last executing test programs: 25.266505007s ago: executing program 2 (id=121): r0 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@generic={&(0x7f0000000040)='./file0\x00'}, 0x18) ioctl$INCFS_IOC_PERMIT_FILL(r0, 0x40046721, &(0x7f0000000c40)={r0}) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x0, &(0x7f0000000280)={[{@inlinecrypt}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x5}}, {@barrier_val={'barrier', 0x3d, 0x5}}, {@nombcache}, {@data_err_abort}, {@sysvgroups}, {@dioread_nolock}, {@init_itable_val={'init_itable', 0x3d, 0x7}}]}, 0x81, 0x7a5, &(0x7f0000000f80)="$eJzs3c9rXNUeAPDvnfxq0r6XPHjwXl0FBA2UTkyNrYKLigsRLBR0bRsm01AzyZTMpDQh0BYR3AgqLgTddO2PunPrj63+Fy6kpWparLiQkTuZSSbNTJq0mZlgPh+4uefcc2/O+c65P87MvcwEcGCNpn8yEUcj4v0kYri2PImIvmqqN+L02nr3V1dy6ZREpfL6r0l1nXurK7lo2CZ1uJb5f0R8907EsczWektLy7NThUJ+oZYfL89dGi8tLR+/ODc1k5/Jz5+cmJw8ceq5Uyf3Ltbff1w+cvuDV57+8vSfb//v5nvfJ3E6jtTKGuPYK6MxWntN+tKXcJOX97qyLku63QAeSXpo9qwd5XE0hqOnmmphsJMtAwDa5WpEVACAAyZx/QeAA6b+OcC91ZVcferuJxKddeeliDi0Fn/9/uZaSW/tnt2h6n3QoXvJpjsjSUSM7EH9oxHx6ddvfp5O0ab7kADNXLseEedHRree/5Mtzyzs1jPbFVYGqrPRBxY7/0HnfJOOf55vNv7LrI9/osn4Z6DJsfsoHn78Z27tQTUtpeO/FxuebbvfEH/NSE8t96/qmK8vuXCxkE/Pbf+OiLHoG0jzE9VVmz8FNXb3r7ut6m8c//324VufpfWn8401Mrd6BzZvMz1VnnrcuOvuXI94ordZ/Ml6/yctxr9nd1jHqy+8+0mrsjT+NN76tDX+9qrciHiqaf9v9GWy7fOJ49XdYby+UzTx1U8fD7Wqf6P/B6rztP76e4FOSPt/aPv4R5LG5zVLu6/jhxvD37Yqa9z/m8fffP/vT96opvtry65MlcsLExH9yWtbl5/Y2Laer6+fxj/2ZPPjv9X+n6k9G3t+Pbe93tu/fFH7V03jr7rWKv72SuOf3lX/b5Oo1LZ5oOjm/dmeVvXvrP8nq6mx2pKdnP8e0tLH2JsBAAAAAAAAAAAAAAAAAAAAAAAAYPcyEXEkkkx2PZ3JZLNrv+H93xjKFIql8rELxcX56aj+VvZI9GXqX3U53PB9qBO178Ov5088kH82Iv4TER8NDFbz2VyxMN3t4AEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACg5vDm3/+/ms6y2bWynwe63ToAoG0OdbsBAEDHuf4DwMGzu+v/YNvaAQB0zq7f/1eS9jQEAOiYHV//z7e3HQBA57j/DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQJudPXMmnSp/rK7k0vz05aXF2eLl49P50mx2bjGXzRUXLmVnisWZQj6bK861/EfX1maFYvHSZMwvXhkv50vl8dLS8rm54uJ8+dzFuamZ/Ll8X8ciAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICdKy0tz04VCvkFiW0Tg/ujGfsm0Rv7ohn/+ER/12pvPEsMdu8EBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALDP/R0AAP//aHclQg==") r1 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCXONC(r1, 0x540a, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) write$cgroup_int(r2, &(0x7f0000000000), 0xfffffd26) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x401c5820, &(0x7f00000001c0)=0x8) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r7}, 0x38) bpf$TOKEN_CREATE(0x24, &(0x7f0000000c80)={0x0, r7}, 0x8) r8 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000870004006d00000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_usb_connect(0x6, 0x43c, &(0x7f0000000580)={{0x12, 0x1, 0x200, 0x80, 0xde, 0xb2, 0xff, 0x403, 0xed71, 0x262e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x42a, 0x2, 0x8, 0x3, 0x20, 0xa2, [{{0x9, 0x4, 0xa4, 0x4, 0x5, 0x6, 0xdd, 0x4f, 0x7, [], [{{0x9, 0x5, 0xa, 0x1, 0x20, 0x6, 0xc, 0x7, [@generic={0xb, 0x22, "808f4ca8ffe13483f9"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x40, 0xa, 0x3, 0x4, [@generic={0x2b, 0x2, "aaded7a55b70e9ee8acc6aad86312d2ee830c270c959a2e47a124050241be9e4960cd4569a179c5d47"}]}}, {{0x9, 0x5, 0x4, 0x3, 0x40, 0x0, 0x1, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xa, 0x4}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x4, 0x10}]}}, {{0x9, 0x5, 0x7, 0xe1e05dd67bac4af6, 0x8, 0x4, 0x9, 0x5}}, {{0x9, 0x5, 0x80, 0x3, 0x8, 0x70, 0x4, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x8, 0x8}]}}]}}, {{0x9, 0x4, 0xe2, 0x1f, 0xd, 0xc, 0xff, 0x48, 0x40, [], [{{0x9, 0x5, 0xf, 0x10, 0x20, 0x3, 0x2, 0x6}}, {{0x9, 0x5, 0xb, 0x4, 0x10, 0x2, 0xc0, 0x2}}, {{0x9, 0x5, 0xe, 0x5, 0x200, 0x0, 0x9, 0x0, [@generic={0x5f, 0x21, "b80a8ae9cae59d02f8cbecc3d8c971d270d67ed9437ab112655a25ffcfe301afd320ea06c074258cc76b4e92702abcb0cc14b378e9f21970415cfe75bf26934525ca7a49ca6af273e76aa73a7d6fc6501b682e3ebde19c64b1b68dcb71"}]}}, {{0x9, 0x5, 0xd, 0x19, 0x0, 0x2, 0x20, 0x67}}, {{0x9, 0x5, 0xf, 0x0, 0x1cf, 0xfd, 0x8, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x9b, 0xf000}]}}, {{0x9, 0x5, 0x4, 0x0, 0x10, 0x8, 0x1, 0xf, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x7, 0x9}, @generic={0x55, 0x23, "e31d9435aedb1a859fd90facf12c2a0805ced8d4721039fda52a54eb9e5eed55b347a552bab09c110239835f954626f3c80d0e0255d768d2cc593e2fa26caa74a1551c30dfac7c5cafb1cda49f0b69af3bd4b0"}]}}, {{0x9, 0x5, 0x80, 0x3, 0x3ff, 0x3, 0x10, 0xd1, [@generic={0x43, 0x6, "0a3bc567be436086f7b8431a03572d5cd2b3a62873c57599dbb204e03424ad554acc3b3fc22f044190e77b0ddf1a8881d0e463c5cea230b50b274a0f37b6ff8362"}]}}, {{0x9, 0x5, 0x9, 0x4, 0x20, 0xdd, 0x5, 0x7, [@generic={0x6f, 0x2, "3ac5cbea29ba09935fe7696711fd588119c77028273940975c3642df8e7f1dcc1af62d22cd72074cbb215cd025a81aae47a499f9fd36bbbe4afdb6e422d64d50911674ecec592e110059287386bb6103aab74796b916a0e1b003bbe6f98ed03f08a3f616f63a2d56745a3f5714"}]}}, {{0x9, 0x5, 0xf, 0x10, 0x8, 0x6, 0x3, 0x9, [@generic={0xc2, 0xe, "4af953fcbdc7629471adb0f44f0b31879da8c130d184858fd2b1b648f09ef2c089caa748c501f263090f292650687d75e084d2c5d379d8469cbe25e3e75cfe9a9988610056eeadd65331174562cd64cf3a1241e2376c503f6a263b0c904db76435be83d3d2ac2358511ccb8031e6b508598e819bd22e47ff28efc2b98badb417f606f374a336a474f6318a19f3b5ffeb4f42813118e028b86ff1a4728dfa16eae3778a967c8ea03117fd032962cd99b6f033271c933ac2b247e87e6c271a6418"}]}}, {{0x9, 0x5, 0xb, 0x2, 0x40, 0x18, 0x7, 0x8, [@generic={0x19, 0x1, "0f9fb0930ea53010f024a9cacd59e943e3bb2ba280af05"}]}}, {{0x9, 0x5, 0xb, 0x18, 0x400, 0x10, 0x4, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0x6}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x40, 0x5}]}}, {{0x9, 0x5, 0x1, 0x3, 0x200, 0x10, 0x7, 0x2}}, {{0x9, 0x5, 0x7, 0x0, 0x400, 0x1, 0xfb, 0x5, [@generic={0xbe, 0x31, "6b542ae45323fc2f2e0dfc6ccd2c0d0c30289825621412db870b16421366277bd1bcf237ecb588d27806049662131e219f5df5a8283303302aef24a0602596a6776953e3eab15cc3000ff9d907946192139bdcf160876f892494bfe789793dd50cc081f4f8d21292f4f153663c03dd6264c221c2f596e96538dcda1a1ed1f483b92566acb22ca77db8aad65aa494fafc9e98c63590c5ef3d4e95dfefc5fa742e33b2e3220d76ebcfa28da6c039129dd1b894f18662abe05679dbdea7"}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x8e}]}}]}}]}}]}}, &(0x7f0000000bc0)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x300, 0x2, 0x6, 0x7, 0x8, 0xc9}, 0x5, &(0x7f00000002c0)={0x5, 0xf, 0x5}, 0x5, [{0xe3, &(0x7f00000003c0)=@string={0xe3, 0x3, "fdfb4db3824b31d7c7c632d4a3032df6e61fc20b1c77daa7942df304407a07e786f32191bca069c182321672a91d02998b75ecbb554e29d044c73ef2dc360d1ecc4db10b90d24d250f4c0ad7027514e8ba437062c8d5c9cafc771f6924c9968fe77fdfd1158a690bc3ff5d742e8342dc43f3f4b474f0578f6a018e8c2257ddda77f8ccc028232baf461ab61c693ee500d5a4ea214763948e7908d3f879385f9fcbc72c0c3193bffb721368c8c97295a2d0070acc5a0649f5a9ff0f07a61398fc8bdd5a05456744f3328716b348843e6f3e07202bdbde1d4e096bdf2048f356c952"}}, {0xd3, &(0x7f00000009c0)=@string={0xd3, 0x3, "45622e4dfb24bbba306d2a6d7304006799f30e41348afd14163712a79ba449a54137598af33172b600f9d69e020847b4cbb99b20ce2e47bb2a148c275d8841bec5a08bf024ef9efc151636143a22aaf28753cbc5d114d64a11369035e5cd8161d63d65644fe9cb9e7a7cbecbb80535742670213f7a17d36e4340f5c67498faee37dedcd7ff2a8067ddfdb662519cc34c771f9395776379c4e655fa659251aa1d198a929a2b7db1c3b703711d6f35140b0ddc0c091ac61643457a6267b885fd38c41cfe032d67b760c1d8dca1d3ec8e268c"}}, {0x96, &(0x7f0000000ac0)=ANY=[@ANYBLOB="96031c30af9880326ccdee1dfbdfde0f38ebe1c03269f00f97806bf119719bb040c089a229d2693ba5b8f2106fe33e46b975ff37b8503d81a1258c4266bb4efdf088cb7bf3430bfb2507f586ca44d365bb1068a45c033e214db7a40dee9fcb483b3a0b1011853ea45d64484b984d27ab7eecea975cefcc69878aa0f69edc9c5c555ff4bcb6d359e65882ab420f812bc76457b6850000"]}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x2409}}, {0x4, &(0x7f0000000b80)=@lang_id={0x4, 0x3, 0xf8c6}}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r9}, 0x10) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140000000075c0000000e0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xec}}, 0x0) 24.371504792s ago: executing program 2 (id=131): socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000000200), 0xfc, 0x56d, &(0x7f00000013c0)="$eJzs3c9rHFUcAPDvTJI2/aFJoRT1IIEerNRumsQfFTzUo2ixoHcNyTaUbLoluylNLNge7MWLFEHEgujdu8fiP+BfUdBCkRL00MvKbGbTbbObX910t93PB6Z9b2Y273135vv2zc4uG0DfGsv+SSNejYjvkoiRpm2DkW8cW9tv9cG1mWxJolb77J8kknxdY/8k//9QXnklIv74JuJkurHdyvLK/HSpVFzM6+PVhcvjleWVUxcXpueKc8VLk1NTZ96Zmnz/vXc7Fuub5//78dM7H5359vjqD7/dO3IribNxON/WHMdTuN5cGYux/DkZirNP7DjRgcZ6SdLtDrArA3meD0U2BozEQJ71LdVGnmXXgD32dZbWQJ9K5D/0qcY8oHFt36Hr4OfG/Q/XLoA2xj+49t5IDNevjQ6uJo9dGWXXu6MdaD9r4/e/b9/Klujc+xAAW7p+IyJODw5uHP+SfPzbvdPb2OfJNox/8OzcyeY/b7Wa/6Tr859oMf851CJ3d2Pr/E/vdaCZtrL53wct57/rN61GB/LaS/U531By4WKpmI1tL0fEiRjan9U3uZ/zZbp6t9ZuY/P8L1uy9htzwbwf9wb3P/6Y2enq9FMF3eT+jYjXWs5/k/Xjn7Q4/tnzcX6bbRwr3n693bat499btV8i3mh5/B/d0Uo2vz85Xj8fxhtnxUb/3jz2Z7v2ux1/dvwPbh7/aNJ8v7ay8zZ+Hn5YbLdtt+f/vuTzenlfvu7qdLW6OBGxL/lk4/rJR49t1Bv7Z/GfOL75+Nfq/D+QJfY247959GbzrsM7i39vZfHP7uj477xw9+OvfmrX/vaO/9v10ol8zXbGv+128GmeOwAAAAAAAOg1aUQcjiQtrJfTtFBY+3zH0TiYlsqV6skL5aVLs1H/ruxoDKWNO90jTZ+HmMg/D9uoTz5Rn4qIIxHx/cCBer0wUy7Ndjt4AAAAAAAAAAAAAAAAAAAA6BGHIoZbff8/89dAt3sH7LlNfvIbeMG1z/98Syd+6QnoSV7/oX/Jf+hfu8z/WttfNQWeG17/oX/Jf+hf8h/6l/yH/rWT/P/13B52BAAAAAAAAAAAAAAAAAAAAAAAAAAAAF4M58+dy5ba6oNrM1l99sry0nz5yqnZYmW+sLA0U5gpL14uzJXLc6ViYaa8sNXfK5XLlycmY+nqeLVYqY5Xlle+WCgvXXpYW1MceiZRAQAAAAAAAAAAAAAAAAAAwPOlsrwyP10qFRcVFHZVGOyNbnShkOY51Cv96WyhywMTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADT5PwAA//9RjD5B") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f00000006c0)={0x0, 0x2904c, 0x4, 0x10003, '\x00', [{}, {0xffffffff, 0x5, 0x0, 0x0, 0x0, 0xb}], ['\x00', '\x00', '\x00', '\x00']}) socket$inet6(0xa, 0x800000000000002, 0x0) 24.205404622s ago: executing program 2 (id=132): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x2711, @hyper}, 0x10, 0x80800) connect$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x2711, @local}, 0x10) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000200)={0x10003, {{0xa, 0x4, 0x1, @mcast1={0xff, 0x7}}}, {{0xa, 0x2, 0xfffffffc, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, 0x108) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x512, &(0x7f0000000c40)="$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") mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) 23.045950335s ago: executing program 2 (id=137): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x513, &(0x7f0000000c40)="$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") sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000003280)=@newtaction={0x2efc, 0x30, 0x1, 0xffffffff, 0x0, {}, [{0x30, 0x1, [@m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}, {0x1ae0, 0x1, [@m_ife={0x6c, 0x17, 0x0, 0x0, {{0x8}, {0x34, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x6}, @TCA_IFE_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3a}}, @TCA_IFE_TYPE={0x6, 0x5, 0xfffa}, @TCA_IFE_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}}, @TCA_IFE_METALST={0x8, 0x6, [@IFE_META_PRIO={0x4, 0x3, @void}]}]}, {0x13, 0x6, "529bea26d3cc40952c75ad0787f0f3"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_skbedit={0xac, 0x9, 0x0, 0x0, {{0xc}, {0x14, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xf, 0xfff3}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x81}]}, {0x6e, 0x6, "6be5c349a12bf3ed68be26c412a69596dec22a36f3215154d513dd1b6941eb009f9bdeccc42092234efe555585e69ee9592adb890b030e74cfe52b77a7df72a01f786706b897fd2dba607522b8ad7d74cb14996465add7b00eb688b075bbef5c94a3469147f63565dd1d"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_mpls={0x60, 0x2, 0x0, 0x0, {{0x9}, {0x14, 0x2, 0x0, 0x1, [@TCA_MPLS_TTL={0x5, 0x7, 0xa}, @TCA_MPLS_PROTO={0x6, 0x4, 0x6003}]}, {0x22, 0x6, "d8892085d9e14bd25aebd08e105e3982a4d5385183612f9872079b53c05f"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_xt={0x504, 0xf, 0x0, 0x0, {{0x7}, {0x3f4, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_TARG={0x10b, 0x6, {0x6, 'security\x00', 0x6, 0x377, "4a625e32ea298f624b0788892c53386a4aa421dc333df0ed49244c85dee915c59aa3ad5dc65dc85169336d6c9651629c08cb1ea04d73ce8f54abe580af890c82431a8b56bf0a13130ab5a751cf11cad4dc931d7ffde6f724bac4f163ea2309e16e9b54d3c37018f6887a1d80fc85f02efd84d7c706bbfb53a470d8cb493b2d9dcd1b2d92aa4444b32c41326251228ed4bf33b9bb6fbf01bf8b19c325795d875d138fa95cf11579ced4cfd2d3ae94b9a34bcee5218dfe37955b334434604f4971fde79c52a3e066b174a013754d2704c8296cf8ba7529e81c33dc0ba5368eeea731"}}, @TCA_IPT_TARG={0x125, 0x6, {0xed, 'mangle\x00', 0x8, 0x78, "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"}}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_TARG={0x5f, 0x6, {0x7, 'mangle\x00', 0x0, 0x6, "c034c978394217e69191d4e39d1fae2d50697eca90ed08a828032deed5595b5f5d6f69b778d4ae28df859f2763d9916b645c8cf9fb"}}, @TCA_IPT_TARG={0x11f, 0x6, {0x7c, 'security\x00', 0x3, 0x101, "c0354b1792028b97069d337dda56ff7c001906c4b0c57017b95b99ccb602bbc1bc039b46de14bcb9be031489d6e95125b97a5932c1b84ebe24acf134fa3b312d1fd83291c155330ae9b812b48abe6df556571c4ed7f3f622cb0c3d7bf79d886cf575ade894e96d5ccab24ad0853dae5cead80549cfb469f4179ea4a971c4e1425e3556148618308973b89632c7c41e587319c565af2255d3da6879db410edf74d83c5f1b4352ab2d68c1d687b3d9ded82664c7918bbe56d1a7160464946f05a33e9d04841627e53e194db7650e9659fd4f96d923573985b1a79c923f3717aa5e89f2d2ff36518933401493ba1cc4fda9d83000ae7f"}}]}, {0xec, 0x6, "59f4f907081ef635921a41b918c2a8f0a3be56b26e61fb07c8f27f969fc059887fa9ca5b5c4e9df90b1735c176469a11407b7252e01191d4f7b1788dd634c9c1533edc9543bfbd91da1c74f191bca8d7a59908464d41a4ba0d5447b43b3f3049bc1a6420e8caf1d1a5880535bad929711fb5deaa75f6f953e4730304be37d185a22b0b15cf26ee08382d31659c0fd3575ac92e1e2fec9833854d414a58318acae08757f5c40ac137162970ad6b3d0c823f68004efd60309218a140f63cc12307123fdf15687780a7db651caa084b9aa809b30d67a8dfd70173596a73f9f1edafa7d7b8074585faba"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_gact={0x118, 0x13, 0x0, 0x0, {{0x9}, {0xac, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0xffffffff, 0x6, 0x3, 0xad2, 0x6b62}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x2251, 0x10000000}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x74, 0x4}}, @TCA_GACT_PARMS={0x18, 0x2, {0xffffffff, 0x9, 0x5, 0x4}}, @TCA_GACT_PARMS={0x18, 0x2, {0x4, 0x80000001, 0x7, 0x5, 0x2}}, @TCA_GACT_PARMS={0x18, 0x2, {0xfffffff9, 0x2, 0x5, 0xb5a, 0x2}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x136a, 0x2cb1c9ba9d013ed8}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x2524, 0x5}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x75e, 0x2}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x13c7, 0x2}}]}, {0x41, 0x6, "23a13a360ce993c2d5f25085f2ece9373a20ffde7f010814f771f7b6f2fd959504a49d2abbea1d5a400f4c93ca7d31e86ed52f2926e57a966959fb3508"}, {0xc, 0x7, {0xe9c3d391fd0014f8}}, {0xc, 0x8, {0x3}}}}, @m_nat={0x1b4, 0xc, 0x0, 0x0, {{0x8}, {0xa4, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xffffffff, 0x6, 0x10000000, 0x4, 0x4}, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x6, 0x700000, 0x4, 0x9c9, 0x8000000}, @empty, @empty, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0x7, 0xffffffffffffffff, 0x10000, 0xfffff1da}, @rand_addr=0x64010102, @remote, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0x200, 0x7, 0x8, 0x2}, @rand_addr=0x64010101, @rand_addr=0x64010102}}]}, {0xec, 0x6, "0ecb1ed75020640799aa1ccdd402c0fa463ff0436a80b5966f415297db6007ef818fed90407adf7cf929ae6351f1f2301d31da448f9ef506af384a3477d0094b5e82ee57cd8a493887ea189e69c5f2bd6ba29146c767a7c24a909bfb983f5e253ef7800ceddd034903ce609b1d9cc1609f932b2a5213a0b27e1b1d73f5ba27437f963e35e7408435d2cb9a9041034976be0b917337cc69b07247f2fcc6b11375b2208be9d432929f11bfba01dd44577b746ea43311dc2e7017d30922bd4211843afe0a27073471aeed17571dcf0960f00bbaf59e42906068f66cb15e9ecb26f4289dc1dd33551959"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_pedit={0x100c, 0x11, 0x0, 0x0, {{0xa}, {0xee8, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x64, 0x5, 0x0, 0x1, [{0x54, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}]}, @TCA_PEDIT_PARMS_EX={0xe80, 0x4, {{{0x10000, 0x3, 0x20000000, 0x10000, 0x400}, 0x7e, 0xf3, [{0x3, 0x1ff, 0x401, 0xfffffff9, 0x6, 0x3}, {0x817d, 0x8, 0x4, 0x6, 0x1f, 0x4}, {0x9, 0x3, 0xf59, 0x1, 0xc}, {0xb6e7, 0xd, 0x9, 0xf, 0xfff}]}, [{0x8, 0x401, 0x7, 0x7, 0xd6, 0x3}, {0x7, 0x0, 0x70000}, {0xc447, 0x454b, 0x5b, 0x4, 0xffffffff, 0xc42}, {0x6, 0x7, 0x383, 0x2, 0x7, 0x9}, {0x0, 0x4, 0x7fff, 0x2, 0xd}, {0x5, 0x1, 0x8, 0x5, 0x7, 0x1}, {0x8001, 0x4, 0x6, 0xa624, 0xfffff801, 0x8}, {0x7c, 0x5, 0x7a, 0x1000, 0xfffffffe, 0x5}, {0x2, 0xa0, 0x2, 0x0, 0x5, 0xffffffff}, {0x0, 0x764b, 0x3, 0x0, 0x8, 0x80}, {0x7ff, 0x5, 0x101, 0xffffffff, 0x7, 0x3}, {0x5, 0x100, 0x6, 0x7, 0x368c, 0x9}, {0x1e2, 0x8000, 0xa, 0x401, 0x7fffffff, 0x7fffffff}, {0xffffffff, 0x8, 0x5, 0x1, 0x63, 0x1}, {0x5, 0x9, 0x59b3, 0x9}, {0x4, 0x3, 0x9f2, 0x2, 0x7, 0x5}, {0x1ff, 0x16, 0x9, 0x0, 0x3, 0x1}, {0x200, 0x7fffffff, 0x5, 0x3, 0xa7, 0x1}, {0x9, 0xf, 0x4, 0x553c, 0x5, 0x4}, {0x7, 0xc1, 0x1da, 0x0, 0x2800, 0xfffffffa}, {0xffffffc3, 0x81, 0x10000, 0x7fffffff, 0x4, 0x2}, {0x5, 0x8, 0x1, 0x4, 0x4, 0xffffffe2}, {0x9, 0xf499, 0x39, 0x81, 0x0, 0x40}, {0x5, 0x9, 0x7fffffff, 0x0, 0x3482, 0x10}, {0x4, 0xab12, 0x1, 0x4, 0x1, 0x101}, {0x1ff, 0x5, 0x7, 0x36, 0xffffffff, 0x1}, {0x2, 0x1ff, 0x7, 0x1000, 0x8, 0x6}, {0x6, 0xfffffffe, 0xffff, 0x3, 0x40, 0x1}, {0x1, 0xdd1, 0x2, 0x1, 0x8, 0x1097}, {0x4, 0x8, 0xa, 0x2, 0x9b, 0x7fff}, {0x9, 0x7fffffff, 0x1ff, 0x5, 0x8c, 0x3}, {0xfff00000, 0x8000, 0x5, 0x4, 0x4, 0x3}, {0x7, 0x0, 0x1, 0x0, 0x81, 0x5}, {0x7, 0x7f, 0x2, 0xfffffff7, 0xf, 0x10001}, {0x5, 0x3, 0x323e, 0x5, 0xee08, 0x4}, {0x4, 0x10000000, 0xfffffffe, 0x9, 0x7fffffff, 0xfff}, {0x80000000, 0x3c, 0x6, 0x1, 0x10000}, {0x10001, 0x7, 0x3, 0x5d, 0x7e88, 0x5}, {0x4, 0x6, 0x3, 0xfffffffa, 0x9, 0x3}, {0x6, 0x6, 0x1, 0xc, 0x2c9c, 0x71c}, {0x5, 0x2, 0xc42, 0x3, 0x9, 0x9}, {0x2b63, 0xea, 0x2000, 0x4d, 0xffff, 0x8}, {0xc, 0x8000, 0x4483, 0x2, 0x8, 0x7}, {0x9f0, 0x3ff, 0x2, 0x10001, 0x1, 0x5}, {0x1, 0x7, 0x3, 0xf3, 0x100, 0x400}, {0x6, 0x9, 0x0, 0x3, 0x5, 0xc}, {0x6, 0x6, 0x0, 0xa9ea, 0x3, 0x7}, {0x2, 0x4, 0x84ee, 0x40, 0x8, 0x3}, {0x8001, 0x5, 0x4e3, 0x7, 0xd, 0x2}, {0x7fffffff, 0x100, 0x5b140757, 0x2, 0x7f, 0x4}, {0x1ff, 0x9, 0x1, 0x6, 0x0, 0x7}, {0x10001, 0xffffff80, 0x4, 0x4, 0x40, 0x5}, {0x800, 0x200, 0x4, 0x81, 0x2, 0x800}, {0xa, 0x80000001, 0x457, 0x0, 0x671c554d}, {0x1, 0x2, 0x9, 0x6c27, 0x800, 0x1}, {0x7a8, 0x4, 0x9, 0x0, 0x4, 0xfffffff9}, {0x1ff, 0xfffffffe, 0x8, 0xe31, 0x4c23, 0xa1}, {0x0, 0x7, 0x1ff, 0xff, 0x8, 0x4}, {0x1, 0x6, 0x9, 0xdb, 0x1, 0x400}, {0x5, 0x81c7, 0x1000, 0xffff, 0x6, 0x9}, {0x4, 0x1000, 0x2, 0xa5, 0x87, 0x80000001}, {0x7c, 0xc, 0x5, 0x5, 0x7, 0x67810be4}, {0x5, 0x11, 0x5, 0x1, 0x3ff, 0x7f}, {0x10001, 0x3b, 0x2, 0x2, 0xf92, 0xd4}, {0x6, 0x4, 0xffff, 0x0, 0x4b8d, 0x3}, {0x4, 0xfff, 0x533, 0xb0, 0x0, 0x401}, {0x400, 0xf, 0x800, 0x4, 0xffff, 0x1}, {0x8, 0x49, 0x4, 0x8, 0xf9b3, 0x2}, {0x1fda, 0x81, 0xa, 0x1, 0x4, 0x2}, {0x3, 0x54, 0x4, 0xffff, 0x2, 0x7ff}, {0x6020, 0x101, 0x9, 0xb96, 0x3, 0x7fff}, {0x2, 0xc18, 0xfffffffc, 0x3, 0x1ff}, {0x0, 0x1, 0x6, 0x4, 0xfffffffe, 0x4}, {0x1, 0x1000, 0x3185, 0xffff, 0x9, 0x100}, {0x4, 0x0, 0x6, 0x2, 0x0, 0xfffffffe}, {0x4, 0x2f, 0x5, 0x8000, 0x3, 0x101}, {0x9, 0x9, 0x8, 0x3, 0x3, 0x9}, {0x80000000, 0x5, 0x9, 0x3, 0x6, 0x1ff}, {0xfffffff7, 0xe, 0x4, 0xf2, 0x101, 0x1}, {0x1, 0x200, 0x1, 0x8, 0xfffffff8, 0x6}, {0x24, 0x400, 0x10001, 0x5, 0x1b1a, 0x2}, {0xfffffffa, 0x0, 0x0, 0x3, 0xe8bf, 0x9}, {0x7f, 0x4, 0x3, 0x0, 0x8000, 0x8}, {0x7, 0xf8, 0x401, 0x7, 0x401, 0x6}, {0x3, 0x9, 0x81, 0x6, 0xe4, 0x3c07}, {0x9, 0x6, 0x4800000, 0x9, 0x1200000, 0xb}, {0x6, 0x7, 0x9556, 0x9, 0x2, 0x8}, {0x2e2, 0xc7, 0x8001, 0x5, 0x7, 0x7}, {0x0, 0x9, 0x4, 0x3, 0x1ff, 0x8}, {0x7fff, 0xdee, 0xe2, 0x0, 0x5, 0x80000000}, {0x0, 0x79d, 0x80000000, 0x25, 0x7fff, 0xffff}, {0xfffffff9, 0xa, 0x4, 0x4, 0x401, 0xa}, {0x0, 0x7, 0x8, 0x1, 0x5, 0x401}, {0x6, 0x8, 0x0, 0x7, 0x9, 0x9}, {0x1, 0x3, 0x6, 0x10000, 0x9b, 0x131e}, {0x8001, 0x482c, 0x1, 0x9, 0xfffffff8, 0x3ff}, {0x80000001, 0x4, 0x3, 0x2, 0x2, 0xb}, {0x4, 0x4, 0x5, 0x0, 0x10, 0x10}, {0x3, 0x7, 0x1, 0x9, 0x7f, 0x3}, {0xfffffff7, 0x5, 0x7f, 0x1ff, 0xfffffffc, 0x4}, {0x1, 0x6, 0x5, 0x5, 0x6, 0x40}, {0xa8, 0x2, 0x8, 0x7ff, 0x0, 0x80000000}, {0x5dc7, 0xc0a1, 0x5, 0x8, 0x471, 0x1}, {0x8, 0x5, 0x3, 0x1, 0x5, 0x6f}, {0x5, 0x7fffffff, 0x3, 0x3, 0x3d, 0x3}, {0xff, 0x8, 0x4a27, 0x8, 0x17, 0xdc}, {0x4, 0x3ff, 0x2, 0x72800000, 0xd4ce, 0x5}, {0x8001, 0x0, 0x0, 0x3, 0x6, 0x6}, {0x1, 0xffff, 0x3f800, 0x4, 0x6, 0x4}, {0x4, 0x1, 0x7f, 0x8001, 0x3b6, 0xdea}, {0x54, 0x3, 0x3, 0x0, 0x3}, {0x2bb1, 0xf, 0x2, 0x1, 0x4, 0x50}, {0x7, 0x7, 0x101, 0x9, 0x7c4, 0x3a6}, {0x0, 0x59, 0x6, 0x2, 0x1, 0xe63d}, {0x6, 0x4, 0xc5a, 0xfffff001, 0x92e8, 0x1}, {0x1000, 0x6, 0x200000, 0xfffffffb, 0xa, 0x5}, {0xff, 0x9e4, 0x5, 0x100, 0x7, 0x71}, {0x295, 0x9, 0x1, 0x2, 0x8000, 0x3}, {0xff07, 0x10001, 0x8, 0x4, 0x1, 0x3}, {0xee2a, 0x420d, 0x8000, 0x73, 0x8, 0x1}, {0xb, 0x9, 0xb0a, 0x80000000, 0x3, 0x3ff}, {0x4, 0x6, 0x8, 0xf, 0x10, 0x3}, {0x7, 0xb37c, 0x4, 0x9, 0x1, 0x2}, {0x4, 0x4, 0x3f3b, 0x5, 0x1, 0x7}, {0x52b1, 0xe9, 0x10001, 0x10000, 0x80, 0x4}, {0x1, 0xbb8, 0xb6b, 0xb78, 0x5, 0x5}, {0x10000, 0x52d7, 0xfffffffe, 0x8, 0xe29, 0x4}, {0x7f, 0xf, 0x3, 0x4, 0x6, 0x67a50b1f}], [{0x5}, {}, {0x4}, {0x1, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {}, {0x1}, {0x0, 0x1}, {0x5}, {0x4}, {0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x4}, {0x1, 0x1}, {0x1, 0x1}, {}, {0x0, 0x1}, {0x5}, {}, {0xfa33169e294e5a77}, {}, {0x4}, {0x30d49ffcf33dfc01}, {0x7, 0x1}, {0x1, 0x1}, {0x4}, {0x3, 0x1}, {0x3}, {0x3}, {0x1}, {0x2}, {}, {0x2}, {0x5, 0x2586fc0f527a6e8a}, {0x0, 0x1}, {0x4}, {0x1, 0x1}, {0x5}, {0x0, 0x1}, {0x4}, {0x5}, {0x4, 0x1}, {0x5}, {0x5}, {0xbb98a5c75a84c9e0}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x4}, {}, {0x1, 0x1}, {0x5}, {0x4}, {0x5}, {0x0, 0x1}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {0x1, 0x1}, {0x2, 0x1}, {0x3}, {0xa, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x2}, {0x4}, {0x4, 0x1}, {0x2, 0x1}, {0x3}, {0x4}, {0x5}, {0x3}, {0x3}, {0x2, 0x1}, {0x2, 0x1}, {0x5}, {0x5, 0x1}, {0x2}, {0x0, 0x1}, {}, {0x3}, {0x3, 0x1}, {0x0, 0x288322f536a310eb}, {0x5, 0x1}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {0x3}, {0x1, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {0x5, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x3}, {0x3, 0x1}, {0x3, 0x1}, {}, {0x0, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x2}, {}, {0x5, 0x1}, {0x2}, {0x4}, {0x4}, {0x3}, {0x0, 0x1}, {0x2, 0x1}, {0x2}, {0x4}, {0x5}, {0x4}, {0x2}, {0x0, 0x1}, {}, {0x1}, {0x2, 0x1}]}}]}, {0xf9, 0x6, "81633a911a79346219ddfa77358d7fc6a5d508d62debcd6bbf4648bec2cca3ee2211b0d410e3326119ca0948c2ddbafd799c2366afd2862961596973257314c92d59024684ee2bd6f9210a42dc5b48f4fc83d5102242217e9aba2a800d1d67ea2364d55920fb0bb454c93399f3dcfc9a129bb6bc99c7edd5fe79e36a0433674f1449f02024d80a797b9a4537fbe61e293fb50901e8ab0670f0db4d7b1309aefd7fba08f628a96483330cd7b10cf7593eb57923e37f9f52996876eb6770ba6c948eb6a644d9dbfb12cc8d871ba7d5fdb4608e765e7c140e6ee5862e681eac8863ffd21a2729604a936cd610994f2610867c57c10916"}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_csum={0x188, 0x12, 0x0, 0x0, {{0x9}, {0x100, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x7fff, 0x5, 0xfffffffffffffff4, 0x9, 0x7}, 0x59}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x7, 0x3, 0x38, 0x3c}, 0x4f}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x8, 0x10000000, 0x0, 0x3}, 0x23}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x9cf, 0x101, 0x8, 0x8, 0x3d370ac2}, 0x2c}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x3, 0x7, 0x3, 0xd, 0x2}, 0x23}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x5, 0xa3, 0xffffffffffffffff, 0x4, 0x1343}, 0x37}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0x7, 0x0, 0xc3b9}, 0x2c}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8000, 0x40, 0x10000003, 0xd, 0x1}, 0x33}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xffffffff, 0x5, 0x10000000, 0x3, 0x2}, 0x19}}]}, {0x60, 0x6, "0ffc3655458657c01dd8436ba52a90c5d453a4a91c8186f75383e1b8dbcc5aafd9cab9038353353ff83fb682312d88ce5fcf7e8857029ef033f4b2584377e217ccfe1105cb2d4a7e0910288ddab990bb3fd01c89700b7564417788d6"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}, {0x118, 0x1, [@m_sample={0x114, 0x0, 0x0, 0x0, {{0xb}, {0x4}, {0xe6, 0x6, "1b22df7a5f41290ae0ee7ae4fc4c9002b09764bb8475a78850301650012eac60749cd769e8ea1f7e8140a782e8f0995b334f51422b17ad69b827c47ea1be06fbe08d9effa07fee5d27b32023aa1b82fbfd7eaacb154c56745ffbc7d7793f41e4cbef57af44ae30e3d7f274889cc670abc6444ea404c940bbe7f2d3a4e6b500eff42ce18763dad933cd60bdf4e2c7b7fd06f0c9c8a3f575ff6f6ad67c75c0a1b15b08530039568030032ec5f1e142fb5d6c65c52ec21d024af70d21957efb0fec5c6de55d6a9568a449aad2b49c141b8f3f32bd2cab68f9ef74902750c0070d0b0d23"}, {0xc, 0x7, {0x0, 0x5f8e448858a52d20}}, {0xc, 0x8, {0x1, 0x3}}}}]}, {0x12c0, 0x1, [@m_vlan={0x1038, 0xc, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x7}]}, {0x1004, 0x6, "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"}, {0xc}, {0xc}}}, @m_skbmod={0x148, 0x13, 0x0, 0x0, {{0xb}, {0xcc, 0x2, 0x0, 0x1, [@TCA_SKBMOD_SMAC={0xa, 0x4, @multicast}, @TCA_SKBMOD_DMAC={0xa, 0x3, @broadcast}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x46, 0x47, 0x6, 0xb2, 0xff}, 0xe}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x4, 0x521, 0x5, 0x7, 0x7ff}, 0x8}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @remote}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x8, 0x9, 0x8, 0xe, 0x8000}, 0x8}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x3, 0x7fff, 0x6, 0x80000001, 0x7}, 0x5}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @remote}, @TCA_SKBMOD_ETYPE={0x6}]}, {0x53, 0x6, "a792150fbc7023e14f16b8845d6e3672e70d63344c641142096231b5e376091d99323035bbd3dc4a9044a98c3de9b4f75191f394c58a7de62714d74e19973d8d38b0db84d465e3b935535c00a2e6b5"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3}}}}, @m_sample={0xf4, 0x4, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x7}]}, {0xbe, 0x6, "a3829012ac8c4c1692b2eb19446d9465e32cbcfeae19c2c85363dbf11f96270c2e6efb85a671f4979802275ed403c8a2cd13ed7bf6ff9b6ddcdd09460e88ef2898df03fe39841fe1b64bad77e895fae8f633a4ca7cc99c3cbe0f42a3914cb7d05a2cb271dc39c467e923e2eeb6044a63f743ac9839f26df0b6d21c1d9ac965bf8613a897e7ac47a6671ab73eb2bc474e898ea343d0ca7acc9c401d4483a582d5c4b5a6174989b05ab7be6d71b3dcecd8cb08033045306747b09f"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3}}}}, @m_skbmod={0x48, 0xd, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @random="64f1950b797e"}, @TCA_SKBMOD_DMAC={0xa, 0x3, @remote}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x2efc}, 0x1, 0x0, 0x0, 0x804}, 0x10) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0xffffffff, 0x0, 0xffffffff, 0x273}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r7}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r3, 0x47f9, 0x0, 0x0, 0x0, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f00000000c0)={0x0, 0x989680}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r8 = socket(0x10, 0x3, 0x0) connect$netlink(r8, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) sendmsg$nl_route_sched(r8, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000180)=@newtaction={0x18, 0x31, 0x829, 0x0, 0x0, {}, [{0x4}]}, 0x18}, 0x1, 0x1000000}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r9 = timerfd_create(0x0, 0x0) poll(&(0x7f0000000100)=[{r9, 0x1000}], 0x1, 0x6) tkill(r1, 0x32) 22.069446261s ago: executing program 2 (id=147): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x20, 0x1, 0x178, [], 0x0, 0x0, 0x0}, 0x1f0) 21.138108686s ago: executing program 2 (id=157): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) syz_mount_image$tmpfs(0x0, &(0x7f00000040c0)='./file0\x00', 0x810000, 0x0, 0x6, 0x0, &(0x7f0000000000)) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='nr_inodes=2']) chdir(&(0x7f0000001b80)='./file0\x00') open(&(0x7f0000000040)='.\x00', 0x418601, 0x8) 21.102992636s ago: executing program 32 (id=157): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) syz_mount_image$tmpfs(0x0, &(0x7f00000040c0)='./file0\x00', 0x810000, 0x0, 0x6, 0x0, &(0x7f0000000000)) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='nr_inodes=2']) chdir(&(0x7f0000001b80)='./file0\x00') open(&(0x7f0000000040)='.\x00', 0x418601, 0x8) 2.578415952s ago: executing program 0 (id=455): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x20, 0x1, 0x178, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000c00], 0x0, 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000001100000000000000000200000000000000000000000000000000000000feffffff0100000019000000000000000800000000000000000000000000e9ffffff7465716c3000000000000000000000006970365f76746930000000000000000062637366300000000000000000000000ffffffffffff000000000000aaaaaaaaaa000000000000000000b8000000b8000000e80000006970000000000000000000000000000000000000070000000000000000000000200000000000001bac1414bbffffffff00000000000000000006d9177bc20000000000fd0bf400"]}, 0x18f) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000009, 0x28011, r0, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x20, 0x1, 0x178, [], 0x0, 0x0, 0x0}, 0x1f0) 2.541369222s ago: executing program 0 (id=458): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x2f00, 0x0, 0x0, 0x6, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @multicast1, @multicast1}}}}) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x8004, &(0x7f0000000080)={[{@discard}, {@bh}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x7b9, &(0x7f00000007c0)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r3, &(0x7f0000000140)='2', 0x1, 0x8080c61) 2.242772631s ago: executing program 4 (id=466): r0 = socket$inet(0x2, 0x80001, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x2, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) creat(&(0x7f0000000140)='./file0\x00', 0x0) inotify_init1(0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2.15790787s ago: executing program 4 (id=469): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x24}, 0x1, 0x5502000000000000}, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f0000000240)=ANY=[], 0x1, 0x121d, &(0x7f0000002780)="$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") socket$inet6(0xa, 0x40000080806, 0x0) syz_io_uring_setup(0x3aec, &(0x7f0000000440)={0x0, 0x0, 0x10100}, &(0x7f0000000000), &(0x7f0000000200)) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000080)=0x414e, 0x4) connect$inet(r1, &(0x7f0000000340)={0x2, 0x4e22, @local}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x40, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)) ppoll(&(0x7f0000000000)=[{r3, 0x205}], 0x1, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x100) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) 2.09370242s ago: executing program 1 (id=470): perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x42000, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe4, 0x6}, 0x100000, 0x0, 0x0, 0x6, 0x6, 0x4, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000000200), 0xfc, 0x56d, &(0x7f00000013c0)="$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") ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f00000006c0)={0x0, 0x2904c, 0x3, 0x10003, '\x00', [{}, {0xffffffff, 0x5, 0x0, 0x0, 0x0, 0xb}], ['\x00', '\x00', '\x00']}) 1.762269929s ago: executing program 1 (id=472): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800080000fcffff08000900fcfc0000080011000000000008000e00800000000800", @ANYRES64=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1.758681658s ago: executing program 1 (id=473): pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, 0x0, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="458d1fca4f1d0461442e12c4d90f415ec86aa74e137467ce700772d98322478e00f9689a5b085293e2f9ffffffd5b5762c4abbdeaa46aabe11c0f54ee3fe6ae0f859606f", 0x44}], 0x1) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket(0xa, 0x801, 0x0) getsockopt(r1, 0x0, 0x21, 0x0, &(0x7f0000001ffc)) r2 = accept$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) recvmsg(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000480)=""/68, 0x44}], 0x1}, 0x4c2103a0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0xffffffff, @loopback}, 0x1c) r4 = io_uring_setup(0x77bb, &(0x7f00000000c0)={0x0, 0xd709, 0x2, 0xf7fffffe, 0x2000062}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000440)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r5, 0x0) io_uring_enter(r4, 0x800000, 0x2, 0xf, &(0x7f0000000000)={[0x2000000]}, 0x18) 1.470165367s ago: executing program 0 (id=478): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001800010025bd7000fddbdf251d0105001500040004000040080300007f06e9fbe89681000005000107040508000e000000000000ccf29e44cf96a313b01e4ff9621d50cb6bef5a0e7bdc272df57fdee8dff86704629a3292457349ee499a2c71db1f33c1b5684f385a1c8c98dc7f5ded6d68f13e3bde63f243dbb775569021ca5c87790fcbd8be6f2ec268acd02d194540eb", @ANYRES32=0x0], 0x3c}, 0x1, 0x0, 0x0, 0x20044806}, 0x48080) 1.300456766s ago: executing program 4 (id=480): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./file2\x00', 0x404, &(0x7f0000000280)={[{@nogrpid}, {@orlov}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@debug}, {@nombcache}, {@quota}, {@nolazytime}]}, 0x3, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV") bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001c2df6f270000000fad413ec50000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000400)='module_free\x00', r0, 0x0, 0x9}, 0x18) (async) r1 = socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="3400000011000500020000000200000007000000", @ANYRES32=r3, @ANYBLOB="004002000000000014001a80100005800c000280080001"], 0x34}}, 0x0) (async, rerun: 64) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) (rerun: 64) sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@updpolicy={0xb8, 0x19, 0xfd3649826d894c67, 0x0, 0xfffffffd, {{@in6=@dev={0xfe, 0x80, '\x00', 0x36}, @in6=@private1, 0x0, 0x0, 0x0, 0xfffa, 0xa, 0x0, 0x26b9ffe36856e205, 0x2e}, {0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}}}, 0xb8}}, 0x0) getsockopt$netlink(r4, 0x10e, 0x8, &(0x7f00000000c0)=""/50, &(0x7f0000000100)=0x32) syz_emit_ethernet(0x52, &(0x7f0000000380)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "101040", 0x1c, 0x6, 0x0, @remote, @local, {[], {{0xfffe, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x7, 0x40, 0x0, 0x0, 0x2, {[@mss={0x2, 0x4, 0x7}, @fastopen={0x22, 0x2}]}}}}}}}}, 0x0) 1.234201156s ago: executing program 5 (id=481): syz_usb_connect(0x0, 0x24, 0x0, 0x0) epoll_create(0x1) fchdir(0xffffffffffffffff) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0x8, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'tunl0\x00'}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2, 0x0, 0xffffffffffffffff}, 0x13) sendto$packet(r0, &(0x7f0000000640)="06", 0x1, 0x53948674f8685e03, 0x0, 0x0) 1.231466046s ago: executing program 0 (id=482): perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x42000, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe4, 0x6}, 0x100000, 0x0, 0x0, 0x6, 0x6, 0x4, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000000200), 0xfc, 0x56d, &(0x7f00000013c0)="$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") ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f00000006c0)={0x0, 0x2904c, 0x3, 0x10003, '\x00', [{}, {0xffffffff, 0x5, 0x0, 0x0, 0x0, 0xb}], ['\x00', '\x00', '\x00']}) 1.114602855s ago: executing program 4 (id=483): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e9232f328db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052343f", 0x35}, {&(0x7f0000000040)="c67f0d7df974c298a2", 0x9}], 0x2) r3 = socket(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) connect$netlink(r3, &(0x7f0000000280)=@proc={0x10, 0x0, 0x1}, 0xc) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000001500)=@newtaction={0x18, 0x32, 0x829, 0x0, 0x0, {0x0, 0x0, 0x2}, [{0x4}]}, 0x18}}, 0x0) 1.084440405s ago: executing program 0 (id=484): r0 = syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x9, &(0x7f0000000000)={[{@nombcache}, {@jqfmt_vfsv0}, {@jqfmt_vfsv1}, {@resgid}, {@delalloc}, {@usrjquota, 0x2e}], [], 0x2e}, 0x6, 0x48d, &(0x7f0000000980)="$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") r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01) write$sndseq(r1, &(0x7f0000000080)=[{0x22, 0x0, 0x0, 0xbd, @tick=0xcb, {}, {0xfe}, @result={0x0, 0x2}}], 0x1c) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0xee00}}, './file1\x00'}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000deffffff000000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r3}, 0x18) mount_setattr(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x8800, &(0x7f0000001dc0)={0xf, 0x84, 0x40000}, 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000001000000080000000c"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000640)={{r5}, &(0x7f00000005c0), &(0x7f0000000600)='%-5lx \x00'}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000980)='sys_enter\x00', r6}, 0x18) getrandom(0x0, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r7}, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000280)='./file1\x00') bpf$PROG_LOAD(0x5, 0x0, 0x0) write$selinux_load(r2, &(0x7f00000004c0)={0xf97cff8c, 0x8, 'SE Linux', "0f4d44bca23c1762ef00a8458b6b0b0a74dff263f6325a44dee22f1d4351d1b13bfcb96ba1065e74b59999d93934d0a0bf5d66186e19082dbd7e2bebb21950eef116eea8e4fa7c640ba95d18ed8174710b59ab30d2f727a637ad57ca8dfed6a73d1f6e7d48357d2331edb9b28c6f2ae0eeb9727dbcc372f04da83a5ac27fcc2e861e4082780bd66171fb7e70671746ad2fce63a217d5d8451c13542dd462d66b54573b6f542a4d83b4836862fc4461c6ab3499defa69a7acc73e7b368d4d6372dad22a2b042da650afcafc87e20e83ecc99a04c7d22e316a37017ab64278fe9a8e19aa1fcb61494aec4be1589b"}, 0xfd) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x38, 0x3a, 0x0, @remote, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x7ca, {0x0, 0x6, "8cb02b", 0x0, 0x2f, 0x0, @loopback, @local, [@srh={0x2b, 0x0, 0x4, 0x0, 0x0, 0x10}]}}}}}}}, 0x0) (fail_nth: 2) 927.310874ms ago: executing program 4 (id=485): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000040), 0xfe, 0x4f2, &(0x7f0000000b00)="$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") prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000300)={0x4, 0x10, 0x1, 0x400, 0x3, 0x0, [{0x0, 0x7, 0x3, '\x00', 0x884}, {0x2, 0xd91, 0x530, '\x00', 0x4}, {0x8, 0x2400, 0x3, '\x00', 0x88c}]}) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x60, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x70, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x2c, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}, {0xfffffffffffffe2e, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x110}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb8}}, 0x20050800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in6={{0xa, 0x4e20, 0x6, @empty, 0x4}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a, 0x4}, 0x9c) syz_mount_image$vfat(&(0x7f0000001200), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000001a80)=ANY=[], 0x1, 0x122b, &(0x7f0000003540)="$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") perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x62000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100000, 0x0, 0x0, 0x6, 0x3, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x301) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, 0x0, 0x10044046) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000000) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000000000)={0x20, 0x1, 0x80, 0x3d, 0x0, 0x6, 0x0}) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x14, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0xe837, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r4}, 0x10) r5 = open(&(0x7f00000002c0)='.\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x200c840, &(0x7f0000000080)={[{@discard}, {@noload}]}, 0x64, 0x526, &(0x7f0000000a40)="$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") getdents64(r5, &(0x7f0000002ec0)=""/4096, 0x1000) 864.408204ms ago: executing program 1 (id=486): perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x42000, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe4, 0x6}, 0x100000, 0x0, 0x0, 0x6, 0x6, 0x4, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000000200), 0xfc, 0x56d, &(0x7f00000013c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f00000006c0)={0x0, 0x2904c, 0x2, 0x10003, '\x00', [{}, {0xffffffff, 0x5, 0x0, 0x0, 0x0, 0xb}], ['\x00', '\x00']}) socket$inet6(0xa, 0x800000000000002, 0x0) 703.853433ms ago: executing program 5 (id=487): lsetxattr$system_posix_acl(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000240)={{}, {}, [], {}, [{}, {}], {0x10, 0x2}}, 0x34, 0x0) 689.306973ms ago: executing program 5 (id=488): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x20, 0x1, 0x178, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000c00], 0x0, 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"]}, 0x18f) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000009, 0x28011, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x20, 0x1, 0x178, [], 0x0, 0x0, 0x0}, 0x1f0) 483.438652ms ago: executing program 0 (id=489): r0 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000300)='./bus\x00', 0x1008002, &(0x7f0000000280)={[{@grpquota}, {@delalloc}, {@nouid32}, {@usrquota}, {@dioread_nolock}, {@nobh}, {@usrquota}, {@grpjquota}, {@lazytime}]}, 0x1, 0x5eb, &(0x7f0000001740)="$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") name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/cgroup.procs\x00', 0x0, 0x0, 0x200) r1 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x1) fcntl$setlease(r0, 0x400, 0x3) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x1a, 0x1400, 0xf, 0x2, 0x8, 0x1, 0x1, '\x00', 0x0, r1, 0x5, 0x3, 0x5, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x18, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x90a}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @cb_func={0x18, 0x4, 0x4, 0x0, 0xfffffffffffffffd}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0x5}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5e8e}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @ldst={0x2, 0x2, 0x6, 0x1, 0x3, 0xffffffffffffffff}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x5}]}, &(0x7f0000000040)='GPL\x00', 0x5, 0x2e, &(0x7f00000001c0)=""/46, 0x40f00, 0x10, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f0000000340)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000380)={0x2, 0x5, 0x5, 0xfffffff8}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000400)=[r3, r4, r1, r1], 0x0, 0x10, 0x5b810aee, @void, @value}, 0x94) r5 = socket$xdp(0x2c, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x400000000000004) setsockopt$XDP_RX_RING(r5, 0x11b, 0x2, &(0x7f00000004c0)=0x1000000, 0x4) writev(r6, &(0x7f0000000000)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000000000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r8, &(0x7f0000004200)='t', 0x1) sendfile(r8, r7, 0x0, 0x3ffff) sendfile(r8, r7, 0x0, 0x7ffff000) 469.375192ms ago: executing program 5 (id=491): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x3, 0x20000000000002fd, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a60000000060a0b0400000000000000000200000034000480200001800e000100636f6e6e6c696d69740000000c000280080001400000000010000180090001006c617374000000000900010073797a30000000000900020073797a32000000001400"], 0x88}}, 0x0) 440.682942ms ago: executing program 1 (id=492): r0 = socket$inet(0x2, 0x80001, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x2, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) creat(&(0x7f0000000140)='./file0\x00', 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0x600010c) close_range(r0, 0xffffffffffffffff, 0x0) 430.715892ms ago: executing program 3 (id=493): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) close(r0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000080)=0x400000001, 0x4) sendto$inet6(r0, 0x0, 0x4, 0x0, 0x0, 0x0) 373.952342ms ago: executing program 4 (id=494): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x2}]}) request_key(0x0, 0x0, 0x0, 0xffffffffffffffff) close_range(r1, 0xffffffffffffffff, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_EVENTS(r2, 0x84, 0xb, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e85000000010000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) read(0xffffffffffffffff, &(0x7f0000000380)=""/189, 0x8) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={{0x77359400}, {0x0, 0x3938700}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000380)='sched_switch\x00', r4}, 0x18) 325.878501ms ago: executing program 3 (id=495): r0 = syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x9, &(0x7f0000000000)={[{@nombcache}, {@jqfmt_vfsv0}, {@jqfmt_vfsv1}, {@resgid}, {@delalloc}, {@usrjquota, 0x2e}], [], 0x2e}, 0x6, 0x48d, &(0x7f0000000980)="$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") r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x61e740) write$sndseq(r1, &(0x7f0000000080)=[{0x22, 0x0, 0x0, 0xbd, @tick=0xcb, {}, {0xfe}, @result={0x0, 0x2}}], 0x1c) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0xee00}}, './file1\x00'}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000deffffff000000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r3}, 0x18) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r5 = syz_io_uring_setup(0x1114, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x21e}, &(0x7f00000001c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, r7, &(0x7f0000000380)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd=r4, 0x2, &(0x7f0000001040)=[{&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000780)=""/221, 0xdd}, {&(0x7f0000000880)=""/176, 0xb0}, {&(0x7f0000000e40)=""/75, 0x4b}, {&(0x7f0000000ec0)=""/130, 0x82}, {&(0x7f0000000500)=""/64, 0x40}, {&(0x7f0000000580)=""/47, 0x2f}, {&(0x7f0000000f80)=""/143, 0x8f}, {&(0x7f0000000940)=""/63, 0x3f}], 0x9, 0x10, 0x1}) io_uring_enter(r5, 0x47fa, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) mount_setattr(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x8800, &(0x7f0000001dc0)={0xf, 0x84, 0x40000}, 0x20) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000300)={0x0, @multicast2, @broadcast}, &(0x7f0000000340)=0xc) sendmsg$nl_route_sched(r2, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000680)=@newqdisc={0xec, 0x24, 0x1, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, r9, {0x3519abe26fb2c7ae, 0xe}, {0x0, 0x4}, {0xc662ee818443565f, 0xf}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0xe5}, @TCA_RATE={0x6, 0x5, {0xd, 0x40}}, @TCA_STAB={0xb8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xc, 0x0, 0x7ad4, 0x8000, 0x1, 0x0, 0x0, 0x3}}, {0xa, 0x2, [0x8, 0x4, 0x6]}}, {{0x1c, 0x1, {0x0, 0xd, 0xc83f, 0x5, 0x2, 0x43f, 0xa, 0x9}}, {0x16, 0x2, [0x5, 0x8, 0x8, 0x4, 0x9, 0x0, 0x1f00, 0x0, 0x9]}}, {{0x1c, 0x1, {0x2, 0x0, 0x6, 0x9, 0x0, 0x1, 0x4, 0x9}}, {0x16, 0x2, [0xfffa, 0x50c, 0x8001, 0x7ff, 0x3, 0x4, 0x9, 0x8, 0x6]}}, {{0x1c, 0x1, {0x30, 0x2, 0x7, 0xb, 0x0, 0x6, 0x4, 0x1}}, {0x6, 0x2, [0x7]}}]}]}, 0xec}, 0x1, 0x0, 0x0, 0xa4ba8a569b06d053}, 0x404c801) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) iopl(0x3) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$MRT6_DEL_MIF(0xffffffffffffffff, 0x29, 0xcb, 0x0, 0x0) ioctl$MON_IOCH_MFLUSH(r2, 0x9208, 0xffffffff) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000001000000080000000c"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000640)={{r10}, &(0x7f00000005c0), &(0x7f0000000600)='%-5lx \x00'}, 0x20) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000980)='sys_enter\x00', r11}, 0x18) getrandom(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r12}, 0x10) socket$kcm(0x10, 0x100000000002, 0x4) 325.048451ms ago: executing program 5 (id=496): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000480)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x503, 0x0, 0x25dfdbfd, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r0}, @IFLA_HSR_SLAVE2={0x8, 0x2, r2}]}}}]}, 0x40}}, 0x0) r3 = gettid() r4 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffbf, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) syz_io_uring_submit(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) lsetxattr$security_selinux(&(0x7f00000001c0)='.\x00', &(0x7f0000000240), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x1001, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) read(r6, &(0x7f0000000440)=""/247, 0x26) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r6, 0x4040534e, &(0x7f0000000080)={0x1, @time={0x11000, 0x10000}, 0x0, {}, 0x9}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r6, 0xc08c5335, &(0x7f0000000180)={0x4, 0x285ad12a64ed0656, {0x0, 0x1, 0xfffffffe, 0x2, 0x5}, 0xffffff5d}) tkill(r3, 0x7) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x404, &(0x7f00000018c0)=ANY=[@ANYRES64=0x0], 0xff, 0x299, &(0x7f0000000280)="$eJzs3M9rE0EUwPHXtGnTlDY5iKAgPvSil6WNf0GQFsSAUhtRD8LUbjRkTUp2jUTE9ubVv6N49CZY/4FevHkXL0UQvPQgXelu1mxLsD9s3Np8P1B2ujMvM7s7CW8XdjbvvXlaq7hWxXiSyqikRFZlSyS/U+oY6mxTQXlU4lbl6sSPzxfu3H9ws1gqzc6rzhUXrhVUderih+cv31766E3cfTf1fkw28g83vxe+bJzdOLe5vRB9esNTo4uNhmcWHVuXqm7NUr3t2Ma1tVp37eau+orTWF5uq6kvTWaXm7brqqm3tWa31Wuo12yreWyqdbUsSyezMmiGDx1RXpufN8W+DAZJGO+1s9ksmuGeleW1fzEoAABwsiSV/z+pulp1tb5f/p8S8v/+CfL/7Z5JI06H9M4NQNFkO9/f3cj/AQAAAAAAAAAAAAAAAAAAAAD4H2z5fs73/Vy0jf7GRCQjItH/SY8T/XGE6z+U4HBxzGIv7mVEnNetcqscbsP6YkWq4ogt02mRn8F86AjLczdKs9MayMu6s9KJD14SHIviI/ne8TNhvMbiV1rltGTj/RckJ2d6xxf2xKdFpFUelSuXY/GW5OTTI2mII0vBvO7Gv5pRvX6rtKf/8aAdAAAAAACngaW/5Xff/4arSVqWRsuG7KkPd3afD0hun+cDKuuj0o0fkfMjyR03AAAAAACDxG2/qBnHsZsUDlcYxFNnZcJJ88fGvu+v7DT6+05TIpLQkX4TkRNwwo+78PVZeAEP0jjJXyUAAAAA/dBN+pMeCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAg+ugi4dF7Y+y9lisu+FkjhIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4GX4FAAD//z2KG1o=") 315.234751ms ago: executing program 1 (id=497): syz_usb_connect(0x0, 0x24, 0x0, 0x0) epoll_create(0x1) fchdir(0xffffffffffffffff) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0x8, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'tunl0\x00'}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2, 0x0, 0xffffffffffffffff}, 0x13) sendto$packet(r0, &(0x7f0000000640)="06", 0x1, 0x53948674f8685e03, 0x0, 0x0) 274.456351ms ago: executing program 5 (id=498): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000200)={0x2, &(0x7f0000000380)=[{0x0, 0x80, 0x9, 0xf576}, {0x6, 0x1, 0x4, 0xc96}]}) flistxattr(r0, 0x0, 0xffde) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xb, 0x200000005c832, 0xffffffffffffffff, 0x200000) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000780)=@bpf_ext={0x1c, 0x21, &(0x7f0000000640)=ANY=[@ANYBLOB="180000000400000000000000e5af0000181100", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b703000000000000870000000c0006000000000000000000185b00000200000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000746c000003000000850000000600000085100000fdfffffff8b3030005000000d3a2f4fff0ffffffbf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], 0x0, 0x0, 0x1000, &(0x7f0000001240)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2aec4, 0xffffffffffffffff, 0x6, &(0x7f0000000400)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f00000004c0)=[{0x2, 0x4, 0x6, 0x5}, {0x3, 0x4, 0x6, 0x4}, {0x8, 0x5, 0xb, 0x9}, {0x1, 0x4, 0xa, 0x8}, {0x3, 0x1, 0x6, 0x2}, {0x3, 0x2, 0x4}], 0x10, 0x8, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r1}, &(0x7f0000000180), &(0x7f0000000580)=r2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000", @ANYRES32, @ANYRESDEC], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="18020000fcffffff00000000000000008500000041000000850000007d00000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0x2111, 0x300, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000006f00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000840)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) sendmmsg(r1, 0x0, 0x0, 0xc0c4) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001600), 0x28000, 0x0) ioctl$TIOCMIWAIT(r7, 0x545c, 0x200000000000000) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) r9 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCL_BLANKSCREEN(r9, 0x4b67, &(0x7f0000000000)) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 86.27193ms ago: executing program 3 (id=499): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) connect$pppoe(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @multicast, 'geneve0\x00'}}, 0x1e) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'geneve0\x00'}}, 0x1e) close(0xffffffffffffffff) 85.58315ms ago: executing program 3 (id=500): socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x68}, 0x1, 0x0, 0x0, 0x20040005}, 0xc048044) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x840730, &(0x7f0000000000)={[{@dioread_nolock}, {@abort}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@debug}, {@errors_remount}, {@minixdf}, {@usrjquota}, {@user_xattr}, {@minixdf}, {@dioread_lock}]}, 0x1, 0x43a, &(0x7f00000008c0)="$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") r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000009000000ffff00000100000000000000", @ANYRES32, @ANYBLOB="0900000000001b000000d1000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) syz_mount_image$ext4(&(0x7f00000007c0)='ext4\x00', &(0x7f0000000340)='./file2\x00', 0x21081e, &(0x7f0000000380)={[{@user_xattr}, {@noblock_validity}, {@usrjquota_path={'usrjquota', 0x3d, './file1'}}]}, 0x1, 0x50c, &(0x7f00000015c0)="$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") bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) lchown(&(0x7f0000000180)='./file1\x00', 0x0, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r5, 0xffffffffffffffff}, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='ext4_error\x00', r7}, 0x18) r9 = inotify_init() inotify_add_watch(r9, &(0x7f0000000240)='./file0\x00', 0x8c7) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0x20000000000000f4, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESDEC, @ANYBLOB="000000000000850900000000000000007b8af8ff00000000bb51048997bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, &(0x7f0000000740)=ANY=[@ANYRESDEC=r8, @ANYRESDEC, @ANYRESHEX=0x0, @ANYRESHEX=r6, @ANYRES16=r2, @ANYRES64=r9], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r10}, 0x10) sendmmsg$unix(r3, &(0x7f0000000240)=[{{&(0x7f0000000080)=@file={0x0, './file1\x00'}, 0x6e, 0x0}}], 0x1, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000002c0)={r1, &(0x7f0000000500), 0x0}, 0x20) 31.01526ms ago: executing program 3 (id=501): perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x42000, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe4, 0x6}, 0x100000, 0x0, 0x0, 0x6, 0x6, 0x4, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f00000006c0)={0x0, 0x2904c, 0x3, 0x10003, '\x00', [{}, {0xffffffff, 0x5, 0x0, 0x0, 0x0, 0xb}], ['\x00', '\x00', '\x00']}) 0s ago: executing program 3 (id=502): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000a80)='kfree\x00', r1}, 0x18) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/zoneinfo\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000040)={0x0, @in6={{0xa, 0x4e24, 0xd, @remote, 0x4}}, [0x4000000000000, 0x7, 0x6, 0x1, 0x4, 0x7, 0x7fff, 0x9, 0xdee, 0x8000000000000001, 0x0, 0x0, 0x5, 0xccd, 0x1]}, &(0x7f0000000140)=0x100) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x80800) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffffff0000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0x18) syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000000)='./file1\x00', 0x1000844, &(0x7f0000000380)=ANY=[@ANYRESHEX=r3, @ANYRESHEX], 0x1, 0x259, &(0x7f0000000d80)="$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") r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81000) renameat2(r5, &(0x7f0000000000)='./file1\x00', r5, &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000600)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f00000000c0), 0x7, 0x4b5, &(0x7f0000000640)="$eJzs3E9sFNUfAPDvbHfbAj9+VEQUxKSIxkZjCwWFgxeMJh40MeJBj01bCFKooTURQqQkBo+GxLvx6JWDV/VmPJl4xYMHE0NCDIkBPK2Z3Zntdv/077YL7ueTbPe9mTfz3ps3b+btvN0G0LOG0z9JxP8i4lZE7KpGlyYYrr7dv3tl8sHdK5OxUC6f+iuppLuXxjOF7H1Hts+RQkTh86Rhh1Vzly6fm5iZmb6Yxcfmz388Nnfp8stnz0+cmT4zfWH8xIljR48cf3X8lbVXqkV+ab3u7f9s9sC+tz688c5kMV8+mL3X16NThmO4vig364v1fKcz67KddeGk2MWCsCZpu6XNVar0/13RFxoPekW5XC4PtF+9UG50rWkJ8MhKotslALojv9Gnn3/z1xYNPR4Kd05WPwCl9b6fvaprirXnGaWGz7edNBwRHyz883X6iuWeQ/y+SQUAAHrODyfzkWDj+K8Qe+vS/T+bQxmKiMciYndEPB4ReyLiiYhK2icj4qnGDJKI8jL572mIN49/Crc3Ur+VpOO/17K5raXjv3z0F0N9WWxnRD5gnj6cHZORKA2cPjszfWSZPH5849cv262rH/+lrzT/fCyYleN2seEB3dTE/MS6K9zgzrWI/cXG+ifFtOHymYAkIvZFxP417HeoLnz2xW8P1CKlpelWrn9FucWUXnRiqqL8TcQL1fZfiCXtv5hjsvz85NhgzEwfHkvPgsMt8/j5l+vvtst/xfp/90fjJm8e//7URqtdk7b/9rrzP/L528X6DyURSW2+dm7teVz/7YvKfocPNa9b7/nfn7xfCfdnyz6dmJ+/eCSiP3m7efn44rZ5PE+f1n/kUOv+vzvbJj0ST0dEehI/U3cCp2U/GBHPRkSLqtX89PpzH7Vbt8rzf9Ok9Z9qcf27urT9F+fr1xHoO3fw1oM2F4/Vtf+xSmgkW9L6+pcsuUSstoAdOYgAAADwkCtE5bv/hdFauFAYHa0+A9oT2wszs3PzL52e/eTCVPU3AkNRKuRPuqrPg0tJ/vxzqC4+3hA/mj03/qpvWyU+Ojk7M9XtykOP21Hp80lT/0/92dft0gGbzk9+oHet1P/33tiiggBbzv0feldd/19ok2TBN2Xgv8n9H3pXq/5/dR3bAI+Wsr4MPU3/h95VjPdq4UJXSwJsNfd/6Ekb+V3/yoHyQMOSgWpgMJoTx+DmFGNbi7y6EkhHVmvc6u/+iI3nvm09W+X/TaFtmiisbYcD0byqLzp9nEuxiiN2Zm/HT/5y9l35Tp82N7ekn7YKdOVyBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0HH/BgAA//8uvN1z") getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000180)={r3, 0xff}, &(0x7f00000001c0)=0x8) kernel console output (not intermixed with test programs): x7fde9f405d29 code=0x0 [ 43.250212][ T29] audit: type=1326 audit(1737519057.582:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3764 comm="syz.0.96" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde9f405d29 code=0x7ffc0000 [ 43.273817][ T29] audit: type=1326 audit(1737519057.582:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3764 comm="syz.0.96" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde9f405d29 code=0x7ffc0000 [ 43.297086][ T29] audit: type=1326 audit(1737519057.612:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3764 comm="syz.0.96" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7fde9f405d29 code=0x7ffc0000 [ 43.320483][ T29] audit: type=1326 audit(1737519057.612:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3764 comm="syz.0.96" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde9f405d29 code=0x7ffc0000 [ 43.343751][ T29] audit: type=1326 audit(1737519057.612:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3764 comm="syz.0.96" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde9f405d29 code=0x7ffc0000 [ 43.366980][ T29] audit: type=1326 audit(1737519057.612:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3764 comm="syz.0.96" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fde9f405d29 code=0x7ffc0000 [ 43.367093][ T29] audit: type=1326 audit(1737519057.612:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3764 comm="syz.0.96" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde9f405d29 code=0x7ffc0000 [ 43.428373][ T3769] loop4: detected capacity change from 0 to 512 [ 43.435442][ T3769] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 43.448808][ T3769] EXT4-fs (loop4): 1 truncate cleaned up [ 43.456089][ T3769] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.520957][ T139] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 43.539113][ T139] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 43.551650][ T139] EXT4-fs (loop2): This should not happen!! Data will be lost [ 43.551650][ T139] [ 43.561418][ T139] EXT4-fs (loop2): Total free blocks count 0 [ 43.567503][ T139] EXT4-fs (loop2): Free/Dirty block details [ 43.573515][ T139] EXT4-fs (loop2): free_blocks=2415919104 [ 43.579364][ T139] EXT4-fs (loop2): dirty_blocks=32 [ 43.584516][ T139] EXT4-fs (loop2): Block reservation details [ 43.590591][ T139] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 43.598894][ T3771] netlink: 'syz.4.97': attribute type 4 has an invalid length. [ 43.599239][ T139] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 65793 with max blocks 1 with error 28 [ 43.978240][ T3775] loop1: detected capacity change from 0 to 128 [ 44.083787][ T3789] loop3: detected capacity change from 0 to 512 [ 44.096289][ T3789] EXT4-fs: Ignoring removed nobh option [ 44.137602][ T3789] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.150705][ T3789] ext4 filesystem being mounted at /20/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.163132][ T3789] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.103: bg 0: block 224: padding at end of block bitmap is not set [ 44.179826][ T3789] EXT4-fs (loop3): Remounting filesystem read-only [ 44.198231][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.232552][ T3796] loop3: detected capacity change from 0 to 512 [ 44.256395][ T3796] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 44.275251][ T3769] syz.4.97 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_ZERO), order=0, oom_score_adj=1000 [ 44.277188][ T3796] EXT4-fs (loop3): orphan cleanup on readonly fs [ 44.289401][ T3769] CPU: 0 UID: 0 PID: 3769 Comm: syz.4.97 Not tainted 6.13.0-syzkaller-01005-gb9d8a295ed6b #0 [ 44.306137][ T3769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 44.312975][ T3796] EXT4-fs warning (device loop3): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 44.316195][ T3769] Call Trace: [ 44.316206][ T3769] [ 44.316216][ T3769] dump_stack_lvl+0xf2/0x150 [ 44.316293][ T3769] dump_stack+0x15/0x1a [ 44.316325][ T3769] dump_header+0x83/0x2d0 [ 44.331213][ T3796] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 44.334187][ T3769] oom_kill_process+0x341/0x4c0 [ 44.339453][ T3796] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.106: bg 0: block 40: padding at end of block bitmap is not set [ 44.341711][ T3769] out_of_memory+0x9af/0xbe0 [ 44.341744][ T3769] ? css_next_descendant_pre+0x11c/0x140 [ 44.346379][ T3796] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 44.350448][ T3769] mem_cgroup_out_of_memory+0x13e/0x190 [ 44.358160][ T3796] EXT4-fs (loop3): 1 truncate cleaned up [ 44.361973][ T3769] try_charge_memcg+0x508/0x7f0 [ 44.376683][ T3796] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 44.380664][ T3769] obj_cgroup_charge_pages+0xbd/0x1a0 [ 44.429216][ T3769] __memcg_kmem_charge_page+0x9d/0x170 [ 44.434698][ T3769] __alloc_pages_noprof+0x1bc/0x340 [ 44.439914][ T3769] alloc_pages_mpol_noprof+0xb8/0x260 [ 44.445297][ T3769] alloc_pages_noprof+0xe1/0x100 [ 44.450248][ T3769] __vmalloc_node_range_noprof+0x6eb/0xe80 [ 44.456103][ T3769] __kvmalloc_node_noprof+0x121/0x170 [ 44.461570][ T3769] ? ip_set_alloc+0x1f/0x30 [ 44.466140][ T3769] ip_set_alloc+0x1f/0x30 [ 44.470537][ T3769] hash_netiface_create+0x273/0x730 [ 44.475852][ T3769] ? __nla_parse+0x40/0x60 [ 44.480300][ T3769] ? __pfx_hash_netiface_create+0x10/0x10 [ 44.486105][ T3769] ip_set_create+0x359/0x8a0 [ 44.490707][ T3769] ? strnstr+0xe1/0x100 [ 44.495192][ T3769] ? __nla_parse+0x40/0x60 [ 44.499633][ T3769] nfnetlink_rcv_msg+0x4a9/0x570 [ 44.504651][ T3769] netlink_rcv_skb+0x12c/0x230 [ 44.509521][ T3769] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 44.515103][ T3769] nfnetlink_rcv+0x16c/0x15d0 [ 44.519881][ T3769] ? kmem_cache_free+0xdc/0x2d0 [ 44.524788][ T3769] ? nlmon_xmit+0x51/0x60 [ 44.529178][ T3769] ? __kfree_skb+0x102/0x150 [ 44.533897][ T3769] ? consume_skb+0x49/0x160 [ 44.538579][ T3769] ? nlmon_xmit+0x51/0x60 [ 44.542929][ T3769] ? dev_hard_start_xmit+0x3c1/0x3f0 [ 44.548225][ T3769] ? __dev_queue_xmit+0xb6e/0x2090 [ 44.553344][ T3769] ? ref_tracker_free+0x3a5/0x410 [ 44.558377][ T3769] ? __dev_queue_xmit+0x186/0x2090 [ 44.563541][ T3769] ? __netlink_deliver_tap+0x4c6/0x4f0 [ 44.569362][ T3769] netlink_unicast+0x599/0x670 [ 44.574171][ T3769] netlink_sendmsg+0x5cc/0x6e0 [ 44.578984][ T3769] ? __pfx_netlink_sendmsg+0x10/0x10 [ 44.584393][ T3769] __sock_sendmsg+0x140/0x180 [ 44.589145][ T3769] ____sys_sendmsg+0x312/0x410 [ 44.594004][ T3769] __sys_sendmsg+0x19d/0x230 [ 44.598676][ T3769] __x64_sys_sendmsg+0x46/0x50 [ 44.603586][ T3769] x64_sys_call+0x2734/0x2dc0 [ 44.608423][ T3769] do_syscall_64+0xc9/0x1c0 [ 44.612955][ T3769] ? clear_bhb_loop+0x55/0xb0 [ 44.617686][ T3769] ? clear_bhb_loop+0x55/0xb0 [ 44.622428][ T3769] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 44.628335][ T3769] RIP: 0033:0x7ff28eb85d29 [ 44.632764][ T3769] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 44.652448][ T3769] RSP: 002b:00007ff28d1f1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 44.660893][ T3769] RAX: ffffffffffffffda RBX: 00007ff28ed75fa0 RCX: 00007ff28eb85d29 [ 44.668970][ T3769] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000007 [ 44.676963][ T3769] RBP: 00007ff28ec01b08 R08: 0000000000000000 R09: 0000000000000000 [ 44.684940][ T3769] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 44.692982][ T3769] R13: 0000000000000000 R14: 00007ff28ed75fa0 R15: 00007ffd49db2978 [ 44.700967][ T3769] [ 44.704091][ T3769] memory: usage 307200kB, limit 307200kB, failcnt 158 [ 44.712373][ T3769] memory+swap: usage 307644kB, limit 9007199254740988kB, failcnt 0 [ 44.720443][ T3769] kmem: usage 307184kB, limit 9007199254740988kB, failcnt 0 [ 44.727869][ T3769] Memory cgroup stats for /syz4: [ 44.735991][ T3769] cache 4096 [ 44.744839][ T3769] rss 0 [ 44.747780][ T3769] shmem 0 [ 44.750754][ T3769] mapped_file 0 [ 44.754355][ T3769] dirty 0 [ 44.757433][ T3769] writeback 0 [ 44.760726][ T3769] workingset_refault_anon 149 [ 44.765463][ T3769] workingset_refault_file 216 [ 44.770253][ T3769] swap 454656 [ 44.773538][ T3769] swapcached 8192 [ 44.777205][ T3769] pgpgin 8476 [ 44.780643][ T3769] pgpgout 8472 [ 44.784312][ T3769] pgfault 9527 [ 44.787824][ T3769] pgmajfault 44 [ 44.789044][ T3799] vhci_hcd: invalid port number 61 [ 44.791280][ T3769] inactive_anon 0 [ 44.791291][ T3769] active_anon 8192 [ 44.791304][ T3769] inactive_file 0 [ 44.791313][ T3769] active_file 8192 [ 44.811312][ T3769] unevictable 0 [ 44.814796][ T3769] hierarchical_memory_limit 314572800 [ 44.820205][ T3769] hierarchical_memsw_limit 9223372036854771712 [ 44.826434][ T3769] total_cache 4096 [ 44.830212][ T3769] total_rss 0 [ 44.833516][ T3769] total_shmem 0 [ 44.837263][ T3769] total_mapped_file 0 [ 44.841377][ T3769] total_dirty 0 [ 44.845013][ T3769] total_writeback 0 [ 44.848861][ T3769] total_workingset_refault_anon 149 [ 44.854073][ T3769] total_workingset_refault_file 216 [ 44.859399][ T3769] total_swap 454656 [ 44.863212][ T3769] total_swapcached 8192 [ 44.867499][ T3769] total_pgpgin 8476 [ 44.871409][ T3769] total_pgpgout 8472 [ 44.871421][ T3769] total_pgfault 9527 [ 44.871430][ T3769] total_pgmajfault 44 [ 44.871440][ T3769] total_inactive_anon 0 [ 44.887481][ T3769] total_active_anon 8192 [ 44.891950][ T3769] total_inactive_file 0 [ 44.896179][ T3769] total_active_file 8192 [ 44.900458][ T3769] total_unevictable 0 [ 44.904449][ T3769] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.97,pid=3768,uid=0 [ 44.919281][ T3769] Memory cgroup out of memory: Killed process 3768 (syz.4.97) total-vm:93516kB, anon-rss:788kB, file-rss:22236kB, shmem-rss:0kB, UID:0 pgtables:120kB oom_score_adj:1000 [ 45.003227][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.129675][ T3820] loop2: detected capacity change from 0 to 8192 [ 45.141505][ T3820] ======================================================= [ 45.141505][ T3820] WARNING: The mand mount option has been deprecated and [ 45.141505][ T3820] and is ignored by this kernel. Remove the mand [ 45.141505][ T3820] option from the mount to silence this warning. [ 45.141505][ T3820] ======================================================= [ 45.228617][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.482627][ T3836] loop4: detected capacity change from 0 to 2048 [ 45.490685][ T3836] EXT4-fs: inline encryption not supported [ 45.528581][ T3836] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.813959][ T3839] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 45.828985][ T3839] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 45.841507][ T3839] EXT4-fs (loop4): This should not happen!! Data will be lost [ 45.841507][ T3839] [ 45.851323][ T3839] EXT4-fs (loop4): Total free blocks count 0 [ 45.857404][ T3839] EXT4-fs (loop4): Free/Dirty block details [ 45.863316][ T3839] EXT4-fs (loop4): free_blocks=2415919104 [ 45.869181][ T3839] EXT4-fs (loop4): dirty_blocks=8192 [ 45.874626][ T3839] EXT4-fs (loop4): Block reservation details [ 45.880889][ T3839] EXT4-fs (loop4): i_reserved_data_blocks=512 [ 45.961020][ T3846] loop3: detected capacity change from 0 to 2048 [ 46.017675][ T3849] loop2: detected capacity change from 0 to 2048 [ 46.024472][ T3849] EXT4-fs: inline encryption not supported [ 46.051167][ T3853] loop3: detected capacity change from 0 to 512 [ 46.059490][ T3849] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.073146][ T3853] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 46.081297][ T3853] EXT4-fs (loop3): orphan cleanup on readonly fs [ 46.088315][ T3853] EXT4-fs warning (device loop3): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 46.105652][ T3853] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 46.114259][ T3853] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.122: bg 0: block 40: padding at end of block bitmap is not set [ 46.130080][ T3853] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 46.145803][ T3853] EXT4-fs (loop3): 1 truncate cleaned up [ 46.155899][ T3853] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 46.267980][ T3853] vhci_hcd: invalid port number 61 [ 46.289307][ T3856] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 46.304439][ T3856] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 46.317056][ T3856] EXT4-fs (loop2): This should not happen!! Data will be lost [ 46.317056][ T3856] [ 46.326825][ T3856] EXT4-fs (loop2): Total free blocks count 0 [ 46.332823][ T3856] EXT4-fs (loop2): Free/Dirty block details [ 46.338805][ T3856] EXT4-fs (loop2): free_blocks=2415919104 [ 46.344537][ T3856] EXT4-fs (loop2): dirty_blocks=8192 [ 46.349999][ T3856] EXT4-fs (loop2): Block reservation details [ 46.356107][ T3856] EXT4-fs (loop2): i_reserved_data_blocks=512 [ 46.372942][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.429986][ T3861] loop1: detected capacity change from 0 to 512 [ 46.440857][ T50] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 46.443389][ T3861] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 46.472685][ T3861] EXT4-fs (loop1): 1 truncate cleaned up [ 46.479069][ T3861] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.562540][ T3867] netlink: 'syz.1.124': attribute type 4 has an invalid length. [ 46.597071][ T354] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 46.628369][ T3864] loop3: detected capacity change from 0 to 128 [ 46.731088][ T3876] netlink: 60 bytes leftover after parsing attributes in process `syz.3.128'. [ 47.016566][ T3886] loop2: detected capacity change from 0 to 1024 [ 47.039935][ T3886] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.062746][ T3886] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 47.092987][ T3297] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.194184][ T3861] syz.1.124 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_ZERO), order=0, oom_score_adj=1000 [ 47.208276][ T3861] CPU: 0 UID: 0 PID: 3861 Comm: syz.1.124 Not tainted 6.13.0-syzkaller-01005-gb9d8a295ed6b #0 [ 47.218617][ T3861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 47.228716][ T3861] Call Trace: [ 47.232008][ T3861] [ 47.234956][ T3861] dump_stack_lvl+0xf2/0x150 [ 47.239696][ T3861] dump_stack+0x15/0x1a [ 47.243957][ T3861] dump_header+0x83/0x2d0 [ 47.248536][ T3861] oom_kill_process+0x341/0x4c0 [ 47.253696][ T3861] out_of_memory+0x9af/0xbe0 [ 47.258473][ T3861] ? css_next_descendant_pre+0x11c/0x140 [ 47.264177][ T3861] mem_cgroup_out_of_memory+0x13e/0x190 [ 47.269838][ T3861] try_charge_memcg+0x508/0x7f0 [ 47.274729][ T3861] obj_cgroup_charge_pages+0xbd/0x1a0 [ 47.280131][ T3861] __memcg_kmem_charge_page+0x9d/0x170 [ 47.285641][ T3861] __alloc_pages_noprof+0x1bc/0x340 [ 47.290858][ T3861] alloc_pages_mpol_noprof+0xb8/0x260 [ 47.296268][ T3861] alloc_pages_noprof+0xe1/0x100 [ 47.301268][ T3861] __vmalloc_node_range_noprof+0x6eb/0xe80 [ 47.307098][ T3861] __kvmalloc_node_noprof+0x121/0x170 [ 47.312627][ T3861] ? ip_set_alloc+0x1f/0x30 [ 47.317163][ T3861] ip_set_alloc+0x1f/0x30 [ 47.321610][ T3861] hash_netiface_create+0x273/0x730 [ 47.326970][ T3861] ? __nla_parse+0x40/0x60 [ 47.331892][ T3861] ? __pfx_hash_netiface_create+0x10/0x10 [ 47.337708][ T3861] ip_set_create+0x359/0x8a0 [ 47.342446][ T3861] ? strnstr+0xe1/0x100 [ 47.346632][ T3861] ? __nla_parse+0x40/0x60 [ 47.351113][ T3861] nfnetlink_rcv_msg+0x4a9/0x570 [ 47.356159][ T3861] ? netlink_rcv_skb+0x40/0x230 [ 47.361163][ T3861] netlink_rcv_skb+0x12c/0x230 [ 47.366021][ T3861] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 47.370679][ T3891] loop2: detected capacity change from 0 to 512 [ 47.371514][ T3861] nfnetlink_rcv+0x16c/0x15d0 [ 47.382522][ T3861] ? kmem_cache_free+0xdc/0x2d0 [ 47.387397][ T3861] ? nlmon_xmit+0x51/0x60 [ 47.391811][ T3861] ? __kfree_skb+0x102/0x150 [ 47.396437][ T3861] ? consume_skb+0x49/0x160 [ 47.400951][ T3861] ? nlmon_xmit+0x51/0x60 [ 47.405365][ T3861] ? dev_hard_start_xmit+0x3c1/0x3f0 [ 47.410664][ T3861] ? __dev_queue_xmit+0xb6e/0x2090 [ 47.415810][ T3861] ? ref_tracker_free+0x3a5/0x410 [ 47.420848][ T3861] ? __dev_queue_xmit+0x186/0x2090 [ 47.425987][ T3861] ? __netlink_deliver_tap+0x4c6/0x4f0 [ 47.431513][ T3861] netlink_unicast+0x599/0x670 [ 47.436295][ T3861] netlink_sendmsg+0x5cc/0x6e0 [ 47.441262][ T3861] ? __pfx_netlink_sendmsg+0x10/0x10 [ 47.446561][ T3861] __sock_sendmsg+0x140/0x180 [ 47.451266][ T3861] ____sys_sendmsg+0x312/0x410 [ 47.456050][ T3861] __sys_sendmsg+0x19d/0x230 [ 47.460672][ T3861] __x64_sys_sendmsg+0x46/0x50 [ 47.465574][ T3861] x64_sys_call+0x2734/0x2dc0 [ 47.470343][ T3861] do_syscall_64+0xc9/0x1c0 [ 47.475046][ T3861] ? clear_bhb_loop+0x55/0xb0 [ 47.479852][ T3861] ? clear_bhb_loop+0x55/0xb0 [ 47.484638][ T3861] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.490542][ T3861] RIP: 0033:0x7f6d03195d29 [ 47.495037][ T3861] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 47.514653][ T3861] RSP: 002b:00007f6d01801038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 47.523140][ T3861] RAX: ffffffffffffffda RBX: 00007f6d03385fa0 RCX: 00007f6d03195d29 [ 47.531223][ T3861] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000007 [ 47.539210][ T3861] RBP: 00007f6d03211b08 R08: 0000000000000000 R09: 0000000000000000 [ 47.547293][ T3861] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 47.555418][ T3861] R13: 0000000000000000 R14: 00007f6d03385fa0 R15: 00007ffc99801998 [ 47.563431][ T3861] [ 47.566551][ T3861] memory: usage 307200kB, limit 307200kB, failcnt 476 [ 47.573342][ T3861] memory+swap: usage 307652kB, limit 9007199254740988kB, failcnt 0 [ 47.581369][ T3861] kmem: usage 307196kB, limit 9007199254740988kB, failcnt 0 [ 47.588760][ T3861] Memory cgroup stats for /syz1: [ 47.594677][ T3861] cache 4096 [ 47.603429][ T3861] rss 0 [ 47.603439][ T3861] shmem 0 [ 47.603445][ T3861] mapped_file 0 [ 47.603451][ T3861] dirty 0 [ 47.603457][ T3861] writeback 0 [ 47.619403][ T3861] workingset_refault_anon 198 [ 47.624098][ T3861] workingset_refault_file 165 [ 47.628892][ T3861] swap 462848 [ 47.632226][ T3861] swapcached 0 [ 47.635868][ T3861] pgpgin 3225 [ 47.637358][ T3893] loop4: detected capacity change from 0 to 512 [ 47.639308][ T3861] pgpgout 3224 [ 47.648932][ T3861] pgfault 4281 [ 47.649086][ T29] kauditd_printk_skb: 128 callbacks suppressed [ 47.649100][ T29] audit: type=1326 audit(1737519061.982:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3894 comm="syz.0.134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde9f405d29 code=0x7ffc0000 [ 47.652301][ T3861] pgmajfault 55 [ 47.668632][ T29] audit: type=1326 audit(1737519061.992:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3894 comm="syz.0.134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde9f405d29 code=0x7ffc0000 [ 47.681665][ T3861] inactive_anon 0 [ 47.681678][ T3861] active_anon 0 [ 47.681687][ T3861] inactive_file 0 [ 47.681699][ T3861] active_file 4096 [ 47.681707][ T3861] unevictable 0 [ 47.685179][ T29] audit: type=1326 audit(1737519061.992:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3894 comm="syz.0.134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fde9f405d29 code=0x7ffc0000 [ 47.709152][ T3861] hierarchical_memory_limit 314572800 [ 47.709165][ T3861] hierarchical_memsw_limit 9223372036854771712 [ 47.709174][ T3861] total_cache 4096 [ 47.709191][ T3861] total_rss 0 [ 47.709199][ T3861] total_shmem 0 [ 47.712845][ T29] audit: type=1326 audit(1737519061.992:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3894 comm="syz.0.134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde9f405d29 code=0x7ffc0000 [ 47.716412][ T3861] total_mapped_file 0 [ 47.720032][ T29] audit: type=1326 audit(1737519061.992:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3894 comm="syz.0.134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde9f405d29 code=0x7ffc0000 [ 47.723733][ T3861] total_dirty 0 [ 47.723743][ T3861] total_writeback 0 [ 47.727283][ T29] audit: type=1326 audit(1737519061.992:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3894 comm="syz.0.134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fde9f405d29 code=0x7ffc0000 [ 47.750488][ T3861] total_workingset_refault_anon 198 [ 47.750504][ T3861] total_workingset_refault_file 165 [ 47.755881][ T29] audit: type=1326 audit(1737519061.992:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3894 comm="syz.0.134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde9f405d29 code=0x7ffc0000 [ 47.762046][ T3861] total_swap 462848 [ 47.765821][ T29] audit: type=1326 audit(1737519061.992:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3894 comm="syz.0.134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7fde9f405d29 code=0x7ffc0000 [ 47.769071][ T3861] total_swapcached 0 [ 47.772523][ T29] audit: type=1326 audit(1737519061.992:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3894 comm="syz.0.134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde9f405d29 code=0x7ffc0000 [ 47.772551][ T29] audit: type=1326 audit(1737519061.992:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3894 comm="syz.0.134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=241 compat=0 ip=0x7fde9f405d29 code=0x7ffc0000 [ 47.863718][ T3897] loop0: detected capacity change from 0 to 2048 [ 47.864698][ T3861] total_pgpgin 3225 [ 47.864709][ T3861] total_pgpgout 3224 [ 47.907161][ T3897] EXT4-fs: inline encryption not supported [ 47.915921][ T3861] total_pgfault 4281 [ 47.915932][ T3861] total_pgmajfault 55 [ 47.915940][ T3861] total_inactive_anon 0 [ 47.915947][ T3861] total_active_anon 0 [ 47.915955][ T3861] total_inactive_file 0 [ 47.915964][ T3861] total_active_file 4096 [ 47.915973][ T3861] total_unevictable 0 [ 47.934861][ T3891] EXT4-fs (loop2): 1 orphan inode deleted [ 47.943162][ T3861] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null) [ 47.973118][ T3893] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 47.976548][ T3861] ,cpuset=/,mems_allowed=0 [ 47.980646][ T3893] EXT4-fs (loop4): orphan cleanup on readonly fs [ 47.986379][ T3861] ,oom_memcg= [ 47.993084][ T3897] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.994239][ T3861] /syz1 [ 47.998656][ T3893] EXT4-fs warning (device loop4): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 48.002432][ T3861] ,task_memcg=/syz1 [ 48.023845][ T3891] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.027576][ T3861] ,task=syz.1.124,pid=3860,uid=0 [ 48.027606][ T3861] Memory cgroup out of memory: Killed process 3860 (syz.1.124) total-vm:93516kB, anon-rss:788kB, file-rss:22344kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 48.060890][ T3891] ext4 filesystem being mounted at /25/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.128479][ T139] EXT4-fs error (device loop2): ext4_release_dquot:6961: comm kworker/u8:4: Failed to release dquot type 1 [ 48.154996][ T3893] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 48.163625][ T3893] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.133: bg 0: block 40: padding at end of block bitmap is not set [ 48.179471][ T3893] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 48.188582][ T3893] EXT4-fs (loop4): 1 truncate cleaned up [ 48.194718][ T3893] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 48.251511][ T3297] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.277188][ T3893] vhci_hcd: invalid port number 61 [ 48.326304][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.340353][ T3907] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 48.376760][ T3912] loop2: detected capacity change from 0 to 512 [ 48.413364][ T3907] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 48.426342][ T3907] EXT4-fs (loop0): This should not happen!! Data will be lost [ 48.426342][ T3907] [ 48.436082][ T3907] EXT4-fs (loop0): Total free blocks count 0 [ 48.442123][ T3907] EXT4-fs (loop0): Free/Dirty block details [ 48.448079][ T3907] EXT4-fs (loop0): free_blocks=2415919104 [ 48.453818][ T3907] EXT4-fs (loop0): dirty_blocks=8192 [ 48.459254][ T3907] EXT4-fs (loop0): Block reservation details [ 48.465244][ T3907] EXT4-fs (loop0): i_reserved_data_blocks=512 [ 48.491071][ T3912] EXT4-fs (loop2): 1 orphan inode deleted [ 48.497293][ T3912] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.510869][ T2357] EXT4-fs error (device loop2): ext4_release_dquot:6961: comm kworker/u8:7: Failed to release dquot type 1 [ 48.526210][ T3912] ext4 filesystem being mounted at /26/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.719268][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.746442][ T3927] netlink: 60 bytes leftover after parsing attributes in process `syz.1.141'. [ 48.786016][ T3929] loop3: detected capacity change from 0 to 1024 [ 48.806839][ T3929] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.821595][ T3929] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 48.851686][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.056921][ T139] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 49.153381][ T3939] loop0: detected capacity change from 0 to 1024 [ 49.170801][ T3939] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.185391][ T3939] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 49.216349][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.227879][ T3297] EXT4-fs error (device loop2): ext4_readdir:261: inode #11: block 4: comm syz-executor: path /26/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1 [ 49.258373][ T3297] EXT4-fs error (device loop2): ext4_empty_dir:3103: inode #11: block 4: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1 [ 49.286394][ T3297] EXT4-fs warning (device loop2): ext4_empty_dir:3105: inode #11: comm syz-executor: directory missing '.' [ 49.300080][ T3297] EXT4-fs error (device loop2): ext4_readdir:261: inode #11: block 4: comm syz-executor: path /26/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1 [ 49.305926][ T3947] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 49.322002][ T3297] EXT4-fs error (device loop2): ext4_empty_dir:3103: inode #11: block 4: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1 [ 49.347942][ T3297] EXT4-fs warning (device loop2): ext4_empty_dir:3105: inode #11: comm syz-executor: directory missing '.' [ 49.357618][ T3949] loop0: detected capacity change from 0 to 128 [ 49.360161][ T3297] EXT4-fs error (device loop2): ext4_readdir:261: inode #11: block 4: comm syz-executor: path /26/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1 [ 49.387434][ T3297] EXT4-fs error (device loop2): ext4_empty_dir:3103: inode #11: block 4: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1 [ 49.398283][ T3949] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 49.410180][ T3297] EXT4-fs warning (device loop2): ext4_empty_dir:3105: inode #11: comm syz-executor: directory missing '.' [ 49.420301][ T3949] ext4 filesystem being mounted at /34/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 49.430743][ T3297] EXT4-fs error (device loop2): ext4_readdir:261: inode #11: block 4: comm syz-executor: path /26/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1 [ 49.482454][ T3297] EXT4-fs error (device loop2): ext4_empty_dir:3103: inode #11: block 4: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1 [ 49.501672][ T3300] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 49.510946][ T3297] EXT4-fs warning (device loop2): ext4_empty_dir:3105: inode #11: comm syz-executor: directory missing '.' [ 49.522888][ T3297] EXT4-fs error (device loop2): ext4_readdir:261: inode #11: block 4: comm syz-executor: path /26/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1 [ 49.544341][ T3297] EXT4-fs warning (device loop2): ext4_empty_dir:3105: inode #11: comm syz-executor: directory missing '.' [ 49.559401][ T3297] EXT4-fs warning (device loop2): ext4_empty_dir:3105: inode #11: comm syz-executor: directory missing '.' [ 49.571791][ T3297] EXT4-fs warning (device loop2): ext4_empty_dir:3105: inode #11: comm syz-executor: directory missing '.' [ 49.583999][ T3297] EXT4-fs warning (device loop2): ext4_empty_dir:3105: inode #11: comm syz-executor: directory missing '.' [ 49.596417][ T3297] EXT4-fs warning (device loop2): ext4_empty_dir:3105: inode #11: comm syz-executor: directory missing '.' [ 49.609430][ T3297] EXT4-fs warning (device loop2): ext4_empty_dir:3105: inode #11: comm syz-executor: directory missing '.' [ 49.650000][ T3958] loop1: detected capacity change from 0 to 512 [ 49.729727][ T3955] loop0: detected capacity change from 0 to 128 [ 49.749744][ T3962] netlink: 60 bytes leftover after parsing attributes in process `syz.3.153'. [ 49.804308][ T3965] loop3: detected capacity change from 0 to 2048 [ 49.864180][ T3968] loop1: detected capacity change from 0 to 512 [ 49.871833][ T3968] EXT4-fs (loop1): blocks per group (95) and clusters per group (32768) inconsistent [ 49.997266][ T3918] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.016846][ T3971] loop3: detected capacity change from 0 to 2048 [ 50.023502][ T3971] EXT4-fs: Ignoring removed bh option [ 50.043050][ T3971] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.147236][ T139] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.228031][ T3979] loop4: detected capacity change from 0 to 512 [ 50.254107][ T139] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.277096][ T3979] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 50.287535][ T3979] EXT4-fs (loop4): orphan cleanup on readonly fs [ 50.296262][ T3979] EXT4-fs warning (device loop4): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 50.311360][ T3979] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 50.319775][ T3979] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.160: bg 0: block 40: padding at end of block bitmap is not set [ 50.350099][ T3979] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 50.361338][ T3979] EXT4-fs (loop4): 1 truncate cleaned up [ 50.367567][ T3979] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 50.385032][ T139] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.471856][ T139] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.547703][ T3979] vhci_hcd: invalid port number 61 [ 50.589190][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.602687][ T3980] chnl_net:caif_netlink_parms(): no params data found [ 50.632543][ T139] bridge_slave_1: left allmulticast mode [ 50.638431][ T139] bridge_slave_1: left promiscuous mode [ 50.644181][ T139] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.652450][ T139] bridge_slave_0: left allmulticast mode [ 50.658311][ T139] bridge_slave_0: left promiscuous mode [ 50.664120][ T139] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.712169][ T4002] loop4: detected capacity change from 0 to 2048 [ 50.718881][ T4002] EXT4-fs: Ignoring removed bh option [ 50.738122][ T4002] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.800402][ T354] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 50.817482][ T139] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 50.827703][ T139] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 50.837623][ T139] bond0 (unregistering): Released all slaves [ 50.849574][ T354] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2048 with error 28 [ 50.862126][ T354] EXT4-fs (loop3): This should not happen!! Data will be lost [ 50.862126][ T354] [ 50.871927][ T354] EXT4-fs (loop3): Total free blocks count 0 [ 50.878106][ T354] EXT4-fs (loop3): Free/Dirty block details [ 50.884053][ T354] EXT4-fs (loop3): free_blocks=2415919104 [ 50.889827][ T354] EXT4-fs (loop3): dirty_blocks=8208 [ 50.895128][ T354] EXT4-fs (loop3): Block reservation details [ 50.901163][ T354] EXT4-fs (loop3): i_reserved_data_blocks=513 [ 50.936402][ T354] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 2050 with max blocks 2048 with error 28 [ 50.976717][ T3980] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.983879][ T3980] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.997146][ T3980] bridge_slave_0: entered allmulticast mode [ 51.012135][ T3980] bridge_slave_0: entered promiscuous mode [ 51.034551][ T139] hsr_slave_0: left promiscuous mode [ 51.075888][ T139] hsr_slave_1: left promiscuous mode [ 51.084294][ T139] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 51.091819][ T139] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 51.111406][ T139] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 51.118967][ T139] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 51.129035][ T139] veth1_macvtap: left promiscuous mode [ 51.134549][ T139] veth0_macvtap: left promiscuous mode [ 51.140336][ T139] veth1_vlan: left promiscuous mode [ 51.145749][ T139] veth0_vlan: left promiscuous mode [ 51.207474][ T139] team0 (unregistering): Port device team_slave_1 removed [ 51.217769][ T139] team0 (unregistering): Port device team_slave_0 removed [ 51.267019][ T3980] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.274274][ T3980] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.282898][ T3980] bridge_slave_1: entered allmulticast mode [ 51.289670][ T3980] bridge_slave_1: entered promiscuous mode [ 51.298931][ T4013] ipip0: entered promiscuous mode [ 51.332906][ T3980] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.349763][ T3980] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.383567][ T3980] team0: Port device team_slave_0 added [ 51.392352][ T3980] team0: Port device team_slave_1 added [ 51.412081][ T4016] loop0: detected capacity change from 0 to 128 [ 51.430139][ T3980] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.437204][ T3980] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.463205][ T3980] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.488825][ T3980] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.488863][ T3980] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.488896][ T3980] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 51.494709][ T354] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 51.494934][ T354] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2048 with error 28 [ 51.495029][ T354] EXT4-fs (loop4): This should not happen!! Data will be lost [ 51.495029][ T354] [ 51.495042][ T354] EXT4-fs (loop4): Total free blocks count 0 [ 51.495053][ T354] EXT4-fs (loop4): Free/Dirty block details [ 51.495066][ T354] EXT4-fs (loop4): free_blocks=2415919104 [ 51.495080][ T354] EXT4-fs (loop4): dirty_blocks=8208 [ 51.495092][ T354] EXT4-fs (loop4): Block reservation details [ 51.495102][ T354] EXT4-fs (loop4): i_reserved_data_blocks=513 [ 51.568464][ T354] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 2050 with max blocks 2048 with error 28 [ 51.582968][ T4037] loop0: detected capacity change from 0 to 1024 [ 51.609305][ T3980] hsr_slave_0: entered promiscuous mode [ 51.610629][ T3980] hsr_slave_1: entered promiscuous mode [ 51.624696][ T4037] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.629357][ T4037] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 51.716465][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.720380][ T3980] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 51.732766][ T3980] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 51.741309][ T3980] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 51.743213][ T3980] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 51.756871][ T3980] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.756953][ T3980] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.757221][ T3980] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.757254][ T3980] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.767755][ T4050] loop4: detected capacity change from 0 to 512 [ 51.783059][ T4050] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 51.783187][ T4050] EXT4-fs (loop4): orphan cleanup on readonly fs [ 51.783371][ T4050] EXT4-fs warning (device loop4): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 51.783516][ T4050] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 51.783792][ T4050] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.172: bg 0: block 40: padding at end of block bitmap is not set [ 51.783903][ T4050] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 51.784163][ T4050] EXT4-fs (loop4): 1 truncate cleaned up [ 51.784600][ T4050] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 51.880999][ T4050] vhci_hcd: invalid port number 61 [ 51.884396][ T3980] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.903128][ T3980] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.907578][ T354] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.928952][ T4059] loop0: detected capacity change from 0 to 8192 [ 51.946388][ T354] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.164007][ T354] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.194775][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.287769][ T4091] netlink: 12 bytes leftover after parsing attributes in process `syz.4.174'. [ 52.407389][ T3376] kernel write not supported for file /106/attr/current (pid: 3376 comm: kworker/0:3) [ 52.450189][ T4131] loop1: detected capacity change from 0 to 2048 [ 52.457445][ T4131] EXT4-fs: Ignoring removed bh option [ 52.470846][ T4138] loop4: detected capacity change from 0 to 128 [ 52.532003][ T4129] loop3: detected capacity change from 0 to 512 [ 52.579099][ T4131] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.710758][ T4129] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.178: bg 0: block 248: padding at end of block bitmap is not set [ 52.731493][ T3980] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 52.834626][ T4129] __quota_error: 265 callbacks suppressed [ 52.834659][ T4129] Quota error (device loop3): write_blk: dquota write failed [ 52.847996][ T4129] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 52.861009][ T4129] EXT4-fs error (device loop3): ext4_acquire_dquot:6938: comm syz.3.178: Failed to acquire dquot type 1 [ 52.879010][ T4129] EXT4-fs (loop3): 1 truncate cleaned up [ 52.885324][ T4129] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.899187][ T4129] ext4 filesystem being mounted at /41/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.020308][ T4157] loop4: detected capacity change from 0 to 128 [ 53.076663][ T3980] veth0_vlan: entered promiscuous mode [ 53.091653][ T4184] loop4: detected capacity change from 0 to 1024 [ 53.101775][ T3980] veth1_vlan: entered promiscuous mode [ 53.163847][ T4190] netlink: 60 bytes leftover after parsing attributes in process `syz.3.183'. [ 53.171920][ T3980] veth0_macvtap: entered promiscuous mode [ 53.190334][ T3980] veth1_macvtap: entered promiscuous mode [ 53.191654][ T4184] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 53.209706][ T3980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 53.221581][ T3980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.225817][ T4137] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 53.231621][ T3980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 53.256729][ T3980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.266655][ T3980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 53.277207][ T3980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.287315][ T3980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 53.294408][ T4137] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 53.297835][ T3980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.310018][ T4137] EXT4-fs (loop1): This should not happen!! Data will be lost [ 53.310018][ T4137] [ 53.329535][ T4137] EXT4-fs (loop1): Total free blocks count 0 [ 53.335540][ T4137] EXT4-fs (loop1): Free/Dirty block details [ 53.341481][ T4137] EXT4-fs (loop1): free_blocks=2415919104 [ 53.347264][ T4137] EXT4-fs (loop1): dirty_blocks=32 [ 53.352394][ T4137] EXT4-fs (loop1): Block reservation details [ 53.358473][ T4137] EXT4-fs (loop1): i_reserved_data_blocks=2 [ 53.363362][ T3980] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 53.367647][ T4137] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 65793 with max blocks 1 with error 28 [ 53.396374][ T3980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 53.406908][ T3980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.409995][ T4203] loop0: detected capacity change from 0 to 256 [ 53.416754][ T3980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 53.433500][ T3980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.443389][ T3980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 53.453858][ T3980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.463706][ T3980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 53.471910][ T4203] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 53.474272][ T3980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.476016][ T3980] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 53.505653][ T29] audit: type=1400 audit(1737519067.832:843): avc: denied { create } for pid=4198 comm="syz.0.188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 53.545619][ T4207] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 53.560885][ T29] audit: type=1400 audit(1737519067.882:844): avc: denied { execute } for pid=4204 comm="syz.4.189" path="/40/memory.events" dev="tmpfs" ino=241 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 53.582517][ T3980] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.592790][ T3980] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.592834][ T3980] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.592862][ T3980] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.599307][ T29] audit: type=1400 audit(1737519067.912:845): avc: denied { write } for pid=4211 comm="syz.3.191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 53.601028][ T29] audit: type=1400 audit(1737519067.932:846): avc: denied { listen } for pid=4198 comm="syz.0.188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 53.658753][ T29] audit: type=1400 audit(1737519067.992:847): avc: denied { create } for pid=4198 comm="syz.0.188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 53.658787][ T29] audit: type=1400 audit(1737519067.992:848): avc: denied { write } for pid=4198 comm="syz.0.188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 53.692717][ T29] audit: type=1400 audit(1737519068.022:849): avc: denied { accept } for pid=4198 comm="syz.0.188" lport=55238 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 53.744780][ T29] audit: type=1400 audit(1737519068.072:850): avc: denied { mounton } for pid=3980 comm="syz-executor" path="/root/syzkaller.3J0xwa/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 53.780455][ T4234] loop4: detected capacity change from 0 to 732 [ 53.787020][ T4232] loop0: detected capacity change from 0 to 512 [ 53.787927][ T4232] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 53.809263][ T4232] EXT4-fs (loop0): 1 truncate cleaned up [ 53.968542][ T4246] netlink: 60 bytes leftover after parsing attributes in process `syz.1.196'. [ 53.977716][ T4245] netlink: 'syz.0.194': attribute type 4 has an invalid length. [ 53.996631][ T4251] loop1: detected capacity change from 0 to 1024 [ 54.014126][ T4251] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 54.119066][ T4265] openvswitch: netlink: Message has 12 unknown bytes. [ 54.142750][ T4267] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 54.149345][ T4267] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 54.157039][ T4267] vhci_hcd vhci_hcd.0: Device attached [ 54.189893][ T4268] vhci_hcd: connection closed [ 54.193537][ T4139] vhci_hcd: stop threads [ 54.202577][ T4139] vhci_hcd: release socket [ 54.207073][ T4139] vhci_hcd: disconnect device [ 54.262774][ T4276] hsr_slave_0: left promiscuous mode [ 54.281887][ T4276] hsr_slave_1: left promiscuous mode [ 54.311306][ T4285] FAULT_INJECTION: forcing a failure. [ 54.311306][ T4285] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 54.324421][ T4285] CPU: 0 UID: 0 PID: 4285 Comm: syz.4.207 Not tainted 6.13.0-syzkaller-01005-gb9d8a295ed6b #0 [ 54.334682][ T4285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 54.344771][ T4285] Call Trace: [ 54.348146][ T4285] [ 54.351142][ T4285] dump_stack_lvl+0xf2/0x150 [ 54.355773][ T4285] dump_stack+0x15/0x1a [ 54.359988][ T4285] should_fail_ex+0x223/0x230 [ 54.364694][ T4285] should_fail+0xb/0x10 [ 54.368870][ T4285] should_fail_usercopy+0x1a/0x20 [ 54.373935][ T4285] strncpy_from_user+0x25/0x210 [ 54.378845][ T4285] ? __fget_files+0x17c/0x1c0 [ 54.383529][ T4285] __se_sys_add_key+0x81/0x320 [ 54.388382][ T4285] ? fput+0x1c4/0x200 [ 54.392374][ T4285] __x64_sys_add_key+0x67/0x80 [ 54.397154][ T4285] x64_sys_call+0x2964/0x2dc0 [ 54.401838][ T4285] do_syscall_64+0xc9/0x1c0 [ 54.406419][ T4285] ? clear_bhb_loop+0x55/0xb0 [ 54.411103][ T4285] ? clear_bhb_loop+0x55/0xb0 [ 54.415828][ T4285] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.421846][ T4285] RIP: 0033:0x7ff28eb85d29 [ 54.426264][ T4285] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 54.445880][ T4285] RSP: 002b:00007ff28d1f1038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 54.454303][ T4285] RAX: ffffffffffffffda RBX: 00007ff28ed75fa0 RCX: 00007ff28eb85d29 [ 54.462315][ T4285] RDX: 0000000020000840 RSI: 0000000000000000 RDI: 00000000200001c0 [ 54.470304][ T4285] RBP: 00007ff28d1f1090 R08: ffffffffffffffff R09: 0000000000000000 [ 54.478351][ T4285] R10: 000000000000000c R11: 0000000000000246 R12: 0000000000000001 [ 54.486328][ T4285] R13: 0000000000000001 R14: 00007ff28ed75fa0 R15: 00007ffd49db2978 [ 54.494320][ T4285] [ 54.498267][ T4286] openvswitch: netlink: Message has 12 unknown bytes. [ 54.540556][ T4288] netlink: 60 bytes leftover after parsing attributes in process `syz.1.208'. [ 54.717277][ T4302] 9pnet_fd: Insufficient options for proto=fd [ 54.726997][ T4302] loop5: detected capacity change from 0 to 512 [ 54.733632][ T4302] EXT4-fs: Ignoring removed oldalloc option [ 54.748796][ T4302] EXT4-fs error (device loop5): ext4_xattr_inode_iget:436: comm syz.5.212: Parent and EA inode have the same ino 15 [ 54.786340][ T4302] EXT4-fs (loop5): Remounting filesystem read-only [ 54.792913][ T4302] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2863: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 54.806040][ T4302] EXT4-fs warning (device loop5): ext4_evict_inode:259: couldn't mark inode dirty (err -5) [ 54.869082][ T4302] EXT4-fs (loop5): 1 orphan inode deleted [ 54.870702][ T4316] loop1: detected capacity change from 0 to 1024 [ 54.876557][ T4302] SELinux: (dev loop5, type ext4) getxattr errno 5 [ 54.907758][ T4316] ext4: Unknown parameter 'noacl' [ 54.957120][ T4313] netlink: 44 bytes leftover after parsing attributes in process `syz.4.214'. [ 55.053409][ T4339] netlink: 60 bytes leftover after parsing attributes in process `syz.1.220'. [ 55.097476][ T4347] loop5: detected capacity change from 0 to 2048 [ 55.104208][ T4347] EXT4-fs: Ignoring removed bh option [ 55.147207][ T4358] loop1: detected capacity change from 0 to 512 [ 55.154312][ T4358] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 55.166779][ T4329] loop0: detected capacity change from 0 to 8192 [ 55.175189][ T4329] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 55.192945][ T4358] EXT4-fs (loop1): 1 truncate cleaned up [ 55.210940][ T4361] netlink: 348 bytes leftover after parsing attributes in process `syz.4.224'. [ 55.350192][ T4358] netlink: 'syz.1.226': attribute type 4 has an invalid length. [ 55.382753][ T4367] loop4: detected capacity change from 0 to 512 [ 55.457303][ T4367] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a040c018, mo2=0102] [ 55.480117][ T4137] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 55.505393][ T4367] System zones: 0-2, 18-18, 34-35 [ 55.521866][ T4367] ext4 filesystem being mounted at /52/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.536444][ T4137] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2048 with error 28 [ 55.548942][ T4137] EXT4-fs (loop5): This should not happen!! Data will be lost [ 55.548942][ T4137] [ 55.558632][ T4137] EXT4-fs (loop5): Total free blocks count 0 [ 55.564739][ T4137] EXT4-fs (loop5): Free/Dirty block details [ 55.570746][ T4137] EXT4-fs (loop5): free_blocks=2415919104 [ 55.576511][ T4137] EXT4-fs (loop5): dirty_blocks=8208 [ 55.581869][ T4137] EXT4-fs (loop5): Block reservation details [ 55.588206][ T4137] EXT4-fs (loop5): i_reserved_data_blocks=513 [ 55.621968][ T4137] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 2050 with max blocks 2048 with error 28 [ 55.634803][ T4137] EXT4-fs (loop5): This should not happen!! Data will be lost [ 55.634803][ T4137] [ 55.816390][ T4382] loop5: detected capacity change from 0 to 1024 [ 55.859639][ T4386] loop0: detected capacity change from 0 to 2048 [ 55.877231][ T4386] EXT4-fs: Ignoring removed bh option [ 55.902262][ T4386] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #12: comm syz.0.228: corrupted in-inode xattr: e_name out of bounds [ 55.929817][ T4386] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #12: comm syz.0.228: corrupted in-inode xattr: e_name out of bounds [ 56.035421][ T4386] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 56.065695][ T4386] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 56.078006][ T4386] EXT4-fs (loop0): This should not happen!! Data will be lost [ 56.078006][ T4386] [ 56.087757][ T4386] EXT4-fs (loop0): Total free blocks count 0 [ 56.093854][ T4386] EXT4-fs (loop0): Free/Dirty block details [ 56.099814][ T4386] EXT4-fs (loop0): free_blocks=2415919104 [ 56.105550][ T4386] EXT4-fs (loop0): dirty_blocks=32 [ 56.110737][ T4386] EXT4-fs (loop0): Block reservation details [ 56.116849][ T4386] EXT4-fs (loop0): i_reserved_data_blocks=2 [ 56.137530][ T4402] process 'syz.3.233' launched './file1' with NULL argv: empty string added [ 56.173708][ T2176] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 65793 with max blocks 1 with error 28 [ 56.186446][ T2176] EXT4-fs (loop0): This should not happen!! Data will be lost [ 56.186446][ T2176] [ 56.190329][ T4406] netlink: 60 bytes leftover after parsing attributes in process `syz.3.236'. [ 56.260052][ T4417] loop0: detected capacity change from 0 to 2048 [ 56.276317][ T4417] EXT4-fs: inline encryption not supported [ 56.290913][ T4409] netlink: 12 bytes leftover after parsing attributes in process `syz.1.234'. [ 56.472051][ T4445] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 56.540635][ T4450] loop1: detected capacity change from 0 to 512 [ 56.556115][ T4450] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 56.570671][ T4450] EXT4-fs (loop1): 1 truncate cleaned up [ 56.582395][ T4458] Cannot find set identified by id 632 to match [ 56.636482][ T4449] loop5: detected capacity change from 0 to 2048 [ 56.640513][ T4433] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 56.673789][ T4433] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 56.686616][ T4433] EXT4-fs (loop0): This should not happen!! Data will be lost [ 56.686616][ T4433] [ 56.696578][ T4433] EXT4-fs (loop0): Total free blocks count 0 [ 56.702615][ T4433] EXT4-fs (loop0): Free/Dirty block details [ 56.708652][ T4433] EXT4-fs (loop0): free_blocks=2415919104 [ 56.714447][ T4433] EXT4-fs (loop0): dirty_blocks=8192 [ 56.719872][ T4433] EXT4-fs (loop0): Block reservation details [ 56.726055][ T4433] EXT4-fs (loop0): i_reserved_data_blocks=512 [ 56.799388][ T4478] netlink: 24 bytes leftover after parsing attributes in process `syz.1.260'. [ 56.827070][ T4483] loop4: detected capacity change from 0 to 128 [ 56.891672][ T4466] loop3: detected capacity change from 0 to 128 [ 57.295544][ T4139] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 57.308473][ T4139] EXT4-fs (loop0): This should not happen!! Data will be lost [ 57.308473][ T4139] [ 57.369048][ T4506] loop5: detected capacity change from 0 to 2048 [ 57.376043][ T4506] EXT4-fs: Ignoring removed bh option [ 57.458848][ T4515] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 57.479056][ T4515] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1088 with error 28 [ 57.491954][ T4515] EXT4-fs (loop5): This should not happen!! Data will be lost [ 57.491954][ T4515] [ 57.501817][ T4515] EXT4-fs (loop5): Total free blocks count 0 [ 57.507991][ T4515] EXT4-fs (loop5): Free/Dirty block details [ 57.513995][ T4515] EXT4-fs (loop5): free_blocks=2415919104 [ 57.520085][ T4515] EXT4-fs (loop5): dirty_blocks=1104 [ 57.525382][ T4515] EXT4-fs (loop5): Block reservation details [ 57.531400][ T4515] EXT4-fs (loop5): i_reserved_data_blocks=69 [ 57.540552][ T4519] FAULT_INJECTION: forcing a failure. [ 57.540552][ T4519] name failslab, interval 1, probability 0, space 0, times 1 [ 57.553302][ T4519] CPU: 0 UID: 0 PID: 4519 Comm: syz.3.273 Not tainted 6.13.0-syzkaller-01005-gb9d8a295ed6b #0 [ 57.563562][ T4519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 57.573750][ T4519] Call Trace: [ 57.577030][ T4519] [ 57.580001][ T4519] dump_stack_lvl+0xf2/0x150 [ 57.584669][ T4519] dump_stack+0x15/0x1a [ 57.588873][ T4519] should_fail_ex+0x223/0x230 [ 57.593596][ T4519] should_failslab+0x8f/0xb0 [ 57.598272][ T4519] kmem_cache_alloc_node_noprof+0x59/0x320 [ 57.604207][ T4519] ? __alloc_skb+0x10b/0x310 [ 57.608817][ T4519] __alloc_skb+0x10b/0x310 [ 57.613265][ T4519] ? audit_log_start+0x34c/0x6b0 [ 57.618317][ T4519] audit_log_start+0x368/0x6b0 [ 57.623201][ T4519] audit_seccomp+0x4b/0x130 [ 57.627770][ T4519] __seccomp_filter+0x6fa/0x1180 [ 57.632810][ T4519] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 57.638506][ T4519] ? vfs_write+0x596/0x920 [ 57.642997][ T4519] __secure_computing+0x9f/0x1c0 [ 57.648040][ T4519] syscall_trace_enter+0xd1/0x1f0 [ 57.653123][ T4519] ? fpregs_assert_state_consistent+0x83/0xa0 [ 57.659262][ T4519] do_syscall_64+0xaa/0x1c0 [ 57.663808][ T4519] ? clear_bhb_loop+0x55/0xb0 [ 57.668618][ T4519] ? clear_bhb_loop+0x55/0xb0 [ 57.673384][ T4519] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.679283][ T4519] RIP: 0033:0x7f58849c5d29 [ 57.683696][ T4519] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 57.703320][ T4519] RSP: 002b:00007f5883037038 EFLAGS: 00000246 ORIG_RAX: 000000000000010f [ 57.711735][ T4519] RAX: ffffffffffffffda RBX: 00007f5884bb5fa0 RCX: 00007f58849c5d29 [ 57.719719][ T4519] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000020000180 [ 57.727734][ T4519] RBP: 00007f5883037090 R08: 0000000000000000 R09: 0000000000000000 [ 57.735726][ T4519] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 57.743784][ T4519] R13: 0000000000000000 R14: 00007f5884bb5fa0 R15: 00007fff6732c338 [ 57.751767][ T4519] [ 57.788742][ T2176] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 65793 with max blocks 1 with error 28 [ 57.801382][ T2176] EXT4-fs (loop5): This should not happen!! Data will be lost [ 57.801382][ T2176] [ 57.824676][ T4524] loop3: detected capacity change from 0 to 1024 [ 57.837936][ T29] kauditd_printk_skb: 324 callbacks suppressed [ 57.837953][ T29] audit: type=1326 audit(1737519072.172:1173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4525 comm="GPL" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d03195d29 code=0x7ffc0000 [ 57.839380][ T4526] GPL[4526] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 57.848205][ T29] audit: type=1326 audit(1737519072.172:1174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4525 comm="GPL" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d03195d29 code=0x7ffc0000 [ 57.877975][ T4526] GPL[4526] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 57.878663][ T29] audit: type=1326 audit(1737519072.172:1175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4525 comm="GPL" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6d03195d29 code=0x7ffc0000 [ 57.903317][ T4528] loop5: detected capacity change from 0 to 2048 [ 57.911937][ T29] audit: type=1326 audit(1737519072.172:1176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4525 comm="GPL" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d03195d29 code=0x7ffc0000 [ 57.937262][ T4526] GPL[4526] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 57.941876][ T29] audit: type=1326 audit(1737519072.172:1177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4525 comm="GPL" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6d03195d29 code=0x7ffc0000 [ 57.973602][ T4528] EXT4-fs: Ignoring removed bh option [ 57.975121][ T29] audit: type=1326 audit(1737519072.172:1178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4525 comm="GPL" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d03195d29 code=0x7ffc0000 [ 58.026326][ T29] audit: type=1326 audit(1737519072.172:1179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4525 comm="GPL" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d03195d29 code=0x7ffc0000 [ 58.044172][ T4528] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 58.049237][ T29] audit: type=1326 audit(1737519072.172:1180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4525 comm="GPL" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6d03195d29 code=0x7ffc0000 [ 58.068969][ T4522] loop4: detected capacity change from 0 to 128 [ 58.089756][ T29] audit: type=1326 audit(1737519072.302:1181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4525 comm="GPL" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d03195d29 code=0x7ffc0000 [ 58.116346][ T29] audit: type=1326 audit(1737519072.302:1182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4525 comm="GPL" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d03195d29 code=0x7ffc0000 [ 58.157899][ T4539] loop4: detected capacity change from 0 to 512 [ 58.174785][ T4541] loop3: detected capacity change from 0 to 128 [ 58.178157][ T4539] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 58.189425][ T4541] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1) [ 58.189956][ T4539] EXT4-fs (loop4): orphan cleanup on readonly fs [ 58.207149][ T4539] EXT4-fs warning (device loop4): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 58.225803][ T4539] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 58.233265][ T4539] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.278: bg 0: block 40: padding at end of block bitmap is not set [ 58.249337][ T4539] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 58.261479][ T4539] EXT4-fs (loop4): 1 truncate cleaned up [ 58.333037][ T4552] loop5: detected capacity change from 0 to 2048 [ 58.339825][ T4552] EXT4-fs: Ignoring removed bh option [ 58.356393][ T4550] loop0: detected capacity change from 0 to 128 [ 58.419539][ T4550] syz.0.283: attempt to access beyond end of device [ 58.419539][ T4550] loop0: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 58.460241][ T4549] syz.0.283: attempt to access beyond end of device [ 58.460241][ T4549] loop0: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 58.482611][ T4550] syz.0.283: attempt to access beyond end of device [ 58.482611][ T4550] loop0: rw=0, sector=145, nr_sectors = 8 limit=128 [ 58.521156][ T4550] syz.0.283: attempt to access beyond end of device [ 58.521156][ T4550] loop0: rw=0, sector=145, nr_sectors = 8 limit=128 [ 58.536899][ T4559] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 58.560126][ T4539] vhci_hcd: invalid port number 61 [ 58.623055][ T4550] syz.0.283[4550] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 58.623124][ T4550] syz.0.283[4550] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 58.638200][ T4550] syz.0.283[4550] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 58.702723][ T4568] loop4: detected capacity change from 0 to 1024 [ 58.780223][ T4571] loop3: detected capacity change from 0 to 512 [ 58.794639][ T4571] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 58.808085][ T4571] EXT4-fs (loop3): orphan cleanup on readonly fs [ 58.816766][ T4571] EXT4-fs error (device loop3): ext4_acquire_dquot:6938: comm syz.3.286: Failed to acquire dquot type 1 [ 58.832499][ T4571] EXT4-fs (loop3): 1 truncate cleaned up [ 58.964401][ T4566] loop0: detected capacity change from 0 to 128 [ 58.986310][ T4555] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 59.234255][ T4139] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2048 with error 28 [ 59.246945][ T4139] EXT4-fs (loop5): This should not happen!! Data will be lost [ 59.246945][ T4139] [ 59.256723][ T4139] EXT4-fs (loop5): Total free blocks count 0 [ 59.262875][ T4139] EXT4-fs (loop5): Free/Dirty block details [ 59.268824][ T4139] EXT4-fs (loop5): free_blocks=2415919104 [ 59.274556][ T4139] EXT4-fs (loop5): dirty_blocks=8208 [ 59.280053][ T4139] EXT4-fs (loop5): Block reservation details [ 59.286171][ T4139] EXT4-fs (loop5): i_reserved_data_blocks=513 [ 59.531218][ T4594] netlink: 16 bytes leftover after parsing attributes in process `syz.0.297'. [ 59.559861][ T4139] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 2050 with max blocks 2048 with error 28 [ 59.572745][ T4139] EXT4-fs (loop5): This should not happen!! Data will be lost [ 59.572745][ T4139] [ 59.657469][ T4598] loop0: detected capacity change from 0 to 128 [ 59.709115][ T4600] team0 (unregistering): Port device team_slave_0 removed [ 59.737630][ T4600] team0 (unregistering): Port device team_slave_1 removed [ 59.772517][ T4598] netlink: 36 bytes leftover after parsing attributes in process `syz.0.299'. [ 59.786082][ T4598] syz.0.299: attempt to access beyond end of device [ 59.786082][ T4598] loop0: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 59.834280][ T4598] syz.0.299: attempt to access beyond end of device [ 59.834280][ T4598] loop0: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 59.876972][ T4606] SELinux: Context system_u:object_r:hald_log_t:s0 is not valid (left unmapped). [ 59.895221][ T4598] syz.0.299: attempt to access beyond end of device [ 59.895221][ T4598] loop0: rw=0, sector=145, nr_sectors = 8 limit=128 [ 60.003222][ T4613] loop4: detected capacity change from 0 to 1024 [ 60.152102][ T4621] pim6reg1: entered promiscuous mode [ 60.157589][ T4621] pim6reg1: entered allmulticast mode [ 60.218673][ T4621] loop5: detected capacity change from 0 to 512 [ 60.257496][ T4621] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.306: bg 0: block 248: padding at end of block bitmap is not set [ 60.273949][ T4624] loop1: detected capacity change from 0 to 256 [ 60.286198][ T4624] msdos: Unknown parameter '' [ 60.286884][ T4626] loop4: detected capacity change from 0 to 512 [ 60.301355][ T4624] loop1: detected capacity change from 0 to 128 [ 60.314790][ T4621] EXT4-fs error (device loop5): ext4_acquire_dquot:6938: comm syz.5.306: Failed to acquire dquot type 1 [ 60.332958][ T4630] loop3: detected capacity change from 0 to 512 [ 60.340044][ T4621] EXT4-fs (loop5): 1 truncate cleaned up [ 60.342112][ T4624] syz.1.307: attempt to access beyond end of device [ 60.342112][ T4624] loop1: rw=2049, sector=137, nr_sectors = 2 limit=128 [ 60.357169][ T4621] ext4 filesystem being mounted at /27/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 60.370374][ T4626] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 60.381769][ T4626] EXT4-fs (loop4): orphan cleanup on readonly fs [ 60.397200][ T4626] EXT4-fs warning (device loop4): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 60.415247][ T4626] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 60.416701][ T4630] ext4 filesystem being mounted at /73/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 60.433253][ T4635] FAULT_INJECTION: forcing a failure. [ 60.433253][ T4635] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 60.446409][ T4635] CPU: 1 UID: 0 PID: 4635 Comm: syz.0.310 Not tainted 6.13.0-syzkaller-01005-gb9d8a295ed6b #0 [ 60.447927][ T4626] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.308: bg 0: block 40: padding at end of block bitmap is not set [ 60.456820][ T4635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 60.456839][ T4635] Call Trace: [ 60.456847][ T4635] [ 60.456856][ T4635] dump_stack_lvl+0xf2/0x150 [ 60.472278][ T4626] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 60.481018][ T4635] dump_stack+0x15/0x1a [ 60.484874][ T4626] EXT4-fs (loop4): 1 truncate cleaned up [ 60.487290][ T4635] should_fail_ex+0x223/0x230 [ 60.487324][ T4635] should_fail+0xb/0x10 [ 60.487348][ T4635] should_fail_usercopy+0x1a/0x20 [ 60.487443][ T4635] _copy_from_user+0x1c/0xa0 [ 60.487477][ T4635] memdup_user+0x64/0xc0 [ 60.487540][ T4635] strndup_user+0x68/0xa0 [ 60.487576][ T4635] __se_sys_mount+0x4e/0x2d0 [ 60.487658][ T4635] ? fput+0x1c4/0x200 [ 60.487683][ T4635] ? ksys_write+0x176/0x1b0 [ 60.487715][ T4635] __x64_sys_mount+0x67/0x80 [ 60.487805][ T4635] x64_sys_call+0x2c84/0x2dc0 [ 60.487831][ T4635] do_syscall_64+0xc9/0x1c0 [ 60.565105][ T4635] ? clear_bhb_loop+0x55/0xb0 [ 60.569796][ T4635] ? clear_bhb_loop+0x55/0xb0 [ 60.574495][ T4635] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.580407][ T4635] RIP: 0033:0x7fde9f405d29 [ 60.584835][ T4635] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 60.604479][ T4635] RSP: 002b:00007fde9da77038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 60.612896][ T4635] RAX: ffffffffffffffda RBX: 00007fde9f5f5fa0 RCX: 00007fde9f405d29 [ 60.620924][ T4635] RDX: 00000000200002c0 RSI: 0000000020000080 RDI: 0000000000000000 [ 60.628952][ T4635] RBP: 00007fde9da77090 R08: 0000000020000400 R09: 0000000000000000 [ 60.637010][ T4635] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 60.644984][ T4635] R13: 0000000000000000 R14: 00007fde9f5f5fa0 R15: 00007fff3ecfb6e8 [ 60.652981][ T4635] [ 60.711505][ T4139] EXT4-fs error (device loop5): ext4_release_dquot:6961: comm kworker/u8:26: Failed to release dquot type 1 [ 60.792672][ T4655] loop0: detected capacity change from 0 to 1024 [ 60.800815][ T4652] FAULT_INJECTION: forcing a failure. [ 60.800815][ T4652] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 60.811146][ T4626] vhci_hcd: invalid port number 61 [ 60.814273][ T4652] CPU: 0 UID: 0 PID: 4652 Comm: syz.3.316 Not tainted 6.13.0-syzkaller-01005-gb9d8a295ed6b #0 [ 60.829502][ T4652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 60.839690][ T4652] Call Trace: [ 60.843042][ T4652] [ 60.846033][ T4652] dump_stack_lvl+0xf2/0x150 [ 60.850715][ T4652] dump_stack+0x15/0x1a [ 60.854922][ T4652] should_fail_ex+0x223/0x230 [ 60.859679][ T4652] should_fail_alloc_page+0xfd/0x110 [ 60.865041][ T4652] __alloc_pages_noprof+0x109/0x340 [ 60.870339][ T4652] alloc_pages_mpol_noprof+0xb8/0x260 [ 60.875742][ T4652] vma_alloc_folio_noprof+0x1a0/0x2f0 [ 60.881244][ T4652] handle_mm_fault+0xdd7/0x2ac0 [ 60.886129][ T4652] exc_page_fault+0x3b9/0x650 [ 60.890960][ T4652] asm_exc_page_fault+0x26/0x30 [ 60.893614][ T4655] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, [ 60.895839][ T4652] RIP: 0033:0x7f588497335b [ 60.895863][ T4652] Code: c0 8b 87 c0 00 00 00 66 0f 6c c0 85 c0 0f 85 44 01 00 00 c7 87 c0 00 00 00 ff ff ff ff 48 8d 84 24 20 21 00 00 48 8d 7c 24 20 <0f> 29 44 24 40 49 89 e4 48 89 44 24 50 8b 43 74 48 89 9c 24 00 01 [ 60.904115][ T4655] block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 60.908496][ T4652] RSP: 002b:00007f5883034e10 EFLAGS: 00010246 [ 60.908517][ T4652] RAX: 00007f5883036f30 RBX: 00007f5884b8b620 RCX: 0000000000000000 [ 60.908533][ T4652] RDX: 00007f5883036f78 RSI: 00007f5884a25bd8 RDI: 00007f5883034e30 [ 60.959127][ T4652] RBP: 0000000000000009 R08: 0000000000000000 R09: 0000000000000000 [ 60.967100][ T4652] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 60.975106][ T4652] R13: 0000000000000000 R14: 00007f5884bb5fa0 R15: 00007fff6732c338 [ 60.983099][ T4652] [ 60.986213][ T4652] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 61.022126][ T4665] netlink: 16 bytes leftover after parsing attributes in process `syz.3.320'. [ 61.101493][ T4673] loop1: detected capacity change from 0 to 512 [ 61.118906][ T4678] netlink: 4 bytes leftover after parsing attributes in process `syz.3.324'. [ 61.135618][ T4678] FAULT_INJECTION: forcing a failure. [ 61.135618][ T4678] name failslab, interval 1, probability 0, space 0, times 0 [ 61.148717][ T4678] CPU: 0 UID: 0 PID: 4678 Comm: syz.3.324 Not tainted 6.13.0-syzkaller-01005-gb9d8a295ed6b #0 [ 61.159066][ T4678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 61.169145][ T4678] Call Trace: [ 61.172436][ T4678] [ 61.175402][ T4678] dump_stack_lvl+0xf2/0x150 [ 61.180041][ T4678] dump_stack+0x15/0x1a [ 61.184232][ T4678] should_fail_ex+0x223/0x230 [ 61.186679][ T4673] EXT4-fs (loop1): shut down requested (0) [ 61.188923][ T4678] should_failslab+0x8f/0xb0 [ 61.199488][ T4678] __kmalloc_node_noprof+0xad/0x410 [ 61.204724][ T4678] ? __kvmalloc_node_noprof+0x72/0x170 [ 61.210240][ T4678] __kvmalloc_node_noprof+0x72/0x170 [ 61.215645][ T4678] __nf_hook_entries_try_shrink+0x23a/0x440 [ 61.221560][ T4678] __nf_unregister_net_hook+0x31e/0x3f0 [ 61.227511][ T4678] ? __pfx_nft_synproxy_obj_destroy+0x10/0x10 [ 61.233592][ T4678] nf_unregister_net_hooks+0xb0/0xe0 [ 61.238990][ T4678] nf_synproxy_ipv4_fini+0x54/0x60 [ 61.244157][ T4678] nft_synproxy_do_destroy+0xd8/0x110 [ 61.249602][ T4678] nft_synproxy_obj_destroy+0x15/0x20 [ 61.255039][ T4678] __nft_release_table+0x59f/0x830 [ 61.260163][ T4678] nft_rcv_nl_event+0x2ec/0x390 [ 61.265124][ T4678] ? nfulnl_rcv_nl_event+0x15c/0x180 [ 61.270436][ T4678] ? __pfx_nft_rcv_nl_event+0x10/0x10 [ 61.275812][ T4678] blocking_notifier_call_chain+0x94/0x200 [ 61.281680][ T4678] netlink_release+0xad6/0xfb0 [ 61.286598][ T4678] sock_close+0x68/0x150 [ 61.290855][ T4678] ? __pfx_sock_close+0x10/0x10 [ 61.295813][ T4678] __fput+0x17a/0x6d0 [ 61.299804][ T4678] ? file_close_fd_locked+0x17f/0x1a0 [ 61.305201][ T4678] __fput_sync+0x96/0xc0 [ 61.309530][ T4678] __se_sys_close+0x109/0x1b0 [ 61.314217][ T4678] __x64_sys_close+0x1f/0x30 [ 61.318881][ T4678] x64_sys_call+0x266c/0x2dc0 [ 61.323567][ T4678] do_syscall_64+0xc9/0x1c0 [ 61.328126][ T4678] ? clear_bhb_loop+0x55/0xb0 [ 61.332861][ T4678] ? clear_bhb_loop+0x55/0xb0 [ 61.337546][ T4678] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.343480][ T4678] RIP: 0033:0x7f58849c5d29 [ 61.347948][ T4678] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 61.367675][ T4678] RSP: 002b:00007f5883037038 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 61.376107][ T4678] RAX: ffffffffffffffda RBX: 00007f5884bb5fa0 RCX: 00007f58849c5d29 [ 61.384147][ T4678] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 61.392119][ T4678] RBP: 00007f5883037090 R08: 0000000000000000 R09: 0000000000000000 [ 61.400122][ T4678] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 61.408183][ T4678] R13: 0000000000000000 R14: 00007f5884bb5fa0 R15: 00007fff6732c338 [ 61.416165][ T4678] [ 61.429272][ T4684] loop0: detected capacity change from 0 to 512 [ 61.430092][ T4683] Process accounting resumed [ 61.466083][ T4684] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 61.473823][ T4682] loop4: detected capacity change from 0 to 1024 [ 61.474128][ T4684] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=2842c018, mo2=0002] [ 61.482493][ T4682] EXT4-fs: Ignoring removed nomblk_io_submit option [ 61.490797][ T4673] nfs4: Unknown parameter 'bsddf' [ 61.515619][ T4684] System zones: 0-2, 18-18, 34-35 [ 61.539357][ T4684] EXT4-fs (loop0): shut down requested (0) [ 61.622266][ T4704] FAULT_INJECTION: forcing a failure. [ 61.622266][ T4704] name failslab, interval 1, probability 0, space 0, times 0 [ 61.634983][ T4704] CPU: 1 UID: 0 PID: 4704 Comm: syz.1.332 Not tainted 6.13.0-syzkaller-01005-gb9d8a295ed6b #0 [ 61.645244][ T4704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 61.655418][ T4704] Call Trace: [ 61.658995][ T4704] [ 61.662078][ T4704] dump_stack_lvl+0xf2/0x150 [ 61.666815][ T4704] dump_stack+0x15/0x1a [ 61.671118][ T4704] should_fail_ex+0x223/0x230 [ 61.675828][ T4704] should_failslab+0x8f/0xb0 [ 61.680538][ T4704] kmem_cache_alloc_noprof+0x52/0x320 [ 61.686027][ T4704] ? __anon_vma_prepare+0xcf/0x310 [ 61.691182][ T4704] __anon_vma_prepare+0xcf/0x310 [ 61.696241][ T4704] do_madvise+0x2459/0x2a70 [ 61.700781][ T4704] ? __fget_files+0x17c/0x1c0 [ 61.705487][ T4704] ? fput+0x1c4/0x200 [ 61.709538][ T4704] ? ksys_write+0x176/0x1b0 [ 61.714125][ T4704] __x64_sys_madvise+0x61/0x70 [ 61.719003][ T4704] x64_sys_call+0x23ab/0x2dc0 [ 61.723782][ T4704] do_syscall_64+0xc9/0x1c0 [ 61.728314][ T4704] ? clear_bhb_loop+0x55/0xb0 [ 61.733101][ T4704] ? clear_bhb_loop+0x55/0xb0 [ 61.737868][ T4704] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.743788][ T4704] RIP: 0033:0x7f6d03195d29 [ 61.748282][ T4704] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 61.767920][ T4704] RSP: 002b:00007f6d01801038 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 61.776467][ T4704] RAX: ffffffffffffffda RBX: 00007f6d03385fa0 RCX: 00007f6d03195d29 [ 61.784624][ T4704] RDX: 0000000000000066 RSI: 7fffffffffffffff RDI: 0000000020000000 [ 61.792852][ T4704] RBP: 00007f6d01801090 R08: 0000000000000000 R09: 0000000000000000 [ 61.800869][ T4704] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 61.808951][ T4704] R13: 0000000000000000 R14: 00007f6d03385fa0 R15: 00007ffc99801998 [ 61.816995][ T4704] [ 61.984331][ T4726] loop1: detected capacity change from 0 to 256 [ 61.991304][ T4726] msdos: Unknown parameter '' [ 62.008824][ T4727] loop4: detected capacity change from 0 to 2048 [ 62.015491][ T4727] EXT4-fs: Ignoring removed bh option [ 62.053617][ T4726] loop1: detected capacity change from 0 to 128 [ 62.078875][ T4730] loop3: detected capacity change from 0 to 128 [ 62.091817][ T4726] syz.1.340: attempt to access beyond end of device [ 62.091817][ T4726] loop1: rw=2049, sector=137, nr_sectors = 2 limit=128 [ 62.304667][ T4744] loop1: detected capacity change from 0 to 2048 [ 62.311264][ T4744] EXT4-fs: Ignoring removed bh option [ 62.712410][ T4760] loop0: detected capacity change from 0 to 1024 [ 62.719304][ T4760] EXT4-fs: Ignoring removed nobh option [ 62.742961][ T4760] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 62.749212][ T4758] loop3: detected capacity change from 0 to 8192 [ 62.759858][ T4139] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 62.791581][ T4139] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 62.803835][ T4139] EXT4-fs (loop4): This should not happen!! Data will be lost [ 62.803835][ T4139] [ 62.813769][ T4139] EXT4-fs (loop4): Total free blocks count 0 [ 62.819791][ T4139] EXT4-fs (loop4): Free/Dirty block details [ 62.825739][ T4139] EXT4-fs (loop4): free_blocks=2415919104 [ 62.831755][ T4139] EXT4-fs (loop4): dirty_blocks=32 [ 62.836917][ T4139] EXT4-fs (loop4): Block reservation details [ 62.843067][ T4139] EXT4-fs (loop4): i_reserved_data_blocks=2 [ 62.849697][ T4113] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 65793 with max blocks 1 with error 28 [ 62.852362][ T29] kauditd_printk_skb: 493 callbacks suppressed [ 62.852378][ T29] audit: type=1400 audit(1737519077.182:1669): avc: denied { setopt } for pid=4759 comm="syz.0.351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 62.862236][ T4113] EXT4-fs (loop4): This should not happen!! Data will be lost [ 62.862236][ T4113] [ 62.948166][ T29] audit: type=1326 audit(1737519077.282:1670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4764 comm="syz.4.352" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff28eb85d29 code=0x0 [ 63.001805][ T4771] loop4: detected capacity change from 0 to 512 [ 63.032754][ T4771] ext4 filesystem being mounted at /71/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.116036][ T4139] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 63.149974][ T29] audit: type=1400 audit(1737519077.462:1671): avc: denied { execute } for pid=4778 comm="+}[@" path=2F6D656D66643A0B656DDA9952406DFCFE9B232AFF202864656C6574656429 dev="tmpfs" ino=1095 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 63.183579][ T4771] EXT4-fs error (device loop4): ext4_do_update_inode:5154: inode #2: comm syz.4.352: corrupted inode contents [ 63.197721][ T4139] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2048 with error 28 [ 63.210206][ T4139] EXT4-fs (loop1): This should not happen!! Data will be lost [ 63.210206][ T4139] [ 63.219966][ T4139] EXT4-fs (loop1): Total free blocks count 0 [ 63.225984][ T4139] EXT4-fs (loop1): Free/Dirty block details [ 63.232026][ T4139] EXT4-fs (loop1): free_blocks=2415919104 [ 63.237800][ T4139] EXT4-fs (loop1): dirty_blocks=8208 [ 63.243197][ T4139] EXT4-fs (loop1): Block reservation details [ 63.249311][ T4139] EXT4-fs (loop1): i_reserved_data_blocks=513 [ 63.254464][ T4771] EXT4-fs error (device loop4): ext4_dirty_inode:6042: inode #2: comm syz.4.352: mark_inode_dirty error [ 63.272737][ T4139] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 2050 with max blocks 2048 with error 28 [ 63.285531][ T4139] EXT4-fs (loop1): This should not happen!! Data will be lost [ 63.285531][ T4139] [ 63.287846][ T4771] EXT4-fs error (device loop4): ext4_do_update_inode:5154: inode #2: comm syz.4.352: corrupted inode contents [ 63.320058][ T4783] EXT4-fs error (device loop4): ext4_do_update_inode:5154: inode #2: comm syz.4.352: corrupted inode contents [ 63.331056][ T4771] syz.4.352[4771] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 63.331778][ T4771] syz.4.352[4771] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 63.343332][ T4783] EXT4-fs error (device loop4): ext4_dirty_inode:6042: inode #2: comm syz.4.352: mark_inode_dirty error [ 63.370116][ T4771] syz.4.352[4771] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 63.372822][ T4771] netlink: 48 bytes leftover after parsing attributes in process `syz.4.352'. [ 63.393252][ T4783] EXT4-fs error (device loop4): ext4_do_update_inode:5154: inode #2: comm syz.4.352: corrupted inode contents [ 63.435104][ T4783] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #2: comm syz.4.352: mark_inode_dirty error [ 63.466591][ T4783] EXT4-fs error (device loop4): ext4_do_update_inode:5154: inode #2: comm syz.4.352: corrupted inode contents [ 63.478627][ T4783] EXT4-fs error (device loop4): ext4_dirty_inode:6042: inode #2: comm syz.4.352: mark_inode_dirty error [ 63.490939][ T4771] EXT4-fs error (device loop4): ext4_do_update_inode:5154: inode #2: comm syz.4.352: corrupted inode contents [ 63.539630][ T29] audit: type=1326 audit(1737519077.872:1672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4794 comm="syz.1.362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d03195d29 code=0x7ffc0000 [ 63.563208][ T29] audit: type=1326 audit(1737519077.872:1673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4794 comm="syz.1.362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d03195d29 code=0x7ffc0000 [ 63.603304][ T29] audit: type=1326 audit(1737519077.872:1674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4794 comm="syz.1.362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=292 compat=0 ip=0x7f6d03195d29 code=0x7ffc0000 [ 63.626810][ T29] audit: type=1326 audit(1737519077.872:1675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4794 comm="syz.1.362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d03195d29 code=0x7ffc0000 [ 63.650155][ T29] audit: type=1326 audit(1737519077.872:1676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4794 comm="syz.1.362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d03195d29 code=0x7ffc0000 [ 63.677453][ T29] audit: type=1400 audit(1737519078.012:1677): avc: denied { mount } for pid=4796 comm="syz.1.363" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 63.705158][ T29] audit: type=1400 audit(1737519078.032:1678): avc: denied { unmount } for pid=3308 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 63.819063][ T4823] loop4: detected capacity change from 0 to 128 [ 63.822167][ T4825] loop3: detected capacity change from 0 to 128 [ 63.827496][ T4823] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1) [ 63.862978][ T4825] syz.3.371: attempt to access beyond end of device [ 63.862978][ T4825] loop3: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 63.877864][ T4825] netlink: 24 bytes leftover after parsing attributes in process `syz.3.371'. [ 63.891506][ T4825] syz.3.371: attempt to access beyond end of device [ 63.891506][ T4825] loop3: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 63.894884][ T4829] loop4: detected capacity change from 0 to 1024 [ 63.913390][ T4829] EXT4-fs: Ignoring removed nomblk_io_submit option [ 63.915689][ T4825] syz.3.371: attempt to access beyond end of device [ 63.915689][ T4825] loop3: rw=0, sector=145, nr_sectors = 8 limit=128 [ 63.936097][ T4825] syz.3.371: attempt to access beyond end of device [ 63.936097][ T4825] loop3: rw=0, sector=145, nr_sectors = 8 limit=128 [ 63.949573][ T4825] syz.3.371: attempt to access beyond end of device [ 63.949573][ T4825] loop3: rw=0, sector=145, nr_sectors = 8 limit=128 [ 63.963419][ T4825] syz.3.371: attempt to access beyond end of device [ 63.963419][ T4825] loop3: rw=0, sector=145, nr_sectors = 8 limit=128 [ 63.976694][ T4825] syz.3.371: attempt to access beyond end of device [ 63.976694][ T4825] loop3: rw=0, sector=145, nr_sectors = 8 limit=128 [ 63.990047][ T4825] syz.3.371: attempt to access beyond end of device [ 63.990047][ T4825] loop3: rw=0, sector=145, nr_sectors = 8 limit=128 [ 64.003404][ T4825] syz.3.371: attempt to access beyond end of device [ 64.003404][ T4825] loop3: rw=0, sector=145, nr_sectors = 8 limit=128 [ 64.016757][ T4825] syz.3.371: attempt to access beyond end of device [ 64.016757][ T4825] loop3: rw=0, sector=145, nr_sectors = 8 limit=128 [ 64.132011][ T4841] loop3: detected capacity change from 0 to 2048 [ 64.141718][ T4841] EXT4-fs: inline encryption not supported [ 64.339064][ T4858] loop5: detected capacity change from 0 to 512 [ 64.354116][ T4848] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 64.369854][ T4848] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 64.382525][ T4848] EXT4-fs (loop3): This should not happen!! Data will be lost [ 64.382525][ T4848] [ 64.392280][ T4848] EXT4-fs (loop3): Total free blocks count 0 [ 64.398307][ T4848] EXT4-fs (loop3): Free/Dirty block details [ 64.404225][ T4848] EXT4-fs (loop3): free_blocks=2415919104 [ 64.410142][ T4848] EXT4-fs (loop3): dirty_blocks=8192 [ 64.415452][ T4848] EXT4-fs (loop3): Block reservation details [ 64.421502][ T4848] EXT4-fs (loop3): i_reserved_data_blocks=512 [ 64.428376][ T4858] ext4 filesystem being mounted at /39/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.452767][ T4858] EXT4-fs error (device loop5): ext4_do_update_inode:5154: inode #2: comm syz.5.380: corrupted inode contents [ 64.464781][ T4858] EXT4-fs error (device loop5): ext4_dirty_inode:6042: inode #2: comm syz.5.380: mark_inode_dirty error [ 64.476384][ T4858] EXT4-fs error (device loop5): ext4_do_update_inode:5154: inode #2: comm syz.5.380: corrupted inode contents [ 64.490304][ T4858] EXT4-fs error (device loop5): ext4_do_update_inode:5154: inode #2: comm syz.5.380: corrupted inode contents [ 64.502314][ T4858] EXT4-fs error (device loop5): ext4_dirty_inode:6042: inode #2: comm syz.5.380: mark_inode_dirty error [ 64.514805][ T4858] EXT4-fs error (device loop5): ext4_do_update_inode:5154: inode #2: comm syz.5.380: corrupted inode contents [ 64.527020][ T4858] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #2: comm syz.5.380: mark_inode_dirty error [ 64.528308][ T4864] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 64.540963][ T4858] EXT4-fs error (device loop5): ext4_do_update_inode:5154: inode #2: comm syz.5.380: corrupted inode contents [ 64.546636][ T4865] syz.5.380[4865] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 64.557118][ T4865] syz.5.380[4865] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 64.558465][ T4858] EXT4-fs error (device loop5): ext4_dirty_inode:6042: inode #2: comm syz.5.380: mark_inode_dirty error [ 64.570141][ T4864] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 64.582144][ T4865] syz.5.380[4865] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 64.609111][ T4867] netlink: 4 bytes leftover after parsing attributes in process `syz.1.385'. [ 64.635725][ T4867] netlink: 17 bytes leftover after parsing attributes in process `syz.1.385'. [ 64.649051][ T4869] loop0: detected capacity change from 0 to 128 [ 64.655498][ T4867] wireguard0: entered promiscuous mode [ 64.661157][ T4867] wireguard0: entered allmulticast mode [ 64.667587][ T4869] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 64.681196][ T4858] netlink: 48 bytes leftover after parsing attributes in process `syz.5.380'. [ 64.696029][ T4858] EXT4-fs error (device loop5): ext4_do_update_inode:5154: inode #2: comm syz.5.380: corrupted inode contents [ 64.709529][ T4871] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 64.721625][ T4136] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 64.741224][ T4873] syz.0.387[4873] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 64.741310][ T4873] syz.0.387[4873] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 64.753914][ T4873] syz.0.387[4873] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 64.775165][ T4873] vlan2: entered allmulticast mode [ 64.846870][ T4880] loop4: detected capacity change from 0 to 256 [ 64.853722][ T4880] msdos: Unknown parameter '' [ 64.865656][ T4880] loop4: detected capacity change from 0 to 128 [ 64.897382][ T4886] loop0: detected capacity change from 0 to 512 [ 64.906557][ T4886] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 64.914549][ T4886] EXT4-fs (loop0): orphan cleanup on readonly fs [ 64.921268][ T4886] EXT4-fs warning (device loop0): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 64.936060][ T4886] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 64.943056][ T4886] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.393: bg 0: block 40: padding at end of block bitmap is not set [ 64.959871][ T4886] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 65.008730][ T4886] EXT4-fs (loop0): 1 truncate cleaned up [ 65.032245][ T4139] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 65.045250][ T4139] EXT4-fs (loop3): This should not happen!! Data will be lost [ 65.045250][ T4139] [ 65.083340][ T4900] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 65.148453][ T4886] vhci_hcd: invalid port number 61 [ 65.228743][ T4915] FAULT_INJECTION: forcing a failure. [ 65.228743][ T4915] name failslab, interval 1, probability 0, space 0, times 0 [ 65.241489][ T4915] CPU: 0 UID: 0 PID: 4915 Comm: syz.5.399 Not tainted 6.13.0-syzkaller-01005-gb9d8a295ed6b #0 [ 65.251769][ T4915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 65.261912][ T4915] Call Trace: [ 65.265200][ T4915] [ 65.268242][ T4915] dump_stack_lvl+0xf2/0x150 [ 65.272861][ T4915] dump_stack+0x15/0x1a [ 65.277086][ T4915] should_fail_ex+0x223/0x230 [ 65.281787][ T4915] should_failslab+0x8f/0xb0 [ 65.286531][ T4915] kmem_cache_alloc_node_noprof+0x59/0x320 [ 65.292500][ T4915] ? __alloc_skb+0x10b/0x310 [ 65.297243][ T4915] __alloc_skb+0x10b/0x310 [ 65.301712][ T4915] ? audit_log_start+0x34c/0x6b0 [ 65.306679][ T4915] audit_log_start+0x368/0x6b0 [ 65.311545][ T4915] audit_seccomp+0x4b/0x130 [ 65.316086][ T4915] __seccomp_filter+0x6fa/0x1180 [ 65.321042][ T4915] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 65.326814][ T4915] ? vfs_write+0x596/0x920 [ 65.331239][ T4915] __secure_computing+0x9f/0x1c0 [ 65.336316][ T4915] syscall_trace_enter+0xd1/0x1f0 [ 65.341438][ T4915] ? fpregs_assert_state_consistent+0x83/0xa0 [ 65.347633][ T4915] do_syscall_64+0xaa/0x1c0 [ 65.352204][ T4915] ? clear_bhb_loop+0x55/0xb0 [ 65.357016][ T4915] ? clear_bhb_loop+0x55/0xb0 [ 65.361780][ T4915] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.367721][ T4915] RIP: 0033:0x7fb666da5d29 [ 65.372186][ T4915] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 65.391814][ T4915] RSP: 002b:00007fb665411038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 65.400232][ T4915] RAX: ffffffffffffffda RBX: 00007fb666f95fa0 RCX: 00007fb666da5d29 [ 65.408223][ T4915] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000008 [ 65.416279][ T4915] RBP: 00007fb665411090 R08: 0000000000000000 R09: 0000000000000000 [ 65.424340][ T4915] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 65.432340][ T4915] R13: 0000000000000000 R14: 00007fb666f95fa0 R15: 00007fff589640c8 [ 65.440392][ T4915] [ 65.447505][ T4915] netlink: 104 bytes leftover after parsing attributes in process `syz.5.399'. [ 65.488117][ T4921] loop0: detected capacity change from 0 to 1024 [ 65.498570][ T4921] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 65.516476][ T4919] loop5: detected capacity change from 0 to 512 [ 65.524169][ T4919] EXT4-fs (loop5): orphan cleanup on readonly fs [ 65.530629][ T4919] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -13 [ 65.539189][ T4919] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 65.563817][ T4919] EXT4-fs error (device loop5): ext4_clear_blocks:876: inode #13: comm syz.5.399: attempt to clear invalid blocks 2 len 1 [ 65.578293][ T4919] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.399: invalid indirect mapped block 1819239214 (level 0) [ 65.593040][ T4919] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.399: invalid indirect mapped block 1819239214 (level 1) [ 65.608324][ T4919] EXT4-fs (loop5): 1 truncate cleaned up [ 65.621034][ T4928] netlink: 4 bytes leftover after parsing attributes in process `syz.0.401'. [ 65.635048][ T4928] netlink: 17 bytes leftover after parsing attributes in process `syz.0.401'. [ 65.650134][ T4928] wireguard0: entered promiscuous mode [ 65.655737][ T4928] wireguard0: entered allmulticast mode [ 65.758924][ T4934] loop0: detected capacity change from 0 to 1024 [ 65.780821][ T4934] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 65.922218][ T4951] loop0: detected capacity change from 0 to 1024 [ 65.937242][ T4951] EXT4-fs: Ignoring removed nomblk_io_submit option [ 66.124507][ T4978] loop3: detected capacity change from 0 to 2048 [ 66.193364][ T4967] loop0: detected capacity change from 0 to 128 [ 66.218581][ T4989] loop4: detected capacity change from 0 to 8192 [ 66.235438][ T4989] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 66.263979][ T5004] loop0: detected capacity change from 0 to 512 [ 66.267487][ T5005] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 66.310340][ T5004] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 66.325721][ T5004] EXT4-fs (loop0): orphan cleanup on readonly fs [ 66.347767][ T5004] EXT4-fs warning (device loop0): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 66.419386][ T5004] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 66.438353][ T5024] netlink: 8 bytes leftover after parsing attributes in process `syz.3.424'. [ 66.457507][ T5004] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.422: bg 0: block 40: padding at end of block bitmap is not set [ 66.482896][ T5024] FAULT_INJECTION: forcing a failure. [ 66.482896][ T5024] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 66.496311][ T5024] CPU: 0 UID: 0 PID: 5024 Comm: syz.3.424 Not tainted 6.13.0-syzkaller-01005-gb9d8a295ed6b #0 [ 66.506609][ T5024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 66.516691][ T5024] Call Trace: [ 66.519993][ T5024] [ 66.522963][ T5024] dump_stack_lvl+0xf2/0x150 [ 66.527640][ T5024] dump_stack+0x15/0x1a [ 66.531913][ T5024] should_fail_ex+0x223/0x230 [ 66.536720][ T5024] should_fail+0xb/0x10 [ 66.540991][ T5024] should_fail_usercopy+0x1a/0x20 [ 66.546158][ T5024] _copy_from_iter+0xd5/0xd00 [ 66.550888][ T5024] ? __build_skb_around+0x196/0x1f0 [ 66.556368][ T5024] ? __check_object_size+0x364/0x520 [ 66.561697][ T5024] netlink_sendmsg+0x460/0x6e0 [ 66.566507][ T5024] ? __pfx_netlink_sendmsg+0x10/0x10 [ 66.566980][ T5004] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 66.571843][ T5024] __sock_sendmsg+0x140/0x180 [ 66.582498][ T5004] EXT4-fs (loop0): 1 truncate cleaned up [ 66.585285][ T5024] ____sys_sendmsg+0x312/0x410 [ 66.595759][ T5024] __sys_sendmsg+0x19d/0x230 [ 66.600398][ T5024] __x64_sys_sendmsg+0x46/0x50 [ 66.605211][ T5024] x64_sys_call+0x2734/0x2dc0 [ 66.609923][ T5024] do_syscall_64+0xc9/0x1c0 [ 66.614464][ T5024] ? clear_bhb_loop+0x55/0xb0 [ 66.619265][ T5024] ? clear_bhb_loop+0x55/0xb0 [ 66.623981][ T5024] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.629981][ T5024] RIP: 0033:0x7f58849c5d29 [ 66.634506][ T5024] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 66.654192][ T5024] RSP: 002b:00007f5883037038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 66.662644][ T5024] RAX: ffffffffffffffda RBX: 00007f5884bb5fa0 RCX: 00007f58849c5d29 [ 66.670682][ T5024] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 000000000000000b [ 66.678705][ T5024] RBP: 00007f5883037090 R08: 0000000000000000 R09: 0000000000000000 [ 66.686701][ T5024] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 66.694722][ T5024] R13: 0000000000000000 R14: 00007f5884bb5fa0 R15: 00007fff6732c338 [ 66.702862][ T5024] [ 66.858878][ T5053] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 66.867704][ T5053] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 66.876581][ T5053] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 66.885436][ T5053] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 66.896094][ T5053] vxlan0: entered promiscuous mode [ 66.901258][ T5053] vxlan0: entered allmulticast mode [ 66.917237][ T5053] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 66.926322][ T5053] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 66.935212][ T5053] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 66.942972][ T5004] vhci_hcd: invalid port number 61 [ 66.944202][ T5053] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 67.059309][ T5069] loop5: detected capacity change from 0 to 2048 [ 67.066053][ T5069] EXT4-fs: Ignoring removed bh option [ 67.105613][ T4139] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 67.125643][ T4139] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 67.131792][ T5075] pim6reg1: entered promiscuous mode [ 67.137882][ T4139] EXT4-fs (loop5): This should not happen!! Data will be lost [ 67.137882][ T4139] [ 67.143162][ T5075] pim6reg1: entered allmulticast mode [ 67.152798][ T4139] EXT4-fs (loop5): Total free blocks count 0 [ 67.160034][ T5081] loop0: detected capacity change from 0 to 1024 [ 67.164427][ T4139] EXT4-fs (loop5): Free/Dirty block details [ 67.176933][ T4139] EXT4-fs (loop5): free_blocks=2415919104 [ 67.182717][ T4139] EXT4-fs (loop5): dirty_blocks=32 [ 67.187590][ T5083] loop3: detected capacity change from 0 to 512 [ 67.187892][ T4139] EXT4-fs (loop5): Block reservation details [ 67.200201][ T4139] EXT4-fs (loop5): i_reserved_data_blocks=2 [ 67.206583][ T4139] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 65793 with max blocks 1 with error 28 [ 67.219438][ T4139] EXT4-fs (loop5): This should not happen!! Data will be lost [ 67.219438][ T4139] [ 67.230678][ T5083] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.431: bg 0: block 248: padding at end of block bitmap is not set [ 67.245537][ T5083] EXT4-fs error (device loop3): ext4_acquire_dquot:6938: comm syz.3.431: Failed to acquire dquot type 1 [ 67.257361][ T5083] EXT4-fs (loop3): 1 truncate cleaned up [ 67.263417][ T5083] ext4 filesystem being mounted at /98/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.290515][ T5089] loop5: detected capacity change from 0 to 2048 [ 67.359048][ T28] EXT4-fs error (device loop3): ext4_release_dquot:6961: comm kworker/u8:1: Failed to release dquot type 1 [ 67.390229][ T5096] loop3: detected capacity change from 0 to 512 [ 67.398325][ T5096] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 67.411315][ T5096] EXT4-fs (loop3): 1 truncate cleaned up [ 67.429856][ T5099] loop5: detected capacity change from 0 to 256 [ 67.437282][ T5099] msdos: Unknown parameter '' [ 67.449334][ T5099] loop5: detected capacity change from 0 to 128 [ 67.540249][ T5102] netlink: 'syz.3.436': attribute type 4 has an invalid length. [ 67.635043][ T5111] loop4: detected capacity change from 0 to 1024 [ 67.647958][ T5111] EXT4-fs: Ignoring removed nomblk_io_submit option [ 67.685941][ T5111] EXT4-fs mount: 87 callbacks suppressed [ 67.685958][ T5111] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.791217][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.909510][ T5131] loop4: detected capacity change from 0 to 1024 [ 67.925207][ T5131] EXT4-fs: Ignoring removed nomblk_io_submit option [ 67.958541][ T5131] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.999229][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.040963][ T29] kauditd_printk_skb: 462 callbacks suppressed [ 68.041060][ T29] audit: type=1326 audit(1737519082.372:2134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5135 comm="syz.4.442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff28eb85d29 code=0x7ffc0000 [ 68.044782][ T5136] loop4: detected capacity change from 0 to 256 [ 68.048231][ T29] audit: type=1326 audit(1737519082.372:2135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5135 comm="syz.4.442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff28eb85d29 code=0x7ffc0000 [ 68.089298][ T5136] msdos: Unknown parameter '' [ 68.100642][ T29] audit: type=1326 audit(1737519082.372:2136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5135 comm="syz.4.442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff28eb85d29 code=0x7ffc0000 [ 68.128777][ T29] audit: type=1326 audit(1737519082.372:2137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5135 comm="syz.4.442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff28eb85d29 code=0x7ffc0000 [ 68.152342][ T29] audit: type=1326 audit(1737519082.372:2138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5135 comm="syz.4.442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff28eb85d29 code=0x7ffc0000 [ 68.175737][ T29] audit: type=1326 audit(1737519082.372:2139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5135 comm="syz.4.442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff28eb85d29 code=0x7ffc0000 [ 68.199318][ T29] audit: type=1326 audit(1737519082.372:2140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5135 comm="syz.4.442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff28eb85d29 code=0x7ffc0000 [ 68.203389][ T5141] loop0: detected capacity change from 0 to 2048 [ 68.222749][ T29] audit: type=1326 audit(1737519082.372:2141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5135 comm="syz.4.442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff28eb85d29 code=0x7ffc0000 [ 68.252508][ T29] audit: type=1326 audit(1737519082.372:2142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5135 comm="syz.4.442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff28eb85d29 code=0x7ffc0000 [ 68.260276][ T5141] EXT4-fs: Ignoring removed bh option [ 68.275925][ T29] audit: type=1326 audit(1737519082.372:2143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5135 comm="syz.4.442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff28eb85d29 code=0x7ffc0000 [ 68.293306][ T5142] loop4: detected capacity change from 0 to 128 [ 68.386108][ T5141] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.472157][ T4139] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 68.491717][ T4139] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 68.504045][ T4139] EXT4-fs (loop0): This should not happen!! Data will be lost [ 68.504045][ T4139] [ 68.513854][ T4139] EXT4-fs (loop0): Total free blocks count 0 [ 68.519974][ T4139] EXT4-fs (loop0): Free/Dirty block details [ 68.525951][ T4139] EXT4-fs (loop0): free_blocks=2415919104 [ 68.531707][ T4139] EXT4-fs (loop0): dirty_blocks=32 [ 68.536943][ T4139] EXT4-fs (loop0): Block reservation details [ 68.542945][ T4139] EXT4-fs (loop0): i_reserved_data_blocks=2 [ 68.560371][ T4136] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 65793 with max blocks 1 with error 28 [ 68.581650][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.756051][ T5188] loop4: detected capacity change from 0 to 256 [ 68.763229][ T5188] msdos: Unknown parameter '' [ 68.774248][ T5188] loop4: detected capacity change from 0 to 128 [ 68.874836][ T5205] loop0: detected capacity change from 0 to 2048 [ 68.881744][ T5205] EXT4-fs: Ignoring removed bh option [ 68.899087][ T5205] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.068194][ T5220] loop3: detected capacity change from 0 to 128 [ 69.102986][ T5222] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 69.238343][ T5229] loop1: detected capacity change from 0 to 1024 [ 69.328672][ T5226] loop4: detected capacity change from 0 to 8192 [ 69.347267][ T5226] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 69.374156][ T5229] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.410731][ T5234] netlink: 4 bytes leftover after parsing attributes in process `syz.3.471'. [ 69.419912][ T5234] netlink: 17 bytes leftover after parsing attributes in process `syz.3.471'. [ 69.451009][ T5234] wireguard0: entered promiscuous mode [ 69.456556][ T5234] wireguard0: entered allmulticast mode [ 69.488705][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.800383][ T5246] loop3: detected capacity change from 0 to 128 [ 69.835995][ T4136] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 69.870448][ T4136] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 69.882793][ T4136] EXT4-fs (loop0): This should not happen!! Data will be lost [ 69.882793][ T4136] [ 69.892567][ T4136] EXT4-fs (loop0): Total free blocks count 0 [ 69.898611][ T4136] EXT4-fs (loop0): Free/Dirty block details [ 69.904618][ T4136] EXT4-fs (loop0): free_blocks=2415919104 [ 69.910359][ T4136] EXT4-fs (loop0): dirty_blocks=32 [ 69.915479][ T4136] EXT4-fs (loop0): Block reservation details [ 69.921499][ T4136] EXT4-fs (loop0): i_reserved_data_blocks=2 [ 69.932064][ T4136] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 65793 with max blocks 1 with error 28 [ 69.959541][ T5254] loop5: detected capacity change from 0 to 128 [ 69.999860][ T5262] netlink: 16 bytes leftover after parsing attributes in process `syz.0.478'. [ 70.038066][ T5264] loop4: detected capacity change from 0 to 512 [ 70.045991][ T5264] EXT4-fs: Ignoring removed orlov option [ 70.052296][ T5264] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 70.076713][ T5264] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 70.079066][ T5259] loop3: detected capacity change from 0 to 8192 [ 70.086407][ T5269] loop0: detected capacity change from 0 to 1024 [ 70.097778][ T5264] System zones: 1-12 [ 70.108581][ T5264] EXT4-fs (loop4): 1 truncate cleaned up [ 70.114834][ T5264] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.135914][ T5259] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 70.152614][ T5269] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.181744][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.211689][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.248211][ T5278] loop0: detected capacity change from 0 to 512 [ 70.267793][ T5278] EXT4-fs (loop0): orphan cleanup on readonly fs [ 70.274158][ T5278] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13 [ 70.301294][ T5278] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 70.332338][ T5278] EXT4-fs error (device loop0): ext4_clear_blocks:876: inode #13: comm syz.0.484: attempt to clear invalid blocks 2 len 1 [ 70.349776][ T5282] loop4: detected capacity change from 0 to 512 [ 70.377843][ T5278] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.484: invalid indirect mapped block 1819239214 (level 0) [ 70.393040][ T5278] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.484: invalid indirect mapped block 1819239214 (level 1) [ 70.396287][ T5282] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 70.407461][ T5278] EXT4-fs (loop0): 1 truncate cleaned up [ 70.420705][ T5282] EXT4-fs (loop4): orphan cleanup on readonly fs [ 70.424161][ T5278] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 70.440506][ T5282] EXT4-fs warning (device loop4): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 70.455670][ T5282] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 70.458447][ T5278] EXT4-fs error (device loop0): ext4_lookup:1810: inode #2: comm syz.0.484: 'file1' linked to parent dir [ 70.474474][ T5282] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.485: bg 0: block 40: padding at end of block bitmap is not set [ 70.490030][ T5286] loop1: detected capacity change from 0 to 1024 [ 70.491342][ T5278] FAULT_INJECTION: forcing a failure. [ 70.491342][ T5278] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 70.496527][ T5282] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 70.509552][ T5278] CPU: 0 UID: 0 PID: 5278 Comm: syz.0.484 Not tainted 6.13.0-syzkaller-01005-gb9d8a295ed6b #0 [ 70.519409][ T5282] EXT4-fs (loop4): 1 truncate cleaned up [ 70.528413][ T5278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 70.528431][ T5278] Call Trace: [ 70.528440][ T5278] [ 70.535287][ T5282] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 70.544132][ T5278] dump_stack_lvl+0xf2/0x150 [ 70.567521][ T5278] dump_stack+0x15/0x1a [ 70.571770][ T5278] should_fail_ex+0x223/0x230 [ 70.576482][ T5278] should_fail+0xb/0x10 [ 70.580759][ T5278] should_fail_usercopy+0x1a/0x20 [ 70.585830][ T5278] _copy_from_iter+0xd5/0xd00 [ 70.590645][ T5278] ? alloc_pages_mpol_noprof+0x20c/0x260 [ 70.596389][ T5278] copy_page_from_iter+0x14f/0x280 [ 70.601540][ T5278] tun_get_user+0x68b/0x25c0 [ 70.606223][ T5278] ? _parse_integer+0x27/0x30 [ 70.611013][ T5278] ? ref_tracker_alloc+0x1f5/0x2f0 [ 70.616325][ T5278] tun_chr_write_iter+0x188/0x240 [ 70.621479][ T5278] vfs_write+0x77f/0x920 [ 70.625752][ T5278] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 70.631403][ T5278] ksys_write+0xe8/0x1b0 [ 70.635679][ T5278] __x64_sys_write+0x42/0x50 [ 70.640304][ T5278] x64_sys_call+0x287e/0x2dc0 [ 70.645010][ T5278] do_syscall_64+0xc9/0x1c0 [ 70.649707][ T5278] ? clear_bhb_loop+0x55/0xb0 [ 70.654508][ T5278] ? clear_bhb_loop+0x55/0xb0 [ 70.659235][ T5278] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.665236][ T5278] RIP: 0033:0x7fde9f4047df [ 70.669803][ T5278] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 70.689527][ T5278] RSP: 002b:00007fde9da77000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 70.697977][ T5278] RAX: ffffffffffffffda RBX: 00007fde9f5f5fa0 RCX: 00007fde9f4047df [ 70.706018][ T5278] RDX: 000000000000006e RSI: 0000000020000080 RDI: 00000000000000c8 [ 70.708285][ T5286] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.714063][ T5278] RBP: 00007fde9da77090 R08: 0000000000000000 R09: 0000000000000000 [ 70.714081][ T5278] R10: 000000000000006e R11: 0000000000000293 R12: 0000000000000001 [ 70.714095][ T5278] R13: 0000000000000000 R14: 00007fde9f5f5fa0 R15: 00007fff3ecfb6e8 [ 70.750128][ T5278] [ 70.774693][ T5286] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 70.796979][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.797564][ T5282] vhci_hcd: invalid port number 61 [ 70.854887][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.897457][ T5301] loop0: detected capacity change from 0 to 1024 [ 70.904453][ T5301] EXT4-fs: Ignoring removed nobh option [ 70.912201][ T5301] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 70.921255][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.933152][ T5301] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.936073][ T5308] loop3: detected capacity change from 0 to 512 [ 70.982445][ T5312] loop5: detected capacity change from 0 to 128 [ 70.990170][ T5308] EXT4-fs (loop3): orphan cleanup on readonly fs [ 70.996621][ T5308] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 71.005408][ T5308] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 71.031883][ T5308] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #13: comm syz.3.495: attempt to clear invalid blocks 2 len 1 [ 71.046568][ T5308] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.495: invalid indirect mapped block 1819239214 (level 0) [ 71.061307][ T5308] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.495: invalid indirect mapped block 1819239214 (level 1) [ 71.079972][ T5308] EXT4-fs (loop3): 1 truncate cleaned up [ 71.088477][ T5308] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 71.171065][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.213039][ T5326] netlink: 8 bytes leftover after parsing attributes in process `syz.3.500'. [ 71.224921][ T5326] loop3: detected capacity change from 0 to 512 [ 71.236279][ T5326] loop3: detected capacity change from 0 to 512 [ 71.242855][ T5326] EXT4-fs: quotafile must be on filesystem root [ 71.310377][ T5330] loop3: detected capacity change from 0 to 256 [ 71.317128][ T5330] vfat: Unknown parameter '0xffffffffffffffff0xffffffffffffffff' [ 71.329799][ T5330] loop3: detected capacity change from 0 to 512 [ 71.337854][ T5330] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 71.346469][ T5330] EXT4-fs (loop3): orphan cleanup on readonly fs [ 71.353266][ T5330] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.502: invalid indirect mapped block 256 (level 2) [ 71.367595][ T5330] EXT4-fs (loop3): 2 truncates cleaned up [ 71.373899][ T5330] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 71.397355][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.442230][ T5301] ================================================================== [ 71.450360][ T5301] BUG: KCSAN: data-race in filemap_splice_read / filemap_splice_read [ 71.458464][ T5301] [ 71.460791][ T5301] write to 0xffff888118545d70 of 8 bytes by task 5319 on cpu 1: [ 71.468438][ T5301] filemap_splice_read+0x6c4/0x910 [ 71.473592][ T5301] ext4_file_splice_read+0x8f/0xb0 [ 71.478738][ T5301] splice_direct_to_actor+0x269/0x670 [ 71.484139][ T5301] do_splice_direct+0xd7/0x150 [ 71.488934][ T5301] do_sendfile+0x398/0x660 [ 71.493366][ T5301] __x64_sys_sendfile64+0x110/0x150 [ 71.498598][ T5301] x64_sys_call+0xfbd/0x2dc0 [ 71.503207][ T5301] do_syscall_64+0xc9/0x1c0 [ 71.507738][ T5301] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.513670][ T5301] [ 71.516055][ T5301] write to 0xffff888118545d70 of 8 bytes by task 5301 on cpu 0: [ 71.523701][ T5301] filemap_splice_read+0x6c4/0x910 [ 71.528852][ T5301] ext4_file_splice_read+0x8f/0xb0 [ 71.534135][ T5301] splice_direct_to_actor+0x269/0x670 [ 71.539537][ T5301] do_splice_direct+0xd7/0x150 [ 71.544346][ T5301] do_sendfile+0x398/0x660 [ 71.548787][ T5301] __x64_sys_sendfile64+0x110/0x150 [ 71.554020][ T5301] x64_sys_call+0xfbd/0x2dc0 [ 71.558654][ T5301] do_syscall_64+0xc9/0x1c0 [ 71.563176][ T5301] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.569102][ T5301] [ 71.571539][ T5301] value changed: 0x0000000000000678 -> 0x0000000000000679 [ 71.578662][ T5301] [ 71.580998][ T5301] Reported by Kernel Concurrency Sanitizer on: [ 71.587181][ T5301] CPU: 0 UID: 0 PID: 5301 Comm: syz.0.489 Not tainted 6.13.0-syzkaller-01005-gb9d8a295ed6b #0 [ 71.597449][ T5301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 71.607536][ T5301] ================================================================== [ 71.786296][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.