last executing test programs: 3.655340245s ago: executing program 2 (id=784): openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x1a002, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8) unshare(0x2050000) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0xc9, &(0x7f0000000000), &(0x7f00000001c0)=0x4) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r3}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000050000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000050900010073797a31000000004c000000050a01020000100000000000010020000c00024000000000000000010900010073797a310000000020000480140003006e657464657673696d300000000000000800014000000005"], 0xd4}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0a00000002000000ff0f000007", @ANYRES8=r3], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f00000004c0)=ANY=[], &(0x7f0000002380)='GPL\x00', 0x6, 0xffffffffffffff44, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) r7 = io_uring_setup(0x6243, &(0x7f0000000300)={0x0, 0x342d, 0x1000, 0x0, 0x3d4}) r8 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r8, &(0x7f0000000440)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r8, 0x3) r9 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r9, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) close_range(r7, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r5}, &(0x7f0000000340), &(0x7f0000000300)}, 0x20) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r5, 0xf50f, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r10}, 0x18) socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140)) 3.336585549s ago: executing program 2 (id=792): openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x1a002, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8) unshare(0x2050000) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0xc9, &(0x7f0000000000), &(0x7f00000001c0)=0x4) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r3}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000050000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000050900010073797a31000000004c000000050a01020000100000000000010020000c00024000000000000000010900010073797a310000000020000480140003006e657464657673696d300000000000000800014000000005"], 0xd4}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0a00000002000000ff0f000007", @ANYRES8=r3], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f00000004c0)=ANY=[], &(0x7f0000002380)='GPL\x00', 0x6, 0xffffffffffffff44, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) r7 = io_uring_setup(0x6243, &(0x7f0000000300)={0x0, 0x342d, 0x1000, 0x0, 0x3d4}) r8 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r8, &(0x7f0000000440)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r8, 0x3) r9 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r9, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) close_range(r7, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r5}, &(0x7f0000000340), &(0x7f0000000300)}, 0x20) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r5, 0xf50f, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) sendmsg$tipc(r10, &(0x7f0000000540)={&(0x7f0000000380)=@name={0x1e, 0x2, 0x3, {{0x0, 0x4}, 0x2}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2aaa12fb1c658c08}, 0x4000041) 3.017606804s ago: executing program 2 (id=797): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) syz_emit_ethernet(0x3e, &(0x7f0000000340)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x3c, 0x30, 0x0, 0x0, 0xfc, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x1c, 0x0, @gue={{0x1, 0x0, 0x0, 0x3, 0x100, @void}, "d889e523033ba72325a556df90fa37a2"}}}}}}, 0x0) 2.999335864s ago: executing program 2 (id=799): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x40, r1, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r2}, 0x10) capset(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r7 = getpid() r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r6) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000580)={0x0, @multicast1, @broadcast}, &(0x7f00000005c0)=0xc) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0x58, &(0x7f0000000600)}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0x58, &(0x7f00000006c0)}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000001380)) sendmsg$DEVLINK_CMD_RELOAD(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r9, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r7}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) 2.082568938s ago: executing program 2 (id=810): r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x1) fchdir(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x80000, 0x0) lseek(r2, 0x2, 0x1) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f00000007c0)='./bus\x00', 0x201011, &(0x7f0000000340)={[], [{@dont_appraise}]}, 0x1, 0x789, &(0x7f0000000b00)="$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") r3 = socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x6, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000500000008040000cd00000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r4, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f00000002c0)={0x4, &(0x7f0000000200)=[{0xb, 0x6, 0x3, 0x9}, {0x5, 0x1, 0x1, 0x3}, {0x1000, 0xff, 0x39, 0x9}, {0xffd, 0xfb, 0x6, 0x10}]}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) close(r3) r6 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000300)=@req3={0xd6cc, 0x0, 0x0, 0x4, 0x1, 0x7f, 0x1}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000001000000000000025000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x15, 0x7, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000ff010000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70200000000000085008000860000009500000000000000"], 0x0, 0x2780, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x19, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x76, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='cachefiles_ondemand_copen\x00'}, 0x18) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) write(0xffffffffffffffff, &(0x7f0000004200)='t', 0x1) socket$nl_route(0x10, 0x3, 0x0) fremovexattr(r6, &(0x7f0000000280)=ANY=[@ANYBLOB="747275737465643ef1757c2b977f00"]) 1.940294721s ago: executing program 2 (id=814): r0 = socket(0x1e, 0x80004, 0x0) socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004000000"], 0x48) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000540), 0x41, 0x1) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000a636000000007fffffff8500000050000000850000000700000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='virtio_transport_alloc_pkt\x00', r3}, 0x18) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000140)={0x28, 0x0, 0x0, @local}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffff030003000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @fallback=0x36, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x10, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a500000095040000000000004953ddcd7b5fd501f7b35a5ddc5d7185d9f79c4dca0f66"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="240000001900010000000000000000001c140000fe"], 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008f00850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_clone(0x42042000, &(0x7f00000004c0)="afab416f6dbd01012119fc0f90f9cb46c96c20767d4091e516b55259eb8a0bc376982dd95f64fc0de90b0aece571ccecbb0569ec156b97866494d37c65d20d3b3e373bd68915d20d2e8154d40bc7e1d405ea88e410", 0x55, &(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0)="7a8860ec202ec2eb3dfab84b8b84d1d7b8354adf33ae68a839b385c2fb17ec01de0764a3c003fd5d0fc0661d9313a96769a13728438804d66aa3567f912ebc824e506eb04a77b01e3b861e5d213a131f83aebfda0cccbb4f6fe65e16ca012504beb29161ca764ca50cf2a71322e5d19ee8b5cae293980f360537ed8122cc65aa92ddb232") r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r6}, 0x10) bpf$BPF_LINK_CREATE(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff, 0x24, 0x7, @val=@netkit={@void, @value}}, 0x1c) 1.538662396s ago: executing program 4 (id=824): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x18) times(0x0) 1.464356527s ago: executing program 4 (id=827): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000080000000000000000000850000007d00000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='kfree\x00', r4}, 0x10) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_GET(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001940)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01dfffffff9a26000000210000000c00018008000100", @ANYRES32=r1], 0x20}, 0x1, 0x0, 0x0, 0x4000c00}, 0x0) 1.228051251s ago: executing program 4 (id=833): openat$dir(0xffffffffffffff9c, 0x0, 0x202800, 0x2) rmdir(0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) prctl$PR_SET_MM(0x23, 0x3, &(0x7f0000ffb000/0x4000)=nil) sendmsg$nl_route_sched(r3, 0x0, 0x20000000) r5 = socket(0x2a, 0x2, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=@gettclass={0x24, 0x2a, 0x20, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x7ff8, 0xe}, {0xd, 0xb}, {0xb, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x4000) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.211501431s ago: executing program 1 (id=834): r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000050000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000050900010073797a31000000004c000000050a01020000100000000000010020000c00024000000000000000010900010073797a310000000020000480140003006e657464657673696d300000000000000800014000000005"], 0xd4}}, 0x0) 1.118663733s ago: executing program 1 (id=836): r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r2, 0x0, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f00000000c0)=@id={0x1e, 0x3, 0x2, {0x4e21, 0x2}}, 0x10) bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) socket$inet(0x2, 0x6, 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0e00000004000000040000000200020000000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000002000000000000000000000e67bff400"/32], 0x50) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4049b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FLAGS={0x6, 0x8, 0x3b}, @IFLA_IPTUN_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x30}}]}}}]}, 0x40}}, 0x4048084) bind$tipc(r3, 0x0, 0x0) bind$tipc(r3, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) bind$tipc(r2, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10) close_range(r1, r2, 0x0) r6 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r6, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000000c0)={0x14, 0x0, 0x1, 0x70bd2c, 0x0, {{0x2}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x8001}, 0x0) r8 = syz_io_uring_setup(0x497, &(0x7f0000000200)={0x0, 0x4661, 0x8, 0x1, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r6, 0x0, 0x0}) io_uring_enter(r8, 0x40f9, 0x217, 0xa5, 0x0, 0x0) prlimit64(0xffffffffffffffff, 0x9, 0x0, 0x0) close_range(r0, r6, 0x0) 998.539525ms ago: executing program 0 (id=837): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x10, &(0x7f0000000600), 0x1, 0x58a, &(0x7f0000000b40)="$eJzs3V1rHFUcB+D/2d2kL2lNKoLWXhgo2IKaNGlFEcEW650XvhS8KhiTtJRu29BEsLViC/Ub6AcQvBNEvCwiRb3x1jvBDyDFIm1uvFuZzUy6bXfTvGw6tfM8sM2cORnOmSy/npmzM7MBVNZo9k8tYndEzKWI4Y66RuSVo0u/d/vWpenFW5emU7Ra7/+TIuXrit9P+c+hfOOtEfH7zymerN/f7vyFi6enms3Z83l5fOHM3Pj8hYsvnTozdXL25OzZyYlXJl4+dHDy0IG+7OfOiPh17Gjj6ok393w//c2uz3/89lqKw7Ejr+/cj34ZjdHlv0mn7O/6ar8bK0k935/Otzg1SuwQa1K8fwMR8XQMRz3uvHnD8cW7pXYO2FStFNECKirJP1RUcRyQnf8Wr3KPSICH5eaRpQmA22lpbm9xOf+NpbnB2NqeG9i+mKJzWidFRD9m5rI25p5Pw9krNmkeDuju8pWIeKbb+J/a2Rxpz+Jn+a/dlf9aRLyT/8zWv7fO9kfvKcs/PDwbyf+HHfn/aJ3tyz8AAAAAAAD0z/UjEfFit8//asvX/0SX63+GIuJwH9p/8Od/tRt9aAbo4uaRiNcjorj2b7Ej/7mRel7a2b4eYCCdONWcPRART0TE/hjYkpUnVmhjdM9vAz3rOq7/y15Z+8W1gHk/bjS23L3NzNTC1Eb2GVhy80rEs41u+U/L43/qMv5nY//cKttoHX3jl151D84/sFlaX0fs6zr+33lyRVr5+Rzj7eOB8eKo4H6fHr/2Q6/25R/Kk43/21fO/0jqfF7P/Nrb+OzvPzeQ/+7H/4PpWPuRM4P5uk+mFhbOT0QMprfvXz+59j7D46jIQ5GXLP/793Y//1/p+H9bRFxeZZvHfnrraq864z+UJ8v/zJrG/7Uv7P3gq397tb+68f9Qe0zfn68x/wcrW21Ay+4nAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPwf1SJiR6Ta2PJyrTY2FjEUEU/F9lrz3PzCCyfOfXx2Jqtrf/9/rfim3+Glciq+/3+kozx5T/lgROyKiC/r29rlselzzZmydx4AAAAAAAAAAAAAAAAAAAAeEUM97v/P/FUvu3fApmuU3QGgNPIP1SX/UF3yD9Ul/1Bd8g/VJf9QXfIP1SX/UF311nfHy+4DAAAAAADQN7ueu/5HiojLr21rvzKDed1AqT0DNtvhsjsAlMYjfqC6XPoH1eUcH0gPqN+67i0BAAAAAAAAAAAAgH7Zt9v9/1BVtbI7AJSm9/3/ngwAjzv3/0N1OccH3P8PAAAAAAAAAAAAAI+++QsXT081m7Pn17uwZWObW7BQnYVIfUjcQ1oo+38mAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACg8F8AAAD//8rF+L8=") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00'}) socket$nl_route(0x10, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x1, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)=[0x7], &(0x7f0000000500)=[0x2], 0x0, 0x100000}}, 0x3c) 881.049526ms ago: executing program 1 (id=839): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x42, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000007a110000f5714ca56cac965f022b5dee825ff614e3987265ccad4363a7fce699185a462f616388d3c4e24d2dcf36c41f279e635462a8e5f184e9bc4341c02a105168592d077a3d4a2d321210f9da88fd0995af2564642a4eca3d4051c9b4677ad671f6d54f042e4faadec516f0035623436a866eb181d37942322351a6de4ce50949d4f8b65008bd98d9ab", @ANYRES32=r2, @ANYRES8=r1], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$tipc(0x1e, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = socket$kcm(0x10, 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000019680)=[{{&(0x7f0000000100)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141414}}, 0x1c, 0x0}}], 0x1, 0x20004855) bind$tipc(0xffffffffffffffff, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r5 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x10020, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3ff, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffdfc, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r6}, &(0x7f0000000180), &(0x7f0000000580)=r5}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x22000406, &(0x7f0000000300)={[{@dioread_lock}, {@orlov}, {@abort}, {@init_itable}, {@stripe={'stripe', 0x3d, 0x1f5}}, {@grpjquota, 0x2e}, {@dioread_nolock}, {@nolazytime}, {@jqfmt_vfsv1}, {@grpid}], [], 0x2c}, 0x84, 0x4a7, &(0x7f0000000740)="$eJzs3M9vFFUcAPDvTH/wmxbEH/xQqmhsRFtaUDl4QKMJFxMTPeCxlkqQAobWRAiRagwejX+BejQx8eTFkybGqCeNV70bE2K4gB5MzezOtLN0t2y3266yn0+y2/dm3ux735l5u2/ndTaArjWUPSURWyPi14gYqGZrCwxV/9y8fnnyr+uXJ5OYn3/5z6RS7sb1y5NF0WK7LXlmOI1I309ib516Zy5eOjMxPT11Ic+Pzp59c3Tm4qUnTp+dODV1aurc+NGjRw6PPf3U+JNti/PGnnfO79t9/NWPXpycj9d++Dxr79Z8fTmOqsE21DkU87nFpf2V50dW/er/LdtK6aS3gw1hRXoiIjtcfZX+PxA9sXjwBuKF9xYy33aogcCayT6bdixZ2pP/TRc+v4A7UaKPQ5cqPvGz77/FYz3HH5127dnseaoS/838UV3TG2n2XXaw+o29p8H2x1ZZ/9aIODH398fZI+pehwAAaK+vs/HP4/XGf2ncUyq3PZ8bGoyIgxGxMyLuiohdEXF3RKXsvRFx3wrrH7olv3T88/OmlgJrUjb+eyaf26od/6V5iWQht60Sf1/y+unpqUP5PhmOvg1ZfmyZOr55/pcPG60bKo3/skdWfzEWzNvxR++G2m1OTsxOrCLkGtfejdjTWy/+ZGEmINsDuyNiTwuvn+2z0499ti9Lb9+ydP3t419GG+aZ5j+NeLR6/OfilvgLSbWmRvOToxtjeurQaHFWLPXjT1dfKuf7Suma+Dc2F9PGVoOtIzv+m+ue/3n8RTco5mtnVl7H1d8+aPidZunxT+LEXLlEfv6X3gWy878/eaWS7s+XvT0xO3thLKI/X1CzfHxx2yJflM/iHz5Qv//vjPjnk3y7vRGRncT3R8QDEbE/b/uDEfFQRBxYJv7vn3v4jeX3UIvnfxtk8Z9c7vhHDCbl+foWEj1nvvuqUf3Nvf8dqaSG8yXNvP8128DV7DsAAAD4v0grc9BJOlKkSxendsXmdPr8zOzBoXjr3MnqXPVg9KXFla6B0vXQsfzacJEfvyV/OCJ2VP7TaFMlPzJ5fnpbJwMHKvfq1PT/SNORkeq63xv90wtw51jRPFr57sAvvmx/Y4B15X5N6F76P3Qv/R+6l/4P3ate/78ScbMDTQHWmc9/6F76P3Qv/R+6l/4PXWnpLfHFDy20cqf/YmLn8VVtvuaJ+YE1eeW5lW/Vs0aRRvlHOxomkohorYpIly/T30TtHUukty1zrMXdsoLE/jyxISKa3erKuu3Vzr4vAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAtMu/AQAA//9Mrd0M") sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)="2e00000011008188040f80ec59acbc0413a181003100000001090000000000000e000a000f00e4ff2f8002002d1f", 0x2e}], 0x1}, 0x4000) 783.296957ms ago: executing program 3 (id=840): r0 = perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x400, 0x2d, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x8) msgsnd(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0300"], 0x0, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000258f88)={{0x1}, 0x0, 0x0, 0x800000000000000, 0x7, 0x2, 0x0, 0x3, 0xe8, 0x0, 0x0, 0x0, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae000000"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2a, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x8915, &(0x7f0000001cc0)) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x14, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendto$inet6(0xffffffffffffffff, &(0x7f00000007c0)="60d7aa1179ce86654c88d665da183b41fa4f2a714c4580610085b150313a2e025da1441865e57bde9a3fc64f1adac33cb341e1165eef49c0439c7ac6e84e4a2e484100141a62026b4ec94a1203616d9cc2819f742a01ccd4698b0eaec9a4d8110e7ea6e87e5e185983ee737f582a8a55711a5121ef1a7e972ecf0c838c62", 0x7e, 0x0, &(0x7f0000000380)={0xa, 0x4e20, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9}, 0x1c) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/anycast6\x00') syz_usb_connect(0x6, 0x36, &(0x7f0000000080)=ANY=[], 0x0) close_range(r2, 0xffffffffffffffff, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, 0x0, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10044081}, 0x0) connect$phonet_pipe(0xffffffffffffffff, &(0x7f0000000040)={0x23, 0x0, 0x0, 0x1}, 0x10) dup3(0xffffffffffffffff, r0, 0x80000) 688.845439ms ago: executing program 0 (id=841): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) (async) r1 = socket(0x11, 0xa, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="5c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800e00010069703665727370616e0000002000028006000200300000001400060000000000000000000000ffff7f00000108000a00", @ANYRES32], 0x5c}}, 0x0) (async) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, 0x9, 0x6, 0x3, 0x0, 0x0, {0x2, 0x0, 0x3}, [@IPSET_ATTR_ADT={0x20, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_COMMENT={0x6, 0x1a, '!\x00'}}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x24040041) 664.643599ms ago: executing program 1 (id=842): openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x1a002, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8) unshare(0x2050000) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0xc9, &(0x7f0000000000), &(0x7f00000001c0)=0x4) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r3}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000050000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000050900010073797a31000000004c000000050a01020000100000000000010020000c00024000000000000000010900010073797a310000000020000480140003006e657464657673696d300000000000000800014000000005"], 0xd4}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0a00000002000000ff0f000007", @ANYRES8=r3], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f00000004c0)=ANY=[], &(0x7f0000002380)='GPL\x00', 0x6, 0xffffffffffffff44, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) r7 = io_uring_setup(0x6243, &(0x7f0000000300)={0x0, 0x342d, 0x1000, 0x0, 0x3d4}) r8 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r8, &(0x7f0000000440)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r8, 0x3) r9 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r9, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) close_range(r7, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r5}, &(0x7f0000000340), &(0x7f0000000300)}, 0x20) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r5, 0xf50f, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x18) socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) sendmsg$tipc(r10, &(0x7f0000000540)={&(0x7f0000000380)=@name={0x1e, 0x2, 0x3, {{0x0, 0x4}, 0x2}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2aaa12fb1c658c08}, 0x4000041) 550.542802ms ago: executing program 0 (id=843): mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd']) 546.549941ms ago: executing program 0 (id=844): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000080000000000000000000850000007d00000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='kfree\x00', r4}, 0x10) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_GET(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001940)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01dfffffff9a26000000210000000c00018008000100", @ANYRES32=r1], 0x20}, 0x1, 0x0, 0x0, 0x4000c00}, 0x0) 456.789793ms ago: executing program 0 (id=845): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x680a01, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000006c59850000002d00"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000025940000000c0a01030000000000000000070000080900020073797a31000000000900010073797a30000000006800038064000080080003400000000258000b802c0001800a0001006c696d69740000001c0002800c00014000000000000000030c0002400000000000000010140001800c0001"], 0x118}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x31, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xd, 0xc, &(0x7f00000005c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r1}, &(0x7f0000000000), &(0x7f0000000040)='%ps \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1e, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001b00)=@newqdisc={0x78, 0x24, 0xd0f, 0x0, 0x25dfdbff, {0x60, 0x0, 0x0, r4, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x4, 0x1}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x18, 0x2, {{0x7fffffff, 0x14, 0xfcc, 0x400, 0x9}, 0x81, 0x0, 0xc8c3, 0x40, 0x4, 0x1c, 0x11, 0x9, 0x8, 0xffffffff, {0xfffffff5, 0x4, 0xad8, 0x7, 0x4, 0x4}}}}]}, 0x78}}, 0x0) 451.457743ms ago: executing program 1 (id=846): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r0}, &(0x7f0000000400), &(0x7f00000004c0)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r1}, 0x18) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000000100)={&(0x7f0000000200)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000000540)=[@rdma_args={0x48, 0x114, 0x1, {{0xa9e6, 0x6}, {&(0x7f0000000180)=""/38, 0x26}, &(0x7f0000000840)=[{&(0x7f0000000600)=""/141, 0x8d}, {&(0x7f00000006c0)=""/172, 0xac}, {&(0x7f0000000280)=""/52, 0x34}, {&(0x7f0000000300)=""/71, 0x47}, {&(0x7f0000000780)=""/169, 0xa9}], 0x5, 0x40, 0xffff}}, @rdma_args={0x48, 0x114, 0x1, {{0x4}, {0x0}, &(0x7f0000000380)=[{&(0x7f00000002c0)=""/28, 0x1c}], 0x1, 0x0, 0x1}}], 0x90, 0x4804}, 0x0) 404.361724ms ago: executing program 1 (id=847): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x10, &(0x7f0000000600), 0x1, 0x58a, &(0x7f0000000b40)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00'}) socket$nl_route(0x10, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x1, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)=[0x7], &(0x7f0000000500)=[0x2], 0x0, 0x100000}}, 0x3c) 376.363924ms ago: executing program 4 (id=848): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000015c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000010000008500000083000000bf090000000000005509010000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) unlinkat(0xffffffffffffffff, 0x0, 0x200) 299.261775ms ago: executing program 4 (id=849): r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r2, 0x0, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f00000000c0)=@id={0x1e, 0x3, 0x2, {0x4e21, 0x2}}, 0x10) bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) socket$inet(0x2, 0x6, 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0e00000004000000040000000200020000000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000002000000000000000000000e67bff400"/32], 0x50) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4049b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FLAGS={0x6, 0x8, 0x3b}, @IFLA_IPTUN_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x30}}]}}}]}, 0x40}}, 0x4048084) bind$tipc(r3, 0x0, 0x0) bind$tipc(r3, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) bind$tipc(r2, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10) close_range(r1, r2, 0x0) r6 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r6, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000000c0)={0x14, 0x0, 0x1, 0x70bd2c, 0x0, {{0x2}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x8001}, 0x0) r8 = syz_io_uring_setup(0x497, &(0x7f0000000200)={0x0, 0x4661, 0x8, 0x1, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r6, 0x0, 0x0}) io_uring_enter(r8, 0x40f9, 0x217, 0xa5, 0x0, 0x0) prlimit64(0xffffffffffffffff, 0x9, 0x0, 0x0) close_range(r0, r6, 0x0) 234.739566ms ago: executing program 3 (id=850): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_udp_encap(r1, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) syz_emit_ethernet(0x3e, &(0x7f0000000340)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x3c, 0x30, 0x0, 0x0, 0xfc, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x1c, 0x0, @gue={{0x1, 0x0, 0x0, 0x3, 0x100, @void}, "d889e523033ba72325a556df90fa37a2"}}}}}}, 0x0) 211.173956ms ago: executing program 3 (id=851): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x20, 0x1, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x400c895}, 0x20000000) r1 = socket(0x80000000000000a, 0x2, 0x0) getsockopt$sock_buf(r1, 0x1, 0x1f, 0x0, &(0x7f00000001c0)) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) 164.941817ms ago: executing program 3 (id=852): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x800000000003}, 0x1100, 0x5dd8, 0x0, 0x3, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, 0x0, 0x0) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) syz_emit_ethernet(0x3e, &(0x7f0000000340)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x3c, 0x30, 0x0, 0x0, 0xfc, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x1c, 0x0, @gue={{0x1, 0x0, 0x0, 0x3, 0x100, @void}, "d889e523033ba72325a556df90fa37a2"}}}}}}, 0x0) 162.310587ms ago: executing program 0 (id=853): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x513, &(0x7f0000000c40)="$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") bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {0x0, 0x6}}}, 0x1c}}, 0x0) 151.957647ms ago: executing program 3 (id=854): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000dfff75390000000000000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='netlink_extack\x00', r0}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x4004) 105.485328ms ago: executing program 4 (id=855): r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x1) fchdir(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x80000, 0x0) lseek(r2, 0x2, 0x1) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f00000007c0)='./bus\x00', 0x201011, &(0x7f0000000340)={[], [{@dont_appraise}]}, 0x1, 0x789, &(0x7f0000000b00)="$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") r3 = socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x6, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000500000008040000cd00000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r4, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f00000002c0)={0x4, &(0x7f0000000200)=[{0xb, 0x6, 0x3, 0x9}, {0x5, 0x1, 0x1, 0x3}, {0x1000, 0xff, 0x39, 0x9}, {0xffd, 0xfb, 0x6, 0x10}]}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) close(r3) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x1c5902, 0x2d) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000300)=@req3={0xd6cc, 0x0, 0x0, 0x4, 0x1, 0x7f, 0x1}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000001000000000000025000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x15, 0x7, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000ff010000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70200000000000085008000860000009500000000000000"], 0x0, 0x2780, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x19, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x76, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='cachefiles_ondemand_copen\x00'}, 0x18) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) write(r7, &(0x7f0000004200)='t', 0x1) socket$nl_route(0x10, 0x3, 0x0) fremovexattr(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="747275737465643ef1757c2b977f00"]) 0s ago: executing program 3 (id=856): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000080000000000000000000850000007d00000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='kfree\x00', r4}, 0x10) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_GET(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001940)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01dfffffff9a26000000210000000c00018008000100", @ANYRES32=r1], 0x20}, 0x1, 0x0, 0x0, 0x4000c00}, 0x0) kernel console output (not intermixed with test programs): ry [ 48.426392][ T3513] udevd[3513]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 48.442096][ T4040] loop0: detected capacity change from 0 to 512 [ 48.448855][ T4031] loop3: detected capacity change from 0 to 512 [ 48.454408][ T4040] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 48.455643][ T4031] EXT4-fs: Ignoring removed nobh option [ 48.497638][ T4040] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.205: invalid indirect mapped block 4294967295 (level 1) [ 48.531508][ T4040] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.205: invalid indirect mapped block 4294967295 (level 1) [ 48.532190][ T4031] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 48.583929][ T4040] EXT4-fs (loop0): 2 truncates cleaned up [ 48.603758][ T4040] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.608484][ T4048] wg1 speed is unknown, defaulting to 1000 [ 48.630792][ T4031] EXT4-fs (loop3): orphan cleanup on readonly fs [ 48.638041][ T4031] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.201: bg 0: block 248: padding at end of block bitmap is not set [ 48.654171][ T4031] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.201: Failed to acquire dquot type 1 [ 48.667447][ T4040] EXT4-fs error (device loop0): ext4_inlinedir_to_tree:1339: inode #12: block 7: comm syz.0.205: path /40/file0/file0: bad entry in directory: rec_len % 4 != 0 - offset=259, inode=4278190093, rec_len=255, size=60 fake=0 [ 48.713224][ T4031] EXT4-fs (loop3): 1 truncate cleaned up [ 48.721190][ T4040] EXT4-fs error (device loop0): ext4_inlinedir_to_tree:1339: inode #12: block 7: comm syz.0.205: path /40/file0/file0: bad entry in directory: rec_len % 4 != 0 - offset=259, inode=4278190093, rec_len=255, size=60 fake=0 [ 48.721387][ T4031] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 48.760419][ T4042] wg1 speed is unknown, defaulting to 1000 [ 48.834183][ T3322] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.883302][ T4058] loop4: detected capacity change from 0 to 2048 [ 48.896662][ T4057] loop0: detected capacity change from 0 to 1024 [ 48.906651][ T4057] EXT4-fs: Ignoring removed orlov option [ 48.912570][ T4057] EXT4-fs: Ignoring removed nomblk_io_submit option [ 48.928603][ T3513] loop4: p1 < > p4 [ 48.933101][ T3513] loop4: p4 size 8388608 extends beyond EOD, truncated [ 48.942436][ T4057] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.963306][ T4058] loop4: p1 < > p4 [ 48.977684][ T3322] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.988135][ T4058] loop4: p4 size 8388608 extends beyond EOD, truncated [ 49.133807][ T4031] syzkaller (4031) used greatest stack depth: 9360 bytes left [ 49.171011][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.242207][ T29] kauditd_printk_skb: 33 callbacks suppressed [ 49.242221][ T29] audit: type=1400 audit(1747298672.636:295): avc: denied { read } for pid=4077 comm="syz.2.219" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 49.279506][ T29] audit: type=1400 audit(1747298672.636:296): avc: denied { open } for pid=4077 comm="syz.2.219" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 49.280851][ T4078] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.329159][ T4078] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.364693][ T4078] loop2: detected capacity change from 0 to 1024 [ 49.400584][ T4078] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.417611][ T4087] __nla_validate_parse: 27 callbacks suppressed [ 49.417630][ T4087] netlink: 52 bytes leftover after parsing attributes in process `syz.3.222'. [ 49.436767][ T4078] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 49.486966][ T29] audit: type=1400 audit(1747298672.876:297): avc: denied { relabelfrom } for pid=4090 comm="syz.0.224" name="" dev="pipefs" ino=6610 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 49.528261][ T29] audit: type=1400 audit(1747298672.906:298): avc: denied { validate_trans } for pid=4090 comm="syz.0.224" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 49.549538][ T29] audit: type=1400 audit(1747298672.936:299): avc: denied { search } for pid=3044 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 49.571185][ T29] audit: type=1400 audit(1747298672.936:300): avc: denied { read } for pid=3044 comm="dhcpcd" name="n25" dev="tmpfs" ino=2088 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 49.593232][ T29] audit: type=1400 audit(1747298672.936:301): avc: denied { open } for pid=3044 comm="dhcpcd" path="/run/udev/data/n25" dev="tmpfs" ino=2088 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 49.616281][ T29] audit: type=1400 audit(1747298672.936:302): avc: denied { getattr } for pid=3044 comm="dhcpcd" path="/run/udev/data/n25" dev="tmpfs" ino=2088 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 49.645872][ T4100] loop3: detected capacity change from 0 to 256 [ 49.653500][ T29] audit: type=1400 audit(1747298672.996:303): avc: denied { read } for pid=4096 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=483 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 49.676508][ T29] audit: type=1400 audit(1747298672.996:304): avc: denied { open } for pid=4096 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=483 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 49.859131][ T4091] wg1 speed is unknown, defaulting to 1000 [ 49.998649][ T4124] netlink: 8 bytes leftover after parsing attributes in process `syz.3.226'. [ 50.060399][ T4128] sd 0:0:1:0: device reset [ 50.078065][ T3326] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.191516][ T4138] netlink: 4 bytes leftover after parsing attributes in process `syz.2.231'. [ 50.200838][ T4138] netlink: 12 bytes leftover after parsing attributes in process `syz.2.231'. [ 50.265377][ T4143] loop2: detected capacity change from 0 to 512 [ 50.275634][ T4143] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 50.299894][ T4143] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.231: invalid indirect mapped block 4294967295 (level 1) [ 50.327559][ T4143] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.231: invalid indirect mapped block 4294967295 (level 1) [ 50.368022][ T4143] EXT4-fs (loop2): 2 truncates cleaned up [ 50.388739][ T4143] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.409118][ T4143] EXT4-fs error (device loop2): ext4_inlinedir_to_tree:1339: inode #12: block 7: comm syz.2.231: path /35/file0/file0: bad entry in directory: rec_len % 4 != 0 - offset=259, inode=4278190093, rec_len=255, size=60 fake=0 [ 50.472547][ T4156] syz.0.233: attempt to access beyond end of device [ 50.472547][ T4156] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 50.510115][ T3326] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.664136][ T4180] netlink: 52 bytes leftover after parsing attributes in process `syz.2.235'. [ 50.804193][ T4195] FAULT_INJECTION: forcing a failure. [ 50.804193][ T4195] name failslab, interval 1, probability 0, space 0, times 0 [ 50.816996][ T4195] CPU: 0 UID: 0 PID: 4195 Comm: syz.2.239 Not tainted 6.15.0-rc6-syzkaller-00085-gc94d59a126cb #0 PREEMPT(voluntary) [ 50.817089][ T4195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 50.817105][ T4195] Call Trace: [ 50.817110][ T4195] [ 50.817117][ T4195] __dump_stack+0x1d/0x30 [ 50.817138][ T4195] dump_stack_lvl+0xe8/0x140 [ 50.817160][ T4195] dump_stack+0x15/0x1b [ 50.817197][ T4195] should_fail_ex+0x265/0x280 [ 50.817265][ T4195] should_failslab+0x8c/0xb0 [ 50.817349][ T4195] kmem_cache_alloc_noprof+0x50/0x310 [ 50.817373][ T4195] ? security_file_alloc+0x32/0x100 [ 50.817406][ T4195] security_file_alloc+0x32/0x100 [ 50.817433][ T4195] init_file+0x5c/0x1d0 [ 50.817481][ T4195] alloc_empty_file+0x8b/0x200 [ 50.817499][ T4195] alloc_file_pseudo+0xc6/0x160 [ 50.817526][ T4195] anon_inode_getfile+0xa0/0x120 [ 50.817593][ T4195] do_epoll_create+0x1d0/0x270 [ 50.817626][ T4195] __x64_sys_epoll_create+0x35/0x60 [ 50.817652][ T4195] x64_sys_call+0x20e/0x2fb0 [ 50.817700][ T4195] do_syscall_64+0xd0/0x1a0 [ 50.817729][ T4195] ? clear_bhb_loop+0x40/0x90 [ 50.817797][ T4195] ? clear_bhb_loop+0x40/0x90 [ 50.817817][ T4195] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.817836][ T4195] RIP: 0033:0x7f64a44de969 [ 50.817855][ T4195] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 50.817876][ T4195] RSP: 002b:00007f64a2b47038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d5 [ 50.817899][ T4195] RAX: ffffffffffffffda RBX: 00007f64a4705fa0 RCX: 00007f64a44de969 [ 50.817915][ T4195] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000000003ff [ 50.817929][ T4195] RBP: 00007f64a2b47090 R08: 0000000000000000 R09: 0000000000000000 [ 50.817944][ T4195] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 50.817959][ T4195] R13: 0000000000000000 R14: 00007f64a4705fa0 R15: 00007ffe69c1c978 [ 50.818046][ T4195] [ 51.026068][ T4156] loop0: detected capacity change from 0 to 8192 [ 51.084227][ T4201] loop4: detected capacity change from 0 to 1024 [ 51.110043][ T4197] netlink: 8 bytes leftover after parsing attributes in process `syz.3.240'. [ 51.161154][ T4202] netlink: 8 bytes leftover after parsing attributes in process `syz.0.233'. [ 51.178898][ T4197] sd 0:0:1:0: device reset [ 51.230640][ T4201] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.384315][ T4212] loop2: detected capacity change from 0 to 2048 [ 51.398907][ T4212] EXT4-fs (loop2): failed to initialize system zone (-117) [ 51.407223][ T4212] EXT4-fs (loop2): mount failed [ 51.484643][ T4219] netlink: 4 bytes leftover after parsing attributes in process `syz.2.247'. [ 51.484899][ T4216] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 51.493623][ T4219] netlink: 4 bytes leftover after parsing attributes in process `syz.2.247'. [ 51.521791][ T4219] netlink: 4 bytes leftover after parsing attributes in process `syz.2.247'. [ 51.710386][ T4226] loop3: detected capacity change from 0 to 164 [ 51.720651][ T4226] isofs_fill_super: bread failed, dev=loop3, iso_blknum=41, block=82 [ 52.049297][ T4241] sd 0:0:1:0: device reset [ 52.096882][ T4248] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 52.258856][ T3325] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.497126][ T4271] IPv6: sit1: Disabled Multicast RS [ 52.920577][ T4304] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.929333][ T4304] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.944307][ T4304] loop1: detected capacity change from 0 to 1024 [ 52.952198][ T4302] loop3: detected capacity change from 0 to 164 [ 52.975183][ T4304] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.999966][ T4302] isofs_fill_super: bread failed, dev=loop3, iso_blknum=41, block=82 [ 53.008885][ T4304] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000. [ 53.040483][ T4310] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 53.091752][ T4318] loop4: detected capacity change from 0 to 1024 [ 53.106938][ T4318] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.285: Failed to acquire dquot type 0 [ 53.119982][ T4318] EXT4-fs error (device loop4): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 53.135192][ T4318] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #13: comm syz.4.285: corrupted inode contents [ 53.149998][ T4318] EXT4-fs error (device loop4): ext4_dirty_inode:6103: inode #13: comm syz.4.285: mark_inode_dirty error [ 53.161787][ T4318] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #13: comm syz.4.285: corrupted inode contents [ 53.189798][ T4318] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #13: comm syz.4.285: mark_inode_dirty error [ 53.201574][ T4318] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #13: comm syz.4.285: corrupted inode contents [ 53.214942][ T4318] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 53.224609][ T4318] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #13: comm syz.4.285: corrupted inode contents [ 53.237927][ T4318] EXT4-fs error (device loop4): ext4_truncate:4255: inode #13: comm syz.4.285: mark_inode_dirty error [ 53.251087][ T4318] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 53.260961][ T4318] EXT4-fs (loop4): 1 truncate cleaned up [ 53.267400][ T4318] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.300975][ T3325] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.356104][ T4324] tipc: Failed to remove unknown binding: 66,1,1/0:3330052461/3330052463 [ 53.815231][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.937867][ T4344] netlink: 'syz.4.297': attribute type 10 has an invalid length. [ 53.938169][ T4343] loop1: detected capacity change from 0 to 2048 [ 53.952586][ T4343] ext4: Unknown parameter 'noacl' [ 53.965075][ T4344] hsr_slave_0: left promiscuous mode [ 53.970827][ T4346] loop0: detected capacity change from 0 to 2048 [ 53.988341][ T4344] hsr_slave_1: left promiscuous mode [ 54.013134][ T4343] loop1: detected capacity change from 0 to 1024 [ 54.024167][ T4343] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 54.035982][ T3513] loop0: p1 < > p4 [ 54.042685][ T4343] EXT4-fs error (device loop1): ext4_ext_check_inode:524: inode #11: comm syz.1.296: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 54.068334][ T3513] loop0: p4 size 8388608 extends beyond EOD, truncated [ 54.075584][ T4343] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.296: couldn't read orphan inode 11 (err -117) [ 54.091022][ T4351] loop2: detected capacity change from 0 to 1024 [ 54.101673][ T4343] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.115361][ T4346] loop0: p1 < > p4 [ 54.121421][ T4346] loop0: p4 size 8388608 extends beyond EOD, truncated [ 54.139726][ T4351] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.158710][ T4343] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.296: Invalid block bitmap block 0 in block_group 0 [ 54.218174][ T4343] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.296: Failed to acquire dquot type 0 [ 54.238412][ T4356] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.296: Invalid inode bitmap blk 137438953472 in block_group 0 [ 54.258484][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 54.269865][ T3513] udevd[3513]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 54.302844][ T3513] udevd[3513]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 54.314155][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 54.335720][ T3513] udevd[3513]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 54.347232][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 54.409350][ T560] EXT4-fs error (device loop1): __ext4_get_inode_loc:4450: comm kworker/u8:5: Invalid inode table block 8589934593 in block_group 0 [ 54.449191][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.571748][ T4373] __nla_validate_parse: 11 callbacks suppressed [ 54.571767][ T4373] netlink: 4 bytes leftover after parsing attributes in process `syz.1.305'. [ 54.598059][ T4379] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 54.627871][ T4382] netlink: 12 bytes leftover after parsing attributes in process `syz.3.309'. [ 54.676259][ T4384] loop1: detected capacity change from 0 to 2048 [ 54.719336][ T3307] loop1: p1 < > p4 [ 54.726150][ T3307] loop1: p4 size 8388608 extends beyond EOD, truncated [ 54.772684][ T4384] loop1: p1 < > p4 [ 54.777413][ T4384] loop1: p4 size 8388608 extends beyond EOD, truncated [ 54.951588][ T4394] loop3: detected capacity change from 0 to 2048 [ 54.989152][ T4394] ext4: Unknown parameter 'noacl' [ 55.073074][ T4394] loop3: detected capacity change from 0 to 1024 [ 55.080944][ T4394] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 55.102003][ T4394] EXT4-fs error (device loop3): ext4_ext_check_inode:524: inode #11: comm syz.3.315: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 55.126600][ T4401] netlink: 8 bytes leftover after parsing attributes in process `syz.1.318'. [ 55.180885][ T4394] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.315: couldn't read orphan inode 11 (err -117) [ 55.196088][ T4394] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.224163][ T4403] sd 0:0:1:0: device reset [ 55.230089][ T4405] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 55.246566][ T4394] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.315: Invalid block bitmap block 0 in block_group 0 [ 55.276756][ T4394] __quota_error: 55 callbacks suppressed [ 55.276848][ T4394] Quota error (device loop3): write_blk: dquota write failed [ 55.290558][ T4394] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 55.342228][ T4408] bond_slave_1: entered promiscuous mode [ 55.348648][ T4408] netlink: 4 bytes leftover after parsing attributes in process `syz.4.320'. [ 55.363318][ T4408] bond0: (slave bond_slave_1): Releasing backup interface [ 55.377921][ T4394] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.315: Failed to acquire dquot type 0 [ 55.391304][ T4408] bond_slave_1 (unregistering): left promiscuous mode [ 55.393471][ T4414] netlink: 12 bytes leftover after parsing attributes in process `syz.1.322'. [ 55.407773][ T4412] EXT4-fs error (device loop3): ext4_read_inode_bitmap:139: comm syz.3.315: Invalid inode bitmap blk 137438953472 in block_group 0 [ 55.535245][ T3422] EXT4-fs error (device loop3): __ext4_get_inode_loc:4450: comm kworker/u8:7: Invalid inode table block 8589934593 in block_group 0 [ 55.549701][ T4422] netlink: 4 bytes leftover after parsing attributes in process `syz.1.326'. [ 55.556011][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.561323][ T4422] netlink: 4 bytes leftover after parsing attributes in process `syz.1.326'. [ 55.601863][ T4422] netlink: 4 bytes leftover after parsing attributes in process `syz.1.326'. [ 55.615702][ T4363] syz.0.303 (4363) used greatest stack depth: 7208 bytes left [ 55.648182][ T4422] netlink: 4 bytes leftover after parsing attributes in process `syz.1.326'. [ 55.657120][ T4422] netlink: 4 bytes leftover after parsing attributes in process `syz.1.326'. [ 55.695214][ T29] audit: type=1400 audit(1747298679.076:356): avc: denied { append } for pid=4428 comm="syz.0.329" name="loop9" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 55.746541][ T4435] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 55.748208][ T3326] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.839813][ T29] audit: type=1400 audit(1747298679.236:357): avc: denied { read write } for pid=4440 comm="syz.0.334" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 55.880913][ T4439] loop4: detected capacity change from 0 to 512 [ 55.889982][ T4439] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 55.935510][ T4439] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.330: invalid indirect mapped block 4294967295 (level 1) [ 55.957706][ T4439] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.330: invalid indirect mapped block 4294967295 (level 1) [ 55.970215][ T29] audit: type=1400 audit(1747298679.236:358): avc: denied { open } for pid=4440 comm="syz.0.334" path="/dev/raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 55.981620][ T4439] EXT4-fs (loop4): 2 truncates cleaned up [ 55.995154][ T29] audit: type=1400 audit(1747298679.266:359): avc: denied { ioctl } for pid=4440 comm="syz.0.334" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 56.025580][ T29] audit: type=1400 audit(1747298679.316:360): avc: denied { allowed } for pid=4450 comm="syz.2.337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 56.050436][ T29] audit: type=1400 audit(1747298679.446:361): avc: denied { create } for pid=4461 comm="syz.3.342" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 56.074748][ T4439] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.075021][ T4463] loop3: detected capacity change from 0 to 512 [ 56.093619][ T29] audit: type=1400 audit(1747298679.466:362): avc: denied { write } for pid=4461 comm="syz.3.342" name="file0" dev="tmpfs" ino=444 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 56.098417][ T4439] EXT4-fs error (device loop4): ext4_inlinedir_to_tree:1339: inode #12: block 7: comm syz.4.330: path /73/file0/file0: bad entry in directory: rec_len % 4 != 0 - offset=259, inode=4278190093, rec_len=255, size=60 fake=0 [ 56.115980][ T29] audit: type=1400 audit(1747298679.466:363): avc: denied { open } for pid=4461 comm="syz.3.342" path="/79/file0" dev="tmpfs" ino=444 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 56.160587][ T4463] EXT4-fs: Ignoring removed orlov option [ 56.178115][ T4463] EXT4-fs error (device loop3): ext4_map_blocks:675: inode #2: block 3: comm syz.3.342: lblock 0 mapped to illegal pblock 3 (length 1) [ 56.204353][ T4463] EXT4-fs warning (device loop3): dx_probe:793: inode #2: lblock 0: comm syz.3.342: error -117 reading directory block [ 56.217661][ T4468] loop1: detected capacity change from 0 to 512 [ 56.224888][ T4468] EXT4-fs: Ignoring removed orlov option [ 56.252100][ T4468] EXT4-fs error (device loop1): ext4_map_blocks:675: inode #2: block 3: comm syz.1.341: lblock 0 mapped to illegal pblock 3 (length 1) [ 56.256183][ T4473] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 56.275171][ T4463] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 56.283657][ T4468] EXT4-fs warning (device loop1): dx_probe:793: inode #2: lblock 0: comm syz.1.341: error -117 reading directory block [ 56.299700][ T4463] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.302398][ T4468] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 56.316354][ T4463] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.342842][ T4463] netlink: 'syz.3.342': attribute type 10 has an invalid length. [ 56.354053][ T4463] hsr_slave_0: left promiscuous mode [ 56.363934][ T4463] hsr_slave_1: left promiscuous mode [ 56.580303][ T4487] wg1 speed is unknown, defaulting to 1000 [ 56.590103][ T4498] loop0: detected capacity change from 0 to 2048 [ 56.597061][ T4498] ext4: Unknown parameter 'noacl' [ 56.658798][ T4506] loop4: detected capacity change from 0 to 512 [ 56.674824][ T4506] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 56.691210][ T4506] EXT4-fs error (device loop4): ext4_get_branch:178: inode #11: block 4294967295: comm syz.4.356: invalid block [ 56.704094][ T4506] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.356: invalid indirect mapped block 4294967295 (level 1) [ 56.726552][ T4506] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.356: invalid indirect mapped block 4294967295 (level 1) [ 56.742299][ T4505] wg1 speed is unknown, defaulting to 1000 [ 56.754922][ T4498] loop0: detected capacity change from 0 to 1024 [ 56.763649][ T4506] EXT4-fs (loop4): 2 truncates cleaned up [ 56.763734][ T4498] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 56.782225][ T4497] EXT4-fs error (device loop4): ext4_inlinedir_to_tree:1339: inode #12: block 7: comm syz.4.356: path /76/file0/file0: bad entry in directory: rec_len % 4 != 0 - offset=259, inode=4278190093, rec_len=255, size=60 fake=0 [ 56.784331][ T4498] EXT4-fs error (device loop0): ext4_ext_check_inode:524: inode #11: comm syz.0.355: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 56.870120][ T4512] netlink: 'syz.4.360': attribute type 10 has an invalid length. [ 56.878511][ T4498] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.355: couldn't read orphan inode 11 (err -117) [ 56.972317][ T4516] wg1 speed is unknown, defaulting to 1000 [ 56.984283][ T4498] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.355: Invalid block bitmap block 0 in block_group 0 [ 57.022903][ T4498] EXT4-fs error (device loop0): ext4_acquire_dquot:6935: comm syz.0.355: Failed to acquire dquot type 0 [ 57.062981][ T4523] loop2: detected capacity change from 0 to 512 [ 57.075486][ T4523] EXT4-fs: Ignoring removed orlov option [ 57.087550][ T4523] EXT4-fs error (device loop2): ext4_map_blocks:675: inode #2: block 3: comm syz.2.365: lblock 0 mapped to illegal pblock 3 (length 1) [ 57.108382][ T4523] EXT4-fs warning (device loop2): dx_probe:793: inode #2: lblock 0: comm syz.2.365: error -117 reading directory block [ 57.139038][ T4523] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 57.159213][ T4523] netlink: 'syz.2.365': attribute type 10 has an invalid length. [ 57.179322][ T54] EXT4-fs error (device loop0): __ext4_get_inode_loc:4450: comm kworker/u8:4: Invalid inode table block 8589934593 in block_group 0 [ 57.200986][ T4523] hsr_slave_0: left promiscuous mode [ 57.207662][ T4523] hsr_slave_1: left promiscuous mode [ 57.216291][ T4531] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.225180][ T4531] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.243072][ T4531] loop3: detected capacity change from 0 to 1024 [ 57.307663][ T4531] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000. [ 57.369259][ T4540] loop4: detected capacity change from 0 to 2048 [ 57.385935][ T4546] loop0: detected capacity change from 0 to 512 [ 57.407731][ T4546] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 57.419575][ T3307] loop4: p1 < > p4 [ 57.423964][ T3307] loop4: p4 size 8388608 extends beyond EOD, truncated [ 57.448560][ T4540] loop4: p1 < > p4 [ 57.470826][ T4540] loop4: p4 size 8388608 extends beyond EOD, truncated [ 57.484393][ T4546] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.371: invalid indirect mapped block 4294967295 (level 1) [ 57.503272][ T4546] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.371: invalid indirect mapped block 4294967295 (level 1) [ 57.555783][ T4546] EXT4-fs (loop0): 2 truncates cleaned up [ 57.569077][ T4541] EXT4-fs error (device loop0): ext4_inlinedir_to_tree:1339: inode #12: block 7: comm syz.0.371: path /60/file0/file0: bad entry in directory: rec_len % 4 != 0 - offset=259, inode=4278190093, rec_len=255, size=60 fake=0 [ 57.596174][ T4561] loop4: detected capacity change from 0 to 1024 [ 57.599995][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 57.604796][ T4556] sd 0:0:1:0: device reset [ 57.615010][ T3513] udevd[3513]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 57.641382][ T4561] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.380: Failed to acquire dquot type 0 [ 57.660196][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 57.667274][ T3513] udevd[3513]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 57.678788][ T4561] EXT4-fs error (device loop4): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 57.696321][ T4561] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #13: comm syz.4.380: corrupted inode contents [ 57.712202][ T4561] EXT4-fs error (device loop4): ext4_dirty_inode:6103: inode #13: comm syz.4.380: mark_inode_dirty error [ 57.733683][ T4561] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #13: comm syz.4.380: corrupted inode contents [ 57.751109][ T4561] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #13: comm syz.4.380: mark_inode_dirty error [ 57.775578][ T4566] loop0: detected capacity change from 0 to 2048 [ 57.775903][ T4564] loop2: detected capacity change from 0 to 512 [ 57.785230][ T4566] ext4: Unknown parameter 'noacl' [ 57.795793][ T4564] EXT4-fs: Ignoring removed orlov option [ 57.828410][ T4561] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #13: comm syz.4.380: corrupted inode contents [ 57.842302][ T4564] EXT4-fs error (device loop2): ext4_map_blocks:675: inode #2: block 3: comm syz.2.382: lblock 0 mapped to illegal pblock 3 (length 1) [ 57.857423][ T4564] EXT4-fs warning (device loop2): dx_probe:793: inode #2: lblock 0: comm syz.2.382: error -117 reading directory block [ 57.872649][ T4566] loop0: detected capacity change from 0 to 1024 [ 57.872958][ T4561] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 57.881401][ T4564] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 57.889019][ T4561] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #13: comm syz.4.380: corrupted inode contents [ 57.909743][ T4566] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 57.910263][ T4561] EXT4-fs error (device loop4): ext4_truncate:4255: inode #13: comm syz.4.380: mark_inode_dirty error [ 57.928648][ T4566] EXT4-fs error (device loop0): ext4_ext_check_inode:524: inode #11: comm syz.0.381: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 57.932872][ T4561] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 57.950135][ T4566] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.381: couldn't read orphan inode 11 (err -117) [ 57.989776][ T4561] EXT4-fs (loop4): 1 truncate cleaned up [ 57.992980][ T4566] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.381: Invalid block bitmap block 0 in block_group 0 [ 58.017645][ T4566] EXT4-fs error (device loop0): ext4_acquire_dquot:6935: comm syz.0.381: Failed to acquire dquot type 0 [ 58.173481][ T4582] netlink: 'syz.4.385': attribute type 10 has an invalid length. [ 58.265894][ T4585] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.400865][ T4589] loop2: detected capacity change from 0 to 1024 [ 58.412082][ T4585] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.460889][ T4591] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.496754][ T4593] netlink: 'syz.4.394': attribute type 1 has an invalid length. [ 58.504960][ T4591] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.551109][ T4591] loop1: detected capacity change from 0 to 1024 [ 58.651596][ T4585] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.659619][ T4589] EXT4-fs error (device loop2): ext4_acquire_dquot:6935: comm syz.2.390: Failed to acquire dquot type 0 [ 58.674250][ T4591] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000. [ 58.684257][ T4589] EXT4-fs error (device loop2): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 58.707927][ T4589] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #13: comm syz.2.390: corrupted inode contents [ 58.720231][ T4589] EXT4-fs error (device loop2): ext4_dirty_inode:6103: inode #13: comm syz.2.390: mark_inode_dirty error [ 58.732499][ T4589] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #13: comm syz.2.390: corrupted inode contents [ 58.750437][ T4589] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #13: comm syz.2.390: mark_inode_dirty error [ 58.762761][ T4585] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.777139][ T4589] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #13: comm syz.2.390: corrupted inode contents [ 58.791058][ T4589] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 58.800144][ T4589] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #13: comm syz.2.390: corrupted inode contents [ 58.819474][ T4585] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.831382][ T4585] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.840290][ T4605] loop0: detected capacity change from 0 to 512 [ 58.843856][ T4585] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.858255][ T4585] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.867353][ T4605] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 58.877335][ T4589] EXT4-fs error (device loop2): ext4_truncate:4255: inode #13: comm syz.2.390: mark_inode_dirty error [ 58.891019][ T4589] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 58.900978][ T4589] EXT4-fs (loop2): 1 truncate cleaned up [ 58.937421][ T4605] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.392: invalid indirect mapped block 4294967295 (level 1) [ 58.989556][ T4605] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.392: invalid indirect mapped block 4294967295 (level 1) [ 59.012711][ T4614] loop3: detected capacity change from 0 to 2048 [ 59.024078][ T4605] EXT4-fs (loop0): 2 truncates cleaned up [ 59.032412][ T4614] EXT4-fs (loop3): failed to initialize system zone (-117) [ 59.033696][ T4600] EXT4-fs error (device loop0): ext4_inlinedir_to_tree:1339: inode #12: block 7: comm syz.0.392: path /62/file0/file0: bad entry in directory: rec_len % 4 != 0 - offset=259, inode=4278190093, rec_len=255, size=60 fake=0 [ 59.068397][ T4614] EXT4-fs (loop3): mount failed [ 59.109911][ T4624] loop2: detected capacity change from 0 to 2048 [ 59.116840][ T4624] ext4: Unknown parameter 'noacl' [ 59.207368][ T4624] loop2: detected capacity change from 0 to 1024 [ 59.227290][ T4624] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 59.249736][ T4624] EXT4-fs error (device loop2): ext4_ext_check_inode:524: inode #11: comm syz.2.403: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 59.269783][ T4624] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.403: couldn't read orphan inode 11 (err -117) [ 59.310041][ T4628] sd 0:0:1:0: device reset [ 59.451102][ T4644] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 59.494604][ T4650] loop3: detected capacity change from 0 to 2048 [ 59.515850][ T4652] loop2: detected capacity change from 0 to 512 [ 59.531604][ T4652] EXT4-fs: Ignoring removed orlov option [ 59.541017][ T4653] loop1: detected capacity change from 0 to 512 [ 59.549473][ T4653] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 59.559050][ T4652] EXT4-fs error (device loop2): ext4_map_blocks:675: inode #2: block 3: comm syz.2.414: lblock 0 mapped to illegal pblock 3 (length 1) [ 59.573231][ T3307] loop3: p1 < > p4 [ 59.580543][ T3307] loop3: p4 size 8388608 extends beyond EOD, truncated [ 59.583924][ T4653] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.415: invalid indirect mapped block 4294967295 (level 1) [ 59.590695][ T4626] wg1 speed is unknown, defaulting to 1000 [ 59.635241][ T4652] EXT4-fs warning (device loop2): dx_probe:793: inode #2: lblock 0: comm syz.2.414: error -117 reading directory block [ 59.649556][ T4653] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.415: invalid indirect mapped block 4294967295 (level 1) [ 59.664230][ T4652] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 59.674664][ T4653] EXT4-fs (loop1): 2 truncates cleaned up [ 59.702850][ T4653] EXT4-fs error (device loop1): ext4_inlinedir_to_tree:1339: inode #12: block 7: comm syz.1.415: path /81/file0/file0: bad entry in directory: rec_len % 4 != 0 - offset=259, inode=4278190093, rec_len=255, size=60 fake=0 [ 59.757425][ T4653] EXT4-fs error (device loop1): ext4_inlinedir_to_tree:1339: inode #12: block 7: comm syz.1.415: path /81/file0/file0: bad entry in directory: rec_len % 4 != 0 - offset=259, inode=4278190093, rec_len=255, size=60 fake=0 [ 59.831581][ T4650] loop3: p1 < > p4 [ 59.851802][ T4650] loop3: p4 size 8388608 extends beyond EOD, truncated [ 59.977555][ T3513] udevd[3513]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 60.018871][ T4668] loop1: detected capacity change from 0 to 2048 [ 60.038615][ T4668] ext4: Unknown parameter 'noacl' [ 60.266862][ T4661] wg1 speed is unknown, defaulting to 1000 [ 60.337166][ T4672] wg1 speed is unknown, defaulting to 1000 [ 60.363838][ T4686] __nla_validate_parse: 30 callbacks suppressed [ 60.363856][ T4686] netlink: 8 bytes leftover after parsing attributes in process `syz.1.428'. [ 60.448985][ T4687] sd 0:0:1:0: device reset [ 60.518585][ T4695] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 60.756695][ T4709] loop1: detected capacity change from 0 to 2048 [ 60.764019][ T4709] ext4: Unknown parameter 'noacl' [ 61.186969][ T4710] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.209841][ T4715] netlink: 4 bytes leftover after parsing attributes in process `syz.2.439'. [ 61.226009][ T4715] netlink: 12 bytes leftover after parsing attributes in process `syz.2.439'. [ 61.251099][ T4710] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.277559][ T29] kauditd_printk_skb: 27 callbacks suppressed [ 61.277638][ T29] audit: type=1400 audit(1747298684.666:383): avc: denied { mount } for pid=4718 comm="syz.1.441" name="/" dev="configfs" ino=981 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 61.328806][ T4710] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.340895][ T4722] loop2: detected capacity change from 0 to 512 [ 61.349369][ T29] audit: type=1400 audit(1747298684.706:384): avc: denied { search } for pid=4718 comm="syz.1.441" name="/" dev="configfs" ino=981 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 61.357917][ T4722] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 61.371476][ T29] audit: type=1400 audit(1747298684.706:385): avc: denied { read } for pid=4718 comm="syz.1.441" name="/" dev="configfs" ino=981 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 61.401688][ T29] audit: type=1400 audit(1747298684.706:386): avc: denied { open } for pid=4718 comm="syz.1.441" path="/" dev="configfs" ino=981 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 61.418312][ T4722] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.439: invalid indirect mapped block 4294967295 (level 1) [ 61.433667][ T4719] loop1: detected capacity change from 0 to 2048 [ 61.444218][ T4722] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.439: invalid indirect mapped block 4294967295 (level 1) [ 61.461387][ T4722] EXT4-fs (loop2): 2 truncates cleaned up [ 61.471609][ T4715] EXT4-fs error (device loop2): ext4_inlinedir_to_tree:1339: inode #12: block 7: comm syz.2.439: path /90/file0/file0: bad entry in directory: rec_len % 4 != 0 - offset=259, inode=4278190093, rec_len=255, size=60 fake=0 [ 61.498084][ T4710] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.514675][ T4726] netlink: 8 bytes leftover after parsing attributes in process `syz.3.443'. [ 61.583868][ T4727] sd 0:0:1:0: device reset [ 61.649020][ T4710] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.661072][ T4710] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.673067][ T4710] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.685103][ T4710] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.748478][ T29] audit: type=1326 audit(1747298685.146:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4734 comm="syz.0.446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7af89de969 code=0x7ffc0000 [ 61.760547][ T4731] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 61.774632][ T29] audit: type=1326 audit(1747298685.166:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4734 comm="syz.0.446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7af89de969 code=0x7ffc0000 [ 61.802923][ T29] audit: type=1326 audit(1747298685.166:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4734 comm="syz.0.446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7af89de969 code=0x7ffc0000 [ 61.826465][ T29] audit: type=1326 audit(1747298685.166:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4734 comm="syz.0.446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7af89de969 code=0x7ffc0000 [ 61.849993][ T29] audit: type=1326 audit(1747298685.166:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4734 comm="syz.0.446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7af89de969 code=0x7ffc0000 [ 61.876479][ T29] audit: type=1326 audit(1747298685.166:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4734 comm="syz.0.446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7af89de969 code=0x7ffc0000 [ 62.035128][ T4737] netlink: 4 bytes leftover after parsing attributes in process `syz.3.447'. [ 62.093837][ T4745] netlink: 12 bytes leftover after parsing attributes in process `syz.3.447'. [ 62.135849][ T4737] loop3: detected capacity change from 0 to 512 [ 62.263105][ T4737] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 62.295309][ T4744] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.418113][ T4737] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.447: invalid indirect mapped block 4294967295 (level 1) [ 62.438280][ T4744] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.472580][ T4737] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.447: invalid indirect mapped block 4294967295 (level 1) [ 62.489410][ T4737] EXT4-fs (loop3): 2 truncates cleaned up [ 62.497357][ T4737] EXT4-fs error (device loop3): ext4_inlinedir_to_tree:1339: inode #12: block 7: comm syz.3.447: path /99/file0/file0: bad entry in directory: rec_len % 4 != 0 - offset=259, inode=4278190093, rec_len=255, size=60 fake=0 [ 62.523422][ T4737] EXT4-fs error (device loop3): ext4_inlinedir_to_tree:1339: inode #12: block 7: comm syz.3.447: path /99/file0/file0: bad entry in directory: rec_len % 4 != 0 - offset=259, inode=4278190093, rec_len=255, size=60 fake=0 [ 62.550265][ T4744] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.604763][ T4758] netlink: 12 bytes leftover after parsing attributes in process `syz.0.454'. [ 62.640947][ T4744] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.704420][ T4744] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.709577][ T4764] loop3: detected capacity change from 0 to 1024 [ 62.716404][ T4744] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.730932][ T4744] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.743394][ T4744] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.791999][ T4764] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.457: Failed to acquire dquot type 0 [ 62.814747][ T4770] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.829728][ T4764] EXT4-fs error (device loop3): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 62.845004][ T4770] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.848132][ T4773] loop1: detected capacity change from 0 to 2048 [ 62.859384][ T4764] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #13: comm syz.3.457: corrupted inode contents [ 62.872124][ T4770] loop0: detected capacity change from 0 to 1024 [ 62.893215][ T4764] EXT4-fs error (device loop3): ext4_dirty_inode:6103: inode #13: comm syz.3.457: mark_inode_dirty error [ 62.905555][ T4770] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000. [ 62.919629][ T4773] loop1: p1 < > p4 [ 62.927704][ T4764] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #13: comm syz.3.457: corrupted inode contents [ 62.939872][ T4773] loop1: p4 size 8388608 extends beyond EOD, truncated [ 62.947211][ T4764] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #13: comm syz.3.457: mark_inode_dirty error [ 62.963691][ T3005] loop1: p1 < > p4 [ 62.968418][ T4764] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #13: comm syz.3.457: corrupted inode contents [ 62.988011][ T3005] loop1: p4 size 8388608 extends beyond EOD, truncated [ 62.995763][ T4764] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 63.016021][ T4764] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #13: comm syz.3.457: corrupted inode contents [ 63.048121][ T4764] EXT4-fs error (device loop3): ext4_truncate:4255: inode #13: comm syz.3.457: mark_inode_dirty error [ 63.061710][ T4764] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 63.066497][ T4783] loop2: detected capacity change from 0 to 1024 [ 63.071682][ T4764] EXT4-fs (loop3): 1 truncate cleaned up [ 63.098357][ T4783] EXT4-fs error (device loop2): ext4_acquire_dquot:6935: comm syz.2.465: Failed to acquire dquot type 0 [ 63.144251][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 63.169979][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 63.190416][ T4786] FAULT_INJECTION: forcing a failure. [ 63.190416][ T4786] name failslab, interval 1, probability 0, space 0, times 0 [ 63.203309][ T4786] CPU: 1 UID: 0 PID: 4786 Comm: syz.4.466 Not tainted 6.15.0-rc6-syzkaller-00085-gc94d59a126cb #0 PREEMPT(voluntary) [ 63.203344][ T4786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 63.203360][ T4786] Call Trace: [ 63.203368][ T4786] [ 63.203378][ T4786] __dump_stack+0x1d/0x30 [ 63.203498][ T4786] dump_stack_lvl+0xe8/0x140 [ 63.203520][ T4786] dump_stack+0x15/0x1b [ 63.203554][ T4786] should_fail_ex+0x265/0x280 [ 63.203639][ T4786] should_failslab+0x8c/0xb0 [ 63.203678][ T4786] __kmalloc_noprof+0xa5/0x3e0 [ 63.203776][ T4786] ? usb_hcd_submit_urb+0x5d3/0x1200 [ 63.203812][ T4786] usb_hcd_submit_urb+0x5d3/0x1200 [ 63.203854][ T4786] ? proc_do_submiturb+0x154c/0x1db0 [ 63.203898][ T4786] usb_submit_urb+0xab5/0xbb0 [ 63.203936][ T4786] ? _raw_spin_unlock_irqrestore+0x2b/0x60 [ 63.203978][ T4786] proc_do_submiturb+0x1a58/0x1db0 [ 63.204020][ T4786] proc_submiturb+0x7b/0xa0 [ 63.204068][ T4786] usbdev_ioctl+0xcc2/0x1710 [ 63.204121][ T4786] ? __pfx_usbdev_ioctl+0x10/0x10 [ 63.204153][ T4786] __se_sys_ioctl+0xcb/0x140 [ 63.204181][ T4786] __x64_sys_ioctl+0x43/0x50 [ 63.204208][ T4786] x64_sys_call+0x19a8/0x2fb0 [ 63.204259][ T4786] do_syscall_64+0xd0/0x1a0 [ 63.204288][ T4786] ? clear_bhb_loop+0x40/0x90 [ 63.204317][ T4786] ? clear_bhb_loop+0x40/0x90 [ 63.204405][ T4786] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.204430][ T4786] RIP: 0033:0x7f4cbe78e969 [ 63.204444][ T4786] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 63.204461][ T4786] RSP: 002b:00007f4cbcdf7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 63.204494][ T4786] RAX: ffffffffffffffda RBX: 00007f4cbe9b5fa0 RCX: 00007f4cbe78e969 [ 63.204509][ T4786] RDX: 0000200000000140 RSI: 000000008038550a RDI: 0000000000000007 [ 63.204525][ T4786] RBP: 00007f4cbcdf7090 R08: 0000000000000000 R09: 0000000000000000 [ 63.204547][ T4786] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 63.204558][ T4786] R13: 0000000000000000 R14: 00007f4cbe9b5fa0 R15: 00007ffd4e679fb8 [ 63.204576][ T4786] [ 63.209229][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 63.250873][ T3510] udevd[3510]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 63.279524][ T4783] EXT4-fs error (device loop2): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 63.459016][ T4783] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #13: comm syz.2.465: corrupted inode contents [ 63.472759][ T4783] EXT4-fs error (device loop2): ext4_dirty_inode:6103: inode #13: comm syz.2.465: mark_inode_dirty error [ 63.485025][ T4783] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #13: comm syz.2.465: corrupted inode contents [ 63.499596][ T4783] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #13: comm syz.2.465: mark_inode_dirty error [ 63.529251][ T4783] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #13: comm syz.2.465: corrupted inode contents [ 63.548426][ T4783] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 63.575818][ T4783] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #13: comm syz.2.465: corrupted inode contents [ 63.589332][ T4799] netlink: 8 bytes leftover after parsing attributes in process `syz.3.472'. [ 63.600857][ T4783] EXT4-fs error (device loop2): ext4_truncate:4255: inode #13: comm syz.2.465: mark_inode_dirty error [ 63.648586][ T4783] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 63.659537][ T4805] wg1 speed is unknown, defaulting to 1000 [ 63.678275][ T4783] EXT4-fs (loop2): 1 truncate cleaned up [ 63.838194][ T4799] wg1 speed is unknown, defaulting to 1000 [ 63.904337][ T4817] loop1: detected capacity change from 0 to 2048 [ 63.929530][ T4817] ext4: Unknown parameter 'noacl' [ 64.041389][ T4824] loop4: detected capacity change from 0 to 512 [ 64.056218][ T4824] EXT4-fs: Ignoring removed orlov option [ 64.081701][ T4824] EXT4-fs error (device loop4): ext4_map_blocks:675: inode #2: block 3: comm syz.4.481: lblock 0 mapped to illegal pblock 3 (length 1) [ 64.100303][ T4824] EXT4-fs warning (device loop4): dx_probe:793: inode #2: lblock 0: comm syz.4.481: error -117 reading directory block [ 64.113290][ T4824] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 64.169265][ T4830] netlink: 'syz.2.483': attribute type 13 has an invalid length. [ 64.177176][ T4830] netlink: 24859 bytes leftover after parsing attributes in process `syz.2.483'. [ 64.204531][ T4832] netlink: 4 bytes leftover after parsing attributes in process `syz.0.485'. [ 64.274757][ T4839] loop0: detected capacity change from 0 to 512 [ 64.286170][ T4838] loop4: detected capacity change from 0 to 2048 [ 64.294926][ T4839] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 64.306669][ T4839] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.485: invalid indirect mapped block 4294967295 (level 1) [ 64.330929][ T4839] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.485: invalid indirect mapped block 4294967295 (level 1) [ 64.379831][ T4793] loop4: p1 < > p4 [ 64.384500][ T4793] loop4: p4 size 8388608 extends beyond EOD, truncated [ 64.395958][ T4839] EXT4-fs (loop0): 2 truncates cleaned up [ 64.402587][ T4838] loop4: p1 < > p4 [ 64.416943][ T4838] loop4: p4 size 8388608 extends beyond EOD, truncated [ 64.455159][ T4832] EXT4-fs error (device loop0): ext4_inlinedir_to_tree:1339: inode #12: block 7: comm syz.0.485: path /85/file0/file0: bad entry in directory: rec_len % 4 != 0 - offset=259, inode=4278190093, rec_len=255, size=60 fake=0 [ 64.506773][ T4793] udevd[4793]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 64.519060][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 64.547040][ T4793] udevd[4793]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 64.559491][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 64.678842][ T4862] netlink: 'syz.4.496': attribute type 13 has an invalid length. [ 64.687841][ T4864] FAULT_INJECTION: forcing a failure. [ 64.687841][ T4864] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 64.701145][ T4864] CPU: 1 UID: 0 PID: 4864 Comm: syz.2.494 Not tainted 6.15.0-rc6-syzkaller-00085-gc94d59a126cb #0 PREEMPT(voluntary) [ 64.701181][ T4864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 64.701197][ T4864] Call Trace: [ 64.701232][ T4864] [ 64.701240][ T4864] __dump_stack+0x1d/0x30 [ 64.701317][ T4864] dump_stack_lvl+0xe8/0x140 [ 64.701342][ T4864] dump_stack+0x15/0x1b [ 64.701364][ T4864] should_fail_ex+0x265/0x280 [ 64.701406][ T4864] should_fail+0xb/0x20 [ 64.701555][ T4864] should_fail_usercopy+0x1a/0x20 [ 64.701581][ T4864] _copy_from_user+0x1c/0xb0 [ 64.701610][ T4864] __se_sys_futex_waitv+0x150/0x360 [ 64.701647][ T4864] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 64.701700][ T4864] __x64_sys_futex_waitv+0x67/0x80 [ 64.701733][ T4864] x64_sys_call+0x2b1a/0x2fb0 [ 64.701760][ T4864] do_syscall_64+0xd0/0x1a0 [ 64.701863][ T4864] ? clear_bhb_loop+0x40/0x90 [ 64.701889][ T4864] ? clear_bhb_loop+0x40/0x90 [ 64.701930][ T4864] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.701962][ T4864] RIP: 0033:0x7f64a44de969 [ 64.701981][ T4864] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 64.701999][ T4864] RSP: 002b:00007f64a2b26038 EFLAGS: 00000246 ORIG_RAX: 00000000000001c1 [ 64.702022][ T4864] RAX: ffffffffffffffda RBX: 00007f64a4706080 RCX: 00007f64a44de969 [ 64.702038][ T4864] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000740 [ 64.702053][ T4864] RBP: 00007f64a2b26090 R08: 0000000000000001 R09: 0000000000000000 [ 64.702068][ T4864] R10: 00002000000008c0 R11: 0000000000000246 R12: 0000000000000001 [ 64.702083][ T4864] R13: 0000000000000000 R14: 00007f64a4706080 R15: 00007ffe69c1c978 [ 64.702166][ T4864] [ 65.137169][ T4879] loop0: detected capacity change from 0 to 2048 [ 65.179509][ T4879] loop0: p1 < > p4 [ 65.195455][ T4879] loop0: p4 size 8388608 extends beyond EOD, truncated [ 65.368212][ T4898] __nla_validate_parse: 13 callbacks suppressed [ 65.368230][ T4898] netlink: 12 bytes leftover after parsing attributes in process `syz.1.507'. [ 65.390432][ T4898] loop1: detected capacity change from 0 to 512 [ 65.408238][ T4898] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 65.423287][ T4898] EXT4-fs error (device loop1): ext4_get_branch:178: inode #11: block 4294967295: comm syz.1.507: invalid block [ 65.437162][ T4898] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.507: invalid indirect mapped block 4294967295 (level 1) [ 65.460077][ T4903] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 65.460556][ T4898] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.507: invalid indirect mapped block 4294967295 (level 1) [ 65.503245][ T4898] EXT4-fs (loop1): 2 truncates cleaned up [ 65.512657][ T4898] EXT4-fs error (device loop1): ext4_inlinedir_to_tree:1339: inode #12: block 7: comm syz.1.507: path /97/file0/file0: bad entry in directory: rec_len % 4 != 0 - offset=259, inode=4278190093, rec_len=255, size=60 fake=0 [ 65.575093][ T4907] wg1 speed is unknown, defaulting to 1000 [ 65.594177][ T4898] EXT4-fs error (device loop1): ext4_inlinedir_to_tree:1339: inode #12: block 7: comm syz.1.507: path /97/file0/file0: bad entry in directory: rec_len % 4 != 0 - offset=259, inode=4278190093, rec_len=255, size=60 fake=0 [ 65.775830][ T4922] loop1: detected capacity change from 0 to 2048 [ 65.798319][ T3307] loop1: p1 < > p4 [ 65.802974][ T3307] loop1: p4 size 8388608 extends beyond EOD, truncated [ 65.812607][ T4922] loop1: p1 < > p4 [ 65.817640][ T4922] loop1: p4 size 8388608 extends beyond EOD, truncated [ 65.843057][ T4925] loop4: detected capacity change from 0 to 512 [ 65.885743][ T4925] EXT4-fs: Ignoring removed orlov option [ 65.894937][ T4925] EXT4-fs error (device loop4): ext4_map_blocks:675: inode #2: block 3: comm syz.4.517: lblock 0 mapped to illegal pblock 3 (length 1) [ 65.911286][ T4925] EXT4-fs warning (device loop4): dx_probe:793: inode #2: lblock 0: comm syz.4.517: error -117 reading directory block [ 65.924464][ T4925] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 65.936708][ T4925] netlink: 'syz.4.517': attribute type 10 has an invalid length. [ 66.051292][ T4939] loop2: detected capacity change from 0 to 2048 [ 66.065090][ T4939] ext4: Unknown parameter 'noacl' [ 66.094901][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 66.110222][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 66.124945][ T4946] netlink: 4 bytes leftover after parsing attributes in process `syz.4.523'. [ 66.136938][ T4946] netlink: 12 bytes leftover after parsing attributes in process `syz.4.523'. [ 66.162538][ T4944] netlink: 8 bytes leftover after parsing attributes in process `syz.1.522'. [ 66.195625][ T3513] udevd[3513]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 66.198379][ T4946] loop4: detected capacity change from 0 to 512 [ 66.207330][ T4793] udevd[4793]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 66.246609][ T3513] udevd[3513]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 66.249770][ T4947] wg1 speed is unknown, defaulting to 1000 [ 66.263271][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 66.284522][ T4946] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 66.322279][ T4946] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.523: invalid indirect mapped block 4294967295 (level 1) [ 66.341098][ T4946] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.523: invalid indirect mapped block 4294967295 (level 1) [ 66.391114][ T4946] EXT4-fs (loop4): 2 truncates cleaned up [ 66.412795][ T4946] EXT4-fs error (device loop4): ext4_inlinedir_to_tree:1339: inode #12: block 7: comm syz.4.523: path /112/file0/file0: bad entry in directory: rec_len % 4 != 0 - offset=259, inode=4278190093, rec_len=255, size=60 fake=0 [ 66.436590][ T4946] EXT4-fs error (device loop4): ext4_inlinedir_to_tree:1339: inode #12: block 7: comm syz.4.523: path /112/file0/file0: bad entry in directory: rec_len % 4 != 0 - offset=259, inode=4278190093, rec_len=255, size=60 fake=0 [ 66.449837][ T4957] loop2: detected capacity change from 0 to 2048 [ 66.470776][ T4957] ext4: Unknown parameter 'noacl' [ 66.591054][ T4971] loop1: detected capacity change from 0 to 256 [ 66.617679][ T29] kauditd_printk_skb: 110 callbacks suppressed [ 66.617694][ T29] audit: type=1400 audit(1747298690.006:499): avc: denied { write } for pid=4968 comm="syz.4.532" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 66.698351][ T4972] loop0: detected capacity change from 0 to 2048 [ 66.720631][ T4969] loop4: detected capacity change from 0 to 512 [ 66.729633][ T4969] EXT4-fs: Ignoring removed nomblk_io_submit option [ 66.739240][ T4972] EXT4-fs (loop0): failed to initialize system zone (-117) [ 66.747222][ T4972] EXT4-fs (loop0): mount failed [ 66.766675][ T4969] ext4 filesystem being mounted at /113/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 66.814860][ T4990] loop3: detected capacity change from 0 to 1024 [ 66.829813][ T4987] loop2: detected capacity change from 0 to 256 [ 66.845767][ T4990] Quota error (device loop3): do_check_range: Getting block 64 out of range 1-5 [ 66.855847][ T4990] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 66.865438][ T4990] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.535: Failed to acquire dquot type 0 [ 66.877033][ T29] audit: type=1400 audit(1747298690.236:500): avc: denied { read write } for pid=4968 comm="syz.4.532" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 66.899878][ T29] audit: type=1400 audit(1747298690.236:501): avc: denied { open } for pid=4968 comm="syz.4.532" path="/113/bus/file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 66.924455][ T4990] EXT4-fs error (device loop3): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 66.982054][ T4990] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #13: comm syz.3.535: corrupted inode contents [ 67.005919][ T4990] EXT4-fs error (device loop3): ext4_dirty_inode:6103: inode #13: comm syz.3.535: mark_inode_dirty error [ 67.043856][ T4996] netlink: 8 bytes leftover after parsing attributes in process `syz.2.540'. [ 67.059529][ T4990] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #13: comm syz.3.535: corrupted inode contents [ 67.087720][ T4998] loop4: detected capacity change from 0 to 2048 [ 67.095581][ T4990] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #13: comm syz.3.535: mark_inode_dirty error [ 67.110030][ T4990] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #13: comm syz.3.535: corrupted inode contents [ 67.123035][ T4998] ext4: Unknown parameter 'noacl' [ 67.153442][ T4990] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 67.187193][ T4990] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #13: comm syz.3.535: corrupted inode contents [ 67.205463][ T4990] EXT4-fs error (device loop3): ext4_truncate:4255: inode #13: comm syz.3.535: mark_inode_dirty error [ 67.220119][ T4990] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 67.229809][ T4990] EXT4-fs (loop3): 1 truncate cleaned up [ 67.294454][ T5003] netlink: 4 bytes leftover after parsing attributes in process `syz.3.543'. [ 67.323016][ T5003] netlink: 12 bytes leftover after parsing attributes in process `syz.3.543'. [ 67.360227][ T5003] loop3: detected capacity change from 0 to 512 [ 67.380662][ T29] audit: type=1326 audit(1747298690.776:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5006 comm="syz.1.545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7faaa0e969 code=0x7ffc0000 [ 67.406481][ T5003] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 67.424102][ T5009] loop4: detected capacity change from 0 to 2048 [ 67.435245][ T4996] wg1 speed is unknown, defaulting to 1000 [ 67.443123][ T5003] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.543: invalid indirect mapped block 4294967295 (level 1) [ 67.443398][ T5007] netlink: 'syz.1.545': attribute type 13 has an invalid length. [ 67.464808][ T5007] netlink: 24859 bytes leftover after parsing attributes in process `syz.1.545'. [ 67.486064][ T5003] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.543: invalid indirect mapped block 4294967295 (level 1) [ 67.519622][ T5003] EXT4-fs (loop3): 2 truncates cleaned up [ 67.525702][ T29] audit: type=1326 audit(1747298690.796:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5006 comm="syz.1.545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f7faaa0e969 code=0x7ffc0000 [ 67.549175][ T29] audit: type=1326 audit(1747298690.796:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5006 comm="syz.1.545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7faaa0e969 code=0x7ffc0000 [ 67.572415][ T29] audit: type=1326 audit(1747298690.796:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5006 comm="syz.1.545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7faaa0e969 code=0x7ffc0000 [ 67.595906][ T29] audit: type=1326 audit(1747298690.836:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5006 comm="syz.1.545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f7faaa0e969 code=0x7ffc0000 [ 67.600562][ T5003] EXT4-fs error (device loop3): ext4_inlinedir_to_tree:1339: inode #12: block 7: comm syz.3.543: path /108/file0/file0: bad entry in directory: rec_len % 4 != 0 - offset=259, inode=4278190093, rec_len=255, size=60 fake=0 [ 67.643441][ T5014] batadv_slave_0: entered promiscuous mode [ 67.649957][ T5014] netlink: 4 bytes leftover after parsing attributes in process `syz.4.548'. [ 67.658892][ T5014] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 67.684660][ T5014] batadv_slave_0 (unregistering): left promiscuous mode [ 67.692048][ T5014] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 67.772987][ T5003] EXT4-fs error (device loop3): ext4_inlinedir_to_tree:1339: inode #12: block 7: comm syz.3.543: path /108/file0/file0: bad entry in directory: rec_len % 4 != 0 - offset=259, inode=4278190093, rec_len=255, size=60 fake=0 [ 67.817562][ T5021] netlink: 8 bytes leftover after parsing attributes in process `syz.1.550'. [ 67.844702][ T5028] loop4: detected capacity change from 0 to 1024 [ 67.854624][ T5021] sd 0:0:1:0: device reset [ 67.905166][ T5028] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.553: Failed to acquire dquot type 0 [ 68.027985][ T5028] EXT4-fs error (device loop4): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 68.083221][ T5036] loop1: detected capacity change from 0 to 2048 [ 68.089872][ T5028] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #13: comm syz.4.553: corrupted inode contents [ 68.102079][ T5028] EXT4-fs error (device loop4): ext4_dirty_inode:6103: inode #13: comm syz.4.553: mark_inode_dirty error [ 68.154393][ T5028] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #13: comm syz.4.553: corrupted inode contents [ 68.209251][ T5041] tipc: Started in network mode [ 68.214335][ T5041] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 68.221762][ T5041] tipc: Enabled bearer , priority 0 [ 68.238990][ T5028] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #13: comm syz.4.553: mark_inode_dirty error [ 68.259668][ T5028] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #13: comm syz.4.553: corrupted inode contents [ 68.271752][ T5028] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 68.281573][ T5028] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #13: comm syz.4.553: corrupted inode contents [ 68.293752][ T5028] EXT4-fs error (device loop4): ext4_truncate:4255: inode #13: comm syz.4.553: mark_inode_dirty error [ 68.306030][ T5028] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 68.316257][ T5028] EXT4-fs (loop4): 1 truncate cleaned up [ 68.323841][ T5028] EXT4-fs mount: 57 callbacks suppressed [ 68.323858][ T5028] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.356859][ T3325] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.387436][ T5046] mmap: syz.3.558 (5046) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 68.485739][ T5050] loop4: detected capacity change from 0 to 2048 [ 68.499385][ T5050] ext4: Unknown parameter 'noacl' [ 68.635781][ T5052] netlink: 'syz.0.562': attribute type 13 has an invalid length. [ 68.741348][ T5043] wg1 speed is unknown, defaulting to 1000 [ 68.759133][ T5057] sd 0:0:1:0: device reset [ 68.958196][ T5073] sd 0:0:1:0: device reset [ 69.204933][ T5082] loop4: detected capacity change from 0 to 512 [ 69.227842][ T3389] tipc: Node number set to 11578026 [ 69.256047][ T5082] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 69.323308][ T5082] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.572: invalid indirect mapped block 4294967295 (level 1) [ 69.383060][ T5071] Set syz1 is full, maxelem 65536 reached [ 69.391019][ T5082] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.572: invalid indirect mapped block 4294967295 (level 1) [ 69.419694][ T5091] loop1: detected capacity change from 0 to 512 [ 69.430602][ T5092] loop3: detected capacity change from 0 to 512 [ 69.443183][ T5091] EXT4-fs: Ignoring removed orlov option [ 69.450286][ T5082] EXT4-fs (loop4): 2 truncates cleaned up [ 69.456057][ T5092] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 69.467586][ T5082] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.488542][ T5092] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.575: invalid indirect mapped block 4294967295 (level 1) [ 69.528765][ T5091] EXT4-fs error (device loop1): ext4_map_blocks:675: inode #2: block 3: comm syz.1.576: lblock 0 mapped to illegal pblock 3 (length 1) [ 69.543402][ T5091] EXT4-fs warning (device loop1): dx_probe:793: inode #2: lblock 0: comm syz.1.576: error -117 reading directory block [ 69.549319][ T5092] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.575: invalid indirect mapped block 4294967295 (level 1) [ 69.557753][ T5091] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 69.579005][ T5091] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.595662][ T5082] EXT4-fs error (device loop4): ext4_inlinedir_to_tree:1339: inode #12: block 7: comm syz.4.572: path /124/file0/file0: bad entry in directory: rec_len % 4 != 0 - offset=259, inode=4278190093, rec_len=255, size=60 fake=0 [ 69.622419][ T5082] EXT4-fs error (device loop4): ext4_inlinedir_to_tree:1339: inode #12: block 7: comm syz.4.572: path /124/file0/file0: bad entry in directory: rec_len % 4 != 0 - offset=259, inode=4278190093, rec_len=255, size=60 fake=0 [ 69.645800][ T5091] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.655089][ T5092] EXT4-fs (loop3): 2 truncates cleaned up [ 69.662695][ T5092] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.703598][ T5088] EXT4-fs error (device loop3): ext4_inlinedir_to_tree:1339: inode #12: block 7: comm syz.3.575: path /115/file0/file0: bad entry in directory: rec_len % 4 != 0 - offset=259, inode=4278190093, rec_len=255, size=60 fake=0 [ 69.742184][ T3325] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.770369][ T5100] loop1: detected capacity change from 0 to 512 [ 69.781060][ T5100] EXT4-fs: Ignoring removed orlov option [ 69.793665][ T5100] EXT4-fs error (device loop1): ext4_map_blocks:675: inode #2: block 3: comm syz.1.580: lblock 0 mapped to illegal pblock 3 (length 1) [ 69.839745][ T5100] EXT4-fs warning (device loop1): dx_probe:793: inode #2: lblock 0: comm syz.1.580: error -117 reading directory block [ 69.845206][ T5102] wg1 speed is unknown, defaulting to 1000 [ 69.859751][ T5100] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 69.871142][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.924395][ T5100] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.951561][ T5100] netlink: 'syz.1.580': attribute type 10 has an invalid length. [ 69.958350][ T5113] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 69.967358][ T5100] hsr_slave_0: left promiscuous mode [ 69.994700][ T5100] hsr_slave_1: left promiscuous mode [ 70.024228][ T5118] batadv_slave_0: entered promiscuous mode [ 70.046130][ T5118] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 70.083148][ T5118] batadv_slave_0 (unregistering): left promiscuous mode [ 70.096032][ T5118] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 70.123011][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.282837][ T5122] loop1: detected capacity change from 0 to 1024 [ 70.329593][ T5122] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.586: Failed to acquire dquot type 0 [ 70.379949][ T5135] __nla_validate_parse: 10 callbacks suppressed [ 70.379967][ T5135] netlink: 4 bytes leftover after parsing attributes in process `syz.0.592'. [ 70.395274][ T5135] netlink: 4 bytes leftover after parsing attributes in process `syz.0.592'. [ 70.395911][ T5122] EXT4-fs error (device loop1): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 70.404770][ T5135] netlink: 4 bytes leftover after parsing attributes in process `syz.0.592'. [ 70.434603][ T5136] loop3: detected capacity change from 0 to 512 [ 70.441452][ T5136] EXT4-fs: Ignoring removed nobh option [ 70.447658][ T5136] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 70.464926][ T5135] netlink: 4 bytes leftover after parsing attributes in process `syz.0.592'. [ 70.465039][ T5136] EXT4-fs (loop3): orphan cleanup on readonly fs [ 70.473792][ T5135] netlink: 4 bytes leftover after parsing attributes in process `syz.0.592'. [ 70.480587][ T5136] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.587: bg 0: block 248: padding at end of block bitmap is not set [ 70.503665][ T5122] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #13: comm syz.1.586: corrupted inode contents [ 70.505251][ T5136] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.587: Failed to acquire dquot type 1 [ 70.527025][ T5135] netlink: 4 bytes leftover after parsing attributes in process `syz.0.592'. [ 70.536190][ T5122] EXT4-fs error (device loop1): ext4_dirty_inode:6103: inode #13: comm syz.1.586: mark_inode_dirty error [ 70.547735][ T5136] EXT4-fs (loop3): 1 truncate cleaned up [ 70.556461][ T5136] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 70.592899][ T5144] netlink: 52 bytes leftover after parsing attributes in process `syz.0.592'. [ 70.600130][ T5122] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #13: comm syz.1.586: corrupted inode contents [ 70.617334][ T5122] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #13: comm syz.1.586: mark_inode_dirty error [ 70.630308][ T5122] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #13: comm syz.1.586: corrupted inode contents [ 70.641836][ T5135] netlink: 4 bytes leftover after parsing attributes in process `syz.0.592'. [ 70.651327][ T5135] netlink: 4 bytes leftover after parsing attributes in process `syz.0.592'. [ 70.657770][ T5122] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 70.672947][ T5122] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #13: comm syz.1.586: corrupted inode contents [ 70.673356][ T5148] netlink: 4 bytes leftover after parsing attributes in process `syz.4.594'. [ 70.686453][ T5122] EXT4-fs error (device loop1): ext4_truncate:4255: inode #13: comm syz.1.586: mark_inode_dirty error [ 70.705585][ T5122] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 70.725873][ T5122] EXT4-fs (loop1): 1 truncate cleaned up [ 70.749551][ T5122] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.902065][ T5158] wg1 speed is unknown, defaulting to 1000 [ 70.923938][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.938565][ T5159] loop0: detected capacity change from 0 to 512 [ 70.945428][ T5159] EXT4-fs: Ignoring removed nobh option [ 70.952092][ T5159] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 70.961993][ T5159] EXT4-fs (loop0): orphan cleanup on readonly fs [ 70.969430][ T5159] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.596: bg 0: block 248: padding at end of block bitmap is not set [ 70.984953][ T5159] EXT4-fs error (device loop0): ext4_acquire_dquot:6935: comm syz.0.596: Failed to acquire dquot type 1 [ 71.001691][ T5159] EXT4-fs (loop0): 1 truncate cleaned up [ 71.014678][ T5159] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 71.096321][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.290930][ T5180] netlink: 'syz.4.607': attribute type 46 has an invalid length. [ 71.426930][ T5193] loop4: detected capacity change from 0 to 2048 [ 71.450930][ T5191] loop2: detected capacity change from 0 to 512 [ 71.474471][ T5191] EXT4-fs: Ignoring removed orlov option [ 71.504571][ T5191] EXT4-fs error (device loop2): ext4_map_blocks:675: inode #2: block 3: comm syz.2.611: lblock 0 mapped to illegal pblock 3 (length 1) [ 71.526197][ T5191] EXT4-fs warning (device loop2): dx_probe:793: inode #2: lblock 0: comm syz.2.611: error -117 reading directory block [ 71.544719][ T5191] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 71.560044][ T5191] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.602145][ T5191] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.651010][ T5209] loop4: detected capacity change from 0 to 512 [ 71.678768][ T5209] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 71.699116][ T3322] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.721480][ T5209] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.617: invalid indirect mapped block 4294967295 (level 1) [ 71.738053][ T5209] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.617: invalid indirect mapped block 4294967295 (level 1) [ 71.765571][ T5194] wg1 speed is unknown, defaulting to 1000 [ 71.802842][ T5209] EXT4-fs (loop4): 2 truncates cleaned up [ 71.817635][ T5216] loop1: detected capacity change from 0 to 1024 [ 71.824424][ T5209] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.838407][ T5218] loop2: detected capacity change from 0 to 2048 [ 71.847325][ T5203] EXT4-fs error (device loop4): ext4_inlinedir_to_tree:1339: inode #12: block 7: comm syz.4.617: path /138/file0/file0: bad entry in directory: rec_len % 4 != 0 - offset=259, inode=4278190093, rec_len=255, size=60 fake=0 [ 71.874583][ T5216] __quota_error: 101 callbacks suppressed [ 71.874618][ T5216] Quota error (device loop1): do_check_range: Getting block 64 out of range 1-5 [ 71.889844][ T5216] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 71.899575][ T5216] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.623: Failed to acquire dquot type 0 [ 71.930561][ T5214] sd 0:0:1:0: device reset [ 71.932186][ T5218] EXT4-fs (loop2): failed to initialize system zone (-117) [ 71.961172][ T3325] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.970683][ T5216] EXT4-fs error (device loop1): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 71.988285][ T5218] EXT4-fs (loop2): mount failed [ 72.001296][ T5216] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #13: comm syz.1.623: corrupted inode contents [ 72.029220][ T5216] EXT4-fs error (device loop1): ext4_dirty_inode:6103: inode #13: comm syz.1.623: mark_inode_dirty error [ 72.041526][ T5216] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #13: comm syz.1.623: corrupted inode contents [ 72.055001][ T5216] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #13: comm syz.1.623: mark_inode_dirty error [ 72.066922][ T5216] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #13: comm syz.1.623: corrupted inode contents [ 72.080915][ T5216] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 72.090189][ T5216] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #13: comm syz.1.623: corrupted inode contents [ 72.103468][ T5216] EXT4-fs error (device loop1): ext4_truncate:4255: inode #13: comm syz.1.623: mark_inode_dirty error [ 72.115817][ T5216] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 72.127367][ T5216] EXT4-fs (loop1): 1 truncate cleaned up [ 72.134719][ T5216] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.268178][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.296803][ T5238] loop0: detected capacity change from 0 to 2048 [ 72.358805][ T5238] EXT4-fs (loop0): failed to initialize system zone (-117) [ 72.366245][ T5238] EXT4-fs (loop0): mount failed [ 72.423253][ T5246] loop0: detected capacity change from 0 to 512 [ 72.463173][ T5246] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.496874][ T5246] ext4 filesystem being mounted at /120/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 72.519683][ T5253] loop4: detected capacity change from 0 to 512 [ 72.542694][ T5253] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 72.594402][ T5253] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.634: invalid indirect mapped block 4294967295 (level 1) [ 72.628769][ T5253] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.634: invalid indirect mapped block 4294967295 (level 1) [ 72.670371][ T5253] EXT4-fs (loop4): 2 truncates cleaned up [ 72.671405][ T3322] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.683076][ T5253] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.700370][ T5250] EXT4-fs error (device loop4): ext4_inlinedir_to_tree:1339: inode #12: block 7: comm syz.4.634: path /142/file0/file0: bad entry in directory: rec_len % 4 != 0 - offset=259, inode=4278190093, rec_len=255, size=60 fake=0 [ 72.722763][ T29] audit: type=1400 audit(1747298696.106:600): avc: denied { setopt } for pid=5251 comm="syz.1.633" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 72.742989][ T29] audit: type=1400 audit(1747298696.106:601): avc: denied { read } for pid=5251 comm="syz.1.633" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 72.763541][ T29] audit: type=1400 audit(1747298696.106:602): avc: denied { write } for pid=5251 comm="syz.1.633" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 72.784174][ T29] audit: type=1400 audit(1747298696.106:603): avc: denied { read } for pid=5251 comm="syz.1.633" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 72.817417][ T5264] netlink: 'syz.1.633': attribute type 4 has an invalid length. [ 72.849644][ T3325] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.906909][ T5262] sd 0:0:1:0: device reset [ 72.940361][ T29] audit: type=1400 audit(1747298696.326:604): avc: denied { ioctl } for pid=5267 comm="syz.0.637" path="socket:[10844]" dev="sockfs" ino=10844 ioctlcmd=0x48d3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 72.991992][ T5274] loop4: detected capacity change from 0 to 1024 [ 73.049539][ T5279] loop0: detected capacity change from 0 to 512 [ 73.073235][ T5274] Quota error (device loop4): do_check_range: Getting block 64 out of range 1-5 [ 73.082487][ T5274] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 73.091993][ T5274] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.636: Failed to acquire dquot type 0 [ 73.121077][ T5279] EXT4-fs (loop0): 1 orphan inode deleted [ 73.148678][ T3422] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 73.158593][ T3422] EXT4-fs error (device loop0): ext4_release_dquot:6971: comm kworker/u8:7: Failed to release dquot type 1 [ 73.158857][ T5276] loop2: detected capacity change from 0 to 1024 [ 73.177490][ T5279] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.187548][ T5274] EXT4-fs error (device loop4): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 73.219291][ T5279] ext4 filesystem being mounted at /124/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.245736][ T5274] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #13: comm syz.4.636: corrupted inode contents [ 73.245937][ T5276] EXT4-fs error (device loop2): ext4_acquire_dquot:6935: comm syz.2.640: Failed to acquire dquot type 0 [ 73.267446][ T5274] EXT4-fs error (device loop4): ext4_dirty_inode:6103: inode #13: comm syz.4.636: mark_inode_dirty error [ 73.281357][ T5274] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #13: comm syz.4.636: corrupted inode contents [ 73.295017][ T5276] EXT4-fs error (device loop2): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 73.310310][ T5274] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #13: comm syz.4.636: mark_inode_dirty error [ 73.322072][ T5276] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #13: comm syz.2.640: corrupted inode contents [ 73.334219][ T5274] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #13: comm syz.4.636: corrupted inode contents [ 73.364962][ T5276] EXT4-fs error (device loop2): ext4_dirty_inode:6103: inode #13: comm syz.2.640: mark_inode_dirty error [ 73.379388][ T5274] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 73.389968][ T5274] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #13: comm syz.4.636: corrupted inode contents [ 73.402138][ T5276] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #13: comm syz.2.640: corrupted inode contents [ 73.403029][ T3322] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.418820][ T5276] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #13: comm syz.2.640: mark_inode_dirty error [ 73.424739][ T5274] EXT4-fs error (device loop4): ext4_truncate:4255: inode #13: comm syz.4.636: mark_inode_dirty error [ 73.448842][ T5274] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 73.449254][ T5276] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #13: comm syz.2.640: corrupted inode contents [ 73.471437][ T5288] netlink: 'syz.1.642': attribute type 46 has an invalid length. [ 73.479313][ T5289] batadv_slave_0: entered promiscuous mode [ 73.488846][ T5288] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 73.492958][ T5276] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 73.506301][ T5288] batadv_slave_0 (unregistering): left promiscuous mode [ 73.521327][ T5276] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #13: comm syz.2.640: corrupted inode contents [ 73.521635][ T5288] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 73.533689][ T5274] EXT4-fs (loop4): 1 truncate cleaned up [ 73.548554][ T5274] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.551451][ T5276] EXT4-fs error (device loop2): ext4_truncate:4255: inode #13: comm syz.2.640: mark_inode_dirty error [ 73.584190][ T5276] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 73.616701][ T5276] EXT4-fs (loop2): 1 truncate cleaned up [ 73.631736][ T5276] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.655602][ T3325] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.701466][ T5298] loop4: detected capacity change from 0 to 512 [ 73.715139][ T5298] EXT4-fs: Ignoring removed orlov option [ 73.750931][ T3326] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.798177][ T5298] EXT4-fs error (device loop4): ext4_map_blocks:675: inode #2: block 3: comm syz.4.645: lblock 0 mapped to illegal pblock 3 (length 1) [ 73.865092][ T5298] EXT4-fs warning (device loop4): dx_probe:793: inode #2: lblock 0: comm syz.4.645: error -117 reading directory block [ 73.907934][ T5298] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 73.932549][ T5298] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.971910][ T5298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.076289][ T5315] loop0: detected capacity change from 0 to 512 [ 74.119036][ T5315] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 74.163720][ T5315] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.652: invalid indirect mapped block 4294967295 (level 1) [ 74.178387][ T5315] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.652: invalid indirect mapped block 4294967295 (level 1) [ 74.193394][ T5315] EXT4-fs (loop0): 2 truncates cleaned up [ 74.199758][ T5315] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.260327][ T5315] EXT4-fs error (device loop0): ext4_inlinedir_to_tree:1339: inode #12: block 7: comm syz.0.652: path /128/file0/file0: bad entry in directory: rec_len % 4 != 0 - offset=259, inode=4278190093, rec_len=255, size=60 fake=0 [ 74.261529][ T5324] loop4: detected capacity change from 0 to 512 [ 74.294821][ T5324] EXT4-fs: Ignoring removed orlov option [ 74.312292][ T5324] EXT4-fs error (device loop4): ext4_map_blocks:675: inode #2: block 3: comm syz.4.656: lblock 0 mapped to illegal pblock 3 (length 1) [ 74.338432][ T5315] EXT4-fs error (device loop0): ext4_inlinedir_to_tree:1339: inode #12: block 7: comm syz.0.652: path /128/file0/file0: bad entry in directory: rec_len % 4 != 0 - offset=259, inode=4278190093, rec_len=255, size=60 fake=0 [ 74.340241][ T5324] EXT4-fs warning (device loop4): dx_probe:793: inode #2: lblock 0: comm syz.4.656: error -117 reading directory block [ 74.372900][ T5324] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 74.385210][ T5324] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.399643][ T5324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.453715][ T3322] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.683536][ T5351] 9pnet_fd: Insufficient options for proto=fd [ 74.749454][ T5356] loop2: detected capacity change from 0 to 512 [ 74.756341][ T5356] EXT4-fs: Ignoring removed orlov option [ 74.783237][ T5356] EXT4-fs error (device loop2): ext4_map_blocks:675: inode #2: block 3: comm syz.2.668: lblock 0 mapped to illegal pblock 3 (length 1) [ 74.849032][ T5356] EXT4-fs warning (device loop2): dx_probe:793: inode #2: lblock 0: comm syz.2.668: error -117 reading directory block [ 74.893129][ T5356] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 74.909748][ T5356] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.931657][ T5356] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.031287][ T5387] 9pnet_fd: Insufficient options for proto=fd [ 75.200175][ T5400] loop4: detected capacity change from 0 to 2048 [ 75.207113][ T5400] ext4: Unknown parameter 'noacl' [ 75.249495][ T5409] netlink: 'syz.1.689': attribute type 1 has an invalid length. [ 75.278033][ T5403] loop2: detected capacity change from 0 to 512 [ 75.286931][ T5403] EXT4-fs: Ignoring removed orlov option [ 75.331029][ T5403] EXT4-fs error (device loop2): ext4_map_blocks:675: inode #2: block 3: comm syz.2.686: lblock 0 mapped to illegal pblock 3 (length 1) [ 75.369893][ T5411] sd 0:0:1:0: device reset [ 75.405420][ T5389] wg1 speed is unknown, defaulting to 1000 [ 75.408983][ T5403] EXT4-fs warning (device loop2): dx_probe:793: inode #2: lblock 0: comm syz.2.686: error -117 reading directory block [ 75.428315][ T5415] __nla_validate_parse: 35 callbacks suppressed [ 75.428333][ T5415] netlink: 4 bytes leftover after parsing attributes in process `syz.1.691'. [ 75.443874][ T5415] netlink: 4 bytes leftover after parsing attributes in process `syz.1.691'. [ 75.477887][ T5403] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 75.499724][ T5422] 9pnet_fd: Insufficient options for proto=fd [ 75.510255][ T5403] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.525023][ T5426] netlink: 52 bytes leftover after parsing attributes in process `syz.1.691'. [ 75.535315][ T5415] netlink: 4 bytes leftover after parsing attributes in process `syz.1.691'. [ 75.547976][ T5427] netlink: 4 bytes leftover after parsing attributes in process `syz.4.696'. [ 75.558389][ T5403] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.567982][ T5427] netlink: 12 bytes leftover after parsing attributes in process `syz.4.696'. [ 75.587482][ T5415] netlink: 4 bytes leftover after parsing attributes in process `syz.1.691'. [ 75.596631][ T5415] netlink: 4 bytes leftover after parsing attributes in process `syz.1.691'. [ 75.596708][ T5424] loop3: detected capacity change from 0 to 2048 [ 75.613291][ T5415] netlink: 4 bytes leftover after parsing attributes in process `syz.1.691'. [ 75.633149][ T5424] EXT4-fs (loop3): failed to initialize system zone (-117) [ 75.652230][ T5424] EXT4-fs (loop3): mount failed [ 75.676213][ T5432] loop4: detected capacity change from 0 to 512 [ 75.683965][ T5432] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 75.735969][ T5432] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.696: invalid indirect mapped block 4294967295 (level 1) [ 75.788695][ T5443] loop1: detected capacity change from 0 to 1024 [ 75.809762][ T5432] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.696: invalid indirect mapped block 4294967295 (level 1) [ 75.819168][ T5443] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.699: Failed to acquire dquot type 0 [ 75.826428][ T5432] EXT4-fs (loop4): 2 truncates cleaned up [ 75.841435][ T5443] EXT4-fs error (device loop1): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 75.841548][ T5443] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #13: comm syz.1.699: corrupted inode contents [ 75.842632][ T5443] EXT4-fs error (device loop1): ext4_dirty_inode:6103: inode #13: comm syz.1.699: mark_inode_dirty error [ 75.880111][ T5443] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #13: comm syz.1.699: corrupted inode contents [ 75.892036][ T5443] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #13: comm syz.1.699: mark_inode_dirty error [ 75.903887][ T5432] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.906765][ T5443] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #13: comm syz.1.699: corrupted inode contents [ 75.932323][ T5443] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 75.943316][ T5432] EXT4-fs error (device loop4): ext4_inlinedir_to_tree:1339: inode #12: block 7: comm syz.4.696: path /158/file0/file0: bad entry in directory: rec_len % 4 != 0 - offset=259, inode=4278190093, rec_len=255, size=60 fake=0 [ 75.978228][ T5443] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #13: comm syz.1.699: corrupted inode contents [ 76.007183][ T5443] EXT4-fs error (device loop1): ext4_truncate:4255: inode #13: comm syz.1.699: mark_inode_dirty error [ 76.036808][ T3325] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.051376][ T5443] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 76.080437][ T5443] EXT4-fs (loop1): 1 truncate cleaned up [ 76.087291][ T5454] bond_slave_1: entered promiscuous mode [ 76.095772][ T5443] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.110164][ T5454] netlink: 4 bytes leftover after parsing attributes in process `syz.2.706'. [ 76.128459][ T5454] bond0: (slave bond_slave_1): Releasing backup interface [ 76.137493][ T5454] bond_slave_1 (unregistering): left promiscuous mode [ 76.158817][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.254211][ T5465] loop2: detected capacity change from 0 to 512 [ 76.263135][ T5465] EXT4-fs: Ignoring removed orlov option [ 76.279792][ T5465] EXT4-fs error (device loop2): ext4_map_blocks:675: inode #2: block 3: comm syz.2.710: lblock 0 mapped to illegal pblock 3 (length 1) [ 76.293943][ T5461] sd 0:0:1:0: device reset [ 76.320139][ T5465] EXT4-fs warning (device loop2): dx_probe:793: inode #2: lblock 0: comm syz.2.710: error -117 reading directory block [ 76.335822][ T5465] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 76.359561][ T5470] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 76.370055][ T5465] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.386411][ T5465] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.553657][ T5446] wg1 speed is unknown, defaulting to 1000 [ 76.572027][ T5482] loop1: detected capacity change from 0 to 512 [ 76.584043][ T5482] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 76.603979][ T5482] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.715: invalid indirect mapped block 4294967295 (level 1) [ 76.619854][ T5482] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.715: invalid indirect mapped block 4294967295 (level 1) [ 76.634782][ T5482] EXT4-fs (loop1): 2 truncates cleaned up [ 76.642984][ T5482] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.657367][ T5479] EXT4-fs error (device loop1): ext4_inlinedir_to_tree:1339: inode #12: block 7: comm syz.1.715: path /151/file0/file0: bad entry in directory: rec_len % 4 != 0 - offset=259, inode=4278190093, rec_len=255, size=60 fake=0 [ 76.732433][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.775790][ T5487] loop1: detected capacity change from 0 to 1024 [ 76.820369][ T5487] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.717: Failed to acquire dquot type 0 [ 76.842659][ T5487] EXT4-fs error (device loop1): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 76.869900][ T5487] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #13: comm syz.1.717: corrupted inode contents [ 76.889407][ T5487] EXT4-fs error (device loop1): ext4_dirty_inode:6103: inode #13: comm syz.1.717: mark_inode_dirty error [ 76.909278][ T5487] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #13: comm syz.1.717: corrupted inode contents [ 76.948089][ T5487] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #13: comm syz.1.717: mark_inode_dirty error [ 76.964582][ T5487] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #13: comm syz.1.717: corrupted inode contents [ 76.989232][ T5487] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 76.999360][ T5487] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #13: comm syz.1.717: corrupted inode contents [ 77.012132][ T5487] EXT4-fs error (device loop1): ext4_truncate:4255: inode #13: comm syz.1.717: mark_inode_dirty error [ 77.026260][ T5487] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 77.042264][ T5487] EXT4-fs (loop1): 1 truncate cleaned up [ 77.048551][ T5487] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.125497][ T5498] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 77.162938][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.196723][ T5496] loop2: detected capacity change from 0 to 512 [ 77.204888][ T5501] loop4: detected capacity change from 0 to 2048 [ 77.244732][ T5496] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 77.371032][ T5520] loop4: detected capacity change from 0 to 512 [ 77.382718][ T5520] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 77.399229][ T5496] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.438197][ T5496] ext4 filesystem being mounted at /140/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 77.460024][ T5520] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.727: invalid indirect mapped block 4294967295 (level 1) [ 77.493828][ T5520] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.727: invalid indirect mapped block 4294967295 (level 1) [ 77.521391][ T5496] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.526012][ T5520] EXT4-fs (loop4): 2 truncates cleaned up [ 77.544789][ T5520] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.570328][ T5513] EXT4-fs error (device loop4): ext4_inlinedir_to_tree:1339: inode #12: block 7: comm syz.4.727: path /162/file0/file0: bad entry in directory: rec_len % 4 != 0 - offset=259, inode=4278190093, rec_len=255, size=60 fake=0 [ 77.633632][ T5530] loop1: detected capacity change from 0 to 512 [ 77.641819][ T5530] EXT4-fs: Ignoring removed orlov option [ 77.675941][ T5530] EXT4-fs error (device loop1): ext4_map_blocks:675: inode #2: block 3: comm syz.1.733: lblock 0 mapped to illegal pblock 3 (length 1) [ 77.692503][ T5530] EXT4-fs warning (device loop1): dx_probe:793: inode #2: lblock 0: comm syz.1.733: error -117 reading directory block [ 77.697127][ T3325] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.717052][ T5530] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 77.724506][ T5496] loop2: detected capacity change from 0 to 512 [ 77.742516][ T5496] EXT4-fs: Ignoring removed oldalloc option [ 77.759787][ T5530] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.787477][ T5533] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 77.789958][ T5530] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.849682][ T5496] EXT4-fs error (device loop2): ext4_quota_enable:7126: inode #4: comm syz.2.721: unexpected EA_INODE flag [ 77.877426][ T5496] EXT4-fs error (device loop2): ext4_quota_enable:7129: comm syz.2.721: Bad quota inode: 4, type: 1 [ 77.909748][ T5496] EXT4-fs warning (device loop2): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 77.962314][ T5496] EXT4-fs (loop2): mount failed [ 78.016586][ T5548] loop4: detected capacity change from 0 to 512 [ 78.049597][ T5548] EXT4-fs: Ignoring removed orlov option [ 78.087585][ T5548] EXT4-fs error (device loop4): ext4_map_blocks:675: inode #2: block 3: comm syz.4.738: lblock 0 mapped to illegal pblock 3 (length 1) [ 78.112159][ T5548] EXT4-fs warning (device loop4): dx_probe:793: inode #2: lblock 0: comm syz.4.738: error -117 reading directory block [ 78.128217][ T5548] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 78.138012][ T5548] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.160806][ T5548] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.175778][ T5552] 9pnet_fd: Insufficient options for proto=fd [ 78.245874][ T5558] loop3: detected capacity change from 0 to 512 [ 78.292118][ T5558] EXT4-fs (loop3): 1 orphan inode deleted [ 78.320467][ T1004] __quota_error: 36 callbacks suppressed [ 78.320483][ T1004] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 78.336091][ T1004] EXT4-fs error (device loop3): ext4_release_dquot:6971: comm kworker/u8:6: Failed to release dquot type 1 [ 78.359784][ T5558] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.403554][ T29] audit: type=1326 audit(1747298701.796:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5567 comm="syz.4.745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cbe78e969 code=0x7ffc0000 [ 78.413569][ T5558] ext4 filesystem being mounted at /136/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 78.426996][ T29] audit: type=1326 audit(1747298701.796:636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5567 comm="syz.4.745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cbe78e969 code=0x7ffc0000 [ 78.460736][ T29] audit: type=1326 audit(1747298701.796:637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5567 comm="syz.4.745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f4cbe78e969 code=0x7ffc0000 [ 78.484201][ T29] audit: type=1326 audit(1747298701.796:638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5567 comm="syz.4.745" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4cbe78e969 code=0x0 [ 78.514137][ T29] audit: type=1400 audit(1747298701.906:639): avc: denied { lock } for pid=5567 comm="syz.4.745" path="socket:[11531]" dev="sockfs" ino=11531 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 78.591984][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.648093][ T5571] loop0: detected capacity change from 0 to 512 [ 78.681395][ T5571] EXT4-fs: Ignoring removed orlov option [ 78.719338][ T5571] EXT4-fs error (device loop0): ext4_map_blocks:675: inode #2: block 3: comm syz.0.746: lblock 0 mapped to illegal pblock 3 (length 1) [ 78.744173][ T5581] loop3: detected capacity change from 0 to 512 [ 78.751551][ T29] audit: type=1400 audit(1747298702.136:640): avc: denied { setopt } for pid=5580 comm="+}[@" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 78.761339][ T5571] EXT4-fs warning (device loop0): dx_probe:793: inode #2: lblock 0: comm syz.0.746: error -117 reading directory block [ 78.771280][ T29] audit: type=1400 audit(1747298702.136:641): avc: denied { connect } for pid=5580 comm="+}[@" lport=132 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 78.785292][ T5571] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 78.803869][ T5581] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 78.823687][ T5571] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.839725][ T5571] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.844717][ T5581] EXT4-fs (loop3): 1 truncate cleaned up [ 78.929364][ T5591] 9pnet_fd: Insufficient options for proto=fd [ 79.011617][ T29] audit: type=1326 audit(1747298702.406:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5599 comm="syz.1.756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7faaa0e969 code=0x7ffc0000 [ 79.040392][ T29] audit: type=1326 audit(1747298702.406:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5599 comm="syz.1.756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7faaa0e969 code=0x7ffc0000 [ 79.449443][ T5639] loop3: detected capacity change from 0 to 512 [ 79.456603][ T5639] EXT4-fs: Ignoring removed orlov option [ 79.482658][ T5645] loop2: detected capacity change from 0 to 512 [ 79.492163][ T5645] EXT4-fs: Ignoring removed orlov option [ 79.505070][ T5639] EXT4-fs error (device loop3): ext4_map_blocks:675: inode #2: block 3: comm syz.3.774: lblock 0 mapped to illegal pblock 3 (length 1) [ 79.527729][ T5651] netlink: 'syz.1.778': attribute type 46 has an invalid length. [ 79.546000][ T5639] EXT4-fs warning (device loop3): dx_probe:793: inode #2: lblock 0: comm syz.3.774: error -117 reading directory block [ 79.568531][ T5645] EXT4-fs error (device loop2): ext4_map_blocks:675: inode #2: block 3: comm syz.2.777: lblock 0 mapped to illegal pblock 3 (length 1) [ 79.593803][ T5639] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 79.604104][ T5645] EXT4-fs warning (device loop2): dx_probe:793: inode #2: lblock 0: comm syz.2.777: error -117 reading directory block [ 79.619532][ T5645] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 79.672208][ T5659] loop1: detected capacity change from 0 to 2048 [ 79.769113][ T5663] loop4: detected capacity change from 0 to 1024 [ 79.801774][ T5663] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.782: Failed to acquire dquot type 0 [ 79.813977][ T5663] EXT4-fs error (device loop4): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 79.830949][ T5663] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #13: comm syz.4.782: corrupted inode contents [ 79.851810][ T5663] EXT4-fs error (device loop4): ext4_dirty_inode:6103: inode #13: comm syz.4.782: mark_inode_dirty error [ 79.863772][ T5663] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #13: comm syz.4.782: corrupted inode contents [ 79.884043][ T5663] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #13: comm syz.4.782: mark_inode_dirty error [ 79.896753][ T5663] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #13: comm syz.4.782: corrupted inode contents [ 79.909881][ T5671] sd 0:0:1:0: device reset [ 79.924038][ T5663] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 79.941569][ T5663] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #13: comm syz.4.782: corrupted inode contents [ 79.954015][ T5663] EXT4-fs error (device loop4): ext4_truncate:4255: inode #13: comm syz.4.782: mark_inode_dirty error [ 80.043724][ T5687] loop3: detected capacity change from 0 to 512 [ 80.058018][ T5663] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 80.081435][ T5687] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 80.096315][ T5690] netlink: 'syz.1.791': attribute type 46 has an invalid length. [ 80.120873][ T5663] EXT4-fs (loop4): 1 truncate cleaned up [ 80.182151][ T5687] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.789: invalid indirect mapped block 4294967295 (level 1) [ 80.237863][ T5687] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.789: invalid indirect mapped block 4294967295 (level 1) [ 80.260430][ T5687] EXT4-fs (loop3): 2 truncates cleaned up [ 80.265650][ T5703] loop4: detected capacity change from 0 to 512 [ 80.268645][ T5682] EXT4-fs error (device loop3): ext4_inlinedir_to_tree:1339: inode #12: block 7: comm syz.3.789: path /147/file0/file0: bad entry in directory: rec_len % 4 != 0 - offset=259, inode=4278190093, rec_len=255, size=60 fake=0 [ 80.297035][ T5703] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 80.314932][ T5703] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.795: invalid indirect mapped block 4294967295 (level 1) [ 80.335919][ T5703] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.795: invalid indirect mapped block 4294967295 (level 1) [ 80.372078][ T5706] loop3: detected capacity change from 0 to 512 [ 80.379153][ T5706] EXT4-fs: Ignoring removed orlov option [ 80.420002][ T5706] EXT4-fs error (device loop3): ext4_map_blocks:675: inode #2: block 3: comm syz.3.796: lblock 0 mapped to illegal pblock 3 (length 1) [ 80.521013][ T5706] EXT4-fs warning (device loop3): dx_probe:793: inode #2: lblock 0: comm syz.3.796: error -117 reading directory block [ 80.533195][ T5703] EXT4-fs (loop4): 2 truncates cleaned up [ 80.578793][ T5706] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 80.595524][ T5703] EXT4-fs error (device loop4): ext4_inlinedir_to_tree:1339: inode #12: block 7: comm syz.4.795: path /174/file0/file0: bad entry in directory: rec_len % 4 != 0 - offset=259, inode=4278190093, rec_len=255, size=60 fake=0 [ 80.620054][ T5703] EXT4-fs error (device loop4): ext4_inlinedir_to_tree:1339: inode #12: block 7: comm syz.4.795: path /174/file0/file0: bad entry in directory: rec_len % 4 != 0 - offset=259, inode=4278190093, rec_len=255, size=60 fake=0 [ 80.666206][ T5713] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.679663][ T5715] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.710039][ T5713] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.734739][ T5715] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.769885][ T5713] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.807141][ T5723] loop4: detected capacity change from 0 to 512 [ 80.807197][ T5719] __nla_validate_parse: 43 callbacks suppressed [ 80.807225][ T5719] netlink: 4 bytes leftover after parsing attributes in process `syz.0.801'. [ 80.830540][ T5715] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.835958][ T5717] netlink: 8 bytes leftover after parsing attributes in process `syz.3.800'. [ 80.851844][ T5713] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.875468][ T5723] EXT4-fs (loop4): 1 orphan inode deleted [ 80.889903][ T560] EXT4-fs error (device loop4): ext4_release_dquot:6971: comm kworker/u8:5: Failed to release dquot type 1 [ 80.895412][ T5724] sd 0:0:1:0: device reset [ 80.903864][ T5723] ext4 filesystem being mounted at /175/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.917762][ T5715] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.928266][ T5728] loop0: detected capacity change from 0 to 128 [ 80.935645][ T5728] EXT4-fs: Ignoring removed nobh option [ 80.953208][ T5713] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.965304][ T5713] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.977766][ T5728] ext4 filesystem being mounted at /140/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 80.977950][ T5713] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.000474][ T5713] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.019053][ T5715] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.031484][ T5715] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.044490][ T5715] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.059698][ T5715] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.127163][ T5736] loop3: detected capacity change from 0 to 2048 [ 81.136207][ T5734] loop4: detected capacity change from 0 to 512 [ 81.146907][ T5734] EXT4-fs: Ignoring removed orlov option [ 81.170634][ T5734] EXT4-fs error (device loop4): ext4_map_blocks:675: inode #2: block 3: comm syz.4.804: lblock 0 mapped to illegal pblock 3 (length 1) [ 81.189516][ T5734] EXT4-fs warning (device loop4): dx_probe:793: inode #2: lblock 0: comm syz.4.804: error -117 reading directory block [ 81.203190][ T5734] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 81.225832][ T5739] netlink: 4 bytes leftover after parsing attributes in process `syz.0.807'. [ 81.234846][ T5739] netlink: 4 bytes leftover after parsing attributes in process `syz.0.807'. [ 81.244244][ T5739] netlink: 4 bytes leftover after parsing attributes in process `syz.0.807'. [ 81.293069][ T5743] netlink: 52 bytes leftover after parsing attributes in process `syz.0.807'. [ 81.329808][ T5739] netlink: 4 bytes leftover after parsing attributes in process `syz.0.807'. [ 81.339049][ T5739] netlink: 4 bytes leftover after parsing attributes in process `syz.0.807'. [ 81.358004][ T5739] netlink: 4 bytes leftover after parsing attributes in process `syz.0.807'. [ 81.381941][ T5747] loop2: detected capacity change from 0 to 2048 [ 81.437872][ T5739] netlink: 4 bytes leftover after parsing attributes in process `syz.0.807'. [ 81.501254][ T5756] loop4: detected capacity change from 0 to 512 [ 81.520827][ T5756] EXT4-fs: Ignoring removed orlov option [ 81.541989][ T5756] EXT4-fs error (device loop4): ext4_map_blocks:675: inode #2: block 3: comm syz.4.812: lblock 0 mapped to illegal pblock 3 (length 1) [ 81.560181][ T5756] EXT4-fs warning (device loop4): dx_probe:793: inode #2: lblock 0: comm syz.4.812: error -117 reading directory block [ 81.574855][ T5756] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 81.575400][ T5767] 9pnet_fd: Insufficient options for proto=fd [ 81.585209][ T5756] netlink: 'syz.4.812': attribute type 10 has an invalid length. [ 81.811036][ T5782] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 81.972527][ T5759] wg1 speed is unknown, defaulting to 1000 [ 82.164175][ T5813] loop3: detected capacity change from 0 to 512 [ 82.212156][ T5813] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 82.239133][ T5813] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.832: invalid indirect mapped block 4294967295 (level 1) [ 82.263860][ T5813] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.832: invalid indirect mapped block 4294967295 (level 1) [ 82.301360][ T5813] EXT4-fs (loop3): 2 truncates cleaned up [ 82.317313][ T5826] loop0: detected capacity change from 0 to 2048 [ 82.325705][ T5813] EXT4-fs error (device loop3): ext4_inlinedir_to_tree:1339: inode #12: block 7: comm syz.3.832: path /158/file0/file0: bad entry in directory: rec_len % 4 != 0 - offset=259, inode=4278190093, rec_len=255, size=60 fake=0 [ 82.349158][ T5813] EXT4-fs error (device loop3): ext4_inlinedir_to_tree:1339: inode #12: block 7: comm syz.3.832: path /158/file0/file0: bad entry in directory: rec_len % 4 != 0 - offset=259, inode=4278190093, rec_len=255, size=60 fake=0 [ 82.426610][ T5833] loop0: detected capacity change from 0 to 1024 [ 82.439508][ T5833] EXT4-fs error (device loop0): ext4_acquire_dquot:6935: comm syz.0.837: Failed to acquire dquot type 0 [ 82.458063][ T5833] EXT4-fs error (device loop0): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 82.478394][ T5833] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #13: comm syz.0.837: corrupted inode contents [ 82.510275][ T5833] EXT4-fs error (device loop0): ext4_dirty_inode:6103: inode #13: comm syz.0.837: mark_inode_dirty error [ 82.521854][ T5833] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #13: comm syz.0.837: corrupted inode contents [ 82.537276][ T5833] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #13: comm syz.0.837: mark_inode_dirty error [ 82.552467][ T5833] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #13: comm syz.0.837: corrupted inode contents [ 82.578738][ T5833] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 82.594350][ T5833] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #13: comm syz.0.837: corrupted inode contents [ 82.617645][ T5838] loop1: detected capacity change from 0 to 512 [ 82.625707][ T5838] EXT4-fs: Ignoring removed orlov option [ 82.637847][ T5833] EXT4-fs error (device loop0): ext4_truncate:4255: inode #13: comm syz.0.837: mark_inode_dirty error [ 82.652628][ T5833] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 82.664576][ T5833] EXT4-fs (loop0): 1 truncate cleaned up [ 82.665599][ T5838] EXT4-fs error (device loop1): ext4_map_blocks:675: inode #2: block 3: comm syz.1.839: lblock 0 mapped to illegal pblock 3 (length 1) [ 82.685541][ T5838] EXT4-fs warning (device loop1): dx_probe:793: inode #2: lblock 0: comm syz.1.839: error -117 reading directory block [ 82.699308][ T5838] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 82.710390][ T5838] netlink: 'syz.1.839': attribute type 10 has an invalid length. [ 82.837992][ T5849] 9pnet_fd: Insufficient options for proto=fd [ 83.061582][ T5864] loop1: detected capacity change from 0 to 1024 [ 83.081986][ T5864] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.847: Failed to acquire dquot type 0 [ 83.094222][ T5864] EXT4-fs error (device loop1): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 83.136253][ T5864] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #13: comm syz.1.847: corrupted inode contents [ 83.150506][ T5864] EXT4-fs error (device loop1): ext4_dirty_inode:6103: inode #13: comm syz.1.847: mark_inode_dirty error [ 83.166033][ T5864] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #13: comm syz.1.847: corrupted inode contents [ 83.179460][ T5864] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #13: comm syz.1.847: mark_inode_dirty error [ 83.235729][ T5864] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #13: comm syz.1.847: corrupted inode contents [ 83.273729][ T5864] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 83.296879][ T5864] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #13: comm syz.1.847: corrupted inode contents [ 83.321501][ T5881] loop0: detected capacity change from 0 to 512 [ 83.335040][ T5879] loop4: detected capacity change from 0 to 2048 [ 83.360164][ T5864] EXT4-fs error (device loop1): ext4_truncate:4255: inode #13: comm syz.1.847: mark_inode_dirty error [ 83.376355][ T5881] EXT4-fs (loop0): 1 orphan inode deleted [ 83.388034][ T5864] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 83.388059][ T3422] __quota_error: 22 callbacks suppressed [ 83.388071][ T3422] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 83.388175][ T5864] ================================================================== [ 83.388190][ T3422] EXT4-fs error (device loop0): ext4_release_dquot:6971: comm kworker/u8:7: Failed to release dquot type 1 [ 83.388219][ T5864] BUG: KCSAN: data-race in data_push_tail / vsnprintf [ 83.388279][ T5864] [ 83.388287][ T5864] write to 0xffffffff88e15580 of 22 bytes by task 3422 on cpu 1: [ 83.388310][ T5864] vsnprintf+0x2ce/0x890 [ 83.388356][ T5864] vscnprintf+0x41/0x90 [ 83.388392][ T5864] printk_sprint+0x30/0x2d0 [ 83.388419][ T5864] vprintk_store+0x599/0x860 [ 83.388442][ T5864] vprintk_emit+0x178/0x650 [ 83.388465][ T5864] vprintk_default+0x26/0x30 [ 83.388485][ T5864] vprintk+0x1d/0x30 [ 83.388509][ T5864] _printk+0x79/0xa0 [ 83.388542][ T5864] __quota_error+0xf8/0x110 [ 83.388572][ T5864] check_dquot_block_header+0x134/0x160 [ 83.388596][ T5864] remove_tree+0x5d2/0x1120 [ 83.388637][ T5864] remove_tree+0x633/0x1120 [ 83.388673][ T5864] remove_tree+0x633/0x1120 [ 83.388704][ T5864] remove_tree+0x633/0x1120 [ 83.388734][ T5864] qtree_release_dquot+0x16e/0x180 [ 83.388765][ T5864] v2_release_dquot+0x98/0xd0 [ 83.388804][ T5864] dquot_release+0x10e/0x210 [ 83.388833][ T5864] ext4_release_dquot+0x1e4/0x460 [ 83.388860][ T5864] quota_release_workfn+0x253/0x530 [ 83.388902][ T5864] process_scheduled_works+0x4ce/0x9d0 [ 83.388944][ T5864] worker_thread+0x582/0x770 [ 83.388979][ T5864] kthread+0x489/0x510 [ 83.388998][ T5864] ret_from_fork+0x4b/0x60 [ 83.389016][ T5864] ret_from_fork_asm+0x1a/0x30 [ 83.389038][ T5864] [ 83.389046][ T5864] read to 0xffffffff88e15588 of 8 bytes by task 5864 on cpu 0: [ 83.389067][ T5864] data_push_tail+0xfd/0x420 [ 83.389102][ T5864] data_alloc+0xbf/0x2b0 [ 83.389134][ T5864] prb_reserve+0x808/0xaf0 [ 83.389163][ T5864] vprintk_store+0x56d/0x860 [ 83.389180][ T5864] vprintk_emit+0x178/0x650 [ 83.389204][ T5864] vprintk_default+0x26/0x30 [ 83.389229][ T5864] vprintk+0x1d/0x30 [ 83.389262][ T5864] _printk+0x79/0xa0 [ 83.389300][ T5864] __ext4_std_error+0x346/0x370 [ 83.389333][ T5864] ext4_process_orphan+0x14e/0x1c0 [ 83.389386][ T5864] ext4_orphan_cleanup+0x6a8/0xa00 [ 83.389423][ T5864] ext4_fill_super+0x3171/0x34e0 [ 83.389450][ T5864] get_tree_bdev_flags+0x291/0x300 [ 83.389481][ T5864] get_tree_bdev+0x1f/0x30 [ 83.389512][ T5864] ext4_get_tree+0x1c/0x30 [ 83.389543][ T5864] vfs_get_tree+0x54/0x1d0 [ 83.389573][ T5864] do_new_mount+0x207/0x680 [ 83.389604][ T5864] path_mount+0x4a4/0xb20 [ 83.389628][ T5864] __se_sys_mount+0x28f/0x2e0 [ 83.389657][ T5864] __x64_sys_mount+0x67/0x80 [ 83.389690][ T5864] x64_sys_call+0xd36/0x2fb0 [ 83.389717][ T5864] do_syscall_64+0xd0/0x1a0 [ 83.389747][ T5864] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.389775][ T5864] [ 83.389783][ T5864] value changed: 0x00000000ffffe1fd -> 0x7665642820726f72 [ 83.389800][ T5864] [ 83.389805][ T5864] Reported by Kernel Concurrency Sanitizer on: [ 83.389818][ T5864] CPU: 0 UID: 0 PID: 5864 Comm: syz.1.847 Not tainted 6.15.0-rc6-syzkaller-00085-gc94d59a126cb #0 PREEMPT(voluntary) [ 83.389845][ T5864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 83.389861][ T5864] ================================================================== [ 83.425296][ T5881] ext4 filesystem being mounted at /154/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.444904][ T5864] EXT4-fs (loop1): 1 truncate cleaned up