last executing test programs: 3m36.491003967s ago: executing program 2 (id=166): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$netlink(0x10, 0x3, 0x4) getsockopt$sock_buf(r0, 0x1, 0xe, 0x0, &(0x7f0000000240)) 3m36.46339313s ago: executing program 2 (id=167): r0 = openat$tun(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'netdevsim0\x00', 0x1}) ioctl$TUNSETTXFILTER(r0, 0x401054d5, 0x0) 3m36.36480946s ago: executing program 2 (id=171): bpf$TOKEN_CREATE(0x24, &(0x7f0000000240), 0x8) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x1}]}, 0x3c}}, 0x0) 3m36.311353855s ago: executing program 2 (id=175): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f00000007c0)={0x1f, 0x0, @any, 0x4}, 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000040)={0x0, 0xff, 0x0, 0x1b}, 0xc) 3m36.229080504s ago: executing program 2 (id=178): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) unshare(0x48020200) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) 3m35.545014493s ago: executing program 2 (id=186): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x4, &(0x7f0000000100)=[{0x25, 0x2, 0x82, 0xffffffff}, {0x60}, {0x2}, {0x6, 0x0, 0xf}]}) 3m20.504782661s ago: executing program 32 (id=186): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x4, &(0x7f0000000100)=[{0x25, 0x2, 0x82, 0xffffffff}, {0x60}, {0x2}, {0x6, 0x0, 0xf}]}) 3.797925306s ago: executing program 5 (id=2569): bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB='\v\x00\x00\x00\b\x00\x00\x00\f\x00\x00\x00'], 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0x3}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x5}, 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0xa) socket$vsock_stream(0x28, 0x1, 0x0) lsm_get_self_attr(0x64, 0xffffffffffffffff, &(0x7f0000000040)=0xfffffffffffffdb1, 0x0) 3.66516588s ago: executing program 5 (id=2570): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) prctl$PR_SET_NAME(0xf, &(0x7f0000001600)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x85\x99\xab\xa7AkQ\x16$\x15\xcf\x14#\xad\x1f\xce}K\xea\x90.!\xd6z\x9e\xc3\xe5\xbf\xc2c\x02\xdc\x86\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98<\xdc)\x82\xeb\b\xa9\x14\xf86\xdc\x8e$B\xa0\x12Zqeo\xb8Z\xa1{\x9ewcbQ[O\xf3y\x99\xc7\xd29\xb7R\xc4:5wV\x86\xef\x95\xa8\x8f2TmN]0\xb8K\x95vP~\xbd\f>m\n\xb3\xe5\x94\xa7\xd3\xc3_\xc9\xcc\xa0nN\xc14k\xcd\xad\x9d}\xd5$\xaaf\xe8\xdd\xcf\t\xb8\x89\xb5\x94t_\xf0\xfc\x18\xa2\xa2rm@\x9b1~3\xbc8\xde\xe3n~\xd2\xd2') openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x2000, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x120, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@newlink={0x34, 0x10, 0x401, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x401c0}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}]}, 0x34}}, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x2002, 0x0, 0x0) socket$inet(0x2, 0x2, 0x1) 3.508174266s ago: executing program 5 (id=2572): get_mempolicy(0x0, 0x0, 0x7, &(0x7f0000ffc000/0x2000)=nil, 0xd) r0 = syz_io_uring_setup(0x102, &(0x7f0000000300)={0x0, 0x9a22, 0x10, 0x3, 0x200008d}, &(0x7f0000000500)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e00)={0x18, 0x5, &(0x7f0000000d00)=ANY=[@ANYBLOB="180000000000000000000000ff001900850000000e000000c500000001d0ffff9543b87e22e63a0789f952999eaa69f5939b823831d8fbe17182066758235b77d7a0f38b376d76cf1e88a1a586261457e8d17596ae562ad3e1e8c5c14ad02950a7f7b2f6f7999db88a208ebcab7b6d4098806839ac3e53dcc69e43fa0ab60bc3a6051f20ef81d3ed03c7f5fba990f182bb7b67871c2d7eedbefe04641531e5175e97b726032399d934e91c25ebeb0db9fc00dbad9635ce0daff0d1399f35967b39c1cbfe3f7800bf1d5fd854b3d8253ea862daa22f71c32b3d68fd5734ca0b1c269910152332e3582b06c616b30347de8b"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x74}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x3ff}, 0x18) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_OPENAT2={0x1c, 0x14, 0x0, 0xffffffffffffffff, &(0x7f0000000000)={0x480}, 0x0, 0x18, 0x0, 0x12345}) io_uring_enter(r0, 0x3516, 0x7723, 0x2, 0x0, 0x0) 3.212262826s ago: executing program 5 (id=2574): get_mempolicy(0x0, 0x0, 0x7, &(0x7f0000ffc000/0x2000)=nil, 0xd) r0 = syz_io_uring_setup(0x102, &(0x7f0000000300)={0x0, 0x9a22, 0x10, 0x3, 0x200008d}, &(0x7f0000000500)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e00)={0x18, 0x5, &(0x7f0000000d00)=ANY=[@ANYBLOB="180000000000000000000000ff001900850000000e000000c500000001d0ffff9543b87e22e63a0789f952999eaa69f5939b823831d8fbe17182066758235b77d7a0f38b376d76cf1e88a1a586261457e8d17596ae562ad3e1e8c5c14ad02950a7f7b2f6f7999db88a208ebcab7b6d4098806839ac3e53dcc69e43fa0ab60bc3a6051f20ef81d3ed03c7f5fba990f182bb7b67871c2d7eedbefe04641531e5175e97b726032399d934e91c25ebeb0db9fc00dbad9635ce0daff0d1399f35967b39c1cbfe3f7800bf1d5fd854b3d8253ea862daa22f71c32b3d68fd5734ca0b1c269910152332e3582b06c616b30347de8b"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x74}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x3ff}, 0x18) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_OPENAT2={0x1c, 0x14, 0x0, 0xffffffffffffffff, &(0x7f0000000000)={0x480}, 0x0, 0x18, 0x0, 0x12345}) io_uring_enter(r0, 0x3516, 0x7723, 0x2, 0x0, 0x0) 3.113151776s ago: executing program 1 (id=2575): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x842) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000340)='.\x00', &(0x7f0000000040), 0x800000, &(0x7f00000016c0)=ANY=[@ANYBLOB="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", @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',\x00']) close(r2) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) listen(r5, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) accept(r2, 0x0, 0x0) 3.045800302s ago: executing program 5 (id=2576): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = perf_event_open$cgroup(&(0x7f0000000140)={0x0, 0x80, 0x8, 0x2e, 0x5, 0x4, 0x0, 0x927, 0x80000, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x8, 0x1, @perf_bp={&(0x7f0000000040), 0x8}, 0x10104, 0x5, 0x5, 0x3, 0x980, 0x8001, 0xff, 0x0, 0xff, 0x0, 0x4}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001180)={&(0x7f00000011c0)='mm_page_free\x00', r3}, 0x18) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r6}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r7 = epoll_create1(0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, &(0x7f0000001940)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001900)={&(0x7f0000001880)={0x50, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0xc}, {0xc, 0x90, 0x400}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4800}, 0x4048001) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000002c0)='./file1\x00', 0x3000046, &(0x7f0000001a80)={[{@delalloc}, {@grpid}, {@barrier_val={'barrier', 0x3d, 0x1}}, {@i_version}, {@journal_dev={'journal_dev', 0x3d, 0x8001}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xd2}}, {@abort}, {@nodelalloc}, {@nobh}, {@user_xattr}, {@dioread_lock}, {@dioread_nolock}]}, 0x1, 0x567, &(0x7f0000000b00)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r8 = syz_io_uring_setup(0x10e, &(0x7f00000000c0)={0x0, 0xf07f, 0x400, 0x40000, 0x105}, &(0x7f0000000400)=0x0, &(0x7f0000000240)=0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002a20702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f00000004c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x1, 0x4004, @fd_index=0x1, 0x8, &(0x7f0000002a40)=[{&(0x7f0000000280)=""/221, 0xdd}, {&(0x7f0000000840)=""/4096, 0x1000}, {&(0x7f0000002b00)=""/4099, 0x1000}, {&(0x7f0000000440)=""/107}, {&(0x7f0000000500)=""/193}, {&(0x7f00000003c0)=""/18}, {&(0x7f0000000700)=""/148}, {&(0x7f0000002840)=""/245}, {&(0x7f0000002940)=""/226}], 0x11b, 0x1d}) io_uring_enter(r8, 0x8aa, 0x0, 0x0, 0x0, 0x0) listxattr(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) epoll_pwait(r7, &(0x7f00000002c0)=[{}], 0x4e, 0x7, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xe, 0x0, &(0x7f0000000000)="259a53f271a76d2608064c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x300, 0x8}, 0x50) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x5, 0xf, 0x9f, 0x3, 0x0, 0x0, 0x0, 0xc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x7, 0x6}, 0x8800, 0x55b, 0x98, 0x0, 0x7, 0x3, 0x0, 0x0, 0x4, 0x0, 0x6}, 0x0, 0xa, r1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, 0xffffffffffffffff, 0x0) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0xffa8) 2.744495723s ago: executing program 5 (id=2582): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000340)=ANY=[@ANYRES32=0x0, @ANYRES64, @ANYRES64, @ANYRES16], 0x1, 0x374, &(0x7f0000000f80)="$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") creat(&(0x7f0000000100)='./bus\x00', 0x0) 2.148241193s ago: executing program 0 (id=2593): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='kfree\x00', r0}, 0x18) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000040)={0x200000000000001}, 0x8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x5}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000001440)=ANY=[@ANYBLOB="0017"], 0xc0) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, 0x0, 0x0) 2.141249124s ago: executing program 1 (id=2595): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x348cf000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0xc) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x20000023896) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0xffff7fff, 0x8000000}, 0xc) unlinkat(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) rt_sigprocmask(0x2, 0x0, 0x0, 0x0) r6 = inotify_init1(0x0) inotify_add_watch(r6, &(0x7f0000000400)='.\x00', 0xa4000021) 1.675785831s ago: executing program 0 (id=2599): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='kfree\x00', r0}, 0x18) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000040)={0x200000000000001}, 0x8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x5}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000001440)=ANY=[@ANYBLOB="0017"], 0xc0) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 1.672186171s ago: executing program 0 (id=2602): r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000000340)=ANY=[@ANYRES16], 0x2000, 0x0) msgrcv(r0, &(0x7f0000000200)={0x0, ""/1}, 0x9, 0x1, 0x3000) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r2) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)) r3 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000040)=0x80000004, 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x18) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x33, &(0x7f0000000640)={0x1, &(0x7f0000000680)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) 1.5870328s ago: executing program 3 (id=2604): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/keys\x00', 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1.58650742s ago: executing program 3 (id=2605): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = perf_event_open$cgroup(&(0x7f0000000140)={0x0, 0x80, 0x8, 0x2e, 0x5, 0x4, 0x0, 0x927, 0x80000, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x8, 0x1, @perf_bp={&(0x7f0000000040), 0x8}, 0x10104, 0x5, 0x5, 0x3, 0x980, 0x8001, 0xff, 0x0, 0xff, 0x0, 0x4}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c30000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001180)={&(0x7f00000011c0)='mm_page_free\x00', r3}, 0x18) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r6}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r7 = epoll_create1(0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, &(0x7f0000001940)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001900)={&(0x7f0000001880)={0x50, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0xc}, {0xc, 0x90, 0x400}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4800}, 0x4048001) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000002c0)='./file1\x00', 0x3000046, &(0x7f0000001a80)={[{@delalloc}, {@grpid}, {@barrier_val={'barrier', 0x3d, 0x1}}, {@i_version}, {@journal_dev={'journal_dev', 0x3d, 0x8001}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xd2}}, {@abort}, {@nodelalloc}, {@nobh}, {@user_xattr}, {@dioread_lock}, {@dioread_nolock}]}, 0x1, 0x567, &(0x7f0000000b00)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r8 = syz_io_uring_setup(0x10e, &(0x7f00000000c0)={0x0, 0xf07f, 0x400, 0x40000, 0x105}, &(0x7f0000000400)=0x0, &(0x7f0000000240)=0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002a20702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f00000004c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x1, 0x4004, @fd_index=0x1, 0x8, &(0x7f0000002a40)=[{&(0x7f0000000280)=""/221, 0xdd}, {&(0x7f0000000840)=""/4096, 0x1000}, {&(0x7f0000002b00)=""/4099, 0x1000}, {&(0x7f0000000440)=""/107}, {&(0x7f0000000500)=""/193}, {&(0x7f00000003c0)=""/18}, {&(0x7f0000000700)=""/148}, {&(0x7f0000002840)=""/245}, {&(0x7f0000002940)=""/226}], 0x11b, 0x1d}) io_uring_enter(r8, 0x8aa, 0x0, 0x0, 0x0, 0x0) listxattr(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) epoll_pwait(r7, &(0x7f00000002c0)=[{}], 0x4e, 0x7, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xe, 0x0, &(0x7f0000000000)="259a53f271a76d2608064c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x300, 0x8}, 0x50) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x5, 0xf, 0x9f, 0x3, 0x0, 0x0, 0x0, 0xc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x7, 0x6}, 0x8800, 0x55b, 0x98, 0x0, 0x7, 0x3, 0x0, 0x0, 0x4, 0x0, 0x6}, 0x0, 0xa, r1, 0x0) r11 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r11, 0x0) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0xffa8) 1.553276473s ago: executing program 1 (id=2606): r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x18, 0x5, 0x0, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r3}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x3, 0x0, 0x7ffc1ffb}]}) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000180)=0xffffffffffffffff) fcntl$setsig(r1, 0xa, 0x12) ppoll(&(0x7f0000000100)=[{r2}], 0x1, 0x0, 0x0, 0x0) r4 = dup2(r1, r2) r5 = getpid() syz_pidfd_open(r5, 0x0) setns(0xffffffffffffffff, 0x66020000) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000280)={[{@usrquota}, {@nodelalloc}]}, 0xff, 0x25e, &(0x7f0000000e80)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x45) ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f0000000140)) ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) fcntl$setown(r2, 0x8, r0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r4) tkill(r0, 0x13) 1.226158456s ago: executing program 3 (id=2609): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100202, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xd, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001240)={&(0x7f0000000200)='kfree\x00', r2, 0x0, 0xfffffffffffffffd}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x12, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5], 0x0}, 0x90) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$cgroup_int(r6, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r7}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000340)='console\x00', r4}, 0x18) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000300)={'macsec0\x00', @random="06517dc2e6ea"}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r9 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r9, 0x2007ffc) sendfile(r9, r9, 0x0, 0x800000009) 988.54272ms ago: executing program 3 (id=2614): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0x4b, &(0x7f0000000280)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a37f2", 0x15, 0x2c, 0xfe, @remote, @local, {[], {{0x600, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}, {'s'}}}}}}}, 0x0) 987.88629ms ago: executing program 4 (id=2615): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00"/11], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x3, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000980)='\xff\x00\x00\x00\x00\x00\x000`\x14\x99\x06\xc0\x7fs\x00\t\x14\x17\xc3\xf5\xc9\v\x85\xe7\x00\x00\x18\x88\x06\x94\x98\xa9\xe7\x1c\x8a\x89\xdc\xcc\xf7L\xbd%\xc3!\x0e\x91S\xb2~8\"\xe2\xed\xbf\x12\x1a\\6p\'p\xef\x1a\n\x99\x12\xe8\'\x1c\x97M\xa5N\xd9\xbeV&\x1c2K?\x95\xd9\"\xbe\x050+\xca\xea\'\xe9)\xfe\xeb\x9c\xb5\xa0F`\xe4D\x10F\x831\xec\\v\xf0\xab_M\b\x03\xc3\n\x89\x01E`\xd35Q2\xecZz\xdc\x065p\x1c\x8f\x9b\x99IGXO\x00\x00\v\xed\xb0\xc5\xd4\xc7,\x1a\xb3}CMOO\x8a\xa8kh\x7f\x05c\xfc\xebb\xc8\xa2\xa9\xbf\xb3\x9b\xafE\xbd\xc5\xdc\xde\xbe_') r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020732600000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000180)='kfree\x00', r4, 0x0, 0x2}, 0x18) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x118}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYRESHEX, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2f, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000007110a9000000000095", @ANYRESDEC=r6, @ANYRES16=r2], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x810) 951.419364ms ago: executing program 3 (id=2616): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x348cf000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0xc) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x20000023896) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0xffff7fff, 0x8000000}, 0xc) unlinkat(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) rt_sigprocmask(0x2, 0x0, 0x0, 0x0) r6 = inotify_init1(0x0) inotify_add_watch(r6, &(0x7f0000000400)='.\x00', 0xa4000021) 856.954424ms ago: executing program 4 (id=2617): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e25, @rand_addr=0x640100fe}, 0x10) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000000)={'veth0_vlan\x00', {0x2, 0x0, @multicast2}}) r1 = socket$netlink(0x10, 0x3, 0x4) unshare(0x26020480) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x47) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f0000000100)={0x12, 0x10, 0xfa00, {&(0x7f0000005480), r3}}, 0x7a) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x20004000) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000002d80)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000010401390000000000000000000083ff05000100"], 0x1c}, 0x1, 0x0, 0x0, 0x8840}, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) sendmsg$rds(r0, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) sendmsg$rds(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r6}, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r7}, 0x18) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/power/freeze_filesystems', 0x149a82, 0x0) write$cgroup_int(r9, &(0x7f0000000040)=0xfe8e, 0x12) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000068000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000212c0011800a0001006c696d69740000001c0002800c00024000000000000000030c0001400000000200000101480000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000001c0003800c00008008000340000000020c0000800800034000000002"], 0xf8}}, 0x0) r10 = socket(0x10, 0x803, 0x0) epoll_create1(0x80000) sendto(r10, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="01c21668f6d1d66edb251c00000018000180140002006c6f"], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x40006) 825.897356ms ago: executing program 4 (id=2618): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x4, 0x4, 0x4, 0x4, 0x1}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000140)='mm_page_free_batched\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") r1 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) sendfile(r1, r1, 0x0, 0x800000009) 612.951238ms ago: executing program 1 (id=2619): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = perf_event_open$cgroup(&(0x7f0000000140)={0x0, 0x80, 0x8, 0x2e, 0x5, 0x4, 0x0, 0x927, 0x80000, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x8, 0x1, @perf_bp={&(0x7f0000000040), 0x8}, 0x10104, 0x5, 0x5, 0x3, 0x980, 0x8001, 0xff, 0x0, 0xff, 0x0, 0x4}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c30000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001180)={&(0x7f00000011c0)='mm_page_free\x00', r3}, 0x18) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r6}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r7 = epoll_create1(0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, &(0x7f0000001940)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001900)={&(0x7f0000001880)={0x50, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0xc}, {0xc, 0x90, 0x400}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4800}, 0x4048001) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000002c0)='./file1\x00', 0x3000046, &(0x7f0000001a80)={[{@delalloc}, {@grpid}, {@barrier_val={'barrier', 0x3d, 0x1}}, {@i_version}, {@journal_dev={'journal_dev', 0x3d, 0x8001}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xd2}}, {@abort}, {@nodelalloc}, {@nobh}, {@user_xattr}, {@dioread_lock}, {@dioread_nolock}]}, 0x1, 0x567, &(0x7f0000000b00)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r8 = syz_io_uring_setup(0x10e, &(0x7f00000000c0)={0x0, 0xf07f, 0x400, 0x40000, 0x105}, &(0x7f0000000400)=0x0, &(0x7f0000000240)=0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002a20702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f00000004c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x1, 0x4004, @fd_index=0x1, 0x8, &(0x7f0000002a40)=[{&(0x7f0000000280)=""/221, 0xdd}, {&(0x7f0000000840)=""/4096, 0x1000}, {&(0x7f0000002b00)=""/4099, 0x1000}, {&(0x7f0000000440)=""/107}, {&(0x7f0000000500)=""/193}, {&(0x7f00000003c0)=""/18}, {&(0x7f0000000700)=""/148}, {&(0x7f0000002840)=""/245}, {&(0x7f0000002940)=""/226}], 0x11b, 0x1d}) io_uring_enter(r8, 0x8aa, 0x0, 0x0, 0x0, 0x0) listxattr(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) epoll_pwait(r7, &(0x7f00000002c0)=[{}], 0x4e, 0x7, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xe, 0x0, &(0x7f0000000000)="259a53f271a76d2608064c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x300, 0x8}, 0x50) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x5, 0xf, 0x9f, 0x3, 0x0, 0x0, 0x0, 0xc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x7, 0x6}, 0x8800, 0x55b, 0x98, 0x0, 0x7, 0x3, 0x0, 0x0, 0x4, 0x0, 0x6}, 0x0, 0xa, r1, 0x0) r11 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r11, 0x0) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0xffa8) 578.495941ms ago: executing program 4 (id=2620): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='kfree\x00', r0}, 0x18) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000040)={0x200000000000001}, 0x8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x5}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000001440)=ANY=[@ANYBLOB="0017"], 0xc0) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 578.001091ms ago: executing program 0 (id=2621): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) write$sndseq(r0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000240)={0x80, 0x4, 0x14a, 0x0, 0x0, 0x4000002}) 485.184581ms ago: executing program 0 (id=2622): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002f00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r1}, &(0x7f00000006c0), &(0x7f0000000700)=r0}, 0x20) close(r0) 458.594843ms ago: executing program 0 (id=2623): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x842) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000340)='.\x00', &(0x7f0000000040), 0x800000, &(0x7f00000016c0)=ANY=[@ANYBLOB="7472616e733d66642c7266646e6f3d1810975acb6adc692d81e76e3ac15ff1305a0b30055565a7f62df64ca715529bd39046add7a699a8b3221127b589f82c5423f314aa8b89229c1f14c9a5d290182a1fa334ba193803880baa79cbc1ec3a56954b83a3457e69bca8d0a1b525622c6e3629ebf79defdb5de612e6e6173c09bb01d452e610e680f6f5c4ddce225c5210622534cbce225388363af8468b6a2ca2f66f6e88cda2c4de6fc8531925fc0d059c5546d827d6be58a0afb1b28bfeea9aff96e90017d09a3c4cc3495bd1cf8dd841054e86316d37f76a9bd862e995689100967042b4006ff0d9db2d921e7203934459d3c12048fe58557549fcf74b2c2de8cfc81341b03ab064eb9029f1ab0f8c7eda72cdf1313703cc29ba2a", @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',\x00']) close(r2) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r5, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) 264.724763ms ago: executing program 4 (id=2624): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='kfree\x00', r0}, 0x18) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000040)={0x200000000000001}, 0x8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x5}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000001440)=ANY=[@ANYBLOB="0017"], 0xc0) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, 0x0, 0x0) 216.109088ms ago: executing program 4 (id=2625): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001e00)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="9feb010018000000000000006c0000006c0000000a0000000400000008000013040000000a00000c06000000050000000300000001040000050000000b000000d17a0000010000000900000001000000060000000d000000ff070000ff010000020000002f000000030000000e00000030000000050000000c000000030000000d000012005f61005f61"], &(0x7f0000001dc0)=""/3, 0x8e, 0x3, 0x1, 0x6}, 0x28) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0xe, 0x34120, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x415, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRESHEX=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) add_key$fscrypt_provisioning(0x0, 0x0, 0x0, 0x0, r2) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = socket(0x15, 0x5, 0x0) getsockopt(r5, 0x200000000114, 0x2710, 0x0, &(0x7f0000000000)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000180), &(0x7f00000001c0)=r3}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_clone3(&(0x7f0000000680)={0x40004000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r6}, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={0x0, 0x78}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r7}, 0x18) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x30046, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000410"], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000000c0)='kmem_cache_free\x00', r9}, 0x18) syz_emit_ethernet(0x5a, &(0x7f0000000100)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @tcp={{0xe, 0x4, 0x2, 0x2e, 0x4c, 0x65, 0x0, 0x2, 0x6, 0x0, @private=0xa010102, @remote, {[@timestamp_prespec={0x44, 0x24, 0x15, 0x3, 0xb, [{@multicast1}, {@dev={0xac, 0x14, 0x14, 0x37}, 0x3}, {@broadcast, 0x1000}, {@multicast1, 0x7}]}]}}, {{0x4e27, 0x4e23, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0xc2, 0xfffd, 0x0, 0x57}}}}}}, 0x0) 133.450157ms ago: executing program 1 (id=2626): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0xff, 0x7ffc1ffd}]}) r0 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000005980)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000240)="bcdfc45dd30325c315223f92e8f1a3246939bb7830b83eb36137b11cffe4a29d282859bf", 0x24}, {&(0x7f0000000580)="0a9ac28bd79d370e2ede297807b064710e185ad0e896c0ab9ba48964475b801a233873d0714c526add5d250e1c04e0574de6fc9e1330bafcd8798cc7f946160fe05d8bf937ed3ed2e1299dc4f210de232b0ee4ae43a21b4f094d2976ade6c57f01f409b094c81776817199a4877006f04c35bec8ff9ddf967ba89e1df784a10d1e79edacdf0efb2d1b29404a755e86734df3141c05a2679052020c075f115a57141108bae51201eadd72228fc5edd76a654649b4308ceef64dcd76f6bbbab403ca34998a04e7859e0997f188125095906eb0b5a24679597803b6", 0xda}, {&(0x7f00000002c0)="353d0d7864d7bbee6620728ac2e005b3e34e32317c69473a88af975092", 0x1d}, {&(0x7f0000000800)="19080dfc347157dbfb46132e161a9f79e43472b608c7445e96cb7bf62b97b30faeeac0d3d42c3eb85c862305b0011521509713f5f2b457643d9c5f84a15308d821a634c61f1c00a7b6aac0c1376036b5cb61a000ba35", 0x56}, {&(0x7f00000019c0)="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", 0x542}], 0x5, &(0x7f00000006c0)=[@rights={{0x14, 0x1, 0x1, [r2]}}, @cred={{0x1c, 0x1, 0x2, {r0}}}], 0x38, 0x800}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="04000000"], 0x18, 0x40810}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4080}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000bc0)="3ddfed8c50e610d2e5c74d9a4ad45a7f92f5ca39728cf555e96973a2c30e8ec7375a1ffc5b6a70ec7c27a63142fcda211dcb83714daa0bdf16bda63d99b333e33bd3f50194ba96033b73ca4ca51bdc4f7beef8817ccc7c0f20b88371d96947986b93d795ed693181686b525b2c3e72546540b2dea8dc62d1f1b4d0904bf8f01be8121985eec5e8f61954feaa79ad052a6ca521e9ca27ab7efc1ba38d9375e450f2ec1f9f4c0e480aa465ca9350d8e7eeb3e1f41f50054bc26ff66322e57d19015946c6fa92b9890501421ec1ce83036f", 0xd0}, {&(0x7f0000000a40)="9211bd3d13b9ea3485dea23981578debd0f417b72f0f405d7e850c3f91fdc7304d5cf770b944b46246c9faf44e3fa36e4b0856e8577e3a0e8d17542b8a841186366149ff6c0cb61278ebc306b33e314aa6794499b63654edde45084994af325ac716895d7b663d3185c1669e6df8bc48dd97", 0x72}, {&(0x7f0000000cc0)="8cb11ae566c2cb9088a525b4fc690aa613c649022e3a0ae41970cb812be9f9de4496d6ef7c4ab194334f148287a8334f97f2ed1ec7bdbd2f670d149cdbba1a3717ce2f79cb652ea2613818f58dd43cbc02045f776ebd00df684d4aba162be54141f15629", 0x64}, {&(0x7f0000000d40)}, {&(0x7f0000000980)}, {&(0x7f0000000ac0)="aa3f9c278a2bbf088384262fba2e3c4b181365335d38160a1a773352c9dd719c2353", 0x22}], 0x6, &(0x7f0000000f00)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r0, @ANYRES32=r2, @ANYRES32=0x0, @ANYBLOB="000000001c0000000000000001000f0002000000", @ANYRES32=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESHEX=r0], 0x50, 0x84}}], 0x4, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000740)=@nameseq={0x1e, 0x1, 0x0, {0x40, 0xc}}, 0x10, &(0x7f0000000b00)=[{&(0x7f0000001280)="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", 0x103}, {&(0x7f0000000780)="6724bf49a9", 0x5}, {&(0x7f00000013c0)="6bd579223f3ff25e570739d4afa282315c6f68e9c2e2c24389c0dcf6a698b3aa5ae9be11ba578cf3de1d7c9122d5f5c3e312a404d36febcee3826109205a551579763d4d040b0457d40a442b404b5ae6ae2fb9ff7df7b7c9c6b71437486b6976f2abe20f9e532c4fade2a275c8065f82c93fc24ad02faf5f2e6516d4ac151816d5dd4aae94c8ba670345961697597c8fce611e301f806af8a31bad5d5abbdb29bd8023a59df9f0343048ab9454e43b041e1b1b1460105cb99edfde65b92f8072fb911a494d6e56b1841bd498e8ec0c5e46f55b5477b832578d22495febcd7fe1b5f31e549f8b6027a271d752b89f31a4f139a209b8d17d22cdb617e756a7d7050bad37ce697e17fb48dd0fa18a12a4c2d3aa7c637ab5b91cd9ea46a8471db36d8b4f1db4d11f43a6554c9894685a02a24867209e38f631858fde5c6da14bd3fa04da3b5bbe0f", 0x146}, {&(0x7f00000007c0)="8a1d50b9941c5c54980e532db7d80fe111490cc5a79ed9a990a3526449c70aaf0da1266d5f8638df34", 0x29}, {&(0x7f0000000940)="5b86862650503afb02d4137d798882de92859deb7f23f7f8530f06ee2d508ddfc401f0ba5e52795675cc8b9e2607e28eee934cb292f6b5ec02710100dc", 0x3d}], 0x5, 0x0, 0x0, 0x8800}, 0x40) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYRES32=0x0], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000340)='kmem_cache_free\x00', r3, 0x0, 0xcfdc}, 0x1a0fb94f25892cbe) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000280)='kfree\x00', r6}, 0x18) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000b40)={'\x00', 0x7ff, 0x5, 0xc, 0xfffffffffffffffd, 0x59c, 0xffffffffffffffff}) ioctl$SG_BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f0000000400)=ANY=[@ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b7040000000000008500000001", @ANYRES64=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) mq_open(&(0x7f0000000000)='kfree\x00', 0x40, 0x11, &(0x7f0000000040)={0x0, 0x3, 0x0, 0xe83a}) syz_open_dev$tty20(0xc, 0x4, 0x1) unshare(0x2060600) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) timer_create(0x7, &(0x7f0000000280)={0x0, 0x3d, 0x1}, &(0x7f0000000300)) getpeername(r1, &(0x7f0000000480)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x0) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x6, 0x2, 0x8) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r7}, 0x18) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r8}, './file0\x00'}) bpf$PROG_LOAD(0x5, 0x0, 0x0) 76.925342ms ago: executing program 1 (id=2627): r0 = openat$sndseq(0xffffffffffffff9c, 0x0, 0xe0c81) write$sndseq(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000001580)=ANY=[@ANYRES8=0x0, @ANYRESOCT, @ANYRESOCT, @ANYRES64=0x0, @ANYBLOB="b7ad7cd65c46a5be7840094fc88ed300444000f8ac89758d3a070000000000000096a99f88ba68f3377383de4de11c07aa5d22d9f4f3c58344d6011b6ea5ee82cf40e4ca5976370cb73c872e576f936791a0ffa5639ac237214be5926acea5405e00f1a144cf7a5240bc1e56ed617e19d6a5a268505f0012b4baf36d3a71eb34c8b67281dbba4b20c3d724ef150deff6f7d908bc72575a1f43b608e0d118", @ANYBLOB="a1fffd2e4c38a7b17fef1a78ad1943012e7b7711a1517cd8b4288a2fbb7d202d8c4a1809add074e6dde0703158125f2f114c49f5ee5f249d63ac0d851c212ccd8d82b7c694ead23c417021e8bc78d646d07e3513568bb81d2179a012dcdcb845b0a58b6d5e46a177de56e3e77ed573967e4eea299078019693ca486edbaa44e947802c7f46f1de18cf7f0e1af02964d04cc84d979855e8d3a3fda262f6a7d2b4b4849fd880c9b9af9be818ba05386754a3505e833ca0b9770f63e91f3a9a04e9fca51d88273d5491ed", @ANYRESOCT, @ANYRESHEX], 0x3, 0x7dc, &(0x7f0000000d80)="$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") ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000240)={0x80, 0x4, 0x14a, 0x0, 0x0, 0x4000002}) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x18, 0xd, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0xd, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x7, 0x4, 0x8, 0x1}, 0x50) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) syz_emit_ethernet(0x16, &(0x7f00000000c0)={@local, @dev, @void, {@llc={0x4, {@snap={0xaa, 0x0, 'o', "26739c"}}}}}, 0x0) acct(&(0x7f0000000100)='./file0\x00') 0s ago: executing program 3 (id=2628): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e25, @rand_addr=0x640100fe}, 0x10) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000000)={'veth0_vlan\x00', {0x2, 0x0, @multicast2}}) r1 = socket$netlink(0x10, 0x3, 0x4) unshare(0x26020480) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x47) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f0000000100)={0x12, 0x10, 0xfa00, {&(0x7f0000005480), r3}}, 0x7a) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x20004000) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000002d80)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000010401390000000000000000000083ff05000100"], 0x1c}, 0x1, 0x0, 0x0, 0x8840}, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) sendmsg$rds(r0, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) sendmsg$rds(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r6}, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r7}, 0x18) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/power/freeze_filesystems', 0x149a82, 0x0) write$cgroup_int(r9, &(0x7f0000000040)=0xfe8e, 0x12) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000068000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000212c0011800a0001006c696d69740000001c0002800c00024000000000000000030c0001400000000200000101480000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000001c0003800c00008008000340000000020c0000800800034000000002"], 0xf8}}, 0x0) r10 = socket(0x10, 0x803, 0x0) epoll_create1(0x80000) sendto(r10, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="01c21668f6d1d66edb251c00000018000180140002006c6f"], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x40006) kernel console output (not intermixed with test programs): 7: attempt to access beyond end of device [ 199.872543][ T9415] loop1: rw=2049, sector=146, nr_sectors = 6 limit=128 [ 199.904446][ T9415] syz.1.2027: attempt to access beyond end of device [ 199.904446][ T9415] loop1: rw=2049, sector=150, nr_sectors = 2 limit=128 [ 199.904474][ T9423] loop0: detected capacity change from 0 to 1024 [ 199.921905][ T9423] EXT4-fs: Ignoring removed i_version option [ 199.926390][ T9415] Buffer I/O error on dev loop1, logical block 75, lost async page write [ 199.926645][ T9415] syz.1.2027: attempt to access beyond end of device [ 199.926645][ T9415] loop1: rw=2049, sector=152, nr_sectors = 2 limit=128 [ 199.956941][ T9415] Buffer I/O error on dev loop1, logical block 76, lost async page write [ 199.962272][ T9423] EXT4-fs: Ignoring removed nobh option [ 199.967758][ T9415] syz.1.2027: attempt to access beyond end of device [ 199.967758][ T9415] loop1: rw=2049, sector=170, nr_sectors = 6 limit=128 [ 199.990209][ T9415] syz.1.2027: attempt to access beyond end of device [ 199.990209][ T9415] loop1: rw=2049, sector=174, nr_sectors = 2 limit=128 [ 200.004526][ T9415] Buffer I/O error on dev loop1, logical block 87, lost async page write [ 200.018496][ T9415] syz.1.2027: attempt to access beyond end of device [ 200.018496][ T9415] loop1: rw=2049, sector=176, nr_sectors = 2 limit=128 [ 200.033635][ T9415] Buffer I/O error on dev loop1, logical block 88, lost async page write [ 200.044938][ T9415] syz.1.2027: attempt to access beyond end of device [ 200.044938][ T9415] loop1: rw=2049, sector=178, nr_sectors = 6 limit=128 [ 200.090675][ T9415] syz.1.2027: attempt to access beyond end of device [ 200.090675][ T9415] loop1: rw=2049, sector=182, nr_sectors = 2 limit=128 [ 200.105995][ T9415] Buffer I/O error on dev loop1, logical block 91, lost async page write [ 200.348131][ T9423] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 200.365752][ T9415] syz.1.2027: attempt to access beyond end of device [ 200.365752][ T9415] loop1: rw=2049, sector=184, nr_sectors = 2 limit=128 [ 200.380714][ T9415] Buffer I/O error on dev loop1, logical block 92, lost async page write [ 200.392435][ T9415] Buffer I/O error on dev loop1, logical block 103, lost async page write [ 200.404981][ T9415] Buffer I/O error on dev loop1, logical block 104, lost async page write [ 200.418322][ T9415] Buffer I/O error on dev loop1, logical block 107, lost async page write [ 200.436113][ T9415] Buffer I/O error on dev loop1, logical block 108, lost async page write [ 200.461245][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.487235][ T9434] 9pnet_fd: Insufficient options for proto=fd [ 200.529391][ T9436] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2034'. [ 200.576573][ T9445] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2037'. [ 200.644773][ T9448] loop3: detected capacity change from 0 to 512 [ 200.658814][ T9450] loop5: detected capacity change from 0 to 764 [ 200.667935][ T9448] EXT4-fs error (device loop3): ext4_expand_extra_isize_ea:2803: inode #11: comm syz.3.2038: corrupted xattr block 95: invalid header [ 200.689525][ T9450] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 200.702071][ T9448] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2853: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 200.725674][ T9448] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.2038: bg 0: block 7: invalid block bitmap [ 200.767839][ T9448] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 200.783818][ T9459] loop5: detected capacity change from 0 to 1024 [ 200.792489][ T9448] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2967: inode #11: comm syz.3.2038: corrupted xattr block 95: invalid header [ 200.810624][ T9461] loop0: detected capacity change from 0 to 512 [ 200.817860][ T9459] EXT4-fs: Ignoring removed i_version option [ 200.824760][ T9448] EXT4-fs warning (device loop3): ext4_evict_inode:274: xattr delete (err -117) [ 200.834258][ T9448] EXT4-fs (loop3): 1 orphan inode deleted [ 200.840486][ T9448] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 200.846580][ T9459] EXT4-fs: Ignoring removed nobh option [ 200.863630][ T9461] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 200.879495][ T9459] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 200.896539][ T3325] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.940352][ T4630] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.963593][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.040020][ T9471] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2046'. [ 201.151703][ T9482] loop5: detected capacity change from 0 to 1024 [ 201.160255][ T9482] EXT4-fs: Ignoring removed i_version option [ 201.168247][ T9482] EXT4-fs: Ignoring removed nobh option [ 201.331649][ T9482] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 201.623565][ T9482] SELinux: policydb magic number 0xf2539a25 does not match expected magic number 0xf97cff8c [ 201.647133][ T9482] SELinux: failed to load policy [ 201.666230][ T9490] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2050'. [ 201.675750][ T9490] netlink: 'syz.1.2050': attribute type 5 has an invalid length. [ 201.683898][ T9490] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2050'. [ 201.704089][ T4630] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.090915][ T9501] SELinux: security_context_str_to_sid (ŠÇpžU9̤w‹!=G»Nîli¦Z8ÚèÖÚoé'‰É×þÛýk?ßoÞ¾Vb:0'Æ) failed with errno=-22 [ 202.571440][ T9509] loop1: detected capacity change from 0 to 512 [ 202.604157][ T9509] EXT4-fs error (device loop1): ext4_expand_extra_isize_ea:2803: inode #11: comm syz.1.2055: corrupted xattr block 95: invalid header [ 202.643453][ T9509] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.2055: bg 0: block 7: invalid block bitmap [ 202.710710][ T9509] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 202.747710][ T9509] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2967: inode #11: comm syz.1.2055: corrupted xattr block 95: invalid header [ 202.783445][ T9515] loop4: detected capacity change from 0 to 1024 [ 202.790576][ T9509] EXT4-fs warning (device loop1): ext4_evict_inode:274: xattr delete (err -117) [ 202.805083][ T9515] EXT4-fs: Ignoring removed i_version option [ 202.835051][ T9515] EXT4-fs: Ignoring removed nobh option [ 202.843677][ T9509] EXT4-fs (loop1): 1 orphan inode deleted [ 202.844190][ T9509] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 202.894770][ T9515] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 202.968870][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.982436][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.060178][ T9521] loop4: detected capacity change from 0 to 764 [ 203.084880][ T9521] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 203.193396][ T9524] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2060'. [ 203.365228][ T9530] siw: device registration error -23 [ 203.411656][ T9532] loop1: detected capacity change from 0 to 764 [ 203.429890][ T9532] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 203.486359][ T9528] loop4: detected capacity change from 0 to 128 [ 203.519207][ T9535] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2065'. [ 204.181017][ T9548] loop3: detected capacity change from 0 to 1024 [ 204.231677][ T9548] EXT4-fs: Ignoring removed i_version option [ 204.300144][ T9548] EXT4-fs: Ignoring removed nobh option [ 204.319322][ T9548] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 204.366188][ T3325] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.385176][ T9553] loop4: detected capacity change from 0 to 512 [ 204.396706][ T9553] EXT4-fs error (device loop4): ext4_expand_extra_isize_ea:2803: inode #11: comm syz.4.2069: corrupted xattr block 95: invalid header [ 204.413793][ T9553] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.2069: bg 0: block 7: invalid block bitmap [ 204.427372][ T9553] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 204.446403][ T9553] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2967: inode #11: comm syz.4.2069: corrupted xattr block 95: invalid header [ 204.468874][ T9553] EXT4-fs warning (device loop4): ext4_evict_inode:274: xattr delete (err -117) [ 204.479125][ T9553] EXT4-fs (loop4): 1 orphan inode deleted [ 204.487150][ T9553] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 204.550910][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.563205][ T9562] loop3: detected capacity change from 0 to 764 [ 204.634478][ T9562] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 204.669089][ T9573] __nla_validate_parse: 1 callbacks suppressed [ 204.669103][ T9573] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2074'. [ 204.686153][ T3397] IPVS: starting estimator thread 0... [ 204.694914][ T9566] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 204.708418][ T29] kauditd_printk_skb: 784 callbacks suppressed [ 204.708434][ T29] audit: type=1326 audit(196.003:9359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9570 comm="syz.5.2076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67858ff6c9 code=0x7ffc0000 [ 204.739640][ T29] audit: type=1326 audit(196.003:9360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9570 comm="syz.5.2076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f67858ff6c9 code=0x7ffc0000 [ 204.764500][ T29] audit: type=1326 audit(196.003:9361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9570 comm="syz.5.2076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67858ff6c9 code=0x7ffc0000 [ 204.790074][ T29] audit: type=1326 audit(196.003:9362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9570 comm="syz.5.2076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f67858ff6c9 code=0x7ffc0000 [ 204.814781][ T29] audit: type=1326 audit(196.003:9363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9570 comm="syz.5.2076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67858ff6c9 code=0x7ffc0000 [ 204.838563][ T29] audit: type=1326 audit(196.003:9364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9570 comm="syz.5.2076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f67858ff6c9 code=0x7ffc0000 [ 204.870562][ T29] audit: type=1400 audit(196.031:9365): avc: denied { getopt } for pid=9567 comm="syz.4.2075" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 204.890765][ T29] audit: type=1326 audit(196.106:9366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9570 comm="syz.5.2076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67858ff6c9 code=0x7ffc0000 [ 204.915903][ T29] audit: type=1326 audit(196.106:9367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9570 comm="syz.5.2076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67858ff6c9 code=0x7ffc0000 [ 204.940023][ T29] audit: type=1326 audit(196.134:9368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9570 comm="syz.5.2076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f67858ff6c9 code=0x7ffc0000 [ 204.949839][ T9574] IPVS: using max 2832 ests per chain, 141600 per kthread [ 204.987625][ T9583] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2078'. [ 205.111379][ T9587] loop1: detected capacity change from 0 to 1024 [ 205.124051][ T9590] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2081'. [ 205.142993][ T9587] EXT4-fs: Ignoring removed i_version option [ 205.184165][ T9587] EXT4-fs: Ignoring removed nobh option [ 205.208177][ T9587] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 205.305043][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.410335][ T9595] loop5: detected capacity change from 0 to 128 [ 205.575595][ T9601] loop4: detected capacity change from 0 to 512 [ 205.594328][ T9601] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 205.667133][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.223703][ T9614] loop0: detected capacity change from 0 to 764 [ 206.280279][ T9614] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 206.443054][ T9619] RDS: rds_bind could not find a transport for ::ffff:100.1.0.254, load rds_tcp or rds_rdma? [ 206.530191][ T9622] loop1: detected capacity change from 0 to 256 [ 206.853080][ T9625] loop4: detected capacity change from 0 to 1024 [ 206.874212][ T9629] loop5: detected capacity change from 0 to 764 [ 206.905896][ T9628] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2092'. [ 206.912242][ T9625] EXT4-fs: Ignoring removed i_version option [ 206.924469][ T9629] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 206.936245][ T9625] EXT4-fs: Ignoring removed nobh option [ 206.951226][ T9625] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 207.050323][ T9635] RDS: rds_bind could not find a transport for ::ffff:100.1.0.254, load rds_tcp or rds_rdma? [ 207.085664][ T9637] loop0: detected capacity change from 0 to 1024 [ 207.127300][ T9637] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 207.196003][ T9625] SELinux: failed to load policy [ 207.242138][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.680135][ T9650] loop5: detected capacity change from 0 to 128 [ 207.745729][ T9657] siw: device registration error -23 [ 207.892828][ T9660] loop4: detected capacity change from 0 to 764 [ 207.920939][ T9660] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 208.014125][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.069458][ T9665] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2106'. [ 208.108381][ T9667] FAULT_INJECTION: forcing a failure. [ 208.108381][ T9667] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 208.123033][ T9667] CPU: 1 UID: 0 PID: 9667 Comm: syz.4.2107 Not tainted syzkaller #0 PREEMPT(voluntary) [ 208.123117][ T9667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 208.123187][ T9667] Call Trace: [ 208.123193][ T9667] [ 208.123226][ T9667] __dump_stack+0x1d/0x30 [ 208.123317][ T9667] dump_stack_lvl+0xe8/0x140 [ 208.123338][ T9667] dump_stack+0x15/0x1b [ 208.123423][ T9667] should_fail_ex+0x265/0x280 [ 208.123451][ T9667] should_fail+0xb/0x20 [ 208.123463][ T9667] should_fail_usercopy+0x1a/0x20 [ 208.123551][ T9667] _copy_from_iter+0xd2/0xe80 [ 208.123572][ T9667] ? __build_skb_around+0x1ab/0x200 [ 208.123615][ T9667] ? __alloc_skb+0x223/0x320 [ 208.123640][ T9667] netlink_sendmsg+0x471/0x6b0 [ 208.123658][ T9667] ? __pfx_netlink_sendmsg+0x10/0x10 [ 208.123706][ T9667] __sock_sendmsg+0x145/0x180 [ 208.123735][ T9667] ____sys_sendmsg+0x31e/0x4e0 [ 208.123814][ T9667] ___sys_sendmsg+0x17b/0x1d0 [ 208.123841][ T9667] __x64_sys_sendmsg+0xd4/0x160 [ 208.123860][ T9667] x64_sys_call+0x191e/0x3000 [ 208.123939][ T9667] do_syscall_64+0xd2/0x200 [ 208.123957][ T9667] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 208.123980][ T9667] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 208.124030][ T9667] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.124048][ T9667] RIP: 0033:0x7f8e7066f6c9 [ 208.124061][ T9667] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 208.124076][ T9667] RSP: 002b:00007f8e6f0d7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 208.124115][ T9667] RAX: ffffffffffffffda RBX: 00007f8e708c5fa0 RCX: 00007f8e7066f6c9 [ 208.124161][ T9667] RDX: 0000000024000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 208.124172][ T9667] RBP: 00007f8e6f0d7090 R08: 0000000000000000 R09: 0000000000000000 [ 208.124182][ T9667] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 208.124192][ T9667] R13: 00007f8e708c6038 R14: 00007f8e708c5fa0 R15: 00007fff8cbd8408 [ 208.124207][ T9667] [ 208.435532][ T9671] 9pnet_fd: Insufficient options for proto=fd [ 208.451308][ T9675] loop4: detected capacity change from 0 to 512 [ 208.496406][ T9675] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 208.517064][ T9680] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=9680 comm=syz.0.2111 [ 208.531504][ T9680] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=9680 comm=syz.0.2111 [ 208.594416][ T9675] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #2: comm syz.4.2110: corrupted inode contents [ 208.622899][ T9675] EXT4-fs error (device loop4): ext4_dirty_inode:6517: inode #2: comm syz.4.2110: mark_inode_dirty error [ 208.635807][ T9683] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2113'. [ 208.682747][ T9675] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #2: comm syz.4.2110: corrupted inode contents [ 208.711076][ T9690] loop0: detected capacity change from 0 to 764 [ 208.743487][ T9686] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #2: comm syz.4.2110: corrupted inode contents [ 208.767651][ T9690] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 208.797188][ T9693] loop5: detected capacity change from 0 to 512 [ 208.806605][ T9675] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 208.809148][ T9686] EXT4-fs error (device loop4): ext4_dirty_inode:6517: inode #2: comm syz.4.2110: mark_inode_dirty error [ 208.856684][ T9693] EXT4-fs error (device loop5): ext4_expand_extra_isize_ea:2803: inode #11: comm syz.5.2116: corrupted xattr block 95: invalid header [ 208.873491][ T9696] loop0: detected capacity change from 0 to 764 [ 208.883315][ T9696] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 208.895116][ T9686] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #2: comm syz.4.2110: corrupted inode contents [ 208.908046][ T9693] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.2116: bg 0: block 7: invalid block bitmap [ 208.938366][ T9686] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #2: comm syz.4.2110: mark_inode_dirty error [ 208.969443][ T9693] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 209.049028][ T9693] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2967: inode #11: comm syz.5.2116: corrupted xattr block 95: invalid header [ 209.107045][ T9686] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #2: comm syz.4.2110: corrupted inode contents [ 209.122819][ T9700] loop0: detected capacity change from 0 to 1024 [ 209.136798][ T9693] EXT4-fs warning (device loop5): ext4_evict_inode:274: xattr delete (err -117) [ 209.152002][ T9700] EXT4-fs: Ignoring removed i_version option [ 209.183742][ T9700] EXT4-fs: Ignoring removed nobh option [ 209.197368][ T9693] EXT4-fs (loop5): 1 orphan inode deleted [ 209.205009][ T9686] EXT4-fs error (device loop4): ext4_dirty_inode:6517: inode #2: comm syz.4.2110: mark_inode_dirty error [ 209.226438][ T9693] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 209.249447][ T9700] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 209.345511][ T4630] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.366752][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.429085][ T9705] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2121'. [ 209.509974][ T9711] SELinux: policydb magic number 0xf2539a25 does not match expected magic number 0xf97cff8c [ 209.529794][ T9713] loop4: detected capacity change from 0 to 764 [ 209.540345][ T9711] SELinux: failed to load policy [ 209.628105][ T9713] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 209.649804][ T9716] loop1: detected capacity change from 0 to 512 [ 209.658051][ T9716] ext4: Unknown parameter 'åÅÕ ƒºæµM|±5]oJ‚Eÿ¤™}©ÇzôÀË—ü¥…ìkõƒQÕx¾' [ 209.729244][ T9716] bond9: entered promiscuous mode [ 209.932068][ T9724] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2126'. [ 209.981358][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.114623][ T9736] loop1: detected capacity change from 0 to 512 [ 210.133096][ T9736] EXT4-fs error (device loop1): ext4_expand_extra_isize_ea:2803: inode #11: comm syz.1.2130: corrupted xattr block 95: invalid header [ 210.152064][ T9736] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.2130: bg 0: block 7: invalid block bitmap [ 210.165374][ T9729] loop0: detected capacity change from 0 to 512 [ 210.166266][ T9736] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 210.188232][ T9729] EXT4-fs (loop0): orphan cleanup on readonly fs [ 210.195472][ T9729] EXT4-fs warning (device loop0): ext4_xattr_inode_get:560: inode #11: comm syz.0.2127: EA inode hash validation failed [ 210.209155][ T9729] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 210.209233][ T9736] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2967: inode #11: comm syz.1.2130: corrupted xattr block 95: invalid header [ 210.223156][ T9729] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #15: comm syz.0.2127: corrupted inode contents [ 210.250143][ T9729] EXT4-fs error (device loop0): ext4_dirty_inode:6517: inode #15: comm syz.0.2127: mark_inode_dirty error [ 210.250858][ T9736] EXT4-fs warning (device loop1): ext4_evict_inode:274: xattr delete (err -117) [ 210.270483][ T9729] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #15: comm syz.0.2127: corrupted inode contents [ 210.271830][ T9736] EXT4-fs (loop1): 1 orphan inode deleted [ 210.292621][ T9736] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 210.324194][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.334568][ T9729] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2996: inode #15: comm syz.0.2127: mark_inode_dirty error [ 210.356228][ T29] kauditd_printk_skb: 526 callbacks suppressed [ 210.356242][ T29] audit: type=1326 audit(201.288:9895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9741 comm="syz.5.2132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67858ff6c9 code=0x7ffc0000 [ 210.359597][ T9729] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2999: inode #15: comm syz.0.2127: mark inode dirty (error -117) [ 210.372804][ T29] audit: type=1326 audit(201.297:9896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9741 comm="syz.5.2132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f67858ff6c9 code=0x7ffc0000 [ 210.390667][ T9729] EXT4-fs warning (device loop0): ext4_evict_inode:274: xattr delete (err -117) [ 210.403555][ T29] audit: type=1326 audit(201.297:9897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9741 comm="syz.5.2132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67858ff6c9 code=0x7ffc0000 [ 210.428444][ T9729] EXT4-fs (loop0): 1 orphan inode deleted [ 210.437999][ T29] audit: type=1326 audit(201.297:9898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9741 comm="syz.5.2132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67858ff6c9 code=0x7ffc0000 [ 210.463072][ T9729] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 210.469281][ T29] audit: type=1326 audit(201.297:9899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9741 comm="syz.5.2132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f67858ff6c9 code=0x7ffc0000 [ 210.532016][ T29] audit: type=1326 audit(201.297:9900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9741 comm="syz.5.2132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67858ff6c9 code=0x7ffc0000 [ 210.558042][ T29] audit: type=1326 audit(201.297:9901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9741 comm="syz.5.2132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f67858ff6c9 code=0x7ffc0000 [ 210.581959][ T29] audit: type=1326 audit(201.297:9902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9741 comm="syz.5.2132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67858ff6c9 code=0x7ffc0000 [ 210.605541][ T29] audit: type=1326 audit(201.297:9903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9741 comm="syz.5.2132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f67858ff6c9 code=0x7ffc0000 [ 210.628723][ T29] audit: type=1326 audit(201.297:9904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9741 comm="syz.5.2132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67858ff6c9 code=0x7ffc0000 [ 210.708455][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.967734][ T9757] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2136'. [ 211.373449][ T9762] loop4: detected capacity change from 0 to 764 [ 211.424085][ T9762] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 211.501250][ T9764] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2138'. [ 211.592354][ T9767] loop5: detected capacity change from 0 to 512 [ 211.623364][ T9767] ext4: Unknown parameter 'åÅÕ ƒºæµM|±5]oJ‚Eÿ¤™}©ÇzôÀË—ü¥…ìkõƒQÕx¾' [ 211.653152][ T9771] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2139'. [ 211.677317][ T9767] bond7: entered promiscuous mode [ 211.788013][ T9774] loop4: detected capacity change from 0 to 512 [ 211.860135][ T9774] EXT4-fs error (device loop4): ext4_expand_extra_isize_ea:2803: inode #11: comm syz.4.2141: corrupted xattr block 95: invalid header [ 211.885999][ T9774] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2853: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 211.900288][ T9774] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.2141: bg 0: block 7: invalid block bitmap [ 211.928204][ T9774] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 212.015188][ T9774] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2967: inode #11: comm syz.4.2141: corrupted xattr block 95: invalid header [ 212.309401][ T9774] EXT4-fs warning (device loop4): ext4_evict_inode:274: xattr delete (err -117) [ 212.319644][ T9774] EXT4-fs (loop4): 1 orphan inode deleted [ 212.337183][ T9774] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 212.384658][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.517885][ T9789] siw: device registration error -23 [ 212.644242][ T9791] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2147'. [ 212.854587][ T9799] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2151'. [ 213.170861][ T9808] loop4: detected capacity change from 0 to 1024 [ 213.257789][ T9808] EXT4-fs: Ignoring removed i_version option [ 213.273862][ T9808] EXT4-fs: Ignoring removed nobh option [ 213.324389][ T9808] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 213.337525][ T9810] loop5: detected capacity change from 0 to 1024 [ 213.353681][ T9810] EXT4-fs: Ignoring removed i_version option [ 213.371728][ T9810] EXT4-fs: Ignoring removed nobh option [ 213.397017][ T9810] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 213.410010][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.468230][ T9817] loop4: detected capacity change from 0 to 764 [ 213.518222][ T9817] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 213.617133][ T9822] loop4: detected capacity change from 0 to 764 [ 213.683339][ T9822] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 213.770154][ T9828] siw: device registration error -23 [ 213.903084][ T9810] SELinux: failed to load policy [ 213.917995][ T9834] loop0: detected capacity change from 0 to 764 [ 213.932814][ T9834] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 214.358600][ T4630] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.458618][ T9838] loop0: detected capacity change from 0 to 512 [ 214.513367][ T9838] netlink: 'syz.0.2164': attribute type 1 has an invalid length. [ 214.521819][ T9838] netlink: 'syz.0.2164': attribute type 2 has an invalid length. [ 214.530214][ T9838] netlink: 252 bytes leftover after parsing attributes in process `syz.0.2164'. [ 214.540075][ T9838] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.568419][ T9840] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2163'. [ 214.629888][ T9847] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2165'. [ 214.653579][ T9848] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #2: comm syz.0.2164: corrupted inode contents [ 214.678401][ T9848] EXT4-fs error (device loop0): ext4_dirty_inode:6517: inode #2: comm syz.0.2164: mark_inode_dirty error [ 214.694806][ T9848] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #2: comm syz.0.2164: corrupted inode contents [ 214.739735][ T9838] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #2: comm syz.0.2164: corrupted inode contents [ 214.765885][ T9848] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 214.778539][ T9838] EXT4-fs error (device loop0): ext4_dirty_inode:6517: inode #2: comm syz.0.2164: mark_inode_dirty error [ 214.794059][ T9838] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #2: comm syz.0.2164: corrupted inode contents [ 214.842093][ T9838] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #2: comm syz.0.2164: mark_inode_dirty error [ 214.879106][ T9838] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #2: comm syz.0.2164: corrupted inode contents [ 214.888875][ T9860] 9pnet_fd: Insufficient options for proto=fd [ 214.907581][ T9838] EXT4-fs error (device loop0): ext4_dirty_inode:6517: inode #2: comm syz.0.2164: mark_inode_dirty error [ 215.353549][ T9875] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2175'. [ 215.366964][ T9873] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2174'. [ 215.463223][ T9882] loop0: detected capacity change from 0 to 256 [ 216.291620][ T9888] RDS: rds_bind could not find a transport for ::ffff:100.1.0.254, load rds_tcp or rds_rdma? [ 216.393337][ T29] kauditd_printk_skb: 304 callbacks suppressed [ 216.393352][ T29] audit: type=1326 audit(206.938:10209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9891 comm="syz.0.2178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d1d60f6c9 code=0x7ffc0000 [ 216.433143][ T29] audit: type=1326 audit(206.938:10210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9891 comm="syz.0.2178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d1d60f6c9 code=0x7ffc0000 [ 216.457973][ T29] audit: type=1326 audit(206.938:10211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9891 comm="syz.0.2178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f7d1d60f6c9 code=0x7ffc0000 [ 216.482852][ T29] audit: type=1326 audit(206.938:10212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9891 comm="syz.0.2178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d1d60f6c9 code=0x7ffc0000 [ 216.507388][ T29] audit: type=1326 audit(206.938:10213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9891 comm="syz.0.2178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f7d1d60f6c9 code=0x7ffc0000 [ 216.509375][ T9893] loop0: detected capacity change from 0 to 1024 [ 216.531412][ T29] audit: type=1326 audit(206.938:10214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9891 comm="syz.0.2178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d1d60f6c9 code=0x7ffc0000 [ 216.531442][ T29] audit: type=1326 audit(206.938:10215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9891 comm="syz.0.2178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f7d1d60f6c9 code=0x7ffc0000 [ 216.531463][ T29] audit: type=1326 audit(206.938:10216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9891 comm="syz.0.2178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f7d1d60f703 code=0x7ffc0000 [ 216.531561][ T29] audit: type=1326 audit(206.947:10217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9891 comm="syz.0.2178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f7d1d60e17f code=0x7ffc0000 [ 216.541556][ T9893] EXT4-fs: Ignoring removed i_version option [ 216.563670][ T29] audit: type=1326 audit(206.947:10218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9891 comm="syz.0.2178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f7d1d60f757 code=0x7ffc0000 [ 216.588760][ T9893] EXT4-fs: Ignoring removed nobh option [ 216.637385][ T9895] loop1: detected capacity change from 0 to 512 [ 216.694761][ T9895] ext4: Unknown parameter 'åÅÕ ƒºæµM|±5]oJ‚Eÿ¤™}©ÇzôÀË—ü¥…ìkõƒQÕx¾' [ 216.729327][ T9901] loop5: detected capacity change from 0 to 512 [ 216.755005][ T9905] siw: device registration error -23 [ 216.793647][ T9895] bond10: entered promiscuous mode [ 216.803648][ T9901] netlink: 'syz.5.2184': attribute type 1 has an invalid length. [ 216.812167][ T9901] netlink: 'syz.5.2184': attribute type 2 has an invalid length. [ 216.820744][ T9901] netlink: 252 bytes leftover after parsing attributes in process `syz.5.2184'. [ 216.831112][ T9901] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.841346][ T9901] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #2: comm syz.5.2184: corrupted inode contents [ 216.849673][ T9912] loop4: detected capacity change from 0 to 512 [ 216.862147][ T9901] EXT4-fs error (device loop5): ext4_dirty_inode:6517: inode #2: comm syz.5.2184: mark_inode_dirty error [ 216.886127][ T9901] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #2: comm syz.5.2184: corrupted inode contents [ 216.889008][ T9912] ext4: Unknown parameter 'åÅÕ ƒºæµM|±5]oJ‚Eÿ¤™}©ÇzôÀË—ü¥…ìkõƒQÕx¾' [ 216.933292][ T9901] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #2: comm syz.5.2184: corrupted inode contents [ 216.953354][ T9914] siw: device registration error -23 [ 216.960244][ T9901] EXT4-fs error (device loop5): ext4_dirty_inode:6517: inode #2: comm syz.5.2184: mark_inode_dirty error [ 216.984880][ T9917] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 216.999973][ T9916] loop1: detected capacity change from 0 to 512 [ 217.009239][ T9901] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #2: comm syz.5.2184: corrupted inode contents [ 217.078738][ T9901] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #2: comm syz.5.2184: mark_inode_dirty error [ 217.085457][ T9912] bond6: entered promiscuous mode [ 217.110374][ T9901] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #2: comm syz.5.2184: corrupted inode contents [ 217.124224][ T9901] EXT4-fs error (device loop5): ext4_dirty_inode:6517: inode #2: comm syz.5.2184: mark_inode_dirty error [ 217.156313][ T9927] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2191'. [ 217.338579][ T9938] loop4: detected capacity change from 0 to 512 [ 217.558106][ T9943] RDS: rds_bind could not find a transport for ::ffff:100.1.0.254, load rds_tcp or rds_rdma? [ 217.736847][ T9951] loop5: detected capacity change from 0 to 512 [ 217.744566][ T9951] ext4: Unknown parameter 'åÅÕ ƒºæµM|±5]oJ‚Eÿ¤™}©ÇzôÀË—ü¥…ìkõƒQÕx¾' [ 217.801554][ T9951] bond8: entered promiscuous mode [ 217.839447][ T9956] FAULT_INJECTION: forcing a failure. [ 217.839447][ T9956] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 217.853141][ T9956] CPU: 0 UID: 0 PID: 9956 Comm: syz.4.2202 Not tainted syzkaller #0 PREEMPT(voluntary) [ 217.853170][ T9956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 217.853260][ T9956] Call Trace: [ 217.853267][ T9956] [ 217.853275][ T9956] __dump_stack+0x1d/0x30 [ 217.853373][ T9956] dump_stack_lvl+0xe8/0x140 [ 217.853389][ T9956] dump_stack+0x15/0x1b [ 217.853405][ T9956] should_fail_ex+0x265/0x280 [ 217.853433][ T9956] should_fail_alloc_page+0xf2/0x100 [ 217.853470][ T9956] __alloc_frozen_pages_noprof+0xff/0x360 [ 217.853548][ T9956] alloc_pages_mpol+0xb3/0x260 [ 217.853575][ T9956] vma_alloc_folio_noprof+0x1aa/0x300 [ 217.853599][ T9956] handle_mm_fault+0xec2/0x2be0 [ 217.853622][ T9956] ? mt_find+0x21b/0x330 [ 217.853670][ T9956] do_user_addr_fault+0x3fe/0x1080 [ 217.853691][ T9956] exc_page_fault+0x62/0xa0 [ 217.853783][ T9956] asm_exc_page_fault+0x26/0x30 [ 217.853800][ T9956] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 217.853825][ T9956] Code: f9 01 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 e9 0f f9 01 00 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 217.853858][ T9956] RSP: 0018:ffffc9000acbfcb8 EFLAGS: 00050246 [ 217.853872][ T9956] RAX: ffff88810a4d4ca0 RBX: 0000000000000040 RCX: 0000000000000040 [ 217.853883][ T9956] RDX: 0000000000000000 RSI: ffffc9000acbfd10 RDI: 0000200000033a80 [ 217.853895][ T9956] RBP: ffffc9000acbfd90 R08: 000000000000078f R09: 0000000000000000 [ 217.853908][ T9956] R10: 0001c9000acbfd10 R11: 0001c9000acbfd4f R12: 0000200000033ac0 [ 217.853973][ T9956] R13: 00007ffffffff000 R14: 0000200000033a80 R15: ffffc9000acbfd10 [ 217.853992][ T9956] _copy_to_user+0x7c/0xa0 [ 217.854018][ T9956] rng_dev_read+0x3ef/0x740 [ 217.854088][ T9956] ? __pfx_rng_dev_read+0x10/0x10 [ 217.854112][ T9956] vfs_readv+0x3fb/0x690 [ 217.854145][ T9956] __x64_sys_preadv+0xfd/0x1c0 [ 217.854173][ T9956] x64_sys_call+0x282e/0x3000 [ 217.854234][ T9956] do_syscall_64+0xd2/0x200 [ 217.854250][ T9956] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 217.854280][ T9956] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 217.854313][ T9956] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.854338][ T9956] RIP: 0033:0x7f8e7066f6c9 [ 217.854354][ T9956] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 217.854372][ T9956] RSP: 002b:00007f8e6f0d7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 217.854391][ T9956] RAX: ffffffffffffffda RBX: 00007f8e708c5fa0 RCX: 00007f8e7066f6c9 [ 217.854474][ T9956] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000003 [ 217.854522][ T9956] RBP: 00007f8e6f0d7090 R08: 0000000000000000 R09: 0000000000000000 [ 217.854535][ T9956] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 217.854547][ T9956] R13: 00007f8e708c6038 R14: 00007f8e708c5fa0 R15: 00007fff8cbd8408 [ 217.854566][ T9956] [ 218.218010][ T9961] 9pnet_fd: Insufficient options for proto=fd [ 218.231778][ T9960] loop1: detected capacity change from 0 to 512 [ 218.281644][ T9960] netlink: 'syz.1.2205': attribute type 1 has an invalid length. [ 218.290754][ T9960] netlink: 'syz.1.2205': attribute type 2 has an invalid length. [ 218.298904][ T9960] netlink: 252 bytes leftover after parsing attributes in process `syz.1.2205'. [ 218.308636][ T9960] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.317236][ T9960] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #2: comm syz.1.2205: corrupted inode contents [ 218.323541][ T9965] loop4: detected capacity change from 0 to 1024 [ 218.347410][ T9960] EXT4-fs error (device loop1): ext4_dirty_inode:6517: inode #2: comm syz.1.2205: mark_inode_dirty error [ 218.364258][ T9965] EXT4-fs: Ignoring removed i_version option [ 218.372460][ T9965] EXT4-fs: Ignoring removed nobh option [ 218.379958][ T9960] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #2: comm syz.1.2205: corrupted inode contents [ 218.452987][ T9960] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #2: comm syz.1.2205: corrupted inode contents [ 218.495622][ T9975] loop5: detected capacity change from 0 to 764 [ 218.544907][ T9975] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 218.560359][ T9977] loop0: detected capacity change from 0 to 512 [ 218.568422][ T9960] EXT4-fs error (device loop1): ext4_dirty_inode:6517: inode #2: comm syz.1.2205: mark_inode_dirty error [ 218.576374][ T9977] EXT4-fs (loop0): orphan cleanup on readonly fs [ 218.603020][ T9977] EXT4-fs warning (device loop0): ext4_xattr_inode_get:560: inode #11: comm syz.0.2206: EA inode hash validation failed [ 218.626311][ T9977] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 218.655752][ T9960] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #2: comm syz.1.2205: corrupted inode contents [ 218.678509][ T9977] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #15: comm syz.0.2206: corrupted inode contents [ 218.701567][ T9981] SELinux: policydb magic number 0xf2539a25 does not match expected magic number 0xf97cff8c [ 218.722266][ T9960] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #2: comm syz.1.2205: mark_inode_dirty error [ 218.734190][ T9977] EXT4-fs error (device loop0): ext4_dirty_inode:6517: inode #15: comm syz.0.2206: mark_inode_dirty error [ 218.760156][ T9977] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #15: comm syz.0.2206: corrupted inode contents [ 218.764445][ T9981] SELinux: failed to load policy [ 218.774302][ T9960] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #2: comm syz.1.2205: corrupted inode contents [ 218.806716][ T9977] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2996: inode #15: comm syz.0.2206: mark_inode_dirty error [ 218.825219][ T9977] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2999: inode #15: comm syz.0.2206: mark inode dirty (error -117) [ 218.839429][ T9960] EXT4-fs error (device loop1): ext4_dirty_inode:6517: inode #2: comm syz.1.2205: mark_inode_dirty error [ 218.862351][ T9977] EXT4-fs warning (device loop0): ext4_evict_inode:274: xattr delete (err -117) [ 218.873909][ T9977] EXT4-fs (loop0): 1 orphan inode deleted [ 218.896183][ T9986] loop5: detected capacity change from 0 to 128 [ 218.965961][ T9990] siw: device registration error -23 [ 218.972656][ T9985] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2210'. [ 219.082123][ T9999] RDS: rds_bind could not find a transport for ::ffff:10.1.1.3, load rds_tcp or rds_rdma? [ 219.121686][T10002] RDS: rds_bind could not find a transport for ::ffff:100.1.0.254, load rds_tcp or rds_rdma? [ 219.216383][T10007] loop0: detected capacity change from 0 to 764 [ 219.226648][T10008] loop4: detected capacity change from 0 to 128 [ 219.235271][T10007] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 219.310289][T10012] loop0: detected capacity change from 0 to 512 [ 219.559006][T10021] loop3: detected capacity change from 0 to 512 [ 219.625824][T10021] netlink: 'syz.3.2222': attribute type 1 has an invalid length. [ 219.634254][T10021] netlink: 'syz.3.2222': attribute type 2 has an invalid length. [ 219.643363][T10021] netlink: 252 bytes leftover after parsing attributes in process `syz.3.2222'. [ 219.652681][T10021] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.663300][T10021] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #2: comm syz.3.2222: corrupted inode contents [ 219.685750][T10033] loop0: detected capacity change from 0 to 256 [ 219.959015][T10024] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2223'. [ 219.974578][T10021] EXT4-fs error (device loop3): ext4_dirty_inode:6517: inode #2: comm syz.3.2222: mark_inode_dirty error [ 219.992654][T10021] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #2: comm syz.3.2222: corrupted inode contents [ 220.133893][T10036] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #2: comm syz.3.2222: corrupted inode contents [ 220.165780][T10036] EXT4-fs error (device loop3): ext4_dirty_inode:6517: inode #2: comm syz.3.2222: mark_inode_dirty error [ 220.192348][T10036] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #2: comm syz.3.2222: corrupted inode contents [ 220.235540][T10036] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #2: comm syz.3.2222: mark_inode_dirty error [ 220.258237][T10036] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #2: comm syz.3.2222: corrupted inode contents [ 220.271849][T10036] EXT4-fs error (device loop3): ext4_dirty_inode:6517: inode #2: comm syz.3.2222: mark_inode_dirty error [ 220.514204][T10050] loop0: detected capacity change from 0 to 1024 [ 220.528497][T10057] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2231'. [ 220.710965][T10068] loop5: detected capacity change from 0 to 764 [ 220.721178][T10068] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 220.844574][T10073] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2237'. [ 220.907250][T10081] loop1: detected capacity change from 0 to 512 [ 220.922409][T10081] EXT4-fs error (device loop1): ext4_expand_extra_isize_ea:2803: inode #11: comm syz.1.2239: corrupted xattr block 95: invalid header [ 220.956508][T10081] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2853: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 220.971412][T10081] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.2239: bg 0: block 7: invalid block bitmap [ 220.986631][T10081] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 220.997129][T10081] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2967: inode #11: comm syz.1.2239: corrupted xattr block 95: invalid header [ 221.012445][T10081] EXT4-fs warning (device loop1): ext4_evict_inode:274: xattr delete (err -117) [ 221.023734][T10081] EXT4-fs (loop1): 1 orphan inode deleted [ 221.544294][T10092] loop4: detected capacity change from 0 to 512 [ 221.650389][T10098] loop0: detected capacity change from 0 to 256 [ 221.728498][T10100] loop4: detected capacity change from 0 to 512 [ 221.868969][T10097] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #2: comm syz.4.2243: corrupted inode contents [ 221.903765][ T29] kauditd_printk_skb: 506 callbacks suppressed [ 221.903815][ T29] audit: type=1326 audit(212.008:10725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10096 comm="syz.4.2243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e7066f6c9 code=0x7ffc0000 [ 221.937191][ T29] audit: type=1326 audit(212.008:10726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10096 comm="syz.4.2243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e7066f6c9 code=0x7ffc0000 [ 221.962895][ T29] audit: type=1326 audit(212.017:10727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10096 comm="syz.4.2243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8e7066f6c9 code=0x7ffc0000 [ 221.966755][T10097] EXT4-fs error (device loop4): ext4_dirty_inode:6517: inode #2: comm syz.4.2243: mark_inode_dirty error [ 221.989333][ T29] audit: type=1326 audit(212.017:10728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10096 comm="syz.4.2243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e7066f6c9 code=0x7ffc0000 [ 221.989470][ T29] audit: type=1326 audit(212.017:10729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10096 comm="syz.4.2243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e7066f6c9 code=0x7ffc0000 [ 221.989509][ T29] audit: type=1326 audit(212.017:10730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10096 comm="syz.4.2243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8e7066f6c9 code=0x7ffc0000 [ 222.013545][T10104] loop5: detected capacity change from 0 to 512 [ 222.026074][ T29] audit: type=1326 audit(212.026:10731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10096 comm="syz.4.2243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e7066f6c9 code=0x7ffc0000 [ 222.076984][T10104] ext4: Unknown parameter 'åÅÕ ƒºæµM|±5]oJ‚Eÿ¤™}©ÇzôÀË—ü¥…ìkõƒQÕx¾' [ 222.080828][ T29] audit: type=1326 audit(212.026:10732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10096 comm="syz.4.2243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e7066f6c9 code=0x7ffc0000 [ 222.138727][ T29] audit: type=1326 audit(212.026:10733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10096 comm="syz.4.2243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8e7066f6c9 code=0x7ffc0000 [ 222.138918][T10097] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #2: comm syz.4.2243: corrupted inode contents [ 222.163655][ T29] audit: type=1326 audit(212.036:10734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10096 comm="syz.4.2243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e7066f6c9 code=0x7ffc0000 [ 222.237142][T10099] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #2: comm syz.4.2243: corrupted inode contents [ 222.258168][T10104] bond9: entered promiscuous mode [ 222.283461][T10099] EXT4-fs error (device loop4): ext4_dirty_inode:6517: inode #2: comm syz.4.2243: mark_inode_dirty error [ 222.296402][T10109] 9pnet_fd: Insufficient options for proto=fd [ 222.349390][T10099] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #2: comm syz.4.2243: corrupted inode contents [ 222.406377][T10114] loop5: detected capacity change from 0 to 764 [ 222.425277][T10115] loop0: detected capacity change from 0 to 764 [ 222.435173][T10099] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #2: comm syz.4.2243: mark_inode_dirty error [ 222.451208][T10114] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 222.464490][T10099] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #2: comm syz.4.2243: corrupted inode contents [ 222.477396][T10115] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 222.547171][T10099] EXT4-fs error (device loop4): ext4_dirty_inode:6517: inode #2: comm syz.4.2243: mark_inode_dirty error [ 222.636919][T10124] loop5: detected capacity change from 0 to 512 [ 222.649633][T10124] ext4: Unknown parameter 'åÅÕ ƒºæµM|±5]oJ‚Eÿ¤™}©ÇzôÀË—ü¥…ìkõƒQÕx¾' [ 222.694999][T10124] bond10: entered promiscuous mode [ 222.731571][T10130] siw: device registration error -23 [ 222.749107][T10128] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2255'. [ 222.973713][T10142] loop1: detected capacity change from 0 to 1024 [ 222.983759][T10142] EXT4-fs: Ignoring removed i_version option [ 222.990991][T10142] EXT4-fs: Ignoring removed nobh option [ 223.501173][T10149] SELinux: policydb magic number 0xf2539a25 does not match expected magic number 0xf97cff8c [ 223.521851][T10148] loop0: detected capacity change from 0 to 1024 [ 223.529534][T10149] SELinux: failed to load policy [ 223.536303][T10148] EXT4-fs: Ignoring removed i_version option [ 223.560877][T10148] EXT4-fs: Ignoring removed nobh option [ 223.653168][T10155] loop0: detected capacity change from 0 to 764 [ 223.686188][T10155] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 223.699943][T10161] RDS: rds_bind could not find a transport for ::ffff:100.1.0.254, load rds_tcp or rds_rdma? [ 223.767922][T10159] loop3: detected capacity change from 0 to 512 [ 223.865213][T10159] netlink: 'syz.3.2264': attribute type 1 has an invalid length. [ 223.874022][T10159] netlink: 'syz.3.2264': attribute type 2 has an invalid length. [ 223.882452][T10159] netlink: 252 bytes leftover after parsing attributes in process `syz.3.2264'. [ 223.892439][T10159] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.920399][T10170] loop0: detected capacity change from 0 to 512 [ 223.930531][T10170] ext4: Unknown parameter 'åÅÕ ƒºæµM|±5]oJ‚Eÿ¤™}©ÇzôÀË—ü¥…ìkõƒQÕx¾' [ 223.958342][T10172] loop1: detected capacity change from 0 to 256 [ 224.009477][T10159] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #2: comm syz.3.2264: corrupted inode contents [ 224.098362][T10170] bond6: entered promiscuous mode [ 224.166651][T10177] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2269'. [ 224.190845][T10159] EXT4-fs error (device loop3): ext4_dirty_inode:6517: inode #2: comm syz.3.2264: mark_inode_dirty error [ 224.300680][T10184] loop0: detected capacity change from 0 to 764 [ 224.310917][T10159] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #2: comm syz.3.2264: corrupted inode contents [ 224.328635][T10184] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 224.329081][T10179] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #2: comm syz.3.2264: corrupted inode contents [ 224.350261][T10185] loop5: detected capacity change from 0 to 1024 [ 224.357842][T10185] EXT4-fs: Ignoring removed i_version option [ 224.368876][T10185] EXT4-fs: Ignoring removed nobh option [ 224.383928][T10179] EXT4-fs error (device loop3): ext4_dirty_inode:6517: inode #2: comm syz.3.2264: mark_inode_dirty error [ 224.396429][T10179] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #2: comm syz.3.2264: corrupted inode contents [ 224.409982][T10179] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #2: comm syz.3.2264: mark_inode_dirty error [ 224.432867][T10179] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #2: comm syz.3.2264: corrupted inode contents [ 224.450191][T10179] EXT4-fs error (device loop3): ext4_dirty_inode:6517: inode #2: comm syz.3.2264: mark_inode_dirty error [ 224.680232][T10202] loop0: detected capacity change from 0 to 256 [ 225.540248][T10214] loop0: detected capacity change from 0 to 512 [ 225.548895][T10214] ext4: Unknown parameter 'åÅÕ ƒºæµM|±5]oJ‚Eÿ¤™}©ÇzôÀË—ü¥…ìkõƒQÕx¾' [ 225.602716][T10220] loop4: detected capacity change from 0 to 1024 [ 225.619745][T10214] bond7: entered promiscuous mode [ 225.630196][T10220] EXT4-fs: Ignoring removed i_version option [ 225.637675][T10220] EXT4-fs: Ignoring removed nobh option [ 225.695123][T10227] loop5: detected capacity change from 0 to 512 [ 225.813865][T10232] loop1: detected capacity change from 0 to 764 [ 225.876637][T10232] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 225.904702][T10227] netlink: 'syz.5.2286': attribute type 1 has an invalid length. [ 225.912927][T10227] netlink: 'syz.5.2286': attribute type 2 has an invalid length. [ 225.921503][T10227] netlink: 252 bytes leftover after parsing attributes in process `syz.5.2286'. [ 225.931148][T10227] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.981181][T10236] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2287'. [ 226.057461][T10244] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #2: comm syz.5.2286: corrupted inode contents [ 226.073263][T10241] FAULT_INJECTION: forcing a failure. [ 226.073263][T10241] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 226.087729][T10241] CPU: 1 UID: 0 PID: 10241 Comm: syz.0.2291 Not tainted syzkaller #0 PREEMPT(voluntary) [ 226.087755][T10241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 226.087769][T10241] Call Trace: [ 226.087775][T10241] [ 226.087782][T10241] __dump_stack+0x1d/0x30 [ 226.087812][T10241] dump_stack_lvl+0xe8/0x140 [ 226.087912][T10241] dump_stack+0x15/0x1b [ 226.087928][T10241] should_fail_ex+0x265/0x280 [ 226.087965][T10241] should_fail+0xb/0x20 [ 226.087981][T10241] should_fail_usercopy+0x1a/0x20 [ 226.088014][T10241] _copy_from_user+0x1c/0xb0 [ 226.088035][T10241] kstrtouint_from_user+0x69/0xf0 [ 226.088052][T10241] ? 0xffffffff81000000 [ 226.088063][T10241] ? selinux_file_permission+0x1e4/0x320 [ 226.088149][T10241] proc_fail_nth_write+0x50/0x160 [ 226.088249][T10241] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 226.088279][T10241] vfs_write+0x269/0x960 [ 226.088363][T10241] ? vfs_read+0x4e6/0x770 [ 226.088386][T10241] ? __rcu_read_unlock+0x4f/0x70 [ 226.088412][T10241] ? __fget_files+0x184/0x1c0 [ 226.088441][T10241] ksys_write+0xda/0x1a0 [ 226.088499][T10241] __x64_sys_write+0x40/0x50 [ 226.088518][T10241] x64_sys_call+0x2802/0x3000 [ 226.088612][T10241] do_syscall_64+0xd2/0x200 [ 226.088632][T10241] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 226.088660][T10241] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 226.088689][T10241] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.088722][T10241] RIP: 0033:0x7f7d1d60e17f [ 226.088736][T10241] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 226.088754][T10241] RSP: 002b:00007f7d1c077030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 226.088808][T10241] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f7d1d60e17f [ 226.088818][T10241] RDX: 0000000000000001 RSI: 00007f7d1c0770a0 RDI: 0000000000000006 [ 226.088828][T10241] RBP: 00007f7d1c077090 R08: 0000000000000000 R09: 0000000000000000 [ 226.088840][T10241] R10: 0000000000000082 R11: 0000000000000293 R12: 0000000000000001 [ 226.088864][T10241] R13: 00007f7d1d866038 R14: 00007f7d1d865fa0 R15: 00007ffd6017fde8 [ 226.088884][T10241] [ 226.123573][T10244] EXT4-fs error (device loop5): ext4_dirty_inode:6517: inode #2: comm syz.5.2286: mark_inode_dirty error [ 226.338695][T10252] loop4: detected capacity change from 0 to 128 [ 226.366939][T10244] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #2: comm syz.5.2286: corrupted inode contents [ 226.411963][T10227] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #2: comm syz.5.2286: corrupted inode contents [ 226.428270][T10227] EXT4-fs error (device loop5): ext4_dirty_inode:6517: inode #2: comm syz.5.2286: mark_inode_dirty error [ 226.440712][T10227] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #2: comm syz.5.2286: corrupted inode contents [ 226.454103][T10227] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #2: comm syz.5.2286: mark_inode_dirty error [ 226.466032][T10227] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #2: comm syz.5.2286: corrupted inode contents [ 226.478272][T10227] EXT4-fs error (device loop5): ext4_dirty_inode:6517: inode #2: comm syz.5.2286: mark_inode_dirty error [ 226.552505][T10254] loop3: detected capacity change from 0 to 256 [ 226.666693][T10256] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2296'. [ 226.922617][T10264] loop4: detected capacity change from 0 to 512 [ 226.930729][T10264] ext4: Unknown parameter 'åÅÕ ƒºæµM|±5]oJ‚Eÿ¤™}©ÇzôÀË—ü¥…ìkõƒQÕx¾' [ 226.988933][T10270] loop0: detected capacity change from 0 to 1024 [ 226.991601][T10264] bond7: entered promiscuous mode [ 226.999206][T10271] loop1: detected capacity change from 0 to 764 [ 227.002467][T10270] EXT4-fs: Ignoring removed i_version option [ 227.025905][T10270] EXT4-fs: Ignoring removed nobh option [ 227.097791][T10271] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 227.099374][T10270] EXT4-fs mount: 44 callbacks suppressed [ 227.099388][T10270] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 227.131852][T10278] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2303'. [ 227.163625][T10278] lo speed is unknown, defaulting to 1000 [ 227.208701][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.258310][T10290] RDS: rds_bind could not find a transport for ::ffff:100.1.0.254, load rds_tcp or rds_rdma? [ 227.273945][T10288] siw: device registration error -23 [ 227.310204][T10296] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2309'. [ 227.332463][ T29] kauditd_printk_skb: 882 callbacks suppressed [ 227.332556][ T29] audit: type=1326 audit(217.162:11617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10281 comm="syz.3.2304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7fcecf38f6c9 code=0x7ffc0000 [ 227.363670][T10298] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2310'. [ 227.806359][T10307] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2312'. [ 227.946930][T10312] loop0: detected capacity change from 0 to 512 [ 228.075455][T10312] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 228.113718][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.233951][T10321] loop0: detected capacity change from 0 to 1024 [ 228.241323][T10321] EXT4-fs: Ignoring removed i_version option [ 228.252176][ T29] audit: type=1326 audit(218.003:11618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10320 comm="syz.0.2316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d1d60f6c9 code=0x7ffc0000 [ 228.275543][ T29] audit: type=1326 audit(218.003:11619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10320 comm="syz.0.2316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f7d1d60f6c9 code=0x7ffc0000 [ 228.290832][T10321] EXT4-fs: Ignoring removed nobh option [ 228.299292][ T29] audit: type=1326 audit(218.003:11620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10320 comm="syz.0.2316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d1d60f6c9 code=0x7ffc0000 [ 228.328197][ T29] audit: type=1326 audit(218.003:11621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10320 comm="syz.0.2316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f7d1d60f6c9 code=0x7ffc0000 [ 228.351546][ T29] audit: type=1326 audit(218.003:11622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10320 comm="syz.0.2316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d1d60f6c9 code=0x7ffc0000 [ 228.375950][ T29] audit: type=1326 audit(218.003:11623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10320 comm="syz.0.2316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f7d1d60f6c9 code=0x7ffc0000 [ 228.399496][ T29] audit: type=1326 audit(218.003:11624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10320 comm="syz.0.2316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f7d1d60f703 code=0x7ffc0000 [ 228.423614][ T29] audit: type=1326 audit(218.003:11625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10320 comm="syz.0.2316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f7d1d60e17f code=0x7ffc0000 [ 228.448068][ T29] audit: type=1326 audit(218.003:11626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10320 comm="syz.0.2316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f7d1d60f757 code=0x7ffc0000 [ 228.532496][T10330] loop4: detected capacity change from 0 to 256 [ 228.577383][T10329] RDS: rds_bind could not find a transport for ::ffff:100.1.0.254, load rds_tcp or rds_rdma? [ 228.685366][T10321] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 228.770966][T10338] loop5: detected capacity change from 0 to 512 [ 228.838294][T10338] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 228.852163][T10339] loop3: detected capacity change from 0 to 1024 [ 228.859925][T10339] EXT4-fs: Ignoring removed i_version option [ 228.885399][T10339] EXT4-fs: Ignoring removed nobh option [ 228.914500][ T4630] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.925696][T10339] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 228.942045][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.075889][T10339] SELinux: failed to load policy [ 229.092948][T10353] loop4: detected capacity change from 0 to 512 [ 229.115175][ T3325] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.128007][T10353] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 229.152157][T10358] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2327'. [ 229.162376][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.182869][T10360] loop0: detected capacity change from 0 to 512 [ 229.194515][T10360] ext4: Unknown parameter 'åÅÕ ƒºæµM|±5]oJ‚Eÿ¤™}©ÇzôÀË—ü¥…ìkõƒQÕx¾' [ 229.607199][T10373] RDS: rds_bind could not find a transport for ::ffff:100.1.0.254, load rds_tcp or rds_rdma? [ 229.684619][T10379] loop0: detected capacity change from 0 to 1024 [ 229.691869][T10379] EXT4-fs: Ignoring removed i_version option [ 229.698167][T10379] EXT4-fs: Ignoring removed nobh option [ 229.712907][T10379] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 229.747259][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.890630][T10387] loop1: detected capacity change from 0 to 512 [ 229.905428][T10387] EXT4-fs error (device loop1): ext4_expand_extra_isize_ea:2803: inode #11: comm syz.1.2338: corrupted xattr block 95: invalid header [ 229.935765][T10387] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.2338: bg 0: block 7: invalid block bitmap [ 229.949417][T10387] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 229.958904][T10387] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2967: inode #11: comm syz.1.2338: corrupted xattr block 95: invalid header [ 229.973130][T10387] EXT4-fs warning (device loop1): ext4_evict_inode:274: xattr delete (err -117) [ 229.986451][T10387] EXT4-fs (loop1): 1 orphan inode deleted [ 229.997138][T10392] loop0: detected capacity change from 0 to 256 [ 230.033824][T10391] loop5: detected capacity change from 0 to 1024 [ 230.042017][T10387] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 230.059057][T10391] EXT4-fs: Ignoring removed i_version option [ 230.108032][T10391] EXT4-fs: Ignoring removed nobh option [ 230.249395][T10394] loop3: detected capacity change from 0 to 512 [ 230.301025][T10391] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 230.332227][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.378629][T10394] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 230.525244][T10410] loop1: detected capacity change from 0 to 1024 [ 230.525522][ T3325] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.533790][T10410] EXT4-fs: Ignoring removed bh option [ 230.548380][T10410] EXT4-fs: inline encryption not supported [ 230.557146][T10410] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 230.569011][T10410] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 230.589433][T10410] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 2: comm syz.1.2343: lblock 2 mapped to illegal pblock 2 (length 1) [ 230.604644][T10410] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 48: comm syz.1.2343: lblock 0 mapped to illegal pblock 48 (length 1) [ 230.619217][T10414] RDS: rds_bind could not find a transport for ::ffff:100.1.0.254, load rds_tcp or rds_rdma? [ 230.626717][T10391] SELinux: failed to load policy [ 230.635579][T10410] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.2343: Failed to acquire dquot type 0 [ 230.647397][T10410] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 230.657436][T10410] EXT4-fs error (device loop1): ext4_evict_inode:254: inode #11: comm syz.1.2343: mark_inode_dirty error [ 230.670730][T10416] loop4: detected capacity change from 0 to 128 [ 230.684008][T10410] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 230.684613][T10416] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 230.731192][T10410] EXT4-fs (loop1): 1 orphan inode deleted [ 230.738303][T10410] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 230.751836][ T31] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 230.769864][ T31] EXT4-fs error (device loop1): ext4_release_dquot:6981: comm kworker/u8:1: Failed to release dquot type 0 [ 230.787016][ T4630] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.788208][T10410] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.807354][T10410] EXT4-fs error (device loop1): __ext4_get_inode_loc:4832: comm syz.1.2343: Invalid inode table block 1 in block_group 0 [ 230.820375][T10410] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 230.831124][T10410] EXT4-fs error (device loop1): ext4_quota_off:7229: inode #3: comm syz.1.2343: mark_inode_dirty error [ 230.851936][T10423] loop5: detected capacity change from 0 to 512 [ 230.865506][T10423] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 230.889622][T10423] netlink: 'syz.5.2347': attribute type 1 has an invalid length. [ 230.898554][T10423] netlink: 'syz.5.2347': attribute type 2 has an invalid length. [ 230.907943][T10423] netlink: 252 bytes leftover after parsing attributes in process `syz.5.2347'. [ 230.918836][T10423] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.932023][T10423] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #2: comm syz.5.2347: corrupted inode contents [ 230.967471][T10423] EXT4-fs error (device loop5): ext4_dirty_inode:6517: inode #2: comm syz.5.2347: mark_inode_dirty error [ 230.983782][T10423] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #2: comm syz.5.2347: corrupted inode contents [ 230.999354][T10432] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2350'. [ 231.013940][T10433] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #2: comm syz.5.2347: corrupted inode contents [ 231.027368][T10433] EXT4-fs error (device loop5): ext4_dirty_inode:6517: inode #2: comm syz.5.2347: mark_inode_dirty error [ 231.039404][T10433] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #2: comm syz.5.2347: corrupted inode contents [ 231.053034][T10433] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #2: comm syz.5.2347: mark_inode_dirty error [ 231.065550][T10433] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #2: comm syz.5.2347: corrupted inode contents [ 231.077864][T10433] EXT4-fs error (device loop5): ext4_dirty_inode:6517: inode #2: comm syz.5.2347: mark_inode_dirty error [ 231.108495][ T4630] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.388317][ T3315] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 231.469247][T10444] loop4: detected capacity change from 0 to 512 [ 231.504176][T10444] EXT4-fs error (device loop4): ext4_expand_extra_isize_ea:2803: inode #11: comm syz.4.2353: corrupted xattr block 95: invalid header [ 231.521240][T10444] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.2353: bg 0: block 7: invalid block bitmap [ 231.535157][T10444] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 231.549096][T10444] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2967: inode #11: comm syz.4.2353: corrupted xattr block 95: invalid header [ 231.565676][T10444] EXT4-fs warning (device loop4): ext4_evict_inode:274: xattr delete (err -117) [ 231.575253][T10444] EXT4-fs (loop4): 1 orphan inode deleted [ 231.582946][T10444] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 231.618462][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.786530][T10455] loop4: detected capacity change from 0 to 512 [ 231.794716][T10455] ext4: Unknown parameter 'åÅÕ ƒºæµM|±5]oJ‚Eÿ¤™}©ÇzôÀË—ü¥…ìkõƒQÕx¾' [ 231.939743][T10463] loop1: detected capacity change from 0 to 1024 [ 231.948123][T10463] EXT4-fs: Ignoring removed i_version option [ 231.954816][T10463] EXT4-fs: Ignoring removed nobh option [ 231.966920][T10463] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 232.003430][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.064874][T10459] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 232.073803][T10459] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 232.598495][T10491] loop4: detected capacity change from 0 to 128 [ 232.622766][T10491] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 232.642336][T10494] netlink: 'syz.0.2364': attribute type 10 has an invalid length. [ 232.653360][T10494] team0: Port device dummy0 added [ 232.660106][T10494] netlink: 'syz.0.2364': attribute type 10 has an invalid length. [ 232.668383][T10494] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 232.679075][T10494] team0: Failed to send options change via netlink (err -105) [ 232.686997][T10494] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 232.696398][T10494] team0: Port device dummy0 removed [ 232.706145][ T29] kauditd_printk_skb: 540 callbacks suppressed [ 232.706160][ T29] audit: type=1326 audit(222.194:12164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10487 comm="syz.4.2363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=271 compat=0 ip=0x7f8e7066f6c9 code=0x7ffc0000 [ 232.712909][T10494] loop0: detected capacity change from 0 to 1024 [ 232.739423][ T29] audit: type=1326 audit(222.194:12165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10487 comm="syz.4.2363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e7066f6c9 code=0x7ffc0000 [ 232.767862][ T29] audit: type=1326 audit(222.194:12166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10487 comm="syz.4.2363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e7066f6c9 code=0x7ffc0000 [ 232.784105][T10494] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 232.815719][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.881043][T10501] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2366'. [ 232.890172][T10505] loop3: detected capacity change from 0 to 512 [ 232.918041][T10505] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 232.946198][ T3325] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.046328][ T29] audit: type=1326 audit(222.512:12167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10518 comm="syz.0.2372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d1d60f6c9 code=0x7ffc0000 [ 233.069864][T10519] loop0: detected capacity change from 0 to 1024 [ 233.078679][T10519] EXT4-fs: Ignoring removed i_version option [ 233.090350][ T29] audit: type=1326 audit(222.512:12168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10518 comm="syz.0.2372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f7d1d60f6c9 code=0x7ffc0000 [ 233.107247][T10519] EXT4-fs: Ignoring removed nobh option [ 233.114468][ T29] audit: type=1326 audit(222.512:12169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10518 comm="syz.0.2372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d1d60f6c9 code=0x7ffc0000 [ 233.144319][ T29] audit: type=1326 audit(222.512:12170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10518 comm="syz.0.2372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f7d1d60f6c9 code=0x7ffc0000 [ 233.167434][ T29] audit: type=1326 audit(222.512:12171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10518 comm="syz.0.2372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d1d60f6c9 code=0x7ffc0000 [ 233.172379][T10519] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 233.191523][ T29] audit: type=1326 audit(222.512:12172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10518 comm="syz.0.2372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f7d1d60f6c9 code=0x7ffc0000 [ 233.227995][ T29] audit: type=1326 audit(222.512:12173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10518 comm="syz.0.2372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f7d1d60f703 code=0x7ffc0000 [ 233.287045][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.327603][ T3315] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 233.464946][T10527] loop0: detected capacity change from 0 to 512 [ 233.486280][T10527] EXT4-fs (loop0): orphan cleanup on readonly fs [ 233.493499][T10527] EXT4-fs warning (device loop0): ext4_xattr_inode_get:560: inode #11: comm syz.0.2373: EA inode hash validation failed [ 233.506854][T10527] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 233.521088][T10527] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #15: comm syz.0.2373: corrupted inode contents [ 233.534165][T10527] EXT4-fs error (device loop0): ext4_dirty_inode:6517: inode #15: comm syz.0.2373: mark_inode_dirty error [ 233.546400][T10527] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #15: comm syz.0.2373: corrupted inode contents [ 233.559050][T10527] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2996: inode #15: comm syz.0.2373: mark_inode_dirty error [ 233.572848][T10527] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2999: inode #15: comm syz.0.2373: mark inode dirty (error -117) [ 233.586341][T10527] EXT4-fs warning (device loop0): ext4_evict_inode:274: xattr delete (err -117) [ 233.598805][T10527] EXT4-fs (loop0): 1 orphan inode deleted [ 233.605714][T10527] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 233.893128][T10534] loop1: detected capacity change from 0 to 512 [ 233.913328][T10534] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 233.940095][T10534] netlink: 'syz.1.2375': attribute type 1 has an invalid length. [ 233.948614][T10534] netlink: 'syz.1.2375': attribute type 2 has an invalid length. [ 233.956657][T10534] netlink: 252 bytes leftover after parsing attributes in process `syz.1.2375'. [ 233.966410][T10534] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.976086][T10534] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #2: comm syz.1.2375: corrupted inode contents [ 233.989539][T10534] EXT4-fs error (device loop1): ext4_dirty_inode:6517: inode #2: comm syz.1.2375: mark_inode_dirty error [ 234.001860][T10534] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #2: comm syz.1.2375: corrupted inode contents [ 234.016865][T10534] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #2: comm syz.1.2375: corrupted inode contents [ 234.029103][T10534] EXT4-fs error (device loop1): ext4_dirty_inode:6517: inode #2: comm syz.1.2375: mark_inode_dirty error [ 234.041110][T10534] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #2: comm syz.1.2375: corrupted inode contents [ 234.053794][T10534] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #2: comm syz.1.2375: mark_inode_dirty error [ 234.068091][T10534] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #2: comm syz.1.2375: corrupted inode contents [ 234.080633][T10534] EXT4-fs error (device loop1): ext4_dirty_inode:6517: inode #2: comm syz.1.2375: mark_inode_dirty error [ 234.111964][T10541] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2377'. [ 234.134723][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.198397][T10548] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2379'. [ 234.240477][T10552] loop1: detected capacity change from 0 to 512 [ 234.260068][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.272991][T10552] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 234.303477][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.306713][T10558] veth1_macvtap: left promiscuous mode [ 234.319282][T10558] macsec0: entered promiscuous mode [ 234.990750][T10572] loop3: detected capacity change from 0 to 128 [ 235.109191][T10572] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 235.382278][T10584] loop1: detected capacity change from 0 to 512 [ 235.406864][T10582] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2390'. [ 235.426846][T10588] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2391'. [ 235.453013][T10584] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 235.490989][T10584] netlink: 'syz.1.2389': attribute type 1 has an invalid length. [ 235.500084][T10584] netlink: 'syz.1.2389': attribute type 2 has an invalid length. [ 235.508380][T10584] netlink: 252 bytes leftover after parsing attributes in process `syz.1.2389'. [ 235.518725][T10584] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.527998][T10584] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #2: comm syz.1.2389: corrupted inode contents [ 235.541848][T10584] EXT4-fs error (device loop1): ext4_dirty_inode:6517: inode #2: comm syz.1.2389: mark_inode_dirty error [ 235.554395][T10584] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #2: comm syz.1.2389: corrupted inode contents [ 235.572546][ T3325] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 235.619163][T10597] RDS: rds_bind could not find a transport for ::ffff:100.1.0.254, load rds_tcp or rds_rdma? [ 235.645801][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.674392][T10600] loop3: detected capacity change from 0 to 512 [ 235.740665][T10602] loop4: detected capacity change from 0 to 764 [ 235.748882][T10602] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 235.811836][T10605] loop0: detected capacity change from 0 to 764 [ 235.831824][T10605] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 235.865303][T10600] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 236.027716][T10616] RDS: rds_bind could not find a transport for ::ffff:100.1.0.254, load rds_tcp or rds_rdma? [ 236.065618][ T3325] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.257991][T10614] 9pnet_fd: Insufficient options for proto=fd [ 236.487525][T10623] siw: device registration error -23 [ 236.569304][T10628] veth1_to_bond: entered allmulticast mode [ 236.576582][T10628] veth1_to_bond: left allmulticast mode [ 236.893721][T10637] RDS: rds_bind could not find a transport for ::ffff:100.1.0.254, load rds_tcp or rds_rdma? [ 237.209561][T10651] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2409'. [ 237.433852][T10659] loop3: detected capacity change from 0 to 128 [ 237.474079][T10659] FAT-fs (loop3): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 237.683548][ T6021] FAT-fs (loop3): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 237.700241][ T6021] bio_check_eod: 30 callbacks suppressed [ 237.700256][ T6021] kworker/u8:9: attempt to access beyond end of device [ 237.700256][ T6021] loop3: rw=1, sector=137, nr_sectors = 8 limit=128 [ 237.784903][ T6021] kworker/u8:9: attempt to access beyond end of device [ 237.784903][ T6021] loop3: rw=1, sector=153, nr_sectors = 8 limit=128 [ 237.823072][ T6021] kworker/u8:9: attempt to access beyond end of device [ 237.823072][ T6021] loop3: rw=1, sector=169, nr_sectors = 8 limit=128 [ 237.844868][ T6021] kworker/u8:9: attempt to access beyond end of device [ 237.844868][ T6021] loop3: rw=1, sector=185, nr_sectors = 8 limit=128 [ 237.887624][ T6021] kworker/u8:9: attempt to access beyond end of device [ 237.887624][ T6021] loop3: rw=1, sector=201, nr_sectors = 8 limit=128 [ 237.909089][ T6021] kworker/u8:9: attempt to access beyond end of device [ 237.909089][ T6021] loop3: rw=1, sector=217, nr_sectors = 8 limit=128 [ 238.026480][ T6021] kworker/u8:9: attempt to access beyond end of device [ 238.026480][ T6021] loop3: rw=1, sector=233, nr_sectors = 8 limit=128 [ 238.041282][ T6021] kworker/u8:9: attempt to access beyond end of device [ 238.041282][ T6021] loop3: rw=1, sector=249, nr_sectors = 8 limit=128 [ 238.067027][T10675] RDS: rds_bind could not find a transport for ::ffff:100.1.0.254, load rds_tcp or rds_rdma? [ 238.078929][ T6021] kworker/u8:9: attempt to access beyond end of device [ 238.078929][ T6021] loop3: rw=1, sector=265, nr_sectors = 8 limit=128 [ 238.121251][ T6021] kworker/u8:9: attempt to access beyond end of device [ 238.121251][ T6021] loop3: rw=1, sector=281, nr_sectors = 8 limit=128 [ 238.276972][T10678] loop0: detected capacity change from 0 to 764 [ 238.350583][T10678] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 238.426491][ T29] kauditd_printk_skb: 125 callbacks suppressed [ 238.426508][ T29] audit: type=1326 audit(227.535:12299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10679 comm="syz.3.2416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcecf38f6c9 code=0x7ffc0000 [ 238.457307][ T29] audit: type=1326 audit(227.535:12300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10679 comm="syz.3.2416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcecf38f6c9 code=0x7ffc0000 [ 238.481366][ T29] audit: type=1326 audit(227.535:12301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10679 comm="syz.3.2416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7fcecf38f6c9 code=0x7ffc0000 [ 238.512557][T10680] loop3: detected capacity change from 0 to 1024 [ 238.530985][T10680] EXT4-fs: Ignoring removed i_version option [ 238.537781][T10680] EXT4-fs: Ignoring removed nobh option [ 238.581879][ T29] audit: type=1326 audit(227.535:12302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10679 comm="syz.3.2416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcecf38f6c9 code=0x7ffc0000 [ 238.605054][ T29] audit: type=1326 audit(227.554:12303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10679 comm="syz.3.2416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcecf38f6c9 code=0x7ffc0000 [ 238.623678][T10682] loop0: detected capacity change from 0 to 764 [ 238.628352][ T29] audit: type=1326 audit(227.629:12304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10679 comm="syz.3.2416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fcecf38f6c9 code=0x7ffc0000 [ 238.657891][ T29] audit: type=1326 audit(227.629:12305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10679 comm="syz.3.2416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcecf38f6c9 code=0x7ffc0000 [ 238.680977][ T29] audit: type=1326 audit(227.629:12306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10679 comm="syz.3.2416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fcecf38f6c9 code=0x7ffc0000 [ 238.704573][ T29] audit: type=1326 audit(227.629:12307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10679 comm="syz.3.2416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fcecf38f703 code=0x7ffc0000 [ 238.727387][ T29] audit: type=1326 audit(227.629:12308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10679 comm="syz.3.2416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fcecf38e17f code=0x7ffc0000 [ 238.766173][T10682] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 238.786099][T10680] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 238.873989][T10690] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 238.944504][T10695] loop4: detected capacity change from 0 to 512 [ 238.951629][T10695] ext4: Unknown parameter 'åÅÕ ƒºæµM|±5]oJ‚Eÿ¤™}©ÇzôÀË—ü¥…ìkõƒQÕx¾' [ 239.030368][T10696] SELinux: failed to load policy [ 239.098711][ T3325] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.114092][T10700] veth1_to_bond: entered allmulticast mode [ 239.123357][T10700] veth1_to_bond: left allmulticast mode [ 239.140095][T10702] loop4: detected capacity change from 0 to 512 [ 239.180685][T10707] loop3: detected capacity change from 0 to 512 [ 239.242240][T10707] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 239.243593][T10702] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 239.273071][T10707] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #2: comm syz.3.2428: corrupted inode contents [ 239.359768][T10718] loop1: detected capacity change from 0 to 256 [ 240.190215][T10707] EXT4-fs error (device loop3): ext4_dirty_inode:6517: inode #2: comm syz.3.2428: mark_inode_dirty error [ 240.209740][T10707] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #2: comm syz.3.2428: corrupted inode contents [ 240.247038][T10702] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #2: comm syz.4.2429: corrupted inode contents [ 240.275163][T10702] EXT4-fs error (device loop4): ext4_dirty_inode:6517: inode #2: comm syz.4.2429: mark_inode_dirty error [ 240.289628][T10724] RDS: rds_bind could not find a transport for ::ffff:100.1.0.254, load rds_tcp or rds_rdma? [ 240.314964][T10726] loop5: detected capacity change from 0 to 512 [ 240.322128][T10702] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #2: comm syz.4.2429: corrupted inode contents [ 240.374231][T10726] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 240.389713][T10729] 9pnet_fd: Insufficient options for proto=fd [ 240.399734][T10726] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #2: comm syz.5.2435: corrupted inode contents [ 240.415236][T10726] EXT4-fs error (device loop5): ext4_dirty_inode:6517: inode #2: comm syz.5.2435: mark_inode_dirty error [ 240.422774][ T3325] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.427715][T10726] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #2: comm syz.5.2435: corrupted inode contents [ 240.436059][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.514166][T10737] loop4: detected capacity change from 0 to 1024 [ 240.529335][ T4630] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.538528][T10737] EXT4-fs: Ignoring removed i_version option [ 240.565223][T10737] EXT4-fs: Ignoring removed nobh option [ 240.574735][T10739] loop1: detected capacity change from 0 to 512 [ 240.611867][T10737] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 240.639428][T10739] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 240.770722][T10737] SELinux: failed to load policy [ 240.789619][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.241044][T10767] loop5: detected capacity change from 0 to 256 [ 241.722771][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.939901][T10775] loop3: detected capacity change from 0 to 512 [ 241.984335][T10775] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 242.032989][T10775] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #2: comm syz.3.2449: corrupted inode contents [ 242.045599][T10775] EXT4-fs error (device loop3): ext4_dirty_inode:6517: inode #2: comm syz.3.2449: mark_inode_dirty error [ 242.057615][T10783] loop5: detected capacity change from 0 to 512 [ 242.057683][T10775] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #2: comm syz.3.2449: corrupted inode contents [ 242.092255][ T3325] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.133037][T10785] loop3: detected capacity change from 0 to 1024 [ 242.155647][T10790] loop1: detected capacity change from 0 to 128 [ 242.167240][T10789] loop4: detected capacity change from 0 to 512 [ 242.209045][T10785] EXT4-fs: Ignoring removed i_version option [ 242.215129][T10785] EXT4-fs: Ignoring removed nobh option [ 242.354715][T10789] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #2: comm syz.4.2454: corrupted inode contents [ 242.532272][T10789] EXT4-fs error (device loop4): ext4_dirty_inode:6517: inode #2: comm syz.4.2454: mark_inode_dirty error [ 242.547838][T10785] SELinux: failed to load policy [ 242.759065][T10789] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #2: comm syz.4.2454: corrupted inode contents [ 242.812319][T10805] RDS: rds_bind could not find a transport for ::ffff:100.1.0.254, load rds_tcp or rds_rdma? [ 242.855209][T10797] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #2: comm syz.4.2454: corrupted inode contents [ 242.879215][T10804] lo speed is unknown, defaulting to 1000 [ 242.901779][T10807] veth1_to_bond: entered allmulticast mode [ 242.910641][T10797] EXT4-fs error (device loop4): ext4_dirty_inode:6517: inode #2: comm syz.4.2454: mark_inode_dirty error [ 242.936625][T10807] veth1_to_bond: left allmulticast mode [ 242.976920][T10797] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #2: comm syz.4.2454: corrupted inode contents [ 243.040582][T10797] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #2: comm syz.4.2454: mark_inode_dirty error [ 243.071160][T10797] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #2: comm syz.4.2454: corrupted inode contents [ 243.099439][T10815] veth1_to_bond: entered allmulticast mode [ 243.112575][T10797] EXT4-fs error (device loop4): ext4_dirty_inode:6517: inode #2: comm syz.4.2454: mark_inode_dirty error [ 243.119258][T10815] veth1_to_bond: left allmulticast mode [ 243.220848][T10817] loop4: detected capacity change from 0 to 764 [ 243.262091][T10817] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 243.336854][T10821] loop3: detected capacity change from 0 to 512 [ 243.388689][T10821] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #2: comm syz.3.2464: corrupted inode contents [ 243.400677][T10823] loop4: detected capacity change from 0 to 512 [ 243.426234][T10821] EXT4-fs error (device loop3): ext4_dirty_inode:6517: inode #2: comm syz.3.2464: mark_inode_dirty error [ 243.494651][T10821] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #2: comm syz.3.2464: corrupted inode contents [ 243.606651][T10829] loop3: detected capacity change from 0 to 764 [ 243.664769][T10829] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 243.743592][T10833] loop3: detected capacity change from 0 to 1024 [ 243.753204][T10835] loop4: detected capacity change from 0 to 512 [ 243.769192][T10833] EXT4-fs: Ignoring removed i_version option [ 243.786472][T10833] EXT4-fs: Ignoring removed nobh option [ 243.818665][ T29] kauditd_printk_skb: 505 callbacks suppressed [ 243.818680][ T29] audit: type=1326 audit(232.586:12814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10832 comm="syz.3.2468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcecf38df10 code=0x7ffc0000 [ 243.853263][ T29] audit: type=1326 audit(232.624:12815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10832 comm="syz.3.2468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7fcecf38e417 code=0x7ffc0000 [ 243.876423][ T29] audit: type=1326 audit(232.624:12816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10832 comm="syz.3.2468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcecf38df10 code=0x7ffc0000 [ 243.899529][ T29] audit: type=1326 audit(232.624:12817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10832 comm="syz.3.2468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcecf38f6c9 code=0x7ffc0000 [ 243.922772][ T29] audit: type=1326 audit(232.624:12818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10832 comm="syz.3.2468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcecf38f6c9 code=0x7ffc0000 [ 243.946190][ T29] audit: type=1326 audit(232.642:12819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10832 comm="syz.3.2468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcecf38f6c9 code=0x7ffc0000 [ 243.969197][ T29] audit: type=1326 audit(232.642:12820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10832 comm="syz.3.2468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcecf38f6c9 code=0x7ffc0000 [ 243.992547][ T29] audit: type=1326 audit(232.642:12821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10832 comm="syz.3.2468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcecf38f6c9 code=0x7ffc0000 [ 244.015934][ T29] audit: type=1326 audit(232.642:12822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10832 comm="syz.3.2468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fcecf38f6c9 code=0x7ffc0000 [ 244.038978][ T29] audit: type=1326 audit(232.642:12823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10832 comm="syz.3.2468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fcecf38f703 code=0x7ffc0000 [ 244.148887][T10843] SELinux: failed to load policy [ 244.244798][T10849] loop3: detected capacity change from 0 to 1024 [ 244.863169][T10854] loop0: detected capacity change from 0 to 512 [ 244.907140][T10854] netlink: 'syz.0.2473': attribute type 1 has an invalid length. [ 244.915172][T10854] netlink: 'syz.0.2473': attribute type 2 has an invalid length. [ 244.922993][T10854] netlink: 252 bytes leftover after parsing attributes in process `syz.0.2473'. [ 244.932280][T10854] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.983289][T10857] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #2: comm syz.0.2473: corrupted inode contents [ 245.008858][T10857] EXT4-fs error (device loop0): ext4_dirty_inode:6517: inode #2: comm syz.0.2473: mark_inode_dirty error [ 245.070510][T10857] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #2: comm syz.0.2473: corrupted inode contents [ 245.103428][T10854] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #2: comm syz.0.2473: corrupted inode contents [ 245.118561][T10862] loop4: detected capacity change from 0 to 1024 [ 245.126931][T10854] EXT4-fs error (device loop0): ext4_dirty_inode:6517: inode #2: comm syz.0.2473: mark_inode_dirty error [ 245.141025][T10862] EXT4-fs: Ignoring removed i_version option [ 245.147346][T10862] EXT4-fs: Ignoring removed nobh option [ 245.155839][T10864] SELinux: policydb magic number 0x6c65732f does not match expected magic number 0xf97cff8c [ 245.171042][T10864] SELinux: failed to load policy [ 245.179518][T10854] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #2: comm syz.0.2473: corrupted inode contents [ 245.214462][T10854] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #2: comm syz.0.2473: mark_inode_dirty error [ 245.222732][T10866] loop1: detected capacity change from 0 to 512 [ 245.239396][T10854] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #2: comm syz.0.2473: corrupted inode contents [ 245.269793][T10870] loop3: detected capacity change from 0 to 764 [ 245.293598][T10870] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 245.322206][T10854] EXT4-fs error (device loop0): ext4_dirty_inode:6517: inode #2: comm syz.0.2473: mark_inode_dirty error [ 245.368041][T10866] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #2: comm syz.1.2477: corrupted inode contents [ 245.400891][T10866] EXT4-fs error (device loop1): ext4_dirty_inode:6517: inode #2: comm syz.1.2477: mark_inode_dirty error [ 245.415540][T10876] RDS: rds_bind could not find a transport for ::ffff:100.1.0.254, load rds_tcp or rds_rdma? [ 245.453244][T10878] netlink: 'syz.0.2480': attribute type 14 has an invalid length. [ 245.461300][T10878] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2480'. [ 245.474468][T10866] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #2: comm syz.1.2477: corrupted inode contents [ 245.494571][T10874] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2479'. [ 245.516719][T10880] loop3: detected capacity change from 0 to 1024 [ 245.538846][T10880] EXT4-fs: Ignoring removed i_version option [ 245.543749][T10878] netlink: 'syz.0.2480': attribute type 14 has an invalid length. [ 245.545321][ T8050] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 245.552898][T10878] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2480'. [ 245.579902][T10880] EXT4-fs: Ignoring removed nobh option [ 245.595479][ T8050] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 245.615277][ T8050] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 245.635014][ T8050] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 245.716659][T10886] loop1: detected capacity change from 0 to 764 [ 245.753501][T10886] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 245.880423][T10898] loop5: detected capacity change from 0 to 1024 [ 245.895520][T10898] EXT4-fs: Ignoring removed i_version option [ 245.905551][T10898] EXT4-fs: Ignoring removed nobh option [ 245.946778][T10880] SELinux: failed to load policy [ 245.990117][T10904] loop3: detected capacity change from 0 to 512 [ 246.189059][T10908] loop5: detected capacity change from 0 to 764 [ 246.415608][T10914] loop1: detected capacity change from 0 to 128 [ 246.472188][T10908] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 246.533762][T10904] netlink: 'syz.3.2490': attribute type 1 has an invalid length. [ 246.541577][T10904] netlink: 'syz.3.2490': attribute type 2 has an invalid length. [ 246.549335][T10904] netlink: 252 bytes leftover after parsing attributes in process `syz.3.2490'. [ 246.558468][T10904] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.576220][T10904] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #2: comm syz.3.2490: corrupted inode contents [ 246.609274][T10904] EXT4-fs error (device loop3): ext4_dirty_inode:6517: inode #2: comm syz.3.2490: mark_inode_dirty error [ 246.642833][T10904] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #2: comm syz.3.2490: corrupted inode contents [ 246.675424][T10921] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #2: comm syz.3.2490: corrupted inode contents [ 246.716001][T10921] EXT4-fs error (device loop3): ext4_dirty_inode:6517: inode #2: comm syz.3.2490: mark_inode_dirty error [ 246.741298][T10921] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #2: comm syz.3.2490: corrupted inode contents [ 246.768191][T10921] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #2: comm syz.3.2490: mark_inode_dirty error [ 246.819186][T10921] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #2: comm syz.3.2490: corrupted inode contents [ 246.839196][T10924] loop5: detected capacity change from 0 to 512 [ 246.859082][T10921] EXT4-fs error (device loop3): ext4_dirty_inode:6517: inode #2: comm syz.3.2490: mark_inode_dirty error [ 246.897464][T10928] loop4: detected capacity change from 0 to 512 [ 246.917850][T10928] ext4: Unknown parameter 'åÅÕ ƒºæµM|±5]oJ‚Eÿ¤™}©ÇzôÀË—ü¥…ìkõƒQÕx¾' [ 246.957313][T10928] bond8: entered promiscuous mode [ 247.016043][T10934] RDS: rds_bind could not find a transport for ::ffff:100.1.0.254, load rds_tcp or rds_rdma? [ 247.189531][T10941] loop4: detected capacity change from 0 to 1024 [ 247.230070][T10941] EXT4-fs: Ignoring removed i_version option [ 247.329360][T10941] EXT4-fs: Ignoring removed nobh option [ 247.554548][T10951] loop1: detected capacity change from 0 to 764 [ 247.571940][T10951] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 247.672410][T10955] loop4: detected capacity change from 0 to 512 [ 247.689725][T10955] EXT4-fs error (device loop4): ext4_expand_extra_isize_ea:2803: inode #11: comm syz.4.2505: corrupted xattr block 95: invalid header [ 247.704115][T10955] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2853: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 247.717600][T10955] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.2505: bg 0: block 7: invalid block bitmap [ 247.722415][T10959] loop1: detected capacity change from 0 to 512 [ 247.736697][T10955] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 247.757693][T10955] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2967: inode #11: comm syz.4.2505: corrupted xattr block 95: invalid header [ 247.776897][T10955] EXT4-fs warning (device loop4): ext4_evict_inode:274: xattr delete (err -117) [ 247.792776][T10959] netlink: 'syz.1.2507': attribute type 1 has an invalid length. [ 247.800614][T10959] netlink: 'syz.1.2507': attribute type 2 has an invalid length. [ 247.808563][T10959] netlink: 252 bytes leftover after parsing attributes in process `syz.1.2507'. [ 247.817868][T10959] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.829835][T10955] EXT4-fs (loop4): 1 orphan inode deleted [ 247.890263][T10959] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #2: comm syz.1.2507: corrupted inode contents [ 247.919281][T10964] loop5: detected capacity change from 0 to 512 [ 247.937564][T10959] EXT4-fs error (device loop1): ext4_dirty_inode:6517: inode #2: comm syz.1.2507: mark_inode_dirty error [ 247.982435][T10969] loop4: detected capacity change from 0 to 512 [ 248.000189][T10959] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #2: comm syz.1.2507: corrupted inode contents [ 248.023728][T10969] ext4: Unknown parameter 'åÅÕ ƒºæµM|±5]oJ‚Eÿ¤™}©ÇzôÀË—ü¥…ìkõƒQÕx¾' [ 248.082520][T10969] bond9: entered promiscuous mode [ 248.407906][T10986] RDS: rds_bind could not find a transport for ::ffff:100.1.0.254, load rds_tcp or rds_rdma? [ 248.561412][T10983] loop1: detected capacity change from 0 to 512 [ 248.665882][T10997] loop5: detected capacity change from 0 to 128 [ 248.667778][T10983] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #2: comm syz.1.2514: corrupted inode contents [ 248.709540][T10983] EXT4-fs error (device loop1): ext4_dirty_inode:6517: inode #2: comm syz.1.2514: mark_inode_dirty error [ 248.728671][T10983] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #2: comm syz.1.2514: corrupted inode contents [ 248.877964][T11004] loop4: detected capacity change from 0 to 764 [ 248.933897][T11004] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 248.968031][T11009] RDS: rds_bind could not find a transport for ::ffff:100.1.0.254, load rds_tcp or rds_rdma? [ 249.015550][T11012] loop3: detected capacity change from 0 to 256 [ 249.034625][T11011] bond11: entered promiscuous mode [ 249.262576][ T29] kauditd_printk_skb: 471 callbacks suppressed [ 249.262593][ T29] audit: type=1326 audit(237.675:13295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11015 comm="syz.4.2525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e7066f6c9 code=0x7ffc0000 [ 249.313293][T11016] 9pnet_fd: Insufficient options for proto=fd [ 249.376875][ T29] audit: type=1326 audit(237.703:13296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11015 comm="syz.4.2525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e7066f6c9 code=0x7ffc0000 [ 249.382543][T11020] loop0: detected capacity change from 0 to 512 [ 249.400150][ T29] audit: type=1326 audit(237.712:13297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11015 comm="syz.4.2525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8e7066f6c9 code=0x7ffc0000 [ 249.429958][ T29] audit: type=1326 audit(237.712:13298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11015 comm="syz.4.2525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e7066f6c9 code=0x7ffc0000 [ 249.453482][ T29] audit: type=1326 audit(237.712:13299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11015 comm="syz.4.2525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e7066f6c9 code=0x7ffc0000 [ 249.477536][ T29] audit: type=1326 audit(237.712:13300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11015 comm="syz.4.2525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8e7066f6c9 code=0x7ffc0000 [ 249.500799][ T29] audit: type=1326 audit(237.712:13301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11015 comm="syz.4.2525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e7066f6c9 code=0x7ffc0000 [ 249.524121][ T29] audit: type=1326 audit(237.712:13302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11015 comm="syz.4.2525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e7066f6c9 code=0x7ffc0000 [ 249.547201][ T29] audit: type=1326 audit(237.712:13303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11015 comm="syz.4.2525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8e7066f6c9 code=0x7ffc0000 [ 249.570421][ T29] audit: type=1326 audit(237.712:13304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11015 comm="syz.4.2525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e7066f6c9 code=0x7ffc0000 [ 249.623637][T11020] netlink: 'syz.0.2523': attribute type 1 has an invalid length. [ 249.631629][T11020] netlink: 'syz.0.2523': attribute type 2 has an invalid length. [ 249.639528][T11020] netlink: 252 bytes leftover after parsing attributes in process `syz.0.2523'. [ 249.648858][T11020] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.764559][T11037] loop3: detected capacity change from 0 to 512 [ 249.791924][T11037] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #2: comm syz.3.2531: corrupted inode contents [ 249.813150][T11037] EXT4-fs error (device loop3): ext4_dirty_inode:6517: inode #2: comm syz.3.2531: mark_inode_dirty error [ 249.825311][T11037] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #2: comm syz.3.2531: corrupted inode contents [ 249.916955][T11043] loop3: detected capacity change from 0 to 764 [ 249.924113][T11043] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 249.954639][T11045] siw: device registration error -23 [ 249.986174][T11047] bond7: entered promiscuous mode [ 250.243392][T11064] loop1: detected capacity change from 0 to 1024 [ 250.316101][T11066] loop4: detected capacity change from 0 to 1024 [ 250.582091][T11077] loop1: detected capacity change from 0 to 512 [ 250.681233][T11077] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #2: comm syz.1.2542: corrupted inode contents [ 250.716965][T11077] EXT4-fs error (device loop1): ext4_dirty_inode:6517: inode #2: comm syz.1.2542: mark_inode_dirty error [ 250.736649][T11077] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #2: comm syz.1.2542: corrupted inode contents [ 250.751482][T11087] loop4: detected capacity change from 0 to 512 [ 250.788039][T11087] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #2: comm syz.4.2545: corrupted inode contents [ 250.800137][T11087] EXT4-fs error (device loop4): ext4_dirty_inode:6517: inode #2: comm syz.4.2545: mark_inode_dirty error [ 250.812034][T11087] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #2: comm syz.4.2545: corrupted inode contents [ 250.889377][T11095] bond10: entered promiscuous mode [ 250.969981][T11101] IPVS: set_ctl: invalid protocol: 33 224.0.0.2:20000 [ 251.025664][T11103] loop4: detected capacity change from 0 to 1024 [ 251.035747][T11103] EXT4-fs: Ignoring removed i_version option [ 251.045182][T11103] EXT4-fs: Ignoring removed nobh option [ 251.142808][T11109] loop1: detected capacity change from 0 to 1024 [ 251.829157][T11128] bond11: entered promiscuous mode [ 252.213638][T11137] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2561'. [ 252.229228][T11140] siw: device registration error -23 [ 252.274392][T11146] netlink: 'syz.1.2564': attribute type 14 has an invalid length. [ 252.282296][T11146] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2564'. [ 252.308856][ T6021] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 252.310056][T11146] netlink: 'syz.1.2564': attribute type 14 has an invalid length. [ 252.326180][T11146] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2564'. [ 252.340347][ T6021] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 252.372071][ T6021] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 252.397480][ T6021] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 252.706935][T11157] loop3: detected capacity change from 0 to 512 [ 252.835735][T11157] netlink: 'syz.3.2568': attribute type 1 has an invalid length. [ 252.843702][T11157] netlink: 'syz.3.2568': attribute type 2 has an invalid length. [ 252.851421][T11157] netlink: 252 bytes leftover after parsing attributes in process `syz.3.2568'. [ 252.860607][T11157] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.910400][T11162] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #2: comm syz.3.2568: corrupted inode contents [ 252.954813][T11162] EXT4-fs error (device loop3): ext4_dirty_inode:6517: inode #2: comm syz.3.2568: mark_inode_dirty error [ 252.983437][T11162] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #2: comm syz.3.2568: corrupted inode contents [ 252.984456][T11164] bond12: entered promiscuous mode [ 253.021345][T11157] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #2: comm syz.3.2568: corrupted inode contents [ 253.046669][T11157] EXT4-fs error (device loop3): ext4_dirty_inode:6517: inode #2: comm syz.3.2568: mark_inode_dirty error [ 253.065637][T11157] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #2: comm syz.3.2568: corrupted inode contents [ 253.078399][T11157] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #2: comm syz.3.2568: mark_inode_dirty error [ 253.092704][T11157] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #2: comm syz.3.2568: corrupted inode contents [ 253.118872][T11157] EXT4-fs error (device loop3): ext4_dirty_inode:6517: inode #2: comm syz.3.2568: mark_inode_dirty error [ 253.177625][T11173] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2573'. [ 253.605948][T11180] 9pnet_fd: Insufficient options for proto=fd [ 253.667783][T11182] loop5: detected capacity change from 0 to 1024 [ 253.679621][T11182] EXT4-fs: Ignoring removed i_version option [ 253.686628][T11182] EXT4-fs: Ignoring removed nobh option [ 253.752580][T11188] 9pnet_fd: Insufficient options for proto=fd [ 253.814484][T11191] SELinux: policydb magic number 0xf2539a25 does not match expected magic number 0xf97cff8c [ 253.829654][T11193] RDS: rds_bind could not find a transport for ::ffff:100.1.0.254, load rds_tcp or rds_rdma? [ 253.843867][T11191] SELinux: failed to load policy [ 253.896460][T11200] loop4: detected capacity change from 0 to 764 [ 253.906954][T11200] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 254.028795][T11206] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2585'. [ 254.046819][T11213] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2587'. [ 254.093613][T11219] loop0: detected capacity change from 0 to 512 [ 254.116682][T11219] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #2: comm syz.0.2589: corrupted inode contents [ 254.155858][T11219] EXT4-fs error (device loop0): ext4_dirty_inode:6517: inode #2: comm syz.0.2589: mark_inode_dirty error [ 254.182880][T11225] loop5: detected capacity change from 0 to 128 [ 254.210950][T11219] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #2: comm syz.0.2589: corrupted inode contents [ 254.233158][T11227] loop4: detected capacity change from 0 to 1024 [ 254.261939][T11227] EXT4-fs: Ignoring removed i_version option [ 254.284332][T11227] EXT4-fs: Ignoring removed nobh option [ 254.298194][T11229] RDS: rds_bind could not find a transport for ::ffff:100.1.0.254, load rds_tcp or rds_rdma? [ 254.435333][T11227] SELinux: failed to load policy [ 254.609717][T11236] 9pnet_fd: Insufficient options for proto=fd [ 254.618562][ T29] kauditd_printk_skb: 735 callbacks suppressed [ 254.618576][ T29] audit: type=1326 audit(242.689:14040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11235 comm="syz.4.2594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f8e7066f6c9 code=0x7ffc0000 [ 254.648661][ T29] audit: type=1326 audit(242.689:14041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11235 comm="syz.4.2594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e7066f6c9 code=0x7ffc0000 [ 254.671869][ T29] audit: type=1326 audit(242.689:14042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11235 comm="syz.4.2594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8e7066f6c9 code=0x7ffc0000 [ 254.695225][ T29] audit: type=1326 audit(242.689:14043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11235 comm="syz.4.2594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e7066f6c9 code=0x7ffc0000 [ 254.718406][ T29] audit: type=1326 audit(242.689:14044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11235 comm="syz.4.2594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8e7066df10 code=0x7ffc0000 [ 254.742660][ T29] audit: type=1326 audit(242.689:14045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11235 comm="syz.4.2594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e7066f6c9 code=0x7ffc0000 [ 254.766866][ T29] audit: type=1326 audit(242.689:14046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11235 comm="syz.4.2594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8e7066df10 code=0x7ffc0000 [ 254.791659][ T29] audit: type=1326 audit(242.689:14047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11235 comm="syz.4.2594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e7066f6c9 code=0x7ffc0000 [ 254.814717][ T29] audit: type=1326 audit(242.689:14048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11235 comm="syz.4.2594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8e7066df10 code=0x7ffc0000 [ 254.838003][ T29] audit: type=1326 audit(242.689:14049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11235 comm="syz.4.2594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8e7066df10 code=0x7ffc0000 [ 255.008943][T11259] RDS: rds_bind could not find a transport for ::ffff:100.1.0.254, load rds_tcp or rds_rdma? [ 255.090990][T11263] loop4: detected capacity change from 0 to 512 [ 255.104847][T11264] loop3: detected capacity change from 0 to 1024 [ 255.112443][T11264] EXT4-fs: Ignoring removed i_version option [ 255.118592][T11264] EXT4-fs: Ignoring removed nobh option [ 255.150772][T11263] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #2: comm syz.4.2607: corrupted inode contents [ 255.168802][T11263] EXT4-fs error (device loop4): ext4_dirty_inode:6517: inode #2: comm syz.4.2607: mark_inode_dirty error [ 255.181188][T11263] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #2: comm syz.4.2607: corrupted inode contents [ 255.196942][T11263] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #2: comm syz.4.2607: corrupted inode contents [ 255.209741][T11263] EXT4-fs error (device loop4): ext4_dirty_inode:6517: inode #2: comm syz.4.2607: mark_inode_dirty error [ 255.221099][T11273] loop1: detected capacity change from 0 to 128 [ 255.223494][T11263] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #2: comm syz.4.2607: corrupted inode contents [ 255.240412][T11263] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #2: comm syz.4.2607: mark_inode_dirty error [ 255.253745][T11263] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #2: comm syz.4.2607: corrupted inode contents [ 255.266610][T11263] EXT4-fs error (device loop4): ext4_dirty_inode:6517: inode #2: comm syz.4.2607: mark_inode_dirty error [ 255.371065][T11264] SELinux: failed to load policy [ 255.433043][T11280] loop3: detected capacity change from 0 to 1024 [ 255.475180][T11280] veth1_macvtap: left promiscuous mode [ 255.484861][T11280] macsec0: entered promiscuous mode [ 255.562493][T11280] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4193: comm syz.3.2609: Allocating blocks 449-513 which overlap fs metadata [ 255.586593][T11279] EXT4-fs (loop3): pa ffff8881075f7230: logic 48, phys. 177, len 21 [ 255.594933][T11279] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 4 [ 255.651031][T11293] siw: device registration error -23 [ 255.767002][T11300] RDS: rds_bind could not find a transport for ::ffff:100.1.0.254, load rds_tcp or rds_rdma? [ 255.800824][T11302] loop4: detected capacity change from 0 to 512 [ 256.203708][T11312] 9pnet_fd: Insufficient options for proto=fd [ 256.309044][T11314] loop1: detected capacity change from 0 to 1024 [ 256.324936][T11314] EXT4-fs: Ignoring removed i_version option [ 256.337976][T11314] EXT4-fs: Ignoring removed nobh option [ 256.466325][T11314] SELinux: failed to load policy [ 256.560466][T11327] loop1: detected capacity change from 0 to 764 [ 256.627108][T11329] RDS: rds_bind could not find a transport for ::ffff:100.1.0.254, load rds_tcp or rds_rdma? [ 256.639506][ T3513] ================================================================== [ 256.640419][T11327] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 256.647602][ T3513] BUG: KCSAN: data-race in fill_mg_cmtime / shmem_symlink [ 256.647635][ T3513] [ 256.647640][ T3513] write to 0xffff888106d3782c of 4 bytes by task 5433 on cpu 1: [ 256.647654][ T3513] shmem_symlink+0x387/0x3d0 [ 256.647672][ T3513] vfs_symlink+0xd4/0x1e0 [ 256.681521][ T3513] do_symlinkat+0xc7/0x3c0 [ 256.685939][ T3513] __x64_sys_symlink+0x50/0x60 [ 256.690745][ T3513] x64_sys_call+0x23d0/0x3000 [ 256.695422][ T3513] do_syscall_64+0xd2/0x200 [ 256.699923][ T3513] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.705808][ T3513] [ 256.708120][ T3513] read to 0xffff888106d3782c of 4 bytes by task 3513 on cpu 0: [ 256.715913][ T3513] fill_mg_cmtime+0x5b/0x260 [ 256.720509][ T3513] generic_fillattr+0x24a/0x340 [ 256.725445][ T3513] shmem_getattr+0x181/0x200 [ 256.730031][ T3513] vfs_getattr_nosec+0x146/0x1e0 [ 256.734967][ T3513] vfs_statx+0x113/0x390 [ 256.739206][ T3513] vfs_fstatat+0x115/0x170 [ 256.743614][ T3513] __se_sys_newfstatat+0x55/0x260 [ 256.748633][ T3513] __x64_sys_newfstatat+0x55/0x70 [ 256.753673][ T3513] x64_sys_call+0x135a/0x3000 [ 256.758340][ T3513] do_syscall_64+0xd2/0x200 [ 256.762856][ T3513] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.768764][ T3513] [ 256.771076][ T3513] value changed: 0x21ef113b -> 0x233114b0 [ 256.776954][ T3513] [ 256.779261][ T3513] Reported by Kernel Concurrency Sanitizer on: [ 256.785535][ T3513] CPU: 0 UID: 0 PID: 3513 Comm: udevd Not tainted syzkaller #0 PREEMPT(voluntary) [ 256.794813][ T3513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 256.804866][ T3513] ================================================================== [ 256.814760][T11322] lo speed is unknown, defaulting to 1000