last executing test programs: 2.703778381s ago: executing program 1 (id=1861): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4000, &(0x7f0000000a40)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@norecovery}, {@resuid}, {@quota}]}, 0x8, 0x445, &(0x7f0000001dc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r1, &(0x7f00000009c0)="3bf58d7d45d32c", 0x7) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'ip_vti0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, [@exit]}, &(0x7f00000000c0)='GPL\x00', 0xb, 0x65, &(0x7f00000001c0)=""/101, 0x41000, 0x23, '\x00', r2, @fallback=0x8, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000000280)={0x2, 0xe, 0x7, 0x80000001}, 0x10, 0x0, r0, 0x6, 0x0, &(0x7f00000002c0)=[{0x2, 0x2, 0x4, 0xa}, {0x3, 0x1, 0x3, 0xa}, {0x4, 0x3, 0x6, 0x8}, {0x1, 0x3, 0x2, 0x4}, {0x0, 0x1, 0x8, 0x7}, {0x5, 0x4, 0xa, 0xc}], 0x10, 0xffff34f0}, 0x94) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7fffeffd) 2.193979152s ago: executing program 0 (id=1867): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18010000bc0000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r0, 0x0, 0x3}, 0x18) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)={[{@usrquota}, {@noblock_validity}, {@bh}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@debug}, {@inlinecrypt}]}, 0x6, 0x5fc, &(0x7f0000000c00)="$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") syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x41, &(0x7f0000000880)={[{@nouser_xattr}, {@nodiscard}, {@usrjquota}, {@grpjquota}, {@grpjquota}, {@minixdf}, {@quota}, {@noload}, {@block_validity}]}, 0x64, 0x51c, &(0x7f0000001740)="$eJzs3c9rJFkdAPBvdbpjMpOZZNWDLrj+2JXMoNOdbNzd4GFdQfS0oK73MSadENJJh3RndxIWN4N/gCCigie9eBH8AwRZ8OJRhAU9KyqK6IwevDgl1V2dmWS6O5mZnnQ2/flAdb2qV1Xf9zqp6npVj6oARtYnIuK1iLiXpun1iJjO5xfyIQ7aQ7bc3TtvL2dDEmn6xj+TSPJ5nW0l+fhyvtpERHz9KxHfSh6O29jb31iq1ao7+XSlubldaezt31jfXFqrrlW3FhbmX158ZfGlxbmB1PNKRLz6pb/+4Ls/+/Krv/rsW3+6+fdr386KNZXnP1iPR1RsfU50z2xXvXQkO1th5zGDnUfFVg1zk92WGHtozu2nXCYAALrLzvE/GBGfiojrMR1j+eksAAAAcHGkX5iKsSQi7W68x3wAAADgfaTQ6gObFMp5X4CpKBTK5XYf3g/HpUKt3mh+ZrW+u7XS7is7E6XC6nqtOpf3FZ6JUpJNz7fS96dfPDa9EBHPRMT3pydb0+Xlem1l2Bc/AAAAYERcPtb+/890u/0PAAAAXDAzwy4AAAAA8NRp/wMAAMDFp/0PAAAAF9pXX389G9LO+69X3tzb3ai/eWOl2tgob+4ul5frO9vltXp9rfXMvs2Ttler17c/F1u7tyrNaqNZaezt39ys7241b673ekM2AAAA8LQ98/F3/5BExMHnJ1tDZvx0q55yMeC8Kh6mknzcZbf+49X2+C9nVCjgTIwNuwDA0BSHXQBgaErDLgAwdMkJ+T077/w2H39ysOUBAAAGb/ajve//F/quedA/Gzj37MQwutz/h9HVuv9/2p68ThbgQik5A4CR98T3/0+Upo9UIAAAYOCmWkNSKOeX96aiUCiXI660XgtQSlbXa9W5iLgaEb+fLn0gm55vrZmc2GYAAAAAAAAAAAAAAAAAAAAAAAAAANrSNIkUAAAAuNAiCn9Lft1+lv/s9AtTx68PjCf/nY78FaFv/fiNH95aajZ35rP5/zqc3/xRPv/FYVzBAAAAgJHwSC/w77TTO+14AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABiku3feXu4MJyz6ziDj/uOLETHTLX4xJlrjiShFxKV/J1F8YL0kIsYGEH8y+/hIt/hJVqzDkN3iTw4g/sHtvvFjJv8WusW/PID4MMrezY4/rx3b/44cWLrvf8WII9OPq/fxLw6Pf2M99v8rp4zx7Hu/qPSMfzvi2WL3408nftIj/vOnjP/Nb+zv98pLfxIx2/X3JzkSq9Lc3K409vZvrG8urVXXqlsLC/MvL76y+NLiXGV1vVbNP7vG+N7HfnmvX/0v9Yg/06f+VyPihVPW/3/v3brzoXay1C3+tefz+Encj/+bn+ZLPBy/kP/2fTpPZ/mznfRBO/2g537+u+f61X+lR/1P+vtf61/t8U7i+te+8+f+iwIAZ6mxt7+xVKtVdy5sImuln4NiSOSJ8XP0X/fOQDeYpmma7VNPsJ0kzsPX0koM+8gEAAAM2v2T/mGXBAAAAAAAAAAAAAAAAAAAAEbXWTxO7HjMg8NUMohHaAMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADMT/AwAA//+VPdXC") syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1aca421, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r2}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r1}, &(0x7f0000000000), &(0x7f00000005c0)=r2}, 0x20) setreuid(0x0, 0xee00) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000007c577e1700000000dace", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0x0, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xce9d8d60ab13d530, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8946, &(0x7f0000000400)='{\x05T\x82\x89\x98Yi:') 1.917498505s ago: executing program 0 (id=1870): set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) io_setup(0x7, &(0x7f0000000180)=0x0) io_submit(r1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x20000000000000b7, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000008", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002e400008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) gettid() socket(0x40000000015, 0x5, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r2, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0x8, &(0x7f0000002000)={0x0, 0x7}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r3 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r3, &(0x7f0000000840)={&(0x7f0000000000)={0x2, 0x4e23}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=[@ip_retopts={{0x18, 0x0, 0x7, {[@noop, @lsrr={0x83, 0x7, 0x4, [@private]}]}}}], 0x18}, 0x8000) r4 = gettid() bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x2004, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x94) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, &(0x7f0000001100)={0x77359400}, 0x1) 1.72990292s ago: executing program 3 (id=1876): unshare(0x22020600) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, &(0x7f0000000000)={[{@subsystem='hugetlb'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = io_uring_setup(0x1962, &(0x7f0000000100)={0x0, 0x0, 0x100, 0x0, 0x214}) close(r0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x2040d0, &(0x7f00000000c0)={[{@i_version}, {@quota}]}, 0xf3, 0x490, &(0x7f0000000dc0)="$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") sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)={0x14, r1, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x4000054) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x18) fcntl$lock(0xffffffffffffffff, 0x25, 0x0) clock_nanosleep(0x9, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) 1.72848525s ago: executing program 1 (id=1877): bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r0}, 0x10) timer_settime(0x0, 0x0, 0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, 0x0, 0xc0000) read$qrtrtun(r1, 0x0, 0xeffd) io_pgetevents(0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0) rt_sigpending(0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r3}, 0x10) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400c000}, 0x1004) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x32126, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r4, 0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'veth0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x1}}]}}, @TCA_RATE={0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x48801}, 0x0) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) 1.472329301s ago: executing program 1 (id=1881): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18010000bc0000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r0, 0x0, 0x3}, 0x18) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)={[{@usrquota}, {@noblock_validity}, {@bh}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@debug}, {@inlinecrypt}]}, 0x6, 0x5fc, &(0x7f0000000c00)="$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") syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x41, &(0x7f0000000880)={[{@nouser_xattr}, {@nodiscard}, {@usrjquota}, {@grpjquota}, {@grpjquota}, {@minixdf}, {@quota}, {@noload}, {@block_validity}]}, 0x64, 0x51c, &(0x7f0000001740)="$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") syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1aca421, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r2}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r1}, &(0x7f0000000000), &(0x7f00000005c0)=r2}, 0x20) setreuid(0x0, 0xee00) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000007c577e1700000000dace", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0x0, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xce9d8d60ab13d530, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8946, &(0x7f0000000400)='{\x05T\x82\x89\x98Yi:') 1.430988834s ago: executing program 3 (id=1883): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmsg$inet(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x800) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 908.493416ms ago: executing program 1 (id=1888): socket$netlink(0x10, 0x3, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="9f0018000000000000000c0000000c00000005000000020000000000000c0600000000"], 0x0, 0x29}, 0x28) openat$uhid(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) clock_adjtime(0x0, &(0x7f00000006c0)={0x7fff, 0xf423f, 0x0, 0x0, 0x0, 0x2c43, 0xa00, 0xb000000, 0x0, 0x300, 0x0, 0x2902, 0x20, 0x100000001, 0x0, 0x0, 0x8000000000000000}) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000f00)={0x0, 0x1000, "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"}, &(0x7f0000000040)=0x1008) epoll_pwait2(r0, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}], 0x7, &(0x7f0000000000)={0x77359400}, &(0x7f0000000100)={[0x9]}, 0x8) clock_adjtime(0x2, &(0x7f0000000a00)={0x480, 0xb, 0x1, 0x3, 0x5, 0x0, 0x5, 0x4, 0xfffe000000000000, 0x8, 0x3, 0xe81c, 0x400, 0x4, 0x8, 0x8, 0x101, 0xfffffffffffffdda, 0x9, 0x1000, 0x0, 0x8, 0x1, 0x4ec769bd, 0x7, 0xf1}) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000002c0)='sched_switch\x00', r1, 0x0, 0x7ffff}, 0x18) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400}) 864.64141ms ago: executing program 2 (id=1892): r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000010000000000000000030097850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000001850000001b000000b70000000000070095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r3}, 0x18) kexec_load(0x4, 0xa, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='sched_switch\x00', r1}, 0x10) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 863.38863ms ago: executing program 1 (id=1894): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{r0}, &(0x7f0000000040), &(0x7f0000000080)='%-5lx \x00'}, 0x20) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000014000e0a49bf925471e7fc50983f097013799b641ea79c734b6ef4a909f6c2743f53f288e526b45fe0769b612cae30d347d692db24c0a7fc637fa1cb855773a97058bb1e89ea2629a03a000f0f527000fbdb2d1b65fa9d7a12f86e4727da8c12d73cadf3961abdb1e575e65427efb303c637f2785cdb1d128d656102d655936b6ead69539ab7933768022578e97e1df45e204b804dce7f1b89c9e85251bbe2f57c3b4be994e3dfaefab23911bf72bf62214f8d1154befd11e305e47343dc4bc0e603181bc0bcd0a3"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000202070"], 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r3}, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@deltfilter={0x5c, 0x2d, 0x400, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {0x4, 0xe}, {0x4, 0xf}}, [@TCA_CHAIN={0x8, 0xb, 0x7}, @TCA_RATE={0x6, 0x5, {0xf, 0x7b}}, @TCA_RATE={0x6, 0x5, {0x9, 0xe}}, @TCA_RATE={0x6, 0x5, {0x7, 0x7}}, @TCA_CHAIN={0x8, 0xb, 0x1}, @TCA_CHAIN={0x8, 0xb, 0x7}, @TCA_CHAIN={0x8, 0xb, 0x9}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x14000000) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c00010005000000030000000800", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0xb4}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x13, 0x1a, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000007000000000000006600000085100000fdffffff18110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500000086000000950000000000000018110000", @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYBLOB="000000000000000085200000020000001838000003000000000000000000000095000000000000009500"], &(0x7f0000000500)='syzkaller\x00', 0x533, 0x47, &(0x7f00000007c0)=""/71, 0x0, 0x4, '\x00', r5, @fallback=0x2c, r2, 0x8, &(0x7f0000000840)={0x9, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c80)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000cc0)=[{0x5, 0x2, 0x7, 0x4}, {0x5, 0x1, 0x8, 0x51390033210c3dd4}, {0x4, 0x5, 0x1, 0xa}, {0x5, 0x4, 0x6, 0x5}, {0x5, 0x2, 0xd, 0x1}, {0x3, 0x3, 0x9, 0xa}, {0x5, 0x1, 0x7, 0xa}, {0x5, 0x1, 0x4, 0x2}], 0x10, 0x2}, 0x94) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$TIOCSSOFTCAR(r7, 0x541a, &(0x7f0000000080)=0x1ff) write$binfmt_script(r7, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r7, 0x0) 812.835364ms ago: executing program 0 (id=1895): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}], 0x1}}], 0x48}, 0x0) 797.766485ms ago: executing program 0 (id=1896): bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xd, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000000c0)='kfree\x00', r0}, 0x18) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x94, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x22, 0x1, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}}]}, 0x94}}, 0x0) 775.510807ms ago: executing program 2 (id=1897): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000007c577e1700000000dace", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a30000000000800034000"], 0x64}, 0x1, 0x0, 0x0, 0x810}, 0x40404) 774.849287ms ago: executing program 0 (id=1898): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000200100000102"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0xb}, 0x18) 745.998239ms ago: executing program 2 (id=1899): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000180)="1400000035000b45d30000000000000001d25a80", 0x14}], 0x1}, 0x0) (async) openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x480, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1, 0x2, &(0x7f0000000080)=ANY=[@ANYRESDEC], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x18) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) io_setup(0x6, &(0x7f0000000680)=0x0) io_submit(r4, 0x2, &(0x7f0000000240)=[&(0x7f0000000000)={0x180a, 0x0, 0x3, 0x1, 0x0, r3, 0x0}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7, 0x3, r3, &(0x7f00000006c0)="5810235a8c132d765b", 0x9, 0x1}]) (async) r5 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCL_PASTESEL(r5, 0x541c, &(0x7f0000000000)) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='auxv\x00') syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='./file2\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f0000000840)="$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") (async) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r9}, 0x10) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001400)=@newtaction={0xe6c, 0x30, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [{0xe58, 0x1, [@m_pedit={0xe54, 0x1, 0x0, 0x0, {{0xa}, {0xe28, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x101, 0x5c, 0x0, 0xb, 0x9}, 0x8, 0x7}, [{0x7, 0x8, 0xb6f8, 0x8, 0x101, 0x3}, {0x9, 0x6, 0x6, 0xfffffff7, 0xd, 0xed7}, {0xaabee86, 0x100, 0x4, 0x8, 0x8, 0xb6d}, {0x66, 0x80000000, 0xfffffffd, 0x2, 0x10000, 0x9}, {0x2, 0xfffffffc, 0x9, 0x1, 0x9}, {0x3, 0x8, 0x9, 0x400, 0xf, 0x939b}, {0xdc11, 0xfffffff9, 0x3ff, 0xfada, 0x401, 0x10000}, {0x15, 0x9, 0x7, 0x81, 0x7, 0x1}, {0x5, 0x1, 0x2, 0x80000001, 0xfff, 0x8}, {0xb73, 0x0, 0x3, 0xfffffff7, 0x0, 0xd}, {0xffffff80, 0x3, 0x1, 0x80000001, 0x4, 0x4}, {0x519, 0xf0, 0x66, 0x3, 0x5, 0xfffffff7}, {0x400, 0x200, 0x1ff, 0x3, 0x5, 0x5}, {0x3, 0x5, 0x1, 0x101, 0x200}, {0x4, 0x7, 0x1, 0x9, 0xf, 0x1}, {0x401, 0x433, 0x7, 0xffffff7f, 0x9, 0x7}, {0x10, 0x6, 0x9, 0x0, 0x5, 0x2}, {0x5, 0x1, 0x8, 0x3, 0xa9, 0xfffffffc}, {0x0, 0x80000000, 0x2, 0xce6, 0x1ff, 0x2}, {0x1400, 0x8, 0x5, 0x3ff, 0xfffffffe, 0x8}, {0xa177, 0x8, 0x1, 0x7, 0x9, 0x8000}, {0xce0, 0x4, 0x1ff, 0xd7, 0x7, 0x6}, {0xffff4234, 0x4f9, 0xfffffff9, 0x1, 0xc, 0xffffffdd}, {0x81, 0x2c, 0xc13, 0x7d1, 0x4, 0x6}, {0x5, 0x7, 0x7, 0x1000, 0x2, 0x7f}, {0x400, 0x6, 0x7, 0x6, 0x120, 0x6}, {0x6, 0x3, 0x4, 0x7ff, 0x0, 0x3}, {0x6, 0x0, 0x3, 0x2, 0xfff, 0x2}, {0x8, 0x3, 0x6, 0x5c6a, 0x5, 0x9}, {0x8, 0x1, 0x8, 0x8, 0x8, 0x95}, {0xf80, 0x8, 0x10000, 0x8, 0xe, 0xfffeffff}, {0x4, 0x8000, 0x3, 0x8aa6, 0xfffffff7, 0x5}, {0x8, 0x7, 0xfffffff7, 0x3ff, 0xd7d, 0x5}, {0xd50, 0x2, 0x8, 0x4, 0x8, 0x3}, {0x2, 0x6, 0x7f, 0x9, 0xfffffff9, 0x1}, {0x162, 0x0, 0x4b3, 0xcb5, 0x5, 0x7fffffdf}, {0x80000000, 0x0, 0x1, 0x2, 0x100, 0x3}, {0x8, 0x8, 0x1, 0xffffffff, 0x3ff, 0x5d1}, {0x3, 0xd054, 0x9, 0x5, 0xfffff801, 0x1}, {0x7, 0x8, 0x983, 0x0, 0x6, 0x200}, {0x47, 0x200, 0x8, 0x9, 0x2, 0x9}, {0x1, 0xfffffff9, 0x2, 0x7, 0x7, 0x1000}, {0x10000, 0x24056a58, 0x8, 0x8, 0x0, 0x8}, {0x2, 0x1ff, 0x3ff, 0x0, 0x2, 0x40000000}, {0x7ff, 0x7ff, 0x0, 0x3, 0x9ca, 0xffffffff}, {0x80000000, 0x9, 0x2, 0x4, 0xdd9f, 0x40}, {0xa, 0x9, 0x3, 0x0, 0xe00, 0x7fff}, {0x4, 0x7, 0x3, 0x0, 0x7f, 0x8}, {0x7, 0x8, 0x10, 0x4, 0x0, 0x80000000}, {0x7, 0x5, 0xfffff801, 0x1ff, 0x1, 0x10000}, {0x80000001, 0x2, 0x2, 0x3, 0x4}, {0x40, 0x0, 0x7, 0xc, 0x1, 0xffff0001}, {0x6, 0x0, 0x2, 0x5, 0x742}, {0x4, 0x401, 0xc0, 0xffffffff, 0x8, 0x2}, {0x7, 0x6, 0x5, 0x4d2b, 0x4, 0x8001}, {0x6, 0xf731, 0x2b1, 0xfffffffa, 0x1, 0x101}, {0x5, 0x7, 0x101, 0x0, 0x7, 0x8}, {0x3, 0x7, 0x8, 0x8, 0x7, 0xa0}, {0x1a, 0xe, 0x3ff, 0x0, 0x3, 0xfe}, {0x2, 0x7, 0xcf0, 0x5, 0x7, 0x6}, {0xfff, 0x6, 0x0, 0x1000, 0x0, 0xf}, {0x9, 0xfffffbff, 0x2, 0x5}, {0x0, 0x22f, 0x2, 0xe7b, 0xba, 0x7ff}, {0x1, 0x7b7, 0x0, 0xcb2d, 0xe, 0x6}, {0x0, 0x30000, 0x50, 0x5, 0x5, 0x9}, {0xf9, 0x5b, 0x8, 0x3, 0x3, 0xff36}, {0x2de, 0x6, 0x5, 0xa4, 0x6, 0x7}, {0x8, 0x9, 0xd36, 0xd4, 0x100, 0x1d}, {0x0, 0xb, 0xec36, 0x52, 0x7, 0xe}, {0x80000000, 0x7f, 0x80, 0x4, 0x35b3, 0x5}, {0x8, 0x7, 0x44c9bfe0, 0x40, 0x4, 0x1}, {0xffff7fff, 0xf7af, 0x1ff, 0x21, 0x81, 0xa}, {0x2, 0x4, 0x7fffffff, 0x2, 0x1ff, 0x800}, {0x9, 0x9, 0x8, 0x2, 0x9, 0x6}, {0x6, 0x9, 0xafb, 0x3, 0x9, 0x5}, {0x2b20, 0x9, 0x7fffffff, 0x7c82, 0x7f, 0x8}, {0x1ff, 0x0, 0x0, 0x6, 0x8, 0x2}, {0x3, 0x6, 0x1c97600f, 0x6, 0xd, 0x800}, {0x1, 0x0, 0x0, 0x9, 0x19, 0x2}, {0x3, 0x7, 0xd, 0x7fffffff, 0x4}, {0x7f, 0x3, 0x5, 0x1, 0x75, 0x100}, {0xfff, 0x1, 0x1d, 0x40, 0x472, 0x1}, {0xe, 0x48f, 0x7, 0xfffffffc, 0x6, 0x7}, {0x9, 0x9, 0x401, 0x6, 0x1ff, 0x1}, {0xdd4, 0x0, 0x9, 0x6, 0x7, 0x7e27a179}, {0x3134, 0xfffffff9, 0x7, 0x6, 0x2, 0x1ff}, {0x6, 0x9, 0x611, 0x3, 0x2, 0x1}, {0x9, 0x3, 0x2, 0x9e7, 0x6, 0x4}, {0x5, 0x7, 0x1, 0x10000, 0xa, 0x1}, {0x9, 0x8, 0x0, 0x5, 0x3, 0x80000001}, {0x8, 0x9, 0x2, 0x5, 0x6, 0xd888}, {0x1, 0xdc13, 0x8, 0x6, 0x5, 0x1}, {0xfffffff8, 0x7, 0xb13, 0x7f, 0x81, 0x2}, {0x2da, 0x0, 0x9, 0xa748, 0x4, 0x1}, {0x1, 0x5, 0x1, 0x6, 0x6, 0x4f}, {0x2a, 0x7, 0x1, 0x0, 0x2, 0x80000001}, {0x8, 0x2f, 0xfffffff9, 0x4, 0x200, 0x800}, {0x40, 0x6, 0xc, 0xa1f7, 0x9, 0x1000}, {0x4, 0x101, 0x3, 0x401, 0x0, 0xfff}, {0x1, 0x0, 0x9, 0xf, 0x1000, 0x40}, {0x3, 0x3, 0x1, 0x8, 0x400, 0x8}, {0x2, 0x1000, 0x5, 0x4, 0x200, 0x66d4}, {0x7, 0x2b914a38, 0xda2, 0x0, 0x2, 0x6}, {0x95, 0x9, 0x6, 0x3, 0x5, 0xfffffffb}, {0x3eb, 0x9, 0x4, 0x2, 0xfffff801, 0x9}, {0xf48, 0x80000000, 0x1000, 0x1, 0x9, 0x3}, {0x5, 0xffffffff, 0x3, 0xf, 0x8, 0x2}, {0x10000000, 0xbc9, 0x0, 0x6, 0x1}, {0x3ff, 0x0, 0x6, 0x3, 0x892, 0xffff5833}, {0x2, 0x5, 0x8, 0x8, 0xbcb7, 0x8}, {0x5, 0x3, 0x1, 0x7, 0x8, 0xfffffffb}, {0x6, 0x2, 0x8, 0x1, 0x9, 0x40}, {0x73d, 0x81, 0x4, 0x4c, 0x2, 0x10000}, {0x4, 0x1, 0x401, 0x4, 0x3}, {0x99, 0x1, 0xfffffffb, 0x2, 0xd, 0x4}, {0x100, 0xfffffffd, 0x5, 0xa, 0x7, 0x5cf4}, {0x8, 0x5, 0x9, 0x1000, 0x1ff, 0x80}, {0x800, 0x10000, 0x2, 0xd3, 0xe, 0xfffffffd}, {0x4, 0x3, 0x6, 0x727b, 0xc, 0x5}, {0x6, 0x2bf3, 0x3, 0x35, 0xd, 0xf24}, {0x9, 0x890c, 0xcf3, 0x87ee, 0x5, 0xfffffffc}, {0x49424b5d, 0xf, 0x3, 0x7, 0x2d219f14, 0x1ff}, {0x3, 0x5, 0x9, 0x9, 0xffffffff, 0x4}, {0x6, 0x5, 0x4, 0x80, 0x7fffffff, 0x8000}, {0x5, 0xfffff404, 0x1, 0x8, 0x879, 0x3}, {0x5, 0xc, 0x6, 0xfffffffb, 0x8, 0x2}, {0x4, 0x600, 0x39846a8c, 0x1, 0x7fff, 0xb}, {0xfffffff1, 0x8, 0x3, 0x3, 0x2, 0x3}], [{0x5, 0x1}, {}, {0x5, 0x1}, {0x1}, {}, {0x1, 0x4fa8102eea1673da}, {0x4}, {0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x5}, {0x4, 0x1}, {0x1}, {0x2, 0x1}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x2}, {0x3, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x3}, {0x5}, {0x3}, {0x4, 0x1}, {0x0, 0x1}, {0x5, 0x1a2b73033141e383}, {0x3, 0x1}, {0x2}, {0x5}, {0x4, 0x1}, {}, {}, {0x3, 0x1}, {0x3, 0x1}, {0x1}, {0x3}, {0x3, 0x1}, {0x5}, {0x2}, {0x3, 0x1}, {0x7, 0x1}, {0x4}, {0x5}, {0x2}, {0x4, 0x1}, {}, {0x2}, {0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5}, {0x1, 0x1}, {0x3}, {}, {0x2, 0x1}, {}, {0x7}, {0x1, 0x1}, {0x3}, {0x2}, {0x1}, {0x8, 0x1}, {0x3}, {0x1}, {0x2}, {0x4, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x5}, {0x5}, {0x3, 0x1}, {0x1}, {0x0, 0xbfb90171edaf7461}, {0x5, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {0x4, 0x1}, {0x5}, {0x0, 0x1}, {0x5}, {}, {0x2}, {0x3, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x2}, {0x2}, {0x1}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x5, 0x1}, {0x5}, {0x3}, {}, {0x0, 0x1}, {0x4}, {0x5}, {0x4, 0x1}, {0x1}, {0x4}, {0x5, 0x1}, {0x5}, {0x2}, {0x5, 0x1}, {0x5}, {0x3}, {0x3}, {0x4}, {}, {0x0, 0x1}, {0x2}]}}, @TCA_PEDIT_KEYS_EX={0x4}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0xe6c}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c800) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000d80)={&(0x7f0000000d40)='mmap_lock_acquire_returned\x00', r7}, 0x10) (async) mincore(&(0x7f0000ff7000/0x9000)=nil, 0x9000, &(0x7f00000002c0)) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x94) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x40000) (async) read$eventfd(r6, 0x0, 0x0) readv(r5, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/43, 0x2b}], 0x1) r11 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZE(r11, 0x5609, &(0x7f0000000000)={0xe60a, 0x8, 0x7}) socket$nl_xfrm(0x10, 0x3, 0x6) 618.024179ms ago: executing program 2 (id=1902): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x4cfb}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001c00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x29) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000005000000850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r2}, 0x10) lstat(0x0, 0x0) 617.675379ms ago: executing program 4 (id=1903): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x88a, &(0x7f00000001c0)={[{@usrquota}, {@usrjquota, 0x22}, {@data_ordered}, {@noload}, {@noinit_itable}, {@grpjquota, 0x22}, {@init_itable}, {@jqfmt_vfsold}, {@noblock_validity}]}, 0xfe, 0x44e, &(0x7f0000000900)="$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") mount(0x0, &(0x7f0000000000)='.\x00', 0x0, 0x2236824, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x0, 0x7, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000840)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x18) r1 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) timerfd_gettime(0xffffffffffffffff, 0x0) writev(r1, 0x0, 0x0) socket(0x770143f89bebf354, 0x800, 0x5) 617.24534ms ago: executing program 2 (id=1904): socket$netlink(0x10, 0x3, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="9f0018000000000000000c0000000c00000005000000020000000000000c0600000000"], 0x0, 0x29}, 0x28) openat$uhid(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) clock_adjtime(0x0, &(0x7f00000006c0)={0x7fff, 0xf423f, 0x0, 0x0, 0x0, 0x2c43, 0xa00, 0xb000000, 0x0, 0x300, 0x0, 0x2902, 0x20, 0x100000001, 0x0, 0x0, 0x8000000000000000}) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000f00)={0x0, 0x1000, "5b7b3c52d55946b89f10a28aaaaad4e814c0a6ea7ff87286fec7ed3465628c611fe2d11a3a57737f78dd47c82e17de106750618242488fa5ceedd238d164b871944d7888b7ae38ce63c7fbd158b743be42dcdbf7fc347bfa4f75309dbc0191f32ffb0632397e47cd0ea3f3bc1a77c83bc510a589d11eabd9f7a0ded8815c77d155b05dcf3fc5e13f1781cf93389e4ba86cd6ccbbda8ec4166836a0b043e46c75266f175cb576a68e511948d9f3faef3e4afe3d206442914c4c8a6e87fe5e9937a5dcf732a0ff566d795b668540da351d7c04d91f32ff34ecc0f535def6bed5eae69988c96530f3bd0ef440e69c6efe6ad4b932635f84beeaf403ea32ef7aed715b330cf231c00506bd9788acdda4703f269c4c65680aa934ce69a7378422f3621c1083ef9f4c96005d9c57a1017936ac239f22d9302ddb902f14a0b90fe71c57a7f302c2d49a2e7912b3f0eb7960053719a50e1823772bd72de11e441b6cf77f912ea21a25fcea8cb177461488ae09f36b92c9c2bbc32aeaa3ed1a39f78b7741499685a224b7051249b88794b5a03bb1f61ce5e133f460eb46902fd780935fb49433997082ff0a123e9aeff8d5b2529010d9f20a9d04ae6bfc27e5271e8e32bb253e1fe69c88803cb1af0fecfb8c2cae075ede49d9cdcc64a1135be3114e50482b90f50962c8b0839b0c7da945d64dfade3611634b7a1caddb97d03dc5b64c1931b5620ff52087246dca0ef17e0bff21230b7beec9ded1dccec2fc1bcf49824e5d814bc52461eba3412081aacc39f3ee6e42a20400f4d914707034c716e56ccad30f4dc1f18592df678209604f356702fded95d3a7724d95b489fdb2326f6460b356f8e4726930cbe8cf6bc9eff0550b40371821129882e8539eabab77151028d53dad041a2e42a2c8ebb64950d59bde91ab18c7ebb35dd3ff1cf059f86e11cffe6fa59c8f6cc2c3b34261878fc452a2916f2b96a4fdfa5a876e38abfa67a5828b160b2c88e5d1bd0fefe4ff9fe6c9f8cbcbc8f105486278dc8f889049735e815e642e1e0eba0de3e670a793815cf6bc1ff74cd09827df18ba3bbdc08db24b736af593c7d9f2086ec72470c437b4f497186fd5c651876dd3aedc510d501742a4fe1a3e1bee1f4c4a3734473cf50567ff5236a07dc5594dac9976ff7768a124da88f60b0735f4b2e809b156d136144f40840572ad45b07086e251b5f8db3ca6c23609e0c793ad780a2d3d36db56a2af8afdffbb60ef1b9efe358f07f0ece352711cc327b86da898e085ab3fad25adc233c8f716dd31f6bf71b769a5c6316d2d42d2946ded621a2d7086ef076ab9fea52b750d88c814bb44f0a5d2877df48643e3d1338950938e8aabd1cd83c05a035a101455d9c6f0b2d075ab2a29db8a1627138e516eeda90a5bab3064243e318425549e444662136ea5537415482827e1118bf0b967ced0a3391db3aa349272e0435c4d5d0030cb885e0595ac4c8f52696f1ad63856724fd2c31e83bdc94d997cc54a03dc6317e9ba84ed5e9318598b464e928f4840024675dde8b91620454db69c0211995a578252a18e7fdaee1c87822e81f6e61568cdcdd4de51f1433304da5ec9ceb1f8a9a6658946cc29580624d9f10c0b49c4e0c1dabfdf1fb63ad32ae0d1c1b3bfc828ad47bd0851b97255929278954216b80863c4d526f4c0c9f5fb986f2a306867155fb0b0e1f984a239da1d5e58816df2fa3144872cbf119c766d4992841bea549ce81577de497d79fad66a2c304ec259f3f533559861617379b025f5b9bea71959a006dd5ac821bd1dac425424c444e0d6ced6325995d69dd7ec7a83a2fa1b500bcccafdc18beb562efa1862ce72588988169c456df57aaceb751c613be59e295bbab14ba0ae0b4e12c0f8fe24af31fb71d1f69e6a5e062799b581026d89db18d82a258d972476d7adf8992906f8a46034498bc069b2f09e25d17b1a47f1cbad66ef3aa082baa2fe934a467f5ce40ccde6c8f2b0c17b14664e0b8cd84343acc7893a0f8758561f2ea2754fbb5ab8bfc6fe1c5f2fc6b9a78aa86ae2d2fc9bb5c3feb9d34bb778aab9a432a15aa633102ffac2d8badd1f305ff8dc89a85c573dcee115cf43bcbcc601885ac0baaf4842a2c24480f6fc89892b9fa8989df42864a08beab5a40c010627a5e6de68c74d2c947b74ce76634acf8b761b516ec9324c0cf49113c6d72b1c53925e305e54d6846ce3995675cf8f0facb032552977244b1f793be612f0971e5537029d30f08c538cd265155d7b04d3497f97e64c9d68f5940ee0774a1280a62f4e7bc70df327f0aae97c6342414258084a8e3bf57663f8d52bbda7915616ff7ff08f4195f07f473dfd39b259234083f09810109182394723b6a04ce00f54936df194591e678b83ae0dfe17f8406e76657c581251ccf312164950beeeafa1a8c4122b9964c8e3b01d90cb8db29ca9bcddbd7f906b29572cbad6604c1f8707773784d2cd95b4a51c1d90bcd4ae6373f69a2c682c816e6e106b500a018947b6fcdebd31202ddf0ae06d034fbfdb99cdcbfb223d56089930b441f32b24b070e7ec0965947aaaef3725463e39183f85e8c793c1dbf0b5793e2b2054f91134bf4c090a821b5f8577397d3f14ac907f73520b97065df756ee97a5ad2cd84270259cc1f0f5c2eb0a11e148cb62e413d0dfe81e7e1cc9fe6a080e77fc76b37925ce2c98870362f00a67cfed81ecc8021486d0c2eaf50df07c7b8fa8a3f8ae8452082f8e95b1900f3440b434b9f5ad3fb73f167b2d237397c7a843a45cd8328caf1cb646245d1582194a7154475fd41127a1a03fcd958d45e0559491170ccb6c106c3fa74f2803feed4f35241283c8100d9b9c6dc64310aa11d9606ca6579f432d0482a299107b2386392d350f87b03ac843ef41a549a0031cc994cedf27d79a775443866f2ec498fc3caa5faf04cce601cfa147e5e5ee3cd6022c05065b0d7cd5fc4cea50ee8196a0fdbce1ee65d5ef0dbe4877a8b21bb854addcd90829c9519d817a79b07ee4c5bfa41b2b2122fb4fa6bbf428380b4730b43c5dee3d5d76aaeafcfc3cb0dc4d2753408d7b5a95cd2949b5ddd949ba588b672eb3ef67bcd3dbf3aca526f9ec923de008ce1b7a080e0b0057db780e2c97ddac9d3548439a6df75138e645caa8eb808aee98ed8dd83c74cdf174bf90b2990bf97d43477f040765673ea020305cd623365f9dd28e50bf259050ef2f3f60399580279759dbb3d0a91f612e095f5b9d2f129c5c0f79a56f97849c7be71ef222cdf07a4c437f5f469eea69ebb353d0e204cc0079b25faab4893720102143efbe30c1536864360f50eb6e0847d8ccb7b384f07b1f4a96c330bce049f2e717b91a02040f0d2731f8675f36c3ba2735d9d249985f8e4add58e9a5eb6a4c769cedd4ed5fef595d1f4d46abbf8ea7fe8dcc85f220eb61a32c7675b630d3c490fd8ccd02a1916caecf54a702e996bee75b6419de03a1acf204144d524f45b83d2d56e4e92c78ae7c48534b7f309d18cb6dd017a2ee8ee601ab28ad3ed73a56646293a755899966946441526243fa8afcc2f3a2a373c96ac43348071bec37008b153d4d529ec50840ca3cd5122dbfdf84e0d06f6ed5355c514f88f287e935dc5c2cd2f264d75641b9e7ac321fb43ae29f4534753b1762ce93a353706e3f8aa9b948e116c259619190bf2a16c5f576c8604a47edac80f7787be7fe205d860a760d1bdd62c45d51e8c5a136075dc162eb8cf792dda13b32441dafe13230a325055f70d6ddef122d2d6d71b5f360fa2ff0bca46086d029094e0961eb34487b61d68de47c085cf44df168ff39f34bb27dbd147f7e226dff5d735a13a544b4c0320d669a761c6d8bdf7ab51cce66ead3c9bf68bb121ca38e47a3cf9e43a2f23a25c550d7b500ccde4b7c235e21d2983ad4760640afbbfb961614c12a316b9b1721d3d3b61b7f09d227b8d2800624fac8915efa77a87b2e5b6de18249d947d5690837edb178ad1c0b0b7d9febbc7f44c0cf7ba60518537c537044cf912421ff1129f97251de3f6eb85aa94e98aab9d8acdfaad9161e054d22f7331fe17f50a616e5a608c183dc6ed31750532eb7a840beb514d568b90c7461ba60626a11cd8bfa3c4a097e1960cd1b8876c37cf67f1c998fd9583053daaaef8cdf8c18253f2a810b5033ab63904724926d8419b2d7a251c23aa2449700f9d81397872c30f6d394a564d4cd9a80277d0d85a4527a057b787b5943406cbfb5cc1929580d0573515420405b568fff7b92e8a4c21ce4ef6280e223531c5da721b840eea89ad4d7036bfe6473920db25c8d02c4e415d1335431d5082f37d0f982aa7e19bce6cd59734080ce8b505c92a7a609e929d69558787382d4a5bdc91a9baaf20c29c799fa567e1633dd3aad6ddc16b905a811e48664fa9b25bc66f382b338231fdc979fc6a50fad6ac0176371a3122a38fd5cb7917e66f56a87d830f1b1a32f689fdc213f91759b1141a85b1de4caa273480e9d3082c5dcdb903ef355782fe91b1a17ed64bfa74248213a4715340b811d9fb72eea34a14a6b9a7a980f103e9c0d5583390f5dadc7d0557fa65b5e4bc0d939be338eb73680315b67ab3bbc5ac22a358685aaa8a17ddbca1a1d5cd2e3fa879a0d00666e8045dce4bbdc602984e1f106ae502d6ac4576f08cf25b99c6eaaa9eee28d1f8a802913e4f1b57bb1ba005dd7895986f4863f3ca3a6543d85612534368a4cb82d3dffe9899d6dff21ef49d9886d7987929e38d3ab5bbe95f9e726156a4b9a32342af51d738df5a804f22a7a30da7c7f9e85cd6fdcd8e5fd54daf1f59fe3bb9a8f376da7e2699291cc11f3ad81d6a48cfb879de31bff864cfcbc21ce545b5b65ff60f1421759fcd871540f72056d2f9d41abbf4f2d6e7e620ed2d838b4c4d1c6119e521c5f403f94372b3ea1fe1e07d5001a47532c1d5607e2288ff03c0d2c79ce13c19d390f8c1bbc19ac22444b8cbf88f48189b075c7785744d086a72b06a244377ad60c1df4c74c5ec3869fc04c2be879d17987484c2484bbf2660ab885f37e2cfef9b49fd01f91b00631d51ed861b42fe4fee07e72ddf8bf3fa5af528fd4ff6fe0837d10660a0a9e8b7e413cfe9e0d4d7d5a40199ce99109940cf56c5cdc0874c28cf00802e04e39d6ceb03f229d9d338f69b0813f513507b70e90020ed1b1748efca7acd167a8d3f4addc6d3c2eda1006f9f83efc3938d6fa1d83172f1dff7e5b43a1e41a22f6eec84b96ee56b2e41694cf7cc4c6d9ee2b59b883e9f49397ddd17cb521f0319a32f2b5cf538b77d5be091233c2b1e3a761643cfdb5b0853bf684cf2b5d0e08aa12912fcc5d4cbeef6a240245942d70e65f8cf430e17b0e8464d011c7a3cb3fa84160ea9d9590c54a87809b10533329d3cd7b623dceab81cc32e56bf420575c6321c948ea44c8e2a045fd54795afa2e6a528940ef09ac9097346140658bb92f37bae9752b35fd37767c4aab9d9a6c38ed0526268c42a26c1f522a62151d7ac66e73fa9aba4699c6a05fe3ca5b15c29f4ef8e3c4b03e5ead1ec746735a65fcf10b36648e98ea880258f0b031a3fcea56c9ce072a3829256a6bd9f98f96653e1d2982af838afd9fc1bb3851079e5f7a13091d04339631208bddda33075d716ccbcc18a58a9200699219654dad549b1f450c8b2891988aed1aae4365ec7cc5547ef49b0fe513a242ab0cd9d99fcfb2aa0bc4cce1e68b28c34c1ee1ac3c5b426c9ec4f5d29262607ebdb944b4fd804506d912817914af6f5ba1649ca3dfdb4fe86b55116f"}, &(0x7f0000000040)=0x1008) epoll_pwait2(r0, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}], 0x7, &(0x7f0000000000)={0x77359400}, &(0x7f0000000100)={[0x9]}, 0x8) clock_adjtime(0x2, &(0x7f0000000a00)={0x480, 0xb, 0x1, 0x3, 0x5, 0x0, 0x5, 0x4, 0xfffe000000000000, 0x8, 0x3, 0xe81c, 0x400, 0x4, 0x8, 0x8, 0x101, 0xfffffffffffffdda, 0x9, 0x1000, 0x0, 0x8, 0x1, 0x4ec769bd, 0x7, 0xf1}) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000002c0)='sched_switch\x00', r1, 0x0, 0x7ffff}, 0x18) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400}) 582.102113ms ago: executing program 3 (id=1905): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x7}, 0x18) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'veth0_virt_wifi\x00', 0x2000000}, 0x18) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f00000002c0)={0x1, 'wg1\x00', 0x3}, 0x18) 581.414283ms ago: executing program 2 (id=1906): set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) io_setup(0x7, &(0x7f0000000180)=0x0) io_submit(r1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x20000000000000b7, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000008", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002e400008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) gettid() socket(0x40000000015, 0x5, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r2, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0x8, &(0x7f0000002000)={0x0, 0x7}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r3 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r3, &(0x7f0000000840)={&(0x7f0000000000)={0x2, 0x4e23}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=[@ip_retopts={{0x18, 0x0, 0x7, {[@noop, @lsrr={0x83, 0x7, 0x4, [@private]}]}}}], 0x18}, 0x8000) r4 = gettid() bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x2004, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x94) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, &(0x7f0000001100)={0x77359400}, 0x1) 529.542226ms ago: executing program 3 (id=1907): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}], 0x1}}], 0x48}, 0x0) 505.580808ms ago: executing program 0 (id=1908): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000240)={'syztnl0\x00', 0x0, 0x29, 0x9, 0x1, 0x4, 0x23, @private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20, 0x710, 0x10000, 0x6}}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000100)={0x9, 0x0}, 0xfffffe40) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000140)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xa, 0x8, &(0x7f0000000740)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180200000020702500000000002020207b1af8ff00000000bfa100000000000007010000dbffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r2, 0x0, 0x8}, 0x18) socket$nl_route(0x10, 0x3, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000380)='kfree\x00', r6, 0x0, 0x4092}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001900)=@newtaction={0xeb4, 0x30, 0xb, 0x0, 0x0, {}, [{0xea0, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0xb, 0x0, 0x0, 0x0, 0x4}}]}, {0x4}, {0xc}, {0xc}}}, @m_pedit={0xe54, 0x2, 0x0, 0x0, {{0xa}, {0xe28, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x1}, [{}, {}, {}, {0x0, 0x0, 0x0, 0x8db}, {0x0, 0x0, 0x7, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x2000000}, {}, {0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0x101}, {}, {}, {}, {0x0, 0x0, 0x1}, {}, {}, {}, {0x0, 0x0, 0x8000000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, {0x0, 0x0, 0x0, 0x3}, {0x40}, {}, {}, {}, {0x400}, {}, {}, {0x0, 0x1000}, {}, {}, {}, {}, {}, {}, {}, {}, {0xd01}, {0x0, 0x0, 0x0, 0x0, 0x3, 0x2000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x9, 0x0, 0x0, 0x0, 0x0, 0x7}, {}, {}, {0x6}, {0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x401}, {}, {0x0, 0xfffffffc}, {0x0, 0x0, 0x8001}, {}, {0x0, 0x0, 0xff}, {}, {}, {}, {}, {0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {}, {0x1, 0x0, 0x0, 0x401}, {0x1000000, 0x0, 0x0, 0x0, 0x0, 0x7}, {}, {0x0, 0x0, 0x0, 0x0, 0x5}, {}, {}, {0x0, 0x0, 0x0, 0x1d4ce113}, {}, {0x400}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x1000000}, {}, {0x2}, {0x0, 0x0, 0x0, 0x7}, {0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {0x400000, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0x9}, {}, {0xfffffffd}, {0x0, 0x0, 0x0, 0x4, 0x4000}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x1}, {0x0, 0x3}, {0x0, 0x0, 0x3}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x40}], [{}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {0x6}, {}, {}, {}, {0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x1}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1, 0x721119ea02b29831}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {0x0, 0x1}, {0x3}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xeb4}}, 0x4000) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYRES64=r7, @ANYRES64=r8], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r9}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0xfe, 0x7ffc0002}]}) chroot(&(0x7f0000000700)='.\x00') bind$unix(r5, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r5, 0x0) connect$unix(r4, &(0x7f0000000640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r5, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 487.13673ms ago: executing program 3 (id=1909): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000000306010200000000000000000a0000010500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x4004810}, 0x840) 471.690891ms ago: executing program 4 (id=1910): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a30000000000800034000"], 0x64}, 0x1, 0x0, 0x0, 0x810}, 0x40404) 447.651283ms ago: executing program 3 (id=1911): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4000, &(0x7f0000000a40)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@norecovery}, {@resuid}, {@quota}]}, 0x8, 0x445, &(0x7f0000001dc0)="$eJzs28tvG0UYAPBv105KX8RU5dEHECiIikfSpKX0wAEQSBxAQoJDOYYkrUrdBjVBolUFBaFyRJW4I45I/AWc4IKAExJX4IwqVSiXFk5Ga+82jmunSbDrEP9+0tYzu+POfJ4de3YnG8DAGs3+SSJ2RMRvETHSyC4vMNp4ubF4cfrvxYvTSdRqb/6V1MtdX7w4XRQt3re9yJQj0k+T2Nem3vnzF05PVauz5/L8+MKZ98bnz1945tSZqZOzJ2fPTh47duTwxHNHJ5/tSpxZXNf3fji3f8+rb195ffr4lXd++iYp4m+Jo0tG2+4tN14er9W6XF1/7WxKJ+U+NoQ1KeWn5FB9/I9EKZY6byRe+aSvjQN6qlar1e7rfPhSDdjEkuh3C4D+KH7os+vfYrtDU48N4dqLjQugLO4b+dY4Uo40LzPUcn3bTaMRcfzSP19mW7Teh9jao0oBgIH2XTb/ebrd/C+N5vtCd+drKJWIuCcidkXE0YjYHRH3RtTL3h8RD6yx/tZFklvnn+nVdQW2Stn87/l8bWv5/K+Y/UWllOd21uMfSk6cqs4eyj+TgzG0JctPrFDH9y//+nmnY83zv2zL6i/mgnk7rpa3LH/PzNTC1H+Judm1jyP2ltvFn9xcCUgiYk9EvLDOOk49+fX+Tsc6xD+8qv+4C+tMta8inmj0/6Voib+QrLw+OX5XVGcPjRdnxa1+/uXyG53qv33/91bW/9vanv9F/H9Ukub12vm113H59886XlOu9/wfTt5atu+DqYWFcxMRw8lr9Xylef9kS7nJpfJZ/AcPtB//u2Lpk9gXEdlJ/GBEPBQRD+dtfyQiHo2IAyvE/+NLj727/vh7K4t/ZsX+j5b+X0oMR+ue9onS6R++XVZpZS3xZ/1/pJ46mO9Zzfffatq1vrMZAAAA/n/SiNgRSTp2M52mY2ONv+HfHdvS6tz8wlMn5t4/O9N4RqASQ2lxp2uk6X7oRH5ZX+QnW/KH8/vGX5S21vNj03PVmX4HDwNue4fxn/mz1O/WAT3neS0YXMY/DC7jHwaX8Q+Dq8349+gZDIh2v/8f9aEdwJ3XMv5XXPYzMYDNxfU/DC7jHwaX8Q8DaX5r3P4h+c2RSCNiAzRjsyQi3RDNkOhRot/fTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAN3xbwAAAP//ynflmQ==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r1, &(0x7f00000009c0)="3bf58d7d45d32c", 0x7) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'ip_vti0\x00'}) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7fffeffd) 416.542506ms ago: executing program 4 (id=1912): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)={0x15, 0x65, 0xffff, 0x4c, 0x8, '9P2000.L'}, 0x15) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) (fail_nth: 16) 340.125912ms ago: executing program 4 (id=1913): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000280)='kfree\x00', r0}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x2c, r2, 0x301, 0x70bd29, 0x25dfdbfc, {0x24}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}]}]}, 0x2c}}, 0x0) 334.178282ms ago: executing program 4 (id=1914): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0f000000040000000800000001"], 0x50) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) cachestat(r1, &(0x7f0000000040)={0x8, 0x7f}, &(0x7f0000000100), 0x0) (async) r2 = fsopen(&(0x7f0000000140)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) (async) r3 = fsmount(r2, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$SEG6_CMD_SET_TUNSRC(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="28010000acec27acbf28b6722258a44e872e952fe522e4483ec1bc6a558966d5db33dd00b96461f1f1f8f902c0b73995a525f15901000000cd846bf1d68b", @ANYRES16=r5, @ANYBLOB="010026bd7000ffdbdf25030000001400010000000000000000000000000000000001"], 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x4) (async) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@o_path={&(0x7f0000000080)='./file0\x00', r0, 0x4000, r3}, 0x18) 302.759735ms ago: executing program 4 (id=1915): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmsg$inet(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000640)}, 0x800) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 0s ago: executing program 1 (id=1916): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x4cfb}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001c00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x29) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000005000000850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r2}, 0x10) lstat(0x0, 0x0) kernel console output (not intermixed with test programs): " exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea152febe9 code=0x7ffc0000 [ 83.108653][ T29] audit: type=1326 audit(1756625065.218:6880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6981 comm="syz.3.1311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fea152febe9 code=0x7ffc0000 [ 83.132083][ T29] audit: type=1326 audit(1756625065.218:6881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6981 comm="syz.3.1311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea152febe9 code=0x7ffc0000 [ 83.155475][ T29] audit: type=1326 audit(1756625065.218:6882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6981 comm="syz.3.1311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea152febe9 code=0x7ffc0000 [ 83.178946][ T29] audit: type=1326 audit(1756625065.218:6883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6981 comm="syz.3.1311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=305 compat=0 ip=0x7fea152febe9 code=0x7ffc0000 [ 83.197784][ T6984] lo speed is unknown, defaulting to 1000 [ 83.202579][ T29] audit: type=1326 audit(1756625833.226:6884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6981 comm="syz.3.1311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea152febe9 code=0x7ffc0000 [ 83.202612][ T29] audit: type=1326 audit(1756625833.226:6885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6981 comm="syz.3.1311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fea152febe9 code=0x7ffc0000 [ 83.255117][ T29] audit: type=1326 audit(1756625833.226:6886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6981 comm="syz.3.1311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea152febe9 code=0x7ffc0000 [ 83.278512][ T29] audit: type=1326 audit(1756625833.226:6887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6981 comm="syz.3.1311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=441 compat=0 ip=0x7fea152febe9 code=0x7ffc0000 [ 83.491475][ T6999] syz_tun: entered allmulticast mode [ 83.545197][ T6998] syz_tun: left allmulticast mode [ 83.606231][ T6974] Set syz1 is full, maxelem 65536 reached [ 83.665908][ T7017] syz_tun: entered allmulticast mode [ 83.680219][ T7016] syz_tun: left allmulticast mode [ 83.766129][ T7025] loop0: detected capacity change from 0 to 512 [ 83.775418][ T7025] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1325: bg 0: block 393: padding at end of block bitmap is not set [ 83.790092][ T7025] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 83.800247][ T7025] EXT4-fs (loop0): 2 truncates cleaned up [ 83.940529][ T7031] lo speed is unknown, defaulting to 1000 [ 83.968859][ T7034] __nla_validate_parse: 4 callbacks suppressed [ 83.968873][ T7034] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1329'. [ 84.161077][ T7045] syz_tun: entered allmulticast mode [ 84.171754][ T7044] syz_tun: left allmulticast mode [ 84.204039][ T7048] loop4: detected capacity change from 0 to 512 [ 84.212282][ T7048] EXT4-fs: Ignoring removed i_version option [ 84.223790][ T7048] EXT4-fs (loop4): 1 truncate cleaned up [ 84.393294][ T7018] FAULT_INJECTION: forcing a failure. [ 84.393294][ T7018] name fail_futex, interval 1, probability 0, space 0, times 1 [ 84.406162][ T7018] CPU: 0 UID: 0 PID: 7018 Comm: syz.2.1321 Not tainted syzkaller #0 PREEMPT(voluntary) [ 84.406186][ T7018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 84.406196][ T7018] Call Trace: [ 84.406202][ T7018] [ 84.406209][ T7018] __dump_stack+0x1d/0x30 [ 84.406273][ T7018] dump_stack_lvl+0xe8/0x140 [ 84.406317][ T7018] dump_stack+0x15/0x1b [ 84.406334][ T7018] should_fail_ex+0x265/0x280 [ 84.406355][ T7018] should_fail+0xb/0x20 [ 84.406373][ T7018] get_futex_key+0x130/0xbd0 [ 84.406398][ T7018] futex_wake+0x7d/0x360 [ 84.406482][ T7018] ? __rcu_read_unlock+0x4f/0x70 [ 84.406502][ T7018] do_futex+0x323/0x380 [ 84.406526][ T7018] mm_release+0xb2/0x1e0 [ 84.406550][ T7018] exit_mm_release+0x25/0x30 [ 84.406594][ T7018] exit_mm+0x38/0x190 [ 84.406615][ T7018] do_exit+0x417/0x15c0 [ 84.406714][ T7018] do_group_exit+0xff/0x140 [ 84.406741][ T7018] ? get_signal+0xe51/0xf70 [ 84.406770][ T7018] get_signal+0xe59/0xf70 [ 84.406825][ T7018] ? __fput_deferred+0x181/0x270 [ 84.406850][ T7018] arch_do_signal_or_restart+0x96/0x480 [ 84.406920][ T7018] exit_to_user_mode_loop+0x7a/0x100 [ 84.406941][ T7018] do_syscall_64+0x1d6/0x200 [ 84.406982][ T7018] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 84.407088][ T7018] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 84.407150][ T7018] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.407172][ T7018] RIP: 0033:0x7f6632c4ebe9 [ 84.407187][ T7018] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 84.407201][ T7018] RSP: 002b:00007f663166d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 84.407240][ T7018] RAX: fffffffffffffe00 RBX: 00007f6632e86180 RCX: 00007f6632c4ebe9 [ 84.407289][ T7018] RDX: 0000000000000001 RSI: 0000200000000280 RDI: 0000000000000003 [ 84.407302][ T7018] RBP: 00007f663166d090 R08: 0000000000000000 R09: 0000000000000000 [ 84.407333][ T7018] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 84.407346][ T7018] R13: 00007f6632e86218 R14: 00007f6632e86180 R15: 00007ffda53e0bb8 [ 84.407364][ T7018] [ 84.460851][ T7043] Set syz1 is full, maxelem 65536 reached [ 84.569625][ T7058] loop2: detected capacity change from 0 to 512 [ 84.644815][ T7058] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 84.652916][ T7058] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 84.661978][ T7058] EXT4-fs (loop2): 1 truncate cleaned up [ 84.669363][ T7058] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 84.682566][ T7059] siw: device registration error -23 [ 84.701393][ T7059] loop4: detected capacity change from 0 to 512 [ 84.721766][ T7058] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 84.773922][ T7059] ext4 filesystem being mounted at /247/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.780801][ T7074] loop2: detected capacity change from 0 to 512 [ 84.792170][ T7070] loop3: detected capacity change from 0 to 512 [ 84.801129][ T7070] EXT4-fs: Ignoring removed i_version option [ 84.807723][ T7076] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1344'. [ 84.826115][ T7078] syz_tun: entered allmulticast mode [ 84.835601][ T7070] EXT4-fs (loop3): 1 truncate cleaned up [ 84.867382][ T7082] netlink: 'syz.0.1346': attribute type 21 has an invalid length. [ 84.876114][ T7074] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 84.888625][ T7074] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 84.902347][ T7077] syz_tun: left allmulticast mode [ 84.912418][ T7074] EXT4-fs (loop2): 1 truncate cleaned up [ 84.925068][ T7074] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 84.942975][ T7074] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 85.049598][ T7082] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.056862][ T7082] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.142727][ T7099] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1351'. [ 85.174662][ T7082] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 85.205759][ T7082] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 85.325377][ T7091] Set syz1 is full, maxelem 65536 reached [ 85.357211][ T52] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.370754][ T52] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.380062][ T52] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.390937][ T52] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.409750][ T7108] loop4: detected capacity change from 0 to 512 [ 85.412008][ T7110] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1355'. [ 85.437755][ T7108] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 85.446213][ T7108] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 85.456195][ T7108] EXT4-fs (loop4): 1 truncate cleaned up [ 85.464735][ T7108] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000. [ 85.479342][ T7108] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 85.505597][ T7110] lo speed is unknown, defaulting to 1000 [ 85.649428][ T7121] siw: device registration error -23 [ 85.657744][ T7121] loop0: detected capacity change from 0 to 512 [ 85.677829][ T7123] loop4: detected capacity change from 0 to 512 [ 85.687842][ T7123] EXT4-fs: Ignoring removed i_version option [ 85.695367][ T7123] EXT4-fs (loop4): 1 truncate cleaned up [ 85.701688][ T7121] ext4 filesystem being mounted at /288/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.792939][ T7133] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1362'. [ 85.803289][ T7133] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1362'. [ 85.956155][ T7144] loop2: detected capacity change from 0 to 512 [ 85.985976][ T7144] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 85.994078][ T7144] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 86.006280][ T7144] EXT4-fs (loop2): 1 truncate cleaned up [ 86.024430][ T7144] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 86.058975][ T7144] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 86.240918][ T7137] Set syz1 is full, maxelem 65536 reached [ 86.306341][ T7158] lo speed is unknown, defaulting to 1000 [ 86.386881][ T7168] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1375'. [ 86.411596][ T7170] loop1: detected capacity change from 0 to 512 [ 86.432710][ T7170] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 86.449371][ T7170] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 86.458474][ T7174] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1377'. [ 86.477120][ T7170] EXT4-fs (loop1): 1 truncate cleaned up [ 86.538403][ T7170] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000. [ 86.554356][ T7170] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 86.663893][ T7195] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1386'. [ 86.794418][ T7197] lo speed is unknown, defaulting to 1000 [ 86.931013][ T7187] Set syz1 is full, maxelem 65536 reached [ 86.963146][ T7206] loop2: detected capacity change from 0 to 512 [ 86.974804][ T7206] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 86.974844][ T7204] loop3: detected capacity change from 0 to 512 [ 86.983883][ T7206] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 86.999578][ T7204] EXT4-fs: Ignoring removed i_version option [ 87.015510][ T7206] EXT4-fs (loop2): 1 truncate cleaned up [ 87.021339][ T7204] EXT4-fs (loop3): 1 truncate cleaned up [ 87.030438][ T7206] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 87.040903][ T7206] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 87.111724][ T7214] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1393'. [ 87.140706][ T7216] lo speed is unknown, defaulting to 1000 [ 87.199900][ T7224] lo speed is unknown, defaulting to 1000 [ 87.284937][ T7230] loop2: detected capacity change from 0 to 512 [ 87.310672][ T7230] ext4 filesystem being mounted at /304/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 87.336815][ T7230] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #2: comm syz.2.1399: corrupted inode contents [ 87.349196][ T7230] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #2: comm syz.2.1399: mark_inode_dirty error [ 87.361152][ T7230] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #2: comm syz.2.1399: corrupted inode contents [ 87.374051][ T7230] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #2: comm syz.2.1399: mark_inode_dirty error [ 87.387270][ T7230] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #2: comm syz.2.1399: corrupted inode contents [ 87.400398][ T7230] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #2: comm syz.2.1399: mark_inode_dirty error [ 87.412111][ T7230] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #2: comm syz.2.1399: corrupted inode contents [ 87.425889][ T7230] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #2: comm syz.2.1399: corrupted inode contents [ 87.438287][ T7230] EXT4-fs error (device loop2): ext4_setent:3648: inode #2: comm syz.2.1399: mark_inode_dirty error [ 87.449864][ T7230] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #2: comm syz.2.1399: corrupted inode contents [ 87.574343][ T7245] lo speed is unknown, defaulting to 1000 [ 87.616973][ T7256] loop1: detected capacity change from 0 to 512 [ 87.638247][ T7237] lo speed is unknown, defaulting to 1000 [ 87.638783][ T7256] ext4 filesystem being mounted at /284/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 87.680605][ T7256] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #2: comm syz.1.1406: corrupted inode contents [ 87.693605][ T7256] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #2: comm syz.1.1406: mark_inode_dirty error [ 87.705432][ T7256] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #2: comm syz.1.1406: corrupted inode contents [ 87.742936][ T7256] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #2: comm syz.1.1406: mark_inode_dirty error [ 87.759265][ T7256] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #2: comm syz.1.1406: corrupted inode contents [ 87.772508][ T7256] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #2: comm syz.1.1406: mark_inode_dirty error [ 87.774199][ T29] kauditd_printk_skb: 1197 callbacks suppressed [ 87.774212][ T29] audit: type=1326 audit(1756628910.229:8085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7251 comm="syz.2.1404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6632c45ba7 code=0x7ffc0000 [ 87.785392][ T7256] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #2: comm syz.1.1406: corrupted inode contents [ 87.794216][ T29] audit: type=1326 audit(1756628910.250:8086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7251 comm="syz.2.1404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6632beadb9 code=0x7ffc0000 [ 87.830376][ T7263] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #2: comm syz.1.1406: corrupted inode contents [ 87.849243][ T29] audit: type=1326 audit(1756628910.250:8087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7251 comm="syz.2.1404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6632c45ba7 code=0x7ffc0000 [ 87.884040][ T29] audit: type=1326 audit(1756628910.250:8088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7251 comm="syz.2.1404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6632beadb9 code=0x7ffc0000 [ 87.885633][ T7263] EXT4-fs error (device loop1): ext4_setent:3648: inode #2: comm syz.1.1406: mark_inode_dirty error [ 87.907414][ T29] audit: type=1326 audit(1756628910.250:8089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7251 comm="syz.2.1404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f6632c4ebe9 code=0x7ffc0000 [ 87.941654][ T29] audit: type=1326 audit(1756628910.250:8090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7251 comm="syz.2.1404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6632c45ba7 code=0x7ffc0000 [ 87.943959][ T7263] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #2: comm syz.1.1406: corrupted inode contents [ 87.965035][ T29] audit: type=1326 audit(1756628910.250:8091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7251 comm="syz.2.1404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6632beadb9 code=0x7ffc0000 [ 88.000196][ T29] audit: type=1326 audit(1756628910.250:8092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7251 comm="syz.2.1404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f6632c4ebe9 code=0x7ffc0000 [ 88.023829][ T29] audit: type=1326 audit(1756628910.281:8093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7251 comm="syz.2.1404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6632c45ba7 code=0x7ffc0000 [ 88.047154][ T29] audit: type=1326 audit(1756628910.281:8094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7251 comm="syz.2.1404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6632beadb9 code=0x7ffc0000 [ 88.234357][ T7282] loop0: detected capacity change from 0 to 512 [ 88.254652][ T7282] ext4 filesystem being mounted at /302/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 88.266317][ T7282] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #2: comm syz.0.1413: corrupted inode contents [ 88.278557][ T7282] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #2: comm syz.0.1413: mark_inode_dirty error [ 88.290493][ T7282] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #2: comm syz.0.1413: corrupted inode contents [ 88.302953][ T7282] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #2: comm syz.0.1413: mark_inode_dirty error [ 88.316959][ T7282] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #2: comm syz.0.1413: corrupted inode contents [ 88.329918][ T7282] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #2: comm syz.0.1413: mark_inode_dirty error [ 88.341674][ T7282] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #2: comm syz.0.1413: corrupted inode contents [ 88.355301][ T7282] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #2: comm syz.0.1413: corrupted inode contents [ 88.368238][ T7282] EXT4-fs error (device loop0): ext4_setent:3648: inode #2: comm syz.0.1413: mark_inode_dirty error [ 88.379335][ T7282] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #2: comm syz.0.1413: corrupted inode contents [ 88.453687][ T7295] loop4: detected capacity change from 0 to 512 [ 88.466570][ T7295] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 88.475672][ T7295] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 88.484469][ T7293] loop2: detected capacity change from 0 to 512 [ 88.491378][ T7293] EXT4-fs: Ignoring removed i_version option [ 88.509695][ T7293] EXT4-fs (loop2): 1 truncate cleaned up [ 88.524303][ T7295] EXT4-fs (loop4): 1 truncate cleaned up [ 88.535187][ T7295] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000. [ 88.549762][ T7295] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 88.624433][ T7305] syz_tun: entered allmulticast mode [ 88.639071][ T7304] syz_tun: left allmulticast mode [ 88.749333][ T7318] __nla_validate_parse: 8 callbacks suppressed [ 88.749346][ T7318] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1426'. [ 88.807978][ T7323] netlink: 'syz.0.1427': attribute type 21 has an invalid length. [ 88.839808][ T7323] loop0: detected capacity change from 0 to 128 [ 88.854703][ T7323] bio_check_eod: 17 callbacks suppressed [ 88.854713][ T7323] syz.0.1427: attempt to access beyond end of device [ 88.854713][ T7323] loop0: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 88.874267][ T7323] syz.0.1427: attempt to access beyond end of device [ 88.874267][ T7323] loop0: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 88.887861][ T7323] syz.0.1427: attempt to access beyond end of device [ 88.887861][ T7323] loop0: rw=2049, sector=177, nr_sectors = 24 limit=128 [ 88.902429][ T7323] syz.0.1427: attempt to access beyond end of device [ 88.902429][ T7323] loop0: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 88.916129][ T7323] syz.0.1427: attempt to access beyond end of device [ 88.916129][ T7323] loop0: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 88.930558][ T7323] syz.0.1427: attempt to access beyond end of device [ 88.930558][ T7323] loop0: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 88.944137][ T7323] syz.0.1427: attempt to access beyond end of device [ 88.944137][ T7323] loop0: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 88.958100][ T7323] syz.0.1427: attempt to access beyond end of device [ 88.958100][ T7323] loop0: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 88.972746][ T7323] syz.0.1427: attempt to access beyond end of device [ 88.972746][ T7323] loop0: rw=2049, sector=289, nr_sectors = 9 limit=128 [ 89.117593][ T7339] syz_tun: entered allmulticast mode [ 89.138430][ T7338] syz_tun: left allmulticast mode [ 89.150811][ T7341] loop3: detected capacity change from 0 to 512 [ 89.166589][ T7341] EXT4-fs: Ignoring removed i_version option [ 89.177833][ T7341] EXT4-fs (loop3): 1 truncate cleaned up [ 89.266706][ T7352] siw: device registration error -23 [ 89.275365][ T7352] loop0: detected capacity change from 0 to 512 [ 89.301509][ T7352] ext4 filesystem being mounted at /313/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.345222][ T7361] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1442'. [ 89.388648][ T7363] vlan2: entered allmulticast mode [ 89.416643][ T7371] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1447'. [ 89.431896][ T7371] loop0: detected capacity change from 0 to 512 [ 89.438365][ T7372] loop3: detected capacity change from 0 to 2048 [ 89.464044][ T7371] ext4 filesystem being mounted at /315/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 89.475828][ T7371] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #2: comm syz.0.1447: corrupted inode contents [ 89.489083][ T7371] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #2: comm syz.0.1447: mark_inode_dirty error [ 89.501047][ T7371] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #2: comm syz.0.1447: corrupted inode contents [ 89.513242][ T7371] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #2: comm syz.0.1447: mark_inode_dirty error [ 89.534142][ T7371] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #2: comm syz.0.1447: corrupted inode contents [ 89.540828][ T7380] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1448'. [ 89.555995][ T7371] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #2: comm syz.0.1447: mark_inode_dirty error [ 89.572930][ T7371] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #2: comm syz.0.1447: corrupted inode contents [ 89.589772][ T7363] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 89.614278][ T7371] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #2: comm syz.0.1447: corrupted inode contents [ 89.636951][ T7363] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 998 with error 28 [ 89.649375][ T7363] EXT4-fs (loop3): This should not happen!! Data will be lost [ 89.649375][ T7363] [ 89.650140][ T7371] EXT4-fs error (device loop0): ext4_setent:3648: inode #2: comm syz.0.1447: mark_inode_dirty error [ 89.659027][ T7363] EXT4-fs (loop3): Total free blocks count 0 [ 89.659045][ T7363] EXT4-fs (loop3): Free/Dirty block details [ 89.659087][ T7363] EXT4-fs (loop3): free_blocks=2415919104 [ 89.659100][ T7363] EXT4-fs (loop3): dirty_blocks=1008 [ 89.671790][ T7371] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #2: comm syz.0.1447: corrupted inode contents [ 89.675859][ T7363] EXT4-fs (loop3): Block reservation details [ 89.710457][ T7363] EXT4-fs (loop3): i_reserved_data_blocks=63 [ 89.716278][ T7380] lo speed is unknown, defaulting to 1000 [ 89.794955][ T7393] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1452'. [ 89.806604][ T7393] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1452'. [ 89.842637][ T7391] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1451'. [ 89.894880][ T7397] loop4: detected capacity change from 0 to 512 [ 89.907360][ T7397] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 89.920585][ T7397] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 89.966350][ T7397] EXT4-fs (loop4): 1 truncate cleaned up [ 90.014777][ T7409] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1459'. [ 90.023896][ T7409] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1459'. [ 90.032895][ T7409] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1459'. [ 90.065873][ T7414] siw: device registration error -23 [ 90.074230][ T7414] loop0: detected capacity change from 0 to 512 [ 90.093774][ T7414] ext4 filesystem being mounted at /322/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.258780][ T52] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 90.271033][ T52] EXT4-fs (loop3): This should not happen!! Data will be lost [ 90.271033][ T52] [ 90.314002][ T7426] loop0: detected capacity change from 0 to 512 [ 90.330514][ T7426] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 90.360860][ T7428] loop3: detected capacity change from 0 to 512 [ 90.387675][ T7426] EXT4-fs (loop0): 1 truncate cleaned up [ 90.394998][ T7428] ext4 filesystem being mounted at /260/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 90.407209][ T7428] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #2: comm syz.3.1464: corrupted inode contents [ 90.424649][ T7428] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #2: comm syz.3.1464: mark_inode_dirty error [ 90.445753][ T7428] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #2: comm syz.3.1464: corrupted inode contents [ 90.473701][ T7428] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #2: comm syz.3.1464: mark_inode_dirty error [ 90.491704][ T7428] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #2: comm syz.3.1464: corrupted inode contents [ 90.553648][ T7428] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #2: comm syz.3.1464: mark_inode_dirty error [ 90.574529][ T7428] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #2: comm syz.3.1464: corrupted inode contents [ 90.593956][ T7445] netlink: 'syz.1.1470': attribute type 13 has an invalid length. [ 90.610550][ T7445] gretap0: refused to change device tx_queue_len [ 90.623248][ T7445] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 90.641959][ T7437] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #2: comm syz.3.1464: corrupted inode contents [ 90.654845][ T7437] EXT4-fs error (device loop3): ext4_setent:3648: inode #2: comm syz.3.1464: mark_inode_dirty error [ 90.673079][ T7437] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #2: comm syz.3.1464: corrupted inode contents [ 90.724430][ T7455] lo speed is unknown, defaulting to 1000 [ 90.890407][ T7472] loop4: detected capacity change from 0 to 512 [ 90.897093][ T7472] EXT4-fs: Ignoring removed i_version option [ 90.917908][ T7472] EXT4-fs (loop4): 1 truncate cleaned up [ 90.933104][ T7478] loop2: detected capacity change from 0 to 512 [ 90.946651][ T7478] EXT4-fs: Ignoring removed i_version option [ 90.967585][ T7478] EXT4-fs (loop2): 1 truncate cleaned up [ 91.062464][ T7486] netlink: 'syz.4.1483': attribute type 21 has an invalid length. [ 91.085374][ T7486] loop4: detected capacity change from 0 to 128 [ 91.109617][ T7486] syz.4.1483: attempt to access beyond end of device [ 91.109617][ T7486] loop4: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 91.208698][ T7486] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.215991][ T7486] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.293038][ T7486] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 91.329986][ T7486] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 91.445242][ T31] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.465882][ T31] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.475476][ T31] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.494837][ T31] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.590372][ T7524] netlink: 'syz.2.1490': attribute type 21 has an invalid length. [ 91.607368][ T7524] loop2: detected capacity change from 0 to 128 [ 91.623978][ T7524] vlan2: left allmulticast mode [ 91.677531][ T7532] loop0: detected capacity change from 0 to 512 [ 91.687155][ T7532] EXT4-fs: Ignoring removed i_version option [ 91.699737][ T7532] EXT4-fs (loop0): 1 truncate cleaned up [ 91.820272][ T7549] loop0: detected capacity change from 0 to 512 [ 91.835647][ T7549] ext4 filesystem being mounted at /331/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 91.857028][ T7555] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 91.857473][ T7549] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #2: comm syz.0.1499: corrupted inode contents [ 91.960997][ T7549] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #2: comm syz.0.1499: mark_inode_dirty error [ 91.973429][ T7549] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #2: comm syz.0.1499: corrupted inode contents [ 91.992180][ T7549] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #2: comm syz.0.1499: mark_inode_dirty error [ 92.005237][ T7559] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #2: comm syz.0.1499: corrupted inode contents [ 92.017464][ T7559] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #2: comm syz.0.1499: mark_inode_dirty error [ 92.029290][ T7559] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #2: comm syz.0.1499: corrupted inode contents [ 92.042907][ T7549] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #2: comm syz.0.1499: corrupted inode contents [ 92.055076][ T7549] EXT4-fs error (device loop0): ext4_setent:3648: inode #2: comm syz.0.1499: mark_inode_dirty error [ 92.066373][ T7549] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #2: comm syz.0.1499: corrupted inode contents [ 92.267797][ T7583] loop0: detected capacity change from 0 to 1024 [ 92.275086][ T7583] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 92.286003][ T7583] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 92.297647][ T7583] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.1512: Invalid block bitmap block 0 in block_group 0 [ 92.311618][ T7583] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.1512: Failed to acquire dquot type 0 [ 92.323107][ T7583] EXT4-fs error (device loop0): ext4_free_blocks:6696: comm syz.0.1512: Freeing blocks not in datazone - block = 0, count = 4096 [ 92.336912][ T7583] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm syz.0.1512: Invalid inode bitmap blk 0 in block_group 0 [ 92.337732][ T51] EXT4-fs error (device loop0): ext4_release_dquot:6973: comm kworker/u8:3: Failed to release dquot type 0 [ 92.350490][ T7583] EXT4-fs error (device loop0) in ext4_free_inode:361: Corrupt filesystem [ 92.369806][ T7583] EXT4-fs (loop0): 1 orphan inode deleted [ 92.433073][ T7585] IPVS: stopping master sync thread 4275 ... [ 92.512907][ T7583] syz.0.1512 (7583) used greatest stack depth: 9488 bytes left [ 92.537703][ T29] kauditd_printk_skb: 1872 callbacks suppressed [ 92.537719][ T29] audit: type=1326 audit(1756631987.224:9964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7592 comm="syz.4.1516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f336fbdebe9 code=0x7ffc0000 [ 92.567456][ T29] audit: type=1326 audit(1756631987.224:9965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7592 comm="syz.4.1516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f336fbdebe9 code=0x7ffc0000 [ 92.591051][ T29] audit: type=1326 audit(1756631987.224:9966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7592 comm="syz.4.1516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f336fbdebe9 code=0x7ffc0000 [ 92.614795][ T29] audit: type=1326 audit(1756631987.224:9967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7592 comm="syz.4.1516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f336fbdebe9 code=0x7ffc0000 [ 92.638328][ T29] audit: type=1326 audit(1756631987.224:9968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7592 comm="syz.4.1516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f336fbdebe9 code=0x7ffc0000 [ 92.661707][ T29] audit: type=1326 audit(1756631987.224:9969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7592 comm="syz.4.1516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f336fbdebe9 code=0x7ffc0000 [ 92.685372][ T29] audit: type=1326 audit(1756631987.224:9970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7592 comm="syz.4.1516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f336fbdebe9 code=0x7ffc0000 [ 92.715703][ T7595] IPVS: Error connecting to the multicast addr [ 92.748793][ T29] audit: type=1326 audit(1756631987.434:9971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7600 comm="syz.3.1519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea152febe9 code=0x7ffc0000 [ 92.772384][ T29] audit: type=1326 audit(1756631987.434:9972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7600 comm="syz.3.1519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fea152febe9 code=0x7ffc0000 [ 92.796065][ T29] audit: type=1326 audit(1756631987.434:9973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7600 comm="syz.3.1519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea152febe9 code=0x7ffc0000 [ 92.980760][ T7623] netlink: 'syz.1.1528': attribute type 21 has an invalid length. [ 93.012829][ T7623] loop1: detected capacity change from 0 to 128 [ 93.230456][ T7635] loop1: detected capacity change from 0 to 512 [ 93.240861][ T7605] Set syz1 is full, maxelem 65536 reached [ 93.284422][ T7635] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 93.309077][ T7637] loop2: detected capacity change from 0 to 512 [ 93.343942][ T7635] EXT4-fs (loop1): orphan cleanup on readonly fs [ 93.357978][ T7637] ext4 filesystem being mounted at /329/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 93.397089][ T7637] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #2: comm syz.2.1533: corrupted inode contents [ 93.417993][ T7635] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.1530: Failed to acquire dquot type 1 [ 93.437612][ T7642] loop4: detected capacity change from 0 to 512 [ 93.448761][ T7642] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 93.464354][ T7637] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #2: comm syz.2.1533: mark_inode_dirty error [ 93.486884][ T7635] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1530: bg 0: block 40: padding at end of block bitmap is not set [ 93.505681][ T7637] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #2: comm syz.2.1533: corrupted inode contents [ 93.523054][ T7635] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 93.533097][ T7635] EXT4-fs (loop1): 1 truncate cleaned up [ 93.542440][ T7637] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #2: comm syz.2.1533: mark_inode_dirty error [ 93.553914][ T7642] Illegal XDP return value 4294967274 on prog (id 952) dev N/A, expect packet loss! [ 93.583110][ T7644] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #2: comm syz.2.1533: corrupted inode contents [ 93.596388][ T7644] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #2: comm syz.2.1533: mark_inode_dirty error [ 93.608484][ T7630] __nla_validate_parse: 14 callbacks suppressed [ 93.608497][ T7630] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1530'. [ 93.614356][ T7644] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #2: comm syz.2.1533: corrupted inode contents [ 93.649848][ T7630] bridge0: port 3(macvlan2) entered blocking state [ 93.656467][ T7630] bridge0: port 3(macvlan2) entered disabled state [ 93.673542][ T7646] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #2: comm syz.2.1533: corrupted inode contents [ 93.678245][ T7630] macvlan2: entered allmulticast mode [ 93.689147][ T7646] EXT4-fs error (device loop2): ext4_setent:3648: inode #2: comm syz.2.1533: mark_inode_dirty error [ 93.695882][ T7630] bridge0: entered allmulticast mode [ 93.712729][ T7646] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #2: comm syz.2.1533: corrupted inode contents [ 93.730907][ T7630] macvlan2: left allmulticast mode [ 93.736105][ T7630] bridge0: left allmulticast mode [ 93.796266][ T3308] EXT4-fs unmount: 97 callbacks suppressed [ 93.796360][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.882274][ T7665] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1542'. [ 93.892204][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.988472][ T7676] siw: device registration error -23 [ 94.000814][ T7676] loop0: detected capacity change from 0 to 512 [ 94.020394][ T7682] loop4: detected capacity change from 0 to 1024 [ 94.041078][ T7682] EXT4-fs: Ignoring removed bh option [ 94.052710][ T7682] EXT4-fs: inline encryption not supported [ 94.077754][ T7676] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.092515][ T7676] ext4 filesystem being mounted at /345/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.103809][ T7682] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 94.131331][ T7682] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 94.140466][ T7682] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 2: comm syz.4.1550: lblock 2 mapped to illegal pblock 2 (length 1) [ 94.155179][ T7682] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 48: comm syz.4.1550: lblock 0 mapped to illegal pblock 48 (length 1) [ 94.170066][ T7682] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.1550: Failed to acquire dquot type 0 [ 94.191124][ T7682] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 94.200721][ T7682] EXT4-fs error (device loop4): ext4_evict_inode:254: inode #11: comm syz.4.1550: mark_inode_dirty error [ 94.212964][ T7682] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 94.223272][ T7682] EXT4-fs (loop4): 1 orphan inode deleted [ 94.231182][ T7682] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.265302][ T52] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 94.279940][ T52] EXT4-fs error (device loop4): ext4_release_dquot:6973: comm kworker/u8:4: Failed to release dquot type 0 [ 94.292809][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.302616][ T7682] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 48: comm syz.4.1550: lblock 0 mapped to illegal pblock 48 (length 1) [ 94.387862][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.415394][ T7694] siw: device registration error -23 [ 94.423725][ T7694] loop0: detected capacity change from 0 to 512 [ 94.444588][ T7666] Set syz1 is full, maxelem 65536 reached [ 94.456044][ T7694] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.476007][ T7698] loop2: detected capacity change from 0 to 512 [ 94.477445][ T7694] ext4 filesystem being mounted at /346/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.504939][ T7698] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 94.514579][ T7698] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 94.523705][ T7698] EXT4-fs (loop2): 1 truncate cleaned up [ 94.532111][ T7700] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1556'. [ 94.541193][ T7700] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1556'. [ 94.549771][ T7698] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.564150][ T7698] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 94.573833][ T7698] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 94.601360][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.629064][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.660855][ T7708] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1557'. [ 94.729796][ T7719] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1563'. [ 94.747903][ T7719] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1563'. [ 94.916633][ T7737] siw: device registration error -23 [ 94.924840][ T7737] loop1: detected capacity change from 0 to 512 [ 94.948607][ T7737] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.961207][ T7737] ext4 filesystem being mounted at /314/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.994265][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.078909][ T7743] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1572'. [ 95.136253][ T7749] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1575'. [ 95.205506][ T7749] lo speed is unknown, defaulting to 1000 [ 95.641160][ T7767] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1582'. [ 95.668238][ T7767] loop4: detected capacity change from 0 to 512 [ 95.750713][ T7767] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.763712][ T7767] ext4 filesystem being mounted at /295/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 95.777983][ T7767] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #2: comm syz.4.1582: corrupted inode contents [ 95.790339][ T7767] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #2: comm syz.4.1582: mark_inode_dirty error [ 95.802426][ T7767] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #2: comm syz.4.1582: corrupted inode contents [ 95.815173][ T7767] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #2: comm syz.4.1582: mark_inode_dirty error [ 95.828043][ T7783] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #2: comm syz.4.1582: corrupted inode contents [ 95.870908][ T7783] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #2: comm syz.4.1582: mark_inode_dirty error [ 95.883704][ T7783] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #2: comm syz.4.1582: corrupted inode contents [ 95.912097][ T7784] lo speed is unknown, defaulting to 1000 [ 96.021639][ T7767] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #2: comm syz.4.1582: corrupted inode contents [ 96.051507][ T7767] EXT4-fs error (device loop4): ext4_setent:3648: inode #2: comm syz.4.1582: mark_inode_dirty error [ 96.065204][ T7767] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #2: comm syz.4.1582: corrupted inode contents [ 96.188030][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.054431][ T7805] loop0: detected capacity change from 0 to 512 [ 97.082753][ T7805] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.095795][ T7805] ext4 filesystem being mounted at /350/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 97.108064][ T7805] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #2: comm syz.0.1593: corrupted inode contents [ 97.120980][ T7805] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #2: comm syz.0.1593: mark_inode_dirty error [ 97.132885][ T7805] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #2: comm syz.0.1593: corrupted inode contents [ 97.145908][ T7805] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #2: comm syz.0.1593: mark_inode_dirty error [ 97.160882][ T7805] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #2: comm syz.0.1593: corrupted inode contents [ 97.172911][ T7805] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #2: comm syz.0.1593: mark_inode_dirty error [ 97.185639][ T7805] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #2: comm syz.0.1593: corrupted inode contents [ 97.199152][ T7805] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #2: comm syz.0.1593: corrupted inode contents [ 97.211477][ T7805] EXT4-fs error (device loop0): ext4_setent:3648: inode #2: comm syz.0.1593: mark_inode_dirty error [ 97.223433][ T7805] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #2: comm syz.0.1593: corrupted inode contents [ 97.240069][ T7813] netlink: 'syz.4.1595': attribute type 21 has an invalid length. [ 97.260344][ T7813] loop4: detected capacity change from 0 to 128 [ 97.272588][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.277014][ T7813] bio_check_eod: 26 callbacks suppressed [ 97.277027][ T7813] syz.4.1595: attempt to access beyond end of device [ 97.277027][ T7813] loop4: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 97.301222][ T7813] syz.4.1595: attempt to access beyond end of device [ 97.301222][ T7813] loop4: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 97.309676][ T29] kauditd_printk_skb: 591 callbacks suppressed [ 97.309690][ T29] audit: type=1326 audit(1756633528.235:10559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7792 comm="syz.2.1589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6632c45ba7 code=0x7ffc0000 [ 97.314693][ T7813] syz.4.1595: attempt to access beyond end of device [ 97.314693][ T7813] loop4: rw=2049, sector=177, nr_sectors = 24 limit=128 [ 97.320888][ T29] audit: type=1326 audit(1756633528.235:10560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7792 comm="syz.2.1589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6632beadb9 code=0x7ffc0000 [ 97.344436][ T7813] syz.4.1595: attempt to access beyond end of device [ 97.344436][ T7813] loop4: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 97.357842][ T29] audit: type=1326 audit(1756633528.235:10561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7792 comm="syz.2.1589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f6632c4ebe9 code=0x7ffc0000 [ 97.382544][ T29] audit: type=1326 audit(1756633528.319:10562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7792 comm="syz.2.1589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6632c45ba7 code=0x7ffc0000 [ 97.424506][ T7813] syz.4.1595: attempt to access beyond end of device [ 97.424506][ T7813] loop4: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 97.441704][ T29] audit: type=1326 audit(1756633528.319:10563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7792 comm="syz.2.1589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6632beadb9 code=0x7ffc0000 [ 97.441820][ T29] audit: type=1326 audit(1756633528.319:10564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7792 comm="syz.2.1589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f6632c4ebe9 code=0x7ffc0000 [ 97.503431][ T7813] syz.4.1595: attempt to access beyond end of device [ 97.503431][ T7813] loop4: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 97.517294][ T7813] syz.4.1595: attempt to access beyond end of device [ 97.517294][ T7813] loop4: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 97.531596][ T7813] syz.4.1595: attempt to access beyond end of device [ 97.531596][ T7813] loop4: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 97.545642][ T7813] syz.4.1595: attempt to access beyond end of device [ 97.545642][ T7813] loop4: rw=2049, sector=289, nr_sectors = 9 limit=128 [ 97.561217][ T7820] netlink: 'syz.0.1597': attribute type 21 has an invalid length. [ 97.589824][ T29] audit: type=1326 audit(1756633528.529:10565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7822 comm="syz.2.1598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6632c4ebe9 code=0x7ffc0000 [ 97.613684][ T29] audit: type=1326 audit(1756633528.529:10566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7822 comm="syz.2.1598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6632c4ebe9 code=0x7ffc0000 [ 97.637278][ T29] audit: type=1326 audit(1756633528.529:10567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7822 comm="syz.2.1598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6632c4ebe9 code=0x7ffc0000 [ 97.660858][ T29] audit: type=1326 audit(1756633528.529:10568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7822 comm="syz.2.1598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6632c4ebe9 code=0x7ffc0000 [ 97.695981][ T7825] loop4: detected capacity change from 0 to 512 [ 97.703785][ T7825] EXT4-fs: Ignoring removed i_version option [ 97.735320][ T7825] EXT4-fs (loop4): 1 truncate cleaned up [ 97.742011][ T7820] loop0: detected capacity change from 0 to 128 [ 97.754364][ T7828] siw: device registration error -23 [ 97.773755][ T7828] loop3: detected capacity change from 0 to 512 [ 97.781038][ T7825] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.794095][ T7832] loop1: detected capacity change from 0 to 512 [ 97.805664][ T7836] 9pnet_fd: Insufficient options for proto=fd [ 97.821212][ T7832] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 97.836102][ T7832] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 97.846170][ T7828] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.859053][ T7832] EXT4-fs (loop1): 1 truncate cleaned up [ 97.868886][ T7832] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.885916][ T7828] ext4 filesystem being mounted at /278/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.892507][ T7825] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.912840][ T7832] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000. [ 97.932520][ T7832] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 97.955091][ T7845] lo speed is unknown, defaulting to 1000 [ 97.972309][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.051191][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.127479][ T7857] lo speed is unknown, defaulting to 1000 [ 98.158027][ T7864] netlink: 'syz.3.1613': attribute type 21 has an invalid length. [ 98.161324][ T7854] lo speed is unknown, defaulting to 1000 [ 98.201753][ T7864] loop3: detected capacity change from 0 to 128 [ 98.335911][ T7875] lo speed is unknown, defaulting to 1000 [ 98.459267][ T7883] loop4: detected capacity change from 0 to 1024 [ 98.476410][ T7887] __nla_validate_parse: 4 callbacks suppressed [ 98.476508][ T7887] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1620'. [ 98.508676][ T7883] EXT4-fs: Ignoring removed bh option [ 98.520039][ T7883] EXT4-fs: inline encryption not supported [ 98.526297][ T7883] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 98.537899][ T7883] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 98.546874][ T7883] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 2: comm syz.4.1619: lblock 2 mapped to illegal pblock 2 (length 1) [ 98.561952][ T7883] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 48: comm syz.4.1619: lblock 0 mapped to illegal pblock 48 (length 1) [ 98.579162][ T7883] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.1619: Failed to acquire dquot type 0 [ 98.599148][ T7883] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 98.630086][ T7888] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 98.647969][ T7887] lo speed is unknown, defaulting to 1000 [ 98.649408][ T7883] EXT4-fs error (device loop4): ext4_evict_inode:254: inode #11: comm syz.4.1619: mark_inode_dirty error [ 98.673854][ T7883] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 98.684380][ T7883] EXT4-fs (loop4): 1 orphan inode deleted [ 98.690999][ T7883] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.711134][ T31] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 98.736406][ T31] EXT4-fs error (device loop4): ext4_release_dquot:6973: comm kworker/u8:1: Failed to release dquot type 0 [ 98.750187][ T7883] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 48: comm syz.4.1619: lblock 0 mapped to illegal pblock 48 (length 1) [ 98.786742][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.881919][ T7928] lo speed is unknown, defaulting to 1000 [ 98.898824][ T7930] netlink: 'syz.4.1625': attribute type 21 has an invalid length. [ 98.975445][ T7939] netlink: 'syz.4.1632': attribute type 21 has an invalid length. [ 98.999134][ T7939] loop4: detected capacity change from 0 to 128 [ 99.049257][ T7939] syz.4.1632: attempt to access beyond end of device [ 99.049257][ T7939] loop4: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 99.056542][ T7944] loop3: detected capacity change from 0 to 512 [ 99.139195][ T7944] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 99.152834][ T7944] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 99.187130][ T7944] EXT4-fs (loop3): 1 truncate cleaned up [ 99.201686][ T7944] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.239610][ T7954] loop4: detected capacity change from 0 to 512 [ 99.252201][ T7956] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1639'. [ 99.256225][ T7954] EXT4-fs: Ignoring removed i_version option [ 99.282983][ T7944] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000. [ 99.297555][ T7954] EXT4-fs (loop4): 1 truncate cleaned up [ 99.313195][ T7954] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.328579][ T7944] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 99.353484][ T7961] FAULT_INJECTION: forcing a failure. [ 99.353484][ T7961] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 99.366598][ T7961] CPU: 0 UID: 0 PID: 7961 Comm: syz.2.1640 Not tainted syzkaller #0 PREEMPT(voluntary) [ 99.366621][ T7961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 99.366632][ T7961] Call Trace: [ 99.366639][ T7961] [ 99.366658][ T7961] __dump_stack+0x1d/0x30 [ 99.366683][ T7961] dump_stack_lvl+0xe8/0x140 [ 99.366699][ T7961] dump_stack+0x15/0x1b [ 99.366712][ T7961] should_fail_ex+0x265/0x280 [ 99.366734][ T7961] should_fail+0xb/0x20 [ 99.366751][ T7961] should_fail_usercopy+0x1a/0x20 [ 99.366778][ T7961] _copy_from_user+0x1c/0xb0 [ 99.366800][ T7961] ___sys_sendmsg+0xc1/0x1d0 [ 99.366898][ T7961] __x64_sys_sendmsg+0xd4/0x160 [ 99.366999][ T7961] x64_sys_call+0x191e/0x2ff0 [ 99.367017][ T7961] do_syscall_64+0xd2/0x200 [ 99.367106][ T7961] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 99.367209][ T7961] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 99.367246][ T7961] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.367263][ T7961] RIP: 0033:0x7f6632c4ebe9 [ 99.367275][ T7961] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 99.367289][ T7961] RSP: 002b:00007f66316af038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 99.367381][ T7961] RAX: ffffffffffffffda RBX: 00007f6632e85fa0 RCX: 00007f6632c4ebe9 [ 99.367394][ T7961] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000004 [ 99.367413][ T7961] RBP: 00007f66316af090 R08: 0000000000000000 R09: 0000000000000000 [ 99.367483][ T7961] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 99.367495][ T7961] R13: 00007f6632e86038 R14: 00007f6632e85fa0 R15: 00007ffda53e0bb8 [ 99.367512][ T7961] [ 99.587313][ T7941] Set syz1 is full, maxelem 65536 reached [ 99.605708][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.687526][ T7954] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.716664][ T7967] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1643'. [ 99.763460][ T7987] syz_tun: entered allmulticast mode [ 99.772658][ T7986] syz_tun: left allmulticast mode [ 99.809524][ T7991] vlan0: entered promiscuous mode [ 99.814708][ T7991] bridge0: entered promiscuous mode [ 99.875422][ T8000] IPVS: stopping master sync thread 3610 ... [ 99.905183][ T8002] lo speed is unknown, defaulting to 1000 [ 99.985560][ T8012] syz_tun: entered allmulticast mode [ 99.996192][ T8010] vlan2: entered allmulticast mode [ 100.004028][ T8011] syz_tun: left allmulticast mode [ 100.030286][ T8014] vlan0: entered allmulticast mode [ 100.048352][ T8015] loop3: detected capacity change from 0 to 2048 [ 100.063448][ T8015] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: writeback. [ 100.084430][ T8019] loop1: detected capacity change from 0 to 2048 [ 100.101902][ T8019] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: writeback. [ 100.194956][ T8015] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 100.209948][ T8015] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 100.222539][ T8015] EXT4-fs (loop3): This should not happen!! Data will be lost [ 100.222539][ T8015] [ 100.232212][ T8015] EXT4-fs (loop3): Total free blocks count 0 [ 100.238205][ T8015] EXT4-fs (loop3): Free/Dirty block details [ 100.244141][ T8015] EXT4-fs (loop3): free_blocks=2415919104 [ 100.249853][ T8015] EXT4-fs (loop3): dirty_blocks=2576 [ 100.255304][ T8015] EXT4-fs (loop3): Block reservation details [ 100.258481][ T8019] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, [ 100.261274][ T8015] EXT4-fs (loop3): i_reserved_data_blocks=161 [ 100.275639][ T8019] block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 100.284702][ T8019] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 100.297212][ T8019] EXT4-fs (loop1): This should not happen!! Data will be lost [ 100.297212][ T8019] [ 100.306878][ T8019] EXT4-fs (loop1): Total free blocks count 0 [ 100.312864][ T8019] EXT4-fs (loop1): Free/Dirty block details [ 100.318732][ T8019] EXT4-fs (loop1): free_blocks=2415919104 [ 100.324457][ T8019] EXT4-fs (loop1): dirty_blocks=2928 [ 100.329745][ T8019] EXT4-fs (loop1): Block reservation details [ 100.335715][ T8019] EXT4-fs (loop1): i_reserved_data_blocks=183 [ 100.578382][ T8043] loop2: detected capacity change from 0 to 512 [ 100.584673][ T8041] lo speed is unknown, defaulting to 1000 [ 100.586363][ T8043] EXT4-fs: Ignoring removed i_version option [ 100.602383][ T8043] EXT4-fs (loop2): 1 truncate cleaned up [ 100.609311][ T8043] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.655635][ T8051] netlink: 'syz.4.1672': attribute type 21 has an invalid length. [ 100.674550][ T8051] loop4: detected capacity change from 0 to 128 [ 100.682128][ T8054] IPVS: Error connecting to the multicast addr [ 100.692306][ T8043] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.745859][ T8062] loop2: detected capacity change from 0 to 1024 [ 100.753713][ T8062] EXT4-fs: Ignoring removed bh option [ 100.755872][ T8063] loop4: detected capacity change from 0 to 512 [ 100.769019][ T8062] EXT4-fs: inline encryption not supported [ 100.781969][ T8062] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 100.793890][ T8063] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 100.796388][ T8062] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 100.807339][ T8063] ext4 filesystem being mounted at /313/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.826472][ T8062] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 2: comm syz.2.1677: lblock 2 mapped to illegal pblock 2 (length 1) [ 100.840560][ T8062] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 48: comm syz.2.1677: lblock 0 mapped to illegal pblock 48 (length 1) [ 100.865559][ T8062] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.1677: Failed to acquire dquot type 0 [ 100.878413][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 100.892861][ T31] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 100.914589][ T8062] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 100.932118][ T3451] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 100.937970][ T8062] EXT4-fs error (device loop2): ext4_evict_inode:254: inode #11: comm syz.2.1677: mark_inode_dirty error [ 100.955902][ T8062] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 100.966362][ T8062] EXT4-fs (loop2): 1 orphan inode deleted [ 100.972328][ T3451] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:8: lblock 1 mapped to illegal pblock 1 (length 1) [ 100.983429][ T8062] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.006652][ T3451] EXT4-fs error (device loop2): ext4_release_dquot:6973: comm kworker/u8:8: Failed to release dquot type 0 [ 101.031288][ T8078] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1685'. [ 101.041070][ T8062] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 48: comm syz.2.1677: lblock 0 mapped to illegal pblock 48 (length 1) [ 101.072852][ T8082] FAULT_INJECTION: forcing a failure. [ 101.072852][ T8082] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 101.073010][ T8078] loop4: detected capacity change from 0 to 512 [ 101.086186][ T8082] CPU: 1 UID: 0 PID: 8082 Comm: syz.3.1680 Not tainted syzkaller #0 PREEMPT(voluntary) [ 101.086210][ T8082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 101.086244][ T8082] Call Trace: [ 101.086249][ T8082] [ 101.086256][ T8082] __dump_stack+0x1d/0x30 [ 101.086283][ T8082] dump_stack_lvl+0xe8/0x140 [ 101.086303][ T8082] dump_stack+0x15/0x1b [ 101.086319][ T8082] should_fail_ex+0x265/0x280 [ 101.086340][ T8082] should_fail_alloc_page+0xf2/0x100 [ 101.086364][ T8082] __alloc_frozen_pages_noprof+0xff/0x360 [ 101.086417][ T8082] alloc_pages_mpol+0xb3/0x250 [ 101.086447][ T8082] alloc_pages_noprof+0x90/0x130 [ 101.086532][ T8082] get_zeroed_page_noprof+0x1a/0x40 [ 101.086550][ T8082] simple_transaction_get+0x4c/0x130 [ 101.086571][ T8082] selinux_transaction_write+0x9d/0x110 [ 101.086644][ T8082] ? __pfx_selinux_transaction_write+0x10/0x10 [ 101.086668][ T8082] vfs_write+0x269/0x960 [ 101.086795][ T8082] ? __rcu_read_unlock+0x4f/0x70 [ 101.086815][ T8082] ? __fget_files+0x184/0x1c0 [ 101.086841][ T8082] ksys_write+0xda/0x1a0 [ 101.086861][ T8082] __x64_sys_write+0x40/0x50 [ 101.086925][ T8082] x64_sys_call+0x27fe/0x2ff0 [ 101.086945][ T8082] do_syscall_64+0xd2/0x200 [ 101.086969][ T8082] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 101.086991][ T8082] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 101.087071][ T8082] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.087091][ T8082] RIP: 0033:0x7fea152febe9 [ 101.087106][ T8082] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 101.087193][ T8082] RSP: 002b:00007fea13d5f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 101.087211][ T8082] RAX: ffffffffffffffda RBX: 00007fea15535fa0 RCX: 00007fea152febe9 [ 101.087260][ T8082] RDX: 0000000000000051 RSI: 0000200000000280 RDI: 0000000000000005 [ 101.087271][ T8082] RBP: 00007fea13d5f090 R08: 0000000000000000 R09: 0000000000000000 [ 101.087283][ T8082] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 101.087361][ T8082] R13: 00007fea15536038 R14: 00007fea15535fa0 R15: 00007ffec91f43d8 [ 101.087380][ T8082] [ 101.087709][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.228547][ T8088] loop3: detected capacity change from 0 to 512 [ 101.254429][ T8078] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.286840][ T8089] pim6reg: tun_chr_ioctl cmd 35108 [ 101.294407][ T8078] ext4 filesystem being mounted at /317/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 101.321164][ T8088] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 101.339667][ T8078] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #2: comm syz.4.1685: corrupted inode contents [ 101.374028][ T8088] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 101.390126][ T8078] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #2: comm syz.4.1685: mark_inode_dirty error [ 101.390231][ T8088] EXT4-fs (loop3): 1 truncate cleaned up [ 101.405695][ T8078] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #2: comm syz.4.1685: corrupted inode contents [ 101.419147][ T8078] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #2: comm syz.4.1685: mark_inode_dirty error [ 101.430855][ T8088] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.432538][ T8095] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1690'. [ 101.452604][ T8088] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000. [ 101.474072][ T8094] loop2: detected capacity change from 0 to 512 [ 101.480952][ T8094] EXT4-fs: Ignoring removed i_version option [ 101.487521][ T8078] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #2: comm syz.4.1685: corrupted inode contents [ 101.510281][ T8098] siw: device registration error -23 [ 101.518537][ T8098] loop1: detected capacity change from 0 to 512 [ 101.525282][ T8088] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 101.544138][ T8078] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #2: comm syz.4.1685: mark_inode_dirty error [ 101.552051][ T8094] EXT4-fs (loop2): 1 truncate cleaned up [ 101.562955][ T8078] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #2: comm syz.4.1685: corrupted inode contents [ 101.575318][ T8094] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.593718][ T8107] loop0: detected capacity change from 0 to 512 [ 101.602915][ T8098] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.608176][ T8107] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 101.617551][ T8096] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #2: comm syz.4.1685: corrupted inode contents [ 101.639449][ T8098] ext4 filesystem being mounted at /339/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.639772][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.680743][ T8096] EXT4-fs error (device loop4): ext4_setent:3648: inode #2: comm syz.4.1685: mark_inode_dirty error [ 101.701022][ T8094] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.702505][ T8114] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1696'. [ 101.726569][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.729749][ T8096] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #2: comm syz.4.1685: corrupted inode contents [ 101.743284][ T8114] loop3: detected capacity change from 0 to 512 [ 101.776048][ T8114] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.800770][ T8114] ext4 filesystem being mounted at /302/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 101.814004][ T8114] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #2: comm syz.3.1696: corrupted inode contents [ 101.827594][ T8114] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #2: comm syz.3.1696: mark_inode_dirty error [ 101.856018][ T8114] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #2: comm syz.3.1696: corrupted inode contents [ 101.857194][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.877776][ T8114] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #2: comm syz.3.1696: mark_inode_dirty error [ 101.940547][ T8127] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #2: comm syz.3.1696: corrupted inode contents [ 101.962722][ T8127] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #2: comm syz.3.1696: mark_inode_dirty error [ 102.026159][ T8130] loop4: detected capacity change from 0 to 256 [ 102.039165][ T8130] vfat: Unknown parameter 'nnonumtail' [ 102.051049][ T8132] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1701'. [ 102.099904][ T8133] lo speed is unknown, defaulting to 1000 [ 102.203066][ T8127] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #2: comm syz.3.1696: corrupted inode contents [ 102.274534][ T8114] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #2: comm syz.3.1696: corrupted inode contents [ 102.434298][ T8132] lo speed is unknown, defaulting to 1000 [ 102.451364][ T8114] EXT4-fs error (device loop3): ext4_setent:3648: inode #2: comm syz.3.1696: mark_inode_dirty error [ 102.488363][ T8114] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #2: comm syz.3.1696: corrupted inode contents [ 102.729015][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.793293][ T8144] netlink: 'syz.4.1706': attribute type 21 has an invalid length. [ 102.824373][ T29] kauditd_printk_skb: 540 callbacks suppressed [ 102.824387][ T29] audit: type=1326 audit(1756635069.958:11101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8141 comm="syz.4.1705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f336fbdebe9 code=0x7ffc0000 [ 102.854170][ T29] audit: type=1326 audit(1756635069.969:11102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8141 comm="syz.4.1705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=17 compat=0 ip=0x7f336fbdebe9 code=0x7ffc0000 [ 102.877633][ T29] audit: type=1326 audit(1756635069.969:11103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8141 comm="syz.4.1705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f336fbdebe9 code=0x7ffc0000 [ 102.956280][ T8144] loop4: detected capacity change from 0 to 128 [ 103.029892][ T8144] bio_check_eod: 17 callbacks suppressed [ 103.029908][ T8144] syz.4.1706: attempt to access beyond end of device [ 103.029908][ T8144] loop4: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 103.082641][ T8144] syz.4.1706: attempt to access beyond end of device [ 103.082641][ T8144] loop4: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 103.118764][ T8144] syz.4.1706: attempt to access beyond end of device [ 103.118764][ T8144] loop4: rw=2049, sector=177, nr_sectors = 24 limit=128 [ 103.150426][ T8144] syz.4.1706: attempt to access beyond end of device [ 103.150426][ T8144] loop4: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 103.167875][ T8151] siw: device registration error -23 [ 103.175792][ T8151] loop0: detected capacity change from 0 to 512 [ 103.183118][ T8144] syz.4.1706: attempt to access beyond end of device [ 103.183118][ T8144] loop4: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 103.207683][ T8144] syz.4.1706: attempt to access beyond end of device [ 103.207683][ T8144] loop4: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 103.226626][ T8144] syz.4.1706: attempt to access beyond end of device [ 103.226626][ T8144] loop4: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 103.240992][ T8144] syz.4.1706: attempt to access beyond end of device [ 103.240992][ T8144] loop4: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 103.257063][ T8151] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.269907][ T8144] syz.4.1706: attempt to access beyond end of device [ 103.269907][ T8144] loop4: rw=2049, sector=289, nr_sectors = 9 limit=128 [ 103.284102][ T8151] ext4 filesystem being mounted at /373/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.334228][ T29] audit: type=1326 audit(1756635070.567:11104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8157 comm="syz.4.1709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f336fbdebe9 code=0x7ffc0000 [ 103.336050][ T8158] loop4: detected capacity change from 0 to 512 [ 103.357882][ T29] audit: type=1326 audit(1756635070.567:11105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8157 comm="syz.4.1709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f336fbdebe9 code=0x7ffc0000 [ 103.387585][ T29] audit: type=1326 audit(1756635070.567:11106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8157 comm="syz.4.1709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f336fbdebe9 code=0x7ffc0000 [ 103.405274][ T8158] EXT4-fs: Ignoring removed i_version option [ 103.411111][ T29] audit: type=1326 audit(1756635070.567:11107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8157 comm="syz.4.1709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f336fbdebe9 code=0x7ffc0000 [ 103.440544][ T29] audit: type=1326 audit(1756635070.567:11108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8157 comm="syz.4.1709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f336fbdebe9 code=0x7ffc0000 [ 103.463866][ T29] audit: type=1326 audit(1756635070.567:11109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8157 comm="syz.4.1709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f336fbdebe9 code=0x7ffc0000 [ 103.486357][ T8119] Set syz1 is full, maxelem 65536 reached [ 103.487480][ T29] audit: type=1326 audit(1756635070.567:11110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8157 comm="syz.4.1709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f336fbdebe9 code=0x7ffc0000 [ 103.522942][ T8158] EXT4-fs (loop4): 1 truncate cleaned up [ 103.529015][ T8158] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.583343][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.614111][ T8171] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1715'. [ 103.616017][ T8166] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1712'. [ 103.676315][ T8158] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.685173][ T8179] lo speed is unknown, defaulting to 1000 [ 103.730826][ T8185] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1718'. [ 103.777972][ T8171] lo speed is unknown, defaulting to 1000 [ 103.797776][ T8183] loop4: detected capacity change from 0 to 1024 [ 103.806766][ T8183] EXT4-fs: Ignoring removed bh option [ 103.812712][ T8183] EXT4-fs: inline encryption not supported [ 103.820459][ T8183] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 103.834595][ T8183] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 103.848549][ T8183] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 2: comm syz.4.1719: lblock 2 mapped to illegal pblock 2 (length 1) [ 103.870526][ T8183] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 48: comm syz.4.1719: lblock 0 mapped to illegal pblock 48 (length 1) [ 103.978662][ T8183] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.1719: Failed to acquire dquot type 0 [ 104.011034][ T8183] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 104.021168][ T8190] loop3: detected capacity change from 0 to 512 [ 104.024903][ T8183] EXT4-fs error (device loop4): ext4_evict_inode:254: inode #11: comm syz.4.1719: mark_inode_dirty error [ 104.039360][ T8190] EXT4-fs: Ignoring removed mblk_io_submit option [ 104.055048][ T8190] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 104.065724][ T8183] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 104.076670][ T8183] EXT4-fs (loop4): 1 orphan inode deleted [ 104.084370][ T8190] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e016c018, mo2=0002] [ 104.092990][ T52] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 104.107465][ T8183] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.120106][ T52] EXT4-fs error (device loop4): ext4_release_dquot:6973: comm kworker/u8:4: Failed to release dquot type 0 [ 104.130047][ T8190] System zones: 1-12 [ 104.136193][ T8190] EXT4-fs (loop3): 1 truncate cleaned up [ 104.162738][ T8190] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.199317][ T8183] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 48: comm syz.4.1719: lblock 0 mapped to illegal pblock 48 (length 1) [ 104.231139][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.287845][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.339628][ T8206] loop3: detected capacity change from 0 to 1024 [ 104.346673][ T8206] EXT4-fs: Ignoring removed bh option [ 104.353291][ T8206] EXT4-fs: inline encryption not supported [ 104.365470][ T8206] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 104.380894][ T8206] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 104.389986][ T8206] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 2: comm syz.3.1726: lblock 2 mapped to illegal pblock 2 (length 1) [ 104.424575][ T8206] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 48: comm syz.3.1726: lblock 0 mapped to illegal pblock 48 (length 1) [ 104.443620][ T8206] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.1726: Failed to acquire dquot type 0 [ 104.539851][ T8206] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 104.550958][ T8206] EXT4-fs error (device loop3): ext4_evict_inode:254: inode #11: comm syz.3.1726: mark_inode_dirty error [ 104.563243][ T8206] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 104.573581][ T8206] EXT4-fs (loop3): 1 orphan inode deleted [ 104.582365][ T8220] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1732'. [ 104.591409][ T8220] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1732'. [ 104.600036][ T8206] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.613121][ T2895] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 104.643568][ T2895] EXT4-fs error (device loop3): ext4_release_dquot:6973: comm kworker/u8:6: Failed to release dquot type 0 [ 104.697910][ T8228] lo speed is unknown, defaulting to 1000 [ 104.866043][ T8206] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 48: comm syz.3.1726: lblock 0 mapped to illegal pblock 48 (length 1) [ 105.008119][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.463176][ T8240] loop2: detected capacity change from 0 to 512 [ 105.533602][ T8240] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.546971][ T8240] ext4 filesystem being mounted at /370/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 105.598743][ T8248] netlink: 'syz.3.1737': attribute type 21 has an invalid length. [ 105.615980][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.637399][ T8248] loop3: detected capacity change from 0 to 128 [ 105.656180][ T8248] syz.3.1737: attempt to access beyond end of device [ 105.656180][ T8248] loop3: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 105.839435][ T8254] loop0: detected capacity change from 0 to 512 [ 105.851906][ T8254] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 105.864357][ T8254] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 105.873782][ T8254] EXT4-fs (loop0): 1 truncate cleaned up [ 105.879925][ T8254] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.895603][ T8254] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000. [ 105.917472][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.011157][ T8260] loop2: detected capacity change from 0 to 512 [ 106.017841][ T8261] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1745'. [ 106.024929][ T8260] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 106.056860][ T8260] EXT4-fs (loop2): 1 truncate cleaned up [ 106.067159][ T8260] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.083989][ T8257] loop1: detected capacity change from 0 to 512 [ 106.090793][ T8257] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 106.126728][ T8264] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1748'. [ 106.146730][ T8266] lo speed is unknown, defaulting to 1000 [ 106.230139][ T8271] loop0: detected capacity change from 0 to 1024 [ 106.242028][ T8271] EXT4-fs: Ignoring removed bh option [ 106.247563][ T8271] EXT4-fs: inline encryption not supported [ 106.280843][ T8271] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 106.293802][ T8271] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 106.303119][ T8271] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 2: comm syz.0.1750: lblock 2 mapped to illegal pblock 2 (length 1) [ 106.337166][ T8271] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 48: comm syz.0.1750: lblock 0 mapped to illegal pblock 48 (length 1) [ 106.356149][ T8271] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.1750: Failed to acquire dquot type 0 [ 106.379265][ T8279] loop4: detected capacity change from 0 to 512 [ 106.386257][ T8279] EXT4-fs: Ignoring removed i_version option [ 106.395230][ T8271] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 106.408455][ T8271] EXT4-fs error (device loop0): ext4_evict_inode:254: inode #11: comm syz.0.1750: mark_inode_dirty error [ 106.419893][ T8271] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 106.421900][ T8279] EXT4-fs (loop4): 1 truncate cleaned up [ 106.430218][ T8271] EXT4-fs (loop0): 1 orphan inode deleted [ 106.441915][ T8271] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.455005][ T3438] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 106.484836][ T3438] EXT4-fs error (device loop0): ext4_release_dquot:6973: comm kworker/u8:7: Failed to release dquot type 0 [ 106.508885][ T8284] netlink: 'syz.1.1755': attribute type 21 has an invalid length. [ 106.510535][ T8271] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 48: comm syz.0.1750: lblock 0 mapped to illegal pblock 48 (length 1) [ 106.557375][ T8284] loop1: detected capacity change from 0 to 128 [ 106.624738][ T8288] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1756'. [ 106.655994][ T8292] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1758'. [ 106.725259][ T8295] lo speed is unknown, defaulting to 1000 [ 106.775963][ T8288] lo speed is unknown, defaulting to 1000 [ 106.994215][ T8309] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1764'. [ 107.070761][ T8313] lo speed is unknown, defaulting to 1000 [ 107.267505][ T8318] netlink: 'syz.3.1767': attribute type 21 has an invalid length. [ 107.320881][ T8321] loop3: detected capacity change from 0 to 128 [ 107.342410][ T8312] lo speed is unknown, defaulting to 1000 [ 107.587496][ T29] kauditd_printk_skb: 306 callbacks suppressed [ 107.587508][ T29] audit: type=1326 audit(1756636611.036:11405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8324 comm="syz.4.1768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f336fbd5ba7 code=0x7ffc0000 [ 107.838955][ T29] audit: type=1326 audit(1756636611.068:11406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8324 comm="syz.4.1768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f336fb7adb9 code=0x7ffc0000 [ 107.862423][ T29] audit: type=1326 audit(1756636611.068:11407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8324 comm="syz.4.1768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f336fbd5ba7 code=0x7ffc0000 [ 107.885876][ T29] audit: type=1326 audit(1756636611.068:11408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8324 comm="syz.4.1768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f336fb7adb9 code=0x7ffc0000 [ 107.909257][ T29] audit: type=1326 audit(1756636611.068:11409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8324 comm="syz.4.1768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f336fbdebe9 code=0x7ffc0000 [ 107.932873][ T29] audit: type=1326 audit(1756636611.078:11410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8324 comm="syz.4.1768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f336fbd5ba7 code=0x7ffc0000 [ 107.956312][ T29] audit: type=1326 audit(1756636611.078:11411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8324 comm="syz.4.1768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f336fb7adb9 code=0x7ffc0000 [ 107.979758][ T29] audit: type=1326 audit(1756636611.078:11412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8324 comm="syz.4.1768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f336fbdebe9 code=0x7ffc0000 [ 108.003397][ T29] audit: type=1326 audit(1756637379.089:11413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8324 comm="syz.4.1768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f336fbd5ba7 code=0x7ffc0000 [ 108.027174][ T29] audit: type=1326 audit(1756637379.089:11414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8324 comm="syz.4.1768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f336fb7adb9 code=0x7ffc0000 [ 108.126691][ T8335] loop0: detected capacity change from 0 to 512 [ 108.200065][ T8335] ext4 filesystem being mounted at /387/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 108.213279][ T8335] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #2: comm syz.0.1771: corrupted inode contents [ 108.226698][ T8335] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #2: comm syz.0.1771: mark_inode_dirty error [ 108.270783][ T8335] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #2: comm syz.0.1771: corrupted inode contents [ 108.296895][ T8335] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #2: comm syz.0.1771: mark_inode_dirty error [ 108.318064][ T8344] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #2: comm syz.0.1771: corrupted inode contents [ 108.330894][ T8344] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #2: comm syz.0.1771: mark_inode_dirty error [ 108.342859][ T8344] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #2: comm syz.0.1771: corrupted inode contents [ 108.356808][ T8335] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #2: comm syz.0.1771: corrupted inode contents [ 108.370538][ T8335] EXT4-fs error (device loop0): ext4_setent:3648: inode #2: comm syz.0.1771: mark_inode_dirty error [ 108.381956][ T8335] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #2: comm syz.0.1771: corrupted inode contents [ 108.493383][ T8353] __nla_validate_parse: 3 callbacks suppressed [ 108.493474][ T8353] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1778'. [ 108.507864][ T8349] lo speed is unknown, defaulting to 1000 [ 108.575618][ T8356] lo speed is unknown, defaulting to 1000 [ 108.674884][ T8363] IPVS: Error connecting to the multicast addr [ 108.771314][ T8368] lo speed is unknown, defaulting to 1000 [ 109.462110][ T8387] loop4: detected capacity change from 0 to 2048 [ 109.578049][ T8390] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 109.594007][ T8390] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1872 with error 28 [ 109.606503][ T8390] EXT4-fs (loop4): This should not happen!! Data will be lost [ 109.606503][ T8390] [ 109.616163][ T8390] EXT4-fs (loop4): Total free blocks count 0 [ 109.622149][ T8390] EXT4-fs (loop4): Free/Dirty block details [ 109.628060][ T8390] EXT4-fs (loop4): free_blocks=2415919104 [ 109.633768][ T8390] EXT4-fs (loop4): dirty_blocks=1888 [ 109.639105][ T8390] EXT4-fs (loop4): Block reservation details [ 109.645127][ T8390] EXT4-fs (loop4): i_reserved_data_blocks=118 [ 109.754448][ T8395] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1791'. [ 109.897690][ T8403] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1794'. [ 109.973581][ T8405] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1795'. [ 110.013181][ T8395] lo speed is unknown, defaulting to 1000 [ 110.104637][ T8403] lo speed is unknown, defaulting to 1000 [ 110.243115][ T8413] loop3: detected capacity change from 0 to 1024 [ 110.249929][ T8413] EXT4-fs: Ignoring removed bh option [ 110.259975][ T8413] EXT4-fs: inline encryption not supported [ 110.268293][ T8413] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 110.280228][ T8413] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 110.289562][ T8413] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 2: comm syz.3.1797: lblock 2 mapped to illegal pblock 2 (length 1) [ 110.304136][ T8413] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 48: comm syz.3.1797: lblock 0 mapped to illegal pblock 48 (length 1) [ 110.322763][ T8413] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.1797: Failed to acquire dquot type 0 [ 110.335783][ T8417] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1798'. [ 110.344772][ T8413] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 110.355118][ T31] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 110.367440][ T31] EXT4-fs (loop4): This should not happen!! Data will be lost [ 110.367440][ T31] [ 110.382606][ T8413] EXT4-fs error (device loop3): ext4_evict_inode:254: inode #11: comm syz.3.1797: mark_inode_dirty error [ 110.395305][ T8413] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 110.406710][ T8413] EXT4-fs (loop3): 1 orphan inode deleted [ 110.425450][ T3451] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:8: lblock 1 mapped to illegal pblock 1 (length 1) [ 110.458720][ T3451] EXT4-fs error (device loop3): ext4_release_dquot:6973: comm kworker/u8:8: Failed to release dquot type 0 [ 110.469367][ T8425] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1802'. [ 110.480100][ T8413] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 48: comm syz.3.1797: lblock 0 mapped to illegal pblock 48 (length 1) [ 110.521965][ T8425] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1802'. [ 110.587695][ T8431] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1805'. [ 110.618053][ T8431] loop3: detected capacity change from 0 to 512 [ 110.647808][ T8431] ext4 filesystem being mounted at /326/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 110.660837][ T8431] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #2: comm syz.3.1805: corrupted inode contents [ 110.683832][ T8431] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #2: comm syz.3.1805: mark_inode_dirty error [ 110.695669][ T8431] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #2: comm syz.3.1805: corrupted inode contents [ 110.698140][ T8439] loop4: detected capacity change from 0 to 512 [ 110.709807][ T8431] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #2: comm syz.3.1805: mark_inode_dirty error [ 110.729347][ T8439] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 110.733909][ T8431] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #2: comm syz.3.1805: corrupted inode contents [ 110.737762][ T8439] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 110.754985][ T8431] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #2: comm syz.3.1805: mark_inode_dirty error [ 110.758278][ T8439] EXT4-fs (loop4): 1 truncate cleaned up [ 110.769882][ T8431] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #2: comm syz.3.1805: corrupted inode contents [ 110.788528][ T8440] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #2: comm syz.3.1805: corrupted inode contents [ 110.801510][ T8439] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000. [ 110.801573][ T8440] EXT4-fs error (device loop3): ext4_setent:3648: inode #2: comm syz.3.1805: mark_inode_dirty error [ 110.812968][ T8439] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 110.821471][ T8440] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #2: comm syz.3.1805: corrupted inode contents [ 110.920158][ T8447] vlan2: entered allmulticast mode [ 110.974102][ T8454] loop4: detected capacity change from 0 to 2048 [ 111.003973][ T8460] loop3: detected capacity change from 0 to 164 [ 111.023685][ T8460] rock: directory entry would overflow storage [ 111.029933][ T8460] rock: sig=0x66, size=4, remaining=3 [ 111.105827][ T8454] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 111.126668][ T8465] rock: directory entry would overflow storage [ 111.132921][ T8465] rock: sig=0x66, size=4, remaining=3 [ 111.147541][ T8454] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1912 with error 28 [ 111.160146][ T8454] EXT4-fs (loop4): This should not happen!! Data will be lost [ 111.160146][ T8454] [ 111.169874][ T8454] EXT4-fs (loop4): Total free blocks count 0 [ 111.175852][ T8454] EXT4-fs (loop4): Free/Dirty block details [ 111.175867][ T8454] EXT4-fs (loop4): free_blocks=2415919104 [ 111.175880][ T8454] EXT4-fs (loop4): dirty_blocks=1920 [ 111.192795][ T8454] EXT4-fs (loop4): Block reservation details [ 111.198821][ T8454] EXT4-fs (loop4): i_reserved_data_blocks=120 [ 111.223633][ T8460] rock: directory entry would overflow storage [ 111.229946][ T8460] rock: sig=0x66, size=4, remaining=3 [ 111.262821][ T8460] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 111.332712][ T8472] loop3: detected capacity change from 0 to 512 [ 111.352712][ T8472] EXT4-fs: Ignoring removed i_version option [ 111.376225][ T8474] loop2: detected capacity change from 0 to 128 [ 111.376959][ T8472] EXT4-fs (loop3): 1 truncate cleaned up [ 111.384787][ T8474] vfat: Unknown parameter './file0' [ 111.448680][ T8478] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1821'. [ 111.464117][ T8478] loop2: detected capacity change from 0 to 512 [ 111.487030][ T8478] ext4 filesystem being mounted at /383/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 111.499589][ T8478] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #2: comm syz.2.1821: corrupted inode contents [ 111.513001][ T8478] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #2: comm syz.2.1821: mark_inode_dirty error [ 111.524688][ T8478] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #2: comm syz.2.1821: corrupted inode contents [ 111.537746][ T8478] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #2: comm syz.2.1821: mark_inode_dirty error [ 111.568993][ T8478] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #2: comm syz.2.1821: corrupted inode contents [ 111.594518][ T8478] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #2: comm syz.2.1821: mark_inode_dirty error [ 111.607799][ T8478] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #2: comm syz.2.1821: corrupted inode contents [ 111.622760][ T8489] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #2: comm syz.2.1821: corrupted inode contents [ 111.640662][ T8489] EXT4-fs error (device loop2): ext4_setent:3648: inode #2: comm syz.2.1821: mark_inode_dirty error [ 111.652988][ T8489] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #2: comm syz.2.1821: corrupted inode contents [ 111.743830][ T12] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 111.756065][ T12] EXT4-fs (loop4): This should not happen!! Data will be lost [ 111.756065][ T12] [ 111.803412][ T8497] loop4: detected capacity change from 0 to 256 [ 111.941130][ T8505] netlink: 'syz.2.1831': attribute type 21 has an invalid length. [ 111.960869][ T8505] loop2: detected capacity change from 0 to 128 [ 111.979273][ T8505] bio_check_eod: 26 callbacks suppressed [ 111.979287][ T8505] syz.2.1831: attempt to access beyond end of device [ 111.979287][ T8505] loop2: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 112.000496][ T8505] syz.2.1831: attempt to access beyond end of device [ 112.000496][ T8505] loop2: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 112.014885][ T8505] syz.2.1831: attempt to access beyond end of device [ 112.014885][ T8505] loop2: rw=2049, sector=177, nr_sectors = 24 limit=128 [ 112.030153][ T8505] syz.2.1831: attempt to access beyond end of device [ 112.030153][ T8505] loop2: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 112.044436][ T8505] syz.2.1831: attempt to access beyond end of device [ 112.044436][ T8505] loop2: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 112.059380][ T8505] syz.2.1831: attempt to access beyond end of device [ 112.059380][ T8505] loop2: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 112.074473][ T8505] syz.2.1831: attempt to access beyond end of device [ 112.074473][ T8505] loop2: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 112.088592][ T8505] syz.2.1831: attempt to access beyond end of device [ 112.088592][ T8505] loop2: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 112.103751][ T8505] syz.2.1831: attempt to access beyond end of device [ 112.103751][ T8505] loop2: rw=2049, sector=289, nr_sectors = 9 limit=128 [ 112.315579][ T8510] siw: device registration error -23 [ 112.326895][ T8510] loop0: detected capacity change from 0 to 512 [ 112.345571][ T8510] ext4 filesystem being mounted at /397/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 112.356155][ T8512] loop2: detected capacity change from 0 to 1024 [ 112.361281][ T29] kauditd_printk_skb: 1237 callbacks suppressed [ 112.361295][ T29] audit: type=1326 audit(1756638152.022:12648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8484 comm="syz.1.1823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe2a3e25ba7 code=0x7ffc0000 [ 112.392164][ T29] audit: type=1326 audit(1756638152.022:12649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8484 comm="syz.1.1823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe2a3dcadb9 code=0x7ffc0000 [ 112.415578][ T29] audit: type=1326 audit(1756638152.022:12650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8484 comm="syz.1.1823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7fe2a3e2ebe9 code=0x7ffc0000 [ 112.439045][ T29] audit: type=1326 audit(1756638152.022:12651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8486 comm="syz.3.1824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fea152f5ba7 code=0x7ffc0000 [ 112.439382][ T8512] EXT4-fs: Ignoring removed bh option [ 112.462477][ T29] audit: type=1326 audit(1756638152.022:12652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8486 comm="syz.3.1824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fea1529adb9 code=0x7ffc0000 [ 112.462500][ T29] audit: type=1326 audit(1756638152.022:12653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8486 comm="syz.3.1824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7fea152febe9 code=0x7ffc0000 [ 112.462702][ T29] audit: type=1326 audit(1756638152.043:12654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8484 comm="syz.1.1823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe2a3e25ba7 code=0x7ffc0000 [ 112.515498][ T8512] EXT4-fs: inline encryption not supported [ 112.538331][ T29] audit: type=1326 audit(1756638152.043:12655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8484 comm="syz.1.1823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe2a3dcadb9 code=0x7ffc0000 [ 112.567659][ T29] audit: type=1326 audit(1756638152.043:12656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8484 comm="syz.1.1823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7fe2a3e2ebe9 code=0x7ffc0000 [ 112.567974][ T8512] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 112.591174][ T29] audit: type=1326 audit(1756638152.043:12657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8484 comm="syz.1.1823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe2a3e25ba7 code=0x7ffc0000 [ 112.623672][ T8512] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 112.635224][ T8512] EXT4-fs error (device loop2): ext4_quota_enable:7124: comm syz.2.1834: Bad quota inum: 1, type: 0 [ 112.646165][ T8512] EXT4-fs warning (device loop2): ext4_enable_quotas:7172: Failed to enable quota tracking (type=0, err=-117, ino=1). Please run e2fsck to fix. [ 112.660957][ T8512] EXT4-fs (loop2): mount failed [ 112.712621][ T8519] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1836'. [ 112.730750][ T8521] netlink: 'syz.1.1837': attribute type 21 has an invalid length. [ 112.750560][ T8519] loop4: detected capacity change from 0 to 512 [ 112.769913][ T8521] loop1: detected capacity change from 0 to 128 [ 112.782018][ T8521] syz.1.1837: attempt to access beyond end of device [ 112.782018][ T8521] loop1: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 112.797163][ T8519] ext4 filesystem being mounted at /343/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 112.839414][ T8519] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #2: comm syz.4.1836: corrupted inode contents [ 112.852783][ T8519] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #2: comm syz.4.1836: mark_inode_dirty error [ 112.865075][ T8519] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #2: comm syz.4.1836: corrupted inode contents [ 112.901222][ T8519] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #2: comm syz.4.1836: mark_inode_dirty error [ 112.916393][ T8544] netlink: 'syz.3.1845': attribute type 21 has an invalid length. [ 112.936937][ T8544] loop3: detected capacity change from 0 to 128 [ 112.948355][ T8546] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #2: comm syz.4.1836: corrupted inode contents [ 112.964140][ T8546] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #2: comm syz.4.1836: mark_inode_dirty error [ 112.976908][ T8546] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #2: comm syz.4.1836: corrupted inode contents [ 113.003208][ T8519] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #2: comm syz.4.1836: corrupted inode contents [ 113.022120][ T8519] EXT4-fs error (device loop4): ext4_setent:3648: inode #2: comm syz.4.1836: mark_inode_dirty error [ 113.033220][ T8519] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #2: comm syz.4.1836: corrupted inode contents [ 113.068606][ T8551] IPVS: Error connecting to the multicast addr [ 113.249551][ T8559] lo speed is unknown, defaulting to 1000 [ 113.600446][ T8562] loop2: detected capacity change from 0 to 512 [ 113.631873][ T8562] ext4 filesystem being mounted at /392/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 114.015971][ T8572] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1855'. [ 114.031211][ T8572] loop0: detected capacity change from 0 to 512 [ 114.058877][ T8572] ext4 filesystem being mounted at /402/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 114.104644][ T8572] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #2: comm syz.0.1855: corrupted inode contents [ 114.150448][ T8581] netlink: 'syz.1.1858': attribute type 21 has an invalid length. [ 114.166405][ T8572] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #2: comm syz.0.1855: mark_inode_dirty error [ 114.208982][ T8581] loop1: detected capacity change from 0 to 128 [ 114.228098][ T8586] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1859'. [ 114.237599][ T8572] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #2: comm syz.0.1855: corrupted inode contents [ 114.270592][ T8589] IPVS: Error connecting to the multicast addr [ 114.302913][ T8572] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #2: comm syz.0.1855: mark_inode_dirty error [ 114.356615][ T8593] loop1: detected capacity change from 0 to 512 [ 114.379514][ T8587] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #2: comm syz.0.1855: corrupted inode contents [ 114.417518][ T8593] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 114.439432][ T8587] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #2: comm syz.0.1855: mark_inode_dirty error [ 114.466072][ T8593] EXT4-fs (loop1): 1 truncate cleaned up [ 114.479137][ T8587] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #2: comm syz.0.1855: corrupted inode contents [ 114.535905][ T8591] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #2: comm syz.0.1855: corrupted inode contents [ 114.601653][ T8591] EXT4-fs error (device loop0): ext4_setent:3648: inode #2: comm syz.0.1855: mark_inode_dirty error [ 114.650099][ T8591] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #2: comm syz.0.1855: corrupted inode contents [ 114.705718][ T8609] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1866'. [ 114.752012][ T8609] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1866'. [ 114.850064][ T8612] loop0: detected capacity change from 0 to 1024 [ 114.863899][ T8612] EXT4-fs: Ignoring removed bh option [ 114.869571][ T8612] EXT4-fs: inline encryption not supported [ 114.875778][ T8612] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 114.887596][ T8612] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 114.903679][ T8615] IPVS: stopping master sync thread 4242 ... [ 114.910978][ T8612] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 2: comm syz.0.1867: lblock 2 mapped to illegal pblock 2 (length 1) [ 114.925287][ T8612] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 48: comm syz.0.1867: lblock 0 mapped to illegal pblock 48 (length 1) [ 114.940507][ T8612] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.1867: Failed to acquire dquot type 0 [ 114.953902][ T8612] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 114.978312][ T8612] EXT4-fs error (device loop0): ext4_evict_inode:254: inode #11: comm syz.0.1867: mark_inode_dirty error [ 114.988037][ T8617] lo speed is unknown, defaulting to 1000 [ 114.993366][ T8612] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 115.006336][ T8612] EXT4-fs (loop0): 1 orphan inode deleted [ 115.025697][ T31] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 115.050019][ T31] EXT4-fs error (device loop0): ext4_release_dquot:6973: comm kworker/u8:1: Failed to release dquot type 0 [ 115.062551][ T8612] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 48: comm syz.0.1867: lblock 0 mapped to illegal pblock 48 (length 1) [ 115.234037][ T8630] FAULT_INJECTION: forcing a failure. [ 115.234037][ T8630] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 115.247247][ T8630] CPU: 1 UID: 0 PID: 8630 Comm: syz.3.1875 Not tainted syzkaller #0 PREEMPT(voluntary) [ 115.247271][ T8630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 115.247284][ T8630] Call Trace: [ 115.247310][ T8630] [ 115.247317][ T8630] __dump_stack+0x1d/0x30 [ 115.247337][ T8630] dump_stack_lvl+0xe8/0x140 [ 115.247357][ T8630] dump_stack+0x15/0x1b [ 115.247371][ T8630] should_fail_ex+0x265/0x280 [ 115.247390][ T8630] should_fail+0xb/0x20 [ 115.247406][ T8630] should_fail_usercopy+0x1a/0x20 [ 115.247443][ T8630] _copy_to_user+0x20/0xa0 [ 115.247466][ T8630] simple_read_from_buffer+0xb5/0x130 [ 115.247535][ T8630] proc_fail_nth_read+0x10e/0x150 [ 115.247557][ T8630] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 115.247659][ T8630] vfs_read+0x1a8/0x770 [ 115.247676][ T8630] ? __rcu_read_unlock+0x4f/0x70 [ 115.247697][ T8630] ? __fget_files+0x184/0x1c0 [ 115.247734][ T8630] ksys_read+0xda/0x1a0 [ 115.247827][ T8630] __x64_sys_read+0x40/0x50 [ 115.247847][ T8630] x64_sys_call+0x27bc/0x2ff0 [ 115.247867][ T8630] do_syscall_64+0xd2/0x200 [ 115.247892][ T8630] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 115.247914][ T8630] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 115.247963][ T8630] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.247989][ T8630] RIP: 0033:0x7fea152fd5fc [ 115.248005][ T8630] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 115.248020][ T8630] RSP: 002b:00007fea13d5f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 115.248040][ T8630] RAX: ffffffffffffffda RBX: 00007fea15535fa0 RCX: 00007fea152fd5fc [ 115.248052][ T8630] RDX: 000000000000000f RSI: 00007fea13d5f0a0 RDI: 0000000000000008 [ 115.248085][ T8630] RBP: 00007fea13d5f090 R08: 0000000000000000 R09: 0000000000000000 [ 115.248097][ T8630] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 115.248109][ T8630] R13: 00007fea15536038 R14: 00007fea15535fa0 R15: 00007ffec91f43d8 [ 115.248127][ T8630] [ 115.304603][ T8633] loop3: detected capacity change from 0 to 512 [ 115.336024][ T8635] IPVS: Error connecting to the multicast addr [ 115.363191][ T8633] EXT4-fs: Ignoring removed i_version option [ 115.494707][ T8633] EXT4-fs (loop3): 1 truncate cleaned up [ 115.531544][ T8640] loop2: detected capacity change from 0 to 512 [ 115.574935][ T8647] loop1: detected capacity change from 0 to 1024 [ 115.582275][ T8647] EXT4-fs: Ignoring removed bh option [ 115.604122][ T8647] EXT4-fs: inline encryption not supported [ 115.605863][ T8649] lo speed is unknown, defaulting to 1000 [ 115.612126][ T8640] ext4 filesystem being mounted at /398/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.635745][ T8647] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 115.655020][ T8647] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 115.664931][ T8647] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 2: comm syz.1.1881: lblock 2 mapped to illegal pblock 2 (length 1) [ 115.679787][ T8647] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 48: comm syz.1.1881: lblock 0 mapped to illegal pblock 48 (length 1) [ 115.698505][ T8647] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.1881: Failed to acquire dquot type 0 [ 115.710505][ T8647] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 115.725451][ T8647] EXT4-fs error (device loop1): ext4_evict_inode:254: inode #11: comm syz.1.1881: mark_inode_dirty error [ 115.739097][ T8647] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 115.750470][ T8647] EXT4-fs (loop1): 1 orphan inode deleted [ 115.759313][ T8661] loop4: detected capacity change from 0 to 512 [ 115.768878][ T3451] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:8: lblock 1 mapped to illegal pblock 1 (length 1) [ 115.783978][ T8661] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 115.793301][ T8661] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 115.802007][ T8661] EXT4-fs (loop4): 1 truncate cleaned up [ 115.802849][ T3451] EXT4-fs error (device loop1): ext4_release_dquot:6973: comm kworker/u8:8: Failed to release dquot type 0 [ 115.819716][ T8661] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000. [ 115.819737][ T8647] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 48: comm syz.1.1881: lblock 0 mapped to illegal pblock 48 (length 1) [ 115.830558][ T8666] FAULT_INJECTION: forcing a failure. [ 115.830558][ T8666] name failslab, interval 1, probability 0, space 0, times 0 [ 115.854734][ T8666] CPU: 1 UID: 0 PID: 8666 Comm: syz.2.1887 Not tainted syzkaller #0 PREEMPT(voluntary) [ 115.854758][ T8666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 115.854768][ T8666] Call Trace: [ 115.854775][ T8666] [ 115.854781][ T8666] __dump_stack+0x1d/0x30 [ 115.854799][ T8666] dump_stack_lvl+0xe8/0x140 [ 115.854818][ T8666] dump_stack+0x15/0x1b [ 115.854875][ T8666] should_fail_ex+0x265/0x280 [ 115.854897][ T8666] should_failslab+0x8c/0xb0 [ 115.854921][ T8666] kmem_cache_alloc_node_noprof+0x57/0x320 [ 115.854946][ T8666] ? __alloc_skb+0x101/0x320 [ 115.855004][ T8666] __alloc_skb+0x101/0x320 [ 115.855024][ T8666] netlink_alloc_large_skb+0xba/0xf0 [ 115.855057][ T8666] netlink_sendmsg+0x3cf/0x6b0 [ 115.855141][ T8666] ? __pfx_netlink_sendmsg+0x10/0x10 [ 115.855161][ T8666] __sock_sendmsg+0x145/0x180 [ 115.855271][ T8666] sock_write_iter+0x165/0x1b0 [ 115.855304][ T8666] do_iter_readv_writev+0x499/0x540 [ 115.855343][ T8666] vfs_writev+0x2df/0x8b0 [ 115.855425][ T8666] do_writev+0xe7/0x210 [ 115.855452][ T8666] __x64_sys_writev+0x45/0x50 [ 115.855482][ T8666] x64_sys_call+0x1e9a/0x2ff0 [ 115.855544][ T8666] do_syscall_64+0xd2/0x200 [ 115.855567][ T8666] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 115.855589][ T8666] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 115.855614][ T8666] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.855644][ T8666] RIP: 0033:0x7f6632c4ebe9 [ 115.855658][ T8666] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 115.855675][ T8666] RSP: 002b:00007f66316af038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 115.855696][ T8666] RAX: ffffffffffffffda RBX: 00007f6632e85fa0 RCX: 00007f6632c4ebe9 [ 115.855747][ T8666] RDX: 0000000000000001 RSI: 0000200000000300 RDI: 0000000000000003 [ 115.855757][ T8666] RBP: 00007f66316af090 R08: 0000000000000000 R09: 0000000000000000 [ 115.855767][ T8666] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 115.855780][ T8666] R13: 00007f6632e86038 R14: 00007f6632e85fa0 R15: 00007ffda53e0bb8 [ 115.855804][ T8666] [ 116.074757][ T8661] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 116.098903][ T8668] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1889'. [ 116.144886][ T8674] IPVS: stopping master sync thread 4196 ... [ 116.174067][ T8676] hub 8-0:1.0: USB hub found [ 116.178927][ T8676] hub 8-0:1.0: 8 ports detected [ 116.179704][ T8678] netlink: 'syz.1.1894': attribute type 17 has an invalid length. [ 116.191617][ T8678] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1894'. [ 116.293649][ T8692] loop2: detected capacity change from 0 to 128 [ 116.419915][ T8706] loop4: detected capacity change from 0 to 512 [ 116.449361][ T8706] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 116.464504][ T8706] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 116.466629][ T8710] IPVS: Error connecting to the multicast addr [ 116.480324][ T8706] EXT4-fs (loop4): 1 truncate cleaned up [ 116.498402][ T8706] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000. [ 116.523881][ T8706] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 116.568675][ T8717] capability: warning: `syz.0.1908' uses deprecated v2 capabilities in a way that may be insecure [ 116.585886][ T8724] loop3: detected capacity change from 0 to 512 [ 116.600240][ T8724] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 116.614124][ T8727] FAULT_INJECTION: forcing a failure. [ 116.614124][ T8727] name failslab, interval 1, probability 0, space 0, times 0 [ 116.616402][ T8724] EXT4-fs (loop3): 1 truncate cleaned up [ 116.626848][ T8727] CPU: 1 UID: 0 PID: 8727 Comm: syz.4.1912 Not tainted syzkaller #0 PREEMPT(voluntary) [ 116.626875][ T8727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 116.626887][ T8727] Call Trace: [ 116.626894][ T8727] [ 116.626902][ T8727] __dump_stack+0x1d/0x30 [ 116.627040][ T8727] dump_stack_lvl+0xe8/0x140 [ 116.627183][ T8727] dump_stack+0x15/0x1b [ 116.627199][ T8727] should_fail_ex+0x265/0x280 [ 116.627219][ T8727] ? p9_fd_create+0xba/0x280 [ 116.627246][ T8727] should_failslab+0x8c/0xb0 [ 116.627276][ T8727] __kmalloc_cache_noprof+0x4c/0x320 [ 116.627303][ T8727] p9_fd_create+0xba/0x280 [ 116.627331][ T8727] p9_client_create+0x60b/0xbc0 [ 116.627356][ T8727] v9fs_session_init+0xf7/0xde0 [ 116.627489][ T8727] ? ___slab_alloc+0x270/0x900 [ 116.627557][ T8727] ? avc_has_perm_noaudit+0x1b1/0x200 [ 116.627579][ T8727] ? v9fs_mount+0x51/0x5c0 [ 116.627602][ T8727] ? should_fail_ex+0xdb/0x280 [ 116.627621][ T8727] ? v9fs_mount+0x51/0x5c0 [ 116.627722][ T8727] ? __kmalloc_cache_noprof+0x189/0x320 [ 116.627754][ T8727] v9fs_mount+0x67/0x5c0 [ 116.627804][ T8727] ? selinux_capable+0x31/0x40 [ 116.627827][ T8727] ? __pfx_v9fs_mount+0x10/0x10 [ 116.627916][ T8727] legacy_get_tree+0x75/0xd0 [ 116.627937][ T8727] vfs_get_tree+0x54/0x1d0 [ 116.628029][ T8727] do_new_mount+0x207/0x5e0 [ 116.628049][ T8727] ? security_capable+0x83/0x90 [ 116.628071][ T8727] path_mount+0x4a4/0xb20 [ 116.628103][ T8727] ? user_path_at+0x109/0x130 [ 116.628130][ T8727] __se_sys_mount+0x28f/0x2e0 [ 116.628150][ T8727] ? fput+0x8f/0xc0 [ 116.628177][ T8727] __x64_sys_mount+0x67/0x80 [ 116.628232][ T8727] x64_sys_call+0x2b4d/0x2ff0 [ 116.628251][ T8727] do_syscall_64+0xd2/0x200 [ 116.628276][ T8727] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 116.628322][ T8727] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 116.628342][ T8727] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.628442][ T8727] RIP: 0033:0x7f336fbdebe9 [ 116.628461][ T8727] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 116.628477][ T8727] RSP: 002b:00007f336e647038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 116.628517][ T8727] RAX: ffffffffffffffda RBX: 00007f336fe15fa0 RCX: 00007f336fbdebe9 [ 116.628529][ T8727] RDX: 0000200000000040 RSI: 0000200000000000 RDI: 0000000000000000 [ 116.628541][ T8727] RBP: 00007f336e647090 R08: 0000200000000140 R09: 0000000000000000 [ 116.628553][ T8727] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 116.628565][ T8727] R13: 00007f336fe16038 R14: 00007f336fe15fa0 R15: 00007ffc58c5ef78 [ 116.628582][ T8727] [ 117.041807][ T8724] ================================================================== [ 117.049997][ T8724] BUG: KCSAN: data-race in xas_find_marked / xas_set_mark [ 117.057112][ T8724] [ 117.059435][ T8724] write to 0xffff888104b169a4 of 4 bytes by task 8738 on cpu 1: [ 117.067044][ T8724] xas_set_mark+0x12b/0x140 [ 117.071546][ T8724] __folio_start_writeback+0x1dd/0x440 [ 117.077005][ T8724] ext4_bio_write_folio+0x5ad/0x9f0 [ 117.082203][ T8724] mpage_process_page_bufs+0x4a1/0x620 [ 117.087653][ T8724] mpage_prepare_extent_to_map+0x786/0xc00 [ 117.093446][ T8724] ext4_do_writepages+0xa05/0x2750 [ 117.098551][ T8724] ext4_writepages+0x176/0x300 [ 117.103299][ T8724] do_writepages+0x1c3/0x310 [ 117.107877][ T8724] filemap_write_and_wait_range+0x144/0x340 [ 117.113764][ T8724] ext4_file_write_iter+0xe04/0xf00 [ 117.118952][ T8724] iter_file_splice_write+0x663/0xa60 [ 117.124316][ T8724] direct_splice_actor+0x153/0x2a0 [ 117.129427][ T8724] splice_direct_to_actor+0x30f/0x680 [ 117.134796][ T8724] do_splice_direct+0xda/0x150 [ 117.139548][ T8724] do_sendfile+0x380/0x650 [ 117.143957][ T8724] __x64_sys_sendfile64+0x105/0x150 [ 117.149166][ T8724] x64_sys_call+0x2bb0/0x2ff0 [ 117.153915][ T8724] do_syscall_64+0xd2/0x200 [ 117.158430][ T8724] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.164306][ T8724] [ 117.166649][ T8724] read to 0xffff888104b169a4 of 4 bytes by task 8724 on cpu 0: [ 117.174176][ T8724] xas_find_marked+0x5dc/0x620 [ 117.178985][ T8724] find_get_entry+0x5d/0x380 [ 117.183568][ T8724] filemap_get_folios_tag+0x92/0x210 [ 117.188836][ T8724] mpage_prepare_extent_to_map+0x320/0xc00 [ 117.194625][ T8724] ext4_do_writepages+0xa05/0x2750 [ 117.199726][ T8724] ext4_writepages+0x176/0x300 [ 117.204486][ T8724] do_writepages+0x1c3/0x310 [ 117.209064][ T8724] file_write_and_wait_range+0x156/0x2c0 [ 117.214698][ T8724] generic_buffers_fsync_noflush+0x45/0x120 [ 117.220576][ T8724] ext4_sync_file+0x1ab/0x690 [ 117.225334][ T8724] vfs_fsync_range+0x10d/0x130 [ 117.230087][ T8724] ext4_buffered_write_iter+0x34f/0x3c0 [ 117.235634][ T8724] ext4_file_write_iter+0xdbf/0xf00 [ 117.240824][ T8724] iter_file_splice_write+0x663/0xa60 [ 117.246185][ T8724] direct_splice_actor+0x153/0x2a0 [ 117.251280][ T8724] splice_direct_to_actor+0x30f/0x680 [ 117.256647][ T8724] do_splice_direct+0xda/0x150 [ 117.261399][ T8724] do_sendfile+0x380/0x650 [ 117.265821][ T8724] __x64_sys_sendfile64+0x105/0x150 [ 117.271017][ T8724] x64_sys_call+0x2bb0/0x2ff0 [ 117.275696][ T8724] do_syscall_64+0xd2/0x200 [ 117.280197][ T8724] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.286081][ T8724] [ 117.288477][ T8724] value changed: 0x0a000021 -> 0x04000021 [ 117.294175][ T8724] [ 117.296482][ T8724] Reported by Kernel Concurrency Sanitizer on: [ 117.302619][ T8724] CPU: 0 UID: 0 PID: 8724 Comm: syz.3.1911 Not tainted syzkaller #0 PREEMPT(voluntary) [ 117.312423][ T8724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 117.322472][ T8724] ================================================================== [ 117.385321][ T8724] syz.3.1911 (8724) used greatest stack depth: 9080 bytes left