last executing test programs: 1.40538903s ago: executing program 1 (id=2865): r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3, 0x0, 0x6}, 0x18) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000400)={0xa}) epoll_pwait(r0, &(0x7f0000000080)=[{}], 0x1, 0x80000000, 0x0, 0x0) 1.40451141s ago: executing program 3 (id=2866): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00', 0xc}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='kmem_cache_free\x00', r2, 0x0, 0x4}, 0x18) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r5}, 0x10) close_range(r0, r3, 0x0) 1.38816202s ago: executing program 3 (id=2867): r0 = epoll_create1(0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2, 0x0, 0x6}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) select(0x40, &(0x7f0000000340)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x2e787ec3}, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0xa000000d}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000780)={'dummy0\x00'}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000400)={0xa}) epoll_pwait(0xffffffffffffffff, &(0x7f0000000080)=[{}], 0x1, 0x80000000, 0x0, 0x0) dup3(r1, r0, 0x0) 1.37020701s ago: executing program 3 (id=2868): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000cc0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYRESHEX=r0], 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r2}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$unix(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000007c0)='\'', 0x1}], 0x1, &(0x7f0000000800)=ANY=[@ANYBLOB="14000000000000"], 0x18, 0x24040010}, 0x0) recvmsg$unix(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000280)=""/230, 0xe6}], 0x1}, 0x0) 1.030086385s ago: executing program 2 (id=2873): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000640)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x5f21df7aec8d40fb, 0x0, 0x4, 0x5, 0x0, 0x7fffffff}, 0x0, 0x0, r0, 0xb) open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0600000005000000080000000a000000000000805a5a5678b80ff7b2d2e113a396a5f48d95", @ANYRES32, @ANYBLOB='\a\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000004080)={{r3}, &(0x7f0000004000), &(0x7f0000004040)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='kfree\x00', r4, 0x0, 0x8000000000000}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000680)={[{@nolazytime}, {@lazytime}, {@journal_path={'journal_path', 0x3d, './bus'}}, {@bsdgroups}, {@lazytime}, {@noload}]}, 0x3, 0x45c, &(0x7f0000002400)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x37e2f4aba9289b81, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300), 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1b, 0xc, &(0x7f0000000380)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r6}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) r7 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r7, 0x402, 0x5) openat$cgroup_ro(r1, &(0x7f0000000380)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x141080, 0x0) epoll_create(0x4000100) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x11, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r8}, 0x10) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r9, 0x0, 0x0) r10 = syz_io_uring_setup(0x3bc1, &(0x7f0000000780)={0x0, 0x942e, 0x10100, 0x2, 0x289}, &(0x7f0000000540), &(0x7f0000000040)) io_uring_enter(r10, 0x567, 0x72, 0x0, 0x0, 0x0) 953.231587ms ago: executing program 0 (id=2875): socket$netlink(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10) 952.804386ms ago: executing program 4 (id=2876): epoll_create1(0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000", @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b700000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, @void, @value}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/rt_acct\x00') r1 = socket(0x18, 0x3, 0x0) connect$pppoe(r1, &(0x7f0000000100)={0x18, 0x0, {0x2, @broadcast, 'vxcan1\x00'}}, 0x1e) sendfile(r1, r0, 0x0, 0x8) 948.545086ms ago: executing program 2 (id=2877): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x1, @perf_bp={&(0x7f0000000040), 0x8}, 0x2, 0xd33, 0x6, 0x6, 0x4, 0xfffffffe, 0xfff9, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x9) mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500000002"], 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socket(0x2, 0x80805, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) io_pgetevents(0x0, 0x1, 0x0, 0x0, 0x0, 0x0) r2 = socket$kcm(0xa, 0x6, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e00000085000000080000"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$sock_attach_bpf(r2, 0x10d, 0xa, &(0x7f0000000000)=r3, 0x11) 910.523057ms ago: executing program 4 (id=2878): r0 = epoll_create1(0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2, 0x0, 0x6}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) select(0x40, &(0x7f0000000340)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x2e787ec3}, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0xa000000d}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000780)={'dummy0\x00'}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000400)={0xa}) epoll_pwait(0xffffffffffffffff, &(0x7f0000000080)=[{}], 0x1, 0x80000000, 0x0, 0x0) dup3(r1, r0, 0x0) 892.922607ms ago: executing program 4 (id=2879): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x9, 0x3, 0x8, 0x4, 0x2, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000000000000fcffff0318110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70802000000eefffffff8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000b3087f0b3366ad11e9018b0a80172419e25523331ac672a6a37b2720e2d1d5caf9d72ff38e33070022d3a46c64804792806886696b00c4b9b919b4a272de4418ac77f57bdf970b1236fc00cd60989b5b5455a351e69247b31c70"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xfff, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) ptrace(0x420e, r1) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180200000020702500000000002020207b1af8ff00000000bfa100000000000007010000dbffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) r3 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r3, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) connect$llc(r3, &(0x7f0000000480)={0x1a, 0x100, 0x2, 0xfc, 0x4, 0xfa, @multicast}, 0x10) r4 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r4, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010400000000000000000100000008000240000000020900010073797a300000000014000000110001"], 0x50}}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000380)={0x3, &(0x7f0000000200)=[{0x2b, 0x0, 0x6, 0xfff}, {0x5, 0x0, 0x5, 0x200}, {0x8, 0x87, 0x3c, 0x9}]}) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000540), 0x84) perf_event_open(&(0x7f00000004c0)={0x8, 0x80, 0x0, 0xc, 0x0, 0x0, 0x82, 0x200000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000080), 0x9}, 0x18204, 0x0, 0x3, 0x0, 0x0, 0x5338c7af, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r9, 0xffffffffffffffff, 0x0) 822.705788ms ago: executing program 2 (id=2880): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x2000000000000024, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0xfffffffe, 0xfffffffffffffd8b, 0x0, 0x40f00, 0xc, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001b80)={0x6, 0xb, &(0x7f0000001b00)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000e8e09e9ab702000008000000b70300000000000085000000c800000095"], &(0x7f00000005c0)='GPL\x00', 0x2, 0x79, &(0x7f0000000140)=""/121, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80, @void, @value}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) unshare(0x2040400) gettid() syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x8004, &(0x7f0000000080)={[{@discard}, {@bh}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x7b9, &(0x7f00000007c0)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r3, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x107842, 0x42) lseek(r4, 0x5, 0x3) chown(&(0x7f0000000040)='./file1\x00', 0xffffffffffffffff, 0x0) close(r2) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4008, &(0x7f00000002c0)={[{@jqfmt_vfsv1}]}, 0x1, 0x52e, &(0x7f0000000f80)="$eJzs3U9sI1cZAPBvJsnau02bLfQAqNClFBa0WjvxtlHVC+VUIVQJ6JHDNiROFMWOo9gpTdhD9sgdiZU4wYkzByQOSD1xR+IANy7lgFRgBWqKkDDy2E6cP07c3cTejX8/aeQ388b+3tvRvGd93swLYGzdiIjdiLgSEe9GxEzneNLZ4s321jrv44f3Fvce3ltMotl85x9JVt86Fj3vaXmm85n5iPj+WxE/TI4E/WNEfXtnbaFSKW92DhUb1Y1ifXvn9mp1YaW8Ul4vlebn5mdfv/Na6dz6+lL11x9djYjf/faLH/5h9xs/bjVrulPX24/z1O761H6clsmI+M5FBBuBiU5/rjzKmx/pTZynNCI+ExEvZ/f/TExkV/Oww5fpm0NsHQBwEZrNmWjO9O4DAJddmuXAkrTQyQVMR5oWCu0c3gtxLa3U6o1by7Wt9aV2rux6TKXLq5XybCdXeD2mkuXVyfJcVu7uV8qlI/t3IuL5iPhp7mq2X1isVZZG+cUHAMbYM0fm/3/n2vM/AHDJ5Q+KuVG2AwAYnvyoGwAADJ35HwDGj/kfAMaP+R8Axo/5HwDGj/kfAMbKd99+u7U19zrPv156b3trrfbe7aVyfa1Q3VosLNY2NwortdpK9sye6lmfV6nVNuZeja33i41yvVGsb+/crda21ht3s+d63y1PDaVXAMBpnn/pgz8nEbH7xtVsi57n/Z85V7940a0DLlI66gYAIzNxSt1/htgOYPiOr/YFjAv5eBhf/2s2m9Gzdm9E3N8v9TwMtO9/EXqwX/rke3Hkkw6k1g2FJ8/Nzz9G/h94qsn/w/g6Lf/fn+/ycBnI/8P4ajYTa/4DwJiR4wdO/NW+R+/v/7PNnp0HF9QgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeApMZ1uSFjprgU9HmhYKEc9GxPWYSpZXK+XZiHguIv6Um8q19uciwrpBAPA0S/+WdNb/ujnzyvTR2iu5T3LZa0T86Ofv/Oz9hUZjcy7iSvLP/eONB53jpVG0HwA4S3ee7s7jXR8/vLfY3YbZno++1V5ctBV3r7O1ayZjMnvNZ7mGa/9KOvttre8rE+cQf/d+RHzupP4nWW7kemfl06PxW7GfHWr89FD8NKtrv7b+LT57Dm2BcfNBa/x586T7L40b2evJ938+G6EeX3f82zs2/qX7499En/HvxqAxXv39t48dbM606+5HfGEyYq/74T3jTzd+0if+KwPG/8uLX3q5X13zFxE346T+J4diFRvVjWJ9e+f2anVhpbxSXi+V5ufmZ1+/81qpmOWoi91M9XF/f+PWc/3it/p/rU/8/Bn9/+qA/f/lf9/9wZdPif/1r5x8/V84JX5rTvzagPEXrv0m36+uFX+pT//Puv63Boz/4V93lgY8FQAYgvr2ztpCpVLefPxC/tRz0vMIMUAhidi94BAHhdyvfvLW2SfnhtaeRyxEv6qJJ6WFl6aQezKaMUBh1CMTcNEObvpRtwQAAAAAAAAAAAAAAOhnoL8HuvppTj5eGHEXAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuMT+HwAA//99VtW2") bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x10003, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r5}, 0x18) recvmsg$unix(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0x1, 0x7800, 0x0, 0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$UHID_CREATE2(r6, &(0x7f0000000540)=ANY=[@ANYBLOB="0b00000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000011"], 0x129) 822.230328ms ago: executing program 3 (id=2881): r0 = socket$netlink(0x10, 0x3, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYRES64=r0], 0x0, 0x53, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x1, 0xc, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1804000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='hrtimer_start\x00', r2}, 0x3d) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='hrtimer_start\x00', r3}, 0x3d) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x7, &(0x7f0000000300)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00', r5}, 0x10) r6 = socket$unix(0x1, 0x1, 0x0) connect$unix(r6, &(0x7f00000005c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001440)=ANY=[@ANYBLOB="540000001c000103000000000000000007000000", @ANYRES32=r8, @ANYBLOB="4000a6080a000200ffffffffffff00000c000e8005000100fd0000000600050001"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x890b, &(0x7f0000000000)={0xffffffffffffffff}) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r11, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, r12, 0x200, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r13}, @val={0xc, 0x99, {0x7, 0x63}}}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000080}, 0x4048004) r14 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r9, 0x10e, 0x4, &(0x7f0000000080)=0x3, 0x4) sendmsg$DEVLINK_CMD_RATE_NEW(r10, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)=ANY=[@ANYBLOB="b17dd3f0", @ANYRES16=r14, @ANYBLOB="010025bd7000fbdbdf25250000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x4040) 773.314239ms ago: executing program 4 (id=2882): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x2, @perf_config_ext={0xf60, 0x100000001}, 0x1100, 0x5dd8, 0x3a65, 0x5, 0x0, 0x8, 0x28, 0x0, 0x0, 0x0, 0x2000000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) pipe2(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) splice(r1, 0x0, r0, 0x0, 0x1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r2}, &(0x7f0000000040), &(0x7f0000000280)='%pS \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1c, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) readahead(0xffffffffffffffff, 0x73cd, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x3c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, @void, @value}, 0x94) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) fallocate(r3, 0x8, 0x9, 0x7fffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x3, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) lsm_get_self_attr(0x65, &(0x7f0000000100)={0x0, 0x0, 0x8b, 0x6b, ""/107}, &(0x7f00000003c0)=0x8b, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'ah\x00'}, &(0x7f0000000380)=0x1e) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) process_madvise(0xffffffffffffffff, &(0x7f0000000200), 0x1000000000000276, 0x0, 0x0) r4 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r4, 0x114, 0x8, &(0x7f0000000380), 0x4) setsockopt$RDS_FREE_MR(r4, 0x114, 0x3, &(0x7f0000000040)={{}, 0x7a}, 0x10) r5 = creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11f48) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000000)={'\x00', 0x8, 0x2, 0x80400, 0x2004, 0x800}) lsetxattr$trusted_overlay_nlink(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), &(0x7f0000000300)={'L-'}, 0x16, 0x1) 619.793371ms ago: executing program 4 (id=2883): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) mq_notify(0xffffffffffffffff, 0x0) 565.855702ms ago: executing program 4 (id=2884): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000007b00000000000000000000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='netlink_extack\x00', r0}, 0x10) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x48, 0x24, 0xd0f, 0xffffffff, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0xff8b, 0x2, @TCA_CBS_PARMS={0x5, 0x1, {0x7, '\x00', 0x8000, 0x1, 0x0, 0x51}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4940}, 0x24008890) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000700000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r4, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r7, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) getpid() bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r8, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) r9 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r9, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001600)=""/4098, 0x1002}, {&(0x7f0000003700)=""/4081, 0xff1}, {&(0x7f0000001300)=""/200, 0xc8}, {&(0x7f0000000200)=""/168, 0xa8}], 0x4}, 0x60012002) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000600)='sys_enter\x00', r10}, 0x10) r11 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r11}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r12 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) readv(r12, &(0x7f0000001140)=[{&(0x7f0000000700)=""/206, 0xce}], 0x1) 565.507332ms ago: executing program 1 (id=2885): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x8004, &(0x7f0000000080)={[{@discard}, {@bh}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x7b9, &(0x7f00000007c0)="$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") pwrite64(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x9000) lseek(0xffffffffffffffff, 0x5, 0x3) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4008, &(0x7f00000002c0)={[{@jqfmt_vfsv1}]}, 0x1, 0x52e, &(0x7f0000000f80)="$eJzs3U9sI1cZAPBvJsnau02bLfQAqNClFBa0WjvxtlHVC+VUIVQJ6JHDNiROFMWOo9gpTdhD9sgdiZU4wYkzByQOSD1xR+IANy7lgFRgBWqKkDDy2E6cP07c3cTejX8/aeQ388b+3tvRvGd93swLYGzdiIjdiLgSEe9GxEzneNLZ4s321jrv44f3Fvce3ltMotl85x9JVt86Fj3vaXmm85n5iPj+WxE/TI4E/WNEfXtnbaFSKW92DhUb1Y1ifXvn9mp1YaW8Ul4vlebn5mdfv/Na6dz6+lL11x9djYjf/faLH/5h9xs/bjVrulPX24/z1O761H6clsmI+M5FBBuBiU5/rjzKmx/pTZynNCI+ExEvZ/f/TExkV/Oww5fpm0NsHQBwEZrNmWjO9O4DAJddmuXAkrTQyQVMR5oWCu0c3gtxLa3U6o1by7Wt9aV2rux6TKXLq5XybCdXeD2mkuXVyfJcVu7uV8qlI/t3IuL5iPhp7mq2X1isVZZG+cUHAMbYM0fm/3/n2vM/AHDJ5Q+KuVG2AwAYnvyoGwAADJ35HwDGj/kfAMaP+R8Axo/5HwDGj/kfAMbKd99+u7U19zrPv156b3trrfbe7aVyfa1Q3VosLNY2NwortdpK9sye6lmfV6nVNuZeja33i41yvVGsb+/crda21ht3s+d63y1PDaVXAMBpnn/pgz8nEbH7xtVsi57n/Z85V7940a0DLlI66gYAIzNxSt1/htgOYPiOr/YFjAv5eBhf/2s2m9Gzdm9E3N8v9TwMtO9/EXqwX/rke3Hkkw6k1g2FJ8/Nzz9G/h94qsn/w/g6Lf/fn+/ycBnI/8P4ajYTa/4DwJiR4wdO/NW+R+/v/7PNnp0HF9QgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeApMZ1uSFjprgU9HmhYKEc9GxPWYSpZXK+XZiHguIv6Um8q19uciwrpBAPA0S/+WdNb/ujnzyvTR2iu5T3LZa0T86Ofv/Oz9hUZjcy7iSvLP/eONB53jpVG0HwA4S3ee7s7jXR8/vLfY3YbZno++1V5ctBV3r7O1ayZjMnvNZ7mGa/9KOvttre8rE+cQf/d+RHzupP4nWW7kemfl06PxW7GfHWr89FD8NKtrv7b+LT57Dm2BcfNBa/x586T7L40b2evJ938+G6EeX3f82zs2/qX7499En/HvxqAxXv39t48dbM606+5HfGEyYq/74T3jTzd+0if+KwPG/8uLX3q5X13zFxE346T+J4diFRvVjWJ9e+f2anVhpbxSXi+V5ufmZ1+/81qpmOWoi91M9XF/f+PWc/3it/p/rU/8/Bn9/+qA/f/lf9/9wZdPif/1r5x8/V84JX5rTvzagPEXrv0m36+uFX+pT//Puv63Boz/4V93lgY8FQAYgvr2ztpCpVLefPxC/tRz0vMIMUAhidi94BAHhdyvfvLW2SfnhtaeRyxEv6qJJ6WFl6aQezKaMUBh1CMTcNEObvpRtwQAAAAAAAAAAAAAAOhnoL8HuvppTj5eGHEXAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuMT+HwAA//99VtW2") r0 = open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x86) pwritev2(r0, &(0x7f0000000240)=[{}], 0x1, 0x7800, 0x0, 0x3) 564.790752ms ago: executing program 3 (id=2886): unshare(0x2040600) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="00000000000000fdffffffffffffff00000000000aee6060c14737524cb29e901d13ec18df0dd0cde2a3641b5d36a29a34ff9a700851bc986331f0317555a235661228a5c726676d5eb303a323da7b199ac356b4542c7b0ab4cfad28ee606e3e4a3ba2b3158210a51d11aa9679cd863b8beecbf0e9e9329aff5eb51eec8fbf6e36b47036ef1551e6319a6e1510c46dee574f294483ef3eccfa2a5d4c38df5fa9c94fd8e4881488aa22bdd65f71265c7fef6c6eb79696bd7568234fbed3bf50e9", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) timer_getoverrun(0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x12, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000005800000002300000000000010b317bb66055a19775aacabb488b2c091898910d58b9e2242d2cd45c87340ce3141bc45a90033f180c85d3eedfb05aad1a7c908f190ee9be703f7cbc92760f289c612038da0b644a114e4767c2eecd388040698aebac02c7ce4e1260c8a930c79378d0c5d06537024776831ee690e257a0705d8c8ec936aefdc421ed1f75d9d43b1c330e125b93e4c", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="00000000000000008500000075000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = gettid() r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) prctl$PR_SET_PDEATHSIG(0x1, 0x3) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x10) sendmsg$unix(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000640)}], 0x1, &(0x7f0000000a00)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r5, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r3, @ANYRES32=r3, @ANYRESDEC=r2, @ANYRES32=r3, @ANYRES32=r4, @ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="1c000000000000000100000402000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r3, @ANYRESOCT=r1], 0xa0}, 0x4004881) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000007000000f2000000000000000018110000", @ANYRES16, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5dd, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r8}, 0x10) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454da, &(0x7f00000001c0)={'bond_slave_0\x00'}) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) ioctl$TUNSETIFF(r10, 0x400454da, &(0x7f00000002c0)={'bond0\x00', 0x200}) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000100)={'nicvf0\x00', 0x1432}) 430.508414ms ago: executing program 0 (id=2887): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, 0x0, &(0x7f0000000040)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) r1 = add_key$keyring(&(0x7f0000000300), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) syz_mount_image$ext4(&(0x7f0000000bc0)='ext3\x00', &(0x7f0000000000)='./file1\x00', 0x8000, &(0x7f00000006c0)={[{@debug}, {@jqfmt_vfsv1}], [{@fsuuid={'fsuuid', 0x3d, {[0x66, 0x66, 0x34, 0x39, 0x64, 0x37, 0x35, 0x32], 0x2d, [0x63, 0x63, 0x33, 0x65], 0x2d, [0x64, 0x63, 0x31, 0x67], 0x2d, [0x35, 0x37, 0x34, 0x65], 0x2d, [0x63, 0x62, 0x38, 0x34, 0x66, 0x38, 0x31]}}}, {@appraise_type}, {@seclabel}, {@audit}, {@smackfshat={'smackfshat', 0x3d, 'jqfmt=vfsv1'}}, {@mask={'mask', 0x3d, 'MAY_READ'}}]}, 0x0, 0x52d, &(0x7f0000000c00)="$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") r2 = gettid() r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r2}, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4, 0x1) r4 = add_key$user(&(0x7f0000000200), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000280)="d2", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000380)='asymmetric\x00', &(0x7f0000000500)=@keyring={'key_or_keyring:', r4}) add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r1) 377.462664ms ago: executing program 0 (id=2888): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, 0x0, &(0x7f0000000040)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) r1 = add_key$keyring(&(0x7f0000000300), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) syz_mount_image$ext4(&(0x7f0000000bc0)='ext3\x00', &(0x7f0000000000)='./file1\x00', 0x8000, &(0x7f00000006c0)={[{@debug}, {@jqfmt_vfsv1}], [{@fsuuid={'fsuuid', 0x3d, {[0x66, 0x66, 0x34, 0x39, 0x64, 0x37, 0x35, 0x32], 0x2d, [0x63, 0x63, 0x33, 0x65], 0x2d, [0x64, 0x63, 0x31, 0x67], 0x2d, [0x35, 0x37, 0x34, 0x65], 0x2d, [0x63, 0x62, 0x38, 0x34, 0x66, 0x38, 0x31]}}}, {@appraise_type}, {@seclabel}, {@audit}, {@smackfshat={'smackfshat', 0x3d, 'jqfmt=vfsv1'}}, {@mask={'mask', 0x3d, 'MAY_READ'}}]}, 0x0, 0x52d, &(0x7f0000000c00)="$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") gettid() r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) timer_create(0x0, 0x0, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4, 0x1) r4 = add_key$user(&(0x7f0000000200), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000280)="d2", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000380)='asymmetric\x00', &(0x7f0000000500)=@keyring={'key_or_keyring:', r4}) add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r1) 332.246105ms ago: executing program 3 (id=2889): r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3, 0x0, 0x6}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) select(0x40, &(0x7f0000000340)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x2e787ec3}, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0xa000000d}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000780)={'dummy0\x00'}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000400)={0xa}) epoll_pwait(r0, &(0x7f0000000080)=[{}], 0x1, 0x80000000, 0x0, 0x0) dup3(r2, r1, 0x0) 324.688825ms ago: executing program 2 (id=2890): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xe06, 0x1000000, &(0x7f0000000100)="b9ff030f6044238cb89e14f088ca1bff430500001100630377fbac141414e000000162079f4b4d2f87e56dca6aab845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000}, 0x2c) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00', 0xc}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r5, 0x404c534a, &(0x7f0000000380)) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='kmem_cache_free\x00', r6, 0x0, 0x4}, 0x18) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') r8 = syz_io_uring_setup(0x812, &(0x7f0000000140)={0x0, 0x114df, 0x0, 0x1, 0x99}, &(0x7f00000003c0)=0x0, &(0x7f00000004c0)=0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r11}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r12}, 0x10) syz_io_uring_submit(r9, r10, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x29c780}) io_uring_enter(r8, 0x3516, 0xaddf, 0x2, 0x0, 0x1517f) socket(0x1e, 0x4, 0x0) socket(0xb, 0x1, 0x0) close_range(r0, r7, 0x0) 289.691235ms ago: executing program 1 (id=2891): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x9, 0x3, 0x8, 0x4, 0x2, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000000000000fcffff0318110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70802000000eefffffff8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000b3087f0b3366ad11e9018b0a80172419e25523331ac672a6a37b2720e2d1d5caf9d72ff38e33070022d3a46c64804792806886696b00c4b9b919b4a272de4418ac77f57bdf970b1236fc00cd60989b5b5455a351e69247b31c705f66dfed2a67e9d4b1b4c08d33a6493c59042b321aaeb7bf2a4419ecbb2d91b2890e36db34357366efc4c6f1b8e05f4dcb98ebce05"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ptrace(0x10, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) ptrace(0x420e, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffc}, 0x18) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000540), 0x84) mmap$IORING_OFF_SQ_RING(&(0x7f0000028000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) perf_event_open(&(0x7f00000004c0)={0x8, 0x80, 0x0, 0xc, 0x0, 0x0, 0x82, 0x200000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000080), 0x9}, 0x18204, 0x0, 0x3, 0x0, 0x0, 0x5338c7af, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 269.000036ms ago: executing program 0 (id=2892): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000400)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) (fail_nth: 3) 185.049057ms ago: executing program 0 (id=2893): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x2, @perf_config_ext={0xf60, 0x100000001}, 0x1100, 0x5dd8, 0x3a65, 0x5, 0x0, 0x8, 0x28, 0x0, 0x0, 0x0, 0x2000000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) pipe2(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) splice(r1, 0x0, r0, 0x0, 0x1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r2}, &(0x7f0000000040), &(0x7f0000000280)='%pS \x00'}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1c, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r3}, 0x10) readahead(0xffffffffffffffff, 0x73cd, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x3c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, @void, @value}, 0x94) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x3, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000081780000bfa30000000000000703000000feffff720af0fff8ffffff71a4f0ff0000000071103b00000000001d400500000000004704000001ed00000f030000000000001d440000000000006b0a00fe000000007203000000000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afc0513466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb4676"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) lsm_get_self_attr(0x65, &(0x7f0000000100)={0x0, 0x0, 0x8b, 0x6b, ""/107}, &(0x7f00000003c0)=0x8b, 0x0) 132.048928ms ago: executing program 1 (id=2894): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x2, @perf_config_ext={0xf60, 0x100000001}, 0x1100, 0x5dd8, 0x3a65, 0x5, 0x0, 0x8, 0x28, 0x0, 0x0, 0x0, 0x2000000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) pipe2(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) splice(r1, 0x0, r0, 0x0, 0x1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r2}, &(0x7f0000000040), &(0x7f0000000280)='%pS \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1c, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) readahead(0xffffffffffffffff, 0x73cd, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x3c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, @void, @value}, 0x94) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) fallocate(r3, 0x8, 0x9, 0x7fffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x3, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) lsm_get_self_attr(0x65, &(0x7f0000000100)={0x0, 0x0, 0x8b, 0x6b, ""/107}, &(0x7f00000003c0)=0x8b, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'ah\x00'}, &(0x7f0000000380)=0x1e) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) process_madvise(0xffffffffffffffff, &(0x7f0000000200), 0x1000000000000276, 0x0, 0x0) r4 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r4, 0x114, 0x8, &(0x7f0000000380), 0x4) setsockopt$RDS_FREE_MR(r4, 0x114, 0x3, &(0x7f0000000040)={{}, 0x7a}, 0x10) r5 = creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11f48) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000000)={'\x00', 0x8, 0x2, 0x80400, 0x2004, 0x800}) lsetxattr$trusted_overlay_nlink(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), &(0x7f0000000300)={'L-'}, 0x16, 0x1) 116.808878ms ago: executing program 2 (id=2895): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) mq_notify(0xffffffffffffffff, 0x0) 79.985649ms ago: executing program 2 (id=2896): r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3, 0x0, 0x6}, 0x18) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000400)={0xa}) epoll_pwait(r0, &(0x7f0000000080)=[{}], 0x1, 0x80000000, 0x0, 0x0) 78.907609ms ago: executing program 0 (id=2897): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x9, 0x3, 0x8, 0x4, 0x2, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000000000000fcffff0318110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70802000000eefffffff8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000b3087f0b3366ad11e9018b0a80172419e25523331ac672a6a37b2720e2d1d5caf9d72ff38e33070022d3a46c64804792806886696b00c4b9b919b4a272de4418ac77f57bdf970b1236fc00cd60989b5b5455a351e69247b31c705f66dfed2a67e9d4b1b4c08d33a6493c59042b321aaeb7bf2a4419ecbb2d91b2890e36db34357366efc4c6f1b8e05f4dcb98ebce05"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) ptrace(0x420e, r1) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180200000020702500000000002020207b1af8ff00000000bfa100000000000007010000dbffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) r3 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r3, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) connect$llc(r3, &(0x7f0000000480)={0x1a, 0x100, 0x2, 0xfc, 0x4, 0xfa, @multicast}, 0x10) r4 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r4, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000380)={0x3, &(0x7f0000000200)=[{0x2b, 0x0, 0x6, 0xfff}, {0x5, 0x0, 0x5, 0x200}, {0x8, 0x87, 0x3c, 0x9}]}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000540), 0x84) perf_event_open(&(0x7f00000004c0)={0x8, 0x80, 0x0, 0xc, 0x0, 0x0, 0x82, 0x200000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000080), 0x9}, 0x18204, 0x0, 0x3, 0x0, 0x0, 0x5338c7af, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r8, 0xffffffffffffffff, 0x0) 49.362369ms ago: executing program 1 (id=2898): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000640)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x5f21df7aec8d40fb, 0x0, 0x4, 0x5, 0x0, 0x7fffffff}, 0x0, 0x0, r0, 0xb) open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0600000005000000080000000a000000000000805a5a5678b80ff7b2d2e113a396a5f48d95", @ANYRES32, @ANYBLOB='\a\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000004080)={{r3}, &(0x7f0000004000), &(0x7f0000004040)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='kfree\x00', r4, 0x0, 0x8000000000000}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000680)={[{@nolazytime}, {@lazytime}, {@journal_path={'journal_path', 0x3d, './bus'}}, {@bsdgroups}, {@lazytime}, {@noload}]}, 0x3, 0x45c, &(0x7f0000002400)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x37e2f4aba9289b81, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300), 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1b, 0xc, &(0x7f0000000380)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r6}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) r7 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r7, 0x402, 0x5) openat$cgroup_ro(r1, &(0x7f0000000380)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) r8 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x121880, 0x0) r9 = syz_io_uring_setup(0x3bc1, &(0x7f0000000780)={0x0, 0x942e, 0x10100, 0x2, 0x289}, &(0x7f0000000540)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4007, @fd=r8, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x1}) io_uring_enter(r9, 0x567, 0x72, 0x0, 0x0, 0x0) 0s ago: executing program 1 (id=2899): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x18) r2 = syz_io_uring_setup(0x5c2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x3, 0x3d9}, &(0x7f0000000240)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000004c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x59, 0x0, 0x80, 0x2, 0x0, 0x127}) io_uring_enter(r2, 0xc54, 0xc993, 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a30000000002c000000030a01010000000000000000020000000900010073797a30000000000900030073797a32000000003a000000030a03000000000000000000020000000900010073797a30000000000900030073797a32"], 0xa0}}, 0x8040) pread64(0xffffffffffffffff, &(0x7f00000003c0)=""/179, 0xb3, 0x40) r5 = io_uring_setup(0x2a2d, &(0x7f0000000000)={0x0, 0x0, 0x2, 0xfffffffc, 0x366}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000640)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000000e27f00000100000000000000", @ANYBLOB='\x00'/17, @ANYRES32=0x0, @ANYRES32], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0)="c8", &(0x7f0000000380), 0x9, r6}, 0x38) syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./bus\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x36c, &(0x7f00000023c0)="$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") r7 = open(&(0x7f0000000000)='./bus\x00', 0x141b42, 0x8) pipe(&(0x7f0000000080)={0xffffffffffffffff}) splice(r8, 0x0, r7, 0x0, 0x1000, 0x0) truncate(&(0x7f0000000080)='./file2\x00', 0x2000) close_range(r5, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): 4-fs (loop3): 1 truncate cleaned up [ 174.075610][ T9761] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 174.089102][ T3301] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 174.146479][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.419835][ T9793] loop2: detected capacity change from 0 to 2048 [ 174.494505][ T9793] EXT4-fs: Ignoring removed bh option [ 174.545780][ T9803] loop3: detected capacity change from 0 to 512 [ 174.644046][ T9803] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 174.661255][ T9793] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 174.662316][ T9803] EXT4-fs (loop3): 1 truncate cleaned up [ 174.681561][ T9803] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 174.728606][ T9816] loop0: detected capacity change from 0 to 2048 [ 174.745725][ T9816] EXT4-fs: Ignoring removed bh option [ 174.797603][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.818263][ T9816] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 174.879709][ T9825] loop1: detected capacity change from 0 to 2048 [ 174.917982][ T9825] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 175.088350][ T9826] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 175.115203][ T9826] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 15 with max blocks 641 with error 28 [ 175.127779][ T9826] EXT4-fs (loop2): This should not happen!! Data will be lost [ 175.127779][ T9826] [ 175.137456][ T9826] EXT4-fs (loop2): Total free blocks count 0 [ 175.143472][ T9826] EXT4-fs (loop2): Free/Dirty block details [ 175.149430][ T9826] EXT4-fs (loop2): free_blocks=2415919104 [ 175.155205][ T9826] EXT4-fs (loop2): dirty_blocks=8224 [ 175.160536][ T9826] EXT4-fs (loop2): Block reservation details [ 175.166553][ T9826] EXT4-fs (loop2): i_reserved_data_blocks=514 [ 175.223697][ T350] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 175.236271][ T9834] loop3: detected capacity change from 0 to 256 [ 175.249233][ T9834] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000001) [ 175.257219][ T9834] FAT-fs (loop3): Filesystem has been set read-only [ 175.334569][ T9836] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 175.428354][ T9836] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 15 with max blocks 641 with error 28 [ 175.440930][ T9836] EXT4-fs (loop0): This should not happen!! Data will be lost [ 175.440930][ T9836] [ 175.450645][ T9836] EXT4-fs (loop0): Total free blocks count 0 [ 175.456663][ T9836] EXT4-fs (loop0): Free/Dirty block details [ 175.462559][ T9836] EXT4-fs (loop0): free_blocks=2415919104 [ 175.468332][ T9836] EXT4-fs (loop0): dirty_blocks=8224 [ 175.473639][ T9836] EXT4-fs (loop0): Block reservation details [ 175.479685][ T9836] EXT4-fs (loop0): i_reserved_data_blocks=514 [ 175.563108][ T51] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 175.636051][ T350] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 175.651077][ T350] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 175.663707][ T350] EXT4-fs (loop1): This should not happen!! Data will be lost [ 175.663707][ T350] [ 175.673468][ T350] EXT4-fs (loop1): Total free blocks count 0 [ 175.679513][ T350] EXT4-fs (loop1): Free/Dirty block details [ 175.685618][ T350] EXT4-fs (loop1): free_blocks=2415919504 [ 175.691470][ T350] EXT4-fs (loop1): dirty_blocks=16400 [ 175.696941][ T350] EXT4-fs (loop1): Block reservation details [ 175.703035][ T350] EXT4-fs (loop1): i_reserved_data_blocks=1025 [ 175.752597][ T350] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 175.832630][ T9849] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2283'. [ 175.861398][ T9851] loop0: detected capacity change from 0 to 2048 [ 175.868205][ T9851] EXT4-fs: Ignoring removed bh option [ 175.956874][ T9851] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 176.472234][ T9857] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 176.487259][ T9857] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 15 with max blocks 641 with error 28 [ 176.499771][ T9857] EXT4-fs (loop0): This should not happen!! Data will be lost [ 176.499771][ T9857] [ 176.509470][ T9857] EXT4-fs (loop0): Total free blocks count 0 [ 176.515498][ T9857] EXT4-fs (loop0): Free/Dirty block details [ 176.521407][ T9857] EXT4-fs (loop0): free_blocks=2415919104 [ 176.527183][ T9857] EXT4-fs (loop0): dirty_blocks=8224 [ 176.532501][ T9857] EXT4-fs (loop0): Block reservation details [ 176.536091][ T9877] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2289'. [ 176.538532][ T9857] EXT4-fs (loop0): i_reserved_data_blocks=514 [ 176.595059][ T350] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 176.636052][ T29] kauditd_printk_skb: 285 callbacks suppressed [ 176.636069][ T29] audit: type=1326 audit(1744463989.396:23098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9878 comm="syz.2.2291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75368bd169 code=0x7ffc0000 [ 176.686199][ T29] audit: type=1326 audit(1744463989.426:23099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9878 comm="syz.2.2291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75368bd169 code=0x7ffc0000 [ 176.709939][ T29] audit: type=1326 audit(1744463989.426:23100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9878 comm="syz.2.2291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f75368bd169 code=0x7ffc0000 [ 176.733589][ T29] audit: type=1326 audit(1744463989.426:23101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9878 comm="syz.2.2291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75368bd169 code=0x7ffc0000 [ 176.757163][ T29] audit: type=1326 audit(1744463989.426:23102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9878 comm="syz.2.2291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75368bd169 code=0x7ffc0000 [ 176.780740][ T29] audit: type=1326 audit(1744463989.426:23103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9878 comm="syz.2.2291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f75368bd169 code=0x7ffc0000 [ 176.804412][ T29] audit: type=1326 audit(1744463989.426:23104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9878 comm="syz.2.2291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75368bd169 code=0x7ffc0000 [ 176.828185][ T29] audit: type=1326 audit(1744463989.426:23105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9878 comm="syz.2.2291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75368bd169 code=0x7ffc0000 [ 176.834186][ T9879] loop2: detected capacity change from 0 to 128 [ 176.851803][ T29] audit: type=1326 audit(1744463989.426:23106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9878 comm="syz.2.2291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75368bd169 code=0x7ffc0000 [ 176.851856][ T29] audit: type=1326 audit(1744463989.426:23107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9878 comm="syz.2.2291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75368bd169 code=0x7ffc0000 [ 176.904542][ T9888] loop4: detected capacity change from 0 to 512 [ 176.935659][ T9888] ext3: Unknown parameter 'fsuuid' [ 176.988709][ T9895] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 177.012183][ T9879] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1) [ 177.260602][ T9909] FAULT_INJECTION: forcing a failure. [ 177.260602][ T9909] name failslab, interval 1, probability 0, space 0, times 0 [ 177.273305][ T9909] CPU: 1 UID: 0 PID: 9909 Comm: syz.1.2301 Not tainted 6.15.0-rc1-syzkaller-00301-g3bde70a2c827 #0 PREEMPT(voluntary) [ 177.273337][ T9909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 177.273351][ T9909] Call Trace: [ 177.273359][ T9909] [ 177.273368][ T9909] dump_stack_lvl+0xf6/0x150 [ 177.273391][ T9909] dump_stack+0x15/0x1a [ 177.273410][ T9909] should_fail_ex+0x261/0x270 [ 177.273440][ T9909] should_failslab+0x8f/0xb0 [ 177.273472][ T9909] kmem_cache_alloc_noprof+0x59/0x340 [ 177.273497][ T9909] ? getname_flags+0x81/0x3b0 [ 177.273519][ T9909] getname_flags+0x81/0x3b0 [ 177.273581][ T9909] __x64_sys_execve+0x42/0x70 [ 177.273616][ T9909] x64_sys_call+0x1362/0x2e10 [ 177.273643][ T9909] do_syscall_64+0xc9/0x1c0 [ 177.273679][ T9909] ? clear_bhb_loop+0x25/0x80 [ 177.273703][ T9909] ? clear_bhb_loop+0x25/0x80 [ 177.273758][ T9909] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.273816][ T9909] RIP: 0033:0x7f46df6ad169 [ 177.273834][ T9909] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 177.273855][ T9909] RSP: 002b:00007f46ddd17038 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 177.273873][ T9909] RAX: ffffffffffffffda RBX: 00007f46df8c5fa0 RCX: 00007f46df6ad169 [ 177.273885][ T9909] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 177.273898][ T9909] RBP: 00007f46ddd17090 R08: 0000000000000000 R09: 0000000000000000 [ 177.273912][ T9909] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 177.273953][ T9909] R13: 0000000000000000 R14: 00007f46df8c5fa0 R15: 00007ffeb94ec838 [ 177.273975][ T9909] [ 177.443739][ T9910] loop3: detected capacity change from 0 to 256 [ 177.469140][ T9910] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000001) [ 177.477063][ T9910] FAT-fs (loop3): Filesystem has been set read-only [ 177.497157][ T9912] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2303'. [ 177.894571][ T9920] loop4: detected capacity change from 0 to 512 [ 177.913927][ T9920] ext3: Unknown parameter 'fsuuid' [ 177.998445][ T9922] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2306'. [ 178.053867][ T9929] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 178.170130][ T9940] loop4: detected capacity change from 0 to 128 [ 178.188648][ T9940] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1) [ 178.208813][ T9937] loop3: detected capacity change from 0 to 512 [ 178.229590][ T9937] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 178.275953][ T9937] EXT4-fs (loop3): 1 truncate cleaned up [ 178.282658][ T9937] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 178.320352][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.424594][ T9953] loop3: detected capacity change from 0 to 128 [ 178.482079][ T9953] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1) [ 178.505931][ T9953] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 178.513887][ T9953] FAT-fs (loop3): Filesystem has been set read-only [ 178.579804][ T3311] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 179.008076][ T9966] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 179.025879][ T9966] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.108905][ T9969] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 179.136719][ T9966] loop0: detected capacity change from 0 to 512 [ 179.178454][ T9966] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 179.232879][ T9966] EXT4-fs (loop0): 1 truncate cleaned up [ 179.277369][ T9978] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2325'. [ 179.313074][ T9966] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 179.489811][ T9982] loop2: detected capacity change from 0 to 2048 [ 179.496736][ T9982] EXT4-fs: Ignoring removed bh option [ 179.513228][ T9984] loop3: detected capacity change from 0 to 128 [ 179.530336][ T9984] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1) [ 179.540446][ T9982] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 179.556813][ T9984] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 179.564983][ T9984] FAT-fs (loop3): Filesystem has been set read-only [ 179.586764][ T3311] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 179.688718][ T9997] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.738745][ T9999] netlink: 'syz.3.2331': attribute type 10 has an invalid length. [ 179.746794][ T9999] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2331'. [ 179.761584][ T9997] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.772660][ T9999] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 179.842284][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.852907][ T9997] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.880935][ T9998] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 179.896261][ T9998] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 15 with max blocks 641 with error 28 [ 179.898547][T10001] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.908880][ T9998] EXT4-fs (loop2): This should not happen!! Data will be lost [ 179.908880][ T9998] [ 179.928284][ T9998] EXT4-fs (loop2): Total free blocks count 0 [ 179.934395][ T9998] EXT4-fs (loop2): Free/Dirty block details [ 179.940343][ T9998] EXT4-fs (loop2): free_blocks=2415919104 [ 179.941807][T10002] netlink: 'syz.0.2332': attribute type 10 has an invalid length. [ 179.946103][ T9998] EXT4-fs (loop2): dirty_blocks=8224 [ 179.953998][T10002] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2332'. [ 179.959422][ T9998] EXT4-fs (loop2): Block reservation details [ 179.959439][ T9998] EXT4-fs (loop2): i_reserved_data_blocks=514 [ 179.987314][T10002] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 180.005810][ T9997] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.047491][T10001] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.060066][ T57] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 180.086580][ T9997] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.101294][ T9997] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.112236][T10001] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.127507][ T9997] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.140346][ T9997] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.167100][T10001] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.352120][T10016] loop3: detected capacity change from 0 to 512 [ 180.354474][T10001] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.363415][T10016] ext3: Unknown parameter 'fsuuid' [ 180.396022][T10001] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.433078][T10001] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.447774][T10001] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.521754][T10026] loop3: detected capacity change from 0 to 2048 [ 180.534065][T10026] EXT4-fs: Ignoring removed bh option [ 180.567680][T10026] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 180.881524][T10037] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 180.898035][T10037] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 15 with max blocks 641 with error 28 [ 180.910682][T10037] EXT4-fs (loop3): This should not happen!! Data will be lost [ 180.910682][T10037] [ 180.920399][T10037] EXT4-fs (loop3): Total free blocks count 0 [ 180.926590][T10037] EXT4-fs (loop3): Free/Dirty block details [ 180.932500][T10037] EXT4-fs (loop3): free_blocks=2415919104 [ 180.938293][T10037] EXT4-fs (loop3): dirty_blocks=8224 [ 180.943664][T10037] EXT4-fs (loop3): Block reservation details [ 180.949697][T10037] EXT4-fs (loop3): i_reserved_data_blocks=514 [ 180.989427][ T350] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 181.257365][T10048] loop2: detected capacity change from 0 to 512 [ 181.264038][T10048] ext3: Unknown parameter 'fsuuid' [ 181.400143][T10059] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2354'. [ 181.428288][T10064] loop1: detected capacity change from 0 to 2048 [ 181.434976][T10064] EXT4-fs: Ignoring removed bh option [ 181.457023][T10064] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 181.656831][T10089] loop4: detected capacity change from 0 to 512 [ 181.667089][T10089] ext3: Unknown parameter 'fsuuid' [ 181.688815][ T29] kauditd_printk_skb: 546 callbacks suppressed [ 181.688831][ T29] audit: type=1326 audit(1744463994.446:23654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10073 comm="syz.0.2357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c30ddd169 code=0x7ffc0000 [ 181.718801][ T29] audit: type=1326 audit(1744463994.446:23655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10073 comm="syz.0.2357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c30ddd169 code=0x7ffc0000 [ 181.803587][ T8222] hid-generic 0000:0008:0001.0003: unknown main item tag 0x0 [ 181.811105][ T8222] hid-generic 0000:0008:0001.0003: unknown main item tag 0x0 [ 181.818573][ T8222] hid-generic 0000:0008:0001.0003: unknown main item tag 0x0 [ 181.826002][ T8222] hid-generic 0000:0008:0001.0003: unknown main item tag 0x0 [ 181.833470][ T8222] hid-generic 0000:0008:0001.0003: unknown main item tag 0x0 [ 181.840912][ T8222] hid-generic 0000:0008:0001.0003: unknown main item tag 0x0 [ 181.848355][ T8222] hid-generic 0000:0008:0001.0003: unknown main item tag 0x0 [ 181.855804][ T8222] hid-generic 0000:0008:0001.0003: unknown main item tag 0x0 [ 181.863295][ T8222] hid-generic 0000:0008:0001.0003: unknown main item tag 0x0 [ 181.870745][ T8222] hid-generic 0000:0008:0001.0003: unknown main item tag 0x0 [ 181.878203][ T8222] hid-generic 0000:0008:0001.0003: unknown main item tag 0x0 [ 181.885786][ T8222] hid-generic 0000:0008:0001.0003: unknown main item tag 0x0 [ 181.893314][ T8222] hid-generic 0000:0008:0001.0003: unknown main item tag 0x0 [ 181.904197][ T29] audit: type=1400 audit(1744463994.656:23656): avc: denied { create } for pid=10093 comm="GPL" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 181.909180][ T8222] hid-generic 0000:0008:0001.0003: hidraw0: HID v0.80 Device [syz0] on syz0 [ 181.923297][ T29] audit: type=1400 audit(1744463994.656:23657): avc: denied { ioctl } for pid=10093 comm="GPL" path="socket:[30666]" dev="sockfs" ino=30666 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 181.989444][T10085] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 182.009845][T10085] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 15 with max blocks 641 with error 28 [ 182.022467][T10085] EXT4-fs (loop1): This should not happen!! Data will be lost [ 182.022467][T10085] [ 182.032148][T10085] EXT4-fs (loop1): Total free blocks count 0 [ 182.039596][T10085] EXT4-fs (loop1): Free/Dirty block details [ 182.045613][T10085] EXT4-fs (loop1): free_blocks=2415919104 [ 182.051345][T10085] EXT4-fs (loop1): dirty_blocks=8224 [ 182.056686][T10085] EXT4-fs (loop1): Block reservation details [ 182.062677][T10085] EXT4-fs (loop1): i_reserved_data_blocks=514 [ 182.130400][T10110] loop3: detected capacity change from 0 to 2048 [ 182.143916][T10110] EXT4-fs: Ignoring removed bh option [ 182.149907][ T38] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 182.177062][T10110] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 182.235946][ T29] audit: type=1326 audit(1744463994.986:23658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10113 comm="syz.0.2372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c30ddd169 code=0x7ffc0000 [ 182.259731][ T29] audit: type=1326 audit(1744463994.986:23659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10113 comm="syz.0.2372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c30ddd169 code=0x7ffc0000 [ 182.283392][ T29] audit: type=1326 audit(1744463994.986:23660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10113 comm="syz.0.2372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f2c30ddd169 code=0x7ffc0000 [ 182.307017][ T29] audit: type=1326 audit(1744463994.986:23661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10113 comm="syz.0.2372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c30ddd169 code=0x7ffc0000 [ 182.361358][ T29] audit: type=1326 audit(1744463995.116:23662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10116 comm="syz.0.2373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c30ddd169 code=0x7ffc0000 [ 182.396335][ T29] audit: type=1326 audit(1744463995.146:23663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10116 comm="syz.0.2373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f2c30ddd169 code=0x7ffc0000 [ 182.432342][T10122] loop1: detected capacity change from 0 to 512 [ 182.440407][T10122] ext3: Unknown parameter 'fsuuid' [ 182.516909][T10125] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2375'. [ 182.528308][T10132] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.573850][T10135] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2378'. [ 182.585201][T10132] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.644769][ T57] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 182.659850][ T57] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 182.672365][ T57] EXT4-fs (loop3): This should not happen!! Data will be lost [ 182.672365][ T57] [ 182.682153][ T57] EXT4-fs (loop3): Total free blocks count 0 [ 182.688307][ T57] EXT4-fs (loop3): Free/Dirty block details [ 182.694198][ T57] EXT4-fs (loop3): free_blocks=2415919104 [ 182.700250][ T57] EXT4-fs (loop3): dirty_blocks=8224 [ 182.705692][ T57] EXT4-fs (loop3): Block reservation details [ 182.711704][ T57] EXT4-fs (loop3): i_reserved_data_blocks=514 [ 182.719100][T10132] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.723251][ T57] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 2048 with error 28 [ 182.777150][T10132] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.802892][T10145] loop4: detected capacity change from 0 to 2048 [ 182.822942][T10145] EXT4-fs: Ignoring removed bh option [ 182.842978][T10132] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.852950][T10145] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 182.870612][T10132] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.882534][T10132] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.895942][T10132] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.930054][T10151] loop0: detected capacity change from 0 to 512 [ 182.976605][T10151] ext3: Unknown parameter 'fsuuid' [ 183.240145][T10157] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 183.251788][T10172] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2390'. [ 183.276157][T10173] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2391'. [ 183.311753][T10157] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 15 with max blocks 641 with error 28 [ 183.324326][T10157] EXT4-fs (loop4): This should not happen!! Data will be lost [ 183.324326][T10157] [ 183.334192][T10157] EXT4-fs (loop4): Total free blocks count 0 [ 183.340250][T10157] EXT4-fs (loop4): Free/Dirty block details [ 183.346290][T10157] EXT4-fs (loop4): free_blocks=2415919104 [ 183.352028][T10157] EXT4-fs (loop4): dirty_blocks=8224 [ 183.357501][T10157] EXT4-fs (loop4): Block reservation details [ 183.363524][T10157] EXT4-fs (loop4): i_reserved_data_blocks=514 [ 183.406078][T10179] loop2: detected capacity change from 0 to 256 [ 183.419346][T10179] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001) [ 183.427275][T10179] FAT-fs (loop2): Filesystem has been set read-only [ 183.430521][T10177] loop0: detected capacity change from 0 to 512 [ 183.492290][T10177] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 183.507325][ T51] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 183.523412][T10186] loop2: detected capacity change from 0 to 512 [ 183.526946][T10177] EXT4-fs (loop0): 1 truncate cleaned up [ 183.542148][T10177] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 183.586483][T10186] ext3: Unknown parameter 'fsuuid' [ 183.758310][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.866752][T10204] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 183.948593][T10208] loop0: detected capacity change from 0 to 256 [ 183.965750][T10208] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000001) [ 183.973789][T10208] FAT-fs (loop0): Filesystem has been set read-only [ 184.583897][T10222] loop1: detected capacity change from 0 to 512 [ 184.590616][T10222] ext3: Unknown parameter 'fsuuid' [ 184.632717][T10224] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.707808][T10224] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.820060][T10224] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.879482][T10224] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.925931][T10237] loop0: detected capacity change from 0 to 2048 [ 184.932599][T10237] EXT4-fs: Ignoring removed bh option [ 184.961138][T10237] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 184.981051][T10224] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.001587][T10224] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.023615][T10224] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.036345][T10239] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 185.099027][T10224] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.160603][T10249] loop1: detected capacity change from 0 to 512 [ 185.167744][T10249] ext3: Unknown parameter 'fsuuid' [ 185.293902][T10243] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 185.309466][T10243] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 15 with max blocks 641 with error 28 [ 185.321964][T10243] EXT4-fs (loop0): This should not happen!! Data will be lost [ 185.321964][T10243] [ 185.331757][T10243] EXT4-fs (loop0): Total free blocks count 0 [ 185.337928][T10243] EXT4-fs (loop0): Free/Dirty block details [ 185.344013][T10243] EXT4-fs (loop0): free_blocks=2415919104 [ 185.349818][T10243] EXT4-fs (loop0): dirty_blocks=8224 [ 185.355254][T10243] EXT4-fs (loop0): Block reservation details [ 185.361260][T10243] EXT4-fs (loop0): i_reserved_data_blocks=514 [ 185.377217][T10253] loop3: detected capacity change from 0 to 2048 [ 185.388924][T10253] EXT4-fs: Ignoring removed bh option [ 185.418139][T10253] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 185.419203][ T350] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 185.660794][ T3559] hid-generic 0000:0008:0001.0004: unknown main item tag 0x0 [ 185.668289][ T3559] hid-generic 0000:0008:0001.0004: unknown main item tag 0x0 [ 185.675714][ T3559] hid-generic 0000:0008:0001.0004: unknown main item tag 0x0 [ 185.683233][ T3559] hid-generic 0000:0008:0001.0004: unknown main item tag 0x0 [ 185.690751][ T3559] hid-generic 0000:0008:0001.0004: unknown main item tag 0x0 [ 185.698223][ T3559] hid-generic 0000:0008:0001.0004: unknown main item tag 0x0 [ 185.705686][ T3559] hid-generic 0000:0008:0001.0004: unknown main item tag 0x0 [ 185.713088][ T3559] hid-generic 0000:0008:0001.0004: unknown main item tag 0x0 [ 185.720597][ T3559] hid-generic 0000:0008:0001.0004: unknown main item tag 0x0 [ 185.728019][ T3559] hid-generic 0000:0008:0001.0004: unknown main item tag 0x0 [ 185.735460][ T3559] hid-generic 0000:0008:0001.0004: unknown main item tag 0x0 [ 185.743010][ T3559] hid-generic 0000:0008:0001.0004: unknown main item tag 0x0 [ 185.750735][ T3559] hid-generic 0000:0008:0001.0004: unknown main item tag 0x0 [ 185.765319][ T3559] hid-generic 0000:0008:0001.0004: hidraw0: HID v0.80 Device [syz0] on syz0 [ 185.799397][ T57] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 185.814996][ T57] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 185.827500][ T57] EXT4-fs (loop3): This should not happen!! Data will be lost [ 185.827500][ T57] [ 185.837307][ T57] EXT4-fs (loop3): Total free blocks count 0 [ 185.843310][ T57] EXT4-fs (loop3): Free/Dirty block details [ 185.849390][ T57] EXT4-fs (loop3): free_blocks=2415919104 [ 185.855310][ T57] EXT4-fs (loop3): dirty_blocks=8224 [ 185.860611][ T57] EXT4-fs (loop3): Block reservation details [ 185.866627][ T57] EXT4-fs (loop3): i_reserved_data_blocks=514 [ 185.876959][ T350] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 2048 with error 28 [ 186.030959][T10276] loop3: detected capacity change from 0 to 2048 [ 186.037850][T10276] EXT4-fs: Ignoring removed bh option [ 186.057829][T10276] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 186.135661][T10282] loop2: detected capacity change from 0 to 2048 [ 186.142568][T10282] EXT4-fs: Ignoring removed bh option [ 186.167060][T10282] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 186.317994][T10290] loop1: detected capacity change from 0 to 512 [ 186.324806][T10290] ext3: Unknown parameter 'fsuuid' [ 186.478426][T10286] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 186.481029][ T3382] hid-generic 0000:0008:0001.0005: unknown main item tag 0x0 [ 186.500671][ T3382] hid-generic 0000:0008:0001.0005: unknown main item tag 0x0 [ 186.508108][ T3382] hid-generic 0000:0008:0001.0005: unknown main item tag 0x0 [ 186.515582][ T3382] hid-generic 0000:0008:0001.0005: unknown main item tag 0x0 [ 186.522980][ T3382] hid-generic 0000:0008:0001.0005: unknown main item tag 0x0 [ 186.530412][ T3382] hid-generic 0000:0008:0001.0005: unknown main item tag 0x0 [ 186.537867][ T3382] hid-generic 0000:0008:0001.0005: unknown main item tag 0x0 [ 186.545308][ T3382] hid-generic 0000:0008:0001.0005: unknown main item tag 0x0 [ 186.552700][ T3382] hid-generic 0000:0008:0001.0005: unknown main item tag 0x0 [ 186.560132][ T3382] hid-generic 0000:0008:0001.0005: unknown main item tag 0x0 [ 186.567562][ T3382] hid-generic 0000:0008:0001.0005: unknown main item tag 0x0 [ 186.574952][ T3382] hid-generic 0000:0008:0001.0005: unknown main item tag 0x0 [ 186.582404][ T3382] hid-generic 0000:0008:0001.0005: unknown main item tag 0x0 [ 186.598952][T10286] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 15 with max blocks 641 with error 28 [ 186.608726][T10297] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 186.611544][T10286] EXT4-fs (loop3): This should not happen!! Data will be lost [ 186.611544][T10286] [ 186.635949][T10286] EXT4-fs (loop3): Total free blocks count 0 [ 186.641954][T10286] EXT4-fs (loop3): Free/Dirty block details [ 186.647898][T10286] EXT4-fs (loop3): free_blocks=2415919104 [ 186.653824][T10286] EXT4-fs (loop3): dirty_blocks=8224 [ 186.659142][T10286] EXT4-fs (loop3): Block reservation details [ 186.663342][T10297] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 15 with max blocks 641 with error 28 [ 186.665242][T10286] EXT4-fs (loop3): i_reserved_data_blocks=514 [ 186.677748][T10297] EXT4-fs (loop2): This should not happen!! Data will be lost [ 186.677748][T10297] [ 186.693472][T10297] EXT4-fs (loop2): Total free blocks count 0 [ 186.699542][T10297] EXT4-fs (loop2): Free/Dirty block details [ 186.705471][T10297] EXT4-fs (loop2): free_blocks=2415919104 [ 186.711206][T10297] EXT4-fs (loop2): dirty_blocks=8224 [ 186.716533][T10297] EXT4-fs (loop2): Block reservation details [ 186.722529][T10297] EXT4-fs (loop2): i_reserved_data_blocks=514 [ 186.731140][ T3382] hid-generic 0000:0008:0001.0005: hidraw0: HID v0.80 Device [syz0] on syz0 [ 186.782415][T10305] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 186.798192][ T38] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 186.843933][T10297] syz.2.2431 (10297) used greatest stack depth: 9720 bytes left [ 186.874034][ T57] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 186.930411][ T29] kauditd_printk_skb: 109 callbacks suppressed [ 186.930427][ T29] audit: type=1326 audit(1744463999.686:23773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10307 comm="syz.3.2439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc3702d169 code=0x7ffc0000 [ 186.964251][T10308] loop3: detected capacity change from 0 to 128 [ 186.971558][T10308] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1) [ 186.986021][T10308] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 186.988792][ T29] audit: type=1326 audit(1744463999.716:23774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10307 comm="syz.3.2439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbc3702d169 code=0x7ffc0000 [ 186.993876][T10308] FAT-fs (loop3): Filesystem has been set read-only [ 187.017490][ T29] audit: type=1326 audit(1744463999.716:23775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10307 comm="syz.3.2439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc3702d169 code=0x7ffc0000 [ 187.047777][ T29] audit: type=1326 audit(1744463999.716:23776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10307 comm="syz.3.2439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbc3702d169 code=0x7ffc0000 [ 187.047808][ T29] audit: type=1326 audit(1744463999.716:23777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10307 comm="syz.3.2439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc3702d169 code=0x7ffc0000 [ 187.047834][ T29] audit: type=1326 audit(1744463999.716:23778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10307 comm="syz.3.2439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fbc3702d169 code=0x7ffc0000 [ 187.047865][ T29] audit: type=1326 audit(1744463999.716:23779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10307 comm="syz.3.2439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fbc3702d1a3 code=0x7ffc0000 [ 187.047970][ T29] audit: type=1326 audit(1744463999.716:23780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10307 comm="syz.3.2439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fbc3702bc1f code=0x7ffc0000 [ 187.048002][ T29] audit: type=1326 audit(1744463999.716:23781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10307 comm="syz.3.2439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fbc3702d1f7 code=0x7ffc0000 [ 187.048028][ T29] audit: type=1326 audit(1744463999.716:23782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10307 comm="syz.3.2439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbc3702bad0 code=0x7ffc0000 [ 187.059465][ T3311] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 187.740549][T10338] loop1: detected capacity change from 0 to 2048 [ 187.747596][T10338] EXT4-fs: Ignoring removed bh option [ 187.756815][T10338] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 187.995229][ T3381] hid-generic 0000:0008:0001.0006: unknown main item tag 0x0 [ 188.002693][ T3381] hid-generic 0000:0008:0001.0006: unknown main item tag 0x0 [ 188.010198][ T3381] hid-generic 0000:0008:0001.0006: unknown main item tag 0x0 [ 188.017623][ T3381] hid-generic 0000:0008:0001.0006: unknown main item tag 0x0 [ 188.025022][ T3381] hid-generic 0000:0008:0001.0006: unknown main item tag 0x0 [ 188.032631][ T3381] hid-generic 0000:0008:0001.0006: unknown main item tag 0x0 [ 188.040175][ T3381] hid-generic 0000:0008:0001.0006: unknown main item tag 0x0 [ 188.047735][ T3381] hid-generic 0000:0008:0001.0006: unknown main item tag 0x0 [ 188.055287][ T3381] hid-generic 0000:0008:0001.0006: unknown main item tag 0x0 [ 188.062742][ T3381] hid-generic 0000:0008:0001.0006: unknown main item tag 0x0 [ 188.070346][ T3381] hid-generic 0000:0008:0001.0006: unknown main item tag 0x0 [ 188.077908][ T3381] hid-generic 0000:0008:0001.0006: unknown main item tag 0x0 [ 188.085399][ T3381] hid-generic 0000:0008:0001.0006: unknown main item tag 0x0 [ 188.141214][ T3381] hid-generic 0000:0008:0001.0006: hidraw0: HID v0.80 Device [syz0] on syz0 [ 188.239605][ T350] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 188.258564][ T350] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 188.270786][ T350] EXT4-fs (loop1): This should not happen!! Data will be lost [ 188.270786][ T350] [ 188.280574][ T350] EXT4-fs (loop1): Total free blocks count 0 [ 188.286641][ T350] EXT4-fs (loop1): Free/Dirty block details [ 188.292535][ T350] EXT4-fs (loop1): free_blocks=2415919104 [ 188.298328][ T350] EXT4-fs (loop1): dirty_blocks=8224 [ 188.303637][ T350] EXT4-fs (loop1): Block reservation details [ 188.309650][ T350] EXT4-fs (loop1): i_reserved_data_blocks=514 [ 188.337309][ T12] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 2048 with error 28 [ 188.503176][T10384] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2464'. [ 188.562247][T10378] loop2: detected capacity change from 0 to 128 [ 188.586976][T10378] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1) [ 188.598680][T10392] loop1: detected capacity change from 0 to 256 [ 188.607261][T10392] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000001) [ 188.615237][T10392] FAT-fs (loop1): Filesystem has been set read-only [ 188.688485][T10394] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 188.696466][T10394] FAT-fs (loop2): Filesystem has been set read-only [ 188.800764][ T3303] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 189.197430][T10420] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 189.705770][T10445] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2488'. [ 190.370185][T10473] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.406674][T10473] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.467052][T10473] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.522659][T10473] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.624528][T10473] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.638948][T10473] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.650903][T10473] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.668426][T10473] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.031819][T10500] SELinux: Context system_u:object_r:net_conf_t:s0 is not valid (left unmapped). [ 191.063607][T10500] loop1: detected capacity change from 0 to 512 [ 191.099070][T10500] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 191.121364][T10500] ext4 filesystem being mounted at /467/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 191.143887][T10500] batadv1: entered promiscuous mode [ 191.304759][T10512] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2512'. [ 191.326540][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.476482][T10520] loop1: detected capacity change from 0 to 512 [ 191.483471][T10520] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 191.496587][T10520] EXT4-fs (loop1): 1 truncate cleaned up [ 191.502844][T10520] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 191.569287][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.586486][T10523] loop4: detected capacity change from 0 to 2048 [ 191.593233][T10523] EXT4-fs: Ignoring removed bh option [ 191.617752][T10523] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 191.759830][T10534] loop3: detected capacity change from 0 to 512 [ 191.788458][T10534] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 191.802817][T10534] ext4 filesystem being mounted at /512/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 191.820965][T10534] batadv1: entered promiscuous mode [ 191.854991][T10542] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2522'. [ 191.962544][T10530] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 191.977746][T10530] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 15 with max blocks 641 with error 28 [ 191.990344][T10530] EXT4-fs (loop4): This should not happen!! Data will be lost [ 191.990344][T10530] [ 192.000037][T10530] EXT4-fs (loop4): Total free blocks count 0 [ 192.006067][T10530] EXT4-fs (loop4): Free/Dirty block details [ 192.012035][T10530] EXT4-fs (loop4): free_blocks=2415919104 [ 192.017911][T10530] EXT4-fs (loop4): dirty_blocks=8224 [ 192.023219][T10530] EXT4-fs (loop4): Block reservation details [ 192.029281][T10530] EXT4-fs (loop4): i_reserved_data_blocks=514 [ 192.037689][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.072490][ T350] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 192.211043][ T29] kauditd_printk_skb: 730 callbacks suppressed [ 192.211058][ T29] audit: type=1326 audit(1744464004.966:24513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10553 comm="syz.3.2528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc3702d169 code=0x7ffc0000 [ 192.246724][ T29] audit: type=1326 audit(1744464004.996:24514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10553 comm="syz.3.2528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7fbc3702d169 code=0x7ffc0000 [ 192.270973][ T29] audit: type=1326 audit(1744464004.996:24515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10553 comm="syz.3.2528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc3702d169 code=0x7ffc0000 [ 192.294726][ T29] audit: type=1326 audit(1744464004.996:24516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10553 comm="syz.3.2528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc3702d169 code=0x7ffc0000 [ 192.318425][ T29] audit: type=1326 audit(1744464004.996:24517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10553 comm="syz.3.2528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbc3702d169 code=0x7ffc0000 [ 192.342420][ T29] audit: type=1326 audit(1744464004.996:24518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10553 comm="syz.3.2528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc3702d169 code=0x7ffc0000 [ 192.366065][ T29] audit: type=1326 audit(1744464004.996:24519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10553 comm="syz.3.2528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc3702d169 code=0x7ffc0000 [ 192.389786][ T29] audit: type=1326 audit(1744464004.996:24520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10553 comm="syz.3.2528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbc3702d169 code=0x7ffc0000 [ 192.413384][ T29] audit: type=1326 audit(1744464004.996:24521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10553 comm="syz.3.2528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc3702d169 code=0x7ffc0000 [ 192.437020][ T29] audit: type=1326 audit(1744464004.996:24522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10553 comm="syz.3.2528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbc3702d169 code=0x7ffc0000 [ 192.609488][T10573] netlink: 'syz.4.2534': attribute type 21 has an invalid length. [ 192.712904][T10578] FAULT_INJECTION: forcing a failure. [ 192.712904][T10578] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 192.726122][T10578] CPU: 1 UID: 0 PID: 10578 Comm: syz.0.2536 Not tainted 6.15.0-rc1-syzkaller-00301-g3bde70a2c827 #0 PREEMPT(voluntary) [ 192.726282][T10578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 192.726298][T10578] Call Trace: [ 192.726349][T10578] [ 192.726356][T10578] dump_stack_lvl+0xf6/0x150 [ 192.726379][T10578] dump_stack+0x15/0x1a [ 192.726395][T10578] should_fail_ex+0x261/0x270 [ 192.726424][T10578] should_fail+0xb/0x10 [ 192.726521][T10578] should_fail_usercopy+0x1a/0x20 [ 192.726550][T10578] _copy_from_user+0x1c/0xa0 [ 192.726645][T10578] copy_msghdr_from_user+0x54/0x2b0 [ 192.726724][T10578] ? __fget_files+0x186/0x1c0 [ 192.726752][T10578] __sys_sendmsg+0x141/0x240 [ 192.726797][T10578] __x64_sys_sendmsg+0x46/0x50 [ 192.726830][T10578] x64_sys_call+0x26f3/0x2e10 [ 192.726875][T10578] do_syscall_64+0xc9/0x1c0 [ 192.726912][T10578] ? clear_bhb_loop+0x25/0x80 [ 192.726946][T10578] ? clear_bhb_loop+0x25/0x80 [ 192.726972][T10578] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.727014][T10578] RIP: 0033:0x7f2c30ddd169 [ 192.727031][T10578] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 192.727054][T10578] RSP: 002b:00007f2c2f43f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 192.727077][T10578] RAX: ffffffffffffffda RBX: 00007f2c30ff5fa0 RCX: 00007f2c30ddd169 [ 192.727138][T10578] RDX: 0000000004000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 192.727153][T10578] RBP: 00007f2c2f43f090 R08: 0000000000000000 R09: 0000000000000000 [ 192.727166][T10578] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 192.727177][T10578] R13: 0000000000000000 R14: 00007f2c30ff5fa0 R15: 00007ffcf79d8b18 [ 192.727195][T10578] [ 192.967695][T10581] loop4: detected capacity change from 0 to 512 [ 192.975656][T10581] journal_path: Non-blockdev passed as './bus' [ 192.981849][T10581] EXT4-fs: error: could not find journal device path [ 193.068583][T10587] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.166935][T10587] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.167373][T10584] loop0: detected capacity change from 0 to 128 [ 193.238219][T10587] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.240459][T10584] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1) [ 193.296884][T10587] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.363416][T10592] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 193.371420][T10592] FAT-fs (loop0): Filesystem has been set read-only [ 193.394054][T10587] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.416860][T10587] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.429118][T10587] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.449694][T10587] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.507159][ T3309] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 193.538260][T10613] FAULT_INJECTION: forcing a failure. [ 193.538260][T10613] name failslab, interval 1, probability 0, space 0, times 0 [ 193.551093][T10613] CPU: 1 UID: 0 PID: 10613 Comm: syz.0.2548 Not tainted 6.15.0-rc1-syzkaller-00301-g3bde70a2c827 #0 PREEMPT(voluntary) [ 193.551181][T10613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 193.551207][T10613] Call Trace: [ 193.551218][T10613] [ 193.551273][T10613] dump_stack_lvl+0xf6/0x150 [ 193.551303][T10613] dump_stack+0x15/0x1a [ 193.551325][T10613] should_fail_ex+0x261/0x270 [ 193.551367][T10613] should_failslab+0x8f/0xb0 [ 193.551433][T10613] __kmalloc_noprof+0xad/0x410 [ 193.551468][T10613] ? copy_splice_read+0xb8/0x5d0 [ 193.551533][T10613] copy_splice_read+0xb8/0x5d0 [ 193.551566][T10613] ? __kmalloc_noprof+0x287/0x410 [ 193.551644][T10613] ? alloc_pipe_info+0x1cb/0x360 [ 193.551718][T10613] ? __pfx_copy_splice_read+0x10/0x10 [ 193.551749][T10613] splice_direct_to_actor+0x26c/0x680 [ 193.551785][T10613] ? __pfx_direct_splice_actor+0x10/0x10 [ 193.551899][T10613] do_splice_direct+0xd9/0x150 [ 193.551929][T10613] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 193.552018][T10613] do_sendfile+0x40a/0x690 [ 193.552086][T10613] __x64_sys_sendfile64+0x113/0x160 [ 193.552113][T10613] x64_sys_call+0xfc3/0x2e10 [ 193.552168][T10613] do_syscall_64+0xc9/0x1c0 [ 193.552198][T10613] ? clear_bhb_loop+0x25/0x80 [ 193.552218][T10613] ? clear_bhb_loop+0x25/0x80 [ 193.552243][T10613] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.552332][T10613] RIP: 0033:0x7f2c30ddd169 [ 193.552349][T10613] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 193.552371][T10613] RSP: 002b:00007f2c2f43f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 193.552393][T10613] RAX: ffffffffffffffda RBX: 00007f2c30ff5fa0 RCX: 00007f2c30ddd169 [ 193.552405][T10613] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000007 [ 193.552460][T10613] RBP: 00007f2c2f43f090 R08: 0000000000000000 R09: 0000000000000000 [ 193.552474][T10613] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000001 [ 193.552488][T10613] R13: 0000000000000000 R14: 00007f2c30ff5fa0 R15: 00007ffcf79d8b18 [ 193.552510][T10613] [ 193.857327][T10621] loop0: detected capacity change from 0 to 2048 [ 193.858839][T10616] loop4: detected capacity change from 0 to 2048 [ 193.864142][T10621] EXT4-fs: Ignoring removed bh option [ 193.924019][T10616] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 193.938994][T10621] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 193.945472][T10616] ext4 filesystem being mounted at /487/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 194.079761][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.091574][T10636] loop3: detected capacity change from 0 to 2048 [ 194.100497][T10636] EXT4-fs: Ignoring removed bh option [ 194.131804][T10636] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 194.228525][ T3381] hid-generic 0000:0008:0001.0007: unknown main item tag 0x0 [ 194.236124][ T3381] hid-generic 0000:0008:0001.0007: unknown main item tag 0x0 [ 194.243554][ T3381] hid-generic 0000:0008:0001.0007: unknown main item tag 0x0 [ 194.247756][T10646] loop4: detected capacity change from 0 to 2048 [ 194.251054][ T3381] hid-generic 0000:0008:0001.0007: unknown main item tag 0x0 [ 194.259605][T10646] EXT4-fs: Ignoring removed bh option [ 194.264735][ T3381] hid-generic 0000:0008:0001.0007: unknown main item tag 0x0 [ 194.277624][ T3381] hid-generic 0000:0008:0001.0007: unknown main item tag 0x0 [ 194.285035][ T3381] hid-generic 0000:0008:0001.0007: unknown main item tag 0x0 [ 194.292603][ T3381] hid-generic 0000:0008:0001.0007: unknown main item tag 0x0 [ 194.300059][ T3381] hid-generic 0000:0008:0001.0007: unknown main item tag 0x0 [ 194.307580][ T3381] hid-generic 0000:0008:0001.0007: unknown main item tag 0x0 [ 194.315006][ T3381] hid-generic 0000:0008:0001.0007: unknown main item tag 0x0 [ 194.322517][ T3381] hid-generic 0000:0008:0001.0007: unknown main item tag 0x0 [ 194.330083][ T3381] hid-generic 0000:0008:0001.0007: unknown main item tag 0x0 [ 194.347258][ T3381] hid-generic 0000:0008:0001.0007: hidraw0: HID v0.80 Device [syz0] on syz0 [ 194.354444][T10646] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 194.415684][T10646] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 194.434102][T10646] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 15 with max blocks 640 with error 28 [ 194.446743][T10646] EXT4-fs (loop4): This should not happen!! Data will be lost [ 194.446743][T10646] [ 194.456473][T10646] EXT4-fs (loop4): Total free blocks count 0 [ 194.462477][T10646] EXT4-fs (loop4): Free/Dirty block details [ 194.468497][T10646] EXT4-fs (loop4): free_blocks=2415919104 [ 194.474291][T10646] EXT4-fs (loop4): dirty_blocks=656 [ 194.479546][T10646] EXT4-fs (loop4): Block reservation details [ 194.485596][T10646] EXT4-fs (loop4): i_reserved_data_blocks=41 [ 194.531149][ T38] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 194.546966][ T350] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 194.564186][ T38] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 194.576474][ T38] EXT4-fs (loop0): This should not happen!! Data will be lost [ 194.576474][ T38] [ 194.586224][ T38] EXT4-fs (loop0): Total free blocks count 0 [ 194.592213][ T38] EXT4-fs (loop0): Free/Dirty block details [ 194.598155][ T38] EXT4-fs (loop0): free_blocks=2415919104 [ 194.603924][ T38] EXT4-fs (loop0): dirty_blocks=8224 [ 194.609325][ T38] EXT4-fs (loop0): Block reservation details [ 194.615335][ T38] EXT4-fs (loop0): i_reserved_data_blocks=514 [ 194.627728][ T12] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 2048 with error 28 [ 194.654098][ T3381] hid-generic 0000:0008:0001.0008: unknown main item tag 0x0 [ 194.661618][ T3381] hid-generic 0000:0008:0001.0008: unknown main item tag 0x0 [ 194.669199][ T3381] hid-generic 0000:0008:0001.0008: unknown main item tag 0x0 [ 194.676712][ T3381] hid-generic 0000:0008:0001.0008: unknown main item tag 0x0 [ 194.684106][ T3381] hid-generic 0000:0008:0001.0008: unknown main item tag 0x0 [ 194.691575][ T3381] hid-generic 0000:0008:0001.0008: unknown main item tag 0x0 [ 194.699041][ T3381] hid-generic 0000:0008:0001.0008: unknown main item tag 0x0 [ 194.706505][ T3381] hid-generic 0000:0008:0001.0008: unknown main item tag 0x0 [ 194.714103][ T3381] hid-generic 0000:0008:0001.0008: unknown main item tag 0x0 [ 194.721550][ T3381] hid-generic 0000:0008:0001.0008: unknown main item tag 0x0 [ 194.729010][ T3381] hid-generic 0000:0008:0001.0008: unknown main item tag 0x0 [ 194.736446][ T3381] hid-generic 0000:0008:0001.0008: unknown main item tag 0x0 [ 194.743857][ T3381] hid-generic 0000:0008:0001.0008: unknown main item tag 0x0 [ 194.764093][ T3381] hid-generic 0000:0008:0001.0008: hidraw0: HID v0.80 Device [syz0] on syz0 [ 194.833776][T10657] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.870304][T10659] netlink: 'syz.1.2562': attribute type 10 has an invalid length. [ 194.878221][T10659] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2562'. [ 194.887878][T10659] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 194.913227][ T57] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 194.928358][ T57] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 194.940603][ T57] EXT4-fs (loop3): This should not happen!! Data will be lost [ 194.940603][ T57] [ 194.950286][ T57] EXT4-fs (loop3): Total free blocks count 0 [ 194.956384][ T57] EXT4-fs (loop3): Free/Dirty block details [ 194.962309][ T57] EXT4-fs (loop3): free_blocks=2415919104 [ 194.968193][ T57] EXT4-fs (loop3): dirty_blocks=8224 [ 194.973487][ T57] EXT4-fs (loop3): Block reservation details [ 194.979542][ T57] EXT4-fs (loop3): i_reserved_data_blocks=514 [ 194.993540][ T3328] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 2048 with error 28 [ 194.998500][T10657] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.067024][T10657] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.117286][T10657] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.277446][T10683] loop0: detected capacity change from 0 to 2048 [ 195.286888][T10683] EXT4-fs: Ignoring removed bh option [ 195.319357][T10683] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 195.401957][T10686] loop3: detected capacity change from 0 to 512 [ 195.424862][T10686] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.2569: bg 0: block 288: padding at end of block bitmap is not set [ 195.440860][T10686] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 195.450501][T10686] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #13: comm syz.3.2569: attempt to clear invalid blocks 1024 len 1 [ 195.464147][T10686] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.2569: invalid indirect mapped block 1819239214 (level 0) [ 195.479802][T10686] EXT4-fs (loop3): 1 truncate cleaned up [ 195.486176][T10686] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 195.567838][ T3382] hid-generic 0000:0008:0001.0009: unknown main item tag 0x0 [ 195.575378][ T3382] hid-generic 0000:0008:0001.0009: unknown main item tag 0x0 [ 195.582787][ T3382] hid-generic 0000:0008:0001.0009: unknown main item tag 0x0 [ 195.590234][ T3382] hid-generic 0000:0008:0001.0009: unknown main item tag 0x0 [ 195.597677][ T3382] hid-generic 0000:0008:0001.0009: unknown main item tag 0x0 [ 195.605203][ T3382] hid-generic 0000:0008:0001.0009: unknown main item tag 0x0 [ 195.612669][ T3382] hid-generic 0000:0008:0001.0009: unknown main item tag 0x0 [ 195.620153][ T3382] hid-generic 0000:0008:0001.0009: unknown main item tag 0x0 [ 195.627589][ T3382] hid-generic 0000:0008:0001.0009: unknown main item tag 0x0 [ 195.635226][ T3382] hid-generic 0000:0008:0001.0009: unknown main item tag 0x0 [ 195.642704][ T3382] hid-generic 0000:0008:0001.0009: unknown main item tag 0x0 [ 195.650126][ T3382] hid-generic 0000:0008:0001.0009: unknown main item tag 0x0 [ 195.657622][ T3382] hid-generic 0000:0008:0001.0009: unknown main item tag 0x0 [ 195.707005][ T3382] hid-generic 0000:0008:0001.0009: hidraw0: HID v0.80 Device [syz0] on syz0 [ 196.119595][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.123004][ T350] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 196.143962][ T350] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 196.156244][ T350] EXT4-fs (loop0): This should not happen!! Data will be lost [ 196.156244][ T350] [ 196.165950][ T350] EXT4-fs (loop0): Total free blocks count 0 [ 196.171966][ T350] EXT4-fs (loop0): Free/Dirty block details [ 196.177938][ T350] EXT4-fs (loop0): free_blocks=2415919104 [ 196.183710][ T350] EXT4-fs (loop0): dirty_blocks=8224 [ 196.189071][ T350] EXT4-fs (loop0): Block reservation details [ 196.195127][ T350] EXT4-fs (loop0): i_reserved_data_blocks=514 [ 196.208378][ T12] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 2048 with error 28 [ 196.421809][T10709] loop0: detected capacity change from 0 to 128 [ 196.442427][T10709] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1) [ 196.477360][T10709] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 196.485390][T10709] FAT-fs (loop0): Filesystem has been set read-only [ 196.554657][ T3309] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 196.644240][T10722] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2581'. [ 196.781596][T10728] FAULT_INJECTION: forcing a failure. [ 196.781596][T10728] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 196.795226][T10728] CPU: 1 UID: 0 PID: 10728 Comm: syz.0.2584 Not tainted 6.15.0-rc1-syzkaller-00301-g3bde70a2c827 #0 PREEMPT(voluntary) [ 196.795268][T10728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 196.795281][T10728] Call Trace: [ 196.795288][T10728] [ 196.795296][T10728] dump_stack_lvl+0xf6/0x150 [ 196.795344][T10728] dump_stack+0x15/0x1a [ 196.795363][T10728] should_fail_ex+0x261/0x270 [ 196.795396][T10728] should_fail_alloc_page+0xfd/0x110 [ 196.795473][T10728] __alloc_frozen_pages_noprof+0x11d/0x360 [ 196.795510][T10728] alloc_pages_mpol+0xb6/0x260 [ 196.795535][T10728] alloc_pages_noprof+0xe8/0x130 [ 196.795558][T10728] anon_pipe_write+0x695/0xb10 [ 196.795655][T10728] vfs_write+0x79b/0x950 [ 196.795688][T10728] ? __pfx_anon_pipe_write+0x10/0x10 [ 196.795716][T10728] ksys_write+0xeb/0x1b0 [ 196.795745][T10728] __x64_sys_write+0x42/0x50 [ 196.795931][T10728] x64_sys_call+0x2a45/0x2e10 [ 196.795982][T10728] do_syscall_64+0xc9/0x1c0 [ 196.796014][T10728] ? clear_bhb_loop+0x25/0x80 [ 196.796101][T10728] ? clear_bhb_loop+0x25/0x80 [ 196.796122][T10728] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.796147][T10728] RIP: 0033:0x7f2c30ddd169 [ 196.796165][T10728] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 196.796187][T10728] RSP: 002b:00007f2c2f43f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 196.796206][T10728] RAX: ffffffffffffffda RBX: 00007f2c30ff5fa0 RCX: 00007f2c30ddd169 [ 196.796219][T10728] RDX: 00000000fffffdef RSI: 0000200000000000 RDI: 0000000000000000 [ 196.796253][T10728] RBP: 00007f2c2f43f090 R08: 0000000000000000 R09: 0000000000000000 [ 196.796267][T10728] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 196.796281][T10728] R13: 0000000000000000 R14: 00007f2c30ff5fa0 R15: 00007ffcf79d8b18 [ 196.796303][T10728] [ 197.272613][ T29] kauditd_printk_skb: 794 callbacks suppressed [ 197.272645][ T29] audit: type=1400 audit(1744464010.026:25317): avc: denied { create } for pid=10752 comm="syz.3.2592" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 197.298886][ T29] audit: type=1400 audit(1744464010.026:25318): avc: denied { bind } for pid=10752 comm="syz.3.2592" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 197.318608][ T29] audit: type=1400 audit(1744464010.026:25319): avc: denied { name_bind } for pid=10752 comm="syz.3.2592" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 197.339737][ T29] audit: type=1400 audit(1744464010.026:25320): avc: denied { node_bind } for pid=10752 comm="syz.3.2592" saddr=ff02::1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 197.362070][ T29] audit: type=1400 audit(1744464010.026:25321): avc: denied { setopt } for pid=10752 comm="syz.3.2592" laddr=ff02::1 lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 197.390947][ T29] audit: type=1400 audit(1744464010.146:25322): avc: denied { create } for pid=10754 comm="syz.3.2593" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 197.411284][ T29] audit: type=1400 audit(1744464010.146:25323): avc: denied { bind } for pid=10754 comm="syz.3.2593" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 197.432244][ T29] audit: type=1326 audit(1744464010.166:25324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10754 comm="syz.3.2593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc3702d169 code=0x7ffc0000 [ 197.455960][ T29] audit: type=1326 audit(1744464010.166:25325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10754 comm="syz.3.2593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc3702d169 code=0x7ffc0000 [ 197.479575][ T29] audit: type=1326 audit(1744464010.166:25326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10754 comm="syz.3.2593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fbc3702d169 code=0x7ffc0000 [ 197.643512][T10767] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.683940][T10657] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.693847][T10767] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.709208][T10657] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.720973][T10657] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.740045][T10657] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.756489][T10767] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.787941][T10775] loop1: detected capacity change from 0 to 512 [ 197.795008][T10775] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 197.807493][T10767] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.809765][T10775] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 197.830128][T10775] ext4 filesystem being mounted at /477/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 197.855765][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 197.871860][T10767] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.885737][T10767] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.897170][T10781] loop1: detected capacity change from 0 to 512 [ 197.897768][T10767] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.903906][T10781] ext3: Unknown parameter 'fsuuid' [ 197.917324][T10767] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.058436][T10793] loop0: detected capacity change from 0 to 128 [ 198.086284][T10793] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1) [ 198.167440][T10801] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 198.175450][T10801] FAT-fs (loop0): Filesystem has been set read-only [ 198.279655][ T3309] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 198.405732][T10807] loop0: detected capacity change from 0 to 2048 [ 198.412651][T10807] EXT4-fs: Ignoring removed bh option [ 198.451908][T10813] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2615'. [ 198.487405][T10815] loop0: detected capacity change from 0 to 512 [ 198.494184][T10815] ext3: Unknown parameter 'fsuuid' [ 198.512697][T10817] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.548386][T10817] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.587087][T10817] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.627185][T10828] loop4: detected capacity change from 0 to 2048 [ 198.633934][T10828] EXT4-fs: Ignoring removed bh option [ 198.647160][T10817] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.703726][T10828] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 198.723892][T10828] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 15 with max blocks 640 with error 28 [ 198.736431][T10828] EXT4-fs (loop4): This should not happen!! Data will be lost [ 198.736431][T10828] [ 198.746188][T10828] EXT4-fs (loop4): Total free blocks count 0 [ 198.752245][T10828] EXT4-fs (loop4): Free/Dirty block details [ 198.758230][T10828] EXT4-fs (loop4): free_blocks=2415919104 [ 198.758655][T10817] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.763954][T10828] EXT4-fs (loop4): dirty_blocks=656 [ 198.763972][T10828] EXT4-fs (loop4): Block reservation details [ 198.763985][T10828] EXT4-fs (loop4): i_reserved_data_blocks=41 [ 198.778612][T10817] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.801357][T10817] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.812999][T10817] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.849074][ T12] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 198.861383][ T12] EXT4-fs (loop4): This should not happen!! Data will be lost [ 198.861383][ T12] [ 198.906706][T10841] loop4: detected capacity change from 0 to 2048 [ 198.914701][T10841] EXT4-fs: Ignoring removed bh option [ 199.019963][T10859] loop3: detected capacity change from 0 to 256 [ 199.029257][T10859] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000001) [ 199.037276][T10859] FAT-fs (loop3): Filesystem has been set read-only [ 199.521553][T10895] loop4: detected capacity change from 0 to 512 [ 199.533433][T10895] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 199.557867][T10895] ext4 filesystem being mounted at /511/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 199.996165][T10914] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.057049][T10914] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.096937][T10914] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.166848][T10914] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.267508][T10943] loop4: detected capacity change from 0 to 256 [ 200.275953][T10943] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000001) [ 200.283846][T10943] FAT-fs (loop4): Filesystem has been set read-only [ 201.158031][T10958] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2669'. [ 201.169784][T10956] loop3: detected capacity change from 0 to 512 [ 201.181705][T10956] journal_path: Non-blockdev passed as './bus' [ 201.187994][T10956] EXT4-fs: error: could not find journal device path [ 201.281712][T10914] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.294970][T10914] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.313457][T10914] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.333307][T10914] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.382130][T10973] loop4: detected capacity change from 0 to 128 [ 201.400086][T10973] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1) [ 201.458193][T10985] loop3: detected capacity change from 0 to 256 [ 201.466299][T10985] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000001) [ 201.474201][T10985] FAT-fs (loop3): Filesystem has been set read-only [ 201.482185][T10986] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 201.490119][T10986] FAT-fs (loop4): Filesystem has been set read-only [ 201.593361][ T3301] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 201.610310][T10991] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2680'. [ 202.121840][T11006] loop0: detected capacity change from 0 to 128 [ 202.136116][T11006] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1) [ 202.219400][T11006] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 202.227321][T11006] FAT-fs (loop0): Filesystem has been set read-only [ 202.279092][ T29] kauditd_printk_skb: 1433 callbacks suppressed [ 202.279107][ T29] audit: type=1326 audit(1744464015.036:26760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11009 comm="syz.1.2687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46df6ad169 code=0x7ffc0000 [ 202.311534][ T29] audit: type=1326 audit(1744464015.066:26761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11009 comm="syz.1.2687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f46df6ad169 code=0x7ffc0000 [ 202.335270][ T29] audit: type=1326 audit(1744464015.066:26762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11009 comm="syz.1.2687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46df6ad169 code=0x7ffc0000 [ 202.359013][ T29] audit: type=1326 audit(1744464015.066:26763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11009 comm="syz.1.2687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46df6ad169 code=0x7ffc0000 [ 202.382681][ T29] audit: type=1326 audit(1744464015.066:26764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11009 comm="syz.1.2687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f46df6ad169 code=0x7ffc0000 [ 202.406379][ T29] audit: type=1326 audit(1744464015.066:26765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11009 comm="syz.1.2687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46df6ad169 code=0x7ffc0000 [ 202.430091][ T29] audit: type=1326 audit(1744464015.066:26766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11009 comm="syz.1.2687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46df6ad169 code=0x7ffc0000 [ 202.453743][ T29] audit: type=1326 audit(1744464015.066:26767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11009 comm="syz.1.2687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f46df6ad169 code=0x7ffc0000 [ 202.477486][ T29] audit: type=1326 audit(1744464015.066:26768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11009 comm="syz.1.2687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46df6ad169 code=0x7ffc0000 [ 202.501147][ T29] audit: type=1326 audit(1744464015.066:26769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11009 comm="syz.1.2687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f46df6ad169 code=0x7ffc0000 [ 202.527715][ T3309] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 202.701042][T11026] SELinux: policydb table sizes (0,0) do not match mine (6,7) [ 202.709220][T11026] SELinux: failed to load policy [ 202.876713][T10999] syz.2.2684 (10999) used greatest stack depth: 6224 bytes left [ 202.887352][T11037] loop3: detected capacity change from 0 to 128 [ 202.922067][T11037] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1) [ 203.071353][T11061] loop2: detected capacity change from 0 to 2048 [ 203.089617][T11061] EXT4-fs: Ignoring removed bh option [ 203.131821][T11075] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 203.139735][T11075] FAT-fs (loop3): Filesystem has been set read-only [ 203.162005][T11061] EXT4-fs mount: 8 callbacks suppressed [ 203.162019][T11061] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 203.208737][T11079] loop1: detected capacity change from 0 to 2048 [ 203.216071][T11079] EXT4-fs: Ignoring removed bh option [ 203.236622][T11079] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 203.287261][T11052] chnl_net:caif_netlink_parms(): no params data found [ 203.331393][T11086] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.396167][T11086] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.427861][ T1038] hid-generic 0000:0008:0001.000A: unknown main item tag 0x0 [ 203.435452][ T1038] hid-generic 0000:0008:0001.000A: unknown main item tag 0x0 [ 203.442954][ T1038] hid-generic 0000:0008:0001.000A: unknown main item tag 0x0 [ 203.450383][ T1038] hid-generic 0000:0008:0001.000A: unknown main item tag 0x0 [ 203.457881][ T1038] hid-generic 0000:0008:0001.000A: unknown main item tag 0x0 [ 203.465350][ T1038] hid-generic 0000:0008:0001.000A: unknown main item tag 0x0 [ 203.472788][ T1038] hid-generic 0000:0008:0001.000A: unknown main item tag 0x0 [ 203.480229][ T1038] hid-generic 0000:0008:0001.000A: unknown main item tag 0x0 [ 203.487640][ T1038] hid-generic 0000:0008:0001.000A: unknown main item tag 0x0 [ 203.495049][ T1038] hid-generic 0000:0008:0001.000A: unknown main item tag 0x0 [ 203.502511][ T1038] hid-generic 0000:0008:0001.000A: unknown main item tag 0x0 [ 203.509930][ T1038] hid-generic 0000:0008:0001.000A: unknown main item tag 0x0 [ 203.517358][ T1038] hid-generic 0000:0008:0001.000A: unknown main item tag 0x0 [ 203.527308][ T3311] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 203.535402][ T1038] hid-generic 0000:0008:0001.000A: hidraw0: HID v0.80 Device [syz0] on syz0 [ 203.550974][T11086] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.562041][T11052] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.569293][T11052] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.577691][ T1038] hid-generic 0000:0008:0001.000B: unknown main item tag 0x0 [ 203.585355][ T1038] hid-generic 0000:0008:0001.000B: unknown main item tag 0x0 [ 203.592910][ T1038] hid-generic 0000:0008:0001.000B: unknown main item tag 0x0 [ 203.600427][ T1038] hid-generic 0000:0008:0001.000B: unknown main item tag 0x0 [ 203.607915][ T1038] hid-generic 0000:0008:0001.000B: unknown main item tag 0x0 [ 203.615356][ T1038] hid-generic 0000:0008:0001.000B: unknown main item tag 0x0 [ 203.622874][ T1038] hid-generic 0000:0008:0001.000B: unknown main item tag 0x0 [ 203.630355][ T1038] hid-generic 0000:0008:0001.000B: unknown main item tag 0x0 [ 203.637794][ T1038] hid-generic 0000:0008:0001.000B: unknown main item tag 0x0 [ 203.645220][ T1038] hid-generic 0000:0008:0001.000B: unknown main item tag 0x0 [ 203.652615][ T1038] hid-generic 0000:0008:0001.000B: unknown main item tag 0x0 [ 203.660124][ T1038] hid-generic 0000:0008:0001.000B: unknown main item tag 0x0 [ 203.667635][ T1038] hid-generic 0000:0008:0001.000B: unknown main item tag 0x0 [ 203.809556][ T3328] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 203.833139][ T3328] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 203.845408][ T3328] EXT4-fs (loop2): This should not happen!! Data will be lost [ 203.845408][ T3328] [ 203.853724][T11052] bridge_slave_0: entered allmulticast mode [ 203.855042][ T3328] EXT4-fs (loop2): Total free blocks count 0 [ 203.861811][T11052] bridge_slave_0: entered promiscuous mode [ 203.867024][ T3328] EXT4-fs (loop2): Free/Dirty block details [ 203.867041][ T3328] EXT4-fs (loop2): free_blocks=2415919104 [ 203.884545][ T3328] EXT4-fs (loop2): dirty_blocks=8224 [ 203.889893][ T3328] EXT4-fs (loop2): Block reservation details [ 203.895981][ T3328] EXT4-fs (loop2): i_reserved_data_blocks=514 [ 203.937335][ T12] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.947590][ T1038] hid-generic 0000:0008:0001.000B: hidraw0: HID v0.80 Device [syz0] on syz0 [ 203.958827][T11086] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.963125][ T3328] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 2048 with error 28 [ 203.982599][T11052] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.989988][T11052] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.006096][T11052] bridge_slave_1: entered allmulticast mode [ 204.013180][T11052] bridge_slave_1: entered promiscuous mode [ 204.022568][ T12] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.201701][T11086] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.249593][ T12] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.284363][T11052] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 204.303735][T11086] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.336262][ T12] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.350742][T11052] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 204.370586][T11086] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.392671][T11086] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.423116][ T12] bridge_slave_1: left allmulticast mode [ 204.428891][ T12] bridge_slave_1: left promiscuous mode [ 204.434594][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.446373][ T12] bridge_slave_0: left allmulticast mode [ 204.452144][ T12] bridge_slave_0: left promiscuous mode [ 204.457837][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.468305][ T51] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 204.484677][ T51] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 204.497104][ T51] EXT4-fs (loop1): This should not happen!! Data will be lost [ 204.497104][ T51] [ 204.506854][ T51] EXT4-fs (loop1): Total free blocks count 0 [ 204.512937][ T51] EXT4-fs (loop1): Free/Dirty block details [ 204.518882][ T51] EXT4-fs (loop1): free_blocks=2415919104 [ 204.524612][ T51] EXT4-fs (loop1): dirty_blocks=8224 [ 204.529989][ T51] EXT4-fs (loop1): Block reservation details [ 204.536047][ T51] EXT4-fs (loop1): i_reserved_data_blocks=514 [ 204.556181][ T57] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 2048 with error 28 [ 204.668276][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 204.678440][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 204.688646][ T12] bond0 (unregistering): Released all slaves [ 204.723264][T11052] team0: Port device team_slave_0 added [ 204.741741][T11052] team0: Port device team_slave_1 added [ 204.773831][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 204.781489][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 204.789570][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 204.797189][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 204.807192][ T12] veth1_macvtap: left promiscuous mode [ 204.812716][ T12] veth0_macvtap: left promiscuous mode [ 204.819841][ T12] veth1_vlan: left promiscuous mode [ 204.825777][ T12] veth0_vlan: left promiscuous mode [ 204.900958][T11130] loop4: detected capacity change from 0 to 128 [ 204.919095][T11130] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1) [ 204.952666][T11052] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 204.959826][T11052] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 204.985967][T11052] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 204.993881][T11133] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 204.999387][T11052] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 205.004375][T11133] FAT-fs (loop4): Filesystem has been set read-only [ 205.011425][T11052] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 205.043960][T11052] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 205.071690][ T3301] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 205.086609][T11052] hsr_slave_0: entered promiscuous mode [ 205.092901][T11052] hsr_slave_1: entered promiscuous mode [ 205.219125][T11139] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.269039][T11139] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.319470][T11139] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.382272][T11052] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 205.391764][T11052] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 205.401023][T11052] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 205.411475][T11139] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.422525][T11052] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 205.464010][T11052] 8021q: adding VLAN 0 to HW filter on device bond0 [ 205.477115][T11052] 8021q: adding VLAN 0 to HW filter on device team0 [ 205.486940][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.494011][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 205.505259][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.512412][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 205.568860][T11146] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2725'. [ 205.584695][T11052] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 205.660823][T11150] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 205.697275][T11052] veth0_vlan: entered promiscuous mode [ 205.706019][T11052] veth1_vlan: entered promiscuous mode [ 205.727911][T11052] veth0_macvtap: entered promiscuous mode [ 205.761067][T11052] veth1_macvtap: entered promiscuous mode [ 205.775532][T11169] loop2: detected capacity change from 0 to 2048 [ 205.787367][T11166] loop3: detected capacity change from 0 to 128 [ 205.787509][T11052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 205.802389][T11166] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1) [ 205.804203][T11052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.823175][T11052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 205.825518][T11169] EXT4-fs: Ignoring removed bh option [ 205.833673][T11052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.849030][T11052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 205.859552][T11052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.869420][T11052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 205.879869][T11052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.891110][T11169] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 205.891623][T11052] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 205.916967][T11052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 205.927529][T11052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.937392][T11052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 205.947898][T11052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.957724][T11052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 205.968211][T11052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.972485][T11175] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 205.978036][T11052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 205.978058][T11052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.979278][T11052] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 205.985976][T11175] FAT-fs (loop3): Filesystem has been set read-only [ 206.022500][T11052] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.031280][T11052] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.040142][T11052] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.048874][T11052] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.057915][ T3311] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 206.116499][T11180] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2701'. [ 206.131039][T11169] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 206.147397][T11169] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 15 with max blocks 640 with error 28 [ 206.159932][T11169] EXT4-fs (loop2): This should not happen!! Data will be lost [ 206.159932][T11169] [ 206.169665][T11169] EXT4-fs (loop2): Total free blocks count 0 [ 206.175695][T11169] EXT4-fs (loop2): Free/Dirty block details [ 206.181594][T11169] EXT4-fs (loop2): free_blocks=2415919104 [ 206.187348][T11169] EXT4-fs (loop2): dirty_blocks=656 [ 206.192556][T11169] EXT4-fs (loop2): Block reservation details [ 206.198590][T11169] EXT4-fs (loop2): i_reserved_data_blocks=41 [ 206.238416][ T3328] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 206.263910][T11184] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2735'. [ 206.367821][T11188] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 206.700601][T11200] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2743'. [ 207.322131][ T29] kauditd_printk_skb: 912 callbacks suppressed [ 207.322150][ T29] audit: type=1326 audit(1744464020.076:27682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11218 comm="syz.3.2751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc3702d169 code=0x7ffc0000 [ 207.359659][ T29] audit: type=1326 audit(1744464020.076:27683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11218 comm="syz.3.2751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc3702d169 code=0x7ffc0000 [ 207.361259][T11219] loop3: detected capacity change from 0 to 512 [ 207.383331][ T29] audit: type=1326 audit(1744464020.076:27684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11218 comm="syz.3.2751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fbc3702d169 code=0x7ffc0000 [ 207.383365][ T29] audit: type=1326 audit(1744464020.076:27685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11218 comm="syz.3.2751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc3702d169 code=0x7ffc0000 [ 207.390583][T11219] journal_path: Non-blockdev passed as './bus' [ 207.413065][ T29] audit: type=1326 audit(1744464020.076:27686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11218 comm="syz.3.2751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc3702d169 code=0x7ffc0000 [ 207.413104][ T29] audit: type=1326 audit(1744464020.076:27687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11218 comm="syz.3.2751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fbc3702d169 code=0x7ffc0000 [ 207.436760][T11219] EXT4-fs: error: could not find journal device path [ 207.450553][T11221] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.466800][ T29] audit: type=1326 audit(1744464020.076:27688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11218 comm="syz.3.2751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc3702d169 code=0x7ffc0000 [ 207.492756][T11222] netlink: 'syz.2.2752': attribute type 10 has an invalid length. [ 207.497210][ T29] audit: type=1326 audit(1744464020.076:27689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11218 comm="syz.3.2751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fbc3702d169 code=0x7ffc0000 [ 207.507020][T11222] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2752'. [ 207.530510][ T29] audit: type=1326 audit(1744464020.086:27690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11218 comm="syz.3.2751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc3702d169 code=0x7ffc0000 [ 207.594635][ T29] audit: type=1326 audit(1744464020.086:27691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11218 comm="syz.3.2751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fbc3702d169 code=0x7ffc0000 [ 207.628558][T11222] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 207.672005][T11228] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2754'. [ 207.688593][T11221] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.737769][T11221] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.786498][T11221] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.814454][T11235] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2757'. [ 207.842266][T11221] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.854591][T11221] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.866834][T11221] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.879363][T11221] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.954794][T11239] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 208.207685][T11250] loop2: detected capacity change from 0 to 512 [ 208.214300][T11250] ext3: Unknown parameter 'fsuuid' [ 208.242780][T11252] loop2: detected capacity change from 0 to 512 [ 208.249637][T11252] journal_path: Non-blockdev passed as './bus' [ 208.255874][T11252] EXT4-fs: error: could not find journal device path [ 208.287175][T11254] loop2: detected capacity change from 0 to 512 [ 208.294049][T11254] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 208.305865][T11254] EXT4-fs (loop2): 1 truncate cleaned up [ 208.311928][T11254] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 208.360744][T11139] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.372420][T11139] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.383756][T11139] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.393461][T11257] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2765'. [ 208.396227][T11139] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.431888][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.525296][T11265] loop1: detected capacity change from 0 to 2048 [ 208.531952][T11265] EXT4-fs: Ignoring removed bh option [ 208.567538][T11271] loop4: detected capacity change from 0 to 512 [ 208.568230][T11265] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 208.574747][T11271] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 208.597794][T11271] EXT4-fs (loop4): 1 truncate cleaned up [ 208.604037][T11271] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 208.617593][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.637520][T11271] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2770'. [ 208.661396][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.684852][T11280] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.718007][T11284] loop4: detected capacity change from 0 to 512 [ 208.724698][T11284] ext3: Unknown parameter 'fsuuid' [ 208.736049][T11286] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2776'. [ 208.778783][T11292] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2778'. [ 208.947686][T11301] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.996890][T11301] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.056808][T11301] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.126764][T11301] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.202344][T11301] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.213965][T11301] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.225154][T11301] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.237656][T11301] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.304201][T11312] FAULT_INJECTION: forcing a failure. [ 209.304201][T11312] name failslab, interval 1, probability 0, space 0, times 0 [ 209.316968][T11312] CPU: 1 UID: 0 PID: 11312 Comm: syz.2.2786 Not tainted 6.15.0-rc1-syzkaller-00301-g3bde70a2c827 #0 PREEMPT(voluntary) [ 209.317079][T11312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 209.317095][T11312] Call Trace: [ 209.317102][T11312] [ 209.317110][T11312] dump_stack_lvl+0xf6/0x150 [ 209.317153][T11312] dump_stack+0x15/0x1a [ 209.317173][T11312] should_fail_ex+0x261/0x270 [ 209.317206][T11312] should_failslab+0x8f/0xb0 [ 209.317305][T11312] kmem_cache_alloc_noprof+0x59/0x340 [ 209.317332][T11312] ? fcntl_dirnotify+0x1bd/0x590 [ 209.317366][T11312] fcntl_dirnotify+0x1bd/0x590 [ 209.317407][T11312] do_fcntl+0x642/0xe20 [ 209.317482][T11312] __se_sys_fcntl+0xbd/0x1b0 [ 209.317545][T11312] __x64_sys_fcntl+0x43/0x50 [ 209.317570][T11312] x64_sys_call+0x1ecc/0x2e10 [ 209.317597][T11312] do_syscall_64+0xc9/0x1c0 [ 209.317633][T11312] ? clear_bhb_loop+0x25/0x80 [ 209.317710][T11312] ? clear_bhb_loop+0x25/0x80 [ 209.317730][T11312] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.317755][T11312] RIP: 0033:0x7f75368bd169 [ 209.317773][T11312] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 209.317799][T11312] RSP: 002b:00007f7534f1f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 209.317821][T11312] RAX: ffffffffffffffda RBX: 00007f7536ad5fa0 RCX: 00007f75368bd169 [ 209.317835][T11312] RDX: 0000000000000036 RSI: 0000000000000402 RDI: 0000000000000006 [ 209.317849][T11312] RBP: 00007f7534f1f090 R08: 0000000000000000 R09: 0000000000000000 [ 209.317863][T11312] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 209.317874][T11312] R13: 0000000000000000 R14: 00007f7536ad5fa0 R15: 00007ffca8e53cd8 [ 209.317947][T11312] [ 209.631406][T11318] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2788'. [ 209.743755][T11322] loop1: detected capacity change from 0 to 128 [ 209.761789][T11322] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1) [ 209.790517][T11322] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 209.798432][T11322] FAT-fs (loop1): Filesystem has been set read-only [ 209.912659][ T3302] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 209.936925][T11333] loop1: detected capacity change from 0 to 2048 [ 209.943891][T11333] EXT4-fs: Ignoring removed bh option [ 209.958842][T11333] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 209.960194][T11280] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.000063][T11339] loop4: detected capacity change from 0 to 512 [ 210.008469][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.021890][T11339] journal_path: Non-blockdev passed as './bus' [ 210.028177][T11339] EXT4-fs: error: could not find journal device path [ 210.037779][T11280] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.099773][T11280] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.165559][T11280] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.178026][T11280] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.196470][T11280] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.208773][T11280] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.266744][T11349] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 210.519174][T11360] loop0: detected capacity change from 0 to 128 [ 210.536171][T11360] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1) [ 210.558280][T11360] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 210.566195][T11360] FAT-fs (loop0): Filesystem has been set read-only [ 210.683711][T11052] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 210.706726][T11369] loop0: detected capacity change from 0 to 2048 [ 210.713437][T11369] EXT4-fs: Ignoring removed bh option [ 210.726829][T11369] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 210.756740][T11052] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.888407][T11375] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 210.920840][T11378] syz_tun: entered promiscuous mode [ 210.928225][T11378] syz_tun: left promiscuous mode [ 210.965380][T11379] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 211.236512][T11397] loop2: detected capacity change from 0 to 2048 [ 211.243357][T11397] EXT4-fs: Ignoring removed bh option [ 211.267233][T11397] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 211.293229][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.467168][T11409] __nla_validate_parse: 3 callbacks suppressed [ 211.467184][T11409] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2822'. [ 211.524619][T11411] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.567214][T11411] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.616750][T11411] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.657252][T11411] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.712670][T11411] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.724061][T11411] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.735946][T11411] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.748459][T11411] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.838586][T11418] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2826'. [ 212.325355][ T29] kauditd_printk_skb: 808 callbacks suppressed [ 212.325371][ T29] audit: type=1326 audit(1744464025.086:28500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11432 comm="syz.3.2831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc3702d169 code=0x7ffc0000 [ 212.355329][ T29] audit: type=1326 audit(1744464025.086:28501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11432 comm="syz.3.2831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc3702d169 code=0x7ffc0000 [ 212.379103][ T29] audit: type=1326 audit(1744464025.086:28502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11432 comm="syz.3.2831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fbc3702d169 code=0x7ffc0000 [ 212.402972][ T29] audit: type=1326 audit(1744464025.086:28503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11432 comm="syz.3.2831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc3702d169 code=0x7ffc0000 [ 212.426585][ T29] audit: type=1326 audit(1744464025.086:28504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11432 comm="syz.3.2831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc3702d169 code=0x7ffc0000 [ 212.450255][ T29] audit: type=1326 audit(1744464025.086:28505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11432 comm="syz.3.2831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbc3702d169 code=0x7ffc0000 [ 212.473889][ T29] audit: type=1326 audit(1744464025.086:28506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11432 comm="syz.3.2831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc3702d169 code=0x7ffc0000 [ 212.497512][ T29] audit: type=1326 audit(1744464025.086:28507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11432 comm="syz.3.2831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbc3702d169 code=0x7ffc0000 [ 212.521149][ T29] audit: type=1326 audit(1744464025.086:28508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11432 comm="syz.3.2831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc3702d169 code=0x7ffc0000 [ 212.544775][ T29] audit: type=1326 audit(1744464025.086:28509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11432 comm="syz.3.2831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc3702d169 code=0x7ffc0000 [ 212.722015][T11444] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.742141][T11441] loop0: detected capacity change from 0 to 128 [ 212.766680][T11441] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1) [ 212.777420][T11444] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.826879][T11444] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.843660][T11453] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 212.851568][T11453] FAT-fs (loop0): Filesystem has been set read-only [ 212.910815][T11444] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.937876][T11052] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 212.954357][T11459] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2839'. [ 213.005424][T11444] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.019886][T11444] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.032751][T11444] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.046958][T11444] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.180603][T11467] loop1: detected capacity change from 0 to 128 [ 213.195311][T11467] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1) [ 213.221384][T11467] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 213.229309][T11467] FAT-fs (loop1): Filesystem has been set read-only [ 213.348117][ T3302] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 213.364303][T11472] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2842'. [ 213.772860][T11480] loop4: detected capacity change from 0 to 128 [ 213.790325][T11482] loop3: detected capacity change from 0 to 512 [ 213.797609][T11482] journal_path: Non-blockdev passed as './bus' [ 213.803835][T11482] EXT4-fs: error: could not find journal device path [ 213.845606][T11484] loop0: detected capacity change from 0 to 512 [ 213.854274][T11484] journal_path: Non-blockdev passed as './bus' [ 213.860816][T11484] EXT4-fs: error: could not find journal device path [ 213.956104][T11489] loop0: detected capacity change from 0 to 512 [ 214.001265][T11489] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 214.014302][T11489] ext4 filesystem being mounted at /18/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 214.036004][T11489] FAULT_INJECTION: forcing a failure. [ 214.036004][T11489] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 214.049182][T11489] CPU: 0 UID: 0 PID: 11489 Comm: syz.0.2849 Not tainted 6.15.0-rc1-syzkaller-00301-g3bde70a2c827 #0 PREEMPT(voluntary) [ 214.049227][T11489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 214.049239][T11489] Call Trace: [ 214.049246][T11489] [ 214.049254][T11489] dump_stack_lvl+0xf6/0x150 [ 214.049343][T11489] dump_stack+0x15/0x1a [ 214.049360][T11489] should_fail_ex+0x261/0x270 [ 214.049390][T11489] should_fail+0xb/0x10 [ 214.049413][T11489] should_fail_usercopy+0x1a/0x20 [ 214.049442][T11489] _copy_from_user+0x1c/0xa0 [ 214.049581][T11489] __sys_bpf+0x16a/0x800 [ 214.049613][T11489] __x64_sys_bpf+0x43/0x50 [ 214.049634][T11489] x64_sys_call+0x23da/0x2e10 [ 214.049660][T11489] do_syscall_64+0xc9/0x1c0 [ 214.049696][T11489] ? clear_bhb_loop+0x25/0x80 [ 214.049747][T11489] ? clear_bhb_loop+0x25/0x80 [ 214.049768][T11489] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.049788][T11489] RIP: 0033:0x7fc7168cd169 [ 214.049823][T11489] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 214.049845][T11489] RSP: 002b:00007fc714f2f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 214.049864][T11489] RAX: ffffffffffffffda RBX: 00007fc716ae5fa0 RCX: 00007fc7168cd169 [ 214.049948][T11489] RDX: 0000000000000050 RSI: 0000200000000300 RDI: 0000000000000000 [ 214.049963][T11489] RBP: 00007fc714f2f090 R08: 0000000000000000 R09: 0000000000000000 [ 214.050047][T11489] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 214.050060][T11489] R13: 0000000000000000 R14: 00007fc716ae5fa0 R15: 00007ffcf04523c8 [ 214.050089][T11489] [ 214.393408][T11501] loop4: detected capacity change from 0 to 512 [ 214.401626][T11501] journal_path: Non-blockdev passed as './bus' [ 214.407906][T11501] EXT4-fs: error: could not find journal device path [ 214.477154][T11505] loop1: detected capacity change from 0 to 128 [ 214.494566][T11505] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1) [ 214.531742][T11505] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 214.539694][T11505] FAT-fs (loop1): Filesystem has been set read-only [ 214.606228][T11511] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.677228][T11511] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.727745][T11511] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.789948][T11511] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.808214][T11518] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2857'. [ 214.849103][T11052] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.873854][ T3302] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 215.013700][T11529] loop1: detected capacity change from 0 to 2048 [ 215.029902][T11529] EXT4-fs: Ignoring removed bh option [ 215.048070][T11529] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 215.100754][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.126092][T11534] loop0: detected capacity change from 0 to 512 [ 215.157779][T11534] ext3: Unknown parameter 'fsuuid' [ 215.171827][T11536] loop1: detected capacity change from 0 to 128 [ 215.275676][T11547] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 215.284276][T11547] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 215.323388][T11554] FAULT_INJECTION: forcing a failure. [ 215.323388][T11554] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 215.336588][T11554] CPU: 1 UID: 0 PID: 11554 Comm: syz.0.2871 Not tainted 6.15.0-rc1-syzkaller-00301-g3bde70a2c827 #0 PREEMPT(voluntary) [ 215.336617][T11554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 215.336628][T11554] Call Trace: [ 215.336635][T11554] [ 215.336643][T11554] dump_stack_lvl+0xf6/0x150 [ 215.336670][T11554] dump_stack+0x15/0x1a [ 215.336689][T11554] should_fail_ex+0x261/0x270 [ 215.336728][T11554] should_fail+0xb/0x10 [ 215.336814][T11554] should_fail_usercopy+0x1a/0x20 [ 215.336887][T11554] _copy_to_user+0x20/0xa0 [ 215.336915][T11554] simple_read_from_buffer+0xb2/0x130 [ 215.336942][T11554] proc_fail_nth_read+0x103/0x140 [ 215.336967][T11554] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 215.337029][T11554] vfs_read+0x1b2/0x710 [ 215.337051][T11554] ? bpf_trace_run2+0x12c/0x1d0 [ 215.337077][T11554] ? __rcu_read_unlock+0x4e/0x70 [ 215.337101][T11554] ? __fget_files+0x186/0x1c0 [ 215.337155][T11554] ksys_read+0xeb/0x1b0 [ 215.337180][T11554] __x64_sys_read+0x42/0x50 [ 215.337203][T11554] x64_sys_call+0x2a3b/0x2e10 [ 215.337222][T11554] do_syscall_64+0xc9/0x1c0 [ 215.337320][T11554] ? clear_bhb_loop+0x25/0x80 [ 215.337338][T11554] ? clear_bhb_loop+0x25/0x80 [ 215.337356][T11554] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.337373][T11554] RIP: 0033:0x7fc7168cbb7c [ 215.337386][T11554] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 215.337401][T11554] RSP: 002b:00007fc714f2f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 215.337496][T11554] RAX: ffffffffffffffda RBX: 00007fc716ae5fa0 RCX: 00007fc7168cbb7c [ 215.337505][T11554] RDX: 000000000000000f RSI: 00007fc714f2f0a0 RDI: 0000000000000006 [ 215.337515][T11554] RBP: 00007fc714f2f090 R08: 0000000000000000 R09: 0000000000000000 [ 215.337525][T11554] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 215.337606][T11554] R13: 0000000000000000 R14: 00007fc716ae5fa0 R15: 00007ffcf04523c8 [ 215.337629][T11554] [ 215.549745][T11511] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.561423][T11511] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.566791][T11556] loop0: detected capacity change from 0 to 2048 [ 215.573104][T11511] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.576738][T11556] EXT4-fs: Ignoring removed bh option [ 215.587712][T11511] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.609949][T11556] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 215.636302][T11560] loop2: detected capacity change from 0 to 512 [ 215.647227][T11560] journal_path: Non-blockdev passed as './bus' [ 215.648365][T11562] loop4: detected capacity change from 0 to 512 [ 215.653574][T11560] EXT4-fs: error: could not find journal device path [ 215.667001][T11562] ext3: Unknown parameter 'fsuuid' [ 215.687261][T11052] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.713860][T11568] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.755557][T11568] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.787237][T11576] loop2: detected capacity change from 0 to 2048 [ 215.794017][T11576] EXT4-fs: Ignoring removed bh option [ 215.817070][T11568] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.827902][T11576] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 215.844683][T11580] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2881'. [ 215.854283][T11580] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 215.886566][T11568] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.984355][T11568] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.997064][T11568] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.009786][T11568] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.025044][T11568] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.076079][T11591] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2884'. [ 216.094898][T11593] loop1: detected capacity change from 0 to 2048 [ 216.099363][ T3381] hid-generic 0000:0008:0001.000C: unknown main item tag 0x0 [ 216.108826][ T3381] hid-generic 0000:0008:0001.000C: unknown main item tag 0x0 [ 216.110958][T11593] EXT4-fs: Ignoring removed bh option [ 216.116306][ T3381] hid-generic 0000:0008:0001.000C: unknown main item tag 0x0 [ 216.116335][ T3381] hid-generic 0000:0008:0001.000C: unknown main item tag 0x0 [ 216.116360][ T3381] hid-generic 0000:0008:0001.000C: unknown main item tag 0x0 [ 216.144085][ T3381] hid-generic 0000:0008:0001.000C: unknown main item tag 0x0 [ 216.151570][ T3381] hid-generic 0000:0008:0001.000C: unknown main item tag 0x0 [ 216.159085][ T3381] hid-generic 0000:0008:0001.000C: unknown main item tag 0x0 [ 216.166514][ T3381] hid-generic 0000:0008:0001.000C: unknown main item tag 0x0 [ 216.174002][ T3381] hid-generic 0000:0008:0001.000C: unknown main item tag 0x0 [ 216.181429][ T3381] hid-generic 0000:0008:0001.000C: unknown main item tag 0x0 [ 216.188846][ T3381] hid-generic 0000:0008:0001.000C: unknown main item tag 0x0 [ 216.196308][ T3381] hid-generic 0000:0008:0001.000C: unknown main item tag 0x0 [ 216.214627][T11602] loop0: detected capacity change from 0 to 512 [ 216.231460][T11602] ext3: Unknown parameter 'fsuuid' [ 216.271193][T11593] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 216.278806][ T3381] hid-generic 0000:0008:0001.000C: hidraw0: HID v0.80 Device [syz0] on syz0 [ 216.293609][T11604] loop0: detected capacity change from 0 to 512 [ 216.313449][T11604] ext3: Unknown parameter 'fsuuid' [ 216.321293][ T57] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 216.336972][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.346681][ T57] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 216.358965][ T57] EXT4-fs (loop2): This should not happen!! Data will be lost [ 216.358965][ T57] [ 216.368953][ T57] EXT4-fs (loop2): Total free blocks count 0 [ 216.375039][ T57] EXT4-fs (loop2): Free/Dirty block details [ 216.381164][ T57] EXT4-fs (loop2): free_blocks=2415919104 [ 216.386928][ T57] EXT4-fs (loop2): dirty_blocks=8224 [ 216.392310][ T57] EXT4-fs (loop2): Block reservation details [ 216.398345][ T57] EXT4-fs (loop2): i_reserved_data_blocks=514 [ 216.415513][ T57] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 2048 with error 28 [ 216.600836][T11630] loop1: detected capacity change from 0 to 512 [ 216.607909][T11630] journal_path: Non-blockdev passed as './bus' [ 216.614119][T11630] EXT4-fs: error: could not find journal device path [ 216.680938][T11635] ================================================================== [ 216.689055][T11635] BUG: KCSAN: data-race in getrusage / vms_clear_ptes [ 216.695844][T11635] [ 216.698170][T11635] write to 0xffff888107563d80 of 8 bytes by task 11632 on cpu 0: [ 216.705895][T11635] vms_clear_ptes+0x1a4/0x300 [ 216.710582][T11635] vms_complete_munmap_vmas+0x17b/0x470 [ 216.716157][T11635] do_vmi_align_munmap+0x379/0x3c0 [ 216.721284][T11635] do_vmi_munmap+0x1eb/0x230 [ 216.725890][T11635] __vm_munmap+0x196/0x270 [ 216.730309][T11635] __x64_sys_munmap+0x36/0x40 [ 216.735001][T11635] x64_sys_call+0xe1b/0x2e10 [ 216.739599][T11635] do_syscall_64+0xc9/0x1c0 [ 216.744123][T11635] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.750023][T11635] [ 216.752344][T11635] read to 0xffff888107563d80 of 8 bytes by task 11635 on cpu 1: [ 216.759973][T11635] getrusage+0xa17/0xb70 [ 216.764231][T11635] io_sq_thread+0x5e0/0x1140 [ 216.768829][T11635] ret_from_fork+0x4b/0x60 [ 216.773249][T11635] ret_from_fork_asm+0x1a/0x30 [ 216.778020][T11635] [ 216.780340][T11635] value changed: 0x00000000000014e6 -> 0x00000000000016f3 [ 216.787454][T11635] [ 216.789782][T11635] Reported by Kernel Concurrency Sanitizer on: [ 216.795938][T11635] CPU: 1 UID: 0 PID: 11635 Comm: iou-sqp-11632 Not tainted 6.15.0-rc1-syzkaller-00301-g3bde70a2c827 #0 PREEMPT(voluntary) [ 216.808707][T11635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 216.818766][T11635] ================================================================== [ 216.848020][T11632] loop1: detected capacity change from 0 to 128 [ 216.865205][T11632] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1) [ 216.960665][T11636] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 216.968564][T11636] FAT-fs (loop1): Filesystem has been set read-only [ 217.042009][ T3302] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100)