last executing test programs: 1m4.248492212s ago: executing program 2 (id=201): mmap$xdp(&(0x7f0000c0c000/0x4000)=nil, 0x4000, 0x5000005, 0x6e073, 0xffffffffffffffff, 0x100000000) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x800000000003}, 0x1320, 0xffffffff, 0x3, 0x5, 0x0, 0x1, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000000540)={0x1, 0x2000000, 0x5, 0x9, 0x18e, 0x0}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000000)={0x0, 0x0, 0x0}) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000080)=0x3) syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) 1m4.062385162s ago: executing program 2 (id=206): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000000040)='kfree\x00', r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=@newtaction={0xea8, 0x30, 0x25, 0x0, 0x0, {}, [{0xe94, 0x1, [@m_pedit={0xe90, 0x1, 0x0, 0x0, {{0xa}, {0xe64, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x800000}, 0x3}, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xd8}, {}, {}, {0x0, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {0x0, 0x0, 0x3}, {}, {}, {0x1}, {0x1}, {0x0, 0x0, 0x2}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xff}, {}, {}, {}, {}, {}, {}, {0x0, 0xfffffffc}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xb8}, {}, {0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {0x1000}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xaef4}, {}, {}, {}, {}, {0x0, 0xa24}, {0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x6}, {}, {}, {0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0xfffffffe}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x1}], [{}, {}, {}, {0x5}, {}, {}, {}, {0x1}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x5}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {0x4}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}], 0x4}}, @TCA_PEDIT_KEYS_EX={0x40, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xea8}}, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r1) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002a40)={0x20, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x7, 0x1, 0x8}]}]}, 0x20}}, 0x0) sendmsg$TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, &(0x7f0000002540)={&(0x7f0000002180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000002500)={&(0x7f00000021c0)={0x308, r4, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6d6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7fff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffff24a}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xe}]}, @TIPC_NLA_SOCK={0x38, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xffff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xac}, @TIPC_NLA_SOCK_CON={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xff}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfffffff2}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xc}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4f80cca9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80000000}]}, @TIPC_NLA_NODE={0x12c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfff}, @TIPC_NLA_NODE_ID={0x8d, 0x3, "5f2b62b0c188361b9a99b88bc62308908ccf113ba83032abfb87bd773fe3903a0ead9629c9c3d59d5d9231abde5b1b8a7428514ebebae390dc3fa747e9526c2ee23f3fe1f5b456bc7d47044ff33e1dde1827c363d5b52a0927ebd371b415414770d8c90cca0048f401fd36ffe13483795c93d4d18c2a7d599a07f9ad7484f515c2bf8937bcebcb8be4"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfffffffa}, @TIPC_NLA_NODE_ID={0x6c, 0x3, "425199526c086d44a2171490055a83e764f288908e47336ed2dc0a0aed80255f9b40ebb77a4d8a7924ca05cd81ca5ae8ddd5c760e04b31d8c2c599afe090b76b4742febe60c440ef267a12e5c7db0e7f5d51a460ceee7ab4bc5657d206f7addb4c783e5c1c9cad57"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}]}, @TIPC_NLA_BEARER={0x110, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0xfffffffb, @empty, 0x1}}, {0x14, 0x2, @in={0x2, 0x4e20, @multicast2}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x9, @empty, 0x43279c0d}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x2, @rand_addr=' \x01\x00', 0x6f7c}}}}, @TIPC_NLA_BEARER_PROP={0x4}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ipvlan1\x00'}}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'xfrm0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x1c, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x128}]}]}, 0x308}, 0x1, 0x0, 0x0, 0x4}, 0x4048010) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000002a00)={0x0, @aes256, 0x0, @desc4}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002840)={0xffffffffffffffff, 0xe0, &(0x7f0000002740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000002580)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f00000025c0)=[0x0, 0x0], &(0x7f0000002600)=[0x0, 0x0, 0x0], 0x0, 0x49, &(0x7f0000002640)=[{}], 0x8, 0x10, &(0x7f0000002680), &(0x7f00000026c0), 0x8, 0xab, 0x8, 0x8, &(0x7f0000002700)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff0000", @ANYRES32=r0, @ANYRESOCT=r0], &(0x7f0000000040)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000540)='./file0\x00', 0x204018, &(0x7f0000000140)=ANY=[@ANYBLOB="6f76657272696465726f636b7065726d2c6e6f636f6d70726573732c686964652c73657373696f6e3d3078303030303030303030303030303032312c756e686964652c696f636861727365743d63703433372c6f76657272696465726f636b7065726d2c626c6f636b3d3078303030303030303030303030303430302c005fb50aab29cf1d32d24be5ab2a6506aa524c8f1cd5781842ee1c86bee627767fee958f25bb6db8e631262ed8a59d337d730b6698271aeb8c31c1902a7e236e5dd878e6c1352c0c799d8e80d7346f8d2870acebe617c694bbb925d3ab4fb01784c564c03d88c81d2f84f58e8c6ba18548f09fa6"], 0x1, 0x563, &(0x7f0000000f80)="$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") 1m3.985027642s ago: executing program 2 (id=210): setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000300)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000040], 0x0, 0x0, 0x0}, 0x89) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x2000) 1m3.906044882s ago: executing program 2 (id=212): mmap$xdp(&(0x7f0000c0c000/0x4000)=nil, 0x4000, 0x5000005, 0x6e073, 0xffffffffffffffff, 0x100000000) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x800000000003}, 0x1320, 0xffffffff, 0x3, 0x5, 0x0, 0x1, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x0) ioctl$EVIOCSMASK(r2, 0x40104593, &(0x7f0000000000)={0x0, 0x0, 0x0}) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000080)=0x3) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) write$char_usb(r3, &(0x7f0000000040)="e2", 0x2250) 1m3.825141712s ago: executing program 2 (id=219): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10, &(0x7f0000000000), 0xfd, 0x244, &(0x7f0000000680)="$eJzs3T9oJFUcB/DvzO565m6RUxtB/AMiooFwdoJNbBQCEoKIoEJExEZJhJhgl1jZWGitksomiJ3RUtIEG0WwipoiNoIGC4OFFiu7k0hMVqNu3Dkynw9MZibz3vzesPN9u83sBmisq0mmk7SSTCbpJCmON7i7Wq4e7q5PbM8nvd4TPxWDdtV+5ajflSRrSR5KslUWeamdrGw+s/fLzmP3vbncuff9zacnxnqRh/b3dh8/eG/2jY9mHlz54qsfZotMp/un6zp/xZD/tYvklv+j2HWiaNc9Av6Judc+/Lqf+1uT3DPIfydlqhfvraUbtjp54N2/6vv2j1/ePs6xAuev1+v03wPXekDjlEm6KcqpJNV2WU5NVZ/hv2ldLl9eXHp18sXF5YUX6p6pgPPSTXYf/eTSx1dO5P/7VpV/4OLq5//JuY1v+9sHrbpHA4zFHdWqn//J51bvj/xD48g/NJf8Q3PJPzSX/ENzyT80l/zDBdb5+8PyD80l/9Bc8g/NdTz/AECz9C7V/QQyUJe65x8AAAAAAAAAAAAAAAAAAOC09Ynt+aNlXDU/eyfZfyRJe1j91uD3iJMbB38v/1z0m/2hqLqN5Nm7RjzBiD6o+enrm76rt/7nd9Zbf3UhWXs9ybV2+/T9Vxzef//dzWcc7zw/YoF/qTix//BT461/0m8b9daf2Uk+7c8/14bNP2VuG6yHzz/ds79i+Uyv/DriCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABib3wMAAP//+kBtTA==") openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x107042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./file2\x00', 0x107842, 0x14f) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x103842, 0x0) pwritev2(r2, &(0x7f0000000200)=[{&(0x7f0000000600)}], 0x1, 0x800008, 0xe1c5, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff"], 0x15) r6 = dup(r5) mount$9p_fd(0x0, &(0x7f0000004280)='./file0\x00', &(0x7f0000004380), 0x0, &(0x7f00000045c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[], [], 0x6b}}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r9}, 0x10) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x20, r7, 0x301, 0x0, 0x0, {{0x32}, {@void, @val={0xc}}}}, 0x20}}, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) pwritev2(r10, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0) 1m3.703379392s ago: executing program 2 (id=222): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x3d, 0x0) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000080)) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000400000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sys_enter\x00', r2}, 0x10) clock_getres(0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{}, &(0x7f0000000400), 0x0}, 0x20) bpf$MAP_CREATE(0x1900000000000000, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r5 = dup(r4) write$P9_RLERRORu(r5, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) 48.667316675s ago: executing program 32 (id=222): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x3d, 0x0) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000080)) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000400000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sys_enter\x00', r2}, 0x10) clock_getres(0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{}, &(0x7f0000000400), 0x0}, 0x20) bpf$MAP_CREATE(0x1900000000000000, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r5 = dup(r4) write$P9_RLERRORu(r5, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) 32.890706048s ago: executing program 0 (id=1184): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x48}}, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4005, &(0x7f0000000000)=0x8000081, 0x5, 0x2) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000001c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000b80)=@gcm_256={{0x304}, "76f7bc3e4ae1c84c", "af193cff4810ba5ac120d096eb00b40752095b4285514ca312c52e3a08756735", '8\x00', "bc3a20b10f4ad11e"}, 0x38) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="180800001bc81a000000000000001e00851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000e00)=ANY=[@ANYBLOB="840100001900010000000000000000001d0109004d001280d09178d2da3477ec73a38ffffcd82caf103bc848e79022290bd6c0375f437b167f431ad24706d7263978db87dbaa159b0fdec8e129e835688cf370555aa8c6dffe261622b114299d6f0000001e0106800901"], 0x184}, 0x1, 0x0, 0x0, 0x14}, 0x0) close(r4) socket$inet_smc(0x2b, 0x1, 0x0) socket$inet6(0xa, 0x3, 0xc1) socket(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0xfffffffd, 0x10100, 0x0, 0x21b}, &(0x7f0000000200), &(0x7f0000000140)) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'syztnl0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x7, 0x0, 0x45, @remote, @remote, 0x0, 0x700, 0x7}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r7, &(0x7f0000000180)=ANY=[@ANYRES64=r6], 0x118) 32.645249738s ago: executing program 0 (id=1192): bpf$PROG_LOAD(0x5, 0x0, 0x0) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x14) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000001640)='kfree\x00', r1}, 0x10) r2 = socket$inet6(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x308, 0x130, 0x12, 0x60a, 0x600, 0x202, 0x238, 0x2e8, 0x2e8, 0x238, 0x2c0, 0x4, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @dev}, @mcast2, [0x4000000], [], 'veth1_to_bond\x00', 'xfrm0\x00'}, 0x0, 0x108, 0x130, 0x0, {}, [@common=@unspec=@statistic={{0x38}}, @common=@inet=@socket2={{0x28}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff}, {0xffffffffffffffff, 0xf9}}}}, {{@ipv6={@private2, @loopback, [], [], 'vxcan1\x00', 'geneve0\x00'}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@empty}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x368) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r4}, 0x10) truncate(&(0x7f0000000040)='./file0\x00', 0x0) 32.619445678s ago: executing program 0 (id=1194): bpf$PROG_LOAD(0x5, 0x0, 0x0) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x14) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000001640)='kfree\x00', r1}, 0x10) r2 = socket$inet6(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x308, 0x130, 0x12, 0x60a, 0x600, 0x202, 0x238, 0x2e8, 0x2e8, 0x238, 0x2c0, 0x4, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @dev}, @mcast2, [0x4000000], [], 'veth1_to_bond\x00', 'xfrm0\x00'}, 0x0, 0x108, 0x130, 0x0, {}, [@common=@unspec=@statistic={{0x38}}, @common=@inet=@socket2={{0x28}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff}, {0xffffffffffffffff, 0xf9}}}}, {{@ipv6={@private2, @loopback, [], [], 'vxcan1\x00', 'geneve0\x00'}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@empty}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x368) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r4}, 0x10) truncate(&(0x7f0000000040)='./file0\x00', 0x0) 32.564549367s ago: executing program 0 (id=1199): openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x4) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) acct(&(0x7f0000000180)='./file0\x00') 32.523464837s ago: executing program 0 (id=1201): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x210c5e, &(0x7f0000000040)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}, {@nobh}]}, 0x1, 0x4fa, &(0x7f0000000ac0)="$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") quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x6, 0x0, 0x9d}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000000), &(0x7f0000000080)=r2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r3}, 0x10) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000480)=@mangle={'mangle\x00', 0x44, 0x6, 0x3e0, 0x0, 0x138, 0x138, 0x98, 0x98, 0x348, 0x348, 0x348, 0x348, 0x348, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0xff0000ff, 0x0, 'geneve1\x00', 'bridge0\x00', {}, {}, 0x0, 0x0, 0x2a}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@uncond, 0x0, 0xa8, 0xd0, 0x0, {}, [@common=@unspec=@owner={{0x38}, {0x0, 0x0, 0x0, 0x0, 0x2, 0x4}}]}, @ECN={0x28}}, {{@ip={@loopback, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, {{@uncond, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x440) 32.345293107s ago: executing program 0 (id=1205): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x4, 0x7fdf, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfe}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = dup2(r1, r0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r2}, 0x10) r3 = open(&(0x7f0000000900)='./file0\x00', 0x40, 0x0) fgetxattr(r3, &(0x7f00000003c0)=@known='security.selinux\x00', 0x0, 0x0) 17.363247701s ago: executing program 33 (id=1205): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x4, 0x7fdf, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfe}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = dup2(r1, r0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r2}, 0x10) r3 = open(&(0x7f0000000900)='./file0\x00', 0x40, 0x0) fgetxattr(r3, &(0x7f00000003c0)=@known='security.selinux\x00', 0x0, 0x0) 2.337536326s ago: executing program 5 (id=1867): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x1}, 0x1320, 0xffffffff, 0x3, 0x5, 0x0, 0x1088f109, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002380)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f00000001c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket(0x400000000010, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) recvmsg$unix(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)}, 0x2142) 2.156964295s ago: executing program 5 (id=1869): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r0, &(0x7f0000000280)={0x11, 0x7, r1, 0x1, 0xdf, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x14) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan1\x00'}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x70bd2a, 0x8000000, {0x0, 0x0, 0x0, r1, {0x1f, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x20008040}, 0x4000000) 2.083588375s ago: executing program 6 (id=1871): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x3d, 0x0) ioctl$EVIOCGRAB(r0, 0x40044590, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sys_enter\x00'}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{}, &(0x7f0000000400), 0x0}, 0x20) bpf$MAP_CREATE(0x1900000000000000, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r4 = dup(r3) write$P9_RLERRORu(r4, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe935"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) acct(&(0x7f0000000180)='./file0\x00') 1.927126425s ago: executing program 5 (id=1874): mmap$xdp(&(0x7f0000c0c000/0x4000)=nil, 0x4000, 0x5000005, 0x6e073, 0xffffffffffffffff, 0x100000000) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x800000000003}, 0x1320, 0xffffffff, 0x3, 0x5, 0x0, 0x1, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000000540)={0x1, 0x2000000, 0x5, 0x9, 0x18e, 0x0}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000000)={0x0, 0x0, 0x0}) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000080)=0x3) r4 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) write$char_usb(r4, &(0x7f0000000040)="e2", 0x2250) 1.915785495s ago: executing program 6 (id=1875): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00"/11], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24532a0856225ab8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) sendto$inet6(r0, 0x0, 0x5c4, 0x404c844, &(0x7f0000000540)={0x2, 0x4e24, 0x0, @local}, 0x1c) 1.887103115s ago: executing program 6 (id=1876): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) r3 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000380)={0x0, 0x5}, 0x8) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) waitid(0x0, r2, 0x0, 0x8, 0xfffffffffffffffd) waitid(0x1, r2, 0x0, 0x4, 0x0) 1.827790285s ago: executing program 5 (id=1878): syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f00000007c0)='./bus\x00', 0x0, &(0x7f00000021c0)={[{@dioread_nolock}, {@minixdf}, {@debug}, {}]}, 0x1, 0x783, &(0x7f0000002200)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r2, 0x1, 0x4, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'wg1\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000002c0)='mm_page_alloc\x00', r8}, 0x10) ioperm(0x0, 0x12e, 0x8000000000008) syz_clone3(&(0x7f00000061c0)={0x100, 0x0, 0x0, 0x0, {0x17}, 0x0, 0x0, 0x0, &(0x7f0000006180)=[0x0], 0x1}, 0x58) r9 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r9, &(0x7f0000000180), 0x10) sendmsg$ETHTOOL_MSG_PAUSE_GET(r4, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002abd7000000000001a0000002000018008000100", @ANYRES32=r7, @ANYBLOB="140002006c6f00000500"/20], 0x34}, 0x1, 0x0, 0x0, 0x40880}, 0xd0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3, 0x0, 0x7}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x94) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001940)=@newtaction={0xe98, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe50, 0x2, {{{0x0, 0x0, 0x4}, 0x97, 0x0, [{0x0, 0x0, 0x9c}, {}]}, [{}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, {0x448eade7}, {0x0, 0x0, 0x80000000}, {0x0, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x0, 0x0, 0x2000}, {0x0, 0x0, 0x0, 0x0, 0x400}, {}, {0x0, 0x400}, {}, {0x2, 0x1, 0x0, 0x0, 0xfffffffe, 0x8001}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x3}, {0x0, 0x3, 0x0, 0x0, 0x0, 0x9}, {}, {0x0, 0x0, 0x100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0xfffffffc}, {}, {}, {}, {0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {}, {}, {}, {0x7}, {0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0xd5}, {}, {0x0, 0xaa, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, {0x0, 0x0, 0x0, 0xfffffffe}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x0, 0x10}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x800, 0x6}, {}, {}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {0x0, 0x5, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, {0x0, 0x0, 0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x200000}, {0xffffffff}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {0x0, 0x800000, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, {}, {}, {}, {}, {0x4}, {}, {0xa7}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa}, {0x0, 0x0, 0x1000}, {}, {0xd2, 0x0, 0x0, 0x0, 0x0, 0x20000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x4, 0x0, 0x0, 0x0, 0x1}, {}, {0x0, 0x9}, {0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x1000000}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x10000000}, {}, {}, {}, {}, {0x523e}, {}, {0x4, 0x0, 0x0, 0x10}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb}], [{}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {0x4}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {0x5}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {0x2}, {0x2}, {0x0, 0x1}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) r11 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x107842, 0x42) sendfile(r11, r11, 0x0, 0x80000000) 1.382487103s ago: executing program 1 (id=1884): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0xfffffffb, 0x0, 0x0, 0x40f00, 0x42, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0, 0x0, 0xffffffffffffffff}, 0x13) syz_mount_image$vfat(&(0x7f0000001400), &(0x7f00000013c0)='./file0\x00', 0xfb36b7c5efa0d8f5, 0x0, 0x0, 0x0, &(0x7f00000013c0)) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x7, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r2}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000), 0x80402, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$xdp(0x2c, 0x3, 0x0) r5 = dup(r4) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x4, 0x45, 0x1, 0x8, 0x61, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0, 0x40, 0x40, 0x5, 0xfffffff9}}) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r6, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) 1.254637123s ago: executing program 1 (id=1888): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) 1.240243953s ago: executing program 4 (id=1889): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x8004, &(0x7f0000000080)={[{@discard}, {@bh}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x7b9, &(0x7f00000007c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000045000000020000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000040000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r2, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) r5 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000040)='gre0\x00', 0x10) sendmmsg$inet(r5, &(0x7f0000000440)=[{{&(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001580)=[{&(0x7f0000000200)="a9050000000074640000000000003552bde5c064c6", 0x15}, {&(0x7f0000000340)="174640b6d80fb2eedc81ba60ccbb9d", 0xf}], 0x2}}], 0x1, 0x0) 1.216250103s ago: executing program 1 (id=1890): openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x4) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, 0x0, 0x0) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) acct(&(0x7f0000000180)='./file0\x00') 1.151872493s ago: executing program 1 (id=1891): r0 = socket$packet(0x11, 0x2, 0x300) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) listen(0xffffffffffffffff, 0x3) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c2000000080045000028000000000006907864010101ac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5b020000a7d7c5d5"], 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000002d40)='kfree\x00', r3, 0x0, 0xb}, 0x18) r4 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_user(r4, &(0x7f0000000080)=ANY=[@ANYBLOB='system_u:object_r:auth_cache_t r'], 0x27) syz_emit_ethernet(0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c2000000080045000028000000000006", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c10"], 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r0, &(0x7f0000000280)={0x11, 0x7, r5, 0x1, 0xdf, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x14) socket$nl_generic(0x10, 0x3, 0x10) r6 = accept(0xffffffffffffffff, 0x0, &(0x7f00000004c0)) getsockopt$MRT6(r6, 0x29, 0xd0, 0x0, &(0x7f0000000540)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x70bd2a, 0x8000000, {0x0, 0x0, 0x0, r5, {0x1f, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x20008040}, 0x4000000) 1.127652343s ago: executing program 3 (id=1892): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x5, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000800000000000000002001811020032c350c0341ab7918fb96d34bd0a9a4e62b3c1decabae24dcc867c4a75789f9a0bb0276734f4fa067b6946280d826b108962182621a56a2e9405a7ae8ae01e4bd16670f1b9cfd56d4a3752b771d697f52733c172fbe1d8075528f00babe03aba5b2aa26b4e8c397ae82bd9abad080fdc1bc5ab84b46dcec3ea740ebb9e1a7d7c1d624743d49da6e323bdac273e13118018f6485a99344f612bfbc7bf2999a3449a896f00a0abaae504fae17763ed2090e141561b7e0b868a6aee22", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0xa0835c, &(0x7f0000000340)={[{@nojournal_checksum}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@dioread_nolock}, {@usrjquota}, {@oldalloc}, {@sysvgroups}, {@auto_da_alloc}], [{@flag='lazytime'}, {@dont_appraise}, {@smackfstransmute={'smackfstransmute', 0x3d, '/'}}]}, 0x2, 0x44a, &(0x7f0000000880)="$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") 1.023831593s ago: executing program 3 (id=1893): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x8004, &(0x7f0000000080)={[{@discard}, {@bh}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x7b9, &(0x7f00000007c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x107842, 0x42) lseek(r0, 0x5, 0x3) chown(&(0x7f0000000040)='./file1\x00', 0xffffffffffffffff, 0x0) sendfile(r0, r0, 0x0, 0x80000000) 1.023401793s ago: executing program 6 (id=1894): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x8004, &(0x7f0000000080)={[{@discard}, {@bh}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x7b9, &(0x7f00000007c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000045000000020000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000040000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) chown(&(0x7f0000000040)='./file1\x00', 0xffffffffffffffff, 0x0) 1.022676583s ago: executing program 1 (id=1895): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x8004, &(0x7f0000000080)={[{@discard}, {@bh}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x7b9, &(0x7f00000007c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000045000000020000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000040000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) chown(&(0x7f0000000040)='./file1\x00', 0xffffffffffffffff, 0x0) 960.825643ms ago: executing program 3 (id=1896): r0 = socket$packet(0x11, 0x2, 0x300) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) listen(0xffffffffffffffff, 0x3) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c2000000080045000028000000000006907864010101ac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5b020000a7d7c5d5"], 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000002d40)='kfree\x00', r3, 0x0, 0xb}, 0x18) r4 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_user(r4, &(0x7f0000000080)=ANY=[@ANYBLOB='system_u:object_r:auth_cache_t r'], 0x27) syz_emit_ethernet(0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c2000000080045000028000000000006", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c10"], 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r0, &(0x7f0000000280)={0x11, 0x7, r5, 0x1, 0xdf, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x14) socket$nl_generic(0x10, 0x3, 0x10) r6 = accept(0xffffffffffffffff, 0x0, &(0x7f00000004c0)) getsockopt$MRT6(r6, 0x29, 0xd0, 0x0, &(0x7f0000000540)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x70bd2a, 0x8000000, {0x0, 0x0, 0x0, r5, {0x1f, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x20008040}, 0x4000000) 919.487123ms ago: executing program 5 (id=1897): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x8004, &(0x7f0000000080)={[{@discard}, {@bh}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x7b9, &(0x7f00000007c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000045000000020000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000040000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) r5 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000040)='gre0\x00', 0x10) sendmmsg$inet(r5, &(0x7f0000000440)=[{{&(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001580)=[{&(0x7f0000000200)="a9050000000074640000000000003552bde5c064c6", 0x15}, {&(0x7f0000000340)="174640b6d80fb2eedc81ba60ccbb9d", 0xf}], 0x2}}], 0x1, 0x0) 607.113892ms ago: executing program 4 (id=1898): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000980)=ANY=[@ANYBLOB="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", @ANYRESOCT, @ANYBLOB="f67150dc03aa1eb3cf1c2794662613d1a4e8c442b79f5fd40cec53b4829fa45044b5bcd52e405264754b6568b00fdcb907c71909259d5aeb08d705082625b67aa42bac890f"], 0x1874}, 0x1, 0x0, 0x0, 0x40080}, 0x0) 574.015922ms ago: executing program 6 (id=1899): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x48}}, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4005, &(0x7f0000000000)=0x8000081, 0x5, 0x2) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000001c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000b80)=@gcm_256={{0x304}, "76f7bc3e4ae1c84c", "af193cff4810ba5ac120d096eb00b40752095b4285514ca312c52e3a08756735", '8\x00', "bc3a20b10f4ad11e"}, 0x38) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000e00)=ANY=[@ANYBLOB="840100001900010000000000000000001d0109004d001280d09178d2da3477ec73a38ffffcd82caf103bc848e79022290bd6c0375f437b167f431ad24706d7263978db87dbaa159b0fdec8e129e835688cf370555aa8c6dffe261622b114299d6f0000001e0106800901"], 0x184}, 0x1, 0x0, 0x0, 0x14}, 0x0) close(r4) socket$inet_smc(0x2b, 0x1, 0x0) socket$inet6(0xa, 0x3, 0xc1) socket(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0xfffffffd, 0x10100, 0x0, 0x21b}, &(0x7f0000000200), &(0x7f0000000140)) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'syztnl0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x7, 0x0, 0x45, @remote, @remote, 0x0, 0x700, 0x7}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r7, &(0x7f0000000180)=ANY=[@ANYRES64=r6], 0x118) 373.383391ms ago: executing program 3 (id=1900): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) 335.075261ms ago: executing program 3 (id=1901): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00"/13], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24532a0856225ab8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) sendto$inet6(r0, 0x0, 0x5c4, 0x404c844, &(0x7f0000000540)={0x2, 0x4e24, 0x0, @local}, 0x1c) 221.400571ms ago: executing program 4 (id=1902): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r0}, 0x18) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x4) bpf$MAP_CREATE(0x1900000000000000, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff01800400080039503230"], 0x15) r3 = dup(r2) write$P9_RLERRORu(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) acct(&(0x7f0000000180)='./file0\x00') 220.693091ms ago: executing program 3 (id=1903): fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, &(0x7f0000000380), 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) mkdir(0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x802) r2 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = timerfd_create(0x0, 0x0) timerfd_settime(r3, 0x0, &(0x7f0000000080)={{}, {0x0, 0x3938700}}, 0x0) readv(r3, &(0x7f00000003c0)=[{&(0x7f0000000000)=""/33, 0x21}], 0x1) ioctl$EVIOCGBITKEY(r1, 0x80404521, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014fa0000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000212c1400001e0a05010000000000000000070000000900020073797a31000000000900010073797a300000000000140380300000802c000180250001007bb0c03ce8ed22d039cce4"], 0x14b0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000240), 0x22, 0x4d5, &(0x7f0000000580)="$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") r7 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x45) ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f0000000000)) write$binfmt_script(r7, &(0x7f0000000100)={'#! ', './file1', [{0x20, '#!\r'}, {0x20, 'ext4\x00'}, {0x20, ':&.'}], 0xa, "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"}, 0xfea2) truncate(&(0x7f0000000080)='./file1\x00', 0x0) 157.930741ms ago: executing program 4 (id=1904): rt_tgsigqueueinfo(0x0, 0x0, 0x35, 0x0) 150.329951ms ago: executing program 5 (id=1905): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r4}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000019080)=ANY=[@ANYBLOB="0100000001000000e27f0000"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000005700)={{r8, 0xffffffffffffffff}, 0x0, &(0x7f00000056c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000440)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x21, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [@map_fd={0x18, 0x3, 0x1, 0x0, r9}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r8}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r8}}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2}, @generic={0xdb, 0x2, 0xd, 0xb2dc, 0xd7a}, @map_val={0x18, 0xb, 0x2, 0x0, r9, 0x0, 0x0, 0x0, 0x8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0xf5, &(0x7f0000000480)=""/245, 0x40f00, 0x54, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000400)={0x3, 0xe, 0x3, 0xe7c0}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000580)=[r8], &(0x7f00000005c0)=[{0x2, 0x3, 0xd, 0x8}, {0x4, 0x2, 0x10}, {0x3, 0x4, 0x4, 0x9}, {0x1, 0x3, 0x2, 0x5}, {0x5, 0x3, 0xa, 0x9}, {0x2, 0x1, 0x8}], 0x10, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f00000008c0)='xprtrdma_dma_maperr\x00', r10, 0x0, 0x7}, 0x18) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newsa={0x158, 0x10, 0x413, 0x0, 0x25dfdbfb, {{@in6=@dev={0xfe, 0x80, '\x00', 0x40}, @in=@remote}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x32}, @in=@dev={0xac, 0x14, 0x14, 0x44}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x0, 0x60}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x70bd27, 0x70bd2d, 0x70bd25, 0x70bd2d, 0x1}}]}, 0x158}}, 0x0) 118.889231ms ago: executing program 4 (id=1906): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x10, &(0x7f0000000600)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2], 0x38}}, 0x0) 117.651361ms ago: executing program 1 (id=1907): syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f00000007c0)='./bus\x00', 0x0, &(0x7f00000021c0)={[{@dioread_nolock}, {@minixdf}, {@debug}, {}]}, 0x1, 0x783, &(0x7f0000002200)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r2, 0x1, 0x4, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'wg1\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000002c0)='mm_page_alloc\x00', r8}, 0x10) ioperm(0x0, 0x12e, 0x8000000000008) syz_clone3(&(0x7f00000061c0)={0x100, 0x0, 0x0, 0x0, {0x17}, 0x0, 0x0, 0x0, &(0x7f0000006180)=[0x0], 0x1}, 0x58) r9 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0500000000bbd10d0bc11fc00000000040000000aef028c89c34dcb05408427474e1cb5e689c593e7a16dd0af4f5be2f038bc9faf7"], 0x80}}, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_GET(r4, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002abd7000000000001a0000002000018008000100", @ANYRES32=r7, @ANYBLOB="140002006c6f00000500"/20], 0x34}, 0x1, 0x0, 0x0, 0x40880}, 0xd0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3, 0x0, 0x7}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x94) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001940)=@newtaction={0xe98, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe50, 0x2, {{{0x0, 0x0, 0x4}, 0x97, 0x0, [{0x0, 0x0, 0x9c}, {}]}, [{}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, {0x448eade7}, {0x0, 0x0, 0x80000000}, {0x0, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x0, 0x0, 0x2000}, {0x0, 0x0, 0x0, 0x0, 0x400}, {}, {0x0, 0x400}, {}, {0x2, 0x1, 0x0, 0x0, 0xfffffffe, 0x8001}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x3}, {0x0, 0x3, 0x0, 0x0, 0x0, 0x9}, {}, {0x0, 0x0, 0x100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0xfffffffc}, {}, {}, {}, {0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {}, {}, {}, {0x7}, {0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0xd5}, {}, {0x0, 0xaa, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, {0x0, 0x0, 0x0, 0xfffffffe}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x0, 0x10}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x800, 0x6}, {}, {}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {0x0, 0x5, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, {0x0, 0x0, 0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x200000}, {0xffffffff}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {0x0, 0x800000, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, {}, {}, {}, {}, {0x4}, {}, {0xa7}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa}, {0x0, 0x0, 0x1000}, {}, {0xd2, 0x0, 0x0, 0x0, 0x0, 0x20000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x4, 0x0, 0x0, 0x0, 0x1}, {}, {0x0, 0x9}, {0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x1000000}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x10000000}, {}, {}, {}, {}, {0x523e}, {}, {0x4, 0x0, 0x0, 0x10}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb}], [{}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {0x4}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {0x5}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {0x2}, {0x2}, {0x0, 0x1}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) r11 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x107842, 0x42) sendfile(r11, r11, 0x0, 0x80000000) 747.15µs ago: executing program 4 (id=1908): r0 = open(&(0x7f0000000180)='./bus\x00', 0x14957e, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) readahead(r0, 0x0, 0x0) (fail_nth: 1) 0s ago: executing program 6 (id=1909): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x8004, &(0x7f0000000080)={[{@discard}, {@bh}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x7b9, &(0x7f00000007c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000045000000020000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000040000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) chown(&(0x7f0000000040)='./file1\x00', 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): nvalid length. [ 84.043853][ T6766] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1355'. [ 84.052989][ T6766] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1355'. [ 84.062075][ T6766] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1355'. [ 84.109129][ T6778] loop3: detected capacity change from 0 to 2048 [ 84.128824][ T6778] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0002] [ 84.137404][ T6778] System zones: 0-4 [ 84.146801][ T6778] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.158996][ T6778] ext4 filesystem being mounted at /329/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 84.265481][ T6793] SET target dimension over the limit! [ 84.427898][ T6801] loop5: detected capacity change from 0 to 128 [ 84.455785][ T6801] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 84.501321][ T6801] ext4 filesystem being mounted at /160/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 84.565339][ T6637] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 345: padding at end of block bitmap is not set [ 84.597160][ T6792] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 16 with error 117 [ 84.609706][ T6792] EXT4-fs (loop3): This should not happen!! Data will be lost [ 84.609706][ T6792] [ 84.623578][ T6808] netlink: 'syz.4.1370': attribute type 29 has an invalid length. [ 84.669742][ T5174] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 84.699114][ T1466] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 2048 with error 117 [ 84.711888][ T1466] EXT4-fs (loop3): This should not happen!! Data will be lost [ 84.711888][ T1466] [ 84.748558][ T1466] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 2081 with max blocks 2024 with error 28 [ 84.761395][ T1466] EXT4-fs (loop3): This should not happen!! Data will be lost [ 84.761395][ T1466] [ 84.771127][ T1466] EXT4-fs (loop3): Total free blocks count 0 [ 84.777231][ T1466] EXT4-fs (loop3): Free/Dirty block details [ 84.783213][ T1466] EXT4-fs (loop3): free_blocks=0 [ 84.793770][ T6812] loop4: detected capacity change from 0 to 512 [ 84.882239][ T6812] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.914597][ T6812] ext4 filesystem being mounted at /286/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.945275][ T6812] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 84.968453][ T6812] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 31 with error 28 [ 84.980871][ T6812] EXT4-fs (loop4): This should not happen!! Data will be lost [ 84.980871][ T6812] [ 84.990567][ T6812] EXT4-fs (loop4): Total free blocks count 0 [ 84.996586][ T6812] EXT4-fs (loop4): Free/Dirty block details [ 85.002495][ T6812] EXT4-fs (loop4): free_blocks=65280 [ 85.007873][ T6812] EXT4-fs (loop4): dirty_blocks=31 [ 85.013031][ T6812] EXT4-fs (loop4): Block reservation details [ 85.019180][ T6812] EXT4-fs (loop4): i_reserved_data_blocks=31 [ 85.040998][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.061037][ T6830] loop5: detected capacity change from 0 to 128 [ 85.069232][ T6830] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 85.086175][ T6830] ext4 filesystem being mounted at /164/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 85.138947][ T6834] tmpfs: Bad value for 'mpol' [ 85.167532][ T6834] loop3: detected capacity change from 0 to 512 [ 85.174029][ T6834] EXT4-fs: Ignoring removed bh option [ 85.194551][ T6837] SELinux: syz.4.1383 (6837) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 85.228417][ T5174] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 85.241749][ T6834] EXT4-fs error (device loop3): ext4_quota_enable:7101: comm syz.3.1379: inode #33554432: comm syz.3.1379: iget: illegal inode # [ 85.269390][ T6834] EXT4-fs (loop3): Remounting filesystem read-only [ 85.276100][ T6834] EXT4-fs warning (device loop3): ext4_enable_quotas:7145: Failed to enable quota tracking (type=2, err=-117, ino=33554432). Please run e2fsck to fix. [ 85.318524][ T6834] EXT4-fs (loop3): mount failed [ 85.318559][ T3353] kernel write not supported for file /user (pid: 3353 comm: kworker/1:2) [ 85.337633][ T6834] Invalid ELF header type: 2 != 1 [ 85.469965][ T6850] loop4: detected capacity change from 0 to 512 [ 85.503374][ T6850] ext4 filesystem being mounted at /290/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.529250][ T6866] loop1: detected capacity change from 0 to 512 [ 85.561498][ T6866] ext4 filesystem being mounted at /283/ supports timestamps until 2038-01-19 (0x7fffffff) [ 85.596574][ T6850] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 85.625433][ T6857] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 85.656835][ T6850] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 31 with error 28 [ 85.669343][ T6850] EXT4-fs (loop4): This should not happen!! Data will be lost [ 85.669343][ T6850] [ 85.679116][ T6850] EXT4-fs (loop4): Total free blocks count 0 [ 85.685135][ T6850] EXT4-fs (loop4): Free/Dirty block details [ 85.691032][ T6850] EXT4-fs (loop4): free_blocks=65280 [ 85.696360][ T6850] EXT4-fs (loop4): dirty_blocks=31 [ 85.701481][ T6850] EXT4-fs (loop4): Block reservation details [ 85.707520][ T6850] EXT4-fs (loop4): i_reserved_data_blocks=31 [ 85.734607][ T6857] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 31 with error 28 [ 85.747005][ T6857] EXT4-fs (loop1): This should not happen!! Data will be lost [ 85.747005][ T6857] [ 85.756675][ T6857] EXT4-fs (loop1): Total free blocks count 0 [ 85.762791][ T6857] EXT4-fs (loop1): Free/Dirty block details [ 85.768761][ T6857] EXT4-fs (loop1): free_blocks=65280 [ 85.774067][ T6857] EXT4-fs (loop1): dirty_blocks=31 [ 85.779234][ T6857] EXT4-fs (loop1): Block reservation details [ 85.785230][ T6857] EXT4-fs (loop1): i_reserved_data_blocks=31 [ 85.926312][ T6890] netlink: 'syz.1.1405': attribute type 29 has an invalid length. [ 86.082214][ T6913] loop1: detected capacity change from 0 to 512 [ 86.105521][ T6913] ext4 filesystem being mounted at /287/ supports timestamps until 2038-01-19 (0x7fffffff) [ 86.169788][ T6904] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 86.196252][ T6904] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 31 with error 28 [ 86.208701][ T6904] EXT4-fs (loop1): This should not happen!! Data will be lost [ 86.208701][ T6904] [ 86.218453][ T6904] EXT4-fs (loop1): Total free blocks count 0 [ 86.224786][ T6904] EXT4-fs (loop1): Free/Dirty block details [ 86.230743][ T6904] EXT4-fs (loop1): free_blocks=65280 [ 86.236076][ T6904] EXT4-fs (loop1): dirty_blocks=31 [ 86.241301][ T6904] EXT4-fs (loop1): Block reservation details [ 86.247302][ T6904] EXT4-fs (loop1): i_reserved_data_blocks=31 [ 86.273766][ T6923] Process accounting resumed [ 86.319401][ T6931] netlink: 'syz.5.1422': attribute type 29 has an invalid length. [ 86.383966][ T6939] loop4: detected capacity change from 0 to 512 [ 86.409882][ T6939] ext4 filesystem being mounted at /299/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.437021][ T6939] 9pnet_fd: Insufficient options for proto=fd [ 86.500781][ T6953] tipc: Invalid UDP bearer configuration [ 86.500800][ T6953] tipc: Enabling of bearer rejected, failed to enable media [ 86.566775][ T6965] SELinux: syz.1.1436 (6965) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 86.603049][ T6965] 9pnet_fd: Insufficient options for proto=fd [ 86.659386][ T6972] Process accounting resumed [ 86.684299][ T6977] Process accounting resumed [ 86.785599][ T6982] netlink: 'syz.5.1446': attribute type 29 has an invalid length. [ 86.855358][ T6991] tmpfs: Bad value for 'mpol' [ 86.901119][ T6991] loop5: detected capacity change from 0 to 512 [ 86.909485][ T6991] EXT4-fs: Ignoring removed bh option [ 86.939016][ T6991] EXT4-fs error (device loop5): ext4_quota_enable:7101: comm syz.5.1451: inode #33554432: comm syz.5.1451: iget: illegal inode # [ 86.955752][ T7000] loop1: detected capacity change from 0 to 512 [ 86.970410][ T6991] EXT4-fs (loop5): Remounting filesystem read-only [ 86.977049][ T6991] EXT4-fs warning (device loop5): ext4_enable_quotas:7145: Failed to enable quota tracking (type=2, err=-117, ino=33554432). Please run e2fsck to fix. [ 86.994221][ T6991] EXT4-fs (loop5): mount failed [ 87.027771][ T6991] Invalid ELF header type: 2 != 1 [ 87.087364][ T7006] loop5: detected capacity change from 0 to 2048 [ 87.107362][ T7006] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0002] [ 87.116764][ T7006] System zones: 0-4 [ 87.121672][ T7006] ext4 filesystem being mounted at /184/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 87.132132][ T29] kauditd_printk_skb: 392 callbacks suppressed [ 87.132145][ T29] audit: type=1326 audit(1740770696.283:4513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6975 comm="syz.4.1443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9b29734127 code=0x7ffc0000 [ 87.161891][ T29] audit: type=1326 audit(1740770696.283:4514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6975 comm="syz.4.1443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9b296d9359 code=0x7ffc0000 [ 87.185364][ T29] audit: type=1326 audit(1740770696.283:4515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6975 comm="syz.4.1443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7f9b2973d169 code=0x7ffc0000 [ 87.209115][ T29] audit: type=1326 audit(1740770696.303:4516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6975 comm="syz.4.1443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9b29734127 code=0x7ffc0000 [ 87.232593][ T29] audit: type=1326 audit(1740770696.303:4517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6975 comm="syz.4.1443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9b296d9359 code=0x7ffc0000 [ 87.256064][ T29] audit: type=1326 audit(1740770696.303:4518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6975 comm="syz.4.1443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7f9b2973d169 code=0x7ffc0000 [ 87.279576][ T29] audit: type=1326 audit(1740770696.303:4519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6975 comm="syz.4.1443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9b29734127 code=0x7ffc0000 [ 87.302940][ T29] audit: type=1326 audit(1740770696.303:4520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6975 comm="syz.4.1443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9b296d9359 code=0x7ffc0000 [ 87.326299][ T29] audit: type=1326 audit(1740770696.303:4521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6975 comm="syz.4.1443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7f9b2973d169 code=0x7ffc0000 [ 87.349765][ T29] audit: type=1326 audit(1740770696.333:4522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6975 comm="syz.4.1443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9b29734127 code=0x7ffc0000 [ 87.445723][ T7015] netlink: 'syz.3.1459': attribute type 29 has an invalid length. [ 87.554776][ T7024] loop3: detected capacity change from 0 to 512 [ 87.579950][ T7024] ext4 filesystem being mounted at /349/ supports timestamps until 2038-01-19 (0x7fffffff) [ 87.598140][ T7021] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 87.716643][ T7013] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1456: bg 0: block 345: padding at end of block bitmap is not set [ 87.753882][ T7013] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 16 with error 117 [ 87.766463][ T7013] EXT4-fs (loop5): This should not happen!! Data will be lost [ 87.766463][ T7013] [ 87.875454][ T28] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 2048 with error 117 [ 87.888224][ T28] EXT4-fs (loop5): This should not happen!! Data will be lost [ 87.888224][ T28] [ 87.949196][ T28] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 2081 with max blocks 2024 with error 28 [ 87.962146][ T28] EXT4-fs (loop5): This should not happen!! Data will be lost [ 87.962146][ T28] [ 87.971864][ T28] EXT4-fs (loop5): Total free blocks count 0 [ 87.977885][ T28] EXT4-fs (loop5): Free/Dirty block details [ 87.983780][ T28] EXT4-fs (loop5): free_blocks=0 [ 87.988865][ T28] EXT4-fs (loop5): dirty_blocks=2032 [ 88.014679][ T7045] netlink: 'syz.3.1472': attribute type 29 has an invalid length. [ 88.065919][ T7047] SELinux: syz.4.1473 (7047) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 88.106756][ T7047] 9pnet_fd: Insufficient options for proto=fd [ 88.199393][ T7054] tmpfs: Bad value for 'mpol' [ 88.202902][ T7055] Process accounting resumed [ 88.252005][ T7059] loop1: detected capacity change from 0 to 2048 [ 88.273806][ T7054] loop5: detected capacity change from 0 to 512 [ 88.280439][ T7054] EXT4-fs: Ignoring removed bh option [ 88.355699][ T7054] EXT4-fs error (device loop5): ext4_quota_enable:7101: comm syz.5.1467: inode #33554432: comm syz.5.1467: iget: illegal inode # [ 88.384864][ T7054] EXT4-fs (loop5): Remounting filesystem read-only [ 88.385088][ T7059] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0002] [ 88.391422][ T7054] EXT4-fs warning (device loop5): ext4_enable_quotas:7145: Failed to enable quota tracking (type=2, err=-117, ino=33554432). Please run e2fsck to fix. [ 88.405692][ T7059] System zones: 0-4 [ 88.420971][ T7059] ext4 filesystem being mounted at /308/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 88.431389][ T7061] loop3: detected capacity change from 0 to 512 [ 88.431948][ T7054] EXT4-fs (loop5): mount failed [ 88.469333][ T7054] Invalid ELF header type: 2 != 1 [ 88.476064][ T7061] EXT4-fs error (device loop3): ext4_acquire_dquot:6927: comm syz.3.1479: Failed to acquire dquot type 1 [ 88.493080][ T7061] EXT4-fs (loop3): 1 truncate cleaned up [ 88.499273][ T7061] ext4 filesystem being mounted at /355/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.938261][ T7068] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1478: bg 0: block 345: padding at end of block bitmap is not set [ 89.027122][ T7068] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 16 with error 117 [ 89.039655][ T7068] EXT4-fs (loop1): This should not happen!! Data will be lost [ 89.039655][ T7068] [ 89.147557][ T7079] SELinux: security_context_str_to_sid (̆L²¶z >¦ÉI‘u¾0Á›Ý&Ü_$ºˆ1³ósÃÂæ×³\Á î÷h¾å>'`eb2BðDïó˜\B(xéçès',uv¸%1fªéZ„òyÕ- 5þ¥'h©¢¼n†a•{òÜÄ [ 89.147557][ T7079] ’P„ìËwðì.Ùg+_¼Ý U§Ÿü`»92Ób }¼¢ƒ”‡põª5_ÄÌra¡1aM5ø‡“Û¯+~!·;n.ÝÿÄ:Ó篢c5t;ÚJ8r¿•a‘GÏ-d7) failed with errno=-22 [ 89.193759][ T7079] netlink: 'syz.4.1482': attribute type 21 has an invalid length. [ 89.208682][ T11] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 2048 with error 117 [ 89.221353][ T11] EXT4-fs (loop1): This should not happen!! Data will be lost [ 89.221353][ T11] [ 89.268951][ T11] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 2081 with max blocks 2024 with error 28 [ 89.281718][ T11] EXT4-fs (loop1): This should not happen!! Data will be lost [ 89.281718][ T11] [ 89.291410][ T11] EXT4-fs (loop1): Total free blocks count 0 [ 89.297418][ T11] EXT4-fs (loop1): Free/Dirty block details [ 89.303380][ T11] EXT4-fs (loop1): free_blocks=0 [ 89.308343][ T11] EXT4-fs (loop1): dirty_blocks=2032 [ 89.461398][ T7096] loop5: detected capacity change from 0 to 2048 [ 89.505410][ T7096] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0002] [ 89.535836][ T7096] System zones: 0-4 [ 89.540406][ T7096] ext4 filesystem being mounted at /187/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 89.586963][ T7087] __nla_validate_parse: 6 callbacks suppressed [ 89.587060][ T7087] netlink: 284 bytes leftover after parsing attributes in process `syz.4.1487'. [ 89.829513][ T7112] loop1: detected capacity change from 0 to 128 [ 89.939820][ T7112] ext4 filesystem being mounted at /313/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 89.973129][ T7106] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1491: bg 0: block 345: padding at end of block bitmap is not set [ 89.993049][ T7106] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 16 with error 117 [ 90.005672][ T7106] EXT4-fs (loop5): This should not happen!! Data will be lost [ 90.005672][ T7106] [ 90.090909][ T160] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 2048 with error 117 [ 90.103649][ T160] EXT4-fs (loop5): This should not happen!! Data will be lost [ 90.103649][ T160] [ 90.143060][ T1466] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 2081 with max blocks 2024 with error 28 [ 90.155928][ T1466] EXT4-fs (loop5): This should not happen!! Data will be lost [ 90.155928][ T1466] [ 90.165601][ T1466] EXT4-fs (loop5): Total free blocks count 0 [ 90.171606][ T1466] EXT4-fs (loop5): Free/Dirty block details [ 90.177645][ T1466] EXT4-fs (loop5): free_blocks=0 [ 90.182704][ T1466] EXT4-fs (loop5): dirty_blocks=2032 [ 90.204939][ T7126] 9pnet_fd: Insufficient options for proto=fd [ 90.235084][ T7126] Process accounting resumed [ 90.242157][ T7128] loop4: detected capacity change from 0 to 2048 [ 90.266063][ T7128] EXT4-fs: Ignoring removed bh option [ 90.292993][ T7132] netlink: 100 bytes leftover after parsing attributes in process `syz.5.1501'. [ 90.305873][ T7132] SELinux: syz.5.1501 (7132) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 90.366231][ T35] kernel write not supported for file /user (pid: 35 comm: kworker/1:1) [ 90.525317][ T7150] loop1: detected capacity change from 0 to 128 [ 90.553000][ T7150] ext4 filesystem being mounted at /320/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.668667][ T7153] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 90.744545][ T7153] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 90.756883][ T7153] EXT4-fs (loop4): This should not happen!! Data will be lost [ 90.756883][ T7153] [ 90.766562][ T7153] EXT4-fs (loop4): Total free blocks count 0 [ 90.772572][ T7153] EXT4-fs (loop4): Free/Dirty block details [ 90.778550][ T7153] EXT4-fs (loop4): free_blocks=2415919104 [ 90.784302][ T7153] EXT4-fs (loop4): dirty_blocks=8208 [ 90.789629][ T7153] EXT4-fs (loop4): Block reservation details [ 90.795703][ T7153] EXT4-fs (loop4): i_reserved_data_blocks=513 [ 90.893575][ T7150] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1512'. [ 90.905882][ T1466] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 2048 with error 28 [ 90.918527][ T1466] EXT4-fs (loop4): This should not happen!! Data will be lost [ 90.918527][ T1466] [ 91.085803][ T7175] Process accounting resumed [ 91.189238][ T7182] Process accounting resumed [ 91.248456][ T7191] loop1: detected capacity change from 0 to 2048 [ 91.263696][ T7191] EXT4-fs: Ignoring removed bh option [ 91.303923][ T7204] loop4: detected capacity change from 0 to 512 [ 91.334296][ T7204] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 91.398855][ T7210] SELinux: security_context_str_to_sid (̆L²¶z >¦ÉI‘u¾0Á›Ý&Ü_$ºˆ1³ósÃÂæ×³\Á î÷h¾å>'`eb2BðDïó˜\B(xéçès',uv¸%1fªéZ„òyÕ- 5þ¥'h©¢¼n†a•{òÜÄ [ 91.398855][ T7210] ’P„ìËwðì.Ùg+_¼Ý U§Ÿü`»92Ób }¼¢ƒ”‡põª5_ÄÌra¡1aM5ø‡“Û¯+~!·;n.ÝÿÄ:Ó篢c5t;ÚJ8r¿•a‘GÏ-d7) failed with errno=-22 [ 91.453537][ T7204] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 91.505353][ T7204] System zones: 0-2, 18-18, 34-34 [ 91.523717][ T7204] EXT4-fs (loop4): orphan cleanup on readonly fs [ 91.540239][ T7219] loop5: detected capacity change from 0 to 512 [ 91.567595][ T7204] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1145: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 91.656162][ T7219] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 91.666221][ T7219] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities [ 91.684703][ T7217] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 91.702634][ T7204] EXT4-fs (loop4): 1 truncate cleaned up [ 91.752214][ T7217] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 91.765023][ T7217] EXT4-fs (loop1): This should not happen!! Data will be lost [ 91.765023][ T7217] [ 91.774821][ T7217] EXT4-fs (loop1): Total free blocks count 0 [ 91.780816][ T7217] EXT4-fs (loop1): Free/Dirty block details [ 91.786787][ T7217] EXT4-fs (loop1): free_blocks=2415919104 [ 91.792513][ T7217] EXT4-fs (loop1): dirty_blocks=8208 [ 91.797823][ T7217] EXT4-fs (loop1): Block reservation details [ 91.803815][ T7217] EXT4-fs (loop1): i_reserved_data_blocks=513 [ 91.848906][ T7227] FAULT_INJECTION: forcing a failure. [ 91.848906][ T7227] name failslab, interval 1, probability 0, space 0, times 0 [ 91.861627][ T7227] CPU: 1 UID: 0 PID: 7227 Comm: syz.4.1544 Not tainted 6.14.0-rc4-syzkaller-00199-g76544811c850 #0 [ 91.861745][ T7227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 91.861761][ T7227] Call Trace: [ 91.861768][ T7227] [ 91.861776][ T7227] dump_stack_lvl+0xf2/0x150 [ 91.861810][ T7227] dump_stack+0x15/0x1a [ 91.861835][ T7227] should_fail_ex+0x24a/0x260 [ 91.861879][ T7227] should_failslab+0x8f/0xb0 [ 91.862048][ T7227] kmem_cache_alloc_noprof+0x52/0x320 [ 91.862074][ T7227] ? audit_log_start+0x34c/0x6b0 [ 91.862112][ T7227] audit_log_start+0x34c/0x6b0 [ 91.862187][ T7227] audit_seccomp+0x4b/0x130 [ 91.862217][ T7227] __seccomp_filter+0x6fa/0x1180 [ 91.862241][ T7227] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 91.862286][ T7227] ? vfs_write+0x644/0x920 [ 91.862391][ T7227] __secure_computing+0x9f/0x1c0 [ 91.862420][ T7227] syscall_trace_enter+0xd1/0x1f0 [ 91.862449][ T7227] ? fpregs_assert_state_consistent+0x83/0xa0 [ 91.862478][ T7227] do_syscall_64+0xaa/0x1c0 [ 91.862579][ T7227] ? clear_bhb_loop+0x55/0xb0 [ 91.862613][ T7227] ? clear_bhb_loop+0x55/0xb0 [ 91.862678][ T7227] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.862771][ T7227] RIP: 0033:0x7f9b2973d169 [ 91.862788][ T7227] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 91.862806][ T7227] RSP: 002b:00007f9b27da7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000044 [ 91.862873][ T7227] RAX: ffffffffffffffda RBX: 00007f9b29955fa0 RCX: 00007f9b2973d169 [ 91.862886][ T7227] RDX: 0000000000000000 RSI: 00000000000002c4 RDI: 00000000798e2643 [ 91.862901][ T7227] RBP: 00007f9b27da7090 R08: 0000000000000000 R09: 0000000000000000 [ 91.862954][ T7227] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 91.863044][ T7227] R13: 0000000000000000 R14: 00007f9b29955fa0 R15: 00007ffecbb888b8 [ 91.863065][ T7227] [ 92.073042][ T160] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 2048 with error 28 [ 92.085644][ T160] EXT4-fs (loop1): This should not happen!! Data will be lost [ 92.085644][ T160] [ 92.173262][ T7231] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1548'. [ 92.185765][ T29] kauditd_printk_skb: 817 callbacks suppressed [ 92.185817][ T29] audit: type=1326 audit(1740770701.353:5336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7236 comm="syz.5.1550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cc93ad169 code=0x7ffc0000 [ 92.216682][ T7227] loop4: detected capacity change from 0 to 512 [ 92.223972][ T7231] SELinux: syz.3.1548 (7231) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 92.238584][ T29] audit: type=1326 audit(1740770701.353:5337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7236 comm="syz.5.1550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cc93ad169 code=0x7ffc0000 [ 92.239004][ T7227] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 92.262132][ T29] audit: type=1326 audit(1740770701.353:5338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7236 comm="syz.5.1550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f8cc93ad169 code=0x7ffc0000 [ 92.262183][ T29] audit: type=1326 audit(1740770701.353:5339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7236 comm="syz.5.1550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cc93ad169 code=0x7ffc0000 [ 92.262254][ T29] audit: type=1326 audit(1740770701.353:5340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7236 comm="syz.5.1550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cc93ad169 code=0x7ffc0000 [ 92.272080][ T7227] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 92.295557][ T29] audit: type=1326 audit(1740770701.353:5341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7236 comm="syz.5.1550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f8cc93ad169 code=0x7ffc0000 [ 92.374760][ T29] audit: type=1326 audit(1740770701.353:5342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7236 comm="syz.5.1550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cc93ad169 code=0x7ffc0000 [ 92.386746][ T35] kernel write not supported for file /user (pid: 35 comm: kworker/1:1) [ 92.398307][ T29] audit: type=1326 audit(1740770701.353:5343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7236 comm="syz.5.1550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8cc93ad169 code=0x7ffc0000 [ 92.430257][ T29] audit: type=1326 audit(1740770701.353:5344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7236 comm="syz.5.1550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cc93ad169 code=0x7ffc0000 [ 92.454004][ T29] audit: type=1326 audit(1740770701.353:5345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7236 comm="syz.5.1550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8cc93ad169 code=0x7ffc0000 [ 92.479069][ T7237] loop5: detected capacity change from 0 to 512 [ 92.485219][ T7241] SELinux: security_context_str_to_sid (̆L²¶z >¦ÉI‘u¾0Á›Ý&Ü_$ºˆ1³ósÃÂæ×³\Á î÷h¾å>'`eb2BðDïó˜\B(xéçès',uv¸%1fªéZ„òyÕ- 5þ¥'h©¢¼n†a•{òÜÄ [ 92.485219][ T7241] ’P„ìËwðì.Ùg+_¼Ý U§Ÿü`»92Ób }¼¢ƒ”‡põª5_ÄÌra¡1aM5ø‡“Û¯+~!·;n.ÝÿÄ:Ó篢c5t;ÚJ8r¿•a‘GÏ-d7) failed with errno=-22 [ 92.486475][ T7237] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 92.523863][ T7237] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities [ 92.567504][ T7243] tmpfs: Bad value for 'mpol' [ 92.625069][ T7243] loop3: detected capacity change from 0 to 512 [ 92.631796][ T7243] EXT4-fs: Ignoring removed bh option [ 92.647726][ T7243] EXT4-fs error (device loop3): ext4_quota_enable:7101: comm syz.3.1552: inode #33554432: comm syz.3.1552: iget: illegal inode # [ 92.672700][ T7243] EXT4-fs (loop3): Remounting filesystem read-only [ 92.679303][ T7243] EXT4-fs warning (device loop3): ext4_enable_quotas:7145: Failed to enable quota tracking (type=2, err=-117, ino=33554432). Please run e2fsck to fix. [ 92.699001][ T7243] EXT4-fs (loop3): mount failed [ 92.716439][ T7243] Invalid ELF header type: 2 != 1 [ 92.773445][ T7265] netlink: 'syz.3.1561': attribute type 29 has an invalid length. [ 92.854500][ T7268] Process accounting resumed [ 92.857010][ T7270] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1562'. [ 92.869159][ T7267] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1562'. [ 92.912779][ T7274] loop1: detected capacity change from 0 to 128 [ 92.920928][ T7274] ext4 filesystem being mounted at /334/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 93.023907][ T7281] loop1: detected capacity change from 0 to 128 [ 93.057184][ T7281] ext4 filesystem being mounted at /337/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 93.238439][ T7297] loop3: detected capacity change from 0 to 512 [ 93.280482][ T7297] ext4 filesystem being mounted at /390/ supports timestamps until 2038-01-19 (0x7fffffff) [ 93.309612][ T7292] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 93.341503][ T7292] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 31 with error 28 [ 93.353866][ T7292] EXT4-fs (loop3): This should not happen!! Data will be lost [ 93.353866][ T7292] [ 93.363630][ T7292] EXT4-fs (loop3): Total free blocks count 0 [ 93.369626][ T7292] EXT4-fs (loop3): Free/Dirty block details [ 93.375547][ T7292] EXT4-fs (loop3): free_blocks=65280 [ 93.380846][ T7292] EXT4-fs (loop3): dirty_blocks=31 [ 93.386085][ T7292] EXT4-fs (loop3): Block reservation details [ 93.392073][ T7292] EXT4-fs (loop3): i_reserved_data_blocks=31 [ 93.421729][ T7307] loop1: detected capacity change from 0 to 2048 [ 93.448209][ T7307] EXT4-fs: Ignoring removed bh option [ 93.457639][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.517434][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.577775][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.648563][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.704388][ T7331] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 93.741140][ T7331] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 93.753853][ T7331] EXT4-fs (loop1): This should not happen!! Data will be lost [ 93.753853][ T7331] [ 93.759912][ T7309] chnl_net:caif_netlink_parms(): no params data found [ 93.763754][ T7331] EXT4-fs (loop1): Total free blocks count 0 [ 93.776378][ T7331] EXT4-fs (loop1): Free/Dirty block details [ 93.782305][ T7331] EXT4-fs (loop1): free_blocks=2415919104 [ 93.788065][ T7331] EXT4-fs (loop1): dirty_blocks=8224 [ 93.793364][ T7331] EXT4-fs (loop1): Block reservation details [ 93.799406][ T7331] EXT4-fs (loop1): i_reserved_data_blocks=514 [ 93.850838][ T160] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 2048 with error 28 [ 93.863514][ T160] EXT4-fs (loop1): This should not happen!! Data will be lost [ 93.863514][ T160] [ 93.866086][ T11] bridge_slave_1: left allmulticast mode [ 93.879029][ T11] bridge_slave_1: left promiscuous mode [ 93.884776][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.903962][ T11] bridge_slave_0: left allmulticast mode [ 93.909712][ T11] bridge_slave_0: left promiscuous mode [ 93.915503][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.998230][ T11] $Hÿ (unregistering): (slave 1@ÿ): Releasing backup interface [ 94.006502][ T11] @ÿ: left promiscuous mode [ 94.013231][ T11] $Hÿ (unregistering): (slave bond_slave_1): Releasing backup interface [ 94.022286][ T11] bond_slave_1: left promiscuous mode [ 94.028748][ T11] $Hÿ (unregistering): Released all slaves [ 94.074393][ T7309] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.081668][ T7309] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.089092][ T7309] bridge_slave_0: entered allmulticast mode [ 94.097261][ T7309] bridge_slave_0: entered promiscuous mode [ 94.112012][ T7357] Process accounting resumed [ 94.114632][ T7309] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.123775][ T7309] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.139802][ T7309] bridge_slave_1: entered allmulticast mode [ 94.146435][ T7309] bridge_slave_1: entered promiscuous mode [ 94.170325][ T11] hsr_slave_0: left promiscuous mode [ 94.176598][ T11] hsr_slave_1: left promiscuous mode [ 94.182270][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 94.189765][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 94.197058][ T7360] loop4: detected capacity change from 0 to 512 [ 94.204289][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 94.211851][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 94.223286][ T11] veth1_macvtap: left promiscuous mode [ 94.229080][ T11] veth0_macvtap: left promiscuous mode [ 94.233845][ T7360] ext4 filesystem being mounted at /331/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.234803][ T11] veth1_vlan: left promiscuous mode [ 94.250392][ T11] veth0_vlan: left promiscuous mode [ 94.257169][ T7360] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 94.273964][ T7360] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 31 with error 28 [ 94.286446][ T7360] EXT4-fs (loop4): This should not happen!! Data will be lost [ 94.286446][ T7360] [ 94.296162][ T7360] EXT4-fs (loop4): Total free blocks count 0 [ 94.302146][ T7360] EXT4-fs (loop4): Free/Dirty block details [ 94.308116][ T7360] EXT4-fs (loop4): free_blocks=65280 [ 94.313411][ T7360] EXT4-fs (loop4): dirty_blocks=31 [ 94.318561][ T7360] EXT4-fs (loop4): Block reservation details [ 94.324637][ T7360] EXT4-fs (loop4): i_reserved_data_blocks=31 [ 94.357940][ T11] team0 (unregistering): Port device team_slave_1 removed [ 94.369689][ T11] team0 (unregistering): Port device team_slave_0 removed [ 94.391025][ T7377] loop4: detected capacity change from 0 to 128 [ 94.400018][ T7377] ext4 filesystem being mounted at /333/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 94.448649][ T7309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.464397][ T7309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.489759][ T7309] team0: Port device team_slave_0 added [ 94.500464][ T7309] team0: Port device team_slave_1 added [ 94.518390][ T7309] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.525406][ T7309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.551427][ T7309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.551991][ T7379] Process accounting resumed [ 94.565515][ T7309] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.573628][ T7309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.599864][ T7309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.642585][ T7309] hsr_slave_0: entered promiscuous mode [ 94.648723][ T7309] hsr_slave_1: entered promiscuous mode [ 94.686286][ T7391] Process accounting resumed [ 94.721305][ T7395] 9pnet_fd: Insufficient options for proto=fd [ 94.729972][ T3376] kernel write not supported for file /user (pid: 3376 comm: kworker/1:5) [ 94.743554][ T7395] Process accounting resumed [ 94.777206][ T7403] loop4: detected capacity change from 0 to 128 [ 94.802777][ T7309] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 94.810737][ T7403] ext4 filesystem being mounted at /337/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 94.870384][ T7309] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 94.891899][ T7309] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 94.909921][ T7309] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 94.928119][ T7415] loop3: detected capacity change from 0 to 128 [ 94.952023][ T7309] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.959240][ T7309] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.966629][ T7309] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.973733][ T7309] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.003356][ T7309] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.015186][ T7309] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.031316][ T1060] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.036323][ T7415] ext4 filesystem being mounted at /400/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 95.070802][ T1060] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.084973][ T7415] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(12) [ 95.091618][ T7415] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 95.099269][ T7415] vhci_hcd vhci_hcd.0: Device attached [ 95.119206][ T1060] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.126329][ T1060] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.155388][ T1060] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.162498][ T1060] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.224960][ T7424] vhci_hcd: connection closed [ 95.225944][ T1060] vhci_hcd: stop threads [ 95.235043][ T1060] vhci_hcd: release socket [ 95.239516][ T1060] vhci_hcd: disconnect device [ 95.284544][ T4745] vhci_hcd: vhci_device speed not set [ 95.316519][ T7437] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.343511][ T7309] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.377534][ T7437] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.428642][ T7448] 9pnet_fd: Insufficient options for proto=fd [ 95.444848][ T7448] Process accounting resumed [ 95.457059][ T7437] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.471991][ T7452] FAULT_INJECTION: forcing a failure. [ 95.471991][ T7452] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 95.485262][ T7452] CPU: 0 UID: 0 PID: 7452 Comm: syz.5.1623 Not tainted 6.14.0-rc4-syzkaller-00199-g76544811c850 #0 [ 95.485293][ T7452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 95.485308][ T7452] Call Trace: [ 95.485327][ T7452] [ 95.485335][ T7452] dump_stack_lvl+0xf2/0x150 [ 95.485366][ T7452] dump_stack+0x15/0x1a [ 95.485390][ T7452] should_fail_ex+0x24a/0x260 [ 95.485497][ T7452] should_fail+0xb/0x10 [ 95.485567][ T7452] should_fail_usercopy+0x1a/0x20 [ 95.485597][ T7452] _copy_from_user+0x1c/0xa0 [ 95.485636][ T7452] get_user_ifreq+0x8c/0x160 [ 95.485673][ T7452] sock_ioctl+0x539/0x600 [ 95.485707][ T7452] ? __pfx_sock_ioctl+0x10/0x10 [ 95.485783][ T7452] __se_sys_ioctl+0xc9/0x140 [ 95.485814][ T7452] __x64_sys_ioctl+0x43/0x50 [ 95.485889][ T7452] x64_sys_call+0x1690/0x2dc0 [ 95.485942][ T7452] do_syscall_64+0xc9/0x1c0 [ 95.486001][ T7452] ? clear_bhb_loop+0x55/0xb0 [ 95.486027][ T7452] ? clear_bhb_loop+0x55/0xb0 [ 95.486057][ T7452] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.486089][ T7452] RIP: 0033:0x7f8cc93ad169 [ 95.486107][ T7452] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 95.486178][ T7452] RSP: 002b:00007f8cc7a17038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 95.486201][ T7452] RAX: ffffffffffffffda RBX: 00007f8cc95c5fa0 RCX: 00007f8cc93ad169 [ 95.486216][ T7452] RDX: 0000400000000600 RSI: 00000000000089f2 RDI: 0000000000000003 [ 95.486230][ T7452] RBP: 00007f8cc7a17090 R08: 0000000000000000 R09: 0000000000000000 [ 95.486245][ T7452] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 95.486259][ T7452] R13: 0000000000000000 R14: 00007f8cc95c5fa0 R15: 00007ffeeafd04f8 [ 95.486352][ T7452] [ 95.687524][ T7437] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.724134][ T7309] veth0_vlan: entered promiscuous mode [ 95.733045][ T7309] veth1_vlan: entered promiscuous mode [ 95.742806][ T7437] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.758425][ T7437] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.772000][ T7459] loop5: detected capacity change from 0 to 512 [ 95.783604][ T7437] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.795700][ T7437] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.808689][ T7309] veth0_macvtap: entered promiscuous mode [ 95.824351][ T7459] ext4 filesystem being mounted at /212/ supports timestamps until 2038-01-19 (0x7fffffff) [ 95.836318][ T7309] veth1_macvtap: entered promiscuous mode [ 95.871923][ T7458] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 95.887909][ T7309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.898435][ T7309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.898788][ T7458] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 31 with error 28 [ 95.908281][ T7309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.908302][ T7309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.920692][ T7458] EXT4-fs (loop5): This should not happen!! Data will be lost [ 95.920692][ T7458] [ 95.931002][ T7309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.931023][ T7309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.931035][ T7309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.941007][ T7458] EXT4-fs (loop5): Total free blocks count 0 [ 95.950491][ T7309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.960972][ T7458] EXT4-fs (loop5): Free/Dirty block details [ 95.970786][ T7309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.981243][ T7458] EXT4-fs (loop5): free_blocks=65280 [ 95.987297][ T7309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.997092][ T7458] EXT4-fs (loop5): dirty_blocks=31 [ 95.997124][ T7458] EXT4-fs (loop5): Block reservation details [ 95.997136][ T7458] EXT4-fs (loop5): i_reserved_data_blocks=31 [ 96.057563][ T7309] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.074985][ T7309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.085497][ T7309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.095453][ T7309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.105938][ T7309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.115871][ T7309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.126376][ T7309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.136251][ T7309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.146715][ T7309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.148381][ T7473] random: crng reseeded on system resumption [ 96.156740][ T7309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.156762][ T7309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.184639][ T7309] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.193032][ T7309] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.201802][ T7309] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.210527][ T7309] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.219365][ T7309] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.261345][ T7478] loop1: detected capacity change from 0 to 128 [ 96.281007][ T7478] ext4 filesystem being mounted at /354/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 96.362227][ T7488] loop1: detected capacity change from 0 to 2048 [ 96.369446][ T7488] EXT4-fs: Ignoring removed bh option [ 96.382366][ T7490] loop5: detected capacity change from 0 to 512 [ 96.404935][ T7492] loop6: detected capacity change from 0 to 2048 [ 96.413807][ T7490] ext4 filesystem being mounted at /213/ supports timestamps until 2038-01-19 (0x7fffffff) [ 96.460746][ T7492] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.518747][ T7484] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 96.534928][ T7484] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 31 with error 28 [ 96.547322][ T7484] EXT4-fs (loop5): This should not happen!! Data will be lost [ 96.547322][ T7484] [ 96.557016][ T7484] EXT4-fs (loop5): Total free blocks count 0 [ 96.563005][ T7484] EXT4-fs (loop5): Free/Dirty block details [ 96.568942][ T7484] EXT4-fs (loop5): free_blocks=65280 [ 96.574309][ T7484] EXT4-fs (loop5): dirty_blocks=31 [ 96.579500][ T7484] EXT4-fs (loop5): Block reservation details [ 96.585556][ T7484] EXT4-fs (loop5): i_reserved_data_blocks=31 [ 96.633941][ T7503] loop4: detected capacity change from 0 to 2048 [ 96.641141][ T28] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 96.660806][ T7503] EXT4-fs: Ignoring removed bh option [ 96.680852][ T28] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 96.686612][ T7508] loop3: detected capacity change from 0 to 2048 [ 96.693163][ T28] EXT4-fs (loop1): This should not happen!! Data will be lost [ 96.693163][ T28] [ 96.709302][ T28] EXT4-fs (loop1): Total free blocks count 0 [ 96.715337][ T28] EXT4-fs (loop1): Free/Dirty block details [ 96.721280][ T28] EXT4-fs (loop1): free_blocks=2415919104 [ 96.722250][ T7510] loop5: detected capacity change from 0 to 2048 [ 96.727165][ T28] EXT4-fs (loop1): dirty_blocks=8208 [ 96.738940][ T28] EXT4-fs (loop1): Block reservation details [ 96.744962][ T28] EXT4-fs (loop1): i_reserved_data_blocks=513 [ 96.758428][ T11] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 2048 with error 28 [ 96.771360][ T11] EXT4-fs (loop1): This should not happen!! Data will be lost [ 96.771360][ T11] [ 96.794005][ T7508] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0002] [ 96.794353][ T7510] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0002] [ 96.802526][ T7508] System zones: 0-4 [ 96.815929][ T7508] ext4 filesystem being mounted at /403/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 96.852239][ T7519] loop6: detected capacity change from 0 to 2048 [ 96.860451][ T7510] System zones: 0-4 [ 96.901001][ T7519] EXT4-fs: Ignoring removed bh option [ 96.906811][ T7510] ext4 filesystem being mounted at /214/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 97.169557][ T28] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 97.195071][ T7520] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1637: bg 0: block 345: padding at end of block bitmap is not set [ 97.211398][ T29] kauditd_printk_skb: 557 callbacks suppressed [ 97.211415][ T29] audit: type=1326 audit(1740770706.383:5903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7521 comm="syz.1.1634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa113c34127 code=0x7ffc0000 [ 97.241100][ T29] audit: type=1326 audit(1740770706.383:5904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7521 comm="syz.1.1634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa113bd9359 code=0x7ffc0000 [ 97.244915][ T28] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 97.264579][ T29] audit: type=1326 audit(1740770706.383:5905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7521 comm="syz.1.1634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7fa113c3d169 code=0x7ffc0000 [ 97.276842][ T28] EXT4-fs (loop4): This should not happen!! Data will be lost [ 97.276842][ T28] [ 97.300905][ T29] audit: type=1326 audit(1740770706.413:5906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7521 comm="syz.1.1634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa113c34127 code=0x7ffc0000 [ 97.309911][ T28] EXT4-fs (loop4): Total free blocks count 0 [ 97.333225][ T29] audit: type=1326 audit(1740770706.413:5907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7521 comm="syz.1.1634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa113bd9359 code=0x7ffc0000 [ 97.339166][ T28] EXT4-fs (loop4): Free/Dirty block details [ 97.339181][ T28] EXT4-fs (loop4): free_blocks=2415919104 [ 97.339196][ T28] EXT4-fs (loop4): dirty_blocks=8208 [ 97.339210][ T28] EXT4-fs (loop4): Block reservation details [ 97.362482][ T29] audit: type=1326 audit(1740770706.413:5908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7521 comm="syz.1.1634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7fa113c3d169 code=0x7ffc0000 [ 97.368363][ T28] EXT4-fs (loop4): i_reserved_data_blocks=513 [ 97.376764][ T28] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 2048 with error 28 [ 97.427618][ T28] EXT4-fs (loop4): This should not happen!! Data will be lost [ 97.427618][ T28] [ 97.444583][ T7520] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 16 with error 117 [ 97.457146][ T7520] EXT4-fs (loop3): This should not happen!! Data will be lost [ 97.457146][ T7520] [ 97.467257][ T29] audit: type=1326 audit(1740770706.633:5909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7521 comm="syz.1.1634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa113c34127 code=0x7ffc0000 [ 97.490660][ T29] audit: type=1326 audit(1740770706.633:5910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7521 comm="syz.1.1634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa113bd9359 code=0x7ffc0000 [ 97.540990][ T1060] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 2048 with error 117 [ 97.553779][ T1060] EXT4-fs (loop3): This should not happen!! Data will be lost [ 97.553779][ T1060] [ 97.559246][ T29] audit: type=1326 audit(1740770706.633:5911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7521 comm="syz.1.1634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7fa113c3d169 code=0x7ffc0000 [ 97.587283][ T29] audit: type=1326 audit(1740770706.633:5912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7521 comm="syz.1.1634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa113c34127 code=0x7ffc0000 [ 97.617333][ T7529] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 97.675994][ T7529] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 97.688356][ T7529] EXT4-fs (loop6): This should not happen!! Data will be lost [ 97.688356][ T7529] [ 97.698083][ T7529] EXT4-fs (loop6): Total free blocks count 0 [ 97.704093][ T7529] EXT4-fs (loop6): Free/Dirty block details [ 97.710088][ T7529] EXT4-fs (loop6): free_blocks=2415919104 [ 97.715921][ T7529] EXT4-fs (loop6): dirty_blocks=8224 [ 97.721219][ T7529] EXT4-fs (loop6): Block reservation details [ 97.727336][ T7529] EXT4-fs (loop6): i_reserved_data_blocks=514 [ 97.738796][ T1060] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 2081 with max blocks 2024 with error 28 [ 97.751643][ T1060] EXT4-fs (loop3): This should not happen!! Data will be lost [ 97.751643][ T1060] [ 97.761445][ T1060] EXT4-fs (loop3): Total free blocks count 0 [ 97.767459][ T1060] EXT4-fs (loop3): Free/Dirty block details [ 97.773367][ T1060] EXT4-fs (loop3): free_blocks=0 [ 97.778418][ T1060] EXT4-fs (loop3): dirty_blocks=2032 [ 97.824071][ T28] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 2048 with error 28 [ 97.836717][ T28] EXT4-fs (loop6): This should not happen!! Data will be lost [ 97.836717][ T28] [ 97.874562][ T1060] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm kworker/u8:5: bg 0: block 345: padding at end of block bitmap is not set [ 97.894309][ T1060] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 2048 with error 117 [ 97.907005][ T1060] EXT4-fs (loop5): This should not happen!! Data will be lost [ 97.907005][ T1060] [ 97.957605][ T11] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 2065 with max blocks 2040 with error 28 [ 97.970394][ T11] EXT4-fs (loop5): This should not happen!! Data will be lost [ 97.970394][ T11] [ 97.980136][ T11] EXT4-fs (loop5): Total free blocks count 0 [ 97.986157][ T11] EXT4-fs (loop5): Free/Dirty block details [ 97.992056][ T11] EXT4-fs (loop5): free_blocks=0 [ 97.992387][ T7535] loop1: detected capacity change from 0 to 2048 [ 97.997004][ T11] EXT4-fs (loop5): dirty_blocks=2048 [ 97.997021][ T11] EXT4-fs (loop5): Block reservation details [ 98.003953][ T7535] EXT4-fs: Ignoring removed bh option [ 98.008675][ T11] EXT4-fs (loop5): i_reserved_data_blocks=128 [ 98.043538][ T7542] loop4: detected capacity change from 0 to 512 [ 98.068147][ T7548] FAULT_INJECTION: forcing a failure. [ 98.068147][ T7548] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 98.081329][ T7548] CPU: 0 UID: 0 PID: 7548 Comm: syz.6.1647 Not tainted 6.14.0-rc4-syzkaller-00199-g76544811c850 #0 [ 98.081397][ T7548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 98.081411][ T7548] Call Trace: [ 98.081417][ T7548] [ 98.081484][ T7548] dump_stack_lvl+0xf2/0x150 [ 98.081511][ T7548] dump_stack+0x15/0x1a [ 98.081531][ T7548] should_fail_ex+0x24a/0x260 [ 98.081637][ T7548] should_fail+0xb/0x10 [ 98.081684][ T7548] should_fail_usercopy+0x1a/0x20 [ 98.081730][ T7548] _copy_from_user+0x1c/0xa0 [ 98.081801][ T7548] copy_msghdr_from_user+0x54/0x2a0 [ 98.081836][ T7548] ? __fget_files+0x17c/0x1c0 [ 98.081909][ T7548] __sys_sendmsg+0x13e/0x230 [ 98.081978][ T7548] __x64_sys_sendmsg+0x46/0x50 [ 98.082010][ T7548] x64_sys_call+0x2734/0x2dc0 [ 98.082043][ T7548] do_syscall_64+0xc9/0x1c0 [ 98.082106][ T7548] ? clear_bhb_loop+0x55/0xb0 [ 98.082134][ T7548] ? clear_bhb_loop+0x55/0xb0 [ 98.082164][ T7548] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.082212][ T7548] RIP: 0033:0x7fa10bc0d169 [ 98.082228][ T7548] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 98.082250][ T7548] RSP: 002b:00007fa10a271038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 98.082299][ T7548] RAX: ffffffffffffffda RBX: 00007fa10be25fa0 RCX: 00007fa10bc0d169 [ 98.082311][ T7548] RDX: 0000000000008000 RSI: 0000400000000940 RDI: 0000000000000006 [ 98.082324][ T7548] RBP: 00007fa10a271090 R08: 0000000000000000 R09: 0000000000000000 [ 98.082338][ T7548] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 98.082353][ T7548] R13: 0000000000000000 R14: 00007fa10be25fa0 R15: 00007fff1cc1a548 [ 98.082374][ T7548] [ 98.336925][ T7561] loop6: detected capacity change from 0 to 512 [ 98.343938][ T7561] EXT4-fs: inline encryption not supported [ 98.358740][ T7542] ext4 filesystem being mounted at /345/ supports timestamps until 2038-01-19 (0x7fffffff) [ 98.373726][ T1052] kernel write not supported for file /user (pid: 1052 comm: kworker/0:2) [ 98.418068][ T7539] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 98.435347][ T7561] ext4 filesystem being mounted at /6/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.449769][ T7539] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 31 with error 28 [ 98.457629][ T7561] EXT4-fs error (device loop6): ext4_do_update_inode:5154: inode #2: comm syz.6.1650: corrupted inode contents [ 98.462109][ T7539] EXT4-fs (loop4): This should not happen!! Data will be lost [ 98.462109][ T7539] [ 98.475793][ T7561] EXT4-fs error (device loop6): ext4_dirty_inode:6042: inode #2: comm syz.6.1650: mark_inode_dirty error [ 98.483494][ T7539] EXT4-fs (loop4): Total free blocks count 0 [ 98.500690][ T7539] EXT4-fs (loop4): Free/Dirty block details [ 98.506805][ T7539] EXT4-fs (loop4): free_blocks=65280 [ 98.512112][ T7539] EXT4-fs (loop4): dirty_blocks=31 [ 98.513489][ T7561] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, [ 98.517272][ T7539] EXT4-fs (loop4): Block reservation details [ 98.517350][ T7539] EXT4-fs (loop4): i_reserved_data_blocks=31 [ 98.537653][ T7561] block bitmap and bg descriptor inconsistent: 95 vs 96 free clusters [ 98.569771][ T3393] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 98.584829][ T3393] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 98.597100][ T3393] EXT4-fs (loop1): This should not happen!! Data will be lost [ 98.597100][ T3393] [ 98.606814][ T3393] EXT4-fs (loop1): Total free blocks count 0 [ 98.612893][ T3393] EXT4-fs (loop1): Free/Dirty block details [ 98.618891][ T3393] EXT4-fs (loop1): free_blocks=2415919104 [ 98.624763][ T3393] EXT4-fs (loop1): dirty_blocks=8208 [ 98.630121][ T3393] EXT4-fs (loop1): Block reservation details [ 98.636512][ T3393] EXT4-fs (loop1): i_reserved_data_blocks=513 [ 98.647191][ T1060] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 2048 with error 28 [ 98.659961][ T1060] EXT4-fs (loop1): This should not happen!! Data will be lost [ 98.659961][ T1060] [ 98.683306][ T7568] loop5: detected capacity change from 0 to 2048 [ 98.694771][ T7568] EXT4-fs: Ignoring removed bh option [ 98.725594][ T7572] Process accounting resumed [ 98.776272][ T7576] SELinux: syz.6.1658 (7576) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 98.792430][ T7575] bond1: entered promiscuous mode [ 98.797540][ T7575] bond1: entered allmulticast mode [ 98.817714][ T7575] 8021q: adding VLAN 0 to HW filter on device bond1 [ 98.834737][ T7575] bond1 (unregistering): Released all slaves [ 98.899982][ T7589] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1658'. [ 98.931888][ T7589] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 98.939502][ T7589] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 98.959181][ T7589] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 98.966886][ T7589] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 98.997740][ T7597] tmpfs: Bad value for 'mpol' [ 99.030074][ T7601] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1665'. [ 99.040182][ T3393] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 99.040256][ T3393] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 99.040283][ T3393] EXT4-fs (loop5): This should not happen!! Data will be lost [ 99.040283][ T3393] [ 99.040299][ T3393] EXT4-fs (loop5): Total free blocks count 0 [ 99.040314][ T3393] EXT4-fs (loop5): Free/Dirty block details [ 99.040357][ T3393] EXT4-fs (loop5): free_blocks=2415919104 [ 99.040371][ T3393] EXT4-fs (loop5): dirty_blocks=8208 [ 99.040385][ T3393] EXT4-fs (loop5): Block reservation details [ 99.040398][ T3393] EXT4-fs (loop5): i_reserved_data_blocks=513 [ 99.046069][ T160] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 2048 with error 28 [ 99.046122][ T160] EXT4-fs (loop5): This should not happen!! Data will be lost [ 99.046122][ T160] [ 99.083251][ T7606] loop1: detected capacity change from 0 to 512 [ 99.108167][ T7608] loop3: detected capacity change from 0 to 512 [ 99.108401][ T7608] EXT4-fs: Ignoring removed bh option [ 99.139608][ T7609] loop4: detected capacity change from 0 to 2048 [ 99.140763][ T7606] ext4 filesystem being mounted at /360/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.154845][ T7608] EXT4-fs error (device loop3): ext4_quota_enable:7101: comm syz.3.1664: inode #33554432: comm syz.3.1664: iget: illegal inode # [ 99.156517][ T7609] EXT4-fs: Ignoring removed bh option [ 99.182432][ T7608] EXT4-fs (loop3): Remounting filesystem read-only [ 99.245479][ T7608] EXT4-fs warning (device loop3): ext4_enable_quotas:7145: Failed to enable quota tracking (type=2, err=-117, ino=33554432). Please run e2fsck to fix. [ 99.245788][ T7608] EXT4-fs (loop3): mount failed [ 99.271042][ T7608] Invalid ELF header type: 2 != 1 [ 99.351138][ T7619] loop1: detected capacity change from 0 to 8192 [ 99.458872][ T7622] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 99.474750][ T7622] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 99.487100][ T7622] EXT4-fs (loop4): This should not happen!! Data will be lost [ 99.487100][ T7622] [ 99.496788][ T7622] EXT4-fs (loop4): Total free blocks count 0 [ 99.502787][ T7622] EXT4-fs (loop4): Free/Dirty block details [ 99.508987][ T7622] EXT4-fs (loop4): free_blocks=2415919104 [ 99.514888][ T7622] EXT4-fs (loop4): dirty_blocks=8208 [ 99.520250][ T7622] EXT4-fs (loop4): Block reservation details [ 99.526288][ T7622] EXT4-fs (loop4): i_reserved_data_blocks=513 [ 99.562598][ T160] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 2048 with error 28 [ 99.575372][ T160] EXT4-fs (loop4): This should not happen!! Data will be lost [ 99.575372][ T160] [ 99.668592][ T7646] loop3: detected capacity change from 0 to 512 [ 99.678622][ T7648] 9pnet_fd: Insufficient options for proto=fd [ 99.694460][ T7646] ext4 filesystem being mounted at /418/ supports timestamps until 2038-01-19 (0x7fffffff) [ 99.694891][ T7647] Process accounting resumed [ 99.711457][ T7644] Process accounting resumed [ 99.718257][ T7643] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 99.736249][ T7643] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 31 with error 28 [ 99.748627][ T7643] EXT4-fs (loop3): This should not happen!! Data will be lost [ 99.748627][ T7643] [ 99.758313][ T7643] EXT4-fs (loop3): Total free blocks count 0 [ 99.764289][ T7643] EXT4-fs (loop3): Free/Dirty block details [ 99.770259][ T7643] EXT4-fs (loop3): free_blocks=65280 [ 99.775643][ T7643] EXT4-fs (loop3): dirty_blocks=31 [ 99.780890][ T7643] EXT4-fs (loop3): Block reservation details [ 99.787013][ T7643] EXT4-fs (loop3): i_reserved_data_blocks=31 [ 99.871764][ T7665] loop3: detected capacity change from 0 to 512 [ 99.886721][ T7665] ext4 filesystem being mounted at /419/ supports timestamps until 2038-01-19 (0x7fffffff) [ 99.902876][ T7658] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 99.919435][ T7658] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 31 with error 28 [ 99.931844][ T7658] EXT4-fs (loop3): This should not happen!! Data will be lost [ 99.931844][ T7658] [ 99.941681][ T7658] EXT4-fs (loop3): Total free blocks count 0 [ 99.947821][ T7658] EXT4-fs (loop3): Free/Dirty block details [ 99.953736][ T7658] EXT4-fs (loop3): free_blocks=65280 [ 99.959175][ T7658] EXT4-fs (loop3): dirty_blocks=31 [ 99.964310][ T7658] EXT4-fs (loop3): Block reservation details [ 99.970343][ T7658] EXT4-fs (loop3): i_reserved_data_blocks=31 [ 100.004184][ T3463] kernel write not supported for file /user (pid: 3463 comm: kworker/0:4) [ 100.014005][ T7673] loop6: detected capacity change from 0 to 2048 [ 100.027078][ T7673] EXT4-fs: Ignoring removed bh option [ 100.153182][ T7689] loop3: detected capacity change from 0 to 512 [ 100.160269][ T7689] EXT4-fs: Ignoring removed bh option [ 100.177950][ T7689] EXT4-fs error (device loop3): ext4_quota_enable:7101: comm syz.3.1699: inode #33554432: comm syz.3.1699: iget: illegal inode # [ 100.191809][ T7689] EXT4-fs (loop3): Remounting filesystem read-only [ 100.198504][ T7689] EXT4-fs warning (device loop3): ext4_enable_quotas:7145: Failed to enable quota tracking (type=2, err=-117, ino=33554432). Please run e2fsck to fix. [ 100.214312][ T7689] EXT4-fs (loop3): mount failed [ 100.222018][ T7689] Invalid ELF header type: 2 != 1 [ 100.289499][ T7698] loop1: detected capacity change from 0 to 2048 [ 100.290141][ T7700] loop5: detected capacity change from 0 to 128 [ 100.316548][ T7696] loop3: detected capacity change from 0 to 512 [ 100.323304][ T7696] EXT4-fs: Ignoring removed bh option [ 100.329741][ T7698] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0002] [ 100.329818][ T7700] EXT4-fs mount: 80 callbacks suppressed [ 100.329835][ T7700] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 100.340180][ T7698] System zones: [ 100.343729][ T7700] ext4 filesystem being mounted at /233/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 100.355761][ T7698] 0-4 [ 100.358083][ T7698] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.406368][ T7698] ext4 filesystem being mounted at /362/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 100.407536][ T7696] EXT4-fs error (device loop3): ext4_quota_enable:7101: comm syz.3.1701: inode #33554432: comm syz.3.1701: iget: illegal inode # [ 100.457742][ T28] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 100.474690][ T28] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 100.476374][ T7696] EXT4-fs (loop3): Remounting filesystem read-only [ 100.486928][ T28] EXT4-fs (loop6): This should not happen!! Data will be lost [ 100.486928][ T28] [ 100.493824][ T7696] EXT4-fs warning (device loop3): ext4_enable_quotas:7145: Failed to enable quota tracking (type=2, err=-117, ino=33554432). Please run e2fsck to fix. [ 100.503556][ T28] EXT4-fs (loop6): Total free blocks count 0 [ 100.525088][ T28] EXT4-fs (loop6): Free/Dirty block details [ 100.530990][ T28] EXT4-fs (loop6): free_blocks=2415919104 [ 100.536816][ T28] EXT4-fs (loop6): dirty_blocks=8208 [ 100.542146][ T28] EXT4-fs (loop6): Block reservation details [ 100.549256][ T28] EXT4-fs (loop6): i_reserved_data_blocks=513 [ 100.555812][ T7696] EXT4-fs (loop3): mount failed [ 100.559579][ T160] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 2048 with error 28 [ 100.573251][ T160] EXT4-fs (loop6): This should not happen!! Data will be lost [ 100.573251][ T160] [ 100.584090][ T5174] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 100.615923][ T7696] Invalid ELF header type: 2 != 1 [ 100.645843][ T7710] random: crng reseeded on system resumption [ 100.790238][ T7719] 9pnet_fd: Insufficient options for proto=fd [ 100.802976][ T7721] loop3: detected capacity change from 0 to 2048 [ 100.817633][ T7721] EXT4-fs: Ignoring removed bh option [ 100.820617][ T7719] Process accounting resumed [ 100.842975][ T7706] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1702: bg 0: block 345: padding at end of block bitmap is not set [ 100.861151][ T7706] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 16 with error 117 [ 100.873918][ T7706] EXT4-fs (loop1): This should not happen!! Data will be lost [ 100.873918][ T7706] [ 100.894997][ T7721] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.972277][ T160] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 2048 with error 117 [ 100.985044][ T160] EXT4-fs (loop1): This should not happen!! Data will be lost [ 100.985044][ T160] [ 101.017518][ T7725] loop6: detected capacity change from 0 to 512 [ 101.026204][ T7725] EXT4-fs: Ignoring removed bh option [ 101.065209][ T7725] EXT4-fs error (device loop6): ext4_quota_enable:7101: comm syz.6.1712: inode #33554432: comm syz.6.1712: iget: illegal inode # [ 101.081566][ T7730] loop5: detected capacity change from 0 to 8192 [ 101.094248][ T7725] EXT4-fs (loop6): Remounting filesystem read-only [ 101.100912][ T7725] EXT4-fs warning (device loop6): ext4_enable_quotas:7145: Failed to enable quota tracking (type=2, err=-117, ino=33554432). Please run e2fsck to fix. [ 101.126053][ T7725] EXT4-fs (loop6): mount failed [ 101.139066][ T160] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 2081 with max blocks 2024 with error 28 [ 101.151880][ T160] EXT4-fs (loop1): This should not happen!! Data will be lost [ 101.151880][ T160] [ 101.161568][ T160] EXT4-fs (loop1): Total free blocks count 0 [ 101.167611][ T160] EXT4-fs (loop1): Free/Dirty block details [ 101.173535][ T160] EXT4-fs (loop1): free_blocks=0 [ 101.195956][ T7725] Invalid ELF header type: 2 != 1 [ 101.248317][ T1466] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 101.264096][ T1466] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 101.276461][ T1466] EXT4-fs (loop3): This should not happen!! Data will be lost [ 101.276461][ T1466] [ 101.286292][ T1466] EXT4-fs (loop3): Total free blocks count 0 [ 101.292704][ T1466] EXT4-fs (loop3): Free/Dirty block details [ 101.298718][ T1466] EXT4-fs (loop3): free_blocks=2415919104 [ 101.304455][ T1466] EXT4-fs (loop3): dirty_blocks=8224 [ 101.310174][ T1466] EXT4-fs (loop3): Block reservation details [ 101.316220][ T1466] EXT4-fs (loop3): i_reserved_data_blocks=514 [ 101.326551][ T1466] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 2048 with error 28 [ 101.362345][ T7748] loop1: detected capacity change from 0 to 128 [ 101.371301][ T7748] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 101.383595][ T7748] ext4 filesystem being mounted at /363/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.422263][ T7747] Process accounting resumed [ 101.588233][ T7764] loop3: detected capacity change from 0 to 512 [ 101.606447][ T7764] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.620196][ T7764] ext4 filesystem being mounted at /429/ supports timestamps until 2038-01-19 (0x7fffffff) [ 101.633708][ T7767] Process accounting resumed [ 101.633726][ T7757] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 101.653504][ T7757] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 31 with error 28 [ 101.665885][ T7757] EXT4-fs (loop3): This should not happen!! Data will be lost [ 101.665885][ T7757] [ 101.675660][ T7757] EXT4-fs (loop3): Total free blocks count 0 [ 101.681906][ T7757] EXT4-fs (loop3): Free/Dirty block details [ 101.687875][ T7757] EXT4-fs (loop3): free_blocks=65280 [ 101.693248][ T7757] EXT4-fs (loop3): dirty_blocks=31 [ 101.698433][ T7757] EXT4-fs (loop3): Block reservation details [ 101.704540][ T7757] EXT4-fs (loop3): i_reserved_data_blocks=31 [ 101.725101][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.775208][ T7775] loop3: detected capacity change from 0 to 8192 [ 101.791766][ T7777] loop6: detected capacity change from 0 to 2048 [ 101.798863][ T7777] EXT4-fs: Ignoring removed bh option [ 101.816186][ T7777] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.006822][ T3393] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 102.022301][ T3393] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 102.022579][ T7784] Process accounting resumed [ 102.034588][ T3393] EXT4-fs (loop6): This should not happen!! Data will be lost [ 102.034588][ T3393] [ 102.048845][ T3393] EXT4-fs (loop6): Total free blocks count 0 [ 102.054879][ T3393] EXT4-fs (loop6): Free/Dirty block details [ 102.060801][ T3393] EXT4-fs (loop6): free_blocks=2415919104 [ 102.066995][ T3393] EXT4-fs (loop6): dirty_blocks=8208 [ 102.072301][ T3393] EXT4-fs (loop6): Block reservation details [ 102.078673][ T3393] EXT4-fs (loop6): i_reserved_data_blocks=513 [ 102.089007][ T160] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 2048 with error 28 [ 102.135810][ T7789] Process accounting resumed [ 102.211107][ T7798] Process accounting resumed [ 102.223966][ T7800] loop4: detected capacity change from 0 to 512 [ 102.249541][ T7802] Process accounting resumed [ 102.255336][ T7800] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.275914][ T3299] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 102.276067][ T29] kauditd_printk_skb: 671 callbacks suppressed [ 102.276082][ T29] audit: type=1400 audit(1740770711.443:6584): avc: denied { accept } for pid=7807 comm="syz.6.1740" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 102.311908][ T7800] ext4 filesystem being mounted at /360/ supports timestamps until 2038-01-19 (0x7fffffff) [ 102.345219][ T7810] loop5: detected capacity change from 0 to 512 [ 102.363106][ T7815] loop1: detected capacity change from 0 to 2048 [ 102.370150][ T7815] EXT4-fs: Ignoring removed bh option [ 102.370830][ T7797] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 102.394294][ T7797] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 31 with error 28 [ 102.406739][ T7797] EXT4-fs (loop4): This should not happen!! Data will be lost [ 102.406739][ T7797] [ 102.416520][ T7797] EXT4-fs (loop4): Total free blocks count 0 [ 102.422596][ T7797] EXT4-fs (loop4): Free/Dirty block details [ 102.428580][ T7797] EXT4-fs (loop4): free_blocks=65280 [ 102.433881][ T7797] EXT4-fs (loop4): dirty_blocks=31 [ 102.439081][ T7797] EXT4-fs (loop4): Block reservation details [ 102.440132][ T7815] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.445106][ T7797] EXT4-fs (loop4): i_reserved_data_blocks=31 [ 102.447080][ T7810] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.477290][ T7810] ext4 filesystem being mounted at /243/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.499970][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.630974][ T5174] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.681320][ T7836] Process accounting resumed [ 102.701933][ T7840] loop5: detected capacity change from 0 to 1024 [ 102.727220][ T7837] Process accounting resumed [ 102.748705][ T7840] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.749691][ T11] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 102.775927][ T11] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 102.788129][ T11] EXT4-fs (loop1): This should not happen!! Data will be lost [ 102.788129][ T11] [ 102.797881][ T11] EXT4-fs (loop1): Total free blocks count 0 [ 102.799606][ T7840] EXT4-fs error (device loop5): ext4_lookup:1813: comm syz.5.1753: inode #12: comm syz.5.1753: iget: illegal inode # [ 102.803863][ T11] EXT4-fs (loop1): Free/Dirty block details [ 102.822122][ T11] EXT4-fs (loop1): free_blocks=2415919104 [ 102.827894][ T11] EXT4-fs (loop1): dirty_blocks=8208 [ 102.833260][ T11] EXT4-fs (loop1): Block reservation details [ 102.839274][ T11] EXT4-fs (loop1): i_reserved_data_blocks=513 [ 102.851199][ T7846] loop4: detected capacity change from 0 to 512 [ 102.853793][ T7840] EXT4-fs error (device loop5): ext4_lookup:1813: comm syz.5.1753: inode #12: comm syz.5.1753: iget: illegal inode # [ 102.862843][ T3393] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 2048 with error 28 [ 102.895790][ T7846] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.923457][ T7846] ext4 filesystem being mounted at /366/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.934944][ T5174] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.951952][ T7846] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 102.978587][ T7846] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 31 with error 28 [ 102.990923][ T7846] EXT4-fs (loop4): This should not happen!! Data will be lost [ 102.990923][ T7846] [ 103.000735][ T7846] EXT4-fs (loop4): Total free blocks count 0 [ 103.006765][ T7846] EXT4-fs (loop4): Free/Dirty block details [ 103.012802][ T7846] EXT4-fs (loop4): free_blocks=65280 [ 103.018135][ T7846] EXT4-fs (loop4): dirty_blocks=31 [ 103.018169][ T7862] loop5: detected capacity change from 0 to 2048 [ 103.023242][ T7846] EXT4-fs (loop4): Block reservation details [ 103.032092][ T7862] EXT4-fs: Ignoring removed bh option [ 103.035639][ T7846] EXT4-fs (loop4): i_reserved_data_blocks=31 [ 103.060947][ T7868] loop1: detected capacity change from 0 to 128 [ 103.069797][ T7868] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 103.082527][ T7864] Process accounting resumed [ 103.083834][ T7868] ext4 filesystem being mounted at /365/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 103.123209][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.133889][ T7862] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.146393][ T7865] Process accounting resumed [ 103.163026][ T7875] FAULT_INJECTION: forcing a failure. [ 103.163026][ T7875] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 103.163552][ T7873] loop6: detected capacity change from 0 to 2048 [ 103.176207][ T7875] CPU: 1 UID: 0 PID: 7875 Comm: syz.3.1767 Not tainted 6.14.0-rc4-syzkaller-00199-g76544811c850 #0 [ 103.176320][ T7875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 103.176362][ T7875] Call Trace: [ 103.176370][ T7875] [ 103.176380][ T7875] dump_stack_lvl+0xf2/0x150 [ 103.176415][ T7875] dump_stack+0x15/0x1a [ 103.176442][ T7875] should_fail_ex+0x24a/0x260 [ 103.176479][ T7875] should_fail+0xb/0x10 [ 103.176574][ T7875] should_fail_usercopy+0x1a/0x20 [ 103.176614][ T7875] _copy_from_user+0x1c/0xa0 [ 103.176746][ T7875] copy_msghdr_from_user+0x54/0x2a0 [ 103.176852][ T7875] ? __fget_files+0x17c/0x1c0 [ 103.176897][ T7875] __sys_sendmsg+0x13e/0x230 [ 103.176946][ T7875] __x64_sys_sendmsg+0x46/0x50 [ 103.176978][ T7875] x64_sys_call+0x2734/0x2dc0 [ 103.177073][ T7875] do_syscall_64+0xc9/0x1c0 [ 103.177156][ T7875] ? clear_bhb_loop+0x55/0xb0 [ 103.177190][ T7875] ? clear_bhb_loop+0x55/0xb0 [ 103.177299][ T7875] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.177458][ T7875] RIP: 0033:0x7f017c12d169 [ 103.177483][ T7875] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 103.177506][ T7875] RSP: 002b:00007f017a797038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 103.177530][ T7875] RAX: ffffffffffffffda RBX: 00007f017c345fa0 RCX: 00007f017c12d169 [ 103.177545][ T7875] RDX: 0000000000000000 RSI: 00004000000000c0 RDI: 0000000000000003 [ 103.177571][ T7875] RBP: 00007f017a797090 R08: 0000000000000000 R09: 0000000000000000 [ 103.177586][ T7875] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 103.177651][ T7875] R13: 0000000000000000 R14: 00007f017c345fa0 R15: 00007ffd7cdfc4a8 [ 103.177676][ T7875] [ 103.235258][ T7877] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1765'. [ 103.238177][ T7873] EXT4-fs: Ignoring removed bh option [ 103.243747][ T3299] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 103.365877][ T7873] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.537897][ T1466] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 103.562888][ T7899] 9pnet_fd: Insufficient options for proto=fd [ 103.580809][ T1466] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 103.593132][ T1466] EXT4-fs (loop5): This should not happen!! Data will be lost [ 103.593132][ T1466] [ 103.602803][ T1466] EXT4-fs (loop5): Total free blocks count 0 [ 103.608868][ T1466] EXT4-fs (loop5): Free/Dirty block details [ 103.614799][ T1466] EXT4-fs (loop5): free_blocks=2415919104 [ 103.620548][ T1466] EXT4-fs (loop5): dirty_blocks=8224 [ 103.625886][ T1466] EXT4-fs (loop5): Block reservation details [ 103.631874][ T1466] EXT4-fs (loop5): i_reserved_data_blocks=514 [ 103.650875][ T7903] loop4: detected capacity change from 0 to 512 [ 103.677620][ T7900] Process accounting resumed [ 103.690517][ T1466] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 2048 with error 28 [ 103.708844][ T160] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 103.719215][ T7911] loop1: detected capacity change from 0 to 1024 [ 103.735411][ T7897] loop3: detected capacity change from 0 to 512 [ 103.737469][ T160] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 103.753980][ T160] EXT4-fs (loop6): This should not happen!! Data will be lost [ 103.753980][ T160] [ 103.762243][ T7911] EXT4-fs: Ignoring removed orlov option [ 103.763754][ T160] EXT4-fs (loop6): Total free blocks count 0 [ 103.770969][ T7911] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 103.775372][ T160] EXT4-fs (loop6): Free/Dirty block details [ 103.789723][ T160] EXT4-fs (loop6): free_blocks=2415919104 [ 103.795540][ T160] EXT4-fs (loop6): dirty_blocks=8208 [ 103.800939][ T160] EXT4-fs (loop6): Block reservation details [ 103.807128][ T160] EXT4-fs (loop6): i_reserved_data_blocks=513 [ 103.816033][ T7911] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.817508][ T160] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 2048 with error 28 [ 103.844505][ T29] audit: type=1400 audit(1740770713.013:6585): avc: denied { map } for pid=7910 comm="syz.1.1778" path="/dev/bus/usb/003/001" dev="devtmpfs" ino=153 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 103.855786][ T7897] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.881420][ T7897] ext4 filesystem being mounted at /440/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.922482][ T7897] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 103.938398][ T7897] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 31 with error 28 [ 103.950764][ T7897] EXT4-fs (loop3): This should not happen!! Data will be lost [ 103.950764][ T7897] [ 103.960464][ T7897] EXT4-fs (loop3): Total free blocks count 0 [ 103.966505][ T7897] EXT4-fs (loop3): Free/Dirty block details [ 103.972412][ T7897] EXT4-fs (loop3): free_blocks=65280 [ 103.977867][ T7897] EXT4-fs (loop3): dirty_blocks=31 [ 103.983084][ T7897] EXT4-fs (loop3): Block reservation details [ 103.989399][ T7897] EXT4-fs (loop3): i_reserved_data_blocks=31 [ 103.998056][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.011014][ T29] audit: type=1326 audit(1740770713.173:6586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7917 comm="syz.6.1780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa10bc0d169 code=0x7ffc0000 [ 104.034522][ T29] audit: type=1326 audit(1740770713.173:6587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7917 comm="syz.6.1780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa10bc0d169 code=0x7ffc0000 [ 104.060114][ T29] audit: type=1326 audit(1740770713.223:6588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7917 comm="syz.6.1780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa10bc0d169 code=0x7ffc0000 [ 104.083640][ T29] audit: type=1326 audit(1740770713.223:6589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7917 comm="syz.6.1780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa10bc0d169 code=0x7ffc0000 [ 104.107142][ T29] audit: type=1326 audit(1740770713.223:6590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7917 comm="syz.6.1780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa10bc0d169 code=0x7ffc0000 [ 104.130682][ T29] audit: type=1326 audit(1740770713.223:6591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7917 comm="syz.6.1780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa10bc0d169 code=0x7ffc0000 [ 104.154121][ T29] audit: type=1326 audit(1740770713.223:6592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7917 comm="syz.6.1780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa10bc0d169 code=0x7ffc0000 [ 104.177650][ T29] audit: type=1326 audit(1740770713.223:6593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7917 comm="syz.6.1780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa10bc0d169 code=0x7ffc0000 [ 104.203273][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.212098][ T7925] loop1: detected capacity change from 0 to 2048 [ 104.218979][ T7925] EXT4-fs: Ignoring removed bh option [ 104.226459][ T7915] Process accounting resumed [ 104.247202][ T7925] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.267461][ T7933] FAULT_INJECTION: forcing a failure. [ 104.267461][ T7933] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 104.280674][ T7933] CPU: 0 UID: 0 PID: 7933 Comm: syz.4.1786 Not tainted 6.14.0-rc4-syzkaller-00199-g76544811c850 #0 [ 104.280705][ T7933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 104.280775][ T7933] Call Trace: [ 104.280784][ T7933] [ 104.280793][ T7933] dump_stack_lvl+0xf2/0x150 [ 104.280825][ T7933] dump_stack+0x15/0x1a [ 104.280845][ T7933] should_fail_ex+0x24a/0x260 [ 104.280931][ T7933] should_fail+0xb/0x10 [ 104.280963][ T7933] should_fail_usercopy+0x1a/0x20 [ 104.281015][ T7933] _copy_from_user+0x1c/0xa0 [ 104.281068][ T7933] move_addr_to_kernel+0x82/0x120 [ 104.281104][ T7933] __sys_bind+0x9e/0x190 [ 104.281147][ T7933] __x64_sys_bind+0x41/0x50 [ 104.281164][ T7933] x64_sys_call+0x20ab/0x2dc0 [ 104.281203][ T7933] do_syscall_64+0xc9/0x1c0 [ 104.281254][ T7933] ? clear_bhb_loop+0x55/0xb0 [ 104.281288][ T7933] ? clear_bhb_loop+0x55/0xb0 [ 104.281364][ T7933] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.281448][ T7933] RIP: 0033:0x7f9b2973d169 [ 104.281463][ T7933] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 104.281487][ T7933] RSP: 002b:00007f9b27da7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 104.281510][ T7933] RAX: ffffffffffffffda RBX: 00007f9b29955fa0 RCX: 00007f9b2973d169 [ 104.281525][ T7933] RDX: 0000000000000018 RSI: 0000400000000080 RDI: 0000000000000003 [ 104.281563][ T7933] RBP: 00007f9b27da7090 R08: 0000000000000000 R09: 0000000000000000 [ 104.281578][ T7933] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 104.281589][ T7933] R13: 0000000000000000 R14: 00007f9b29955fa0 R15: 00007ffecbb888b8 [ 104.281607][ T7933] [ 104.474190][ T7927] Process accounting resumed [ 104.494103][ T7944] tmpfs: Bad value for 'mpol' [ 104.508508][ T7940] Process accounting resumed [ 104.519030][ T7942] loop4: detected capacity change from 0 to 8192 [ 104.546775][ T7944] loop3: detected capacity change from 0 to 512 [ 104.553255][ T7944] EXT4-fs: Ignoring removed bh option [ 104.561557][ T28] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 104.577766][ T28] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 104.590092][ T28] EXT4-fs (loop1): This should not happen!! Data will be lost [ 104.590092][ T28] [ 104.599768][ T28] EXT4-fs (loop1): Total free blocks count 0 [ 104.605780][ T28] EXT4-fs (loop1): Free/Dirty block details [ 104.611692][ T28] EXT4-fs (loop1): free_blocks=2415919104 [ 104.614203][ T7944] EXT4-fs error (device loop3): ext4_quota_enable:7101: comm syz.3.1790: inode #33554432: comm syz.3.1790: iget: illegal inode # [ 104.617480][ T28] EXT4-fs (loop1): dirty_blocks=8224 [ 104.617496][ T28] EXT4-fs (loop1): Block reservation details [ 104.633091][ T7944] EXT4-fs (loop3): Remounting filesystem read-only [ 104.636414][ T28] EXT4-fs (loop1): i_reserved_data_blocks=514 [ 104.642059][ T7944] EXT4-fs warning (device loop3): ext4_enable_quotas:7145: Failed to enable quota tracking (type=2, err=-117, ino=33554432). Please run e2fsck to fix. [ 104.670404][ T7944] EXT4-fs (loop3): mount failed [ 104.683690][ T3393] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 2048 with error 28 [ 104.694068][ T7944] Invalid ELF header type: 2 != 1 [ 104.812900][ T7960] loop3: detected capacity change from 0 to 128 [ 104.919969][ T7968] Process accounting resumed [ 104.960035][ T7973] loop6: detected capacity change from 0 to 2048 [ 104.966812][ T7973] EXT4-fs: Ignoring removed bh option [ 104.979391][ T7973] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.038983][ T7977] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1803'. [ 105.054944][ T7977] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 105.062559][ T7977] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 105.073676][ T7977] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 105.081168][ T7977] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 105.120876][ T7987] random: crng reseeded on system resumption [ 105.202113][ T11] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 105.217098][ T11] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 105.229322][ T11] EXT4-fs (loop6): This should not happen!! Data will be lost [ 105.229322][ T11] [ 105.239033][ T11] EXT4-fs (loop6): Total free blocks count 0 [ 105.245210][ T11] EXT4-fs (loop6): Free/Dirty block details [ 105.251306][ T11] EXT4-fs (loop6): free_blocks=2415919104 [ 105.257134][ T11] EXT4-fs (loop6): dirty_blocks=8224 [ 105.262441][ T11] EXT4-fs (loop6): Block reservation details [ 105.268628][ T11] EXT4-fs (loop6): i_reserved_data_blocks=514 [ 105.279477][ T11] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 2048 with error 28 [ 105.365682][ T7990] Process accounting resumed [ 105.389285][ T7994] loop6: detected capacity change from 0 to 8192 [ 105.834190][ T8012] loop4: detected capacity change from 0 to 2048 [ 105.855904][ T8012] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0002] [ 105.864143][ T8012] System zones: 0-4 [ 105.869158][ T8012] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.881288][ T8012] ext4 filesystem being mounted at /376/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 106.032668][ T8016] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1817: bg 0: block 345: padding at end of block bitmap is not set [ 106.047447][ T8016] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 16 with error 117 [ 106.060021][ T8016] EXT4-fs (loop4): This should not happen!! Data will be lost [ 106.060021][ T8016] [ 106.089076][ T160] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 2048 with error 117 [ 106.101936][ T160] EXT4-fs (loop4): This should not happen!! Data will be lost [ 106.101936][ T160] [ 106.128202][ T160] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 2081 with max blocks 2024 with error 28 [ 106.141012][ T160] EXT4-fs (loop4): This should not happen!! Data will be lost [ 106.141012][ T160] [ 106.150704][ T160] EXT4-fs (loop4): Total free blocks count 0 [ 106.156998][ T160] EXT4-fs (loop4): Free/Dirty block details [ 106.162918][ T160] EXT4-fs (loop4): free_blocks=0 [ 106.239580][ T8022] loop1: detected capacity change from 0 to 2048 [ 106.246448][ T8022] EXT4-fs: Ignoring removed bh option [ 106.256816][ T8022] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.258430][ T8017] Process accounting resumed [ 106.300309][ T8028] loop6: detected capacity change from 0 to 512 [ 106.311974][ T8032] loop4: detected capacity change from 0 to 128 [ 106.332996][ T8032] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 106.346522][ T8028] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.359435][ T8032] ext4 filesystem being mounted at /379/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 106.364558][ T8028] ext4 filesystem being mounted at /41/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.418780][ T3301] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 106.486548][ T7309] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.522302][ T11] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 106.540007][ T11] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 106.552620][ T11] EXT4-fs (loop1): This should not happen!! Data will be lost [ 106.552620][ T11] [ 106.562485][ T11] EXT4-fs (loop1): Total free blocks count 0 [ 106.568615][ T11] EXT4-fs (loop1): Free/Dirty block details [ 106.574535][ T11] EXT4-fs (loop1): free_blocks=2415919104 [ 106.580271][ T11] EXT4-fs (loop1): dirty_blocks=8208 [ 106.581225][ T8042] Process accounting resumed [ 106.585574][ T11] EXT4-fs (loop1): Block reservation details [ 106.585588][ T11] EXT4-fs (loop1): i_reserved_data_blocks=513 [ 106.607651][ T3393] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 2048 with error 28 [ 106.633290][ T8047] Process accounting resumed [ 106.643240][ T8050] loop4: detected capacity change from 0 to 512 [ 106.651856][ T8050] EXT4-fs: Ignoring removed i_version option [ 106.676877][ T8050] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.689563][ T8050] ext4 filesystem being mounted at /383/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.703267][ T8050] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1831'. [ 106.710369][ T8051] Process accounting resumed [ 106.736616][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.752934][ T8061] SELinux: security_context_str_to_sid (r) failed with errno=-22 [ 106.781928][ T8064] mmap: syz.4.1834 (8064) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 106.907665][ T8067] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(8) [ 106.914257][ T8067] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 106.921919][ T8067] vhci_hcd vhci_hcd.0: Device attached [ 106.928159][ T8077] vhci_hcd: connection closed [ 106.930378][ T3393] vhci_hcd: stop threads [ 106.939447][ T3393] vhci_hcd: release socket [ 106.943990][ T3393] vhci_hcd: disconnect device [ 106.953020][ T8082] FAULT_INJECTION: forcing a failure. [ 106.953020][ T8082] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 106.966155][ T8082] CPU: 0 UID: 0 PID: 8082 Comm: syz.4.1841 Not tainted 6.14.0-rc4-syzkaller-00199-g76544811c850 #0 [ 106.966180][ T8082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 106.966192][ T8082] Call Trace: [ 106.966199][ T8082] [ 106.966274][ T8082] dump_stack_lvl+0xf2/0x150 [ 106.966358][ T8082] dump_stack+0x15/0x1a [ 106.966381][ T8082] should_fail_ex+0x24a/0x260 [ 106.966469][ T8082] should_fail+0xb/0x10 [ 106.966491][ T8082] should_fail_usercopy+0x1a/0x20 [ 106.966519][ T8082] _copy_from_user+0x1c/0xa0 [ 106.966603][ T8082] move_addr_to_kernel+0x82/0x120 [ 106.966628][ T8082] __sys_connect+0x67/0x1b0 [ 106.966647][ T8082] __x64_sys_connect+0x41/0x50 [ 106.966721][ T8082] x64_sys_call+0x22a7/0x2dc0 [ 106.966750][ T8082] do_syscall_64+0xc9/0x1c0 [ 106.966775][ T8082] ? clear_bhb_loop+0x55/0xb0 [ 106.966836][ T8082] ? clear_bhb_loop+0x55/0xb0 [ 106.966901][ T8082] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.966923][ T8082] RIP: 0033:0x7f9b2973d169 [ 106.966934][ T8082] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 106.966948][ T8082] RSP: 002b:00007f9b27da7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 106.966962][ T8082] RAX: ffffffffffffffda RBX: 00007f9b29955fa0 RCX: 00007f9b2973d169 [ 106.967040][ T8082] RDX: 0000000000000010 RSI: 0000400000000000 RDI: 0000000000000003 [ 106.967049][ T8082] RBP: 00007f9b27da7090 R08: 0000000000000000 R09: 0000000000000000 [ 106.967058][ T8082] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 106.967070][ T8082] R13: 0000000000000000 R14: 00007f9b29955fa0 R15: 00007ffecbb888b8 [ 106.967084][ T8082] [ 107.204127][ T8084] Process accounting resumed [ 107.216353][ T8088] loop4: detected capacity change from 0 to 512 [ 107.236575][ T8088] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.250813][ T8088] ext4 filesystem being mounted at /390/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 107.277740][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.309655][ T8095] loop1: detected capacity change from 0 to 512 [ 107.318274][ T8097] loop4: detected capacity change from 0 to 2048 [ 107.325211][ T8097] EXT4-fs: Ignoring removed bh option [ 107.327514][ T8095] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.343868][ T8095] ext4 filesystem being mounted at /382/ supports timestamps until 2038-01-19 (0x7fffffff) [ 107.357175][ T8097] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.370903][ T8092] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 107.385559][ T8092] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 31 with error 28 [ 107.397949][ T8092] EXT4-fs (loop1): This should not happen!! Data will be lost [ 107.397949][ T8092] [ 107.407643][ T8092] EXT4-fs (loop1): Total free blocks count 0 [ 107.413636][ T8092] EXT4-fs (loop1): Free/Dirty block details [ 107.419663][ T8092] EXT4-fs (loop1): free_blocks=65280 [ 107.425025][ T8092] EXT4-fs (loop1): dirty_blocks=31 [ 107.430190][ T8092] EXT4-fs (loop1): Block reservation details [ 107.436240][ T8092] EXT4-fs (loop1): i_reserved_data_blocks=31 [ 107.471296][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.555685][ T8105] Process accounting resumed [ 107.596027][ T8116] SELinux: failed to load policy [ 107.612650][ T8102] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 107.634738][ T8102] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 107.642550][ T8118] Process accounting resumed [ 107.647138][ T8102] EXT4-fs (loop4): This should not happen!! Data will be lost [ 107.647138][ T8102] [ 107.647158][ T8102] EXT4-fs (loop4): Total free blocks count 0 [ 107.667729][ T8102] EXT4-fs (loop4): Free/Dirty block details [ 107.673989][ T8102] EXT4-fs (loop4): free_blocks=2415919104 [ 107.679807][ T8102] EXT4-fs (loop4): dirty_blocks=8208 [ 107.685250][ T8102] EXT4-fs (loop4): Block reservation details [ 107.691413][ T8102] EXT4-fs (loop4): i_reserved_data_blocks=513 [ 107.734250][ T11] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 2048 with error 28 [ 107.796609][ T8135] loop6: detected capacity change from 0 to 2048 [ 107.803315][ T8135] EXT4-fs: Ignoring removed bh option [ 107.811585][ T8133] Process accounting resumed [ 107.819386][ T8136] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 107.827906][ T8135] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.864892][ T8136] netlink: 92 bytes leftover after parsing attributes in process `syz.5.1857'. [ 107.888211][ T8140] loop1: detected capacity change from 0 to 2048 [ 107.904648][ T8140] EXT4-fs: Ignoring removed bh option [ 107.928676][ T29] kauditd_printk_skb: 246 callbacks suppressed [ 107.928691][ T29] audit: type=1326 audit(1740770717.093:6840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8144 comm="syz.4.1859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b2973d169 code=0x7ffc0000 [ 107.937208][ T8140] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.974556][ T29] audit: type=1326 audit(1740770717.093:6841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8144 comm="syz.4.1859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b2973d169 code=0x7ffc0000 [ 107.998032][ T29] audit: type=1326 audit(1740770717.093:6842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8144 comm="syz.4.1859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9b2973d169 code=0x7ffc0000 [ 108.021526][ T29] audit: type=1326 audit(1740770717.093:6843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8144 comm="syz.4.1859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b2973d169 code=0x7ffc0000 [ 108.045091][ T29] audit: type=1326 audit(1740770717.093:6844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8144 comm="syz.4.1859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b2973d169 code=0x7ffc0000 [ 108.068579][ T29] audit: type=1326 audit(1740770717.093:6845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8144 comm="syz.4.1859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9b2973d169 code=0x7ffc0000 [ 108.092041][ T29] audit: type=1326 audit(1740770717.093:6846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8144 comm="syz.4.1859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b2973d169 code=0x7ffc0000 [ 108.115630][ T29] audit: type=1326 audit(1740770717.093:6847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8144 comm="syz.4.1859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9b2973d169 code=0x7ffc0000 [ 108.139095][ T29] audit: type=1326 audit(1740770717.093:6848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8144 comm="syz.4.1859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b2973d169 code=0x7ffc0000 [ 108.162639][ T29] audit: type=1326 audit(1740770717.093:6849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8144 comm="syz.4.1859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b2973d169 code=0x7ffc0000 [ 108.287953][ T28] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 108.303192][ T28] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 108.315648][ T28] EXT4-fs (loop6): This should not happen!! Data will be lost [ 108.315648][ T28] [ 108.325322][ T28] EXT4-fs (loop6): Total free blocks count 0 [ 108.331313][ T28] EXT4-fs (loop6): Free/Dirty block details [ 108.337252][ T28] EXT4-fs (loop6): free_blocks=2415919104 [ 108.342979][ T28] EXT4-fs (loop6): dirty_blocks=8224 [ 108.348382][ T28] EXT4-fs (loop6): Block reservation details [ 108.354365][ T28] EXT4-fs (loop6): i_reserved_data_blocks=514 [ 108.368635][ T28] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 2048 with error 28 [ 108.429457][ T160] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 108.445978][ T160] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 108.458301][ T160] EXT4-fs (loop1): This should not happen!! Data will be lost [ 108.458301][ T160] [ 108.468659][ T160] EXT4-fs (loop1): Total free blocks count 0 [ 108.474992][ T160] EXT4-fs (loop1): Free/Dirty block details [ 108.480956][ T160] EXT4-fs (loop1): free_blocks=2415919104 [ 108.484963][ T8159] loop3: detected capacity change from 0 to 1764 [ 108.486736][ T160] EXT4-fs (loop1): dirty_blocks=8208 [ 108.493406][ T8159] iso9660: Unknown parameter '0177777777777777777777700000000000000000000000' [ 108.498319][ T160] EXT4-fs (loop1): Block reservation details [ 108.498334][ T160] EXT4-fs (loop1): i_reserved_data_blocks=513 [ 108.524925][ T160] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 2048 with error 28 [ 108.578880][ T8161] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1869'. [ 108.588006][ T8161] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 108.595672][ T8161] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 108.604814][ T8161] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 108.612270][ T8161] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 108.679914][ T8175] loop1: detected capacity change from 0 to 2048 [ 108.688067][ T8175] EXT4-fs: Ignoring removed bh option [ 108.688649][ T8179] loop3: detected capacity change from 0 to 128 [ 108.712506][ T8179] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 108.712725][ T8175] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.725206][ T8179] ext4 filesystem being mounted at /451/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 108.804169][ T8183] Process accounting resumed [ 108.831403][ T8185] tmpfs: Bad value for 'mpol' [ 108.882808][ T8185] loop4: detected capacity change from 0 to 512 [ 108.890622][ T3298] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 108.900455][ T8185] EXT4-fs: Ignoring removed bh option [ 108.926190][ T8195] loop3: detected capacity change from 0 to 2048 [ 108.932963][ T8195] EXT4-fs: Ignoring removed bh option [ 108.943785][ T8198] loop5: detected capacity change from 0 to 2048 [ 108.951134][ T8185] EXT4-fs error (device loop4): ext4_quota_enable:7101: comm syz.4.1873: inode #33554432: comm syz.4.1873: iget: illegal inode # [ 108.966803][ T8195] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.974639][ T8185] EXT4-fs (loop4): Remounting filesystem read-only [ 108.982445][ T8200] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, [ 108.985387][ T8185] EXT4-fs warning (device loop4): ext4_enable_quotas:7145: Failed to enable quota tracking (type=2, err=-117, ino=33554432). Please run e2fsck to fix. [ 108.993658][ T8200] block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 109.017907][ T8200] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 109.030229][ T8200] EXT4-fs (loop1): This should not happen!! Data will be lost [ 109.030229][ T8200] [ 109.039901][ T8200] EXT4-fs (loop1): Total free blocks count 0 [ 109.044143][ T8185] EXT4-fs (loop4): mount failed [ 109.046001][ T8200] EXT4-fs (loop1): Free/Dirty block details [ 109.056837][ T8200] EXT4-fs (loop1): free_blocks=2415919104 [ 109.062632][ T8200] EXT4-fs (loop1): dirty_blocks=8224 [ 109.067999][ T8200] EXT4-fs (loop1): Block reservation details [ 109.074029][ T8200] EXT4-fs (loop1): i_reserved_data_blocks=514 [ 109.083507][ T8198] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0002] [ 109.092415][ T8198] System zones: 0-4 [ 109.096903][ T8198] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.110063][ T8198] ext4 filesystem being mounted at /271/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 109.111106][ T8185] Invalid ELF header type: 2 != 1 [ 109.137186][ T11] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 2048 with error 28 [ 109.302821][ T8212] Process accounting resumed [ 109.400539][ T28] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 109.418897][ T28] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 109.431194][ T28] EXT4-fs (loop3): This should not happen!! Data will be lost [ 109.431194][ T28] [ 109.440939][ T28] EXT4-fs (loop3): Total free blocks count 0 [ 109.446941][ T28] EXT4-fs (loop3): Free/Dirty block details [ 109.453061][ T28] EXT4-fs (loop3): free_blocks=2415919104 [ 109.458897][ T28] EXT4-fs (loop3): dirty_blocks=8224 [ 109.464189][ T28] EXT4-fs (loop3): Block reservation details [ 109.470211][ T28] EXT4-fs (loop3): i_reserved_data_blocks=514 [ 109.483496][ T28] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 2048 with error 28 [ 109.549975][ T8226] loop4: detected capacity change from 0 to 2048 [ 109.573370][ T8226] EXT4-fs: Ignoring removed bh option [ 109.594933][ T8228] Process accounting resumed [ 109.602102][ T8208] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1878: bg 0: block 345: padding at end of block bitmap is not set [ 109.619500][ T8229] Process accounting resumed [ 109.625929][ T8232] SELinux: syz.1.1891 (8232) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 109.631758][ T8208] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 16 with error 117 [ 109.652078][ T8208] EXT4-fs (loop5): This should not happen!! Data will be lost [ 109.652078][ T8208] [ 109.670905][ T8236] loop3: detected capacity change from 0 to 512 [ 109.677654][ T8236] EXT4-fs: Ignoring removed oldalloc option [ 109.683702][ T8236] ext4: Unknown parameter 'dont_appraise' [ 109.693500][ T8239] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1891'. [ 109.734337][ T8241] loop3: detected capacity change from 0 to 2048 [ 109.741120][ T8241] EXT4-fs: Ignoring removed bh option [ 109.763476][ T8245] loop6: detected capacity change from 0 to 2048 [ 109.773227][ T8243] loop1: detected capacity change from 0 to 2048 [ 109.780045][ T8243] EXT4-fs: Ignoring removed bh option [ 109.785870][ T8245] EXT4-fs: Ignoring removed bh option [ 109.846402][ T8253] SELinux: syz.3.1896 (8253) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 109.863341][ T3393] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 2048 with error 117 [ 109.876056][ T3393] EXT4-fs (loop5): This should not happen!! Data will be lost [ 109.876056][ T3393] [ 109.948876][ T8253] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1896'. [ 109.976738][ T8253] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 109.984203][ T8253] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 109.999741][ T3393] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 2081 with max blocks 2024 with error 28 [ 110.012582][ T3393] EXT4-fs (loop5): This should not happen!! Data will be lost [ 110.012582][ T3393] [ 110.022246][ T3393] EXT4-fs (loop5): Total free blocks count 0 [ 110.028256][ T3393] EXT4-fs (loop5): Free/Dirty block details [ 110.034196][ T3393] EXT4-fs (loop5): free_blocks=0 [ 110.074794][ T28] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 110.090553][ T28] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 110.102863][ T28] EXT4-fs (loop4): This should not happen!! Data will be lost [ 110.102863][ T28] [ 110.112587][ T28] EXT4-fs (loop4): Total free blocks count 0 [ 110.118751][ T28] EXT4-fs (loop4): Free/Dirty block details [ 110.124702][ T28] EXT4-fs (loop4): free_blocks=2415919104 [ 110.130440][ T28] EXT4-fs (loop4): dirty_blocks=8208 [ 110.135774][ T28] EXT4-fs (loop4): Block reservation details [ 110.141771][ T28] EXT4-fs (loop4): i_reserved_data_blocks=513 [ 110.148050][ T8253] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 110.155535][ T8253] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 110.162949][ T28] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 2048 with error 28 [ 110.175520][ T28] EXT4-fs (loop4): This should not happen!! Data will be lost [ 110.175520][ T28] [ 110.194751][ T1466] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 110.225426][ T7202] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 110.232058][ T1466] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 110.252576][ T1466] EXT4-fs (loop6): This should not happen!! Data will be lost [ 110.252576][ T1466] [ 110.262429][ T1466] EXT4-fs (loop6): Total free blocks count 0 [ 110.268475][ T1466] EXT4-fs (loop6): Free/Dirty block details [ 110.274375][ T1466] EXT4-fs (loop6): free_blocks=2415919104 [ 110.280163][ T1466] EXT4-fs (loop6): dirty_blocks=8224 [ 110.285501][ T1466] EXT4-fs (loop6): Block reservation details [ 110.291497][ T1466] EXT4-fs (loop6): i_reserved_data_blocks=514 [ 110.302597][ T1466] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 2048 with error 28 [ 110.315349][ T1466] EXT4-fs (loop6): This should not happen!! Data will be lost [ 110.315349][ T1466] [ 110.329300][ T8260] netlink: 92 bytes leftover after parsing attributes in process `syz.4.1898'. [ 110.340058][ T8261] loop5: detected capacity change from 0 to 2048 [ 110.347213][ T8261] EXT4-fs: Ignoring removed bh option [ 110.579094][ T8271] Process accounting resumed [ 110.611102][ T8278] loop3: detected capacity change from 0 to 512 [ 110.618307][ T3393] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 110.637430][ T160] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 110.649718][ T160] EXT4-fs (loop1): This should not happen!! Data will be lost [ 110.649718][ T160] [ 110.650143][ T3393] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 110.659529][ T160] EXT4-fs (loop1): Total free blocks count 0 [ 110.671789][ T3393] EXT4-fs (loop5): This should not happen!! Data will be lost [ 110.671789][ T3393] [ 110.671840][ T3393] EXT4-fs (loop5): Total free blocks count 0 [ 110.677909][ T160] EXT4-fs (loop1): Free/Dirty block details [ 110.687523][ T3393] EXT4-fs (loop5): Free/Dirty block details [ 110.693479][ T160] EXT4-fs (loop1): free_blocks=2415919104 [ 110.699371][ T3393] EXT4-fs (loop5): free_blocks=2415919104 [ 110.699387][ T3393] EXT4-fs (loop5): dirty_blocks=8224 [ 110.699401][ T3393] EXT4-fs (loop5): Block reservation details [ 110.705311][ T160] EXT4-fs (loop1): dirty_blocks=8224 [ 110.710981][ T3393] EXT4-fs (loop5): i_reserved_data_blocks=514 [ 110.716745][ T160] EXT4-fs (loop1): Block reservation details [ 110.745673][ T160] EXT4-fs (loop1): i_reserved_data_blocks=514 [ 110.759782][ T8284] FAULT_INJECTION: forcing a failure. [ 110.759782][ T8284] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 110.772915][ T8284] CPU: 1 UID: 0 PID: 8284 Comm: syz.4.1908 Not tainted 6.14.0-rc4-syzkaller-00199-g76544811c850 #0 [ 110.772974][ T8284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 110.772989][ T8284] Call Trace: [ 110.772996][ T8284] [ 110.773049][ T8286] loop6: detected capacity change from 0 to 2048 [ 110.773164][ T8284] ================================================================== [ 110.773210][ T8284] BUG: KCSAN: data-race in data_alloc / data_push_tail [ 110.773268][ T8284] [ 110.773274][ T8284] write to 0xffffffff88bef468 of 8 bytes by task 8286 on cpu 0: [ 110.773294][ T8284] data_alloc+0x216/0x2c0 [ 110.773328][ T8284] prb_reserve+0x85e/0xb60 [ 110.773364][ T8284] vprintk_store+0x558/0x870 [ 110.773384][ T8284] vprintk_emit+0x168/0x690 [ 110.773405][ T8284] vprintk_default+0x26/0x30 [ 110.773427][ T8284] vprintk+0x1d/0x30 [ 110.773454][ T8284] _printk+0x7a/0xa0 [ 110.773484][ T8284] set_capacity_and_notify+0x151/0x200 [ 110.773511][ T8284] loop_set_size+0x2e/0x70 [ 110.773546][ T8284] loop_configure+0x8bd/0xa50 [ 110.773590][ T8284] lo_ioctl+0x613/0x14f0 [ 110.773620][ T8284] blkdev_ioctl+0x359/0x450 [ 110.773649][ T8284] __se_sys_ioctl+0xc9/0x140 [ 110.773677][ T8284] __x64_sys_ioctl+0x43/0x50 [ 110.773701][ T8284] x64_sys_call+0x1690/0x2dc0 [ 110.773732][ T8284] do_syscall_64+0xc9/0x1c0 [ 110.773767][ T8284] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.773799][ T8284] [ 110.773804][ T8284] read to 0xffffffff88bef468 of 8 bytes by task 8284 on cpu 1: [ 110.773821][ T8284] data_push_tail+0x102/0x430 [ 110.773857][ T8284] data_alloc+0xbe/0x2c0 [ 110.773890][ T8284] prb_reserve+0x85e/0xb60 [ 110.773924][ T8284] vprintk_store+0x558/0x870 [ 110.773943][ T8284] vprintk_emit+0x168/0x690 [ 110.773962][ T8284] vprintk_default+0x26/0x30 [ 110.773983][ T8284] vprintk+0x1d/0x30 [ 110.774011][ T8284] _printk+0x7a/0xa0 [ 110.774039][ T8284] show_trace_log_lvl+0x3c3/0x400 [ 110.774089][ T8284] dump_stack_lvl+0xf2/0x150 [ 110.774115][ T8284] dump_stack+0x15/0x1a [ 110.774141][ T8284] should_fail_ex+0x24a/0x260 [ 110.774173][ T8284] should_fail+0xb/0x10 [ 110.774204][ T8284] should_fail_usercopy+0x1a/0x20 [ 110.774242][ T8284] _copy_to_user+0x20/0xa0 [ 110.774261][ T8284] simple_read_from_buffer+0xa0/0x110 [ 110.774306][ T8284] proc_fail_nth_read+0xf9/0x140 [ 110.774337][ T8284] vfs_read+0x19b/0x6f0 [ 110.774364][ T8284] ksys_read+0xe8/0x1b0 [ 110.774390][ T8284] __x64_sys_read+0x42/0x50 [ 110.774419][ T8284] x64_sys_call+0x2874/0x2dc0 [ 110.774449][ T8284] do_syscall_64+0xc9/0x1c0 [ 110.774482][ T8284] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.774517][ T8284] [ 110.774521][ T8284] value changed: 0x00000000ffffe6b4 -> 0x00000000fffff277 [ 110.774534][ T8284] [ 110.774537][ T8284] Reported by Kernel Concurrency Sanitizer on: [ 110.774547][ T8284] CPU: 1 UID: 0 PID: 8284 Comm: syz.4.1908 Not tainted 6.14.0-rc4-syzkaller-00199-g76544811c850 #0 [ 110.774576][ T8284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 110.774590][ T8284] ================================================================== [ 110.774664][ T8284] dump_stack_lvl+0xf2/0x150 [ 110.774746][ T8284] dump_stack+0x15/0x1a [ 110.774771][ T8284] should_fail_ex+0x24a/0x260 [ 110.774810][ T8284] should_fail+0xb/0x10 [ 110.774841][ T8284] should_fail_usercopy+0x1a/0x20 [ 110.774959][ T8284] _copy_to_user+0x20/0xa0 [ 110.774981][ T8284] simple_read_from_buffer+0xa0/0x110 [ 110.775093][ T8284] proc_fail_nth_read+0xf9/0x140 [ 110.775131][ T8284] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 110.775227][ T8284] vfs_read+0x19b/0x6f0 [ 110.775256][ T8284] ? __rcu_read_unlock+0x4e/0x70 [ 110.775297][ T8284] ? __fget_files+0x17c/0x1c0 [ 110.775349][ T8284] ksys_read+0xe8/0x1b0 [ 110.775422][ T8284] __x64_sys_read+0x42/0x50 [ 110.775476][ T8284] x64_sys_call+0x2874/0x2dc0 [ 110.775507][ T8284] do_syscall_64+0xc9/0x1c0 [ 110.775543][ T8284] ? clear_bhb_loop+0x55/0xb0 [ 110.775576][ T8284] ? clear_bhb_loop+0x55/0xb0 [ 110.775657][ T8284] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.775689][ T8284] RIP: 0033:0x7f9b2973bb7c [ 110.775707][ T8284] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 110.775729][ T8284] RSP: 002b:00007f9b27da7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 110.775751][ T8284] RAX: ffffffffffffffda RBX: 00007f9b29955fa0 RCX: 00007f9b2973bb7c [ 110.775766][ T8284] RDX: 000000000000000f RSI: 00007f9b27da70a0 RDI: 0000000000000004 [ 110.775815][ T8284] RBP: 00007f9b27da7090 R08: 0000000000000000 R09: 0000000000000000 [ 110.775829][ T8284] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 110.775844][ T8284] R13: 0000000000000000 R14: 00007f9b29955fa0 R15: 00007ffecbb888b8 [ 110.775867][ T8284] [ 110.778087][ T8278] ext4 filesystem being mounted at /459/ supports timestamps until 2038-01-19 (0x7fffffff) [ 110.785948][ T160] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 2048 with error 28 [ 110.799721][ T28] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 2048 with error 28 [ 110.800104][ T160] EXT4-fs (loop1): This should not happen!! Data will be lost [ 110.800104][ T160] [ 110.806542][ T28] EXT4-fs (loop5): This should not happen!! Data will be lost [ 110.806542][ T28] [ 110.870922][ T8286] EXT4-fs: Ignoring removed bh option [ 110.998172][ T8288] pim6reg1: entered promiscuous mode [ 111.022315][ T8291] loop1: detected capacity change from 0 to 2048 [ 111.025907][ T8288] pim6reg1: entered allmulticast mode [ 111.031546][ T8278] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 111.387871][ T8278] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 31 with error 28 [ 111.400250][ T8278] EXT4-fs (loop3): This should not happen!! Data will be lost [ 111.400250][ T8278] [ 111.409951][ T8278] EXT4-fs (loop3): Total free blocks count 0 [ 111.415996][ T8278] EXT4-fs (loop3): Free/Dirty block details [ 111.421917][ T8278] EXT4-fs (loop3): free_blocks=65280 [ 111.427364][ T8278] EXT4-fs (loop3): dirty_blocks=31 [ 111.432562][ T8278] EXT4-fs (loop3): Block reservation details [ 111.438651][ T8278] EXT4-fs (loop3): i_reserved_data_blocks=31 [ 111.454670][ T8291] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0002] [ 111.463449][ T8291] System zones: 0-4 [ 111.468060][ T8291] ext4 filesystem being mounted at /394/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 111.492574][ T1466] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 111.508122][ T1466] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 111.520459][ T1466] EXT4-fs (loop6): This should not happen!! Data will be lost [ 111.520459][ T1466] [ 111.530274][ T1466] EXT4-fs (loop6): Total free blocks count 0 [ 111.536298][ T1466] EXT4-fs (loop6): Free/Dirty block details [ 111.542204][ T1466] EXT4-fs (loop6): free_blocks=2415919104 [ 111.547974][ T1466] EXT4-fs (loop6): dirty_blocks=8224 [ 111.553277][ T1466] EXT4-fs (loop6): Block reservation details [ 111.559362][ T1466] EXT4-fs (loop6): i_reserved_data_blocks=514 [ 111.621042][ T160] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 2048 with error 28 [ 111.633622][ T160] EXT4-fs (loop6): This should not happen!! Data will be lost [ 111.633622][ T160] [ 111.664230][ T8308] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1907: bg 0: block 345: padding at end of block bitmap is not set [ 111.680238][ T8308] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 16 with error 117 [ 111.692712][ T8308] EXT4-fs (loop1): This should not happen!! Data will be lost [ 111.692712][ T8308] [ 111.727590][ T160] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 2048 with error 117 [ 111.740297][ T160] EXT4-fs (loop1): This should not happen!! Data will be lost [ 111.740297][ T160] [ 111.766264][ T160] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 2081 with max blocks 2024 with error 28 [ 111.778997][ T160] EXT4-fs (loop1): This should not happen!! Data will be lost [ 111.778997][ T160] [ 111.788677][ T160] EXT4-fs (loop1): Total free blocks count 0 [ 111.794691][ T160] EXT4-fs (loop1): Free/Dirty block details [ 111.800611][ T160] EXT4-fs (loop1): free_blocks=0 [ 111.805632][ T160] EXT4-fs (loop1): dirty_blocks=2032