last executing test programs: 1m11.455914463s ago: executing program 1 (id=857): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000054fdffff18112d70f86cd5df0000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b702000000000000"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x2d) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000e, 0x11, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) ptrace$getregset(0x4204, 0x0, 0x202, &(0x7f0000000100)={&(0x7f00000000c0)=""/32, 0x20}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="adffa888000000001c00128009000100626f6e64000000000c000280050001000600000008000a"], 0x44}}, 0x0) getpid() bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) openat$selinux_attr(0xffffffffffffff9c, 0x0, 0x2, 0x0) 1m11.136033298s ago: executing program 1 (id=862): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="6400000002060103000000000000000000000000050001000700000016000300686173683a6e65742c706f72742c6e65740000000900020073797a30000000000500040000000000050005000a0000001400078008001240000a0000050015"], 0x64}, 0x1, 0x0, 0x0, 0x4000001}, 0x40) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@resgid}, {@data_err_ignore}, {@jqfmt_vfsv0}, {@grpjquota}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") creat(&(0x7f0000000100)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1205000, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x800, 0x49) preadv2(r1, &(0x7f0000000040)=[{&(0x7f0000001200)=""/4096, 0xfffffdef}], 0x1, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000001400), 0x208e24b) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r3], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) fsopen(&(0x7f0000000040)='configfs\x00', 0x0) fdatasync(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xfdef}], 0x1, 0x0, 0x0) 1m10.210810683s ago: executing program 1 (id=870): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = dup(r0) write$P9_RLERRORu(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) creat(&(0x7f0000000380)='./file0\x00', 0x80) 1m9.952934357s ago: executing program 1 (id=875): fsmount(0xffffffffffffffff, 0x1, 0x1) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x1000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x2}, 0x18) r1 = socket$inet6(0xa, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000002240)='./file0\x00', 0x0, &(0x7f0000000b00)=ANY=[], 0x1, 0x2c2, &(0x7f00000006c0)="$eJzs3T+LI2UYAPBndpNJ7iySwkoEB7SwOm6vtckiOThMpaRQC128O5AkCHew4CkGK1sbSz+BINj5JWwEP4DgB7DzioNXJpkh2btJsoHLrX9+vyL77Lzv877POzPZPyzz7sevziZ3i7j/9Ze/R7ebxdEgBvE4i34cRS2llGJl8G0AAP9mj1OKP9PSJVMG5UsWEd3DlgYAHMje3/9/OnhJAMCBvff+B++cjkbDd4uiG7dn35yPy9/sy4/L9tP78WlM417cjF48Wf4toP5poXy9nVKat4pSP96Yzc/HZebso1+q8U/riU6iF/1FdDH/zmh4Uiyt5c/LOq5X8w/K+W9FL15umP/OaHirIT/Gebz5+lr9N6IXv34Sn8U07i6KWOV/dVIUb6fv/vriw7K8Mj+bn487i34r6fjFXRUAAAAAAAAAAAAAAAAAAAAAAP7rblR753RisX9Peajaf+f4SflJO4pa/+L+PMv8rB7oqf2B5im+T6nTihgNbxZFkaqOq/xWvNKK1tWsGgAAAAAAAAAAAAAAAAAAAP5ZHn7+aHI2nd570BD8dj1iQ9OGoN4NoH6sf0fW8aamwdqR1+LR5KyzecC1pqMq3DJpHNd9soity4lWux65v9dJ2D+4tqnmH37cd8Du7j7tbefn+QT13TU5y6KxTyfqI936mv683iePS86Vb2pKu2+/tSBvbOrtvfb8pUUw39Insm2FvfXH8sxVR7KnV5EvzmpjenttN47me6P5Wmx6pzwjW7yt8+f3xQcAAAAAAAAAAAAAAAAAALhg9dDvM03XdqQepc7BygIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAF2r1///3COZV8iU65/Hg4RUvEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgP+BvwMAAP//QSRWPA==") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuset.effective_mems\x00', 0x275a, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000080)={0x8, 0x7, 0x6}) sendmmsg$inet6(r1, &(0x7f0000001400)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0xcb8, @rand_addr=' \x01\x00', 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000000440)=[@rthdrdstopts={{0x18, 0x29, 0x37, {0x33}}}, @flowinfo={{0x14}}, @hoplimit_2292={{0x14}}, @rthdr={{0x28, 0x29, 0x39, {0x33, 0x2, 0x2, 0x6, 0x0, [@rand_addr=' \x01\x00']}}}], 0x70}}], 0x1, 0x840) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0xb, 0x100005, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000deab44f4850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sys_enter\x00', r3}, 0x10) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) timer_gettime(0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x800000000003}, 0x1100, 0x5dd8, 0x0, 0x3, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0xad3c3b, 0xffffffffffffffff, 0x7, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0/../file0/../file0\x00', &(0x7f00000004c0)='cgroup2\x00', 0x200000, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29, 0xffffffffffffffff}, './file0\x00'}) io_uring_enter(0xffffffffffffffff, 0x47f6, 0x0, 0x0, 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x45) ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f0000000140)) ioctl$EXT4_IOC_MIGRATE(r6, 0x6609) getsockopt$inet_sctp6_SCTP_STATUS(r5, 0x84, 0xe, &(0x7f0000000240)={0x0, 0x8000000, 0x800, 0x2, 0x2, 0x0, 0x4, 0x7ffd, {0x0, @in={{0x2, 0x4e21, @local}}, 0xff000000, 0x9, 0x40, 0xb, 0x6}}, &(0x7f0000000100)=0xb0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f00000001c0)={r7, 0x400}, 0x8) 1m9.788347489s ago: executing program 1 (id=877): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d0000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') llistxattr(&(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0, 0x0) 1m9.570324163s ago: executing program 1 (id=879): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800001f1a0068099b3c0000000000001860000000000000824d08", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xa5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r0}, 0x10) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, @perf_config_ext={0x0, 0x1}, 0x18208, 0x3, 0x0, 0x0, 0x1000, 0x0, 0x3}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000080), 0x1, 0x561, &(0x7f0000000f80)="$eJzs3U1rG0cfAPD/ylbenycOhNCWUgw9NCWNHNt9SaGH9NyGBtp7KuyNCZajYMkhdgNNDs25hF5KA6X30nOPoV+gh36GQBsIJZj20IvLyivFL5ItJ7KtVL8frJnZXWl2NPsfz2gkFMDAGs3+FCJejoivk4jjEZHkx4YjPzi6et7yk1tT2ZbEysqnfyaN87J887majzuaZ16KiF++ijhT2FxubXFptlyppPN5fqw+d32strh09upceSadSa9NTE6ef2dy4v333u1ZXd+89Pe3nzwYynMn7iVxIY7lubX1eA6312ZGYzR/TYpxYcOJ4z0orJ8kbff+tOfXwc4M5XFejKwPOB5DedQD/31fRsQKMKCSHcf/b8XduRJgbzXHAc25fY/mwS+Mxx+uToA213949b2RONSYGx1ZTtbNjLL57kgPys/K+PmP+/eyLXr3PgTAtm7fiYhzw8Ob+78k7/+e3bkuztlYhv4P9s6DbPzzVrvxT6E1/ok245+jbWL3WWwf/4VHPSimo2z890Hb8W9r0WpkKM/9rzHmKyZXrlbSrG/7f0ScjuLBLL/Ves755YcrnY6tHf9lW1Z+cyyYX8ej4YPrHzNdrpefp85rPb4T8Urb8W/Sav+kTftnr8elLss4ld5/rdOx7eu/u1Z+iHijbfs/XdFKtl6fHGvcD2PNu2Kzv+6e+rVT+ftd/6z9j2xd/5Fk7XptbedlfH/onzRa68nrrat/dH//H0g+a6QP5Ptuluv1+fGIA8nHrf2F5v6Jp49t5pvnZ/U//frW/V+7+/9wRHzeZf3vnvzx1U7H+qH9p9u2f2t2u6H9d554+NEX33Uqv7v+7+1G6nS+p5v+r9sLfJ7XDgAAAAAAAPpNISKORVIotdKFQqm0+vmOk3GkUKnW6meuVBeuTUfju7IjUSw0V7qPr/k8xHi+YtjMT2zIT0bEiYj4ZuhwI1+aqlam97vyAAAAAAAAAAAAAAAAAAAA0CeOdvj+f+b3of2+OmDX+clvGFzbxn8vfukJ6Ev+/8PgEv8wuMQ/DC7xD4NL/MPgEv8wuMQ/DC7xDwAAAAAAAAAAAAAAAAAAAAAAAAAAAD116eLFbFtZfnJrKstP31hcmK3eODud1mZLcwtTpanq/PXSTLU6U0lLU9W57Z6vUq1eH5+IhZtj9bRWH6stLl2eqy5cq1++OleeSS+nxT2pFQAAAAAAAAAAAAAAAAAAALxYaotLs+VKJZ2XkHimxHB/XIZEjxP73TMBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwFP/BgAA//9q6zMB") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) pwritev2(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000004c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x40, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2102, 0x1}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 1m9.416610085s ago: executing program 32 (id=879): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800001f1a0068099b3c0000000000001860000000000000824d08", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xa5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r0}, 0x10) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, @perf_config_ext={0x0, 0x1}, 0x18208, 0x3, 0x0, 0x0, 0x1000, 0x0, 0x3}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000080), 0x1, 0x561, &(0x7f0000000f80)="$eJzs3U1rG0cfAPD/ylbenycOhNCWUgw9NCWNHNt9SaGH9NyGBtp7KuyNCZajYMkhdgNNDs25hF5KA6X30nOPoV+gh36GQBsIJZj20IvLyivFL5ItJ7KtVL8frJnZXWl2NPsfz2gkFMDAGs3+FCJejoivk4jjEZHkx4YjPzi6et7yk1tT2ZbEysqnfyaN87J887majzuaZ16KiF++ijhT2FxubXFptlyppPN5fqw+d32strh09upceSadSa9NTE6ef2dy4v333u1ZXd+89Pe3nzwYynMn7iVxIY7lubX1eA6312ZGYzR/TYpxYcOJ4z0orJ8kbff+tOfXwc4M5XFejKwPOB5DedQD/31fRsQKMKCSHcf/b8XduRJgbzXHAc25fY/mwS+Mxx+uToA213949b2RONSYGx1ZTtbNjLL57kgPys/K+PmP+/eyLXr3PgTAtm7fiYhzw8Ob+78k7/+e3bkuztlYhv4P9s6DbPzzVrvxT6E1/ok245+jbWL3WWwf/4VHPSimo2z890Hb8W9r0WpkKM/9rzHmKyZXrlbSrG/7f0ScjuLBLL/Ves755YcrnY6tHf9lW1Z+cyyYX8ej4YPrHzNdrpefp85rPb4T8Urb8W/Sav+kTftnr8elLss4ld5/rdOx7eu/u1Z+iHijbfs/XdFKtl6fHGvcD2PNu2Kzv+6e+rVT+ftd/6z9j2xd/5Fk7XptbedlfH/onzRa68nrrat/dH//H0g+a6QP5Ptuluv1+fGIA8nHrf2F5v6Jp49t5pvnZ/U//frW/V+7+/9wRHzeZf3vnvzx1U7H+qH9p9u2f2t2u6H9d554+NEX33Uqv7v+7+1G6nS+p5v+r9sLfJ7XDgAAAAAAAPpNISKORVIotdKFQqm0+vmOk3GkUKnW6meuVBeuTUfju7IjUSw0V7qPr/k8xHi+YtjMT2zIT0bEiYj4ZuhwI1+aqlam97vyAAAAAAAAAAAAAAAAAAAA0CeOdvj+f+b3of2+OmDX+clvGFzbxn8vfukJ6Ev+/8PgEv8wuMQ/DC7xD4NL/MPgEv8wuMQ/DC7xDwAAAAAAAAAAAAAAAAAAAAAAAAAAAD116eLFbFtZfnJrKstP31hcmK3eODud1mZLcwtTpanq/PXSTLU6U0lLU9W57Z6vUq1eH5+IhZtj9bRWH6stLl2eqy5cq1++OleeSS+nxT2pFQAAAAAAAAAAAAAAAAAAALxYaotLs+VKJZ2XkHimxHB/XIZEjxP73TMBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwFP/BgAA//9q6zMB") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) pwritev2(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000004c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x40, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2102, 0x1}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 4.04008649s ago: executing program 5 (id=1669): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x50, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x3000010, &(0x7f0000000040)={[{@journal_dev={'journal_dev', 0x3d, 0xd353}}, {@auto_da_alloc}]}, 0x1, 0x512, &(0x7f0000000380)="$eJzs3d9rY1kdAPDvvW1mOzNdk1WRdcF1cVc6i07Sbt3dIqLriz4tqOv7WNu0lCZNadJ1Whbt4H8ggoJPPvki+AcIwzz4B8jAgL6ID6KiiM7og6DOlSQ3TidN2rrTNp3m84HTnHPvzf2ec0NO7o/TewMYWy9FxFsRMRERr0ZEMZ+e5in2uqm93IP77y21UxJZ9s5fk0jyab11tcuTEXE1f9tURHztyxHfTA7Gbe7sri/WatWtvFxp1TcrzZ3d62v1xdXqanVjfn7ujYU3F15fmM1yT9TOUi/zky99/vanv/W7G3++9u12tT73kShEXztOUrfphc626Glvo63TCDYCE3l7CqOuCAAAx9Lex/9gRHyis/9fjInO3lyfiVHUDAAAADgp2Rem499JRAYAAABcWGlETEeSlvOxANORppfycwMfjitprdFsfWqlsb2x3J4XUYpCurJWq87mY4VLUUja5bl8jG2v/FpfeT4inouI7xcvd8rlpUZtecTnPgAAAGBcXO07/v9HMe3kjzbg/wQAAACA86s0tAAAAABcFA75AQAA4OLrP/6/PaJ6AAAAAKfiK2+/3U5Z7/nXy+/ubK833r2+XG2ul+vbS+WlxtZmebXRWO3cs69+1PpqjcbmZ2Jj+2alVW22Ks2d3Rv1xvZG68baY4/ABgAAAM7Qcx+/8+skIvY+e7mTIr8PIMBj/jDqCgAnaWLUFQBGxl28YXwVRl0BYOSSI+YbvAMAAE+/mY8evP7fe/6/cwNwsRnrAwDjx/V/GF8FIwBhrKUR8YFu9plhywy9/v/L40bJsoi7xf1TnF8EAICzNd1JSVrOjwOmI03L5YhnI9JSFJKVtVp1Nj8++FWx8Ey7PNd5Z3LkmGEAAAAAAAAAAAAAAAAAAAAAAAAAoCvLksgAAACACy0i/VPSuZt/xEzxlen+8wOXkn8W44954Ufv/ODmYqu1Ndee/rfOs7wuRUTrh/n014Y+PgwAAAA4acne0Fnd4/T8de5MawUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAGHhw/72lXjrLuH/5YkSUBsWfjKnO61QUIuLK35OY3Pe+JCImTiD+3q2IeH5Q/CQeZllWymsxKP7lU45f6myawfHTiLh6AvFhnN1p9z9vDfr+pfFS53Xw928yT09qeP+X5pGf7/Rzg/qfZw+srT4wxgv3flYZGv9WxAuTg/ufXv+bDIn/8oG1/SvLsoMxvvH13d1h8bMfR8wM/P1JHotVadU3K82d3etr9cXV6mp1Y35+7o2FNxdeX5itrKzVqvnfgTG+97GfPzys/VcGxP/tb7r972Htf2XYSvv8597N+x/qZguD4l97eeDv71QMiZ/mv32fzPPt+TO9/F43v9+LP7374mHtXx6y/Y/6/K8ds/2vfvW7vz/mogDAGWju7K4v1mrVrUMyU8dY5mnM/GLqXFTj/8xk3+l+cuelPu83095bfTSl16pzULF9mezMYk3EOWny/zIj7ZYAAIBT8Ginf9Q1AQAAAAAAAAAAAAAAAAAAgPF1FrcT64+5N5qmAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAc6r8BAAD//0wa4Aw=") 3.918709422s ago: executing program 0 (id=1670): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000054fdffff18112d70f86cd5df00", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x2d) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000e, 0x11, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) ptrace$getregset(0x4204, 0x0, 0x202, &(0x7f0000000100)={&(0x7f00000000c0)=""/32, 0x20}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="adffa888000000001c00128009000100626f6e64000000000c000280050001000600000008000a"], 0x44}}, 0x0) getpid() bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) openat$selinux_attr(0xffffffffffffff9c, 0x0, 0x2, 0x0) 3.432557299s ago: executing program 0 (id=1674): r0 = socket$inet_sctp(0x2, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r4, @ANYBLOB="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"], 0x1c8}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESOCT=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095", @ANYRESOCT=r0], &(0x7f0000000600)='GPL\x00', 0x8001, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) close(r0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r6}, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000b00)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01002d9f04c2478046d61800000004000280180001801400020067656e65766530000000000000000000"], 0x30}, 0x1, 0x0, 0x0, 0x20004040}, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r7}, &(0x7f0000000240), &(0x7f0000000280)='%pK \x00'}, 0x20) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r10}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000940)) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r11, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010103}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r11, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) 3.430352879s ago: executing program 2 (id=1675): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010026000000000000000c0000000c00000002000000000000000000"], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000001740)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_open_dev$tty20(0xc, 0x4, 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x18) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare(0x44040200) socket$igmp(0x2, 0x3, 0x2) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r6}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 2.762602499s ago: executing program 4 (id=1678): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r3}, 0x9) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x7}, 0x1c) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x4, 0x0, 0x0) 2.573914231s ago: executing program 5 (id=1680): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x8080, &(0x7f0000000500)={[{@norecovery}, {@grpquota}, {@sysvgroups}, {@lazytime}]}, 0xee, 0x49b, &(0x7f0000000a40)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0xee01}}, './file0\x00'}) lsetxattr$security_capability(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000000c0), &(0x7f0000000140)=@v3={0x3000000, [{0xa0e0, 0x9}, {0x1, 0x5}], r1}, 0x18, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x0) ioctl$TIOCMSET(r0, 0x5418, 0x0) 2.556811631s ago: executing program 0 (id=1681): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)="2ac3c2d5fa4423c5ad1ddee97879c38bf8", 0x11}], 0x1, 0x0, 0xffffffffffffff12, 0x4000001}, 0x840) writev(r0, 0x0, 0x0) socket$inet(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0xb29, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_read_part_table(0x60d, &(0x7f0000002200)="$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") creat(&(0x7f0000000100)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r4 = open(&(0x7f0000000080)='./bus\x00', 0x147842, 0xbba8135637191132) socket$kcm(0xa, 0x5, 0x0) write$cgroup_subtree(r4, 0x0, 0x100000) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYRES32=r2, @ANYRES32, @ANYRESHEX=r1], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000500000ac4010000060a0b040000000000000000020000004c000480340001800b000100746172676574000024000280090001004d41524b000000000c00030002b51112d439c5920800024000000002140001800b0001006c6f6f6b75700000040002800900010073797a30000000000900020073797a32"], 0x1ec}}, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f00000012c0), 0x0, 0x8004}, 0x0) 2.484778553s ago: executing program 2 (id=1682): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sys_enter\x00', r0}, 0x10) timer_gettime(0x0, 0x0) 2.428168664s ago: executing program 2 (id=1683): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="6400000002060103000000000000000000000000050001000700000016000300686173683a6e65742c706f72742c6e65740000000900020073797a30000000000500040000000000050005000a0000001400078008001240000a0000050015"], 0x64}, 0x1, 0x0, 0x0, 0x4000001}, 0x40) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@resgid}, {@data_err_ignore}, {@jqfmt_vfsv0}, {@grpjquota}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") creat(&(0x7f0000000100)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1205000, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x800, 0x49) preadv2(r1, &(0x7f0000000040)=[{&(0x7f0000001200)=""/4096, 0xfffffdef}], 0x1, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000001400), 0x208e24b) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c000000000000000000001811", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) fsopen(&(0x7f0000000040)='configfs\x00', 0x0) fdatasync(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xfdef}], 0x1, 0x0, 0x0) 2.200074097s ago: executing program 3 (id=1685): r0 = socket$caif_stream(0x25, 0x1, 0x0) fsetxattr$security_capability(r0, &(0x7f0000000000), &(0x7f0000000040)=@v1={0x1000000, [{0x3, 0x10}]}, 0xc, 0x2) (async, rerun: 32) r1 = socket$igmp(0x2, 0x3, 0x2) (rerun: 32) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001000)={0xffffffffffffffff, 0x58, &(0x7f0000000f80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async, rerun: 64) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001280)={'syztnl2\x00', &(0x7f0000001200)={'ip6_vti0\x00', 0x0, 0x29, 0x9, 0xe8, 0x0, 0x0, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7800, 0x7800, 0x3, 0x98}}) (rerun: 64) sendmmsg$inet(r1, &(0x7f0000001380)=[{{&(0x7f0000000080)={0x2, 0x4e20, @multicast2}, 0x10, &(0x7f0000000200)=[{&(0x7f00000000c0)="fd3d4c32a2586605968e93bae2bf8f70fe982b9a0ca999f021f8df6c64935ab847b0b5c73d8251ad42bae08086664062d67504e9b464046a244d44ba3fb49649b1628d9213ce5f39e72b1a3aaead6f8acf28dd0bab10b6d2486889da002f390290bae295f515872ef33b3fe6a3df5490d8c00f1aff08f85ab483c8303f0ba9f86ef8029e71fc00d2d95ee539620fe0cddc8447c1d58dc9628bbba4791680a24513a33986f700e7ea85a5d06b16754e3651ebbb84f1ee31a004c4e1dc7b05a28bd7748f4e74f93f09e0e71fc9df5ccca39fc3c0504697cb02", 0xd8}, {&(0x7f00000001c0)="4b831b4801296c1b5fcdee11", 0xc}], 0x2}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000240)="8a95c5d5e61275e36d94a4fe0be93b0e43716899078fc106e66f5a9e1ebb7cf05de1d8ecd08e0053baedb30018a73c6f477346769e7f0164590eab1f1f445c6627955da83ae1a4ad297d92d955d124fa5adb9e30249b0b30a4b7f5f4a40cf206948b6a1715f15172a94232ea41c1a307b251e4cacfdd324fd34dbfc4ab018843299a885cda768fd1e962f1e4ecc1f29550925cbb892c6856f9cc280817ac281924b2", 0xa2}, {&(0x7f0000000300)="c3c5ef", 0x3}, {&(0x7f0000000340)="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", 0xfb}, {&(0x7f0000000440)="1e196dc25760bf62d61533ba16912529c1fe16107c0f2ca0b1d47bab88f1602a92847cd134bb2a7c2f86e6666533bfd037a93b63a3fd3230f2a6da53a59e884984ad4bac2f50a970a6404e62f5afc92b35b17d130942513651786e3b706b9567812cae6ecda35d3da22f2ddad1d574738f9d419d269fd12497d35dd22dcb90e8a2a06393986d3e69137712ddc48f89eec7e8005f50c752090b2f9594312cd27bf7bc792ccd252459c1cb4ffeaa544a399824d6265c0ef6f62534e1a03650ddd1", 0xc0}, {&(0x7f0000000500)="2f46621159f0975b8665909f462c443958546904a0b77e99454a0b04a52a40e96de192c8a6be27888e6740e0daeb1465e28e76bc785919851fc9c5215e120672a3896d810e96572cfcb0", 0x4a}, {&(0x7f0000000580)="b512be79b45df54acced2a240c883b685bac3fd8b483c17e857ba359ddd8c5aee9572f7e", 0x24}, {&(0x7f00000005c0)="c5048c605df5371d22c21c95fc55394dc58cae3006bcfc9754728cc5f7d548755b16ce431228e4899c270c7fded01f24fdd4f1564fe6c7b5b15a785f395f47422a41739f4b127419e26f0d9d5f7cc6bab8efd079f3621c9bbb6a1e90a89310a586b6d8fbc5a61eebdc86a08f34d0ba3c463086ca736036214385ec749be7c5b4b04c16a5248c335e42abcb3500a94a53dd977270beff7defb953d38fb2ca249f13dc7ee8f1d14a77a028c2b6a3debad56f76fb692d4dc3b97f130b8bf349382a28da5d04eec74c30030f74a3d14eeed61c73e8daf28f063d969d5710c77071f480628dfb", 0xe4}], 0x7}}, {{&(0x7f0000000740)={0x2, 0x4e22, @local}, 0x10, &(0x7f0000000ec0)=[{&(0x7f0000000780)="6fc4007b3922506359e6fb726894e17fe0a818baf4878940133d74551042b07855d6b6493e93810824883174cded536e9729bcb56edf4f1d5894aa4b70498959a44e0d4a9a3e1cfbedfcc0d5d14f9dde4146f14835d74a94f48ac371b028d9057fd245518baa70405caff6ad5ec9241f91ea661f69b5cbbff83d804bc6053bf0747049218e03b4987722f18ebf9fc23adef69ea26f335a413e450356e079f177fa00a6eee0ed695b9f7b6feab0f5459e899065915ab666271f088db38bee5bad815b393f892922076b31c3e19f0b8f9a591f3fb03b8c3759196e91ecf3295cae421186", 0xe3}, {&(0x7f0000000880)="9affdf44e4fb51548911436cd75a08e887562a81cae418be14604754cf6d1f79ab3fa12514f406acc982ef736a2bbc238f32f5228db999f12348bfc08203cf596a18b7d0b5ce6f95617a3e7735c850b1360a75a696c8cbf9e903dccc4e71c82c58037b4edf77399b6e95e2e0b669f6da16d07fae7b455174a87ab707f4dba06555a30cd94fc7fd1085cf3c9cf4076d21a6c679a974835b8ed0e01b293fd8ac2eada0076e989719091764d4fe0d702d0ee284b89c1fc58015efa80194a8f91bcf6dba89817044c980c503ec13e316fb7d4ce52259335ebb2ae8a7ba244bd0b0ea5ffa37c58f", 0xe5}, {&(0x7f0000000980)="b402cb6c38bfe0185ef3c1a777f468697eefd17b62c49caf281f1ecd1fde02994de8e1a15431945de5444a32227c6ec213888e32262b2e989b517aca95a66300b0e6abbff5f730d51d89f977958af06fda1646a8f27d364716d96a204a67179ddfeb95f0c49178722bb9068ded28b64988f0807b0dd3206079a77c6a26f856c7b09e8b1da78d", 0x86}, {&(0x7f0000000a40)="7977b8d5f2fb717fdd59e25bf08b473d6fb77b20e3da32f48923d0c1e9622aa569e1812e5f09ae89dba6f2e6339bee2acb4eab1e4271affc680ad7dfaeb7fb4b0535b2ba09e0a263bcb2e248a7af4a0ad0817871f0151df330eff3ddddd0656362454cf2", 0x64}, {&(0x7f0000000ac0)="8544d531646fc06cbda99518069228df497a912144b4867baa5837b8105549c7762973158dc6c394b1d515b23636932aa35de66f1ed2f8f7f1676521230057f31147e9888f341efdb985bfba1dd372b3609d19f4c481e295c0bb5a087d2095bead3141e4fe7e2152dc88bbbd5934967f09343686582e0a6ea03047fc0d3e91744b21fc1bb9ec7713720afdeb893e7d3f5acc5d58d616bca7b7a329464f3fb76a28f8f3", 0xa3}, {&(0x7f0000000b80)="076ff2069e8baddb9fc5f46e51c40d17131b7933924434bad4fd7bb449a5d49142cd425c3a964f9ef56b29c752dbbb36e4d1f9a071e473ea3b5bb2d9355849a7db10fec7531429f4a54f38459c694c3f81c51b897ffcbec365be98ab37e4ce7d432609703c9413f031f272c2e1ca38d291673337530a9c6220f9c065a4d1f9f0e3341cb2c6d04f2a5e612b4b278085bbd4a61869713477b74b82d2a5f18e6839a166b27be8d566ed801df7fd5bcd9e8bb16be3dbdef319d8fd5b5b1ac164c5746c418ff880e94c", 0xc7}, {&(0x7f0000000c80)="c0799d79a4de967f459d3033b1c19d156fdaaf994bf5de338dbefe67da10d8de5d2dc2514d4d4a5d57bd3d1f68f80090c8e9fe848405ae57f9326dbfedb2406750d3b7e852ba9c24f9eb", 0x4a}, {&(0x7f0000000d00)="9d4b7adc3b164442445f2af4e453dcac4c57b4e910a4", 0x16}, {&(0x7f0000000d40)="046d8649ea27be06e77e5baa4360aedc975e79750b98ddc9b1ecf93ef7dce60d5b3f89767f29072565252d9227f859d887bf35d205a0e098f65947bb7bf9cd31a8e88feaf26af41d9fbacd18", 0x4c}, {&(0x7f0000000dc0)="d3c0bb3281e3714c0d111d61ca3d837fb1eb2f3a526481d930cdc11dde2d70273505de769ae2e3248cd43fb2c198ce6c399e05c9f7c7dbf5d3900661cd2ec03c5ff76e1478f4e48541b747d5ed3c06194bf0169ac6b0913f96d11d73338e2b3f677348555a4f666a44eb4172564acd6b44ecd09af3e022673204e92646b552856c4a03e217775af2daac612de1ddc205669a6f12543aebe08271ee9892b8b666730d78acb5a9d767ac1d54ae13c26f734cb2ff5a3ce0601b3dc0a3d5e52c5efaaf607778843474663b46424ab90219766a844e01a2bb5ad79434d9e4ed9982a3ed7d4d4628012d05a7eb5a937f5635106cf301f2c717395ab496710e91", 0xfd}], 0xa, &(0x7f0000001040)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x26}}}}, @ip_retopts={{0x14, 0x0, 0x7, {[@ra={0x94, 0x4}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xa39}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @multicast1, @broadcast}}}], 0x70}}, {{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f00000010c0)="af5fa776058bdbcb27c502c842976792cdc62ba667829047a63b78ac7abe35f6fc7f0dc9619600bb9ef7fd689bb314e7140e8cb2c68ec71eb6c6bee664e4b3060daa9e4b83c9470fe84ffbe6", 0x4c}, {&(0x7f0000001140)="dd36d72edec00b9132f035077cef46a33772a82967933e87f587cc3267360b5c95fdf35216dde85a9805c28d2f5ead0d64528040be59a3bb71f31c1dd0983779ab450cb734b5a39d6c67cc0e2c493d871f25c27e", 0x54}], 0x2, &(0x7f00000012c0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @multicast2, @multicast2}}}], 0x38}}, {{&(0x7f0000001300)={0x2, 0x4e22, @multicast2}, 0x10, &(0x7f0000001340)}}], 0x5, 0x20000000) r4 = openat(0xffffffffffffffff, &(0x7f00000014c0)='./file0\x00', 0x2, 0x84) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f0000001500)={0x0, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2d}}}}, &(0x7f00000015c0)=0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000001600)={0x6, 0xe, 0x10001, 0xfffffff5, r5}, 0x10) (async, rerun: 32) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000001640)={'vxcan1\x00', {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}) (async, rerun: 32) ioctl$INCFS_IOC_CREATE_FILE(r4, 0xc058671e, &(0x7f0000002880)={{'\x00', 0x1}, {0x7}, 0x58, 0x0, 0x0, &(0x7f0000001680)='./file0\x00', &(0x7f00000016c0)='./file0\x00', &(0x7f0000001700)="c4e8a5d0db581936e52c6ff224c6a6bf0147553e65ad109a48fc06f50968a4587b8f33b49d75dff70ed1e441c2eac114d955e7584f9b7017f612d4e17362a3bd159f35382dee64c20d46395af70ba7f12ccf0df12388b76f8296dfdeb911aa78", 0x60, 0x0, &(0x7f0000001780)={0x2, 0xbe, {0x1, 0xc, 0x35, "56071cbb3465702999a7cd2248c5bc57f0b18f67cf2210bc84430e5c7bbd35503d9f5fe16426e57f004c4c897922ee2be6e0a3b7f3", 0x7c, "d41e7a014c542963ec370e62e485b2edec5c6e3552a38618e01b15c40ddb19094960d294f80f3b2e620866432c99c72c3226fcf06e9efde68af33c71c3c578dac9f3bd2426afdb3d4287ad1f44e937ad44b595e3fc68114350c9f8b16dcb23c2e73a539dcf9b153d35c98776d52e88667d88656d2d4bc88217b31d64"}, 0x1000, "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"}, 0x10ca}) (async, rerun: 32) getpeername$inet(r1, &(0x7f0000002900)={0x2, 0x0, @empty}, &(0x7f0000002940)=0x10) (async, rerun: 32) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000002980)) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, &(0x7f00000029c0)={r5, 0xfffffffe}, &(0x7f0000002a00)=0x8) r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000002a40), 0x202080, 0x0) (async) r7 = gettid() fcntl$lock(r6, 0x7, &(0x7f0000002a80)={0x1, 0x2, 0x5051, 0x7f, r7}) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000002ac0)={0x2, 0x4, 0x8, 0x1, 0x80, r4, 0x7fffffff, '\x00', r2, r6, 0x3, 0x2, 0x4, 0x0, @void, @value, @void, @value}, 0x50) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000002c00)={'syztnl0\x00', &(0x7f0000002b40)={'syztnl1\x00', 0x0, 0x0, 0x700, 0x9, 0x9669, {{0x23, 0x4, 0x3, 0x9, 0x8c, 0x68, 0x0, 0x8, 0x29, 0x0, @local, @remote, {[@generic={0x7, 0xb, "41a39d4e93c47c20ea"}, @noop, @timestamp={0x44, 0x2c, 0xcf, 0x0, 0xf, [0x1, 0x0, 0x10000, 0x6, 0x1, 0x6, 0xffff, 0x26, 0x4, 0xd]}, @lsrr={0x83, 0x13, 0x5b, [@empty, @empty, @rand_addr=0x64010100, @multicast1]}, @cipso={0x86, 0x2a, 0x0, [{0x1, 0xa, "2768ed5a4ad11050"}, {0x7, 0x5, "19493a"}, {0x2, 0xc, "06711c56470ba1f340f1"}, {0x2, 0x9, "1b2092596f9693"}]}]}}}}}) bpf$MAP_CREATE(0x0, &(0x7f0000002c40)=@base={0xc, 0xff, 0x9, 0x7, 0x78, r6, 0x0, '\x00', r8, r6, 0x2, 0x1, 0x1, 0x0, @void, @value, @void, @value}, 0x50) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002d00), r4) sendmsg$NL80211_CMD_SET_TID_CONFIG(r6, &(0x7f0000002e80)={&(0x7f0000002cc0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000002e40)={&(0x7f0000002d40)={0xc8, r9, 0x400, 0xffffffff, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0xac, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xc2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x96}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xba}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x2f}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xf8}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xd0}]}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x20000080}, 0x4000040) (async, rerun: 64) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000002fc0)={'syztnl0\x00', &(0x7f0000002ec0)={'syztnl2\x00', r2, 0x700, 0x7800, 0x8001, 0x10000, {{0x2f, 0x4, 0x3, 0x8, 0xbc, 0x64, 0x0, 0x1, 0x29, 0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_prespec={0x44, 0x3c, 0xd0, 0x3, 0x3, [{@multicast1, 0x2}, {@rand_addr=0x64010100, 0xfffffff7}, {@rand_addr=0x64010101, 0x7fffffff}, {@empty, 0xfff}, {@remote, 0x3}, {@loopback, 0x7}, {@private=0xa010101, 0x6}]}, @timestamp={0x44, 0x24, 0x5b, 0x0, 0x2, [0x778c, 0x10000, 0xfffffffd, 0xc, 0x101, 0x2, 0x800, 0xe]}, @timestamp={0x44, 0x14, 0x6d, 0x0, 0x5, [0xffff, 0xd, 0x8, 0x200]}, @cipso={0x86, 0xe, 0x3, [{0x1, 0x8, "c0e96a6a52b5"}]}, @cipso={0x86, 0xd, 0xffffffffffffffff, [{0x5, 0x7, "221556b65c"}]}, @timestamp={0x44, 0x18, 0x2b, 0x0, 0x3, [0x6, 0x4, 0x6, 0xf11c, 0x80]}, @noop]}}}}}) (rerun: 64) r10 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r10, &(0x7f00000030c0)={&(0x7f0000003000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000003080)={&(0x7f0000003040)={0x20, 0x1407, 0x400, 0x70bd2b, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r4}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x24044084) (async) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000003140)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEV(r11, &(0x7f0000003200)={&(0x7f0000003100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000031c0)={&(0x7f0000003180)={0x34, 0x0, 0x20, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_DEVICE={0xc, 0x2e, 0x0, 0x1, [@NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa2}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r12}]}, 0x34}, 0x1, 0x0, 0x0, 0x54018}, 0x10010) (async) accept4$tipc(r6, &(0x7f0000003240)=@name, &(0x7f0000003280)=0x10, 0x0) renameat2(0xffffffffffffffff, &(0x7f0000003300)='./file0\x00', r6, &(0x7f0000003340)='./file0\x00', 0x4) 2.005751951s ago: executing program 3 (id=1686): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x2d) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000e, 0x11, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="adffa888000000001c00128009000100626f6e64000000000c000280050001000600000008000a0079"], 0x44}}, 0x0) getpid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) openat$selinux_attr(0xffffffffffffff9c, 0x0, 0x2, 0x0) 1.985254221s ago: executing program 5 (id=1687): r0 = syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x8080, &(0x7f0000000040)={[{@norecovery}, {@dioread_nolock}, {@sysvgroups}, {@lazytime}]}, 0xee, 0x49b, &(0x7f0000000a40)="$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") epoll_create1(0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="184000000000000000000000000076e745270000", @ANYRES32=r1, @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x73e, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) socket$tipc(0x1e, 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0xa, 0x2) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000002740)='/proc/sys/net/ipv4/vs/nat_icmp_send\x00', 0x2, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r6}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xff, 0x0, 0x7ffc0001}]}) epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) lseek(r4, 0x1, 0x1) socket$packet(0x11, 0x3, 0x300) r7 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 1.862985282s ago: executing program 4 (id=1688): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1b, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000054fdffff18112d70f86cd5df0000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x2d) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0) 1.811926333s ago: executing program 2 (id=1689): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) connect$inet6(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0x20000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x4) r5 = dup2(r4, r4) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000000)={'\x00', 0x2, 0x200000a, 0xae19, 0x0, 0xffffffffffffffff}) r6 = dup(r1) write$P9_RLERRORu(r6, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r6, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r6, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000180)=ANY=[@ANYRESDEC=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) mkdirat(0xffffffffffffff9c, 0x0, 0x42) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001200)={&(0x7f00000005c0)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x8000000000000000}, 0x18) creat(&(0x7f0000000380)='./file0\x00', 0x80) 1.739380544s ago: executing program 2 (id=1690): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f00000000c0), 0xfc, 0x574, &(0x7f0000000e40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x10b) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x1, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) write$tcp_congestion(r0, &(0x7f0000000340)='hybla\x00', 0xfffffee6) 1.723476684s ago: executing program 3 (id=1691): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000200), &(0x7f0000000540)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0xb8ca}, 0x18) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r3 = fcntl$dupfd(r2, 0x0, r2) write$sndseq(r3, &(0x7f0000000180)=[{0xff, 0x0, 0x0, 0x0, @time={0xe}, {}, {}, @result={0x1, 0x2}}, {0x0, 0x0, 0xff, 0x3, @tick=0xf27, {0x1, 0x31}, {}, @addr={0x2a, 0x5}}], 0x38) readv(r3, &(0x7f0000000480)=[{&(0x7f0000000780)=""/152, 0x23}, {0x0}], 0x2) 1.649769546s ago: executing program 3 (id=1692): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) setitimer(0x2, 0x0, 0x0) 1.649016455s ago: executing program 5 (id=1693): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sys_enter\x00', r0}, 0x10) timer_gettime(0x0, 0x0) 1.632563195s ago: executing program 5 (id=1694): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x2d) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000e, 0x11, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="adffa888000000001c00128009000100626f6e64000000000c000280050001000600000008000a0079"], 0x44}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) openat$selinux_attr(0xffffffffffffff9c, 0x0, 0x2, 0x0) 1.632293305s ago: executing program 3 (id=1695): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f00000000c0), 0xfc, 0x574, &(0x7f0000000e40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x10b) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x1, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000040), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$tcp_congestion(r0, &(0x7f0000000340)='hybla\x00', 0xfffffee6) 1.568343576s ago: executing program 0 (id=1696): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x50, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x3000010, &(0x7f0000000040)={[{@journal_dev={'journal_dev', 0x3d, 0xd353}}, {@auto_da_alloc}]}, 0x1, 0x512, &(0x7f0000000380)="$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") 953.205504ms ago: executing program 4 (id=1697): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="08eabc2b27cb0955bad9cd0bc2ce6e511ee08f44"], 0x48) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/nat_icmp_send\x00', 0x2, 0x0) r1 = syz_io_uring_setup(0x1e1e, &(0x7f0000000540)={0x0, 0x58ed, 0x8000, 0xffffffff}, &(0x7f0000000400)=0x0, &(0x7f0000000000)) syz_io_uring_submit(r2, 0x0, &(0x7f00000001c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x22, 0x2000, @fd_index=0x3, 0x0, 0x0, 0x0, 0x8, 0x1, {0x3}}) io_uring_enter(r1, 0x48e9, 0x225e, 0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="000000000000000097080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b79e040000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x86, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f00000002c0)=ANY=[@ANYRES16=r6, @ANYRES32=r7, @ANYRESDEC=r5, @ANYRES32=r6, @ANYRES8=r4], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1100000, &(0x7f00000004c0)={[{@grpjquota}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x200}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@noquota}, {@discard}, {@nolazytime}], [{@seclabel}]}, 0x1, 0x446, &(0x7f0000000d40)="$eJzs28tvG8UfAPDv2kn6/P1qqvLoAwgURMQjadJSeuACAokDSEhwKMeQpFWo26AmSLSKICBUjqgSd8QRib+AE1wQcELiCndUqUK5tMDFaOPdxHbttA5ONtSfj7TJzO44M1/vjj07kw2gbw2nP5KIvRHxa0Tsq2ebCwzXf91cXpz6c3lxKola7Y0/kpVyN5YXp/Ki+ev25JmBiNInSRxuU+/8pcvnJqvVmYtZfmzh/Ltj85cuPzN7fvLszNmZCxOnTp04Pv7cyYlnexJnGteNQx/MHTn4yltXX5s6ffXtH79O8vhb4uiR4fUOPl6r9bi6Yv2vIZ0MFNgQulKud9MYXOn/+6IcaydvX7z8caGNAzZVrVar3df58FINuIslUXQLgGLkX/Tp/W++bdHQY1u4/kL9BiiN+2a21Y8MRCkrM9hyf9tLwxFxeumvL9ItNmceAgCgybfp+OfpbPzXtPBTisZ5of9nayiViLgnIvZHxMmIOBAR90aslL0/Ih7osv7WRZJbxz+la13+ya6k47/ns7Wt5vFfPvqLSjni73y4XInB5MxsdeZY9p6MxOCOND++Th3fvfTLZ52ONY7/0i2tPx8LZu24NrCj+TXTkwuT/ybmRtc/ijg00C7+ZHUlIL0sDkbEoQ3WMfvkV0c6Hbt9/M2GGjM9WGeqfRnxRP38L0VL/Llk/fXJsZ1RnTk2ll8Vt/rp5yuvd6q/2/h7LT3/u9te/6vxV5LG9dr57uu48tunHe9pNnr9DyVvNu17f3Jh4eJ4xFDyar3RjfsnWspNrJVP4x852r7/74+1d+JwRKQX8YMR8VBEPJy1/ZGIeDQijq4T/w8vPvZO856ki/g3Vxr/dFfnfy0xFK172ifK577/pqnSSnQRf3r+T6ykRrI9d/L5dyft2tjVDAAAAP89pYjYG0lpdDVdKo2O1v+H/0DsLlXn5heeOjP33oXp+jMClRgs5TNd9fng+nzoeHZbn+cnWvLHs3njz8u7VvKjU3PV6aKDhz63p0P/T/1eLrp1wKbzvBb0L/0f+pf+D/1L/4f+1ab/7yqiHcDWa/f9/2EB7QC2Xkv/t+wHfcT9P/Qv/R/6l/4PfWl+V9z+Ifntmti5PZrRn4koFVd7PkNV+JtwFycK/mACAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADokX8CAAD//2Ts5lU=") r9 = syz_open_dev$loop(&(0x7f0000000140), 0x2, 0x2a382) r10 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010026000000000000000c0000000c00000002000000000000000000"], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000001740)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_open_dev$tty20(0xc, 0x4, 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare(0x44040200) socket$igmp(0x2, 0x3, 0x2) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r6}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 776.942668ms ago: executing program 5 (id=1700): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x10000, 0x1}, 0x8002, 0x0, 0x1003, 0x2, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'wlc\x00', 0x15, 0x88, 0xc000067}, 0x2c) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='bic\x00', 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000170000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000feffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="900000001000010400000002fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="10000000a5804a2c600012800b000100697036746e6c"], 0x90}, 0x1, 0x0, 0x0, 0x8040}, 0x48000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000200)='kmem_cache_free\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x5, r3}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) mlockall(0x3) 770.502868ms ago: executing program 4 (id=1701): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) connect$inet6(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0x20000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x4) r5 = dup2(r4, r4) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000000)={'\x00', 0x2, 0x200000a, 0xae19, 0x0, 0xffffffffffffffff}) r6 = dup(r1) write$P9_RLERRORu(r6, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r6, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r6, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000180)=ANY=[@ANYRESDEC=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) mkdirat(0xffffffffffffff9c, 0x0, 0x42) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001200)={&(0x7f00000005c0)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x8000000000000000}, 0x18) creat(&(0x7f0000000380)='./file0\x00', 0x80) 767.013208ms ago: executing program 0 (id=1702): r0 = socket(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x68, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x80000000, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) write(r0, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000b4bffc)=0x1, 0x4) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = timerfd_create(0x0, 0x0) timerfd_settime(r4, 0x0, &(0x7f0000000080)={{}, {0x0, 0x3938700}}, 0x0) readv(r4, &(0x7f00000003c0)=[{&(0x7f0000000000)=""/33, 0x21}], 0x1) r5 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffdd, &(0x7f0000000000)='/proc/0KgOq\xee\x00!\xbd\xc2\x98#YP\xee\x9c2G\xf0\x81x\x97'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000001c0)=0x800, 0x4) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="89000000120081ae08060cdc030000007f1be3f74001000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e281ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014006040400010404009bbc7a46e3988285dcdf12f213e6f768fec601955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) write(r0, &(0x7f0000000000)='\"', 0xfdef) 730.562989ms ago: executing program 4 (id=1703): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x4508, &(0x7f00000004c0)={[{@noinit_itable}, {@block_validity}, {@sysvgroups}]}, 0x1, 0x4e4, &(0x7f0000001400)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x6}, 0x18) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x107842, 0x42) (fail_nth: 2) 721.326699ms ago: executing program 3 (id=1704): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x50, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x3000010, &(0x7f0000000040)={[{@journal_dev={'journal_dev', 0x3d, 0xd353}}, {@auto_da_alloc}]}, 0x1, 0x512, &(0x7f0000000380)="$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") 0s ago: executing program 4 (id=1705): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) bpf$PROG_LOAD(0x5, &(0x7f0000001e00)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) kernel console output (not intermixed with test programs): ? avc_has_perm_noaudit+0x1cc/0x210 [ 131.058473][ T7599] ? avc_has_perm+0xd6/0x150 [ 131.058632][ T7599] ? mntput+0x49/0x70 [ 131.058652][ T7599] ? terminate_walk+0x271/0x290 [ 131.058671][ T7599] ? __rcu_read_unlock+0x4e/0x70 [ 131.058688][ T7599] ? avc_has_perm_noaudit+0x1cc/0x210 [ 131.058729][ T7599] ? _raw_spin_unlock_bh+0x36/0x40 [ 131.058753][ T7599] ? lock_sock_nested+0x114/0x140 [ 131.058778][ T7599] ? avc_has_perm+0xd6/0x150 [ 131.058798][ T7599] tcp_recvmsg+0x13e/0x490 [ 131.058835][ T7599] ? __pfx_tcp_recvmsg+0x10/0x10 [ 131.058857][ T7599] inet_recvmsg+0xc0/0x2a0 [ 131.058932][ T7599] sock_recvmsg+0xfe/0x170 [ 131.058956][ T7599] __sys_recvfrom+0x128/0x200 [ 131.058999][ T7599] __x64_sys_recvfrom+0x78/0x90 [ 131.059017][ T7599] x64_sys_call+0x17e7/0x2e10 [ 131.059034][ T7599] do_syscall_64+0xc9/0x1a0 [ 131.059117][ T7599] ? clear_bhb_loop+0x25/0x80 [ 131.059134][ T7599] ? clear_bhb_loop+0x25/0x80 [ 131.059206][ T7599] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.059225][ T7599] RIP: 0033:0x7ff89169e169 [ 131.059237][ T7599] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 131.059251][ T7599] RSP: 002b:00007ff88fd07038 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 131.059267][ T7599] RAX: ffffffffffffffda RBX: 00007ff8918c5fa0 RCX: 00007ff89169e169 [ 131.059276][ T7599] RDX: fffffffffffffd0b RSI: 0000200000000080 RDI: 0000000000000003 [ 131.059286][ T7599] RBP: 00007ff88fd07090 R08: 0000000000000000 R09: fffffffffffffd25 [ 131.059298][ T7599] R10: 0000000000000700 R11: 0000000000000246 R12: 0000000000000001 [ 131.059339][ T7599] R13: 0000000000000000 R14: 00007ff8918c5fa0 R15: 00007ffcbe604668 [ 131.059356][ T7599] [ 131.414350][ T29] kauditd_printk_skb: 245 callbacks suppressed [ 131.414369][ T29] audit: type=1326 audit(1744987639.261:6577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7604 comm="syz.3.1292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff89169e169 code=0x7ffc0000 [ 131.447109][ T29] audit: type=1326 audit(1744987639.261:6578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7604 comm="syz.3.1292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff89169e169 code=0x7ffc0000 [ 131.471005][ T29] audit: type=1326 audit(1744987639.261:6579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7604 comm="syz.3.1292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff89169e169 code=0x7ffc0000 [ 131.495872][ T29] audit: type=1326 audit(1744987639.261:6580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7604 comm="syz.3.1292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff89169e169 code=0x7ffc0000 [ 131.521830][ T29] audit: type=1326 audit(1744987639.261:6581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7604 comm="syz.3.1292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=51 compat=0 ip=0x7ff89169e169 code=0x7ffc0000 [ 131.549726][ T29] audit: type=1326 audit(1744987639.261:6582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7604 comm="syz.3.1292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff89169e169 code=0x7ffc0000 [ 131.576672][ T29] audit: type=1326 audit(1744987639.261:6583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7606 comm="syz.0.1290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55f398e169 code=0x7ffc0000 [ 131.601971][ T29] audit: type=1326 audit(1744987639.261:6584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7606 comm="syz.0.1290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f55f398e169 code=0x7ffc0000 [ 131.627917][ T29] audit: type=1326 audit(1744987639.261:6585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7606 comm="syz.0.1290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55f398e169 code=0x7ffc0000 [ 131.653739][ T29] audit: type=1326 audit(1744987639.261:6586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7606 comm="syz.0.1290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f55f398e169 code=0x7ffc0000 [ 131.728764][ T7622] FAULT_INJECTION: forcing a failure. [ 131.728764][ T7622] name failslab, interval 1, probability 0, space 0, times 0 [ 131.744482][ T7622] CPU: 0 UID: 0 PID: 7622 Comm: syz.0.1299 Not tainted 6.15.0-rc2-syzkaller-00278-gfc96b232f8e7 #0 PREEMPT(voluntary) [ 131.744551][ T7622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 131.744561][ T7622] Call Trace: [ 131.744568][ T7622] [ 131.744575][ T7622] dump_stack_lvl+0xf6/0x150 [ 131.744598][ T7622] dump_stack+0x15/0x1a [ 131.744615][ T7622] should_fail_ex+0x261/0x270 [ 131.744692][ T7622] should_failslab+0x8f/0xb0 [ 131.744711][ T7622] kmem_cache_alloc_node_noprof+0x5c/0x340 [ 131.744735][ T7622] ? __alloc_skb+0x10d/0x320 [ 131.744752][ T7622] __alloc_skb+0x10d/0x320 [ 131.744768][ T7622] tipc_buf_acquire+0x2c/0xb0 [ 131.744832][ T7622] tipc_named_withdraw+0x144/0x380 [ 131.744858][ T7622] tipc_nametbl_withdraw+0x10b/0x200 [ 131.744886][ T7622] tipc_sk_leave+0x266/0x280 [ 131.744912][ T7622] tipc_release+0x85/0xa70 [ 131.744931][ T7622] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 131.744963][ T7622] ? locks_remove_posix+0x1b2/0x320 [ 131.745023][ T7622] ? vfs_write+0x669/0x950 [ 131.745049][ T7622] sock_close+0x68/0x150 [ 131.745163][ T7622] ? __pfx_sock_close+0x10/0x10 [ 131.745185][ T7622] __fput+0x2ac/0x640 [ 131.745206][ T7622] fput_close_sync+0xc0/0x110 [ 131.745229][ T7622] __x64_sys_close+0x55/0xe0 [ 131.745299][ T7622] x64_sys_call+0x262b/0x2e10 [ 131.745320][ T7622] do_syscall_64+0xc9/0x1a0 [ 131.745345][ T7622] ? clear_bhb_loop+0x25/0x80 [ 131.745366][ T7622] ? clear_bhb_loop+0x25/0x80 [ 131.745456][ T7622] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.745497][ T7622] RIP: 0033:0x7f55f398e169 [ 131.745513][ T7622] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 131.745530][ T7622] RSP: 002b:00007f55f1ff7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 131.745546][ T7622] RAX: ffffffffffffffda RBX: 00007f55f3bb5fa0 RCX: 00007f55f398e169 [ 131.745556][ T7622] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 131.745571][ T7622] RBP: 00007f55f1ff7090 R08: 0000000000000000 R09: 0000000000000000 [ 131.745582][ T7622] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 131.745593][ T7622] R13: 0000000000000000 R14: 00007f55f3bb5fa0 R15: 00007fffb617faa8 [ 131.745629][ T7622] [ 131.745637][ T7622] tipc: Withdrawal distribution failure [ 131.859043][ T7632] hub 9-0:1.0: USB hub found [ 132.003423][ T7641] capability: warning: `syz.0.1304' uses deprecated v2 capabilities in a way that may be insecure [ 132.006997][ T7632] hub 9-0:1.0: 8 ports detected [ 132.065605][ T7644] loop0: detected capacity change from 0 to 512 [ 132.068433][ T7632] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1302'. [ 132.099514][ T7644] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #3: comm syz.0.1306: corrupted inode contents [ 132.126438][ T7644] EXT4-fs error (device loop0): ext4_dirty_inode:6103: inode #3: comm syz.0.1306: mark_inode_dirty error [ 132.138553][ T7644] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #3: comm syz.0.1306: corrupted inode contents [ 132.161359][ T7651] netlink: 'syz.4.1308': attribute type 4 has an invalid length. [ 132.169991][ T7651] netlink: 'syz.4.1308': attribute type 27 has an invalid length. [ 132.178055][ T7651] netlink: 'syz.4.1308': attribute type 3 has an invalid length. [ 132.186174][ T7651] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1308'. [ 132.200058][ T7651] loop4: detected capacity change from 0 to 128 [ 132.206945][ T7644] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #3: comm syz.0.1306: mark_inode_dirty error [ 132.220022][ T7644] EXT4-fs error (device loop0): ext4_acquire_dquot:6935: comm syz.0.1306: Failed to acquire dquot type 0 [ 132.233947][ T7644] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #16: comm syz.0.1306: corrupted inode contents [ 132.248752][ T7644] EXT4-fs error (device loop0): ext4_dirty_inode:6103: inode #16: comm syz.0.1306: mark_inode_dirty error [ 132.261123][ T7644] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #16: comm syz.0.1306: corrupted inode contents [ 132.275562][ T7644] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #16: comm syz.0.1306: mark_inode_dirty error [ 132.287121][ T7644] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #16: comm syz.0.1306: corrupted inode contents [ 132.300232][ T7644] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 132.309283][ T7644] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #16: comm syz.0.1306: corrupted inode contents [ 132.325358][ T7653] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 132.331258][ T7644] EXT4-fs error (device loop0): ext4_truncate:4255: inode #16: comm syz.0.1306: mark_inode_dirty error [ 132.350203][ T7644] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 132.362258][ T41] kworker/u8:2: attempt to access beyond end of device [ 132.362258][ T41] loop4: rw=1, sector=153, nr_sectors = 8 limit=128 [ 132.378243][ T7644] EXT4-fs (loop0): 1 truncate cleaned up [ 132.384237][ T41] kworker/u8:2: attempt to access beyond end of device [ 132.384237][ T41] loop4: rw=1, sector=169, nr_sectors = 8 limit=128 [ 132.384560][ T7644] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.399863][ T41] kworker/u8:2: attempt to access beyond end of device [ 132.399863][ T41] loop4: rw=1, sector=185, nr_sectors = 8 limit=128 [ 132.429042][ T41] kworker/u8:2: attempt to access beyond end of device [ 132.429042][ T41] loop4: rw=1, sector=201, nr_sectors = 8 limit=128 [ 132.445284][ T41] kworker/u8:2: attempt to access beyond end of device [ 132.445284][ T41] loop4: rw=1, sector=217, nr_sectors = 8 limit=128 [ 132.461264][ T41] kworker/u8:2: attempt to access beyond end of device [ 132.461264][ T41] loop4: rw=1, sector=233, nr_sectors = 8 limit=128 [ 132.476656][ T41] kworker/u8:2: attempt to access beyond end of device [ 132.476656][ T41] loop4: rw=1, sector=249, nr_sectors = 8 limit=128 [ 132.491397][ T41] kworker/u8:2: attempt to access beyond end of device [ 132.491397][ T41] loop4: rw=1, sector=265, nr_sectors = 8 limit=128 [ 132.510772][ T41] kworker/u8:2: attempt to access beyond end of device [ 132.510772][ T41] loop4: rw=1, sector=281, nr_sectors = 8 limit=128 [ 132.528177][ T41] kworker/u8:2: attempt to access beyond end of device [ 132.528177][ T41] loop4: rw=1, sector=297, nr_sectors = 8 limit=128 [ 132.534228][ T7644] ext4 filesystem being mounted at /277/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 132.588826][ T7655] netlink: 'syz.4.1309': attribute type 39 has an invalid length. [ 132.611452][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.713113][ T7664] loop5: detected capacity change from 0 to 2048 [ 132.721244][ T7668] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1315'. [ 132.771485][ T7664] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.842730][ T7678] netlink: 'syz.0.1319': attribute type 4 has an invalid length. [ 132.861134][ T7678] netlink: 'syz.0.1319': attribute type 27 has an invalid length. [ 132.869301][ T7678] netlink: 'syz.0.1319': attribute type 3 has an invalid length. [ 132.877521][ T7678] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1319'. [ 132.892475][ T6170] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.907141][ T7678] loop0: detected capacity change from 0 to 128 [ 132.955150][ T7683] loop5: detected capacity change from 0 to 512 [ 133.099277][ T7683] EXT4-fs error (device loop5): ext4_do_update_inode:5211: inode #3: comm syz.5.1320: corrupted inode contents [ 133.161556][ T7683] EXT4-fs error (device loop5): ext4_dirty_inode:6103: inode #3: comm syz.5.1320: mark_inode_dirty error [ 133.203185][ T7690] bond7: entered promiscuous mode [ 133.208716][ T7690] bond7: entered allmulticast mode [ 133.270076][ T7690] 8021q: adding VLAN 0 to HW filter on device bond7 [ 133.279455][ T7683] EXT4-fs error (device loop5): ext4_do_update_inode:5211: inode #3: comm syz.5.1320: corrupted inode contents [ 133.306315][ T7690] bond7 (unregistering): Released all slaves [ 133.312623][ T7683] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #3: comm syz.5.1320: mark_inode_dirty error [ 133.330955][ T7683] EXT4-fs error (device loop5): ext4_acquire_dquot:6935: comm syz.5.1320: Failed to acquire dquot type 0 [ 133.335444][ T7693] hub 9-0:1.0: USB hub found [ 133.345963][ T7683] EXT4-fs error (device loop5): ext4_do_update_inode:5211: inode #16: comm syz.5.1320: corrupted inode contents [ 133.362831][ T7693] hub 9-0:1.0: 8 ports detected [ 133.362910][ T7683] EXT4-fs error (device loop5): ext4_dirty_inode:6103: inode #16: comm syz.5.1320: mark_inode_dirty error [ 133.384218][ T7683] EXT4-fs error (device loop5): ext4_do_update_inode:5211: inode #16: comm syz.5.1320: corrupted inode contents [ 133.397779][ T7683] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #16: comm syz.5.1320: mark_inode_dirty error [ 133.410050][ T7683] EXT4-fs error (device loop5): ext4_do_update_inode:5211: inode #16: comm syz.5.1320: corrupted inode contents [ 133.422644][ T7683] EXT4-fs error (device loop5) in ext4_orphan_del:305: Corrupt filesystem [ 133.432559][ T7683] EXT4-fs error (device loop5): ext4_do_update_inode:5211: inode #16: comm syz.5.1320: corrupted inode contents [ 133.446922][ T7683] EXT4-fs error (device loop5): ext4_truncate:4255: inode #16: comm syz.5.1320: mark_inode_dirty error [ 133.460541][ T7697] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1323'. [ 133.466960][ T7683] EXT4-fs error (device loop5) in ext4_process_orphan:347: Corrupt filesystem [ 133.481463][ T7683] EXT4-fs (loop5): 1 truncate cleaned up [ 133.488705][ T7683] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.504176][ T7683] ext4 filesystem being mounted at /78/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 133.530705][ T6170] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.552206][ T7700] loop5: detected capacity change from 0 to 512 [ 133.560121][ T7700] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 133.768772][ T7700] loop5: detected capacity change from 0 to 2048 [ 133.963936][ T7711] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 134.133489][ T7715] loop5: detected capacity change from 0 to 2048 [ 134.194516][ T7715] loop5: p1 < > p4 [ 134.199493][ T7715] loop5: p4 size 8388608 extends beyond EOD, truncated [ 134.209442][ T7715] netlink: 332 bytes leftover after parsing attributes in process `syz.5.1330'. [ 134.250113][ T7719] netlink: 'syz.2.1333': attribute type 4 has an invalid length. [ 134.272677][ T7719] netlink: 'syz.2.1333': attribute type 27 has an invalid length. [ 134.281358][ T7719] netlink: 'syz.2.1333': attribute type 3 has an invalid length. [ 134.289983][ T7719] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1333'. [ 134.302658][ T7719] loop2: detected capacity change from 0 to 128 [ 134.985156][ T7746] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 135.005251][ T7748] loop2: detected capacity change from 0 to 128 [ 135.044754][ T7750] loop0: detected capacity change from 0 to 512 [ 135.088440][ T3005] loop5: p1 < > p4 [ 135.094764][ T3005] loop5: p4 size 8388608 extends beyond EOD, truncated [ 135.118125][ T7750] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #3: comm syz.0.1346: corrupted inode contents [ 135.231436][ T7750] EXT4-fs error (device loop0): ext4_dirty_inode:6103: inode #3: comm syz.0.1346: mark_inode_dirty error [ 135.276104][ T3490] udevd[3490]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 135.287925][ T3546] udevd[3546]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 135.307173][ T7750] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #3: comm syz.0.1346: corrupted inode contents [ 135.318994][ T7760] hub 9-0:1.0: USB hub found [ 135.337538][ T7750] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #3: comm syz.0.1346: mark_inode_dirty error [ 135.343166][ T7760] hub 9-0:1.0: 8 ports detected [ 135.351345][ T7750] EXT4-fs error (device loop0): ext4_acquire_dquot:6935: comm syz.0.1346: Failed to acquire dquot type 0 [ 135.368979][ T7750] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #16: comm syz.0.1346: corrupted inode contents [ 135.455789][ T7750] EXT4-fs error (device loop0): ext4_dirty_inode:6103: inode #16: comm syz.0.1346: mark_inode_dirty error [ 135.471379][ T7750] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #16: comm syz.0.1346: corrupted inode contents [ 135.486116][ T7750] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #16: comm syz.0.1346: mark_inode_dirty error [ 135.536253][ T7750] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #16: comm syz.0.1346: corrupted inode contents [ 135.553672][ T7750] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 135.604452][ T7750] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #16: comm syz.0.1346: corrupted inode contents [ 135.619257][ T7750] EXT4-fs error (device loop0): ext4_truncate:4255: inode #16: comm syz.0.1346: mark_inode_dirty error [ 135.632519][ T7750] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 135.643740][ T7750] EXT4-fs (loop0): 1 truncate cleaned up [ 135.650502][ T7750] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.669515][ T7750] ext4 filesystem being mounted at /290/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 135.689833][ T7774] loop2: detected capacity change from 0 to 2048 [ 135.698786][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.724621][ T7774] loop2: p1 < > p4 [ 135.729442][ T7774] loop2: p4 size 8388608 extends beyond EOD, truncated [ 135.744329][ T7774] netlink: 332 bytes leftover after parsing attributes in process `syz.2.1352'. [ 135.758668][ T7779] loop0: detected capacity change from 0 to 512 [ 135.824206][ T7779] Invalid logical block size (7) [ 135.853741][ T7777] bond4: entered promiscuous mode [ 135.859096][ T7777] bond4: entered allmulticast mode [ 135.864923][ T7777] 8021q: adding VLAN 0 to HW filter on device bond4 [ 135.878221][ T7777] bond4 (unregistering): Released all slaves [ 135.904469][ T7779] loop2: detected capacity change from 2048 to 2047 [ 135.909426][ T7786] loop3: detected capacity change from 0 to 1024 [ 135.945619][ T7786] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.987035][ T7786] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 136.009822][ T7786] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 63 with max blocks 65 with error 28 [ 136.023399][ T7786] EXT4-fs (loop3): This should not happen!! Data will be lost [ 136.023399][ T7786] [ 136.034315][ T7786] EXT4-fs (loop3): Total free blocks count 0 [ 136.041892][ T7786] EXT4-fs (loop3): Free/Dirty block details [ 136.048302][ T7786] EXT4-fs (loop3): free_blocks=68451041280 [ 136.054855][ T7786] EXT4-fs (loop3): dirty_blocks=96 [ 136.060060][ T7786] EXT4-fs (loop3): Block reservation details [ 136.066183][ T7786] EXT4-fs (loop3): i_reserved_data_blocks=6 [ 136.094633][ T51] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 136.615523][ T29] kauditd_printk_skb: 479 callbacks suppressed [ 136.615537][ T29] audit: type=1326 audit(1744987644.491:7060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7814 comm="syz.2.1368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f442f06e169 code=0x7ffc0000 [ 136.656976][ T7816] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 136.674936][ T29] audit: type=1326 audit(1744987644.521:7061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7814 comm="syz.2.1368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f442f06e169 code=0x7ffc0000 [ 136.699967][ T29] audit: type=1326 audit(1744987644.521:7062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7814 comm="syz.2.1368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f442f06e169 code=0x7ffc0000 [ 136.725209][ T29] audit: type=1326 audit(1744987644.521:7063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7814 comm="syz.2.1368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f442f06e169 code=0x7ffc0000 [ 136.750509][ T29] audit: type=1326 audit(1744987644.531:7064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7814 comm="syz.2.1368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f442f06e169 code=0x7ffc0000 [ 136.775351][ T29] audit: type=1326 audit(1744987644.531:7065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7814 comm="syz.2.1368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f442f06e169 code=0x7ffc0000 [ 136.801260][ T29] audit: type=1326 audit(1744987644.531:7066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7814 comm="syz.2.1368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f442f06e169 code=0x7ffc0000 [ 136.828481][ T29] audit: type=1326 audit(1744987644.531:7067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7814 comm="syz.2.1368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f442f06e169 code=0x7ffc0000 [ 136.856830][ T29] audit: type=1326 audit(1744987644.531:7068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7814 comm="syz.2.1368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f442f06e169 code=0x7ffc0000 [ 136.885475][ T29] audit: type=1326 audit(1744987644.551:7069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7818 comm="syz.5.1369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4e4ebe169 code=0x7ffc0000 [ 137.109719][ T7821] bond1: entered promiscuous mode [ 137.115126][ T7821] bond1: entered allmulticast mode [ 137.121035][ T7821] 8021q: adding VLAN 0 to HW filter on device bond1 [ 137.132725][ T7821] bond1 (unregistering): Released all slaves [ 137.181775][ T7823] bond4: entered promiscuous mode [ 137.187133][ T7823] bond4: entered allmulticast mode [ 137.193753][ T7823] 8021q: adding VLAN 0 to HW filter on device bond4 [ 137.236282][ T7831] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1372'. [ 137.247245][ T7823] bond4 (unregistering): Released all slaves [ 137.315338][ T7828] loop4: detected capacity change from 0 to 2048 [ 137.446534][ T7851] bio_check_eod: 441 callbacks suppressed [ 137.446555][ T7851] syz.0.1377: attempt to access beyond end of device [ 137.446555][ T7851] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 137.737529][ T7877] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 138.127085][ T7896] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1385'. [ 138.137519][ T7896] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1385'. [ 138.230341][ T7886] bond5: entered promiscuous mode [ 138.236422][ T7886] bond5: entered allmulticast mode [ 138.263962][ T7886] 8021q: adding VLAN 0 to HW filter on device bond5 [ 138.438667][ T7926] loop3: detected capacity change from 0 to 128 [ 138.503291][ T7926] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a842c018, mo2=0002] [ 138.605909][ T7926] System zones: 1-3, 19-19, 35-36 [ 138.616743][ T7926] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 138.640615][ T7926] ext4 filesystem being mounted at /297/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 138.741691][ T7945] loop0: detected capacity change from 0 to 512 [ 138.977121][ T7945] EXT4-fs (loop0): inodes count not valid: 2 vs 32 [ 139.160771][ T7963] loop2: detected capacity change from 0 to 2048 [ 139.184194][ T3313] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 139.195143][ T7963] loop2: p1 < > p4 [ 139.200721][ T7963] loop2: p4 size 8388608 extends beyond EOD, truncated [ 139.211879][ T3005] loop2: p1 < > p4 [ 139.217780][ T3005] loop2: p4 size 8388608 extends beyond EOD, truncated [ 139.228275][ T7963] netlink: 332 bytes leftover after parsing attributes in process `syz.2.1395'. [ 139.423942][ T7980] bond7: entered promiscuous mode [ 139.429628][ T7980] bond7: entered allmulticast mode [ 139.435898][ T7980] 8021q: adding VLAN 0 to HW filter on device bond7 [ 139.447105][ T7980] bond7 (unregistering): Released all slaves [ 139.588307][ T8002] loop0: detected capacity change from 0 to 2048 [ 139.634761][ T8002] loop0: p1 < > p4 [ 139.639632][ T8002] loop0: p4 size 8388608 extends beyond EOD, truncated [ 139.651505][ T8002] netlink: 332 bytes leftover after parsing attributes in process `syz.0.1401'. [ 139.892640][ T3005] loop2: p1 < > p4 [ 139.900194][ T3005] loop2: p4 size 8388608 extends beyond EOD, truncated [ 139.992731][ T3546] udevd[3546]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 140.003920][ T3490] udevd[3490]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 140.202384][ T8010] loop2: detected capacity change from 0 to 2048 [ 140.256003][ T3490] loop2: p1 < > p4 [ 140.307011][ T3490] loop2: p4 size 8388608 extends beyond EOD, truncated [ 140.317324][ T3005] loop0: p1 < > p4 [ 140.327565][ T8010] loop2: p1 < > p4 [ 140.328490][ T3005] loop0: p4 size 8388608 extends beyond EOD, truncated [ 140.332971][ T8010] loop2: p4 size 8388608 extends beyond EOD, truncated [ 140.343022][ T8014] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 140.352639][ T8010] netlink: 332 bytes leftover after parsing attributes in process `syz.2.1405'. [ 140.419886][ T8016] loop3: detected capacity change from 0 to 512 [ 140.789786][ T8018] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8018 comm=syz.2.1409 [ 140.827307][ T8029] FAULT_INJECTION: forcing a failure. [ 140.827307][ T8029] name failslab, interval 1, probability 0, space 0, times 0 [ 140.841498][ T8029] CPU: 0 UID: 0 PID: 8029 Comm: syz.5.1411 Not tainted 6.15.0-rc2-syzkaller-00278-gfc96b232f8e7 #0 PREEMPT(voluntary) [ 140.841595][ T8029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 140.841605][ T8029] Call Trace: [ 140.841612][ T8029] [ 140.841619][ T8029] dump_stack_lvl+0xf6/0x150 [ 140.841641][ T8029] dump_stack+0x15/0x1a [ 140.841657][ T8029] should_fail_ex+0x261/0x270 [ 140.841700][ T8029] should_failslab+0x8f/0xb0 [ 140.841720][ T8029] kmem_cache_alloc_noprof+0x59/0x340 [ 140.841778][ T8029] ? getname_flags+0x81/0x3b0 [ 140.841862][ T8029] getname_flags+0x81/0x3b0 [ 140.841893][ T8029] __x64_sys_mknod+0x40/0x60 [ 140.841941][ T8029] x64_sys_call+0x1713/0x2e10 [ 140.841968][ T8029] do_syscall_64+0xc9/0x1a0 [ 140.841990][ T8029] ? clear_bhb_loop+0x25/0x80 [ 140.842065][ T8029] ? clear_bhb_loop+0x25/0x80 [ 140.842095][ T8029] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.842185][ T8029] RIP: 0033:0x7fc4e4ebe169 [ 140.842200][ T8029] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 140.842237][ T8029] RSP: 002b:00007fc4e3527038 EFLAGS: 00000246 ORIG_RAX: 0000000000000085 [ 140.842254][ T8029] RAX: ffffffffffffffda RBX: 00007fc4e50e5fa0 RCX: 00007fc4e4ebe169 [ 140.842264][ T8029] RDX: 0000000000000000 RSI: 0000000008001420 RDI: 0000200000000040 [ 140.842274][ T8029] RBP: 00007fc4e3527090 R08: 0000000000000000 R09: 0000000000000000 [ 140.842291][ T8029] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 140.842300][ T8029] R13: 0000000000000000 R14: 00007fc4e50e5fa0 R15: 00007fff06077998 [ 140.842315][ T8029] [ 141.375159][ T3546] udevd[3546]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 141.388703][ T3380] udevd[3380]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 141.407361][ T3490] udevd[3490]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 141.435440][ T3546] udevd[3546]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 141.468151][ T3546] udevd[3546]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 141.479425][ T3490] udevd[3490]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 141.628421][ T29] kauditd_printk_skb: 354 callbacks suppressed [ 141.628436][ T29] audit: type=1326 audit(1744987649.501:7424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8040 comm="syz.5.1416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc4e4e5a359 code=0x7ffc0000 [ 141.740523][ T8047] loop0: detected capacity change from 0 to 512 [ 141.756848][ T29] audit: type=1326 audit(1744987649.541:7425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8040 comm="syz.5.1416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc4e4e5a359 code=0x7ffc0000 [ 141.782368][ T29] audit: type=1326 audit(1744987649.541:7426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8040 comm="syz.5.1416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4e4ebe169 code=0x7ffc0000 [ 141.806344][ T29] audit: type=1326 audit(1744987649.541:7427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8040 comm="syz.5.1416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc4e4e5a359 code=0x7ffc0000 [ 141.831006][ T29] audit: type=1326 audit(1744987649.541:7428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8040 comm="syz.5.1416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4e4ebe169 code=0x7ffc0000 [ 141.856205][ T29] audit: type=1326 audit(1744987649.551:7429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8040 comm="syz.5.1416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc4e4e5a359 code=0x7ffc0000 [ 141.881513][ T29] audit: type=1326 audit(1744987649.551:7430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8040 comm="syz.5.1416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4e4ebe169 code=0x7ffc0000 [ 141.905949][ T29] audit: type=1326 audit(1744987649.561:7431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8040 comm="syz.5.1416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc4e4e5a359 code=0x7ffc0000 [ 141.930686][ T29] audit: type=1326 audit(1744987649.561:7432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8040 comm="syz.5.1416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4e4ebe169 code=0x7ffc0000 [ 141.955936][ T29] audit: type=1326 audit(1744987649.581:7433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8040 comm="syz.5.1416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc4e4e5a359 code=0x7ffc0000 [ 141.999561][ T8047] loop2: detected capacity change from 0 to 16384 [ 142.098842][ T8045] bond6: entered promiscuous mode [ 142.104341][ T8045] bond6: entered allmulticast mode [ 142.117561][ T8047] Invalid logical block size (7) [ 142.124919][ T8045] 8021q: adding VLAN 0 to HW filter on device bond6 [ 142.132191][ T8053] loop4: detected capacity change from 0 to 2048 [ 142.145358][ T8045] bond6 (unregistering): Released all slaves [ 142.155562][ T3546] loop4: p1 < > p4 [ 142.164269][ T3546] loop4: p4 size 8388608 extends beyond EOD, truncated [ 142.176283][ T8053] loop4: p1 < > p4 [ 142.180773][ T8053] loop4: p4 size 8388608 extends beyond EOD, truncated [ 142.190666][ T8053] netlink: 332 bytes leftover after parsing attributes in process `syz.4.1420'. [ 142.320250][ T3546] udevd[3546]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 142.334540][ T3490] udevd[3490]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 142.406631][ T8065] FAULT_INJECTION: forcing a failure. [ 142.406631][ T8065] name failslab, interval 1, probability 0, space 0, times 0 [ 142.422072][ T8065] CPU: 1 UID: 0 PID: 8065 Comm: syz.4.1423 Not tainted 6.15.0-rc2-syzkaller-00278-gfc96b232f8e7 #0 PREEMPT(voluntary) [ 142.422109][ T8065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 142.422185][ T8065] Call Trace: [ 142.422191][ T8065] [ 142.422197][ T8065] dump_stack_lvl+0xf6/0x150 [ 142.422291][ T8065] dump_stack+0x15/0x1a [ 142.422308][ T8065] should_fail_ex+0x261/0x270 [ 142.422331][ T8065] should_failslab+0x8f/0xb0 [ 142.422397][ T8065] kmem_cache_alloc_noprof+0x59/0x340 [ 142.422430][ T8065] ? security_file_alloc+0x32/0x100 [ 142.422458][ T8065] security_file_alloc+0x32/0x100 [ 142.422487][ T8065] init_file+0x5e/0x1e0 [ 142.422511][ T8065] alloc_empty_file+0x8e/0x200 [ 142.422591][ T8065] alloc_file_pseudo+0xcb/0x160 [ 142.422623][ T8065] __shmem_file_setup+0x1bb/0x1f0 [ 142.422645][ T8065] shmem_file_setup+0x3b/0x50 [ 142.422672][ T8065] __se_sys_memfd_create+0x2e1/0x5a0 [ 142.422715][ T8065] __x64_sys_memfd_create+0x31/0x40 [ 142.422792][ T8065] x64_sys_call+0x1163/0x2e10 [ 142.422814][ T8065] do_syscall_64+0xc9/0x1a0 [ 142.422837][ T8065] ? clear_bhb_loop+0x25/0x80 [ 142.422856][ T8065] ? clear_bhb_loop+0x25/0x80 [ 142.422884][ T8065] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.422900][ T8065] RIP: 0033:0x7f45471ee169 [ 142.422915][ T8065] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 142.422932][ T8065] RSP: 002b:00007f4545814e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 142.422951][ T8065] RAX: ffffffffffffffda RBX: 000000000000046e RCX: 00007f45471ee169 [ 142.423011][ T8065] RDX: 00007f4545814ef0 RSI: 0000000000000000 RDI: 00007f4547271404 [ 142.423023][ T8065] RBP: 00002000000007c0 R08: 00007f4545814bb7 R09: 00007f4545814e40 [ 142.423034][ T8065] R10: 000000000000000a R11: 0000000000000202 R12: 00002000000001c0 [ 142.423043][ T8065] R13: 00007f4545814ef0 R14: 00007f4545814eb0 R15: 0000200000000100 [ 142.423057][ T8065] [ 142.792457][ T8070] loop3: detected capacity change from 0 to 2048 [ 143.020816][ T8083] loop5: detected capacity change from 0 to 512 [ 143.042776][ T8070] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 143.131887][ T8083] EXT4-fs error (device loop5): ext4_do_update_inode:5211: inode #3: comm syz.5.1430: corrupted inode contents [ 143.205488][ T8070] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.255072][ T8083] EXT4-fs error (device loop5): ext4_dirty_inode:6103: inode #3: comm syz.5.1430: mark_inode_dirty error [ 143.267853][ T8083] EXT4-fs error (device loop5): ext4_do_update_inode:5211: inode #3: comm syz.5.1430: corrupted inode contents [ 143.280800][ T8083] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #3: comm syz.5.1430: mark_inode_dirty error [ 143.295114][ T8083] EXT4-fs error (device loop5): ext4_acquire_dquot:6935: comm syz.5.1430: Failed to acquire dquot type 0 [ 143.308499][ T8083] EXT4-fs error (device loop5): ext4_do_update_inode:5211: inode #16: comm syz.5.1430: corrupted inode contents [ 143.322274][ T8083] EXT4-fs error (device loop5): ext4_dirty_inode:6103: inode #16: comm syz.5.1430: mark_inode_dirty error [ 143.338097][ T8083] EXT4-fs error (device loop5): ext4_do_update_inode:5211: inode #16: comm syz.5.1430: corrupted inode contents [ 143.351437][ T8083] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #16: comm syz.5.1430: mark_inode_dirty error [ 143.364890][ T8083] EXT4-fs error (device loop5): ext4_do_update_inode:5211: inode #16: comm syz.5.1430: corrupted inode contents [ 143.377590][ T8083] EXT4-fs error (device loop5) in ext4_orphan_del:305: Corrupt filesystem [ 143.387349][ T8083] EXT4-fs error (device loop5): ext4_do_update_inode:5211: inode #16: comm syz.5.1430: corrupted inode contents [ 143.401555][ T8083] EXT4-fs error (device loop5): ext4_truncate:4255: inode #16: comm syz.5.1430: mark_inode_dirty error [ 143.415232][ T8083] EXT4-fs error (device loop5) in ext4_process_orphan:347: Corrupt filesystem [ 143.430344][ T8094] FAULT_INJECTION: forcing a failure. [ 143.430344][ T8094] name failslab, interval 1, probability 0, space 0, times 0 [ 143.447329][ T8094] CPU: 1 UID: 0 PID: 8094 Comm: syz.0.1433 Not tainted 6.15.0-rc2-syzkaller-00278-gfc96b232f8e7 #0 PREEMPT(voluntary) [ 143.447354][ T8094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 143.447366][ T8094] Call Trace: [ 143.447373][ T8094] [ 143.447381][ T8094] dump_stack_lvl+0xf6/0x150 [ 143.447405][ T8094] dump_stack+0x15/0x1a [ 143.447421][ T8094] should_fail_ex+0x261/0x270 [ 143.447514][ T8094] should_failslab+0x8f/0xb0 [ 143.447533][ T8094] kmem_cache_alloc_noprof+0x59/0x340 [ 143.447561][ T8094] ? security_file_alloc+0x32/0x100 [ 143.447678][ T8094] security_file_alloc+0x32/0x100 [ 143.447722][ T8094] init_file+0x5e/0x1e0 [ 143.447747][ T8094] alloc_empty_file+0x8e/0x200 [ 143.447849][ T8094] alloc_file_pseudo+0xcb/0x160 [ 143.447873][ T8094] __shmem_file_setup+0x1bb/0x1f0 [ 143.447895][ T8094] shmem_file_setup+0x3b/0x50 [ 143.447915][ T8094] __se_sys_memfd_create+0x2e1/0x5a0 [ 143.448023][ T8094] __x64_sys_memfd_create+0x31/0x40 [ 143.448078][ T8094] x64_sys_call+0x1163/0x2e10 [ 143.448107][ T8094] do_syscall_64+0xc9/0x1a0 [ 143.448128][ T8094] ? clear_bhb_loop+0x25/0x80 [ 143.448146][ T8094] ? clear_bhb_loop+0x25/0x80 [ 143.448162][ T8094] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.448240][ T8094] RIP: 0033:0x7f55f398e169 [ 143.448252][ T8094] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 143.448306][ T8094] RSP: 002b:00007f55f1fb4e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 143.448324][ T8094] RAX: ffffffffffffffda RBX: 000000000000046e RCX: 00007f55f398e169 [ 143.448337][ T8094] RDX: 00007f55f1fb4ef0 RSI: 0000000000000000 RDI: 00007f55f3a11404 [ 143.448349][ T8094] RBP: 00002000000007c0 R08: 00007f55f1fb4bb7 R09: 00007f55f1fb4e40 [ 143.448361][ T8094] R10: 000000000000000a R11: 0000000000000202 R12: 00002000000001c0 [ 143.448373][ T8094] R13: 00007f55f1fb4ef0 R14: 00007f55f1fb4eb0 R15: 0000200000000100 [ 143.448391][ T8094] [ 143.900667][ T8098] loop2: detected capacity change from 0 to 512 [ 143.930332][ T8083] EXT4-fs (loop5): 1 truncate cleaned up [ 143.937683][ T8083] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.964770][ T8098] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 143.975389][ T8098] syz.2.1434: attempt to access beyond end of device [ 143.975389][ T8098] md33: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 143.988737][ T8083] ext4 filesystem being mounted at /104/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 144.129527][ T8101] loop3: detected capacity change from 0 to 2048 [ 144.136974][ T6170] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.169707][ T8101] loop3: p1 < > p4 [ 144.174340][ T8101] loop3: p4 size 8388608 extends beyond EOD, truncated [ 144.184564][ T8101] netlink: 332 bytes leftover after parsing attributes in process `syz.3.1436'. [ 144.285922][ T8114] loop0: detected capacity change from 0 to 512 [ 144.289988][ T3546] udevd[3546]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 144.292524][ T8114] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 144.304259][ T3490] udevd[3490]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 144.356133][ T8114] syz.0.1441: attempt to access beyond end of device [ 144.356133][ T8114] md33: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 144.381284][ T8098] loop2: detected capacity change from 0 to 2048 [ 144.594734][ T8128] rdma_op ffff88811de21980 conn xmit_rdma 0000000000000000 [ 144.910986][ T8114] loop0: detected capacity change from 0 to 2048 [ 144.984860][ T8140] loop2: detected capacity change from 0 to 2048 [ 145.029620][ T8140] loop2: p1 < > p4 [ 145.034396][ T8140] loop2: p4 size 8388608 extends beyond EOD, truncated [ 145.045140][ T8140] netlink: 332 bytes leftover after parsing attributes in process `syz.2.1450'. [ 145.056326][ T8133] bond7: entered promiscuous mode [ 145.065233][ T8133] bond7: entered allmulticast mode [ 145.117736][ T8133] 8021q: adding VLAN 0 to HW filter on device bond7 [ 145.181467][ T8133] bond7 (unregistering): Released all slaves [ 145.200633][ T8150] syz.2.1452: attempt to access beyond end of device [ 145.200633][ T8150] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 145.305967][ T8157] loop3: detected capacity change from 0 to 512 [ 145.398504][ T8157] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 145.416897][ T8157] syz.3.1458: attempt to access beyond end of device [ 145.416897][ T8157] md33: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 145.432387][ T8158] loop4: detected capacity change from 0 to 512 [ 145.447109][ T8158] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1456: bg 0: block 288: padding at end of block bitmap is not set [ 145.464300][ T8158] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 145.474030][ T8158] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #13: comm syz.4.1456: attempt to clear invalid blocks 1024 len 1 [ 145.489633][ T8158] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.1456: invalid indirect mapped block 1819239214 (level 0) [ 145.508383][ T8158] EXT4-fs (loop4): 1 truncate cleaned up [ 145.516044][ T8158] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 145.582482][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.680345][ T8172] syz.2.1461: attempt to access beyond end of device [ 145.680345][ T8172] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 145.727642][ T8170] syz.4.1460: attempt to access beyond end of device [ 145.727642][ T8170] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 145.827865][ T8178] loop2: detected capacity change from 0 to 1024 [ 146.000403][ T8157] loop3: detected capacity change from 0 to 2048 [ 146.091878][ T8184] validate_nla: 1 callbacks suppressed [ 146.091895][ T8184] netlink: 'syz.5.1465': attribute type 4 has an invalid length. [ 146.136396][ T8178] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 146.222650][ T8179] bond4: entered promiscuous mode [ 146.228413][ T8179] bond4: entered allmulticast mode [ 146.241861][ T8184] loop5: detected capacity change from 0 to 128 [ 146.274299][ T8179] 8021q: adding VLAN 0 to HW filter on device bond4 [ 146.296850][ T8179] bond4 (unregistering): Released all slaves [ 146.381639][ T8190] syz.0.1466: attempt to access beyond end of device [ 146.381639][ T8190] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 146.419269][ T59] kworker/u8:4: attempt to access beyond end of device [ 146.419269][ T59] loop5: rw=1, sector=145, nr_sectors = 8 limit=128 [ 146.441313][ T59] kworker/u8:4: attempt to access beyond end of device [ 146.441313][ T59] loop5: rw=1, sector=161, nr_sectors = 8 limit=128 [ 146.484421][ T59] kworker/u8:4: attempt to access beyond end of device [ 146.484421][ T59] loop5: rw=1, sector=177, nr_sectors = 8 limit=128 [ 146.555783][ T8194] bond4: entered promiscuous mode [ 146.561656][ T8194] bond4: entered allmulticast mode [ 146.581448][ T8178] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 146.597672][ T8194] 8021q: adding VLAN 0 to HW filter on device bond4 [ 146.613824][ T8178] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2048 with error 28 [ 146.626580][ T8178] EXT4-fs (loop2): This should not happen!! Data will be lost [ 146.626580][ T8178] [ 146.636453][ T8178] EXT4-fs (loop2): Total free blocks count 0 [ 146.642926][ T8178] EXT4-fs (loop2): Free/Dirty block details [ 146.649103][ T8178] EXT4-fs (loop2): free_blocks=68451041280 [ 146.655216][ T8178] EXT4-fs (loop2): dirty_blocks=16384 [ 146.660731][ T8178] EXT4-fs (loop2): Block reservation details [ 146.668082][ T8178] EXT4-fs (loop2): i_reserved_data_blocks=1024 [ 146.685768][ T8194] bond4 (unregistering): Released all slaves [ 146.764167][ T29] kauditd_printk_skb: 283 callbacks suppressed [ 146.764182][ T29] audit: type=1326 audit(1744987654.601:7715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8198 comm="syz.0.1470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55f398e169 code=0x7ffc0000 [ 146.795298][ T29] audit: type=1326 audit(1744987654.601:7716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8198 comm="syz.0.1470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55f398e169 code=0x7ffc0000 [ 146.819255][ T29] audit: type=1326 audit(1744987654.601:7717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8198 comm="syz.0.1470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=173 compat=0 ip=0x7f55f398e169 code=0x7ffc0000 [ 146.843861][ T29] audit: type=1326 audit(1744987654.601:7718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8198 comm="syz.0.1470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55f398e169 code=0x7ffc0000 [ 146.870748][ T29] audit: type=1326 audit(1744987654.621:7719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8199 comm="syz.5.1469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4e4ebe169 code=0x7ffc0000 [ 146.895816][ T29] audit: type=1326 audit(1744987654.621:7720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8199 comm="syz.5.1469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4e4ebe169 code=0x7ffc0000 [ 146.921480][ T29] audit: type=1326 audit(1744987654.631:7721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8199 comm="syz.5.1469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7fc4e4ebe169 code=0x7ffc0000 [ 146.947518][ T29] audit: type=1326 audit(1744987654.631:7722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8199 comm="syz.5.1469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4e4ebe169 code=0x7ffc0000 [ 146.972168][ T29] audit: type=1326 audit(1744987654.631:7723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8199 comm="syz.5.1469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4e4ebe169 code=0x7ffc0000 [ 147.009172][ T59] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 2052 with max blocks 2048 with error 28 [ 147.030474][ T8210] loop5: detected capacity change from 0 to 2048 [ 147.064610][ T8210] loop5: p1 < > p4 [ 147.070260][ T8210] loop5: p4 size 8388608 extends beyond EOD, truncated [ 147.079996][ T8210] netlink: 332 bytes leftover after parsing attributes in process `syz.5.1473'. [ 147.095072][ T3005] loop5: p1 < > p4 [ 147.101731][ T8211] FAULT_INJECTION: forcing a failure. [ 147.101731][ T8211] name failslab, interval 1, probability 0, space 0, times 0 [ 147.114764][ T8211] CPU: 1 UID: 0 PID: 8211 Comm: syz.3.1471 Not tainted 6.15.0-rc2-syzkaller-00278-gfc96b232f8e7 #0 PREEMPT(voluntary) [ 147.114820][ T8211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 147.114830][ T8211] Call Trace: [ 147.114835][ T8211] [ 147.114841][ T8211] dump_stack_lvl+0xf6/0x150 [ 147.114864][ T8211] dump_stack+0x15/0x1a [ 147.114880][ T8211] should_fail_ex+0x261/0x270 [ 147.114931][ T8211] should_failslab+0x8f/0xb0 [ 147.114949][ T8211] kmem_cache_alloc_noprof+0x59/0x340 [ 147.115050][ T8211] ? security_file_alloc+0x32/0x100 [ 147.115080][ T8211] security_file_alloc+0x32/0x100 [ 147.115106][ T8211] init_file+0x5e/0x1e0 [ 147.115132][ T8211] alloc_empty_file+0x8e/0x200 [ 147.115239][ T8211] alloc_file_pseudo+0xcb/0x160 [ 147.115262][ T8211] __shmem_file_setup+0x1bb/0x1f0 [ 147.115280][ T8211] shmem_file_setup+0x3b/0x50 [ 147.115297][ T8211] __se_sys_memfd_create+0x2e1/0x5a0 [ 147.115385][ T8211] __x64_sys_memfd_create+0x31/0x40 [ 147.115411][ T8211] x64_sys_call+0x1163/0x2e10 [ 147.115431][ T8211] do_syscall_64+0xc9/0x1a0 [ 147.115504][ T8211] ? clear_bhb_loop+0x25/0x80 [ 147.115540][ T8211] ? clear_bhb_loop+0x25/0x80 [ 147.115560][ T8211] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.115577][ T8211] RIP: 0033:0x7ff89169e169 [ 147.115590][ T8211] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 147.115604][ T8211] RSP: 002b:00007ff88fcc4e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 147.115623][ T8211] RAX: ffffffffffffffda RBX: 000000000000046e RCX: 00007ff89169e169 [ 147.115714][ T8211] RDX: 00007ff88fcc4ef0 RSI: 0000000000000000 RDI: 00007ff891721404 [ 147.115727][ T8211] RBP: 00002000000007c0 R08: 00007ff88fcc4bb7 R09: 00007ff88fcc4e40 [ 147.115739][ T8211] R10: 000000000000000a R11: 0000000000000202 R12: 00002000000001c0 [ 147.115750][ T8211] R13: 00007ff88fcc4ef0 R14: 00007ff88fcc4eb0 R15: 0000200000000100 [ 147.115767][ T8211] [ 147.116572][ T3005] loop5: p4 size 8388608 extends beyond EOD, truncated [ 147.327476][ T29] audit: type=1400 audit(1744987654.921:7724): avc: denied { kexec_image_load } for pid=8205 comm="syz.0.1472" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 147.402765][ T3490] udevd[3490]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 147.405296][ T3546] udevd[3546]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 147.419009][ T8216] loop4: detected capacity change from 0 to 1024 [ 147.475841][ T3546] udevd[3546]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 147.488650][ T3490] udevd[3490]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 147.507180][ T8216] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 147.534383][ T8221] loop5: detected capacity change from 0 to 2048 [ 147.579747][ T8225] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1479'. [ 147.601409][ T8221] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 147.617198][ T8221] ext4 filesystem being mounted at /110/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 147.895860][ T8234] pim6reg: entered allmulticast mode [ 148.029343][ T8238] loop0: detected capacity change from 0 to 2048 [ 148.235309][ T8238] loop0: p1 < > p4 [ 148.243568][ T8238] loop0: p4 size 8388608 extends beyond EOD, truncated [ 148.267236][ T3005] loop0: p1 < > p4 [ 148.274362][ T3005] loop0: p4 size 8388608 extends beyond EOD, truncated [ 148.278457][ T8240] netlink: 332 bytes leftover after parsing attributes in process `syz.0.1481'. [ 148.296686][ T8216] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 148.331132][ T8216] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2048 with error 28 [ 148.344006][ T8216] EXT4-fs (loop4): This should not happen!! Data will be lost [ 148.344006][ T8216] [ 148.354201][ T8216] EXT4-fs (loop4): Total free blocks count 0 [ 148.360737][ T8216] EXT4-fs (loop4): Free/Dirty block details [ 148.367372][ T8216] EXT4-fs (loop4): free_blocks=68451041280 [ 148.373965][ T8216] EXT4-fs (loop4): dirty_blocks=4432 [ 148.380306][ T8216] EXT4-fs (loop4): Block reservation details [ 148.386370][ T8216] EXT4-fs (loop4): i_reserved_data_blocks=277 [ 148.413787][ T41] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 2052 with max blocks 2048 with error 28 [ 148.420381][ T31] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm kworker/u8:1: bg 0: block 345: padding at end of block bitmap is not set [ 148.456897][ T31] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 2048 with error 117 [ 148.469922][ T31] EXT4-fs (loop5): This should not happen!! Data will be lost [ 148.469922][ T31] [ 148.503182][ T31] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 2065 with max blocks 1123 with error 28 [ 148.516701][ T31] EXT4-fs (loop5): This should not happen!! Data will be lost [ 148.516701][ T31] [ 148.529155][ T31] EXT4-fs (loop5): Total free blocks count 0 [ 148.535515][ T31] EXT4-fs (loop5): Free/Dirty block details [ 148.542039][ T31] EXT4-fs (loop5): free_blocks=0 [ 148.547217][ T31] EXT4-fs (loop5): dirty_blocks=1136 [ 148.552701][ T31] EXT4-fs (loop5): Block reservation details [ 148.565570][ T3005] loop0: p1 < > p4 [ 148.578376][ T3005] loop0: p4 size 8388608 extends beyond EOD, truncated [ 148.616624][ T8246] loop2: detected capacity change from 0 to 2048 [ 148.664989][ T8246] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 148.697292][ T3546] udevd[3546]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 148.708563][ T3490] udevd[3490]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 148.876724][ T8246] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 1 with max blocks 1 with error 28 [ 148.889140][ T8246] EXT4-fs (loop2): This should not happen!! Data will be lost [ 148.889140][ T8246] [ 148.898880][ T8246] EXT4-fs (loop2): Total free blocks count 0 [ 148.905059][ T8246] EXT4-fs (loop2): Free/Dirty block details [ 148.910975][ T8246] EXT4-fs (loop2): free_blocks=0 [ 148.912507][ T8251] bond7: entered promiscuous mode [ 148.916024][ T8246] EXT4-fs (loop2): dirty_blocks=0 [ 148.921045][ T8251] bond7: entered allmulticast mode [ 148.930626][ T8251] 8021q: adding VLAN 0 to HW filter on device bond7 [ 148.931269][ T8246] EXT4-fs (loop2): Block reservation details [ 148.944627][ T8246] EXT4-fs (loop2): i_reserved_data_blocks=0 [ 148.965394][ T8251] bond7 (unregistering): Released all slaves [ 148.988857][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.024487][ T8268] loop2: detected capacity change from 0 to 2048 [ 149.065788][ T8271] FAULT_INJECTION: forcing a failure. [ 149.065788][ T8271] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 149.078949][ T8271] CPU: 1 UID: 0 PID: 8271 Comm: syz.3.1492 Not tainted 6.15.0-rc2-syzkaller-00278-gfc96b232f8e7 #0 PREEMPT(voluntary) [ 149.078972][ T8271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 149.078981][ T8271] Call Trace: [ 149.078987][ T8271] [ 149.079061][ T8271] dump_stack_lvl+0xf6/0x150 [ 149.079082][ T8271] dump_stack+0x15/0x1a [ 149.079095][ T8271] should_fail_ex+0x261/0x270 [ 149.079117][ T8271] should_fail+0xb/0x10 [ 149.079136][ T8271] should_fail_usercopy+0x1a/0x20 [ 149.079159][ T8271] _copy_from_user+0x1c/0xa0 [ 149.079233][ T8271] move_addr_to_kernel+0x8c/0x130 [ 149.079261][ T8271] __sys_sendto+0x130/0x230 [ 149.079315][ T8271] __x64_sys_sendto+0x78/0x90 [ 149.079362][ T8271] x64_sys_call+0x2bcb/0x2e10 [ 149.079382][ T8271] do_syscall_64+0xc9/0x1a0 [ 149.079406][ T8271] ? clear_bhb_loop+0x25/0x80 [ 149.079482][ T8271] ? clear_bhb_loop+0x25/0x80 [ 149.079525][ T8271] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.079541][ T8271] RIP: 0033:0x7ff89169e169 [ 149.079554][ T8271] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 149.079568][ T8271] RSP: 002b:00007ff88fd07038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 149.079583][ T8271] RAX: ffffffffffffffda RBX: 00007ff8918c5fa0 RCX: 00007ff89169e169 [ 149.079603][ T8271] RDX: 0000000000034000 RSI: 0000200000000500 RDI: 0000000000000006 [ 149.079613][ T8271] RBP: 00007ff88fd07090 R08: 0000200000000140 R09: 000000000000001c [ 149.079623][ T8271] R10: 000000002000c851 R11: 0000000000000246 R12: 0000000000000001 [ 149.079632][ T8271] R13: 0000000000000000 R14: 00007ff8918c5fa0 R15: 00007ffcbe604668 [ 149.079649][ T8271] [ 149.260069][ T8268] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 149.291086][ T8276] netlink: 24 bytes leftover after parsing attributes in process `+}[@'. [ 149.303043][ T8276] loop3: detected capacity change from 0 to 512 [ 149.317561][ T8268] FAULT_INJECTION: forcing a failure. [ 149.317561][ T8268] name failslab, interval 1, probability 0, space 0, times 0 [ 149.330314][ T8268] CPU: 1 UID: 0 PID: 8268 Comm: syz.2.1491 Not tainted 6.15.0-rc2-syzkaller-00278-gfc96b232f8e7 #0 PREEMPT(voluntary) [ 149.330406][ T8268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 149.330416][ T8268] Call Trace: [ 149.330445][ T8268] [ 149.330453][ T8268] dump_stack_lvl+0xf6/0x150 [ 149.330476][ T8268] dump_stack+0x15/0x1a [ 149.330491][ T8268] should_fail_ex+0x261/0x270 [ 149.330515][ T8268] should_failslab+0x8f/0xb0 [ 149.330534][ T8268] __kmalloc_cache_noprof+0x55/0x320 [ 149.330566][ T8268] ? alloc_pipe_info+0xb0/0x360 [ 149.330583][ T8268] alloc_pipe_info+0xb0/0x360 [ 149.330634][ T8268] splice_direct_to_actor+0x621/0x680 [ 149.330661][ T8268] ? __pfx_direct_splice_actor+0x10/0x10 [ 149.330704][ T8268] ? __rcu_read_unlock+0x4e/0x70 [ 149.330752][ T8268] ? avc_policy_seqno+0x15/0x20 [ 149.330783][ T8268] ? selinux_file_permission+0x22d/0x360 [ 149.330804][ T8268] do_splice_direct+0xd9/0x150 [ 149.330833][ T8268] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 149.330861][ T8268] do_sendfile+0x40a/0x690 [ 149.330898][ T8268] __x64_sys_sendfile64+0x113/0x160 [ 149.330963][ T8268] x64_sys_call+0xfc3/0x2e10 [ 149.330985][ T8268] do_syscall_64+0xc9/0x1a0 [ 149.331005][ T8268] ? clear_bhb_loop+0x25/0x80 [ 149.331022][ T8268] ? clear_bhb_loop+0x25/0x80 [ 149.331040][ T8268] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.331114][ T8268] RIP: 0033:0x7f442f06e169 [ 149.331128][ T8268] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 149.331145][ T8268] RSP: 002b:00007f442d6d7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 149.331164][ T8268] RAX: ffffffffffffffda RBX: 00007f442f295fa0 RCX: 00007f442f06e169 [ 149.331176][ T8268] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000007 [ 149.331208][ T8268] RBP: 00007f442d6d7090 R08: 0000000000000000 R09: 0000000000000000 [ 149.331218][ T8268] R10: 000000007ffff000 R11: 0000000000000246 R12: 0000000000000001 [ 149.331227][ T8268] R13: 0000000000000000 R14: 00007f442f295fa0 R15: 00007ffda7f4afa8 [ 149.331242][ T8268] [ 149.567345][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.578800][ T8276] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 149.592714][ T8276] ext4 filesystem being mounted at /319/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 149.624957][ T8280] netlink: 'syz.2.1494': attribute type 4 has an invalid length. [ 149.633439][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.645332][ T8280] loop2: detected capacity change from 0 to 128 [ 149.700239][ T8286] loop4: detected capacity change from 0 to 512 [ 149.954165][ T1928] bio_check_eod: 110 callbacks suppressed [ 149.954179][ T1928] kworker/u8:7: attempt to access beyond end of device [ 149.954179][ T1928] loop2: rw=1, sector=145, nr_sectors = 8 limit=128 [ 150.058027][ T8294] loop4: detected capacity change from 0 to 2048 [ 150.079986][ T1928] kworker/u8:7: attempt to access beyond end of device [ 150.079986][ T1928] loop2: rw=1, sector=161, nr_sectors = 8 limit=128 [ 150.154882][ T8294] loop4: p1 < > p4 [ 150.161019][ T8294] loop4: p4 size 8388608 extends beyond EOD, truncated [ 150.181544][ T1928] kworker/u8:7: attempt to access beyond end of device [ 150.181544][ T1928] loop2: rw=1, sector=177, nr_sectors = 8 limit=128 [ 150.194969][ T1928] kworker/u8:7: attempt to access beyond end of device [ 150.194969][ T1928] loop2: rw=1, sector=193, nr_sectors = 8 limit=128 [ 150.208441][ T1928] kworker/u8:7: attempt to access beyond end of device [ 150.208441][ T1928] loop2: rw=1, sector=209, nr_sectors = 8 limit=128 [ 150.223066][ T1928] kworker/u8:7: attempt to access beyond end of device [ 150.223066][ T1928] loop2: rw=1, sector=225, nr_sectors = 8 limit=128 [ 150.224822][ T8294] netlink: 332 bytes leftover after parsing attributes in process `syz.4.1498'. [ 150.236957][ T1928] kworker/u8:7: attempt to access beyond end of device [ 150.236957][ T1928] loop2: rw=1, sector=241, nr_sectors = 8 limit=128 [ 150.236992][ T1928] kworker/u8:7: attempt to access beyond end of device [ 150.236992][ T1928] loop2: rw=1, sector=257, nr_sectors = 8 limit=128 [ 150.237036][ T1928] kworker/u8:7: attempt to access beyond end of device [ 150.237036][ T1928] loop2: rw=1, sector=273, nr_sectors = 8 limit=128 [ 150.312011][ T1928] kworker/u8:7: attempt to access beyond end of device [ 150.312011][ T1928] loop2: rw=1, sector=289, nr_sectors = 8 limit=128 [ 150.340072][ T8308] netlink: 'syz.3.1506': attribute type 4 has an invalid length. [ 150.349505][ T8308] loop3: detected capacity change from 0 to 128 [ 150.507278][ T8322] vlan2: entered allmulticast mode [ 150.542766][ T8324] loop0: detected capacity change from 0 to 512 [ 150.561188][ T8326] loop2: detected capacity change from 0 to 512 [ 150.580807][ T8326] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #3: comm syz.2.1513: corrupted inode contents [ 150.592954][ T8324] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #3: comm syz.0.1512: corrupted inode contents [ 150.614689][ T8326] EXT4-fs error (device loop2): ext4_dirty_inode:6103: inode #3: comm syz.2.1513: mark_inode_dirty error [ 150.626078][ T8324] EXT4-fs error (device loop0): ext4_dirty_inode:6103: inode #3: comm syz.0.1512: mark_inode_dirty error [ 150.639478][ T3005] loop4: p1 < > p4 [ 150.640190][ T8324] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #3: comm syz.0.1512: corrupted inode contents [ 150.656761][ T3005] loop4: p4 size 8388608 extends beyond EOD, truncated [ 150.656884][ T8326] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #3: comm syz.2.1513: corrupted inode contents [ 150.677433][ T8326] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #3: comm syz.2.1513: mark_inode_dirty error [ 150.691424][ T8324] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #3: comm syz.0.1512: mark_inode_dirty error [ 150.691667][ T8326] EXT4-fs error (device loop2): ext4_acquire_dquot:6935: comm syz.2.1513: Failed to acquire dquot type 0 [ 150.725806][ T8326] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #16: comm syz.2.1513: corrupted inode contents [ 150.732758][ T8324] EXT4-fs error (device loop0): ext4_acquire_dquot:6935: comm syz.0.1512: Failed to acquire dquot type 0 [ 150.738832][ T8334] netlink: 'syz.3.1514': attribute type 21 has an invalid length. [ 150.758197][ T8326] EXT4-fs error (device loop2): ext4_dirty_inode:6103: inode #16: comm syz.2.1513: mark_inode_dirty error [ 150.771919][ T8334] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1514'. [ 150.777072][ T3546] udevd[3546]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 150.791971][ T8326] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #16: comm syz.2.1513: corrupted inode contents [ 150.792686][ T3490] udevd[3490]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 150.811211][ T8336] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 150.815072][ T8324] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #16: comm syz.0.1512: corrupted inode contents [ 150.842640][ T8326] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #16: comm syz.2.1513: mark_inode_dirty error [ 150.854135][ T8324] EXT4-fs error (device loop0): ext4_dirty_inode:6103: inode #16: comm syz.0.1512: mark_inode_dirty error [ 150.854503][ T8324] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #16: comm syz.0.1512: corrupted inode contents [ 151.000603][ T8326] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #16: comm syz.2.1513: corrupted inode contents [ 151.014468][ T8324] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #16: comm syz.0.1512: mark_inode_dirty error [ 151.027986][ T8326] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 151.042724][ T8324] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #16: comm syz.0.1512: corrupted inode contents [ 151.056361][ T8326] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #16: comm syz.2.1513: corrupted inode contents [ 151.070929][ T8324] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 151.080287][ T8324] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #16: comm syz.0.1512: corrupted inode contents [ 151.093821][ T8324] EXT4-fs error (device loop0): ext4_truncate:4255: inode #16: comm syz.0.1512: mark_inode_dirty error [ 151.135279][ T8326] EXT4-fs error (device loop2): ext4_truncate:4255: inode #16: comm syz.2.1513: mark_inode_dirty error [ 151.179464][ T8324] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 151.179591][ T8326] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 151.198876][ T8326] EXT4-fs (loop2): 1 truncate cleaned up [ 151.205089][ T8326] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 151.206455][ T8324] EXT4-fs (loop0): 1 truncate cleaned up [ 151.221283][ T8326] ext4 filesystem being mounted at /284/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 151.225003][ T8324] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 151.596180][ T8324] ext4 filesystem being mounted at /320/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 151.611272][ T8353] loop4: detected capacity change from 0 to 2048 [ 152.051778][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.072101][ T8353] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 152.189153][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.200982][ T8363] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1522'. [ 152.239430][ T8366] vlan2: entered allmulticast mode [ 152.264928][ T8353] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 2 with max blocks 1 with error 28 [ 152.278099][ T8353] EXT4-fs (loop4): This should not happen!! Data will be lost [ 152.278099][ T8353] [ 152.287875][ T8353] EXT4-fs (loop4): Total free blocks count 0 [ 152.293871][ T8353] EXT4-fs (loop4): Free/Dirty block details [ 152.299819][ T8353] EXT4-fs (loop4): free_blocks=0 [ 152.304808][ T8353] EXT4-fs (loop4): dirty_blocks=0 [ 152.309869][ T8353] EXT4-fs (loop4): Block reservation details [ 152.316771][ T8353] EXT4-fs (loop4): i_reserved_data_blocks=0 [ 152.395104][ T29] kauditd_printk_skb: 126 callbacks suppressed [ 152.395118][ T29] audit: type=1326 audit(1744987660.271:7847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8372 comm="syz.5.1528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4e4ebe169 code=0x7ffc0000 [ 152.425093][ T29] audit: type=1326 audit(1744987660.271:7848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8372 comm="syz.5.1528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4e4ebe169 code=0x7ffc0000 [ 152.452619][ T29] audit: type=1326 audit(1744987660.271:7849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8372 comm="syz.5.1528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc4e4ebe169 code=0x7ffc0000 [ 152.475967][ T29] audit: type=1326 audit(1744987660.271:7850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8372 comm="syz.5.1528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4e4ebe169 code=0x7ffc0000 [ 152.499861][ T29] audit: type=1326 audit(1744987660.271:7851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8372 comm="syz.5.1528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4e4ebe169 code=0x7ffc0000 [ 152.514571][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.523641][ T29] audit: type=1326 audit(1744987660.271:7852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8372 comm="syz.5.1528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=51 compat=0 ip=0x7fc4e4ebe169 code=0x7ffc0000 [ 152.557574][ T29] audit: type=1326 audit(1744987660.271:7853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8372 comm="syz.5.1528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4e4ebe169 code=0x7ffc0000 [ 152.659421][ T29] audit: type=1326 audit(1744987660.501:7854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8374 comm="syz.0.1529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55f398e169 code=0x7ffc0000 [ 152.683021][ T29] audit: type=1326 audit(1744987660.501:7855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8374 comm="syz.0.1529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55f398e169 code=0x7ffc0000 [ 152.706793][ T29] audit: type=1326 audit(1744987660.501:7856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8374 comm="syz.0.1529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7f55f398e169 code=0x7ffc0000 [ 152.740825][ T8389] loop5: detected capacity change from 0 to 512 [ 152.752752][ T8389] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 152.763440][ T8389] EXT4-fs warning (device loop5): ext4_multi_mount_protect:292: Invalid MMP block in superblock [ 152.844894][ T8392] loop0: detected capacity change from 0 to 512 [ 152.851818][ T8392] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 152.901870][ T8389] loop5: detected capacity change from 0 to 512 [ 152.913822][ T8389] EXT4-fs: Ignoring removed oldalloc option [ 152.940464][ T8389] EXT4-fs error (device loop5): ext4_xattr_inode_iget:433: comm syz.5.1535: Parent and EA inode have the same ino 15 [ 152.953099][ T8389] EXT4-fs (loop5): Remounting filesystem read-only [ 152.959856][ T8389] EXT4-fs warning (device loop5): ext4_evict_inode:262: couldn't mark inode dirty (err -30) [ 152.993200][ T8395] loop4: detected capacity change from 0 to 1024 [ 153.020814][ T8389] EXT4-fs (loop5): 1 orphan inode deleted [ 153.029223][ T8395] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 153.041861][ T8389] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 153.134811][ T6170] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.849743][ T8395] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 153.877257][ T8395] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2048 with error 28 [ 153.889829][ T8395] EXT4-fs (loop4): This should not happen!! Data will be lost [ 153.889829][ T8395] [ 153.899499][ T8395] EXT4-fs (loop4): Total free blocks count 0 [ 153.905519][ T8395] EXT4-fs (loop4): Free/Dirty block details [ 153.911417][ T8395] EXT4-fs (loop4): free_blocks=68451041280 [ 153.917323][ T8395] EXT4-fs (loop4): dirty_blocks=9792 [ 153.922666][ T8395] EXT4-fs (loop4): Block reservation details [ 153.928701][ T8395] EXT4-fs (loop4): i_reserved_data_blocks=612 [ 153.987638][ T1093] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 2052 with max blocks 2048 with error 28 [ 154.154827][ T8431] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 154.165197][ T8431] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.247293][ T8431] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 154.257912][ T8431] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.338243][ T8431] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 154.348605][ T8431] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.408864][ T8431] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 154.419341][ T8431] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.481416][ T8431] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 154.489870][ T8431] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.501754][ T8431] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 154.510179][ T8431] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.523287][ T8431] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 154.532356][ T8431] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.564916][ T8431] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 154.573624][ T8431] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.596811][ T8443] loop5: detected capacity change from 0 to 2048 [ 154.635026][ T8443] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 154.704766][ T8450] loop3: detected capacity change from 0 to 512 [ 154.712103][ T8450] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 154.733535][ T8443] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 1 with max blocks 1 with error 28 [ 154.746051][ T8443] EXT4-fs (loop5): This should not happen!! Data will be lost [ 154.746051][ T8443] [ 154.755880][ T8443] EXT4-fs (loop5): Total free blocks count 0 [ 154.761911][ T8443] EXT4-fs (loop5): Free/Dirty block details [ 154.767861][ T8443] EXT4-fs (loop5): free_blocks=0 [ 154.772846][ T8443] EXT4-fs (loop5): dirty_blocks=0 [ 154.777989][ T8443] EXT4-fs (loop5): Block reservation details [ 154.783971][ T8443] EXT4-fs (loop5): i_reserved_data_blocks=0 [ 154.848900][ T6170] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.883911][ T8457] loop5: detected capacity change from 0 to 1024 [ 154.908462][ T8457] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 155.034419][ T8463] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 155.075713][ T8470] loop4: detected capacity change from 0 to 2048 [ 155.362215][ T8332] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 155.474505][ T8470] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 155.532364][ T8470] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1562'. [ 155.541530][ T8470] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1562'. [ 155.631084][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.696628][ T8480] bridge0: port 3(bond0) entered blocking state [ 155.702940][ T8480] bridge0: port 3(bond0) entered disabled state [ 155.734193][ T8480] bond0: entered allmulticast mode [ 155.739823][ T8480] bond_slave_0: entered allmulticast mode [ 155.745627][ T8480] bond_slave_1: entered allmulticast mode [ 155.752297][ T8457] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2048 with error 28 [ 155.764857][ T8457] EXT4-fs (loop5): This should not happen!! Data will be lost [ 155.764857][ T8457] [ 155.774775][ T8457] EXT4-fs (loop5): Total free blocks count 0 [ 155.780899][ T8457] EXT4-fs (loop5): Free/Dirty block details [ 155.786923][ T8457] EXT4-fs (loop5): free_blocks=68451041280 [ 155.792793][ T8457] EXT4-fs (loop5): dirty_blocks=13120 [ 155.798330][ T8457] EXT4-fs (loop5): Block reservation details [ 155.804419][ T8457] EXT4-fs (loop5): i_reserved_data_blocks=820 [ 155.831501][ T8480] bond0: entered promiscuous mode [ 155.836624][ T8480] bond_slave_0: entered promiscuous mode [ 155.842368][ T8480] bond_slave_1: entered promiscuous mode [ 155.855831][ T8480] bridge0: port 3(bond0) entered blocking state [ 155.862137][ T8480] bridge0: port 3(bond0) entered forwarding state [ 155.878430][ T8483] bond0: left allmulticast mode [ 155.881220][ T1928] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 2052 with max blocks 2048 with error 28 [ 155.883388][ T8483] bond_slave_0: left allmulticast mode [ 155.883402][ T8483] bond_slave_1: left allmulticast mode [ 155.908621][ T8483] bond0: left promiscuous mode [ 155.913492][ T8483] bond_slave_0: left promiscuous mode [ 155.919506][ T8483] bond_slave_1: left promiscuous mode [ 155.926888][ T8483] bridge0: port 3(bond0) entered disabled state [ 155.955643][ T8485] loop4: detected capacity change from 0 to 164 [ 155.984628][ T8480] netlink: 'syz.3.1563': attribute type 3 has an invalid length. [ 155.993022][ T8485] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 156.012428][ T8485] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 156.301683][ T8513] loop5: detected capacity change from 0 to 1024 [ 156.336296][ T8516] loop3: detected capacity change from 0 to 2048 [ 156.515459][ T8518] loop2: detected capacity change from 0 to 2048 [ 156.554948][ T8513] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 156.666315][ T8522] netlink: 332 bytes leftover after parsing attributes in process `syz.3.1572'. [ 156.745673][ T8521] loop3: p1 < > p4 [ 156.755058][ T8521] loop3: p4 size 8388608 extends beyond EOD, truncated [ 156.764814][ T8524] loop2: p1 < > p4 [ 156.769344][ T8524] loop2: p4 size 8388608 extends beyond EOD, truncated [ 156.777665][ T8524] FAULT_INJECTION: forcing a failure. [ 156.777665][ T8524] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 156.790783][ T8524] CPU: 1 UID: 0 PID: 8524 Comm: syz.2.1576 Not tainted 6.15.0-rc2-syzkaller-00278-gfc96b232f8e7 #0 PREEMPT(voluntary) [ 156.790808][ T8524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 156.790819][ T8524] Call Trace: [ 156.790825][ T8524] [ 156.790883][ T8524] dump_stack_lvl+0xf6/0x150 [ 156.790903][ T8524] dump_stack+0x15/0x1a [ 156.790997][ T8524] should_fail_ex+0x261/0x270 [ 156.791018][ T8524] should_fail+0xb/0x10 [ 156.791141][ T8524] should_fail_usercopy+0x1a/0x20 [ 156.791205][ T8524] _copy_from_user+0x1c/0xa0 [ 156.791237][ T8524] copy_msghdr_from_user+0x54/0x2b0 [ 156.791262][ T8524] ? __fget_files+0x186/0x1c0 [ 156.791287][ T8524] __sys_sendmsg+0x141/0x240 [ 156.791316][ T8524] __x64_sys_sendmsg+0x46/0x50 [ 156.791358][ T8524] x64_sys_call+0x26f3/0x2e10 [ 156.791377][ T8524] do_syscall_64+0xc9/0x1a0 [ 156.791400][ T8524] ? clear_bhb_loop+0x25/0x80 [ 156.791469][ T8524] ? clear_bhb_loop+0x25/0x80 [ 156.791486][ T8524] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.791503][ T8524] RIP: 0033:0x7f442f06e169 [ 156.791518][ T8524] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 156.791534][ T8524] RSP: 002b:00007f442d695038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 156.791634][ T8524] RAX: ffffffffffffffda RBX: 00007f442f296160 RCX: 00007f442f06e169 [ 156.791646][ T8524] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 000000000000000b [ 156.791736][ T8524] RBP: 00007f442d695090 R08: 0000000000000000 R09: 0000000000000000 [ 156.791746][ T8524] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 156.791755][ T8524] R13: 0000000000000000 R14: 00007f442f296160 R15: 00007ffda7f4afa8 [ 156.791770][ T8524] [ 156.793700][ T8518] loop2: p1 < > p4 [ 156.808018][ T8516] loop3: p1 < > p4 [ 156.854540][ T8518] loop2: p4 size 8388608 extends beyond EOD, truncated [ 157.033532][ T8516] loop3: p4 size 8388608 extends beyond EOD, truncated [ 157.146593][ T8534] loop4: detected capacity change from 0 to 512 [ 157.153411][ T8534] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 157.168159][ T8532] loop0: detected capacity change from 0 to 2048 [ 157.180763][ T3005] loop2: p1 < > p4 [ 157.195025][ T3005] loop2: p4 size 8388608 extends beyond EOD, truncated [ 157.204878][ T8534] bio_check_eod: 218 callbacks suppressed [ 157.204894][ T8534] syz.4.1581: attempt to access beyond end of device [ 157.204894][ T8534] md33: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 157.207548][ T8513] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, [ 157.215318][ T8532] loop0: p1 < > p4 [ 157.230372][ T8513] block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 157.255319][ T8513] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2048 with error 28 [ 157.269563][ T8513] EXT4-fs (loop5): This should not happen!! Data will be lost [ 157.269563][ T8513] [ 157.281990][ T8513] EXT4-fs (loop5): Total free blocks count 0 [ 157.288629][ T8513] EXT4-fs (loop5): Free/Dirty block details [ 157.297759][ T8513] EXT4-fs (loop5): free_blocks=68451041280 [ 157.304013][ T8513] EXT4-fs (loop5): dirty_blocks=9504 [ 157.310327][ T8513] EXT4-fs (loop5): Block reservation details [ 157.316465][ T8513] EXT4-fs (loop5): i_reserved_data_blocks=594 [ 157.326508][ T8532] loop0: p4 size 8388608 extends beyond EOD, truncated [ 157.358890][ T3546] udevd[3546]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 157.360119][ T3380] udevd[3380]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 157.371500][ T3005] loop0: p1 < > p4 [ 157.387310][ T8542] loop3: detected capacity change from 0 to 512 [ 157.412589][ T31] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 2052 with max blocks 2048 with error 28 [ 157.420394][ T3005] loop0: p4 size 8388608 extends beyond EOD, truncated [ 157.439707][ T8542] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 157.458488][ T8542] syz.3.1583: attempt to access beyond end of device [ 157.458488][ T8542] md33: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 157.563902][ T29] kauditd_printk_skb: 58 callbacks suppressed [ 157.563966][ T29] audit: type=1326 audit(1744987665.431:7915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8550 comm="syz.2.1586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f442f06e169 code=0x7ffc0000 [ 157.605028][ T8551] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 157.623262][ T29] audit: type=1326 audit(1744987665.471:7916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8550 comm="syz.2.1586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f442f06e169 code=0x7ffc0000 [ 157.652419][ T29] audit: type=1326 audit(1744987665.481:7917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8550 comm="syz.2.1586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f442f06e169 code=0x7ffc0000 [ 157.676414][ T29] audit: type=1326 audit(1744987665.481:7918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8550 comm="syz.2.1586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f442f06e169 code=0x7ffc0000 [ 157.701402][ T29] audit: type=1326 audit(1744987665.481:7919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8550 comm="syz.2.1586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f442f06e169 code=0x7ffc0000 [ 157.726959][ T29] audit: type=1326 audit(1744987665.481:7920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8550 comm="syz.2.1586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f442f06e169 code=0x7ffc0000 [ 157.752524][ T29] audit: type=1326 audit(1744987665.481:7921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8550 comm="syz.2.1586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f442f06e169 code=0x7ffc0000 [ 157.780199][ T29] audit: type=1326 audit(1744987665.481:7922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8550 comm="syz.2.1586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f442f06e169 code=0x7ffc0000 [ 157.787162][ T3005] loop0: p1 < > p4 [ 157.803865][ T29] audit: type=1326 audit(1744987665.481:7923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8550 comm="syz.2.1586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f442f06e169 code=0x7ffc0000 [ 157.833987][ T29] audit: type=1326 audit(1744987665.481:7924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8550 comm="syz.2.1586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f442f06e169 code=0x7ffc0000 [ 157.861968][ T8552] loop4: detected capacity change from 0 to 2048 [ 157.939294][ T3005] loop0: p4 size 8388608 extends beyond EOD, truncated [ 158.062745][ T8558] FAULT_INJECTION: forcing a failure. [ 158.062745][ T8558] name failslab, interval 1, probability 0, space 0, times 0 [ 158.075506][ T8558] CPU: 0 UID: 0 PID: 8558 Comm: syz.3.1583 Not tainted 6.15.0-rc2-syzkaller-00278-gfc96b232f8e7 #0 PREEMPT(voluntary) [ 158.075606][ T8558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 158.075617][ T8558] Call Trace: [ 158.075689][ T8558] [ 158.075696][ T8558] dump_stack_lvl+0xf6/0x150 [ 158.075717][ T8558] dump_stack+0x15/0x1a [ 158.075730][ T8558] should_fail_ex+0x261/0x270 [ 158.075774][ T8558] should_failslab+0x8f/0xb0 [ 158.075794][ T8558] kmem_cache_alloc_noprof+0x59/0x340 [ 158.075882][ T8558] ? __se_sys_mbind+0x3fd/0xfe0 [ 158.075908][ T8558] __se_sys_mbind+0x3fd/0xfe0 [ 158.075931][ T8558] ? vfs_write+0x669/0x950 [ 158.075951][ T8558] ? fput+0x99/0xd0 [ 158.075974][ T8558] ? ksys_write+0x180/0x1b0 [ 158.075992][ T8558] __x64_sys_mbind+0x78/0x90 [ 158.076026][ T8558] x64_sys_call+0x13be/0x2e10 [ 158.076042][ T8558] do_syscall_64+0xc9/0x1a0 [ 158.076062][ T8558] ? clear_bhb_loop+0x25/0x80 [ 158.076086][ T8558] ? clear_bhb_loop+0x25/0x80 [ 158.076120][ T8558] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.076136][ T8558] RIP: 0033:0x7ff89169e169 [ 158.076188][ T8558] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 158.076205][ T8558] RSP: 002b:00007ff88fce6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 158.076223][ T8558] RAX: ffffffffffffffda RBX: 00007ff8918c6080 RCX: 00007ff89169e169 [ 158.076235][ T8558] RDX: 0000000000000001 RSI: 0000000000800000 RDI: 0000200000001000 [ 158.076247][ T8558] RBP: 00007ff88fce6090 R08: 0000000000000000 R09: 0000000000000002 [ 158.076258][ T8558] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 158.076295][ T8558] R13: 0000000000000001 R14: 00007ff8918c6080 R15: 00007ffcbe604668 [ 158.076309][ T8558] [ 158.356214][ T8542] loop3: detected capacity change from 0 to 2048 [ 160.013310][ T8589] netlink: 332 bytes leftover after parsing attributes in process `syz.3.1594'. [ 160.079394][ T8591] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 160.105202][ T8585] loop3: detected capacity change from 0 to 2048 [ 160.157559][ T8575] loop2: detected capacity change from 0 to 2048 [ 160.176805][ T8585] loop3: p1 < > p4 [ 160.195393][ T8575] loop2: p1 < > p4 [ 160.200026][ T8575] loop2: p4 size 8388608 extends beyond EOD, truncated [ 160.223960][ T8585] loop3: p4 size 8388608 extends beyond EOD, truncated [ 160.232217][ T8575] netlink: 332 bytes leftover after parsing attributes in process `syz.2.1593'. [ 160.319196][ T8603] hub 9-0:1.0: USB hub found [ 160.329873][ T8603] hub 9-0:1.0: 8 ports detected [ 160.347058][ T3005] loop3: p1 < > p4 [ 160.353145][ T3005] loop3: p4 size 8388608 extends beyond EOD, truncated [ 160.425078][ T3005] loop3: p1 < > p4 [ 160.439427][ T3005] loop3: p4 size 8388608 extends beyond EOD, truncated [ 160.464760][ T8604] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1602'. [ 160.541640][ T3005] loop2: p1 < > p4 [ 160.661762][ T8607] loop5: detected capacity change from 0 to 2048 [ 160.681596][ T8609] loop3: detected capacity change from 0 to 512 [ 160.714344][ T8609] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 160.724765][ T8607] loop5: p1 < > p4 [ 160.729193][ T8607] loop5: p4 size 8388608 extends beyond EOD, truncated [ 160.756655][ T3005] loop2: p4 size 8388608 extends beyond EOD, truncated [ 160.759852][ T8607] netlink: 332 bytes leftover after parsing attributes in process `syz.5.1603'. [ 160.799194][ T3005] loop5: p1 < > p4 [ 160.803214][ T8609] syz.3.1605: attempt to access beyond end of device [ 160.803214][ T8609] md33: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 160.820590][ T3005] loop5: p4 size 8388608 extends beyond EOD, truncated [ 160.846719][ T3490] udevd[3490]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 160.922060][ T3005] loop5: p1 < > p4 [ 160.934898][ T3005] loop5: p4 size 8388608 extends beyond EOD, truncated [ 161.335129][ T3005] loop5: p1 < > p4 [ 161.339682][ T3005] loop5: p4 size 8388608 extends beyond EOD, truncated [ 161.373048][ T3546] udevd[3546]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 161.375891][ T3490] udevd[3490]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 161.415978][ T8620] random: crng reseeded on system resumption [ 161.483402][ T3290] udevd[3290]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 161.483531][ T3490] udevd[3490]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 161.516067][ T3380] udevd[3380]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 161.516997][ T8622] loop5: detected capacity change from 0 to 1024 [ 161.529661][ T3546] udevd[3546]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 161.562880][ T3490] udevd[3490]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 161.594260][ T8624] hub 9-0:1.0: USB hub found [ 161.609727][ T8624] hub 9-0:1.0: 8 ports detected [ 161.624891][ T8622] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 161.650881][ T8629] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 161.701810][ T8622] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 161.760492][ T8622] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 63 with max blocks 65 with error 28 [ 161.773577][ T8622] EXT4-fs (loop5): This should not happen!! Data will be lost [ 161.773577][ T8622] [ 161.784221][ T8622] EXT4-fs (loop5): Total free blocks count 0 [ 161.790570][ T8622] EXT4-fs (loop5): Free/Dirty block details [ 161.796791][ T8622] EXT4-fs (loop5): free_blocks=68451041280 [ 161.802720][ T8622] EXT4-fs (loop5): dirty_blocks=96 [ 161.807933][ T8622] EXT4-fs (loop5): Block reservation details [ 161.814609][ T8622] EXT4-fs (loop5): i_reserved_data_blocks=6 [ 161.868205][ T8638] loop0: detected capacity change from 0 to 512 [ 161.875649][ T8636] 9pnet_fd: Insufficient options for proto=fd [ 161.881529][ T8638] loop2: detected capacity change from 0 to 16384 [ 161.888642][ T1928] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 161.914105][ T8638] Invalid logical block size (7) [ 162.010555][ T8609] loop3: detected capacity change from 0 to 2048 [ 162.215122][ T8651] syz.2.1620: attempt to access beyond end of device [ 162.215122][ T8651] md33: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 162.519952][ T8656] loop5: detected capacity change from 0 to 512 [ 162.569489][ T8656] EXT4-fs: Mount option(s) incompatible with ext3 [ 162.615266][ T8656] hub 9-0:1.0: USB hub found [ 162.623995][ T29] kauditd_printk_skb: 104 callbacks suppressed [ 162.624014][ T29] audit: type=1326 audit(1744987670.481:8029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8655 comm="syz.5.1621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4e4ebe169 code=0x7ffc0000 [ 162.657956][ T29] audit: type=1326 audit(1744987670.481:8030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8655 comm="syz.5.1621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=441 compat=0 ip=0x7fc4e4ebe169 code=0x7ffc0000 [ 162.685219][ T29] audit: type=1326 audit(1744987670.481:8031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8655 comm="syz.5.1621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4e4ebe169 code=0x7ffc0000 [ 162.715771][ T29] audit: type=1326 audit(1744987670.481:8032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8655 comm="syz.5.1621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=8 compat=0 ip=0x7fc4e4ebe169 code=0x7ffc0000 [ 162.744159][ T29] audit: type=1326 audit(1744987670.481:8033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8655 comm="syz.5.1621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4e4ebe169 code=0x7ffc0000 [ 162.772905][ T29] audit: type=1326 audit(1744987670.481:8034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8655 comm="syz.5.1621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc4e4ebe169 code=0x7ffc0000 [ 162.807132][ T29] audit: type=1326 audit(1744987670.481:8035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8655 comm="syz.5.1621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4e4ebe169 code=0x7ffc0000 [ 162.836371][ T29] audit: type=1326 audit(1744987670.481:8036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8655 comm="syz.5.1621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc4e4ebcad0 code=0x7ffc0000 [ 162.866318][ T29] audit: type=1326 audit(1744987670.481:8037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8655 comm="syz.5.1621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4e4ebe169 code=0x7ffc0000 [ 162.891377][ T29] audit: type=1326 audit(1744987670.481:8038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8655 comm="syz.5.1621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4e4ebe169 code=0x7ffc0000 [ 162.920498][ T8656] hub 9-0:1.0: 8 ports detected [ 162.996398][ T8661] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 163.213613][ T8666] loop3: detected capacity change from 0 to 512 [ 163.230344][ T8670] hub 9-0:1.0: USB hub found [ 163.234557][ T8666] loop2: detected capacity change from 0 to 16384 [ 163.253111][ T8671] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 163.272811][ T8670] hub 9-0:1.0: 8 ports detected [ 163.527443][ T8666] Invalid logical block size (7) [ 163.718971][ T8678] 9pnet_fd: Insufficient options for proto=fd [ 163.848367][ T8682] hub 9-0:1.0: USB hub found [ 163.866232][ T8682] hub 9-0:1.0: 8 ports detected [ 163.945403][ T8683] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1629'. [ 163.986774][ T8685] loop4: detected capacity change from 0 to 512 [ 164.068804][ T8689] loop4: detected capacity change from 0 to 1024 [ 164.105162][ T8689] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 164.226549][ T8697] hub 9-0:1.0: USB hub found [ 164.305192][ T8697] hub 9-0:1.0: 8 ports detected [ 164.364724][ T8697] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1636'. [ 164.416187][ T8700] loop2: detected capacity change from 0 to 1024 [ 164.462443][ T8700] EXT4-fs: Ignoring removed bh option [ 164.500899][ T8700] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 164.638734][ T8698] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4113: comm syz.2.1635: Allocating blocks 497-513 which overlap fs metadata [ 164.667771][ T8698] EXT4-fs (loop2): pa ffff888105b5cbd0: logic 256, phys. 385, len 8 [ 164.668017][ T8705] bond7: entered promiscuous mode [ 164.675962][ T8698] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1 [ 164.681265][ T8705] bond7: entered allmulticast mode [ 164.761205][ T8705] 8021q: adding VLAN 0 to HW filter on device bond7 [ 164.790985][ T8705] bond7 (unregistering): Released all slaves [ 164.848004][ T8689] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 164.876289][ T8689] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2048 with error 28 [ 164.889529][ T8689] EXT4-fs (loop4): This should not happen!! Data will be lost [ 164.889529][ T8689] [ 164.899348][ T8689] EXT4-fs (loop4): Total free blocks count 0 [ 164.905689][ T8689] EXT4-fs (loop4): Free/Dirty block details [ 164.911803][ T8689] EXT4-fs (loop4): free_blocks=68451041280 [ 164.917689][ T8689] EXT4-fs (loop4): dirty_blocks=16384 [ 164.923354][ T8689] EXT4-fs (loop4): Block reservation details [ 164.929838][ T8689] EXT4-fs (loop4): i_reserved_data_blocks=1024 [ 164.953487][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.980226][ T1093] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 2052 with max blocks 2048 with error 28 [ 165.017778][ T8717] netlink: 'syz.2.1641': attribute type 39 has an invalid length. [ 165.028901][ T8718] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 165.058550][ T8720] loop0: detected capacity change from 0 to 1024 [ 165.095314][ T8720] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 165.132941][ T8720] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 165.170724][ T8720] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 63 with max blocks 65 with error 28 [ 165.183299][ T8720] EXT4-fs (loop0): This should not happen!! Data will be lost [ 165.183299][ T8720] [ 165.192986][ T8720] EXT4-fs (loop0): Total free blocks count 0 [ 165.199270][ T8720] EXT4-fs (loop0): Free/Dirty block details [ 165.205395][ T8720] EXT4-fs (loop0): free_blocks=68451041280 [ 165.212167][ T8720] EXT4-fs (loop0): dirty_blocks=96 [ 165.217514][ T8720] EXT4-fs (loop0): Block reservation details [ 165.223718][ T8720] EXT4-fs (loop0): i_reserved_data_blocks=6 [ 165.312973][ T31] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 165.460616][ T8748] loop0: detected capacity change from 0 to 1024 [ 165.557745][ T8748] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 165.680436][ T8749] loop2: detected capacity change from 0 to 2048 [ 165.764588][ T8749] loop2: p1 < > p4 [ 165.775892][ T8749] loop2: p4 size 8388608 extends beyond EOD, truncated [ 165.800062][ T8760] loop5: detected capacity change from 0 to 1024 [ 165.808840][ T3005] loop2: p1 < > p4 [ 165.823392][ T3005] loop2: p4 size 8388608 extends beyond EOD, truncated [ 165.838916][ T8749] netlink: 332 bytes leftover after parsing attributes in process `syz.2.1652'. [ 165.850832][ T8760] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 165.906283][ T8760] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 165.922767][ T8760] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 63 with max blocks 65 with error 28 [ 165.935835][ T8760] EXT4-fs (loop5): This should not happen!! Data will be lost [ 165.935835][ T8760] [ 165.947137][ T8760] EXT4-fs (loop5): Total free blocks count 0 [ 165.953451][ T8760] EXT4-fs (loop5): Free/Dirty block details [ 165.960019][ T8760] EXT4-fs (loop5): free_blocks=68451041280 [ 165.966929][ T8760] EXT4-fs (loop5): dirty_blocks=96 [ 165.972602][ T8760] EXT4-fs (loop5): Block reservation details [ 165.978913][ T8760] EXT4-fs (loop5): i_reserved_data_blocks=6 [ 165.997780][ T8758] bond4: entered promiscuous mode [ 166.003055][ T8758] bond4: entered allmulticast mode [ 166.009216][ T8758] 8021q: adding VLAN 0 to HW filter on device bond4 [ 166.009554][ T59] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 166.033213][ T8758] bond4 (unregistering): Released all slaves [ 166.122266][ T8748] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 166.138746][ T8748] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2048 with error 28 [ 166.151623][ T8748] EXT4-fs (loop0): This should not happen!! Data will be lost [ 166.151623][ T8748] [ 166.161842][ T8748] EXT4-fs (loop0): Total free blocks count 0 [ 166.167843][ T8748] EXT4-fs (loop0): Free/Dirty block details [ 166.173736][ T8748] EXT4-fs (loop0): free_blocks=68451041280 [ 166.179587][ T8748] EXT4-fs (loop0): dirty_blocks=16384 [ 166.185065][ T8748] EXT4-fs (loop0): Block reservation details [ 166.191059][ T8748] EXT4-fs (loop0): i_reserved_data_blocks=1024 [ 166.223832][ T59] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 2052 with max blocks 2048 with error 28 [ 166.259617][ T8768] loop5: detected capacity change from 0 to 2048 [ 166.275145][ T3005] loop2: p1 < > p4 [ 166.284320][ T3005] loop2: p4 size 8388608 extends beyond EOD, truncated [ 166.304485][ T8768] loop5: p1 < > p4 [ 166.309208][ T8768] loop5: p4 size 8388608 extends beyond EOD, truncated [ 166.319786][ T8768] netlink: 332 bytes leftover after parsing attributes in process `syz.5.1658'. [ 166.338449][ T3005] loop5: p1 < > p4 [ 166.346192][ T3005] loop5: p4 size 8388608 extends beyond EOD, truncated [ 166.434338][ T3290] udevd[3290]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 166.445540][ T3546] udevd[3546]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 166.510991][ T8776] bond4: entered promiscuous mode [ 166.517102][ T8776] bond4: entered allmulticast mode [ 166.526119][ T8773] loop3: detected capacity change from 0 to 2048 [ 166.534258][ T8776] 8021q: adding VLAN 0 to HW filter on device bond4 [ 166.550256][ T8776] bond4 (unregistering): Released all slaves [ 166.563167][ T8785] loop2: detected capacity change from 0 to 512 [ 166.572667][ T8785] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 166.585901][ T8773] loop3: p1 < > p4 [ 166.591399][ T8773] loop3: p4 size 8388608 extends beyond EOD, truncated [ 166.602623][ T8785] syz.2.1664: attempt to access beyond end of device [ 166.602623][ T8785] md33: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 166.630812][ T8773] netlink: 332 bytes leftover after parsing attributes in process `syz.3.1660'. [ 166.880657][ T8796] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 166.902557][ T3005] loop5: p1 < > p4 [ 166.907931][ T3005] loop5: p4 size 8388608 extends beyond EOD, truncated [ 167.085362][ T3005] loop3: p1 < > p4 [ 167.089780][ T3005] loop3: p4 size 8388608 extends beyond EOD, truncated [ 167.137213][ T8800] loop5: detected capacity change from 0 to 512 [ 167.330537][ T8800] EXT4-fs error (device loop5): ext4_do_update_inode:5211: inode #3: comm syz.5.1669: corrupted inode contents [ 167.369265][ T8809] loop3: detected capacity change from 0 to 1024 [ 167.400549][ T8800] EXT4-fs error (device loop5): ext4_dirty_inode:6103: inode #3: comm syz.5.1669: mark_inode_dirty error [ 167.437399][ T8809] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 167.456247][ T8800] EXT4-fs error (device loop5): ext4_do_update_inode:5211: inode #3: comm syz.5.1669: corrupted inode contents [ 167.506129][ T8800] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #3: comm syz.5.1669: mark_inode_dirty error [ 167.531428][ T8800] EXT4-fs error (device loop5): ext4_acquire_dquot:6935: comm syz.5.1669: Failed to acquire dquot type 0 [ 167.605829][ T8804] bond4: entered promiscuous mode [ 167.613131][ T8804] bond4: entered allmulticast mode [ 167.614576][ T8800] EXT4-fs error (device loop5): ext4_do_update_inode:5211: inode #16: comm syz.5.1669: corrupted inode contents [ 167.619656][ T8804] 8021q: adding VLAN 0 to HW filter on device bond4 [ 167.641988][ T29] kauditd_printk_skb: 213 callbacks suppressed [ 167.642004][ T29] audit: type=1326 audit(1744987675.511:8250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8803 comm="syz.0.1670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f55f392a359 code=0x7ffc0000 [ 167.724536][ T8800] EXT4-fs error (device loop5): ext4_dirty_inode:6103: inode #16: comm syz.5.1669: mark_inode_dirty error [ 167.778646][ T29] audit: type=1326 audit(1744987675.511:8251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8803 comm="syz.0.1670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55f398e169 code=0x7ffc0000 [ 167.803331][ T29] audit: type=1326 audit(1744987675.511:8252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8803 comm="syz.0.1670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55f398e169 code=0x7ffc0000 [ 167.827448][ T29] audit: type=1326 audit(1744987675.511:8253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8803 comm="syz.0.1670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f55f392a359 code=0x7ffc0000 [ 167.852670][ T29] audit: type=1326 audit(1744987675.511:8254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8803 comm="syz.0.1670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55f398e169 code=0x7ffc0000 [ 167.876736][ T29] audit: type=1326 audit(1744987675.531:8255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8803 comm="syz.0.1670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f55f392a359 code=0x7ffc0000 [ 167.901632][ T29] audit: type=1326 audit(1744987675.531:8256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8803 comm="syz.0.1670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55f398e169 code=0x7ffc0000 [ 167.911782][ T8800] EXT4-fs error (device loop5): ext4_do_update_inode:5211: inode #16: comm syz.5.1669: corrupted inode contents [ 167.927179][ T29] audit: type=1326 audit(1744987675.531:8257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8803 comm="syz.0.1670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f55f392a359 code=0x7ffc0000 [ 167.927207][ T29] audit: type=1326 audit(1744987675.531:8258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8803 comm="syz.0.1670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55f398e169 code=0x7ffc0000 [ 167.927227][ T29] audit: type=1326 audit(1744987675.531:8259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8803 comm="syz.0.1670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f55f398e169 code=0x7ffc0000 [ 167.941231][ T8800] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #16: comm syz.5.1669: mark_inode_dirty error [ 168.290398][ T8809] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 168.340911][ T8800] EXT4-fs error (device loop5): ext4_do_update_inode:5211: inode #16: comm syz.5.1669: corrupted inode contents [ 168.387025][ T8800] EXT4-fs error (device loop5) in ext4_orphan_del:305: Corrupt filesystem [ 168.403643][ T8809] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2048 with error 28 [ 168.416720][ T8809] EXT4-fs (loop3): This should not happen!! Data will be lost [ 168.416720][ T8809] [ 168.427618][ T8809] EXT4-fs (loop3): Total free blocks count 0 [ 168.433629][ T8809] EXT4-fs (loop3): Free/Dirty block details [ 168.439920][ T8809] EXT4-fs (loop3): free_blocks=68451041280 [ 168.442725][ T8800] EXT4-fs error (device loop5): ext4_do_update_inode:5211: inode #16: comm syz.5.1669: corrupted inode contents [ 168.446336][ T8809] EXT4-fs (loop3): dirty_blocks=5152 [ 168.461822][ T8800] EXT4-fs error (device loop5): ext4_truncate:4255: inode #16: comm syz.5.1669: mark_inode_dirty error [ 168.466232][ T8809] EXT4-fs (loop3): Block reservation details [ 168.478900][ T8800] EXT4-fs error (device loop5) in ext4_process_orphan:347: Corrupt filesystem [ 168.483392][ T8809] EXT4-fs (loop3): i_reserved_data_blocks=322 [ 168.495652][ T8800] EXT4-fs (loop5): 1 truncate cleaned up [ 168.514216][ T8800] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.529493][ T8800] ext4 filesystem being mounted at /153/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 168.558237][ T777] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 2052 with max blocks 2048 with error 28 [ 168.580447][ T6170] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.780786][ T8842] loop5: detected capacity change from 0 to 512 [ 168.790640][ T8844] FAULT_INJECTION: forcing a failure. [ 168.790640][ T8844] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 168.806204][ T8844] CPU: 0 UID: 0 PID: 8844 Comm: syz.3.1679 Not tainted 6.15.0-rc2-syzkaller-00278-gfc96b232f8e7 #0 PREEMPT(voluntary) [ 168.806276][ T8844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 168.806288][ T8844] Call Trace: [ 168.806295][ T8844] [ 168.806304][ T8844] dump_stack_lvl+0xf6/0x150 [ 168.806328][ T8844] dump_stack+0x15/0x1a [ 168.806341][ T8844] should_fail_ex+0x261/0x270 [ 168.806363][ T8844] should_fail+0xb/0x10 [ 168.806378][ T8844] should_fail_usercopy+0x1a/0x20 [ 168.806459][ T8844] _copy_to_user+0x20/0xa0 [ 168.806485][ T8844] simple_read_from_buffer+0xb2/0x130 [ 168.806515][ T8844] proc_fail_nth_read+0x103/0x140 [ 168.806551][ T8844] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 168.806575][ T8844] vfs_read+0x1b2/0x710 [ 168.806613][ T8844] ? __rcu_read_unlock+0x4e/0x70 [ 168.806668][ T8844] ? __fget_files+0x186/0x1c0 [ 168.806687][ T8844] ksys_read+0xeb/0x1b0 [ 168.806703][ T8844] __x64_sys_read+0x42/0x50 [ 168.806717][ T8844] x64_sys_call+0x2a3b/0x2e10 [ 168.806757][ T8844] do_syscall_64+0xc9/0x1a0 [ 168.806781][ T8844] ? clear_bhb_loop+0x25/0x80 [ 168.806800][ T8844] ? clear_bhb_loop+0x25/0x80 [ 168.806882][ T8844] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.806900][ T8844] RIP: 0033:0x7ff89169cb7c [ 168.806945][ T8844] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 168.806961][ T8844] RSP: 002b:00007ff88fce6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 168.806979][ T8844] RAX: ffffffffffffffda RBX: 00007ff8918c6080 RCX: 00007ff89169cb7c [ 168.806991][ T8844] RDX: 000000000000000f RSI: 00007ff88fce60a0 RDI: 0000000000000008 [ 168.807001][ T8844] RBP: 00007ff88fce6090 R08: 0000000000000000 R09: 0000000000000000 [ 168.807011][ T8844] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 168.807021][ T8844] R13: 0000000000000001 R14: 00007ff8918c6080 R15: 00007ffcbe604668 [ 168.807048][ T8844] [ 168.811350][ T8842] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 168.840536][ T8845] loop2: detected capacity change from 0 to 1024 [ 168.915968][ T8848] 9pnet_fd: Insufficient options for proto=fd [ 168.925222][ T8842] EXT4-fs (loop5): invalid journal inode [ 168.991174][ T8845] EXT4-fs: Ignoring removed bh option [ 169.022204][ T8834] loop0: detected capacity change from 0 to 2048 [ 169.036432][ T8842] EXT4-fs (loop5): can't get journal size [ 169.066254][ T8845] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 169.067525][ T8842] EXT4-fs (loop5): 1 truncate cleaned up [ 169.115775][ T8842] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.120495][ T8841] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4113: comm syz.2.1683: Allocating blocks 497-513 which overlap fs metadata [ 169.155191][ T8834] loop0: p1 < > p4 [ 169.163689][ T8841] EXT4-fs (loop2): pa ffff888105b5cc40: logic 256, phys. 385, len 8 [ 169.170001][ T6170] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.173241][ T8841] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1 [ 169.193269][ T8834] loop0: p4 size 8388608 extends beyond EOD, truncated [ 169.219092][ T3005] loop0: p1 < > p4 [ 169.224314][ T8834] netlink: 332 bytes leftover after parsing attributes in process `syz.0.1681'. [ 169.244286][ T8868] loop5: detected capacity change from 0 to 512 [ 169.253097][ T3005] loop0: p4 size 8388608 extends beyond EOD, truncated [ 169.271732][ T8868] EXT4-fs: Mount option(s) incompatible with ext3 [ 169.302399][ T8861] bond7: entered promiscuous mode [ 169.308224][ T8861] bond7: entered allmulticast mode [ 169.313949][ T8861] 8021q: adding VLAN 0 to HW filter on device bond7 [ 169.328825][ T8861] bond7 (unregistering): Released all slaves [ 169.343871][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.378578][ T8868] hub 9-0:1.0: USB hub found [ 169.388345][ T8868] hub 9-0:1.0: 8 ports detected [ 169.420040][ T8875] loop2: detected capacity change from 0 to 1024 [ 169.437004][ T8875] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 169.474827][ T3005] loop0: p1 < > p4 [ 169.485739][ T3005] loop0: p4 size 8388608 extends beyond EOD, truncated [ 169.550030][ T8888] loop3: detected capacity change from 0 to 1024 [ 169.596777][ T8890] loop0: detected capacity change from 0 to 512 [ 169.606756][ T8888] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 169.655901][ T8890] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #3: comm syz.0.1696: corrupted inode contents [ 169.688703][ T8891] bond1: entered promiscuous mode [ 169.695944][ T8891] bond1: entered allmulticast mode [ 169.704593][ T8890] EXT4-fs error (device loop0): ext4_dirty_inode:6103: inode #3: comm syz.0.1696: mark_inode_dirty error [ 169.724260][ T8891] 8021q: adding VLAN 0 to HW filter on device bond1 [ 169.735429][ T8890] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #3: comm syz.0.1696: corrupted inode contents [ 169.763941][ T8891] bond1 (unregistering): Released all slaves [ 169.787186][ T8890] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #3: comm syz.0.1696: mark_inode_dirty error [ 169.815276][ T8890] EXT4-fs error (device loop0): ext4_acquire_dquot:6935: comm syz.0.1696: Failed to acquire dquot type 0 [ 169.844484][ T8890] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #16: comm syz.0.1696: corrupted inode contents [ 169.881588][ T8890] EXT4-fs error (device loop0): ext4_dirty_inode:6103: inode #16: comm syz.0.1696: mark_inode_dirty error [ 169.921032][ T8890] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #16: comm syz.0.1696: corrupted inode contents [ 169.960904][ T8890] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #16: comm syz.0.1696: mark_inode_dirty error [ 169.994297][ T8890] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #16: comm syz.0.1696: corrupted inode contents [ 170.027648][ T8875] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 170.046747][ T8875] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2048 with error 28 [ 170.063407][ T8875] EXT4-fs (loop2): This should not happen!! Data will be lost [ 170.063407][ T8875] [ 170.075274][ T8875] EXT4-fs (loop2): Total free blocks count 0 [ 170.081452][ T8875] EXT4-fs (loop2): Free/Dirty block details [ 170.084369][ T8890] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 170.088299][ T8875] EXT4-fs (loop2): free_blocks=68451041280 [ 170.105615][ T8875] EXT4-fs (loop2): dirty_blocks=16384 [ 170.111779][ T8875] EXT4-fs (loop2): Block reservation details [ 170.115652][ T8890] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #16: comm syz.0.1696: corrupted inode contents [ 170.120340][ T8875] EXT4-fs (loop2): i_reserved_data_blocks=1024 [ 170.139727][ T8890] EXT4-fs error (device loop0): ext4_truncate:4255: inode #16: comm syz.0.1696: mark_inode_dirty error [ 170.155834][ T8888] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 170.159273][ T8890] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 170.188043][ T8890] EXT4-fs (loop0): 1 truncate cleaned up [ 170.195862][ T8890] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.210253][ T8890] ext4 filesystem being mounted at /350/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 170.210700][ T8888] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2048 with error 28 [ 170.241754][ T8888] EXT4-fs (loop3): This should not happen!! Data will be lost [ 170.241754][ T8888] [ 170.254657][ T8888] EXT4-fs (loop3): Total free blocks count 0 [ 170.261806][ T8888] EXT4-fs (loop3): Free/Dirty block details [ 170.268431][ T8888] EXT4-fs (loop3): free_blocks=68451041280 [ 170.274847][ T8888] EXT4-fs (loop3): dirty_blocks=16384 [ 170.280853][ T8888] EXT4-fs (loop3): Block reservation details [ 170.287681][ T8888] EXT4-fs (loop3): i_reserved_data_blocks=1024 [ 170.297355][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.306697][ T8899] loop4: detected capacity change from 0 to 512 [ 170.336179][ T1928] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 2052 with max blocks 2048 with error 28 [ 170.398326][ T8903] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 170.430924][ T31] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 2052 with max blocks 2048 with error 28 [ 170.471880][ T8909] loop4: detected capacity change from 0 to 512 [ 170.506150][ T8909] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 170.574200][ T8907] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8907 comm=syz.0.1702 [ 170.621426][ T8907] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8907 comm=syz.0.1702 [ 170.635904][ T8907] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8907 comm=syz.0.1702 [ 170.653331][ T8907] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8907 comm=syz.0.1702 [ 170.667340][ T8907] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8907 comm=syz.0.1702 [ 170.683093][ T8907] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8907 comm=syz.0.1702 [ 170.687972][ T8909] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.1703: Failed to acquire dquot type 0 [ 170.727055][ T8909] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 170.889592][ T8909] EXT4-fs (loop4): 1 truncate cleaned up [ 170.910543][ T8909] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.925417][ T8907] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8907 comm=syz.0.1702 [ 170.977768][ T8909] FAULT_INJECTION: forcing a failure. [ 170.977768][ T8909] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 170.991232][ T8909] CPU: 1 UID: 0 PID: 8909 Comm: syz.4.1703 Not tainted 6.15.0-rc2-syzkaller-00278-gfc96b232f8e7 #0 PREEMPT(voluntary) [ 170.991328][ T8909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 170.991340][ T8909] Call Trace: [ 170.991348][ T8909] [ 170.991357][ T8909] dump_stack_lvl+0xf6/0x150 [ 170.991382][ T8909] dump_stack+0x15/0x1a [ 170.991398][ T8909] should_fail_ex+0x261/0x270 [ 170.991502][ T8909] should_fail+0xb/0x10 [ 170.991522][ T8909] should_fail_usercopy+0x1a/0x20 [ 170.991545][ T8909] strncpy_from_user+0x25/0x230 [ 170.991574][ T8909] ? getname_flags+0x81/0x3b0 [ 170.991595][ T8909] getname_flags+0xb0/0x3b0 [ 170.991630][ T8909] do_sys_openat2+0x65/0x110 [ 170.991710][ T8909] __x64_sys_openat+0xf8/0x120 [ 170.991732][ T8909] x64_sys_call+0x1ac/0x2e10 [ 170.991750][ T8909] do_syscall_64+0xc9/0x1a0 [ 170.991776][ T8909] ? clear_bhb_loop+0x25/0x80 [ 170.991796][ T8909] ? clear_bhb_loop+0x25/0x80 [ 170.991875][ T8909] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.991895][ T8909] RIP: 0033:0x7f45471ee169 [ 170.991910][ T8909] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 170.991925][ T8909] RSP: 002b:00007f4545857038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 170.991940][ T8909] RAX: ffffffffffffffda RBX: 00007f4547415fa0 RCX: 00007f45471ee169 [ 170.991952][ T8909] RDX: 0000000000107842 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 170.991983][ T8909] RBP: 00007f4545857090 R08: 0000000000000000 R09: 0000000000000000 [ 170.991993][ T8909] R10: 0000000000000042 R11: 0000000000000246 R12: 0000000000000001 [ 170.992009][ T8909] R13: 0000000000000000 R14: 00007f4547415fa0 R15: 00007fff89977328 [ 170.992027][ T8909] [ 171.053200][ T8907] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8907 comm=syz.0.1702 [ 171.208639][ T8907] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8907 comm=syz.0.1702 [ 171.222605][ T8907] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8907 comm=syz.0.1702 [ 171.240785][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.263970][ T8918] loop3: detected capacity change from 0 to 512 [ 171.279584][ T8920] hub 9-0:1.0: USB hub found [ 171.284733][ T8920] hub 9-0:1.0: 8 ports detected [ 171.294700][ T3005] ================================================================== [ 171.303544][ T3005] BUG: KCSAN: data-race in d_delete / step_into [ 171.310201][ T3005] [ 171.312876][ T3005] read-write to 0xffff88811da97e40 of 4 bytes by task 3546 on cpu 1: [ 171.321954][ T3005] d_delete+0x15a/0x180 [ 171.326641][ T3005] d_delete_notify+0x34/0x100 [ 171.331870][ T3005] vfs_unlink+0x320/0x430 [ 171.336745][ T3005] do_unlinkat+0x21b/0x4b0 [ 171.343111][ T3005] __x64_sys_unlink+0x2e/0x40 [ 171.349208][ T3005] x64_sys_call+0x2358/0x2e10 [ 171.355024][ T3005] do_syscall_64+0xc9/0x1a0 [ 171.360943][ T3005] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.367843][ T3005] [ 171.370960][ T3005] read to 0xffff88811da97e40 of 4 bytes by task 3005 on cpu 0: [ 171.378977][ T3005] step_into+0x128/0x860 [ 171.383755][ T3005] walk_component+0x178/0x240 [ 171.388838][ T3005] path_lookupat+0x103/0x2a0 [ 171.394424][ T3005] filename_lookup+0x14b/0x340 [ 171.399557][ T3005] do_readlinkat+0x8b/0x210 [ 171.404502][ T3005] __x64_sys_readlink+0x47/0x60 [ 171.409817][ T3005] x64_sys_call+0x2a81/0x2e10 [ 171.415320][ T3005] do_syscall_64+0xc9/0x1a0 [ 171.420471][ T3005] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.426552][ T3005] [ 171.430791][ T3005] value changed: 0x00300108 -> 0x00004008 [ 171.437402][ T3005] [ 171.440041][ T3005] Reported by Kernel Concurrency Sanitizer on: [ 171.447245][ T3005] CPU: 0 UID: 0 PID: 3005 Comm: udevd Not tainted 6.15.0-rc2-syzkaller-00278-gfc96b232f8e7 #0 PREEMPT(voluntary) [ 171.460784][ T3005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 171.471379][ T3005] ================================================================== [ 171.565314][ T8918] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #3: comm syz.3.1704: corrupted inode contents [ 171.580511][ T8918] EXT4-fs error (device loop3): ext4_dirty_inode:6103: inode #3: comm syz.3.1704: mark_inode_dirty error [ 171.601600][ T8918] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #3: comm syz.3.1704: corrupted inode contents [ 171.615422][ T8918] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #3: comm syz.3.1704: mark_inode_dirty error [ 171.628888][ T8918] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.1704: Failed to acquire dquot type 0 [ 171.643051][ T8918] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #16: comm syz.3.1704: corrupted inode contents [ 171.655970][ T8918] EXT4-fs error (device loop3): ext4_dirty_inode:6103: inode #16: comm syz.3.1704: mark_inode_dirty error [ 171.667871][ T8918] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #16: comm syz.3.1704: corrupted inode contents [ 171.680928][ T8918] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #16: comm syz.3.1704: mark_inode_dirty error [ 171.692494][ T8918] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #16: comm syz.3.1704: corrupted inode contents [ 171.706993][ T8918] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 171.718562][ T8918] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #16: comm syz.3.1704: corrupted inode contents [ 171.732900][ T8918] EXT4-fs error (device loop3): ext4_truncate:4255: inode #16: comm syz.3.1704: mark_inode_dirty error [ 171.746122][ T8918] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 171.757037][ T8918] EXT4-fs (loop3): 1 truncate cleaned up [ 171.766004][ T8918] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.781650][ T8918] ext4 filesystem being mounted at /358/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 171.802112][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.