last executing test programs: 15.277033286s ago: executing program 0 (id=362): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 15.161315085s ago: executing program 0 (id=364): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0xee00, 0xee01}}, './file0\x00'}) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) r2 = syz_io_uring_setup(0xd3f, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x220}, &(0x7f0000000700)=0x0, &(0x7f00000002c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x1e, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r2, 0xce3, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r2, 0x4ac9, 0x0, 0x0, 0x0, 0x0) 15.040685765s ago: executing program 0 (id=366): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$nfc_llcp(r3, &(0x7f0000000100)={0x27, 0x0, 0xffffffffffffffff, 0x1, 0x6, 0x9, "e63af17b5abc9f9f97a54318d4d02eb1bc1c7111c344b61eb10f253ffcc6ac140f8974a4d404849f22a67235a2d334a0d6336e5e63eac83b582fc1e80fac05", 0x4}, 0x60) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x3) close_range(r2, 0xffffffffffffffff, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) 15.005772395s ago: executing program 0 (id=368): bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$can_raw(0x1d, 0x3, 0x1) perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f00000002c0)='rpm_return_int\x00', r0}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) sendto(0xffffffffffffffff, &(0x7f0000000740)="12ff81001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f00000003c0)='./file0\x00', 0x0, &(0x7f0000000280)={[{@errors_remount}, {@grpjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x100000}}, {@block_validity}, {@quota}]}, 0x3, 0x44d, &(0x7f0000000a40)="$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") syz_clone(0x1004400, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0) lchown(&(0x7f00000006c0)='./file0\x00', 0x0, 0xee01) 14.769603894s ago: executing program 0 (id=372): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000003, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r1}, 0x20) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000040)='./file2\x00', 0x100080a, &(0x7f0000000280)=ANY=[@ANYBLOB="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", @ANYRES64], 0x1, 0x66b, &(0x7f0000000900)="$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") 14.485515624s ago: executing program 0 (id=379): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000540)={{r0}, 0x0, 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r2}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0x4, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {0xd}, {0x0, 0x7}}}, 0x24}}, 0x0) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x2, 0x1, 0x1}}}}]}, 0x44}}, 0xc4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x5, 0xd}, {}, {0x5, 0x8}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x4}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x10, &(0x7f0000000880)={[{@errors_remount}, {@bsdgroups}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5e}}, {@noauto_da_alloc}, {@bsdgroups}, {@oldalloc}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x2, 0x44a, &(0x7f0000000400)="$eJzs281vFOUfAPDvzLbl9+OtFfEFRK0SY+NLSwsqBy8aTTxgNNEDHuu2EMJCDa2JECLVGLyYGBI9G48m/gXevBj1ZOJV74aEKBfQU83MzsDuslsobHcr+/kkA8+z82yf57vPPDPPzLMbwMAaz/5JIrZGxG8RMVrPNhcYr/939fLZ6t+Xz1aTWFl5688kL3fl8tlqWbR835YiM5FGpJ8kRSXNFk+fOT5bq82fKvJTSyfem1o8febZYydmj84fnT85c/Dggf3TLzw/81xX4sziurL7w4U9u15758Lr1cMX3v3p26y9W4v9jXF0y3gW+F8rudZ9T3S7sj7b1pBOhvrYENakEhFZdw3n4380KnG980bj1Y/72jhgXWXXpk2ddy+vAHexJPrdAqA/ygt9dv9bbj2aemwIl16q3wBlcV8ttvqeoUiLMsMt97fdNB4Rh5f/+SrbYp2eQwAANPqs+uWheKbd/C+N+xvKbS/WUMYi4p6I2BER90bEzoi4LyIv+0BEPLjG+luXhm6c/6QXbyuwW5TN/14s1raa53/l7C/GKkVuWx7/cHLkWG1+X/GZTMTwpiw/vUod37/y6+ed9jXO/7Itq7+cCxbtuDjU8oBubnZpNp+UdsGljyJ2D7WLP7m2EpBExK6I2L22P729TBx76ps9nQrdPP5VdGGdaeXriCfr/b8cLfGXktXXJ6f+F7X5fVPlUXGjn385/2an+u8o/i7I+n9z8/HfWmQsaVyvXVx7Hed//7TjPc3tHv8jydv5+WikeO2D2aWlU9MRI8mhPN/0+sz195b5snwW/8Te9uN/R/GeLP6HIiI7iB+OiEci4tGi7Y9FxOMRsXeV+H98ufO+jdD/c23Pf9eO/5b+X3uicvyH7zrVf2v9fyBPTRSv5Oe/m7jVBt7JZwcAAAD/FWn+HfgknbyWTtPJyfp3+HfG5rS2sLj09JGF90/O1b8rPxbDafmka7Theeh0slz8xXp+pnhWXO7fXzw3/qLy/zw/WV2ozfU5dhh0WzqM/8wflX63Dlh37dbRZkb60BCg51rHf9qcPfdGLxsD9JTfa8Pgusn4T3vVDqD3XP9hcLUb/+da8tYC4O7k+g+Dy/iHwWX8w+Ay/mEg3cnv+iUGORHphmiGxDol+n1mAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6I5/AwAA///K8u7c") 14.485253273s ago: executing program 32 (id=379): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000540)={{r0}, 0x0, 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r2}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0x4, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {0xd}, {0x0, 0x7}}}, 0x24}}, 0x0) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x2, 0x1, 0x1}}}}]}, 0x44}}, 0xc4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x5, 0xd}, {}, {0x5, 0x8}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x4}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x10, &(0x7f0000000880)={[{@errors_remount}, {@bsdgroups}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5e}}, {@noauto_da_alloc}, {@bsdgroups}, {@oldalloc}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x2, 0x44a, &(0x7f0000000400)="$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") 1.739890244s ago: executing program 1 (id=622): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, 0x0, &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) r2 = syz_io_uring_setup(0xd3f, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x220}, &(0x7f0000000700)=0x0, &(0x7f00000002c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x1e, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r2, 0xce3, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r2, 0x4ac9, 0x0, 0x0, 0x0, 0x0) 1.529272623s ago: executing program 1 (id=626): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, 0x0, &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) r2 = syz_io_uring_setup(0xd3f, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x220}, &(0x7f0000000700)=0x0, &(0x7f00000002c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x1e, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r2, 0xce3, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r2, 0x4ac9, 0x0, 0x0, 0x0, 0x0) 1.279652453s ago: executing program 1 (id=633): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000540)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) syz_usbip_server_init(0x1) 1.036174173s ago: executing program 2 (id=642): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0xe4ff, &(0x7f0000000000)={&(0x7f0000000200)=@newtaction={0x68, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x54, 0x1, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x208, 0xf5b, 0x1, 0x0, 0x3}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4008004}, 0x0) 987.743912ms ago: executing program 2 (id=644): syz_extract_tcp_res$synack(&(0x7f00000000c0), 0x1, 0x0) syz_emit_ethernet(0x126e, &(0x7f0000000000)=ANY=[@ANYRESDEC, @ANYRESOCT=0x0], 0x0) r0 = socket$netlink(0x10, 0x3, 0x7) fstatfs(r0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = syz_open_dev$evdev(&(0x7f00000002c0), 0x0, 0x0) readv(r2, &(0x7f0000001380)=[{&(0x7f0000001340)=""/29, 0x1d}], 0x1) 987.130642ms ago: executing program 5 (id=645): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000540)={{r0}, 0x0, 0x0}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r2}, 0x10) socket$netlink(0x10, 0x3, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x10, &(0x7f0000000880)={[{@errors_remount}, {@bsdgroups}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5e}}, {@noauto_da_alloc}, {@bsdgroups}, {@oldalloc}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x2, 0x44a, &(0x7f0000000400)="$eJzs281vFOUfAPDvzLbl9+OtFfEFRK0SY+NLSwsqBy8aTTxgNNEDHuu2EMJCDa2JECLVGLyYGBI9G48m/gXevBj1ZOJV74aEKBfQU83MzsDuslsobHcr+/kkA8+z82yf57vPPDPPzLMbwMAaz/5JIrZGxG8RMVrPNhcYr/939fLZ6t+Xz1aTWFl5688kL3fl8tlqWbR835YiM5FGpJ8kRSXNFk+fOT5bq82fKvJTSyfem1o8febZYydmj84fnT85c/Dggf3TLzw/81xX4sziurL7w4U9u15758Lr1cMX3v3p26y9W4v9jXF0y3gW+F8rudZ9T3S7sj7b1pBOhvrYENakEhFZdw3n4380KnG980bj1Y/72jhgXWXXpk2ddy+vAHexJPrdAqA/ygt9dv9bbj2aemwIl16q3wBlcV8ttvqeoUiLMsMt97fdNB4Rh5f/+SrbYp2eQwAANPqs+uWheKbd/C+N+xvKbS/WUMYi4p6I2BER90bEzoi4LyIv+0BEPLjG+luXhm6c/6QXbyuwW5TN/14s1raa53/l7C/GKkVuWx7/cHLkWG1+X/GZTMTwpiw/vUod37/y6+ed9jXO/7Itq7+cCxbtuDjU8oBubnZpNp+UdsGljyJ2D7WLP7m2EpBExK6I2L22P729TBx76ps9nQrdPP5VdGGdaeXriCfr/b8cLfGXktXXJ6f+F7X5fVPlUXGjn385/2an+u8o/i7I+n9z8/HfWmQsaVyvXVx7Hed//7TjPc3tHv8jydv5+WikeO2D2aWlU9MRI8mhPN/0+sz195b5snwW/8Te9uN/R/GeLP6HIiI7iB+OiEci4tGi7Y9FxOMRsXeV+H98ufO+jdD/c23Pf9eO/5b+X3uicvyH7zrVf2v9fyBPTRSv5Oe/m7jVBt7JZwcAAAD/FWn+HfgknbyWTtPJyfp3+HfG5rS2sLj09JGF90/O1b8rPxbDafmka7Theeh0slz8xXp+pnhWXO7fXzw3/qLy/zw/WV2ozfU5dhh0WzqM/8wflX63Dlh37dbRZkb60BCg51rHf9qcPfdGLxsD9JTfa8Pgusn4T3vVDqD3XP9hcLUb/+da8tYC4O7k+g+Dy/iHwWX8w+Ay/mEg3cnv+iUGORHphmiGxDol+n1mAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6I5/AwAA///K8u7c") 962.524122ms ago: executing program 4 (id=646): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2000000, &(0x7f0000000140)={[{@errors_remount}, {@nobh}, {@max_batch_time={'max_batch_time', 0x3d, 0x3ff}}, {@nojournal_checksum}, {@usrquota}, {@dioread_nolock}, {@nodiscard}]}, 0x21, 0x4b0, &(0x7f0000000540)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000a9000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='fscache_invalidate\x00', r0}, 0x18) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x16) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) sendmsg$NL80211_CMD_DEAUTHENTICATE(r1, &(0x7f0000000280)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f0000000a00)={0x424, r2, 0x300, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x2, 0x52}}}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_IE={0x49, 0x2a, [@sec_chan_ofs={0x3e, 0x1, 0x3}, @ibss={0x6, 0x2, 0x3ff}, @challenge={0x10, 0x1, 0x3c}, @random={0x1, 0x2b, "96a05ce7b0d0f95ba01d41a1cfba5289bcbdb50e216526a8291ca1dd416f3ff7eaea87ea4de4f593cadd54"}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x1, 0x80, 0x41}}, @ssid={0x0, 0x6, @default_ibss_ssid}]}, @NL80211_ATTR_IE={0x191, 0x2a, [@cf={0x4, 0x6, {0x7, 0x6, 0x4, 0x6}}, @tim={0x5, 0x2a, {0x2, 0x4e, 0x4, "a7b17ede6d60d471a3898c6eff784db1c7b98e8dc01e125f62777d22383caa946250b268852361"}}, @ht={0x2d, 0x1a, {0x2, 0x3, 0x4, 0x0, {0x4, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x400, 0xaee, 0x5}}, @mesh_config={0x71, 0x7, {0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, 0x8, 0x29}}, @ht={0x2d, 0x1a, {0x10, 0x1, 0x1, 0x0, {0x100, 0xf, 0x0, 0x4, 0x0, 0x0, 0x1, 0x2, 0x1}, 0x6, 0xff, 0x5}}, @peer_mgmt={0x75, 0x6, {0x0, 0x1, @val=0x800, @void, @void}}, @ht={0x2d, 0x1a, {0x300, 0x3, 0x1, 0x0, {0x10000, 0x9, 0x0, 0x8, 0x0, 0x1, 0x0, 0x3, 0x1}, 0x900, 0x3, 0xc0}}, @fast_bss_trans={0x37, 0xb7, {0x5, 0x4, "aff8a7feb4c0aebf0477dde5fefd8f04", "a83962a18e20ce47ce58e9f8e3a96af8758307301c5fc5bcd735e48008325658", "c46ef4e3322c64eeb68ef8a34beba84fe82b3798c46e0c38f8fc142906a68180", [{0x2, 0x28, "3635d63d825fbe2bb3de8d8b9e0744db7ee6a55ea8a56f6d04b7bd174e21fa35138f6d8e370699b5"}, {0x3, 0xe, "e2d4e070a24de35eaf7e3894733f"}, {0x3, 0x22, "fa127d5876ac847a49d4a7f6bf59dbe520305f3b904bb66db810f6d8b2d2dc7ebe99"}, {0x3, 0x5, "a6027c1c70"}]}}, @sec_chan_ofs={0x3e, 0x1, 0x1}, @preq={0x82, 0x36, {{0x1, 0x0, 0x1, 0x0, 0x1}, 0xf6, 0xec, 0x6, @broadcast, 0x3, @value, 0x400, 0x7, 0x2, [{{}, @broadcast, 0x1}, {{}, @device_a, 0x72f}]}}]}, @NL80211_ATTR_SSID={0x1a, 0x34, @random="596660739fc5e379576232d2abc3f0ba2e1345cc5576"}, @NL80211_ATTR_IE={0xe9, 0x2a, [@random_vendor={0xdd, 0xe3, "222c77d6dd9481e36f50fac8f1625b72f7d91d61f9acabc6a52214088eb39b075d2a1be5d51e7389de3be93df1b3ca1ff7a9eba1a2f0bb4dd96a3f6925947d4f8e9afca1b49d5148dafbf94c2afa12ef54023ac51c9c33210be3679783e3481fa352fa7456586ddaac6a71b547a6c6804be77ad28c02f279bc18daca647f1d3ff5fe13b2440b119c5d57215dd3dbd7cef7ab1c5c889719eb17b6d1480eed0768793378c8ea954b56fa3d77003ae9208314d9a6687097c8e0166bd104bfa21dcd4526cbd80cf05f6c6d317d255fee7b380cb48f6f8232a3820987f33289f68a317b19a6"}]}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x5}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_IE={0x109, 0x2a, [@sec_chan_ofs={0x3e, 0x1, 0x2}, @measure_req={0x26, 0xbd, {0x3, 0x7, 0x4, "f23d74698b8e579eda392e912bced8796d8ac6436075520d4d123a0d2a18d6de35289a03b24b2e41b010af29b44aee934510a61486897beb06cb4deef05683a9da825fd04f72b4c06679fb2abfbf132742156a89a7c848c167780e158428ce65a7c9d71354b752803053b8576f23322ddcb534690013d56eb5002769c01b96ec949d85cad5b96a014177ad922b68702c7dcd8936db1070f3d1a3cfb67bb636cdc3b7a8a13179ed8c7845ef55625952e8171023134b5ceb2948f5"}}, @ht={0x2d, 0x1a, {0x2, 0x3, 0x0, 0x0, {0x6, 0x6, 0x0, 0x10, 0x0, 0x1}, 0x1, 0x2, 0x7}}, @prep={0x83, 0x25, {{0x0, 0x1}, 0x4, 0x8, @broadcast, 0x4, @value=@device_b, 0x2, 0x8, @device_a, 0x200}}]}]}, 0x424}, 0x1, 0x0, 0x0, 0x4000080}, 0x81) 908.865172ms ago: executing program 3 (id=647): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="190000000400000008000000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r1}, 0x20) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000040)='./file2\x00', 0x100080a, &(0x7f0000000280)=ANY=[@ANYBLOB="756e686964652c68696465006e6f726f636b2c73657373696f6e3d3078303030303030013030303030303030312c686964652c63007b6865636b3d7374726963f4416e6f636fd689c91ceb036442a5e8b65659212a2bbc4e30952aa22edafcc01c50d9545f6d70726573534d6e6f726f636b2c6368657f12106458668eb97fd25f742c696f636861727365743d69736f383835392d31332c63727566742c7065726d6928d7997c17d1c8704a54dc34229c72656374696f2c61756469742c004b32b19ac463afda9675ef356e50e2fb3d253ba1480f27afe645fded942f5957f2992896524e7731fa148037452b21c34c9918911ac37dff04099efbbf3c69c8fb9bdcda4683151bb24329a40b273da9bce1145213686d55a96caab752943c330423edc3876e0b859d57cd6d60dc5220aa1367c24de5e66343c128db17391d25b7aa35001e68df726f9ca1e0bfab6993329f0318602f3c51a28ed0858da3e3c47e95de50cbd34e68dd8517f1b4e1eeab0000000000e7b4ea43ef9e4d817aae8e0d2e71215bc0127620b046361adbde0b60bee63e91aa28d93cd8d79802966dbfacceffe6b1d302c5515d7323f7cca3f665a6964cba6cd16ae40bc68e94ac6b40bf96a55dcefd4024a5d7a848d08bdb5d8bb89b4c1968cf6ae0fd7858fa38b738c1ee6822f2cfdb30c3941199251d603d495ab6ce2ddb8e918e72b9171aaa287f2b19755bdc92109150850d5c14ec2ac32dee0122b28fcb3e88d5096d6352799c5f13f597695adfd21e644379e6a400000000000000000000000000fa41c3f14dca4ef03fed7e6466a4e2d4503979398731ee0fc7487e0b09466d841e2d8e64ed9e0d4333e6a79acee454fdb4fff932f123000000", @ANYRES64], 0x1, 0x66b, &(0x7f0000000900)="$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") open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000640)=ANY=[@ANYBLOB="20000000020000001d"], 0x202400) 861.520222ms ago: executing program 5 (id=648): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000002f00)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='kfree\x00', r0, 0x0, 0x100000000}, 0xb) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800"/13], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000000c0)="a0", 0x0}, 0x31) 840.476922ms ago: executing program 3 (id=649): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@deltaction={0x4c, 0x18, 0x1, 0x0, 0x25dfdbfe, {0xa}, [@TCA_ACT_TAB={0x38, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x14, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x14, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}]}, 0x4c}}, 0x0) 794.225982ms ago: executing program 5 (id=650): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$nfc_llcp(r3, &(0x7f0000000100)={0x27, 0x0, 0xffffffffffffffff, 0x1, 0x6, 0x9, "e63af17b5abc9f9f97a54318d4d02eb1bc1c7111c344b61eb10f253ffcc6ac140f8974a4d404849f22a67235a2d334a0d6336e5e63eac83b582fc1e80fac05", 0x4}, 0x60) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x3) close_range(r2, 0xffffffffffffffff, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) 793.630412ms ago: executing program 3 (id=651): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f00000021c0)={0x2, 0x0, @local}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000110000002"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000003fffff", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000340)='kfree\x00'}, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="03", 0x1}], 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) r5 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x40000, 0xc2) read(r5, 0x0, 0x0) recvmmsg(r4, &(0x7f0000001140), 0x700, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) sendmsg$rds(r0, &(0x7f0000002180)={&(0x7f0000000100)={0x2, 0x0, @loopback}, 0x10, 0x0}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = syz_io_uring_setup(0xe42, &(0x7f0000000140)={0x0, 0x2119, 0x400}, &(0x7f0000000240)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000040)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f00000002c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000380)={0x80000, 0x4, 0x32}, &(0x7f0000000500)='./file0\x00', 0x18}) syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x2}, 0x0, 0x0) io_uring_enter(r8, 0x47f6, 0x0, 0x0, 0x0, 0x0) r11 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0xffffffff, 0x0, {0x0, 0x0, 0x74, r12, {0xfff1, 0x7}, {0x0, 0x4}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0xffffffffffffffb7, &(0x7f0000000000)={&(0x7f0000000040)=@gettclass={0x0, 0x2a, 0x300, 0x70bd27, 0x25dfdffd, {0x0, 0x0, 0x0, r12, {0xf, 0xb}, {0xd, 0xd}, {0x4, 0xfff1}}, ["", "", ""]}, 0x74}, 0x1, 0x0, 0x0, 0x8000010}, 0x0) 758.890322ms ago: executing program 4 (id=652): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) mlock2(&(0x7f0000c57000/0x3000)=nil, 0x3000, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0xfffffffd, 0x69, 0x11, 0x2c}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x6004, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f00000006c0)='kmem_cache_free\x00', r2}, 0x18) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000200)=0x9, 0x8, 0x0) mmap(&(0x7f0000543000/0x1000)=nil, 0x1000, 0x0, 0x2031, 0xffffffffffffffff, 0xcc4c6000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x2000, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r3, 0xc0481273, &(0x7f0000001080)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000003000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x2, 0x800000000003}, 0x100100, 0x5dd8, 0x3, 0x0, 0x0, 0x8, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000500)=@nfs={0x90, 0x24, {0x0, 0x5, 0x0, 0x80, "2537bdabda6e1d41239c67bd1edf9c9459fe3dc934e3f3737455aa69198d193f287ced119ea3e1680e09fc4b8b71e2acaee24a6f8c12fdb63768b9eddc2bcc194783dbc8714b639e6a3da7383125d078c2ba0aa782067bac00194ebf884b652f24e8a22a4b899ad1913fd296e10b5cd779a9c0814206acf79a36cf472e1bf587"}}, 0x0, 0x1200) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b7030000000000f7850000002d00000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) mremap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000004000/0x3000)=nil) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x28, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x90}}, 0x0) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r5, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdba, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) timerfd_create(0x9, 0x800) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10100}, 0x0, 0xaffffffeffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) 758.221422ms ago: executing program 5 (id=653): setgroups(0x0, 0x0) getgroups(0x1, &(0x7f00000000c0)=[0xee00]) setregid(0x0, r0) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffffd3) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x408) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x2008002, &(0x7f0000000080), 0x1, 0x549, &(0x7f0000001800)="$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") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f00000000c0)='./file0\x00', 0x899022, 0x0, 0x1, 0x0, &(0x7f0000000000)) setgroups(0x0, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) lchown(&(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, 0x0) 695.891371ms ago: executing program 1 (id=654): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) mlock2(&(0x7f0000c57000/0x3000)=nil, 0x3000, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0xfffffffd, 0x69, 0x11, 0x2c}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x6004, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f00000006c0)='kmem_cache_free\x00', r2}, 0x18) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000200)=0x9, 0x8, 0x0) mmap(&(0x7f0000543000/0x1000)=nil, 0x1000, 0x0, 0x2031, 0xffffffffffffffff, 0xcc4c6000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x2000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000003000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) creat(&(0x7f0000000880)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x2, 0x800000000003}, 0x100100, 0x5dd8, 0x3, 0x0, 0x0, 0x8, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000500)=@nfs={0x90, 0x24, {0x0, 0x5, 0x0, 0x80, "2537bdabda6e1d41239c67bd1edf9c9459fe3dc934e3f3737455aa69198d193f287ced119ea3e1680e09fc4b8b71e2acaee24a6f8c12fdb63768b9eddc2bcc194783dbc8714b639e6a3da7383125d078c2ba0aa782067bac00194ebf884b652f24e8a22a4b899ad1913fd296e10b5cd779a9c0814206acf79a36cf472e1bf587"}}, 0x0, 0x1200) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b7030000000000f7850000002d00000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) mremap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000004000/0x3000)=nil) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x28, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x90}}, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdba, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) timerfd_create(0x9, 0x800) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10100}, 0x0, 0xaffffffeffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) 554.403751ms ago: executing program 4 (id=655): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r3 = perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xfe, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x18a}, 0x401a, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x2) dup(r2) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000000)='cpu<=0||!') r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0x4000, 0x0, 0x101}}) setsockopt$inet_msfilter(r5, 0x0, 0x29, &(0x7f0000000040)={@empty, @loopback, 0x1, 0x3, [@loopback, @dev={0xac, 0x14, 0x14, 0xf}, @rand_addr=0x64010102]}, 0x1c) 496.402951ms ago: executing program 4 (id=656): creat(&(0x7f0000000040)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000001, 0x12, r0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff108500000007000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x1f, 0x1}}, 0x3c) 461.016481ms ago: executing program 5 (id=657): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r3 = perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xfe, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x18a}, 0x401a, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x2) dup(r2) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000000)='cpu<=0||!') rmdir(0x0) r4 = dup(0xffffffffffffffff) ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0x4000, 0x0, 0x101}}) setsockopt$inet_msfilter(r4, 0x0, 0x29, &(0x7f0000000040)={@empty, @loopback, 0x1, 0x3, [@loopback, @dev={0xac, 0x14, 0x14, 0xf}, @rand_addr=0x64010102]}, 0x1c) 460.177271ms ago: executing program 4 (id=658): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$can_raw(0x1d, 0x3, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) sendto(0xffffffffffffffff, &(0x7f0000000740)="12ff81001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f00000003c0)='./file0\x00', 0x0, &(0x7f0000000280)={[{@errors_remount}, {@grpjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x100000}}, {@block_validity}, {@quota}]}, 0x3, 0x44d, &(0x7f0000000a40)="$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") syz_clone(0x1004400, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0) lchown(&(0x7f00000006c0)='./file0\x00', 0x0, 0xee01) 454.900191ms ago: executing program 1 (id=659): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_trie\x00') openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/meminfo\x00', 0x0, 0x0) read$msr(r0, &(0x7f0000000040)=""/56, 0x38) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000340)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x25}}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000003100)=@gcm_128={{0x303}, "0400", "0d07080000e8ff00", "cf0d00", "8657e2b7e43b34f5"}, 0x28) write$binfmt_script(r4, &(0x7f0000000380), 0x4) close_range(r3, 0xffffffffffffffff, 0x0) 430.716801ms ago: executing program 1 (id=660): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x503}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r2}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000980)={[{@nojournal_checksum}, {@nombcache}, {@barrier}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@oldalloc}, {@nodelalloc}, {@usrquota}, {@noauto_da_alloc}, {@bh}, {@init_itable}]}, 0xff, 0x551, &(0x7f0000000cc0)="$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") write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) cachestat(r5, &(0x7f00000002c0)={0x100000000, 0x9}, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000400)='rxrpc_peer\x00', r6, 0x0, 0xfffffffffffffff9}, 0x18) r7 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r7, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10}, 0x24) sendmmsg(r7, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[{0x18, 0x110, 0x1, '\n'}], 0x18, 0xe000}, 0x5}], 0x1, 0x0) mkdir(0x0, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000480)}], 0x1, 0x26b8, 0x0, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x8000c61) openat(0xffffffffffffff9c, 0x0, 0xc4042, 0x1ff) sendmsg(r4, &(0x7f0000001a40)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000380)="c6621d5152de2c3d5ead08e587ce6d7b75ddc59dfe1738e26a210674d351c29d5b272e3938ceaa7f238a59ffc975c514", 0x30}, {&(0x7f00000003c0)="c59096a5bdc08d94758cc24b4316b3c99986f0b7edfa8f55c753fa4245245819f88c0d01cdaa16797212020cc3bf3579ec9400d13c9b4c3f004b78aeab2b2ac58562f15624020f749c5a803aaa7b3794cda222bba5738dacb4b5d5821e1b6dfca721dbfcc45ed489a83874341f1bb0f28b03aa3021065e78e9886fc42c6e4871a164b8b92f9baeb1b76a80144ea485bd75f55d3c2f59c08e47106450955f6d1b9beaf0370cb45b5e54c5030e8f35e4bb91030f10d70bb2ed2fd5a6abcaf9527371", 0xc1}], 0x2, &(0x7f0000001a80)=ANY=[@ANYBLOB="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"], 0x1530}, 0x4000) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) r9 = geteuid() fstat(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r8, r9, r10) 426.439281ms ago: executing program 3 (id=661): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r1}, 0x20) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000040)='./file2\x00', 0x100080a, &(0x7f0000000280)=ANY=[@ANYBLOB="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", @ANYRES64], 0x1, 0x66b, &(0x7f0000000900)="$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") 337.463691ms ago: executing program 3 (id=662): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2000000, &(0x7f0000000140)={[{@errors_remount}, {@nobh}, {@max_batch_time={'max_batch_time', 0x3d, 0x3ff}}, {@nojournal_checksum}, {@usrquota}, {@dioread_nolock}, {@nodiscard}]}, 0x21, 0x4b0, &(0x7f0000000540)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000a9000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='fscache_invalidate\x00', r0}, 0x18) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x16) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000280)={0x14, r2, 0x10ada85e65c25359, 0x0, 0x8000000, {{0x6b}, {@void, @void}}}, 0x14}}, 0x0) sendmsg$NL80211_CMD_DEAUTHENTICATE(r1, &(0x7f0000000280)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f0000000a00)={0x424, r2, 0x300, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x2, 0x52}}}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_IE={0x49, 0x2a, [@sec_chan_ofs={0x3e, 0x1, 0x3}, @ibss={0x6, 0x2, 0x3ff}, @challenge={0x10, 0x1, 0x3c}, @random={0x1, 0x2b, "96a05ce7b0d0f95ba01d41a1cfba5289bcbdb50e216526a8291ca1dd416f3ff7eaea87ea4de4f593cadd54"}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x1, 0x80, 0x41}}, @ssid={0x0, 0x6, @default_ibss_ssid}]}, @NL80211_ATTR_IE={0x191, 0x2a, [@cf={0x4, 0x6, {0x7, 0x6, 0x4, 0x6}}, @tim={0x5, 0x2a, {0x2, 0x4e, 0x4, "a7b17ede6d60d471a3898c6eff784db1c7b98e8dc01e125f62777d22383caa946250b268852361"}}, @ht={0x2d, 0x1a, {0x2, 0x3, 0x4, 0x0, {0x4, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x400, 0xaee, 0x5}}, @mesh_config={0x71, 0x7, {0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, 0x8, 0x29}}, @ht={0x2d, 0x1a, {0x10, 0x1, 0x1, 0x0, {0x100, 0xf, 0x0, 0x4, 0x0, 0x0, 0x1, 0x2, 0x1}, 0x6, 0xff, 0x5}}, @peer_mgmt={0x75, 0x6, {0x0, 0x1, @val=0x800, @void, @void}}, @ht={0x2d, 0x1a, {0x300, 0x3, 0x1, 0x0, {0x10000, 0x9, 0x0, 0x8, 0x0, 0x1, 0x0, 0x3, 0x1}, 0x900, 0x3, 0xc0}}, @fast_bss_trans={0x37, 0xb7, {0x5, 0x4, "aff8a7feb4c0aebf0477dde5fefd8f04", "a83962a18e20ce47ce58e9f8e3a96af8758307301c5fc5bcd735e48008325658", "c46ef4e3322c64eeb68ef8a34beba84fe82b3798c46e0c38f8fc142906a68180", [{0x2, 0x28, "3635d63d825fbe2bb3de8d8b9e0744db7ee6a55ea8a56f6d04b7bd174e21fa35138f6d8e370699b5"}, {0x3, 0xe, "e2d4e070a24de35eaf7e3894733f"}, {0x3, 0x22, "fa127d5876ac847a49d4a7f6bf59dbe520305f3b904bb66db810f6d8b2d2dc7ebe99"}, {0x3, 0x5, "a6027c1c70"}]}}, @sec_chan_ofs={0x3e, 0x1, 0x1}, @preq={0x82, 0x36, {{0x1, 0x0, 0x1, 0x0, 0x1}, 0xf6, 0xec, 0x6, @broadcast, 0x3, @value, 0x400, 0x7, 0x2, [{{}, @broadcast, 0x1}, {{}, @device_a, 0x72f}]}}]}, @NL80211_ATTR_SSID={0x1a, 0x34, @random="596660739fc5e379576232d2abc3f0ba2e1345cc5576"}, @NL80211_ATTR_IE={0xe9, 0x2a, [@random_vendor={0xdd, 0xe3, "222c77d6dd9481e36f50fac8f1625b72f7d91d61f9acabc6a52214088eb39b075d2a1be5d51e7389de3be93df1b3ca1ff7a9eba1a2f0bb4dd96a3f6925947d4f8e9afca1b49d5148dafbf94c2afa12ef54023ac51c9c33210be3679783e3481fa352fa7456586ddaac6a71b547a6c6804be77ad28c02f279bc18daca647f1d3ff5fe13b2440b119c5d57215dd3dbd7cef7ab1c5c889719eb17b6d1480eed0768793378c8ea954b56fa3d77003ae9208314d9a6687097c8e0166bd104bfa21dcd4526cbd80cf05f6c6d317d255fee7b380cb48f6f8232a3820987f33289f68a317b19a6"}]}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x5}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_IE={0x109, 0x2a, [@sec_chan_ofs={0x3e, 0x1, 0x2}, @measure_req={0x26, 0xbd, {0x3, 0x7, 0x4, "f23d74698b8e579eda392e912bced8796d8ac6436075520d4d123a0d2a18d6de35289a03b24b2e41b010af29b44aee934510a61486897beb06cb4deef05683a9da825fd04f72b4c06679fb2abfbf132742156a89a7c848c167780e158428ce65a7c9d71354b752803053b8576f23322ddcb534690013d56eb5002769c01b96ec949d85cad5b96a014177ad922b68702c7dcd8936db1070f3d1a3cfb67bb636cdc3b7a8a13179ed8c7845ef55625952e8171023134b5ceb2948f5"}}, @ht={0x2d, 0x1a, {0x2, 0x3, 0x0, 0x0, {0x6, 0x6, 0x0, 0x10, 0x0, 0x1}, 0x1, 0x2, 0x7}}, @prep={0x83, 0x25, {{0x0, 0x1}, 0x4, 0x8, @broadcast, 0x4, @value=@device_b, 0x2, 0x8, @device_a, 0x200}}]}]}, 0x424}, 0x1, 0x0, 0x0, 0x4000080}, 0x81) 243.04906ms ago: executing program 5 (id=663): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2000000, &(0x7f0000000140)={[{@errors_remount}, {@nobh}, {@max_batch_time={'max_batch_time', 0x3d, 0x3ff}}, {@nojournal_checksum}, {@usrquota}, {@dioread_nolock}, {@nodiscard}]}, 0x21, 0x4b0, &(0x7f0000000540)="$eJzs3cFPG9kZAPBvBgiEkEDaHNqqbdI0bVpFscFJUJRTemlVRZGqRj31kFBwEMLGCJs00BzI/1CpkXpq/4QeKvVQKafee9u97SV7WCm7G+0qrLQHr2ZsCCEY2A3BK/z7SU8zb57x9x7WvGc+wC+AnnUuItYi4lhE3IuI0fb1pF3iZqtkj3v54tH0+otH00k0m3c+SfL27Fps+ZrMifZzDkXE738T8afkzbj1ldX5qUqlvNSuFxvVxWJ9ZfXyXHVqtjxbXiiVJicmx69fuVY6sLGerf7r+a/nbv3hv//50bP/r/3yL1m3RtptW8dxkFpDH9iMk+mPiFvvIlgX9LXHc6zbHeEbSSPiOxFxPr//R6MvfzUBgKOs2RyN5ujW+iv92+oAwNGQ5jmwJC20cwEjkaaFQiuHdyaG00qt3rh0v7a8MNPKlY3FQHp/rlIeb+cKx2IgyeoT+fmremlb/UpEnI6Ivw4ez+uF6VplpptvfACgh53Ytv5/Ptha/wGAI26o2x0AAA6d9R8Aeo/1HwB6j/UfAHqP9R8Aeo/1HwB6j/UfAHrK727fzkpzvf351zMPVpbnaw8uz5Tr84Xq8nRhura0WJit1Wbzz+yp7vV8lVptceJqLD8sNsr1RrG+snq3WlteaNzNP9f7bnngUEYFAOzm9Nmn7ycRsXbjeF5iy14O1mo42tJudwDomr5udwDoGrt9Qe/yMz6wwxa9r+n4J0JPDr4vwOG4+H35f+hV8v/Qu+T/oXfJ/0PvajYTe/wDQI+R4wf8/h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC+vpG8JGmhvRf4SKRpoRBxMiLGYiC5P1cpj0fEqYh4b3BgMKtPdLvTAMBbSj9K2vt/XRy9MLK99VjyxWB+jIg///3O3x5ONRpLE9n1TzevN560r5e60X8AYC8b6/TGOr7h5YtH0xvlMPvz/FetzUWzuOvt0mrpj/78OBQDETH8WdKut2TvV/oOIP7a44j43k7jT/LcyFh759Pt8bPYJw81fvpa/DRvax2z78V3D6Av0GueZvPPzZ3uvzTO5ced7/+hfIZ6exvz3/ob81+6Of/1dZj/zu03xtX//bZj2+OIH/TvFD/ZjJ90iH9hn/E/+OGPz3dqa/4j4mLsHH9rrGKjulisr6xenqtOzZZnywul0uTE5Pj1K9dKxTxHXdzIVL/p4xuXTu02/uEO8Yf2GP/P9jn+f355748/2SX+L3668+t/Zpf42Zr4833Gnxr+d8ftu7P4Mx3Gv9frf2mf8Z99uDqzz4cCAIegvrI6P1WplJecdOmk79vRDSdOXjvp9swEvGuvbvpu9wQAAAAAAAAAAAAAAOjkMP6dqNtjBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Oj6KgAA//+r59Ta") creat(&(0x7f0000000000)='./bus\x00', 0x16) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x81000) renameat2(r0, &(0x7f0000000000)='./file0\x00', r0, 0x0, 0x0) 154.00046ms ago: executing program 3 (id=664): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000540)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) syz_usbip_server_init(0x1) 105.27844ms ago: executing program 2 (id=665): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 104.81639ms ago: executing program 2 (id=666): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r3 = perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xfe, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x18a}, 0x401a, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x2) dup(r2) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000000)='cpu<=0||!') r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0x4000, 0x0, 0x101}}) setsockopt$inet_msfilter(r5, 0x0, 0x29, &(0x7f0000000040)={@empty, @loopback, 0x1, 0x3, [@loopback, @dev={0xac, 0x14, 0x14, 0xf}, @rand_addr=0x64010102]}, 0x1c) 89.07517ms ago: executing program 4 (id=667): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xf, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b00000007000000010001000800000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000002c7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETSF(r4, 0x5404, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x10, &(0x7f0000000140), 0xee, 0x489, &(0x7f00000004c0)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x141100) ioctl(r5, 0x7fff, 0x0) move_pages(0x0, 0x2064, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], &(0x7f0000001180), &(0x7f0000000000), 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) r6 = creat(&(0x7f0000000080)='./bus\x00', 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r7, 0x0, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x1, 0x220, [0x0, 0x0, 0x0, 0x0, 0x96f0, 0x20000500], 0x7, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="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"/544]}, 0x298) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010"], 0x3c}}, 0x0) fsetxattr$system_posix_acl(r6, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="02"], 0xfe44, 0x0) r8 = socket$caif_stream(0x25, 0x1, 0x6) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000027b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) pipe(&(0x7f0000002480)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) splice(r12, 0x0, r11, 0x0, 0x9000000000, 0x1) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000280)=r12, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r10}, 0x10) sendmmsg$inet(r8, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)="92", 0x1}], 0x1}}], 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) 62.67123ms ago: executing program 2 (id=668): creat(&(0x7f0000000040)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000001, 0x12, r0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff108500000007000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x1f, 0x1}}, 0x3c) 0s ago: executing program 2 (id=669): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080), 0x64, 0x50a, &(0x7f0000000200)="$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") r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$inet6(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r3 = socket$inet6(0xa, 0x3, 0xff) bind$inet6(r3, &(0x7f0000000880)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000060000000800000005"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r4, &(0x7f0000000740)="57d34d3f2e1be40fa9b5afd71630782cf7b512fb", &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) dup2(r3, r3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) quotactl$Q_GETNEXTQUOTA(0xffffffff80000901, &(0x7f00000080c0)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) kernel console output (not intermixed with test programs): ded to keep mac addresses unique to avoid problems! [ 33.044559][ T3301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.055012][ T3301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.066111][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.076470][ T3305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.087044][ T3305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.096904][ T3305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.107391][ T3305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.117226][ T3305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.127661][ T3305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.137497][ T3305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.147932][ T3305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.159833][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.173418][ T3301] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.182309][ T3301] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.191082][ T3301] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.199786][ T3301] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.216316][ T3305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.226855][ T3305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.236711][ T3305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.247212][ T3305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.257063][ T3305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.267523][ T3305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.277436][ T3305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.287971][ T3305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.298501][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.306977][ T3305] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.315795][ T3305] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.324617][ T3305] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.333422][ T3305] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.361749][ T3448] syzkaller0: entered promiscuous mode [ 33.367257][ T3448] syzkaller0: entered allmulticast mode [ 33.447320][ T3452] loop0: detected capacity change from 0 to 512 [ 33.510044][ T3452] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.529614][ T3452] ext4 filesystem being mounted at /0/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 33.552756][ T3458] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 33.559315][ T3458] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 33.566902][ T3458] vhci_hcd vhci_hcd.0: Device attached [ 33.572641][ T3469] FAULT_INJECTION: forcing a failure. [ 33.572641][ T3469] name failslab, interval 1, probability 0, space 0, times 1 [ 33.585431][ T3469] CPU: 1 UID: 0 PID: 3469 Comm: syz.1.8 Not tainted 6.13.0-rc6-syzkaller-00290-gbe548645527a #0 [ 33.595972][ T3469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 33.606044][ T3469] Call Trace: [ 33.609447][ T3469] [ 33.612422][ T3469] dump_stack_lvl+0xf2/0x150 [ 33.617076][ T3469] dump_stack+0x15/0x1a [ 33.621281][ T3469] should_fail_ex+0x223/0x230 [ 33.625981][ T3469] should_failslab+0x8f/0xb0 [ 33.630595][ T3469] __kmalloc_noprof+0xab/0x3f0 [ 33.635367][ T3469] ? kernfs_fop_write_iter+0xe1/0x2c0 [ 33.640822][ T3469] kernfs_fop_write_iter+0xe1/0x2c0 [ 33.646145][ T3469] iter_file_splice_write+0x5f1/0x980 [ 33.651542][ T3469] ? __pfx_iter_file_splice_write+0x10/0x10 [ 33.657464][ T3469] do_splice+0x98f/0x1120 [ 33.661807][ T3469] ? get_pid_task+0x8e/0xc0 [ 33.666357][ T3469] ? proc_fail_nth_write+0x12a/0x150 [ 33.671679][ T3469] ? __rcu_read_unlock+0x4e/0x70 [ 33.676636][ T3469] ? __fget_files+0x17c/0x1c0 [ 33.681408][ T3469] __se_sys_splice+0x259/0x3a0 [ 33.686200][ T3469] __x64_sys_splice+0x78/0x90 [ 33.690915][ T3469] x64_sys_call+0x2ce8/0x2dc0 [ 33.695683][ T3469] do_syscall_64+0xc9/0x1c0 [ 33.700195][ T3469] ? clear_bhb_loop+0x55/0xb0 [ 33.705033][ T3469] ? clear_bhb_loop+0x55/0xb0 [ 33.709730][ T3469] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 33.715752][ T3469] RIP: 0033:0x7f38fc975d29 [ 33.720175][ T3469] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 33.739889][ T3469] RSP: 002b:00007f38fafc0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 33.748317][ T3469] RAX: ffffffffffffffda RBX: 00007f38fcb66080 RCX: 00007f38fc975d29 [ 33.756296][ T3469] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 33.764274][ T3469] RBP: 00007f38fafc0090 R08: 000000000000bfd1 R09: 0000000000000000 [ 33.772324][ T3469] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 33.780300][ T3469] R13: 0000000000000001 R14: 00007f38fcb66080 R15: 00007fff3db463d8 [ 33.788319][ T3469] [ 33.797733][ T3470] loop4: detected capacity change from 0 to 1024 [ 33.808102][ T3467] vhci_hcd: connection closed [ 33.815087][ T3470] ext3: Unknown parameter 'dont_appraise' [ 33.845664][ T3419] vhci_hcd: stop threads [ 33.850149][ T3419] vhci_hcd: release socket [ 33.854644][ T3419] vhci_hcd: disconnect device [ 33.882030][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.891698][ T8] vhci_hcd: vhci_device speed not set [ 33.901305][ T3474] loop4: detected capacity change from 0 to 512 [ 33.908125][ T3474] EXT4-fs: Ignoring removed nobh option [ 33.932234][ T3478] loop0: detected capacity change from 0 to 512 [ 33.948135][ T3478] EXT4-fs: Ignoring removed nobh option [ 33.950701][ T3474] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.966893][ T3474] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 33.968937][ T3476] syzkaller0: entered promiscuous mode [ 33.980597][ T3478] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.999242][ T3478] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 34.017200][ T3474] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.11: bg 0: block 224: padding at end of block bitmap is not set [ 34.034549][ C1] hrtimer: interrupt took 28838 ns [ 34.040981][ T3474] EXT4-fs (loop4): Remounting filesystem read-only [ 34.057593][ T3450] hid-generic 0001:0003:0000.0001: item fetching failed at offset 0/2 [ 34.065946][ T3450] hid-generic 0001:0003:0000.0001: probe with driver hid-generic failed with error -22 [ 34.076793][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.088526][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.178904][ T3487] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 34.182067][ T3485] loop4: detected capacity change from 0 to 512 [ 34.187257][ T3487] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 34.222712][ T3485] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.240748][ T3485] ext4 filesystem being mounted at /3/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 34.248645][ T3492] serio: Serial port ptm0 [ 34.268330][ T3485] netlink: 164 bytes leftover after parsing attributes in process `syz.4.15'. [ 34.277307][ T3485] netlink: 164 bytes leftover after parsing attributes in process `syz.4.15'. [ 34.286322][ T3485] netlink: 40 bytes leftover after parsing attributes in process `syz.4.15'. [ 34.298780][ T3494] netlink: 44 bytes leftover after parsing attributes in process `syz.3.17'. [ 34.350261][ T3500] loop0: detected capacity change from 0 to 512 [ 34.358476][ T3500] EXT4-fs: Ignoring removed nobh option [ 34.416268][ T3509] serio: Serial port ptm0 [ 34.424205][ T3500] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.459850][ T3500] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 34.478194][ T3500] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.18: bg 0: block 224: padding at end of block bitmap is not set [ 34.497147][ T3500] EXT4-fs (loop0): Remounting filesystem read-only [ 34.518018][ T3512] process 'syz.1.23' launched './file1' with NULL argv: empty string added [ 34.550899][ T3500] syz.0.18 (3500) used greatest stack depth: 10664 bytes left [ 34.575883][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.617748][ T3527] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 34.624349][ T3527] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 34.631944][ T3527] vhci_hcd vhci_hcd.0: Device attached [ 34.661535][ T3529] vhci_hcd: connection closed [ 34.661778][ T56] vhci_hcd: stop threads [ 34.670924][ T56] vhci_hcd: release socket [ 34.675362][ T56] vhci_hcd: disconnect device [ 34.683431][ T3532] loop2: detected capacity change from 0 to 512 [ 34.690068][ T3532] EXT4-fs: Ignoring removed nobh option [ 34.753310][ T3532] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.766449][ T3532] ext4 filesystem being mounted at /5/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 34.779380][ T3522] loop1: detected capacity change from 0 to 164 [ 34.783080][ T3532] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.31: bg 0: block 224: padding at end of block bitmap is not set [ 34.803680][ T3532] EXT4-fs (loop2): Remounting filesystem read-only [ 34.824309][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.871916][ T3546] loop2: detected capacity change from 0 to 512 [ 34.880781][ T3546] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 34.893957][ T3546] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 34.919056][ T3546] EXT4-fs (loop2): 1 orphan inode deleted [ 34.924893][ T3546] EXT4-fs (loop2): 1 truncate cleaned up [ 34.932680][ T3546] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.981241][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.993462][ T3550] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 35.008183][ T3550] EXT4-fs (loop2): Remounting filesystem read-only [ 35.009018][ T3552] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=12 [ 35.023797][ T3552] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=12 [ 35.050322][ T3550] syz.2.35 (3550) used greatest stack depth: 9272 bytes left [ 35.077885][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.162089][ T3559] loop2: detected capacity change from 0 to 512 [ 35.194097][ T3559] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.210207][ T3559] ext4 filesystem being mounted at /8/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 35.278266][ T3554] loop4: detected capacity change from 0 to 164 [ 35.312649][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.395651][ T3577] loop4: detected capacity change from 0 to 512 [ 35.423256][ T3577] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.436279][ T3577] ext4 filesystem being mounted at /6/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 35.450081][ T3577] EXT4-fs error (device loop4): ext4_do_update_inode:5153: inode #2: comm syz.4.45: corrupted inode contents [ 35.463580][ T3577] EXT4-fs error (device loop4): ext4_dirty_inode:6041: inode #2: comm syz.4.45: mark_inode_dirty error [ 35.476455][ T3577] EXT4-fs error (device loop4): ext4_do_update_inode:5153: inode #2: comm syz.4.45: corrupted inode contents [ 35.489386][ T3577] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #2: comm syz.4.45: mark_inode_dirty error [ 35.514522][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.655791][ T3585] loop2: detected capacity change from 0 to 164 [ 35.687859][ T3594] loop0: detected capacity change from 0 to 512 [ 35.703592][ T3594] EXT4-fs: Ignoring removed nobh option [ 35.727936][ T3594] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.750509][ T3594] ext4 filesystem being mounted at /10/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 35.789004][ T3589] loop4: detected capacity change from 0 to 164 [ 35.795844][ T3594] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.51: bg 0: block 224: padding at end of block bitmap is not set [ 35.825341][ T3594] EXT4-fs (loop0): Remounting filesystem read-only [ 35.848269][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.012168][ T3603] loop2: detected capacity change from 0 to 164 [ 36.025800][ T3614] netlink: 12 bytes leftover after parsing attributes in process `syz.0.54'. [ 36.076578][ T3623] random: crng reseeded on system resumption [ 36.162338][ T3625] loop4: detected capacity change from 0 to 1024 [ 36.169881][ T3625] ======================================================= [ 36.169881][ T3625] WARNING: The mand mount option has been deprecated and [ 36.169881][ T3625] and is ignored by this kernel. Remove the mand [ 36.169881][ T3625] option from the mount to silence this warning. [ 36.169881][ T3625] ======================================================= [ 36.206230][ T3625] EXT4-fs: Ignoring removed nobh option [ 36.223632][ T3625] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.229507][ T3632] loop2: detected capacity change from 0 to 512 [ 36.243678][ T3632] EXT4-fs: Ignoring removed nobh option [ 36.254773][ T3625] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4115: comm syz.4.61: Allocating blocks 433-513 which overlap fs metadata [ 36.279148][ T3632] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.296688][ T3632] ext4 filesystem being mounted at /14/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 36.303448][ T3638] loop3: detected capacity change from 0 to 2048 [ 36.311806][ T3632] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.63: bg 0: block 224: padding at end of block bitmap is not set [ 36.315416][ T3638] EXT4-fs: Ignoring removed mblk_io_submit option [ 36.334150][ T3638] EXT4-fs: Ignoring removed i_version option [ 36.335194][ T3639] EXT4-fs (loop4): pa ffff8881064e11c0: logic 496, phys. 177, len 21 [ 36.348637][ T3639] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5366: group 0, free 0, pa_free 5 [ 36.350510][ T3632] EXT4-fs (loop2): Remounting filesystem read-only [ 36.378255][ T3638] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.391190][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.457676][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.568055][ T3653] loop3: detected capacity change from 0 to 512 [ 36.574949][ T3653] EXT4-fs: Ignoring removed nobh option [ 36.603563][ T3653] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.616375][ T3653] ext4 filesystem being mounted at /16/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 36.738345][ T3658] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.70: bg 0: block 224: padding at end of block bitmap is not set [ 36.752814][ T3658] EXT4-fs (loop3): Remounting filesystem read-only [ 37.004065][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.005027][ T3660] loop1: detected capacity change from 0 to 164 [ 37.054556][ T3670] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.071531][ T3670] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.082869][ T3670] loop0: detected capacity change from 0 to 512 [ 37.101803][ T3670] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm syz.0.76: Invalid inode bitmap blk 4 in block_group 0 [ 37.115868][ T3670] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.146223][ T3678] netlink: 12 bytes leftover after parsing attributes in process `syz.1.78'. [ 37.162624][ T3675] syzkaller0: entered allmulticast mode [ 37.175397][ T3675] syzkaller0 (unregistering): left allmulticast mode [ 37.206994][ T3680] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.216328][ T3680] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.227793][ T3680] loop1: detected capacity change from 0 to 512 [ 37.236425][ T3680] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.79: Invalid inode bitmap blk 4 in block_group 0 [ 37.251108][ T3680] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.417091][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.473487][ T29] kauditd_printk_skb: 506 callbacks suppressed [ 37.473504][ T29] audit: type=1400 audit(1736734002.329:612): avc: denied { mounton } for pid=3696 comm="syz.3.85" path="/17/file0" dev="tmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 37.513494][ T29] audit: type=1326 audit(1736734002.369:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3700 comm="syz.2.86" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a437e5d29 code=0x7ffc0000 [ 37.542897][ T29] audit: type=1326 audit(1736734002.369:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3700 comm="syz.2.86" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7f1a437e5d29 code=0x7ffc0000 [ 37.566572][ T29] audit: type=1326 audit(1736734002.369:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3700 comm="syz.2.86" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a437e5d29 code=0x7ffc0000 [ 37.596353][ T3706] loop2: detected capacity change from 0 to 512 [ 37.622953][ T3706] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.636573][ T3706] ext4 filesystem being mounted at /20/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 37.652862][ T29] audit: type=1326 audit(1736734002.509:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3705 comm="syz.2.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a437e5d29 code=0x7ffc0000 [ 37.677511][ T29] audit: type=1326 audit(1736734002.509:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3705 comm="syz.2.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a437e5d29 code=0x7ffc0000 [ 37.700734][ T29] audit: type=1326 audit(1736734002.509:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3705 comm="syz.2.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1a437e5d29 code=0x7ffc0000 [ 37.724203][ T29] audit: type=1326 audit(1736734002.509:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3705 comm="syz.2.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a437e5d29 code=0x7ffc0000 [ 37.747837][ T29] audit: type=1326 audit(1736734002.509:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3705 comm="syz.2.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a437e5d29 code=0x7ffc0000 [ 37.771018][ T29] audit: type=1326 audit(1736734002.509:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3705 comm="syz.2.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1a437e5d29 code=0x7ffc0000 [ 37.796160][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.796476][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.840368][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.908212][ T3716] random: crng reseeded on system resumption [ 37.984427][ T3718] loop1: detected capacity change from 0 to 512 [ 38.022946][ T3718] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.036439][ T3718] ext4 filesystem being mounted at /14/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 38.051292][ T3718] EXT4-fs error (device loop1): ext4_do_update_inode:5153: inode #2: comm syz.1.92: corrupted inode contents [ 38.066450][ T3727] loop0: detected capacity change from 0 to 512 [ 38.073373][ T3727] EXT4-fs: Ignoring removed nobh option [ 38.073758][ T3718] EXT4-fs error (device loop1): ext4_dirty_inode:6041: inode #2: comm syz.1.92: mark_inode_dirty error [ 38.095819][ T3718] EXT4-fs error (device loop1): ext4_do_update_inode:5153: inode #2: comm syz.1.92: corrupted inode contents [ 38.107971][ T3718] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #2: comm syz.1.92: mark_inode_dirty error [ 38.132412][ T3727] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.145215][ T3727] ext4 filesystem being mounted at /20/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 38.146732][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.167060][ T3727] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.95: bg 0: block 224: padding at end of block bitmap is not set [ 38.182358][ T3727] EXT4-fs (loop0): Remounting filesystem read-only [ 38.189785][ T3727] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 38.199601][ T3727] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 38.212065][ T3727] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 38.222250][ T3727] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 38.231710][ T3727] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 38.242039][ T3727] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=13 [ 38.262388][ T3727] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 38.272191][ T3727] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 38.281743][ T3727] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 38.290811][ T3727] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=13 [ 38.299951][ T3727] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 38.324075][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.377198][ T3740] tmpfs: Bad value for 'mpol' [ 38.386577][ T3740] loop3: detected capacity change from 0 to 512 [ 38.424428][ T3740] EXT4-fs error (device loop3): ext4_acquire_dquot:6938: comm syz.3.99: Failed to acquire dquot type 1 [ 38.439719][ T3747] loop4: detected capacity change from 0 to 512 [ 38.456862][ T3747] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 38.469794][ T3740] EXT4-fs (loop3): 1 truncate cleaned up [ 38.482566][ T3740] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.488657][ T3747] EXT4-fs (loop4): 1 orphan inode deleted [ 38.495828][ T3740] ext4 filesystem being mounted at /19/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 38.501241][ T3747] EXT4-fs (loop4): 1 truncate cleaned up [ 38.518416][ T3747] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.549250][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.571878][ T3757] netlink: 4 bytes leftover after parsing attributes in process `syz.0.103'. [ 38.589348][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.618249][ T3763] loop3: detected capacity change from 0 to 512 [ 38.637440][ T3760] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 38.643982][ T3767] loop0: detected capacity change from 0 to 512 [ 38.650285][ T3760] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 38.657869][ T3760] vhci_hcd vhci_hcd.0: Device attached [ 38.658724][ T3763] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.666954][ T3764] vhci_hcd: connection closed [ 38.676707][ T3763] ext4 filesystem being mounted at /20/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 38.681855][ T3767] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.692416][ T28] vhci_hcd: stop threads [ 38.705524][ T3767] ext4 filesystem being mounted at /24/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 38.708397][ T28] vhci_hcd: release socket [ 38.723269][ T28] vhci_hcd: disconnect device [ 38.775393][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.825277][ T3775] loop3: detected capacity change from 0 to 512 [ 38.836531][ T3777] 9pnet_fd: Insufficient options for proto=fd [ 38.838625][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.842974][ T3775] EXT4-fs: Ignoring removed nobh option [ 38.873530][ T3775] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.886308][ T3775] ext4 filesystem being mounted at /21/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 38.901275][ T3775] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.106: bg 0: block 224: padding at end of block bitmap is not set [ 38.922169][ T3775] EXT4-fs (loop3): Remounting filesystem read-only [ 38.944240][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.988060][ T3790] loop2: detected capacity change from 0 to 512 [ 38.999397][ T3792] random: crng reseeded on system resumption [ 38.999613][ T3790] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 39.021189][ T3790] EXT4-fs (loop2): 1 orphan inode deleted [ 39.027012][ T3790] EXT4-fs (loop2): 1 truncate cleaned up [ 39.054866][ T3790] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.116554][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.320575][ T3815] FAULT_INJECTION: forcing a failure. [ 39.320575][ T3815] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 39.333917][ T3815] CPU: 1 UID: 0 PID: 3815 Comm: syz.3.123 Not tainted 6.13.0-rc6-syzkaller-00290-gbe548645527a #0 [ 39.344631][ T3815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 39.354841][ T3815] Call Trace: [ 39.358123][ T3815] [ 39.361124][ T3815] dump_stack_lvl+0xf2/0x150 [ 39.365788][ T3815] dump_stack+0x15/0x1a [ 39.369963][ T3815] should_fail_ex+0x223/0x230 [ 39.374960][ T3815] should_fail_alloc_page+0xfd/0x110 [ 39.380276][ T3815] __alloc_pages_noprof+0x109/0x340 [ 39.385640][ T3815] alloc_pages_mpol_noprof+0xb1/0x1e0 [ 39.391047][ T3815] alloc_pages_noprof+0xe1/0x100 [ 39.396012][ T3815] __pud_alloc+0x4b/0x440 [ 39.400414][ T3815] ? __perf_event_task_sched_in+0x9ac/0xa10 [ 39.406407][ T3815] handle_mm_fault+0x1916/0x2ac0 [ 39.411363][ T3815] ? _raw_spin_unlock+0x26/0x50 [ 39.416233][ T3815] __get_user_pages+0xf2c/0x2670 [ 39.421185][ T3815] ? mas_store_prealloc+0x6ed/0x960 [ 39.426447][ T3815] get_user_pages_remote+0x1df/0x790 [ 39.431769][ T3815] get_arg_page+0x189/0x380 [ 39.436333][ T3815] ? insert_vm_struct+0x1c0/0x210 [ 39.441380][ T3815] ? up_write+0x30/0xf0 [ 39.445579][ T3815] copy_string_kernel+0x119/0x280 [ 39.450626][ T3815] do_execveat_common+0x656/0x800 [ 39.455758][ T3815] __x64_sys_execveat+0x75/0x90 [ 39.460631][ T3815] x64_sys_call+0x291e/0x2dc0 [ 39.465325][ T3815] do_syscall_64+0xc9/0x1c0 [ 39.469837][ T3815] ? clear_bhb_loop+0x55/0xb0 [ 39.474523][ T3815] ? clear_bhb_loop+0x55/0xb0 [ 39.479207][ T3815] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 39.485123][ T3815] RIP: 0033:0x7f1bcc725d29 [ 39.489549][ T3815] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 39.509337][ T3815] RSP: 002b:00007f1bcad91038 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 39.517811][ T3815] RAX: ffffffffffffffda RBX: 00007f1bcc915fa0 RCX: 00007f1bcc725d29 [ 39.525797][ T3815] RDX: 0000000000000000 RSI: 0000000020000140 RDI: ffffffffffffff9c [ 39.533803][ T3815] RBP: 00007f1bcad91090 R08: 0000000000000000 R09: 0000000000000000 [ 39.541794][ T3815] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 39.549863][ T3815] R13: 0000000000000000 R14: 00007f1bcc915fa0 R15: 00007ffc31c5cd38 [ 39.557862][ T3815] [ 39.755611][ T3838] loop4: detected capacity change from 0 to 512 [ 39.767467][ T3838] EXT4-fs: Ignoring removed nobh option [ 39.775730][ T3840] loop0: detected capacity change from 0 to 512 [ 39.788540][ T3838] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.801439][ T3838] ext4 filesystem being mounted at /26/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 39.806519][ T3840] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.827286][ T3840] ext4 filesystem being mounted at /27/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 39.838472][ T3838] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.134: bg 0: block 224: padding at end of block bitmap is not set [ 39.853109][ T3838] EXT4-fs (loop4): Remounting filesystem read-only [ 39.883607][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.894307][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.146825][ T3874] loop2: detected capacity change from 0 to 512 [ 40.147743][ T3870] netlink: 24 bytes leftover after parsing attributes in process `syz.0.146'. [ 40.161260][ T3874] EXT4-fs: Ignoring removed nobh option [ 40.208898][ T3874] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.229740][ T3861] loop3: detected capacity change from 0 to 164 [ 40.246437][ T3874] ext4 filesystem being mounted at /29/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.282265][ T3883] 9pnet_fd: Insufficient options for proto=fd [ 40.307358][ T3874] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.148: bg 0: block 224: padding at end of block bitmap is not set [ 40.331728][ T3874] EXT4-fs (loop2): Remounting filesystem read-only [ 40.423686][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.511419][ T3901] netlink: 24 bytes leftover after parsing attributes in process `syz.2.158'. [ 40.546965][ T3904] random: crng reseeded on system resumption [ 40.559066][ T3905] Illegal XDP return value 1881797673 on prog (id 110) dev N/A, expect packet loss! [ 40.574503][ T3900] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.581806][ T3900] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.675802][ T3900] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 40.686820][ T3900] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 40.715626][ T3900] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.724757][ T3900] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.733796][ T3900] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.742810][ T3900] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.875981][ T3924] loop1: detected capacity change from 0 to 2048 [ 40.883051][ T3924] EXT4-fs: Ignoring removed mblk_io_submit option [ 40.889526][ T3924] EXT4-fs: Ignoring removed i_version option [ 40.923008][ T3924] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.000642][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.034802][ T3929] loop1: detected capacity change from 0 to 512 [ 41.055656][ T3929] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.068857][ T3929] ext4 filesystem being mounted at /20/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 41.091266][ T3935] loop0: detected capacity change from 0 to 512 [ 41.097988][ T3935] EXT4-fs: Ignoring removed nobh option [ 41.113469][ T3935] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.126395][ T3935] ext4 filesystem being mounted at /37/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.127506][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.140385][ T3935] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.168: bg 0: block 224: padding at end of block bitmap is not set [ 41.160316][ T3935] EXT4-fs (loop0): Remounting filesystem read-only [ 41.184731][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.191341][ T3939] syz.1.169 uses obsolete (PF_INET,SOCK_PACKET) [ 41.210379][ T3939] netlink: 20 bytes leftover after parsing attributes in process `syz.1.169'. [ 41.279730][ T3947] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.289601][ T3947] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.292896][ T3949] loop1: detected capacity change from 0 to 512 [ 41.301517][ T3947] loop0: detected capacity change from 0 to 512 [ 41.321483][ T3949] EXT4-fs (loop1): orphan cleanup on readonly fs [ 41.321579][ T3947] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm syz.0.173: Invalid inode bitmap blk 4 in block_group 0 [ 41.328135][ T3949] EXT4-fs error (device loop1): ext4_quota_enable:7112: inode #15: comm syz.1.174: iget: bogus i_mode (6755) [ 41.342668][ T3947] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.352395][ T3949] EXT4-fs error (device loop1): ext4_quota_enable:7115: comm syz.1.174: Bad quota inode: 15, type: 2 [ 41.375378][ T3949] EXT4-fs warning (device loop1): ext4_enable_quotas:7156: Failed to enable quota tracking (type=2, err=-117, ino=15). Please run e2fsck to fix. [ 41.391065][ T3949] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 41.398150][ T3949] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 41.516861][ T3960] IPv6: NLM_F_CREATE should be specified when creating new route [ 41.544600][ T3963] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=3963 comm=syz.1.174 [ 41.557237][ T3963] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=3963 comm=syz.1.174 [ 41.586668][ T3969] loop4: detected capacity change from 0 to 512 [ 41.595055][ T3967] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 41.601717][ T3967] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 41.609376][ T3967] vhci_hcd vhci_hcd.0: Device attached [ 41.616002][ T3971] vhci_hcd: connection closed [ 41.617162][ T3969] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.632002][ T11] vhci_hcd: stop threads [ 41.638751][ T11] vhci_hcd: release socket [ 41.643041][ T3969] ext4 filesystem being mounted at /40/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.643231][ T11] vhci_hcd: disconnect device [ 41.658673][ T3969] EXT4-fs error (device loop4): ext4_do_update_inode:5153: inode #2: comm syz.4.181: corrupted inode contents [ 41.659333][ T3976] siw: device registration error -23 [ 41.677125][ T3969] EXT4-fs error (device loop4): ext4_dirty_inode:6041: inode #2: comm syz.4.181: mark_inode_dirty error [ 41.688839][ T3969] EXT4-fs error (device loop4): ext4_do_update_inode:5153: inode #2: comm syz.4.181: corrupted inode contents [ 41.701521][ T3969] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #2: comm syz.4.181: mark_inode_dirty error [ 41.734719][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.772036][ T3983] random: crng reseeded on system resumption [ 41.911494][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.965423][ T3987] loop2: detected capacity change from 0 to 164 [ 42.089023][ T3995] loop2: detected capacity change from 0 to 512 [ 42.103100][ T3995] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.118785][ T3995] ext4 filesystem being mounted at /39/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.133865][ T3995] EXT4-fs error (device loop2): ext4_do_update_inode:5153: inode #2: comm syz.2.190: corrupted inode contents [ 42.145757][ T3995] EXT4-fs error (device loop2): ext4_dirty_inode:6041: inode #2: comm syz.2.190: mark_inode_dirty error [ 42.159303][ T3995] EXT4-fs error (device loop2): ext4_do_update_inode:5153: inode #2: comm syz.2.190: corrupted inode contents [ 42.160132][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.175327][ T3995] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #2: comm syz.2.190: mark_inode_dirty error [ 42.214317][ T4003] loop1: detected capacity change from 0 to 512 [ 42.224158][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.233999][ T4003] EXT4-fs (loop1): orphan cleanup on readonly fs [ 42.241060][ T4003] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.191: bg 0: block 248: padding at end of block bitmap is not set [ 42.255858][ T4003] EXT4-fs error (device loop1): ext4_acquire_dquot:6938: comm syz.1.191: Failed to acquire dquot type 1 [ 42.268869][ T4003] EXT4-fs (loop1): 1 truncate cleaned up [ 42.277663][ T4003] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 42.293704][ T4003] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 42.311260][ T4003] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 42.326422][ T4003] netlink: 96 bytes leftover after parsing attributes in process `syz.1.191'. [ 42.348954][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.377884][ T4013] loop2: detected capacity change from 0 to 512 [ 42.392238][ T4015] 9pnet_fd: Insufficient options for proto=fd [ 42.403022][ T4013] EXT4-fs error (device loop2): ext4_acquire_dquot:6938: comm syz.2.196: Failed to acquire dquot type 1 [ 42.415201][ T4013] EXT4-fs (loop2): 1 truncate cleaned up [ 42.422797][ T4013] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.435696][ T4013] ext4 filesystem being mounted at /42/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.435959][ T4019] loop1: detected capacity change from 0 to 2048 [ 42.450379][ T4013] EXT4-fs error (device loop2): ext4_acquire_dquot:6938: comm syz.2.196: Failed to acquire dquot type 1 [ 42.458488][ T4019] EXT4-fs: Ignoring removed mblk_io_submit option [ 42.470223][ T4019] EXT4-fs: Ignoring removed i_version option [ 42.484825][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.492130][ T4019] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.523480][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.529293][ T4023] 9pnet_fd: Insufficient options for proto=fd [ 42.555157][ T4025] loop1: detected capacity change from 0 to 512 [ 42.572462][ T4025] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.586589][ T4025] ext4 filesystem being mounted at /26/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.599720][ T4025] EXT4-fs error (device loop1): ext4_do_update_inode:5153: inode #2: comm syz.1.199: corrupted inode contents [ 42.613106][ T4025] EXT4-fs error (device loop1): ext4_dirty_inode:6041: inode #2: comm syz.1.199: mark_inode_dirty error [ 42.649213][ T4025] EXT4-fs error (device loop1): ext4_do_update_inode:5153: inode #2: comm syz.1.199: corrupted inode contents [ 42.683782][ T4025] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #2: comm syz.1.199: mark_inode_dirty error [ 42.711629][ T4039] loop2: detected capacity change from 0 to 512 [ 42.726684][ T4039] EXT4-fs: Ignoring removed nobh option [ 42.753151][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.820019][ T4039] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.839753][ T4047] loop0: detected capacity change from 0 to 512 [ 42.847242][ T4039] ext4 filesystem being mounted at /45/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.882822][ T4043] loop4: detected capacity change from 0 to 164 [ 42.894826][ T4047] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.910541][ T4047] ext4 filesystem being mounted at /43/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 42.920111][ T4039] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.203: bg 0: block 224: padding at end of block bitmap is not set [ 42.936895][ T4039] EXT4-fs (loop2): Remounting filesystem read-only [ 42.945600][ T4039] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=12 [ 42.954777][ T29] kauditd_printk_skb: 365 callbacks suppressed [ 42.954795][ T29] audit: type=1326 audit(1736734007.799:968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4045 comm="syz.0.207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a2a165d29 code=0x7ffc0000 [ 42.984333][ T29] audit: type=1326 audit(1736734007.799:969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4045 comm="syz.0.207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2a2a165d29 code=0x7ffc0000 [ 43.007694][ T29] audit: type=1326 audit(1736734007.799:970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4045 comm="syz.0.207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a2a165d29 code=0x7ffc0000 [ 43.012244][ T4039] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=12 [ 43.031051][ T29] audit: type=1326 audit(1736734007.799:971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4045 comm="syz.0.207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2a2a165d29 code=0x7ffc0000 [ 43.049864][ T4055] loop1: detected capacity change from 0 to 2048 [ 43.069930][ T4055] EXT4-fs: Ignoring removed mblk_io_submit option [ 43.076486][ T4055] EXT4-fs: Ignoring removed i_version option [ 43.081115][ T4039] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=12 [ 43.106665][ T4039] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=12 [ 43.132697][ T4039] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=12 [ 43.139470][ T29] audit: type=1326 audit(1736734007.889:972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4045 comm="syz.0.207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a2a165d29 code=0x7ffc0000 [ 43.142771][ T4039] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=13 [ 43.164876][ T29] audit: type=1326 audit(1736734007.889:973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4045 comm="syz.0.207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f2a2a165d29 code=0x7ffc0000 [ 43.178664][ T4039] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=12 [ 43.196912][ T29] audit: type=1326 audit(1736734007.939:974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4045 comm="syz.0.207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a2a165d29 code=0x7ffc0000 [ 43.229165][ T29] audit: type=1326 audit(1736734007.939:975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4045 comm="syz.0.207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=195 compat=0 ip=0x7f2a2a165d29 code=0x7ffc0000 [ 43.241021][ T4039] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=12 [ 43.252766][ T29] audit: type=1326 audit(1736734007.939:976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4045 comm="syz.0.207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a2a165d29 code=0x7ffc0000 [ 43.252804][ T29] audit: type=1326 audit(1736734007.939:977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4045 comm="syz.0.207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a2a165d29 code=0x7ffc0000 [ 43.262223][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.320618][ T4061] loop4: detected capacity change from 0 to 512 [ 43.320741][ T4039] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=12 [ 43.336931][ T4055] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.349067][ T4039] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=13 [ 43.360097][ T4039] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=12 [ 43.402528][ T4061] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.422301][ T4061] ext4 filesystem being mounted at /46/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 43.442329][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.481463][ T4058] loop3: detected capacity change from 0 to 164 [ 43.506651][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.536039][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.681982][ T4080] loop2: detected capacity change from 0 to 512 [ 43.695894][ T4080] EXT4-fs: Ignoring removed oldalloc option [ 43.732594][ T4080] EXT4-fs error (device loop2): ext4_xattr_inode_iget:436: comm syz.2.220: Parent and EA inode have the same ino 15 [ 43.734030][ T4088] loop4: detected capacity change from 0 to 512 [ 43.758354][ T4090] loop1: detected capacity change from 0 to 512 [ 43.765402][ T4080] EXT4-fs (loop2): Remounting filesystem read-only [ 43.771993][ T4080] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2863: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 43.784996][ T4080] EXT4-fs warning (device loop2): ext4_evict_inode:259: couldn't mark inode dirty (err -5) [ 43.795775][ T4080] EXT4-fs (loop2): 1 orphan inode deleted [ 43.802077][ T4080] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.814644][ T4080] SELinux: (dev loop2, type ext4) getxattr errno 5 [ 43.815264][ T4090] EXT4-fs error (device loop1): ext4_acquire_dquot:6938: comm syz.1.223: Failed to acquire dquot type 1 [ 43.822080][ T4080] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.834759][ T4088] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.854041][ T4088] ext4 filesystem being mounted at /47/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 43.855535][ T4090] EXT4-fs (loop1): 1 truncate cleaned up [ 43.892514][ T4090] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.905403][ T4090] ext4 filesystem being mounted at /33/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.946061][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.153363][ T4125] tmpfs: Bad value for 'mpol' [ 44.255246][ T4121] loop4: detected capacity change from 0 to 164 [ 44.362612][ T4144] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.372855][ T4144] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.393581][ T4144] loop1: detected capacity change from 0 to 512 [ 44.423091][ T4144] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.239: Invalid inode bitmap blk 4 in block_group 0 [ 44.518099][ T4152] loop4: detected capacity change from 0 to 512 [ 44.638128][ T4164] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 44.644766][ T4164] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 44.652362][ T4164] vhci_hcd vhci_hcd.0: Device attached [ 44.661796][ T4152] ext4 filesystem being mounted at /53/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 44.672617][ T4168] vhci_hcd: connection closed [ 44.680608][ T11] vhci_hcd: stop threads [ 44.689584][ T11] vhci_hcd: release socket [ 44.694124][ T11] vhci_hcd: disconnect device [ 44.950750][ T4187] loop4: detected capacity change from 0 to 512 [ 44.989168][ T4187] ext4 filesystem being mounted at /56/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 45.124283][ T4197] loop4: detected capacity change from 0 to 512 [ 45.131092][ T4197] EXT4-fs: Ignoring removed nobh option [ 45.167696][ T4197] ext4 filesystem being mounted at /57/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.213544][ T4197] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.259: bg 0: block 224: padding at end of block bitmap is not set [ 45.254647][ T4197] EXT4-fs (loop4): Remounting filesystem read-only [ 45.333023][ T4213] loop3: detected capacity change from 0 to 512 [ 45.378744][ T4213] ext4 filesystem being mounted at /49/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 45.487516][ T4215] loop1: detected capacity change from 0 to 164 [ 45.573223][ T4228] loop0: detected capacity change from 0 to 512 [ 45.579810][ T4228] EXT4-fs: Ignoring removed nobh option [ 45.659897][ T4245] loop3: detected capacity change from 0 to 512 [ 45.683280][ T4245] EXT4-fs: Ignoring removed oldalloc option [ 45.690017][ T4228] ext4 filesystem being mounted at /48/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.768392][ T4228] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.272: bg 0: block 224: padding at end of block bitmap is not set [ 45.784568][ T4228] EXT4-fs (loop0): Remounting filesystem read-only [ 45.849872][ T4245] EXT4-fs error (device loop3): ext4_xattr_inode_iget:436: comm syz.3.274: Parent and EA inode have the same ino 15 [ 45.853891][ T4255] loop1: detected capacity change from 0 to 512 [ 45.875859][ T4249] loop2: detected capacity change from 0 to 164 [ 45.888291][ T4245] EXT4-fs (loop3): Remounting filesystem read-only [ 45.894943][ T4245] EXT4-fs warning (device loop3): ext4_evict_inode:259: couldn't mark inode dirty (err -5) [ 45.917342][ T4255] ext4 filesystem being mounted at /46/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 45.928222][ T4245] EXT4-fs (loop3): 1 orphan inode deleted [ 45.935310][ T4245] SELinux: (dev loop3, type ext4) getxattr errno 5 [ 45.943223][ T4259] IPv6: NLM_F_CREATE should be specified when creating new route [ 46.142531][ T4253] loop4: detected capacity change from 0 to 164 [ 46.291411][ T4262] loop0: detected capacity change from 0 to 164 [ 46.377404][ T4289] loop4: detected capacity change from 0 to 512 [ 46.398835][ T4289] EXT4-fs: Ignoring removed nobh option [ 46.483709][ T4301] loop3: detected capacity change from 0 to 512 [ 46.502997][ T4289] ext4 filesystem being mounted at /64/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.550721][ T4289] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.296: bg 0: block 224: padding at end of block bitmap is not set [ 46.578243][ T4289] EXT4-fs (loop4): Remounting filesystem read-only [ 46.586575][ T4301] ext4 filesystem being mounted at /56/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 46.598447][ T4313] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 46.626095][ T4289] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 46.663345][ T4289] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 46.672524][ T4289] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 46.681704][ T4289] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 46.696231][ T4289] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=13 [ 46.711580][ T4289] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 46.724238][ T4289] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 46.750672][ T4289] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 46.766368][ T4289] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=13 [ 46.785448][ T4289] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 46.810145][ T4309] loop0: detected capacity change from 0 to 164 [ 46.845728][ T4327] siw: device registration error -23 [ 46.855155][ T4323] loop2: detected capacity change from 0 to 512 [ 46.904188][ T4323] ext4 filesystem being mounted at /79/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.966127][ T4323] EXT4-fs error (device loop2): ext4_do_update_inode:5153: inode #2: comm syz.2.307: corrupted inode contents [ 47.014247][ T4323] EXT4-fs error (device loop2): ext4_dirty_inode:6041: inode #2: comm syz.2.307: mark_inode_dirty error [ 47.025900][ T4323] EXT4-fs error (device loop2): ext4_do_update_inode:5153: inode #2: comm syz.2.307: corrupted inode contents [ 47.039633][ T4323] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #2: comm syz.2.307: mark_inode_dirty error [ 47.040359][ T4329] loop4: detected capacity change from 0 to 164 [ 47.107864][ T4342] loop3: detected capacity change from 0 to 512 [ 47.135092][ T4342] EXT4-fs: Ignoring removed oldalloc option [ 47.172773][ T4342] EXT4-fs error (device loop3): ext4_xattr_inode_iget:436: comm syz.3.314: Parent and EA inode have the same ino 15 [ 47.230498][ T4342] EXT4-fs (loop3): Remounting filesystem read-only [ 47.237090][ T4342] EXT4-fs warning (device loop3): ext4_evict_inode:259: couldn't mark inode dirty (err -5) [ 47.299365][ T4342] EXT4-fs (loop3): 1 orphan inode deleted [ 47.305694][ T4342] SELinux: (dev loop3, type ext4) getxattr errno 5 [ 47.450170][ T4365] syz.2.315[4365] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 47.450304][ T4365] syz.2.315[4365] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 47.461703][ T4365] syz.2.315[4365] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 47.635736][ T4368] loop1: detected capacity change from 0 to 128 [ 48.222339][ T4361] loop0: detected capacity change from 0 to 164 [ 48.293610][ T4381] loop3: detected capacity change from 0 to 512 [ 48.366875][ T4381] ext4 filesystem being mounted at /65/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.395067][ T4381] EXT4-fs error (device loop3): ext4_do_update_inode:5153: inode #2: comm syz.3.327: corrupted inode contents [ 48.416177][ T4381] EXT4-fs error (device loop3): ext4_dirty_inode:6041: inode #2: comm syz.3.327: mark_inode_dirty error [ 48.443760][ T4381] EXT4-fs error (device loop3): ext4_do_update_inode:5153: inode #2: comm syz.3.327: corrupted inode contents [ 48.455776][ T4381] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #2: comm syz.3.327: mark_inode_dirty error [ 48.510908][ T29] kauditd_printk_skb: 325 callbacks suppressed [ 48.510924][ T29] audit: type=1400 audit(1736734013.359:1293): avc: denied { unmount } for pid=3297 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 48.645776][ T4396] loop4: detected capacity change from 0 to 512 [ 48.684038][ T4398] loop3: detected capacity change from 0 to 512 [ 48.708472][ T4396] EXT4-fs: Ignoring removed nobh option [ 48.724067][ T4400] loop1: detected capacity change from 0 to 512 [ 48.743893][ T4398] ext4 filesystem being mounted at /66/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 48.756477][ T4396] ext4 filesystem being mounted at /70/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.786130][ T4400] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 48.812963][ T4396] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.333: bg 0: block 224: padding at end of block bitmap is not set [ 48.838782][ T29] audit: type=1326 audit(1736734013.689:1294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4397 comm="syz.3.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bcc725d29 code=0x7ffc0000 [ 48.862264][ T29] audit: type=1326 audit(1736734013.689:1295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4397 comm="syz.3.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1bcc725d29 code=0x7ffc0000 [ 48.885768][ T29] audit: type=1326 audit(1736734013.689:1296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4397 comm="syz.3.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bcc725d29 code=0x7ffc0000 [ 48.909150][ T29] audit: type=1326 audit(1736734013.689:1297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4397 comm="syz.3.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1bcc725d29 code=0x7ffc0000 [ 48.932549][ T29] audit: type=1326 audit(1736734013.689:1298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4397 comm="syz.3.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bcc725d29 code=0x7ffc0000 [ 48.944541][ T4396] EXT4-fs (loop4): Remounting filesystem read-only [ 48.955886][ T29] audit: type=1326 audit(1736734013.689:1299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4397 comm="syz.3.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f1bcc725d29 code=0x7ffc0000 [ 48.985753][ T29] audit: type=1326 audit(1736734013.689:1300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4397 comm="syz.3.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bcc725d29 code=0x7ffc0000 [ 49.009791][ T29] audit: type=1326 audit(1736734013.689:1301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4397 comm="syz.3.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=195 compat=0 ip=0x7f1bcc725d29 code=0x7ffc0000 [ 49.033149][ T29] audit: type=1326 audit(1736734013.689:1302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4397 comm="syz.3.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bcc725d29 code=0x7ffc0000 [ 49.068746][ T4400] EXT4-fs (loop1): 1 orphan inode deleted [ 49.074553][ T4400] EXT4-fs (loop1): 1 truncate cleaned up [ 49.097293][ T4409] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 49.107617][ T4413] serio: Serial port ptm0 [ 49.117829][ T4409] EXT4-fs (loop1): Remounting filesystem read-only [ 49.147082][ T4402] loop0: detected capacity change from 0 to 164 [ 49.172111][ T4400] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 49.190152][ T4400] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 49.239565][ T4419] loop4: detected capacity change from 0 to 512 [ 49.292463][ T4425] siw: device registration error -23 [ 49.297692][ T4419] ext4 filesystem being mounted at /72/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 49.353356][ T4416] loop2: detected capacity change from 0 to 164 [ 49.396168][ T4433] loop1: detected capacity change from 0 to 512 [ 49.403946][ T4437] loop3: detected capacity change from 0 to 512 [ 49.406824][ T4435] loop0: detected capacity change from 0 to 512 [ 49.413649][ T4437] EXT4-fs: Ignoring removed nobh option [ 49.447056][ T4433] EXT4-fs (loop1): orphan cleanup on readonly fs [ 49.460060][ T4433] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.346: bg 0: block 248: padding at end of block bitmap is not set [ 49.487034][ T4442] loop2: detected capacity change from 0 to 512 [ 49.487167][ T4433] EXT4-fs error (device loop1): ext4_acquire_dquot:6938: comm syz.1.346: Failed to acquire dquot type 1 [ 49.506755][ T4433] EXT4-fs (loop1): 1 truncate cleaned up [ 49.514720][ T4433] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 49.527783][ T4437] ext4 filesystem being mounted at /70/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.528873][ T4435] EXT4-fs error (device loop0): ext4_acquire_dquot:6938: comm syz.0.345: Failed to acquire dquot type 1 [ 49.542735][ T4437] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.347: bg 0: block 224: padding at end of block bitmap is not set [ 49.564459][ T4435] EXT4-fs (loop0): 1 truncate cleaned up [ 49.565154][ T4437] EXT4-fs (loop3): Remounting filesystem read-only [ 49.577107][ T4433] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 49.580692][ T4435] ext4 filesystem being mounted at /61/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.603148][ T4442] ext4 filesystem being mounted at /82/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 49.618035][ T4433] netlink: 96 bytes leftover after parsing attributes in process `syz.1.346'. [ 49.685736][ T4453] loop1: detected capacity change from 0 to 512 [ 49.725859][ T4453] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 49.751954][ T4459] loop3: detected capacity change from 0 to 512 [ 49.759041][ T4459] EXT4-fs: Ignoring removed oldalloc option [ 49.769246][ T4453] EXT4-fs (loop1): 1 orphan inode deleted [ 49.773540][ T4463] loop2: detected capacity change from 0 to 512 [ 49.775069][ T4453] EXT4-fs (loop1): 1 truncate cleaned up [ 49.797488][ T4459] EXT4-fs error (device loop3): ext4_xattr_inode_iget:436: comm syz.3.353: Parent and EA inode have the same ino 15 [ 49.815163][ T4470] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 49.831069][ T4470] EXT4-fs (loop1): Remounting filesystem read-only [ 49.852149][ T4459] EXT4-fs (loop3): Remounting filesystem read-only [ 49.858755][ T4459] EXT4-fs warning (device loop3): ext4_evict_inode:259: couldn't mark inode dirty (err -5) [ 49.878045][ T4453] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 49.888046][ T4463] EXT4-fs (loop2): orphan cleanup on readonly fs [ 49.897396][ T4463] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.355: bg 0: block 248: padding at end of block bitmap is not set [ 49.913724][ T4453] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 49.930436][ T4459] EXT4-fs (loop3): 1 orphan inode deleted [ 49.936499][ T4463] EXT4-fs error (device loop2): ext4_acquire_dquot:6938: comm syz.2.355: Failed to acquire dquot type 1 [ 49.957303][ T4466] loop0: detected capacity change from 0 to 164 [ 49.968892][ T4459] SELinux: (dev loop3, type ext4) getxattr errno 5 [ 49.985086][ T4463] EXT4-fs (loop2): 1 truncate cleaned up [ 50.066249][ T4476] loop1: detected capacity change from 0 to 512 [ 50.074242][ T4463] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 50.091543][ T4463] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 50.107290][ T4463] netlink: 96 bytes leftover after parsing attributes in process `syz.2.355'. [ 50.122602][ T4476] ext4 filesystem being mounted at /60/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 50.159589][ T4485] loop2: detected capacity change from 0 to 512 [ 50.183823][ T4485] EXT4-fs (loop2): orphan cleanup on readonly fs [ 50.193809][ T4485] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.363: bg 0: block 248: padding at end of block bitmap is not set [ 50.237965][ T4473] loop4: detected capacity change from 0 to 164 [ 50.244358][ T4485] EXT4-fs error (device loop2): ext4_acquire_dquot:6938: comm syz.2.363: Failed to acquire dquot type 1 [ 50.281960][ T4485] EXT4-fs (loop2): 1 truncate cleaned up [ 50.321835][ T4485] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 50.342843][ T4478] loop3: detected capacity change from 0 to 164 [ 50.395829][ T4494] netlink: 96 bytes leftover after parsing attributes in process `syz.2.363'. [ 50.425511][ T4500] loop0: detected capacity change from 0 to 512 [ 50.438671][ T4500] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 50.448018][ T4502] loop1: detected capacity change from 0 to 512 [ 50.454840][ T4485] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 50.486104][ T4502] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 50.497010][ T4500] EXT4-fs (loop0): 1 orphan inode deleted [ 50.502848][ T4500] EXT4-fs (loop0): 1 truncate cleaned up [ 50.523785][ T4507] loop3: detected capacity change from 0 to 512 [ 50.530635][ T4507] EXT4-fs: Ignoring removed nobh option [ 50.543847][ T4509] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 50.564280][ T4511] loop4: detected capacity change from 0 to 512 [ 50.571416][ T4512] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 50.572969][ T4502] EXT4-fs (loop1): 1 orphan inode deleted [ 50.580351][ T4512] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 50.586148][ T4502] EXT4-fs (loop1): 1 truncate cleaned up [ 50.603357][ T4507] ext4 filesystem being mounted at /73/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.608510][ T4509] EXT4-fs (loop0): Remounting filesystem read-only [ 50.636846][ T4507] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.369: bg 0: block 224: padding at end of block bitmap is not set [ 50.651412][ T3301] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=11 [ 50.655741][ T4511] ext4 filesystem being mounted at /78/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 50.662948][ T3301] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=11 [ 50.674812][ T4516] loop2: detected capacity change from 0 to 512 [ 50.680993][ T3301] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=11 [ 50.691991][ T4507] EXT4-fs (loop3): Remounting filesystem read-only [ 50.695639][ T3301] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=11 [ 50.709835][ T3301] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=11 [ 50.709995][ T4516] EXT4-fs: Ignoring removed nomblk_io_submit option [ 50.719177][ T3301] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=11 [ 50.739138][ T4520] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 50.750770][ T4516] journal_path: Non-blockdev passed as './file0' [ 50.757139][ T3301] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=11 [ 50.759895][ T4516] EXT4-fs: error: could not find journal device path [ 50.773195][ T3301] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=11 [ 50.787225][ T4502] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 50.798623][ T4502] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 50.808623][ T4520] EXT4-fs (loop1): Remounting filesystem read-only [ 50.833818][ T4526] loop4: detected capacity change from 0 to 512 [ 50.840708][ T4526] EXT4-fs: Ignoring removed nobh option [ 50.883964][ T4526] ext4 filesystem being mounted at /79/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.902066][ T4531] siw: device registration error -23 [ 50.931912][ T4534] random: crng reseeded on system resumption [ 50.954828][ T4526] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.374: bg 0: block 224: padding at end of block bitmap is not set [ 51.031200][ T4542] loop2: detected capacity change from 0 to 512 [ 51.042372][ T4526] EXT4-fs (loop4): Remounting filesystem read-only [ 51.053667][ T4542] ext4 filesystem being mounted at /90/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 51.059481][ T4544] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 51.090221][ T4549] loop3: detected capacity change from 0 to 512 [ 51.090585][ T4526] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 51.135143][ T4526] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 51.153528][ T4549] ext4 filesystem being mounted at /77/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 51.165303][ T4526] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 51.176565][ T4526] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 51.185648][ T28] bridge_slave_1: left allmulticast mode [ 51.188194][ T4526] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=13 [ 51.191397][ T28] bridge_slave_1: left promiscuous mode [ 51.200265][ T4526] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 51.205801][ T28] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.214516][ T4526] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 51.231105][ T4526] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 51.239904][ T4526] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=13 [ 51.248847][ T4526] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 51.262183][ T28] bridge_slave_0: left allmulticast mode [ 51.267858][ T28] bridge_slave_0: left promiscuous mode [ 51.273579][ T28] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.408079][ T4571] loop3: detected capacity change from 0 to 512 [ 51.420280][ T4571] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 51.432204][ T4571] EXT4-fs (loop3): 1 orphan inode deleted [ 51.433141][ T28] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 51.438045][ T4571] EXT4-fs (loop3): 1 truncate cleaned up [ 51.453372][ T28] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 51.458726][ T4574] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 51.476708][ T28] bond0 (unregistering): Released all slaves [ 51.476839][ T4574] EXT4-fs (loop3): Remounting filesystem read-only [ 51.504210][ T4571] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 51.537970][ T4571] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 51.664816][ T4597] loop3: detected capacity change from 0 to 512 [ 51.677294][ T28] hsr_slave_0: left promiscuous mode [ 51.687692][ T4597] ext4 filesystem being mounted at /80/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 51.698616][ T28] hsr_slave_1: left promiscuous mode [ 51.708520][ T28] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 51.724727][ T28] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 51.797134][ T28] team0 (unregistering): Port device team_slave_1 removed [ 51.816753][ T28] team0 (unregistering): Port device team_slave_0 removed [ 51.913020][ T4538] chnl_net:caif_netlink_parms(): no params data found [ 51.958094][ T4618] loop3: detected capacity change from 0 to 512 [ 52.005634][ T4623] syz.4.396[4623] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 52.005819][ T4623] syz.4.396[4623] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 52.017151][ T4623] syz.4.396[4623] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 52.277651][ T4629] FAULT_INJECTION: forcing a failure. [ 52.277651][ T4629] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 52.301962][ T4629] CPU: 1 UID: 0 PID: 4629 Comm: syz.2.398 Not tainted 6.13.0-rc6-syzkaller-00290-gbe548645527a #0 [ 52.312620][ T4629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 52.322712][ T4629] Call Trace: [ 52.326057][ T4629] [ 52.329000][ T4629] dump_stack_lvl+0xf2/0x150 [ 52.333640][ T4629] dump_stack+0x15/0x1a [ 52.337883][ T4629] should_fail_ex+0x223/0x230 [ 52.342781][ T4629] should_fail+0xb/0x10 [ 52.346958][ T4629] should_fail_usercopy+0x1a/0x20 [ 52.352041][ T4629] copy_to_user_nofault+0x7d/0x110 [ 52.357176][ T4629] bpf_probe_write_user+0x80/0xc0 [ 52.362222][ T4629] bpf_prog_5cb5524816e22ab1+0x48/0x4e [ 52.367692][ T4629] bpf_trace_run4+0x114/0x1e0 [ 52.372388][ T4629] __traceiter_sched_switch+0x3b/0x60 [ 52.377866][ T4629] __schedule+0x816/0x930 [ 52.382324][ T4629] __cond_resched+0x28/0x50 [ 52.386934][ T4629] wait_for_key_construction+0x1c/0xe0 [ 52.392470][ T4629] lookup_user_key+0xa50/0xdf0 [ 52.397277][ T4629] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 52.403450][ T4629] ? __pfx_keyring_search_iterator+0x10/0x10 [ 52.409486][ T4629] __se_sys_add_key+0x24b/0x320 [ 52.414362][ T4629] ? __schedule+0x6fa/0x930 [ 52.418905][ T4629] __x64_sys_add_key+0x67/0x80 [ 52.423686][ T4629] x64_sys_call+0x2964/0x2dc0 [ 52.428420][ T4629] do_syscall_64+0xc9/0x1c0 [ 52.432933][ T4629] ? clear_bhb_loop+0x55/0xb0 [ 52.437633][ T4629] ? clear_bhb_loop+0x55/0xb0 [ 52.442317][ T4629] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.448276][ T4629] RIP: 0033:0x7f1a437e5d29 [ 52.452726][ T4629] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 52.472436][ T4629] RSP: 002b:00007f1a41e57038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 52.480975][ T4629] RAX: ffffffffffffffda RBX: 00007f1a439d5fa0 RCX: 00007f1a437e5d29 [ 52.489045][ T4629] RDX: 0000000020000340 RSI: 0000000000000000 RDI: 0000000020000040 [ 52.497047][ T4629] RBP: 00007f1a41e57090 R08: 0000000018916b75 R09: 0000000000000000 [ 52.505018][ T4629] R10: 000000000000001b R11: 0000000000000246 R12: 0000000000000001 [ 52.512999][ T4629] R13: 0000000000000000 R14: 00007f1a439d5fa0 R15: 00007ffd2ae2c388 [ 52.520991][ T4629] [ 52.540020][ T4618] ext4 filesystem being mounted at /81/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 52.674244][ T4538] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.681412][ T4538] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.752123][ T4538] bridge_slave_0: entered allmulticast mode [ 52.793999][ T4538] bridge_slave_0: entered promiscuous mode [ 52.888442][ T4538] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.895685][ T4538] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.988765][ T4538] bridge_slave_1: entered allmulticast mode [ 53.029753][ T4538] bridge_slave_1: entered promiscuous mode [ 53.063319][ T4657] random: crng reseeded on system resumption [ 53.312191][ T4538] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.342909][ T4538] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.442789][ T4538] team0: Port device team_slave_0 added [ 53.463649][ T4538] team0: Port device team_slave_1 added [ 53.519765][ T4538] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.526809][ T4538] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.552861][ T4538] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.592334][ T4676] loop1: detected capacity change from 0 to 512 [ 53.616353][ T4676] EXT4-fs (loop1): orphan cleanup on readonly fs [ 53.628325][ T4676] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.406: bg 0: block 248: padding at end of block bitmap is not set [ 53.667361][ T4676] __quota_error: 119 callbacks suppressed [ 53.667380][ T4676] Quota error (device loop1): write_blk: dquota write failed [ 53.680719][ T4676] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 53.690725][ T4676] EXT4-fs error (device loop1): ext4_acquire_dquot:6938: comm syz.1.406: Failed to acquire dquot type 1 [ 53.704577][ T4538] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.711621][ T4538] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.737585][ T4538] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.760060][ T4676] EXT4-fs (loop1): 1 truncate cleaned up [ 53.861195][ T4538] hsr_slave_0: entered promiscuous mode [ 53.867395][ T4538] hsr_slave_1: entered promiscuous mode [ 53.875350][ T4538] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.883191][ T4538] Cannot create hsr debugfs directory [ 54.029103][ T29] audit: type=1326 audit(1736734018.879:1403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4695 comm="syz.4.407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2557995d29 code=0x7ffc0000 [ 54.033225][ T4676] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 54.055221][ T29] audit: type=1326 audit(1736734018.909:1404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4695 comm="syz.4.407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2557995d29 code=0x7ffc0000 [ 54.085390][ T29] audit: type=1326 audit(1736734018.909:1405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4695 comm="syz.4.407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2557995d29 code=0x7ffc0000 [ 54.092173][ T4538] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 54.147558][ T29] audit: type=1326 audit(1736734018.969:1406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4695 comm="syz.4.407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2557995d29 code=0x7ffc0000 [ 54.171050][ T29] audit: type=1326 audit(1736734018.969:1407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4695 comm="syz.4.407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2557995d29 code=0x7ffc0000 [ 54.194735][ T29] audit: type=1326 audit(1736734018.969:1408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4695 comm="syz.4.407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2557995d29 code=0x7ffc0000 [ 54.218099][ T29] audit: type=1326 audit(1736734018.969:1409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4695 comm="syz.4.407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2557995d29 code=0x7ffc0000 [ 54.241521][ T29] audit: type=1326 audit(1736734018.969:1410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4695 comm="syz.4.407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f2557995d29 code=0x7ffc0000 [ 54.266400][ T4676] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 54.326448][ T4704] netlink: 96 bytes leftover after parsing attributes in process `syz.1.406'. [ 54.342396][ T4714] loop4: detected capacity change from 0 to 512 [ 54.348999][ T4714] EXT4-fs: Ignoring removed nobh option [ 54.355476][ T4538] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 54.369668][ T4538] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 54.379271][ T4538] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 54.418113][ T4538] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.429147][ T4538] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.446227][ T4538] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 54.456696][ T4538] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 54.473756][ T28] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.480947][ T28] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.489507][ T28] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.496605][ T28] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.520564][ T4728] IPv6: NLM_F_CREATE should be specified when creating new route [ 54.536346][ T4714] ext4 filesystem being mounted at /87/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.577047][ T4714] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.411: bg 0: block 224: padding at end of block bitmap is not set [ 54.597551][ T4714] EXT4-fs (loop4): Remounting filesystem read-only [ 54.619334][ T4709] loop3: detected capacity change from 0 to 164 [ 54.753589][ T4538] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.818267][ T4758] loop3: detected capacity change from 0 to 512 [ 54.884978][ T4758] EXT4-fs (loop3): orphan cleanup on readonly fs [ 54.902810][ T4769] loop4: detected capacity change from 0 to 512 [ 54.915864][ T4758] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.416: bg 0: block 248: padding at end of block bitmap is not set [ 54.942095][ T4769] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.417: Invalid inode bitmap blk 4 in block_group 0 [ 54.958562][ T4730] loop1: detected capacity change from 0 to 164 [ 54.968574][ T4758] EXT4-fs error (device loop3): ext4_acquire_dquot:6938: comm syz.3.416: Failed to acquire dquot type 1 [ 55.007641][ T4758] EXT4-fs (loop3): 1 truncate cleaned up [ 55.030614][ T4538] veth0_vlan: entered promiscuous mode [ 55.038226][ T4538] veth1_vlan: entered promiscuous mode [ 55.051429][ T4538] veth0_macvtap: entered promiscuous mode [ 55.058317][ T4538] veth1_macvtap: entered promiscuous mode [ 55.067373][ T4538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.077942][ T4538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.087834][ T4538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.098387][ T4538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.108239][ T4538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.118807][ T4538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.128882][ T4538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.139483][ T4538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.150643][ T4538] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.178561][ T4792] loop1: detected capacity change from 0 to 128 [ 55.181713][ T4538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.195570][ T4538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.205487][ T4538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.216357][ T4538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.226210][ T4538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.236755][ T4538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.246612][ T4538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.257246][ T4538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.267711][ T4538] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.276757][ T4538] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.285612][ T4538] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.294343][ T4538] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.303176][ T4538] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.404134][ T4802] loop2: detected capacity change from 0 to 512 [ 55.441019][ T4802] EXT4-fs: Ignoring removed oldalloc option [ 55.448596][ T4802] EXT4-fs error (device loop2): ext4_xattr_inode_iget:436: comm syz.2.425: Parent and EA inode have the same ino 15 [ 55.475141][ T4817] loop4: detected capacity change from 0 to 164 [ 55.479181][ T4814] loop5: detected capacity change from 0 to 512 [ 55.492359][ T4814] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 55.500890][ T4802] EXT4-fs (loop2): Remounting filesystem read-only [ 55.507480][ T4802] EXT4-fs warning (device loop2): ext4_evict_inode:259: couldn't mark inode dirty (err -5) [ 55.530766][ T4804] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 55.537401][ T4804] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 55.544939][ T4804] vhci_hcd vhci_hcd.0: Device attached [ 55.560500][ T4802] EXT4-fs (loop2): 1 orphan inode deleted [ 55.566597][ T4802] SELinux: (dev loop2, type ext4) getxattr errno 5 [ 55.591294][ T4825] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 55.597852][ T4825] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 55.605450][ T4825] vhci_hcd vhci_hcd.0: Device attached [ 55.611567][ T4806] vhci_hcd: connection closed [ 55.626936][ T4827] vhci_hcd: connection closed [ 55.644548][ T172] vhci_hcd: stop threads [ 55.653620][ T172] vhci_hcd: release socket [ 55.658045][ T172] vhci_hcd: disconnect device [ 55.693471][ T172] vhci_hcd: stop threads [ 55.697770][ T172] vhci_hcd: release socket [ 55.702258][ T172] vhci_hcd: disconnect device [ 55.727617][ T4836] loop4: detected capacity change from 0 to 512 [ 55.742982][ T4839] bond1: entered promiscuous mode [ 55.748115][ T4839] bond1: entered allmulticast mode [ 55.759004][ T4839] 8021q: adding VLAN 0 to HW filter on device bond1 [ 55.777955][ T4836] ext4 filesystem being mounted at /93/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 55.806267][ T4849] loop1: detected capacity change from 0 to 512 [ 55.859108][ T4857] loop2: detected capacity change from 0 to 512 [ 55.859412][ T4849] ext4 filesystem being mounted at /72/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 55.925852][ T4857] ext4 filesystem being mounted at /106/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 55.955419][ T4871] loop4: detected capacity change from 0 to 512 [ 56.003674][ T4871] ext4 filesystem being mounted at /94/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 56.033226][ T4878] loop1: detected capacity change from 0 to 164 [ 56.131760][ T4886] loop1: detected capacity change from 0 to 512 [ 56.177831][ T4886] ext4 filesystem being mounted at /74/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 56.205294][ T4888] loop2: detected capacity change from 0 to 512 [ 56.232840][ T4888] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 56.308117][ T4888] EXT4-fs error (device loop2): ext4_orphan_get:1389: inode #17: comm syz.2.439: iget: bad i_size value: -6917529027641081756 [ 56.313576][ T4909] loop3: detected capacity change from 0 to 164 [ 56.323395][ T4888] EXT4-fs error (device loop2): ext4_orphan_get:1394: comm syz.2.439: couldn't read orphan inode 17 (err -117) [ 56.400009][ T4918] loop1: detected capacity change from 0 to 512 [ 56.431541][ T4918] EXT4-fs (loop1): orphan cleanup on readonly fs [ 56.444358][ T4918] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.448: bg 0: block 248: padding at end of block bitmap is not set [ 56.452201][ T4924] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 56.461806][ T4918] EXT4-fs error (device loop1): ext4_acquire_dquot:6938: comm syz.1.448: Failed to acquire dquot type 1 [ 56.465250][ T4924] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 56.477429][ T4918] EXT4-fs (loop1): 1 truncate cleaned up [ 56.484066][ T4924] vhci_hcd vhci_hcd.0: Device attached [ 56.495672][ T4918] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 56.506465][ T4930] netlink: 96 bytes leftover after parsing attributes in process `syz.4.452'. [ 56.514054][ T4926] vhci_hcd: connection closed [ 56.515785][ T28] vhci_hcd: stop threads [ 56.524943][ T28] vhci_hcd: release socket [ 56.529412][ T28] vhci_hcd: disconnect device [ 56.554948][ T4918] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 56.558625][ T4934] loop2: detected capacity change from 0 to 512 [ 56.584877][ T4937] syz.4.454[4937] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 56.584991][ T4937] syz.4.454[4937] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 56.596454][ T4937] syz.4.454[4937] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 56.620137][ T4934] ext4 filesystem being mounted at /110/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 56.685041][ T4943] FAULT_INJECTION: forcing a failure. [ 56.685041][ T4943] name failslab, interval 1, probability 0, space 0, times 0 [ 56.697768][ T4943] CPU: 1 UID: 0 PID: 4943 Comm: syz.1.455 Not tainted 6.13.0-rc6-syzkaller-00290-gbe548645527a #0 [ 56.708418][ T4943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 56.718540][ T4943] Call Trace: [ 56.721840][ T4943] [ 56.724821][ T4943] dump_stack_lvl+0xf2/0x150 [ 56.729525][ T4943] dump_stack+0x15/0x1a [ 56.733725][ T4943] should_fail_ex+0x223/0x230 [ 56.738484][ T4943] should_failslab+0x8f/0xb0 [ 56.743172][ T4943] kmem_cache_alloc_noprof+0x52/0x320 [ 56.748565][ T4943] ? getname_flags+0x81/0x3b0 [ 56.753282][ T4943] getname_flags+0x81/0x3b0 [ 56.757824][ T4943] user_path_at+0x26/0x120 [ 56.762349][ T4943] __se_sys_mount+0x248/0x2d0 [ 56.767066][ T4943] ? fput+0x1c4/0x200 [ 56.771284][ T4943] __x64_sys_mount+0x67/0x80 [ 56.775918][ T4943] x64_sys_call+0x2c84/0x2dc0 [ 56.780650][ T4943] do_syscall_64+0xc9/0x1c0 [ 56.785206][ T4943] ? clear_bhb_loop+0x55/0xb0 [ 56.789916][ T4943] ? clear_bhb_loop+0x55/0xb0 [ 56.794671][ T4943] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.800646][ T4943] RIP: 0033:0x7f38fc975d29 [ 56.805090][ T4943] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 56.824794][ T4943] RSP: 002b:00007f38fafe1038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 56.833231][ T4943] RAX: ffffffffffffffda RBX: 00007f38fcb65fa0 RCX: 00007f38fc975d29 [ 56.841236][ T4943] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000000 [ 56.849235][ T4943] RBP: 00007f38fafe1090 R08: 0000000000000000 R09: 0000000000000000 [ 56.857249][ T4943] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 56.865285][ T4943] R13: 0000000000000000 R14: 00007f38fcb65fa0 R15: 00007fff3db463d8 [ 56.873295][ T4943] [ 57.106760][ T4967] loop2: detected capacity change from 0 to 164 [ 57.290200][ T4979] loop4: detected capacity change from 0 to 512 [ 57.308003][ T4979] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 57.381934][ T4985] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 57.388510][ T4985] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 57.396071][ T4985] vhci_hcd vhci_hcd.0: Device attached [ 57.419304][ T4986] vhci_hcd: connection closed [ 57.419604][ T28] vhci_hcd: stop threads [ 57.428636][ T28] vhci_hcd: release socket [ 57.433126][ T28] vhci_hcd: disconnect device [ 57.473276][ T4979] EXT4-fs (loop4): 1 orphan inode deleted [ 57.479047][ T4979] EXT4-fs (loop4): 1 truncate cleaned up [ 57.495934][ T4993] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 57.511997][ T4993] EXT4-fs (loop4): Remounting filesystem read-only [ 57.531417][ T4979] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 57.540327][ T4979] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 57.566017][ T4994] loop2: detected capacity change from 0 to 512 [ 57.633240][ T5000] loop3: detected capacity change from 0 to 128 [ 57.712521][ T4994] ext4 filesystem being mounted at /117/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 57.821672][ T5014] loop5: detected capacity change from 0 to 512 [ 57.842055][ T5015] loop4: detected capacity change from 0 to 512 [ 57.855508][ T5011] netlink: 20 bytes leftover after parsing attributes in process `syz.3.485'. [ 57.862879][ T5014] ext4 filesystem being mounted at /5/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 57.898688][ T5015] ext4 filesystem being mounted at /108/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 57.955038][ T5025] loop2: detected capacity change from 0 to 512 [ 58.019102][ T5025] ext4 filesystem being mounted at /118/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 58.034468][ T5037] loop3: detected capacity change from 0 to 512 [ 58.043297][ T5037] EXT4-fs: Ignoring removed oldalloc option [ 58.083623][ T5037] EXT4-fs error (device loop3): ext4_xattr_inode_iget:436: comm syz.3.494: Parent and EA inode have the same ino 15 [ 58.096437][ T5037] EXT4-fs (loop3): Remounting filesystem read-only [ 58.099950][ T5050] loop5: detected capacity change from 0 to 512 [ 58.103089][ T5037] EXT4-fs warning (device loop3): ext4_evict_inode:259: couldn't mark inode dirty (err -5) [ 58.103296][ T5037] EXT4-fs (loop3): 1 orphan inode deleted [ 58.128292][ T5037] SELinux: (dev loop3, type ext4) getxattr errno 5 [ 58.149344][ T5050] ext4 filesystem being mounted at /10/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 58.220595][ T5057] loop2: detected capacity change from 0 to 512 [ 58.235353][ T5057] EXT4-fs (loop2): orphan cleanup on readonly fs [ 58.272136][ T5065] loop3: detected capacity change from 0 to 128 [ 58.281548][ T5057] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.498: bg 0: block 248: padding at end of block bitmap is not set [ 58.298538][ T5057] EXT4-fs error (device loop2): ext4_acquire_dquot:6938: comm syz.2.498: Failed to acquire dquot type 1 [ 58.356542][ T5057] EXT4-fs (loop2): 1 truncate cleaned up [ 58.376633][ T5057] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 58.421213][ T5057] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 58.513377][ T5086] loop3: detected capacity change from 0 to 512 [ 58.546437][ T5086] ext4 filesystem being mounted at /104/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 58.557578][ T5094] loop2: detected capacity change from 0 to 512 [ 58.721912][ T5096] loop5: detected capacity change from 0 to 164 [ 58.752735][ T5094] ext4 filesystem being mounted at /121/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 58.768820][ T29] kauditd_printk_skb: 198 callbacks suppressed [ 58.768836][ T29] audit: type=1326 audit(1736734023.619:1598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5093 comm="syz.2.510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a437e5d29 code=0x7ffc0000 [ 58.832770][ T29] audit: type=1326 audit(1736734023.629:1599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5093 comm="syz.2.510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1a437e5d29 code=0x7ffc0000 [ 58.856281][ T29] audit: type=1326 audit(1736734023.659:1600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5093 comm="syz.2.510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a437e5d29 code=0x7ffc0000 [ 58.879757][ T29] audit: type=1326 audit(1736734023.659:1601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5093 comm="syz.2.510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a437e5d29 code=0x7ffc0000 [ 58.886810][ T5109] loop1: detected capacity change from 0 to 512 [ 58.903151][ T29] audit: type=1326 audit(1736734023.659:1602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5093 comm="syz.2.510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f1a437e5d29 code=0x7ffc0000 [ 58.933301][ T29] audit: type=1326 audit(1736734023.739:1603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5093 comm="syz.2.510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a437e5d29 code=0x7ffc0000 [ 58.956690][ T29] audit: type=1326 audit(1736734023.739:1604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5093 comm="syz.2.510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a437e5d29 code=0x7ffc0000 [ 58.981622][ T29] audit: type=1326 audit(1736734023.789:1605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5093 comm="syz.2.510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1a437e5d29 code=0x7ffc0000 [ 59.007746][ T5112] loop5: detected capacity change from 0 to 164 [ 59.012180][ T29] audit: type=1326 audit(1736734023.839:1606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5093 comm="syz.2.510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a437e5d29 code=0x7ffc0000 [ 59.037578][ T29] audit: type=1326 audit(1736734023.839:1607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5093 comm="syz.2.510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a437e5d29 code=0x7ffc0000 [ 59.065048][ T5109] ext4 filesystem being mounted at /85/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 59.175827][ T5120] loop5: detected capacity change from 0 to 512 [ 59.184605][ T5124] netlink: 20 bytes leftover after parsing attributes in process `syz.2.521'. [ 59.219479][ T5120] ext4 filesystem being mounted at /18/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.235112][ T5128] loop2: detected capacity change from 0 to 512 [ 59.255556][ T5132] loop1: detected capacity change from 0 to 164 [ 59.264597][ T5120] EXT4-fs error (device loop5): ext4_do_update_inode:5153: inode #2: comm syz.5.520: corrupted inode contents [ 59.276769][ T5120] EXT4-fs error (device loop5): ext4_dirty_inode:6041: inode #2: comm syz.5.520: mark_inode_dirty error [ 59.296504][ T5120] EXT4-fs error (device loop5): ext4_do_update_inode:5153: inode #2: comm syz.5.520: corrupted inode contents [ 59.303644][ T5128] ext4 filesystem being mounted at /124/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 59.342429][ T5120] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #2: comm syz.5.520: mark_inode_dirty error [ 59.381743][ T5140] loop2: detected capacity change from 0 to 512 [ 59.391535][ T5140] EXT4-fs: Ignoring removed nobh option [ 59.423324][ T5140] ext4 filesystem being mounted at /125/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.494567][ T5150] loop4: detected capacity change from 0 to 164 [ 59.532638][ T5140] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.526: bg 0: block 224: padding at end of block bitmap is not set [ 59.534526][ T5153] loop3: detected capacity change from 0 to 512 [ 59.574581][ T5145] loop5: detected capacity change from 0 to 164 [ 59.577933][ T5140] EXT4-fs (loop2): Remounting filesystem read-only [ 59.590558][ T5153] ext4 filesystem being mounted at /110/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 59.603388][ T5156] loop4: detected capacity change from 0 to 512 [ 59.660863][ T5156] ext4 filesystem being mounted at /114/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 59.696622][ T5164] loop2: detected capacity change from 0 to 512 [ 59.707866][ T5164] EXT4-fs: Ignoring removed oldalloc option [ 59.737326][ T5164] EXT4-fs error (device loop2): ext4_xattr_inode_iget:436: comm syz.2.533: Parent and EA inode have the same ino 15 [ 59.769347][ T5166] loop5: detected capacity change from 0 to 164 [ 59.784910][ T5164] EXT4-fs (loop2): Remounting filesystem read-only [ 59.791662][ T5164] EXT4-fs warning (device loop2): ext4_evict_inode:259: couldn't mark inode dirty (err -5) [ 59.802130][ T5164] EXT4-fs (loop2): 1 orphan inode deleted [ 59.808229][ T5164] SELinux: (dev loop2, type ext4) getxattr errno 5 [ 59.839033][ T5175] serio: Serial port ptm0 [ 59.906617][ T5179] loop4: detected capacity change from 0 to 512 [ 59.926920][ T5184] loop2: detected capacity change from 0 to 512 [ 59.931976][ T5186] loop3: detected capacity change from 0 to 512 [ 59.940117][ T5186] EXT4-fs: Ignoring removed nobh option [ 59.967503][ T5179] ext4 filesystem being mounted at /116/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 59.991308][ T5186] ext4 filesystem being mounted at /116/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 60.004999][ T5184] ext4 filesystem being mounted at /127/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 60.026968][ T5186] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.544: bg 0: block 224: padding at end of block bitmap is not set [ 60.066486][ T5186] EXT4-fs (loop3): Remounting filesystem read-only [ 60.096373][ T5200] loop4: detected capacity change from 0 to 128 [ 60.196821][ T5211] IPv6: NLM_F_CREATE should be specified when creating new route [ 60.206469][ T5209] loop3: detected capacity change from 0 to 164 [ 60.264710][ T5218] loop1: detected capacity change from 0 to 512 [ 60.287197][ T5218] EXT4-fs: Ignoring removed nobh option [ 60.317131][ T5224] loop4: detected capacity change from 0 to 512 [ 60.328640][ T5223] loop3: detected capacity change from 0 to 164 [ 60.338847][ T5226] loop5: detected capacity change from 0 to 512 [ 60.346426][ T5226] EXT4-fs: Ignoring removed oldalloc option [ 60.355149][ T5226] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 60.375971][ T5231] loop2: detected capacity change from 0 to 512 [ 60.383175][ T5224] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.558: Invalid inode bitmap blk 4 in block_group 0 [ 60.399095][ T5218] ext4 filesystem being mounted at /90/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 60.400489][ T5233] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 13: invalid block bitmap [ 60.424609][ T5226] EXT4-fs (loop5): 1 truncate cleaned up [ 60.431186][ T5233] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 224: padding at end of block bitmap is not set [ 60.458586][ T5233] EXT4-fs (loop1): Remounting filesystem read-only [ 60.521570][ T5231] ext4 filesystem being mounted at /131/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 60.525084][ T5239] loop3: detected capacity change from 0 to 512 [ 60.594259][ T5250] IPv6: NLM_F_CREATE should be specified when creating new route [ 60.625670][ T5239] ext4 filesystem being mounted at /120/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 60.637940][ T5254] loop5: detected capacity change from 0 to 512 [ 60.717425][ T5254] ext4 filesystem being mounted at /27/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 60.896001][ T5270] syz.2.568[5270] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 60.896099][ T5270] syz.2.568[5270] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 60.907578][ T5270] syz.2.568[5270] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 61.099752][ T5269] loop5: detected capacity change from 0 to 512 [ 61.214571][ T5273] loop1: detected capacity change from 0 to 128 [ 61.258788][ T5269] EXT4-fs error (device loop5): ext4_read_inode_bitmap:139: comm syz.5.572: Invalid inode bitmap blk 4 in block_group 0 [ 61.738932][ T5279] ALSA: seq fatal error: cannot create timer (-22) [ 61.863449][ T5283] loop1: detected capacity change from 0 to 512 [ 61.884688][ T5285] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 61.891349][ T5285] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 61.899010][ T5285] vhci_hcd vhci_hcd.0: Device attached [ 61.912409][ T5288] loop3: detected capacity change from 0 to 512 [ 61.930952][ T5283] EXT4-fs (loop1): orphan cleanup on readonly fs [ 61.951787][ T5283] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.577: bg 0: block 248: padding at end of block bitmap is not set [ 61.973361][ T5288] ext4 filesystem being mounted at /122/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 61.994864][ T5298] loop5: detected capacity change from 0 to 128 [ 62.002716][ T5292] vhci_hcd: connection closed [ 62.003052][ T36] vhci_hcd: stop threads [ 62.012087][ T36] vhci_hcd: release socket [ 62.016522][ T36] vhci_hcd: disconnect device [ 62.023598][ T5283] EXT4-fs error (device loop1): ext4_acquire_dquot:6938: comm syz.1.577: Failed to acquire dquot type 1 [ 62.044794][ T5298] FAULT_INJECTION: forcing a failure. [ 62.044794][ T5298] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 62.057986][ T5298] CPU: 1 UID: 0 PID: 5298 Comm: syz.5.581 Not tainted 6.13.0-rc6-syzkaller-00290-gbe548645527a #0 [ 62.068710][ T5298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 62.078823][ T5298] Call Trace: [ 62.082114][ T5298] [ 62.085052][ T5298] dump_stack_lvl+0xf2/0x150 [ 62.089683][ T5298] dump_stack+0x15/0x1a [ 62.093872][ T5298] should_fail_ex+0x223/0x230 [ 62.098616][ T5298] should_fail+0xb/0x10 [ 62.102924][ T5298] should_fail_usercopy+0x1a/0x20 [ 62.107965][ T5298] _copy_from_user+0x1e/0xb0 [ 62.112593][ T5298] copy_msghdr_from_user+0x54/0x2a0 [ 62.117845][ T5298] ? __fget_files+0x17c/0x1c0 [ 62.122669][ T5298] __sys_sendmsg+0x13e/0x230 [ 62.127484][ T5298] __x64_sys_sendmsg+0x46/0x50 [ 62.132333][ T5298] x64_sys_call+0x2734/0x2dc0 [ 62.137120][ T5298] do_syscall_64+0xc9/0x1c0 [ 62.141647][ T5298] ? clear_bhb_loop+0x55/0xb0 [ 62.146400][ T5298] ? clear_bhb_loop+0x55/0xb0 [ 62.151093][ T5298] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.157162][ T5298] RIP: 0033:0x7fd607c45d29 [ 62.161623][ T5298] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 62.181348][ T5298] RSP: 002b:00007fd6062b7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 62.189806][ T5298] RAX: ffffffffffffffda RBX: 00007fd607e35fa0 RCX: 00007fd607c45d29 [ 62.197794][ T5298] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000006 [ 62.205779][ T5298] RBP: 00007fd6062b7090 R08: 0000000000000000 R09: 0000000000000000 [ 62.213801][ T5298] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 62.221781][ T5298] R13: 0000000000000000 R14: 00007fd607e35fa0 R15: 00007fffb31f1018 [ 62.229834][ T5298] [ 62.248481][ T5283] EXT4-fs (loop1): 1 truncate cleaned up [ 62.265784][ T5283] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 62.280969][ T5283] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 62.318356][ T5302] loop3: detected capacity change from 0 to 128 [ 62.371938][ T5304] loop2: detected capacity change from 0 to 512 [ 62.380204][ T5304] EXT4-fs: Ignoring removed oldalloc option [ 62.393403][ T5304] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 62.397925][ T5310] loop1: detected capacity change from 0 to 512 [ 62.412100][ T5304] EXT4-fs (loop2): 1 truncate cleaned up [ 62.436336][ T5310] ext4 filesystem being mounted at /97/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 62.491322][ T5322] loop2: detected capacity change from 0 to 512 [ 62.498731][ T5322] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 62.529981][ T5322] EXT4-fs (loop2): 1 orphan inode deleted [ 62.535840][ T5322] EXT4-fs (loop2): 1 truncate cleaned up [ 62.547659][ T5329] loop1: detected capacity change from 0 to 512 [ 62.550586][ T5330] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 62.569865][ T5330] EXT4-fs (loop2): Remounting filesystem read-only [ 62.582529][ T5327] random: crng reseeded on system resumption [ 62.594233][ T5329] ext4 filesystem being mounted at /98/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 62.610544][ T5322] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=12 [ 62.619635][ T5322] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=12 [ 62.719080][ T5342] loop2: detected capacity change from 0 to 512 [ 62.726387][ T5342] EXT4-fs: Ignoring removed oldalloc option [ 62.741868][ T5342] EXT4-fs error (device loop2): ext4_xattr_inode_iget:436: comm syz.2.596: Parent and EA inode have the same ino 15 [ 62.756136][ T5342] EXT4-fs (loop2): Remounting filesystem read-only [ 62.762830][ T5342] EXT4-fs warning (device loop2): ext4_evict_inode:259: couldn't mark inode dirty (err -5) [ 62.773784][ T5342] EXT4-fs (loop2): 1 orphan inode deleted [ 62.780034][ T5342] SELinux: (dev loop2, type ext4) getxattr errno 5 [ 62.788008][ T5346] mmap: syz.4.597 (5346) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 62.790236][ T5347] loop1: detected capacity change from 0 to 512 [ 62.806504][ T5347] EXT4-fs: Ignoring removed nobh option [ 62.820455][ T5346] can0: slcan on ttyS3. [ 62.844250][ T5347] ext4 filesystem being mounted at /99/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.858371][ T5347] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.594: bg 0: block 224: padding at end of block bitmap is not set [ 62.861690][ T5352] loop2: detected capacity change from 0 to 512 [ 62.874597][ T5347] EXT4-fs (loop1): Remounting filesystem read-only [ 62.886090][ T5345] can0 (unregistered): slcan off ttyS3. [ 62.893171][ T5347] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 62.920764][ T5355] loop4: detected capacity change from 0 to 512 [ 62.927402][ T5355] EXT4-fs: Ignoring removed nobh option [ 62.936209][ T5352] ext4 filesystem being mounted at /138/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 62.951338][ T5355] ext4 filesystem being mounted at /127/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.992654][ T5355] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.599: bg 0: block 224: padding at end of block bitmap is not set [ 63.011057][ T5355] EXT4-fs (loop4): Remounting filesystem read-only [ 63.052164][ T5368] netlink: 20 bytes leftover after parsing attributes in process `syz.2.602'. [ 63.079002][ T5370] loop4: detected capacity change from 0 to 128 [ 63.131283][ T5372] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 63.137879][ T5372] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 63.145552][ T5372] vhci_hcd vhci_hcd.0: Device attached [ 63.168563][ T5373] vhci_hcd: connection closed [ 63.168813][ T4631] vhci_hcd: stop threads [ 63.177975][ T4631] vhci_hcd: release socket [ 63.182586][ T4631] vhci_hcd: disconnect device [ 63.185147][ T5378] loop4: detected capacity change from 0 to 512 [ 63.222107][ T5383] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 63.223434][ T5378] ext4 filesystem being mounted at /130/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 63.303599][ T5386] loop5: detected capacity change from 0 to 164 [ 63.423940][ T5396] loop4: detected capacity change from 0 to 512 [ 63.432294][ T5396] EXT4-fs: Ignoring removed nobh option [ 63.455976][ T5396] ext4 filesystem being mounted at /132/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.487850][ T5402] loop1: detected capacity change from 0 to 512 [ 63.489713][ T5404] loop3: detected capacity change from 0 to 164 [ 63.508846][ T5396] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.614: bg 0: block 224: padding at end of block bitmap is not set [ 63.521507][ T5402] EXT4-fs (loop1): orphan cleanup on readonly fs [ 63.527192][ T5396] EXT4-fs (loop4): Remounting filesystem read-only [ 63.536862][ T5402] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.616: bg 0: block 248: padding at end of block bitmap is not set [ 63.540696][ T5407] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.554776][ T5396] Zero length message leads to an empty skb [ 63.559561][ T5407] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.566691][ T5402] EXT4-fs error (device loop1): ext4_acquire_dquot:6938: comm syz.1.616: Failed to acquire dquot type 1 [ 63.587152][ T5407] loop5: detected capacity change from 0 to 128 [ 63.607383][ T5402] EXT4-fs (loop1): 1 truncate cleaned up [ 63.628798][ T5402] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 63.652194][ T5402] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 63.687815][ T5417] loop3: detected capacity change from 0 to 512 [ 63.719412][ T5421] loop4: detected capacity change from 0 to 512 [ 63.721976][ T5419] loop2: detected capacity change from 0 to 512 [ 63.726198][ T5421] EXT4-fs: Ignoring removed nobh option [ 63.739749][ T5419] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 63.752317][ T5419] EXT4-fs (loop2): 1 orphan inode deleted [ 63.758082][ T5419] EXT4-fs (loop2): 1 truncate cleaned up [ 63.773771][ T5417] ext4 filesystem being mounted at /131/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 63.786930][ T5421] ext4 filesystem being mounted at /134/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.816637][ T5430] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 63.836614][ T5421] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.624: bg 0: block 224: padding at end of block bitmap is not set [ 63.869642][ T5433] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=12 [ 63.882982][ T5421] EXT4-fs (loop4): Remounting filesystem read-only [ 63.899363][ T5430] EXT4-fs (loop2): Remounting filesystem read-only [ 63.916470][ T5433] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=12 [ 63.933841][ T11] __quota_error: 96 callbacks suppressed [ 63.933857][ T11] Quota error (device loop4): dquot_write_dquot: Can't write quota structure (error -5). Quota may get out of sync! [ 63.952468][ T11] Quota error (device loop4): dquot_write_dquot: Can't write quota structure (error -5). Quota may get out of sync! [ 64.013466][ T5443] loop2: detected capacity change from 0 to 512 [ 64.020980][ T5443] EXT4-fs: Ignoring removed nobh option [ 64.031205][ T5445] loop4: detected capacity change from 0 to 164 [ 64.043849][ T5443] ext4 filesystem being mounted at /142/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.063215][ T29] audit: type=1400 audit(1736734028.919:1688): avc: denied { unlink } for pid=2981 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 64.103655][ T5443] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.629: bg 0: block 224: padding at end of block bitmap is not set [ 64.120632][ T5450] loop3: detected capacity change from 0 to 512 [ 64.150590][ T5443] EXT4-fs (loop2): Remounting filesystem read-only [ 64.180872][ T5453] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 64.187471][ T5453] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 64.195070][ T5453] vhci_hcd vhci_hcd.0: Device attached [ 64.208477][ T5454] vhci_hcd: connection closed [ 64.208893][ T36] vhci_hcd: stop threads [ 64.218045][ T36] vhci_hcd: release socket [ 64.222608][ T36] vhci_hcd: disconnect device [ 64.233365][ T11] Quota error (device loop2): dquot_write_dquot: Can't write quota structure (error -5). Quota may get out of sync! [ 64.245709][ T11] Quota error (device loop2): dquot_write_dquot: Can't write quota structure (error -5). Quota may get out of sync! [ 64.290969][ T5450] ext4 filesystem being mounted at /134/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 64.350140][ T5472] loop4: detected capacity change from 0 to 164 [ 64.363966][ T5474] netlink: 20 bytes leftover after parsing attributes in process `syz.2.635'. [ 64.414766][ T5484] loop4: detected capacity change from 0 to 164 [ 64.445100][ T5488] loop5: detected capacity change from 0 to 512 [ 64.451882][ T5488] EXT4-fs: Ignoring removed oldalloc option [ 64.468847][ T5488] EXT4-fs error (device loop5): ext4_xattr_inode_iget:436: comm syz.5.645: Parent and EA inode have the same ino 15 [ 64.483167][ T5488] EXT4-fs (loop5): Remounting filesystem read-only [ 64.484671][ T5491] loop4: detected capacity change from 0 to 512 [ 64.489809][ T5488] EXT4-fs warning (device loop5): ext4_evict_inode:259: couldn't mark inode dirty (err -5) [ 64.503966][ T5491] EXT4-fs: Ignoring removed nobh option [ 64.506109][ T5488] EXT4-fs (loop5): 1 orphan inode deleted [ 64.518059][ T5488] SELinux: (dev loop5, type ext4) getxattr errno 5 [ 64.538810][ T5495] loop3: detected capacity change from 0 to 164 [ 64.547144][ T5491] ext4 filesystem being mounted at /142/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.564638][ T5491] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.646: bg 0: block 224: padding at end of block bitmap is not set [ 64.592091][ T5499] IPv6: NLM_F_CREATE should be specified when creating new route [ 64.612231][ T5491] EXT4-fs (loop4): Remounting filesystem read-only [ 64.618203][ T5501] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 64.668137][ T3419] Quota error (device loop4): dquot_write_dquot: Can't write quota structure (error -5). Quota may get out of sync! [ 64.680517][ T3419] Quota error (device loop4): dquot_write_dquot: Can't write quota structure (error -5). Quota may get out of sync! [ 64.704410][ T5505] loop5: detected capacity change from 0 to 512 [ 64.738398][ T5505] ext4 filesystem being mounted at /44/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.751884][ T29] audit: type=1326 audit(1736734029.609:1689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5506 comm="syz.1.654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38fc975d29 code=0x7ffc0000 [ 64.754336][ T5503] netlink: 4 bytes leftover after parsing attributes in process `syz.3.651'. [ 64.788631][ T29] audit: type=1326 audit(1736734029.629:1690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5506 comm="syz.1.654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f38fc975d29 code=0x7ffc0000 [ 64.793336][ T5505] EXT4-fs error (device loop5): ext4_do_update_inode:5153: inode #2: comm syz.5.653: corrupted inode contents [ 64.812045][ T29] audit: type=1326 audit(1736734029.629:1691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5506 comm="syz.1.654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38fc975d29 code=0x7ffc0000 [ 64.858794][ T5503] hsr_slave_1 (unregistering): left promiscuous mode [ 64.870428][ T5505] EXT4-fs error (device loop5): ext4_dirty_inode:6041: inode #2: comm syz.5.653: mark_inode_dirty error [ 64.889465][ T5505] EXT4-fs error (device loop5): ext4_do_update_inode:5153: inode #2: comm syz.5.653: corrupted inode contents [ 64.901609][ T5505] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #2: comm syz.5.653: mark_inode_dirty error [ 65.001869][ T5520] loop4: detected capacity change from 0 to 512 [ 65.006003][ T5522] bridge0: entered promiscuous mode [ 65.009151][ T5520] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 65.028013][ T5522] macvlan2: entered promiscuous mode [ 65.032866][ T5525] loop3: detected capacity change from 0 to 164 [ 65.036334][ T5522] bridge0: port 3(macvlan2) entered blocking state [ 65.040922][ T5520] EXT4-fs (loop4): 1 orphan inode deleted [ 65.046321][ T5522] bridge0: port 3(macvlan2) entered disabled state [ 65.051954][ T5520] EXT4-fs (loop4): 1 truncate cleaned up [ 65.070579][ T5522] macvlan2: entered allmulticast mode [ 65.076067][ T5522] bridge0: entered allmulticast mode [ 65.085333][ T5522] macvlan2: left allmulticast mode [ 65.088557][ T5527] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, [ 65.090510][ T5522] bridge0: left allmulticast mode [ 65.098747][ T5527] block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 65.113521][ T5522] bridge0: left promiscuous mode [ 65.129371][ T5526] loop1: detected capacity change from 0 to 1024 [ 65.132337][ T5531] loop3: detected capacity change from 0 to 512 [ 65.136585][ T5527] EXT4-fs (loop4): Remounting filesystem read-only [ 65.142756][ T5531] EXT4-fs: Ignoring removed nobh option [ 65.152310][ T5526] EXT4-fs: Ignoring removed oldalloc option [ 65.160177][ T5526] EXT4-fs: Ignoring removed bh option [ 65.185718][ T5531] ext4 filesystem being mounted at /139/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.185921][ T5532] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 65.206386][ T5531] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.662: bg 0: block 224: padding at end of block bitmap is not set [ 65.208158][ T5536] loop5: detected capacity change from 0 to 512 [ 65.220850][ T5532] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 65.235706][ T5531] EXT4-fs (loop3): Remounting filesystem read-only [ 65.243056][ T5536] EXT4-fs: Ignoring removed nobh option [ 65.281792][ T5536] ext4 filesystem being mounted at /46/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.302088][ T5536] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.663: bg 0: block 224: padding at end of block bitmap is not set [ 65.350680][ T5536] EXT4-fs (loop5): Remounting filesystem read-only [ 65.371492][ T5548] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 65.378047][ T5548] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 65.384831][ T5554] loop2: detected capacity change from 0 to 512 [ 65.385687][ T5548] vhci_hcd vhci_hcd.0: Device attached [ 65.397628][ T3172] ================================================================== [ 65.398326][ T5554] EXT4-fs (loop2): orphan cleanup on readonly fs [ 65.405713][ T3172] BUG: KCSAN: data-race in __filemap_add_folio / nr_blockdev_pages [ 65.405747][ T3172] [ 65.405753][ T3172] read-write to 0xffff8881006311f0 of 8 bytes by task 5554 on cpu 0: [ 65.412685][ T5554] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.669: bg 0: block 248: padding at end of block bitmap is not set [ 65.420065][ T3172] __filemap_add_folio+0x430/0x6f0 [ 65.420094][ T3172] filemap_add_folio+0x9c/0x1b0 [ 65.420116][ T3172] __filemap_get_folio+0x2f1/0x5b0 [ 65.420141][ T3172] bdev_getblk+0x173/0x3b0 [ 65.420170][ T3172] ext4_sb_breadahead_unmovable+0x44/0x190 [ 65.420203][ T3172] ext4_group_desc_init+0x5a1/0x1400 [ 65.423204][ T5554] EXT4-fs error (device loop2): ext4_acquire_dquot:6938: comm syz.2.669: Failed to acquire dquot type 1 [ 65.430597][ T3172] ext4_fill_super+0x23c5/0x3a10 [ 65.430636][ T3172] get_tree_bdev_flags+0x29f/0x310 [ 65.430665][ T3172] get_tree_bdev+0x1f/0x30 [ 65.445590][ T5554] EXT4-fs (loop2): 1 truncate cleaned up [ 65.450103][ T3172] ext4_get_tree+0x1c/0x30 [ 65.494296][ T5536] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=12 [ 65.496727][ T3172] vfs_get_tree+0x56/0x1e0 [ 65.504571][ T5536] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=12 [ 65.506781][ T3172] do_new_mount+0x227/0x690 [ 65.511272][ T5536] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=12 [ 65.519939][ T3172] path_mount+0x49b/0xb30 [ 65.550962][ T3172] __se_sys_mount+0x27c/0x2d0 [ 65.555664][ T3172] __x64_sys_mount+0x67/0x80 [ 65.560283][ T3172] x64_sys_call+0x2c84/0x2dc0 [ 65.564971][ T3172] do_syscall_64+0xc9/0x1c0 [ 65.569553][ T3172] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.575569][ T3172] [ 65.577893][ T3172] read to 0xffff8881006311f0 of 8 bytes by task 3172 on cpu 1: [ 65.585439][ T3172] nr_blockdev_pages+0x7c/0xd0 [ 65.590216][ T3172] si_meminfo+0x87/0xd0 [ 65.594393][ T3172] update_defense_level+0x49/0x5b0 [ 65.599517][ T3172] defense_work_handler+0x1f/0x80 [ 65.604556][ T3172] process_scheduled_works+0x483/0x9a0 [ 65.610150][ T3172] worker_thread+0x51d/0x6f0 [ 65.614756][ T3172] kthread+0x1d1/0x210 [ 65.618824][ T3172] ret_from_fork+0x4b/0x60 [ 65.623244][ T3172] ret_from_fork_asm+0x1a/0x30 [ 65.628016][ T3172] [ 65.630334][ T3172] value changed: 0x0000000000000001 -> 0x0000000000000002 [ 65.637442][ T3172] [ 65.639772][ T3172] Reported by Kernel Concurrency Sanitizer on: [ 65.646007][ T3172] CPU: 1 UID: 0 PID: 3172 Comm: kworker/1:2 Not tainted 6.13.0-rc6-syzkaller-00290-gbe548645527a #0 [ 65.656863][ T3172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 65.666925][ T3172] Workqueue: events_long defense_work_handler [ 65.673008][ T3172] ================================================================== [ 65.687719][ T5554] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 65.701576][ T5547] loop4: detected capacity change from 0 to 512 [ 65.712454][ T5550] vhci_hcd: connection closed [ 65.716856][ T5547] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 65.723086][ T3419] vhci_hcd: stop threads [ 65.734086][ T3419] vhci_hcd: release socket [ 65.734110][ T5547] EXT4-fs (loop4): invalid journal inode [ 65.738496][ T3419] vhci_hcd: disconnect device [ 65.759230][ T5554] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback.