last executing test programs: 10m13.567900124s ago: executing program 1 (id=3017): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000004"], 0x50) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18010000000000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r3, 0x400454c9, 0x1) ioctl$TUNSETPERSIST(r3, 0x400454cb, 0x1) ioctl$TUNSETPERSIST(r3, 0x400454cb, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000037c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001800)=@newtaction={0x488, 0x30, 0x12f, 0x0, 0x0, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc74, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x80000000, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x3, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x10001, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x10004, {0x7, 0x1, 0x0, 0x0, 0x0, 0x7}, {}, 0x2}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x1, 0x2}}}}]}]}, 0x488}}, 0x0) r5 = fsopen(0x0, 0x1) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) fsmount(r5, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r5, 0x7, 0x0, 0x0, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f00000004c0)={[{@resuid}, {@init_itable}, {@stripe}, {@noblock_validity}]}, 0x3, 0x453, &(0x7f0000001f80)="$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") getsockopt(r6, 0x28, 0x0, &(0x7f00000012c0)=""/4096, &(0x7f0000000080)=0x1000) bind$inet(r1, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x4401701}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c0000002100200025bd7000fbdbdf250214a0060400100811000000"], 0x1c}}, 0x8890) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='pids.events\x00', 0x275a, 0x0) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r9, 0x560a, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x3, 0x3}) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x82013, r8, 0x81c5e000) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r10}, 0x10) uname(0x0) 10m13.079548487s ago: executing program 1 (id=3021): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) 10m11.986402015s ago: executing program 1 (id=3032): r0 = socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0xd, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800800040000000000050017"], 0x44}}, 0x0) 10m11.888614936s ago: executing program 1 (id=3033): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount$tmpfs(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x0, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) move_mount(r0, &(0x7f0000000080)='./file0/file0\x00', r0, &(0x7f0000000300)='./file0/../file0\x00', 0x0) 10m11.888037216s ago: executing program 1 (id=3035): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @random="08f272f808af"}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, 0x0, &(0x7f00000002c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8923, &(0x7f0000000000)={'vlan1\x00', @broadcast}) 10m8.025531592s ago: executing program 1 (id=3069): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) pwrite64(r1, &(0x7f0000000080)='3', 0x1, 0x0) 10m8.025454332s ago: executing program 32 (id=3069): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) pwrite64(r1, &(0x7f0000000080)='3', 0x1, 0x0) 1m6.421792629s ago: executing program 3 (id=6611): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='xdp_cpumap_enqueue\x00', r0, 0x0, 0x4000000000000}, 0x18) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x3f, &(0x7f0000000040)=0x7ff, 0x4) sendmsg$802154_dgram(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x24, @short={0x2, 0xffff, 0xffff}}, 0x14, &(0x7f0000000080)={0x0}}, 0x0) recvmmsg(r1, &(0x7f0000001480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x60, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1600000000000000040000000100000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000003a5950f2cfe5e104d386b44748fc93daf0ecb8d022454ad0a130979d3d58d1a5954de1ca2d1ecd55d8ea1f8de500299bf940c874b7400567e20f84f0082f2bb6615a8967ea7eb61a0995fdc8583b2ea78d4f23b0848c464d49426c467a941f6c8abfc77e01468823558234435a3a77ddef32cba895651478c84dc71eae9a535d8f1c6767e7d577798cd8519ac4f3c547adeced85692d5b033004bfa2cfaf345af53a54cf05a6f774be1ec55900"/200], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="5b00000000007df1788cb953efa20100000000000000e4f8ad12484ef2d800b21e27fb5bc9ecb5206066b1209a69265d5c5575a2875903aca2d45513ec19184932f64d0f2868d0f76c8f167f0000000000000003c8c2e5e4", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r5}, 0x10) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) flistxattr(r6, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) faccessat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r7}, 0x10) kexec_load(0xb, 0x3, &(0x7f00000006c0)=[{&(0x7f0000000b00)="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", 0x1000, 0x5, 0x9}, {&(0x7f00000004c0)="feb12bf8a3f389b106e7491bbfb4dc347debab5c645e07e7d5f7a48c11297ea930574e1f531012667972f8987c94d2d6746b2e335cf103580cb285ca427f9e338e1e3110b2c32f3c6565d3dc51e5b387d91677afc25b8573", 0x58, 0x1, 0x8}, {&(0x7f0000000540)="b1d0cc8e1c8dc4c6d64ad196ba5dbe2eb8dc24d71203b2266c29d67c690f4389d93431353747cceeca69fb01fe33015170edfa7804036d031e8075de00f822990a2acacc9732aa7ddf2dbd881f52ed62e43cefa399f2f55938a1ca1701f52b", 0x5f, 0x46ac729a}], 0x150000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000000000)) r9 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) readv(r9, &(0x7f00000018c0)=[{&(0x7f0000000840)=""/4096, 0x1000}], 0x1) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 1m5.563556475s ago: executing program 3 (id=6628): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00'}, 0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000340)='thermal_power_cpu_get_power\x00', r0, 0x0, 0x1ff}, 0x18) socketpair(0x1d, 0x8000a, 0x0, &(0x7f0000000300)) r1 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000100)=0x100000001) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) connect$inet(r1, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) close(r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r2, 0x0, 0xc, &(0x7f0000000180)="0f", 0x1) getsockopt$inet_opts(r2, 0x0, 0x9, &(0x7f0000000200)=""/49, &(0x7f0000000080)=0x31) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x10e, &(0x7f0000000280)={[{@discard}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2a}}, {@stripe={'stripe', 0x3d, 0x8}}, {@orlov}, {@dioread_nolock}]}, 0x4, 0x45b, &(0x7f00000010c0)="$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") r3 = socket(0x10, 0x803, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$IEEE802154_SCAN_REQ(r4, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="9c94d01ce6376c90650cd948c108f9d207a2ad6438825a3bf0289b46e54b3b0f993458178f65708e8b445deea835d7611501fb06c120454e33f9ffd98a047f2710f8d63c7e55b06e1751cc15a637c67be8b2f5afd9079402c22f29d00842dc44931e68c90738ec6d1763d4edae81a8646ddfa6b02b92400b06710958c768682259934e9fefd304772721602925764eddf663b30de9a8aeb15fa6524f959053379623569519d12042f6fdc074ba986b256d7776a4d4d34877803653899b609589da466a13996fa87060cd445f96a234aedfce", @ANYRES16=r5, @ANYBLOB="000426bd7000fbdbdf250900000005001d001e0000000800140009000000050013000700000005001d0018000000"], 0x34}, 0x1, 0x0, 0x0, 0x8050}, 0xc045) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00'}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000600)='kfree\x00', r6}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000580)={'macvlan1\x00', &(0x7f0000000740)=@ethtool_rxnfc={0x31, 0xd, 0x0, {0x11, @hdata="a5a24a274dc11db21bda67c1d2f93729749887d9014f2bed33e819a7e9b4dd1da6a62a860efc54c9d382a9e2f3cb750fd93503ca", {0x0, @remote, 0x2, 0x10, [0x0, 0x9]}, @usr_ip6_spec={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, 0x379, 0x6, 0xd1}, {0x0, @empty, 0xe, 0xf7, [0x9, 0x7]}, 0xfffffffffffffffb, 0x7}, 0x5, [0xd9, 0x2, 0x4, 0x7, 0x0]}}) r8 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r8, 0xc04c5349, &(0x7f0000000140)={0x800, 0xed70, 0x4000a}) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}}) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0x43403d05, 0x0) 1m5.467464286s ago: executing program 3 (id=6630): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ff8}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) capset(&(0x7f00000002c0)={0x20080522}, &(0x7f0000000300)={0x5, 0x12eb3267, 0x97e, 0x401, 0xffffebd5}) 1m5.467011415s ago: executing program 3 (id=6631): r0 = open(&(0x7f0000000100)='.\x00', 0x591002, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@newlink={0x6c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x34, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x80}, @IFLA_VLAN_EGRESS_QOS={0x28, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5c0}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x7}}]}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x6c}}, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001140)='net\x00') epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000240), 0x1, 0x787, &(0x7f0000001000)="$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") r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x4, &(0x7f0000000440)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r6}, 0x10) writev(0xffffffffffffffff, &(0x7f00000000c0), 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000140), 0xfcb8) open(&(0x7f0000000140)='./bus\x00', 0x143142, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) r8 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r8, 0x4c04, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, "ef359f413bb90152f7d6d1ce5d29c3ee5e5ca9000f7c41499dc2aac63a01000000000000004faa2ad9c084a003ea00", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b900000000fffffffff2060000000000000200009700", [0x8]}) ioctl$EXT4_IOC_MOVE_EXT(r5, 0x40305829, &(0x7f0000000180)={0x17c04, 0xffffffffffffffff, 0x0, 0x100000001}) fstat(r4, &(0x7f00000000c0)) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x9, 0x2, 0x9, 0x6, 0x201, r0, 0x5, '\x00', r2, r4, 0x3, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x50) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f00000008c0)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@noquota}, {@abort}, {@noload}, {@noload}]}, 0x64, 0x50a, &(0x7f0000000200)="$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") r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0xf) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_uring_setup(0x7fdb, 0x0) fsopen(0x0, 0x0) memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) 1m4.619413761s ago: executing program 3 (id=6642): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ff8}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) capset(&(0x7f00000002c0)={0x20080522}, &(0x7f0000000300)={0x5, 0x12eb3267, 0x97e, 0x401, 0xffffebd5}) 1m3.760704247s ago: executing program 3 (id=6648): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f0000000200)={[{@noload}, {@nouid32}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x200040}}], [{@fowner_gt}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}]}, 0x6, 0x58a, &(0x7f0000000a00)="$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") syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./bus\x00', 0x400e, &(0x7f0000000280)={[{@i_version}, {@nobh}, {@data_err_ignore}, {@nolazytime}, {@init_itable_val={'init_itable', 0x3d, 0x4}}, {@acl}]}, 0x1, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x42, 0x0) pwritev2(r1, 0x0, 0x0, 0x7ffffe, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000080)={0x17c04, r0, 0x1000, 0x100100001, 0x0, 0x800}) 1m3.760341397s ago: executing program 33 (id=6648): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f0000000200)={[{@noload}, {@nouid32}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x200040}}], [{@fowner_gt}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}]}, 0x6, 0x58a, &(0x7f0000000a00)="$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") syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./bus\x00', 0x400e, &(0x7f0000000280)={[{@i_version}, {@nobh}, {@data_err_ignore}, {@nolazytime}, {@init_itable_val={'init_itable', 0x3d, 0x4}}, {@acl}]}, 0x1, 0x42f, &(0x7f0000000940)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x42, 0x0) pwritev2(r1, 0x0, 0x0, 0x7ffffe, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000080)={0x17c04, r0, 0x1000, 0x100100001, 0x0, 0x800}) 3.160044718s ago: executing program 5 (id=7859): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffff7f850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) io_setup(0x2, &(0x7f0000000200)=0x0) io_submit(r1, 0x1, &(0x7f00000000c0)=[&(0x7f0000000040)={0x1802, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}]) 3.078950298s ago: executing program 5 (id=7862): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000040), 0xfe, 0x4f2, &(0x7f0000000b00)="$eJzs3d9rHFsdAPDvTHbvbdpcN1d9uF6wLbaSFO0maWwbfKgKok8Ftb7XmGxDyCZbkk3bhKIp/gGCiAq+6JMvgn+AIP0TRCjou6gooq0++FAd2d3ZmKa7+UE3u97s5wMnc8782O85GebsnJlhJ4ChdTEiJiMiy7LsSkSU8vlpnmKnlRrrvXj+eKGRksiyO39LIsnntT/r7Xx6Lt/sTER87csR30xej7uxtb0yX61W1vPyVH01eZll21eXV+eXKkuVtdnZmRtzN+euz033pJ3jEXHri3/6wXd/9qVbv/r0w9/f/cvkt1oNbNnbjl5qNb3Y/F+0FSJi/SSCDUih2cKW6wOuCwAAB2uc7384Ij4REVeiFCPNszkAAADgNMk+NxYvk9b9PwAAAOB0SiNiLJK0nD/vOxZpWi63nuH9aJxNq7WN+qey0u71gvEopveWq5Xp/NmB8SgmjfJM/oxtu3xtX3k2It6NiO+XRpvl8kKtujjQKx8AAAAwPM7tG///s9Qa/wMAAACnzPigKwAAAACcOON/AAAAOP2M/wEAAOBU+8rt242Utd9/vfhga3Ol9uDqYmVjpby6uVBeqK3fLy/VakvN3+xbPezzqrXa/c/E2uajqXploz61sbV9d7W2uVa/u/zKK7ABAACAPnr3wtPfJRGx89nRNCKyZM+yYkQ2snflQv/rB5yc9Dgr//Hk6gH038igKwAMjFN6GF7FQVcAGLjD+oGuD+/8uvd1AQAATsbEx3bv/zdTw1v5smSgNQNOWn7/P3Gsw/Bx/x+Gl/t/MLyKB50BGBTAqZce4VB/8/v/WXasSgEAAD031kxJWs7HAWORpuVyxDvN1wIUk3vL1cp0RHwoIn5bKr7dKM80t0xcHgAAAAAAAAAAAAAAAAAAAAAAAACAI8qyJLIuRnfXAQAAAD7IItI/J/n7vyZKl8f2Xx94K/lXqTmNiIc/vvPDR/P1+vpMY/7fd+fXf5TPv9bvqxcAAABAJ+1xenscDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC99OL544V26mfcv34hIsY7xS/Emeb0TBQj4uw/kijs2S6JiJEexN95EhHvdYqfNKoV43kt9sdPI2J0wPHP9SA+DLOnjf7n852OvzQuNqedj79Cnt5U9/4v3e3/Rrr0f+90+sD09VnvP/vFVNf4TyLeL3Tuf9rxky7xLx2xjd/4+vZ2t2XZTyMmOn7/JK/EmkoK96c2travLq/OL1WWKmuzszM35m7OXZ+bnrq3XK3kfzvG+N7Hf/mfg9p/tkv88UPaf/mI7f/3s0fPP9LKFvctKsZPsmzyUuf9/16X+O3vvk/mu7tRnmjnd1r5vc7//DfnLxzQ/sUu7T9s/08esf1XvvqdPxxxVQCgDza2tlfmq9XK+vEyScTOG2wuM1yZ0ehj0Pk4aJ32SWwf6vPtPNT/xS44dmZwfRIAAHAy/nfSP+iaAAAAAAAAAAAAAAAAAAAAwPA67GfAogc/J7Y/5s5gmgoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcKD/BgAA//+6ychX") 2.88760787s ago: executing program 5 (id=7867): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) fcntl$lock(r0, 0x5, 0x0) 2.80740915s ago: executing program 5 (id=7870): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000400)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = open(&(0x7f0000000300)='./file1\x00', 0x14927e, 0x0) fallocate(r1, 0x0, 0x0, 0x1001f0) 2.746967191s ago: executing program 5 (id=7876): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00'}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={r1, 0x58, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bind$packet(r0, &(0x7f0000000140)={0x11, 0x1a, r2, 0x1, 0x3, 0x6, @remote}, 0x14) mkdir(&(0x7f0000000000)='./file0\x00', 0x4f) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) umount2(&(0x7f0000000240)='./file0\x00', 0x0) 2.722881841s ago: executing program 5 (id=7877): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000000000000000800040001000000", 0x24) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000001000/0x1000)=nil) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b00)={&(0x7f0000000ac0)='mm_page_free_batched\x00', r4}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 1.135633052s ago: executing program 0 (id=7924): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000000), &(0x7f0000000180)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000040), 0xfe, 0x4f2, &(0x7f0000000b00)="$eJzs3d9rHFsdAPDvTHbvbdpcN1d9uF6wLbaSFO0maWwbfKgKok8Ftb7XmGxDyCZbkk3bhKIp/gGCiAq+6JMvgn+AIP0TRCjou6gooq0++FAd2d3ZmKa7+UE3u97s5wMnc8782O85GebsnJlhJ4ChdTEiJiMiy7LsSkSU8vlpnmKnlRrrvXj+eKGRksiyO39LIsnntT/r7Xx6Lt/sTER87csR30xej7uxtb0yX61W1vPyVH01eZll21eXV+eXKkuVtdnZmRtzN+euz033pJ3jEXHri3/6wXd/9qVbv/r0w9/f/cvkt1oNbNnbjl5qNb3Y/F+0FSJi/SSCDUih2cKW6wOuCwAAB2uc7384Ij4REVeiFCPNszkAAADgNMk+NxYvk9b9PwAAAOB0SiNiLJK0nD/vOxZpWi63nuH9aJxNq7WN+qey0u71gvEopveWq5Xp/NmB8SgmjfJM/oxtu3xtX3k2It6NiO+XRpvl8kKtujjQKx8AAAAwPM7tG///s9Qa/wMAAACnzPigKwAAAACcOON/AAAAOP2M/wEAAOBU+8rt242Utd9/vfhga3Ol9uDqYmVjpby6uVBeqK3fLy/VakvN3+xbPezzqrXa/c/E2uajqXploz61sbV9d7W2uVa/u/zKK7ABAACAPnr3wtPfJRGx89nRNCKyZM+yYkQ2snflQv/rB5yc9Dgr//Hk6gH038igKwAMjFN6GF7FQVcAGLjD+oGuD+/8uvd1AQAATsbEx3bv/zdTw1v5smSgNQNOWn7/P3Gsw/Bx/x+Gl/t/MLyKB50BGBTAqZce4VB/8/v/WXasSgEAAD031kxJWs7HAWORpuVyxDvN1wIUk3vL1cp0RHwoIn5bKr7dKM80t0xcHgAAAAAAAAAAAAAAAAAAAAAAAACAI8qyJLIuRnfXAQAAAD7IItI/J/n7vyZKl8f2Xx94K/lXqTmNiIc/vvPDR/P1+vpMY/7fd+fXf5TPv9bvqxcAAABAJ+1xenscDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC99OL544V26mfcv34hIsY7xS/Emeb0TBQj4uw/kijs2S6JiJEexN95EhHvdYqfNKoV43kt9sdPI2J0wPHP9SA+DLOnjf7n852OvzQuNqedj79Cnt5U9/4v3e3/Rrr0f+90+sD09VnvP/vFVNf4TyLeL3Tuf9rxky7xLx2xjd/4+vZ2t2XZTyMmOn7/JK/EmkoK96c2travLq/OL1WWKmuzszM35m7OXZ+bnrq3XK3kfzvG+N7Hf/mfg9p/tkv88UPaf/mI7f/3s0fPP9LKFvctKsZPsmzyUuf9/16X+O3vvk/mu7tRnmjnd1r5vc7//DfnLxzQ/sUu7T9s/08esf1XvvqdPxxxVQCgDza2tlfmq9XK+vEyScTOG2wuM1yZ0ehj0Pk4aJ32SWwf6vPtPNT/xS44dmZwfRIAAHAy/nfSP+iaAAAAAAAAAAAAAAAAAAAAwPA67GfAogc/J7Y/5s5gmgoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcKD/BgAA//+6ychX") 985.833692ms ago: executing program 6 (id=7929): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) pivot_root(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='./file0/file0\x00') 914.842013ms ago: executing program 0 (id=7930): r0 = syz_open_dev$vcsa(&(0x7f0000000240), 0x40000000000009, 0x100) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0xfeb5) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000004000000e27f000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008088100b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000001e40)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f0000000580)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r2}, &(0x7f0000000080), &(0x7f0000000180)='%pI4 \x00'}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) clock_gettime(0x0, &(0x7f00000004c0)={0x0, 0x0}) mq_timedsend(r0, &(0x7f00000003c0)="606ab2d14606f1bbff316a95438c9db2b2bc5c2621efe65ca2e5fb26854b90bca95a7ba1e35d8cd5a15eabc7fc315324d900fffb4a03fb98164aea5a8f48d0db770bfe965ed07a2a553479623143d66051ad05815ddd98cf6c985b9025981beb3b7946115ae830ce8b", 0x69, 0x90000000, &(0x7f0000000500)={r5, r6+10000000}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x61680, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000300)='rxrpc_rx_done\x00', r9}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0x7, 0x4, 0x700, 0x700, 0x2c, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x317, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r7}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setxattr$trusted_overlay_upper(&(0x7f0000000200)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) 911.687293ms ago: executing program 6 (id=7931): write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000085"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2000008, &(0x7f00000003c0), 0x0, 0x52e, &(0x7f0000000f00)="$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") 628.850755ms ago: executing program 2 (id=7933): r0 = socket$kcm(0x29, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2800001, 0xc3072, 0xffffffffffffffff, 0x0) execve(0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000070000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x804, @void, @value}, 0x94) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffffff0000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='kmem_cache_free\x00', r5}, 0x10) syz_emit_ethernet(0x9a, &(0x7f0000000300)={@link_local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010700", 0x64, 0x11, 0x0, @private1, @mcast2, {[], {0x0, 0xe22, 0x64, 0x0, @wg=@response={0x2, 0x3, 0x3, "25dd80e966fae5e10da5b74de90c0c6b0d835f3b6e6e3996322cafec7ac3d8ea", "b18ad9456f70defe386fa86cc846f493", {"30b96a46282b516cd06fa8560a39ada5", "568046936d174155e3e7759daf582e25"}}}}}}}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r4}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c0000001a00010000000000000000000200000100000000000000000800010064"], 0x2c}}, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r0, 0x8983, &(0x7f00000001c0)) r6 = syz_open_procfs(0xffffffffffffffff, 0x0) r7 = socket(0x18, 0x0, 0x0) getpeername$packet(r7, 0x0, &(0x7f00000000c0)) r8 = dup2(r6, r7) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r7, 0x89f8, &(0x7f00000003c0)={'tunl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x10, 0x8000, 0x10000, 0x3, {{0x25, 0x4, 0x1, 0x2b, 0x94, 0x68, 0x0, 0x8, 0x4, 0x0, @multicast1, @local, {[@lsrr={0x83, 0x7, 0x99, [@broadcast]}, @end, @generic={0x44, 0x3, '8'}, @timestamp_addr={0x44, 0x34, 0xf5, 0x1, 0x9, [{@empty, 0x6c}, {@multicast1, 0x10}, {@local, 0x1}, {@dev={0xac, 0x14, 0x14, 0x1a}, 0x19}, {@remote, 0x7a5c}, {@multicast1, 0x7}]}, @timestamp_addr={0x44, 0x2c, 0x51, 0x1, 0x6, [{@private=0xa010100, 0x6}, {@dev={0xac, 0x14, 0x14, 0x9}, 0x4}, {@local, 0x511d8ec2}, {@remote, 0x80000001}, {@loopback, 0x1}]}, @timestamp_addr={0x44, 0x14, 0x25, 0x1, 0x8, [{@multicast2, 0x6}, {@local}]}]}}}}}) r10 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x181802, 0x0) fcntl$setstatus(r10, 0x4, 0x2400) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES8=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0xa, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x8000}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r8}}, @map_idx={0x18, 0x1, 0x5, 0x0, 0x3}]}, &(0x7f0000000200)='syzkaller\x00', 0xf, 0x36, &(0x7f0000000280)=""/54, 0x40f00, 0x20, '\x00', r9, 0x25, r10, 0x8, &(0x7f0000000400)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000580)={0x5, 0x1, 0x4, 0xd6c}, 0x10, 0x0, 0x0, 0xa, &(0x7f00000005c0)=[r11, r3, r6, r6], &(0x7f0000000600)=[{0x3, 0x4, 0x2, 0xa}, {0x0, 0xfffeffff, 0x0, 0x8}, {0x5, 0x2, 0x5, 0x3}, {0x5, 0x4, 0xe, 0x6}, {0x2, 0x2, 0xb, 0xa}, {0x4, 0x4, 0x10, 0xc}, {0x1, 0x1, 0xa, 0xb}, {0x3, 0x4, 0xc, 0x9}, {0x4, 0x3, 0x10, 0xe}, {0x0, 0x5, 0xb, 0x6}], 0x10, 0xc6e, @void, @value}, 0x94) r12 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r12, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r12, r1}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x27}) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x4, 0x8, 0x40, 0x42, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 582.054925ms ago: executing program 2 (id=7934): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x13, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_NAME(0xf, &(0x7f0000000a40)='GPL\x00') fcntl$setlease(r0, 0x400, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffff7f850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) io_setup(0x2, &(0x7f0000000200)) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f0000000180)) shmctl$IPC_RMID(0x0, 0x0) 581.360855ms ago: executing program 6 (id=7936): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000040), 0xfe, 0x4f2, &(0x7f0000000b00)="$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") 534.481876ms ago: executing program 0 (id=7937): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='kfree\x00', r0}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/power/pm_freeze_timeout', 0x41, 0x3f6) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$nl_rdma(0x10, 0x3, 0x14) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000000714010000000000000000000800", @ANYRES32=r2], 0x30}}, 0x0) 534.258256ms ago: executing program 4 (id=7938): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000085"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2000008, &(0x7f00000003c0), 0x0, 0x52e, &(0x7f0000000f00)="$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") 461.372416ms ago: executing program 2 (id=7939): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[], 0x0, 0x2d, 0x0, 0x1, 0x6, 0x0, @void, @value}, 0x28) 456.239136ms ago: executing program 2 (id=7940): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000080000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) fcntl$lock(r0, 0x5, &(0x7f00000004c0)={0x1, 0x3, 0x1, 0x180000}) 435.072836ms ago: executing program 6 (id=7941): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000040), 0xfe, 0x4f2, &(0x7f0000000b00)="$eJzs3d9rHFsdAPDvTHbvbdpcN1d9uF6wLbaSFO0maWwbfKgKok8Ftb7XmGxDyCZbkk3bhKIp/gGCiAq+6JMvgn+AIP0TRCjou6gooq0++FAd2d3ZmKa7+UE3u97s5wMnc8782O85GebsnJlhJ4ChdTEiJiMiy7LsSkSU8vlpnmKnlRrrvXj+eKGRksiyO39LIsnntT/r7Xx6Lt/sTER87csR30xej7uxtb0yX61W1vPyVH01eZll21eXV+eXKkuVtdnZmRtzN+euz033pJ3jEXHri3/6wXd/9qVbv/r0w9/f/cvkt1oNbNnbjl5qNb3Y/F+0FSJi/SSCDUih2cKW6wOuCwAAB2uc7384Ij4REVeiFCPNszkAAADgNMk+NxYvk9b9PwAAAOB0SiNiLJK0nD/vOxZpWi63nuH9aJxNq7WN+qey0u71gvEopveWq5Xp/NmB8SgmjfJM/oxtu3xtX3k2It6NiO+XRpvl8kKtujjQKx8AAAAwPM7tG///s9Qa/wMAAACnzPigKwAAAACcOON/AAAAOP2M/wEAAOBU+8rt242Utd9/vfhga3Ol9uDqYmVjpby6uVBeqK3fLy/VakvN3+xbPezzqrXa/c/E2uajqXploz61sbV9d7W2uVa/u/zKK7ABAACAPnr3wtPfJRGx89nRNCKyZM+yYkQ2snflQv/rB5yc9Dgr//Hk6gH038igKwAMjFN6GF7FQVcAGLjD+oGuD+/8uvd1AQAATsbEx3bv/zdTw1v5smSgNQNOWn7/P3Gsw/Bx/x+Gl/t/MLyKB50BGBTAqZce4VB/8/v/WXasSgEAAD031kxJWs7HAWORpuVyxDvN1wIUk3vL1cp0RHwoIn5bKr7dKM80t0xcHgAAAAAAAAAAAAAAAAAAAAAAAACAI8qyJLIuRnfXAQAAAD7IItI/J/n7vyZKl8f2Xx94K/lXqTmNiIc/vvPDR/P1+vpMY/7fd+fXf5TPv9bvqxcAAABAJ+1xenscDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC99OL544V26mfcv34hIsY7xS/Emeb0TBQj4uw/kijs2S6JiJEexN95EhHvdYqfNKoV43kt9sdPI2J0wPHP9SA+DLOnjf7n852OvzQuNqedj79Cnt5U9/4v3e3/Rrr0f+90+sD09VnvP/vFVNf4TyLeL3Tuf9rxky7xLx2xjd/4+vZ2t2XZTyMmOn7/JK/EmkoK96c2travLq/OL1WWKmuzszM35m7OXZ+bnrq3XK3kfzvG+N7Hf/mfg9p/tkv88UPaf/mI7f/3s0fPP9LKFvctKsZPsmzyUuf9/16X+O3vvk/mu7tRnmjnd1r5vc7//DfnLxzQ/sUu7T9s/08esf1XvvqdPxxxVQCgDza2tlfmq9XK+vEyScTOG2wuM1yZ0ehj0Pk4aJ32SWwf6vPtPNT/xS44dmZwfRIAAHAy/nfSP+iaAAAAAAAAAAAAAAAAAAAAwPA67GfAogc/J7Y/5s5gmgoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcKD/BgAA//+6ychX") 423.541326ms ago: executing program 4 (id=7942): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000090000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3, 0x0, 0x6}, 0x18) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000900)=@mangle={'mangle\x00', 0x44, 0x6, 0x510, 0x0, 0x138, 0x210, 0x0, 0x138, 0x478, 0x478, 0x478, 0x478, 0x478, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@loopback, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'system_u:object_r:dbusd_etc_t:s0\x00'}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xa0, 0xd0, 0x0, {}, [@common=@unspec=@mac={{0x30}, {@multicast}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x570) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x398, 0xd0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x2c8, 0xffffffff, 0xffffffff, 0x2c8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0={0xfc, 0x0, '\x00', 0xff}, @private1={0xfc, 0x1, '\x00', 0x1}, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}, {{@uncond, 0x0, 0x1c8, 0x1f8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x4, 0x4, 0x1, 'syz1\x00', 0x2}}, @common=@inet=@socket1={{0x28}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x0, 0x0, 0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x3f8) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='mm_page_alloc\x00', r4}, 0x10) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={0xffffffffffffffff, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 411.345967ms ago: executing program 2 (id=7943): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000240)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) 411.036826ms ago: executing program 0 (id=7944): pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '\xd0\xae\xde\xc1\xaa \xff\xd8\x1d\x1b\xf8\x93)!|\xb0X\xa3\x96\xed\xa2\xab@\xa2m\x93\xdd\b<\x00t\xdc\xabl\xab!\xae\x16\xc4\xcd\xf9{\xdc5_;A\xd2{eC\x014\\\xb3\xc4\xce\xc3yS2-\x01\xbe\xaarW\x96O\xd3\x0f\xe2\xd7/\x17\x1d\xa7.8\x9f8-\xea<\x8d\x91\x90j\xea\xd5\xd5\xae\xcc\xc0\x97\xef\x10\x92\xea\x98|+\x00\x00\x00\x00\x00\x00\x00\x00'}}]}}) 350.285537ms ago: executing program 4 (id=7945): pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '\xd0\xae\xde\xc1\xaa \xff\xd8\x1d\x1b\xf8\x93)!|\xb0X\xa3\x96\xed\xa2\xab@\xa2m\x93\xdd\b<\x00t\xdc\xabl\xab!\xae\x16\xc4\xcd\xf9{\xdc5_;A\xd2{eC\x014\\\xb3\xc4\xce\xc3yS2-\x01\xbe\xaarW\x96O\xd3\x0f\xe2\xd7/\x17\x1d\xa7.8\x9f8-\xea<\x8d\x91\x90j\xea\xd5\xd5\xae\xcc\xc0\x97\xef\x10\x92\xea\x98|+\x00\x00\x00\x00\x00\x00\x00\x00'}}]}}) 325.897887ms ago: executing program 0 (id=7946): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r1}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {0x3}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x4}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x58}}, 0x8800) (fail_nth: 1) 93.935729ms ago: executing program 6 (id=7947): r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x28}}, 0x0) getsockname$packet(r1, 0x0, &(0x7f0000000200)) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=@newqdisc={0x24, 0x25, 0x3d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 71.023059ms ago: executing program 0 (id=7948): write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000085"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2000008, &(0x7f00000003c0), 0x0, 0x52e, &(0x7f0000000f00)="$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") 70.710079ms ago: executing program 6 (id=7949): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffff7f850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) io_setup(0x2, &(0x7f0000000200)=0x0) io_submit(r1, 0x1, &(0x7f00000000c0)=[&(0x7f0000000040)={0x1802, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}]) 69.590709ms ago: executing program 4 (id=7950): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x0, 0x2d, 0x0, 0x1, 0x6, 0x0, @void, @value}, 0x28) 50.891369ms ago: executing program 4 (id=7951): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r1}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {0x3}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x4}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x58}}, 0x8800) 38.630329ms ago: executing program 4 (id=7952): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000040), 0xfe, 0x4f2, &(0x7f0000000b00)="$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") 0s ago: executing program 2 (id=7953): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000080000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) fcntl$lock(r0, 0x5, &(0x7f00000004c0)={0x1, 0x3, 0x1, 0x180000}) kernel console output (not intermixed with test programs): apacity change from 0 to 1024 [ 1071.051581][ T821] EXT4-fs (loop5): 1 truncate cleaned up [ 1071.058910][ T827] EXT4-fs: EXT4-fs: inode_readahead_blks must be 0 or a power of 2 smaller than 2^31 [ 1071.063646][ T821] ext4 filesystem being mounted at /242/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1071.080470][ T827] loop4: detected capacity change from 0 to 512 [ 1071.089998][ T827] EXT4-fs: Ignoring removed i_version option [ 1071.096152][ T827] EXT4-fs: Ignoring removed nobh option [ 1071.102329][ T827] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1071.114666][ T827] EXT4-fs (loop4): 1 truncate cleaned up [ 1071.185629][ T758] can0 (unregistered): slcan off ptm0. [ 1071.219222][ T835] netlink: 'syz.0.7233': attribute type 10 has an invalid length. [ 1071.229565][ T835] bridge0: port 2(bridge_slave_1) entered disabled state [ 1071.236703][ T835] bridge0: port 1(bridge_slave_0) entered disabled state [ 1071.300187][ T840] loop0: detected capacity change from 0 to 512 [ 1071.304901][ T844] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 1071.318516][ T844] x_tables: ip6_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 1071.331362][ T844] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7236'. [ 1071.376949][ T840] EXT4-fs error (device loop0): ext4_acquire_dquot:6910: comm syz.0.7234: Failed to acquire dquot type 1 [ 1071.394670][ T840] EXT4-fs (loop0): 1 truncate cleaned up [ 1071.400884][ T840] ext4 filesystem being mounted at /261/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1071.418562][ T855] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 1071.429326][ T855] x_tables: ip6_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 1071.451150][ T860] wireguard0: entered promiscuous mode [ 1071.456824][ T860] wireguard0: entered allmulticast mode [ 1071.500844][ T867] loop6: detected capacity change from 0 to 1024 [ 1071.510918][ T867] EXT4-fs: Ignoring removed orlov option [ 1071.516678][ T867] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1071.518934][ T871] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 1071.535449][ T871] x_tables: ip6_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 1071.549542][ T871] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7248'. [ 1071.602036][ T882] vlan0: entered allmulticast mode [ 1071.641825][ T886] can0: slcan on ptm0. [ 1071.694956][ T882] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(10) [ 1071.701578][ T882] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1071.709499][ T882] vhci_hcd vhci_hcd.0: Device attached [ 1071.729264][ T890] vhci_hcd: connection closed [ 1071.729432][ T4586] vhci_hcd: stop threads [ 1071.738472][ T4586] vhci_hcd: release socket [ 1071.742905][ T4586] vhci_hcd: disconnect device [ 1071.829595][ T900] loop5: detected capacity change from 0 to 1024 [ 1071.858320][ T900] ext4 filesystem being mounted at /255/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1071.871638][ T899] FAULT_INJECTION: forcing a failure. [ 1071.871638][ T899] name failslab, interval 1, probability 0, space 0, times 0 [ 1071.884437][ T899] CPU: 1 UID: 0 PID: 899 Comm: syz.5.7256 Not tainted 6.12.0-syzkaller-00171-g23acd177540d #0 [ 1071.894896][ T899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 1071.904974][ T899] Call Trace: [ 1071.908259][ T899] [ 1071.911298][ T899] dump_stack_lvl+0xf2/0x150 [ 1071.915923][ T899] dump_stack+0x15/0x20 [ 1071.920119][ T899] should_fail_ex+0x223/0x230 [ 1071.924875][ T899] ? __alloc_skb+0x10b/0x310 [ 1071.929489][ T899] should_failslab+0x8f/0xb0 [ 1071.934112][ T899] kmem_cache_alloc_node_noprof+0x51/0x2b0 [ 1071.939951][ T899] __alloc_skb+0x10b/0x310 [ 1071.944421][ T899] audit_log_start+0x368/0x6b0 [ 1071.949309][ T899] audit_seccomp+0x4b/0x130 [ 1071.953825][ T899] __seccomp_filter+0x6fa/0x1180 [ 1071.958788][ T899] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1071.964435][ T899] ? vfs_write+0x596/0x920 [ 1071.968860][ T899] ? __schedule+0x6fa/0x930 [ 1071.973466][ T899] __secure_computing+0x9f/0x1c0 [ 1071.978430][ T899] syscall_trace_enter+0xd1/0x1f0 [ 1071.983481][ T899] do_syscall_64+0xaa/0x1c0 [ 1071.988029][ T899] ? clear_bhb_loop+0x55/0xb0 [ 1071.992775][ T899] ? clear_bhb_loop+0x55/0xb0 [ 1071.997478][ T899] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1072.003432][ T899] RIP: 0033:0x7fe4bda8e759 [ 1072.007897][ T899] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1072.027528][ T899] RSP: 002b:00007fe4bc707038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a3 [ 1072.036041][ T899] RAX: ffffffffffffffda RBX: 00007fe4bdc45f80 RCX: 00007fe4bda8e759 [ 1072.044021][ T899] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1072.051985][ T899] RBP: 00007fe4bc707090 R08: 0000000000000000 R09: 0000000000000000 [ 1072.059952][ T899] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1072.067932][ T899] R13: 0000000000000000 R14: 00007fe4bdc45f80 R15: 00007ffe2ff70878 [ 1072.075934][ T899] [ 1072.081668][ T899] Process accounting resumed [ 1072.105343][ T906] loop2: detected capacity change from 0 to 512 [ 1072.133995][ T916] loop5: detected capacity change from 0 to 1024 [ 1072.134059][ T906] EXT4-fs error (device loop2): ext4_acquire_dquot:6910: comm syz.2.7258: Failed to acquire dquot type 1 [ 1072.152779][ T906] EXT4-fs (loop2): 1 truncate cleaned up [ 1072.160185][ T916] ext4 filesystem being mounted at /256/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1072.172708][ T906] ext4 filesystem being mounted at /204/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1072.173625][ T913] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1072.191987][ T913] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1072.205345][ T916] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 1072.220962][ T916] EXT4-fs (loop5): Delayed block allocation failed for inode 16 at logical offset 32 with max blocks 1 with error 28 [ 1072.233343][ T916] EXT4-fs (loop5): This should not happen!! Data will be lost [ 1072.233343][ T916] [ 1072.243043][ T916] EXT4-fs (loop5): Total free blocks count 0 [ 1072.249028][ T916] EXT4-fs (loop5): Free/Dirty block details [ 1072.254975][ T916] EXT4-fs (loop5): free_blocks=4293918720 [ 1072.260767][ T916] EXT4-fs (loop5): dirty_blocks=16 [ 1072.266219][ T916] EXT4-fs (loop5): Block reservation details [ 1072.272315][ T916] EXT4-fs (loop5): i_reserved_data_blocks=1 [ 1072.280051][ T29] kauditd_printk_skb: 584 callbacks suppressed [ 1072.280067][ T29] audit: type=1326 audit(1731980887.929:44038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=914 comm="syz.5.7260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4bda8e759 code=0x7ffc0000 [ 1072.309676][ T29] audit: type=1326 audit(1731980887.929:44039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=914 comm="syz.5.7260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4bda8e759 code=0x7ffc0000 [ 1072.333219][ T29] audit: type=1326 audit(1731980887.929:44040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=914 comm="syz.5.7260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=113 compat=0 ip=0x7fe4bda8e759 code=0x7ffc0000 [ 1072.356696][ T29] audit: type=1326 audit(1731980887.929:44041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=914 comm="syz.5.7260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4bda8e759 code=0x7ffc0000 [ 1072.380223][ T29] audit: type=1326 audit(1731980887.929:44042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=914 comm="syz.5.7260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4bda8e759 code=0x7ffc0000 [ 1072.403663][ T29] audit: type=1326 audit(1731980887.929:44043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=914 comm="syz.5.7260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe4bda8e759 code=0x7ffc0000 [ 1072.427107][ T29] audit: type=1326 audit(1731980887.929:44044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=914 comm="syz.5.7260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4bda8e759 code=0x7ffc0000 [ 1072.450843][ T29] audit: type=1326 audit(1731980887.929:44045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=914 comm="syz.5.7260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fe4bda8e759 code=0x7ffc0000 [ 1072.474269][ T29] audit: type=1326 audit(1731980887.929:44046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=914 comm="syz.5.7260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4bda8e759 code=0x7ffc0000 [ 1072.497901][ T29] audit: type=1326 audit(1731980887.929:44047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=914 comm="syz.5.7260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=306 compat=0 ip=0x7fe4bda8e759 code=0x7ffc0000 [ 1072.527621][ T923] wireguard0: entered promiscuous mode [ 1072.533217][ T923] wireguard0: entered allmulticast mode [ 1072.548686][ T927] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 1072.568472][ T927] x_tables: ip6_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 1072.579434][ T878] can0 (unregistered): slcan off ptm0. [ 1072.605243][ T927] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7262'. [ 1072.707530][ T944] loop5: detected capacity change from 0 to 1024 [ 1072.731636][ T944] ext4 filesystem being mounted at /260/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1072.760329][ T944] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 1072.770420][ T951] loop4: detected capacity change from 0 to 512 [ 1072.777671][ T944] EXT4-fs (loop5): Delayed block allocation failed for inode 16 at logical offset 32 with max blocks 1 with error 28 [ 1072.793824][ T944] EXT4-fs (loop5): This should not happen!! Data will be lost [ 1072.793824][ T944] [ 1072.803602][ T944] EXT4-fs (loop5): Total free blocks count 0 [ 1072.809711][ T944] EXT4-fs (loop5): Free/Dirty block details [ 1072.815709][ T944] EXT4-fs (loop5): free_blocks=4293918720 [ 1072.821459][ T944] EXT4-fs (loop5): dirty_blocks=16 [ 1072.826671][ T944] EXT4-fs (loop5): Block reservation details [ 1072.832705][ T944] EXT4-fs (loop5): i_reserved_data_blocks=1 [ 1072.843317][ T953] loop6: detected capacity change from 0 to 512 [ 1072.872778][ T951] EXT4-fs error (device loop4): ext4_acquire_dquot:6910: comm syz.4.7274: Failed to acquire dquot type 1 [ 1072.885025][ T951] EXT4-fs (loop4): 1 truncate cleaned up [ 1072.893307][ T951] ext4 filesystem being mounted at /265/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1072.894410][ T953] EXT4-fs error (device loop6): ext4_acquire_dquot:6910: comm syz.6.7275: Failed to acquire dquot type 1 [ 1072.920175][ T953] EXT4-fs (loop6): 1 truncate cleaned up [ 1072.926872][ T953] ext4 filesystem being mounted at /108/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1072.930134][ T961] can0: slcan on ptm0. [ 1072.946839][ T963] loop5: detected capacity change from 0 to 512 [ 1072.960141][ T963] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 1072.968725][ T963] EXT4-fs (loop5): orphan cleanup on readonly fs [ 1072.975336][ T963] EXT4-fs warning (device loop5): ext4_enable_quotas:7128: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1072.990322][ T963] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 1072.998917][ T963] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.7277: bg 0: block 40: padding at end of block bitmap is not set [ 1073.013571][ T963] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 1073.019851][ T972] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 1073.023165][ T963] EXT4-fs (loop5): 1 truncate cleaned up [ 1073.036986][ T970] wireguard0: entered promiscuous mode [ 1073.041231][ T972] x_tables: ip6_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 1073.042478][ T970] wireguard0: entered allmulticast mode [ 1073.079663][ T972] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7279'. [ 1073.142315][ T981] loop4: detected capacity change from 0 to 1024 [ 1073.157005][ T981] EXT4-fs: Ignoring removed orlov option [ 1073.162780][ T981] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1073.180268][ T988] loop0: detected capacity change from 0 to 1024 [ 1073.208344][ T988] ext4 filesystem being mounted at /267/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1073.236228][ T988] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 1073.251595][ T988] EXT4-fs (loop0): Delayed block allocation failed for inode 16 at logical offset 32 with max blocks 1 with error 28 [ 1073.263924][ T988] EXT4-fs (loop0): This should not happen!! Data will be lost [ 1073.263924][ T988] [ 1073.273671][ T988] EXT4-fs (loop0): Total free blocks count 0 [ 1073.279718][ T988] EXT4-fs (loop0): Free/Dirty block details [ 1073.285652][ T988] EXT4-fs (loop0): free_blocks=4293918720 [ 1073.291417][ T988] EXT4-fs (loop0): dirty_blocks=16 [ 1073.296631][ T988] EXT4-fs (loop0): Block reservation details [ 1073.302659][ T988] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 1073.342853][ T1002] loop0: detected capacity change from 0 to 512 [ 1073.352379][ T1004] loop4: detected capacity change from 0 to 512 [ 1073.367438][ T1002] EXT4-fs error (device loop0): ext4_acquire_dquot:6910: comm syz.0.7291: Failed to acquire dquot type 1 [ 1073.378249][ T1004] EXT4-fs error (device loop4): ext4_acquire_dquot:6910: comm syz.4.7292: Failed to acquire dquot type 1 [ 1073.379407][ T1002] EXT4-fs (loop0): 1 truncate cleaned up [ 1073.391672][ T1004] EXT4-fs (loop4): 1 truncate cleaned up [ 1073.396236][ T1002] ext4 filesystem being mounted at /268/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1073.411938][ T1004] ext4 filesystem being mounted at /269/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1073.472473][ T1013] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 1073.483295][ T1013] x_tables: ip6_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 1073.497146][ T1013] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7294'. [ 1073.549601][ T1023] loop5: detected capacity change from 0 to 512 [ 1073.567307][ T1023] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 1073.578801][ T1023] EXT4-fs (loop5): orphan cleanup on readonly fs [ 1073.585333][ T1023] EXT4-fs warning (device loop5): ext4_enable_quotas:7128: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1073.588896][ T1021] loop4: detected capacity change from 0 to 4096 [ 1073.601376][ T1023] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 1073.613713][ T1023] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.7299: bg 0: block 40: padding at end of block bitmap is not set [ 1073.628837][ T1023] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 1073.638115][ T1031] FAULT_INJECTION: forcing a failure. [ 1073.638115][ T1031] name fail_futex, interval 1, probability 0, space 0, times 1 [ 1073.638168][ T1023] EXT4-fs (loop5): 1 truncate cleaned up [ 1073.651085][ T1031] CPU: 1 UID: 0 PID: 1031 Comm: syz.0.7301 Not tainted 6.12.0-syzkaller-00171-g23acd177540d #0 [ 1073.667044][ T1031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 1073.677127][ T1031] Call Trace: [ 1073.680434][ T1031] [ 1073.683422][ T1031] dump_stack_lvl+0xf2/0x150 [ 1073.688034][ T1031] dump_stack+0x15/0x20 [ 1073.692273][ T1031] should_fail_ex+0x223/0x230 [ 1073.697036][ T1031] should_fail+0xb/0x10 [ 1073.701190][ T1031] get_futex_key+0x109/0x720 [ 1073.705807][ T1031] ? should_failslab+0x8f/0xb0 [ 1073.710596][ T1031] futex_lock_pi+0xe4/0x670 [ 1073.715130][ T1031] ? __pfx_futex_wake_mark+0x10/0x10 [ 1073.720522][ T1031] do_futex+0x211/0x370 [ 1073.724838][ T1031] __se_sys_futex+0x25d/0x3a0 [ 1073.729606][ T1031] ? fput+0x1c4/0x200 [ 1073.733610][ T1031] __x64_sys_futex+0x78/0x90 [ 1073.738248][ T1031] x64_sys_call+0x23c4/0x2d60 [ 1073.742937][ T1031] do_syscall_64+0xc9/0x1c0 [ 1073.747503][ T1031] ? clear_bhb_loop+0x55/0xb0 [ 1073.752237][ T1031] ? clear_bhb_loop+0x55/0xb0 [ 1073.756925][ T1031] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1073.762905][ T1031] RIP: 0033:0x7f652ec5e759 [ 1073.767336][ T1031] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1073.787041][ T1031] RSP: 002b:00007f652d8b6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1073.795464][ T1031] RAX: ffffffffffffffda RBX: 00007f652ee16058 RCX: 00007f652ec5e759 [ 1073.803443][ T1031] RDX: 0000000000000000 RSI: 000080000000000d RDI: 000000002000cffc [ 1073.811420][ T1031] RBP: 00007f652d8b6090 R08: 0000000000000000 R09: 0000000000000000 [ 1073.819411][ T1031] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1073.827653][ T1031] R13: 0000000000000001 R14: 00007f652ee16058 R15: 00007ffc8064dcf8 [ 1073.835641][ T1031] [ 1073.861926][ T1034] loop4: detected capacity change from 0 to 1024 [ 1073.892539][ T1038] loop0: detected capacity change from 0 to 512 [ 1073.912792][ T1034] ext4 filesystem being mounted at /273/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1073.933708][ T1034] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 1073.951556][ T1034] EXT4-fs (loop4): Delayed block allocation failed for inode 16 at logical offset 32 with max blocks 1 with error 28 [ 1073.963939][ T1034] EXT4-fs (loop4): This should not happen!! Data will be lost [ 1073.963939][ T1034] [ 1073.970656][ T1038] EXT4-fs error (device loop0): ext4_acquire_dquot:6910: comm syz.0.7304: Failed to acquire dquot type 1 [ 1073.973673][ T1034] EXT4-fs (loop4): Total free blocks count 0 [ 1073.986766][ T1038] EXT4-fs (loop0): 1 truncate cleaned up [ 1073.990953][ T1034] EXT4-fs (loop4): Free/Dirty block details [ 1073.997617][ T1038] ext4 filesystem being mounted at /272/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1074.002461][ T1034] EXT4-fs (loop4): free_blocks=4293918720 [ 1074.002480][ T1034] EXT4-fs (loop4): dirty_blocks=16 [ 1074.024005][ T1034] EXT4-fs (loop4): Block reservation details [ 1074.030021][ T1034] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 1074.036521][ T956] can0 (unregistered): slcan off ptm0. [ 1074.279878][ T1058] loop4: detected capacity change from 0 to 512 [ 1074.378823][ T1058] EXT4-fs error (device loop4): ext4_acquire_dquot:6910: comm syz.4.7306: Failed to acquire dquot type 1 [ 1074.411816][ T1058] EXT4-fs (loop4): 1 truncate cleaned up [ 1074.437114][ T1058] ext4 filesystem being mounted at /274/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1074.492263][ T1071] loop6: detected capacity change from 0 to 1024 [ 1074.531138][ T1071] ext4 filesystem being mounted at /118/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1074.578948][ T1079] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 1074.587938][ T1079] x_tables: ip6_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 1074.610809][ T1080] can0: slcan on ptm0. [ 1074.636377][ T1079] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7316'. [ 1074.687506][ T1082] loop4: detected capacity change from 0 to 1024 [ 1074.697884][ T1082] EXT4-fs: Ignoring removed orlov option [ 1074.703674][ T1082] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1074.722414][ T1088] loop6: detected capacity change from 0 to 512 [ 1074.758137][ T1088] EXT4-fs error (device loop6): ext4_acquire_dquot:6910: comm syz.6.7320: Failed to acquire dquot type 1 [ 1074.771102][ T1088] EXT4-fs (loop6): 1 truncate cleaned up [ 1074.778987][ T1088] ext4 filesystem being mounted at /119/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1074.885253][ T1104] can1: slcan on ptm2. [ 1075.021813][ T1114] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1075.030563][ T1114] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1075.110640][ T1115] loop6: detected capacity change from 0 to 512 [ 1075.126175][ T1115] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1075.168257][ T1115] EXT4-fs mount: 120 callbacks suppressed [ 1075.168277][ T1115] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1075.186663][ T1115] ext4 filesystem being mounted at /121/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1075.395631][ T1075] can0 (unregistered): slcan off ptm0. [ 1075.449163][ T1119] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 1075.474008][ T1119] x_tables: ip6_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 1075.624897][ T1126] loop0: detected capacity change from 0 to 256 [ 1075.705718][ T1096] can1 (unregistered): slcan off ptm2. [ 1075.919196][ T1146] loop4: detected capacity change from 0 to 512 [ 1075.946568][ T1147] can0: slcan on ptm0. [ 1075.954878][ T1146] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 1075.973112][ T1146] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1075.990037][ T1146] EXT4-fs warning (device loop4): ext4_enable_quotas:7128: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1076.020929][ T1146] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 1076.034808][ T1146] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.7340: bg 0: block 40: padding at end of block bitmap is not set [ 1076.088715][ T1146] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 1076.100158][ T1152] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1076.111327][ T1146] EXT4-fs (loop4): 1 truncate cleaned up [ 1076.118385][ T1152] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1076.135217][ T1146] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1076.167235][T29274] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1076.286560][ T1162] can1: slcan on ptm2. [ 1076.396641][T31669] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1076.421987][ T1168] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7348'. [ 1076.449498][ T1172] loop6: detected capacity change from 0 to 512 [ 1076.458229][ T1174] netlink: 'syz.4.7351': attribute type 10 has an invalid length. [ 1076.466283][ T1174] bridge0: port 2(bridge_slave_1) entered disabled state [ 1076.467441][ T1172] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 1076.473515][ T1174] bridge0: port 1(bridge_slave_0) entered disabled state [ 1076.487086][ T1172] EXT4-fs (loop6): orphan cleanup on readonly fs [ 1076.492132][ T1174] bridge0: port 2(bridge_slave_1) entered blocking state [ 1076.494817][ T1172] EXT4-fs warning (device loop6): ext4_enable_quotas:7128: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1076.501608][ T1174] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1076.518283][ T1172] EXT4-fs (loop6): Cannot turn on quotas: error -117 [ 1076.523532][ T1174] bridge0: port 1(bridge_slave_0) entered blocking state [ 1076.537091][ T1172] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.7350: bg 0: block 40: padding at end of block bitmap is not set [ 1076.537377][ T1172] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 1076.551357][ T1174] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1076.553273][ T1174] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1076.561665][ T1172] EXT4-fs (loop6): 1 truncate cleaned up [ 1076.583029][ T1172] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1076.611691][T31669] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1076.634634][ T1180] loop6: detected capacity change from 0 to 1024 [ 1076.657114][ T1180] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1076.670789][ T1180] ext4 filesystem being mounted at /125/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1076.695284][ T1180] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 1076.710680][ T1180] EXT4-fs (loop6): Delayed block allocation failed for inode 16 at logical offset 32 with max blocks 1 with error 28 [ 1076.723083][ T1180] EXT4-fs (loop6): This should not happen!! Data will be lost [ 1076.723083][ T1180] [ 1076.732783][ T1180] EXT4-fs (loop6): Total free blocks count 0 [ 1076.738850][ T1180] EXT4-fs (loop6): Free/Dirty block details [ 1076.744778][ T1180] EXT4-fs (loop6): free_blocks=4293918720 [ 1076.750558][ T1180] EXT4-fs (loop6): dirty_blocks=16 [ 1076.755798][ T1180] EXT4-fs (loop6): Block reservation details [ 1076.761799][ T1180] EXT4-fs (loop6): i_reserved_data_blocks=1 [ 1076.768156][ T1189] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1076.787829][ T1143] can0 (unregistered): slcan off ptm0. [ 1076.799867][T31669] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1076.806090][ T1192] loop0: detected capacity change from 0 to 1024 [ 1076.838592][ T1192] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1076.853472][ T1192] ext4 filesystem being mounted at /287/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1076.876523][ T1192] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 1076.905223][ T1192] EXT4-fs (loop0): Delayed block allocation failed for inode 16 at logical offset 32 with max blocks 1 with error 28 [ 1076.917594][ T1192] EXT4-fs (loop0): This should not happen!! Data will be lost [ 1076.917594][ T1192] [ 1076.927333][ T1192] EXT4-fs (loop0): Total free blocks count 0 [ 1076.933369][ T1192] EXT4-fs (loop0): Free/Dirty block details [ 1076.939303][ T1192] EXT4-fs (loop0): free_blocks=4293918720 [ 1076.945095][ T1192] EXT4-fs (loop0): dirty_blocks=16 [ 1076.950235][ T1192] EXT4-fs (loop0): Block reservation details [ 1076.956323][ T1192] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 1076.968988][ T1192] EXT4-fs (loop0): Online defrag not supported with bigalloc [ 1077.011294][ T1212] wireguard0: entered promiscuous mode [ 1077.016852][ T1212] wireguard0: entered allmulticast mode [ 1077.082743][ T1219] loop6: detected capacity change from 0 to 512 [ 1077.091410][ T1219] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1077.118779][ T1210] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1077.127718][ T1210] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1077.138333][ T1217] loop4: detected capacity change from 0 to 1024 [ 1077.146995][ T1217] EXT4-fs: EXT4-fs: inode_readahead_blks must be 0 or a power of 2 smaller than 2^31 [ 1077.160376][ T1219] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1077.173138][ T1219] ext4 filesystem being mounted at /126/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1077.195576][ T1161] can1 (unregistered): slcan off ptm2. [ 1077.233914][ T1217] loop4: detected capacity change from 0 to 512 [ 1077.257996][ T1217] EXT4-fs: Ignoring removed i_version option [ 1077.264093][ T1217] EXT4-fs: Ignoring removed nobh option [ 1077.313696][ T1217] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1077.325218][ T1217] EXT4-fs (loop4): 1 truncate cleaned up [ 1077.333646][ T1217] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1077.369251][ T1228] can0: slcan on ptm0. [ 1077.985822][ T29] kauditd_printk_skb: 780 callbacks suppressed [ 1077.985837][ T29] audit: type=1326 audit(1731980893.629:44810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1230 comm="syz.0.7370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f652ec5e759 code=0x7ffc0000 [ 1078.024933][ T1231] loop0: detected capacity change from 0 to 1024 [ 1078.032711][ T29] audit: type=1326 audit(1731980893.659:44811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1230 comm="syz.0.7370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f652ec5e759 code=0x7ffc0000 [ 1078.056280][ T29] audit: type=1326 audit(1731980893.659:44812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1230 comm="syz.0.7370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f652ec5e759 code=0x7ffc0000 [ 1078.080026][ T29] audit: type=1326 audit(1731980893.659:44813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1230 comm="syz.0.7370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f652ec5e759 code=0x7ffc0000 [ 1078.103667][ T29] audit: type=1326 audit(1731980893.659:44814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1230 comm="syz.0.7370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f652ec5e759 code=0x7ffc0000 [ 1078.127246][ T29] audit: type=1326 audit(1731980893.659:44815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1230 comm="syz.0.7370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f652ec5e759 code=0x7ffc0000 [ 1078.150741][ T29] audit: type=1326 audit(1731980893.659:44816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1230 comm="syz.0.7370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f652ec5e759 code=0x7ffc0000 [ 1078.174300][ T29] audit: type=1326 audit(1731980893.659:44817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1230 comm="syz.0.7370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f652ec5e759 code=0x7ffc0000 [ 1078.197950][ T29] audit: type=1326 audit(1731980893.659:44818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1230 comm="syz.0.7370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f652ec5e759 code=0x7ffc0000 [ 1078.221448][ T29] audit: type=1326 audit(1731980893.659:44819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1230 comm="syz.0.7370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f652ec5e759 code=0x7ffc0000 [ 1078.297020][ T1231] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1078.311296][T29274] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1078.320726][ T1231] ext4 filesystem being mounted at /289/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1078.335525][ T1226] can0 (unregistered): slcan off ptm0. [ 1078.355025][ T1231] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 1078.390862][ T1231] EXT4-fs (loop0): Delayed block allocation failed for inode 16 at logical offset 32 with max blocks 1 with error 28 [ 1078.403296][ T1231] EXT4-fs (loop0): This should not happen!! Data will be lost [ 1078.403296][ T1231] [ 1078.412990][ T1231] EXT4-fs (loop0): Total free blocks count 0 [ 1078.419014][ T1231] EXT4-fs (loop0): Free/Dirty block details [ 1078.424920][ T1231] EXT4-fs (loop0): free_blocks=4293918720 [ 1078.430714][ T1231] EXT4-fs (loop0): dirty_blocks=16 [ 1078.435856][ T1231] EXT4-fs (loop0): Block reservation details [ 1078.441911][ T1231] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 1078.479669][T28938] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1078.479741][T31669] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1078.507066][ T1242] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 1078.533431][ T1246] loop0: detected capacity change from 0 to 1024 [ 1078.537314][ T1242] x_tables: ip6_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 1078.540241][ T1246] EXT4-fs: Ignoring removed orlov option [ 1078.556376][ T1246] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1078.585932][ T1242] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7376'. [ 1078.600663][ T1246] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1078.624444][T28938] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1078.670387][ T1271] can0: slcan on ptm0. [ 1078.702810][ T1277] loop2: detected capacity change from 0 to 512 [ 1078.716355][ T1277] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 1078.724603][ T1277] EXT4-fs (loop2): orphan cleanup on readonly fs [ 1078.732296][ T1277] EXT4-fs warning (device loop2): ext4_enable_quotas:7128: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1078.748308][ T1277] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 1078.755469][ T1277] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.7384: bg 0: block 40: padding at end of block bitmap is not set [ 1078.771280][ T1277] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 1078.780870][ T1277] EXT4-fs (loop2): 1 truncate cleaned up [ 1078.787956][ T1277] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1078.812901][T30227] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1078.865803][ T1283] loop4: detected capacity change from 0 to 1024 [ 1078.903707][ T1289] loop2: detected capacity change from 0 to 512 [ 1078.923961][ T1283] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1078.939441][ T1283] ext4 filesystem being mounted at /289/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1078.956894][ T1289] EXT4-fs error (device loop2): ext4_acquire_dquot:6910: comm syz.2.7388: Failed to acquire dquot type 1 [ 1078.990033][ T1283] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 1079.016820][ T1289] EXT4-fs (loop2): 1 truncate cleaned up [ 1079.022644][ T1283] EXT4-fs (loop4): Delayed block allocation failed for inode 16 at logical offset 32 with max blocks 1 with error 28 [ 1079.029629][ T1289] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1079.034952][ T1283] EXT4-fs (loop4): This should not happen!! Data will be lost [ 1079.034952][ T1283] [ 1079.047514][ T1289] ext4 filesystem being mounted at /226/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1079.057037][ T1283] EXT4-fs (loop4): Total free blocks count 0 [ 1079.073509][ T1283] EXT4-fs (loop4): Free/Dirty block details [ 1079.079451][ T1283] EXT4-fs (loop4): free_blocks=4293918720 [ 1079.085336][ T1283] EXT4-fs (loop4): dirty_blocks=16 [ 1079.090488][ T1283] EXT4-fs (loop4): Block reservation details [ 1079.096502][ T1283] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 1079.105339][ T1289] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1079.179702][T29274] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1079.259658][ T1299] loop2: detected capacity change from 0 to 1024 [ 1079.278395][ T1299] EXT4-fs: Ignoring removed orlov option [ 1079.284126][ T1299] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1079.319199][ T1299] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1079.376553][T30227] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1079.418445][ T1307] loop4: detected capacity change from 0 to 512 [ 1079.459018][ T1307] EXT4-fs error (device loop4): ext4_acquire_dquot:6910: comm syz.4.7392: Failed to acquire dquot type 1 [ 1079.475795][ T1307] EXT4-fs (loop4): 1 truncate cleaned up [ 1079.481843][ T1307] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1079.495647][ T1257] can0 (unregistered): slcan off ptm0. [ 1079.520346][ T1307] ext4 filesystem being mounted at /292/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1079.551914][ T1319] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 1079.567166][ T1307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1079.585250][ T1317] loop2: detected capacity change from 0 to 4096 [ 1079.593678][ T1320] x_tables: ip6_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 1079.609392][ T1317] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1079.648166][T30227] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1079.712865][ T1326] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 1079.728807][ T1328] loop5: detected capacity change from 0 to 512 [ 1079.734197][ T1330] loop4: detected capacity change from 0 to 1024 [ 1079.742076][ T1326] x_tables: ip6_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 1079.743231][ T1330] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1079.761288][ T1328] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 1079.769507][ T1328] EXT4-fs (loop5): orphan cleanup on readonly fs [ 1079.771749][ T1331] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 1079.776250][ T1326] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7398'. [ 1079.797134][ T1328] EXT4-fs warning (device loop5): ext4_enable_quotas:7128: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1079.805656][ T1331] x_tables: ip6_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 1079.812527][ T1328] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 1079.831745][ T1328] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.7400: bg 0: block 40: padding at end of block bitmap is not set [ 1079.843734][ T1330] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1079.850168][ T1328] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 1079.874674][ T1328] EXT4-fs (loop5): 1 truncate cleaned up [ 1079.880993][ T1328] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1079.898887][T29274] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1079.908402][T29493] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1079.914182][ T1341] loop0: detected capacity change from 0 to 512 [ 1079.956717][ T1341] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 1079.964881][ T1341] EXT4-fs (loop0): orphan cleanup on readonly fs [ 1079.973078][ T1341] EXT4-fs warning (device loop0): ext4_enable_quotas:7128: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1079.988172][ T1341] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 1079.995281][ T1341] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.7405: bg 0: block 40: padding at end of block bitmap is not set [ 1080.010605][ T1341] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 1080.019598][ T1341] EXT4-fs (loop0): 1 truncate cleaned up [ 1080.025783][ T1341] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1080.049746][T28938] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1080.069392][ T1361] netlink: 'syz.0.7413': attribute type 10 has an invalid length. [ 1080.111910][ T1366] loop0: detected capacity change from 0 to 512 [ 1080.139637][ T1366] EXT4-fs error (device loop0): ext4_acquire_dquot:6910: comm syz.0.7415: Failed to acquire dquot type 1 [ 1080.152885][ T1366] EXT4-fs (loop0): 1 truncate cleaned up [ 1080.158978][ T1366] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1080.172361][ T1366] ext4 filesystem being mounted at /297/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1080.187199][ T1366] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1080.369265][ T1374] loop0: detected capacity change from 0 to 8192 [ 1080.387826][ T1374] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1080.602001][ T1378] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1080.621443][ T1378] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1080.934260][ T1389] netlink: 'syz.5.7424': attribute type 10 has an invalid length. [ 1080.955809][ T1389] bridge0: port 2(bridge_slave_1) entered disabled state [ 1080.962980][ T1389] bridge0: port 1(bridge_slave_0) entered disabled state [ 1081.000428][ T1391] netlink: 'syz.4.7425': attribute type 11 has an invalid length. [ 1081.004449][ T1389] bridge0: port 2(bridge_slave_1) entered blocking state [ 1081.015350][ T1389] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1081.022735][ T1389] bridge0: port 1(bridge_slave_0) entered blocking state [ 1081.029824][ T1389] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1081.043317][ T1389] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1081.142028][ T1399] loop4: detected capacity change from 0 to 512 [ 1081.200047][ T1399] EXT4-fs error (device loop4): ext4_acquire_dquot:6910: comm syz.4.7428: Failed to acquire dquot type 1 [ 1081.220369][ T1403] loop5: detected capacity change from 0 to 1024 [ 1081.230414][ T1403] EXT4-fs: Ignoring removed orlov option [ 1081.236191][ T1403] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1081.246125][ T1399] EXT4-fs (loop4): 1 truncate cleaned up [ 1081.252533][ T1399] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1081.261743][ T1411] loop0: detected capacity change from 0 to 512 [ 1081.268352][ T1399] ext4 filesystem being mounted at /299/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1081.283043][ T1399] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1081.294015][ T1403] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1081.307444][ T1411] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 1081.316202][ T1411] EXT4-fs (loop0): orphan cleanup on readonly fs [ 1081.325234][ T1411] EXT4-fs warning (device loop0): ext4_enable_quotas:7128: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1081.340977][ T1411] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 1081.348344][T29493] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1081.348502][ T1411] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.7435: bg 0: block 40: padding at end of block bitmap is not set [ 1081.372088][ T1411] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 1081.381815][ T1411] EXT4-fs (loop0): 1 truncate cleaned up [ 1081.388251][ T1411] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1081.413045][ T1423] netlink: 'syz.2.7438': attribute type 11 has an invalid length. [ 1081.423945][T28938] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1081.463452][ T1429] loop0: detected capacity change from 0 to 512 [ 1081.519098][ T1442] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 1081.535079][ T1442] x_tables: ip6_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 1081.537926][ T1429] EXT4-fs error (device loop0): ext4_acquire_dquot:6910: comm syz.0.7440: Failed to acquire dquot type 1 [ 1081.559463][ T1429] EXT4-fs (loop0): 1 truncate cleaned up [ 1081.567007][ T1429] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1081.579671][ T1429] ext4 filesystem being mounted at /305/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1081.592357][ T1429] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1081.614948][ T1448] wireguard0: entered promiscuous mode [ 1081.620580][ T1448] wireguard0: entered allmulticast mode [ 1081.652236][ T1452] loop2: detected capacity change from 0 to 512 [ 1081.671935][ T1452] EXT4-fs error (device loop2): ext4_acquire_dquot:6910: comm syz.2.7450: Failed to acquire dquot type 1 [ 1081.689302][ T1456] loop0: detected capacity change from 0 to 512 [ 1081.697972][ T1452] EXT4-fs (loop2): 1 truncate cleaned up [ 1081.704869][ T1452] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1081.718458][ T1452] ext4 filesystem being mounted at /241/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1081.730018][ T1452] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1081.740552][ T1456] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 1081.748676][ T1456] EXT4-fs (loop0): orphan cleanup on readonly fs [ 1081.755190][ T1456] EXT4-fs warning (device loop0): ext4_enable_quotas:7128: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1081.770230][ T1456] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 1081.777379][ T1456] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.7451: bg 0: block 40: padding at end of block bitmap is not set [ 1081.777513][ T1456] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 1081.777847][ T1456] EXT4-fs (loop0): 1 truncate cleaned up [ 1081.778249][ T1456] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1081.807604][T28938] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1081.872617][ T1471] loop2: detected capacity change from 0 to 512 [ 1081.888176][ T1473] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 1081.899997][ T1473] x_tables: ip6_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 1081.901383][ T1477] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 1081.922481][ T1471] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 1081.930642][ T1471] EXT4-fs (loop2): orphan cleanup on readonly fs [ 1081.941421][ T1471] EXT4-fs warning (device loop2): ext4_enable_quotas:7128: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1081.943354][ T1477] x_tables: ip6_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 1081.964980][ T1471] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 1081.970178][ T1483] loop5: detected capacity change from 0 to 1024 [ 1081.983031][ T1477] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7460'. [ 1081.989722][ T1471] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.7459: bg 0: block 40: padding at end of block bitmap is not set [ 1082.009479][ T1471] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 1082.020343][ T1483] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1082.028616][ T1471] EXT4-fs (loop2): 1 truncate cleaned up [ 1082.034137][ T1483] ext4 filesystem being mounted at /301/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1082.038457][ T1471] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1082.058235][ T1483] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 1082.075723][ T1483] EXT4-fs (loop5): Delayed block allocation failed for inode 16 at logical offset 32 with max blocks 1 with error 28 [ 1082.088027][ T1483] EXT4-fs (loop5): This should not happen!! Data will be lost [ 1082.088027][ T1483] [ 1082.097691][ T1483] EXT4-fs (loop5): Total free blocks count 0 [ 1082.103690][ T1483] EXT4-fs (loop5): Free/Dirty block details [ 1082.109694][ T1483] EXT4-fs (loop5): free_blocks=4293918720 [ 1082.115437][ T1483] EXT4-fs (loop5): dirty_blocks=16 [ 1082.120564][ T1483] EXT4-fs (loop5): Block reservation details [ 1082.126571][ T1483] EXT4-fs (loop5): i_reserved_data_blocks=1 [ 1082.132788][T30227] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1082.170615][T29493] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1082.172457][ T1495] loop2: detected capacity change from 0 to 512 [ 1082.196469][ T1495] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 1082.205739][ T1495] EXT4-fs (loop2): orphan cleanup on readonly fs [ 1082.218638][ T1495] EXT4-fs warning (device loop2): ext4_enable_quotas:7128: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1082.249090][ T1495] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 1082.261255][ T1495] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.7465: bg 0: block 40: padding at end of block bitmap is not set [ 1082.264113][ T1503] loop5: detected capacity change from 0 to 1024 [ 1082.277823][ T1495] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 1082.290842][ T1495] EXT4-fs (loop2): 1 truncate cleaned up [ 1082.297168][ T1495] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1082.297733][ T1503] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1082.321760][ T1503] ext4 filesystem being mounted at /303/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1082.321924][T30227] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1082.351222][ T1503] Process accounting resumed [ 1082.405978][ T1512] loop4: detected capacity change from 0 to 512 [ 1082.412388][T29493] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1082.421003][ T1515] loop2: detected capacity change from 0 to 1024 [ 1082.428996][ T1515] EXT4-fs: Ignoring removed orlov option [ 1082.434752][ T1515] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1082.443583][ T1512] EXT4-fs error (device loop4): ext4_acquire_dquot:6910: comm syz.4.7472: Failed to acquire dquot type 1 [ 1082.456460][ T1512] EXT4-fs (loop4): 1 truncate cleaned up [ 1082.462737][ T1512] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1082.477731][ T1512] ext4 filesystem being mounted at /305/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1082.489712][ T1515] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1082.504462][ T1512] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1082.558645][ T1529] loop6: detected capacity change from 0 to 4096 [ 1082.570028][T30227] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1082.580714][ T1529] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1082.607053][T31669] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1082.699439][ T1537] loop6: detected capacity change from 0 to 8192 [ 1082.727399][ T1537] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1082.901392][ T1556] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 1082.932394][ T1556] x_tables: ip6_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 1082.974357][ T1556] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7485'. [ 1083.024152][ T29] kauditd_printk_skb: 616 callbacks suppressed [ 1083.024168][ T29] audit: type=1326 audit(1731980898.659:45415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1560 comm="GPL" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ababae759 code=0x7ffc0000 [ 1083.053408][ T29] audit: type=1326 audit(1731980898.659:45416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1560 comm="GPL" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ababae759 code=0x7ffc0000 [ 1083.094718][ T29] audit: type=1326 audit(1731980898.719:45417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1560 comm="GPL" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9ababae759 code=0x7ffc0000 [ 1083.097785][ T1572] loop2: detected capacity change from 0 to 512 [ 1083.117789][ T29] audit: type=1326 audit(1731980898.719:45418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1560 comm="GPL" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ababae759 code=0x7ffc0000 [ 1083.147169][ T29] audit: type=1326 audit(1731980898.719:45419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1560 comm="GPL" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ababae759 code=0x7ffc0000 [ 1083.170111][ T29] audit: type=1326 audit(1731980898.729:45420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1560 comm="GPL" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9ababae759 code=0x7ffc0000 [ 1083.193105][ T29] audit: type=1326 audit(1731980898.729:45421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1560 comm="GPL" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ababae759 code=0x7ffc0000 [ 1083.216408][ T29] audit: type=1326 audit(1731980898.729:45422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1560 comm="GPL" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9ababae759 code=0x7ffc0000 [ 1083.239259][ T29] audit: type=1326 audit(1731980898.729:45423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1560 comm="GPL" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ababae759 code=0x7ffc0000 [ 1083.262242][ T29] audit: type=1326 audit(1731980898.729:45424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1560 comm="GPL" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f9ababae759 code=0x7ffc0000 [ 1083.304257][ T1571] loop4: detected capacity change from 0 to 1024 [ 1083.306166][ T1572] EXT4-fs error (device loop2): ext4_acquire_dquot:6910: comm syz.2.7491: Failed to acquire dquot type 1 [ 1083.311115][ T1571] EXT4-fs: Ignoring removed orlov option [ 1083.323717][ T1572] EXT4-fs (loop2): 1 truncate cleaned up [ 1083.327765][ T1571] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1083.349701][ T1572] ext4 filesystem being mounted at /251/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1083.393839][ T1582] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 1083.413349][ T1582] x_tables: ip6_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 1083.444090][ T1582] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7493'. [ 1083.499912][ T1584] loop0: detected capacity change from 0 to 8192 [ 1083.503990][ T1588] loop2: detected capacity change from 0 to 1024 [ 1083.513985][ T1588] EXT4-fs: Ignoring removed orlov option [ 1083.517877][ T1584] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1083.519723][ T1588] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1083.545174][ T1592] netlink: 'syz.5.7498': attribute type 10 has an invalid length. [ 1083.553906][ T1592] bridge0: port 2(bridge_slave_1) entered disabled state [ 1083.561106][ T1592] bridge0: port 1(bridge_slave_0) entered disabled state [ 1083.624692][ T1600] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 1083.636057][ T1600] x_tables: ip6_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 1083.650622][ T1602] loop0: detected capacity change from 0 to 512 [ 1083.662406][ T1600] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7501'. [ 1083.702108][ T1602] EXT4-fs error (device loop0): ext4_acquire_dquot:6910: comm syz.0.7502: Failed to acquire dquot type 1 [ 1083.725255][ T1602] EXT4-fs (loop0): 1 truncate cleaned up [ 1083.746944][ T1602] ext4 filesystem being mounted at /315/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1083.758856][ T1612] loop6: detected capacity change from 0 to 512 [ 1083.788077][ T1612] EXT4-fs error (device loop6): ext4_acquire_dquot:6910: comm syz.6.7506: Failed to acquire dquot type 1 [ 1083.828589][ T1612] EXT4-fs (loop6): 1 truncate cleaned up [ 1083.840291][ T1612] ext4 filesystem being mounted at /146/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1083.901353][ T1621] loop4: detected capacity change from 0 to 8192 [ 1083.910951][ T1621] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1084.230303][ T1628] netlink: 28 bytes leftover after parsing attributes in process `'. [ 1084.238493][ T1628] netlink: 28 bytes leftover after parsing attributes in process `'. [ 1084.543383][ T1641] loop4: detected capacity change from 0 to 1024 [ 1084.551896][ T1641] EXT4-fs: Ignoring removed orlov option [ 1084.557702][ T1641] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1084.687536][ T1659] netlink: 'syz.4.7523': attribute type 10 has an invalid length. [ 1084.704926][ T1659] bridge0: port 2(bridge_slave_1) entered disabled state [ 1084.712190][ T1659] bridge0: port 1(bridge_slave_0) entered disabled state [ 1084.732354][ T1661] wireguard0: entered promiscuous mode [ 1084.737980][ T1661] wireguard0: entered allmulticast mode [ 1084.778314][ T1667] loop5: detected capacity change from 0 to 512 [ 1084.798068][ T1667] EXT4-fs error (device loop5): ext4_acquire_dquot:6910: comm syz.5.7525: Failed to acquire dquot type 1 [ 1084.810322][ T1667] EXT4-fs (loop5): 1 truncate cleaned up [ 1084.816709][ T1667] ext4 filesystem being mounted at /314/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1084.886270][ T1676] loop4: detected capacity change from 0 to 512 [ 1084.917533][ T1676] EXT4-fs error (device loop4): ext4_acquire_dquot:6910: comm syz.4.7529: Failed to acquire dquot type 1 [ 1084.930420][ T1676] EXT4-fs (loop4): 1 truncate cleaned up [ 1084.936995][ T1676] ext4 filesystem being mounted at /320/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1084.979222][ T1680] loop2: detected capacity change from 0 to 1024 [ 1084.990846][ T1680] EXT4-fs: Ignoring removed orlov option [ 1084.996631][ T1680] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1085.071068][ T1699] loop5: detected capacity change from 0 to 1024 [ 1085.077923][ T1699] EXT4-fs: Ignoring removed orlov option [ 1085.083664][ T1699] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1085.090438][ T1700] loop4: detected capacity change from 0 to 1024 [ 1085.098022][ T1700] EXT4-fs: Ignoring removed orlov option [ 1085.103907][ T1700] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1085.199158][ T1713] loop2: detected capacity change from 0 to 512 [ 1085.205021][ T1715] netlink: 'syz.4.7543': attribute type 10 has an invalid length. [ 1085.222496][ T1713] EXT4-fs error (device loop2): ext4_acquire_dquot:6910: comm syz.2.7539: Failed to acquire dquot type 1 [ 1085.239416][ T1713] EXT4-fs (loop2): 1 truncate cleaned up [ 1085.245671][ T1720] syz.4.7544[1720] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1085.245731][ T1720] syz.4.7544[1720] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1085.249319][ T1713] ext4 filesystem being mounted at /257/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1085.257314][ T1720] syz.4.7544[1720] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1085.337613][ T1728] loop4: detected capacity change from 0 to 512 [ 1085.391962][ T1732] loop2: detected capacity change from 0 to 1024 [ 1085.401005][ T1732] EXT4-fs: Ignoring removed orlov option [ 1085.406722][ T1732] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1085.437640][ T1734] loop6: detected capacity change from 0 to 1024 [ 1085.444366][ T1734] EXT4-fs: Ignoring removed orlov option [ 1085.450098][ T1734] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1085.458494][ T1728] EXT4-fs error (device loop4): ext4_acquire_dquot:6910: comm syz.4.7548: Failed to acquire dquot type 1 [ 1085.471210][ T1728] EXT4-fs (loop4): 1 truncate cleaned up [ 1085.488829][ T1741] loop5: detected capacity change from 0 to 512 [ 1085.495784][ T1728] ext4 filesystem being mounted at /327/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1085.532972][ T1747] netlink: 'syz.4.7555': attribute type 10 has an invalid length. [ 1085.541050][ T1741] EXT4-fs error (device loop5): ext4_acquire_dquot:6910: comm syz.5.7553: Failed to acquire dquot type 1 [ 1085.550265][ T1753] syz.6.7556[1753] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1085.553811][ T1753] syz.6.7556[1753] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1085.564690][ T1741] EXT4-fs (loop5): 1 truncate cleaned up [ 1085.567523][ T1753] syz.6.7556[1753] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1085.579705][ T1741] ext4 filesystem being mounted at /324/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1085.644711][ T1759] loop2: detected capacity change from 0 to 512 [ 1085.664094][ T1761] loop6: detected capacity change from 0 to 1024 [ 1085.672351][ T1761] EXT4-fs: Ignoring removed orlov option [ 1085.678058][ T1761] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1085.687709][ T1759] EXT4-fs error (device loop2): ext4_acquire_dquot:6910: comm syz.2.7559: Failed to acquire dquot type 1 [ 1085.704949][ T1759] EXT4-fs (loop2): 1 truncate cleaned up [ 1085.711846][ T1759] ext4 filesystem being mounted at /261/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1085.790170][ T1780] syz.6.7568[1780] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1085.790231][ T1780] syz.6.7568[1780] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1085.790835][ T1778] loop2: detected capacity change from 0 to 1024 [ 1085.802356][ T1780] syz.6.7568[1780] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1085.819800][ T1782] FAULT_INJECTION: forcing a failure. [ 1085.819800][ T1782] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1085.844388][ T1782] CPU: 1 UID: 3327 PID: 1782 Comm: syz.5.7567 Not tainted 6.12.0-syzkaller-00171-g23acd177540d #0 [ 1085.851148][ T1778] ext4 filesystem being mounted at /262/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1085.854964][ T1782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 1085.854983][ T1782] Call Trace: [ 1085.854991][ T1782] [ 1085.880700][ T1778] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, [ 1085.881646][ T1782] dump_stack_lvl+0xf2/0x150 [ 1085.889926][ T1778] block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 1085.894550][ T1782] dump_stack+0x15/0x20 [ 1085.903693][ T1778] EXT4-fs (loop2): Delayed block allocation failed for inode 16 at logical offset 32 with max blocks 1 with error 28 [ 1085.907418][ T1782] should_fail_ex+0x223/0x230 [ 1085.907452][ T1782] should_fail+0xb/0x10 [ 1085.907483][ T1782] should_fail_usercopy+0x1a/0x20 [ 1085.919754][ T1778] EXT4-fs (loop2): This should not happen!! Data will be lost [ 1085.919754][ T1778] [ 1085.924380][ T1782] _copy_from_user+0x1e/0xb0 [ 1085.928536][ T1778] EXT4-fs (loop2): Total free blocks count 0 [ 1085.933541][ T1782] copy_clone_args_from_user+0x145/0x460 [ 1085.943181][ T1778] EXT4-fs (loop2): Free/Dirty block details [ 1085.947741][ T1782] ? kstrtouint_from_user+0xb0/0xe0 [ 1085.953740][ T1778] EXT4-fs (loop2): free_blocks=4293918720 [ 1085.953756][ T1778] EXT4-fs (loop2): dirty_blocks=16 [ 1085.953767][ T1778] EXT4-fs (loop2): Block reservation details [ 1085.953778][ T1778] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 1085.993425][ T1782] __se_sys_clone3+0x6e/0x200 [ 1085.998181][ T1782] __x64_sys_clone3+0x31/0x40 [ 1086.003000][ T1782] x64_sys_call+0x287d/0x2d60 [ 1086.007679][ T1782] do_syscall_64+0xc9/0x1c0 [ 1086.012201][ T1782] ? clear_bhb_loop+0x55/0xb0 [ 1086.016942][ T1782] ? clear_bhb_loop+0x55/0xb0 [ 1086.021762][ T1782] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1086.027663][ T1782] RIP: 0033:0x7fe4bda8e759 [ 1086.032084][ T1782] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1086.051687][ T1782] RSP: 002b:00007fe4bc706f08 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1086.060102][ T1782] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007fe4bda8e759 [ 1086.068149][ T1782] RDX: 00007fe4bc706f20 RSI: 0000000000000058 RDI: 00007fe4bc706f20 [ 1086.076118][ T1782] RBP: 00007fe4bc707090 R08: 0000000000000000 R09: 0000000000000058 [ 1086.084178][ T1782] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1086.092145][ T1782] R13: 0000000000000000 R14: 00007fe4bdc45f80 R15: 00007ffe2ff70878 [ 1086.100167][ T1782] [ 1086.163812][ T1795] wireguard0: entered promiscuous mode [ 1086.169421][ T1795] wireguard0: entered allmulticast mode [ 1086.197523][ T1802] loop6: detected capacity change from 0 to 512 [ 1086.202841][ T1801] loop4: detected capacity change from 0 to 512 [ 1086.229021][ T1802] EXT4-fs error (device loop6): ext4_acquire_dquot:6910: comm syz.6.7575: Failed to acquire dquot type 1 [ 1086.241169][ T1801] EXT4-fs error (device loop4): ext4_acquire_dquot:6910: comm syz.4.7576: Failed to acquire dquot type 1 [ 1086.242181][ T1802] EXT4-fs (loop6): 1 truncate cleaned up [ 1086.259917][ T1801] EXT4-fs (loop4): 1 truncate cleaned up [ 1086.266548][ T1801] ext4 filesystem being mounted at /332/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1086.278713][ T1802] ext4 filesystem being mounted at /161/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1086.344125][ T1816] capability: warning: `syz.5.7581' uses deprecated v2 capabilities in a way that may be insecure [ 1086.382064][ T1819] loop4: detected capacity change from 0 to 512 [ 1086.386748][ T1821] FAULT_INJECTION: forcing a failure. [ 1086.386748][ T1821] name failslab, interval 1, probability 0, space 0, times 0 [ 1086.400995][ T1821] CPU: 0 UID: 0 PID: 1821 Comm: GPL Not tainted 6.12.0-syzkaller-00171-g23acd177540d #0 [ 1086.410871][ T1821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 1086.417449][ T1819] EXT4-fs error (device loop4): ext4_acquire_dquot:6910: comm syz.4.7579: Failed to acquire dquot type 1 [ 1086.420912][ T1821] Call Trace: [ 1086.420923][ T1821] [ 1086.433069][ T1819] EXT4-fs (loop4): 1 truncate cleaned up [ 1086.435360][ T1821] dump_stack_lvl+0xf2/0x150 [ 1086.435412][ T1821] dump_stack+0x15/0x20 [ 1086.439629][ T1819] ext4 filesystem being mounted at /333/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1086.443957][ T1821] should_fail_ex+0x223/0x230 [ 1086.467845][ T1821] ? audit_log_start+0x34c/0x6b0 [ 1086.472815][ T1821] should_failslab+0x8f/0xb0 [ 1086.477435][ T1821] kmem_cache_alloc_noprof+0x4c/0x290 [ 1086.482905][ T1821] audit_log_start+0x34c/0x6b0 [ 1086.487684][ T1821] audit_seccomp+0x4b/0x130 [ 1086.492193][ T1821] __seccomp_filter+0x6fa/0x1180 [ 1086.497212][ T1821] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1086.502866][ T1821] ? vfs_write+0x596/0x920 [ 1086.507299][ T1821] ? __schedule+0x6fa/0x930 [ 1086.511867][ T1821] __secure_computing+0x9f/0x1c0 [ 1086.516818][ T1821] syscall_trace_enter+0xd1/0x1f0 [ 1086.521953][ T1821] do_syscall_64+0xaa/0x1c0 [ 1086.526515][ T1821] ? clear_bhb_loop+0x55/0xb0 [ 1086.531204][ T1821] ? clear_bhb_loop+0x55/0xb0 [ 1086.535898][ T1821] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1086.541866][ T1821] RIP: 0033:0x7fe4bda8e759 [ 1086.546280][ T1821] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1086.565966][ T1821] RSP: 002b:00007fe4bc707038 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 1086.574413][ T1821] RAX: ffffffffffffffda RBX: 00007fe4bdc45f80 RCX: 00007fe4bda8e759 [ 1086.582389][ T1821] RDX: 0000000000800000 RSI: 0000000000001000 RDI: 0000000020a96000 [ 1086.590372][ T1821] RBP: 00007fe4bc707090 R08: 0000000020130000 R09: 0000000000000000 [ 1086.598448][ T1821] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 1086.606429][ T1821] R13: 0000000000000000 R14: 00007fe4bdc45f80 R15: 00007ffe2ff70878 [ 1086.614410][ T1821] [ 1087.512488][ T1835] netlink: 4 bytes leftover after parsing attributes in process `GPL'. [ 1087.551816][ T1841] loop4: detected capacity change from 0 to 512 [ 1087.564580][ T1843] netlink: 'syz.6.7589': attribute type 11 has an invalid length. [ 1087.575302][ T1841] EXT4-fs error (device loop4): ext4_acquire_dquot:6910: comm syz.4.7590: Failed to acquire dquot type 1 [ 1087.592968][ T1841] EXT4-fs (loop4): 1 truncate cleaned up [ 1087.601060][ T1841] ext4 filesystem being mounted at /335/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1087.682060][ T1859] loop2: detected capacity change from 0 to 512 [ 1087.709104][ T1857] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1087.718261][ T1857] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1087.727199][ T1859] EXT4-fs error (device loop2): ext4_acquire_dquot:6910: comm syz.2.7596: Failed to acquire dquot type 1 [ 1087.740271][ T1859] EXT4-fs (loop2): 1 truncate cleaned up [ 1087.747262][ T1859] ext4 filesystem being mounted at /268/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1087.761769][ T1866] loop5: detected capacity change from 0 to 512 [ 1087.768698][ T1866] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1087.779990][ T1866] EXT4-fs (loop5): 1 truncate cleaned up [ 1087.823262][ T1869] loop6: detected capacity change from 0 to 512 [ 1087.838327][ T1869] EXT4-fs error (device loop6): ext4_acquire_dquot:6910: comm syz.6.7599: Failed to acquire dquot type 1 [ 1087.850737][ T1869] EXT4-fs (loop6): 1 truncate cleaned up [ 1087.860584][ T1875] netlink: 'syz.2.7601': attribute type 11 has an invalid length. [ 1087.870341][ T1869] ext4 filesystem being mounted at /167/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1087.882453][ T1876] syz.5.7598 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 1087.907251][ T1878] x_tables: ip6_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 1088.013898][ T1886] loop0: detected capacity change from 0 to 512 [ 1088.048222][ T1886] __quota_error: 828 callbacks suppressed [ 1088.048241][ T1886] Quota error (device loop0): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 1088.064136][ T1886] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 1088.074265][ T1886] EXT4-fs error (device loop0): ext4_acquire_dquot:6910: comm syz.0.7606: Failed to acquire dquot type 1 [ 1088.113818][ T1886] EXT4-fs (loop0): 1 truncate cleaned up [ 1088.120837][ T1886] ext4 filesystem being mounted at /322/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1088.522249][ T1899] loop4: detected capacity change from 0 to 512 [ 1088.536691][ T1899] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 1088.544777][ T1899] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1088.563201][ T1899] Quota error (device loop4): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 1088.578551][ T1899] EXT4-fs warning (device loop4): ext4_enable_quotas:7128: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1088.594692][ T1899] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 1088.610097][ T1899] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.7609: bg 0: block 40: padding at end of block bitmap is not set [ 1088.665407][ T1899] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 1088.684729][ T1899] EXT4-fs (loop4): 1 truncate cleaned up [ 1088.752952][ T1914] loop5: detected capacity change from 0 to 512 [ 1088.805475][ T1914] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 1088.816602][ T29] audit: type=1326 audit(1731980904.459:46221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1917 comm="syz.2.7616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b26d9e759 code=0x7ffc0000 [ 1088.861453][ T1914] EXT4-fs (loop5): orphan cleanup on readonly fs [ 1088.868599][ T29] audit: type=1326 audit(1731980904.479:46222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1917 comm="syz.2.7616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f6b26d9e759 code=0x7ffc0000 [ 1088.875459][ T1914] Quota error (device loop5): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 1088.892224][ T29] audit: type=1326 audit(1731980904.479:46223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1917 comm="syz.2.7616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b26d9e759 code=0x7ffc0000 [ 1088.926487][ T29] audit: type=1326 audit(1731980904.479:46224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1917 comm="syz.2.7616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6b26d9e759 code=0x7ffc0000 [ 1088.934271][ T1914] EXT4-fs warning (device loop5): ext4_enable_quotas:7128: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1088.950092][ T29] audit: type=1326 audit(1731980904.479:46225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1917 comm="syz.2.7616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b26d9e759 code=0x7ffc0000 [ 1088.988601][ T29] audit: type=1326 audit(1731980904.479:46226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1917 comm="syz.2.7616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6b26d9e759 code=0x7ffc0000 [ 1089.035538][ T1920] loop4: detected capacity change from 0 to 8192 [ 1089.045011][ T1920] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1089.055132][ T1914] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 1089.077591][ T1914] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.7615: bg 0: block 40: padding at end of block bitmap is not set [ 1089.094132][ T1914] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 1089.103462][ T1914] EXT4-fs (loop5): 1 truncate cleaned up [ 1089.141528][ T1927] loop4: detected capacity change from 0 to 1024 [ 1089.148727][ T1927] EXT4-fs: Ignoring removed orlov option [ 1089.154419][ T1927] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1089.182015][ T1935] syz.0.7625[1935] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1089.193942][ T1939] loop5: detected capacity change from 0 to 512 [ 1089.226941][ T1939] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 1089.236517][ T1939] EXT4-fs (loop5): orphan cleanup on readonly fs [ 1089.243121][ T1939] EXT4-fs warning (device loop5): ext4_enable_quotas:7128: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1089.259419][ T1939] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 1089.266583][ T1939] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.7624: bg 0: block 40: padding at end of block bitmap is not set [ 1089.282285][ T1939] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 1089.303599][ T1939] EXT4-fs (loop5): 1 truncate cleaned up [ 1089.718531][ T1951] loop5: detected capacity change from 0 to 512 [ 1089.724997][ T1950] loop4: detected capacity change from 0 to 1024 [ 1089.731594][ T1950] EXT4-fs: Ignoring removed orlov option [ 1089.737321][ T1950] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1089.756956][ T1951] EXT4-fs error (device loop5): ext4_acquire_dquot:6910: comm syz.5.7629: Failed to acquire dquot type 1 [ 1089.769548][ T1951] EXT4-fs (loop5): 1 truncate cleaned up [ 1089.777742][ T1964] wireguard0: entered promiscuous mode [ 1089.778247][ T1951] ext4 filesystem being mounted at /342/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1089.783223][ T1964] wireguard0: entered allmulticast mode [ 1089.830080][ T1974] FAULT_INJECTION: forcing a failure. [ 1089.830080][ T1974] name failslab, interval 1, probability 0, space 0, times 0 [ 1089.842939][ T1974] CPU: 1 UID: 0 PID: 1974 Comm: syz.5.7635 Not tainted 6.12.0-syzkaller-00171-g23acd177540d #0 [ 1089.853284][ T1974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 1089.863332][ T1974] Call Trace: [ 1089.866606][ T1974] [ 1089.869590][ T1974] dump_stack_lvl+0xf2/0x150 [ 1089.874214][ T1974] dump_stack+0x15/0x20 [ 1089.878380][ T1974] should_fail_ex+0x223/0x230 [ 1089.883135][ T1974] ? audit_log_start+0x34c/0x6b0 [ 1089.888151][ T1974] should_failslab+0x8f/0xb0 [ 1089.892761][ T1974] kmem_cache_alloc_noprof+0x4c/0x290 [ 1089.898306][ T1974] audit_log_start+0x34c/0x6b0 [ 1089.903150][ T1974] audit_seccomp+0x4b/0x130 [ 1089.907718][ T1974] __seccomp_filter+0x6fa/0x1180 [ 1089.912675][ T1974] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1089.918416][ T1974] ? vfs_write+0x596/0x920 [ 1089.922876][ T1974] ? __schedule+0x6fa/0x930 [ 1089.927408][ T1974] __secure_computing+0x9f/0x1c0 [ 1089.932365][ T1974] syscall_trace_enter+0xd1/0x1f0 [ 1089.937448][ T1974] do_syscall_64+0xaa/0x1c0 [ 1089.942036][ T1974] ? clear_bhb_loop+0x55/0xb0 [ 1089.946733][ T1974] ? clear_bhb_loop+0x55/0xb0 [ 1089.951425][ T1974] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1089.957415][ T1974] RIP: 0033:0x7fe4bda8e759 [ 1089.961873][ T1974] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1089.981492][ T1974] RSP: 002b:00007fe4bc707038 EFLAGS: 00000246 ORIG_RAX: 0000000000000069 [ 1089.989919][ T1974] RAX: ffffffffffffffda RBX: 00007fe4bdc45f80 RCX: 00007fe4bda8e759 [ 1089.997897][ T1974] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1090.005958][ T1974] RBP: 00007fe4bc707090 R08: 0000000000000000 R09: 0000000000000000 [ 1090.013933][ T1974] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1090.021909][ T1974] R13: 0000000000000000 R14: 00007fe4bdc45f80 R15: 00007ffe2ff70878 [ 1090.029897][ T1974] [ 1090.108162][ T1984] loop0: detected capacity change from 0 to 1024 [ 1090.114952][ T1987] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7637'. [ 1090.115035][ T1984] EXT4-fs: Ignoring removed orlov option [ 1090.129650][ T1984] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1090.268251][ T2002] loop5: detected capacity change from 0 to 4096 [ 1090.352187][ T2013] loop0: detected capacity change from 0 to 512 [ 1090.365768][ T2017] loop2: detected capacity change from 0 to 512 [ 1090.382848][ T2013] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 1090.393683][ T2013] EXT4-fs (loop0): orphan cleanup on readonly fs [ 1090.401370][ T2017] EXT4-fs error (device loop2): ext4_acquire_dquot:6910: comm syz.2.7654: Failed to acquire dquot type 1 [ 1090.413186][ T2013] EXT4-fs warning (device loop0): ext4_enable_quotas:7128: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1090.429836][ T2017] EXT4-fs (loop2): 1 truncate cleaned up [ 1090.436049][ T2017] ext4 filesystem being mounted at /282/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1090.446733][ T2013] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 1090.454426][ T2013] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.7652: bg 0: block 40: padding at end of block bitmap is not set [ 1090.468964][ T2013] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 1090.479473][ T2013] EXT4-fs (loop0): 1 truncate cleaned up [ 1090.497447][ T2026] loop2: detected capacity change from 0 to 512 [ 1090.517749][ T2026] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 1090.528208][ T2030] loop0: detected capacity change from 0 to 1024 [ 1090.535017][ T2030] EXT4-fs: Ignoring removed orlov option [ 1090.535598][ T2026] EXT4-fs (loop2): orphan cleanup on readonly fs [ 1090.540729][ T2030] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1090.548375][ T2026] EXT4-fs warning (device loop2): ext4_enable_quotas:7128: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1090.569941][ T2026] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 1090.577155][ T2026] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.7656: bg 0: block 40: padding at end of block bitmap is not set [ 1090.591991][ T2026] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 1090.601109][ T2026] EXT4-fs (loop2): 1 truncate cleaned up [ 1090.639152][ T2036] loop5: detected capacity change from 0 to 1024 [ 1090.722472][ T2051] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7659'. [ 1090.731634][ T2051] netlink: 48 bytes leftover after parsing attributes in process `syz.5.7659'. [ 1090.752098][ T2055] loop2: detected capacity change from 0 to 512 [ 1090.754823][ T2036] IPv6: Can't replace route, no match found [ 1090.777675][ T2055] EXT4-fs error (device loop2): ext4_acquire_dquot:6910: comm syz.2.7667: Failed to acquire dquot type 1 [ 1090.797153][ T2055] EXT4-fs (loop2): 1 truncate cleaned up [ 1090.801787][ T2059] loop4: detected capacity change from 0 to 1024 [ 1090.803303][ T2055] ext4 filesystem being mounted at /287/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1090.817387][ T2059] ext4 filesystem being mounted at /348/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1090.851709][ T2061] loop5: detected capacity change from 0 to 1024 [ 1090.858446][ T2061] EXT4-fs: Ignoring removed orlov option [ 1090.864301][ T2061] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1090.927092][ T2073] loop4: detected capacity change from 0 to 1024 [ 1090.933976][ T2073] EXT4-fs: Ignoring removed orlov option [ 1090.939776][ T2073] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1090.950485][ T2079] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7675'. [ 1091.079172][ T2095] loop6: detected capacity change from 0 to 512 [ 1091.112997][ T2095] EXT4-fs error (device loop6): ext4_acquire_dquot:6910: comm syz.6.7681: Failed to acquire dquot type 1 [ 1091.135612][ T2095] EXT4-fs (loop6): 1 truncate cleaned up [ 1091.141779][ T2095] ext4 filesystem being mounted at /169/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1091.430414][ T2114] x_tables: ip6_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 1091.442887][ T2114] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7688'. [ 1091.468327][ T2116] loop5: detected capacity change from 0 to 512 [ 1091.476974][ T2116] EXT4-fs error (device loop5): ext4_acquire_dquot:6910: comm syz.5.7689: Failed to acquire dquot type 1 [ 1091.489123][ T2116] EXT4-fs (loop5): 1 truncate cleaned up [ 1091.495173][ T2116] ext4 filesystem being mounted at /368/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1091.534097][ T2126] loop5: detected capacity change from 0 to 512 [ 1091.545347][ T2125] loop2: detected capacity change from 0 to 1024 [ 1091.548517][ T2126] ext4 filesystem being mounted at /369/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1091.552299][ T2125] EXT4-fs: Ignoring removed orlov option [ 1091.567924][ T2125] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1091.594800][ T2130] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 1091.615040][ T2130] x_tables: ip6_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 1091.756464][ T2144] loop2: detected capacity change from 0 to 512 [ 1091.890669][ T2144] EXT4-fs error (device loop2): ext4_acquire_dquot:6910: comm syz.2.7698: Failed to acquire dquot type 1 [ 1091.948194][ T2144] EXT4-fs (loop2): 1 truncate cleaned up [ 1091.966985][ T2144] ext4 filesystem being mounted at /296/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1092.141665][ T2154] wireguard0: entered promiscuous mode [ 1092.147201][ T2154] wireguard0: entered allmulticast mode [ 1092.277041][ T2162] loop6: detected capacity change from 0 to 4096 [ 1092.335872][ T2169] netlink: 'syz.5.7707': attribute type 11 has an invalid length. [ 1092.391435][ T2175] loop4: detected capacity change from 0 to 512 [ 1092.420362][ T2175] EXT4-fs error (device loop4): ext4_acquire_dquot:6910: comm syz.4.7710: Failed to acquire dquot type 1 [ 1092.440952][ T2175] EXT4-fs (loop4): 1 truncate cleaned up [ 1092.459979][ T2175] ext4 filesystem being mounted at /355/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1092.558424][ T2192] loop6: detected capacity change from 0 to 4096 [ 1092.570952][ T2200] loop0: detected capacity change from 0 to 512 [ 1092.641280][ T2200] EXT4-fs error (device loop0): ext4_acquire_dquot:6910: comm syz.0.7720: Failed to acquire dquot type 1 [ 1092.657632][ T2200] EXT4-fs (loop0): 1 truncate cleaned up [ 1092.664204][ T2211] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 1092.676778][ T2200] ext4 filesystem being mounted at /340/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1092.688448][ T2211] x_tables: ip6_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 1093.117590][ T2243] loop4: detected capacity change from 0 to 512 [ 1093.188588][ T2243] __quota_error: 787 callbacks suppressed [ 1093.188603][ T2243] Quota error (device loop4): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 1093.204485][ T2243] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 1093.214494][ T2243] EXT4-fs error (device loop4): ext4_acquire_dquot:6910: comm syz.4.7738: Failed to acquire dquot type 1 [ 1093.235529][ T29] audit: type=1326 audit(1731980908.809:46993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2232 comm="GPL" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f652ec5e759 code=0x7ffc0000 [ 1093.258435][ T29] audit: type=1326 audit(1731980908.809:46994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2232 comm="GPL" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f652ec5e759 code=0x7ffc0000 [ 1093.308327][ T2241] loop5: detected capacity change from 0 to 512 [ 1093.361276][ T29] audit: type=1326 audit(1731980908.929:46995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2232 comm="GPL" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f652ec5e759 code=0x7ffc0000 [ 1093.372073][ T2243] EXT4-fs (loop4): 1 truncate cleaned up [ 1093.384294][ T29] audit: type=1326 audit(1731980908.929:46996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2232 comm="GPL" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f652ec5e759 code=0x7ffc0000 [ 1093.392357][ T2241] Quota error (device loop5): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 1093.412992][ T29] audit: type=1326 audit(1731980908.929:46997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2232 comm="GPL" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f652ec5e759 code=0x7ffc0000 [ 1093.413047][ T29] audit: type=1326 audit(1731980908.929:46998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2232 comm="GPL" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f652ec5e759 code=0x7ffc0000 [ 1093.413077][ T29] audit: type=1326 audit(1731980908.929:46999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2232 comm="GPL" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f652ec5e759 code=0x7ffc0000 [ 1093.423163][ T2241] EXT4-fs error (device loop5): ext4_acquire_dquot:6910: comm syz.5.7736: Failed to acquire dquot type 1 [ 1093.456055][ T2243] ext4 filesystem being mounted at /364/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1093.474947][ T2241] EXT4-fs (loop5): 1 truncate cleaned up [ 1093.528179][ T2241] ext4 filesystem being mounted at /378/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1093.558503][ T2254] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1093.575595][ T2254] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1093.680162][ T2264] loop6: detected capacity change from 0 to 512 [ 1093.699818][ T2264] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1093.735803][ T2264] EXT4-fs (loop6): 1 truncate cleaned up [ 1093.897691][ T2282] loop5: detected capacity change from 0 to 1024 [ 1093.908988][ T2282] EXT4-fs: Ignoring removed orlov option [ 1093.914769][ T2282] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1093.933631][ T2287] loop0: detected capacity change from 0 to 512 [ 1093.959156][ T2287] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 1093.971207][ T2287] EXT4-fs (loop0): orphan cleanup on readonly fs [ 1093.979052][ T2287] EXT4-fs warning (device loop0): ext4_enable_quotas:7128: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1093.995520][ T2287] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 1094.004119][ T2287] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.7755: bg 0: block 40: padding at end of block bitmap is not set [ 1094.027718][ T2287] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 1094.048903][ T2287] EXT4-fs (loop0): 1 truncate cleaned up [ 1094.151165][ T2299] loop4: detected capacity change from 0 to 512 [ 1094.410025][ T2299] ext4 filesystem being mounted at /368/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1094.546383][ T2315] loop4: detected capacity change from 0 to 512 [ 1094.549512][ T2317] loop6: detected capacity change from 0 to 512 [ 1094.567363][ T2315] EXT4-fs error (device loop4): ext4_acquire_dquot:6910: comm syz.4.7764: Failed to acquire dquot type 1 [ 1094.580604][ T2317] EXT4-fs error (device loop6): ext4_acquire_dquot:6910: comm syz.6.7765: Failed to acquire dquot type 1 [ 1094.592398][ T2315] EXT4-fs (loop4): 1 truncate cleaned up [ 1094.602798][ T2315] ext4 filesystem being mounted at /369/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1094.618148][ T2317] EXT4-fs (loop6): 1 truncate cleaned up [ 1094.631776][ T2317] ext4 filesystem being mounted at /182/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1094.640275][ T2324] loop2: detected capacity change from 0 to 1024 [ 1094.651108][ T2324] EXT4-fs: Ignoring removed orlov option [ 1094.657713][ T2324] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1094.704191][ T2332] loop6: detected capacity change from 0 to 1024 [ 1094.772819][ T2343] loop2: detected capacity change from 0 to 512 [ 1094.788501][ T2345] loop0: detected capacity change from 0 to 512 [ 1094.798349][ T2343] ext4 filesystem being mounted at /309/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1094.822980][ T2345] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 1094.831562][ T2345] EXT4-fs (loop0): orphan cleanup on readonly fs [ 1094.839131][ T2345] EXT4-fs warning (device loop0): ext4_enable_quotas:7128: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1094.858090][ T2345] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 1094.871944][ T2354] netlink: 'syz.5.7778': attribute type 10 has an invalid length. [ 1094.879991][ T2345] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.7775: bg 0: block 40: padding at end of block bitmap is not set [ 1094.887087][ T2356] loop6: detected capacity change from 0 to 512 [ 1094.907378][ T2345] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 1094.916902][ T2345] EXT4-fs (loop0): 1 truncate cleaned up [ 1094.943308][ T2356] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 1094.951441][ T2356] EXT4-fs (loop6): orphan cleanup on readonly fs [ 1094.972212][ T2356] EXT4-fs warning (device loop6): ext4_enable_quotas:7128: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1094.988642][ T2356] EXT4-fs (loop6): Cannot turn on quotas: error -117 [ 1094.996080][ T2356] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.7779: bg 0: block 40: padding at end of block bitmap is not set [ 1095.011834][ T2356] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 1095.030200][ T2356] EXT4-fs (loop6): 1 truncate cleaned up [ 1095.064986][ T2373] wireguard0: entered promiscuous mode [ 1095.070619][ T2373] wireguard0: entered allmulticast mode [ 1095.084850][ T2376] loop6: detected capacity change from 0 to 1024 [ 1095.088655][ T2367] loop0: detected capacity change from 0 to 1024 [ 1095.091561][ T2376] EXT4-fs: Ignoring removed orlov option [ 1095.103386][ T2376] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1095.110575][ T2367] EXT4-fs: Ignoring removed orlov option [ 1095.116412][ T2367] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1095.240000][ T2386] loop0: detected capacity change from 0 to 1024 [ 1095.332494][ T2393] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7788'. [ 1095.341586][ T2393] netlink: 48 bytes leftover after parsing attributes in process `syz.0.7788'. [ 1095.483465][ T2402] loop0: detected capacity change from 0 to 1024 [ 1095.491194][ T2402] EXT4-fs: Ignoring removed orlov option [ 1095.496903][ T2402] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1095.508661][ T2405] loop6: detected capacity change from 0 to 512 [ 1095.533134][ T2405] EXT4-fs error (device loop6): ext4_acquire_dquot:6910: comm syz.6.7796: Failed to acquire dquot type 1 [ 1095.555480][ T2410] loop5: detected capacity change from 0 to 512 [ 1095.562348][ T2405] EXT4-fs (loop6): 1 truncate cleaned up [ 1095.570503][ T2405] ext4 filesystem being mounted at /189/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1095.582773][ T2410] EXT4-fs error (device loop5): ext4_acquire_dquot:6910: comm syz.5.7797: Failed to acquire dquot type 1 [ 1095.598574][ T2410] EXT4-fs (loop5): 1 truncate cleaned up [ 1095.604768][ T2410] ext4 filesystem being mounted at /394/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1095.670168][ T2418] loop4: detected capacity change from 0 to 512 [ 1095.680270][ T2417] loop6: detected capacity change from 0 to 1024 [ 1095.690072][ T2418] EXT4-fs error (device loop4): ext4_acquire_dquot:6910: comm syz.4.7798: Failed to acquire dquot type 1 [ 1095.691711][ T2420] loop5: detected capacity change from 0 to 512 [ 1095.704352][ T2418] EXT4-fs (loop4): 1 truncate cleaned up [ 1095.709879][ T2420] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1095.723823][ T2418] ext4 filesystem being mounted at /373/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1095.724140][ T2420] EXT4-fs (loop5): 1 truncate cleaned up [ 1095.794011][ T2426] loop0: detected capacity change from 0 to 4096 [ 1095.878547][ T2444] FAULT_INJECTION: forcing a failure. [ 1095.878547][ T2444] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1095.891661][ T2444] CPU: 1 UID: 0 PID: 2444 Comm: syz.6.7809 Not tainted 6.12.0-syzkaller-00171-g23acd177540d #0 [ 1095.902055][ T2444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 1095.912110][ T2444] Call Trace: [ 1095.915394][ T2444] [ 1095.918402][ T2444] dump_stack_lvl+0xf2/0x150 [ 1095.923018][ T2444] dump_stack+0x15/0x20 [ 1095.927187][ T2444] should_fail_ex+0x223/0x230 [ 1095.931911][ T2444] should_fail+0xb/0x10 [ 1095.936135][ T2444] should_fail_usercopy+0x1a/0x20 [ 1095.941221][ T2444] _copy_from_user+0x1e/0xb0 [ 1095.945995][ T2444] copy_msghdr_from_user+0x54/0x2a0 [ 1095.951303][ T2444] ? __fget_files+0x17c/0x1c0 [ 1095.956057][ T2444] __sys_sendmsg+0x171/0x270 [ 1095.960697][ T2444] __x64_sys_sendmsg+0x46/0x50 [ 1095.965472][ T2444] x64_sys_call+0x2689/0x2d60 [ 1095.970238][ T2444] do_syscall_64+0xc9/0x1c0 [ 1095.974756][ T2444] ? clear_bhb_loop+0x55/0xb0 [ 1095.979448][ T2444] ? clear_bhb_loop+0x55/0xb0 [ 1095.984140][ T2444] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1095.990576][ T2444] RIP: 0033:0x7f9ababae759 [ 1095.995021][ T2444] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1096.014754][ T2444] RSP: 002b:00007f9ab9821038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1096.023227][ T2444] RAX: ffffffffffffffda RBX: 00007f9abad65f80 RCX: 00007f9ababae759 [ 1096.031217][ T2444] RDX: 0000000000000080 RSI: 00000000200001c0 RDI: 0000000000000003 [ 1096.039298][ T2444] RBP: 00007f9ab9821090 R08: 0000000000000000 R09: 0000000000000000 [ 1096.047294][ T2444] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1096.055346][ T2444] R13: 0000000000000000 R14: 00007f9abad65f80 R15: 00007ffcba304b68 [ 1096.063334][ T2444] [ 1096.105657][ T2447] loop6: detected capacity change from 0 to 512 [ 1096.113814][ T2447] EXT4-fs error (device loop6): ext4_clear_blocks:876: inode #13: comm syz.6.7810: attempt to clear invalid blocks 1 len 1 [ 1096.126987][ T2447] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.7810: bg 0: block 343: padding at end of block bitmap is not set [ 1096.143029][ T2447] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 1096.153096][ T2447] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.7810: invalid indirect mapped block 1819239214 (level 0) [ 1096.168063][ T2447] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.7810: invalid indirect mapped block 1819239214 (level 1) [ 1096.182518][ T2447] EXT4-fs (loop6): 1 truncate cleaned up [ 1096.183704][ T2450] can0: slcan on ttyS3. [ 1096.194098][ T2447] kernel profiling enabled (shift: 17) [ 1096.200290][ T2450] SELinux: policydb version 0 does not match my version range 15-33 [ 1096.209134][ T2450] SELinux: failed to load policy [ 1096.216772][ T2450] loop0: detected capacity change from 0 to 164 [ 1096.227361][ T2450] syz.0.7811: attempt to access beyond end of device [ 1096.227361][ T2450] loop0: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 1096.241563][ T2450] syz.0.7811: attempt to access beyond end of device [ 1096.241563][ T2450] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 1096.255089][ T2451] syz.0.7811: attempt to access beyond end of device [ 1096.255089][ T2451] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 1096.268808][ T2451] syz.0.7811: attempt to access beyond end of device [ 1096.268808][ T2451] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 1096.282641][ T2451] syz.0.7811: attempt to access beyond end of device [ 1096.282641][ T2451] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 1096.282685][ T2451] syz.0.7811: attempt to access beyond end of device [ 1096.282685][ T2451] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 1096.282750][ T2451] syz.0.7811: attempt to access beyond end of device [ 1096.282750][ T2451] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 1096.282795][ T2451] syz.0.7811: attempt to access beyond end of device [ 1096.282795][ T2451] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 1096.282861][ T2451] syz.0.7811: attempt to access beyond end of device [ 1096.282861][ T2451] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 1096.282953][ T2451] syz.0.7811: attempt to access beyond end of device [ 1096.282953][ T2451] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 1096.381850][ T2459] loop4: detected capacity change from 0 to 1024 [ 1096.388618][ T2459] EXT4-fs: Ignoring removed orlov option [ 1096.394287][ T2459] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1096.395474][ T2461] can0 (unregistered): slcan off ttyS3. [ 1096.568122][ T2475] loop4: detected capacity change from 0 to 1024 [ 1096.651165][ T2480] FAULT_INJECTION: forcing a failure. [ 1096.651165][ T2480] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1096.664287][ T2480] CPU: 0 UID: 0 PID: 2480 Comm: syz.0.7821 Not tainted 6.12.0-syzkaller-00171-g23acd177540d #0 [ 1096.674698][ T2480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 1096.684838][ T2480] Call Trace: [ 1096.688150][ T2480] [ 1096.691078][ T2480] dump_stack_lvl+0xf2/0x150 [ 1096.695778][ T2480] dump_stack+0x15/0x20 [ 1096.699983][ T2480] should_fail_ex+0x223/0x230 [ 1096.704724][ T2480] should_fail+0xb/0x10 [ 1096.708913][ T2480] should_fail_usercopy+0x1a/0x20 [ 1096.714032][ T2480] _copy_from_user+0x1e/0xb0 [ 1096.718659][ T2480] __sys_bpf+0x14e/0x7a0 [ 1096.722923][ T2480] __x64_sys_bpf+0x43/0x50 [ 1096.727473][ T2480] x64_sys_call+0x2625/0x2d60 [ 1096.732193][ T2480] do_syscall_64+0xc9/0x1c0 [ 1096.736783][ T2480] ? clear_bhb_loop+0x55/0xb0 [ 1096.741551][ T2480] ? clear_bhb_loop+0x55/0xb0 [ 1096.746316][ T2480] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1096.752248][ T2480] RIP: 0033:0x7f652ec5e759 [ 1096.756684][ T2480] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1096.776328][ T2480] RSP: 002b:00007f652d8d7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1096.784747][ T2480] RAX: ffffffffffffffda RBX: 00007f652ee15f80 RCX: 00007f652ec5e759 [ 1096.792729][ T2480] RDX: 0000000000000020 RSI: 00000000200003c0 RDI: 0000000000000001 [ 1096.800872][ T2480] RBP: 00007f652d8d7090 R08: 0000000000000000 R09: 0000000000000000 [ 1096.808889][ T2480] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1096.816889][ T2480] R13: 0000000000000000 R14: 00007f652ee15f80 R15: 00007ffc8064dcf8 [ 1096.824890][ T2480] [ 1096.959681][ T2504] loop4: detected capacity change from 0 to 512 [ 1096.988032][ T2504] EXT4-fs error (device loop4): ext4_acquire_dquot:6910: comm syz.4.7831: Failed to acquire dquot type 1 [ 1096.999977][ T2504] EXT4-fs (loop4): 1 truncate cleaned up [ 1097.007438][ T2504] ext4 filesystem being mounted at /386/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1097.056756][ T2514] loop6: detected capacity change from 0 to 512 [ 1097.122496][ T2520] loop4: detected capacity change from 0 to 1024 [ 1097.125848][ T2514] EXT4-fs error (device loop6): ext4_acquire_dquot:6910: comm syz.6.7834: Failed to acquire dquot type 1 [ 1097.141575][ T2514] EXT4-fs (loop6): 1 truncate cleaned up [ 1097.150695][ T2514] ext4 filesystem being mounted at /193/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1097.233778][ T2528] loop5: detected capacity change from 0 to 1024 [ 1097.243548][ T2528] EXT4-fs: Ignoring removed orlov option [ 1097.249390][ T2528] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1097.336768][ T2541] loop5: detected capacity change from 0 to 512 [ 1097.346456][ T2541] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 1097.354565][ T2541] EXT4-fs (loop5): orphan cleanup on readonly fs [ 1097.361443][ T2541] EXT4-fs warning (device loop5): ext4_enable_quotas:7128: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1097.378113][ T2541] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 1097.385297][ T2541] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.7844: bg 0: block 40: padding at end of block bitmap is not set [ 1097.401715][ T2541] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 1097.410738][ T2541] EXT4-fs (loop5): 1 truncate cleaned up [ 1097.420882][ T2547] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7846'. [ 1097.445158][ T2549] loop5: detected capacity change from 0 to 512 [ 1097.457330][ T2549] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 1097.466095][ T2549] EXT4-fs (loop5): orphan cleanup on readonly fs [ 1097.472627][ T2549] EXT4-fs warning (device loop5): ext4_enable_quotas:7128: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1097.488727][ T2551] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1097.489519][ T2549] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 1097.504324][ T2551] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1097.513255][ T2549] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.7847: bg 0: block 40: padding at end of block bitmap is not set [ 1097.529625][ T2549] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 1097.538742][ T2549] EXT4-fs (loop5): 1 truncate cleaned up [ 1097.564189][ T2557] loop6: detected capacity change from 0 to 1024 [ 1097.585487][ T2562] loop5: detected capacity change from 0 to 512 [ 1097.609844][ T2562] ext4 filesystem being mounted at /405/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1097.674398][ T2576] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7858'. [ 1097.733826][ T2582] bpf_get_probe_write_proto: 2 callbacks suppressed [ 1097.733840][ T2582] syz.6.7861[2582] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1097.740901][ T2582] syz.6.7861[2582] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1097.752288][ T2582] syz.6.7861[2582] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1097.781382][ T2584] loop5: detected capacity change from 0 to 512 [ 1097.806582][ T2586] loop0: detected capacity change from 0 to 512 [ 1097.817504][ T2584] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 1097.817847][ T2586] EXT4-fs error (device loop0): ext4_acquire_dquot:6910: comm syz.0.7863: Failed to acquire dquot type 1 [ 1097.825772][ T2584] EXT4-fs (loop5): orphan cleanup on readonly fs [ 1097.837696][ T2586] EXT4-fs (loop0): 1 truncate cleaned up [ 1097.843393][ T2584] EXT4-fs warning (device loop5): ext4_enable_quotas:7128: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1097.849436][ T2586] ext4 filesystem being mounted at /375/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1097.866578][ T2592] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1097.882721][ T2592] vhci_hcd: default hub control req: d300 v0000 i0000 l0 [ 1097.886901][ T2584] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 1097.897699][ T2584] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.7862: bg 0: block 40: padding at end of block bitmap is not set [ 1097.919022][ T2594] netlink: 'syz.6.7865': attribute type 10 has an invalid length. [ 1097.927979][ T2584] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 1097.938115][ T2584] EXT4-fs (loop5): 1 truncate cleaned up [ 1097.951365][ T2594] bridge0: port 2(bridge_slave_1) entered disabled state [ 1097.958583][ T2594] bridge0: port 1(bridge_slave_0) entered disabled state [ 1097.971175][ T2594] bridge0: port 2(bridge_slave_1) entered blocking state [ 1097.978385][ T2594] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1097.985803][ T2594] bridge0: port 1(bridge_slave_0) entered blocking state [ 1097.992958][ T2594] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1098.010746][ T2594] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1098.018673][ T2596] loop2: detected capacity change from 0 to 512 [ 1098.049776][ T2596] ext4 filesystem being mounted at /311/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1098.064687][ T2604] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7869'. [ 1098.087898][ T2613] loop6: detected capacity change from 0 to 256 [ 1098.142488][ T2620] loop2: detected capacity change from 0 to 4096 [ 1098.263479][ T2632] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1098.275456][ T2632] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1098.289776][ T29] kauditd_printk_skb: 681 callbacks suppressed [ 1098.289794][ T29] audit: type=1326 audit(1731980913.929:47658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2634 comm="syz.6.7880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ababae759 code=0x7ffc0000 [ 1098.319729][ T2637] wireguard0: entered promiscuous mode [ 1098.325208][ T2637] wireguard0: entered allmulticast mode [ 1098.331508][ T2639] loop4: detected capacity change from 0 to 512 [ 1098.371339][ T29] audit: type=1326 audit(1731980913.929:47659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2634 comm="syz.6.7880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ababae759 code=0x7ffc0000 [ 1098.395024][ T29] audit: type=1326 audit(1731980913.969:47660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2636 comm="syz.4.7884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd01331e759 code=0x7ffc0000 [ 1098.418695][ T29] audit: type=1326 audit(1731980913.969:47661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2636 comm="syz.4.7884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd01331e759 code=0x7ffc0000 [ 1098.442262][ T29] audit: type=1326 audit(1731980913.969:47662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2636 comm="syz.4.7884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd01331e759 code=0x7ffc0000 [ 1098.465772][ T29] audit: type=1326 audit(1731980913.969:47663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2636 comm="syz.4.7884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd01331e759 code=0x7ffc0000 [ 1098.489357][ T29] audit: type=1326 audit(1731980913.969:47664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2636 comm="syz.4.7884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd01331e759 code=0x7ffc0000 [ 1098.489904][ T2645] netlink: 24 bytes leftover after parsing attributes in process `syz.6.7885'. [ 1098.512890][ T29] audit: type=1326 audit(1731980913.969:47665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2636 comm="syz.4.7884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fd01331e759 code=0x7ffc0000 [ 1098.512923][ T29] audit: type=1326 audit(1731980913.969:47666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2636 comm="syz.4.7884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd01331e759 code=0x7ffc0000 [ 1098.512953][ T29] audit: type=1326 audit(1731980913.969:47667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2636 comm="syz.4.7884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd01331e759 code=0x7ffc0000 [ 1098.593587][ T2639] ext4 filesystem being mounted at /397/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1098.637552][ T2648] loop6: detected capacity change from 0 to 512 [ 1098.689003][ T2648] EXT4-fs error (device loop6): ext4_acquire_dquot:6910: comm syz.6.7886: Failed to acquire dquot type 1 [ 1098.700950][ T2648] EXT4-fs (loop6): 1 truncate cleaned up [ 1098.707067][ T2648] ext4 filesystem being mounted at /208/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1098.758463][ T2661] loop6: detected capacity change from 0 to 1024 [ 1098.765157][ T2661] EXT4-fs: Ignoring removed orlov option [ 1098.770919][ T2661] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1098.825152][ T2667] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7893'. [ 1098.835321][ T2663] loop0: detected capacity change from 0 to 512 [ 1098.872860][ T2663] EXT4-fs error (device loop0): ext4_acquire_dquot:6910: comm syz.0.7892: Failed to acquire dquot type 1 [ 1098.895245][ T2663] EXT4-fs (loop0): 1 truncate cleaned up [ 1098.902542][ T2663] ext4 filesystem being mounted at /383/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1098.905488][ T2678] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7898'. [ 1098.945405][ T2676] loop2: detected capacity change from 0 to 4096 [ 1099.029635][ T2688] loop4: detected capacity change from 0 to 1024 [ 1099.105638][ T2694] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1099.114194][ T2694] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1099.117581][ T2700] loop6: detected capacity change from 0 to 512 [ 1099.136141][ T2700] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 1099.144412][ T2700] EXT4-fs (loop6): orphan cleanup on readonly fs [ 1099.151535][ T2700] EXT4-fs warning (device loop6): ext4_enable_quotas:7128: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1099.167470][ T2700] EXT4-fs (loop6): Cannot turn on quotas: error -117 [ 1099.169427][ T2704] loop4: detected capacity change from 0 to 512 [ 1099.174677][ T2700] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.7906: bg 0: block 40: padding at end of block bitmap is not set [ 1099.196000][ T2700] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 1099.205275][ T2700] EXT4-fs (loop6): 1 truncate cleaned up [ 1099.221310][ T2704] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 1099.230121][ T2704] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1099.237373][ T2704] EXT4-fs warning (device loop4): ext4_enable_quotas:7128: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1099.252414][ T2704] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 1099.252615][ T2710] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7910'. [ 1099.261010][ T2704] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.7907: bg 0: block 40: padding at end of block bitmap is not set [ 1099.282692][ T2704] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 1099.282970][ T2704] EXT4-fs (loop4): 1 truncate cleaned up [ 1099.315090][ T2714] loop2: detected capacity change from 0 to 512 [ 1099.324758][ T2712] loop6: detected capacity change from 0 to 1024 [ 1099.331468][ T2712] EXT4-fs: Ignoring removed orlov option [ 1099.337192][ T2712] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1099.345059][ T2714] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 1099.348369][ T2717] loop4: detected capacity change from 0 to 512 [ 1099.353806][ T2714] EXT4-fs (loop2): orphan cleanup on readonly fs [ 1099.366093][ T2714] EXT4-fs warning (device loop2): ext4_enable_quotas:7128: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1099.381410][ T2714] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 1099.390069][ T2714] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.7911: bg 0: block 40: padding at end of block bitmap is not set [ 1099.390938][ T2717] EXT4-fs error (device loop4): ext4_acquire_dquot:6910: comm syz.4.7912: Failed to acquire dquot type 1 [ 1099.406458][ T2714] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 1099.416751][ T2717] EXT4-fs (loop4): 1 truncate cleaned up [ 1099.424806][ T2714] EXT4-fs (loop2): 1 truncate cleaned up [ 1099.431548][ T2717] ext4 filesystem being mounted at /408/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1099.490625][ T2725] loop2: detected capacity change from 0 to 512 [ 1099.517366][ T2725] EXT4-fs error (device loop2): ext4_acquire_dquot:6910: comm syz.2.7913: Failed to acquire dquot type 1 [ 1099.529202][ T2725] EXT4-fs (loop2): 1 truncate cleaned up [ 1099.535242][ T2725] ext4 filesystem being mounted at /321/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1099.587497][ T2735] wireguard0: entered promiscuous mode [ 1099.593042][ T2735] wireguard0: entered allmulticast mode [ 1099.618967][ T2733] loop4: detected capacity change from 0 to 1024 [ 1099.655910][ T2738] loop2: detected capacity change from 0 to 4096 [ 1099.672016][ T2745] netlink: 'syz.0.7919': attribute type 10 has an invalid length. [ 1099.699194][ T2747] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7921'. [ 1099.734535][ T2753] loop0: detected capacity change from 0 to 512 [ 1099.752506][ T2755] loop6: detected capacity change from 0 to 512 [ 1099.759566][ T2755] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1099.786073][ T2753] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 1099.798901][ T2758] loop4: detected capacity change from 0 to 1024 [ 1099.806709][ T2755] EXT4-fs (loop6): 1 truncate cleaned up [ 1099.810918][ T2764] loop2: detected capacity change from 0 to 512 [ 1099.812644][ T2758] EXT4-fs: Ignoring removed orlov option [ 1099.819479][ T2753] EXT4-fs (loop0): orphan cleanup on readonly fs [ 1099.824714][ T2758] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1099.839200][ T2753] EXT4-fs warning (device loop0): ext4_enable_quotas:7128: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1099.854577][ T2753] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 1099.866522][ T2753] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.7924: bg 0: block 40: padding at end of block bitmap is not set [ 1099.869302][ T2764] EXT4-fs error (device loop2): ext4_acquire_dquot:6910: comm syz.2.7928: Failed to acquire dquot type 1 [ 1099.892365][ T2753] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 1099.902844][ T2753] EXT4-fs (loop0): 1 truncate cleaned up [ 1099.904058][ T2764] EXT4-fs (loop2): 1 truncate cleaned up [ 1099.915099][ T2764] ext4 filesystem being mounted at /325/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1099.951977][ T2772] loop6: detected capacity change from 0 to 512 [ 1099.969962][ T2776] FAULT_INJECTION: forcing a failure. [ 1099.969962][ T2776] name failslab, interval 1, probability 0, space 0, times 0 [ 1099.982744][ T2776] CPU: 0 UID: 0 PID: 2776 Comm: syz.4.7932 Not tainted 6.12.0-syzkaller-00171-g23acd177540d #0 [ 1099.983627][ T2772] EXT4-fs error (device loop6): ext4_acquire_dquot:6910: comm syz.6.7931: Failed to acquire dquot type 1 [ 1099.993086][ T2776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 1099.993104][ T2776] Call Trace: [ 1100.005922][ T2772] EXT4-fs (loop6): 1 truncate cleaned up [ 1100.014556][ T2776] [ 1100.014569][ T2776] dump_stack_lvl+0xf2/0x150 [ 1100.014626][ T2776] dump_stack+0x15/0x20 [ 1100.019276][ T2772] ext4 filesystem being mounted at /220/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1100.023534][ T2776] should_fail_ex+0x223/0x230 [ 1100.050488][ T2776] ? audit_log_start+0x34c/0x6b0 [ 1100.055688][ T2776] should_failslab+0x8f/0xb0 [ 1100.060293][ T2776] kmem_cache_alloc_noprof+0x4c/0x290 [ 1100.065718][ T2776] audit_log_start+0x34c/0x6b0 [ 1100.070500][ T2776] audit_seccomp+0x4b/0x130 [ 1100.075066][ T2776] __seccomp_filter+0x6fa/0x1180 [ 1100.080021][ T2776] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1100.085675][ T2776] ? vfs_write+0x596/0x920 [ 1100.090125][ T2776] ? __pfx_kfree_link+0x10/0x10 [ 1100.095026][ T2776] __secure_computing+0x9f/0x1c0 [ 1100.099987][ T2776] syscall_trace_enter+0xd1/0x1f0 [ 1100.105171][ T2776] ? fpregs_assert_state_consistent+0x83/0xa0 [ 1100.111265][ T2776] do_syscall_64+0xaa/0x1c0 [ 1100.115786][ T2776] ? clear_bhb_loop+0x55/0xb0 [ 1100.120498][ T2776] ? clear_bhb_loop+0x55/0xb0 [ 1100.125269][ T2776] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1100.131181][ T2776] RIP: 0033:0x7fd01331e759 [ 1100.135603][ T2776] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1100.155237][ T2776] RSP: 002b:00007fd011f97038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f7 [ 1100.163658][ T2776] RAX: ffffffffffffffda RBX: 00007fd0134d5f80 RCX: 00007fd01331e759 [ 1100.171644][ T2776] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1100.179716][ T2776] RBP: 00007fd011f97090 R08: 0000000000000000 R09: 0000000000000000 [ 1100.187693][ T2776] R10: 000000000000000c R11: 0000000000000246 R12: 0000000000000001 [ 1100.195718][ T2776] R13: 0000000000000000 R14: 00007fd0134d5f80 R15: 00007ffe7c847758 [ 1100.203770][ T2776] [ 1100.226417][ T2775] loop0: detected capacity change from 0 to 1024 [ 1100.233045][ T2775] EXT4-fs: Ignoring removed orlov option [ 1100.238770][ T2775] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1100.278032][ T2787] loop6: detected capacity change from 0 to 512 [ 1100.289955][ T2787] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 1100.298825][ T2787] EXT4-fs (loop6): orphan cleanup on readonly fs [ 1100.307692][ T2787] EXT4-fs warning (device loop6): ext4_enable_quotas:7128: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1100.323026][ T2787] EXT4-fs (loop6): Cannot turn on quotas: error -117 [ 1100.331505][ T2787] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.7936: bg 0: block 40: padding at end of block bitmap is not set [ 1100.334955][ T2793] loop4: detected capacity change from 0 to 512 [ 1100.361726][ T2787] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 1100.371329][ T2787] EXT4-fs (loop6): 1 truncate cleaned up [ 1100.371876][ T2793] EXT4-fs error (device loop4): ext4_acquire_dquot:6910: comm syz.4.7938: Failed to acquire dquot type 1 [ 1100.388818][ T2793] EXT4-fs (loop4): 1 truncate cleaned up [ 1100.395280][ T2793] ext4 filesystem being mounted at /416/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1100.395326][ T2796] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7937'. [ 1100.441183][ T2804] loop6: detected capacity change from 0 to 512 [ 1100.461891][ T2812] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 1100.470778][ T2804] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 1100.481194][ T2812] x_tables: ip6_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 1100.485610][ T2804] EXT4-fs (loop6): orphan cleanup on readonly fs [ 1100.509651][ T2804] EXT4-fs warning (device loop6): ext4_enable_quotas:7128: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1100.525213][ T2804] EXT4-fs (loop6): Cannot turn on quotas: error -117 [ 1100.530435][ T2816] FAULT_INJECTION: forcing a failure. [ 1100.530435][ T2816] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1100.532741][ T2804] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.7941: bg 0: block 40: padding at end of block bitmap is not set [ 1100.544967][ T2816] CPU: 0 UID: 0 PID: 2816 Comm: syz.0.7946 Not tainted 6.12.0-syzkaller-00171-g23acd177540d #0 [ 1100.544998][ T2816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 1100.559592][ T2804] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 1100.569438][ T2816] Call Trace: [ 1100.569447][ T2816] [ 1100.569456][ T2816] dump_stack_lvl+0xf2/0x150 [ 1100.580062][ T2804] EXT4-fs (loop6): 1 truncate cleaned up [ 1100.588334][ T2816] dump_stack+0x15/0x20 [ 1100.609124][ T2816] should_fail_ex+0x223/0x230 [ 1100.613831][ T2816] should_fail+0xb/0x10 [ 1100.618120][ T2816] should_fail_usercopy+0x1a/0x20 [ 1100.623251][ T2816] _copy_from_user+0x1e/0xb0 [ 1100.627924][ T2816] copy_msghdr_from_user+0x54/0x2a0 [ 1100.633233][ T2816] ? __fget_files+0x17c/0x1c0 [ 1100.637923][ T2816] __sys_sendmsg+0x171/0x270 [ 1100.642618][ T2816] __x64_sys_sendmsg+0x46/0x50 [ 1100.647428][ T2816] x64_sys_call+0x2689/0x2d60 [ 1100.652123][ T2816] do_syscall_64+0xc9/0x1c0 [ 1100.656660][ T2816] ? clear_bhb_loop+0x55/0xb0 [ 1100.661359][ T2816] ? clear_bhb_loop+0x55/0xb0 [ 1100.666055][ T2816] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1100.672035][ T2816] RIP: 0033:0x7f652ec5e759 [ 1100.676474][ T2816] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1100.696107][ T2816] RSP: 002b:00007f652d8d7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1100.704554][ T2816] RAX: ffffffffffffffda RBX: 00007f652ee15f80 RCX: 00007f652ec5e759 [ 1100.712626][ T2816] RDX: 0000000000008800 RSI: 0000000020000040 RDI: 0000000000000004 [ 1100.720624][ T2816] RBP: 00007f652d8d7090 R08: 0000000000000000 R09: 0000000000000000 [ 1100.728614][ T2816] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1100.736630][ T2816] R13: 0000000000000000 R14: 00007f652ee15f80 R15: 00007ffc8064dcf8 [ 1100.744630][ T2816] [ 1100.790843][ T2820] loop0: detected capacity change from 0 to 512 [ 1100.817759][ T2820] EXT4-fs error (device loop0): ext4_acquire_dquot:6910: comm syz.0.7948: Failed to acquire dquot type 1 [ 1100.820986][ T2830] loop4: detected capacity change from 0 to 512 [ 1100.832740][ T2820] EXT4-fs (loop0): 1 truncate cleaned up [ 1100.841622][ T2820] ext4 filesystem being mounted at /391/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1100.854745][ T2820] ================================================================== [ 1100.862937][ T2820] BUG: KCSAN: data-race in __find_get_block / has_bh_in_lru [ 1100.870326][ T2820] [ 1100.872676][ T2820] read-write to 0xffff888237c2bb28 of 8 bytes by task 2830 on cpu 0: [ 1100.880783][ T2820] __find_get_block+0x434/0x8a0 [ 1100.885656][ T2820] bdev_getblk+0x139/0x3b0 [ 1100.890182][ T2820] read_mmp_block+0xb5/0x430 [ 1100.894782][ T2820] ext4_multi_mount_protect+0x111/0x5e0 [ 1100.900341][ T2820] ext4_fill_super+0x299a/0x3a10 [ 1100.905299][ T2820] get_tree_bdev_flags+0x29f/0x310 [ 1100.910433][ T2820] get_tree_bdev+0x1f/0x30 [ 1100.914870][ T2820] ext4_get_tree+0x1c/0x30 [ 1100.919314][ T2820] vfs_get_tree+0x56/0x1e0 [ 1100.923736][ T2820] do_new_mount+0x227/0x690 [ 1100.928250][ T2820] path_mount+0x49b/0xb30 [ 1100.932591][ T2820] __se_sys_mount+0x27c/0x2d0 [ 1100.937277][ T2820] __x64_sys_mount+0x67/0x80 [ 1100.941876][ T2820] x64_sys_call+0x203e/0x2d60 [ 1100.946599][ T2820] do_syscall_64+0xc9/0x1c0 [ 1100.951125][ T2820] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1100.957037][ T2820] [ 1100.959399][ T2820] read to 0xffff888237c2bb28 of 8 bytes by task 2820 on cpu 1: [ 1100.966956][ T2820] has_bh_in_lru+0x35/0x1f0 [ 1100.971492][ T2820] smp_call_function_many_cond+0x2d5/0xc20 [ 1100.977416][ T2820] on_each_cpu_cond_mask+0x3c/0x90 [ 1100.982549][ T2820] invalidate_bh_lrus+0x2a/0x30 [ 1100.987424][ T2820] invalidate_bdev+0x42/0x70 [ 1100.992027][ T2820] ext4_put_super+0x571/0x840 [ 1100.996797][ T2820] generic_shutdown_super+0xe5/0x220 [ 1101.002137][ T2820] kill_block_super+0x2a/0x70 [ 1101.006828][ T2820] ext4_kill_sb+0x44/0x80 [ 1101.011181][ T2820] deactivate_locked_super+0x7d/0x1c0 [ 1101.016585][ T2820] deactivate_super+0x9f/0xb0 [ 1101.021285][ T2820] cleanup_mnt+0x268/0x2e0 [ 1101.026757][ T2820] __cleanup_mnt+0x19/0x20 [ 1101.031183][ T2820] task_work_run+0x13a/0x1a0 [ 1101.035810][ T2820] syscall_exit_to_user_mode+0xbe/0x130 [ 1101.041386][ T2820] do_syscall_64+0xd6/0x1c0 [ 1101.045996][ T2820] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1101.051914][ T2820] [ 1101.054233][ T2820] value changed: 0xffff8881063daa90 -> 0xffff8881063daaf8 [ 1101.061348][ T2820] [ 1101.063843][ T2820] Reported by Kernel Concurrency Sanitizer on: [ 1101.069988][ T2820] CPU: 1 UID: 0 PID: 2820 Comm: syz.0.7948 Not tainted 6.12.0-syzkaller-00171-g23acd177540d #0 [ 1101.080325][ T2820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 1101.090387][ T2820] ================================================================== [ 1101.102226][ T2834] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 1101.123042][ T2830] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 1101.131156][ T2830] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1101.138707][ T2830] EXT4-fs warning (device loop4): ext4_enable_quotas:7128: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1101.154581][ T2830] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 1101.163104][ T2830] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.7952: bg 0: block 40: padding at end of block bitmap is not set [ 1101.178691][ T2830] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 1101.187838][ T2830] EXT4-fs (loop4): 1 truncate cleaned up