][T21147] FAULT_INJECTION: forcing a failure. [ 982.834987][T21147] name failslab, interval 1, probability 0, space 0, times 0 [ 982.862461][T21147] CPU: 1 UID: 0 PID: 21147 Comm: syz.3.4274 Tainted: G W syzkaller #0 PREEMPT(full) [ 982.862502][T21147] Tainted: [W]=WARN [ 982.862511][T21147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 982.862526][T21147] Call Trace: [ 982.862534][T21147] [ 982.862542][T21147] __dump_stack+0x1d/0x30 [ 982.862572][T21147] dump_stack_lvl+0x95/0xd0 [ 982.862653][T21147] dump_stack+0x15/0x1b [ 982.862698][T21147] should_fail_ex+0x263/0x280 [ 982.862724][T21147] should_failslab+0x8c/0xb0 [ 982.862746][T21147] kmem_cache_alloc_noprof+0x66/0x400 [ 982.862771][T21147] ? alloc_empty_file+0x76/0x200 [ 982.862801][T21147] alloc_empty_file+0x76/0x200 [ 982.862894][T21147] alloc_file_pseudo+0xf6/0x190 [ 982.862970][T21147] __shmem_file_setup+0x1dd/0x210 [ 982.863002][T21147] shmem_file_setup+0x3b/0x50 [ 982.863036][T21147] memfd_alloc_file+0x4e/0x300 [ 982.863063][T21147] __se_sys_memfd_create+0x2e1/0x3b0 [ 982.863175][T21147] __x64_sys_memfd_create+0x31/0x40 [ 982.863209][T21147] x64_sys_call+0x1f22/0x3020 [ 982.863294][T21147] do_syscall_64+0x12c/0x370 [ 982.863320][T21147] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 982.863382][T21147] RIP: 0033:0x7f421dccc799 [ 982.863401][T21147] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 982.863492][T21147] RSP: 002b:00007f421c726e08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 982.863518][T21147] RAX: ffffffffffffffda RBX: 00000000000004f4 RCX: 00007f421dccc799 [ 982.863554][T21147] RDX: 00007f421c726ee0 RSI: 0000000000000000 RDI: 00007f421dd62db9 [ 982.863568][T21147] RBP: 0000200000000740 R08: 00000000ffffffff R09: 0000000000000000 [ 982.863599][T21147] R10: 0000000000000001 R11: 0000000000000202 R12: 0000200000000080 [ 982.863611][T21147] R13: 00007f421c726ee0 R14: 00007f421c726ea0 R15: 00002000000000c0 [ 982.863632][T21147] [ 983.073247][T21127] EXT4-fs (loop2): 1 truncate cleaned up [ 983.094664][T21127] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 983.880697][T21164] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4278'. [ 983.977546][T21162] loop0: detected capacity change from 0 to 512 [ 984.172094][T21162] EXT4-fs (loop0): 1 truncate cleaned up [ 984.198404][T21162] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 984.628948][ T2125] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm kworker/u8:7: bg 0: block 465: padding at end of block bitmap is not set [ 984.671738][T21166] loop1: detected capacity change from 0 to 512 [ 984.691028][ T2125] EXT4-fs (loop2): Delayed block allocation failed for inode 13 at logical offset 2158284 with max blocks 4 with error 28 [ 984.795863][ T2125] EXT4-fs (loop2): This should not happen!! Data will be lost [ 984.795863][ T2125] [ 984.823318][ T2125] EXT4-fs (loop2): Total free blocks count 0 [ 984.824188][ T122] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm kworker/u8:6: bg 0: block 465: padding at end of block bitmap is not set [ 984.830016][ T2125] EXT4-fs (loop2): Free/Dirty block details [ 984.845042][ T122] EXT4-fs (loop0): Delayed block allocation failed for inode 13 at logical offset 2158284 with max blocks 4 with error 117 [ 984.865315][ T122] EXT4-fs (loop0): This should not happen!! Data will be lost [ 984.865315][ T122] [ 984.954489][T15549] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 984.962416][T21177] netlink: 207496 bytes leftover after parsing attributes in process `syz.3.4283'. [ 985.025209][ T2125] EXT4-fs (loop2): free_blocks=0 [ 985.027228][T21166] EXT4-fs (loop1): 1 orphan inode deleted [ 985.032094][T21181] FAULT_INJECTION: forcing a failure. [ 985.032094][T21181] name failslab, interval 1, probability 0, space 0, times 0 [ 985.032130][T21181] CPU: 1 UID: 0 PID: 21181 Comm: syz.3.4284 Tainted: G W syzkaller #0 PREEMPT(full) [ 985.032217][T21181] Tainted: [W]=WARN [ 985.032227][T21181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 985.032240][T21181] Call Trace: [ 985.032320][T21181] [ 985.032331][T21181] __dump_stack+0x1d/0x30 [ 985.032429][T21181] dump_stack_lvl+0x95/0xd0 [ 985.032453][T21181] dump_stack+0x15/0x1b [ 985.032475][T21181] should_fail_ex+0x263/0x280 [ 985.032518][T21181] should_failslab+0x8c/0xb0 [ 985.032636][T21181] __kmalloc_noprof+0xb8/0x4e0 [ 985.032659][T21181] ? ethnl_default_set_doit+0xbd/0x680 [ 985.032690][T21181] ? __nla_parse+0x40/0x60 [ 985.032759][T21181] ethnl_default_set_doit+0xbd/0x680 [ 985.032863][T21181] ? genl_family_rcv_msg_attrs_parse+0x13b/0x190 [ 985.032912][T21181] ? genl_family_rcv_msg_attrs_parse+0x184/0x190 [ 985.033013][T21181] genl_family_rcv_msg_doit+0x187/0x1f0 [ 985.033039][T21181] genl_rcv_msg+0x432/0x470 [ 985.033060][T21181] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 985.033106][T21181] netlink_rcv_skb+0x123/0x220 [ 985.033189][T21181] ? __pfx_genl_rcv_msg+0x10/0x10 [ 985.033214][T21181] genl_rcv+0x28/0x40 [ 985.033232][T21181] netlink_unicast+0x5c0/0x690 [ 985.033259][T21181] netlink_sendmsg+0x5c8/0x6f0 [ 985.033306][T21181] ? __pfx_netlink_sendmsg+0x10/0x10 [ 985.033334][T21181] ____sys_sendmsg+0x563/0x5b0 [ 985.033424][T21181] ___sys_sendmsg+0x195/0x1e0 [ 985.033461][T21181] __x64_sys_sendmsg+0xd4/0x160 [ 985.033491][T21181] x64_sys_call+0x194c/0x3020 [ 985.033544][T21181] do_syscall_64+0x12c/0x370 [ 985.033566][T21181] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 985.033589][T21181] RIP: 0033:0x7f421dccc799 [ 985.033680][T21181] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 985.033699][T21181] RSP: 002b:00007f421c727028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 985.033722][T21181] RAX: ffffffffffffffda RBX: 00007f421df45fa0 RCX: 00007f421dccc799 [ 985.033738][T21181] RDX: 0000000004044890 RSI: 00002000000002c0 RDI: 0000000000000003 [ 985.033752][T21181] RBP: 00007f421c727090 R08: 0000000000000000 R09: 0000000000000000 [ 985.033838][T21181] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 985.033851][T21181] R13: 00007f421df46038 R14: 00007f421df45fa0 R15: 00007ffee8f80f78 [ 985.033871][T21181] [ 985.050471][ T2125] EXT4-fs (loop2): dirty_blocks=4 [ 985.069681][T21166] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 985.126442][ T2125] EXT4-fs (loop2): Block reservation details [ 985.330256][ T2125] EXT4-fs (loop2): i_reserved_data_blocks=4 [ 985.341604][T16356] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 985.787547][T21187] loop2: detected capacity change from 0 to 512 [ 985.898744][T21187] EXT4-fs (loop2): 1 orphan inode deleted [ 985.928459][T21187] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 986.070768][T21205] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4289'. [ 986.427400][T21215] loop0: detected capacity change from 0 to 512 [ 986.443163][T21219] netlink: 207496 bytes leftover after parsing attributes in process `syz.3.4294'. [ 986.587528][T15373] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 986.716767][T21215] EXT4-fs (loop0): 1 truncate cleaned up [ 987.041668][T21215] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 987.115673][T21225] loop1: detected capacity change from 0 to 256 [ 987.127285][T16356] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 987.467053][T21012] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 465: padding at end of block bitmap is not set [ 987.558916][ T4572] EXT4-fs (loop0): Delayed block allocation failed for inode 13 at logical offset 2158284 with max blocks 4 with error 28 [ 987.579759][ T4572] EXT4-fs (loop0): This should not happen!! Data will be lost [ 987.579759][ T4572] [ 987.629531][T21236] loop3: detected capacity change from 0 to 512 [ 987.638493][ T4572] EXT4-fs (loop0): Total free blocks count 0 [ 987.648802][T21236] EXT4-fs: mb_optimize_scan should be set to 0 or 1. [ 987.680175][ T4572] EXT4-fs (loop0): Free/Dirty block details [ 987.709875][ T4572] EXT4-fs (loop0): free_blocks=0 [ 987.735470][ T4572] EXT4-fs (loop0): dirty_blocks=4 [ 987.735490][ T4572] EXT4-fs (loop0): Block reservation details [ 987.735557][ T4572] EXT4-fs (loop0): i_reserved_data_blocks=4 [ 987.752764][T15549] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 988.013241][T21244] loop0: detected capacity change from 0 to 512 [ 988.493916][T21251] loop1: detected capacity change from 0 to 512 [ 988.511759][T21244] EXT4-fs (loop0): 1 truncate cleaned up [ 988.558746][T21244] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 988.752711][T21270] 9p: Bad value for 'rfdno' [ 988.882387][T21261] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 465: padding at end of block bitmap is not set [ 988.904395][T21276] 9p: Bad value for 'rfdno' [ 989.055119][T21270] loop2: detected capacity change from 0 to 2048 [ 989.104291][T21276] loop4: detected capacity change from 0 to 2048 [ 989.117550][ T122] EXT4-fs (loop0): Delayed block allocation failed for inode 13 at logical offset 2158284 with max blocks 4 with error 28 [ 989.179602][ T122] EXT4-fs (loop0): This should not happen!! Data will be lost [ 989.179602][ T122] [ 989.205773][T21251] EXT4-fs (loop1): 1 orphan inode deleted [ 989.211121][T21270] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 989.217832][ T122] EXT4-fs (loop0): Total free blocks count 0 [ 989.231002][ T122] EXT4-fs (loop0): Free/Dirty block details [ 989.237321][ T122] EXT4-fs (loop0): free_blocks=0 [ 989.242599][ T122] EXT4-fs (loop0): dirty_blocks=4 [ 989.247923][ T122] EXT4-fs (loop0): Block reservation details [ 989.334940][ T122] EXT4-fs (loop0): i_reserved_data_blocks=4 [ 989.374412][T21251] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 989.411838][T21285] loop3: detected capacity change from 0 to 8192 [ 989.429473][T15549] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 989.451670][T21276] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 990.012393][T16356] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 990.810104][T15373] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 990.825818][T21302] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4313'. [ 990.868387][T21302] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4313'. [ 990.995287][T21308] loop3: detected capacity change from 0 to 1024 [ 991.013273][T21308] EXT4-fs: inline encryption not supported [ 991.413052][T21308] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 991.584266][T21308] EXT4-fs error (device loop3): mb_free_blocks:2047: group 0, inode 15: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 991.600199][T21308] EXT4-fs (loop3): Remounting filesystem read-only [ 991.693236][T14891] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 991.778060][T21320] loop0: detected capacity change from 0 to 256 [ 991.788713][T21330] FAULT_INJECTION: forcing a failure. [ 991.788713][T21330] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 991.840509][T21330] CPU: 1 UID: 0 PID: 21330 Comm: syz.3.4320 Tainted: G W syzkaller #0 PREEMPT(full) [ 991.840543][T21330] Tainted: [W]=WARN [ 991.840550][T21330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 991.840564][T21330] Call Trace: [ 991.840578][T21330] [ 991.840587][T21330] __dump_stack+0x1d/0x30 [ 991.840650][T21330] dump_stack_lvl+0x95/0xd0 [ 991.840678][T21330] dump_stack+0x15/0x1b [ 991.840698][T21330] should_fail_ex+0x263/0x280 [ 991.840740][T21330] should_fail+0xb/0x20 [ 991.840777][T21330] should_fail_usercopy+0x1a/0x20 [ 991.840856][T21330] _copy_from_user+0x1c/0xb0 [ 991.840958][T21330] ___sys_sendmsg+0xc1/0x1e0 [ 991.840999][T21330] __x64_sys_sendmsg+0xd4/0x160 [ 991.841038][T21330] x64_sys_call+0x194c/0x3020 [ 991.841062][T21330] do_syscall_64+0x12c/0x370 [ 991.841087][T21330] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 991.841162][T21330] RIP: 0033:0x7f421dccc799 [ 991.841178][T21330] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 991.841196][T21330] RSP: 002b:00007f421c727028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 991.841228][T21330] RAX: ffffffffffffffda RBX: 00007f421df45fa0 RCX: 00007f421dccc799 [ 991.841245][T21330] RDX: 0000000004000080 RSI: 0000200000000040 RDI: 0000000000000006 [ 991.841282][T21330] RBP: 00007f421c727090 R08: 0000000000000000 R09: 0000000000000000 [ 991.841315][T21330] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 991.841331][T21330] R13: 00007f421df46038 R14: 00007f421df45fa0 R15: 00007ffee8f80f78 [ 991.841351][T21330] [ 991.848338][T16001] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 992.045089][T21335] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4324'. [ 993.242755][T21347] loop4: detected capacity change from 0 to 8192 [ 993.491416][T21372] FAULT_INJECTION: forcing a failure. [ 993.491416][T21372] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 993.510682][T21372] CPU: 1 UID: 0 PID: 21372 Comm: syz.4.4334 Tainted: G W syzkaller #0 PREEMPT(full) [ 993.510774][T21372] Tainted: [W]=WARN [ 993.510781][T21372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 993.510794][T21372] Call Trace: [ 993.510803][T21372] [ 993.510814][T21372] __dump_stack+0x1d/0x30 [ 993.510886][T21372] dump_stack_lvl+0x95/0xd0 [ 993.510910][T21372] dump_stack+0x15/0x1b [ 993.510934][T21372] should_fail_ex+0x263/0x280 [ 993.510979][T21372] should_fail+0xb/0x20 [ 993.511001][T21372] should_fail_usercopy+0x1a/0x20 [ 993.511024][T21372] _copy_to_user+0x20/0xa0 [ 993.511073][T21372] simple_read_from_buffer+0xb5/0x130 [ 993.511228][T21372] proc_fail_nth_read+0x10e/0x150 [ 993.511256][T21372] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 993.511345][T21372] vfs_read+0x1ab/0x7f0 [ 993.511411][T21372] ? ldsem_up_read+0x8a/0xd0 [ 993.511442][T21372] ? __rcu_read_unlock+0x4e/0x70 [ 993.511465][T21372] ? __fget_files+0x184/0x1c0 [ 993.511491][T21372] ? tiocsti+0x19a/0x1d0 [ 993.511552][T21372] ? mutex_lock+0x57/0x90 [ 993.511583][T21372] ksys_read+0xdc/0x1a0 [ 993.511619][T21372] __x64_sys_read+0x40/0x50 [ 993.511639][T21372] x64_sys_call+0x2886/0x3020 [ 993.511727][T21372] do_syscall_64+0x12c/0x370 [ 993.511748][T21372] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 993.511769][T21372] RIP: 0033:0x7f59c319cfce [ 993.511784][T21372] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 993.511805][T21372] RSP: 002b:00007f59c1c36fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 993.511895][T21372] RAX: ffffffffffffffda RBX: 00007f59c1c376c0 RCX: 00007f59c319cfce [ 993.511912][T21372] RDX: 000000000000000f RSI: 00007f59c1c370a0 RDI: 0000000000000005 [ 993.511927][T21372] RBP: 00007f59c1c37090 R08: 0000000000000000 R09: 0000000000000000 [ 993.511942][T21372] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 993.511957][T21372] R13: 00007f59c3456038 R14: 00007f59c3455fa0 R15: 00007ffe592663b8 [ 993.511977][T21372] [ 993.850377][T21378] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4336'. [ 993.875400][T21376] loop4: detected capacity change from 0 to 512 [ 993.993037][T21376] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e01c, mo2=0002] [ 994.025336][T21376] System zones: 1-12 [ 994.039561][T21376] EXT4-fs (loop4): orphan cleanup on readonly fs [ 994.073819][T21376] EXT4-fs error (device loop4): ext4_get_branch:178: inode #11: block 33261: comm syz.4.4335: invalid block [ 994.135744][T21376] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 994.136001][T21376] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.4335: invalid indirect mapped block 8 (level 2) [ 994.145451][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 994.145478][ C0] EXT4-fs (loop4): initial error at time 1772899250: ext4_get_branch:178: inode 11: block 33261 [ 994.145520][ C0] EXT4-fs (loop4): last error at time 1772899250: ext4_get_branch:178: inode 11: block 33261 [ 994.299202][T21376] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 994.299582][T21376] EXT4-fs (loop4): 1 truncate cleaned up [ 994.380291][T21376] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 994.459838][T16001] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 994.497568][T21389] 8021q: adding VLAN 0 to HW filter on device bond2 [ 994.609690][T21406] loop3: detected capacity change from 0 to 512 [ 994.693896][T21406] EXT4-fs: Ignoring removed oldalloc option [ 994.772207][T21406] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.4346: inode has both inline data and extents flags [ 994.788499][T21412] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4347'. [ 994.826353][T21406] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 994.826992][T21406] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.4346: couldn't read orphan inode 15 (err -117) [ 994.836295][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 994.836333][ C1] EXT4-fs (loop3): initial error at time 1772899251: ext4_orphan_get:1391: inode 15 [ 994.836370][ C1] EXT4-fs (loop3): last error at time 1772899251: ext4_orphan_get:1391: inode 15 [ 994.961418][ T28] audit: type=1326 audit(1772899251.508:16706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21409 comm="syz.4.4348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59c31dc799 code=0x7ffc0000 [ 995.003451][T21406] loop3: lost filesystem error report for type 5 error -117 [ 995.004304][T21406] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 995.051869][T21406] FAULT_INJECTION: forcing a failure. [ 995.051869][T21406] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 995.075571][T21406] CPU: 0 UID: 0 PID: 21406 Comm: syz.3.4346 Tainted: G W syzkaller #0 PREEMPT(full) [ 995.075631][T21406] Tainted: [W]=WARN [ 995.075640][T21406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 995.075667][T21406] Call Trace: [ 995.075675][T21406] [ 995.075686][T21406] __dump_stack+0x1d/0x30 [ 995.075719][T21406] dump_stack_lvl+0x95/0xd0 [ 995.075747][T21406] dump_stack+0x15/0x1b [ 995.075770][T21406] should_fail_ex+0x263/0x280 [ 995.075794][T21406] should_fail_alloc_page+0xf2/0x100 [ 995.075823][T21406] __alloc_frozen_pages_noprof+0x108/0x360 [ 995.075864][T21406] alloc_pages_mpol+0xb3/0x260 [ 995.075899][T21406] folio_alloc_noprof+0x96/0x150 [ 995.075933][T21406] filemap_alloc_folio_noprof+0x92/0x220 [ 995.075975][T21406] __filemap_get_folio_mpol+0x295/0x680 [ 995.076000][T21406] ext4_mb_init_group+0xbb/0x580 [ 995.076026][T21406] ? ext4_get_group_desc+0x16b/0x190 [ 995.076063][T21406] ext4_mb_scan_group+0x5f4/0xf20 [ 995.076090][T21406] ext4_mb_regular_allocator+0x67f/0x16b0 [ 995.076166][T21406] ? strlen+0x19/0x40 [ 995.076186][T21406] ? ext4_mb_new_blocks+0x785/0x1f50 [ 995.076248][T21406] ext4_mb_new_blocks+0x7db/0x1f50 [ 995.076279][T21406] ? kvfree_call_rcu+0xb3/0x390 [ 995.076308][T21406] ? ext4_get_branch+0x321/0x3a0 [ 995.076379][T21406] ext4_ind_map_blocks+0xbd4/0x1620 [ 995.076479][T21406] ? ext4_map_query_blocks+0x438/0x550 [ 995.076551][T21406] ext4_map_create_blocks+0x8a/0x3a0 [ 995.076590][T21406] ext4_map_blocks+0x594/0x970 [ 995.076619][T21406] _ext4_get_block+0x117/0x370 [ 995.076653][T21406] ? perf_trace_kmem_cache_alloc+0x68/0x1c0 [ 995.076742][T21406] ext4_get_block+0x39/0x50 [ 995.076825][T21406] ext4_block_write_begin+0x650/0xcf0 [ 995.076856][T21406] ? __pfx_ext4_get_block+0x10/0x10 [ 995.076884][T21406] ? folio_mapping+0xb9/0xe0 [ 995.076974][T21406] ext4_write_begin+0x636/0xea0 [ 995.077021][T21406] ext4_da_write_begin+0x1f0/0x6c0 [ 995.077051][T21406] ? inode_to_bdi+0x47/0xa0 [ 995.077069][T21406] ? balance_dirty_pages_ratelimited_flags+0x420/0x800 [ 995.077141][T21406] generic_perform_write+0x183/0x490 [ 995.077177][T21406] ext4_buffered_write_iter+0x1ee/0x3c0 [ 995.077202][T21406] ext4_file_write_iter+0x380/0xfa0 [ 995.077225][T21406] ? selinux_file_permission+0x1f2/0x690 [ 995.077272][T21406] ? security_file_permission+0x22/0x70 [ 995.077311][T21406] aio_write+0x2fe/0x430 [ 995.077347][T21406] io_submit_one+0xbc1/0x1350 [ 995.077487][T21406] __se_sys_io_submit+0xfb/0x280 [ 995.077551][T21406] __x64_sys_io_submit+0x43/0x50 [ 995.077575][T21406] x64_sys_call+0x19d5/0x3020 [ 995.077599][T21406] do_syscall_64+0x12c/0x370 [ 995.077619][T21406] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 995.077694][T21406] RIP: 0033:0x7f421dccc799 [ 995.077715][T21406] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 995.077745][T21406] RSP: 002b:00007f421c727028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 995.077768][T21406] RAX: ffffffffffffffda RBX: 00007f421df45fa0 RCX: 00007f421dccc799 [ 995.077782][T21406] RDX: 0000200000000540 RSI: 000000000000003b RDI: 00007f421c6fe000 [ 995.077841][T21406] RBP: 00007f421c727090 R08: 0000000000000000 R09: 0000000000000000 [ 995.077857][T21406] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 995.077871][T21406] R13: 00007f421df46038 R14: 00007f421df45fa0 R15: 00007ffee8f80f78 [ 995.077893][T21406] [ 995.090257][ T28] audit: type=1326 audit(1772899251.508:16707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21409 comm="syz.4.4348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59c31dc799 code=0x7ffc0000 [ 995.101039][T21406] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1315: group 0, [ 995.107073][ T28] audit: type=1326 audit(1772899251.508:16708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21409 comm="syz.4.4348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59c31dc799 code=0x7ffc0000 [ 995.109332][T21406] block bitmap and bg descriptor inconsistent: 7952 vs 220 free clusters [ 995.112289][ T28] audit: type=1326 audit(1772899251.508:16709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21409 comm="syz.4.4348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f59c31dc799 code=0x7ffc0000 [ 995.112387][ T28] audit: type=1326 audit(1772899251.508:16710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21409 comm="syz.4.4348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59c31dc799 code=0x7ffc0000 [ 995.328210][T21423] loop0: detected capacity change from 0 to 256 [ 995.332729][ T28] audit: type=1326 audit(1772899251.508:16711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21409 comm="syz.4.4348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59c31dc799 code=0x7ffc0000 [ 995.735795][T21431] loop0: detected capacity change from 0 to 512 [ 995.737139][ T28] audit: type=1326 audit(1772899251.508:16713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21409 comm="syz.4.4348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59c31dc799 code=0x7ffc0000 [ 995.767323][ T28] audit: type=1326 audit(1772899251.508:16712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21409 comm="syz.4.4348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59c31dc799 code=0x7ffc0000 [ 995.769546][T14891] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 995.791688][ T28] audit: type=1326 audit(1772899251.518:16714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21409 comm="syz.4.4348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59c31dc799 code=0x7ffc0000 [ 995.840969][T21431] EXT4-fs: Ignoring removed oldalloc option [ 995.930265][T21431] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #15: comm syz.0.4354: inode has both inline data and extents flags [ 995.954004][T21437] loop3: detected capacity change from 0 to 512 [ 995.963625][ T28] audit: type=1326 audit(1772899251.518:16715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21409 comm="syz.4.4348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f59c31dc799 code=0x7ffc0000 [ 995.963714][T21431] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 996.150469][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 996.166376][ C1] EXT4-fs (loop0): initial error at time 1772899252: ext4_orphan_get:1391: inode 15 [ 996.175803][ C1] EXT4-fs (loop0): last error at time 1772899252: ext4_orphan_get:1391: inode 15 [ 996.188426][T21437] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 996.213884][T21431] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.4354: couldn't read orphan inode 15 (err -117) [ 996.323619][T21441] loop4: detected capacity change from 0 to 512 [ 996.340795][T21431] loop0: lost filesystem error report for type 5 error -117 [ 996.381508][T21437] EXT4-fs (loop3): 1 truncate cleaned up [ 996.450687][T21431] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 996.488287][T21431] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 7952 vs 220 free clusters [ 996.504167][T21437] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 996.514899][T21441] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 996.539107][T21441] ext4 filesystem being mounted at /259/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 996.596549][T21437] netlink: 'syz.3.4356': attribute type 1 has an invalid length. [ 996.632126][T15549] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 996.642270][T21449] netem: change failed [ 996.747193][T14891] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 997.072680][T21471] loop2: detected capacity change from 0 to 256 [ 997.126299][T21477] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21477 comm=syz.0.4366 [ 997.169131][T21477] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4366'. [ 997.211210][T21477] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4366'. [ 997.634079][T21486] loop2: detected capacity change from 0 to 8192 [ 998.480312][T16001] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 999.243120][T21521] FAULT_INJECTION: forcing a failure. [ 999.243120][T21521] name failslab, interval 1, probability 0, space 0, times 0 [ 999.267736][T21521] CPU: 0 UID: 0 PID: 21521 Comm: syz.4.4378 Tainted: G W syzkaller #0 PREEMPT(full) [ 999.267774][T21521] Tainted: [W]=WARN [ 999.267782][T21521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 999.267795][T21521] Call Trace: [ 999.267803][T21521] [ 999.267813][T21521] __dump_stack+0x1d/0x30 [ 999.267883][T21521] dump_stack_lvl+0x95/0xd0 [ 999.267920][T21521] dump_stack+0x15/0x1b [ 999.267945][T21521] should_fail_ex+0x263/0x280 [ 999.267985][T21521] should_failslab+0x8c/0xb0 [ 999.268010][T21521] kmem_cache_alloc_node_noprof+0x6d/0x460 [ 999.268056][T21521] ? __alloc_skb+0x2d6/0x690 [ 999.268083][T21521] ? security_capable+0x7b/0x90 [ 999.268227][T21521] __alloc_skb+0x2d6/0x690 [ 999.268250][T21521] ? __alloc_skb+0x200/0x690 [ 999.268271][T21521] netlink_ack+0xfd/0x500 [ 999.268298][T21521] netlink_rcv_skb+0x192/0x220 [ 999.268397][T21521] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 999.268463][T21521] rtnetlink_rcv+0x1c/0x30 [ 999.268489][T21521] netlink_unicast+0x5c0/0x690 [ 999.268532][T21521] netlink_sendmsg+0x5c8/0x6f0 [ 999.268566][T21521] ? __pfx_netlink_sendmsg+0x10/0x10 [ 999.268595][T21521] ____sys_sendmsg+0x563/0x5b0 [ 999.268665][T21521] ___sys_sendmsg+0x195/0x1e0 [ 999.268706][T21521] __x64_sys_sendmsg+0xd4/0x160 [ 999.268739][T21521] x64_sys_call+0x194c/0x3020 [ 999.268829][T21521] do_syscall_64+0x12c/0x370 [ 999.268849][T21521] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 999.268871][T21521] RIP: 0033:0x7f59c31dc799 [ 999.268958][T21521] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 999.268980][T21521] RSP: 002b:00007f59c1c37028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 999.269004][T21521] RAX: ffffffffffffffda RBX: 00007f59c3455fa0 RCX: 00007f59c31dc799 [ 999.269110][T21521] RDX: 0000000002000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 999.269127][T21521] RBP: 00007f59c1c37090 R08: 0000000000000000 R09: 0000000000000000 [ 999.269141][T21521] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 999.269160][T21521] R13: 00007f59c3456038 R14: 00007f59c3455fa0 R15: 00007ffe592663b8 [ 999.269181][T21521] [ 999.794680][T21524] loop0: detected capacity change from 0 to 256 [ 999.868006][T21529] loop4: detected capacity change from 0 to 1024 [ 999.893601][T21535] loop3: detected capacity change from 0 to 512 [ 999.921094][T21529] EXT4-fs: Ignoring removed oldalloc option [ 999.927108][T21529] ext4: Unknown parameter 'subj_user' [ 1000.016299][ T28] kauditd_printk_skb: 49 callbacks suppressed [ 1000.016316][ T28] audit: type=1400 audit(1772899256.648:16765): avc: denied { connect } for pid=21525 comm="syz.4.4381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1000.071554][T21535] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1000.160589][T21535] ext4 filesystem being mounted at /321/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1000.191073][T21538] loop0: detected capacity change from 0 to 8192 [ 1000.202864][T21526] loop4: detected capacity change from 0 to 512 [ 1000.323768][T21526] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1000.352228][T21526] ext4 filesystem being mounted at /261/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1000.546189][T16001] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1000.616820][T11969] IPVS: starting estimator thread 0... [ 1001.552206][T21553] IPVS: using max 2832 ests per chain, 141600 per kthread [ 1002.884581][T21568] loop0: detected capacity change from 0 to 128 [ 1002.944666][T21568] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1003.265455][T21567] loop2: detected capacity change from 0 to 512 [ 1003.342003][ T2125] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1003.347907][T21578] netem: change failed [ 1003.375032][T21567] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 1003.400852][T21567] EXT4-fs (loop2): 1 truncate cleaned up [ 1003.410947][T21567] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1003.586352][T14891] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1003.714973][T16356] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1003.734558][T21597] FAULT_INJECTION: forcing a failure. [ 1003.734558][T21597] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1003.750673][T21597] CPU: 0 UID: 0 PID: 21597 Comm: syz.3.4401 Tainted: G W syzkaller #0 PREEMPT(full) [ 1003.750706][T21597] Tainted: [W]=WARN [ 1003.750713][T21597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1003.750777][T21597] Call Trace: [ 1003.750784][T21597] [ 1003.750794][T21597] __dump_stack+0x1d/0x30 [ 1003.750823][T21597] dump_stack_lvl+0x95/0xd0 [ 1003.750852][T21597] dump_stack+0x15/0x1b [ 1003.750881][T21597] should_fail_ex+0x263/0x280 [ 1003.750913][T21597] should_fail+0xb/0x20 [ 1003.750932][T21597] should_fail_usercopy+0x1a/0x20 [ 1003.750956][T21597] _copy_from_user+0x1c/0xb0 [ 1003.750981][T21597] kstrtouint_from_user+0x69/0xf0 [ 1003.751014][T21597] proc_fail_nth_write+0x50/0x160 [ 1003.751048][T21597] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1003.751086][T21597] vfs_write+0x269/0x9f0 [ 1003.751116][T21597] ? __rcu_read_unlock+0x4e/0x70 [ 1003.751169][T21597] ? __fget_files+0x184/0x1c0 [ 1003.751202][T21597] ? mutex_lock+0x57/0x90 [ 1003.751249][T21597] ksys_write+0xdc/0x1a0 [ 1003.751273][T21597] __x64_sys_write+0x40/0x50 [ 1003.751294][T21597] x64_sys_call+0x27e1/0x3020 [ 1003.751318][T21597] do_syscall_64+0x12c/0x370 [ 1003.751400][T21597] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1003.751423][T21597] RIP: 0033:0x7f421dc8cfce [ 1003.751440][T21597] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1003.751522][T21597] RSP: 002b:00007f421c726fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1003.751547][T21597] RAX: ffffffffffffffda RBX: 00007f421c7276c0 RCX: 00007f421dc8cfce [ 1003.751586][T21597] RDX: 0000000000000001 RSI: 00007f421c7270a0 RDI: 0000000000000003 [ 1003.751601][T21597] RBP: 00007f421c727090 R08: 0000000000000000 R09: 0000000000000000 [ 1003.751614][T21597] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1003.751628][T21597] R13: 00007f421df46038 R14: 00007f421df45fa0 R15: 00007ffee8f80f78 [ 1003.751705][T21597] [ 1004.105565][T21595] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 1005.120834][T21624] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4407'. [ 1005.336416][T21639] loop2: detected capacity change from 0 to 1024 [ 1005.345592][T21639] EXT4-fs: inline encryption not supported [ 1005.492679][T21642] loop0: detected capacity change from 0 to 128 [ 1005.516837][T21642] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1005.578377][T21639] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1005.662869][T21639] EXT4-fs error (device loop2): mb_free_blocks:2047: group 0, inode 15: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 1005.694844][T21639] EXT4-fs (loop2): Remounting filesystem read-only [ 1005.853548][T21651] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 1005.870603][T16356] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1005.938112][T21655] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4416'. [ 1005.949201][T21655] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4416'. [ 1006.162926][ T122] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1006.184752][T21664] 9p: Bad value for 'rfdno' [ 1006.230320][T21664] loop2: detected capacity change from 0 to 2048 [ 1006.240068][T21663] loop3: detected capacity change from 0 to 512 [ 1006.255949][ T28] audit: type=1400 audit(1772899262.888:16766): avc: denied { ioctl } for pid=21665 comm="syz.0.4419" path="socket:[69787]" dev="sockfs" ino=69787 ioctlcmd=0x943c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1006.351614][T21669] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21669 comm=syz.0.4420 [ 1006.376552][T21663] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1006.389438][T21663] ext4 filesystem being mounted at /328/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1006.605409][T21664] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1006.613391][T21679] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4420'. [ 1006.741102][ T28] audit: type=1400 audit(1772899263.378:16767): avc: denied { create } for pid=21682 comm="syz.0.4422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1006.900700][T21693] loop0: detected capacity change from 0 to 1024 [ 1006.907552][T21693] EXT4-fs: Ignoring removed orlov option [ 1006.913573][T21693] EXT4-fs: Ignoring removed bh option [ 1006.968507][T21693] EXT4-fs (loop0): can't mount with data_err=abort, fs mounted w/o journal [ 1007.010995][T14891] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1007.055071][T21699] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1007.067061][T21699] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1007.227003][T21705] loop4: detected capacity change from 0 to 128 [ 1007.249220][T21705] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1007.262241][T21705] ext4 filesystem being mounted at /272/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1007.364032][T16001] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1007.391661][ T28] audit: type=1400 audit(1772899264.018:16768): avc: denied { create } for pid=21712 comm="syz.1.4431" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1007.420322][ T28] audit: type=1400 audit(1772899264.018:16769): avc: denied { ioctl } for pid=21712 comm="syz.1.4431" path="socket:[69839]" dev="sockfs" ino=69839 ioctlcmd=0x48cb scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1007.529116][T16356] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1007.708087][T21745] bridge0: port 3(syz_tun) entered blocking state [ 1007.719613][T21745] bridge0: port 3(syz_tun) entered disabled state [ 1007.732102][T21748] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4446'. [ 1007.737079][T21745] syz_tun: entered allmulticast mode [ 1007.748819][T21745] syz_tun: entered promiscuous mode [ 1007.755175][T21745] bridge0: port 3(syz_tun) entered blocking state [ 1007.762546][T21745] bridge0: port 3(syz_tun) entered forwarding state [ 1007.813200][T21754] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4448'. [ 1007.833807][T21754] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4448'. [ 1007.876157][ T12] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1007.885609][ T12] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1007.894806][T21754] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4448'. [ 1007.908755][ T12] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1007.922898][ T12] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1007.936423][ T28] audit: type=1400 audit(1772899264.558:16770): avc: denied { create } for pid=21742 comm="syz.2.4444" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 1007.957768][T21754] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4448'. [ 1008.491394][T21779] bridge0: port 2(bridge_slave_1) entered disabled state [ 1008.498783][T21779] bridge0: port 1(bridge_slave_0) entered disabled state [ 1008.588553][T21779] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1008.628912][T21779] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1008.652022][T21794] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1008.690726][T21794] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1008.864219][ T2125] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1008.880397][ T2125] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1008.906298][T21800] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=13 sclass=netlink_route_socket pid=21800 comm=syz.0.4462 [ 1008.927554][ T2125] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1008.941946][T21804] bridge0: port 3(syz_tun) entered blocking state [ 1008.948760][T21804] bridge0: port 3(syz_tun) entered disabled state [ 1008.956558][T21804] syz_tun: entered allmulticast mode [ 1008.963056][T21804] syz_tun: entered promiscuous mode [ 1008.970661][ T2125] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1009.018346][ T28] audit: type=1400 audit(1772899265.638:16771): avc: denied { read } for pid=21805 comm="syz.2.4465" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 1009.418929][T21820] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4470'. [ 1009.431099][T21820] syz_tun: entered promiscuous mode [ 1009.521284][T21827] loop4: detected capacity change from 0 to 2048 [ 1009.544274][T21827] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1009.565777][T16001] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1009.688300][T21837] syzkaller0: entered promiscuous mode [ 1009.694364][T21837] syzkaller0: entered allmulticast mode [ 1011.021071][T21766] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1011.067037][T21841] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4477'. [ 1011.081498][ T28] audit: type=1400 audit(1772899267.718:16772): avc: denied { connect } for pid=21838 comm="syz.3.4478" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1011.113305][T21843] hub 9-0:1.0: USB hub found [ 1011.118241][T21843] hub 9-0:1.0: 8 ports detected [ 1011.216203][ T28] audit: type=1400 audit(1772899267.848:16773): avc: denied { remount } for pid=21859 comm="syz.0.4485" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1011.250742][T21857] netem: change failed [ 1011.259339][T21866] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4489'. [ 1011.305329][T21870] loop1: detected capacity change from 0 to 1024 [ 1011.341112][T21870] EXT4-fs: inline encryption not supported [ 1011.407580][T21870] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1011.457672][T21870] EXT4-fs error (device loop1): mb_free_blocks:2047: group 0, inode 15: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 1011.900586][T21870] EXT4-fs (loop1): Remounting filesystem read-only [ 1012.006482][T15373] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1012.117836][T21866] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4489'. [ 1012.197487][T21900] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4499'. [ 1013.240990][T21917] netlink: 'syz.2.4505': attribute type 10 has an invalid length. [ 1013.343947][T21917] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1013.509354][T21929] bridge0: port 3(syz_tun) entered disabled state [ 1013.656328][T21933] netlink: 'syz.2.4510': attribute type 10 has an invalid length. [ 1013.759729][T21929] syz_tun (unregistering): left allmulticast mode [ 1013.967246][T21929] syz_tun (unregistering): left promiscuous mode [ 1013.981030][T21929] bridge0: port 3(syz_tun) entered disabled state [ 1013.996939][T21933] syz_tun: left allmulticast mode [ 1014.002721][T21933] bridge0: port 3(syz_tun) entered disabled state [ 1014.023408][T21933] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 1014.188500][ T28] audit: type=1400 audit(1772899270.818:16774): avc: denied { mount } for pid=21947 comm="syz.4.4515" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 1014.291510][ T28] audit: type=1400 audit(1772899270.928:16775): avc: denied { unmount } for pid=16001 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 1014.537933][T21957] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1014.580766][T21961] netem: change failed [ 1014.687705][T21957] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1014.699915][T21965] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4519'. [ 1014.814996][T21957] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1014.836559][T21954] loop4: detected capacity change from 0 to 512 [ 1014.958773][T21957] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1015.078306][T14729] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1015.091892][T14729] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1015.112081][T21954] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1015.131183][T14729] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1015.150205][T14729] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1015.183624][T21954] ext4 filesystem being mounted at /296/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1016.419711][T16001] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1018.075702][T22019] loop0: detected capacity change from 0 to 128 [ 1018.119871][T22019] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1018.273133][T22025] bond2: entered promiscuous mode [ 1018.287764][T22025] bond_slave_0: entered promiscuous mode [ 1018.293707][T22025] bond_slave_1: entered promiscuous mode [ 1018.328136][T14729] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1018.337971][T22025] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1018.346511][T22025] bond2: (slave macvlan2): making interface the new active one [ 1018.354639][T22025] macvlan2: entered promiscuous mode [ 1018.360319][T22025] bond0: entered promiscuous mode [ 1018.366321][T22025] bond2: (slave macvlan2): Enslaving as an active interface with an up link [ 1018.381682][T22025] netlink: 'syz.1.4536': attribute type 10 has an invalid length. [ 1018.390726][T22025] bridge0: port 2(bridge_slave_1) entered disabled state [ 1018.398169][T22025] bridge0: port 1(bridge_slave_0) entered disabled state [ 1018.408394][T22025] bridge0: port 2(bridge_slave_1) entered blocking state [ 1018.415530][T22025] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1018.423156][T22025] bridge0: port 1(bridge_slave_0) entered blocking state [ 1018.430267][T22025] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1018.432670][ T28] audit: type=1400 audit(1772899275.058:16776): avc: denied { create } for pid=22030 comm="syz.3.4538" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1018.439094][T22025] bridge0: entered promiscuous mode [ 1018.467026][T22025] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1018.477626][ T28] audit: type=1400 audit(1772899275.058:16777): avc: denied { ioctl } for pid=22030 comm="syz.3.4538" path="socket:[71528]" dev="sockfs" ino=71528 ioctlcmd=0x89e6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1019.108638][T21992] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1019.374959][T22055] loop4: detected capacity change from 0 to 512 [ 1019.652079][T22055] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1019.665373][T22055] ext4 filesystem being mounted at /299/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1020.135712][T22072] bond0: (slave syz_tun): Releasing backup interface [ 1020.174570][T16001] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1020.268780][T22078] netlink: 'syz.2.4553': attribute type 10 has an invalid length. [ 1020.282199][T22080] netem: change failed [ 1021.110517][T22111] loop2: detected capacity change from 0 to 128 [ 1021.130953][T22111] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1021.371912][ T2125] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1021.601462][T22129] netlink: 'syz.1.4568': attribute type 10 has an invalid length. [ 1022.250697][T22142] bond0: (slave bridge0): Releasing backup interface [ 1022.284291][T22142] bridge0: left promiscuous mode [ 1022.289943][T22142] bridge0: port 2(bridge_slave_1) entered disabled state [ 1022.297476][T22142] bridge0: port 1(bridge_slave_0) entered disabled state [ 1022.323995][T22147] netlink: 'syz.1.4573': attribute type 10 has an invalid length. [ 1022.381737][T22142] bridge_slave_0: left allmulticast mode [ 1022.387957][T22142] bridge_slave_0: left promiscuous mode [ 1022.394596][T22142] bridge0: port 1(bridge_slave_0) entered disabled state [ 1022.899591][T22142] bridge_slave_1: left allmulticast mode [ 1022.910715][T22142] bridge_slave_1: left promiscuous mode [ 1022.920083][T22142] bridge0: port 2(bridge_slave_1) entered disabled state [ 1022.975377][T22142] bond0: (slave bond_slave_0): Releasing backup interface [ 1022.987249][T22142] bond_slave_0: left promiscuous mode [ 1023.444493][T22156] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=13 sclass=netlink_route_socket pid=22156 comm=syz.3.4576 [ 1023.501146][T22142] bond0: (slave bond_slave_1): Releasing backup interface [ 1023.512846][T22142] bond_slave_1: left promiscuous mode [ 1023.522749][T22142] team0: Port device team_slave_0 removed [ 1023.532165][T22142] team0: Port device team_slave_1 removed [ 1023.539217][T22142] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1023.554964][T22142] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1023.564359][T22163] loop0: detected capacity change from 0 to 512 [ 1023.570783][T22165] loop4: detected capacity change from 0 to 512 [ 1023.579327][T22142] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1023.579494][T22165] EXT4-fs: Ignoring removed oldalloc option [ 1023.590548][T22142] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1023.609038][T22165] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.4580: inode has both inline data and extents flags [ 1023.611234][T22163] EXT4-fs (loop0): 1 orphan inode deleted [ 1023.622968][T22165] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1023.628758][T22165] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.4580: couldn't read orphan inode 15 (err -117) [ 1023.630009][T22142] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1023.638511][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 1023.638530][ C1] EXT4-fs (loop4): initial error at time 1772899280: ext4_orphan_get:1391: inode 15 [ 1023.638556][ C1] EXT4-fs (loop4): last error at time 1772899280: ext4_orphan_get:1391: inode 15 [ 1023.639247][T22165] loop4: lost filesystem error report for type 5 error -117 [ 1023.652209][T22163] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1023.703554][T22165] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1023.791773][T22165] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 7952 vs 220 free clusters [ 1023.814028][T22172] loop3: detected capacity change from 0 to 8192 [ 1023.911377][T16001] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1024.008763][T22179] loop4: detected capacity change from 0 to 1024 [ 1024.015740][T22179] EXT4-fs: inline encryption not supported [ 1024.119868][T22179] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1024.215986][T22184] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4586'. [ 1024.226436][T22179] EXT4-fs error (device loop4): mb_free_blocks:2047: group 0, inode 15: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 1024.245103][T22184] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4586'. [ 1024.255649][T22179] EXT4-fs (loop4): Remounting filesystem read-only [ 1024.382407][T22187] netlink: 'syz.1.4587': attribute type 10 has an invalid length. [ 1024.452002][T22187] bridge0: entered promiscuous mode [ 1024.459732][T22187] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1024.474759][T16001] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1024.541020][T15549] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1025.269485][T22206] loop3: detected capacity change from 0 to 8192 [ 1025.375520][T22216] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4598'. [ 1025.458968][T22216] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4598'. [ 1025.502703][T22223] loop1: detected capacity change from 0 to 1024 [ 1025.510403][T22223] EXT4-fs: inline encryption not supported [ 1025.544613][T22223] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1025.572266][T22228] loop2: detected capacity change from 0 to 512 [ 1025.602201][ T28] audit: type=1400 audit(1772899282.238:16778): avc: denied { bind } for pid=22232 comm="syz.0.4603" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1025.626518][T22228] EXT4-fs (loop2): 1 orphan inode deleted [ 1025.636850][T22228] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1025.647219][T22223] EXT4-fs error (device loop1): mb_free_blocks:2047: group 0, inode 15: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 1025.690501][T22223] EXT4-fs (loop1): Remounting filesystem read-only [ 1025.742194][T15373] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1025.812896][T22246] netem: change failed [ 1026.027190][T22243] loop4: detected capacity change from 0 to 512 [ 1026.164323][T22255] loop1: detected capacity change from 0 to 512 [ 1026.431491][T22255] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1026.444393][T22255] ext4 filesystem being mounted at /304/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1026.724684][T22259] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=13 sclass=netlink_route_socket pid=22259 comm=syz.3.4609 [ 1026.776139][T22243] EXT4-fs (loop4): 1 orphan inode deleted [ 1026.795917][T16356] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1026.818254][T22243] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1026.886829][T15373] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1026.980473][T22267] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4612'. [ 1027.165008][T22267] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4612'. [ 1027.634248][ T43] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1027.724771][T22281] netlink: 'syz.3.4615': attribute type 10 has an invalid length. [ 1027.734137][ T122] bond0: (slave bond_slave_0): interface is now down [ 1027.741501][ T122] bond0: (slave bond_slave_1): interface is now down [ 1027.807444][ T122] bond0: (slave bond_slave_0): interface is now down [ 1027.815726][ T122] bond0: (slave bond_slave_1): interface is now down [ 1027.831946][ T122] bond0: now running without any active interface! [ 1027.839675][T22287] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=13 sclass=netlink_route_socket pid=22287 comm=syz.3.4617 [ 1028.247783][T22297] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=13 sclass=netlink_route_socket pid=22297 comm=syz.2.4621 [ 1028.383306][T16001] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1028.392932][T22296] loop3: detected capacity change from 0 to 8192 [ 1028.455359][T22305] EXT4-fs: inline encryption not supported [ 1028.602076][T22300] set_capacity_and_notify: 1 callbacks suppressed [ 1028.602111][T22300] loop0: detected capacity change from 0 to 512 [ 1028.634311][T22305] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1028.726559][T22305] EXT4-fs error (device loop4): mb_free_blocks:2047: group 0, inode 15: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 1028.747556][T22305] EXT4-fs (loop4): Remounting filesystem read-only [ 1028.807688][T22316] netlink: 'syz.3.4627': attribute type 10 has an invalid length. [ 1028.817956][T16001] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1029.108082][T22300] EXT4-fs (loop0): 1 orphan inode deleted [ 1029.168518][T22300] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1030.378930][T22352] loop3: detected capacity change from 0 to 8192 [ 1030.425070][T22358] loop4: detected capacity change from 0 to 1024 [ 1030.467816][T22358] EXT4-fs: inline encryption not supported [ 1030.507418][T22358] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1030.545986][T22358] EXT4-fs error (device loop4): mb_free_blocks:2047: group 0, inode 15: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 1030.602270][T22358] EXT4-fs (loop4): Remounting filesystem read-only [ 1030.772845][T16001] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1030.956750][T22381] loop1: detected capacity change from 0 to 256 [ 1031.041384][T22386] bridge_slave_0: left allmulticast mode [ 1031.054780][T22386] bridge_slave_0: left promiscuous mode [ 1031.067977][T22386] bridge0: port 1(bridge_slave_0) entered disabled state [ 1031.088389][T22386] bridge_slave_1: left allmulticast mode [ 1031.095821][T22386] bridge_slave_1: left promiscuous mode [ 1031.107671][T22386] bridge0: port 2(bridge_slave_1) entered disabled state [ 1031.127590][T22386] bond0: (slave bond_slave_0): Releasing backup interface [ 1031.148302][T15549] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1031.170138][T22386] bond0: (slave bond_slave_1): Releasing backup interface [ 1031.201163][T22386] team0: Port device team_slave_0 removed [ 1031.217563][T22386] team0: Port device team_slave_1 removed [ 1031.232204][T22386] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1031.267820][T22386] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1031.290758][T22386] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1031.301623][T22386] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1031.318860][T22386] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1031.372808][T22393] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=22393 comm=syz.1.4649 [ 1031.386930][T22393] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4649'. [ 1031.401663][T22393] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4649'. [ 1031.465882][T22398] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4651'. [ 1031.579729][T22398] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4651'. [ 1031.602047][T16202] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1031.769306][T16202] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1031.864878][T22419] loop1: detected capacity change from 0 to 256 [ 1032.202676][T22437] loop4: detected capacity change from 0 to 512 [ 1032.434633][T22437] EXT4-fs (loop4): 1 orphan inode deleted [ 1032.495565][T22437] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1032.591720][T22450] loop3: detected capacity change from 0 to 512 [ 1032.734898][T22450] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1032.750509][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1032.830973][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1032.841795][T22450] ext4 filesystem being mounted at /374/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1033.273043][T22458] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4672'. [ 1033.335335][T22458] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4672'. [ 1033.843432][T16001] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1033.895609][T22470] bond0: (slave bridge0): Releasing backup interface [ 1033.906027][T22470] bridge0: left promiscuous mode [ 1033.933857][T22470] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1034.559605][T14891] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1034.685845][T22478] loop0: detected capacity change from 0 to 256 [ 1034.696612][T22476] loop1: detected capacity change from 0 to 8192 [ 1034.772655][T22486] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=13 sclass=netlink_route_socket pid=22486 comm=syz.3.4680 [ 1035.064265][T22499] netem: change failed [ 1035.375483][T22511] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4688'. [ 1035.396093][T22511] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4688'. [ 1035.784151][T22523] 9p: Bad value for 'rfdno' [ 1035.973821][T22523] loop4: detected capacity change from 0 to 2048 [ 1036.160834][T22541] 9p: Bad value for 'rfdno' [ 1036.161477][T22523] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1036.179001][T22541] loop2: detected capacity change from 0 to 2048 [ 1036.443208][T22541] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1036.822613][T22556] netlink: 'syz.0.4701': attribute type 10 has an invalid length. [ 1036.920558][T22556] syz_tun: entered promiscuous mode [ 1036.935975][T22556] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 1037.176028][T22568] loop1: detected capacity change from 0 to 8192 [ 1037.283058][T16356] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1037.299161][T22587] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4711'. [ 1037.310917][T22448] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 2: invalid block bitmap [ 1037.335276][T22582] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4711'. [ 1037.343674][T22448] EXT4-fs (loop4): Remounting filesystem read-only [ 1037.591148][T16001] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1037.782551][T22596] netlink: 'syz.4.4715': attribute type 10 has an invalid length. [ 1038.389125][T22628] loop0: detected capacity change from 0 to 512 [ 1038.596309][T22635] 9p: Bad value for 'rfdno' [ 1038.621883][T22628] Quota error (device loop0): do_check_range: Getting block 196613 out of range 1-5 [ 1038.868926][T22637] loop1: detected capacity change from 0 to 2048 [ 1038.901719][T22628] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 1038.980531][T22628] EXT4-fs error (device loop0): ext4_acquire_dquot:7001: comm syz.0.4727: Failed to acquire dquot type 1 [ 1038.992135][T22628] loop0: lost filesystem error report for type 5 error -117 [ 1039.000502][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 1039.015712][ C0] EXT4-fs (loop0): last error at time 1772899295: ext4_acquire_dquot:7001 [ 1039.031852][T22628] Quota error (device loop0): do_check_range: Getting block 196613 out of range 1-5 [ 1039.049786][T22628] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 1039.110864][T22628] EXT4-fs error (device loop0): ext4_acquire_dquot:7001: comm syz.0.4727: Failed to acquire dquot type 1 [ 1039.123646][T22628] loop0: lost filesystem error report for type 5 error -117 [ 1039.124027][T22628] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.4727: bg 0: block 248: padding at end of block bitmap is not set [ 1039.181115][T22637] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1039.197049][T22628] loop0: lost filesystem error report for type 5 error -117 [ 1039.197504][T22628] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 1039.242601][T22644] netlink: 'syz.4.4729': attribute type 10 has an invalid length. [ 1039.278335][T22628] loop0: lost filesystem error report for type 5 error -117 [ 1039.318450][T22628] Quota error (device loop0): do_check_range: Getting block 196613 out of range 1-5 [ 1039.594695][T22628] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 1039.681791][T22628] EXT4-fs error (device loop0): ext4_acquire_dquot:7001: comm syz.0.4727: Failed to acquire dquot type 1 [ 1039.733069][T22628] loop0: lost filesystem error report for type 5 error -117 [ 1039.733469][T22628] EXT4-fs (loop0): 1 orphan inode deleted [ 1039.762516][T22628] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1039.775519][T22628] ext4 filesystem being mounted at /353/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1039.803512][T15549] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1040.050026][T22654] loop0: detected capacity change from 0 to 256 [ 1040.311615][T22631] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 2: invalid block bitmap [ 1040.331301][T22631] EXT4-fs (loop1): Remounting filesystem read-only [ 1040.367486][T22676] netem: change failed [ 1040.537225][T15373] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1040.841647][T22699] loop3: detected capacity change from 0 to 512 [ 1041.027376][T22707] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=13 sclass=netlink_route_socket pid=22707 comm=syz.4.4751 [ 1041.322207][T22699] Quota error (device loop3): do_check_range: Getting block 196613 out of range 1-5 [ 1041.332171][T22699] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 1041.342551][T22699] EXT4-fs error (device loop3): ext4_acquire_dquot:7001: comm syz.3.4749: Failed to acquire dquot type 1 [ 1041.354185][T22699] loop3: lost filesystem error report for type 5 error -117 [ 1041.354408][T22699] Quota error (device loop3): do_check_range: Getting block 196613 out of range 1-5 [ 1041.361966][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 1041.361993][ C1] EXT4-fs (loop3): last error at time 1772899297: ext4_acquire_dquot:7001 [ 1041.387441][T22699] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 1041.404892][T22699] EXT4-fs error (device loop3): ext4_acquire_dquot:7001: comm syz.3.4749: Failed to acquire dquot type 1 [ 1041.625137][T22699] loop3: lost filesystem error report for type 5 error -117 [ 1041.627796][T22699] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.4749: bg 0: block 248: padding at end of block bitmap is not set [ 1041.853710][T22699] loop3: lost filesystem error report for type 5 error -117 [ 1041.856799][T22699] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 1041.873544][T22699] loop3: lost filesystem error report for type 5 error -117 [ 1041.884560][T22699] EXT4-fs error (device loop3): ext4_acquire_dquot:7001: comm syz.3.4749: Failed to acquire dquot type 1 [ 1041.917856][T22699] loop3: lost filesystem error report for type 5 error -117 [ 1041.918152][T22699] EXT4-fs (loop3): 1 orphan inode deleted [ 1041.944204][T22699] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1041.957606][T22699] ext4 filesystem being mounted at /396/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1041.968251][T22729] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4759'. [ 1041.997673][T14891] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1042.022427][T22733] netlink: 'syz.0.4761': attribute type 10 has an invalid length. [ 1042.296988][ T37] bond0: (slave bond_slave_0): interface is now down [ 1042.357551][ T37] bond0: (slave bond_slave_1): interface is now down [ 1042.432888][ T37] bond0: (slave syz_tun): interface is now down [ 1042.498777][ T37] bond0: now running without any active interface! [ 1042.702463][T22757] 9p: Bad value for 'rfdno' [ 1042.800315][T22757] loop0: detected capacity change from 0 to 2048 [ 1042.988212][T22757] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1043.475233][T22769] loop1: detected capacity change from 0 to 512 [ 1043.559629][T22769] EXT4-fs error (device loop1): ext4_acquire_dquot:7001: comm syz.1.4771: Failed to acquire dquot type 1 [ 1043.580755][T22769] EXT4-fs error (device loop1): ext4_acquire_dquot:7001: comm syz.1.4771: Failed to acquire dquot type 1 [ 1043.592233][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 1043.592255][ C0] EXT4-fs (loop1): last error at time 1772899300: ext4_acquire_dquot:7001 [ 1043.636073][T22769] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.4771: bg 0: block 248: padding at end of block bitmap is not set [ 1043.664462][T22769] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 1043.694990][T22769] __quota_error: 6 callbacks suppressed [ 1043.695017][T22769] Quota error (device loop1): do_check_range: Getting block 196613 out of range 1-5 [ 1043.807337][T22769] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 1043.842289][T22769] EXT4-fs error (device loop1): ext4_acquire_dquot:7001: comm syz.1.4771: Failed to acquire dquot type 1 [ 1043.909412][T22769] EXT4-fs (loop1): 1 orphan inode deleted [ 1043.952483][T22769] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1044.057081][T22769] ext4 filesystem being mounted at /340/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1044.172239][T15373] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1044.314829][T22795] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=13 sclass=netlink_route_socket pid=22795 comm=syz.1.4778 [ 1044.801187][ T28] audit: type=1400 audit(1772899301.368:16779): avc: denied { dac_override } for pid=22799 comm="syz.4.4781" capability=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 1044.883803][T15549] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1045.663710][T22815] netlink: 207496 bytes leftover after parsing attributes in process `syz.3.4787'. [ 1046.189944][T22825] bond0: (slave syz_tun): Releasing backup interface [ 1046.216235][T22839] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4797'. [ 1046.227829][T22825] bridge_slave_1: left allmulticast mode [ 1046.241584][T22825] bridge_slave_1: left promiscuous mode [ 1046.248078][T22825] bridge0: port 2(bridge_slave_1) entered disabled state [ 1046.258101][T22825] bond0: (slave bond_slave_0): Releasing backup interface [ 1046.268246][T22825] bond0: (slave bond_slave_1): Releasing backup interface [ 1046.268913][T22842] netlink: 'syz.2.4796': attribute type 10 has an invalid length. [ 1046.289601][T22825] team0: Port device team_slave_0 removed [ 1046.290602][T22843] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4797'. [ 1046.306732][T22825] team0: Port device team_slave_1 removed [ 1046.314334][T22825] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1046.322494][T22825] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1046.332099][T22825] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1046.340062][T22825] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1046.350251][T22825] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1046.373984][T22844] netem: change failed [ 1046.396356][T22845] loop1: detected capacity change from 0 to 512 [ 1046.424457][T22850] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4799'. [ 1046.462760][T22845] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1046.475782][T22845] ext4 filesystem being mounted at /343/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1046.845435][T22873] netlink: 207496 bytes leftover after parsing attributes in process `syz.3.4805'. [ 1047.305028][T15373] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1048.493317][T22905] loop4: detected capacity change from 0 to 512 [ 1048.656287][T22899] loop3: detected capacity change from 0 to 512 [ 1048.714992][T22908] netlink: 'syz.1.4810': attribute type 10 has an invalid length. [ 1048.746340][T22905] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1048.759696][T22905] ext4 filesystem being mounted at /350/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1048.878226][T22899] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1048.891617][T22899] ext4 filesystem being mounted at /411/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1049.120038][T14891] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1049.188786][T16001] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1049.202497][T11780] ================================================================== [ 1049.211656][T11780] BUG: KCSAN: data-race in kick_pool / wq_worker_running [ 1049.219386][T11780] [ 1049.221715][T11780] read-write to 0xffff888237c2a8a4 of 4 bytes by task 9 on cpu 0: [ 1049.229960][T11780] wq_worker_running+0x95/0x120 [ 1049.235425][T11780] synchronize_rcu_expedited+0x5f8/0x770 [ 1049.241336][T11780] try_check_zero+0x191/0x260 [ 1049.246206][T11780] process_srcu+0xd5/0xdc0 [ 1049.250811][T11780] process_scheduled_works+0x4de/0x9e0 [ 1049.256463][T11780] worker_thread+0x581/0x770 [ 1049.261256][T11780] kthread+0x22a/0x280 [ 1049.265608][T11780] ret_from_fork+0x150/0x360 [ 1049.270744][T11780] ret_from_fork_asm+0x1a/0x30 [ 1049.276057][T11780] [ 1049.278564][T11780] read to 0xffff888237c2a8a4 of 4 bytes by task 11780 on cpu 1: [ 1049.287582][T11780] kick_pool+0x49/0x2d0 [ 1049.292195][T11780] __queue_work+0x896/0xaf0 [ 1049.297064][T11780] queue_work_on+0xa9/0x140 [ 1049.301947][T11780] process_srcu+0xa56/0xdc0 [ 1049.306575][T11780] process_scheduled_works+0x4de/0x9e0 [ 1049.312044][T11780] worker_thread+0x581/0x770 [ 1049.316727][T11780] kthread+0x22a/0x280 [ 1049.320816][T11780] ret_from_fork+0x150/0x360 [ 1049.325405][T11780] ret_from_fork_asm+0x1a/0x30 [ 1049.330272][T11780] [ 1049.332596][T11780] value changed: 0x00000000 -> 0x00000001 [ 1049.338642][T11780] [ 1049.340965][T11780] Reported by Kernel Concurrency Sanitizer on: [ 1049.348160][T11780] CPU: 1 UID: 0 PID: 11780 Comm: kworker/1:0 Tainted: G W syzkaller #0 PREEMPT(full) [ 1049.359750][T11780] Tainted: [W]=WARN [ 1049.363991][T11780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1049.375088][T11780] Workqueue: rcu_gp process_srcu [ 1049.380211][T11780] ================================================================== [ 1049.400639][T22924] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4818'. [ 1049.815808][T22930] loop1: detected capacity change from 0 to 512 [ 1049.901896][T22930] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1049.928317][T22930] ext4 filesystem being mounted at /346/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1050.377905][T15373] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.