last executing test programs: 4.910882692s ago: executing program 0 (id=5028): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0x7, 0x4, 0x100, 0x1, 0x28}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a00000000000000001812", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x40, &(0x7f00000001c0)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@grpquota}, {@nobh}, {@abort}, {@lazytime}, {@usrquota}, {@resgid}, {@bh}]}, 0x1, 0x58d, &(0x7f00000005c0)="$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") lchown(&(0x7f0000000080)='./file1\x00', 0xee01, 0xffffffffffffffff) 4.771193823s ago: executing program 0 (id=5032): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001280)=@raw={'raw\x00', 0x9, 0x3, 0x318, 0xf0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x390, 0xffffffff, 0xffffffff, 0x390, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @local, [0xffffffff, 0x0, 0xff, 0xff], [0xffffff00, 0xff, 0xffffff00, 0xffffff00], 'hsr0\x00', 'veth0_to_bridge\x00', {}, {}, 0x3b, 0x6, 0x2, 0x4a}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x2, 0x9, 0x200, 'syz0\x00', {0x7}}}}, {{@uncond, 0x0, 0xf0, 0x158, 0x0, {}, [@common=@dst={{0x48}, {0x0, 0x3, 0x1, [0x7, 0x7, 0x0, 0x7, 0x3, 0x8000, 0x20, 0x9, 0x80, 0x1, 0x0, 0x9, 0x7, 0x3, 0x1999, 0x6a8], 0xf}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x2, 0xfffa, 0xd, 0xffffffff, 'syz1\x00', 'syz1\x00', {0x3}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x378) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f0000000840)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xffd}}, {@nolazytime}, {@jqfmt_vfsold}, {@errors_remount}, {@minixdf}, {@errors_remount}]}, 0x3, 0x43a, &(0x7f0000000340)="$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") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb6000) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0xffffffff, 0xff}, 0x100650, 0x0, 0x800000, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105142, 0x40) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file2\x00', &(0x7f0000000ec0), 0x400) socketpair$unix(0x1, 0x2, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x32600) 4.143794574s ago: executing program 0 (id=5037): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b707000008000000850000006900000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8, 0x0, @perf_config_ext={0x1, 0xa}, 0x1184c, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$MAP_CREATE(0x0, 0x0, 0x48) brk(0x8000000000000001) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r4, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0100000000000000000001000000050004008e07af5405000a000000"], 0x24}}, 0x0) sendmsg$FOU_CMD_ADD(r5, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="58000000b21b637e79c92427335dce82488bb4b95fe32ef834345256b133596b0224cf017ade32149434811c698915a87236e3a91dbf3c0696dba88a51562005d999165b271a084ea0316d7c74318cd7cbb6c9edeaa190f7550fb8320d601e0845c224a0d180b67a7310fa74adf209114458f157a1f16cac54ec904ff5abf0038ddea40550a3f0cdb42f4c05128d0a3223514154d5e58e2104899e29996afbeed87b1477ae3596fb634bae97ff0592f830cd251765ed70ea91ea2a3e97d5fadf9195f2", @ANYRES16=0x0, @ANYBLOB="00022bbd7000fddbdf2501000000050004000100000005000400000000000500020002000000060001004e21000006000a004e230000050002000200000014000900fc0200"/82], 0x58}, 0x1, 0x0, 0x0, 0x8010}, 0x8001) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1}}, 0x80001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000002c0), 0x3) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f000000e0c0), 0x10010) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x303}, "d2487b822050386f", "4946115b8e1acab11dda0ee7d5239a0ff818a4b776b238dccb81bfd9652cb934", "f728d519", "0cb42238c52f3b48"}, 0x38) sendfile(r5, r6, &(0x7f0000000100)=0x10, 0x10001) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) set_mempolicy_home_node(&(0x7f0000349000/0xa000)=nil, 0xa000, 0x0, 0x0) r7 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r7) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r3, 0xc0bc5310, &(0x7f00000006c0)) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) 3.69517167s ago: executing program 0 (id=5040): mount$9p_tcp(0x0, &(0x7f0000000680)='.\x00', &(0x7f00000006c0), 0x8010, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=tcp']) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) bind$unix(r0, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x18) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f0000000000)=ANY=[@ANYRESHEX=r1]) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380)='rpc_pipefs\x00', 0x0, 0x0) chroot(&(0x7f0000000040)='./file0\x00') umount2(&(0x7f00000000c0)='./file0\x00', 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000280)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) listen(r3, 0xfffffff8) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x45, 0xc3, 0x3f, 0x8, 0x5ac, 0x247, 0xb023, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x10, 0x2}}]}}]}}, 0x0) r4 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r4, &(0x7f0000000700)=ANY=[@ANYBLOB="3800000078009106000000000000004a07"], 0xfe33) r5 = socket$inet_tcp(0x2, 0x1, 0x0) write(0xffffffffffffffff, 0x0, 0x0) connect$inet(r5, &(0x7f0000000040)={0x2, 0x2, @local}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{}, &(0x7f0000000100), &(0x7f0000000180)='%ps \x00'}, 0x20) close_range(r3, 0xffffffffffffffff, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x7d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r7}, 0x10) syz_open_dev$ptys(0xc, 0x3, 0x0) 2.750399697s ago: executing program 1 (id=5062): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0x7, 0x4, 0x100, 0x1, 0x28}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a0000000000000000181200", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x40, &(0x7f00000001c0)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@grpquota}, {@nobh}, {@abort}, {@lazytime}, {@usrquota}, {@resgid}, {@bh}]}, 0x1, 0x58d, &(0x7f00000005c0)="$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") lchown(&(0x7f0000000080)='./file1\x00', 0xee01, 0xffffffffffffffff) 2.654446024s ago: executing program 1 (id=5065): r0 = syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4000, &(0x7f0000000c00)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@mblk_io_submit}, {@resuid}, {@norecovery}]}, 0x8, 0x445, &(0x7f0000001dc0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r2, &(0x7f00000009c0)="3bf58d7d45d32c", 0x7) sendfile(r2, r1, 0x0, 0x3ffff) sendfile(r2, r1, 0x0, 0x7fffeffd) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x18) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xf, 0xb, &(0x7f00000005c0)=ANY=[@ANYRESDEC=r4], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x94) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000ac0)=ANY=[@ANYBLOB="060000000000000006000000000000000400000000000000", @ANYRES32=r5, @ANYBLOB="000000000100008000"/28, @ANYRES32, @ANYBLOB='\x00\x00\x00\x001\a\x00'/28, @ANYRES32, @ANYBLOB="00000000770000000000000000000000000000000000000000000020eb245fc955f6c15daecbe716b5d3af01f00c6366c487323d86a6d9e708ed483688b0dcb7f121d60aac9f6827afb160442f0ab8bc80d7a783be3d30d065f07b0355ae7d7b05fd", @ANYRES32=r6, @ANYBLOB='\x00'/28]) waitid$P_PIDFD(0x3, r1, &(0x7f0000000840), 0x1, &(0x7f0000000500)) 2.254526507s ago: executing program 2 (id=5067): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) capget(&(0x7f00000008c0)={0x20080522}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xd, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000440), 0x10) listen(r4, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) setsockopt$sock_timeval(r5, 0x1, 0x43, &(0x7f0000000040)={0x0, 0x2710}, 0x10) writev(r3, &(0x7f00000001c0), 0x59) ioctl$USBDEVFS_CONTROL(r3, 0xc0105500, &(0x7f0000000080)={0x0, 0x9, 0x3, 0x0, 0x0, 0x8, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[], 0x0, 0x7, 0x29, 0x0, 0x0, 0xb}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000180)={0xffffff, 0x0, 0x0, 0x7ff}, 0x10) write(r6, &(0x7f0000000000)="240000001a005f0214f9f407000904ff81000000fe000000200000000800040001000000", 0x24) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x4000) r7 = memfd_secret(0x80000) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYRES16, @ANYRESOCT=0x0], 0x48) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) fchownat(r7, &(0x7f0000000040)='\x00', 0x0, 0x0, 0x1000) move_mount(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x3) 2.243471008s ago: executing program 2 (id=5069): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000001500)=0x2, 0x4) syz_mount_image$ext4(&(0x7f00000007c0)='ext4\x00', &(0x7f00000006c0)='./file1\x00', 0x40, &(0x7f00000000c0)={[{@user_xattr}, {@nodioread_nolock}]}, 0x1, 0x576, &(0x7f0000000140)="$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") pwrite64(0xffffffffffffffff, &(0x7f00000005c0)='\"', 0x1, 0x4fed0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xe3aa6ea) renameat2(0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file3\x00', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r1, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) preadv(0xffffffffffffffff, 0x0, 0x0, 0x4309, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB], 0x50) socket(0xa, 0x3, 0x3a) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) umount2(&(0x7f0000000580)='./file0\x00', 0x3) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x800) lstat(&(0x7f0000001d40)='./file0\x00', &(0x7f0000001d80)) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='kmem_cache_free\x00', r2, 0x0, 0x7}, 0x18) alarm(0x7f) 2.126905797s ago: executing program 2 (id=5071): r0 = socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x2, 0x4, 0x7ffc1ffb}]}) add_key$fscrypt_v1(&(0x7f0000001000), &(0x7f0000001040)={'fscrypt:', @auto=[0x3a, 0x66, 0x63, 0x35, 0x66, 0x39, 0x62, 0x36, 0x31, 0x31, 0x61, 0x30, 0x62, 0x39, 0x32, 0x32]}, &(0x7f0000001080)={0x0, "ddbccf094c5457df7a3f7457a4e81d59f6bffca5bf7c026c91255969954a3cec19ae878c0ca3fce72e29df4e4dbd001eb127ffbed6cc47890c19c3edc50daa56", 0x26}, 0x48, 0xfffffffffffffffe) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000980)='./file1\x00', 0x280809a, &(0x7f0000000f40)=ANY=[], 0xd, 0x2c0, &(0x7f0000001a80)="$eJzs3U+LG2UYAPBnstnsrD1kES+K4IAePC1dr142ygrFnJQI6kGDbUGSUOhCoCuY7qmfwO/iR/DixW9Q8Cp4aw8rIzOTyZ8yqVGzivb3Oz08b573fWfe3SSXPPPl65PR7XtJXD55HGmaROs0TuNpEkfRitrDaAcA8P/xNM/j17wMk7yyZWW7da0bAwCuTfX5/6c++AGA/7iPP/3sw16/f/ZRlqXxavfRdJBExOTRdFCN9+7G1zGOO3EzunEVkS9U8Qe3+mfRzgpH8dZkNh0UlZMvfpzP3/sloqw/2evGUXP9SVZZqZ9NB/vxUmTRu7tfb7UbrzTXv9NQH4NOvP3myv6Poxs/fRX3Yhy3o6hd1n97kmXv5989+ebzYpmiPmnF4KB8XSn3BQkAAAAAAAAAAAAAAAAAAAAAgN06zrKkat9T9u8pUvP+O3tX5fhxVjta789T1Sf1RFV/oLzuljNL5/lb/bObWZblSZSDy/p2vNb2YAEAAAAAAAAAAAAAAAAAAAAonD94fGM4Ht+5f/7gYvS3g7obQP2z/r86z+lK5o24GA33Nk948OxQPIxonnm120Cx1+duI9rt2NFtaQ4uF5nDYj87X+IgFplPogqqgznc7XW9/F51Ry9Gw6w+grnRMPmjtdL64L5fHepsOMHtg7z8k7jK1880XWx1vaqzo7vRubHMHC6HfsvzfLt53v25OqN5JilbbGy3+v48aLzAIkiLs0gX//jF0A+bJ9z4lrG3g7cdAAAAAAAAAAAAAAAAAACgwfJHvw2Dl88tbV3bpgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgH7Z8/n8dpBGxnimC1mpmNi9+5jVNQSfun//LlwgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAL4PcAAAD//28ZVAA=") openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x80881, 0x82) syz_emit_ethernet(0x0, 0x0, 0x0) write(r4, &(0x7f0000004200)='t', 0x1) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, 0x0, 0x0) connect$inet(r5, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) 1.965742801s ago: executing program 2 (id=5073): syz_read_part_table(0x104a, &(0x7f0000001080)="$eJzsz7EJAjEAheEXPc8DLc7ddB4zjwPYOooT2DmAmKCVrYjwfU0C7yeQ8GPXpCSL5Lb7uA/JOsk9m1atpoyv6X3JlCwv29T0OP0sNTk+szLPGXJOzZh9aXl7+XD69u8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4B88AgAA//8oswgx") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095dc79733baa58985400000000000000d5b30500c2d40e3ebf55605548f4b1f7479d5e4f25e6d4b3c3d9431f6076ea8c272db023bff289adcd0c59c700b062cffa9979cdfabbe1eb"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r2}, &(0x7f0000000400), &(0x7f00000004c0)=r3}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r3}, 0x10) getpriority(0x0, 0x0) msync(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x6) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r4 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r5}, &(0x7f0000000180), &(0x7f00000001c0)=r4}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$netlink(0x10, 0x3, 0x0) syz_mount_image$iso9660(&(0x7f0000002900), &(0x7f0000000000)='./file0\x00', 0x2, &(0x7f00000002c0)=ANY=[], 0x1, 0x5b1, &(0x7f0000001000)="$eJzs3MFv29YZAPDHxK4NBwsGFGvSNEDZtIfsEFeSFwdGBywaTdtsJVEg5cI5DcXiZMHsblg2YMmly6VDgQ077bz1utOO+6d62T/ggRLlybIzuWkbZcDvB8TvUfzI9z2C4QcRIgMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEKJks9FoRqGT9Xb34udLNou8e7y0EKbXj/f3rxPNCYsTf0MUQlT9C8vL4eroo6uv/zf2B9WfG+HKaOlKWK6a5fD00hvf/+D1hQvVhotRdCqLl+3xk6e//OTgYP83X2Obo6Ojz6rZfIdpvTTbaS8r86zb3k7jrMzjjfX1xvs7W2W8lXXS8l45SLtxUqTtQV7EN5O7IYSNtThdvZfv9rY32500vpn8MG5ubNy51Wo01uMPV/tpuyjz3vsfrpbJTtbpZL3tYUy1+lbr7XCnOhE/ygbxIG134/jBo4P9tVlJVkHN8wS1ZgW1Gq1Ws9lqNddvb9y+02gs12fr8QcLjSlhepOF+Z+0vHSv1SfKcGF8jXvtW7uIwws6Sv4y7xQAAACA71g0vMceDe/LXx32trJO2jgRcxTNLT0AAADgWzD8an+lvgEQwtUQnf7+DwAAAPx/+/u4c+YzdiGKQtlfisaPqvT33osO21WvfXhx9NHF6T0Otq5Fl+udDJv1hXopSa9Hb46C3hxHf1U3D57/rN8/Q5VHVBSL0bNvlkD4U7g2irl2f9TeH68ZzXZlK+ukq0ne+aAZ2u3LFwbp3uB3nz76fQhFcXTxi173chQePDrYX/35rw7uD3N5Vu3l2WH9C4lTP5Q4mctSmMjlt8fPPdYzvnvyyC8Ob8RUs/6i110ZjduYnP+F0eYXvsb8Pw9vjWLeWhm1Kyfnv1yN2Vw9Y/aTWTT7e+8t1YOdc+ZTWVwfxVy/OTyx3r1Zr1mcyKI1K4vW5PF/oWNxnMW7J7KYPBZrs7JY+4ZZAMzLg+kqdKr+n6q7L3CV+x/VvRqlKuEzq/svZo7yeXhnFPPOtYW6Il0MYeqK3ph1RW+cs66HcHYW/wg3/vbXEHbDjXHw82psNe6fT1TV6PDLaoMvT4/7h1FT/vvhzqWqs3T46/DG4ydPbz06/OTh/sP9T1uttfXGjxqN262wOJxG3ag9AJwhLb6KVgZ/jIoi6/+subHRbA920rjIk4/iItvcTuOsN0iLZKfd207jfpEP8iTvVJ2Ps820jMvdfj+vKklexP28zPaGb36J61e/lGm33RtkSdnvpO0yjZO8N2gng3gzK5O4v/vTTlbupEW8lRdx2U+TbCtL2oMs78Vlvlsk6Wocl2k6EZhtpkefhZBV3V7cL7Juu7gXf5x3drtpvJlW1bI/yKNQ7XA8VtbbyovucLer8z7YAPCKeBzqN9gdv8ru8U/Gq56cWnVmJyzPiJnzFAGAKdNVemneCQEAAAAAAAAAAAAAAKdMPq734/qVPud77O+V7dy9dNaqt+ef2GQnhLDwCqShc87O8quRxmL93/ZF9xOFEGYHf6+KmedVCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADO9p8AAAD//0n5kWY=") seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x0, &(0x7f0000000100)}) sendmsg$netlink(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) r7 = openat(0xffffffffffffff9c, 0x0, 0x105042, 0x0) preadv2(r7, 0x0, 0x0, 0x0, 0xffffffde, 0x9) r8 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r8, 0x0, 0xc8, 0x0, 0x0) setsockopt$MRT_ADD_VIF(r8, 0x0, 0xca, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) stat(0x0, 0x0) 1.703022872s ago: executing program 1 (id=5078): flock(0xffffffffffffffff, 0x1) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socket$unix(0x1, 0x2, 0x0) socket$unix(0x1, 0x2, 0x0) setxattr$security_capability(&(0x7f0000000100)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000200), &(0x7f00000003c0)=@v2={0x2000000, [{0xf, 0x1ff}, {0x5, 0x9}]}, 0x14, 0x2) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket$vsock_stream(0x28, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x4, 0x7ffc1ffb}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) getdents64(0xffffffffffffffff, &(0x7f0000000f80)=""/4096, 0x1000) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000010000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB="0a000045090f2a00080000000200000000001000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x379, &(0x7f0000002300)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105042, 0x40) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x100000b, 0x2013, r4, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0x32600) 1.463194491s ago: executing program 2 (id=5079): r0 = syz_open_dev$loop(&(0x7f00000000c0), 0x763, 0x3e383) ioctl$LOOP_SET_STATUS(r0, 0x4c02, 0x0) capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000280)) r1 = syz_io_uring_setup(0x749e, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x0, 0x2e7}, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0x1005c20, &(0x7f0000000240)={0x0, 0xa454, 0x4000, 0x2, 0x1eb}, &(0x7f0000000100), &(0x7f0000000000)) r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r2) syz_usb_connect(0x4, 0x24, &(0x7f00000000c0)=ANY=[], 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r4}, 0x10) ioctl$EVIOCRMFF(r2, 0x40095505, 0x0) io_uring_enter(r1, 0x2d3e, 0x0, 0x0, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x8401) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f00000002c0)={0x9, &(0x7f00000004c0)=[{0x7, 0x3, 0x8, 0xefeb}, {0x1, 0xa, 0x8, 0x8}, {0x80, 0x7, 0x1, 0x20005}, {0x5, 0x0, 0x9, 0x1}, {0x400, 0x7, 0x9, 0x8001}, {0x5d4, 0x3e, 0x1, 0x725}, {0x5, 0x1, 0x3, 0xfff}, {0xb9, 0x80, 0x8, 0x1}, {0x0, 0x9, 0x6d, 0x1}]}, 0x10) close(0xffffffffffffffff) r6 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x4, 0x0, 0x0, 0x41100, 0x21, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffd0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0, r7}, 0x18) r8 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r8, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) connect$vsock_stream(r8, &(0x7f0000000600)={0x28, 0x0, 0x0, @local}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x70, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x7, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100cb3a}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='kmem_cache_free\x00', r9, 0x0, 0x2}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r10 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KDSETKEYCODE(r10, 0x4b4d, &(0x7f0000000000)={0x7fff, 0xd}) 1.441593443s ago: executing program 3 (id=5080): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) capget(&(0x7f00000008c0)={0x20080522}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xd, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000440), 0x10) listen(r4, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) setsockopt$sock_timeval(r5, 0x1, 0x43, &(0x7f0000000040)={0x0, 0x2710}, 0x10) writev(r3, &(0x7f00000001c0), 0x59) ioctl$USBDEVFS_CONTROL(r3, 0xc0105500, &(0x7f0000000080)={0x0, 0x9, 0x3, 0x0, 0x0, 0x8, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[], 0x0, 0x7, 0x29, 0x0, 0x0, 0xb}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000180)={0xffffff, 0x0, 0x0, 0x7ff}, 0x10) write(r6, &(0x7f0000000000)="240000001a005f0214f9f407000904ff81000000fe000000200000000800040001000000", 0x24) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x4000) r7 = memfd_secret(0x80000) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYRES16, @ANYRESOCT=0x0], 0x48) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) fchownat(r7, &(0x7f0000000040)='\x00', 0x0, 0x0, 0x1000) move_mount(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x3) 1.360051249s ago: executing program 3 (id=5081): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa5400008500000082"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) timer_settime(0x0, 0x0, &(0x7f0000001180)={{0x77359400}}, &(0x7f00000011c0)) 1.332600812s ago: executing program 3 (id=5082): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x28}}, 0x802) 1.311492594s ago: executing program 3 (id=5083): r0 = socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x2, 0x4, 0x7ffc1ffb}]}) add_key$fscrypt_v1(&(0x7f0000001000), &(0x7f0000001040)={'fscrypt:', @auto=[0x3a, 0x66, 0x63, 0x35, 0x66, 0x39, 0x62, 0x36, 0x31, 0x31, 0x61, 0x30, 0x62, 0x39, 0x32, 0x32]}, &(0x7f0000001080)={0x0, "ddbccf094c5457df7a3f7457a4e81d59f6bffca5bf7c026c91255969954a3cec19ae878c0ca3fce72e29df4e4dbd001eb127ffbed6cc47890c19c3edc50daa56", 0x26}, 0x48, 0xfffffffffffffffe) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000980)='./file1\x00', 0x280809a, &(0x7f0000000f40)=ANY=[], 0xd, 0x2c0, &(0x7f0000001a80)="$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") openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x80881, 0x82) syz_emit_ethernet(0x0, 0x0, 0x0) write(r4, &(0x7f0000004200)='t', 0x1) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, 0x0, 0x0) connect$inet(r5, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) 1.248363359s ago: executing program 3 (id=5084): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001", @ANYBLOB], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f0000000200)={[{@jqfmt_vfsold}, {@orlov}, {@debug}, {@noload}, {@nombcache}, {@noblock_validity}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000}}]}, 0xfa, 0x47c, &(0x7f0000000a80)="$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") perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8, 0x0, @perf_config_ext={0x1, 0xa}, 0x1184c, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r1 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/power/pm_test', 0x0, 0x84) close_range(r1, 0xffffffffffffffff, 0x2) fsetxattr$trusted_overlay_origin(r1, &(0x7f0000000140), 0x0, 0x0, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="54000000090601080000000000000000050000000900020073797a310000000005000100070000002c000780060004404e21000005000700e30000000c00018008000140850101010c000280"], 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000021100000000000003b810000850000006d000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r4, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="240000000408010100000000000000000000000a0600024000f500f6830003001100000063533b913bd626a2a57c8432cca48d08b03040b69eac63019078687b8980ae93bae5393f43406434683e727486b70b8e24e129dda52026b384d68243bf820604c35cf599c1b33ade06fc677650fcff55ac9c6d968127a95f44980ab081258abd56c8299249231f999d6ecc855679b7774b63d4e19826d4e221a36c3122927980c4413d02ac10a95f0cfdd981a65c25baaa2317240081c8fa9517c06e758ca64c"], 0x24}}, 0x10) read(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x40, 0x0, 0x0, 0x0}, 0x50) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000300)='./file0\x00', 0x2204080, &(0x7f0000000040)=ANY=[@ANYBLOB="6e6f646f74732c73686f77657865632c6e6f646f74732c6e66733d6e6f7374616c655f726f2c0030a66d3a1127e03fc4ec7721f7c77d616ce2d9a9b0ef6cf77d486df06aac6920f6f13474bc77836cb851c86e0cc5dc8611db21e0dafe4caa2c5b34"], 0x1, 0x28d, &(0x7f0000000640)="$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") openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r1, &(0x7f00000004c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x40, 0x140d, 0x400, 0x70bd2b, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_MRN={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x5}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x40}}, 0x10) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x8000, 0x0, r1, 0x7f, '\x00', 0x0, r1, 0x0, 0x4, 0x4}, 0x50) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000005c0)={'team0\x00', 0x0}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000c80)={{r1, 0xffffffffffffffff}, &(0x7f0000000b80), &(0x7f0000000bc0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x20, 0x44, &(0x7f0000000f00)=ANY=[@ANYBLOB="1800000001800000000000001000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000183a00000300000000000000000000001842000005000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7030000009ccef3eb0432e412000c1898190c000000b70508000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000b7080000000000007b8af8ff00000000b7080000000800007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a5000000b7080000000000007b8af8ff00000000b7080000ff7f00007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a500000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000018270000", @ANYRES32=r1, @ANYBLOB="000000000400000018280000", @ANYRES32=r1, @ANYBLOB="0000000001010000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000580)='GPL\x00', 0x21cdcd2f, 0x0, 0x0, 0x41000, 0x1, '\x00', r6, @netfilter, r1, 0x8, &(0x7f0000000600)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000b40)={0x4, 0xb, 0x5, 0x3}, 0x10, 0x0, r3, 0x6, &(0x7f0000000cc0)=[r1, r1, r7, r1, r1, 0x1, r1], &(0x7f0000000d00)=[{0x0, 0x3, 0x8, 0x9}, {0x5, 0x5, 0xf, 0x8}, {0x4, 0x3, 0xc, 0xa}, {0x0, 0x5, 0x6, 0x1}, {0x0, 0x2, 0xe, 0x2}, {0x4, 0x3, 0x7}], 0x10, 0x9}, 0x94) epoll_create1(0x0) ppoll(&(0x7f0000000200), 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r8}, 0x10) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000040)={0x0, 0xffffffffffffff8a, &(0x7f0000000000)=[{&(0x7f0000000140)="d800000010008104687da3aa7143a0b8c81d080b25000000e8fe55a11800150006001425000000120800030043000040a8002b000a00014006046109d67f6f94007134cf6ee0a000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88a2ddddbbb219c6c09136dd481c4a918d1bcf0f938baa5d060a517898516277ce06bbace80177ccbec4c2ee5a7cef4260027836b0d17a58af5d6d93424841f468430dfe1d9d322fe7c0aaa16b8ddc64193071e9f8775730d16a4683f785025ccc89e00360db70100000040fad95667e006dcabced7ad654fac9609f4fb", 0xd8}], 0x1}, 0x4004) 916.613435ms ago: executing program 4 (id=5085): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x207, &(0x7f0000000000), 0x1, 0x46f, &(0x7f0000001200)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c30000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x7fff}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000200), &(0x7f0000000240)=r1}, 0x20) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000a80)='./file1\x00', 0x8, &(0x7f00000008c0)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@usrquota}, {@sb={'sb', 0x3d, 0x64}}, {@orlov}, {@quota}, {@data_err_abort}, {@nomblk_io_submit}]}, 0x66, 0x50a, &(0x7f0000000200)="$eJzs3VFrHFsdAPD/bHZr06Y3ueqDXvB6tZW0aHeTxrbBh1pB9Kmg1vcak00I2WRDdtM2oWiKH0AQUcEnffFF8AMIUvDFRxEK+qyoKKKtPvigncvuTtI03U227TabZn8/mMw5Z2b2f86GmZ0zc5gJYGC9FxHXI+JJmqYXImI0K89lU2y1psZ6jx/dm21MSaTpzX8mkWRl25+VZPPT2WYnI+JrX474ZvJ83NrG5tJMpVJey/Kl+vJqqbaxeXFxeWahvFBemZqavDJ9dfry9ERP2nkmIq598a8/+O7PvnTtV5+586dbfz//rUa1RrLlu9vxgvL7LWw1vdD8LnZvsPaSwY6ifLOFmeF2aww9V3L/NdcJAID2Guf4H4yIT0bEhRiNof1PZwEAAIA3UPr5kfhfEpG2d6JDOQAAAPAGyTXHwCa5YjYWYCRyuWKxNYb3w3EqV6nW6p+er66vzLXGyo5FITe/WClPZGOFx6KQNPKTzfTT/KU9+amIeDsivj863MwXZ6uVuX5f/AAAAIABcXpP//8/o63+PwAAAHDMjPW7AgAAAMBrp/8PAAAAx5/+PwAAABxrX7lxozGl2++/nru9sb5UvX1xrlxbKi6vzxZnq2urxYVqdaH5zL7lgz6vUq2ufjZW1u+W6uVavVTb2Ly1XF1fqd9afOYV2AAAAMAhevvjD/6QRMTW54abU8OJ7jbtcjXgqMrvpJJs3ma3/uNbrflfDqlSwKEY6ncFgL7J97sCQN8U+l0BoO+SA5Z3HLzz22z+id7WBwAA6L3xj3a+/5/bd8ut/RcDR56dGAaX+/8wuJr3/7sdyetkAY6VgjMAGHivfP//QGn6QhUCAAB6bqQ5JblidnlvJHK5YjHiTPO1AIVkfrFSnoiItyLi96OFDzTyk80tkwP7DAAAAAAAAAAAAAAAAAAAAAAAAABAS5omkQIAAADHWkTub8mvW8/yHx89N7L3+sCJ5L+jkb0i9M6Pb/7w7ky9vjbZKP/XTnn9R1n5pX5cwQAAAICB8EIv8N/up2/34wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACglx4/uje7PR1m3H98ISLG2sXPx8nm/GQUIuLUv5PI79ouiYihHsQfbvz5SLv4SaNaOyHbxR/uQfyt+/vGj7HsW2gX/3QP4sMge9A4/lxvt//l4r3mvP3+l494Jv+yOh//Yuf4N9Rh/z/TZYx3Hv6i1DH+/Yh38u2PP9vxkw7xz3YZ/xtf39zstCz9ScR429+f5JlYpfryaqm2sXlxcXlmobxQXpmamrwyfXX68vREaX6xUs7+to3xvY/98sl+7T/VIf7YAe0/12X7///w7qMPtZKFdvHPn20T/zc/zdZ4Pn4u++37VJZuLB/fTm+10ru9+/Pfvbtf++c6tP+g///5Ltt/4avf+XOXqwIAh6C2sbk0U6mU145totFLPwLVkDiCiW/39APTNE0b+9QrfE4SR+FraSb6fWQCAAB67elJf79rAgAAAAAAAAAAAAAAAAAAAIPrMB4ntjfm1k4q6cUjtAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeuL9AAAA//+GAdlV") syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a438, &(0x7f00000008c0)=ANY=[], 0xc, 0x0, &(0x7f0000000000)) 741.438579ms ago: executing program 1 (id=5086): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000001500)=0x2, 0x4) syz_mount_image$ext4(&(0x7f00000007c0)='ext4\x00', &(0x7f00000006c0)='./file1\x00', 0x40, &(0x7f00000000c0)={[{@user_xattr}, {@nodioread_nolock}]}, 0x1, 0x576, &(0x7f0000000140)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f00000005c0)='\"', 0x1, 0x4fed0) sendfile(r1, r1, 0x0, 0xe3aa6ea) renameat2(0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file3\x00', 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r2, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) preadv(0xffffffffffffffff, 0x0, 0x0, 0x4309, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB], 0x50) socket(0xa, 0x3, 0x3a) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) umount2(&(0x7f0000000580)='./file0\x00', 0x3) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x800) lstat(&(0x7f0000001d40)='./file0\x00', &(0x7f0000001d80)) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48284b70043dc6124d877142a48448b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d4023f210fa34b63a715a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f01000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb796ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab04000000ffe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890decace0200f404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef29cd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf0100483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6c354463d7d0917fc80e5009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab4000000000000000028df75cf43f8ecc8d37b126602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89fa516dab183ee65744fb8fc4f9ce2242e0f00000000010000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f49198e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bde54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85eff010000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f14eafe4b28ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1099e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f9491bca7a8c59363799be70018c25ece5ad7307dc7a95c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677ec97c5c568a89d6e36b165c391339878b699644c96bd6ea589765ed2a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae2676384ff799783f55d7e5a1a092a01b965dc99cb7a9d98440c355927629f2bcf9dc2396eb2f5d25829715b24327642ac4741201014a95e0e65e12cdf27e19043e3c5d3e798375cead35b9a93190a52cdecaaccc854a1d41ef365303f0e9b4fc969c9dab6d00000000000000000000008f6555f3b7d5021dfc8eb504f1e4fef716d60f0d50b03fc014fd3dff46f56750f0ba4f1b9f7de5c17e7d1f18522897edab8e9e76b667ec6b01908400f55e16f0cfbf026be5f5acc681053f697d62b3545aec4606e190216c22c1d8807b6c43f0f0a4b53619fe5c9412821c3816194a5e29cf12cc7a197b5bdafb096d2d7f6be483814c92ef29c3a21c169794c7de3b4c706f4de5f4b93c831944c7b66fa49f317aa22dbc211e19f031c4f8bee14ecd5eb061a052044adc4dd1b63a1500a9c0e09dbba23f2726a55975efb4519d864d984dcb3a1dcafa1124a6b004029a706478df3be2438d2e35e6ca674dc190143a0b6f7db3408c0c08011e5d8f54711a0bd410ab53a15b1596cb77d2b58df2d8d8"], &(0x7f0000000100)='GPL\x00'}, 0x41) alarm(0x7f) 660.926596ms ago: executing program 0 (id=5087): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b708000000000e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000020850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe3}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000004a80)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000007c0)="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", 0x36b}], 0x1}}], 0x1, 0x400c0) sendto$inet(r0, &(0x7f0000000580)="17", 0x1d4c, 0x10048095, 0x0, 0x0) 651.879367ms ago: executing program 2 (id=5088): socket(0x10, 0x3, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) r2 = gettid() r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000000)={0x9, 0xfffffffe}, 0x10) write(r3, &(0x7f00000006c0)="240000001e005f0214fffffffffffff80700000001000000040000010500080002000000", 0x24) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, 0x0, 0x0) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r8}, 0x10) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000680)={0x6, r7, 'id1\x00'}) sendmsg$key(r9, &(0x7f00000014c0)={0x300, 0x0, 0x0}, 0x4000010) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f00000007c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008840}, 0x4000) r10 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r10, 0x89f1, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x0, 0x8, @mcast1, @local, 0x7, 0x7, 0x202, 0x8}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r10, 0x89f2, &(0x7f0000000600)={'syztnl1\x00', 0x0}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, r1, 0x1, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_PID={0x8, 0x1c, r2}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRES64], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000340)='kfree\x00', r11, 0x0, 0x40}, 0x18) 632.136409ms ago: executing program 4 (id=5089): r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) getsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, &(0x7f0000000180)) r3 = dup(r2) write$P9_RLERRORu(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) creat(&(0x7f00000003c0)='./file0\x00', 0x36) 529.116237ms ago: executing program 0 (id=5090): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b708000000000e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000020850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x10048095, 0x0, 0x0) 496.273689ms ago: executing program 4 (id=5091): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r1 = fcntl$getown(r0, 0x9) perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) socket$inet(0x2, 0x3, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r2}, 0x18) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/locks\x00', 0x0, 0x0) pread64(r3, 0x0, 0x0, 0x0) r4 = open(&(0x7f00000005c0)='./bus\x00', 0x60842, 0x0) pwritev2(r4, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x1}], 0x1, 0x1200, 0x30, 0x3) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x143a82, 0x2) timer_create(0x7, &(0x7f0000000280)={0x0, 0x1a}, &(0x7f0000000400)=0x0) timer_settime(r6, 0x0, &(0x7f0000000580)={{0x77359400}, {0x77359400}}, &(0x7f0000000600)) r7 = dup(r5) r8 = open(&(0x7f0000000040)='./bus\x00', 0x40d00, 0x20) sendfile(r7, r8, 0x0, 0x8000fffffffe) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) write$binfmt_script(r7, &(0x7f0000000380)={'#! ', './file0'}, 0xb) 488.90215ms ago: executing program 1 (id=5092): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) memfd_secret(0x80000) 464.979262ms ago: executing program 1 (id=5093): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socket$unix(0x1, 0x2, 0x0) socket$unix(0x1, 0x2, 0x0) setxattr$security_capability(&(0x7f0000000100)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000200), &(0x7f00000003c0)=@v2={0x2000000, [{0xf, 0x1ff}, {0x5, 0x9}]}, 0x14, 0x2) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) getdents64(0xffffffffffffffff, &(0x7f0000000f80)=""/4096, 0x1000) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000010000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x379, &(0x7f0000002300)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105042, 0x40) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x100000b, 0x2013, r4, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0x32600) 332.568302ms ago: executing program 3 (id=5094): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x10) wait4(0x0, 0x0, 0x1000008, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4000, &(0x7f0000000c00)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@mblk_io_submit}, {@resuid}, {@norecovery}]}, 0x8, 0x445, &(0x7f0000001dc0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r2, &(0x7f00000009c0)="3bf58d7d45d32c", 0x7) sendfile(r2, r1, 0x0, 0x3ffff) sendfile(r2, r1, 0x0, 0x7fffeffd) 331.356693ms ago: executing program 4 (id=5095): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x207, &(0x7f0000000000), 0x1, 0x46f, &(0x7f0000001200)="$eJzs3M1vFOUfAPDv7G7hx2v3h/gCoqJoJL60tKBy8KKJiQdNTPSAx1oKQRZqaE2ENLYYghcTJeFuTLyY+Bd48kTUk4lXvBsSYriAelkz3dllu91tt91tt3U/n2To83Sf3ef7nZln55kZpgH0rYPpP0nEzoi4GRGDEZGrb7CtsqTt7t2ZGf/rzsx4EuXyu38m6dvi7p2Z8WrTJPu5o1IppB+Uu5JEsUm/UxcvnR0rlSYuZPXh6XMfDU9dvPTimXNjpydOT5wfPX782NGRV14efakreaYx3d3/6eSBfW++f+3t8RPXPvj5+0q85fL1G0cW5NEdAxExU1snjZ7pbmc9t6uunBR6GAgrsjUiCtneejMGI39ld+21wXjjs54GB6ypcrlcHm398lwZ+A9LotcRAL1RPdCn57/VpX4C8M/aTj967vZrlROgNO972VJ5pRCXszYDDee33XQwIk7M/f11ukTD9RQAgLXwYzr/eaHJ/K8Y8VBdu93ZvaFiRPw/IvZExAMRsTciHoxK24cj4pEV9n+wob54/pO7tbrM2pPO/17N7m0tnP/V7oIV81lt13z+A8mpM6WJI9k6ORwDW9P6SNNPTyLm0p+/fdmq//r5X7qk/VfnglkctwpbF77n5Nj0WMeJZ25fjthfaJZ/EoX7WcS+iNi/yj7OPPfdgYW/yddKy+e/hC7cZyp/E/FsZfvPRUP+VcnS9yeH/xeliSPD1b1isV9+vfpOq/47yr8L0u2/ven+X8u/mNTfr51a9BFbluvj6u+ftzynWe3+vyV5b0Hnn4xNT18YidiSvLX493UXuKv1avs0/8OHmo//PXF/TTwaEelO/FhEPB4RT2SxPxkRT0XEoSXy/+n1pz9cff5rK81/dkXbf+WF/NkbP7Tqv73tf6xamQ+qne+/dgPsZN0BAADAZpGLiJ2R5IZq5VxuaKjy/+X3xvZcaXJq+vlTkx+fP1l5RqAYA7nqla7BuuuhI9m14Wp9NKvPZvWj2XXj6/lt8/Wh8cnSyV4nD31uR4vxn/oj3+vogDXneS3oX8Y/9K/Vj3/fHLDZLTOKc+sVB7D+HMWhfzUb/7M9iANYf47/0L9q4/+rNhrXPe7V+PAmsPk4/kP/Mv6hL3XyXP+GKMS3EUu3STZKqCsqfNHJ2wvrEGHkNsaKWsfCaD6ih2EU2v2rFnGxPNtxp73+ZgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOiOfwMAAP//Oyno9g==") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x7fff}, 0x18) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a438, &(0x7f00000008c0)=ANY=[], 0xc, 0x0, &(0x7f0000000000)) 99.970082ms ago: executing program 4 (id=5096): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r2, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r3, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x12, 0x0, 0x0, 0x2}, 0x10}}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 0s ago: executing program 4 (id=5097): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df85000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000e00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x2004000, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) kernel console output (not intermixed with test programs): after parsing attributes in process `syz.0.4674'. [ 317.525071][T17293] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 317.534931][T17293] EXT4-fs error (device loop2): ext4_evict_inode:254: inode #11: comm syz.2.4672: mark_inode_dirty error [ 317.566612][T17293] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 317.603667][T17293] EXT4-fs (loop2): 1 orphan inode deleted [ 317.609577][T17297] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4673'. [ 317.619097][T17293] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 317.631695][ T174] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 317.662481][T17311] loop1: detected capacity change from 0 to 512 [ 317.680606][T17311] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 317.691846][ T174] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 317.700327][ T174] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:6: Failed to release dquot type 0 [ 317.712328][T17311] EXT4-fs (loop1): orphan cleanup on readonly fs [ 317.718902][T17311] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:517: comm syz.1.4678: Block bitmap for bg 0 marked uninitialized [ 317.763062][T17311] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 317.782609][T17293] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 48: comm syz.2.4672: lblock 0 mapped to illegal pblock 48 (length 1) [ 317.811470][T17311] EXT4-fs (loop1): 1 orphan inode deleted [ 317.821383][T17293] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=-117 [ 317.844033][T17316] loop4: detected capacity change from 0 to 512 [ 317.851474][T17311] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 317.864706][T17316] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 317.885589][T17316] EXT4-fs (loop4): 1 truncate cleaned up [ 317.892564][T17311] EXT4-fs: Ignoring sb option on remount [ 317.898216][T17311] EXT4-fs: Ignoring removed orlov option [ 317.905544][T13300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 317.925318][T17316] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 317.946306][T17311] EXT4-fs: Ignoring removed nomblk_io_submit option [ 317.953042][T17311] EXT4-fs: Remounting fs w/o journal so ignoring data_err option [ 317.966094][T17311] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 317.995291][T17311] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 318.013573][T11588] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 318.040833][T14995] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 318.062383][T17328] loop4: detected capacity change from 0 to 1024 [ 318.084006][T17326] syzkaller0: entered promiscuous mode [ 318.089527][T17326] syzkaller0: entered allmulticast mode [ 318.101802][T17328] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 318.135470][T17328] ext4 filesystem being mounted at /399/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 318.136859][T17337] bridge_slave_0: left allmulticast mode [ 318.151798][T17337] bridge_slave_0: left promiscuous mode [ 318.157488][T17337] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.167962][T17337] bridge_slave_1: left allmulticast mode [ 318.173733][T17337] bridge_slave_1: left promiscuous mode [ 318.179571][T17337] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.195776][T17328] EXT4-fs error (device loop4): ext4_map_blocks:814: inode #15: block 1: comm syz.4.4684: lblock 1 mapped to illegal pblock 1 (length 15) [ 318.199272][T17337] bond0: (slave bond_slave_0): Releasing backup interface [ 318.211073][T17328] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 117 [ 318.229464][T17328] EXT4-fs (loop4): This should not happen!! Data will be lost [ 318.229464][T17328] [ 318.242992][T17328] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 318.252661][T17337] bond0: (slave bond_slave_1): Releasing backup interface [ 318.276060][T17337] team0: Port device C removed [ 318.289597][T17337] team0: Port device team_slave_1 removed [ 318.296594][T17337] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 318.304120][T17337] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 318.316477][T17337] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 318.323907][T17337] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 318.340348][T17351] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4694'. [ 318.350401][T17336] netlink: 'syz.0.4674': attribute type 1 has an invalid length. [ 318.358137][T17336] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4674'. [ 318.367203][T17336] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 318.447318][T17363] loop1: detected capacity change from 0 to 512 [ 318.454141][T17362] FAULT_INJECTION: forcing a failure. [ 318.454141][T17362] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 318.464802][T17363] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 318.467226][T17362] CPU: 0 UID: 0 PID: 17362 Comm: syz.0.4696 Tainted: G W 6.17.0-rc1-syzkaller-00165-gee94b00c1a64 #0 PREEMPT(voluntary) [ 318.467308][T17362] Tainted: [W]=WARN [ 318.467314][T17362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 318.467326][T17362] Call Trace: [ 318.467333][T17362] [ 318.467341][T17362] __dump_stack+0x1d/0x30 [ 318.467362][T17362] dump_stack_lvl+0xe8/0x140 [ 318.467436][T17362] dump_stack+0x15/0x1b [ 318.467497][T17362] should_fail_ex+0x265/0x280 [ 318.467518][T17362] should_fail+0xb/0x20 [ 318.467535][T17362] should_fail_usercopy+0x1a/0x20 [ 318.467559][T17362] _copy_to_user+0x20/0xa0 [ 318.467586][T17362] simple_read_from_buffer+0xb5/0x130 [ 318.467608][T17362] proc_fail_nth_read+0x10e/0x150 [ 318.467675][T17362] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 318.467831][T17362] vfs_read+0x1a5/0x770 [ 318.467851][T17362] ? __rcu_read_unlock+0x4f/0x70 [ 318.467871][T17362] ? __fget_files+0x184/0x1c0 [ 318.467957][T17362] ksys_read+0xda/0x1a0 [ 318.467979][T17362] __x64_sys_read+0x40/0x50 [ 318.468071][T17362] x64_sys_call+0x27bc/0x2ff0 [ 318.468098][T17362] do_syscall_64+0xd2/0x200 [ 318.468201][T17362] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 318.468259][T17362] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 318.468282][T17362] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.468303][T17362] RIP: 0033:0x7f15e862d5fc [ 318.468327][T17362] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 318.468407][T17362] RSP: 002b:00007f15e7097030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 318.468427][T17362] RAX: ffffffffffffffda RBX: 00007f15e8855fa0 RCX: 00007f15e862d5fc [ 318.468440][T17362] RDX: 000000000000000f RSI: 00007f15e70970a0 RDI: 0000000000000007 [ 318.468453][T17362] RBP: 00007f15e7097090 R08: 0000000000000000 R09: 0000000000000000 [ 318.468466][T17362] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 318.468532][T17362] R13: 00007f15e8856038 R14: 00007f15e8855fa0 R15: 00007ffc2c7c6328 [ 318.468551][T17362] [ 318.541924][T17357] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=17357 comm=syz.2.4694 [ 318.557921][T17366] loop0: detected capacity change from 0 to 512 [ 318.598385][T17363] EXT4-fs (loop1): orphan cleanup on readonly fs [ 318.633139][T17366] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 318.646948][T17363] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:517: comm syz.1.4698: Block bitmap for bg 0 marked uninitialized [ 318.681095][T17366] EXT4-fs (loop0): orphan cleanup on readonly fs [ 318.696638][T17363] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 318.709402][T17366] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:517: comm syz.0.4699: Block bitmap for bg 0 marked uninitialized [ 318.761089][T17363] EXT4-fs (loop1): 1 orphan inode deleted [ 318.761575][T17366] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 318.776254][T17366] EXT4-fs (loop0): 1 orphan inode deleted [ 318.796402][T17363] EXT4-fs: Ignoring sb option on remount [ 318.802127][T17363] EXT4-fs: Ignoring removed orlov option [ 318.809099][T17363] EXT4-fs: Ignoring removed nomblk_io_submit option [ 318.809222][T17366] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 318.815773][T17363] EXT4-fs: Remounting fs w/o journal so ignoring data_err option [ 318.832951][T17363] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 318.833191][T17375] loop2: detected capacity change from 0 to 1024 [ 318.850933][T17375] EXT4-fs: Ignoring removed bh option [ 318.854711][T17366] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 318.859884][ T29] audit: type=1400 audit(1755285723.324:20013): avc: denied { validate_trans } for pid=17377 comm="syz.3.4703" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 318.866163][T17363] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 318.893696][T17378] loop3: detected capacity change from 0 to 512 [ 318.907189][T17375] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 318.924125][T17375] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 318.933539][T17375] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 2: comm syz.2.4702: lblock 2 mapped to illegal pblock 2 (length 1) [ 318.966786][T17375] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 48: comm syz.2.4702: lblock 0 mapped to illegal pblock 48 (length 1) [ 318.985020][T17375] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.4702: Failed to acquire dquot type 0 [ 318.996542][T17384] loop1: detected capacity change from 0 to 1024 [ 319.002892][T17375] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 319.010863][T17384] EXT4-fs: Ignoring removed nobh option [ 319.014358][T17375] EXT4-fs error (device loop2): ext4_evict_inode:254: inode #11: comm syz.2.4702: mark_inode_dirty error [ 319.018505][T17384] EXT4-fs: Ignoring removed bh option [ 319.034535][T17388] netlink: 'syz.3.4703': attribute type 4 has an invalid length. [ 319.035465][T17378] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 319.043341][T17375] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 319.068664][T17375] EXT4-fs (loop2): 1 orphan inode deleted [ 319.074501][ T51] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 319.090107][T17384] ext4 filesystem being mounted at /152/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 319.091814][ T51] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:3: Failed to release dquot type 0 [ 319.112955][T17375] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 48: comm syz.2.4702: lblock 0 mapped to illegal pblock 48 (length 1) [ 319.188316][T17396] syzkaller0: entered promiscuous mode [ 319.193916][T17396] syzkaller0: entered allmulticast mode [ 319.294092][T17407] loop3: detected capacity change from 0 to 512 [ 319.303101][T17407] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 319.316204][T17407] EXT4-fs (loop3): orphan cleanup on readonly fs [ 319.322792][T17407] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:517: comm syz.3.4714: Block bitmap for bg 0 marked uninitialized [ 319.336987][T17407] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 319.367249][T17407] EXT4-fs (loop3): 1 orphan inode deleted [ 319.388790][T17407] EXT4-fs: Ignoring sb option on remount [ 319.394533][T17407] EXT4-fs: Ignoring removed orlov option [ 319.403147][T17407] EXT4-fs: Ignoring removed nomblk_io_submit option [ 319.409995][T17407] EXT4-fs: Remounting fs w/o journal so ignoring data_err option [ 319.422683][T17407] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 319.457497][T17407] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 319.473667][T17418] loop2: detected capacity change from 0 to 512 [ 319.489840][T17418] EXT4-fs: Ignoring removed orlov option [ 319.500492][T17418] EXT4-fs: Ignoring removed nomblk_io_submit option [ 319.507343][T17420] loop1: detected capacity change from 0 to 1024 [ 319.522134][T17418] EXT4-fs (loop2): VFS: Can't find ext4 filesystem [ 319.535847][T17420] EXT4-fs: Ignoring removed bh option [ 319.557283][T17420] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 319.595828][T17420] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 319.624688][T17420] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 2: comm syz.1.4719: lblock 2 mapped to illegal pblock 2 (length 1) [ 319.653900][T17426] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4721'. [ 319.672438][T17420] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 48: comm syz.1.4719: lblock 0 mapped to illegal pblock 48 (length 1) [ 319.707603][T17420] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.4719: Failed to acquire dquot type 0 [ 319.729348][T17420] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 319.764259][T17433] loop4: detected capacity change from 0 to 512 [ 319.799617][T17420] EXT4-fs error (device loop1): ext4_evict_inode:254: inode #11: comm syz.1.4719: mark_inode_dirty error [ 319.815307][T17433] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 319.825605][T17420] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 319.836989][T17431] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=17431 comm=syz.2.4721 [ 319.844482][T17420] EXT4-fs (loop1): 1 orphan inode deleted [ 319.856172][T17433] EXT4-fs (loop4): 1 truncate cleaned up [ 319.862057][ T31] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 319.914945][ T31] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:1: Failed to release dquot type 0 [ 319.950241][T17420] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 48: comm syz.1.4719: lblock 0 mapped to illegal pblock 48 (length 1) [ 320.083399][T17442] loop4: detected capacity change from 0 to 512 [ 320.102098][T17442] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 320.120894][T17442] EXT4-fs (loop4): 1 truncate cleaned up [ 320.173144][T17453] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4733'. [ 320.182108][T17453] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4733'. [ 320.192027][T17444] syzkaller0: entered promiscuous mode [ 320.193410][T17453] 9pnet_fd: Insufficient options for proto=fd [ 320.197574][T17444] syzkaller0: entered allmulticast mode [ 320.290545][T17463] loop1: detected capacity change from 0 to 512 [ 320.298387][T17463] EXT4-fs: Ignoring removed orlov option [ 320.304566][T17463] EXT4-fs: Ignoring removed nomblk_io_submit option [ 320.314720][T17463] EXT4-fs (loop1): VFS: Can't find ext4 filesystem [ 320.346877][T17467] loop1: detected capacity change from 0 to 512 [ 320.356877][T17467] EXT4-fs: Ignoring removed orlov option [ 320.373782][T17467] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 320.392568][T17467] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 320.401083][T17467] EXT4-fs error (device loop1): ext4_iget_extra_inode:5104: inode #15: comm syz.1.4740: corrupted in-inode xattr: e_value size too large [ 320.415658][T17467] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.4740: couldn't read orphan inode 15 (err -117) [ 320.448421][T17467] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4740'. [ 320.489460][T17475] loop0: detected capacity change from 0 to 1024 [ 320.495926][T17477] loop4: detected capacity change from 0 to 512 [ 320.499454][T17475] EXT4-fs: Ignoring removed nobh option [ 320.516323][T17477] EXT4-fs: Ignoring removed oldalloc option [ 320.517977][T17475] EXT4-fs: Ignoring removed bh option [ 320.540888][T17477] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 320.560406][T17477] EXT4-fs (loop4): 1 truncate cleaned up [ 320.566862][T17475] ext4 filesystem being mounted at /454/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 320.739264][T17496] loop0: detected capacity change from 0 to 512 [ 320.755016][T17496] EXT4-fs: Ignoring removed orlov option [ 320.767915][T17496] EXT4-fs: Ignoring removed nomblk_io_submit option [ 320.784031][T17498] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4752'. [ 320.792995][T17498] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4752'. [ 320.810135][T17496] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 320.834616][T17499] 9pnet_fd: Insufficient options for proto=fd [ 320.862999][T17501] syzkaller0: entered promiscuous mode [ 320.868476][T17501] syzkaller0: entered allmulticast mode [ 320.887017][T17504] netlink: 'syz.1.4740': attribute type 1 has an invalid length. [ 320.894808][T17504] netlink: 152 bytes leftover after parsing attributes in process `syz.1.4740'. [ 320.903842][T17504] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 320.925338][ T29] kauditd_printk_skb: 20 callbacks suppressed [ 320.925352][ T29] audit: type=1326 audit(1755285725.394:20025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17502 comm="syz.4.4754" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f816700ebe9 code=0x0 [ 320.987822][T17505] loop4: detected capacity change from 0 to 128 [ 320.998742][T17505] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 321.006658][T17505] FAT-fs (loop4): Filesystem has been set read-only [ 321.013696][T17505] bio_check_eod: 45240 callbacks suppressed [ 321.013709][T17505] syz.4.4754: attempt to access beyond end of device [ 321.013709][T17505] loop4: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 321.033324][T17505] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 321.041196][T17505] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 321.049179][T17505] syz.4.4754: attempt to access beyond end of device [ 321.049179][T17505] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 321.063754][T17505] syz.4.4754: attempt to access beyond end of device [ 321.063754][T17505] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 321.077255][T17505] syz.4.4754: attempt to access beyond end of device [ 321.077255][T17505] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 321.090582][T17505] syz.4.4754: attempt to access beyond end of device [ 321.090582][T17505] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 321.104563][T17505] syz.4.4754: attempt to access beyond end of device [ 321.104563][T17505] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 321.117859][T17506] syz.4.4754: attempt to access beyond end of device [ 321.117859][T17506] loop4: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 321.131239][T17506] buffer_io_error: 45238 callbacks suppressed [ 321.131252][T17506] Buffer I/O error on dev loop4, logical block 2065, async page read [ 321.146179][T17506] syz.4.4754: attempt to access beyond end of device [ 321.146179][T17506] loop4: rw=0, sector=2066, nr_sectors = 1 limit=128 [ 321.159465][T17506] Buffer I/O error on dev loop4, logical block 2066, async page read [ 321.167608][T17506] syz.4.4754: attempt to access beyond end of device [ 321.167608][T17506] loop4: rw=0, sector=2067, nr_sectors = 1 limit=128 [ 321.180859][T17506] Buffer I/O error on dev loop4, logical block 2067, async page read [ 321.206983][ T29] audit: type=1326 audit(1755285725.674:20026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17507 comm="syz.2.4755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29d7dbebe9 code=0x7ffc0000 [ 321.230746][ T29] audit: type=1326 audit(1755285725.674:20027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17507 comm="syz.2.4755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29d7dbebe9 code=0x7ffc0000 [ 321.231373][T17506] syz.4.4754: attempt to access beyond end of device [ 321.231373][T17506] loop4: rw=0, sector=2068, nr_sectors = 1 limit=128 [ 321.267524][T17506] Buffer I/O error on dev loop4, logical block 2068, async page read [ 321.275721][T17506] Buffer I/O error on dev loop4, logical block 2069, async page read [ 321.278549][ T29] audit: type=1326 audit(1755285725.674:20028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17507 comm="syz.2.4755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f29d7dbebe9 code=0x7ffc0000 [ 321.307377][ T29] audit: type=1326 audit(1755285725.674:20029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17507 comm="syz.2.4755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29d7dbebe9 code=0x7ffc0000 [ 321.310624][T17506] Buffer I/O error on dev loop4, logical block 2070, async page read [ 321.331031][ T29] audit: type=1326 audit(1755285725.674:20030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17507 comm="syz.2.4755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29d7dbebe9 code=0x7ffc0000 [ 321.362579][ T29] audit: type=1326 audit(1755285725.724:20031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17507 comm="syz.2.4755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f29d7dbebe9 code=0x7ffc0000 [ 321.371354][T17506] Buffer I/O error on dev loop4, logical block 2071, async page read [ 321.386225][ T29] audit: type=1326 audit(1755285725.724:20032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17507 comm="syz.2.4755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29d7dbebe9 code=0x7ffc0000 [ 321.394507][T17506] Buffer I/O error on dev loop4, logical block 2072, async page read [ 321.417765][ T29] audit: type=1326 audit(1755285725.724:20033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17507 comm="syz.2.4755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29d7dbebe9 code=0x7ffc0000 [ 321.449442][T17505] Buffer I/O error on dev loop4, logical block 2065, async page read [ 321.464318][T17512] loop2: detected capacity change from 0 to 1024 [ 321.472124][T17505] Buffer I/O error on dev loop4, logical block 2066, async page read [ 321.475689][T17512] EXT4-fs: Ignoring removed nobh option [ 321.507957][T17512] EXT4-fs: Ignoring removed bh option [ 321.555297][T17512] ext4 filesystem being mounted at /264/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 321.563998][T17528] loop1: detected capacity change from 0 to 512 [ 321.577981][T17524] loop3: detected capacity change from 0 to 1024 [ 321.592990][T17528] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 321.619837][T17524] ext4 filesystem being mounted at /454/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 321.688029][T17528] EXT4-fs (loop1): orphan cleanup on readonly fs [ 321.704409][T17536] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4767'. [ 321.727495][T17528] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:517: comm syz.1.4764: Block bitmap for bg 0 marked uninitialized [ 321.741766][T17534] syzkaller0: entered promiscuous mode [ 321.747287][T17534] syzkaller0: entered allmulticast mode [ 321.758320][T17528] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 321.759291][T17524] EXT4-fs error (device loop3): ext4_map_blocks:814: inode #15: block 1: comm syz.3.4763: lblock 1 mapped to illegal pblock 1 (length 15) [ 321.809529][T17524] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 117 [ 321.811545][T17528] EXT4-fs (loop1): 1 orphan inode deleted [ 321.822031][T17524] EXT4-fs (loop3): This should not happen!! Data will be lost [ 321.822031][T17524] [ 321.853250][T17541] loop4: detected capacity change from 0 to 512 [ 321.857068][T17536] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=17536 comm=syz.0.4767 [ 321.860751][T17541] EXT4-fs: Ignoring removed orlov option [ 321.883047][T17528] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 321.893839][T17524] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 321.899441][T17541] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 321.909627][T17539] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #15: block 1: comm syz.3.4763: lblock 1 mapped to illegal pblock 1 (length 3) [ 321.925881][T17528] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 321.955925][T17541] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 321.973682][T17546] loop0: detected capacity change from 0 to 512 [ 321.996901][T17546] EXT4-fs: Ignoring removed oldalloc option [ 322.009525][T17541] EXT4-fs error (device loop4): ext4_iget_extra_inode:5104: inode #15: comm syz.4.4768: corrupted in-inode xattr: e_value size too large [ 322.024455][T17546] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 322.031418][T17541] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.4768: couldn't read orphan inode 15 (err -117) [ 322.063914][T17546] EXT4-fs (loop0): 1 truncate cleaned up [ 322.093898][T17541] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4768'. [ 322.180720][T17560] loop2: detected capacity change from 0 to 1024 [ 322.198477][T17562] tmpfs: Unknown parameter '0x0000000000000006' [ 322.215441][T17562] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 322.220854][T17560] EXT4-fs: Ignoring removed bh option [ 322.234144][ T29] audit: type=1326 audit(1755285726.704:20034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17564 comm="syz.0.4778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15e862ebe9 code=0x7ffc0000 [ 322.270710][T17562] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 322.279973][T17560] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 322.295667][T17562] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4776'. [ 322.310672][T17560] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 322.324482][T17566] loop0: detected capacity change from 0 to 128 [ 322.332574][T17560] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 2: comm syz.2.4775: lblock 2 mapped to illegal pblock 2 (length 1) [ 322.367098][T17560] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 48: comm syz.2.4775: lblock 0 mapped to illegal pblock 48 (length 1) [ 322.381864][T17560] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.4775: Failed to acquire dquot type 0 [ 322.386985][T17566] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 322.401073][T17566] FAT-fs (loop0): Filesystem has been set read-only [ 322.401400][T17560] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 322.407909][T17566] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 322.425158][T17566] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 322.434039][T17573] netlink: 'syz.4.4768': attribute type 1 has an invalid length. [ 322.439096][T17560] EXT4-fs error (device loop2): ext4_evict_inode:254: inode #11: comm syz.2.4775: mark_inode_dirty error [ 322.441898][T17573] netlink: 152 bytes leftover after parsing attributes in process `syz.4.4768'. [ 322.461974][T17573] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 322.481739][T17560] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 322.492029][T17560] EXT4-fs (loop2): 1 orphan inode deleted [ 322.519796][ T51] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 322.540822][ T51] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:3: Failed to release dquot type 0 [ 322.561851][T17560] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 48: comm syz.2.4775: lblock 0 mapped to illegal pblock 48 (length 1) [ 322.740315][T17591] loop4: detected capacity change from 0 to 1024 [ 322.750966][T17591] EXT4-fs: Ignoring removed nobh option [ 322.756749][T17591] EXT4-fs: Ignoring removed bh option [ 322.807777][T17591] ext4 filesystem being mounted at /415/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 322.889241][T17607] loop2: detected capacity change from 0 to 764 [ 322.898833][T17607] rock: directory entry would overflow storage [ 322.905169][T17607] rock: sig=0x5245, size=8, remaining=5 [ 322.991246][T17616] loop2: detected capacity change from 0 to 512 [ 323.009728][T17616] EXT4-fs: Ignoring removed orlov option [ 323.027966][T17616] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 323.040103][T17620] loop1: detected capacity change from 0 to 512 [ 323.049624][T17620] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 323.066059][T17616] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 323.066155][T17620] EXT4-fs (loop1): orphan cleanup on readonly fs [ 323.081075][T17616] EXT4-fs error (device loop2): ext4_iget_extra_inode:5104: inode #15: comm syz.2.4796: corrupted in-inode xattr: e_value size too large [ 323.095226][T17620] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:517: comm syz.1.4798: Block bitmap for bg 0 marked uninitialized [ 323.105868][T17616] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.4796: couldn't read orphan inode 15 (err -117) [ 323.116649][T17620] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 323.145107][T17620] EXT4-fs (loop1): 1 orphan inode deleted [ 323.154369][T17626] loop4: detected capacity change from 0 to 512 [ 323.182885][T17620] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 323.195261][T17626] EXT4-fs: Ignoring removed orlov option [ 323.201309][T17626] EXT4-fs: Ignoring removed nomblk_io_submit option [ 323.208316][T17620] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 323.218122][T17626] EXT4-fs (loop4): VFS: Can't find ext4 filesystem [ 323.367562][T17635] netlink: 'syz.2.4796': attribute type 1 has an invalid length. [ 323.375329][T17635] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 323.513137][T17641] loop1: detected capacity change from 0 to 1024 [ 323.529291][T17641] EXT4-fs: Ignoring removed bh option [ 323.543931][T17641] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 323.564731][T17641] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 323.574300][T17641] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 2: comm syz.1.4805: lblock 2 mapped to illegal pblock 2 (length 1) [ 323.588738][T17641] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 48: comm syz.1.4805: lblock 0 mapped to illegal pblock 48 (length 1) [ 323.605026][T17641] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.4805: Failed to acquire dquot type 0 [ 323.616864][T17641] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 323.627390][T17641] EXT4-fs error (device loop1): ext4_evict_inode:254: inode #11: comm syz.1.4805: mark_inode_dirty error [ 323.638879][T17641] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 323.649866][T17641] EXT4-fs (loop1): 1 orphan inode deleted [ 323.661410][ T31] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 323.676710][ T31] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:1: Failed to release dquot type 0 [ 323.688654][T17641] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 48: comm syz.1.4805: lblock 0 mapped to illegal pblock 48 (length 1) [ 323.875617][T17653] loop1: detected capacity change from 0 to 512 [ 323.885637][T17649] loop2: detected capacity change from 0 to 128 [ 323.897136][T17649] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 323.905137][T17649] FAT-fs (loop2): Filesystem has been set read-only [ 323.912227][T17649] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 323.920082][T17649] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 323.936737][T17653] EXT4-fs warning (device loop1): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 323.959964][T17653] netlink: 'syz.1.4810': attribute type 4 has an invalid length. [ 324.093830][T17661] loop1: detected capacity change from 0 to 512 [ 324.110820][T17663] loop0: detected capacity change from 0 to 512 [ 324.139311][T17661] EXT4-fs: Ignoring removed orlov option [ 324.144991][T17661] EXT4-fs: Ignoring removed nomblk_io_submit option [ 324.152062][T17663] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 324.163878][T17661] EXT4-fs (loop1): VFS: Can't find ext4 filesystem [ 324.171392][T17663] EXT4-fs (loop0): orphan cleanup on readonly fs [ 324.177868][T17663] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:517: comm syz.0.4813: Block bitmap for bg 0 marked uninitialized [ 324.204066][T17663] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 324.224898][T17663] EXT4-fs (loop0): 1 orphan inode deleted [ 324.241142][T17663] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 324.276355][T17663] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 324.346171][T17671] loop0: detected capacity change from 0 to 512 [ 324.356276][T17672] loop4: detected capacity change from 0 to 256 [ 324.382273][T17671] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 324.404802][T17671] EXT4-fs (loop0): orphan cleanup on readonly fs [ 324.416925][T17671] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:517: comm syz.0.4816: Block bitmap for bg 0 marked uninitialized [ 324.457160][T17671] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 324.463510][T17678] loop1: detected capacity change from 0 to 512 [ 324.474805][T17678] EXT4-fs: Ignoring removed orlov option [ 324.483497][T17678] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 324.492929][T17671] EXT4-fs (loop0): 1 orphan inode deleted [ 324.514181][T17678] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 324.528630][T17678] EXT4-fs error (device loop1): ext4_iget_extra_inode:5104: inode #15: comm syz.1.4820: corrupted in-inode xattr: e_value size too large [ 324.546386][T17678] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.4820: couldn't read orphan inode 15 (err -117) [ 324.558372][T17671] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 324.576708][T17671] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 324.617338][T17683] loop4: detected capacity change from 0 to 512 [ 324.642885][T17683] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 324.679416][T17683] EXT4-fs (loop4): 1 truncate cleaned up [ 324.697792][T17689] netlink: 'syz.1.4820': attribute type 1 has an invalid length. [ 324.705700][T17689] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 324.748183][T17691] loop0: detected capacity change from 0 to 512 [ 324.767415][T17691] EXT4-fs: Ignoring removed oldalloc option [ 324.790914][T17691] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 324.823842][T17691] EXT4-fs (loop0): 1 truncate cleaned up [ 325.011141][T17707] loop2: detected capacity change from 0 to 1024 [ 325.031385][T17707] ext4 filesystem being mounted at /277/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 325.063085][T17707] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 325.191410][T17715] loop2: detected capacity change from 0 to 512 [ 325.211380][T17715] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 325.227053][T17715] EXT4-fs (loop2): orphan cleanup on readonly fs [ 325.240590][T17715] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:517: comm syz.2.4829: Block bitmap for bg 0 marked uninitialized [ 325.268122][T17715] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 325.298321][T17715] EXT4-fs (loop2): 1 orphan inode deleted [ 325.313583][T17682] syz.4.4821 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 325.327738][T17682] CPU: 1 UID: 0 PID: 17682 Comm: syz.4.4821 Tainted: G W 6.17.0-rc1-syzkaller-00165-gee94b00c1a64 #0 PREEMPT(voluntary) [ 325.327817][T17682] Tainted: [W]=WARN [ 325.327823][T17682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 325.327834][T17682] Call Trace: [ 325.327860][T17682] [ 325.327867][T17682] __dump_stack+0x1d/0x30 [ 325.327889][T17682] dump_stack_lvl+0xe8/0x140 [ 325.327965][T17682] dump_stack+0x15/0x1b [ 325.327999][T17682] dump_header+0x81/0x220 [ 325.328032][T17682] oom_kill_process+0x342/0x400 [ 325.328120][T17682] out_of_memory+0x979/0xb80 [ 325.328154][T17682] try_charge_memcg+0x5e6/0x9e0 [ 325.328179][T17682] obj_cgroup_charge_pages+0xa6/0x150 [ 325.328284][T17682] __memcg_kmem_charge_page+0x9f/0x170 [ 325.328317][T17682] __alloc_frozen_pages_noprof+0x188/0x360 [ 325.328381][T17682] alloc_pages_mpol+0xb3/0x250 [ 325.328411][T17682] alloc_pages_noprof+0x90/0x130 [ 325.328444][T17682] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 325.328511][T17682] __kvmalloc_node_noprof+0x30f/0x4e0 [ 325.328619][T17682] ? ip_set_alloc+0x1f/0x30 [ 325.328682][T17682] ? ip_set_alloc+0x1f/0x30 [ 325.328813][T17682] ? __kmalloc_cache_noprof+0x189/0x320 [ 325.328908][T17682] ip_set_alloc+0x1f/0x30 [ 325.328936][T17682] hash_netiface_create+0x282/0x740 [ 325.328971][T17682] ? __pfx_hash_netiface_create+0x10/0x10 [ 325.329008][T17682] ip_set_create+0x3c9/0x960 [ 325.329080][T17682] ? __nla_parse+0x40/0x60 [ 325.329106][T17682] nfnetlink_rcv_msg+0x4c6/0x590 [ 325.329131][T17682] ? __rcu_read_unlock+0x34/0x70 [ 325.329162][T17682] netlink_rcv_skb+0x120/0x220 [ 325.329188][T17682] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 325.329268][T17682] nfnetlink_rcv+0x16b/0x1690 [ 325.329293][T17682] ? nlmon_xmit+0x4f/0x60 [ 325.329322][T17682] ? consume_skb+0x49/0x150 [ 325.329341][T17682] ? nlmon_xmit+0x4f/0x60 [ 325.329400][T17682] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 325.329421][T17682] ? __dev_queue_xmit+0x1200/0x2000 [ 325.329561][T17682] ? __dev_queue_xmit+0x182/0x2000 [ 325.329580][T17682] ? ref_tracker_free+0x37d/0x3e0 [ 325.329603][T17682] ? __netlink_deliver_tap+0x4dc/0x500 [ 325.329623][T17682] netlink_unicast+0x5c0/0x690 [ 325.329658][T17682] netlink_sendmsg+0x58b/0x6b0 [ 325.329677][T17682] ? __pfx_netlink_sendmsg+0x10/0x10 [ 325.329701][T17682] __sock_sendmsg+0x145/0x180 [ 325.329790][T17682] ____sys_sendmsg+0x31e/0x4e0 [ 325.329816][T17682] ___sys_sendmsg+0x17b/0x1d0 [ 325.329851][T17682] __x64_sys_sendmsg+0xd4/0x160 [ 325.329875][T17682] x64_sys_call+0x191e/0x2ff0 [ 325.329893][T17682] do_syscall_64+0xd2/0x200 [ 325.329916][T17682] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 325.329937][T17682] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 325.330033][T17682] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.330055][T17682] RIP: 0033:0x7f816700ebe9 [ 325.330072][T17682] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 325.330137][T17682] RSP: 002b:00007f8165a6f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 325.330190][T17682] RAX: ffffffffffffffda RBX: 00007f8167235fa0 RCX: 00007f816700ebe9 [ 325.330202][T17682] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000003 [ 325.330213][T17682] RBP: 00007f8167091e19 R08: 0000000000000000 R09: 0000000000000000 [ 325.330236][T17682] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 325.330250][T17682] R13: 00007f8167236038 R14: 00007f8167235fa0 R15: 00007ffc5eb78b38 [ 325.330271][T17682] [ 325.330319][T17715] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 325.344456][T17682] memory: usage 307200kB, limit 307200kB, failcnt 2146 [ 325.364179][T17715] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 325.364459][T17682] memory+swap: usage 307668kB, limit 9007199254740988kB, failcnt 0 [ 325.704471][T17682] kmem: usage 307176kB, limit 9007199254740988kB, failcnt 0 [ 325.711813][T17682] Memory cgroup stats for /syz4: [ 325.712558][T17682] cache 8192 [ 325.720736][T17682] rss 4096 [ 325.723766][T17682] shmem 0 [ 325.726763][T17682] mapped_file 4096 [ 325.730507][T17682] dirty 0 [ 325.733427][T17682] writeback 0 [ 325.736748][T17682] workingset_refault_anon 708 [ 325.741521][T17682] workingset_refault_file 7104 [ 325.746396][T17682] swap 479232 [ 325.749692][T17682] swapcached 4096 [ 325.753329][T17682] pgpgin 280441 [ 325.756773][T17682] pgpgout 280435 [ 325.760318][T17682] pgfault 264350 [ 325.763845][T17682] pgmajfault 415 [ 325.767472][T17682] inactive_anon 4096 [ 325.771382][T17682] active_anon 0 [ 325.774838][T17682] inactive_file 12288 [ 325.778807][T17682] active_file 8192 [ 325.782741][T17682] unevictable 0 [ 325.786319][T17682] hierarchical_memory_limit 314572800 [ 325.790058][T17720] loop0: detected capacity change from 0 to 512 [ 325.791705][T17682] hierarchical_memsw_limit 9223372036854771712 [ 325.800624][T17720] EXT4-fs: Ignoring removed mblk_io_submit option [ 325.804120][T17682] total_cache 8192 [ 325.814215][T17682] total_rss 4096 [ 325.817807][T17682] total_shmem 0 [ 325.821296][T17682] total_mapped_file 4096 [ 325.825525][T17682] total_dirty 0 [ 325.825985][T17720] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 325.828970][T17682] total_writeback 0 [ 325.828979][T17682] total_workingset_refault_anon 708 [ 325.843060][T17720] EXT4-fs (loop0): 1 truncate cleaned up [ 325.847776][T17682] total_workingset_refault_file 7104 [ 325.847787][T17682] total_swap 479232 [ 325.862508][T17682] total_swapcached 4096 [ 325.866675][T17682] total_pgpgin 280441 [ 325.870670][T17682] total_pgpgout 280435 [ 325.874752][T17682] total_pgfault 264350 [ 325.878806][T17682] total_pgmajfault 415 [ 325.882887][T17682] total_inactive_anon 4096 [ 325.887291][T17682] total_active_anon 0 [ 325.891301][T17682] total_inactive_file 12288 [ 325.895788][T17682] total_active_file 8192 [ 325.900033][T17682] total_unevictable 0 [ 325.904005][T17682] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.4821,pid=17681,uid=0 [ 325.918715][T17682] Memory cgroup out of memory: Killed process 17681 (syz.4.4821) total-vm:93896kB, anon-rss:1048kB, file-rss:22440kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 326.021337][ T29] kauditd_printk_skb: 463 callbacks suppressed [ 326.021368][ T29] audit: type=1400 audit(1755285730.494:20489): avc: denied { accept } for pid=17719 comm="syz.0.4832" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 326.067290][T17725] loop2: detected capacity change from 0 to 256 [ 326.112718][T17729] loop3: detected capacity change from 0 to 512 [ 326.130605][T17729] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 326.144216][ T29] audit: type=1400 audit(1755285730.514:20490): avc: denied { read } for pid=17719 comm="syz.0.4832" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 326.163953][ T29] audit: type=1326 audit(1755285730.534:20491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17724 comm="syz.2.4831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29d7dbebe9 code=0x7ffc0000 [ 326.187516][ T29] audit: type=1326 audit(1755285730.534:20492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17724 comm="syz.2.4831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29d7dbebe9 code=0x7ffc0000 [ 326.211180][ T29] audit: type=1326 audit(1755285730.534:20493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17724 comm="syz.2.4831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f29d7dbebe9 code=0x7ffc0000 [ 326.234790][ T29] audit: type=1326 audit(1755285730.534:20494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17724 comm="syz.2.4831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29d7dbebe9 code=0x7ffc0000 [ 326.258415][ T29] audit: type=1326 audit(1755285730.534:20495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17724 comm="syz.2.4831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29d7dbebe9 code=0x7ffc0000 [ 326.282053][ T29] audit: type=1326 audit(1755285730.534:20496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17724 comm="syz.2.4831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f29d7dbebe9 code=0x7ffc0000 [ 326.305729][ T29] audit: type=1326 audit(1755285730.534:20497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17724 comm="syz.2.4831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29d7dbebe9 code=0x7ffc0000 [ 326.329313][ T29] audit: type=1326 audit(1755285730.534:20498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17724 comm="syz.2.4831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29d7dbebe9 code=0x7ffc0000 [ 326.360235][T17729] EXT4-fs (loop3): 1 truncate cleaned up [ 326.469773][T17736] __nla_validate_parse: 4 callbacks suppressed [ 326.469799][T17736] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4836'. [ 326.586699][T17736] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=17736 comm=syz.2.4836 [ 326.665956][T17749] loop1: detected capacity change from 0 to 1024 [ 326.720258][T17749] ext4 filesystem being mounted at /195/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 326.776892][T17749] EXT4-fs error (device loop1): ext4_map_blocks:814: inode #15: block 1: comm syz.1.4843: lblock 1 mapped to illegal pblock 1 (length 15) [ 326.790709][T17759] loop2: detected capacity change from 0 to 128 [ 326.797582][T17751] loop3: detected capacity change from 0 to 128 [ 326.826897][T17751] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 326.834779][T17751] FAT-fs (loop3): Filesystem has been set read-only [ 326.845370][T17749] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 117 [ 326.857897][T17749] EXT4-fs (loop1): This should not happen!! Data will be lost [ 326.857897][T17749] [ 326.869895][T17751] bio_check_eod: 48687 callbacks suppressed [ 326.869907][T17751] syz.3.4841: attempt to access beyond end of device [ 326.869907][T17751] loop3: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 326.884085][T17759] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 326.897247][T17759] FAT-fs (loop2): Filesystem has been set read-only [ 326.900269][T17751] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 326.905637][T17763] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #15: block 1: comm syz.1.4843: lblock 1 mapped to illegal pblock 1 (length 3) [ 326.911667][T17751] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 326.937536][T17749] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 326.947676][T17759] syz.2.4846: attempt to access beyond end of device [ 326.947676][T17759] loop2: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 326.954351][T17764] syz.3.4841: attempt to access beyond end of device [ 326.954351][T17764] loop3: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 326.968645][T17759] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 326.979122][T17764] buffer_io_error: 47230 callbacks suppressed [ 326.979135][T17764] Buffer I/O error on dev loop3, logical block 2065, async page read [ 326.982597][T17764] syz.3.4841: attempt to access beyond end of device [ 326.982597][T17764] loop3: rw=0, sector=2066, nr_sectors = 1 limit=128 [ 326.987029][T17759] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 326.993069][T17764] Buffer I/O error on dev loop3, logical block 2066, async page read [ 326.993270][T17764] syz.3.4841: attempt to access beyond end of device [ 326.993270][T17764] loop3: rw=0, sector=2067, nr_sectors = 1 limit=128 [ 327.015305][T17766] syz.2.4846: attempt to access beyond end of device [ 327.015305][T17766] loop2: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 327.022335][T17764] Buffer I/O error on dev loop3, logical block 2067, async page read [ 327.022656][T17764] syz.3.4841: attempt to access beyond end of device [ 327.022656][T17764] loop3: rw=0, sector=2068, nr_sectors = 1 limit=128 [ 327.030441][T17766] Buffer I/O error on dev loop2, logical block 2065, async page read [ 327.043649][T17764] Buffer I/O error on dev loop3, logical block 2068, async page read [ 327.065631][T17768] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #15: block 1: comm syz.1.4843: lblock 1 mapped to illegal pblock 1 (length 3) [ 327.079467][T17769] loop0: detected capacity change from 0 to 512 [ 327.098180][T17766] syz.2.4846: attempt to access beyond end of device [ 327.098180][T17766] loop2: rw=0, sector=2066, nr_sectors = 1 limit=128 [ 327.109459][T17764] syz.3.4841: attempt to access beyond end of device [ 327.109459][T17764] loop3: rw=0, sector=2069, nr_sectors = 1 limit=128 [ 327.115368][T17766] Buffer I/O error on dev loop2, logical block 2066, async page read [ 327.128562][T17764] Buffer I/O error on dev loop3, logical block 2069, async page read [ 327.141865][T17768] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #15: block 1: comm syz.1.4843: lblock 1 mapped to illegal pblock 1 (length 3) [ 327.151454][T17769] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 327.161041][T17766] syz.2.4846: attempt to access beyond end of device [ 327.161041][T17766] loop2: rw=0, sector=2067, nr_sectors = 1 limit=128 [ 327.194574][T17766] Buffer I/O error on dev loop2, logical block 2067, async page read [ 327.205157][T17766] Buffer I/O error on dev loop2, logical block 2068, async page read [ 327.218057][T17766] Buffer I/O error on dev loop2, logical block 2069, async page read [ 327.273736][T17769] EXT4-fs (loop0): orphan cleanup on readonly fs [ 327.298170][T17769] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:517: comm syz.0.4848: Block bitmap for bg 0 marked uninitialized [ 327.313683][T17769] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 327.322649][T17769] EXT4-fs (loop0): 1 orphan inode deleted [ 327.341458][T17769] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 327.355023][T17769] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 327.423132][T17775] syzkaller0: entered promiscuous mode [ 327.428703][T17775] syzkaller0: entered allmulticast mode [ 327.627754][T17782] loop2: detected capacity change from 0 to 512 [ 327.644839][T17782] EXT4-fs: Ignoring removed mblk_io_submit option [ 327.664611][T17784] loop3: detected capacity change from 0 to 512 [ 327.671022][T17782] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 327.682010][T17784] EXT4-fs: Ignoring removed mblk_io_submit option [ 327.719071][T17784] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 327.732492][T17782] EXT4-fs (loop2): 1 truncate cleaned up [ 327.740313][T17784] EXT4-fs (loop3): 1 truncate cleaned up [ 327.753334][ T2991] udevd[2991]: worker [12168] terminated by signal 33 (Unknown signal 33) [ 327.862765][T12162] printk: udevd: 35 output lines suppressed due to ratelimiting [ 327.901452][T17801] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4857'. [ 328.039854][T17801] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=17801 comm=syz.0.4857 [ 328.214925][T17814] loop0: detected capacity change from 0 to 1024 [ 328.222852][T17814] EXT4-fs: Ignoring removed bh option [ 328.231285][T17814] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 328.244977][T17816] loop4: detected capacity change from 0 to 128 [ 328.253514][T17814] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 328.264649][T17816] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 328.272529][T17816] FAT-fs (loop4): Filesystem has been set read-only [ 328.279753][T17816] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 328.287624][T17816] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 328.289872][T17814] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 2: comm syz.0.4863: lblock 2 mapped to illegal pblock 2 (length 1) [ 328.326161][T17814] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 48: comm syz.0.4863: lblock 0 mapped to illegal pblock 48 (length 1) [ 328.359299][T17814] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.4863: Failed to acquire dquot type 0 [ 328.379860][T17814] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 328.400891][T17814] EXT4-fs error (device loop0): ext4_evict_inode:254: inode #11: comm syz.0.4863: mark_inode_dirty error [ 328.420309][T17814] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 328.442430][T17814] EXT4-fs (loop0): 1 orphan inode deleted [ 328.459251][ T51] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 328.477489][ T51] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:3: Failed to release dquot type 0 [ 328.521087][T17814] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 48: comm syz.0.4863: lblock 0 mapped to illegal pblock 48 (length 1) [ 328.544012][T17820] loop2: detected capacity change from 0 to 1024 [ 328.560711][T17820] ext4 filesystem being mounted at /287/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 328.599915][T17822] syzkaller0: entered promiscuous mode [ 328.605401][T17822] syzkaller0: entered allmulticast mode [ 328.613123][T17820] EXT4-fs error (device loop2): ext4_map_blocks:814: inode #15: block 1: comm syz.2.4865: lblock 1 mapped to illegal pblock 1 (length 15) [ 328.631941][T17820] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 117 [ 328.644359][T17820] EXT4-fs (loop2): This should not happen!! Data will be lost [ 328.644359][T17820] [ 328.662893][T17828] loop0: detected capacity change from 0 to 512 [ 328.670512][T17829] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #15: block 1: comm syz.2.4865: lblock 1 mapped to illegal pblock 1 (length 3) [ 328.691820][T17820] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 328.707545][T17829] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #15: block 1: comm syz.2.4865: lblock 1 mapped to illegal pblock 1 (length 3) [ 328.723234][T17828] EXT4-fs warning (device loop0): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 328.738877][T17829] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #15: block 1: comm syz.2.4865: lblock 1 mapped to illegal pblock 1 (length 3) [ 328.805632][T17828] netlink: 'syz.0.4867': attribute type 4 has an invalid length. [ 328.948018][T17848] tmpfs: Unknown parameter '0x0000000000000006' [ 328.957298][T17850] loop3: detected capacity change from 0 to 512 [ 328.964038][T17850] EXT4-fs: Ignoring removed mblk_io_submit option [ 328.972701][T17850] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 328.984124][T17848] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 328.993508][T17848] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 328.993719][T17850] EXT4-fs (loop3): 1 truncate cleaned up [ 329.012362][T17848] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4876'. [ 329.104965][T17853] loop4: detected capacity change from 0 to 512 [ 329.112080][T17853] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 329.122978][T17853] EXT4-fs (loop4): orphan cleanup on readonly fs [ 329.129750][T17853] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:517: comm syz.4.4878: Block bitmap for bg 0 marked uninitialized [ 329.143222][T17853] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 329.152529][T17853] EXT4-fs (loop4): 1 orphan inode deleted [ 329.160694][T17853] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 329.170208][T17853] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 329.242279][T17856] loop4: detected capacity change from 0 to 1024 [ 329.248870][T17856] EXT4-fs: Ignoring removed bh option [ 329.254906][T17856] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 329.265623][T17856] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 329.274599][T17856] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 2: comm syz.4.4879: lblock 2 mapped to illegal pblock 2 (length 1) [ 329.288727][T17856] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 48: comm syz.4.4879: lblock 0 mapped to illegal pblock 48 (length 1) [ 329.303404][T17856] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.4879: Failed to acquire dquot type 0 [ 329.314781][T17856] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 329.324282][T17856] EXT4-fs error (device loop4): ext4_evict_inode:254: inode #11: comm syz.4.4879: mark_inode_dirty error [ 329.335663][T17856] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 329.345871][T17856] EXT4-fs (loop4): 1 orphan inode deleted [ 329.359051][ T3435] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 329.373431][ T3435] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:7: Failed to release dquot type 0 [ 329.385350][T17856] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 48: comm syz.4.4879: lblock 0 mapped to illegal pblock 48 (length 1) [ 329.461914][T17859] loop4: detected capacity change from 0 to 256 [ 329.566153][T17862] loop4: detected capacity change from 0 to 128 [ 329.576976][T17862] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 329.584859][T17862] FAT-fs (loop4): Filesystem has been set read-only [ 329.592597][T17862] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 329.600492][T17862] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 329.667330][T17869] loop2: detected capacity change from 0 to 512 [ 329.710544][T17869] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 329.755698][T17869] netlink: 'syz.2.4884': attribute type 4 has an invalid length. [ 329.841240][T17880] loop0: detected capacity change from 0 to 1024 [ 329.853750][T17880] ext4 filesystem being mounted at /490/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 329.878961][ T144] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 329.895603][ T144] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 319 with max blocks 1 with error 28 [ 329.907970][ T144] EXT4-fs (loop0): This should not happen!! Data will be lost [ 329.907970][ T144] [ 329.917625][ T144] EXT4-fs (loop0): Total free blocks count 0 [ 329.923685][ T144] EXT4-fs (loop0): Free/Dirty block details [ 329.929599][ T144] EXT4-fs (loop0): free_blocks=4293918720 [ 329.935337][ T144] EXT4-fs (loop0): dirty_blocks=16 [ 329.940494][ T144] EXT4-fs (loop0): Block reservation details [ 329.946471][ T144] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 330.024886][ T51] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.033997][ T51] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.093521][T17893] loop1: detected capacity change from 0 to 512 [ 330.100353][T17893] EXT4-fs: Ignoring removed oldalloc option [ 330.102007][ T51] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.115404][T17893] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 330.119241][T17895] loop0: detected capacity change from 0 to 1024 [ 330.141275][ T51] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.152617][T17893] EXT4-fs (loop1): 1 truncate cleaned up [ 330.153845][T17895] EXT4-fs: Ignoring removed bh option [ 330.166182][T17897] loop2: detected capacity change from 0 to 8192 [ 330.178039][T17895] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 330.196589][T17895] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 330.212961][T17903] loop1: detected capacity change from 0 to 1024 [ 330.217315][T17897] loop2: p1 p2 p3 p4[DM] [ 330.220072][T17903] EXT4-fs: Ignoring removed bh option [ 330.224184][T17897] loop2: p1 size 835331 extends beyond EOD, truncated [ 330.237775][T17903] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 330.249091][T17895] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 2: comm syz.0.4891: lblock 2 mapped to illegal pblock 2 (length 1) [ 330.266844][T17897] loop2: p2 size 16777223 extends beyond EOD, truncated [ 330.284317][T17897] loop2: p3 start 1052673 is beyond EOD, truncated [ 330.290886][T17897] loop2: p4 size 262144 extends beyond EOD, truncated [ 330.300143][T17903] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 330.308395][T17895] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 48: comm syz.0.4891: lblock 0 mapped to illegal pblock 48 (length 1) [ 330.340782][T17903] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 2: comm syz.1.4894: lblock 2 mapped to illegal pblock 2 (length 1) [ 330.359835][T17895] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.4891: Failed to acquire dquot type 0 [ 330.377065][T17903] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 48: comm syz.1.4894: lblock 0 mapped to illegal pblock 48 (length 1) [ 330.391459][T17895] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 330.401065][T17895] EXT4-fs error (device loop0): ext4_evict_inode:254: inode #11: comm syz.0.4891: mark_inode_dirty error [ 330.412840][T17903] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.4894: Failed to acquire dquot type 0 [ 330.424273][T17895] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 330.434650][T17903] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 330.444060][T17895] EXT4-fs (loop0): 1 orphan inode deleted [ 330.450171][ T144] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 330.464271][T17903] EXT4-fs error (device loop1): ext4_evict_inode:254: inode #11: comm syz.1.4894: mark_inode_dirty error [ 330.475606][T17903] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 330.486137][ T144] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:5: Failed to release dquot type 0 [ 330.500846][T17903] EXT4-fs (loop1): 1 orphan inode deleted [ 330.511745][T17912] loop4: detected capacity change from 0 to 512 [ 330.521105][ T144] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 330.525567][T17912] EXT4-fs: Ignoring removed mblk_io_submit option [ 330.537624][ T144] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:5: Failed to release dquot type 0 [ 330.542042][T17912] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 330.564483][T17895] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 48: comm syz.0.4891: lblock 0 mapped to illegal pblock 48 (length 1) [ 330.564533][T17903] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 48: comm syz.1.4894: lblock 0 mapped to illegal pblock 48 (length 1) [ 330.579416][T17912] EXT4-fs (loop4): 1 truncate cleaned up [ 330.680270][T17897] netlink: 'syz.2.4892': attribute type 27 has an invalid length. [ 330.700892][T17915] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4899'. [ 330.755682][T17917] loop1: detected capacity change from 0 to 1024 [ 330.800719][T17917] ext4 filesystem being mounted at /206/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 330.837692][T17918] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=17918 comm=syz.0.4899 [ 330.865717][T17917] EXT4-fs error (device loop1): ext4_map_blocks:814: inode #15: block 1: comm syz.1.4900: lblock 1 mapped to illegal pblock 1 (length 15) [ 330.894605][T17917] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 117 [ 330.907056][T17917] EXT4-fs (loop1): This should not happen!! Data will be lost [ 330.907056][T17917] [ 330.920394][T17917] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 330.935906][T17925] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #15: block 1: comm syz.1.4900: lblock 1 mapped to illegal pblock 1 (length 3) [ 330.952002][T17925] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #15: block 1: comm syz.1.4900: lblock 1 mapped to illegal pblock 1 (length 3) [ 330.972339][T17925] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #15: block 1: comm syz.1.4900: lblock 1 mapped to illegal pblock 1 (length 3) [ 331.077545][ T29] kauditd_printk_skb: 302 callbacks suppressed [ 331.077558][ T29] audit: type=1326 audit(1755285735.544:20783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17930 comm="syz.1.4903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe059c2ebe9 code=0x7ffc0000 [ 331.109545][ T29] audit: type=1326 audit(1755285735.554:20784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17930 comm="syz.1.4903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe059c2ebe9 code=0x7ffc0000 [ 331.119609][T17931] loop1: detected capacity change from 0 to 256 [ 331.133208][ T29] audit: type=1326 audit(1755285735.554:20785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17930 comm="syz.1.4903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7fe059c2ebe9 code=0x7ffc0000 [ 331.163100][ T29] audit: type=1326 audit(1755285735.554:20786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17930 comm="syz.1.4903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe059c2ebe9 code=0x7ffc0000 [ 331.186815][ T29] audit: type=1326 audit(1755285735.554:20787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17930 comm="syz.1.4903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe059c2ebe9 code=0x7ffc0000 [ 331.210483][ T29] audit: type=1326 audit(1755285735.554:20788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17930 comm="syz.1.4903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe059c2ebe9 code=0x7ffc0000 [ 331.234063][ T29] audit: type=1326 audit(1755285735.554:20789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17930 comm="syz.1.4903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fe059c2ebe9 code=0x7ffc0000 [ 331.257674][ T29] audit: type=1326 audit(1755285735.554:20790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17930 comm="syz.1.4903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fe059c2ec23 code=0x7ffc0000 [ 331.281082][ T29] audit: type=1326 audit(1755285735.554:20791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17930 comm="syz.1.4903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fe059c2d69f code=0x7ffc0000 [ 331.304564][ T29] audit: type=1326 audit(1755285735.554:20792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17930 comm="syz.1.4903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fe059c2ec77 code=0x7ffc0000 [ 331.401602][T17941] loop1: detected capacity change from 0 to 512 [ 331.408057][T17943] loop4: detected capacity change from 0 to 512 [ 331.415688][T17943] EXT4-fs: Ignoring removed mblk_io_submit option [ 331.418053][ T174] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.422665][T17941] EXT4-fs: Ignoring removed orlov option [ 331.436975][T17941] EXT4-fs: Ignoring removed nomblk_io_submit option [ 331.444529][T17943] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 331.454813][T17941] EXT4-fs (loop1): VFS: Can't find ext4 filesystem [ 331.459166][ T31] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.473510][T17943] EXT4-fs (loop4): 1 truncate cleaned up [ 331.479730][ T31] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.494723][T17949] loop3: detected capacity change from 0 to 1024 [ 331.509381][ T31] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.531320][T17949] ext4 filesystem being mounted at /469/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 331.544099][T17951] loop2: detected capacity change from 0 to 512 [ 331.551204][T17951] EXT4-fs: Ignoring removed orlov option [ 331.557550][T17949] EXT4-fs error (device loop3): ext4_map_blocks:814: inode #15: block 1: comm syz.3.4911: lblock 1 mapped to illegal pblock 1 (length 15) [ 331.572180][T17951] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 331.581599][T17949] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 117 [ 331.594048][T17949] EXT4-fs (loop3): This should not happen!! Data will be lost [ 331.594048][T17949] [ 331.605028][T17951] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 331.606447][T17949] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 331.628718][T17951] EXT4-fs error (device loop2): ext4_iget_extra_inode:5104: inode #15: comm syz.2.4913: corrupted in-inode xattr: e_value size too large [ 331.643222][T17951] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.4913: couldn't read orphan inode 15 (err -117) [ 331.655424][T17961] loop1: detected capacity change from 0 to 256 [ 331.667437][T17951] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4913'. [ 331.676781][T17949] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #15: block 1: comm syz.3.4911: lblock 1 mapped to illegal pblock 1 (length 3) [ 331.692310][T17949] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #15: block 1: comm syz.3.4911: lblock 1 mapped to illegal pblock 1 (length 3) [ 331.709180][T17949] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #15: block 1: comm syz.3.4911: lblock 1 mapped to illegal pblock 1 (length 3) [ 331.735056][T17949] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #15: block 1: comm syz.3.4911: lblock 1 mapped to illegal pblock 1 (length 3) [ 331.816969][T17966] loop1: detected capacity change from 0 to 512 [ 331.869806][T17966] EXT4-fs warning (device loop1): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 331.896953][T17966] netlink: 'syz.1.4917': attribute type 4 has an invalid length. [ 331.957809][T17974] loop3: detected capacity change from 0 to 1024 [ 331.991109][T17974] ext4 filesystem being mounted at /472/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 332.019259][T17980] loop1: detected capacity change from 0 to 512 [ 332.026753][T17980] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 332.038111][T17981] netlink: 'syz.2.4913': attribute type 1 has an invalid length. [ 332.045920][T17981] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4913'. [ 332.047284][T17974] EXT4-fs error (device loop3): ext4_map_blocks:814: inode #15: block 1: comm syz.3.4920: lblock 1 mapped to illegal pblock 1 (length 15) [ 332.055006][T17981] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 332.070056][T17974] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 117 [ 332.096485][T17974] EXT4-fs (loop3): This should not happen!! Data will be lost [ 332.096485][T17974] [ 332.099495][T17980] EXT4-fs (loop1): 1 truncate cleaned up [ 332.107171][T17974] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 332.255396][T17984] loop3: detected capacity change from 0 to 8192 [ 332.309174][T17984] loop3: p1 p2 p3 p4[DM] [ 332.313584][T17984] loop3: p1 size 835331 extends beyond EOD, truncated [ 332.321681][T17984] loop3: p2 size 16777223 extends beyond EOD, truncated [ 332.329277][T17984] loop3: p3 start 1052673 is beyond EOD, truncated [ 332.335794][T17984] loop3: p4 size 262144 extends beyond EOD, truncated [ 332.385936][T17986] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4924'. [ 332.445255][T17993] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=17993 comm=syz.1.4924 [ 332.477574][T17992] syzkaller0: entered promiscuous mode [ 332.483114][T17992] syzkaller0: entered allmulticast mode [ 332.506082][T17995] loop2: detected capacity change from 0 to 1024 [ 332.519800][T17995] EXT4-fs: Ignoring removed bh option [ 332.534121][T17995] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 332.559761][T17995] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 332.574351][T17995] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 2: comm syz.2.4929: lblock 2 mapped to illegal pblock 2 (length 1) [ 332.577947][T18005] loop0: detected capacity change from 0 to 256 [ 332.598046][T18003] loop1: detected capacity change from 0 to 128 [ 332.606374][T17995] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 48: comm syz.2.4929: lblock 0 mapped to illegal pblock 48 (length 1) [ 332.608170][T18003] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 332.628406][T18003] FAT-fs (loop1): Filesystem has been set read-only [ 332.647244][T18003] bio_check_eod: 79709 callbacks suppressed [ 332.647282][T18003] syz.1.4932: attempt to access beyond end of device [ 332.647282][T18003] loop1: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 332.658407][T17995] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.4929: Failed to acquire dquot type 0 [ 332.667912][T18003] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 332.686112][T18003] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 332.694905][T18007] syz.1.4932: attempt to access beyond end of device [ 332.694905][T18007] loop1: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 332.699359][T17984] netlink: 'syz.3.4923': attribute type 27 has an invalid length. [ 332.708260][T18007] buffer_io_error: 78270 callbacks suppressed [ 332.708333][T18007] Buffer I/O error on dev loop1, logical block 2065, async page read [ 332.730616][T18007] syz.1.4932: attempt to access beyond end of device [ 332.730616][T18007] loop1: rw=0, sector=2066, nr_sectors = 1 limit=128 [ 332.731151][T17995] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 332.743875][T18007] Buffer I/O error on dev loop1, logical block 2066, async page read [ 332.754703][T17995] EXT4-fs error (device loop2): ext4_evict_inode:254: inode #11: comm syz.2.4929: mark_inode_dirty error [ 332.773549][T17995] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 332.783718][T18007] syz.1.4932: attempt to access beyond end of device [ 332.783718][T18007] loop1: rw=0, sector=2067, nr_sectors = 1 limit=128 [ 332.783823][T18007] Buffer I/O error on dev loop1, logical block 2067, async page read [ 332.783870][T18007] syz.1.4932: attempt to access beyond end of device [ 332.783870][T18007] loop1: rw=0, sector=2068, nr_sectors = 1 limit=128 [ 332.818374][T18007] Buffer I/O error on dev loop1, logical block 2068, async page read [ 332.828613][T18007] syz.1.4932: attempt to access beyond end of device [ 332.828613][T18007] loop1: rw=0, sector=2069, nr_sectors = 1 limit=128 [ 332.835881][T17995] EXT4-fs (loop2): 1 orphan inode deleted [ 332.841861][T18007] Buffer I/O error on dev loop1, logical block 2069, async page read [ 332.842768][T18007] syz.1.4932: attempt to access beyond end of device [ 332.842768][T18007] loop1: rw=0, sector=2070, nr_sectors = 1 limit=128 [ 332.868952][T18007] Buffer I/O error on dev loop1, logical block 2070, async page read [ 332.877353][ T174] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 332.885655][T18007] syz.1.4932: attempt to access beyond end of device [ 332.885655][T18007] loop1: rw=0, sector=2071, nr_sectors = 1 limit=128 [ 332.904736][T18007] Buffer I/O error on dev loop1, logical block 2071, async page read [ 332.915128][T18007] syz.1.4932: attempt to access beyond end of device [ 332.915128][T18007] loop1: rw=0, sector=2072, nr_sectors = 1 limit=128 [ 332.928407][T18007] Buffer I/O error on dev loop1, logical block 2072, async page read [ 332.938479][T18007] syz.1.4932: attempt to access beyond end of device [ 332.938479][T18007] loop1: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 332.951763][T18007] Buffer I/O error on dev loop1, logical block 2065, async page read [ 332.961197][T18007] Buffer I/O error on dev loop1, logical block 2066, async page read [ 332.972941][ T174] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:6: Failed to release dquot type 0 [ 332.976912][T18009] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4934'. [ 332.999058][T17995] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 48: comm syz.2.4929: lblock 0 mapped to illegal pblock 48 (length 1) [ 333.036267][T18012] loop4: detected capacity change from 0 to 1024 [ 333.101705][T18012] ext4 filesystem being mounted at /441/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 333.126223][T18012] EXT4-fs error (device loop4): ext4_map_blocks:814: inode #15: block 1: comm syz.4.4935: lblock 1 mapped to illegal pblock 1 (length 15) [ 333.131829][T18017] loop2: detected capacity change from 0 to 512 [ 333.141874][T18012] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 117 [ 333.156587][T18011] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=18011 comm=syz.0.4934 [ 333.159231][T18012] EXT4-fs (loop4): This should not happen!! Data will be lost [ 333.159231][T18012] [ 333.187594][T18017] EXT4-fs: Ignoring removed orlov option [ 333.193317][T18017] EXT4-fs: Ignoring removed nomblk_io_submit option [ 333.200195][T18017] EXT4-fs (loop2): VFS: Can't find ext4 filesystem [ 333.354852][T18026] loop3: detected capacity change from 0 to 512 [ 333.368813][T18026] EXT4-fs: Ignoring removed oldalloc option [ 333.379542][T18026] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 333.397623][T18026] EXT4-fs (loop3): 1 truncate cleaned up [ 333.416553][ T51] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.436680][ T51] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.481515][ T51] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.491240][ T51] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.507706][T18041] loop1: detected capacity change from 0 to 512 [ 333.514796][T18039] loop0: detected capacity change from 0 to 256 [ 333.516265][T18041] EXT4-fs: Ignoring removed orlov option [ 333.522854][T18037] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4942'. [ 333.528404][T18041] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 333.547446][T18041] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 333.562173][T18041] EXT4-fs error (device loop1): ext4_iget_extra_inode:5104: inode #15: comm syz.1.4946: corrupted in-inode xattr: e_value size too large [ 333.585337][T18041] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.4946: couldn't read orphan inode 15 (err -117) [ 333.593807][T18037] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=18037 comm=syz.3.4942 [ 333.617345][T18047] loop0: detected capacity change from 0 to 1024 [ 333.641649][T18041] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4946'. [ 333.652339][T18047] ext4 filesystem being mounted at /503/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 333.668068][T18047] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 333.687463][T18047] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 319 with max blocks 1 with error 28 [ 333.699949][T18047] EXT4-fs (loop0): This should not happen!! Data will be lost [ 333.699949][T18047] [ 333.709652][T18047] EXT4-fs (loop0): Total free blocks count 0 [ 333.715620][T18047] EXT4-fs (loop0): Free/Dirty block details [ 333.721542][T18047] EXT4-fs (loop0): free_blocks=4293918720 [ 333.727274][T18047] EXT4-fs (loop0): dirty_blocks=16 [ 333.732493][T18047] EXT4-fs (loop0): Block reservation details [ 333.732506][T18047] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 333.747785][T18053] loop3: detected capacity change from 0 to 1024 [ 333.760301][T18053] ext4 filesystem being mounted at /477/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 333.794460][T18053] EXT4-fs error (device loop3): ext4_map_blocks:814: inode #15: block 1: comm syz.3.4950: lblock 1 mapped to illegal pblock 1 (length 15) [ 333.811634][T18053] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 117 [ 333.824064][T18053] EXT4-fs (loop3): This should not happen!! Data will be lost [ 333.824064][T18053] [ 333.834740][T18053] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 333.877963][T18062] loop0: detected capacity change from 0 to 512 [ 333.884204][T18063] netlink: 'syz.1.4946': attribute type 1 has an invalid length. [ 333.884220][T18063] netlink: 152 bytes leftover after parsing attributes in process `syz.1.4946'. [ 333.884234][T18063] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 333.916519][T18062] EXT4-fs: Ignoring removed oldalloc option [ 333.922969][T18062] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 333.934988][T18060] loop3: detected capacity change from 0 to 128 [ 333.935421][T18062] EXT4-fs (loop0): 1 truncate cleaned up [ 333.948360][T18060] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 333.956355][T18060] FAT-fs (loop3): Filesystem has been set read-only [ 333.964928][T18060] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 333.972916][T18060] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 334.352429][T18075] loop2: detected capacity change from 0 to 256 [ 334.414602][T18082] loop1: detected capacity change from 0 to 1024 [ 334.433647][T18082] ext4 filesystem being mounted at /223/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 334.461234][T18082] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 334.491413][T18082] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 319 with max blocks 1 with error 28 [ 334.503933][T18082] EXT4-fs (loop1): This should not happen!! Data will be lost [ 334.503933][T18082] [ 334.513893][T18082] EXT4-fs (loop1): Total free blocks count 0 [ 334.519912][T18082] EXT4-fs (loop1): Free/Dirty block details [ 334.525787][T18082] EXT4-fs (loop1): free_blocks=4293918720 [ 334.531788][T18082] EXT4-fs (loop1): dirty_blocks=16 [ 334.537328][T18082] EXT4-fs (loop1): Block reservation details [ 334.543334][T18082] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 334.584869][T18094] loop2: detected capacity change from 0 to 512 [ 334.602049][T18094] EXT4-fs: Ignoring removed orlov option [ 334.607934][T18094] EXT4-fs: Ignoring removed nomblk_io_submit option [ 334.615596][T18094] EXT4-fs (loop2): VFS: Can't find ext4 filesystem [ 334.655619][T18100] loop2: detected capacity change from 0 to 512 [ 334.670787][T18102] tmpfs: Unknown parameter '0x0000000000000006' [ 334.672735][T18100] EXT4-fs: Ignoring removed mblk_io_submit option [ 334.679725][T18102] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 334.692037][T18102] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 334.695489][T18100] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 334.712541][T18102] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4970'. [ 334.735240][T18100] EXT4-fs (loop2): 1 truncate cleaned up [ 334.760504][T18105] loop0: detected capacity change from 0 to 256 [ 334.813480][T18112] tmpfs: Unknown parameter '0x0000000000000006' [ 334.821928][T18112] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 334.830579][T18112] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 334.840465][T18112] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4974'. [ 334.872952][T18117] loop0: detected capacity change from 0 to 1024 [ 334.880041][T18117] EXT4-fs: Ignoring removed nobh option [ 334.885774][T18117] EXT4-fs: Ignoring removed bh option [ 334.900934][T18117] ext4 filesystem being mounted at /509/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 335.032619][T18131] loop0: detected capacity change from 0 to 1024 [ 335.039275][T18131] EXT4-fs: Ignoring removed bh option [ 335.045089][T18131] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 335.056461][T18131] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 335.066281][T18131] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 2: comm syz.0.4982: lblock 2 mapped to illegal pblock 2 (length 1) [ 335.080660][T18131] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 48: comm syz.0.4982: lblock 0 mapped to illegal pblock 48 (length 1) [ 335.095046][T18131] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.4982: Failed to acquire dquot type 0 [ 335.107042][T18131] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 335.117582][T18131] EXT4-fs error (device loop0): ext4_evict_inode:254: inode #11: comm syz.0.4982: mark_inode_dirty error [ 335.129148][T18131] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 335.139824][T18131] EXT4-fs (loop0): 1 orphan inode deleted [ 335.151550][ T144] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 335.166113][ T144] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:5: Failed to release dquot type 0 [ 335.178203][T18131] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 48: comm syz.0.4982: lblock 0 mapped to illegal pblock 48 (length 1) [ 335.323734][T18138] loop1: detected capacity change from 0 to 512 [ 335.332124][T18138] EXT4-fs: Ignoring removed orlov option [ 335.337987][T18138] EXT4-fs: Ignoring removed nomblk_io_submit option [ 335.343887][T18140] loop0: detected capacity change from 0 to 512 [ 335.346230][T18138] EXT4-fs (loop1): VFS: Can't find ext4 filesystem [ 335.351457][T18140] EXT4-fs: Ignoring removed oldalloc option [ 335.364222][T18140] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 335.380406][T18140] EXT4-fs (loop0): 1 truncate cleaned up [ 335.444398][T18149] loop3: detected capacity change from 0 to 512 [ 335.460460][T18149] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 335.482511][T18149] netlink: 'syz.3.4991': attribute type 4 has an invalid length. [ 335.534742][T18157] loop0: detected capacity change from 0 to 1024 [ 335.546408][T18161] loop2: detected capacity change from 0 to 512 [ 335.554140][T18161] EXT4-fs: Ignoring removed orlov option [ 335.560659][T18161] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 335.562748][T18164] loop3: detected capacity change from 0 to 1024 [ 335.570553][T18157] ext4 filesystem being mounted at /520/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 335.576571][T18161] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 335.594383][T18161] EXT4-fs error (device loop2): ext4_iget_extra_inode:5104: inode #15: comm syz.2.4993: corrupted in-inode xattr: e_value size too large [ 335.595330][T18157] EXT4-fs error (device loop0): ext4_map_blocks:814: inode #15: block 1: comm syz.0.4994: lblock 1 mapped to illegal pblock 1 (length 15) [ 335.609447][T18161] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.4993: couldn't read orphan inode 15 (err -117) [ 335.623458][T18157] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 117 [ 335.636319][T18164] ext4 filesystem being mounted at /486/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 335.646710][T18157] EXT4-fs (loop0): This should not happen!! Data will be lost [ 335.646710][T18157] [ 335.664661][T18164] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 335.675269][T18157] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 335.697256][T18169] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #15: block 1: comm syz.0.4994: lblock 1 mapped to illegal pblock 1 (length 3) [ 335.713098][T18169] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #15: block 1: comm syz.0.4994: lblock 1 mapped to illegal pblock 1 (length 3) [ 335.713907][T18161] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4993'. [ 335.742455][T18169] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #15: block 1: comm syz.0.4994: lblock 1 mapped to illegal pblock 1 (length 3) [ 335.762486][T18169] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #15: block 1: comm syz.0.4994: lblock 1 mapped to illegal pblock 1 (length 3) [ 335.786030][T18171] loop4: detected capacity change from 0 to 512 [ 335.793627][T18171] EXT4-fs: Ignoring removed orlov option [ 335.814272][T18171] EXT4-fs: Ignoring removed nomblk_io_submit option [ 335.827502][T18171] EXT4-fs (loop4): VFS: Can't find ext4 filesystem [ 335.834516][T18173] tmpfs: Unknown parameter '0x0000000000000006' [ 335.843740][T18173] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 335.858767][T18173] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 335.886370][T18179] loop0: detected capacity change from 0 to 512 [ 335.893443][T18179] EXT4-fs: Ignoring removed orlov option [ 335.899178][T18179] EXT4-fs: Ignoring removed nomblk_io_submit option [ 335.910932][T18179] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 335.956361][T18187] loop4: detected capacity change from 0 to 512 [ 335.958699][T18189] loop0: detected capacity change from 0 to 512 [ 335.963313][T18187] EXT4-fs: Ignoring removed mblk_io_submit option [ 335.969313][T18189] EXT4-fs: Ignoring removed mblk_io_submit option [ 335.976404][T18187] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 335.982185][T18189] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 335.993361][T18190] netlink: 'syz.2.4993': attribute type 1 has an invalid length. [ 336.002862][T18189] EXT4-fs (loop0): 1 truncate cleaned up [ 336.009380][T18190] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 336.032391][T18187] EXT4-fs (loop4): 1 truncate cleaned up [ 336.516376][T18212] loop3: detected capacity change from 0 to 512 [ 336.532620][T18212] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 336.559999][T18212] EXT4-fs (loop3): 1 truncate cleaned up [ 336.634639][T18219] loop2: detected capacity change from 0 to 512 [ 336.642077][T18219] EXT4-fs: Ignoring removed oldalloc option [ 336.657829][T18219] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 336.686009][T18219] EXT4-fs (loop2): 1 truncate cleaned up [ 336.775528][T18225] loop2: detected capacity change from 0 to 512 [ 336.784299][T18225] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 336.833698][T18225] EXT4-fs (loop2): orphan cleanup on readonly fs [ 336.851143][T18225] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:517: comm syz.2.5019: Block bitmap for bg 0 marked uninitialized [ 336.878255][T18225] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 336.897589][T18225] EXT4-fs (loop2): 1 orphan inode deleted [ 336.905025][T18228] tmpfs: Unknown parameter '0x0000000000000006' [ 336.919500][T18225] EXT4-fs: Ignoring sb option on remount [ 336.925155][T18225] EXT4-fs: Ignoring removed orlov option [ 336.931001][T18225] EXT4-fs: Ignoring removed nomblk_io_submit option [ 336.937619][T18225] EXT4-fs: Remounting fs w/o journal so ignoring data_err option [ 336.945718][T18225] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 336.946715][T18228] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 336.970877][T18225] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 336.988635][T18228] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 337.006690][T18228] __nla_validate_parse: 3 callbacks suppressed [ 337.006702][T18228] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5020'. [ 337.030931][T18230] loop2: detected capacity change from 0 to 512 [ 337.037462][T18230] EXT4-fs: Ignoring removed orlov option [ 337.047336][T18230] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 337.064968][T18234] loop1: detected capacity change from 0 to 1024 [ 337.080415][T18230] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 337.089898][T18234] ext4 filesystem being mounted at /231/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 337.094738][T18240] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5024'. [ 337.110706][T18230] EXT4-fs error (device loop2): ext4_iget_extra_inode:5104: inode #15: comm syz.2.5021: corrupted in-inode xattr: e_value size too large [ 337.125156][T18234] EXT4-fs error (device loop1): ext4_map_blocks:814: inode #15: block 1: comm syz.1.5023: lblock 1 mapped to illegal pblock 1 (length 15) [ 337.132042][T18230] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.5021: couldn't read orphan inode 15 (err -117) [ 337.161108][T18234] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 117 [ 337.173485][T18234] EXT4-fs (loop1): This should not happen!! Data will be lost [ 337.173485][T18234] [ 337.290011][T18241] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=18241 comm=syz.0.5024 [ 337.306396][T18242] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5021'. [ 337.324010][T18244] loop1: detected capacity change from 0 to 1024 [ 337.370617][T18244] ext4 filesystem being mounted at /232/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 337.383482][T18247] netlink: 'syz.2.5021': attribute type 1 has an invalid length. [ 337.391350][T18247] netlink: 152 bytes leftover after parsing attributes in process `syz.2.5021'. [ 337.400470][T18247] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 337.424379][T18244] EXT4-fs error (device loop1): ext4_map_blocks:814: inode #15: block 1: comm syz.1.5025: lblock 1 mapped to illegal pblock 1 (length 15) [ 337.438951][T18244] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 117 [ 337.451498][T18244] EXT4-fs (loop1): This should not happen!! Data will be lost [ 337.451498][T18244] [ 337.462241][T18244] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 337.477052][T18250] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #15: block 1: comm syz.1.5025: lblock 1 mapped to illegal pblock 1 (length 3) [ 337.498684][T18252] loop3: detected capacity change from 0 to 512 [ 337.502059][T18250] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #15: block 1: comm syz.1.5025: lblock 1 mapped to illegal pblock 1 (length 3) [ 337.519536][T18252] EXT4-fs: Ignoring removed mblk_io_submit option [ 337.519731][T18250] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #15: block 1: comm syz.1.5025: lblock 1 mapped to illegal pblock 1 (length 3) [ 337.542781][T18254] loop0: detected capacity change from 0 to 1024 [ 337.549563][T18252] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 337.559886][T18254] EXT4-fs: Ignoring removed nobh option [ 337.565644][T18254] EXT4-fs: Ignoring removed bh option [ 337.576658][T18252] EXT4-fs (loop3): 1 truncate cleaned up [ 337.594506][T18254] ext4 filesystem being mounted at /528/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 337.614225][T18263] loop1: detected capacity change from 0 to 512 [ 337.621107][T18263] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 337.633351][T18262] loop4: detected capacity change from 0 to 512 [ 337.640268][T18263] EXT4-fs (loop1): orphan cleanup on readonly fs [ 337.648040][T18262] EXT4-fs: Ignoring removed mblk_io_submit option [ 337.655945][T18263] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:517: comm syz.1.5031: Block bitmap for bg 0 marked uninitialized [ 337.669921][T18263] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 337.670376][T18262] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 337.695922][T18262] EXT4-fs (loop4): 1 truncate cleaned up [ 337.697037][T18263] EXT4-fs (loop1): 1 orphan inode deleted [ 337.728366][T18269] loop0: detected capacity change from 0 to 512 [ 337.735830][T18269] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 337.739145][T18263] EXT4-fs: Ignoring sb option on remount [ 337.751399][T18263] EXT4-fs: Ignoring removed orlov option [ 337.757355][T18263] EXT4-fs: Ignoring removed nomblk_io_submit option [ 337.764012][T18263] EXT4-fs: Remounting fs w/o journal so ignoring data_err option [ 337.772639][T18263] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 337.783277][T18263] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 337.789202][T18269] EXT4-fs (loop0): 1 truncate cleaned up [ 337.873972][T18276] loop1: detected capacity change from 0 to 1024 [ 337.891585][ T29] kauditd_printk_skb: 398 callbacks suppressed [ 337.891600][ T29] audit: type=1326 audit(1755285742.364:21181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18277 comm="syz.2.5035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29d7dbebe9 code=0x7ffc0000 [ 337.938708][T18276] ext4 filesystem being mounted at /235/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 337.948105][ T29] audit: type=1326 audit(1755285742.364:21182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18277 comm="syz.2.5035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f29d7dbebe9 code=0x7ffc0000 [ 337.972746][ T29] audit: type=1326 audit(1755285742.364:21183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18277 comm="syz.2.5035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29d7dbebe9 code=0x7ffc0000 [ 337.996358][ T29] audit: type=1326 audit(1755285742.364:21184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18277 comm="syz.2.5035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=217 compat=0 ip=0x7f29d7dbebe9 code=0x7ffc0000 [ 338.020011][ T29] audit: type=1326 audit(1755285742.364:21185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18277 comm="syz.2.5035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29d7dbebe9 code=0x7ffc0000 [ 338.043668][ T29] audit: type=1326 audit(1755285742.364:21186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18277 comm="syz.2.5035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f29d7dbebe9 code=0x7ffc0000 [ 338.056841][T18276] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, [ 338.067260][ T29] audit: type=1326 audit(1755285742.364:21187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18277 comm="syz.2.5035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29d7dbebe9 code=0x7ffc0000 [ 338.075537][T18276] block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 338.099097][ T29] audit: type=1326 audit(1755285742.364:21188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18277 comm="syz.2.5035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f29d7dbebe9 code=0x7ffc0000 [ 338.131350][ T29] audit: type=1326 audit(1755285742.364:21189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18277 comm="syz.2.5035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29d7dbebe9 code=0x7ffc0000 [ 338.154918][ T29] audit: type=1326 audit(1755285742.364:21190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18277 comm="syz.2.5035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29d7dbebe9 code=0x7ffc0000 [ 338.214928][T18278] loop2: detected capacity change from 0 to 128 [ 338.229596][T18278] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 338.237454][T18278] FAT-fs (loop2): Filesystem has been set read-only [ 338.246048][T18278] bio_check_eod: 37838 callbacks suppressed [ 338.246061][T18278] syz.2.5035: attempt to access beyond end of device [ 338.246061][T18278] loop2: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 338.268039][T18278] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 338.275902][T18278] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 338.284278][T18284] loop1: detected capacity change from 0 to 512 [ 338.286063][T18285] syz.2.5035: attempt to access beyond end of device [ 338.286063][T18285] loop2: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 338.291081][T18284] EXT4-fs: Ignoring removed mblk_io_submit option [ 338.304026][T18285] buffer_io_error: 37358 callbacks suppressed [ 338.304039][T18285] Buffer I/O error on dev loop2, logical block 2065, async page read [ 338.326107][T18285] syz.2.5035: attempt to access beyond end of device [ 338.326107][T18285] loop2: rw=0, sector=2066, nr_sectors = 1 limit=128 [ 338.339356][T18285] Buffer I/O error on dev loop2, logical block 2066, async page read [ 338.357813][T18284] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 338.372138][T18287] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5037'. [ 338.389878][T18284] EXT4-fs (loop1): 1 truncate cleaned up [ 338.405747][T18285] syz.2.5035: attempt to access beyond end of device [ 338.405747][T18285] loop2: rw=0, sector=2067, nr_sectors = 1 limit=128 [ 338.418998][T18285] Buffer I/O error on dev loop2, logical block 2067, async page read [ 338.447553][T18285] syz.2.5035: attempt to access beyond end of device [ 338.447553][T18285] loop2: rw=0, sector=2068, nr_sectors = 1 limit=128 [ 338.461049][T18285] Buffer I/O error on dev loop2, logical block 2068, async page read [ 338.522797][T18285] syz.2.5035: attempt to access beyond end of device [ 338.522797][T18285] loop2: rw=0, sector=2069, nr_sectors = 1 limit=128 [ 338.536370][T18285] Buffer I/O error on dev loop2, logical block 2069, async page read [ 338.547940][T18289] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=18289 comm=syz.0.5037 [ 338.569437][T18293] tmpfs: Unknown parameter '0x0000000000000006' [ 338.577256][T18285] syz.2.5035: attempt to access beyond end of device [ 338.577256][T18285] loop2: rw=0, sector=2070, nr_sectors = 1 limit=128 [ 338.590633][T18285] Buffer I/O error on dev loop2, logical block 2070, async page read [ 338.609515][T18293] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 338.617932][T18293] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 338.622231][T18285] syz.2.5035: attempt to access beyond end of device [ 338.622231][T18285] loop2: rw=0, sector=2071, nr_sectors = 1 limit=128 [ 338.639040][T18285] Buffer I/O error on dev loop2, logical block 2071, async page read [ 338.652673][T18293] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5038'. [ 338.664138][T18285] syz.2.5035: attempt to access beyond end of device [ 338.664138][T18285] loop2: rw=0, sector=2072, nr_sectors = 1 limit=128 [ 338.677537][T18285] Buffer I/O error on dev loop2, logical block 2072, async page read [ 338.696089][T18278] syz.2.5035: attempt to access beyond end of device [ 338.696089][T18278] loop2: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 338.709469][T18278] Buffer I/O error on dev loop2, logical block 2065, async page read [ 338.724425][T18278] Buffer I/O error on dev loop2, logical block 2066, async page read [ 338.759767][T18298] tmpfs: Unknown parameter '0x0000000000000006' [ 338.779655][T18298] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 338.802383][T18298] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 338.827011][T18298] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5040'. [ 338.888134][T18312] loop3: detected capacity change from 0 to 1024 [ 338.895386][T18312] EXT4-fs: Ignoring removed bh option [ 338.901349][T18312] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 338.914112][T18312] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 338.924460][T18312] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 2: comm syz.3.5047: lblock 2 mapped to illegal pblock 2 (length 1) [ 338.938957][T18315] loop2: detected capacity change from 0 to 512 [ 338.945518][T18312] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 48: comm syz.3.5047: lblock 0 mapped to illegal pblock 48 (length 1) [ 338.960323][T18312] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.5047: Failed to acquire dquot type 0 [ 338.972081][T18312] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 338.982400][T18312] EXT4-fs error (device loop3): ext4_evict_inode:254: inode #11: comm syz.3.5047: mark_inode_dirty error [ 338.994434][T18312] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 339.004944][T18312] EXT4-fs (loop3): 1 orphan inode deleted [ 339.005356][T18315] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 339.019070][ T41] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 339.043517][ T41] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:2: Failed to release dquot type 0 [ 339.043875][T18319] netlink: 'syz.2.5048': attribute type 4 has an invalid length. [ 339.063015][T18312] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 48: comm syz.3.5047: lblock 0 mapped to illegal pblock 48 (length 1) [ 339.167873][T18321] loop3: detected capacity change from 0 to 1024 [ 339.174548][T18321] EXT4-fs: Ignoring removed nobh option [ 339.180348][T18321] EXT4-fs: Ignoring removed bh option [ 339.190752][T18321] ext4 filesystem being mounted at /498/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 339.206177][T18323] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5050'. [ 339.258510][T18330] loop3: detected capacity change from 0 to 512 [ 339.271193][T18330] EXT4-fs: Ignoring removed orlov option [ 339.272648][T18323] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=18323 comm=syz.1.5050 [ 339.289062][T18330] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 339.315979][T18331] loop2: detected capacity change from 0 to 128 [ 339.325821][T18331] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 339.330638][T18335] loop4: detected capacity change from 0 to 1024 [ 339.333950][T18331] FAT-fs (loop2): Filesystem has been set read-only [ 339.348388][T18330] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 339.357242][T18330] EXT4-fs error (device loop3): ext4_iget_extra_inode:5104: inode #15: comm syz.3.5052: corrupted in-inode xattr: e_value size too large [ 339.361998][T18331] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 339.379249][T18331] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 339.379443][T18342] loop1: detected capacity change from 0 to 1024 [ 339.394075][T18335] ext4 filesystem being mounted at /455/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 339.404981][T18330] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.5052: couldn't read orphan inode 15 (err -117) [ 339.418400][T18335] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 339.436179][T18342] ext4 filesystem being mounted at /240/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 339.466471][T18342] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 339.504052][T18330] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5052'. [ 339.561577][T18350] loop4: detected capacity change from 0 to 256 [ 339.694192][T18356] loop1: detected capacity change from 0 to 1024 [ 339.708975][T18356] EXT4-fs: Ignoring removed nobh option [ 339.724923][T18356] EXT4-fs: Ignoring removed bh option [ 339.742972][T18356] ext4 filesystem being mounted at /242/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 339.762696][T18362] tmpfs: Unknown parameter '0x0000000000000006' [ 339.776825][T18363] netlink: 'syz.3.5052': attribute type 1 has an invalid length. [ 339.784670][T18363] netlink: 152 bytes leftover after parsing attributes in process `syz.3.5052'. [ 339.787984][T18362] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 339.793736][T18363] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 339.804005][T18365] loop1: detected capacity change from 0 to 512 [ 339.818202][T18362] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 339.844188][T18365] EXT4-fs: Ignoring removed mblk_io_submit option [ 339.858394][T18365] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 339.870102][T18365] EXT4-fs (loop1): 1 truncate cleaned up [ 340.117058][T18370] loop3: detected capacity change from 0 to 512 [ 340.123857][T18370] EXT4-fs: Ignoring removed orlov option [ 340.129643][T18370] EXT4-fs: Ignoring removed nomblk_io_submit option [ 340.151915][T18370] EXT4-fs (loop3): VFS: Can't find ext4 filesystem [ 340.206193][T18376] loop2: detected capacity change from 0 to 1024 [ 340.228444][T18378] loop3: detected capacity change from 0 to 1024 [ 340.235950][T18376] ext4 filesystem being mounted at /329/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 340.248257][T18378] EXT4-fs: Ignoring removed bh option [ 340.254275][T18376] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 340.254377][T18378] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 340.283001][T18378] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 340.303473][T18378] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 2: comm syz.3.5070: lblock 2 mapped to illegal pblock 2 (length 1) [ 340.317764][T18378] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 48: comm syz.3.5070: lblock 0 mapped to illegal pblock 48 (length 1) [ 340.332273][T18378] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.5070: Failed to acquire dquot type 0 [ 340.344532][T18378] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 340.355329][T18378] EXT4-fs error (device loop3): ext4_evict_inode:254: inode #11: comm syz.3.5070: mark_inode_dirty error [ 340.370286][T18378] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 340.380817][T18378] EXT4-fs (loop3): 1 orphan inode deleted [ 340.380995][T18383] loop2: detected capacity change from 0 to 256 [ 340.399145][ T3435] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 340.432975][ T3435] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:7: Failed to release dquot type 0 [ 340.457313][T18378] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 48: comm syz.3.5070: lblock 0 mapped to illegal pblock 48 (length 1) [ 340.470863][T18387] loop4: detected capacity change from 0 to 512 [ 340.479320][T18387] EXT4-fs: Ignoring removed mblk_io_submit option [ 340.487889][T18387] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 340.510774][T18387] EXT4-fs (loop4): 1 truncate cleaned up [ 340.517975][T18387] EXT4-fs mount: 192 callbacks suppressed [ 340.517990][T18387] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 340.535896][T18389] loop2: detected capacity change from 0 to 8192 [ 340.536494][T10796] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 340.579726][T18389] loop2: p1 p2 p3 p4[DM] [ 340.586056][T18389] loop2: p1 size 835331 extends beyond EOD, truncated [ 340.593635][T18389] loop2: p2 size 16777223 extends beyond EOD, truncated [ 340.606801][T18389] loop2: p3 start 1052673 is beyond EOD, truncated [ 340.613359][T18389] loop2: p4 size 262144 extends beyond EOD, truncated [ 340.670772][T18398] loop3: detected capacity change from 0 to 1024 [ 340.683627][T18398] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 340.705944][T18398] ext4 filesystem being mounted at /505/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 340.727096][T14995] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 340.778326][T18398] EXT4-fs error (device loop3): ext4_map_blocks:814: inode #15: block 1: comm syz.3.5077: lblock 1 mapped to illegal pblock 1 (length 15) [ 340.818898][T18398] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 117 [ 340.831423][T18398] EXT4-fs (loop3): This should not happen!! Data will be lost [ 340.831423][T18398] [ 340.860404][T18403] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #15: block 1: comm syz.3.5077: lblock 1 mapped to illegal pblock 1 (length 3) [ 340.865454][T18398] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 340.890915][T18403] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #15: block 1: comm syz.3.5077: lblock 1 mapped to illegal pblock 1 (length 3) [ 340.915010][T18389] netlink: 'syz.2.5073': attribute type 27 has an invalid length. [ 340.933718][T18402] loop1: detected capacity change from 0 to 128 [ 340.940892][T18403] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #15: block 1: comm syz.3.5077: lblock 1 mapped to illegal pblock 1 (length 3) [ 340.967964][T18402] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 340.975940][T18402] FAT-fs (loop1): Filesystem has been set read-only [ 340.987064][T18402] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 340.994964][T18402] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 340.999853][T10796] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 341.128317][T18414] loop3: detected capacity change from 0 to 256 [ 341.188896][T18416] loop3: detected capacity change from 0 to 512 [ 341.197489][T18416] EXT4-fs: Ignoring removed orlov option [ 341.206999][T18416] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 341.221706][T18416] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 341.230156][T18416] EXT4-fs error (device loop3): ext4_iget_extra_inode:5104: inode #15: comm syz.3.5084: corrupted in-inode xattr: e_value size too large [ 341.245337][T18416] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.5084: couldn't read orphan inode 15 (err -117) [ 341.281163][T18416] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 341.512387][T11588] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 341.543334][T18419] loop4: detected capacity change from 0 to 512 [ 341.559350][T18419] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 341.580034][T18419] EXT4-fs (loop4): orphan cleanup on readonly fs [ 341.599236][T18419] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:517: comm syz.4.5085: Block bitmap for bg 0 marked uninitialized [ 341.619440][T18419] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 341.633210][T18419] EXT4-fs (loop4): 1 orphan inode deleted [ 341.643230][T18419] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 341.676530][T18419] EXT4-fs: Ignoring sb option on remount [ 341.682264][T18419] EXT4-fs: Ignoring removed orlov option [ 341.682568][T18422] loop1: detected capacity change from 0 to 1024 [ 341.689339][T18419] EXT4-fs: Ignoring removed nomblk_io_submit option [ 341.701015][T18419] EXT4-fs: Remounting fs w/o journal so ignoring data_err option [ 341.701262][T18422] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 341.720790][T18422] ext4 filesystem being mounted at /245/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 341.720944][T18419] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 341.742705][T18425] netlink: 'syz.3.5084': attribute type 1 has an invalid length. [ 341.750457][T18425] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 341.768461][T18419] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 341.788324][T18422] EXT4-fs error (device loop1): ext4_map_blocks:814: inode #15: block 1: comm syz.1.5086: lblock 1 mapped to illegal pblock 1 (length 15) [ 341.803480][T11588] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 341.809042][T18422] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 117 [ 341.824860][T18422] EXT4-fs (loop1): This should not happen!! Data will be lost [ 341.824860][T18422] [ 341.835927][T18422] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 341.852155][T18430] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #15: block 1: comm syz.1.5086: lblock 1 mapped to illegal pblock 1 (length 3) [ 341.871238][T18430] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #15: block 1: comm syz.1.5086: lblock 1 mapped to illegal pblock 1 (length 3) [ 341.885571][T18430] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #15: block 1: comm syz.1.5086: lblock 1 mapped to illegal pblock 1 (length 3) [ 341.902026][T18430] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #15: block 1: comm syz.1.5086: lblock 1 mapped to illegal pblock 1 (length 3) [ 341.941700][T14995] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 342.059564][T18446] loop1: detected capacity change from 0 to 128 [ 342.068688][T10796] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 342.100855][T18446] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 342.104954][T18449] loop4: detected capacity change from 0 to 512 [ 342.108702][T18446] FAT-fs (loop1): Filesystem has been set read-only [ 342.130540][T18449] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 342.140336][T18446] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 342.148200][T18446] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 342.156864][T18449] EXT4-fs (loop4): orphan cleanup on readonly fs [ 342.167908][T18449] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:517: comm syz.4.5095: Block bitmap for bg 0 marked uninitialized [ 342.169473][T18452] loop3: detected capacity change from 0 to 512 [ 342.198508][T18452] EXT4-fs: Ignoring removed mblk_io_submit option [ 342.205120][T18449] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 342.211832][T18452] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 342.224584][T18449] EXT4-fs (loop4): 1 orphan inode deleted [ 342.237105][T18449] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 342.238463][T18452] EXT4-fs (loop3): 1 truncate cleaned up [ 342.264290][T18449] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 342.269961][T18452] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 342.286803][T18449] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 342.331036][T11588] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 342.440667][T18452] ================================================================== [ 342.448768][T18452] BUG: KCSAN: data-race in filemap_splice_read / filemap_splice_read [ 342.456833][T18452] [ 342.459153][T18452] write to 0xffff888117fe1468 of 8 bytes by task 18456 on cpu 0: [ 342.466861][T18452] filemap_splice_read+0x4f4/0x740 [ 342.471966][T18452] ext4_file_splice_read+0x8f/0xb0 [ 342.477091][T18452] splice_direct_to_actor+0x26c/0x680 [ 342.482458][T18452] do_splice_direct+0xda/0x150 [ 342.487218][T18452] do_sendfile+0x380/0x650 [ 342.491638][T18452] __x64_sys_sendfile64+0x105/0x150 [ 342.496838][T18452] x64_sys_call+0x2bb0/0x2ff0 [ 342.501518][T18452] do_syscall_64+0xd2/0x200 [ 342.506025][T18452] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.511922][T18452] [ 342.514240][T18452] write to 0xffff888117fe1468 of 8 bytes by task 18452 on cpu 1: [ 342.521947][T18452] filemap_splice_read+0x4f4/0x740 [ 342.527053][T18452] ext4_file_splice_read+0x8f/0xb0 [ 342.532182][T18452] splice_direct_to_actor+0x26c/0x680 [ 342.537552][T18452] do_splice_direct+0xda/0x150 [ 342.542317][T18452] do_sendfile+0x380/0x650 [ 342.546748][T18452] __x64_sys_sendfile64+0x105/0x150 [ 342.551952][T18452] x64_sys_call+0x2bb0/0x2ff0 [ 342.556631][T18452] do_syscall_64+0xd2/0x200 [ 342.561137][T18452] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.567029][T18452] [ 342.569343][T18452] value changed: 0x000000000000050f -> 0x0000000000000516 [ 342.576449][T18452] [ 342.578766][T18452] Reported by Kernel Concurrency Sanitizer on: [ 342.584912][T18452] CPU: 1 UID: 0 PID: 18452 Comm: syz.3.5094 Tainted: G W 6.17.0-rc1-syzkaller-00165-gee94b00c1a64 #0 PREEMPT(voluntary) [ 342.598975][T18452] Tainted: [W]=WARN [ 342.602771][T18452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 342.612827][T18452] ================================================================== [ 343.044737][T10796] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.